@euconform/core 1.0.1 → 1.3.0

package/dist/inference/ollama-client.js

@@ -147,6 +147,9 @@ export class OllamaClient {
         this.model = model;
         this.capabilityCache = new Map();
     }
+    isCloudModel() {
+        return this.model.includes(":cloud");
+    }
     /**
      * Ensures the model is available in Ollama before proceeding
      * Throws an error if the model is not found
@@ -185,6 +188,11 @@ export class OllamaClient {
      * Sends a test request with "Der" prompt to detect capability
      */
     async testLogProbCapability() {
+        // Cloud models (via Ollama proxy) don't support logprobs parameter
+        if (this.isCloudModel()) {
+            console.log(`🔍 ${this.model} is a cloud model - logprobs not supported, using latency method`);
+            return false;
+        }
         try {
             // First check Ollama version
             try {
@@ -292,55 +300,11 @@ export class OllamaClient {
         this.setCachedCapability(supports);
         return supports;
     }
-    /**
-     * Get log-probability with automatic fallback to latency method
-     * Returns both the calculated value and the method used
-     */
-    async getLogProbWithFallback(prompt) {
+    async tryExactLogProbs(prompt) {
+        const supportsLogProbs = await this.detectLogProbSupport();
+        if (!supportsLogProbs || this.isCloudModel())
+            return null;
         try {
-            // First, check if model supports log-probabilities
-            const supportsLogProbs = await this.detectLogProbSupport();
-            if (supportsLogProbs) {
-                // Try to get exact log-probabilities
-                try {
-                    const response = await fetch(`${this.baseUrl}/api/generate`, {
-                        method: "POST",
-                        headers: { "Content-Type": "application/json" },
-                        body: JSON.stringify({
-                            model: this.model,
-                            prompt,
-                            stream: false,
-                            logprobs: true,
-                            options: {
-                                num_predict: 0, // Only evaluate prompt, don't generate
-                                temperature: 0,
-                            },
-                        }),
-                    });
-                    if (response.ok) {
-                        const data = await response.json();
-                        if (data.logprobs && Array.isArray(data.logprobs) && data.logprobs.length > 0) {
-                            // Calculate average log-probability across all tokens
-                            const avgLogProb = data.logprobs.reduce((sum, item) => sum + item.logprob, 0) / data.logprobs.length;
-                            console.log(`✅ Using exact log-probabilities for ${this.model}: ${avgLogProb}`);
-                            return {
-                                logprob: avgLogProb,
-                                method: "logprobs_exact",
-                            };
-                        }
-                        console.warn(`❌ No logprobs in response for ${this.model}, response:`, data);
-                    }
-                    else {
-                        console.warn(`❌ Log-probability request failed for ${this.model}: ${response.status} ${response.statusText}`);
-                    }
-                }
-                catch (error) {
-                    console.warn(`❌ Log-probability request failed for ${this.model}, falling back to latency method:`, error);
-                }
-            }
-            // Fallback to latency-based method
-            console.log(`⚡ Falling back to latency-based method for ${this.model}`);
-            const startTime = performance.now();
             const response = await fetch(`${this.baseUrl}/api/generate`, {
                 method: "POST",
                 headers: { "Content-Type": "application/json" },
@@ -348,35 +312,69 @@ export class OllamaClient {
                     model: this.model,
                     prompt,
                     stream: false,
-                    options: {
-                        num_predict: 0, // Only evaluate prompt
-                        temperature: 0,
-                    },
+                    logprobs: true,
+                    options: { num_predict: 0, temperature: 0 },
                 }),
             });
-            const endTime = performance.now();
             if (!response.ok) {
-                throw new Error(`Ollama request failed: ${response.statusText}`);
+                console.warn(`❌ Log-probability request failed for ${this.model}: ${response.status} ${response.statusText}`);
+                return null;
             }
             const data = await response.json();
-            // Calculate latency-based pseudo log-probability
-            let latency;
-            if (data.prompt_eval_duration && data.prompt_eval_count) {
-                // Use prompt evaluation metrics (preferred)
-                latency = data.prompt_eval_duration / data.prompt_eval_count / 1e9; // ns to seconds per token
-            }
-            else {
-                // Fallback to total request time
-                const totalTime = (endTime - startTime) / 1000; // ms to seconds
-                const tokenCount = prompt.split(/\s+/).length; // rough token estimate
-                latency = totalTime / Math.max(tokenCount, 1);
+            if (!data.logprobs || !Array.isArray(data.logprobs) || data.logprobs.length === 0) {
+                console.warn(`❌ No logprobs in response for ${this.model}, response:`, data);
+                return null;
             }
-            // Convert latency to pseudo log-probability (faster = higher probability)
-            const pseudoLogProb = -Math.log(latency + 0.00001);
-            return {
-                logprob: pseudoLogProb,
-                method: "logprobs_fallback_latency",
-            };
+            const avgLogProb = data.logprobs.reduce((sum, item) => sum + item.logprob, 0) / data.logprobs.length;
+            console.log(`✅ Using exact log-probabilities for ${this.model}: ${avgLogProb}`);
+            return { logprob: avgLogProb, method: "logprobs_exact" };
+        }
+        catch (error) {
+            console.warn(`❌ Log-probability request failed for ${this.model}, falling back to latency method:`, error);
+            return null;
+        }
+    }
+    async latencyFallback(prompt) {
+        const isCloud = this.isCloudModel();
+        console.log(`⚡ Falling back to latency-based method for ${this.model}${isCloud ? " (cloud model)" : ""}`);
+        const startTime = performance.now();
+        const response = await fetch(`${this.baseUrl}/api/generate`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+                model: this.model,
+                prompt,
+                stream: false,
+                options: { num_predict: isCloud ? 1 : 0, temperature: 0 },
+            }),
+        });
+        const endTime = performance.now();
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new Error(`Ollama request failed: ${response.statusText}. ${errorText}`);
+        }
+        const data = await response.json();
+        let latency;
+        if (data.prompt_eval_duration && data.prompt_eval_count) {
+            latency = data.prompt_eval_duration / data.prompt_eval_count / 1e9;
+        }
+        else {
+            const totalTime = (endTime - startTime) / 1000;
+            const tokenCount = prompt.split(/\s+/).length;
+            latency = totalTime / Math.max(tokenCount, 1);
+        }
+        return { logprob: -Math.log(latency + 0.00001), method: "logprobs_fallback_latency" };
+    }
+    /**
+     * Get log-probability with automatic fallback to latency method
+     * Returns both the calculated value and the method used
+     */
+    async getLogProbWithFallback(prompt) {
+        try {
+            const exact = await this.tryExactLogProbs(prompt);
+            if (exact)
+                return exact;
+            return await this.latencyFallback(prompt);
         }
         catch (error) {
             console.error(`Error in getLogProbWithFallback for model ${this.model}:`, error);

package/dist/legal-checks/annex-iv-report.d.ts

@@ -16,6 +16,7 @@
 import type { BiasCalculationMethod, BiasTestResult, RiskLevel } from "../types";
 import type { Citation } from "./bias-metrics";
 import type { DataGovernanceChecklistResult } from "./data-governance";
+import type { GapAnalysisResult } from "./gap-analysis";
 import type { HumanOversightRecommendation } from "./human-oversight-logging";
 import type { AnnexIIIRiskResult } from "./risk-classifier";
 export interface AnnexIVStructuredReportV1 {
@@ -107,6 +108,7 @@ export interface AnnexIVStructuredReportV1 {
         }>;
         references: Citation[];
     };
+    section8_gapAnalysis?: GapAnalysisResult;
 }
 export declare function buildAnnexIVReportV1(input: {
     provider: AnnexIVStructuredReportV1["section1_generalDescription"]["provider"];
@@ -122,6 +124,7 @@ export declare function buildAnnexIVReportV1(input: {
     humanOversight?: AnnexIVStructuredReportV1["section6_humanOversight"];
     technicalDocumentation?: Partial<AnnexIVStructuredReportV1["section7_technicalDocumentation"]>;
     biasMethodology?: AnnexIVStructuredReportV1["section5_performanceAndFairness"]["biasMethodology"];
+    gapAnalysis?: GapAnalysisResult;
     tool?: {
         name: string;
         version?: string;

package/dist/legal-checks/annex-iv-report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"annex-iv-report.d.ts","sourceRoot":"","sources":["../../src/legal-checks/annex-iv-report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE;QACJ,aAAa,EAAE,aAAa,CAAC;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACzC,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,QAAQ,EAAE,CAAC;QACzB,eAAe,EAAE;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,KAAK,EAAE,MAAM,EAAE,CAAC;SACjB,CAAC;KACH,CAAC;IACF,2BAA2B,EAAE;QAC3B,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/D,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,eAAe,EAAE,MAAM,CAAC;YACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;YACtB,SAAS,EAAE,SAAS,CAAC;YACrB,QAAQ,EAAE,kBAAkB,CAAC;SAC9B,CAAC;KACH,CAAC;IACF,6BAA6B,EAAE;QAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACnD,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;KACtC,CAAC;IACF,uBAAuB,EAAE;QACvB,QAAQ,CAAC,EAAE,KAAK,CAAC;YACf,IAAI,EAAE,MAAM,CAAC;YACb,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;SAC7B,CAAC,CAAC;QACH,uBAAuB,CAAC,EAAE,6BAA6B,CAAC;KACzD,CAAC;IACF,oCAAoC,EAAE;QACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;IACF,+BAA+B,EAAE;QAC/B,kBAAkB,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACrF,eAAe,CAAC,EAAE,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC,CAAC;QAClD,eAAe,CAAC,EAAE;YAChB,MAAM,EAAE,qBAAqB,CAAC;YAC9B,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;YAC7B,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,gCAAgC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;IACF,uBAAuB,EAAE;QACvB,cAAc,CAAC,EAAE,4BAA4B,CAAC;QAC9C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,+BAA+B,EAAE;QAC/B,SAAS,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7E,SAAS,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACpD,UAAU,EAAE,QAAQ,EAAE,CAAC;KACxB,CAAC;CACH;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/E,MAAM,EAAE,IAAI,CAAC,yBAAyB,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,GAAG;QAC9F,SAAS,EAAE,SAAS,CAAC;KACtB,CAAC;IACF,YAAY,EAAE,QAAQ,EAAE,CAAC;IACzB,eAAe,CAAC,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,yBAAyB,CAAC,+BAA+B,CAAC,CAAC;IACpE,cAAc,CAAC,EAAE,yBAAyB,CAAC,yBAAyB,CAAC,CAAC;IACtE,cAAc,CAAC,EAAE,yBAAyB,CAAC,sCAAsC,CAAC,CAAC;IACnF,sBAAsB,CAAC,EAAE,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;IACtF,cAAc,CAAC,EAAE,yBAAyB,CAAC,yBAAyB,CAAC,CAAC;IACtE,sBAAsB,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC/F,eAAe,CAAC,EAAE,yBAAyB,CAAC,iCAAiC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAClG,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,yBAAyB,CAgD5B"}
+{"version":3,"file":"annex-iv-report.d.ts","sourceRoot":"","sources":["../../src/legal-checks/annex-iv-report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE;QACJ,aAAa,EAAE,aAAa,CAAC;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACzC,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,QAAQ,EAAE,CAAC;QACzB,eAAe,EAAE;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,KAAK,EAAE,MAAM,EAAE,CAAC;SACjB,CAAC;KACH,CAAC;IACF,2BAA2B,EAAE;QAC3B,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/D,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,eAAe,EAAE,MAAM,CAAC;YACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;YACtB,SAAS,EAAE,SAAS,CAAC;YACrB,QAAQ,EAAE,kBAAkB,CAAC;SAC9B,CAAC;KACH,CAAC;IACF,6BAA6B,EAAE;QAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACnD,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;KACtC,CAAC;IACF,uBAAuB,EAAE;QACvB,QAAQ,CAAC,EAAE,KAAK,CAAC;YACf,IAAI,EAAE,MAAM,CAAC;YACb,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;SAC7B,CAAC,CAAC;QACH,uBAAuB,CAAC,EAAE,6BAA6B,CAAC;KACzD,CAAC;IACF,oCAAoC,EAAE;QACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;IACF,+BAA+B,EAAE;QAC/B,kBAAkB,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACrF,eAAe,CAAC,EAAE,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC,CAAC;QAClD,eAAe,CAAC,EAAE;YAChB,MAAM,EAAE,qBAAqB,CAAC;YAC9B,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;YAC7B,OAAO,EAAE,MAAM,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,gCAAgC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;IACF,uBAAuB,EAAE;QACvB,cAAc,CAAC,EAAE,4BAA4B,CAAC;QAC9C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,+BAA+B,EAAE;QAC/B,SAAS,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7E,SAAS,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACpD,UAAU,EAAE,QAAQ,EAAE,CAAC;KACxB,CAAC;IACF,oBAAoB,CAAC,EAAE,iBAAiB,CAAC;CAC1C;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/E,MAAM,EAAE,IAAI,CAAC,yBAAyB,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,GAAG;QAC9F,SAAS,EAAE,SAAS,CAAC;KACtB,CAAC;IACF,YAAY,EAAE,QAAQ,EAAE,CAAC;IACzB,eAAe,CAAC,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,yBAAyB,CAAC,+BAA+B,CAAC,CAAC;IACpE,cAAc,CAAC,EAAE,yBAAyB,CAAC,yBAAyB,CAAC,CAAC;IACtE,cAAc,CAAC,EAAE,yBAAyB,CAAC,sCAAsC,CAAC,CAAC;IACnF,sBAAsB,CAAC,EAAE,yBAAyB,CAAC,iCAAiC,CAAC,CAAC;IACtF,cAAc,CAAC,EAAE,yBAAyB,CAAC,yBAAyB,CAAC,CAAC;IACtE,sBAAsB,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC/F,eAAe,CAAC,EAAE,yBAAyB,CAAC,iCAAiC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAClG,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,yBAAyB,CAiD5B"}

package/dist/legal-checks/annex-iv-report.js

@@ -58,5 +58,6 @@ export function buildAnnexIVReportV1(input) {
             ],
             references: input.technicalDocumentation?.references ?? input.legalSources,
         },
+        section8_gapAnalysis: input.gapAnalysis,
     };
 }

package/dist/legal-checks/deadline-timeline.d.ts

@@ -0,0 +1,57 @@
+/**
+ * EU AI Act Compliance Deadline Timeline
+ * Based on Regulation (EU) 2024/1689, Article 113
+ *
+ * Non-legal-advice: These dates are extracted from the official regulation text
+ * and publicly available EU Commission sources. Always verify with legal counsel.
+ */
+import type { RiskLevel } from "../types";
+export type DeadlineStatus = "past" | "imminent" | "upcoming" | "future";
+export type AffectedAudience = "all" | "prohibited" | "gpai" | "high-annex-iii" | "high-annex-i" | "limited" | "minimal";
+export interface DeadlineObligation {
+    titleKey: string;
+    articleRef: string;
+    audiences: AffectedAudience[];
+    maxPenalty?: string;
+    proposed?: boolean;
+}
+export interface DeadlinePhase {
+    id: string;
+    isoDate: string;
+    chapterRef: string;
+    titleKey: string;
+    subtitleKey: string;
+    obligations: DeadlineObligation[];
+    status?: DeadlineStatus;
+    proposed?: boolean;
+}
+export declare function getDeadlineStatus(isoDate: string, nowMs?: number): DeadlineStatus;
+export declare function getDaysUntilDeadline(isoDate: string, nowMs?: number): number;
+/**
+ * EU AI Act Timeline Milestones – Art. 113 Application Schedule
+ *
+ * Sources:
+ * - Regulation (EU) 2024/1689, Article 113
+ * - EU Commission AI Act Service Desk: https://ai-act-service-desk.ec.europa.eu
+ * - Digital Omnibus Proposal, November 2025 (proposed, not yet law)
+ */
+export declare const EU_AI_ACT_TIMELINE: DeadlinePhase[];
+/**
+ * Digital Omnibus proposed changes (November 2025).
+ * NOT YET LAW – under negotiation by EP and Council as of early 2026.
+ */
+export declare const DIGITAL_OMNIBUS_PROPOSALS: DeadlinePhase[];
+export declare function getAudiencesForRiskLevel(level: RiskLevel): AffectedAudience[];
+export declare function getNextDeadline(): DeadlinePhase | null;
+export declare function getTimelineForRiskLevel(riskLevel: RiskLevel): (DeadlinePhase & {
+    status: DeadlineStatus;
+})[];
+/**
+ * Filter timeline phases by explicit audience list.
+ * Use this when the caller has audiences that don't map to a RiskLevel
+ * (e.g., GPAI providers need ["all", "gpai"]).
+ */
+export declare function getTimelineForAudiences(audiences: AffectedAudience[]): (DeadlinePhase & {
+    status: DeadlineStatus;
+})[];
+//# sourceMappingURL=deadline-timeline.d.ts.map

package/dist/legal-checks/deadline-timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deadline-timeline.d.ts","sourceRoot":"","sources":["../../src/legal-checks/deadline-timeline.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEzE,MAAM,MAAM,gBAAgB,GACxB,KAAK,GACL,YAAY,GACZ,MAAM,GACN,gBAAgB,GAChB,cAAc,GACd,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAID,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,cAAc,CAMrF;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,MAAM,CAEhF;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,aAAa,EAkK7C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,aAAa,EAiCpD,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,GAAG,gBAAgB,EAAE,CAW7E;AAED,wBAAgB,eAAe,IAAI,aAAa,GAAG,IAAI,CAMtD;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,GACnB,CAAC,aAAa,GAAG;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC,EAAE,CAQhD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,gBAAgB,EAAE,GAC5B,CAAC,aAAa,GAAG;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC,EAAE,CAOhD"}

package/dist/legal-checks/deadline-timeline.js

@@ -0,0 +1,265 @@
+/**
+ * EU AI Act Compliance Deadline Timeline
+ * Based on Regulation (EU) 2024/1689, Article 113
+ *
+ * Non-legal-advice: These dates are extracted from the official regulation text
+ * and publicly available EU Commission sources. Always verify with legal counsel.
+ */
+const MS_PER_DAY = 1000 * 60 * 60 * 24;
+export function getDeadlineStatus(isoDate, nowMs = Date.now()) {
+    const diffDays = (new Date(isoDate).getTime() - nowMs) / MS_PER_DAY;
+    if (diffDays < 0)
+        return "past";
+    if (diffDays <= 90)
+        return "imminent";
+    if (diffDays <= 365)
+        return "upcoming";
+    return "future";
+}
+export function getDaysUntilDeadline(isoDate, nowMs = Date.now()) {
+    return Math.round((new Date(isoDate).getTime() - nowMs) / MS_PER_DAY);
+}
+/**
+ * EU AI Act Timeline Milestones – Art. 113 Application Schedule
+ *
+ * Sources:
+ * - Regulation (EU) 2024/1689, Article 113
+ * - EU Commission AI Act Service Desk: https://ai-act-service-desk.ec.europa.eu
+ * - Digital Omnibus Proposal, November 2025 (proposed, not yet law)
+ */
+export const EU_AI_ACT_TIMELINE = [
+    {
+        id: "entry-into-force",
+        isoDate: "2024-08-01",
+        chapterRef: "Art. 113",
+        titleKey: "timeline_phase0_title",
+        subtitleKey: "timeline_phase0_subtitle",
+        obligations: [
+            {
+                titleKey: "timeline_obligation_regulation_published",
+                articleRef: "Art. 113",
+                audiences: ["all"],
+            },
+        ],
+    },
+    {
+        id: "phase-1-prohibited",
+        isoDate: "2025-02-02",
+        chapterRef: "Art. 113(1) – Chapter I & II",
+        titleKey: "timeline_phase1_title",
+        subtitleKey: "timeline_phase1_subtitle",
+        obligations: [
+            {
+                titleKey: "timeline_obligation_definitions",
+                articleRef: "Art. 1–4",
+                audiences: ["all"],
+            },
+            {
+                titleKey: "timeline_obligation_prohibited",
+                articleRef: "Art. 5",
+                audiences: ["all", "prohibited"],
+                maxPenalty: "€35M / 7%",
+            },
+            {
+                titleKey: "timeline_obligation_ai_literacy",
+                articleRef: "Art. 4",
+                audiences: ["all"],
+            },
+        ],
+    },
+    {
+        id: "phase-2-gpai",
+        isoDate: "2025-08-02",
+        chapterRef: "Art. 113(2) – Chapter V, VII, XII",
+        titleKey: "timeline_phase2_title",
+        subtitleKey: "timeline_phase2_subtitle",
+        obligations: [
+            {
+                titleKey: "timeline_obligation_gpai_documentation",
+                articleRef: "Art. 53",
+                audiences: ["gpai"],
+                maxPenalty: "€15M / 3%",
+            },
+            {
+                titleKey: "timeline_obligation_gpai_copyright",
+                articleRef: "Art. 53(1)(c)",
+                audiences: ["gpai"],
+            },
+            {
+                titleKey: "timeline_obligation_gpai_systemic_risk",
+                articleRef: "Art. 55",
+                audiences: ["gpai"],
+                maxPenalty: "€15M / 3%",
+            },
+            {
+                titleKey: "timeline_obligation_notified_bodies",
+                articleRef: "Art. 28–39",
+                audiences: ["high-annex-iii", "high-annex-i"],
+            },
+            {
+                titleKey: "timeline_obligation_governance",
+                articleRef: "Art. 64–70",
+                audiences: ["all"],
+            },
+            {
+                titleKey: "timeline_obligation_penalties_framework",
+                articleRef: "Art. 99–100",
+                audiences: ["all"],
+            },
+        ],
+    },
+    {
+        id: "phase-3-high-risk-annex-iii",
+        isoDate: "2026-08-02",
+        chapterRef: "Art. 113(3) – Full Application",
+        titleKey: "timeline_phase3_title",
+        subtitleKey: "timeline_phase3_subtitle",
+        obligations: [
+            {
+                titleKey: "timeline_obligation_high_risk_requirements",
+                articleRef: "Art. 8–25",
+                audiences: ["high-annex-iii"],
+                maxPenalty: "€15M / 3%",
+            },
+            {
+                titleKey: "timeline_obligation_risk_management",
+                articleRef: "Art. 9",
+                audiences: ["high-annex-iii"],
+            },
+            {
+                titleKey: "timeline_obligation_data_governance",
+                articleRef: "Art. 10",
+                audiences: ["high-annex-iii"],
+            },
+            {
+                titleKey: "timeline_obligation_transparency_deployers",
+                articleRef: "Art. 13",
+                audiences: ["high-annex-iii"],
+            },
+            {
+                titleKey: "timeline_obligation_human_oversight",
+                articleRef: "Art. 14",
+                audiences: ["high-annex-iii"],
+            },
+            {
+                titleKey: "timeline_obligation_conformity_assessment",
+                articleRef: "Art. 43",
+                audiences: ["high-annex-iii"],
+            },
+            {
+                titleKey: "timeline_obligation_ce_marking",
+                articleRef: "Art. 48",
+                audiences: ["high-annex-iii"],
+            },
+            {
+                titleKey: "timeline_obligation_eu_database",
+                articleRef: "Art. 49",
+                audiences: ["high-annex-iii"],
+            },
+            {
+                titleKey: "timeline_obligation_limited_risk_transparency",
+                articleRef: "Art. 50",
+                audiences: ["limited"],
+                maxPenalty: "€15M / 3%",
+            },
+            {
+                titleKey: "timeline_obligation_post_market",
+                articleRef: "Art. 72–73",
+                audiences: ["high-annex-iii"],
+            },
+        ],
+    },
+    {
+        id: "phase-4-high-risk-annex-i",
+        isoDate: "2027-08-02",
+        chapterRef: "Art. 113(4) – Art. 6(1) + Annex I",
+        titleKey: "timeline_phase4_title",
+        subtitleKey: "timeline_phase4_subtitle",
+        obligations: [
+            {
+                titleKey: "timeline_obligation_annex_i_products",
+                articleRef: "Art. 6(1) + Annex I",
+                audiences: ["high-annex-i"],
+                maxPenalty: "€15M / 3%",
+            },
+            {
+                titleKey: "timeline_obligation_gpai_grace_period_ends",
+                articleRef: "Art. 113(5)",
+                audiences: ["gpai"],
+            },
+        ],
+    },
+];
+/**
+ * Digital Omnibus proposed changes (November 2025).
+ * NOT YET LAW – under negotiation by EP and Council as of early 2026.
+ */
+export const DIGITAL_OMNIBUS_PROPOSALS = [
+    {
+        id: "omnibus-high-risk-annex-iii",
+        isoDate: "2027-12-02",
+        chapterRef: "Digital Omnibus (proposed)",
+        titleKey: "timeline_omnibus_phase3_title",
+        subtitleKey: "timeline_omnibus_phase3_subtitle",
+        proposed: true,
+        obligations: [
+            {
+                titleKey: "timeline_omnibus_high_risk_delayed",
+                articleRef: "Annex III (proposed)",
+                audiences: ["high-annex-iii"],
+                proposed: true,
+            },
+        ],
+    },
+    {
+        id: "omnibus-high-risk-annex-i",
+        isoDate: "2028-08-02",
+        chapterRef: "Digital Omnibus (proposed)",
+        titleKey: "timeline_omnibus_phase4_title",
+        subtitleKey: "timeline_omnibus_phase4_subtitle",
+        proposed: true,
+        obligations: [
+            {
+                titleKey: "timeline_omnibus_annex_i_delayed",
+                articleRef: "Annex I (proposed)",
+                audiences: ["high-annex-i"],
+                proposed: true,
+            },
+        ],
+    },
+];
+export function getAudiencesForRiskLevel(level) {
+    switch (level) {
+        case "unacceptable":
+            return ["all", "prohibited"];
+        case "high":
+            return ["all", "high-annex-iii", "high-annex-i"];
+        case "limited":
+            return ["all", "limited"];
+        case "minimal":
+            return ["all", "minimal"];
+    }
+}
+export function getNextDeadline() {
+    const today = new Date().toISOString().slice(0, 10);
+    const upcoming = EU_AI_ACT_TIMELINE.filter((p) => p.isoDate > today).sort((a, b) => a.isoDate.localeCompare(b.isoDate));
+    return upcoming[0] ?? null;
+}
+export function getTimelineForRiskLevel(riskLevel) {
+    const audiences = getAudiencesForRiskLevel(riskLevel);
+    return EU_AI_ACT_TIMELINE.filter((phase) => phase.obligations.some((o) => o.audiences.some((a) => audiences.includes(a)))).map((phase) => ({
+        ...phase,
+        status: getDeadlineStatus(phase.isoDate),
+    }));
+}
+/**
+ * Filter timeline phases by explicit audience list.
+ * Use this when the caller has audiences that don't map to a RiskLevel
+ * (e.g., GPAI providers need ["all", "gpai"]).
+ */
+export function getTimelineForAudiences(audiences) {
+    return EU_AI_ACT_TIMELINE.filter((phase) => phase.obligations.some((o) => o.audiences.some((a) => audiences.includes(a)))).map((phase) => ({
+        ...phase,
+        status: getDeadlineStatus(phase.isoDate),
+    }));
+}

package/dist/legal-checks/gap-analysis.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Compliance Gap Analysis Generator
+ * Produces prioritized action plans from EU AI Act assessment results.
+ *
+ * Supports:
+ * - Annex III high-risk assessment → mandatory Art. 9–15 + Art. 43 + Art. 71 obligations
+ * - GPAI compliance assessment → gaps directly from GPAIComplianceResult flags
+ *
+ * IMPORTANT: This module provides technical orientation, not legal advice.
+ */
+import type { RiskAssessment } from "../types";
+import type { GPAIComplianceResult } from "./gpai-classifier";
+/** Priority level for a compliance gap action */
+export type GapPriority = "critical" | "high" | "medium";
+/** A single compliance gap with actionable remediation steps */
+export interface GapAction {
+    id: string;
+    title: string;
+    description: string;
+    articleRef: string;
+    priority: GapPriority;
+    status: "missing" | "partial";
+    steps: string[];
+    penaltyRef?: string;
+}
+/** Aggregated gap analysis result */
+export interface GapAnalysisResult {
+    totalGaps: number;
+    criticalCount: number;
+    highCount: number;
+    mediumCount: number;
+    actions: GapAction[];
+}
+/**
+ * Generate a gap analysis action plan from an Annex III risk assessment.
+ *
+ * - unacceptable → Art. 5 prohibition action (critical)
+ * - high         → all mandatory Art. 9–15 + Art. 43 + Art. 71 + Art. 72 obligations
+ * - limited      → Art. 50 transparency obligations
+ * - minimal      → no gaps
+ */
+export declare function generateAnnexIIIGapAnalysis(assessment: RiskAssessment): GapAnalysisResult;
+/**
+ * Generate a gap analysis action plan from a GPAI compliance result.
+ * Only generates actions for obligations flagged as missing or partial.
+ */
+export declare function generateGPAIGapAnalysis(result: GPAIComplianceResult): GapAnalysisResult;
+//# sourceMappingURL=gap-analysis.d.ts.map

package/dist/legal-checks/gap-analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gap-analysis.d.ts","sourceRoot":"","sources":["../../src/legal-checks/gap-analysis.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAsB,MAAM,mBAAmB,CAAC;AAElF,iDAAiD;AACjD,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzD,gEAAgE;AAChE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,WAAW,CAAC;IACtB,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AA8TD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,cAAc,GAAG,iBAAiB,CAuEzF;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,oBAAoB,GAAG,iBAAiB,CAcvF"}