@connexum/agent-standards 0.0.0-stage → 0.1.0-beta.1

package/README.md

@@ -1,3 +1,20 @@
-# Temporary Holding Version
+# @connexum/agent-standards
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Standards coverage for any agent on any stack. On the first scan and every scan after, an agent is scored against:
+
+- **always:** OWASP LLM Top 10, OWASP Agentic Top 10, the My-CC runtime checks;
+- **installed:** every framework whose My-CC pack is bound to the agent (HIPAA, PCI DSS, GDPR, EU AI Act, Colorado AI Act, SOC 2, ISO/IEC 42001, NIST AI RMF): scored;
+- **recommended:** a framework that fits the agent's industry, data classes or regions but has no pack bound: documented with its controls, not scored;
+- **not applicable:** a framework that does not fit: omitted with the reason.
+
+Practice frameworks (agent identity and access, MCP server security) are My-CC checks with no pack: scored when they fit.
+
+One catalogue (`catalogue/catalogue.json`) drives this package and the Python twin (`connexum-agent-standards`); the same conformance cases run in both. Evidence is a map of facts the runtime supplies (`prompt.isolated`, `safe_harbor`, `kill_switch`, ...); a missing fact is **not checked**, never a pass.
+
+```ts
+import { scoreAgent, applicability, standardsLines } from '@connexum/agent-standards'
+const report = scoreAgent({ industry: 'healthcare', dataClasses: ['phi'], regions: ['us'], tools: ['ehr.read_note'], boundPacks: ['hipaa'] }, { safe_harbor: true, 'data.min_necessary': true })
+// report.score, report.frameworks[].pass/total, report.omitted[], report.evidenceMissing[]
+```
+
+End-state item D1 (any stack) and D3 (any agent): the scan that every stack runs. First consumer: the AOL spoke's Secure agent builder (CliniVantIQ); the catalogue replaces the spoke's local copy.

package/catalogue/catalogue.json

@@ -0,0 +1,115 @@
+{
+  "version": "2026-10-20",
+  "note": "Standards an agent is scored against on its first scan and every scan after. OWASP LLM, OWASP Agentic and the My-CC runtime apply to every agent. A framework with a My-CC pack is scored when that pack is bound to the agent; when it fits the agent's industry, data or regions but is not bound it is documented as recommended, not scored; when it does not fit it is omitted with the reason. Practice frameworks (agent identity, MCP security) are My-CC checks with no pack: scored when they fit. Evidence keys name the facts a runtime supplies; a missing fact is 'not checked', never a pass.",
+  "evidence": {
+    "prompt.isolated": "retrieved content and tool output are screened before they reach the prompt",
+    "goal.locked": "the agent's objective cannot be rewritten by content it reads",
+    "output.validated": "model output is validated against a schema before a tool runs it",
+    "citations.required": "answers must cite retrieved sources",
+    "prompt.no_secret": "no secret in the system prompt; keys live in a vault",
+    "data.min_necessary": "tools read the minimum necessary; identifiers never leave the hub",
+    "deid.before_model": "identifiers are removed or tokenized before any model call",
+    "rag.tenant_isolated": "the retrieval index is tenant-scoped",
+    "rag.provenance": "the index accepts only sources with a citable id and a source hash",
+    "memory.validated": "memory writes are validated and expire",
+    "runtime.sandbox": "shell execution is forbidden or sandboxed",
+    "egress.allowlist": "outbound network is allowlisted",
+    "credentials.scoped": "every tool has a scope and a data class; credentials are per tool",
+    "circuit_breaker": "a circuit breaker trips after repeated blocks",
+    "kill_switch": "a kill switch and pause exist and are armed",
+    "human_approval": "high-impact actions require a named person's approval; the raw action is shown",
+    "audit.hash_linked": "every decision is sealed on a hash-linked audit chain",
+    "counterfactual_logging": "blocked actions are logged with what would have happened",
+    "model.pinned": "the model is pinned by provider, name and version",
+    "tac.floor": "a minimum TAC Score is enforced; agents do not run below it",
+    "packs.bound": "at least one signed policy pack is bound",
+    "phi.lineage": "PHI lineage is consent-scoped and recorded",
+    "owner.named": "an accountable owner is named",
+    "intended_use.documented": "purpose, trigger, data and outputs are documented",
+    "evals.present": "a pre-deployment evaluation suite exists, including red-team prompts",
+    "incident.response": "incident response exists: kill switch, pause, escalation",
+    "tools.scoped": "tools are limited to the directory of record and the agent's steps",
+    "tools.validated": "tool parameters are validated on every call",
+    "identity.passport": "the agent holds its own Agent Passport and credentials",
+    "messages.signed": "agent-to-agent messages are signed and allowlisted",
+    "supply.pinned": "runtime packages are pinned and locked",
+    "supply.signed": "components are signed and tracked in an AI bill of materials",
+    "limits.set": "token, tool-call and rate limits are set",
+    "audit.controls": "every access is recorded on the chain",
+    "cardholder.masked": "cardholder data is masked or tokenized before storage and model use",
+    "safe_harbor": "Safe Harbor de-identification is applied before model use"
+  },
+  "frameworks": [
+    { "id": "owasp-llm", "name": "OWASP LLM", "authority": "OWASP Top 10 for LLM Applications (2025)", "kind": "always", "packIds": ["owasp-llm", "owasp"], "controls": [
+      { "id": "LLM01", "control": "Prompt injection", "writesTo": "policy.yaml", "evidence": "prompt.isolated" },
+      { "id": "LLM02", "control": "Sensitive information disclosure", "writesTo": "policy.yaml", "evidence": "data.min_necessary" },
+      { "id": "LLM03", "control": "Supply chain", "writesTo": "agent.yaml", "evidence": "supply.pinned" },
+      { "id": "LLM04", "control": "Data and model poisoning", "writesTo": "memory.yaml", "evidence": "rag.provenance" },
+      { "id": "LLM05", "control": "Improper output handling", "writesTo": "policy.yaml", "evidence": "output.validated" },
+      { "id": "LLM06", "control": "Excessive agency", "writesTo": "tools.json", "evidence": "tools.scoped" },
+      { "id": "LLM07", "control": "System prompt leakage", "writesTo": "prompts/system.md", "evidence": "prompt.no_secret" },
+      { "id": "LLM08", "control": "Vector and embedding weaknesses", "writesTo": "memory.yaml", "evidence": "rag.tenant_isolated" },
+      { "id": "LLM09", "control": "Misinformation", "writesTo": "policy.yaml", "evidence": "citations.required" },
+      { "id": "LLM10", "control": "Unbounded consumption", "writesTo": "policy.yaml", "evidence": "limits.set" } ] },
+    { "id": "owasp-agentic", "name": "OWASP Agentic", "authority": "OWASP Top 10 for Agentic Applications", "kind": "always", "packIds": ["owasp-agentic", "owasp"], "controls": [
+      { "id": "ASI01", "control": "Agent goal hijack", "writesTo": "policy.yaml", "evidence": "goal.locked" },
+      { "id": "ASI02", "control": "Tool misuse and exploitation", "writesTo": "tools.json", "evidence": "tools.validated" },
+      { "id": "ASI03", "control": "Identity and privilege abuse", "writesTo": "agent.yaml", "evidence": "identity.passport" },
+      { "id": "ASI04", "control": "Agentic supply chain", "writesTo": "aibom.json", "evidence": "supply.signed" },
+      { "id": "ASI05", "control": "Unexpected code execution", "writesTo": "policy.yaml", "evidence": "runtime.sandbox" },
+      { "id": "ASI06", "control": "Memory and context poisoning", "writesTo": "memory.yaml", "evidence": "memory.validated" },
+      { "id": "ASI07", "control": "Insecure inter-agent communication", "writesTo": "agent.yaml", "evidence": "messages.signed" },
+      { "id": "ASI08", "control": "Cascading failures", "writesTo": "policy.yaml", "evidence": "circuit_breaker" },
+      { "id": "ASI09", "control": "Human-agent trust exploitation", "writesTo": "policy.yaml", "evidence": "human_approval" },
+      { "id": "ASI10", "control": "Rogue agents", "writesTo": "agent.yaml", "evidence": "identity.passport" } ] },
+    { "id": "mycc-runtime", "name": "My-CC runtime", "authority": "My Compliance Citadel runtime checks", "kind": "always", "packIds": [], "controls": [
+      { "id": "CIT-01", "control": "Required policy packs bound", "writesTo": "policy.yaml", "evidence": "packs.bound" },
+      { "id": "CIT-02", "control": "Model provenance pinning", "writesTo": "agent.yaml", "evidence": "model.pinned" },
+      { "id": "CIT-03", "control": "Hash-linked audit", "writesTo": "policy.yaml", "evidence": "audit.hash_linked" },
+      { "id": "CIT-04", "control": "Counterfactual logging", "writesTo": "policy.yaml", "evidence": "counterfactual_logging" },
+      { "id": "CIT-05", "control": "Consent-scoped PHI lineage", "writesTo": "policy.yaml", "evidence": "phi.lineage", "onlyWith": { "dataClasses": ["phi"] } },
+      { "id": "CIT-06", "control": "TAC band floor enforced", "writesTo": "policy.yaml", "evidence": "tac.floor" } ] },
+    { "id": "nist-ai-rmf", "name": "NIST AI RMF", "authority": "US NIST AI RMF 1.0, AI 600-1", "kind": "pack", "packIds": ["nist_ai_rmf", "nist-ai-rmf"], "fits": {}, "why": "US best-practice framework for every agent", "controls": [
+      { "id": "GOV-1.2", "control": "Accountable owner (Govern)", "writesTo": "owner", "evidence": "owner.named" },
+      { "id": "MAP-1.1", "control": "Intended use documented (Map)", "writesTo": "docs/intended-use.md", "evidence": "intended_use.documented" },
+      { "id": "MEA-2.3", "control": "Pre-deployment evaluation (Measure)", "writesTo": "evals/suite.yaml", "evidence": "evals.present" },
+      { "id": "MAN-4.1", "control": "Incident response (Manage)", "writesTo": "policy.yaml", "evidence": "incident.response" } ] },
+    { "id": "hipaa", "name": "HIPAA", "authority": "US HHS Office for Civil Rights", "kind": "pack", "packIds": ["hipaa", "hipaa-core"], "fits": { "dataClasses": ["phi"] }, "why": "handles PHI", "notFit": "no PHI on this agent", "controls": [
+      { "id": "164.502(b)", "control": "Minimum necessary", "writesTo": "tools.json", "evidence": "data.min_necessary" },
+      { "id": "164.514(b)", "control": "Safe Harbor de-identification", "writesTo": "policy.yaml", "evidence": "safe_harbor" },
+      { "id": "164.312(b)", "control": "Audit controls", "writesTo": "policy.yaml", "evidence": "audit.controls" } ] },
+    { "id": "pci-dss", "name": "PCI DSS", "authority": "PCI Security Standards Council", "kind": "pack", "packIds": ["pci-dss"], "fits": { "dataClasses": ["cardholder"] }, "why": "handles cardholder data", "notFit": "no cardholder data on this agent", "controls": [
+      { "id": "3.4", "control": "Render PAN unreadable", "writesTo": "policy.yaml", "evidence": "cardholder.masked" },
+      { "id": "7.1", "control": "Restrict access to cardholder data", "writesTo": "tools.json", "evidence": "credentials.scoped" },
+      { "id": "10.2", "control": "Audit trail of access", "writesTo": "policy.yaml", "evidence": "audit.controls" } ] },
+    { "id": "gdpr", "name": "GDPR", "authority": "EU data protection authorities; UK ICO for UK GDPR", "kind": "pack", "packIds": ["gdpr", "uk-gdpr"], "fits": { "regions": ["eu", "uk"] }, "why": "people in the EU or the UK", "notFit": "no people in the EU or the UK", "controls": [
+      { "id": "Art.5", "control": "Data minimisation", "writesTo": "tools.json", "evidence": "data.min_necessary" },
+      { "id": "Art.25", "control": "Data protection by design", "writesTo": "policy.yaml", "evidence": "deid.before_model" },
+      { "id": "Art.22", "control": "Automated decisions: human involvement", "writesTo": "policy.yaml", "evidence": "human_approval" },
+      { "id": "Art.30", "control": "Records of processing", "writesTo": "policy.yaml", "evidence": "audit.controls" } ] },
+    { "id": "eu-ai-act", "name": "EU AI Act", "authority": "European Commission AI Office", "kind": "pack", "packIds": ["eu-ai-act"], "fits": { "regions": ["eu"] }, "why": "people in the EU", "notFit": "no people in the EU", "controls": [
+      { "id": "Art.9", "control": "Risk management and testing", "writesTo": "evals/suite.yaml", "evidence": "evals.present" },
+      { "id": "Art.12", "control": "Record keeping", "writesTo": "policy.yaml", "evidence": "audit.hash_linked" },
+      { "id": "Art.14", "control": "Human oversight", "writesTo": "policy.yaml", "evidence": "human_approval" } ] },
+    { "id": "colorado-ai", "name": "Colorado AI Act", "authority": "Colorado Attorney General", "kind": "pack", "packIds": ["colorado-ai"], "fits": { "regions": ["us-co"] }, "why": "people in Colorado", "notFit": "no people in Colorado", "controls": [
+      { "id": "6-1-1703(2)", "control": "Impact assessment", "writesTo": "evals/suite.yaml", "evidence": "evals.present" },
+      { "id": "6-1-1703(4)", "control": "Notice and human review of consequential decisions", "writesTo": "policy.yaml", "evidence": "human_approval" },
+      { "id": "6-1-1703(1)", "control": "Documented intended use", "writesTo": "docs/intended-use.md", "evidence": "intended_use.documented" } ] },
+    { "id": "soc2", "name": "SOC 2", "authority": "AICPA Trust Services Criteria", "kind": "pack", "packIds": ["soc2"], "fits": { "dataClassesAbsent": ["phi", "cardholder"] }, "why": "no PHI or cardholder data; general controls apply", "notFit": "PHI or cardholder data on this agent; the sector framework applies first", "controls": [
+      { "id": "CC6.1", "control": "Logical access", "writesTo": "tools.json", "evidence": "credentials.scoped" },
+      { "id": "CC7.2", "control": "Monitoring of system components", "writesTo": "policy.yaml", "evidence": "audit.hash_linked" },
+      { "id": "CC8.1", "control": "Change management", "writesTo": "aibom.json", "evidence": "supply.signed" } ] },
+    { "id": "iso-42001", "name": "ISO/IEC 42001", "authority": "ISO/IEC", "kind": "pack", "packIds": ["iso_42001", "iso-42001"], "fits": {}, "why": "international AI management system; certifiable", "controls": [
+      { "id": "6.1", "control": "AI risk assessment", "writesTo": "docs/intended-use.md", "evidence": "intended_use.documented" },
+      { "id": "8.4", "control": "AI system verification and validation", "writesTo": "evals/suite.yaml", "evidence": "evals.present" },
+      { "id": "9.1", "control": "Monitoring and measurement", "writesTo": "policy.yaml", "evidence": "audit.controls" } ] },
+    { "id": "agent-identity", "name": "Agent identity and access", "authority": "NIST NCCoE, CoSAI and FIDO Alliance guidance (2026)", "kind": "practice", "packIds": ["agent-identity"], "fits": {}, "why": "every agent needs its own Agent Passport and credentials", "controls": [
+      { "id": "AID-1", "control": "Own passport and credentials", "writesTo": "agent.yaml", "evidence": "identity.passport" },
+      { "id": "AID-2", "control": "Scoped credentials per tool", "writesTo": "tools.json", "evidence": "credentials.scoped" },
+      { "id": "AID-3", "control": "Signed agent-to-agent messages", "writesTo": "agent.yaml", "evidence": "messages.signed" } ] },
+    { "id": "mcp-security", "name": "MCP server security", "authority": "CoSAI MCP Security Taxonomy (2026)", "kind": "practice", "packIds": ["mcp-security"], "fits": { "mcp": true }, "why": "the agent calls MCP tools", "notFit": "the agent calls no MCP tools", "controls": [
+      { "id": "MCP-1", "control": "Tool parameters validated per call", "writesTo": "tools.json", "evidence": "tools.validated" },
+      { "id": "MCP-2", "control": "Egress allowlist for tool servers", "writesTo": "policy.yaml", "evidence": "egress.allowlist" },
+      { "id": "MCP-3", "control": "Tools limited to the directory of record", "writesTo": "tools.json", "evidence": "tools.scoped" } ] }
+  ]
+}

package/dist/applicability.d.ts

@@ -0,0 +1,13 @@
+import type { AgentProfile, Framework, FrameworkApplicability } from './types.js';
+/** The pack bound on the agent that carries this framework, if any (ids as My-CC publishes them; version suffixes ignored). */
+export declare function boundPackFor(fw: Framework, profile: AgentProfile): string | null;
+/** Does the framework fit this agent's industry, data, regions or tools? (Only used when its pack is not bound.) */
+export declare function fits(fw: Framework, profile: AgentProfile): boolean;
+/**
+ * Which frameworks apply to this agent, and how: 'always' (OWASP LLM, OWASP Agentic, My-CC runtime), 'installed' (its
+ * My-CC pack is bound to the agent), 'recommended' (it fits the industry, data or regions but no pack is bound; documented,
+ * not scored), 'not_applicable' (does not fit; omitted with the reason). Practice frameworks are My-CC checks with no pack:
+ * applicable when they fit.
+ */
+export declare function applicability(profile: AgentProfile): FrameworkApplicability[];
+//# sourceMappingURL=applicability.d.ts.map

package/dist/applicability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applicability.d.ts","sourceRoot":"","sources":["../src/applicability.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAKjF,+HAA+H;AAC/H,wBAAgB,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAGhF;AAED,oHAAoH;AACpH,wBAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CASlE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,sBAAsB,EAAE,CAS7E"}

package/dist/applicability.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.boundPackFor = boundPackFor;
+exports.fits = fits;
+exports.applicability = applicability;
+const catalogue_js_1 = require("./catalogue.js");
+const norm = (s) => s.trim().toLowerCase();
+const normPack = (s) => norm(s).replace(/@.*$/, '').replace(/_/g, '-');
+/** The pack bound on the agent that carries this framework, if any (ids as My-CC publishes them; version suffixes ignored). */
+function boundPackFor(fw, profile) {
+    const ids = fw.packIds.map(normPack);
+    return profile.boundPacks.find((p) => ids.includes(normPack(p))) ?? null;
+}
+/** Does the framework fit this agent's industry, data, regions or tools? (Only used when its pack is not bound.) */
+function fits(fw, profile) {
+    const f = fw.fits ?? {};
+    const classes = profile.dataClasses.map(norm);
+    const regions = profile.regions.map(norm);
+    if (f.industries && !f.industries.map(norm).includes(norm(profile.industry ?? '')))
+        return false;
+    if (f.dataClasses && !f.dataClasses.some((c) => classes.includes(norm(c))))
+        return false;
+    if (f.dataClassesAbsent && f.dataClassesAbsent.some((c) => classes.includes(norm(c))))
+        return false;
+    if (f.regions && !f.regions.some((r) => regions.includes(norm(r))))
+        return false;
+    if (f.mcp !== undefined && Boolean(profile.mcp ?? profile.tools.length > 0) !== f.mcp)
+        return false;
+    return true;
+}
+/**
+ * Which frameworks apply to this agent, and how: 'always' (OWASP LLM, OWASP Agentic, My-CC runtime), 'installed' (its
+ * My-CC pack is bound to the agent), 'recommended' (it fits the industry, data or regions but no pack is bound; documented,
+ * not scored), 'not_applicable' (does not fit; omitted with the reason). Practice frameworks are My-CC checks with no pack:
+ * applicable when they fit.
+ */
+function applicability(profile) {
+    return (0, catalogue_js_1.loadCatalogue)().frameworks.map((fw) => {
+        const bound = boundPackFor(fw, profile);
+        const base = { framework: fw.id, name: fw.name, packIds: fw.packIds, boundPack: bound };
+        if (fw.kind === 'always')
+            return { ...base, status: 'always', why: 'applies to every agent' };
+        if (bound)
+            return { ...base, status: 'installed', why: `pack ${bound} is bound to the agent` };
+        if (fits(fw, profile))
+            return { ...base, status: fw.kind === 'practice' ? 'always' : 'recommended', why: fw.why ?? 'fits this agent' };
+        return { ...base, status: 'not_applicable', why: fw.notFit ?? 'does not fit this agent' };
+    });
+}
+//# sourceMappingURL=applicability.js.map

package/dist/applicability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applicability.js","sourceRoot":"","sources":["../src/applicability.ts"],"names":[],"mappings":";;AAOA,oCAGC;AAGD,oBASC;AAQD,sCASC;AAvCD,iDAA8C;AAG9C,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AAClD,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AAE9E,+HAA+H;AAC/H,SAAgB,YAAY,CAAC,EAAa,EAAE,OAAqB;IAC/D,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpC,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;AAC1E,CAAC;AAED,oHAAoH;AACpH,SAAgB,IAAI,CAAC,EAAa,EAAE,OAAqB;IACvD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAA;IACvB,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACxF,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAChG,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACxF,IAAI,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACnG,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAChF,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACnG,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,OAAqB;IACjD,OAAO,IAAA,4BAAa,GAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QACvF,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAiB,EAAE,GAAG,EAAE,wBAAwB,EAAE,CAAA;QACtG,IAAI,KAAK;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,GAAG,EAAE,QAAQ,KAAK,wBAAwB,EAAE,CAAA;QACvG,IAAI,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,aAAuB,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,iBAAiB,EAAE,CAAA;QAC5J,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,gBAAyB,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,IAAI,yBAAyB,EAAE,CAAA;IACpG,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/catalogue.d.ts

@@ -0,0 +1,5 @@
+import type { Catalogue, Framework } from './types.js';
+/** The catalogue shipped with the package (catalogue/catalogue.json); the Python twin reads the same file. */
+export declare function loadCatalogue(): Catalogue;
+export declare function frameworkById(id: string): Framework | undefined;
+//# sourceMappingURL=catalogue.d.ts.map

package/dist/catalogue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalogue.d.ts","sourceRoot":"","sources":["../src/catalogue.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAGtD,8GAA8G;AAC9G,wBAAgB,aAAa,IAAI,SAAS,CAKzC;AACD,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAA+D"}

package/dist/catalogue.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadCatalogue = loadCatalogue;
+exports.frameworkById = frameworkById;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+let cached = null;
+/** The catalogue shipped with the package (catalogue/catalogue.json); the Python twin reads the same file. */
+function loadCatalogue() {
+    if (cached)
+        return cached;
+    const raw = (0, node_fs_1.readFileSync)((0, node_path_1.join)(__dirname, '..', 'catalogue', 'catalogue.json'), 'utf8');
+    cached = JSON.parse(raw);
+    return cached;
+}
+function frameworkById(id) { return loadCatalogue().frameworks.find((f) => f.id === id); }
+//# sourceMappingURL=catalogue.js.map

package/dist/catalogue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalogue.js","sourceRoot":"","sources":["../src/catalogue.ts"],"names":[],"mappings":";;AAMA,sCAKC;AACD,sCAA+H;AAZ/H,qCAAsC;AACtC,yCAAgC;AAGhC,IAAI,MAAM,GAAqB,IAAI,CAAA;AACnC,8GAA8G;AAC9G,SAAgB,aAAa;IAC3B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAA;IACtF,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAA;IACrC,OAAO,MAAM,CAAA;AACf,CAAC;AACD,SAAgB,aAAa,CAAC,EAAU,IAA2B,OAAO,aAAa,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from './types.js';
+export { loadCatalogue, frameworkById } from './catalogue.js';
+export { applicability, fits, boundPackFor } from './applicability.js';
+export { scoreAgent, standardsLines } from './score.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,29 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.standardsLines = exports.scoreAgent = exports.boundPackFor = exports.fits = exports.applicability = exports.frameworkById = exports.loadCatalogue = void 0;
+__exportStar(require("./types.js"), exports);
+var catalogue_js_1 = require("./catalogue.js");
+Object.defineProperty(exports, "loadCatalogue", { enumerable: true, get: function () { return catalogue_js_1.loadCatalogue; } });
+Object.defineProperty(exports, "frameworkById", { enumerable: true, get: function () { return catalogue_js_1.frameworkById; } });
+var applicability_js_1 = require("./applicability.js");
+Object.defineProperty(exports, "applicability", { enumerable: true, get: function () { return applicability_js_1.applicability; } });
+Object.defineProperty(exports, "fits", { enumerable: true, get: function () { return applicability_js_1.fits; } });
+Object.defineProperty(exports, "boundPackFor", { enumerable: true, get: function () { return applicability_js_1.boundPackFor; } });
+var score_js_1 = require("./score.js");
+Object.defineProperty(exports, "scoreAgent", { enumerable: true, get: function () { return score_js_1.scoreAgent; } });
+Object.defineProperty(exports, "standardsLines", { enumerable: true, get: function () { return score_js_1.standardsLines; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,6CAA0B;AAC1B,+CAA6D;AAApD,6GAAA,aAAa,OAAA;AAAE,6GAAA,aAAa,OAAA;AACrC,uDAAsE;AAA7D,iHAAA,aAAa,OAAA;AAAE,wGAAA,IAAI,OAAA;AAAE,gHAAA,YAAY,OAAA;AAC1C,uCAAuD;AAA9C,sGAAA,UAAU,OAAA;AAAE,0GAAA,cAAc,OAAA"}

package/dist/score.d.ts

@@ -0,0 +1,17 @@
+import type { AgentProfile, Evidence, StandardsReport } from './types.js';
+/**
+ * Score the agent: every applicable framework's controls against the evidence the runtime supplied. A scored framework
+ * ('always' or 'installed') counts pass / total; an unknown fact is 'not_checked' and counts in the total, never as a
+ * pass. A recommended framework lists its controls as 'not_scored' so the gap is documented. The overall score is the
+ * pass share across scored frameworks, 0 to 100.
+ */
+export declare function scoreAgent(profile: AgentProfile, evidence: Evidence): StandardsReport;
+/** The standards one per line for an agent folder: installed (pack bound), recommended (fits), or not applicable. */
+export declare function standardsLines(profile: AgentProfile): Array<{
+    id: string;
+    name: string;
+    state: 'installed' | 'recommended' | 'always' | 'not_applicable';
+    why: string;
+    packIds: string[];
+}>;
+//# sourceMappingURL=score.d.ts.map

package/dist/score.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../src/score.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAyC,MAAM,YAAY,CAAA;AAShH;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,GAAG,eAAe,CAuBrF;AAED,qHAAqH;AACrH,wBAAgB,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,aAAa,GAAG,QAAQ,GAAG,gBAAgB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAE3L"}

package/dist/score.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scoreAgent = scoreAgent;
+exports.standardsLines = standardsLines;
+const catalogue_js_1 = require("./catalogue.js");
+const applicability_js_1 = require("./applicability.js");
+const norm = (s) => s.trim().toLowerCase();
+function controlApplies(c, profile) {
+    if (!c.onlyWith?.dataClasses)
+        return true;
+    const classes = profile.dataClasses.map(norm);
+    return c.onlyWith.dataClasses.some((d) => classes.includes(norm(d)));
+}
+/**
+ * Score the agent: every applicable framework's controls against the evidence the runtime supplied. A scored framework
+ * ('always' or 'installed') counts pass / total; an unknown fact is 'not_checked' and counts in the total, never as a
+ * pass. A recommended framework lists its controls as 'not_scored' so the gap is documented. The overall score is the
+ * pass share across scored frameworks, 0 to 100.
+ */
+function scoreAgent(profile, evidence) {
+    const cat = (0, catalogue_js_1.loadCatalogue)();
+    const missing = new Set();
+    const frameworks = [];
+    const omitted = [];
+    for (const app of (0, applicability_js_1.applicability)(profile)) {
+        const fw = cat.frameworks.find((f) => f.id === app.framework);
+        if (app.status === 'not_applicable') {
+            omitted.push({ framework: fw.id, name: fw.name, why: app.why });
+            continue;
+        }
+        const scored = app.status === 'always' || app.status === 'installed';
+        const checks = fw.controls.filter((c) => controlApplies(c, profile)).map((c) => {
+            const fact = evidence[c.evidence];
+            const base = { id: c.id, framework: fw.id, frameworkName: fw.name, control: c.control, writesTo: c.writesTo, evidence: c.evidence };
+            if (!scored)
+                return { ...base, result: 'not_scored', detail: `documented: ${app.why}; bind the pack to score it` };
+            if (fact === true)
+                return { ...base, result: 'pass', detail: cat.evidence[c.evidence] ?? c.evidence };
+            if (fact === false)
+                return { ...base, result: 'fail', detail: `missing: ${cat.evidence[c.evidence] ?? c.evidence}` };
+            missing.add(c.evidence);
+            return { ...base, result: 'not_checked', detail: `no evidence supplied for ${c.evidence}` };
+        });
+        frameworks.push({ framework: fw.id, name: fw.name, authority: fw.authority, status: app.status, scored, why: app.why, pass: checks.filter((c) => c.result === 'pass').length, total: scored ? checks.length : 0, notChecked: checks.filter((c) => c.result === 'not_checked').length, checks });
+    }
+    const scoredFw = frameworks.filter((f) => f.scored);
+    const pass = scoredFw.reduce((n, f) => n + f.pass, 0);
+    const total = scoredFw.reduce((n, f) => n + f.total, 0);
+    return { catalogueVersion: cat.version, agentId: profile.agentId ?? null, score: total ? Math.round((pass / total) * 100) : 0, scoredFrameworks: scoredFw.length, frameworks, omitted, evidenceMissing: [...missing].sort() };
+}
+/** The standards one per line for an agent folder: installed (pack bound), recommended (fits), or not applicable. */
+function standardsLines(profile) {
+    return (0, applicability_js_1.applicability)(profile).map((a) => ({ id: a.framework, name: a.name, state: a.status, why: a.why, packIds: a.packIds }));
+}
+//# sourceMappingURL=score.js.map

package/dist/score.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.js","sourceRoot":"","sources":["../src/score.ts"],"names":[],"mappings":";;AAiBA,gCAuBC;AAGD,wCAEC;AA7CD,iDAA8C;AAC9C,yDAAkD;AAGlD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AAClD,SAAS,cAAc,CAAC,CAAU,EAAE,OAAqB;IACvD,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW;QAAE,OAAO,IAAI,CAAA;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC7C,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACtE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,OAAqB,EAAE,QAAkB;IAClE,MAAM,GAAG,GAAG,IAAA,4BAAa,GAAE,CAAA;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,UAAU,GAAsB,EAAE,CAAA;IACxC,MAAM,OAAO,GAA+B,EAAE,CAAA;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAA,gCAAa,EAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,SAAS,CAAE,CAAA;QAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAClH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,CAAA;QACpE,MAAM,MAAM,GAAkB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5F,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;YACjC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;YACnI,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,YAAqB,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,GAAG,6BAA6B,EAAE,CAAA;YAC3H,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;YAC9G,IAAI,IAAI,KAAK,KAAK;gBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAe,EAAE,MAAM,EAAE,YAAY,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAA;YAC7H,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;YACvB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,aAAsB,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAA;QACtG,CAAC,CAAC,CAAA;QACF,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACjS,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAC9G,OAAO,EAAE,gBAAgB,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAA;AAC/N,CAAC;AAED,qHAAqH;AACrH,SAAgB,cAAc,CAAC,OAAqB;IAClD,OAAO,IAAA,gCAAa,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;AAChI,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,92 @@
+export type FrameworkKind = 'always' | 'pack' | 'practice';
+export interface Fit {
+    industries?: string[];
+    dataClasses?: string[];
+    dataClassesAbsent?: string[];
+    regions?: string[];
+    mcp?: boolean;
+}
+export interface Control {
+    id: string;
+    control: string;
+    writesTo: string;
+    evidence: string;
+    onlyWith?: {
+        dataClasses?: string[];
+    };
+}
+export interface Framework {
+    id: string;
+    name: string;
+    authority: string;
+    kind: FrameworkKind;
+    packIds: string[];
+    fits?: Fit;
+    why?: string;
+    notFit?: string;
+    controls: Control[];
+}
+export interface Catalogue {
+    version: string;
+    note: string;
+    evidence: Record<string, string>;
+    frameworks: Framework[];
+}
+/** What the scanner knows about the agent. Industry, data classes and regions use the catalogue's lower-case keys. */
+export interface AgentProfile {
+    agentId?: string;
+    industry?: string;
+    dataClasses: string[];
+    regions: string[];
+    tools: string[];
+    boundPacks: string[];
+    mcp?: boolean;
+}
+/** Facts the runtime supplies, by evidence key: true, false, or unknown (missing or null). */
+export type Evidence = Record<string, boolean | null | undefined>;
+export type Applicability = 'always' | 'installed' | 'recommended' | 'not_applicable';
+export interface FrameworkApplicability {
+    framework: string;
+    name: string;
+    status: Applicability;
+    why: string;
+    packIds: string[];
+    boundPack: string | null;
+}
+export type CheckResult = 'pass' | 'fail' | 'not_checked' | 'not_scored';
+export interface CheckReport {
+    id: string;
+    framework: string;
+    frameworkName: string;
+    control: string;
+    writesTo: string;
+    evidence: string;
+    result: CheckResult;
+    detail: string;
+}
+export interface FrameworkReport {
+    framework: string;
+    name: string;
+    authority: string;
+    status: Applicability;
+    scored: boolean;
+    why: string;
+    pass: number;
+    total: number;
+    notChecked: number;
+    checks: CheckReport[];
+}
+export interface StandardsReport {
+    catalogueVersion: string;
+    agentId: string | null;
+    score: number;
+    scoredFrameworks: number;
+    frameworks: FrameworkReport[];
+    omitted: Array<{
+        framework: string;
+        name: string;
+        why: string;
+    }>;
+    evidenceMissing: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA;AAC1D,MAAM,WAAW,GAAG;IAAG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE;AACvI,MAAM,WAAW,OAAO;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE;AACnI,MAAM,WAAW,SAAS;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,GAAG,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;CAAE;AAClL,MAAM,WAAW,SAAS;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE;AAEvH,sHAAsH;AACtH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AACD,8FAA8F;AAC9F,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;AAEjE,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,aAAa,GAAG,gBAAgB,CAAA;AACrF,MAAM,WAAW,sBAAsB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAC5J,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,YAAY,CAAA;AACxE,MAAM,WAAW,WAAW;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC/K,MAAM,WAAW,eAAe;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE;AACpN,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,MAAM,CAAA;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,eAAe,EAAE,CAAA;IAC7B,OAAO,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChE,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B"}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,17 @@
 {
   "name": "@connexum/agent-standards",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0-beta.1",
+  "private": false,
+  "description": "Standards coverage for any agent on any stack: on the first scan and every scan after, score the agent against OWASP LLM, OWASP Agentic and the My-CC runtime always, and against the frameworks whose My-CC pack is bound to it (HIPAA, PCI DSS, GDPR, EU AI Act, Colorado AI Act, SOC 2, ISO/IEC 42001, NIST AI RMF); frameworks that fit the agent's industry, data or regions but are not bound are documented as recommended, not scored; frameworks that do not fit are omitted with the reason. One catalogue JSON drives this package and its Python twin (connexum-agent-standards); a missing fact is 'not checked', never a pass.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": { ".": { "types": "./dist/index.d.ts", "require": "./dist/index.js", "import": "./dist/index.js" } },
+  "scripts": { "build": "tsc", "typecheck": "tsc --noEmit", "test": "npx tsx --test --test-force-exit --test-timeout=120000 tests/*.test.mts" },
+  "dependencies": {},
+  "devDependencies": { "@types/node": "^20.0.0", "tsx": "^4.19.0", "typescript": "^5.4.0" },
+  "engines": { "node": ">=24.0.0" },
+  "license": "SEE LICENSE IN ../../LICENSE.md",
+  "files": ["dist", "catalogue", "README.md"],
+  "publishConfig": { "access": "public" },
+  "repository": { "type": "git", "url": "https://github.com/Glasgowlad1/AI-Agents-GS.git", "directory": "packages/agent-standards" }
+}