Skip to content

MANIFEST.md

Latest commit

 

History

History
126 lines (112 loc) · 7.56 KB

MANIFEST.md

File metadata and controls

126 lines (112 loc) · 7.56 KB
Raw

NDSEP Production-Ready Archive Manifest

Archive Summary

  • Date: 2026-05-01
  • Branch: devin/1777666970-production-ready
  • Total Source Files: 884 (excl. node_modules, .git, lockfiles)
  • Archive Size: 2.1MB compressed (excl. node_modules + .git + lockfiles)
  • New Code Added: 5,045 lines across 40 files (net: +4,672 lines)

Changes vs Previous Archive

New Files (38 files, 4,915 lines)

Category File Lines Description
Security server/security/ddos.ts 222 Multi-layer DDoS protection (rate limiting, IP blocking, circuit breaker)
Security server/security/ransomware.ts 243 File integrity monitoring, hash-chained audit log, canary files
Security server/security/csp.ts 132 CSP/HSTS/security headers middleware
Security server/security/sessionHardening.ts 159 CSRF, idle timeout, concurrent session limits
Security server/security/index.ts 10 Security module barrel export
Offline client/src/lib/offlineQueue.ts 271 IndexedDB mutation queue with background sync
Offline client/src/lib/adaptiveBandwidth.ts 236 Network quality detection (5 profiles for African deployments)
Offline client/src/lib/wsResilience.ts 321 Resilient WebSocket with HTTP fallback
Offline client/public/sw.js 264 Service worker (cache-first/network-first strategies)
Middleware server/middleware/healthIntegration.ts 222 Unified health dashboard for 12 middleware services
Middleware server/middleware/dapr.ts 93 Dapr sidecar integration
Middleware server/middleware/tigerbeetle.ts 126 TigerBeetle financial ledger integration
Middleware server/middleware/opensearch.ts 129 OpenSearch full-text search
Workflow server/workflows/complianceLifecycle.ts 198 5 workflow state machines (org, violation, breach, DPIA, DSAR)
Workflow server/workflows/businessRules.ts 328 Penalty calc, compliance scoring, risk assessment, SLA checks
Router server/routers/workflows.ts 125 tRPC endpoints for workflow engine
UI/PWA client/src/pages/SecurityDashboard.tsx 121 Security posture monitoring page
UI/PWA client/src/pages/MiddlewareHealth.tsx 118 Middleware service health page
Mobile/Flutter breach_incidents_screen.dart 168 Breach incidents CRUD screen
Mobile/Flutter consent_management_screen.dart 101 Consent records management
Mobile/Flutter dpia_screen.dart 55 DPIA assessments list
Mobile/Flutter dpo_registry_screen.dart 55 DPO appointments registry
Mobile/Flutter middleware_health_screen.dart 89 Middleware health monitoring
Mobile/RN BreachIncidentsScreen.tsx 94 React Native breach incidents
Mobile/RN ConsentManagementScreen.tsx 69 React Native consent records
Mobile/RN DpiaScreen.tsx 71 React Native DPIA list
Mobile/RN DpoRegistryScreen.tsx 52 React Native DPO registry
Mobile/RN MiddlewareHealthScreen.tsx 76 React Native middleware health
Workers/Go cmd/openappsec_waf/main.go 123 OpenAppSec WAF integration worker
Workers/Py offline_sync_worker.py 148 Offline sync with conflict resolution
Workers/Rust offline_resilience/src/main.rs 212 Offline resilience (dedup, priority queue)
Seed Data scripts/seed-comprehensive.sql 117 10 additional Nigerian orgs, policies, breaches
Testing scripts/smoke-test.mjs 420 Comprehensive endpoint smoke test
Config .env.production.example +50 All middleware service env vars
Server server/_core/index.ts +52 Health, security, events endpoints
Server server/routers.ts +2 Workflow router wired
Rust workers/rust/Cargo.toml +7 New crate members

Modified Files

File Change
.env.production.example Added 50 lines of middleware env vars
server/_core/index.ts Added middleware health, security status, events polling endpoints
server/routers.ts Wired workflow router to appRouter
workers/rust/Cargo.toml Added 7 new crate workspace members
scripts/smoke-test.mjs Rewrote with comprehensive endpoint coverage
client/public/sw.js Rewrote with cache strategies for offline support

Feature Completeness

Security (Phase 4)

  • DDoS: Sliding window rate limiter, per-route config, IP blocklist, connection flood detection
  • Ransomware: SHA256 file integrity baselines, hash-chained audit log, canary files, bulk delete detection
  • Headers: CSP (strict), HSTS (2yr preload), X-Frame-Options, X-Content-Type-Options
  • Session: CSRF tokens (1hr TTL), 30min idle timeout, 5 concurrent sessions max
  • PBAC: Already existed — confirmed working with policy evaluation

Offline Resilience (Phase 5)

  • Service Worker: Cache-first static, network-first API, stale-while-revalidate dashboard
  • IndexedDB Queue: Auto-replay with exponential backoff (5 retries), conflict resolution
  • Adaptive Bandwidth: 5 profiles (excellent→offline), auto-adjusts polling/payload/compression
  • WebSocket: Exponential backoff (1s→60s), heartbeat/ping-pong, HTTP long-poll fallback after 20 attempts

Business Rules (Phase 3)

  • NDPA penalty calculation (Art. 47, 2% turnover cap, repeat offender surcharge)
  • Compliance scoring (100-point, 10 categories: DPO, privacy policy, consent, etc.)
  • Risk assessment (sector-weighted, cross-border, sensitive data factors)
  • SLA detection (24h breach acknowledge, 72h violation investigate, 30-day resolve)
  • DPCO licence renewal eligibility (checks violations, penalties, DPIA)
  • Cross-border adequacy (20+ adequate countries per NDPA Art. 28)

Middleware (Phase 6)

  • Kafka: Already fully implemented (18 exports, topics for penalties/enforcement/violations)
  • Temporal: Already fully implemented (workflow start/describe/list)
  • Dapr: Service invocation, state store, pub/sub, health check
  • TigerBeetle: Penalty issuance, payment recording, balance queries
  • OpenSearch: Multi-match search with highlighting, bulk indexing
  • Health: Unified endpoint checking all 12 services

Mobile Parity (Phase 8)

  • Flutter: +5 screens (breach incidents, consent, DPIA, DPO, middleware health)
  • React Native: +5 screens (matching Flutter parity)
  • Total: 28 Flutter screens, 26 React Native screens

Deployment (Phase 9)

  • Production Docker Compose: 1,867 lines, all middleware services
  • Kubernetes: Network policies, deployment manifests
  • Dockerfile: Multi-stage, non-root, optimized
  • .env.production.example: Complete with all 50+ env vars

Auth Fix (Post-Initial Commit)

  • server/authMiddleware.ts: Fixed cookie parsing (reads from raw Cookie header instead of requiring cookie-parser middleware) and now performs full DB user lookup (resolving role for admin checks)

End-to-End Test Results

Test Result
Security headers (CSP, HSTS, X-Frame-Options, X-Request-ID) PASS
/api/middleware/health (admin auth + JSON response) PASS
/api/security/status (ransomware, DDoS, PBAC status) PASS
/api/events/poll (session auth + event polling) PASS
workflows.calculatePenalty (tRPC, high severity = 5M NGN) PASS
workflows.calculateComplianceScore (72/100, grade C) PASS
workflows.calculateRiskScore (banking, high volume = 64/high) PASS
workflows.checkCrossBorderAdequacy (Ghana = adequate) PASS

CI Status

  • TypeScript check: PASS (0 errors)
  • Go workers: PASS
  • Python workers: PASS
  • Rust workers: PASS
  • Security scan: PASS
  • Integration tests: 58 pre-existing failures (require running server)