bigbasealpha/examples/security-demo.js

Enterprise-Grade NoSQL Database System with Modular Logger & Offline HSM Security - Complete database platform with professional text-based logging, encryption, caching, indexing, JWT authentication, auto-generated REST API, real-time dashboard, and maste

import BigBaseAlpha from '../src/alpha.js';

/**
 * BigBaseAlpha Security & Privacy Suite Demo
 * Showcases the new security features in v1.4.0
 */

console.log('🔒 BigBaseAlpha Security & Privacy Suite Demo v1.4.0');
console.log('═'.repeat(60));

async function securityDemo() {
    const db = new BigBaseAlpha({
        path: './security_demo_data',
        encryption: false, // For demo purposes
        security: {
            paranoidLogging: true,
            wipeIterations: 3
        }
    });

    try {
        await db.init();
        await db.createCollection('demo');
        
        console.log('✅ Database initialized\n');

        // Demo 1: One-Time Access Keys
        console.log('🔑 Demo 1: One-Time Access Keys');
        console.log('─'.repeat(40));
        
        await db.setOneTime('secret_message', 'This will self-destruct after reading!');
        console.log('📝 Secret message stored');
        
        const secret = await db.getOneTime('secret_message');
        console.log(`📖 Secret read: "${secret}"`);
        
        try {
            await db.getOneTime('secret_message');
        } catch (error) {
            console.log('🔥 Secret already destroyed (as expected)');
        }
        
        console.log('✅ One-time access demo completed\n');

        // Demo 2: Execution Triggers
        console.log('🧪 Demo 2: Execution Triggers');
        console.log('─'.repeat(40));
        
        let trapTriggered = false;
        await db.setTrigger('honeypot', '🍯 Honey trap', {
            onRead: () => {
                trapTriggered = true;
                console.log('⚠️  TRAP ACTIVATED! Intruder detected!');
            }
        });
        
        console.log('🪤 Trap set');
        await db.executeTrigger('honeypot', 'read');
        console.log(`🎯 Trap status: ${trapTriggered ? 'TRIGGERED' : 'Not triggered'}`);
        
        console.log('✅ Execution trigger demo completed\n');

        // Demo 3: Paranoia Mode
        console.log('👁️  Demo 3: Paranoia Mode');
        console.log('─'.repeat(40));
        
        const paranoia = db.enableParanoia({
            encryption: 'AES-256-GCM',
            tamperCheck: true
        });
        
        // Perform some operations to generate logs
        await db.insert('demo', { message: 'This is being monitored' });
        await db.find('demo');
        await db.update('demo', (await db.find('demo'))[0]._id, { monitored: true });
        
        const logs = paranoia.getLogs();
        console.log(`🔍 Paranoid logs generated: ${logs.length} entries`);
        console.log('📊 Sample log entry:', logs[0] ? 'encrypted and hashed' : 'none');
        
        paranoia.disable();
        console.log('✅ Paranoia mode demo completed\n');

        // Demo 4: Decoy Mode
        console.log('🎭 Demo 4: Decoy Database');
        console.log('─'.repeat(40));
        
        const decoy = db.enableDecoy({
            password: 'secretpassword123',
            decoyData: {
                demo: [
                    { id: 1, message: 'This is fake data', type: 'decoy' },
                    { id: 2, message: 'Honeypot active', type: 'trap' }
                ]
            }
        });
        
        // Test wrong password
        const wrongAuth = decoy.authenticate('wrongpassword');
        console.log(`🔐 Wrong password result: ${wrongAuth ? 'Access granted' : 'Showing decoy data'}`);
        
        if (db.securitySuite.shouldUseDecoy()) {
            const decoyData = await db.get('demo');
            console.log('📄 Decoy data shown:', decoyData?.length || 0, 'fake entries');
        }

        // Test correct password
        const correctAuth = decoy.authenticate('secretpassword123');
        console.log(`🔓 Correct password result: ${correctAuth ? 'Real data access' : 'Still in decoy mode'}`);
        
        decoy.disable();
        console.log('✅ Decoy mode demo completed\n');

        // Demo 5: Secure Wipe (SAFE - Limited Pattern)
        console.log('🧼 Demo 5: Secure Wipe (SAFE)');
        console.log('─'.repeat(40));
        
        // Add some test data
        await db.insert('demo', { category: 'demo_sensitive', data: 'Demo secret information' });
        await db.insert('demo', { category: 'public', data: 'Public information' });
        await db.insert('demo', { category: 'demo_sensitive', data: 'More demo secrets' });
        
        const beforeWipe = await db.find('demo');
        console.log(`📊 Before wipe: ${beforeWipe.length} total records`);
        
        // Wipe only demo sensitive data (safe pattern)
        const wipedCount = await db.wipe('*demo_sensitive*', { 
            confirm: true, 
            safetyCheck: true,  // Required for safety
            wipeLevel: 'shallow' // Less destructive for demo
        });
        
        const afterWipe = await db.find('demo');
        console.log(`🔥 Wiped ${wipedCount} demo sensitive records`);
        console.log(`📊 After wipe: ${afterWipe.length} remaining records`);
        
        console.log('✅ Secure wipe demo completed (safe pattern used)\n');

        // Demo 6: Self-Destruct (SAFE - Demo Only, Short Timer)
        console.log('💣 Demo 6: Self-Destruct Mode (SAFE DEMO)');
        console.log('─'.repeat(40));
        
        const destruct = db.activateSelfDestruct({
            timeout: 5000, // 5 seconds for demo
            secure: true,
            wipeLevel: 'shallow', // Less destructive for demo
            safetyCheck: true     // Required for activation
        });
        
        console.log(`🔑 Emergency PIN: ${destruct.pin}`);
        console.log('⏰ Self-destruct sequence activated (5 seconds)...');
        console.log('🛡️  This is a SAFE demo - will be aborted automatically');
        
        // Wait 2 seconds then abort (safe demo)
        setTimeout(() => {
            const aborted = db.abortDestruct(destruct.pin);
            console.log(`🛡️  Self-destruct ${aborted ? 'SAFELY ABORTED' : 'FAILED TO ABORT'}`);
        }, 2000);
        
        // Wait for abort to complete
        await new Promise(resolve => setTimeout(resolve, 3000));
        console.log('✅ Self-destruct demo completed (safely aborted)\n');

        // Demo 7: Dead Man's Switch (Non-destructive demo)
        console.log('🧨 Demo 7: Dead Man\'s Switch (Demo Only)');
        console.log('─'.repeat(40));
        
        const deadMans = db.enableDeadMansSwitch({
            delay: 3000, // 3 seconds for demo
            triggerMessage: 'Demo: Inactivity detected',
            callback: () => console.log('💀 Dead Man\'s Switch would trigger (demo mode)')
        });
        
        console.log('⏰ Dead Man\'s Switch enabled (3 second delay)');
        console.log('🔄 Simulating activity...');
        
        // Simulate activity to prevent trigger
        setTimeout(async () => {
            await db.find('demo'); // Activity to reset timer
            console.log('💓 Activity detected - timer reset');
        }, 1500);
        
        // Disable after demo
        setTimeout(() => {
            deadMans.disable();
            console.log('🛡️  Dead Man\'s Switch disabled (demo complete)');
        }, 4000);
        
        await new Promise(resolve => setTimeout(resolve, 5000));
        console.log('✅ Dead Man\'s Switch demo completed\n');

        // Security Status Summary
        console.log('📊 Security Status Summary');
        console.log('─'.repeat(40));
        
        const status = db.getSecurityStatus();
        console.log('🔒 Self-Destruct:', status.selfDestruct.active ? 'ACTIVE' : 'Inactive');
        console.log('🧨 Dead Man\'s Switch:', status.deadMansSwitch.enabled ? 'ENABLED' : 'Disabled');
        console.log('👁️  Paranoia Mode:', status.paranoia.enabled ? 'ENABLED' : 'Disabled');
        console.log('🎭 Decoy Mode:', status.decoy.enabled ? 'ENABLED' : 'Disabled');
        console.log('🔑 One-Time Keys:', status.oneTimeKeys);
        console.log('🧪 Execution Triggers:', status.executionTriggers);

        await db.close();
        
        console.log('\n🎉 Security & Privacy Suite Demo Completed Successfully!');
        console.log('✅ Core security features are working safely');
        console.log('⚠️  Note: All destructive operations require explicit safety confirmations');
        console.log('�️  Your data remains secure with built-in safety checks');
        console.log('\n🔒 Safety Requirements for Destructive Operations:');
        console.log('   • Self-destruct: { safetyCheck: true }');
        console.log('   • Wipe: { confirm: true, safetyCheck: true }');
        console.log('   • Emergency: { confirm: true, safetyCheck: true, emergencyCode: "EMERGENCY_DESTROY_ALL_DATA" }');

    } catch (error) {
        console.error('❌ Demo error:', error);
        process.exit(1);
    }
}

// Emergency shutdown demo (commented out for safety)
/*
async function emergencyDemo() {
    console.log('🚨 EMERGENCY SHUTDOWN DEMO (DESTRUCTIVE)');
    console.log('This would completely destroy the database!');
    
    // Uncomment only for testing in isolated environment:
    // const db = new BigBaseAlpha({ path: './emergency_test' });
    // await db.init();
    // await db.emergencyShutdown();
}
*/

// Run demo
securityDemo().catch(console.error);