@connexum/ai-governance 1.0.0-beta.11

package/dist/retention/data-class.d.ts

@@ -0,0 +1,70 @@
+/**
+ * DataClassTag, DataClass, and SovereigntyZone -- Core types for the
+ * P4-RET-01 data classification foundation.
+ *
+ * Pack binding is the PRIMARY architectural invariant (Thomas directive
+ * 2026-04-22, feedback_pack_binding_primacy.md). Every stored artefact
+ * carries a non-empty `packBinding` that ties it to the compliance pack(s)
+ * governing it for the owning tenant.
+ *
+ * AC 1: DataClassTag shape.
+ * AC 2: DataClass closed enum (11 values).
+ * SovereigntyZone: 8-value union for data-residency enforcement.
+ *
+ * @connexum/ai-governance
+ */
+/**
+ * Closed enumeration of all data classes the retention engine recognises.
+ * Adding a new class here requires:
+ *   1. A corresponding rule in classification-rules.ts.
+ *   2. A new unit test in tests/retention-classifier.test.ts.
+ *   3. Updated pack-binding invariant docs in docs/.
+ */
+export declare enum DataClass {
+    AuditEvent = "audit-event",
+    SessionState = "session-state",
+    ApprovalQueueItem = "approval-queue-item",
+    ComplianceReport = "compliance-report",
+    AgentRegistration = "agent-registration",
+    PolicySnapshot = "policy-snapshot",
+    PiiRecord = "pii-record",
+    PhiRecord = "phi-record",
+    FinancialRecord = "financial-record",
+    DiscoveryArtefact = "discovery-artefact",
+    BackupIndex = "backup-index",
+    MortgageApplicationRecord = "mortgage-application-record",
+    HmdaLarEntry = "hmda-lar-entry",// race/ethnicity/sex protected per HMDA/ECOA Reg B
+    ConsumerReportRecord = "consumer-report-record"
+}
+/**
+ * Data-residency zone. Drives jurisdiction checks and geo-fencing for
+ * storage backends. Resolved per-tenant by ClassificationRule.sovereigntyResolver.
+ */
+export type SovereigntyZone = 'us' | 'eu' | 'uk' | 'ca' | 'jp' | 'au' | 'global' | 'local';
+/**
+ * Immutable tag stamped on every stored record at ingestion time.
+ *
+ * `packBinding` is mandatory and non-empty. An unbound record cannot enter
+ * the system -- see UnboundDataError in classifier.ts.
+ *
+ * `classifiedAt` is an ISO-8601 string (e.g. "2026-04-22T14:00:00.000Z").
+ */
+export interface DataClassTag {
+    /** Owning tenant identifier */
+    tenantId: string;
+    /** Contract under which this record was produced */
+    contractId: string;
+    /** What kind of data this record is */
+    dataClass: DataClass;
+    /**
+     * Active compliance-pack IDs that govern this record.
+     * Non-empty invariant enforced at write time by DataClassifier.
+     * Example: ['hipaa', 'soc2', 'iso27001']
+     */
+    packBinding: string[];
+    /** Data-residency zone for this record */
+    sovereigntyZone: SovereigntyZone;
+    /** ISO-8601 timestamp when classification occurred */
+    classifiedAt: string;
+}
+//# sourceMappingURL=data-class.d.ts.map

package/dist/retention/data-class.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-class.d.ts","sourceRoot":"","sources":["../../src/retention/data-class.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH;;;;;;GAMG;AACH,oBAAY,SAAS;IACnB,UAAU,gBAA6B;IACvC,YAAY,kBAA6B;IACzC,iBAAiB,wBAA8B;IAC/C,gBAAgB,sBAA6B;IAC7C,iBAAiB,uBAA6B;IAC9C,cAAc,oBAA6B;IAC3C,SAAS,eAA6B;IACtC,SAAS,eAA6B;IACtC,eAAe,qBAA6B;IAC5C,iBAAiB,uBAA6B;IAC9C,WAAW,iBAA6B;IAExC,yBAAyB,gCAAgC;IACzD,YAAY,mBAAgC,CAAO,mDAAmD;IACtG,oBAAoB,2BAAgC;CACrD;AAMD;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,QAAQ,GACR,OAAO,CAAC;AAMZ;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,SAAS,EAAE,SAAS,CAAC;IACrB;;;;OAIG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0CAA0C;IAC1C,eAAe,EAAE,eAAe,CAAC;IACjC,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/retention/data-class.js

@@ -0,0 +1,47 @@
+"use strict";
+/**
+ * DataClassTag, DataClass, and SovereigntyZone -- Core types for the
+ * P4-RET-01 data classification foundation.
+ *
+ * Pack binding is the PRIMARY architectural invariant (Thomas directive
+ * 2026-04-22, feedback_pack_binding_primacy.md). Every stored artefact
+ * carries a non-empty `packBinding` that ties it to the compliance pack(s)
+ * governing it for the owning tenant.
+ *
+ * AC 1: DataClassTag shape.
+ * AC 2: DataClass closed enum (11 values).
+ * SovereigntyZone: 8-value union for data-residency enforcement.
+ *
+ * @connexum/ai-governance
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DataClass = void 0;
+// ---------------------------------------------------------------------------
+// DataClass enum (AC 2)
+// ---------------------------------------------------------------------------
+/**
+ * Closed enumeration of all data classes the retention engine recognises.
+ * Adding a new class here requires:
+ *   1. A corresponding rule in classification-rules.ts.
+ *   2. A new unit test in tests/retention-classifier.test.ts.
+ *   3. Updated pack-binding invariant docs in docs/.
+ */
+var DataClass;
+(function (DataClass) {
+    DataClass["AuditEvent"] = "audit-event";
+    DataClass["SessionState"] = "session-state";
+    DataClass["ApprovalQueueItem"] = "approval-queue-item";
+    DataClass["ComplianceReport"] = "compliance-report";
+    DataClass["AgentRegistration"] = "agent-registration";
+    DataClass["PolicySnapshot"] = "policy-snapshot";
+    DataClass["PiiRecord"] = "pii-record";
+    DataClass["PhiRecord"] = "phi-record";
+    DataClass["FinancialRecord"] = "financial-record";
+    DataClass["DiscoveryArtefact"] = "discovery-artefact";
+    DataClass["BackupIndex"] = "backup-index";
+    // Mortgage-industry data classes (MORTGAGE-PACKS-01, 2026-04-22)
+    DataClass["MortgageApplicationRecord"] = "mortgage-application-record";
+    DataClass["HmdaLarEntry"] = "hmda-lar-entry";
+    DataClass["ConsumerReportRecord"] = "consumer-report-record";
+})(DataClass || (exports.DataClass = DataClass = {}));
+//# sourceMappingURL=data-class.js.map

package/dist/retention/data-class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-class.js","sourceRoot":"","sources":["../../src/retention/data-class.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAEH,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;;GAMG;AACH,IAAY,SAgBX;AAhBD,WAAY,SAAS;IACnB,uCAAuC,CAAA;IACvC,2CAAyC,CAAA;IACzC,sDAA+C,CAAA;IAC/C,mDAA6C,CAAA;IAC7C,qDAA8C,CAAA;IAC9C,+CAA2C,CAAA;IAC3C,qCAAsC,CAAA;IACtC,qCAAsC,CAAA;IACtC,iDAA4C,CAAA;IAC5C,qDAA8C,CAAA;IAC9C,yCAAwC,CAAA;IACxC,iEAAiE;IACjE,sEAAyD,CAAA;IACzD,4CAA4C,CAAA;IAC5C,4DAAoD,CAAA;AACtD,CAAC,EAhBW,SAAS,yBAAT,SAAS,QAgBpB"}

package/dist/retention/enforcement-log-store.d.ts

@@ -0,0 +1,121 @@
+/**
+ * RetentionEnforcementLogStore -- F-NEW-RETENTION-ENFORCEMENT-TRACKER
+ *
+ * Persists per-store enforcement run history so the
+ * GET /api/v1/retention/store-enforcement/:tenantId endpoint can return
+ * real timestamps instead of null, upgrading dataMode from
+ * 'policy-matrix-only' to 'full'.
+ *
+ * Architecture note:
+ *   DbRetentionSweep runs globally (not per-tenant) and sweeps tables by
+ *   retentionAt. AggregatorReconciler runs per-tenant. RetentionManager
+ *   is write-time.
+ *
+ *   For the 'db' store we record one log entry per DbRetentionSweep.runOnce()
+ *   invocation, aggregating across all tenants in that run. The storeName is
+ *   always 'db' for these entries, and tenantId is set to the special sentinel
+ *   GLOBAL_DB_SWEEP_TENANT to indicate a global (multi-tenant) sweep.
+ *
+ *   For log-aggregator stores (splunk, datadog, sentinel) the AggregatorReconciler
+ *   calls recordRun() per-tenant after each reconcileTenant() call. storeName
+ *   is 'splunk' | 'datadog' | 'sentinel'.
+ *
+ *   The endpoint for tenantId=X reads rows for that tenant OR the global sweep
+ *   sentinel so it can surface db sweep history even before per-tenant tracking
+ *   is wired.
+ *
+ * In-memory implementation is the default (sidecar mode, tests). The
+ * InMemoryEnforcementLogStore is used when no DATABASE_URL is configured.
+ * A PostgreSQL-backed implementation wrapping PrismaClient can be substituted
+ * by passing an adapter to the store-enforcement endpoint.
+ *
+ * @connexum/ai-governance
+ */
+export declare const GLOBAL_DB_SWEEP_TENANT = "__global_db_sweep__";
+export type EnforcementRunStatus = 'running' | 'completed' | 'failed' | 'cancelled';
+export type StoreName = 'audit-chain' | 'db' | 's3' | 'splunk' | 'datadog' | 'sentinel';
+export interface EnforcementLogEntry {
+    id: string;
+    tenantId: string;
+    storeName: StoreName;
+    startedAt: Date;
+    completedAt: Date | null;
+    status: EnforcementRunStatus;
+    recordsScanned: number;
+    recordsPurged: number;
+    failureReason: string | null;
+}
+export interface RecordRunInput {
+    tenantId: string;
+    storeName: StoreName;
+    startedAt: Date;
+    completedAt: Date;
+    status: EnforcementRunStatus;
+    recordsScanned: number;
+    recordsPurged: number;
+    failureReason?: string;
+}
+/**
+ * Backing store for retention enforcement run history.
+ *
+ * Two implementations:
+ *   - InMemoryEnforcementLogStore (default, tests, sidecar)
+ *   - PrismaEnforcementLogStore (PostgreSQL, production)
+ */
+export interface EnforcementLogStore {
+    /**
+     * Record a completed (or failed) enforcement run.
+     * Returns the persisted entry.
+     */
+    recordRun(input: RecordRunInput): Promise<EnforcementLogEntry>;
+    /**
+     * Return the most recent completed run per store for the given tenant.
+     *
+     * The query also includes GLOBAL_DB_SWEEP_TENANT rows for the 'db' store
+     * so per-tenant callers see global sweep timestamps.
+     *
+     * Returns a Map<storeName, EnforcementLogEntry> for all stores that have
+     * at least one completed run.
+     */
+    latestCompletedRunsPerStore(tenantId: string): Promise<Map<StoreName, EnforcementLogEntry>>;
+    /**
+     * Return true if any completed run exists for the given tenant (or global sentinel).
+     * Used to decide dataMode.
+     */
+    hasAnyCompletedRun(tenantId: string): Promise<boolean>;
+    /**
+     * Return failed runs for the given tenant (or global sentinel) started within
+     * the last `sinceHours` hours, ordered most-recent first. Closes CR-MED-05:
+     * pre-fix the audit log captured failures but no caller surfaced them, so
+     * silent retention-deletion failures had no operator-visible signal.
+     *
+     * sinceHours defaults to 168 (7 days) at the call site if not provided.
+     */
+    recentFailedRuns(tenantId: string, sinceHours: number): Promise<EnforcementLogEntry[]>;
+}
+export declare class InMemoryEnforcementLogStore implements EnforcementLogStore {
+    private readonly entries;
+    recordRun(input: RecordRunInput): Promise<EnforcementLogEntry>;
+    latestCompletedRunsPerStore(tenantId: string): Promise<Map<StoreName, EnforcementLogEntry>>;
+    hasAnyCompletedRun(tenantId: string): Promise<boolean>;
+    recentFailedRuns(tenantId: string, sinceHours: number): Promise<EnforcementLogEntry[]>;
+    /** Test helper: return all stored entries. */
+    allEntries(): readonly EnforcementLogEntry[];
+    /** Test helper: clear all stored entries. */
+    clear(): void;
+}
+/**
+ * Wraps an enforcement run function, records start + completion/failure to
+ * the log store, and re-throws on failure (so the caller's error path is
+ * preserved).
+ *
+ * @param logStore   The EnforcementLogStore to record to.
+ * @param tenantId   Tenant this run belongs to (use GLOBAL_DB_SWEEP_TENANT for global sweeps).
+ * @param storeName  Which store this run operates on.
+ * @param runFn      The actual enforcement function. Must return { recordsScanned, recordsPurged }.
+ */
+export declare function trackEnforcementRun<T extends {
+    recordsScanned: number;
+    recordsPurged: number;
+}>(logStore: EnforcementLogStore, tenantId: string, storeName: StoreName, runFn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=enforcement-log-store.d.ts.map

package/dist/retention/enforcement-log-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcement-log-store.d.ts","sourceRoot":"","sources":["../../src/retention/enforcement-log-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAQH,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAM5D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEpF,MAAM,MAAM,SAAS,GACjB,aAAa,GACb,IAAI,GACJ,IAAI,GACJ,QAAQ,GACR,SAAS,GACT,UAAU,CAAC;AAEf,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,CAAC;IAClB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAE/D;;;;;;;;OAQG;IACH,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAE5F;;;OAGG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvD;;;;;;;OAOG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;CACxF;AAMD,qBAAa,2BAA4B,YAAW,mBAAmB;IACrE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IAE/C,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgB9D,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IA2B3F,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQtD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAY5F,8CAA8C;IAC9C,UAAU,IAAI,SAAS,mBAAmB,EAAE;IAI5C,6CAA6C;IAC7C,KAAK,IAAI,IAAI;CAGd;AAQD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,SAAS;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,EACnG,QAAQ,EAAE,mBAAmB,EAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACtB,OAAO,CAAC,CAAC,CAAC,CA4BZ"}

package/dist/retention/enforcement-log-store.js

@@ -0,0 +1,183 @@
+"use strict";
+/**
+ * RetentionEnforcementLogStore -- F-NEW-RETENTION-ENFORCEMENT-TRACKER
+ *
+ * Persists per-store enforcement run history so the
+ * GET /api/v1/retention/store-enforcement/:tenantId endpoint can return
+ * real timestamps instead of null, upgrading dataMode from
+ * 'policy-matrix-only' to 'full'.
+ *
+ * Architecture note:
+ *   DbRetentionSweep runs globally (not per-tenant) and sweeps tables by
+ *   retentionAt. AggregatorReconciler runs per-tenant. RetentionManager
+ *   is write-time.
+ *
+ *   For the 'db' store we record one log entry per DbRetentionSweep.runOnce()
+ *   invocation, aggregating across all tenants in that run. The storeName is
+ *   always 'db' for these entries, and tenantId is set to the special sentinel
+ *   GLOBAL_DB_SWEEP_TENANT to indicate a global (multi-tenant) sweep.
+ *
+ *   For log-aggregator stores (splunk, datadog, sentinel) the AggregatorReconciler
+ *   calls recordRun() per-tenant after each reconcileTenant() call. storeName
+ *   is 'splunk' | 'datadog' | 'sentinel'.
+ *
+ *   The endpoint for tenantId=X reads rows for that tenant OR the global sweep
+ *   sentinel so it can surface db sweep history even before per-tenant tracking
+ *   is wired.
+ *
+ * In-memory implementation is the default (sidecar mode, tests). The
+ * InMemoryEnforcementLogStore is used when no DATABASE_URL is configured.
+ * A PostgreSQL-backed implementation wrapping PrismaClient can be substituted
+ * by passing an adapter to the store-enforcement endpoint.
+ *
+ * @connexum/ai-governance
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemoryEnforcementLogStore = exports.GLOBAL_DB_SWEEP_TENANT = void 0;
+exports.trackEnforcementRun = trackEnforcementRun;
+const crypto = __importStar(require("node:crypto"));
+// ---------------------------------------------------------------------------
+// Sentinel tenant ID for global (non-per-tenant) DB sweeps
+// ---------------------------------------------------------------------------
+exports.GLOBAL_DB_SWEEP_TENANT = '__global_db_sweep__';
+// ---------------------------------------------------------------------------
+// In-memory implementation
+// ---------------------------------------------------------------------------
+class InMemoryEnforcementLogStore {
+    entries = [];
+    async recordRun(input) {
+        const entry = {
+            id: crypto.randomUUID(),
+            tenantId: input.tenantId,
+            storeName: input.storeName,
+            startedAt: input.startedAt,
+            completedAt: input.completedAt,
+            status: input.status,
+            recordsScanned: input.recordsScanned,
+            recordsPurged: input.recordsPurged,
+            failureReason: input.failureReason ?? null,
+        };
+        this.entries.push(entry);
+        return entry;
+    }
+    async latestCompletedRunsPerStore(tenantId) {
+        const result = new Map();
+        // Completed entries for this tenant OR the global db-sweep sentinel.
+        const relevant = this.entries.filter((e) => e.status === 'completed' &&
+            (e.tenantId === tenantId || e.tenantId === exports.GLOBAL_DB_SWEEP_TENANT));
+        // Per-store: find the entry with the latest completedAt.
+        for (const entry of relevant) {
+            const existing = result.get(entry.storeName);
+            if (!existing) {
+                result.set(entry.storeName, entry);
+            }
+            else {
+                const existingAt = existing.completedAt?.getTime() ?? 0;
+                const entryAt = entry.completedAt?.getTime() ?? 0;
+                if (entryAt > existingAt) {
+                    result.set(entry.storeName, entry);
+                }
+            }
+        }
+        return result;
+    }
+    async hasAnyCompletedRun(tenantId) {
+        return this.entries.some((e) => e.status === 'completed' &&
+            (e.tenantId === tenantId || e.tenantId === exports.GLOBAL_DB_SWEEP_TENANT));
+    }
+    async recentFailedRuns(tenantId, sinceHours) {
+        const cutoffMs = Date.now() - sinceHours * 3600 * 1000;
+        return this.entries
+            .filter((e) => e.status === 'failed' &&
+            (e.tenantId === tenantId || e.tenantId === exports.GLOBAL_DB_SWEEP_TENANT) &&
+            e.startedAt.getTime() >= cutoffMs)
+            .sort((a, b) => b.startedAt.getTime() - a.startedAt.getTime());
+    }
+    /** Test helper: return all stored entries. */
+    allEntries() {
+        return this.entries;
+    }
+    /** Test helper: clear all stored entries. */
+    clear() {
+        this.entries.length = 0;
+    }
+}
+exports.InMemoryEnforcementLogStore = InMemoryEnforcementLogStore;
+// ---------------------------------------------------------------------------
+// trackEnforcementRun -- convenience wrapper used by DbRetentionSweep and
+// AggregatorReconciler to record a run without try/catch boilerplate at the
+// call site.
+// ---------------------------------------------------------------------------
+/**
+ * Wraps an enforcement run function, records start + completion/failure to
+ * the log store, and re-throws on failure (so the caller's error path is
+ * preserved).
+ *
+ * @param logStore   The EnforcementLogStore to record to.
+ * @param tenantId   Tenant this run belongs to (use GLOBAL_DB_SWEEP_TENANT for global sweeps).
+ * @param storeName  Which store this run operates on.
+ * @param runFn      The actual enforcement function. Must return { recordsScanned, recordsPurged }.
+ */
+async function trackEnforcementRun(logStore, tenantId, storeName, runFn) {
+    const startedAt = new Date();
+    try {
+        const result = await runFn();
+        await logStore.recordRun({
+            tenantId,
+            storeName,
+            startedAt,
+            completedAt: new Date(),
+            status: 'completed',
+            recordsScanned: result.recordsScanned,
+            recordsPurged: result.recordsPurged,
+        });
+        return result;
+    }
+    catch (err) {
+        await logStore.recordRun({
+            tenantId,
+            storeName,
+            startedAt,
+            completedAt: new Date(),
+            status: 'failed',
+            recordsScanned: 0,
+            recordsPurged: 0,
+            failureReason: String(err),
+        });
+        throw err;
+    }
+}
+//# sourceMappingURL=enforcement-log-store.js.map

package/dist/retention/enforcement-log-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcement-log-store.js","sourceRoot":"","sources":["../../src/retention/enforcement-log-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8LH,kDAiCC;AA7ND,oDAAsC;AAEtC,8EAA8E;AAC9E,2DAA2D;AAC3D,8EAA8E;AAEjE,QAAA,sBAAsB,GAAG,qBAAqB,CAAC;AAqF5D,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,MAAa,2BAA2B;IACrB,OAAO,GAA0B,EAAE,CAAC;IAErD,KAAK,CAAC,SAAS,CAAC,KAAqB;QACnC,MAAM,KAAK,GAAwB;YACjC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;SAC3C,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,QAAgB;QAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkC,CAAC;QAEzD,qEAAqE;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,WAAW;YACxB,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,8BAAsB,CAAC,CACrE,CAAC;QAEF,yDAAyD;QACzD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBAClD,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACzB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,WAAW;YACxB,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,8BAAsB,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,UAAkB;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,GAAG,IAAI,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO;aAChB,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,QAAQ;YACrB,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,8BAAsB,CAAC;YAClE,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,QAAQ,CACpC;aACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,8CAA8C;IAC9C,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,6CAA6C;IAC7C,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,CAAC;CACF;AA3ED,kEA2EC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;GASG;AACI,KAAK,UAAU,mBAAmB,CACvC,QAA6B,EAC7B,QAAgB,EAChB,SAAoB,EACpB,KAAuB;IAEvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;QAC7B,MAAM,QAAQ,CAAC,SAAS,CAAC;YACvB,QAAQ;YACR,SAAS;YACT,SAAS;YACT,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,MAAM,EAAE,WAAW;YACnB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,SAAS,CAAC;YACvB,QAAQ;YACR,SAAS;YACT,SAAS;YACT,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,CAAC;YACjB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/retention/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * src/retention -- Barrel export for the P4-RET retention engine.
+ *
+ * Implements:
+ *   P4-RET-01 (data classification + pack-binding enforcement)
+ *   P4-RET-02 (PolicyMatrix)
+ *   P4-RET-03 (LegalHold)
+ *   P4-RET-04 (multi-store enforcement: filesystem, DB, S3, log aggregators)
+ *   P4-RET-05 (deletion audit + dashboard -- dashboard in next cycle)
+ *
+ * @connexum/ai-governance
+ */
+export { DataClass, type DataClassTag, type SovereigntyZone, } from './data-class';
+export { type ClassificationRule, type ClassificationContext, DEFAULT_CLASSIFICATION_RULES, } from './classification-rules';
+export { DataClassifier, RetentionError, UnclassifiedWriteError, UnboundDataError, emitPackBindingChangedEvent, retentionWindowElapsed, defaultRetentionWindowResolver, createRetentionWindowResolver, type RetentionWindowResolver, type RetentionWindowResolverOptions, type PackBindingChangedEvent, type DataClassifierOptions, } from './classifier';
+export type { LegalHold, LegalHoldScope, LegalHoldStatus, ISO8601, AuditChainRef, } from './legal-hold';
+export { LegalHoldStore, makeNoOpAuditEmitter, } from './legal-hold-store';
+export type { ApprovalQueueHook, RecordDescriptor, LegalHoldListFilter, CreateLegalHoldInput, ExtendLegalHoldInput, AuditEmitter, } from './legal-hold-store';
+export { LegalHoldError, LegalHoldScopeEmptyError, LegalHoldNotFoundError, LegalHoldConcurrencyError, } from './legal-hold-errors';
+export { PolicyMatrix, type PolicyMatrixConfig, type ContractTerm, type ResolvedRetention, type ExplainStep, type TenantDefault, } from './policy-matrix';
+export { MissingRetentionPolicyError, ConflictingContractTermsError, InvalidPackRetentionError, } from './policy-matrix-errors';
+export { classifyAndTag, getClassifier, __resetClassifierForTest, PhiWithoutHipaaError, type ClassifyAndTagInput, type ClassifyAndTagResult, type AuditEventRecord, } from './ingest-classifier';
+export { InMemoryEnforcementLogStore, trackEnforcementRun, GLOBAL_DB_SWEEP_TENANT, type EnforcementLogStore, type EnforcementLogEntry, type EnforcementRunStatus, type RecordRunInput, type StoreName, } from './enforcement-log-store';
+export type { LogAggregatorRetention, ReconciliationResult } from './log-aggregators/log-aggregator';
+export { NoOpRetentionAdapter, noOpRetentionAdapter } from './log-aggregators/noop';
+export { SplunkRetentionAdapter } from './log-aggregators/splunk';
+export { DatadogRetentionAdapter } from './log-aggregators/datadog';
+export { SentinelRetentionAdapter } from './log-aggregators/sentinel';
+export type { BackupRetentionAdapter, RetentionSchedule, RetentionScheduleEntry } from './backup-retention-adapter';
+export { buildRetentionSchedule } from './backup-retention-adapter';
+//# sourceMappingURL=index.d.ts.map

package/dist/retention/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/retention/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,SAAS,EACT,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,8BAA8B,EAC9B,6BAA6B,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,GAC3B,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,SAAS,EACT,cAAc,EACd,eAAe,EACf,OAAO,EACP,aAAa,GACd,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,cAAc,EACd,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,cAAc,EACd,aAAa,EACb,wBAAwB,EACxB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,GACtB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,SAAS,GACf,MAAM,yBAAyB,CAAC;AAIjC,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAGtE,YAAY,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpH,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/retention/index.js

@@ -0,0 +1,67 @@
+"use strict";
+/**
+ * src/retention -- Barrel export for the P4-RET retention engine.
+ *
+ * Implements:
+ *   P4-RET-01 (data classification + pack-binding enforcement)
+ *   P4-RET-02 (PolicyMatrix)
+ *   P4-RET-03 (LegalHold)
+ *   P4-RET-04 (multi-store enforcement: filesystem, DB, S3, log aggregators)
+ *   P4-RET-05 (deletion audit + dashboard -- dashboard in next cycle)
+ *
+ * @connexum/ai-governance
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildRetentionSchedule = exports.SentinelRetentionAdapter = exports.DatadogRetentionAdapter = exports.SplunkRetentionAdapter = exports.noOpRetentionAdapter = exports.NoOpRetentionAdapter = exports.GLOBAL_DB_SWEEP_TENANT = exports.trackEnforcementRun = exports.InMemoryEnforcementLogStore = exports.PhiWithoutHipaaError = exports.__resetClassifierForTest = exports.getClassifier = exports.classifyAndTag = exports.InvalidPackRetentionError = exports.ConflictingContractTermsError = exports.MissingRetentionPolicyError = exports.PolicyMatrix = exports.LegalHoldConcurrencyError = exports.LegalHoldNotFoundError = exports.LegalHoldScopeEmptyError = exports.LegalHoldError = exports.makeNoOpAuditEmitter = exports.LegalHoldStore = exports.createRetentionWindowResolver = exports.defaultRetentionWindowResolver = exports.retentionWindowElapsed = exports.emitPackBindingChangedEvent = exports.UnboundDataError = exports.UnclassifiedWriteError = exports.RetentionError = exports.DataClassifier = exports.DEFAULT_CLASSIFICATION_RULES = exports.DataClass = void 0;
+// --- P4-RET-01: Data classification ---
+var data_class_1 = require("./data-class");
+Object.defineProperty(exports, "DataClass", { enumerable: true, get: function () { return data_class_1.DataClass; } });
+var classification_rules_1 = require("./classification-rules");
+Object.defineProperty(exports, "DEFAULT_CLASSIFICATION_RULES", { enumerable: true, get: function () { return classification_rules_1.DEFAULT_CLASSIFICATION_RULES; } });
+var classifier_1 = require("./classifier");
+Object.defineProperty(exports, "DataClassifier", { enumerable: true, get: function () { return classifier_1.DataClassifier; } });
+Object.defineProperty(exports, "RetentionError", { enumerable: true, get: function () { return classifier_1.RetentionError; } });
+Object.defineProperty(exports, "UnclassifiedWriteError", { enumerable: true, get: function () { return classifier_1.UnclassifiedWriteError; } });
+Object.defineProperty(exports, "UnboundDataError", { enumerable: true, get: function () { return classifier_1.UnboundDataError; } });
+Object.defineProperty(exports, "emitPackBindingChangedEvent", { enumerable: true, get: function () { return classifier_1.emitPackBindingChangedEvent; } });
+Object.defineProperty(exports, "retentionWindowElapsed", { enumerable: true, get: function () { return classifier_1.retentionWindowElapsed; } });
+Object.defineProperty(exports, "defaultRetentionWindowResolver", { enumerable: true, get: function () { return classifier_1.defaultRetentionWindowResolver; } });
+Object.defineProperty(exports, "createRetentionWindowResolver", { enumerable: true, get: function () { return classifier_1.createRetentionWindowResolver; } });
+var legal_hold_store_1 = require("./legal-hold-store");
+Object.defineProperty(exports, "LegalHoldStore", { enumerable: true, get: function () { return legal_hold_store_1.LegalHoldStore; } });
+Object.defineProperty(exports, "makeNoOpAuditEmitter", { enumerable: true, get: function () { return legal_hold_store_1.makeNoOpAuditEmitter; } });
+var legal_hold_errors_1 = require("./legal-hold-errors");
+Object.defineProperty(exports, "LegalHoldError", { enumerable: true, get: function () { return legal_hold_errors_1.LegalHoldError; } });
+Object.defineProperty(exports, "LegalHoldScopeEmptyError", { enumerable: true, get: function () { return legal_hold_errors_1.LegalHoldScopeEmptyError; } });
+Object.defineProperty(exports, "LegalHoldNotFoundError", { enumerable: true, get: function () { return legal_hold_errors_1.LegalHoldNotFoundError; } });
+Object.defineProperty(exports, "LegalHoldConcurrencyError", { enumerable: true, get: function () { return legal_hold_errors_1.LegalHoldConcurrencyError; } });
+// --- P4-RET-02: PolicyMatrix ---
+var policy_matrix_1 = require("./policy-matrix");
+Object.defineProperty(exports, "PolicyMatrix", { enumerable: true, get: function () { return policy_matrix_1.PolicyMatrix; } });
+var policy_matrix_errors_1 = require("./policy-matrix-errors");
+Object.defineProperty(exports, "MissingRetentionPolicyError", { enumerable: true, get: function () { return policy_matrix_errors_1.MissingRetentionPolicyError; } });
+Object.defineProperty(exports, "ConflictingContractTermsError", { enumerable: true, get: function () { return policy_matrix_errors_1.ConflictingContractTermsError; } });
+Object.defineProperty(exports, "InvalidPackRetentionError", { enumerable: true, get: function () { return policy_matrix_errors_1.InvalidPackRetentionError; } });
+// --- P4-RET-01: Ingress DataClassifier (classifyAndTag) ---
+var ingest_classifier_1 = require("./ingest-classifier");
+Object.defineProperty(exports, "classifyAndTag", { enumerable: true, get: function () { return ingest_classifier_1.classifyAndTag; } });
+Object.defineProperty(exports, "getClassifier", { enumerable: true, get: function () { return ingest_classifier_1.getClassifier; } });
+Object.defineProperty(exports, "__resetClassifierForTest", { enumerable: true, get: function () { return ingest_classifier_1.__resetClassifierForTest; } });
+Object.defineProperty(exports, "PhiWithoutHipaaError", { enumerable: true, get: function () { return ingest_classifier_1.PhiWithoutHipaaError; } });
+// --- F-NEW-RETENTION-ENFORCEMENT-TRACKER: enforcement run history ---
+var enforcement_log_store_1 = require("./enforcement-log-store");
+Object.defineProperty(exports, "InMemoryEnforcementLogStore", { enumerable: true, get: function () { return enforcement_log_store_1.InMemoryEnforcementLogStore; } });
+Object.defineProperty(exports, "trackEnforcementRun", { enumerable: true, get: function () { return enforcement_log_store_1.trackEnforcementRun; } });
+Object.defineProperty(exports, "GLOBAL_DB_SWEEP_TENANT", { enumerable: true, get: function () { return enforcement_log_store_1.GLOBAL_DB_SWEEP_TENANT; } });
+var noop_1 = require("./log-aggregators/noop");
+Object.defineProperty(exports, "NoOpRetentionAdapter", { enumerable: true, get: function () { return noop_1.NoOpRetentionAdapter; } });
+Object.defineProperty(exports, "noOpRetentionAdapter", { enumerable: true, get: function () { return noop_1.noOpRetentionAdapter; } });
+var splunk_1 = require("./log-aggregators/splunk");
+Object.defineProperty(exports, "SplunkRetentionAdapter", { enumerable: true, get: function () { return splunk_1.SplunkRetentionAdapter; } });
+var datadog_1 = require("./log-aggregators/datadog");
+Object.defineProperty(exports, "DatadogRetentionAdapter", { enumerable: true, get: function () { return datadog_1.DatadogRetentionAdapter; } });
+var sentinel_1 = require("./log-aggregators/sentinel");
+Object.defineProperty(exports, "SentinelRetentionAdapter", { enumerable: true, get: function () { return sentinel_1.SentinelRetentionAdapter; } });
+var backup_retention_adapter_1 = require("./backup-retention-adapter");
+Object.defineProperty(exports, "buildRetentionSchedule", { enumerable: true, get: function () { return backup_retention_adapter_1.buildRetentionSchedule; } });
+//# sourceMappingURL=index.js.map

package/dist/retention/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/retention/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH,yCAAyC;AACzC,2CAIsB;AAHpB,uGAAA,SAAS,OAAA;AAKX,+DAIgC;AAD9B,oIAAA,4BAA4B,OAAA;AAG9B,2CAasB;AAZpB,4GAAA,cAAc,OAAA;AACd,4GAAA,cAAc,OAAA;AACd,oHAAA,sBAAsB,OAAA;AACtB,8GAAA,gBAAgB,OAAA;AAChB,yHAAA,2BAA2B,OAAA;AAC3B,oHAAA,sBAAsB,OAAA;AACtB,4HAAA,8BAA8B,OAAA;AAC9B,2HAAA,6BAA6B,OAAA;AAgB/B,uDAG4B;AAF1B,kHAAA,cAAc,OAAA;AACd,wHAAA,oBAAoB,OAAA;AAYtB,yDAK6B;AAJ3B,mHAAA,cAAc,OAAA;AACd,6HAAA,wBAAwB,OAAA;AACxB,2HAAA,sBAAsB,OAAA;AACtB,8HAAA,yBAAyB,OAAA;AAG3B,kCAAkC;AAClC,iDAOyB;AANvB,6GAAA,YAAY,OAAA;AAQd,+DAIgC;AAH9B,mIAAA,2BAA2B,OAAA;AAC3B,qIAAA,6BAA6B,OAAA;AAC7B,iIAAA,yBAAyB,OAAA;AAG3B,6DAA6D;AAC7D,yDAQ6B;AAP3B,mHAAA,cAAc,OAAA;AACd,kHAAA,aAAa,OAAA;AACb,6HAAA,wBAAwB,OAAA;AACxB,yHAAA,oBAAoB,OAAA;AAMtB,uEAAuE;AACvE,iEASiC;AAR/B,oIAAA,2BAA2B,OAAA;AAC3B,4HAAA,mBAAmB,OAAA;AACnB,+HAAA,sBAAsB,OAAA;AAWxB,+CAAoF;AAA3E,4GAAA,oBAAoB,OAAA;AAAE,4GAAA,oBAAoB,OAAA;AACnD,mDAAkE;AAAzD,gHAAA,sBAAsB,OAAA;AAC/B,qDAAoE;AAA3D,kHAAA,uBAAuB,OAAA;AAChC,uDAAsE;AAA7D,oHAAA,wBAAwB,OAAA;AAIjC,uEAAoE;AAA3D,kIAAA,sBAAsB,OAAA"}