promptspeak-mcp-server 0.1.0

package/dist/core/security/secure-logging.d.ts

@@ -0,0 +1,189 @@
+/**
+ * ===============================================================================
+ * SECURE LOGGING UTILITIES
+ * ===============================================================================
+ *
+ * Provides secure logging wrappers that automatically redact sensitive data.
+ * Use these utilities in any code that handles PII, financial data, or
+ * business-sensitive information.
+ *
+ * IMPORTANT: This module MUST be used in:
+ * - Government/SAP/ERP adapters
+ * - Payment processing
+ * - User data handlers
+ * - Authentication flows
+ * - Any external API integration that returns sensitive data
+ *
+ * @example
+ * ```typescript
+ * import { createSecureLogger } from '../core/security/index.js';
+ *
+ * const logger = createSecureLogger('SamAdapter');
+ *
+ * // Safe debug - automatically redacts sensitive fields
+ * logger.safeDebug('Processing entity', {
+ *   customerId: '12345',      // Will be redacted
+ *   email: 'john@example.com', // Will be redacted
+ *   action: 'lookup'           // Not sensitive, passed through
+ * });
+ *
+ * // Force redact everything
+ * logger.safeDebug('Raw API response', responseData, { redactAll: true });
+ * ```
+ *
+ * ===============================================================================
+ */
+import { Logger } from '../logging/index.js';
+/**
+ * Options for secure debug logging.
+ */
+export interface SafeDebugOptions {
+    /** Redact ALL fields, not just detected sensitive ones */
+    redactAll?: boolean;
+    /** Include hash prefixes for correlation across logs */
+    includeHashes?: boolean;
+    /** Additional field names to treat as sensitive */
+    additionalSensitive?: string[];
+    /** Field names to explicitly allow through (whitelist) */
+    allowList?: string[];
+}
+/**
+ * A secure logger wrapper that provides safe logging methods.
+ */
+export declare class SecureLogger {
+    private logger;
+    constructor(module: string);
+    /**
+     * Log debug message (no auto-redaction).
+     * Use safeDebug() if data might contain sensitive fields.
+     */
+    debug(message: string, data?: Record<string, unknown>): void;
+    /**
+     * Log info message (no auto-redaction).
+     * Use safeInfo() if data might contain sensitive fields.
+     */
+    info(message: string, data?: Record<string, unknown>): void;
+    /**
+     * Log warning message (no auto-redaction).
+     * Use safeWarn() if data might contain sensitive fields.
+     */
+    warn(message: string, data?: Record<string, unknown>, error?: Error): void;
+    /**
+     * Log error message (no auto-redaction).
+     * Use safeError() if data might contain sensitive fields.
+     */
+    error(message: string, error?: Error, data?: Record<string, unknown>): void;
+    /**
+     * Safely log debug information with automatic redaction.
+     *
+     * @param message - Log message (will be scanned for sensitive patterns)
+     * @param data - Optional data object (sensitive fields auto-redacted)
+     * @param options - Redaction options
+     *
+     * @example
+     * ```typescript
+     * logger.safeDebug('User lookup', { userId: '123', email: 'test@example.com' });
+     * // Logs: "User lookup" { userId: { type: 'string', length: 3 }, email: '<redacted>' }
+     * ```
+     */
+    safeDebug(message: string, data?: Record<string, unknown>, options?: SafeDebugOptions): void;
+    /**
+     * Safely log info with automatic redaction.
+     */
+    safeInfo(message: string, data?: Record<string, unknown>, options?: SafeDebugOptions): void;
+    /**
+     * Safely log warning with automatic redaction.
+     */
+    safeWarn(message: string, data?: Record<string, unknown>, error?: Error, options?: SafeDebugOptions): void;
+    /**
+     * Safely log error with automatic redaction.
+     */
+    safeError(message: string, error?: Error, data?: Record<string, unknown>, options?: SafeDebugOptions): void;
+    /**
+     * Log a single redacted value for debugging.
+     * Use when you need to log a specific value safely.
+     *
+     * @example
+     * ```typescript
+     * logger.safeValue('customerId', rawCustomerId);
+     * // Logs: { customerId: { type: 'string', length: 10, preview: 'cust***' } }
+     * ```
+     */
+    safeValue(fieldName: string, value: unknown, includeHash?: boolean): void;
+    /**
+     * Create a child secure logger with extended module path.
+     */
+    child(subModule: string): SecureLogger;
+    /**
+     * Access the underlying logger for non-sensitive operations.
+     * CAUTION: Only use for data you've verified is not sensitive.
+     */
+    get unsafe(): Logger;
+    /**
+     * Get the module name for this logger.
+     */
+    private get module();
+}
+/**
+ * Create a secure logger instance.
+ *
+ * @param module - Module name for the logger
+ * @returns SecureLogger instance with safe logging methods
+ *
+ * @example
+ * ```typescript
+ * import { createSecureLogger } from '../core/security/index.js';
+ *
+ * const logger = createSecureLogger('PaymentProcessor');
+ * logger.safeDebug('Processing payment', { amount: 100, cardNumber: '4111...' });
+ * ```
+ */
+export declare function createSecureLogger(module: string): SecureLogger;
+/**
+ * Helper to safely log an entire payload that should be fully redacted.
+ * Use when logging raw external API responses.
+ *
+ * @param logger - Logger instance
+ * @param message - Log message
+ * @param payload - Full payload to redact
+ *
+ * @example
+ * ```typescript
+ * safePayloadDebug(logger, 'SAM API response', apiResponse);
+ * // Logs: "SAM API response" { payload: { type: 'object', length: 1234, count: 15 } }
+ * ```
+ */
+export declare function safePayloadDebug(logger: Logger | SecureLogger, message: string, payload: unknown): void;
+/**
+ * Decorator-style wrapper to make an existing logger safe.
+ * Use when you have an existing Logger but need to log sensitive operations.
+ *
+ * @param logger - Existing Logger instance
+ * @param message - Log message
+ * @param data - Data to log (will be auto-redacted)
+ * @param options - Redaction options
+ *
+ * @example
+ * ```typescript
+ * import { safeDebug } from '../core/security/index.js';
+ * import { createLogger } from '../core/logging/index.js';
+ *
+ * const logger = createLogger('MyModule');
+ *
+ * // In a sensitive code path:
+ * safeDebug(logger, 'Customer lookup result', customerData);
+ * ```
+ */
+export declare function safeDebug(logger: Logger, message: string, data?: Record<string, unknown>, options?: SafeDebugOptions): void;
+/**
+ * Check if logging data is safe (no sensitive fields detected).
+ * Use for validation/testing.
+ *
+ * @param data - Data object to check
+ * @returns Object with safety status and any detected sensitive fields
+ */
+export declare function checkLoggingSafety(data: Record<string, unknown>): {
+    isSafe: boolean;
+    sensitiveFields: string[];
+};
+//# sourceMappingURL=secure-logging.d.ts.map

package/dist/core/security/secure-logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-logging.d.ts","sourceRoot":"","sources":["../../../src/core/security/secure-logging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,MAAM,EAAgB,MAAM,qBAAqB,CAAC;AAS3D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wDAAwD;IACxD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mDAAmD;IACnD,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM;IAU1B;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI5D;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI3D;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI;IAI1E;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAQ3E;;;;;;;;;;;;OAYG;IACH,SAAS,CACP,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,gBAAgB,GACzB,IAAI;IAMP;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,gBAAgB,GACzB,IAAI;IAMP;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,CAAC,EAAE,KAAK,EACb,OAAO,CAAC,EAAE,gBAAgB,GACzB,IAAI;IAMP;;OAEG;IACH,SAAS,CACP,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,KAAK,EACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,gBAAgB,GACzB,IAAI;IAMP;;;;;;;;;OASG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,UAAQ,GAAG,IAAI;IAKvE;;OAEG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY;IAKtC;;;OAGG;IACH,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED;;OAEG;IACH,OAAO,KAAK,MAAM,GAIjB;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAE/D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,GAAG,YAAY,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,GACf,IAAI,CASN;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,gBAAgB,GACzB,IAAI,CAIN;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IACjE,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAuBA"}

package/dist/core/security/secure-logging.js

@@ -0,0 +1,253 @@
+/**
+ * ===============================================================================
+ * SECURE LOGGING UTILITIES
+ * ===============================================================================
+ *
+ * Provides secure logging wrappers that automatically redact sensitive data.
+ * Use these utilities in any code that handles PII, financial data, or
+ * business-sensitive information.
+ *
+ * IMPORTANT: This module MUST be used in:
+ * - Government/SAP/ERP adapters
+ * - Payment processing
+ * - User data handlers
+ * - Authentication flows
+ * - Any external API integration that returns sensitive data
+ *
+ * @example
+ * ```typescript
+ * import { createSecureLogger } from '../core/security/index.js';
+ *
+ * const logger = createSecureLogger('SamAdapter');
+ *
+ * // Safe debug - automatically redacts sensitive fields
+ * logger.safeDebug('Processing entity', {
+ *   customerId: '12345',      // Will be redacted
+ *   email: 'john@example.com', // Will be redacted
+ *   action: 'lookup'           // Not sensitive, passed through
+ * });
+ *
+ * // Force redact everything
+ * logger.safeDebug('Raw API response', responseData, { redactAll: true });
+ * ```
+ *
+ * ===============================================================================
+ */
+import { createLogger } from '../logging/index.js';
+import { redact, redactObject, redactString, isSensitiveField, } from './redaction.js';
+/**
+ * A secure logger wrapper that provides safe logging methods.
+ */
+export class SecureLogger {
+    logger;
+    constructor(module) {
+        this.logger = createLogger(module);
+    }
+    // ─────────────────────────────────────────────────────────────────────────────
+    // STANDARD LOGGING (for messages known to be safe)
+    // Use these when you've verified the data doesn't contain sensitive values.
+    // When in doubt, use the safe* variants instead.
+    // ─────────────────────────────────────────────────────────────────────────────
+    /**
+     * Log debug message (no auto-redaction).
+     * Use safeDebug() if data might contain sensitive fields.
+     */
+    debug(message, data) {
+        this.logger.debug(message, data);
+    }
+    /**
+     * Log info message (no auto-redaction).
+     * Use safeInfo() if data might contain sensitive fields.
+     */
+    info(message, data) {
+        this.logger.info(message, data);
+    }
+    /**
+     * Log warning message (no auto-redaction).
+     * Use safeWarn() if data might contain sensitive fields.
+     */
+    warn(message, data, error) {
+        this.logger.warn(message, data, error);
+    }
+    /**
+     * Log error message (no auto-redaction).
+     * Use safeError() if data might contain sensitive fields.
+     */
+    error(message, error, data) {
+        this.logger.error(message, error, data);
+    }
+    // ─────────────────────────────────────────────────────────────────────────────
+    // SAFE LOGGING (with automatic redaction)
+    // ─────────────────────────────────────────────────────────────────────────────
+    /**
+     * Safely log debug information with automatic redaction.
+     *
+     * @param message - Log message (will be scanned for sensitive patterns)
+     * @param data - Optional data object (sensitive fields auto-redacted)
+     * @param options - Redaction options
+     *
+     * @example
+     * ```typescript
+     * logger.safeDebug('User lookup', { userId: '123', email: 'test@example.com' });
+     * // Logs: "User lookup" { userId: { type: 'string', length: 3 }, email: '<redacted>' }
+     * ```
+     */
+    safeDebug(message, data, options) {
+        const safeMessage = redactString(message);
+        const safeData = data ? redactObject(data, options) : undefined;
+        this.logger.debug(safeMessage, safeData);
+    }
+    /**
+     * Safely log info with automatic redaction.
+     */
+    safeInfo(message, data, options) {
+        const safeMessage = redactString(message);
+        const safeData = data ? redactObject(data, options) : undefined;
+        this.logger.info(safeMessage, safeData);
+    }
+    /**
+     * Safely log warning with automatic redaction.
+     */
+    safeWarn(message, data, error, options) {
+        const safeMessage = redactString(message);
+        const safeData = data ? redactObject(data, options) : undefined;
+        this.logger.warn(safeMessage, safeData, error);
+    }
+    /**
+     * Safely log error with automatic redaction.
+     */
+    safeError(message, error, data, options) {
+        const safeMessage = redactString(message);
+        const safeData = data ? redactObject(data, options) : undefined;
+        this.logger.error(safeMessage, error, safeData);
+    }
+    /**
+     * Log a single redacted value for debugging.
+     * Use when you need to log a specific value safely.
+     *
+     * @example
+     * ```typescript
+     * logger.safeValue('customerId', rawCustomerId);
+     * // Logs: { customerId: { type: 'string', length: 10, preview: 'cust***' } }
+     * ```
+     */
+    safeValue(fieldName, value, includeHash = false) {
+        const redactedValue = redact(value, includeHash);
+        this.logger.debug('Value', { [fieldName]: redactedValue });
+    }
+    /**
+     * Create a child secure logger with extended module path.
+     */
+    child(subModule) {
+        const child = new SecureLogger(`${this.module}:${subModule}`);
+        return child;
+    }
+    /**
+     * Access the underlying logger for non-sensitive operations.
+     * CAUTION: Only use for data you've verified is not sensitive.
+     */
+    get unsafe() {
+        return this.logger;
+    }
+    /**
+     * Get the module name for this logger.
+     */
+    get module() {
+        // Access the module from the wrapped logger
+        // This is a workaround since Logger doesn't expose module publicly
+        return this.logger.module;
+    }
+}
+/**
+ * Create a secure logger instance.
+ *
+ * @param module - Module name for the logger
+ * @returns SecureLogger instance with safe logging methods
+ *
+ * @example
+ * ```typescript
+ * import { createSecureLogger } from '../core/security/index.js';
+ *
+ * const logger = createSecureLogger('PaymentProcessor');
+ * logger.safeDebug('Processing payment', { amount: 100, cardNumber: '4111...' });
+ * ```
+ */
+export function createSecureLogger(module) {
+    return new SecureLogger(module);
+}
+/**
+ * Helper to safely log an entire payload that should be fully redacted.
+ * Use when logging raw external API responses.
+ *
+ * @param logger - Logger instance
+ * @param message - Log message
+ * @param payload - Full payload to redact
+ *
+ * @example
+ * ```typescript
+ * safePayloadDebug(logger, 'SAM API response', apiResponse);
+ * // Logs: "SAM API response" { payload: { type: 'object', length: 1234, count: 15 } }
+ * ```
+ */
+export function safePayloadDebug(logger, message, payload) {
+    const redactedPayload = redact(payload);
+    const safeMessage = redactString(message);
+    if (logger instanceof SecureLogger) {
+        logger.unsafe.debug(safeMessage, { payload: redactedPayload });
+    }
+    else {
+        logger.debug(safeMessage, { payload: redactedPayload });
+    }
+}
+/**
+ * Decorator-style wrapper to make an existing logger safe.
+ * Use when you have an existing Logger but need to log sensitive operations.
+ *
+ * @param logger - Existing Logger instance
+ * @param message - Log message
+ * @param data - Data to log (will be auto-redacted)
+ * @param options - Redaction options
+ *
+ * @example
+ * ```typescript
+ * import { safeDebug } from '../core/security/index.js';
+ * import { createLogger } from '../core/logging/index.js';
+ *
+ * const logger = createLogger('MyModule');
+ *
+ * // In a sensitive code path:
+ * safeDebug(logger, 'Customer lookup result', customerData);
+ * ```
+ */
+export function safeDebug(logger, message, data, options) {
+    const safeMessage = redactString(message);
+    const safeData = data ? redactObject(data, options) : undefined;
+    logger.debug(safeMessage, safeData);
+}
+/**
+ * Check if logging data is safe (no sensitive fields detected).
+ * Use for validation/testing.
+ *
+ * @param data - Data object to check
+ * @returns Object with safety status and any detected sensitive fields
+ */
+export function checkLoggingSafety(data) {
+    const sensitiveFields = [];
+    function checkObject(obj, prefix = '') {
+        for (const [key, value] of Object.entries(obj)) {
+            const fullPath = prefix ? `${prefix}.${key}` : key;
+            if (isSensitiveField(key)) {
+                sensitiveFields.push(fullPath);
+            }
+            if (value !== null && typeof value === 'object' && !Array.isArray(value)) {
+                checkObject(value, fullPath);
+            }
+        }
+    }
+    checkObject(data);
+    return {
+        isSafe: sensitiveFields.length === 0,
+        sensitiveFields,
+    };
+}
+//# sourceMappingURL=secure-logging.js.map

package/dist/core/security/secure-logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-logging.js","sourceRoot":"","sources":["../../../src/core/security/secure-logging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAU,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,gBAAgB,GAEjB,MAAM,gBAAgB,CAAC;AAgBxB;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,CAAS;IAEvB,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,gFAAgF;IAChF,mDAAmD;IACnD,4EAA4E;IAC5E,iDAAiD;IACjD,gFAAgF;IAEhF;;;OAGG;IACH,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,OAAe,EAAE,IAA8B,EAAE,KAAa;QACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAe,EAAE,KAAa,EAAE,IAA8B;QAClE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,gFAAgF;IAChF,0CAA0C;IAC1C,gFAAgF;IAEhF;;;;;;;;;;;;OAYG;IACH,SAAS,CACP,OAAe,EACf,IAA8B,EAC9B,OAA0B;QAE1B,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAAe,EACf,IAA8B,EAC9B,OAA0B;QAE1B,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAAe,EACf,IAA8B,EAC9B,KAAa,EACb,OAA0B;QAE1B,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,SAAS,CACP,OAAe,EACf,KAAa,EACb,IAA8B,EAC9B,OAA0B;QAE1B,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;;OASG;IACH,SAAS,CAAC,SAAiB,EAAE,KAAc,EAAE,WAAW,GAAG,KAAK;QAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAiB;QACrB,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAY,MAAM;QAChB,4CAA4C;QAC5C,mEAAmE;QACnE,OAAQ,IAAI,CAAC,MAAwC,CAAC,MAAM,CAAC;IAC/D,CAAC;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA6B,EAC7B,OAAe,EACf,OAAgB;IAEhB,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAE1C,IAAI,MAAM,YAAY,YAAY,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,SAAS,CACvB,MAAc,EACd,OAAe,EACf,IAA8B,EAC9B,OAA0B;IAE1B,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA6B;IAI9D,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,SAAS,WAAW,CAAC,GAA4B,EAAE,MAAM,GAAG,EAAE;QAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAEnD,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;YAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzE,WAAW,CAAC,KAAgC,EAAE,QAAQ,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAAI,CAAC,CAAC;IAElB,OAAO;QACL,MAAM,EAAE,eAAe,CAAC,MAAM,KAAK,CAAC;QACpC,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/core/types/http-types.d.ts

@@ -0,0 +1,94 @@
+/**
+ * ===============================================================================
+ * SHARED HTTP TYPES
+ * ===============================================================================
+ *
+ * Common HTTP-related type definitions used across the HTTP layer.
+ * Consolidates duplicate definitions from error-handler.ts and routes/*.ts
+ *
+ * ===============================================================================
+ */
+/**
+ * Standard error response format for HTTP endpoints.
+ */
+export interface ErrorResponse {
+    /** Always false for errors */
+    success: false;
+    /** Machine-readable error code */
+    error: string;
+    /** Human-readable error message */
+    message: string;
+    /** Additional error details (optional) */
+    details?: Record<string, unknown>;
+    /** HTTP status code */
+    statusCode?: number;
+    /** Request correlation ID for tracing */
+    correlationId?: string;
+    /** ISO timestamp */
+    timestamp?: string;
+}
+/**
+ * Standard success response format for HTTP endpoints.
+ */
+export interface SuccessResponse<T = unknown> {
+    /** Always true for success */
+    success: true;
+    /** Response data */
+    data: T;
+    /** ISO timestamp */
+    timestamp?: string;
+    /** Request correlation ID for tracing */
+    correlationId?: string;
+}
+/**
+ * Union type for API responses.
+ */
+export type ApiResponse<T = unknown> = SuccessResponse<T> | ErrorResponse;
+/**
+ * Pagination parameters for list endpoints.
+ */
+export interface PaginationParams {
+    /** Page number (1-indexed) */
+    page?: number;
+    /** Items per page */
+    limit?: number;
+    /** Sort field */
+    sortBy?: string;
+    /** Sort direction */
+    sortOrder?: 'asc' | 'desc';
+}
+/**
+ * Paginated response wrapper.
+ */
+export interface PaginatedResponse<T> {
+    /** Response items */
+    items: T[];
+    /** Pagination metadata */
+    pagination: {
+        /** Current page number */
+        page: number;
+        /** Items per page */
+        limit: number;
+        /** Total number of items */
+        total: number;
+        /** Total number of pages */
+        totalPages: number;
+        /** Whether there's a next page */
+        hasNext: boolean;
+        /** Whether there's a previous page */
+        hasPrev: boolean;
+    };
+}
+/**
+ * Create an error response object.
+ */
+export declare function createErrorResponse(error: string, message: string, options?: {
+    details?: Record<string, unknown>;
+    statusCode?: number;
+    correlationId?: string;
+}): ErrorResponse;
+/**
+ * Create a success response object.
+ */
+export declare function createSuccessResponse<T>(data: T, correlationId?: string): SuccessResponse<T>;
+//# sourceMappingURL=http-types.d.ts.map

package/dist/core/types/http-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-types.d.ts","sourceRoot":"","sources":["../../../src/core/types/http-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,uBAAuB;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,8BAA8B;IAC9B,OAAO,EAAE,IAAI,CAAC;IACd,oBAAoB;IACpB,IAAI,EAAE,CAAC,CAAC;IACR,oBAAoB;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,GAAG,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,qBAAqB;IACrB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,0BAA0B;IAC1B,UAAU,EAAE;QACV,0BAA0B;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,qBAAqB;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,4BAA4B;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,4BAA4B;QAC5B,UAAU,EAAE,MAAM,CAAC;QACnB,kCAAkC;QAClC,OAAO,EAAE,OAAO,CAAC;QACjB,sCAAsC;QACtC,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,aAAa,CAUf;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EACrC,IAAI,EAAE,CAAC,EACP,aAAa,CAAC,EAAE,MAAM,GACrB,eAAe,CAAC,CAAC,CAAC,CAOpB"}

package/dist/core/types/http-types.js

@@ -0,0 +1,36 @@
+/**
+ * ===============================================================================
+ * SHARED HTTP TYPES
+ * ===============================================================================
+ *
+ * Common HTTP-related type definitions used across the HTTP layer.
+ * Consolidates duplicate definitions from error-handler.ts and routes/*.ts
+ *
+ * ===============================================================================
+ */
+/**
+ * Create an error response object.
+ */
+export function createErrorResponse(error, message, options) {
+    return {
+        success: false,
+        error,
+        message,
+        details: options?.details,
+        statusCode: options?.statusCode,
+        correlationId: options?.correlationId,
+        timestamp: new Date().toISOString(),
+    };
+}
+/**
+ * Create a success response object.
+ */
+export function createSuccessResponse(data, correlationId) {
+    return {
+        success: true,
+        data,
+        timestamp: new Date().toISOString(),
+        correlationId,
+    };
+}
+//# sourceMappingURL=http-types.js.map

package/dist/core/types/http-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-types.js","sourceRoot":"","sources":["../../../src/core/types/http-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA8EH;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,OAAe,EACf,OAIC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK;QACL,OAAO;QACP,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,UAAU,EAAE,OAAO,EAAE,UAAU;QAC/B,aAAa,EAAE,OAAO,EAAE,aAAa;QACrC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAO,EACP,aAAsB;IAEtB,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/core/types/id-generators.d.ts

@@ -0,0 +1,69 @@
+/**
+ * ===============================================================================
+ * CENTRALIZED ID GENERATORS
+ * ===============================================================================
+ *
+ * Unified ID generation utilities to reduce duplication across modules.
+ * All IDs use a consistent format: prefix_timestamp_random
+ *
+ * Usage:
+ *   import { generateId, createIdGenerator } from '../core/types/id-generators.js';
+ *
+ *   const id = generateId('swarm');  // 'swarm_1234567890_abc123'
+ *   const generateAgentId = createIdGenerator('agent');
+ *
+ * ===============================================================================
+ */
+/**
+ * Generate a unique ID with the given prefix.
+ *
+ * Format: {prefix}_{timestamp}_{random}
+ *
+ * @param prefix - ID prefix (e.g., 'swarm', 'agent', 'event')
+ * @param randomLength - Length of random suffix (default: 6)
+ * @returns Unique identifier string
+ */
+export declare function generateId(prefix: string, randomLength?: number): string;
+/**
+ * Create a reusable ID generator function for a specific prefix.
+ *
+ * @param prefix - ID prefix
+ * @param randomLength - Length of random suffix (default: 6)
+ * @returns ID generator function
+ *
+ * @example
+ * ```typescript
+ * const generateSwarmId = createIdGenerator('swarm');
+ * const id1 = generateSwarmId();  // 'swarm_1234567890_abc123'
+ * const id2 = generateSwarmId();  // 'swarm_1234567891_def456'
+ * ```
+ */
+export declare function createIdGenerator(prefix: string, randomLength?: number): () => string;
+/** Generate a swarm ID */
+export declare const generateSwarmId: () => string;
+/** Generate an agent ID */
+export declare const generateAgentId: () => string;
+/** Generate an event ID */
+export declare const generateEventId: () => string;
+/** Generate an observation ID */
+export declare const generateObservationId: () => string;
+/** Generate an alert ID */
+export declare const generateAlertId: () => string;
+/** Generate a boot camp ID */
+export declare const generateBootCampId: () => string;
+/** Generate a recruit ID */
+export declare const generateRecruitId: () => string;
+/** Generate a mission ID */
+export declare const generateMissionId: () => string;
+/** Generate an intent ID */
+export declare const generateIntentId: () => string;
+/** Generate a correlation ID for request tracing */
+export declare const generateCorrelationId: () => string;
+/** Generate a session ID */
+export declare const generateSessionId: () => string;
+/**
+ * Generate a UUID v4-like identifier (not cryptographically secure).
+ * Use for cases where UUID format is expected but crypto strength isn't required.
+ */
+export declare function generateUuidLike(): string;
+//# sourceMappingURL=id-generators.d.ts.map

package/dist/core/types/id-generators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-generators.d.ts","sourceRoot":"","sources":["../../../src/core/types/id-generators.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAcH;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,GAAE,MAAU,GAAG,MAAM,CAI3E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,YAAY,GAAE,MAAU,GACvB,MAAM,MAAM,CAEd;AAOD,0BAA0B;AAC1B,eAAO,MAAM,eAAe,QAVnB,MAUgD,CAAC;AAE1D,2BAA2B;AAC3B,eAAO,MAAM,eAAe,QAbnB,MAagD,CAAC;AAE1D,2BAA2B;AAC3B,eAAO,MAAM,eAAe,QAhBnB,MAgB8C,CAAC;AAExD,iCAAiC;AACjC,eAAO,MAAM,qBAAqB,QAnBzB,MAmBoD,CAAC;AAE9D,2BAA2B;AAC3B,eAAO,MAAM,eAAe,QAtBnB,MAsBgD,CAAC;AAE1D,8BAA8B;AAC9B,eAAO,MAAM,kBAAkB,QAzBtB,MAyBgD,CAAC;AAE1D,4BAA4B;AAC5B,eAAO,MAAM,iBAAiB,QA5BrB,MA4BoD,CAAC;AAE9D,4BAA4B;AAC5B,eAAO,MAAM,iBAAiB,QA/BrB,MA+BoD,CAAC;AAE9D,4BAA4B;AAC5B,eAAO,MAAM,gBAAgB,QAlCpB,MAkCkD,CAAC;AAE5D,oDAAoD;AACpD,eAAO,MAAM,qBAAqB,QArCzB,MAqCwD,CAAC;AAElE,4BAA4B;AAC5B,eAAO,MAAM,iBAAiB,QAxCrB,MAwCoD,CAAC;AAM9D;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAKzC"}