@connexum/ai-governance 1.0.0-beta.11

package/dist/governance/pack-evaluator.test.js

@@ -0,0 +1,279 @@
+"use strict";
+/**
+ * Tests for PackEvaluator (GAP-S3-01)
+ *
+ * @connexum/ai-governance
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const assert = __importStar(require("node:assert/strict"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+const pack_evaluator_1 = require("./pack-evaluator");
+const index_1 = require("../packs/index");
+const event_bus_1 = require("../audit/event-bus");
+const index_2 = require("../adapters/index");
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function makeTmpEventDir() {
+    return fs.mkdtempSync(path.join(os.tmpdir(), 'pe-test-'));
+}
+function makeEventBus(dir) {
+    return new event_bus_1.EventBus({ eventDir: dir, agentName: 'test-evaluator' });
+}
+function makePackRegistry(packs) {
+    const registry = new index_1.PackRegistry();
+    for (const p of packs) {
+        registry.register(p);
+        registry.activate(p.id);
+    }
+    return registry;
+}
+function makeActionContext(toolName, input = {}) {
+    return (0, index_2.createActionContext)(toolName, input, { name: 'test-agent', orgId: 'tenant-x' });
+}
+function makePack(id, categoryActions, overrides = {}) {
+    return {
+        id,
+        name: `Pack ${id}`,
+        version: '1.0.0',
+        description: `Test pack ${id}`,
+        authority: 'Test',
+        industries: ['test'],
+        requiredModules: [],
+        moduleConfig: {},
+        providerPolicy: { blockedProviders: [], requiredCapabilities: [], blockReasons: {} },
+        dataPolicy: {
+            scanCategories: Object.keys(categoryActions),
+            categoryActions,
+            encryptionRequired: false,
+        },
+        retentionPolicy: {
+            auditLogRetentionDays: 90,
+            sessionRetentionDays: 30,
+            incidentRetentionDays: 365,
+            reference: 'Test',
+        },
+        incidentPolicy: {
+            notificationDeadlineHours: 72,
+            reference: 'Test',
+            requiredRecipients: [],
+            formalNotificationRequired: false,
+        },
+        validators: [],
+        ...overrides,
+    };
+}
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+(0, node_test_1.describe)('PackEvaluator', () => {
+    // (a) Cold-cache evaluate -> resolves from registry, caches, returns verdict
+    (0, node_test_1.it)('(a) cold-cache: resolves from registry and caches result', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        const pack = makePack('test-hipaa', { PHI: 'BLOCK' });
+        const registry = makePackRegistry([pack]);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus);
+        // Deactivate the pack after caching -- a warm cache won't see this.
+        const verdict1 = evaluator.evaluate('tenant-1', 'agent-1', makeActionContext('Write', { content: 'phi data' }));
+        // Should produce DENY because PHI is in input text and action is BLOCK
+        assert.equal(verdict1.verdict, 'DENY');
+        assert.ok(verdict1.triggeringPackIds.includes('test-hipaa'));
+        assert.ok(verdict1.triggeringClassifierIds.includes('PHI'));
+    });
+    // (b) Warm-cache: uses cache, skips registry
+    (0, node_test_1.it)('(b) warm-cache: second call uses cached pack set', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        const pack = makePack('test-soc2', { PII: 'BLOCK' });
+        const registry = makePackRegistry([pack]);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus, { ttlMs: 60_000, enableCache: true });
+        // First call -- cold cache
+        const v1 = evaluator.evaluate('tenant-warm', 'agent-1', makeActionContext('Write', { content: 'pii data' }));
+        assert.equal(v1.verdict, 'DENY');
+        // Manually deactivate the pack in the registry.
+        // A warm cache should still return DENY because it uses the cached pack set.
+        registry.deactivate('test-soc2');
+        const v2 = evaluator.evaluate('tenant-warm', 'agent-1', makeActionContext('Write', { content: 'pii data' }));
+        assert.equal(v2.verdict, 'DENY', 'warm cache should still produce DENY from cached pack set');
+    });
+    // (c) pack:amended event -> invalidates cache for affected tenant only
+    (0, node_test_1.it)('(c) pack:amended invalidates cache for affected tenant only', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        const pack = makePack('test-amended', { CREDIT: 'BLOCK' });
+        const registry = makePackRegistry([pack]);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus, { ttlMs: 60_000 });
+        // Warm up both tenants
+        const ctx = makeActionContext('Write', { content: 'credit card data' });
+        const vt1Before = evaluator.evaluate('tenant-alpha', 'agent-1', ctx);
+        const vt2Before = evaluator.evaluate('tenant-beta', 'agent-1', ctx);
+        assert.equal(vt1Before.verdict, 'DENY');
+        assert.equal(vt2Before.verdict, 'DENY');
+        // Deactivate pack in registry (simulates pack amendment)
+        registry.deactivate('test-amended');
+        // Emit pack:amended for tenant-alpha -- should flush only tenant-alpha
+        bus.emit('pack:amended', { tenantId: 'tenant-alpha' });
+        // orgId field path: eventBus.emit sets event.orgId from options...
+        // Our bus.on handler checks event.orgId ?? event.data.tenantId
+        // The emit signature is: emit(type, data, target?) -- orgId is not directly set.
+        // We set tenantId in data above.
+        // tenant-alpha: cache flushed, resolves fresh (no active packs now -> ALLOW)
+        const vt1After = evaluator.evaluate('tenant-alpha', 'agent-1', ctx);
+        assert.equal(vt1After.verdict, 'ALLOW', 'tenant-alpha cache should be flushed');
+        // tenant-beta: cache untouched, still DENY
+        const vt2After = evaluator.evaluate('tenant-beta', 'agent-1', ctx);
+        assert.equal(vt2After.verdict, 'DENY', 'tenant-beta cache should be untouched');
+    });
+    // (d) flushTenant() -> invalidates one tenant
+    (0, node_test_1.it)('(d) flushTenant() invalidates exactly one tenant', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        const pack = makePack('test-flush', { SSN: 'BLOCK' });
+        const registry = makePackRegistry([pack]);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus, { ttlMs: 60_000 });
+        const ctx = makeActionContext('Write', { content: 'ssn 123-45-6789' });
+        evaluator.evaluate('t1', 'a1', ctx); // warm t1
+        evaluator.evaluate('t2', 'a1', ctx); // warm t2
+        // Remove the pack from registry before flushing
+        registry.deactivate('test-flush');
+        evaluator.flushTenant('t1');
+        const v1 = evaluator.evaluate('t1', 'a1', ctx);
+        const v2 = evaluator.evaluate('t2', 'a1', ctx);
+        assert.equal(v1.verdict, 'ALLOW', 't1 flushed -> resolves fresh with no packs');
+        assert.equal(v2.verdict, 'DENY', 't2 still cached');
+    });
+    // (e) flushAll() -> invalidates everything
+    (0, node_test_1.it)('(e) flushAll() invalidates all tenants', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        const pack = makePack('test-flush-all', { PAN: 'BLOCK' });
+        const registry = makePackRegistry([pack]);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus, { ttlMs: 60_000 });
+        const ctx = makeActionContext('Write', { content: 'pan 4111111111111111' });
+        evaluator.evaluate('ta', 'a1', ctx);
+        evaluator.evaluate('tb', 'a1', ctx);
+        registry.deactivate('test-flush-all');
+        evaluator.flushAll();
+        const va = evaluator.evaluate('ta', 'a1', ctx);
+        const vb = evaluator.evaluate('tb', 'a1', ctx);
+        assert.equal(va.verdict, 'ALLOW', 'ta should re-resolve with no packs');
+        assert.equal(vb.verdict, 'ALLOW', 'tb should re-resolve with no packs');
+    });
+    // (f) BLOCK action -> DENY verdict
+    (0, node_test_1.it)('(f) BLOCK categoryAction produces DENY verdict', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        const pack = makePack('block-pack', { BIOMETRIC: 'BLOCK' });
+        const registry = makePackRegistry([pack]);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus);
+        const v = evaluator.evaluate('tenant-f', 'a1', makeActionContext('Write', { content: 'biometric fingerprint data' }));
+        assert.equal(v.verdict, 'DENY');
+        assert.ok(v.triggeringPackIds.includes('block-pack'));
+    });
+    // (g) WARN action -> PENDING verdict
+    (0, node_test_1.it)('(g) WARN categoryAction produces PENDING verdict', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        const pack = makePack('warn-pack', { HEALTH: 'WARN' });
+        const registry = makePackRegistry([pack]);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus);
+        const v = evaluator.evaluate('tenant-g', 'a1', makeActionContext('Write', { content: 'health record data' }));
+        assert.equal(v.verdict, 'PENDING');
+        assert.ok(v.triggeringPackIds.includes('warn-pack'));
+    });
+    // (h) No classifier hit -> ALLOW verdict
+    (0, node_test_1.it)('(h) no classifier hit produces ALLOW verdict', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        const pack = makePack('benign-pack', { NUCLEAR_LAUNCH_CODES: 'BLOCK' });
+        const registry = makePackRegistry([pack]);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus);
+        // A completely innocuous action with no sensitive content
+        const v = evaluator.evaluate('tenant-h', 'a1', makeActionContext('Read', { path: '/readme.txt' }));
+        assert.equal(v.verdict, 'ALLOW');
+        assert.equal(v.triggeringPackIds.length, 0);
+    });
+    // (i) Multiple packs hitting same action -> strictest-wins (DENY > PENDING > ALLOW)
+    (0, node_test_1.it)('(i) multiple packs: strictest verdict wins (DENY > PENDING > ALLOW)', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        // Pack A: WARN on PHI
+        // Pack B: BLOCK on PHI
+        // Strictest-wins should produce DENY.
+        const packA = makePack('pack-a', { PHI: 'WARN' });
+        const packB = makePack('pack-b', { PHI: 'BLOCK' });
+        const registry = makePackRegistry([packA, packB]);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus);
+        const v = evaluator.evaluate('tenant-i', 'a1', makeActionContext('Write', { content: 'phi medical record' }));
+        assert.equal(v.verdict, 'DENY', 'BLOCK from pack-b should dominate WARN from pack-a');
+        assert.ok(v.triggeringPackIds.includes('pack-b'), 'pack-b should be in triggering packs');
+    });
+    // (j) Latency: 1,000 sequential evaluate() calls with 5-pack tenant config -- p99 <= 50ms
+    (0, node_test_1.it)('(j) latency: p99 <= 50ms over 1,000 sequential calls with 5-pack tenant config', () => {
+        const dir = makeTmpEventDir();
+        const bus = makeEventBus(dir);
+        // Build 5 packs each with 10 categories
+        const packs = [];
+        for (let i = 0; i < 5; i++) {
+            const categoryActions = {};
+            for (let j = 0; j < 10; j++) {
+                categoryActions[`CATEGORY_${i}_${j}`] = j % 2 === 0 ? 'BLOCK' : 'WARN';
+            }
+            packs.push(makePack(`perf-pack-${i}`, categoryActions));
+        }
+        const registry = makePackRegistry(packs);
+        const evaluator = new pack_evaluator_1.PackEvaluator(registry, bus, { ttlMs: 60_000, enableCache: true });
+        const ctx = makeActionContext('Read', { path: '/safe/path.txt' });
+        const latencies = [];
+        // Warm the cache with one call first (not counted in p99)
+        evaluator.evaluate('tenant-j', 'a1', ctx);
+        for (let i = 0; i < 1000; i++) {
+            const t0 = performance.now();
+            evaluator.evaluate('tenant-j', 'a1', ctx);
+            latencies.push(performance.now() - t0);
+        }
+        latencies.sort((a, b) => a - b);
+        const p99Index = Math.floor(latencies.length * 0.99);
+        const p99Ms = latencies[p99Index];
+        console.log(`  [perf] p50=${latencies[Math.floor(latencies.length * 0.50)].toFixed(3)}ms  p99=${p99Ms.toFixed(3)}ms`);
+        assert.ok(p99Ms <= 50, `p99 latency must be <= 50ms (GAP-S3-01 gate). Measured: ${p99Ms.toFixed(3)}ms`);
+    });
+});
+//# sourceMappingURL=pack-evaluator.test.js.map

package/dist/governance/pack-evaluator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-evaluator.test.js","sourceRoot":"","sources":["../../src/governance/pack-evaluator.test.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,yCAAyC;AACzC,2DAA6C;AAC7C,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEzB,qDAA2E;AAC3E,0CAAmE;AACnE,kDAA8C;AAC9C,6CAA4E;AAE5E,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,eAAe;IACtB,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,IAAI,oBAAQ,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAuB;IAC/C,MAAM,QAAQ,GAAG,IAAI,oBAAY,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrB,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,QAAiC,EAAE;IAC9E,OAAO,IAAA,2BAAmB,EAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,QAAQ,CACf,EAAU,EACV,eAAuC,EACvC,YAAqC,EAAE;IAEvC,OAAO;QACL,EAAE;QACF,IAAI,EAAE,QAAQ,EAAE,EAAE;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,aAAa,EAAE,EAAE;QAC9B,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,eAAe,EAAE,EAAE;QACnB,YAAY,EAAE,EAAE;QAChB,cAAc,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QACpF,UAAU,EAAE;YACV,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;YAC5C,eAAe;YACf,kBAAkB,EAAE,KAAK;SAC1B;QACD,eAAe,EAAE;YACf,qBAAqB,EAAE,EAAE;YACzB,oBAAoB,EAAE,EAAE;YACxB,qBAAqB,EAAE,GAAG;YAC1B,SAAS,EAAE,MAAM;SAClB;QACD,cAAc,EAAE;YACd,yBAAyB,EAAE,EAAE;YAC7B,SAAS,EAAE,MAAM;YACjB,kBAAkB,EAAE,EAAE;YACtB,0BAA0B,EAAE,KAAK;SAClC;QACD,UAAU,EAAE,EAAE;QACd,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,IAAA,oBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;IAE7B,6EAA6E;IAC7E,IAAA,cAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAE1C,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEnD,oEAAoE;QACpE,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,iBAAiB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAChH,uEAAuE;QACvE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,6CAA6C;IAC7C,IAAA,cAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzF,2BAA2B;QAC3B,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,iBAAiB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC7G,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEjC,gDAAgD;QAChD,6EAA6E;QAC7E,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,iBAAiB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC7G,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,2DAA2D,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,IAAA,cAAE,EAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEtE,uBAAuB;QACvB,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAExC,yDAAyD;QACzD,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAEpC,uEAAuE;QACvE,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;QACvD,mEAAmE;QACnE,+DAA+D;QAC/D,iFAAiF;QACjF,iCAAiC;QAEjC,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,sCAAsC,CAAC,CAAC;QAEhF,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,uCAAuC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,8CAA8C;IAC9C,IAAA,cAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEtE,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACvE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU;QAC/C,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU;QAE/C,gDAAgD;QAChD,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAElC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE5B,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAE/C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,4CAA4C,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAG,iBAAiB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,IAAA,cAAE,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,QAAQ,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEtE,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC5E,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAEpC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACtC,SAAS,CAAC,QAAQ,EAAE,CAAC;QAErB,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAE/C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,oCAAoC,CAAC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,oCAAoC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,mCAAmC;IACnC,IAAA,cAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEnD,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;QACtH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,IAAA,cAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEnD,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;QAC9G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,IAAA,cAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEnD,0DAA0D;QAC1D,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,iBAAiB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QACnG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,oFAAoF;IACpF,IAAA,cAAE,EAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,sBAAsB;QACtB,uBAAuB;QACvB,sCAAsC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEnD,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;QAC9G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,oDAAoD,CAAC,CAAC;QACtF,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,sCAAsC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,0FAA0F;IAC1F,IAAA,cAAE,EAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE9B,wCAAwC;QACxC,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,eAAe,GAA2B,EAAE,CAAC;YACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YACzE,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,8BAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzF,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAClE,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,0DAA0D;QAC1D,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAE1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC7B,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1C,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAElC,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEtH,MAAM,CAAC,EAAE,CACP,KAAK,IAAI,EAAE,EACX,2DAA2D,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAChF,CAAC;IACJ,CAAC,CAAC,CAAC;AAEL,CAAC,CAAC,CAAC"}

package/dist/governance/pack-inheritance.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Pack Inheritance (W1.3 of F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * Lets a customer declare org-wide rules ONCE at the org-baseline pack
+ * (e.g. "no agent deletes a DB without approval", "no MCP across the
+ * fleet") and inherit them into every per-agent company pack with optional
+ * per-agent additions on top.
+ *
+ * Inheritance semantics:
+ *   - Org-baseline rules apply to ALL agents in the org by default.
+ *   - Per-agent pack adds agent-specific rules.
+ *   - When the same capability class appears in both, STRICTEST-WINS.
+ *   - Composed pack carries provenance pointers to both source pack IDs.
+ *
+ * Composition produces a single CompliancePackWithClassifiers that can be
+ * activated per-agent in PackRegistry. Single-pack activation is intentional
+ * — customers can stay with one pack-per-agent mental model while still
+ * getting org-wide rule propagation under the hood.
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-PACK-INHERITANCE
+ */
+import type { CompliancePack } from '../packs/index.js';
+import type { CompliancePackWithClassifiers, GovernanceAction } from '../classification/pack-driven-classifier.js';
+import { type CapabilityRule } from './company-pack-builder.js';
+export interface OrgBaselinePackInput {
+    orgId: string;
+    /** Stable pack id for the baseline. */
+    id?: string;
+    /** Display name. */
+    name?: string;
+    /** Org-wide rules that apply to every agent in this org. */
+    rules: CapabilityRule[];
+    /** Optional isolation mode (forwarded to buildCompanyPack). */
+    isolation?: 'none' | 'sourced-only' | 'strict';
+}
+/**
+ * Build an org-baseline pack. Conceptually identical to a company pack except
+ * that its rules apply to every agent in the org by inheritance.
+ */
+export declare function buildOrgBaselinePack(input: OrgBaselinePackInput): CompliancePackWithClassifiers;
+/**
+ * Per-agent override that RELAXES a baseline rule. Filed under
+ * F-NEW-PRODUCT-PER-AGENT-OVERRIDE-AUTHORITY (W1.9) per Thomas directive
+ * 2026-05-12: "individual agents can be overridden by the developer or CISO
+ * to allow MCP usage or to delete a database... we're not going to restrict
+ * them. We'll just notify them if they override it and an accident happens,
+ * as long as we have the incident recorded and we have approval for an
+ * employee to change the requirement".
+ *
+ * An override skips strictest-wins for the named capability. The override
+ * itself is gated by employee approval at config time and emitted as a
+ * tamper-evident audit event. If a relaxed action subsequently produces an
+ * incident, the incident binds back to the override via its `overrideId`.
+ */
+export interface PerAgentOverride {
+    /** Capability class being relaxed. */
+    capability: string;
+    /** The relaxed action that replaces the baseline rule for this agent. */
+    action: GovernanceAction;
+    /** Employee identity that approved the override (required, non-empty). */
+    approver: string;
+    /** Free-text justification recorded in the audit chain. */
+    justification: string;
+    /** ISO 8601 timestamp the approval was granted. */
+    approvedAt: string;
+    /** Stable id for binding subsequent incidents back to this override. */
+    overrideId?: string;
+}
+/** Event emitted by composeAgentPack for each override applied. */
+export interface OverrideEvent {
+    overrideId: string;
+    orgId: string;
+    agentId: string;
+    capability: string;
+    baselineAction: GovernanceAction | undefined;
+    relaxedAction: GovernanceAction;
+    approver: string;
+    justification: string;
+    approvedAt: string;
+    composedAt: string;
+}
+export interface AgentPackInput {
+    /** Per-agent pack id (stable, agent-bound). */
+    id: string;
+    /** Display name. */
+    name: string;
+    orgId: string;
+    agentId: string;
+    /** Per-agent additions / overrides on top of the baseline. */
+    rules: CapabilityRule[];
+    /** Optional isolation override for this agent. */
+    isolation?: 'none' | 'sourced-only' | 'strict';
+    /**
+     * W1.9 — explicit per-agent overrides that RELAX baseline rules.
+     * Each override must carry approver + justification + approvedAt.
+     * The composer emits an OverrideEvent and skips strictest-wins for the
+     * named capability.
+     */
+    overrides?: PerAgentOverride[];
+}
+/**
+ * Compose org-baseline + per-agent rules into one pack with strictest-wins
+ * semantics on every category. Tracks provenance via `aliases` so audit tooling
+ * can identify both sources.
+ *
+ * Per-agent overrides (W1.9) skip strictest-wins for the named capability:
+ * the override's relaxed action replaces whatever strictest-wins would have
+ * produced. Each override emits an OverrideEvent via the optional sink.
+ */
+export declare function composeAgentPack(baseline: CompliancePack, agentInput: AgentPackInput, options?: {
+    onOverride?: (event: OverrideEvent) => void;
+}): CompliancePackWithClassifiers;
+/**
+ * Convenience: build baseline + compose into per-agent pack in one call.
+ */
+export declare function buildInheritedAgentPack(baselineInput: OrgBaselinePackInput, agentInput: AgentPackInput): {
+    baseline: CompliancePackWithClassifiers;
+    composed: CompliancePackWithClassifiers;
+};
+export type { CapabilityRule, CompanyPackInput } from './company-pack-builder.js';
+//# sourceMappingURL=pack-inheritance.d.ts.map

package/dist/governance/pack-inheritance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-inheritance.d.ts","sourceRoot":"","sources":["../../src/governance/pack-inheritance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EACV,6BAA6B,EAE7B,gBAAgB,EACjB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,2BAA2B,CAAC;AAUnC,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,QAAQ,CAAC;CAChD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,oBAAoB,GAAG,6BAA6B,CAU/F;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE,gBAAgB,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7C,aAAa,EAAE,gBAAgB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,QAAQ,CAAC;IAC/C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,cAAc,EAC1B,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAA;CAAE,GACxD,6BAA6B,CAoG/B;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,oBAAoB,EACnC,UAAU,EAAE,cAAc,GACzB;IACD,QAAQ,EAAE,6BAA6B,CAAC;IACxC,QAAQ,EAAE,6BAA6B,CAAC;CACzC,CAIA;AA2BD,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/governance/pack-inheritance.js

@@ -0,0 +1,178 @@
+"use strict";
+/**
+ * Pack Inheritance (W1.3 of F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * Lets a customer declare org-wide rules ONCE at the org-baseline pack
+ * (e.g. "no agent deletes a DB without approval", "no MCP across the
+ * fleet") and inherit them into every per-agent company pack with optional
+ * per-agent additions on top.
+ *
+ * Inheritance semantics:
+ *   - Org-baseline rules apply to ALL agents in the org by default.
+ *   - Per-agent pack adds agent-specific rules.
+ *   - When the same capability class appears in both, STRICTEST-WINS.
+ *   - Composed pack carries provenance pointers to both source pack IDs.
+ *
+ * Composition produces a single CompliancePackWithClassifiers that can be
+ * activated per-agent in PackRegistry. Single-pack activation is intentional
+ * — customers can stay with one pack-per-agent mental model while still
+ * getting org-wide rule propagation under the hood.
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-PACK-INHERITANCE
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildOrgBaselinePack = buildOrgBaselinePack;
+exports.composeAgentPack = composeAgentPack;
+exports.buildInheritedAgentPack = buildInheritedAgentPack;
+const company_pack_builder_js_1 = require("./company-pack-builder.js");
+const ACTION_RANK = {
+    ALLOW: 0,
+    LOG: 1,
+    WARN: 2,
+    REQUIRE_APPROVAL: 3,
+    BLOCK: 4,
+};
+/**
+ * Build an org-baseline pack. Conceptually identical to a company pack except
+ * that its rules apply to every agent in the org by inheritance.
+ */
+function buildOrgBaselinePack(input) {
+    const baselineId = input.id ?? `org-baseline-${input.orgId}`;
+    return (0, company_pack_builder_js_1.buildCompanyPack)({
+        id: baselineId,
+        name: input.name ?? `${input.orgId} org-wide baseline`,
+        orgId: input.orgId,
+        rules: input.rules,
+        isolation: input.isolation,
+        description: `Org-baseline pack for ${input.orgId} — inherited by all per-agent packs`,
+    });
+}
+/**
+ * Compose org-baseline + per-agent rules into one pack with strictest-wins
+ * semantics on every category. Tracks provenance via `aliases` so audit tooling
+ * can identify both sources.
+ *
+ * Per-agent overrides (W1.9) skip strictest-wins for the named capability:
+ * the override's relaxed action replaces whatever strictest-wins would have
+ * produced. Each override emits an OverrideEvent via the optional sink.
+ */
+function composeAgentPack(baseline, agentInput, options) {
+    validateOverrides(agentInput.overrides);
+    const agentDelta = (0, company_pack_builder_js_1.buildCompanyPack)({
+        id: agentInput.id,
+        name: agentInput.name,
+        orgId: agentInput.orgId,
+        rules: agentInput.rules,
+        isolation: agentInput.isolation,
+        description: `Per-agent pack for ${agentInput.agentId} (inherits from ${baseline.id})`,
+    });
+    // Strictest-wins merge of categoryActions.
+    const baselineActions = baseline.dataPolicy?.categoryActions ?? {};
+    const agentActions = agentDelta.dataPolicy.categoryActions ?? {};
+    const mergedActions = {};
+    // W1.9 override lookup — capability -> override descriptor.
+    const overrideMap = new Map();
+    for (const ov of agentInput.overrides ?? []) {
+        overrideMap.set(ov.capability, ov);
+    }
+    const composedAt = new Date().toISOString();
+    const overrideEvents = [];
+    const allKeys = new Set([
+        ...Object.keys(baselineActions),
+        ...Object.keys(agentActions),
+        ...overrideMap.keys(),
+    ]);
+    for (const key of allKeys) {
+        const ov = overrideMap.get(key);
+        if (ov) {
+            // W1.9 — override skips strictest-wins for this capability.
+            mergedActions[key] = ov.action;
+            const overrideId = ov.overrideId ?? `${agentInput.agentId}::${key}::${ov.approvedAt}`;
+            overrideEvents.push({
+                overrideId,
+                orgId: agentInput.orgId,
+                agentId: agentInput.agentId,
+                capability: key,
+                baselineAction: baselineActions[key],
+                relaxedAction: ov.action,
+                approver: ov.approver,
+                justification: ov.justification,
+                approvedAt: ov.approvedAt,
+                composedAt,
+            });
+            continue;
+        }
+        const a = baselineActions[key];
+        const b = agentActions[key];
+        if (a === undefined)
+            mergedActions[key] = b;
+        else if (b === undefined)
+            mergedActions[key] = a;
+        else {
+            const actA = a;
+            const actB = b;
+            const rankA = ACTION_RANK[actA] ?? 0;
+            const rankB = ACTION_RANK[actB] ?? 0;
+            mergedActions[key] = rankB > rankA ? actB : actA;
+        }
+    }
+    if (options?.onOverride) {
+        for (const ev of overrideEvents)
+            options.onOverride(ev);
+    }
+    // Merge classifiers: prefer agent's classifier if present, otherwise baseline's.
+    const baselineClassifiers = baseline.categoryClassifiers ?? {};
+    const agentClassifiers = agentDelta.categoryClassifiers ?? {};
+    const mergedClassifiers = { ...baselineClassifiers };
+    for (const [k, v] of Object.entries(agentClassifiers)) {
+        mergedClassifiers[k] = v;
+    }
+    // Strictest isolation across the two packs.
+    const baselineIso = baseline.requiresActionIsolation;
+    const agentIso = agentDelta.requiresActionIsolation;
+    const isolationRank = { none: 0, 'sourced-only': 1, strict: 2 };
+    const isoA = isolationRank[String(baselineIso ?? 'none')] ?? 0;
+    const isoB = isolationRank[String(agentIso ?? 'none')] ?? 0;
+    const mergedIsolation = isoB > isoA ? agentIso : baselineIso;
+    const composed = {
+        ...agentDelta,
+        aliases: [baseline.id, agentDelta.id],
+        description: `Composed pack: agent ${agentInput.agentId} extends baseline ${baseline.id}. ` +
+            `Strictest-wins on overlapping rules.`,
+        dataPolicy: {
+            ...agentDelta.dataPolicy,
+            scanCategories: Object.keys(mergedActions),
+            categoryActions: mergedActions,
+        },
+        categoryClassifiers: mergedClassifiers,
+        requiresActionIsolation: mergedIsolation,
+    };
+    return composed;
+}
+/**
+ * Convenience: build baseline + compose into per-agent pack in one call.
+ */
+function buildInheritedAgentPack(baselineInput, agentInput) {
+    const baseline = buildOrgBaselinePack(baselineInput);
+    const composed = composeAgentPack(baseline, agentInput);
+    return { baseline, composed };
+}
+function validateOverrides(overrides) {
+    if (!overrides)
+        return;
+    for (const ov of overrides) {
+        if (!ov.approver || ov.approver.trim() === '') {
+            throw new Error(`PerAgentOverride for capability '${ov.capability}' is missing an approver. ` +
+                'Overrides require explicit employee approval per F-NEW-PRODUCT-PER-AGENT-OVERRIDE-AUTHORITY.');
+        }
+        if (!ov.justification || ov.justification.trim() === '') {
+            throw new Error(`PerAgentOverride for capability '${ov.capability}' is missing a justification. ` +
+                'Overrides must record the reason in the audit chain.');
+        }
+        if (!ov.approvedAt || !/^\d{4}-\d{2}-\d{2}T/.test(ov.approvedAt)) {
+            throw new Error(`PerAgentOverride for capability '${ov.capability}' has invalid approvedAt. ` +
+                'Expect ISO 8601 timestamp.');
+        }
+    }
+}
+//# sourceMappingURL=pack-inheritance.js.map

package/dist/governance/pack-inheritance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-inheritance.js","sourceRoot":"","sources":["../../src/governance/pack-inheritance.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAsCH,oDAUC;AA0ED,4CAwGC;AAKD,0DAUC;AAzOD,uEAImC;AAEnC,MAAM,WAAW,GAAqC;IACpD,KAAK,EAAE,CAAC;IACR,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;IACP,gBAAgB,EAAE,CAAC;IACnB,KAAK,EAAE,CAAC;CACT,CAAC;AAcF;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,KAA2B;IAC9D,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,IAAI,gBAAgB,KAAK,CAAC,KAAK,EAAE,CAAC;IAC7D,OAAO,IAAA,0CAAgB,EAAC;QACtB,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,oBAAoB;QACtD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,yBAAyB,KAAK,CAAC,KAAK,qCAAqC;KACvF,CAAC,CAAC;AACL,CAAC;AAiED;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAC9B,QAAwB,EACxB,UAA0B,EAC1B,OAAyD;IAEzD,iBAAiB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAA,0CAAgB,EAAC;QAClC,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,WAAW,EAAE,sBAAsB,UAAU,CAAC,OAAO,mBAAmB,QAAQ,CAAC,EAAE,GAAG;KACvF,CAAC,CAAC;IAEH,2CAA2C;IAC3C,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,CAAC;IACnE,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,eAAe,IAAI,EAAE,CAAC;IACjE,MAAM,aAAa,GAAqC,EAAE,CAAC;IAE3D,4DAA4D;IAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IACxD,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC5C,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAoB,EAAE,CAAC;IAE3C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;QAC/B,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;QAC5B,GAAG,WAAW,CAAC,IAAI,EAAE;KACtB,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,EAAE,CAAC;YACP,4DAA4D;YAC5D,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;YAC/B,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,IAAI,GAAG,UAAU,CAAC,OAAO,KAAK,GAAG,KAAK,EAAE,CAAC,UAAU,EAAE,CAAC;YACtF,cAAc,CAAC,IAAI,CAAC;gBAClB,UAAU;gBACV,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,UAAU,EAAE,GAAG;gBACf,cAAc,EAAE,eAAe,CAAC,GAAG,CAAiC;gBACpE,aAAa,EAAE,EAAE,CAAC,MAAM;gBACxB,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,aAAa,EAAE,EAAE,CAAC,aAAa;gBAC/B,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,UAAU;aACX,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,SAAS;YAAE,aAAa,CAAC,GAAG,CAAC,GAAG,CAAqB,CAAC;aAC3D,IAAI,CAAC,KAAK,SAAS;YAAE,aAAa,CAAC,GAAG,CAAC,GAAG,CAAqB,CAAC;aAChE,CAAC;YACJ,MAAM,IAAI,GAAG,CAAqB,CAAC;YACnC,MAAM,IAAI,GAAG,CAAqB,CAAC;YACnC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,aAAa,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;QACxB,KAAK,MAAM,EAAE,IAAI,cAAc;YAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,iFAAiF;IACjF,MAAM,mBAAmB,GACtB,QAA0C,CAAC,mBAAmB,IAAI,EAAE,CAAC;IACxE,MAAM,gBAAgB,GAAG,UAAU,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAC9D,MAAM,iBAAiB,GAAwB,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC1E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtD,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,4CAA4C;IAC5C,MAAM,WAAW,GAAG,QAAQ,CAAC,uBAAuB,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,uBAAuB,CAAC;IACpD,MAAM,aAAa,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACxF,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;IAE7D,MAAM,QAAQ,GAAkC;QAC9C,GAAG,UAAU;QACb,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QACrC,WAAW,EACT,wBAAwB,UAAU,CAAC,OAAO,qBAAqB,QAAQ,CAAC,EAAE,IAAI;YAC9E,sCAAsC;QACxC,UAAU,EAAE;YACV,GAAG,UAAU,CAAC,UAAU;YACxB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1C,eAAe,EAAE,aAAa;SAC/B;QACD,mBAAmB,EAAE,iBAAiB;QACtC,uBAAuB,EAAE,eAAe;KACzC,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAgB,uBAAuB,CACrC,aAAmC,EACnC,UAA0B;IAK1B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAyC;IAClE,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,oCAAoC,EAAE,CAAC,UAAU,4BAA4B;gBAC3E,8FAA8F,CACjG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CACb,oCAAoC,EAAE,CAAC,UAAU,gCAAgC;gBAC/E,sDAAsD,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,oCAAoC,EAAE,CAAC,UAAU,4BAA4B;gBAC3E,4BAA4B,CAC/B,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/governance/pack-inheritance.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * RED-GREEN tests for F-NEW-PRODUCT-PACK-INHERITANCE (W1.3 of
+ * F-NEW-PRODUCT-AGENT-VISIBILITY-CLUSTER-2026-05-12).
+ *
+ * Customer-path probe:
+ *   - Org-baseline declares "no MCP (BLOCK)" and "shell-exec (REQUIRE_APPROVAL)"
+ *   - Per-agent pack declares "shell-exec (BLOCK)" and "filesystem-write (REQUIRE_APPROVAL)"
+ *   - Composed pack:
+ *       capability:mcp -> BLOCK            (from baseline)
+ *       capability:shell-exec -> BLOCK     (strictest-wins; agent override)
+ *       capability:filesystem-write -> REQUIRE_APPROVAL  (from agent)
+ *   - Verify with real PackEvaluator: BLOCK -> DENY, REQUIRE_APPROVAL -> PENDING
+ *
+ * @connexum/ai-governance  F-NEW-PRODUCT-PACK-INHERITANCE
+ */
+export {};
+//# sourceMappingURL=pack-inheritance.test.d.ts.map

package/dist/governance/pack-inheritance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-inheritance.test.d.ts","sourceRoot":"","sources":["../../src/governance/pack-inheritance.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}