@connexum/ai-governance 1.0.0-beta.11

package/dist/governance/agent-trust-report.js

@@ -0,0 +1,155 @@
+"use strict";
+/**
+ * Per-Agent Trust Report Generator.
+ *
+ * SCOPE — read this first. There are TWO compliance-report surfaces in
+ * this codebase. They coexist intentionally and cover different audiences:
+ *
+ *   1. **THIS file** (`src/governance/agent-trust-report.ts`) — produces
+ *      a **per-agent, point-in-time trust assessment**. Pulls the 3-dim
+ *      score, OWASP findings, axis-specific recommendations, org
+ *      reputation into a single AgentTrustReport. Audience: CISO
+ *      assessing whether a specific agent is ready to deploy / pass
+ *      insurance underwriting / receive a Sovereignty Certificate.
+ *
+ *   2. **`packages/governance-server/src/compliance-report-routes.ts`** —
+ *      produces a **tenant-wide period event-rollup**. Aggregates
+ *      allow/deny/require-approval counts across all agents over a
+ *      period, with CSV / PDF / insurance-grade / email export variants.
+ *      Audience: compliance officer reviewing a quarter.
+ *
+ * Per Thomas Layer 0 2026-05-06 trademark positioning, **both** map onto
+ * the credit-agency framing:
+ *   - This file = the per-subject "credit assessment" (what a specific
+ *     agent's credit looks like RIGHT NOW)
+ *   - The other file = the period "credit history statement" (what the
+ *     subject did over the last quarter)
+ *
+ * Inputs (this file):
+ *   AgentThreeDimensionalScore   the score (W3.4)
+ *   OrgReputation                the bureau-level signal
+ *   ScanReport                   the build-axis findings (W1.7)
+ *   RecommendationSet            three-axis remediation (W1.11)
+ *   pack bindings + period       scope of the report
+ *
+ * Output: a structured AgentTrustReport JSON the dashboard renders +
+ * exports. Pure helper — serialization is the caller's job.
+ *
+ * @connexum/ai-governance  Per-Agent Trust Report (reconciles cluster
+ *   parallel-implementation; see also compliance-report-routes.ts)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CSV_HEADER = void 0;
+exports.generateAgentTrustReport = generateAgentTrustReport;
+exports.reportToCsvRow = reportToCsvRow;
+exports.topRecommendations = topRecommendations;
+function defaultId(agentId, periodFrom, periodTo) {
+    // Deterministic report id — not cryptographic, just human-stable.
+    return `cr-${agentId}-${periodFrom.slice(0, 10)}-${periodTo.slice(0, 10)}`;
+}
+function deriveVerdict(input) {
+    const crit = input.scanReport.countsBySeverity.CRIT;
+    const composite = input.score.composite;
+    const confidence = input.orgReputation?.confidence ?? 'low';
+    if (crit > 0)
+        return 'NON_COMPLIANT';
+    if (composite >= 85)
+        return confidence === 'low' ? 'PROVISIONAL' : 'COMPLIANT';
+    if (composite >= 65)
+        return 'CONDITIONAL';
+    if (composite >= 40)
+        return 'AT_RISK';
+    return 'NON_COMPLIANT';
+}
+function summaryLine(input, verdict) {
+    const counts = input.scanReport.countsBySeverity;
+    const totalFindings = counts.CRIT + counts.HIGH + counts.MED + counts.LOW;
+    const packLine = input.packBindings.length === 0 ? 'no packs bound' : input.packBindings.join(', ');
+    return (`Agent ${input.agentName ?? input.agentId} (org ${input.orgId}) — ` +
+        `composite trust score ${input.score.composite}/100 over ` +
+        `${input.period.from.slice(0, 10)}..${input.period.to.slice(0, 10)}. ` +
+        `Pack bindings: ${packLine}. ` +
+        `Findings: ${totalFindings} (CRIT=${counts.CRIT} HIGH=${counts.HIGH} MED=${counts.MED} LOW=${counts.LOW}). ` +
+        `Verdict: ${verdict}.`);
+}
+function generateAgentTrustReport(input, options = {}) {
+    if (!input.agentId || input.agentId.trim() === '') {
+        throw new Error('generateAgentTrustReport: agentId is required');
+    }
+    if (!input.orgId || input.orgId.trim() === '') {
+        throw new Error('generateAgentTrustReport: orgId is required');
+    }
+    if (!input.period?.from || !input.period?.to) {
+        throw new Error('generateAgentTrustReport: period.from and period.to are required');
+    }
+    const verdict = deriveVerdict(input);
+    const id = options.id ?? defaultId(input.agentId, input.period.from, input.period.to);
+    const generatedAt = options.nowIso ?? new Date().toISOString();
+    return {
+        id,
+        schemaVersion: '1.0',
+        agentId: input.agentId,
+        agentName: input.agentName,
+        orgId: input.orgId,
+        period: input.period,
+        generatedAt,
+        verdict,
+        headline: {
+            composite_score: input.score.composite,
+            confidence: input.orgReputation?.confidence ?? 'low',
+            pack_bindings: input.packBindings,
+            open_critical_findings: input.scanReport.countsBySeverity.CRIT,
+            open_high_findings: input.scanReport.countsBySeverity.HIGH,
+            potential_score_gain: input.recommendations.potentialScoreGain,
+        },
+        sections: {
+            summary: { title: 'Summary', body: summaryLine(input, verdict) },
+            trust_score: { title: 'Trust Score (three-dimensional)', body: input.score },
+            org_reputation: {
+                title: 'Issuing Org Reputation',
+                body: input.orgReputation ?? null,
+            },
+            findings: { title: 'OWASP Agentic Findings', body: input.scanReport },
+            recommendations: { title: 'How to Improve', body: input.recommendations },
+            runtime_totals: {
+                title: 'Runtime Activity Totals',
+                body: input.runtimeTotals ?? null,
+            },
+        },
+    };
+}
+/** Compact CSV row for org-wide CSV exports — one row per agent report. */
+function reportToCsvRow(report) {
+    const cells = [
+        report.id,
+        report.agentId,
+        report.orgId,
+        report.period.from,
+        report.period.to,
+        report.verdict,
+        report.headline.composite_score.toString(),
+        report.headline.confidence,
+        report.headline.open_critical_findings.toString(),
+        report.headline.open_high_findings.toString(),
+        report.headline.potential_score_gain.toString(),
+        report.headline.pack_bindings.join('|'),
+    ];
+    return cells.map(csvEscape).join(',');
+}
+exports.CSV_HEADER = 'report_id,agent_id,org_id,period_from,period_to,verdict,composite_score,' +
+    'confidence,open_critical,open_high,potential_score_gain,pack_bindings';
+function csvEscape(s) {
+    if (s.includes(',') || s.includes('"') || s.includes('\n')) {
+        return '"' + s.replace(/"/g, '""') + '"';
+    }
+    return s;
+}
+/** Filter recommendations to those above a severity threshold, useful for the report's "top remediations" cover. */
+function topRecommendations(set, options = {}) {
+    const RANK = { LOW: 0, MED: 1, HIGH: 2, CRIT: 3 };
+    const min = RANK[options.minSeverity ?? 'HIGH'];
+    const filtered = set.recommendations.filter((r) => (RANK[r.severity] ?? 0) >= min);
+    filtered.sort((a, b) => (RANK[b.severity] ?? 0) - (RANK[a.severity] ?? 0));
+    return options.limit ? filtered.slice(0, options.limit) : filtered;
+}
+//# sourceMappingURL=agent-trust-report.js.map

package/dist/governance/agent-trust-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-trust-report.js","sourceRoot":"","sources":["../../src/governance/agent-trust-report.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;;;AA4GH,4DAkDC;AAGD,wCAgBC;AAcD,gDASC;AA1HD,SAAS,SAAS,CAAC,OAAe,EAAE,UAAkB,EAAE,QAAgB;IACtE,kEAAkE;IAClE,OAAO,MAAM,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa,CAAC,KAA4B;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC;IACpD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,UAAU,IAAI,KAAK,CAAC;IAC5D,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC;IACrC,IAAI,SAAS,IAAI,EAAE;QAAE,OAAO,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;IAC/E,IAAI,SAAS,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC;IAC1C,IAAI,SAAS,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,KAA4B,EAAE,OAA0B;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC;IACjD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpG,OAAO,CACL,SAAS,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,SAAS,KAAK,CAAC,KAAK,MAAM;QACnE,yBAAyB,KAAK,CAAC,KAAK,CAAC,SAAS,YAAY;QAC1D,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI;QACtE,kBAAkB,QAAQ,IAAI;QAC9B,aAAa,aAAa,UAAU,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,IAAI,QAAQ,MAAM,CAAC,GAAG,QAAQ,MAAM,CAAC,GAAG,KAAK;QAC5G,YAAY,OAAO,GAAG,CACvB,CAAC;AACJ,CAAC;AAED,SAAgB,wBAAwB,CACtC,KAA4B,EAC5B,UAA4C,EAAE;IAE9C,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE/D,OAAO;QACL,EAAE;QACF,aAAa,EAAE,KAAK;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW;QACX,OAAO;QACP,QAAQ,EAAE;YACR,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;YACtC,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE,UAAU,IAAI,KAAK;YACpD,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,sBAAsB,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI;YAC9D,kBAAkB,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI;YAC1D,oBAAoB,EAAE,KAAK,CAAC,eAAe,CAAC,kBAAkB;SAC/D;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;YAChE,WAAW,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE;YAC5E,cAAc,EAAE;gBACd,KAAK,EAAE,wBAAwB;gBAC/B,IAAI,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;aAClC;YACD,QAAQ,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE;YACrE,eAAe,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,CAAC,eAAe,EAAE;YACzE,cAAc,EAAE;gBACd,KAAK,EAAE,yBAAyB;gBAChC,IAAI,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;aAClC;SACF;KACF,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAgB,cAAc,CAAC,MAAwB;IACrD,MAAM,KAAK,GAAG;QACZ,MAAM,CAAC,EAAE;QACT,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,MAAM,CAAC,IAAI;QAClB,MAAM,CAAC,MAAM,CAAC,EAAE;QAChB,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,EAAE;QAC1C,MAAM,CAAC,QAAQ,CAAC,UAAU;QAC1B,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,EAAE;QACjD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,EAAE;QAC7C,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,EAAE;QAC/C,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;KACxC,CAAC;IACF,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAEY,QAAA,UAAU,GACrB,0EAA0E;IAC1E,uEAAuE,CAAC;AAE1E,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,oHAAoH;AACpH,SAAgB,kBAAkB,CAChC,GAAsB,EACtB,UAA6E,EAAE;IAE/E,MAAM,IAAI,GAA2B,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IACnF,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrE,CAAC"}

package/dist/governance/agent-trust-report.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * RED-GREEN tests for the compliance & insurance report generator.
+ *
+ * @connexum/ai-governance  Insurance & Compliance Report
+ */
+export {};
+//# sourceMappingURL=agent-trust-report.test.d.ts.map

package/dist/governance/agent-trust-report.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-trust-report.test.d.ts","sourceRoot":"","sources":["../../src/governance/agent-trust-report.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/governance/agent-trust-report.test.js

@@ -0,0 +1,294 @@
+"use strict";
+/**
+ * RED-GREEN tests for the compliance & insurance report generator.
+ *
+ * @connexum/ai-governance  Insurance & Compliance Report
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const assert = __importStar(require("node:assert/strict"));
+const agent_trust_report_1 = require("./agent-trust-report");
+const trust_score_three_dim_1 = require("./trust-score-three-dim");
+const owasp_agentic_scanner_1 = require("./owasp-agentic-scanner");
+const improvement_recommendations_1 = require("./improvement-recommendations");
+const cleanManifest = () => ({
+    agentId: 'agent-x',
+    tools: [],
+    hooks: { preToolUse: true, postToolUse: true, postResponse: true },
+    llmProvider: 'connexum-proxy/anthropic',
+    pluginIntegrityVerified: true,
+    rateLimitsConfigured: true,
+    declaredApprovalGates: [],
+    declaredForbiddenCapabilities: [],
+});
+const dirtyManifest = () => ({
+    ...cleanManifest(),
+    tools: ['WebFetch', 'Bash'],
+    pluginIntegrityVerified: false,
+    llmProvider: 'anthropic/direct',
+});
+const dim = (c) => ({
+    scope_adherence: c, policy_compliance: c, anomaly_rate: c,
+    incident_history: c, behavioral_consistency: c, composite: c,
+});
+const opDim = (c) => ({
+    out_of_scope_ingestion: c, scope_violation_by_team: c,
+    scope_violation_by_data_class: c, human_override_frequency: c, composite: c,
+});
+const bDim = (c) => ({
+    owasp_agentic_score: c, hook_coverage_count: 3,
+    declared_capability_class_count: 4, has_human_in_loop: true,
+    plugin_integrity_verified: true, proxy_routed: true, composite: c,
+});
+function mockOrgRep(score, confidence) {
+    return {
+        org_id: 'org-x',
+        score,
+        confidence,
+        based_on_signal_count: 100,
+        agent_count: 5,
+        axis_breakdown: { agent_activity: score, operator_activity: score, agent_build_structure: score },
+        computed_at: '2026-05-12T00:00:00.000Z',
+    };
+}
+(0, node_test_1.describe)('compliance & insurance report', () => {
+    (0, node_test_1.it)('CRIT finding -> NON_COMPLIANT verdict regardless of score', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(dirtyManifest());
+        assert.ok(scan.countsBySeverity.CRIT > 0);
+        const report = (0, agent_trust_report_1.generateAgentTrustReport)({
+            agentId: 'agent-x',
+            agentName: 'X',
+            orgId: 'org-x',
+            period: { from: '2026-05-01T00:00:00.000Z', to: '2026-05-12T00:00:00.000Z' },
+            packBindings: ['hipaa', 'company-pack-1'],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(95),
+                operator_activity: opDim(95),
+                agent_build_structure: bDim(95),
+            }),
+            scanReport: scan,
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'agent-x', buildScan: scan }),
+        });
+        assert.equal(report.verdict, 'NON_COMPLIANT');
+    });
+    (0, node_test_1.it)('Clean scan + high score + high-confidence rep -> COMPLIANT', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(cleanManifest());
+        const report = (0, agent_trust_report_1.generateAgentTrustReport)({
+            agentId: 'agent-x',
+            orgId: 'org-x',
+            period: { from: '2026-05-01T00:00:00.000Z', to: '2026-05-12T00:00:00.000Z' },
+            packBindings: ['soc2'],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(90),
+                operator_activity: opDim(90),
+                agent_build_structure: bDim(90),
+            }),
+            scanReport: scan,
+            orgReputation: mockOrgRep(90, 'high'),
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'agent-x', buildScan: scan }),
+        });
+        assert.equal(report.verdict, 'COMPLIANT');
+    });
+    (0, node_test_1.it)('Clean scan + high score + LOW-confidence rep -> PROVISIONAL', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(cleanManifest());
+        const report = (0, agent_trust_report_1.generateAgentTrustReport)({
+            agentId: 'agent-x',
+            orgId: 'org-x',
+            period: { from: '2026-05-01T00:00:00.000Z', to: '2026-05-12T00:00:00.000Z' },
+            packBindings: [],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(88),
+                operator_activity: opDim(88),
+                agent_build_structure: bDim(88),
+            }),
+            scanReport: scan,
+            orgReputation: mockOrgRep(60, 'low'),
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'agent-x', buildScan: scan }),
+        });
+        assert.equal(report.verdict, 'PROVISIONAL');
+    });
+    (0, node_test_1.it)('Mid-band composite -> CONDITIONAL / AT_RISK / NON_COMPLIANT', () => {
+        const make = (composite) => (0, agent_trust_report_1.generateAgentTrustReport)({
+            agentId: 'agent-x',
+            orgId: 'org-x',
+            period: { from: '2026-05-01T00:00:00.000Z', to: '2026-05-12T00:00:00.000Z' },
+            packBindings: [],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(composite),
+                operator_activity: opDim(composite),
+                agent_build_structure: bDim(composite),
+            }),
+            scanReport: (0, owasp_agentic_scanner_1.scanAgent)(cleanManifest()),
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'agent-x' }),
+        });
+        assert.equal(make(70).verdict, 'CONDITIONAL');
+        assert.equal(make(50).verdict, 'AT_RISK');
+        assert.equal(make(20).verdict, 'NON_COMPLIANT');
+    });
+    (0, node_test_1.it)('headline + sections + summary populated', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(dirtyManifest());
+        const report = (0, agent_trust_report_1.generateAgentTrustReport)({
+            agentId: 'agent-x',
+            agentName: 'Agent X',
+            orgId: 'org-x',
+            period: { from: '2026-05-01T00:00:00.000Z', to: '2026-05-12T00:00:00.000Z' },
+            packBindings: ['hipaa', 'company-pack-1'],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(60), operator_activity: opDim(60), agent_build_structure: bDim(60),
+            }),
+            scanReport: scan,
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'agent-x', buildScan: scan }),
+        });
+        assert.equal(report.headline.composite_score, 60);
+        assert.deepEqual(report.headline.pack_bindings, ['hipaa', 'company-pack-1']);
+        assert.equal(report.headline.open_critical_findings, scan.countsBySeverity.CRIT);
+        assert.match(report.sections.summary.body, /Agent X/);
+        assert.match(report.sections.summary.body, /Verdict: NON_COMPLIANT/);
+        assert.equal(report.sections.trust_score.body.composite, 60);
+        assert.equal(report.sections.recommendations.body.agentId, 'agent-x');
+    });
+    (0, node_test_1.it)('runtimeTotals appear in the report when supplied', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(cleanManifest());
+        const report = (0, agent_trust_report_1.generateAgentTrustReport)({
+            agentId: 'a',
+            orgId: 'org-x',
+            period: { from: '2026-05-01T00:00:00.000Z', to: '2026-05-12T00:00:00.000Z' },
+            packBindings: [],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(80), operator_activity: opDim(80), agent_build_structure: bDim(80),
+            }),
+            scanReport: scan,
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'a' }),
+            runtimeTotals: {
+                allow: 412, deny: 6, pending: 3, approved: 2, denied_by_human: 1,
+            },
+        });
+        assert.deepEqual(report.sections.runtime_totals.body, {
+            allow: 412, deny: 6, pending: 3, approved: 2, denied_by_human: 1,
+        });
+    });
+    (0, node_test_1.it)('id auto-generates when not supplied', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(cleanManifest());
+        const r = (0, agent_trust_report_1.generateAgentTrustReport)({
+            agentId: 'a-1',
+            orgId: 'org-x',
+            period: { from: '2026-05-01T00:00:00.000Z', to: '2026-05-12T00:00:00.000Z' },
+            packBindings: [],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(80), operator_activity: opDim(80), agent_build_structure: bDim(80),
+            }),
+            scanReport: scan,
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'a-1' }),
+        });
+        assert.match(r.id, /^cr-a-1-2026-05-01-2026-05-12$/);
+    });
+    (0, node_test_1.it)('reportToCsvRow + CSV_HEADER produce a parseable CSV pair', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(cleanManifest());
+        const r = (0, agent_trust_report_1.generateAgentTrustReport)({
+            agentId: 'a-1',
+            orgId: 'org-x',
+            period: { from: '2026-05-01T00:00:00.000Z', to: '2026-05-12T00:00:00.000Z' },
+            packBindings: ['hipaa', 'soc2'],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(80), operator_activity: opDim(80), agent_build_structure: bDim(80),
+            }),
+            scanReport: scan,
+            orgReputation: mockOrgRep(80, 'medium'),
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'a-1' }),
+        });
+        const row = (0, agent_trust_report_1.reportToCsvRow)(r);
+        const headerCols = agent_trust_report_1.CSV_HEADER.split(',');
+        const rowCols = row.split(',');
+        assert.equal(rowCols.length, headerCols.length);
+        assert.ok(row.includes('hipaa|soc2'));
+        assert.ok(row.includes('a-1'));
+        assert.ok(row.includes('CONDITIONAL'));
+    });
+    (0, node_test_1.it)('reportToCsvRow escapes fields containing commas', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(cleanManifest());
+        const r = (0, agent_trust_report_1.generateAgentTrustReport)({
+            agentId: 'a, with comma',
+            orgId: 'org-x',
+            period: { from: '2026-05-01T00:00:00.000Z', to: '2026-05-12T00:00:00.000Z' },
+            packBindings: [],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(80), operator_activity: opDim(80), agent_build_structure: bDim(80),
+            }),
+            scanReport: scan,
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'a, with comma' }),
+        });
+        const row = (0, agent_trust_report_1.reportToCsvRow)(r);
+        assert.ok(row.includes('"a, with comma"'));
+    });
+    (0, node_test_1.it)('topRecommendations filters by severity + applies limit', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(dirtyManifest());
+        const set = (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'a', buildScan: scan });
+        const top = (0, agent_trust_report_1.topRecommendations)(set, { minSeverity: 'CRIT' });
+        assert.ok(top.every((r) => r.severity === 'CRIT'));
+        const limited = (0, agent_trust_report_1.topRecommendations)(set, { minSeverity: 'LOW', limit: 2 });
+        assert.ok(limited.length <= 2);
+    });
+    (0, node_test_1.it)('topRecommendations sorts highest-severity-first', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(dirtyManifest());
+        const set = (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'a', buildScan: scan });
+        const sorted = (0, agent_trust_report_1.topRecommendations)(set, { minSeverity: 'LOW' });
+        const SEV = { LOW: 0, MED: 1, HIGH: 2, CRIT: 3 };
+        for (let i = 1; i < sorted.length; i++) {
+            assert.ok(SEV[sorted[i].severity] <= SEV[sorted[i - 1].severity], `recommendation at index ${i} (${sorted[i].severity}) is more severe than previous (${sorted[i - 1].severity})`);
+        }
+    });
+    (0, node_test_1.it)('missing agentId / orgId / period throws (fail-closed)', () => {
+        const scan = (0, owasp_agentic_scanner_1.scanAgent)(cleanManifest());
+        const base = {
+            orgId: 'o',
+            period: { from: 'a', to: 'b' },
+            packBindings: [],
+            score: (0, trust_score_three_dim_1.composeThreeDimensionalScore)({
+                agent_activity: dim(80), operator_activity: opDim(80), agent_build_structure: bDim(80),
+            }),
+            scanReport: scan,
+            recommendations: (0, improvement_recommendations_1.buildRecommendationSet)({ agentId: 'a' }),
+        };
+        assert.throws(() => (0, agent_trust_report_1.generateAgentTrustReport)({ ...base, agentId: '' }), /agentId is required/);
+        assert.throws(() => (0, agent_trust_report_1.generateAgentTrustReport)({ ...base, agentId: 'a', orgId: '' }), /orgId is required/);
+        assert.throws(() => (0, agent_trust_report_1.generateAgentTrustReport)({
+            ...base,
+            agentId: 'a',
+            period: { from: '', to: 'b' },
+        }), /period.from and period.to are required/);
+    });
+});
+//# sourceMappingURL=agent-trust-report.test.js.map

package/dist/governance/agent-trust-report.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-trust-report.test.js","sourceRoot":"","sources":["../../src/governance/agent-trust-report.test.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,yCAAyC;AACzC,2DAA6C;AAE7C,6DAK8B;AAC9B,mEAAuE;AACvE,mEAAoD;AACpD,+EAAuE;AAIvE,MAAM,aAAa,GAAG,GAAkB,EAAE,CAAC,CAAC;IAC1C,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;IAClE,WAAW,EAAE,0BAA0B;IACvC,uBAAuB,EAAE,IAAI;IAC7B,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,EAAE;IACzB,6BAA6B,EAAE,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,GAAkB,EAAE,CAAC,CAAC;IAC1C,GAAG,aAAa,EAAE;IAClB,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,KAAK;IAC9B,WAAW,EAAE,kBAAkB;CAChC,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC;IAC1B,eAAe,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;IACzD,gBAAgB,EAAE,CAAC,EAAE,sBAAsB,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;CAC7D,CAAC,CAAC;AACH,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC;IAC5B,sBAAsB,EAAE,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrD,6BAA6B,EAAE,CAAC,EAAE,wBAAwB,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;CAC5E,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC;IAC3B,mBAAmB,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC9C,+BAA+B,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI;IAC3D,yBAAyB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;CAClE,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,KAAa,EAAE,UAAqC;IACtE,OAAO;QACL,MAAM,EAAE,OAAO;QACf,KAAK;QACL,UAAU;QACV,qBAAqB,EAAE,GAAG;QAC1B,WAAW,EAAE,CAAC;QACd,cAAc,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE;QACjG,WAAW,EAAE,0BAA0B;KACxC,CAAC;AACJ,CAAC;AAED,IAAA,oBAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAA,cAAE,EAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAA,6CAAwB,EAAC;YACtC,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0BAA0B,EAAE;YAC5E,YAAY,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;YACzC,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;gBACvB,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC5B,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;aAChC,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACjF,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAA,6CAAwB,EAAC;YACtC,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0BAA0B,EAAE;YAC5E,YAAY,EAAE,CAAC,MAAM,CAAC;YACtB,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;gBACvB,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC5B,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;aAChC,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC;YACrC,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACjF,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAA,6CAAwB,EAAC;YACtC,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0BAA0B,EAAE;YAC5E,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;gBACvB,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC5B,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;aAChC,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC;YACpC,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACjF,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,EAAE,CACjC,IAAA,6CAAwB,EAAC;YACvB,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0BAA0B,EAAE;YAC5E,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC;gBAC9B,iBAAiB,EAAE,KAAK,CAAC,SAAS,CAAC;gBACnC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC;aACvC,CAAC;YACF,UAAU,EAAE,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC;YACtC,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;SAChE,CAAC,CAAC;QACL,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAA,6CAAwB,EAAC;YACtC,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0BAA0B,EAAE;YAC5E,YAAY,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;YACzC,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;aACvF,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACjF,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAA,6CAAwB,EAAC;YACtC,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0BAA0B,EAAE;YAC5E,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;aACvF,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YACzD,aAAa,EAAE;gBACb,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC;aACjE;SACF,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE;YACpD,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC;SACjE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,IAAA,6CAAwB,EAAC;YACjC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0BAA0B,EAAE;YAC5E,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;aACvF,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,IAAA,6CAAwB,EAAC;YACjC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0BAA0B,EAAE;YAC5E,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;YAC/B,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;aACvF,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC;YACvC,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,mCAAc,EAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,+BAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,IAAA,6CAAwB,EAAC;YACjC,OAAO,EAAE,eAAe;YACxB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0BAA0B,EAAE;YAC5E,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;aACvF,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,mCAAc,EAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,IAAA,uCAAkB,EAAC,GAAG,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAA,uCAAkB,EAAC,GAAG,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAA,uCAAkB,EAAC,GAAG,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,GAAG,GAA2B,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,EAAE,CACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EACtD,2BAA2B,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,mCAAmC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,CAChH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,IAAI,GAAG,IAAA,iCAAS,EAAC,aAAa,EAAE,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE;YAC9B,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,IAAA,oDAA4B,EAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;aACvF,CAAC;YACF,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAA,oDAAsB,EAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SAC1D,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,IAAA,6CAAwB,EAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,EAAS,CAAC,EAC/D,qBAAqB,CACtB,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,IAAA,6CAAwB,EAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAS,CAAC,EAC3E,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,IAAA,6CAAwB,EAAC;YACvB,GAAG,IAAI;YACP,OAAO,EAAE,GAAG;YACZ,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE;SACvB,CAAC,EACX,wCAAwC,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/governance/approval-channel-adapters.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Production transports for the ApprovalChannelDispatcher (W1.10).
+ *
+ * Provides concrete EmailSender + SmsSender implementations wired against
+ * real production APIs:
+ *   - Email: Resend (https://resend.com/docs/api-reference/emails/send-email)
+ *   - SMS:   Twilio (https://www.twilio.com/docs/messaging/send-messages)
+ *
+ * Both adapters accept an injectable `transport` so they can be unit-tested
+ * without hitting the network. In production the default transport uses
+ * node:https directly with no external SDK dependency.
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-APPROVAL-CHANNEL-EMAIL-SMS (production wiring)
+ */
+import type { EmailSender, SmsSender } from './approval-notifications.js';
+export interface HttpsTransportRequest {
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE';
+    hostname: string;
+    path: string;
+    headers: Record<string, string>;
+    body?: string;
+}
+export interface HttpsTransportResponse {
+    status: number;
+    bodyText: string;
+}
+export type HttpsTransport = (req: HttpsTransportRequest) => Promise<HttpsTransportResponse>;
+export declare const nodeHttpsTransport: HttpsTransport;
+export interface ResendEmailAdapterOptions {
+    apiKey: string;
+    /** From address. Default 'governance@my-cc.io'. */
+    fromAddress?: string;
+    /** Custom transport for tests. Defaults to nodeHttpsTransport. */
+    transport?: HttpsTransport;
+}
+export declare function createResendEmailSender(options: ResendEmailAdapterOptions): EmailSender;
+export interface TwilioSmsAdapterOptions {
+    accountSid: string;
+    authToken: string;
+    /** Twilio messaging service SID OR an E.164 from-number. */
+    from: string;
+    transport?: HttpsTransport;
+}
+export declare function createTwilioSmsSender(options: TwilioSmsAdapterOptions): SmsSender;
+//# sourceMappingURL=approval-channel-adapters.d.ts.map

package/dist/governance/approval-channel-adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-channel-adapters.d.ts","sourceRoot":"","sources":["../../src/governance/approval-channel-adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAM1E,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAE7F,eAAO,MAAM,kBAAkB,EAAE,cAwB7B,CAAC;AAML,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,yBAAyB,GAAG,WAAW,CA8CvF;AAMD,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,uBAAuB,GAAG,SAAS,CAgDjF"}