synapsexcoder 6.0.0

package/dist/config/enterprise-config.d.ts

@@ -0,0 +1,173 @@
+/**
+ * Enterprise Configuration Schema
+ *
+ * Defines enterprise-grade configuration types for SynapseXcoder deployments.
+ * Supports SSO/OIDC authentication, audit retention policies, compliance modes,
+ * RBAC policy overrides, session policies, data residency controls,
+ * and integration with the existing team RBAC/audit/session modules.
+ *
+ * @module enterprise-config
+ */
+/** Supported compliance frameworks */
+export type ComplianceFramework = "SOC2" | "HIPAA" | "GDPR" | "PCI-DSS" | "FedRAMP" | "custom";
+/** Regulatory data classification levels */
+export type DataClassification = "public" | "internal" | "confidential" | "restricted" | "critical";
+/** SSO/OIDC provider configuration */
+export interface SsoConfig {
+    /** Provider name (e.g., "okta", "azure-ad", "google-workspace", "custom") */
+    provider: string;
+    /** OIDC issuer URL */
+    issuerUrl: string;
+    /** OAuth2 client ID */
+    clientId: string;
+    /** Required for custom providers — JWKS endpoint for token validation */
+    jwksUrl?: string;
+    /** Required for custom providers — allowed audience */
+    audience?: string;
+    /** Group-to-role mapping rules */
+    roleMapping?: Array<{
+        /** SSO group claim value */
+        group: string;
+        /** Target SynapseXcoder role */
+        role: string;
+    }>;
+}
+/** Audit log retention policy */
+export interface AuditRetentionPolicy {
+    /** How long to retain audit logs (ISO 8601 duration, e.g. "P90D" = 90 days) */
+    retentionDuration: string;
+    /** Whether to archive logs before deletion */
+    archiveBeforeDelete: boolean;
+    /** Archive destination path or S3 URI */
+    archiveDestination?: string;
+    /** Encryption key for archived logs (if different from primary) */
+    archiveEncryptionKey?: string;
+    /** Compliance frameworks that require this retention policy */
+    requiredByFrameworks: ComplianceFramework[];
+}
+/** Enterprise session policy — extends team-session-manager config */
+export interface SessionPolicy {
+    /** Maximum concurrent sessions per user (0 = unlimited) */
+    maxConcurrentSessions: number;
+    /** Idle session timeout in minutes */
+    idleTimeoutMinutes: number;
+    /** Absolute session lifetime in hours */
+    maxSessionLifetimeHours: number;
+    /** Require MFA for all sessions */
+    requireMfa: boolean;
+    /** IP allowlist for session creation (CIDR notation) */
+    allowedIpRanges?: string[];
+    /** Enforce session binding to specific hosts */
+    enforceHostBinding: boolean;
+    /** Require session re-authentication on privilege escalation */
+    requireReAuthOnEscalation: boolean;
+}
+/** Data residency controls */
+export interface DataResidencyConfig {
+    /** Allowed regions for data storage (ISO 3166-1 alpha-2 codes) */
+    allowedRegions: string[];
+    /** Whether to encrypt data at rest in all regions */
+    encryptAtRest: boolean;
+    /** Whether data can be processed outside allowed regions */
+    allowTransientProcessingOutsideRegion: boolean;
+    /** Classification levels affected by this policy */
+    affectedClassifications: DataClassification[];
+}
+/**
+ * Complete enterprise configuration for a SynapseXcoder deployment.
+ * All fields are optional — omitted fields fall back to sensible defaults.
+ */
+export interface EnterpriseConfig {
+    /** Organization/tenant name */
+    organizationName?: string;
+    /** Deployment environment */
+    environment?: "development" | "staging" | "production" | "self-hosted";
+    /** Authentication */
+    sso?: SsoConfig;
+    /** Whether MFA is enforced across the deployment */
+    enforceMfa?: boolean;
+    /** Compliance frameworks this deployment must adhere to */
+    complianceFrameworks?: ComplianceFramework[];
+    /** Custom compliance rules (free-form JSON/YAML) */
+    customComplianceRules?: Record<string, unknown>;
+    /** Audit log retention */
+    auditRetention?: AuditRetentionPolicy;
+    /** Session policies */
+    sessionPolicy?: SessionPolicy;
+    /** Data residency */
+    dataResidency?: DataResidencyConfig;
+    /** RBAC policy overrides (extending team-rbac.ts) */
+    rbacOverrides?: {
+        /** Custom role definitions (merged with built-in roles) */
+        customRoles?: Array<{
+            name: string;
+            permissions: string[];
+            canManageRoles: boolean;
+            priority: number;
+        }>;
+        /** Deny-specific permissions even if granted by role */
+        explicitDenyPermissions?: string[];
+    };
+    /** Feature flags for enterprise features */
+    featureFlags?: {
+        /** Enable audit hash chain integrity verification */
+        auditHashChainVerification?: boolean;
+        /** Enable session replay audit */
+        sessionReplayAudit?: boolean;
+        /** Enable real-time compliance monitoring */
+        realtimeComplianceMonitoring?: boolean;
+        /** Enable data classification labels on all vault entries */
+        dataClassificationLabels?: boolean;
+        /** Enable IP allowlisting for API access */
+        ipAllowlisting?: boolean;
+        /** Enable role-based workspace isolation */
+        workspaceIsolation?: boolean;
+    };
+    /** Notification channels for security/compliance alerts */
+    alerting?: {
+        /** Email recipients for security alerts */
+        emailRecipients?: string[];
+        /** Webhook URL for SIEM integration */
+        siemWebhookUrl?: string;
+        /** Minimum severity to trigger alert */
+        minimumSeverity?: "low" | "medium" | "high" | "critical";
+    };
+}
+/**
+ * Sensible defaults for enterprise configuration.
+ * Used when fields are omitted in user-provided config.
+ */
+export declare const DEFAULT_ENTERPRISE_CONFIG: EnterpriseConfig;
+/**
+ * Manages enterprise configuration lifecycle: load, merge, validate, and persist.
+ * Integrates with team-rbac.ts, team-audit.ts, and team-session-manager.ts.
+ */
+export declare class EnterpriseConfigManager {
+    private config;
+    private configPath;
+    constructor(config?: Partial<EnterpriseConfig>, configPath?: string);
+    /**
+     * Merge user-provided config with defaults (shallow merge at top level).
+     */
+    private mergeWithDefaults;
+    /** Get the full merged configuration */
+    getConfig(): EnterpriseConfig;
+    /** Get a specific configuration section */
+    getSection<K extends keyof EnterpriseConfig>(key: K): EnterpriseConfig[K];
+    /** Update a specific configuration section */
+    updateSection<K extends keyof EnterpriseConfig>(key: K, value: EnterpriseConfig[K]): void;
+    /** Replace entire configuration with new values merged with defaults */
+    setConfig(partial: Partial<EnterpriseConfig>): void;
+    /** Resolve config path */
+    getConfigPath(): string;
+    /** Serialize config to JSON */
+    toJson(): string;
+    /** Serialize config to YAML-like export */
+    toYaml(): string;
+    /**
+     * Validate enterprise config and return list of issues.
+     * Returns empty array if valid.
+     */
+    validate(): string[];
+}
+//# sourceMappingURL=enterprise-config.d.ts.map

package/dist/config/enterprise-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterprise-config.d.ts","sourceRoot":"","sources":["../../src/config/enterprise-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,sCAAsC;AACtC,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/F,4CAA4C;AAC5C,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,GAAG,UAAU,CAAC;AAMpG,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,sBAAsB;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,WAAW,CAAC,EAAE,KAAK,CAAC;QAClB,4BAA4B;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,gCAAgC;QAChC,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACJ;AAMD,iCAAiC;AACjC,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8CAA8C;IAC9C,mBAAmB,EAAE,OAAO,CAAC;IAC7B,yCAAyC;IACzC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,+DAA+D;IAC/D,oBAAoB,EAAE,mBAAmB,EAAE,CAAC;CAC7C;AAMD,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sCAAsC;IACtC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yCAAyC;IACzC,uBAAuB,EAAE,MAAM,CAAC;IAChC,mCAAmC;IACnC,UAAU,EAAE,OAAO,CAAC;IACpB,wDAAwD;IACxD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gDAAgD;IAChD,kBAAkB,EAAE,OAAO,CAAC;IAC5B,gEAAgE;IAChE,yBAAyB,EAAE,OAAO,CAAC;CACpC;AAMD,8BAA8B;AAC9B,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,qDAAqD;IACrD,aAAa,EAAE,OAAO,CAAC;IACvB,4DAA4D;IAC5D,qCAAqC,EAAE,OAAO,CAAC;IAC/C,oDAAoD;IACpD,uBAAuB,EAAE,kBAAkB,EAAE,CAAC;CAC/C;AAMD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+BAA+B;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6BAA6B;IAC7B,WAAW,CAAC,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,GAAG,aAAa,CAAC;IAEvE,qBAAqB;IACrB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,2DAA2D;IAC3D,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC7C,oDAAoD;IACpD,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEhD,0BAA0B;IAC1B,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAEtC,uBAAuB;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,qBAAqB;IACrB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAEpC,qDAAqD;IACrD,aAAa,CAAC,EAAE;QACd,2DAA2D;QAC3D,WAAW,CAAC,EAAE,KAAK,CAAC;YAClB,IAAI,EAAE,MAAM,CAAC;YACb,WAAW,EAAE,MAAM,EAAE,CAAC;YACtB,cAAc,EAAE,OAAO,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC,CAAC;QACH,wDAAwD;QACxD,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;KACpC,CAAC;IAEF,4CAA4C;IAC5C,YAAY,CAAC,EAAE;QACb,qDAAqD;QACrD,0BAA0B,CAAC,EAAE,OAAO,CAAC;QACrC,kCAAkC;QAClC,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,6CAA6C;QAC7C,4BAA4B,CAAC,EAAE,OAAO,CAAC;QACvC,6DAA6D;QAC7D,wBAAwB,CAAC,EAAE,OAAO,CAAC;QACnC,4CAA4C;QAC5C,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,4CAA4C;QAC5C,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,CAAC;IAEF,2DAA2D;IAC3D,QAAQ,CAAC,EAAE;QACT,2CAA2C;QAC3C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,uCAAuC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,wCAAwC;QACxC,eAAe,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;KAC1D,CAAC;CACH;AAMD;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,gBA8BvC,CAAC;AAMF;;;GAGG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,UAAU,CAAS;gBAEf,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM;IAKnE;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAwBzB,wCAAwC;IACxC,SAAS,IAAI,gBAAgB;IAI7B,2CAA2C;IAC3C,UAAU,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAAE,GAAG,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC;IAIzE,8CAA8C;IAC9C,aAAa,CAAC,CAAC,SAAS,MAAM,gBAAgB,EAC5C,GAAG,EAAE,CAAC,EACN,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,GACzB,IAAI;IAIP,wEAAwE;IACxE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI;IAInD,0BAA0B;IAC1B,aAAa,IAAI,MAAM;IAIvB,+BAA+B;IAC/B,MAAM,IAAI,MAAM;IAIhB,2CAA2C;IAC3C,MAAM,IAAI,MAAM;IA+ChB;;;OAGG;IACH,QAAQ,IAAI,MAAM,EAAE;CAyCrB"}

package/dist/config/enterprise-config.js

@@ -0,0 +1,190 @@
+/**
+ * Enterprise Configuration Schema
+ *
+ * Defines enterprise-grade configuration types for SynapseXcoder deployments.
+ * Supports SSO/OIDC authentication, audit retention policies, compliance modes,
+ * RBAC policy overrides, session policies, data residency controls,
+ * and integration with the existing team RBAC/audit/session modules.
+ *
+ * @module enterprise-config
+ */
+// ========================================================================
+// Defaults & Validation
+// ========================================================================
+/**
+ * Sensible defaults for enterprise configuration.
+ * Used when fields are omitted in user-provided config.
+ */
+export const DEFAULT_ENTERPRISE_CONFIG = {
+    organizationName: "Default Organization",
+    environment: "development",
+    enforceMfa: false,
+    complianceFrameworks: [],
+    sessionPolicy: {
+        maxConcurrentSessions: 0,
+        idleTimeoutMinutes: 60,
+        maxSessionLifetimeHours: 24,
+        requireMfa: false,
+        enforceHostBinding: false,
+        requireReAuthOnEscalation: true,
+    },
+    dataResidency: {
+        allowedRegions: ["US"],
+        encryptAtRest: true,
+        allowTransientProcessingOutsideRegion: true,
+        affectedClassifications: ["confidential", "restricted", "critical"],
+    },
+    featureFlags: {
+        auditHashChainVerification: false,
+        sessionReplayAudit: false,
+        realtimeComplianceMonitoring: false,
+        dataClassificationLabels: false,
+        ipAllowlisting: false,
+        workspaceIsolation: false,
+    },
+    alerting: {
+        minimumSeverity: "high",
+    },
+};
+// ========================================================================
+// EnterpriseConfigManager
+// ========================================================================
+/**
+ * Manages enterprise configuration lifecycle: load, merge, validate, and persist.
+ * Integrates with team-rbac.ts, team-audit.ts, and team-session-manager.ts.
+ */
+export class EnterpriseConfigManager {
+    config;
+    configPath;
+    constructor(config, configPath) {
+        this.config = this.mergeWithDefaults(config ?? {});
+        this.configPath = configPath ?? ".synapsexcoder/enterprise.json";
+    }
+    /**
+     * Merge user-provided config with defaults (shallow merge at top level).
+     */
+    mergeWithDefaults(partial) {
+        return {
+            ...DEFAULT_ENTERPRISE_CONFIG,
+            ...partial,
+            // Deep merge for nested objects
+            sessionPolicy: {
+                ...DEFAULT_ENTERPRISE_CONFIG.sessionPolicy,
+                ...(partial.sessionPolicy ?? {}),
+            },
+            dataResidency: {
+                ...DEFAULT_ENTERPRISE_CONFIG.dataResidency,
+                ...(partial.dataResidency ?? {}),
+            },
+            featureFlags: {
+                ...DEFAULT_ENTERPRISE_CONFIG.featureFlags,
+                ...(partial.featureFlags ?? {}),
+            },
+            alerting: {
+                ...DEFAULT_ENTERPRISE_CONFIG.alerting,
+                ...(partial.alerting ?? {}),
+            },
+        };
+    }
+    /** Get the full merged configuration */
+    getConfig() {
+        return { ...this.config };
+    }
+    /** Get a specific configuration section */
+    getSection(key) {
+        return this.config[key];
+    }
+    /** Update a specific configuration section */
+    updateSection(key, value) {
+        this.config[key] = value;
+    }
+    /** Replace entire configuration with new values merged with defaults */
+    setConfig(partial) {
+        this.config = this.mergeWithDefaults(partial);
+    }
+    /** Resolve config path */
+    getConfigPath() {
+        return this.configPath;
+    }
+    /** Serialize config to JSON */
+    toJson() {
+        return JSON.stringify(this.config, null, 2);
+    }
+    /** Serialize config to YAML-like export */
+    toYaml() {
+        const lines = ["# SynapseXcoder Enterprise Configuration", ""];
+        const addSection = (title, obj) => {
+            lines.push(`${title}:`);
+            for (const [key, value] of Object.entries(obj)) {
+                const formatted = typeof value === "string" ? `"${value}"` : String(value);
+                lines.push(`  ${key}: ${formatted}`);
+            }
+            lines.push("");
+        };
+        if (this.config.organizationName) {
+            lines.push(`organization: "${this.config.organizationName}"`);
+            lines.push(`environment: "${this.config.environment}"`);
+            lines.push(`enforce_mfa: ${this.config.enforceMfa}`);
+            lines.push("");
+        }
+        if (this.config.complianceFrameworks?.length) {
+            lines.push("compliance_frameworks:");
+            for (const fw of this.config.complianceFrameworks) {
+                lines.push(`  - ${fw}`);
+            }
+            lines.push("");
+        }
+        if (this.config.sso) {
+            addSection("sso", this.config.sso);
+        }
+        if (this.config.sessionPolicy) {
+            addSection("session_policy", this.config.sessionPolicy);
+        }
+        if (this.config.dataResidency) {
+            addSection("data_residency", this.config.dataResidency);
+        }
+        return lines.join("\n");
+    }
+    /**
+     * Validate enterprise config and return list of issues.
+     * Returns empty array if valid.
+     */
+    validate() {
+        const issues = [];
+        // Validate session policy
+        if (this.config.sessionPolicy) {
+            const sp = this.config.sessionPolicy;
+            if (sp.maxConcurrentSessions < 0) {
+                issues.push("sessionPolicy.maxConcurrentSessions must be >= 0");
+            }
+            if (sp.idleTimeoutMinutes < 1) {
+                issues.push("sessionPolicy.idleTimeoutMinutes must be >= 1");
+            }
+            if (sp.maxSessionLifetimeHours < 1) {
+                issues.push("sessionPolicy.maxSessionLifetimeHours must be >= 1");
+            }
+        }
+        // Validate data residency
+        if (this.config.dataResidency?.allowedRegions.length === 0) {
+            issues.push("dataResidency.allowedRegions must have at least one region");
+        }
+        // Validate compliance frameworks
+        const validFrameworks = [
+            "SOC2",
+            "HIPAA",
+            "GDPR",
+            "PCI-DSS",
+            "FedRAMP",
+            "custom",
+        ];
+        if (this.config.complianceFrameworks) {
+            for (const fw of this.config.complianceFrameworks) {
+                if (!validFrameworks.includes(fw)) {
+                    issues.push(`Unknown compliance framework: "${fw}"`);
+                }
+            }
+        }
+        return issues;
+    }
+}
+//# sourceMappingURL=enterprise-config.js.map

package/dist/config/enterprise-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterprise-config.js","sourceRoot":"","sources":["../../src/config/enterprise-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAsKH,2EAA2E;AAC3E,wBAAwB;AACxB,2EAA2E;AAE3E;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IACzD,gBAAgB,EAAE,sBAAsB;IACxC,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,KAAK;IACjB,oBAAoB,EAAE,EAAE;IACxB,aAAa,EAAE;QACb,qBAAqB,EAAE,CAAC;QACxB,kBAAkB,EAAE,EAAE;QACtB,uBAAuB,EAAE,EAAE;QAC3B,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,KAAK;QACzB,yBAAyB,EAAE,IAAI;KAChC;IACD,aAAa,EAAE;QACb,cAAc,EAAE,CAAC,IAAI,CAAC;QACtB,aAAa,EAAE,IAAI;QACnB,qCAAqC,EAAE,IAAI;QAC3C,uBAAuB,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,UAAU,CAAC;KACpE;IACD,YAAY,EAAE;QACZ,0BAA0B,EAAE,KAAK;QACjC,kBAAkB,EAAE,KAAK;QACzB,4BAA4B,EAAE,KAAK;QACnC,wBAAwB,EAAE,KAAK;QAC/B,cAAc,EAAE,KAAK;QACrB,kBAAkB,EAAE,KAAK;KAC1B;IACD,QAAQ,EAAE;QACR,eAAe,EAAE,MAAM;KACxB;CACF,CAAC;AAEF,2EAA2E;AAC3E,0BAA0B;AAC1B,2EAA2E;AAE3E;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAC1B,MAAM,CAAmB;IACzB,UAAU,CAAS;IAE3B,YAAY,MAAkC,EAAE,UAAmB;QACjE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,gCAAgC,CAAC;IACnE,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,OAAkC;QAC1D,OAAO;YACL,GAAG,yBAAyB;YAC5B,GAAG,OAAO;YACV,gCAAgC;YAChC,aAAa,EAAE;gBACb,GAAG,yBAAyB,CAAC,aAAc;gBAC3C,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;aACjC;YACD,aAAa,EAAE;gBACb,GAAG,yBAAyB,CAAC,aAAc;gBAC3C,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;aACjC;YACD,YAAY,EAAE;gBACZ,GAAG,yBAAyB,CAAC,YAAa;gBAC1C,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;aAChC;YACD,QAAQ,EAAE;gBACR,GAAG,yBAAyB,CAAC,QAAS;gBACtC,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;aAC5B;SACF,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,2CAA2C;IAC3C,UAAU,CAAmC,GAAM;QACjD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,8CAA8C;IAC9C,aAAa,CACX,GAAM,EACN,KAA0B;QAE1B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,wEAAwE;IACxE,SAAS,CAAC,OAAkC;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,0BAA0B;IAC1B,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,+BAA+B;IAC/B,MAAM;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,2CAA2C;IAC3C,MAAM;QACJ,MAAM,KAAK,GAAa,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,GAA4B,EAAE,EAAE;YACjE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3E,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,SAAS,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;YAC9D,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACrC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAClD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACpB,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAyC,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,UAAU,CACR,gBAAgB,EAChB,IAAI,CAAC,MAAM,CAAC,aAAmD,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,UAAU,CACR,gBAAgB,EAChB,IAAI,CAAC,MAAM,CAAC,aAAmD,CAChE,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YACrC,IAAI,EAAE,CAAC,qBAAqB,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,EAAE,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,EAAE,CAAC,uBAAuB,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC5E,CAAC;QAED,iCAAiC;QACjC,MAAM,eAAe,GAA0B;YAC7C,MAAM;YACN,OAAO;YACP,MAAM;YACN,SAAS;YACT,SAAS;YACT,QAAQ;SACT,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACrC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAClD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;oBAClC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/config/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Config Module — Enterprise Configuration & Compliance
+ *
+ * Provides enterprise-grade configuration schema, management,
+ * and compliance validation for SOC2, HIPAA, GDPR, PCI-DSS, FedRAMP.
+ *
+ * @module config
+ */
+export { EnterpriseConfigManager, DEFAULT_ENTERPRISE_CONFIG, } from "./enterprise-config.js";
+export type { EnterpriseConfig, SsoConfig, AuditRetentionPolicy, SessionPolicy, DataResidencyConfig, DataClassification, ComplianceFramework, } from "./enterprise-config.js";
+export { ComplianceChecker, } from "./compliance-checker.js";
+export type { ComplianceCheck, ComplianceReport, ComplianceStatus, } from "./compliance-checker.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,gBAAgB,EAChB,SAAS,EACT,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC"}

package/dist/config/index.js

@@ -0,0 +1,11 @@
+/**
+ * Config Module — Enterprise Configuration & Compliance
+ *
+ * Provides enterprise-grade configuration schema, management,
+ * and compliance validation for SOC2, HIPAA, GDPR, PCI-DSS, FedRAMP.
+ *
+ * @module config
+ */
+export { EnterpriseConfigManager, DEFAULT_ENTERPRISE_CONFIG, } from "./enterprise-config.js";
+export { ComplianceChecker, } from "./compliance-checker.js";
+//# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAYhC,OAAO,EACL,iBAAiB,GAClB,MAAM,yBAAyB,CAAC"}

package/dist/context/context-system.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Context System - Pattern Learning and Knowledge Management
+ *
+ * Inspired by OpenAgentsControl's context system for learning user patterns
+ * and providing context-aware code generation.
+ */
+export interface ContextPattern {
+    id: string;
+    type: "code" | "api" | "ui" | "security" | "architecture" | "workflow";
+    name: string;
+    description: string;
+    examples: Array<{
+        input: string;
+        output: string;
+        explanation: string;
+    }>;
+    tags: string[];
+    createdAt: number;
+    updatedAt: number;
+    version: number;
+}
+export interface ProjectContext {
+    id: string;
+    name: string;
+    techStack: string[];
+    patterns: ContextPattern[];
+    standards: {
+        naming: Record<string, string>;
+        security: string[];
+        performance: string[];
+        codeQuality: string[];
+    };
+    integrations: Array<{
+        name: string;
+        type: string;
+        config: Record<string, unknown>;
+    }>;
+    createdAt: number;
+    updatedAt: number;
+    version: number;
+}
+export interface ContextQuery {
+    type?: ContextPattern["type"];
+    tags?: string[];
+    keywords?: string[];
+    limit?: number;
+}
+export declare class ContextSystem {
+    private contextDir;
+    private projectRoot;
+    private projectContext;
+    private globalPatterns;
+    constructor(projectRoot?: string);
+    private loadProjectContext;
+    private saveProjectContext;
+    private loadGlobalPatterns;
+    addPattern(pattern: Omit<ContextPattern, "id" | "createdAt" | "updatedAt" | "version">): string;
+    updatePattern(id: string, updates: Partial<ContextPattern>): boolean;
+    removePattern(id: string): boolean;
+    findRelevantPatterns(query: ContextQuery): ContextPattern[];
+    updateProjectInfo(updates: Partial<Pick<ProjectContext, "name" | "techStack" | "standards" | "integrations">>): void;
+    getProjectContext(): ProjectContext;
+    generateContextPrompt(taskDescription: string, codeContext?: string[]): string;
+    private extractKeywords;
+    /**
+     * Collect shallow directory entries (files and dirs) for a given path.
+     * Returns empty array on any error (permission denied, missing dir, etc.).
+     */
+    private safeReadDir;
+    /**
+     * Safely read a text file. Returns null on any error.
+     */
+    private safeReadFile;
+    /**
+     * Walk source directories up to `maxDepth` and collect file paths.
+     * Skips common non-source directories for speed.
+     */
+    private collectSourceFiles;
+    /**
+     * Auto-detect the project's technology stack by inspecting config files
+     * and, as a fallback, file-extension frequency analysis.
+     */
+    private detectTechStack;
+    /**
+     * Auto-detect API patterns by sampling source files for common
+     * route/handler/schema definitions.
+     */
+    private detectApiPatterns;
+    /**
+     * Auto-detect UI/component patterns by scanning source files for
+     * framework idioms, styling approaches, and state management.
+     */
+    private detectUiPatterns;
+    buildContextInteractively(): Promise<void>;
+}
+export declare function createContextSystem(projectRoot?: string): ContextSystem;
+//# sourceMappingURL=context-system.d.ts.map

package/dist/context/context-system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-system.d.ts","sourceRoot":"","sources":["../../src/context/context-system.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,GAAG,UAAU,GAAG,cAAc,GAAG,UAAU,CAAC;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,KAAK,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,SAAS,EAAE;QACT,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,WAAW,EAAE,MAAM,EAAE,CAAC;KACvB,CAAC;IACF,YAAY,EAAE,KAAK,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACjC,CAAC,CAAC;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,cAAc,CAAwB;gBAElC,WAAW,CAAC,EAAE,MAAM;IAmBhC,OAAO,CAAC,kBAAkB;IA+B1B,OAAO,CAAC,kBAAkB;IAK1B,OAAO,CAAC,kBAAkB;IAuB1B,UAAU,CACR,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC,GAC1E,MAAM;IAiBT,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO;IAepE,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAelC,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,EAAE;IAqD3D,iBAAiB,CACf,OAAO,EAAE,OAAO,CACd,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,CAAC,CAC1E,GACA,IAAI;IAQP,iBAAiB,IAAI,cAAc;IAQnC,qBAAqB,CACnB,eAAe,EAAE,MAAM,EACvB,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,MAAM;IAqET,OAAO,CAAC,eAAe;IAoDvB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAanB;;OAEG;IACH,OAAO,CAAC,YAAY;IAQpB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IA4C1B;;;OAGG;IACH,OAAO,CAAC,eAAe;IAgMvB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IA4HzB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAwLlB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;CA2GjD;AAMD,wBAAgB,mBAAmB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,aAAa,CAEvE"}