@euconform/core 1.3.0 → 1.4.0

package/dist/datasets/crows-pairs.d.ts

@@ -0,0 +1,7 @@
+import type { CrowsPairsEntry } from "../types";
+/**
+ * Load CrowS-Pairs dataset from bundled assets.
+ * Converts the structured JSON format to CrowsPairsEntry[] for the bias engine.
+ */
+export declare function loadCrowsPairsDataset(language: "en" | "de"): CrowsPairsEntry[];
+//# sourceMappingURL=crows-pairs.d.ts.map

package/dist/datasets/crows-pairs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crows-pairs.d.ts","sourceRoot":"","sources":["../../src/datasets/crows-pairs.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AA6ChD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,GAAG,eAAe,EAAE,CAW9E"}

package/dist/datasets/crows-pairs.js

@@ -0,0 +1,41 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+function findDatasetPath(language) {
+    const fileName = `crows-pairs-${language}.json`;
+    // Strategy 1: Relative to this source file (works in unbundled tsc builds)
+    const currentDir = dirname(fileURLToPath(import.meta.url));
+    const fromSource = resolve(currentDir, `../../assets/datasets/${fileName}`);
+    if (existsSync(fromSource))
+        return fromSource;
+    // Strategy 2: Relative to process.cwd() (works in monorepo context)
+    const fromCwd = resolve(process.cwd(), `packages/core/assets/datasets/${fileName}`);
+    if (existsSync(fromCwd))
+        return fromCwd;
+    // Strategy 3: Walk up from the entry script to find the monorepo root
+    if (process.argv[1]) {
+        let dir = dirname(resolve(process.argv[1]));
+        for (let i = 0; i < 5; i++) {
+            const candidate = resolve(dir, `packages/core/assets/datasets/${fileName}`);
+            if (existsSync(candidate))
+                return candidate;
+            dir = dirname(dir);
+        }
+    }
+    throw new Error(`CrowS-Pairs dataset (${language}) not found. Ensure packages/core/assets/datasets/ exists.`);
+}
+/**
+ * Load CrowS-Pairs dataset from bundled assets.
+ * Converts the structured JSON format to CrowsPairsEntry[] for the bias engine.
+ */
+export function loadCrowsPairsDataset(language) {
+    const filePath = findDatasetPath(language);
+    const raw = readFileSync(filePath, "utf-8");
+    const dataset = JSON.parse(raw);
+    return dataset.pairs.map((pair) => ({
+        id: pair.id,
+        sent_more: pair.stereotype,
+        sent_less: pair.antiStereotype,
+        bias_type: pair.biasType,
+    }));
+}

package/dist/evidence/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/evidence/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AA6DnF,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAmC5D;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,CAa1E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CAgCxD;AAKD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAiG5D;AAED,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,GACZ,UAAU,GAAG,iBAAiB,GAAG,QAAQ,GAAG,UAAU,CAaxD"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/evidence/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AA6DnF,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAmC5D;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,CAa1E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CAgCxD;AAoGD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAgC5D;AAED,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,GACZ,UAAU,GAAG,iBAAiB,GAAG,QAAQ,GAAG,UAAU,CAaxD"}

package/dist/evidence/validate.js

@@ -100,8 +100,47 @@ export function validateCiReport(data) {
 }
 const VALID_BUNDLE_ROLES = new Set(["report", "aibom", "ci", "summary"]);
 const SHA256_HEX = /^[a-f0-9]{64}$/;
-export function validateScanBundle(data) {
-    const obj = assertObject(data, "bundle");
+function readBundleArtifactFields(raw, index) {
+    const scope = "bundle artifact";
+    const role = requireField(raw, "role", "string", scope, `artifacts[${index}].role`);
+    const fileName = requireField(raw, "fileName", "string", scope, `artifacts[${index}].fileName`);
+    const sha256 = requireField(raw, "sha256", "string", scope, `artifacts[${index}].sha256`);
+    const required = requireField(raw, "required", "boolean", scope, `artifacts[${index}].required`);
+    const declaredSchemaVersion = raw.schemaVersion;
+    if (declaredSchemaVersion !== undefined && typeof declaredSchemaVersion !== "string") {
+        throw new Error(`Invalid bundle artifact: '${fileName}' has non-string schemaVersion`);
+    }
+    if (raw.mimeType !== undefined && typeof raw.mimeType !== "string") {
+        throw new Error(`Invalid bundle artifact: '${fileName}' has non-string mimeType`);
+    }
+    return {
+        role,
+        fileName,
+        sha256,
+        required,
+        declaredSchemaVersion: declaredSchemaVersion,
+        mimeType: raw.mimeType,
+    };
+}
+function assertBundleArtifactIntegrity(fields, seenRoles, seenFiles, bundleMajor) {
+    const { role, fileName, sha256, declaredSchemaVersion } = fields;
+    if (!VALID_BUNDLE_ROLES.has(role)) {
+        throw new Error(`Invalid bundle artifact: unsupported role '${role}'`);
+    }
+    if (!SHA256_HEX.test(sha256)) {
+        throw new Error(`Invalid bundle artifact: '${fileName}' has invalid sha256`);
+    }
+    if (seenRoles.has(role)) {
+        throw new Error(`Invalid bundle artifact: duplicate role '${role}'`);
+    }
+    if (seenFiles.has(fileName)) {
+        throw new Error(`Invalid bundle artifact: duplicate fileName '${fileName}'`);
+    }
+    if (declaredSchemaVersion && bundleMajor && majorVersion(declaredSchemaVersion) !== bundleMajor) {
+        throw new Error(`Invalid bundle artifact: '${fileName}' uses schemaVersion '${declaredSchemaVersion}' with a different major than the bundle`);
+    }
+}
+function validateBundleHeader(obj) {
     requireSchemaVersion(obj, "euconform.bundle.v1", "bundle");
     requireField(obj, "generatedAt", "string", "bundle");
     const tool = requireField(obj, "tool", "object", "bundle");
@@ -110,6 +149,10 @@ export function validateScanBundle(data) {
     const target = requireField(obj, "target", "object", "bundle");
     requireField(target, "name", "string", "bundle", "target.name");
     requireField(target, "rootPath", "string", "bundle", "target.rootPath");
+}
+export function validateScanBundle(data) {
+    const obj = assertObject(data, "bundle");
+    validateBundleHeader(obj);
     const artifacts = requireField(obj, "artifacts", "array", "bundle");
     if (artifacts.length === 0) {
         throw new Error("Invalid bundle: 'artifacts' must contain at least one artifact");
@@ -119,39 +162,13 @@ export function validateScanBundle(data) {
     const bundleMajor = majorVersion("euconform.bundle.v1");
     let hasRequiredReport = false;
     for (let index = 0; index < artifacts.length; index++) {
-        const artifact = assertObject(artifacts[index], "bundle artifact");
-        const role = requireField(artifact, "role", "string", "bundle artifact", `artifacts[${index}].role`);
-        const fileName = requireField(artifact, "fileName", "string", "bundle artifact", `artifacts[${index}].fileName`);
-        const sha256 = requireField(artifact, "sha256", "string", "bundle artifact", `artifacts[${index}].sha256`);
-        const required = requireField(artifact, "required", "boolean", "bundle artifact", `artifacts[${index}].required`);
-        if (!VALID_BUNDLE_ROLES.has(role)) {
-            throw new Error(`Invalid bundle artifact: unsupported role '${role}'`);
-        }
-        if (!SHA256_HEX.test(sha256)) {
-            throw new Error(`Invalid bundle artifact: '${fileName}' has invalid sha256`);
-        }
-        if (seenRoles.has(role)) {
-            throw new Error(`Invalid bundle artifact: duplicate role '${role}'`);
-        }
-        if (seenFiles.has(fileName)) {
-            throw new Error(`Invalid bundle artifact: duplicate fileName '${fileName}'`);
-        }
-        seenRoles.add(role);
-        seenFiles.add(fileName);
-        const declaredSchemaVersion = artifact.schemaVersion;
-        if (declaredSchemaVersion !== undefined && typeof declaredSchemaVersion !== "string") {
-            throw new Error(`Invalid bundle artifact: '${fileName}' has non-string schemaVersion`);
-        }
-        if (artifact.mimeType !== undefined && typeof artifact.mimeType !== "string") {
-            throw new Error(`Invalid bundle artifact: '${fileName}' has non-string mimeType`);
-        }
-        if (declaredSchemaVersion &&
-            bundleMajor &&
-            majorVersion(declaredSchemaVersion) !== bundleMajor) {
-            throw new Error(`Invalid bundle artifact: '${fileName}' uses schemaVersion '${declaredSchemaVersion}' with a different major than the bundle`);
-        }
-        if (role === "report") {
-            hasRequiredReport = required;
+        const raw = assertObject(artifacts[index], "bundle artifact");
+        const fields = readBundleArtifactFields(raw, index);
+        assertBundleArtifactIntegrity(fields, seenRoles, seenFiles, bundleMajor);
+        seenRoles.add(fields.role);
+        seenFiles.add(fields.fileName);
+        if (fields.role === "report") {
+            hasRequiredReport = fields.required;
         }
     }
     if (!hasRequiredReport) {
@@ -170,6 +187,6 @@ export function validateEcefJsonDocument(schemaVersion, data) {
         case "euconform.bundle.v1":
             return validateScanBundle(data);
         default:
-            throw new Error(`Unsupported ECEF schemaVersion '${schemaVersion}'`);
+            throw new Error(`Unsupported EuConform Evidence Format schemaVersion '${schemaVersion}'`);
     }
 }

package/dist/index.d.ts

@@ -8,7 +8,7 @@ export { ANNEX_III_QUESTIONS, PROHIBITED_AI_SCREENING_QUESTIONS, classifyAnnexII
 export type { AnnexIIIAnswer, AnnexIIIRiskResult, Citation, CounterfactualPair, CrowsPairsLogProbOptions, CrowsPairsLogProbResult, ChecklistStatus, DataGovernanceChecklistResult, RobustnessResult, RobustnessTestCase, Perturbation, PredictTextFn, HumanOversightRecommendation, LoggingTemplate, AnnexIVStructuredReportV1, GroupTextSample, RegardResult, RegardScorer, SensitiveAttribute, ToxicityResult, ToxicityScorer, DeadlineStatus, AffectedAudience, DeadlineObligation, DeadlinePhase, GPAIObligationType, GPAIComplianceLevel, GPAIComplianceFlag, GPAIComplianceResult, GapPriority, GapAction, GapAnalysisResult, } from "./legal-checks";
 export { classifyRisk, getComplianceGuidance, getQuizQuestions, RISK_QUIZ_QUESTIONS, } from "./risk-engine";
 export { disparateImpact, equalizedOdds, generateLoanDataset, predictiveParity, runFairnessAnalysis, statisticalParityDifference, runCrowsPairsBiasAnalysis, runComprehensiveBiasAnalysis, runCrowsPairsBiasAnalysisWithFactory, runComprehensiveBiasAnalysisWithFactory, } from "./fairness-metrics";
-export { detectOllama, listOllamaModels, OllamaClient, BrowserInference, checkWebGPU, BROWSER_MODELS, detectCapabilities, createInferenceClient, createAutoInferenceClient, createCapabilityDetectionService, DefaultCapabilityDetectionService, EnhancedCapabilityDetectionService, type OllamaModel, type BrowserModel, type InferenceEngine, type InferenceCapabilities, type InferenceClient, type CapabilityDetectionService, type ModelCapability, type ModelSelectionState, type CapabilityCacheEntry, type DetectionProgress, type UserPreferences, type EnhancedModelSelectionState, type CapabilityDetectionStatus, } from "./inference";
+export { detectOllama, listOllamaModels, OllamaClient, BrowserInference, checkWebGPU, BROWSER_MODELS, detectCapabilities, createInferenceClient, createAutoInferenceClient, createCapabilityDetectionService, DefaultCapabilityDetectionService, EnhancedCapabilityDetectionService, type OllamaModel, type BrowserModel, type InferenceEngine, type InferenceCapabilities, type InferenceClient, type CapabilityDetectionService, type ModelCapability, type ModelSelectionState, type CapabilityCacheEntry, type DetectionProgress, type UserPreferences, type EnhancedModelSelectionState, type CapabilityDetectionStatus, type CapabilityCache, } from "./inference";
 export { InferenceFactory, createInferenceFactory, detectBestMethodForConfig, type InferenceResult, } from "./inference/inference-factory";
 export { testPair, aggregateByCategory, runStereotypeBiasTest, quickBiasCheck, type StereotypePair, type BiasType, type PairTestResult, type CategoryResult, type StereotypeBiasResult, calculateCrowsPairsBias, calculateLogProbBias, calculateLatencyBias, validateCrowsPairsDataset, } from "./metrics";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,aAAa,EACb,cAAc,EACd,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,SAAS,EACT,qBAAqB,EACrB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,mBAAmB,EACnB,iCAAiC,EACjC,oBAAoB,EACpB,oBAAoB,EACpB,iCAAiC,EACjC,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,kCAAkC,EAClC,8BAA8B,EAC9B,gCAAgC,EAChC,0BAA0B,EAC1B,wBAAwB,EACxB,iCAAiC,EACjC,mCAAmC,EACnC,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,uBAAuB,EACvB,4BAA4B,EAC5B,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,6BAA6B,EAC7B,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,4BAA4B,EAC5B,eAAe,EACf,yBAAyB,EACzB,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,SAAS,EACT,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,2BAA2B,EAC3B,yBAAyB,EACzB,4BAA4B,EAC5B,oCAAoC,EACpC,uCAAuC,GACxC,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EACzB,gCAAgC,EAChC,iCAAiC,EACjC,kCAAkC,EAClC,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,QAAQ,EACR,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,aAAa,EACb,cAAc,EACd,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,SAAS,EACT,qBAAqB,EACrB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,mBAAmB,EACnB,iCAAiC,EACjC,oBAAoB,EACpB,oBAAoB,EACpB,iCAAiC,EACjC,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,kCAAkC,EAClC,8BAA8B,EAC9B,gCAAgC,EAChC,0BAA0B,EAC1B,wBAAwB,EACxB,iCAAiC,EACjC,mCAAmC,EACnC,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,uBAAuB,EACvB,4BAA4B,EAC5B,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,6BAA6B,EAC7B,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,4BAA4B,EAC5B,eAAe,EACf,yBAAyB,EACzB,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,SAAS,EACT,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,2BAA2B,EAC3B,yBAAyB,EACzB,4BAA4B,EAC5B,oCAAoC,EACpC,uCAAuC,GACxC,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EACzB,gCAAgC,EAChC,iCAAiC,EACjC,kCAAkC,EAClC,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,QAAQ,EACR,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,WAAW,CAAC"}

package/dist/inference/index.d.ts

@@ -35,7 +35,7 @@ export declare function createInferenceClient(engine: InferenceEngine, modelId:
  * Auto-select the best available inference client
  */
 export declare function createAutoInferenceClient(preferredModel?: string): Promise<InferenceClient>;
-export { detectOllama, listOllamaModels, OllamaClient } from "./ollama-client";
+export { detectOllama, listOllamaModels, OllamaClient, type CapabilityCache, } from "./ollama-client";
 export { BrowserInference, checkWebGPU, BROWSER_MODELS } from "./browser-inference";
 export { InferenceFactory, createInferenceFactory, detectBestMethodForConfig, type InferenceResult, } from "./inference-factory";
 export { createCapabilityDetectionService, DefaultCapabilityDetectionService, EnhancedCapabilityDetectionService, type CapabilityDetectionService, type ModelCapability, type ModelSelectionState, type CapabilityCacheEntry, type DetectionProgress, type UserPreferences, type EnhancedModelSelectionState, type CapabilityDetectionStatus, } from "./capability-detection";

package/dist/inference/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/inference/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAGL,KAAK,YAAY,EAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAgB,KAAK,WAAW,EAAkC,MAAM,iBAAiB,CAAC;AAEjG,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AAE5D,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE;QACN,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,EAAE,WAAW,EAAE,CAAC;KACvB,CAAC;IACF,OAAO,EAAE;QACP,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,YAAY,EAAE,CAAC;KACxB,CAAC;IACF,WAAW,EAAE,eAAe,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CA2BzE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GACxC,eAAe,CAqCjB;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAejG;AAGD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gCAAgC,EAChC,iCAAiC,EACjC,kCAAkC,EAClC,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,GAC/B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/inference/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAGL,KAAK,YAAY,EAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAgB,KAAK,WAAW,EAAkC,MAAM,iBAAiB,CAAC;AAEjG,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AAE5D,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE;QACN,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,EAAE,WAAW,EAAE,CAAC;KACvB,CAAC;IACF,OAAO,EAAE;QACP,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,YAAY,EAAE,CAAC;KACxB,CAAC;IACF,WAAW,EAAE,eAAe,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CA2BzE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GACxC,eAAe,CAqCjB;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAejG;AAGD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gCAAgC,EAChC,iCAAiC,EACjC,kCAAkC,EAClC,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,GAC/B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC"}

package/dist/inference/index.js

@@ -91,7 +91,7 @@ export async function createAutoInferenceClient(preferredModel) {
     return createInferenceClient("demo", "demo-model");
 }
 // Re-export types and utilities
-export { detectOllama, listOllamaModels, OllamaClient } from "./ollama-client";
+export { detectOllama, listOllamaModels, OllamaClient, } from "./ollama-client";
 export { BrowserInference, checkWebGPU, BROWSER_MODELS } from "./browser-inference";
 export { InferenceFactory, createInferenceFactory, detectBestMethodForConfig, } from "./inference-factory";
 export { createCapabilityDetectionService, DefaultCapabilityDetectionService, EnhancedCapabilityDetectionService, } from "./capability-detection";

package/dist/inference/ollama-client.d.ts

@@ -46,6 +46,11 @@ export interface OllamaLogProbsResponse extends OllamaGenerateResponse {
         logprob: number;
     }>;
 }
+/** Abstraction for capability caching — localStorage in browser, file-based in CLI */
+export interface CapabilityCache {
+    get(key: string): string | null;
+    set(key: string, value: string): void;
+}
 /**
  * Check if Ollama is running and accessible
  */
@@ -74,7 +79,8 @@ export declare class OllamaClient {
     private baseUrl;
     readonly model: string;
     private capabilityCache;
-    constructor(model: string, baseUrl?: string);
+    private externalCache;
+    constructor(model: string, baseUrl?: string, cache?: CapabilityCache);
     private isCloudModel;
     /**
      * Ensures the model is available in Ollama before proceeding
@@ -91,11 +97,11 @@ export declare class OllamaClient {
      */
     private testLogProbCapability;
     /**
-     * Get cached capability result from localStorage
+     * Get cached capability result from localStorage or external cache
      */
     private getCachedCapability;
     /**
-     * Cache capability result in localStorage
+     * Cache capability result in localStorage or external cache
      */
     private setCachedCapability;
     /**

package/dist/inference/ollama-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ollama-client.d.ts","sourceRoot":"","sources":["../../src/inference/ollama-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAwB,MAAM,UAAU,CAAC;AAE5E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAuB,SAAQ,sBAAsB;IACpE,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AAID;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAcrD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAc/D;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAkBjC;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA+C/E;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiChF;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,eAAe,CAAoC;gBAE/C,KAAK,EAAE,MAAM,EAAE,OAAO,SAAkB;IAMpD,OAAO,CAAC,YAAY;IAIpB;;;OAGG;IACG,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBlC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IASzC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM3C,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD;;;OAGG;YACW,qBAAqB;IAmEnC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAuB3B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAgB3B;;;OAGG;IACG,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC;YAqBhC,gBAAgB;YAgDhB,eAAe;IAyC7B;;;OAGG;IACG,sBAAsB,CAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,qBAAqB,CAAA;KAAE,CAAC;CAU/D"}
+{"version":3,"file":"ollama-client.d.ts","sourceRoot":"","sources":["../../src/inference/ollama-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAwB,MAAM,UAAU,CAAC;AAE5E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAuB,SAAQ,sBAAsB;IACpE,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AAED,sFAAsF;AACtF,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAID;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAcrD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAc/D;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAkBjC;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA+C/E;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiChF;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,eAAe,CAAoC;IAC3D,OAAO,CAAC,aAAa,CAAyB;gBAElC,KAAK,EAAE,MAAM,EAAE,OAAO,SAAkB,EAAE,KAAK,CAAC,EAAE,eAAe;IAO7E,OAAO,CAAC,YAAY;IAIpB;;;OAGG;IACG,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBlC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IASzC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM3C,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD;;;OAGG;YACW,qBAAqB;IAmEnC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAqB3B;;;OAGG;IACG,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC;YAqBhC,gBAAgB;YAgDhB,eAAe;IAyC7B;;;OAGG;IACG,sBAAsB,CAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,qBAAqB,CAAA;KAAE,CAAC;CAU/D"}

package/dist/inference/ollama-client.js

@@ -142,10 +142,12 @@ export class OllamaClient {
     baseUrl;
     model;
     capabilityCache;
-    constructor(model, baseUrl = OLLAMA_BASE_URL) {
+    externalCache;
+    constructor(model, baseUrl = OLLAMA_BASE_URL, cache) {
         this.baseUrl = baseUrl;
         this.model = model;
         this.capabilityCache = new Map();
+        this.externalCache = cache ?? null;
     }
     isCloudModel() {
         return this.model.includes(":cloud");
@@ -240,29 +242,34 @@ export class OllamaClient {
         }
     }
     /**
-     * Get cached capability result from localStorage
+     * Get cached capability result from localStorage or external cache
      */
     getCachedCapability() {
         try {
             const cacheKey = `ollama_supports_logprobs_${this.model}`;
-            const cached = localStorage.getItem(cacheKey);
+            let cached = null;
+            if (this.externalCache) {
+                cached = this.externalCache.get(cacheKey);
+            }
+            else if (typeof localStorage !== "undefined") {
+                cached = localStorage.getItem(cacheKey);
+            }
             if (cached) {
                 const capability = JSON.parse(cached);
-                // Check if cache is still valid (24 hours)
                 const cacheAge = Date.now() - new Date(capability.testedAt).getTime();
-                const maxAge = 24 * 60 * 60 * 1000; // 24 hours in milliseconds
-                if (cacheAge < maxAge) {
+                const CACHE_TTL = 24 * 60 * 60 * 1000; // 24 hours
+                if (cacheAge < CACHE_TTL) {
                     return capability;
                 }
             }
+            return null;
         }
-        catch (error) {
-            console.warn("Failed to read capability cache:", error);
+        catch {
+            return null;
         }
-        return null;
     }
     /**
-     * Cache capability result in localStorage
+     * Cache capability result in localStorage or external cache
      */
     setCachedCapability(supports) {
         try {
@@ -272,7 +279,12 @@ export class OllamaClient {
                 supportsLogProbs: supports,
                 testedAt: new Date().toISOString(),
             };
-            localStorage.setItem(cacheKey, JSON.stringify(capability));
+            if (this.externalCache) {
+                this.externalCache.set(cacheKey, JSON.stringify(capability));
+            }
+            else if (typeof localStorage !== "undefined") {
+                localStorage.setItem(cacheKey, JSON.stringify(capability));
+            }
             this.capabilityCache.set(this.model, capability);
         }
         catch (error) {

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "@euconform/core",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "license": "MIT OR EUPL-1.2",
   "author": "Benedikt Hiepler",
   "description": "Core engine for EU AI Act compliance, risk classification, and fairness metrics.",
   "type": "module",
+  "sideEffects": false,
   "keywords": [
     "eu-ai-act",
     "compliance",
@@ -28,7 +29,8 @@
     "./fairness-metrics": "./src/fairness-metrics.ts",
     "./types": "./src/types.ts",
     "./scanner": "./src/scanner/index.ts",
-    "./evidence": "./src/evidence/index.ts"
+    "./evidence": "./src/evidence/index.ts",
+    "./datasets": "./src/datasets/crows-pairs.ts"
   },
   "devDependencies": {
     "@types/node": "^22.15.30",

package/src/datasets/crows-pairs.ts

@@ -0,0 +1,64 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import type { CrowsPairsEntry } from "../types";
+
+interface CrowsPairsDataset {
+  metadata: {
+    name: string;
+    description: string;
+    version: string;
+    license: string;
+    source: string;
+  };
+  pairs: Array<{
+    id: number;
+    stereotype: string;
+    antiStereotype: string;
+    biasType: string;
+  }>;
+}
+
+function findDatasetPath(language: "en" | "de"): string {
+  const fileName = `crows-pairs-${language}.json`;
+
+  // Strategy 1: Relative to this source file (works in unbundled tsc builds)
+  const currentDir = dirname(fileURLToPath(import.meta.url));
+  const fromSource = resolve(currentDir, `../../assets/datasets/${fileName}`);
+  if (existsSync(fromSource)) return fromSource;
+
+  // Strategy 2: Relative to process.cwd() (works in monorepo context)
+  const fromCwd = resolve(process.cwd(), `packages/core/assets/datasets/${fileName}`);
+  if (existsSync(fromCwd)) return fromCwd;
+
+  // Strategy 3: Walk up from the entry script to find the monorepo root
+  if (process.argv[1]) {
+    let dir = dirname(resolve(process.argv[1]));
+    for (let i = 0; i < 5; i++) {
+      const candidate = resolve(dir, `packages/core/assets/datasets/${fileName}`);
+      if (existsSync(candidate)) return candidate;
+      dir = dirname(dir);
+    }
+  }
+
+  throw new Error(
+    `CrowS-Pairs dataset (${language}) not found. Ensure packages/core/assets/datasets/ exists.`
+  );
+}
+
+/**
+ * Load CrowS-Pairs dataset from bundled assets.
+ * Converts the structured JSON format to CrowsPairsEntry[] for the bias engine.
+ */
+export function loadCrowsPairsDataset(language: "en" | "de"): CrowsPairsEntry[] {
+  const filePath = findDatasetPath(language);
+  const raw = readFileSync(filePath, "utf-8");
+  const dataset: CrowsPairsDataset = JSON.parse(raw);
+
+  return dataset.pairs.map((pair) => ({
+    id: pair.id,
+    sent_more: pair.stereotype,
+    sent_less: pair.antiStereotype,
+    bias_type: pair.biasType,
+  }));
+}

package/src/evidence/validate.ts

@@ -152,8 +152,89 @@ export function validateCiReport(data: unknown): CiReport {
 const VALID_BUNDLE_ROLES = new Set(["report", "aibom", "ci", "summary"]);
 const SHA256_HEX = /^[a-f0-9]{64}$/;
 
-export function validateScanBundle(data: unknown): ScanBundle {
-  const obj = assertObject(data, "bundle");
+interface BundleArtifactFields {
+  role: string;
+  fileName: string;
+  sha256: string;
+  required: boolean;
+  declaredSchemaVersion: string | undefined;
+  mimeType: string | undefined;
+}
+
+function readBundleArtifactFields(
+  raw: Record<string, unknown>,
+  index: number
+): BundleArtifactFields {
+  const scope = "bundle artifact";
+  const role = requireField(raw, "role", "string", scope, `artifacts[${index}].role`) as string;
+  const fileName = requireField(
+    raw,
+    "fileName",
+    "string",
+    scope,
+    `artifacts[${index}].fileName`
+  ) as string;
+  const sha256 = requireField(
+    raw,
+    "sha256",
+    "string",
+    scope,
+    `artifacts[${index}].sha256`
+  ) as string;
+  const required = requireField(
+    raw,
+    "required",
+    "boolean",
+    scope,
+    `artifacts[${index}].required`
+  ) as boolean;
+
+  const declaredSchemaVersion = raw.schemaVersion;
+  if (declaredSchemaVersion !== undefined && typeof declaredSchemaVersion !== "string") {
+    throw new Error(`Invalid bundle artifact: '${fileName}' has non-string schemaVersion`);
+  }
+  if (raw.mimeType !== undefined && typeof raw.mimeType !== "string") {
+    throw new Error(`Invalid bundle artifact: '${fileName}' has non-string mimeType`);
+  }
+
+  return {
+    role,
+    fileName,
+    sha256,
+    required,
+    declaredSchemaVersion: declaredSchemaVersion as string | undefined,
+    mimeType: raw.mimeType as string | undefined,
+  };
+}
+
+function assertBundleArtifactIntegrity(
+  fields: BundleArtifactFields,
+  seenRoles: Set<string>,
+  seenFiles: Set<string>,
+  bundleMajor: string | null
+): void {
+  const { role, fileName, sha256, declaredSchemaVersion } = fields;
+
+  if (!VALID_BUNDLE_ROLES.has(role)) {
+    throw new Error(`Invalid bundle artifact: unsupported role '${role}'`);
+  }
+  if (!SHA256_HEX.test(sha256)) {
+    throw new Error(`Invalid bundle artifact: '${fileName}' has invalid sha256`);
+  }
+  if (seenRoles.has(role)) {
+    throw new Error(`Invalid bundle artifact: duplicate role '${role}'`);
+  }
+  if (seenFiles.has(fileName)) {
+    throw new Error(`Invalid bundle artifact: duplicate fileName '${fileName}'`);
+  }
+  if (declaredSchemaVersion && bundleMajor && majorVersion(declaredSchemaVersion) !== bundleMajor) {
+    throw new Error(
+      `Invalid bundle artifact: '${fileName}' uses schemaVersion '${declaredSchemaVersion}' with a different major than the bundle`
+    );
+  }
+}
+
+function validateBundleHeader(obj: Record<string, unknown>): void {
   requireSchemaVersion(obj, "euconform.bundle.v1", "bundle");
   requireField(obj, "generatedAt", "string", "bundle");
 
@@ -164,6 +245,11 @@ export function validateScanBundle(data: unknown): ScanBundle {
   const target = requireField(obj, "target", "object", "bundle") as Record<string, unknown>;
   requireField(target, "name", "string", "bundle", "target.name");
   requireField(target, "rootPath", "string", "bundle", "target.rootPath");
+}
+
+export function validateScanBundle(data: unknown): ScanBundle {
+  const obj = assertObject(data, "bundle");
+  validateBundleHeader(obj);
 
   const artifacts = requireField(obj, "artifacts", "array", "bundle") as unknown[];
   if (artifacts.length === 0) {
@@ -176,71 +262,15 @@ export function validateScanBundle(data: unknown): ScanBundle {
   let hasRequiredReport = false;
 
   for (let index = 0; index < artifacts.length; index++) {
-    const artifact = assertObject(artifacts[index], "bundle artifact");
-    const role = requireField(
-      artifact,
-      "role",
-      "string",
-      "bundle artifact",
-      `artifacts[${index}].role`
-    ) as string;
-    const fileName = requireField(
-      artifact,
-      "fileName",
-      "string",
-      "bundle artifact",
-      `artifacts[${index}].fileName`
-    ) as string;
-    const sha256 = requireField(
-      artifact,
-      "sha256",
-      "string",
-      "bundle artifact",
-      `artifacts[${index}].sha256`
-    ) as string;
-    const required = requireField(
-      artifact,
-      "required",
-      "boolean",
-      "bundle artifact",
-      `artifacts[${index}].required`
-    ) as boolean;
-
-    if (!VALID_BUNDLE_ROLES.has(role)) {
-      throw new Error(`Invalid bundle artifact: unsupported role '${role}'`);
-    }
-    if (!SHA256_HEX.test(sha256)) {
-      throw new Error(`Invalid bundle artifact: '${fileName}' has invalid sha256`);
-    }
-    if (seenRoles.has(role)) {
-      throw new Error(`Invalid bundle artifact: duplicate role '${role}'`);
-    }
-    if (seenFiles.has(fileName)) {
-      throw new Error(`Invalid bundle artifact: duplicate fileName '${fileName}'`);
-    }
-    seenRoles.add(role);
-    seenFiles.add(fileName);
+    const raw = assertObject(artifacts[index], "bundle artifact");
+    const fields = readBundleArtifactFields(raw, index);
+    assertBundleArtifactIntegrity(fields, seenRoles, seenFiles, bundleMajor);
 
-    const declaredSchemaVersion = artifact.schemaVersion;
-    if (declaredSchemaVersion !== undefined && typeof declaredSchemaVersion !== "string") {
-      throw new Error(`Invalid bundle artifact: '${fileName}' has non-string schemaVersion`);
-    }
-    if (artifact.mimeType !== undefined && typeof artifact.mimeType !== "string") {
-      throw new Error(`Invalid bundle artifact: '${fileName}' has non-string mimeType`);
-    }
-
-    if (
-      declaredSchemaVersion &&
-      bundleMajor &&
-      majorVersion(declaredSchemaVersion) !== bundleMajor
-    ) {
-      throw new Error(
-        `Invalid bundle artifact: '${fileName}' uses schemaVersion '${declaredSchemaVersion}' with a different major than the bundle`
-      );
-    }
+    seenRoles.add(fields.role);
+    seenFiles.add(fields.fileName);
 
-    if (role === "report") {
-      hasRequiredReport = required;
+    if (fields.role === "report") {
+      hasRequiredReport = fields.required;
     }
   }
 
@@ -265,6 +295,6 @@ export function validateEcefJsonDocument(
     case "euconform.bundle.v1":
       return validateScanBundle(data);
     default:
-      throw new Error(`Unsupported ECEF schemaVersion '${schemaVersion}'`);
+      throw new Error(`Unsupported EuConform Evidence Format schemaVersion '${schemaVersion}'`);
   }
 }

package/src/index.ts

@@ -147,6 +147,7 @@ export {
   type UserPreferences,
   type EnhancedModelSelectionState,
   type CapabilityDetectionStatus,
+  type CapabilityCache,
 } from "./inference";
 
 // Inference Factory