@grc-claw/compliance-orchestrator 2.0.0

package/dist/graph/UnifiedComplianceGraph.d.ts

@@ -0,0 +1,75 @@
+import type { FrameworkCode, RegulationAST, CrosswalkEntry, ComplianceState, CollectedEvidence } from '../types.js';
+export interface GraphNode {
+    id: string;
+    type: 'framework' | 'control' | 'evidence' | 'agent' | 'infrastructure' | 'risk' | 'org';
+    label: string;
+    properties: Record<string, unknown>;
+    framework?: FrameworkCode;
+}
+export interface GraphEdge {
+    source: string;
+    target: string;
+    relationship: string;
+    weight: number;
+    properties: Record<string, unknown>;
+}
+export interface AttackPath {
+    nodes: string[];
+    edges: string[];
+    riskScore: number;
+    description: string;
+}
+export interface BlastRadius {
+    controlId: string;
+    impactScore: number;
+    affectedControls: string[];
+    affectedSystems: string[];
+    propagationDepth: number;
+}
+export interface CompliancePosture {
+    orgId: string;
+    timestamp: string;
+    overallScore: number;
+    frameworkScores: Map<FrameworkCode, number>;
+    controlCompliance: Map<string, boolean>;
+    riskHeatmap: RiskHeatmapEntry[];
+    recommendations: Recommendation[];
+}
+export interface RiskHeatmapEntry {
+    controlFamily: string;
+    severity: string;
+    count: number;
+    riskScore: number;
+}
+export interface Recommendation {
+    id: string;
+    priority: 'critical' | 'high' | 'medium' | 'low';
+    controlId: string;
+    title: string;
+    description: string;
+    estimatedImpact: number;
+    estimatedEffort: string;
+}
+export declare class UnifiedComplianceGraph {
+    private nodes;
+    private edges;
+    private adjacencyList;
+    constructor(asts: RegulationAST[]);
+    private addFrameworkNode;
+    private addControlNode;
+    addCrosswalks(crosswalks: CrosswalkEntry[]): void;
+    addEvidenceNode(evidence: CollectedEvidence, controlId: string): void;
+    addAgentNode(agentId: string, role: string, tools: string[]): void;
+    addInfrastructureNode(systemId: string, systemType: string, controls: string[]): void;
+    traceAttackPaths(startNodeId: string, maxDepth?: number): AttackPath[];
+    calculateBlastRadius(controlId: string): BlastRadius;
+    assessAgentRisk(agentId: string, context: {
+        tool: string;
+        args: Record<string, unknown>;
+    }): number;
+    calculateCompliancePosture(orgId: string, states: ComplianceState[]): CompliancePosture;
+    private calculatePathRisk;
+    private describeAttackPath;
+    getGraphHash(): string;
+}
+//# sourceMappingURL=UnifiedComplianceGraph.d.ts.map

package/dist/graph/UnifiedComplianceGraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnifiedComplianceGraph.d.ts","sourceRoot":"","sources":["../../src/graph/UnifiedComplianceGraph.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EACb,aAAa,EAEb,cAAc,EACd,eAAe,EAKf,iBAAiB,EAClB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,gBAAgB,GAAG,MAAM,GAAG,KAAK,CAAC;IACzF,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC5C,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,aAAa,CAAuC;gBAEhD,IAAI,EAAE,aAAa,EAAE;IASjC,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,cAAc;IAyBtB,aAAa,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI;IAiBjD,eAAe,CAAC,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAuBrE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAUlE,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;IAoBrF,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAU,GAAG,UAAU,EAAE;IAsCzE,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW;IAwCpD,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,MAAM;IAiBlG,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,iBAAiB;IA8DvF,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,kBAAkB;IAS1B,YAAY,IAAI,MAAM;CAWvB"}

package/dist/graph/UnifiedComplianceGraph.js

@@ -0,0 +1,278 @@
+import { createHash } from 'node:crypto';
+export class UnifiedComplianceGraph {
+    nodes = new Map();
+    edges = [];
+    adjacencyList = new Map();
+    constructor(asts) {
+        for (const ast of asts) {
+            this.addFrameworkNode(ast);
+            for (const control of ast.controls) {
+                this.addControlNode(control, ast.framework);
+            }
+        }
+    }
+    addFrameworkNode(ast) {
+        this.nodes.set(`framework:${ast.framework}`, {
+            id: `framework:${ast.framework}`,
+            type: 'framework',
+            label: ast.metadata.title,
+            properties: {
+                version: ast.version,
+                issuer: ast.metadata.issuer,
+                totalControls: ast.metadata.totalControls,
+                families: ast.metadata.families,
+            },
+            framework: ast.framework,
+        });
+    }
+    addControlNode(control, framework) {
+        const nodeId = `control:${framework}:${control.code}`;
+        this.nodes.set(nodeId, {
+            id: nodeId,
+            type: 'control',
+            label: `${control.code} - ${control.title}`,
+            properties: {
+                id: control.id,
+                code: control.code,
+                title: control.title,
+                crossRefs: control.crossRefs,
+                severity: control.severity,
+            },
+            framework,
+        });
+        this.edges.push({
+            source: `framework:${framework}`,
+            target: nodeId,
+            relationship: 'contains',
+            weight: 1,
+            properties: {},
+        });
+    }
+    addCrosswalks(crosswalks) {
+        for (const cw of crosswalks) {
+            const sourceId = `control:${cw.sourceFramework}:${cw.sourceControl}`;
+            const targetId = `control:${cw.targetFramework}:${cw.targetControl}`;
+            if (this.nodes.has(sourceId) && this.nodes.has(targetId)) {
+                this.edges.push({
+                    source: sourceId,
+                    target: targetId,
+                    relationship: cw.relationship,
+                    weight: cw.confidence,
+                    properties: { confidence: cw.confidence },
+                });
+            }
+        }
+    }
+    addEvidenceNode(evidence, controlId) {
+        const nodeId = `evidence:${evidence.id}`;
+        this.nodes.set(nodeId, {
+            id: nodeId,
+            type: 'evidence',
+            label: `${evidence.type} for ${controlId}`,
+            properties: {
+                hash: evidence.hash,
+                timestamp: evidence.timestamp,
+                valid: evidence.valid,
+                source: evidence.source,
+            },
+        });
+        this.edges.push({
+            source: nodeId,
+            target: `control:${controlId}`,
+            relationship: 'supports',
+            weight: evidence.valid ? 1 : 0,
+            properties: { valid: evidence.valid },
+        });
+    }
+    addAgentNode(agentId, role, tools) {
+        const nodeId = `agent:${agentId}`;
+        this.nodes.set(nodeId, {
+            id: nodeId,
+            type: 'agent',
+            label: `Agent ${agentId}`,
+            properties: { role, tools },
+        });
+    }
+    addInfrastructureNode(systemId, systemType, controls) {
+        const nodeId = `infra:${systemId}`;
+        this.nodes.set(nodeId, {
+            id: nodeId,
+            type: 'infrastructure',
+            label: systemId,
+            properties: { systemType, controls },
+        });
+        for (const control of controls) {
+            this.edges.push({
+                source: nodeId,
+                target: `control:${control}`,
+                relationship: 'implements',
+                weight: 0.8,
+                properties: {},
+            });
+        }
+    }
+    traceAttackPaths(startNodeId, maxDepth = 5) {
+        const paths = [];
+        const visited = new Set();
+        const queue = [];
+        queue.push({ nodeId: startNodeId, path: [startNodeId], edges: [] });
+        visited.add(startNodeId);
+        while (queue.length > 0 && paths.length < 10) {
+            const current = queue.shift();
+            const neighbors = this.adjacencyList.get(current.nodeId) ?? [];
+            for (const edge of neighbors) {
+                const targetId = edge.source === current.nodeId ? edge.target : edge.source;
+                if (visited.has(targetId))
+                    continue;
+                visited.add(targetId);
+                const newPath = [...current.path, targetId];
+                const newEdges = [...current.edges, edge.relationship];
+                if (newPath.length > 1) {
+                    paths.push({
+                        nodes: newPath,
+                        edges: newEdges,
+                        riskScore: this.calculatePathRisk(newPath),
+                        description: this.describeAttackPath(newPath),
+                    });
+                }
+                if (newPath.length < maxDepth) {
+                    queue.push({ nodeId: targetId, path: newPath, edges: newEdges });
+                }
+            }
+        }
+        return paths.sort((a, b) => b.riskScore - a.riskScore);
+    }
+    calculateBlastRadius(controlId) {
+        const affectedControls = [];
+        const affectedSystems = [];
+        let propagationDepth = 0;
+        const bfs = (startId, depth = 0) => {
+            if (depth > 3)
+                return;
+            const outgoing = this.edges.filter((e) => e.source === startId && e.relationship !== 'contains');
+            for (const edge of outgoing) {
+                const targetNode = this.nodes.get(edge.target);
+                if (!targetNode)
+                    continue;
+                if (targetNode.type === 'control') {
+                    affectedControls.push(edge.target);
+                }
+                else if (targetNode.type === 'infrastructure') {
+                    affectedSystems.push(edge.target);
+                }
+                propagationDepth = Math.max(propagationDepth, depth + 1);
+                bfs(edge.target, depth + 1);
+            }
+        };
+        bfs(controlId);
+        const impactScore = Math.min((affectedControls.length * 0.3 + affectedSystems.length * 0.5 + propagationDepth * 0.2), 1);
+        return {
+            controlId,
+            impactScore,
+            affectedControls: [...new Set(affectedControls)],
+            affectedSystems: [...new Set(affectedSystems)],
+            propagationDepth,
+        };
+    }
+    assessAgentRisk(agentId, context) {
+        const agentNode = this.nodes.get(`agent:${agentId}`);
+        if (!agentNode)
+            return 1.0;
+        const connectedControls = this.edges
+            .filter((e) => e.source === `agent:${agentId}`)
+            .map((e) => this.nodes.get(e.target))
+            .filter((n) => n?.type === 'control');
+        const vulnerableControls = connectedControls.filter((n) => {
+            const evidence = this.edges.filter((e) => e.target === n?.id && e.relationship === 'supports');
+            return evidence.length === 0;
+        });
+        return vulnerableControls.length / Math.max(connectedControls.length, 1);
+    }
+    calculateCompliancePosture(orgId, states) {
+        const frameworkScores = new Map();
+        const controlCompliance = new Map();
+        const riskHeatmap = [];
+        const recommendations = [];
+        for (const state of states) {
+            const compliant = state.controlStatuses.filter((s) => s.status === 'compliant').length;
+            const total = state.controlStatuses.length;
+            const score = total > 0 ? (compliant / total) * 100 : 0;
+            frameworkScores.set(state.framework, score);
+            for (const cs of state.controlStatuses) {
+                controlCompliance.set(cs.controlId, cs.status === 'compliant');
+                if (cs.status !== 'compliant' && cs.issues.length > 0) {
+                    recommendations.push({
+                        id: `rec-${cs.controlId}-${Date.now()}`,
+                        priority: cs.issues[0].severity === 'CRITICAL' ? 'critical' : 'high',
+                        controlId: cs.controlId,
+                        title: `Remediate ${cs.controlId}`,
+                        description: cs.issues[0].description,
+                        estimatedImpact: cs.score,
+                        estimatedEffort: '1-4 hours',
+                    });
+                }
+            }
+            for (const risk of state.risks) {
+                const existing = riskHeatmap.find((r) => r.severity === (risk.riskScore > 0.7 ? 'CRITICAL' : risk.riskScore > 0.4 ? 'HIGH' : 'MEDIUM'));
+                if (existing) {
+                    existing.count++;
+                    existing.riskScore += risk.riskScore;
+                }
+                else {
+                    riskHeatmap.push({
+                        controlFamily: risk.controlId.split('-')[0],
+                        severity: risk.riskScore > 0.7 ? 'CRITICAL' : risk.riskScore > 0.4 ? 'HIGH' : 'MEDIUM',
+                        count: 1,
+                        riskScore: risk.riskScore,
+                    });
+                }
+            }
+        }
+        const overallScore = Array.from(frameworkScores.values()).reduce((a, b) => a + b, 0) / Math.max(frameworkScores.size, 1);
+        return {
+            orgId,
+            timestamp: new Date().toISOString(),
+            overallScore,
+            frameworkScores,
+            controlCompliance,
+            riskHeatmap,
+            recommendations: recommendations.sort((a, b) => {
+                const priorityOrder = { critical: 0, high: 1, medium: 2, low: 3 };
+                return priorityOrder[a.priority] - priorityOrder[b.priority];
+            }),
+        };
+    }
+    calculatePathRisk(path) {
+        let risk = 0;
+        for (const nodeId of path) {
+            const node = this.nodes.get(nodeId);
+            if (node?.type === 'control') {
+                const severity = node.properties.severity ?? 'MEDIUM';
+                const severityScore = { LOW: 0.2, MEDIUM: 0.5, HIGH: 0.8, CRITICAL: 1.0 };
+                risk += severityScore[severity] ?? 0.5;
+            }
+        }
+        return Math.min(risk / path.length, 1);
+    }
+    describeAttackPath(path) {
+        const descriptions = path.map((nodeId) => {
+            const node = this.nodes.get(nodeId);
+            if (!node)
+                return nodeId;
+            return `${node.type}(${node.label})`;
+        });
+        return descriptions.join(' → ');
+    }
+    getGraphHash() {
+        const content = JSON.stringify({
+            nodeCount: this.nodes.size,
+            edgeCount: this.edges.length,
+            nodeTypes: Array.from(this.nodes.values()).reduce((acc, n) => {
+                acc[n.type] = (acc[n.type] ?? 0) + 1;
+                return acc;
+            }, {}),
+        });
+        return createHash('sha256').update(content).digest('hex');
+    }
+}
+//# sourceMappingURL=UnifiedComplianceGraph.js.map

package/dist/graph/UnifiedComplianceGraph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnifiedComplianceGraph.js","sourceRoot":"","sources":["../../src/graph/UnifiedComplianceGraph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwEzC,MAAM,OAAO,sBAAsB;IACzB,KAAK,GAA2B,IAAI,GAAG,EAAE,CAAC;IAC1C,KAAK,GAAgB,EAAE,CAAC;IACxB,aAAa,GAA6B,IAAI,GAAG,EAAE,CAAC;IAE5D,YAAY,IAAqB;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3B,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACnC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,GAAkB;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,SAAS,EAAE,EAAE;YAC3C,EAAE,EAAE,aAAa,GAAG,CAAC,SAAS,EAAE;YAChC,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK;YACzB,UAAU,EAAE;gBACV,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM;gBAC3B,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa;gBACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ;aAChC;YACD,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,OAAuB,EAAE,SAAwB;QACtE,MAAM,MAAM,GAAG,WAAW,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;YACrB,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,KAAK,EAAE;YAC3C,UAAU,EAAE;gBACV,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B;YACD,SAAS;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,aAAa,SAAS,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,UAAU;YACxB,MAAM,EAAE,CAAC;YACT,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,UAA4B;QACxC,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC;YACrE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC;YAErE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,QAAQ;oBAChB,YAAY,EAAE,EAAE,CAAC,YAAY;oBAC7B,MAAM,EAAE,EAAE,CAAC,UAAU;oBACrB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe,CAAC,QAA2B,EAAE,SAAiB;QAC5D,MAAM,MAAM,GAAG,YAAY,QAAQ,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;YACrB,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,GAAG,QAAQ,CAAC,IAAI,QAAQ,SAAS,EAAE;YAC1C,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,SAAS,EAAE;YAC9B,YAAY,EAAE,UAAU;YACxB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,UAAU,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,OAAe,EAAE,IAAY,EAAE,KAAe;QACzD,MAAM,MAAM,GAAG,SAAS,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;YACrB,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,SAAS,OAAO,EAAE;YACzB,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB,CAAC,QAAgB,EAAE,UAAkB,EAAE,QAAkB;QAC5E,MAAM,MAAM,GAAG,SAAS,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;YACrB,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE;SACrC,CAAC,CAAC;QAEH,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW,OAAO,EAAE;gBAC5B,YAAY,EAAE,YAAY;gBAC1B,MAAM,EAAE,GAAG;gBACX,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,WAAmB,EAAE,WAAmB,CAAC;QACxD,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,KAAK,GAA0D,EAAE,CAAC;QAExE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAEzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAE/D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAEtB,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC5C,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBAEvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,KAAK,CAAC,IAAI,CAAC;wBACT,KAAK,EAAE,OAAO;wBACd,KAAK,EAAE,QAAQ;wBACf,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;wBAC1C,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;qBAC9C,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,MAAM,gBAAgB,GAAa,EAAE,CAAC;QACtC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,gBAAgB,GAAG,CAAC,CAAC;QAEzB,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,QAAgB,CAAC,EAAQ,EAAE;YACvD,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC;YAEjG,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC/C,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAE1B,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAClC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrC,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAChD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpC,CAAC;gBAED,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QAEF,GAAG,CAAC,SAAS,CAAC,CAAC;QAEf,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B,CAAC,gBAAgB,CAAC,MAAM,GAAG,GAAG,GAAG,eAAe,CAAC,MAAM,GAAG,GAAG,GAAG,gBAAgB,GAAG,GAAG,CAAC,EACvF,CAAC,CACF,CAAC;QAEF,OAAO;YACL,SAAS;YACT,WAAW;YACX,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAChD,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;YAC9C,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,OAAe,EAAE,OAAwD;QACvF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS;YAAE,OAAO,GAAG,CAAC;QAE3B,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,OAAO,EAAE,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC;QAExC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC;YAC/F,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,OAAO,kBAAkB,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,0BAA0B,CAAC,KAAa,EAAE,MAAyB;QACjE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;QACzD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAmB,CAAC;QACrD,MAAM,WAAW,GAAuB,EAAE,CAAC;QAC3C,MAAM,eAAe,GAAqB,EAAE,CAAC;QAE7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;YACvF,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC;YAC3C,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAE5C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBACvC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;gBAE/D,IAAI,EAAE,CAAC,MAAM,KAAK,WAAW,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtD,eAAe,CAAC,IAAI,CAAC;wBACnB,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;wBACvC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;wBACpE,SAAS,EAAE,EAAE,CAAC,SAAS;wBACvB,KAAK,EAAE,aAAa,EAAE,CAAC,SAAS,EAAE;wBAClC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW;wBACrC,eAAe,EAAE,EAAE,CAAC,KAAK;wBACzB,eAAe,EAAE,WAAW;qBAC7B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CACrG,CAAC;gBACF,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACjB,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC;gBACvC,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,IAAI,CAAC;wBACf,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;wBAC3C,QAAQ,EAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;wBACtF,KAAK,EAAE,CAAC;wBACR,SAAS,EAAE,IAAI,CAAC,SAAS;qBAC1B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAEzH,OAAO;YACL,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY;YACZ,eAAe;YACf,iBAAiB;YACjB,WAAW;YACX,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC7C,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBAClE,OAAO,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC/D,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IAEO,iBAAiB,CAAC,IAAc;QACtC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAC,QAAmB,IAAI,QAAQ,CAAC;gBAClE,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;gBAC1E,IAAI,IAAI,aAAa,CAAC,QAAsC,CAAC,IAAI,GAAG,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAEO,kBAAkB,CAAC,IAAc;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,YAAY;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YAC1B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;gBAC3D,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACrC,OAAO,GAAG,CAAC;YACb,CAAC,EAAE,EAA4B,CAAC;SACjC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,45 @@
+import { RegulationASTCompiler } from './compiler/RegulationASTCompiler.js';
+import { NeuroSymbolicReasoner } from './reasoner/NeuroSymbolicReasoner.js';
+import { UnifiedComplianceGraph } from './graph/UnifiedComplianceGraph.js';
+import type { FrameworkCode, ComplianceState, CompliancePlan, ComplianceAudit, DriftEvent, RiskAssessment } from './types.js';
+export * from './types.js';
+export { RegulationASTCompiler, getEvidenceDeduplicationMap } from './compiler/RegulationASTCompiler.js';
+export { NeuroSymbolicReasoner } from './reasoner/NeuroSymbolicReasoner.js';
+export { UnifiedComplianceGraph } from './graph/UnifiedComplianceGraph.js';
+export type { ReasoningResult, ReasoningContext, ReasoningContext as NeuroSymbolicContext } from './reasoner/NeuroSymbolicReasoner.js';
+export type { GraphNode, GraphEdge, AttackPath, BlastRadius, CompliancePosture, Recommendation } from './graph/UnifiedComplianceGraph.js';
+export interface ComplianceOrchestratorConfig {
+    orgId: string;
+    enabledFrameworks: FrameworkCode[];
+    riskTolerance: 'low' | 'medium' | 'high';
+    autoRemediate: boolean;
+    continuousScanInterval: number;
+}
+export interface ContinuousComplianceResult {
+    orgId: string;
+    timestamp: string;
+    states: ComplianceState[];
+    drift: DriftEvent[];
+    risks: RiskAssessment[];
+    graphHash: string;
+    overallScore: number;
+}
+export declare class ComplianceSuperOrchestrator {
+    private compiler;
+    private reasoner;
+    private graph;
+    private config;
+    private states;
+    constructor(config: ComplianceOrchestratorConfig);
+    continuousComplianceLoop(reasoningContexts: Map<FrameworkCode, import('./reasoner/NeuroSymbolicReasoner.js').ReasoningContext>): Promise<ContinuousComplianceResult>;
+    compileNaturalLanguage(framework: FrameworkCode, text: string): string;
+    synthesizePlan(framework: FrameworkCode, currentState: ComplianceState, targetScore: number): Promise<CompliancePlan>;
+    executeAudit(framework: FrameworkCode, reasoningContext: import('./reasoner/NeuroSymbolicReasoner.js').ReasoningContext): Promise<ComplianceAudit>;
+    findCrosswalk(framework: FrameworkCode, controlCode: string): CrosswalkEntry[];
+    getState(framework: FrameworkCode): ComplianceState | undefined;
+    getGraph(): UnifiedComplianceGraph;
+    getCompiler(): RegulationASTCompiler;
+    getReasoner(): NeuroSymbolicReasoner;
+}
+type CrosswalkEntry = import('./types.js').CrosswalkEntry;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EAGf,UAAU,EACV,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AACzG,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AACvI,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAE1I,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,aAAa,EAAE,CAAC;IACnC,aAAa,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACzC,aAAa,EAAE,OAAO,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAwB;IACxC,OAAO,CAAC,QAAQ,CAAwB;IACxC,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,MAAM,CAAkD;gBAEpD,MAAM,EAAE,4BAA4B;IAQ1C,wBAAwB,CAC5B,iBAAiB,EAAE,GAAG,CAAC,aAAa,EAAE,OAAO,qCAAqC,EAAE,gBAAgB,CAAC,GACpG,OAAO,CAAC,0BAA0B,CAAC;IAiCtC,sBAAsB,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAKhE,cAAc,CAClB,SAAS,EAAE,aAAa,EACxB,YAAY,EAAE,eAAe,EAC7B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,cAAc,CAAC;IAwBpB,YAAY,CAChB,SAAS,EAAE,aAAa,EACxB,gBAAgB,EAAE,OAAO,qCAAqC,EAAE,gBAAgB,GAC/E,OAAO,CAAC,eAAe,CAAC;IAiC3B,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,GAAG,cAAc,EAAE;IAI9E,QAAQ,CAAC,SAAS,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS;IAI/D,QAAQ,IAAI,sBAAsB;IAIlC,WAAW,IAAI,qBAAqB;IAIpC,WAAW,IAAI,qBAAqB;CAGrC;AAED,KAAK,cAAc,GAAG,OAAO,YAAY,EAAE,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,118 @@
+import { RegulationASTCompiler } from './compiler/RegulationASTCompiler.js';
+import { NeuroSymbolicReasoner } from './reasoner/NeuroSymbolicReasoner.js';
+import { UnifiedComplianceGraph } from './graph/UnifiedComplianceGraph.js';
+export * from './types.js';
+export { RegulationASTCompiler, getEvidenceDeduplicationMap } from './compiler/RegulationASTCompiler.js';
+export { NeuroSymbolicReasoner } from './reasoner/NeuroSymbolicReasoner.js';
+export { UnifiedComplianceGraph } from './graph/UnifiedComplianceGraph.js';
+export class ComplianceSuperOrchestrator {
+    compiler;
+    reasoner;
+    graph;
+    config;
+    states = new Map();
+    constructor(config) {
+        this.config = config;
+        this.compiler = new RegulationASTCompiler();
+        const asts = this.compiler.getAllASTs();
+        this.reasoner = new NeuroSymbolicReasoner(new Map(asts.map((a) => [a.framework, a])));
+        this.graph = new UnifiedComplianceGraph(asts);
+    }
+    async continuousComplianceLoop(reasoningContexts) {
+        const states = [];
+        const allDrift = [];
+        const allRisks = [];
+        for (const [framework, context] of reasoningContexts) {
+            const previousState = this.states.get(framework);
+            const enrichedContext = { ...context, previousState };
+            const state = await this.reasoner.reason(enrichedContext);
+            states.push(state);
+            allDrift.push(...state.drift);
+            allRisks.push(...state.risks);
+            this.states.set(framework, state);
+        }
+        const compliant = states.reduce((acc, s) => acc + s.controlStatuses.filter((c) => c.status === 'compliant').length, 0);
+        const total = states.reduce((acc, s) => acc + s.controlStatuses.length, 0);
+        const overallScore = total > 0 ? (compliant / total) * 100 : 0;
+        return {
+            orgId: this.config.orgId,
+            timestamp: new Date().toISOString(),
+            states,
+            drift: allDrift,
+            risks: allRisks,
+            graphHash: this.graph.getGraphHash(),
+            overallScore,
+        };
+    }
+    compileNaturalLanguage(framework, text) {
+        const control = this.compiler.compileNaturalLanguage(framework, text);
+        return control.id;
+    }
+    async synthesizePlan(framework, currentState, targetScore) {
+        const nonCompliant = currentState.controlStatuses.filter((s) => s.status !== 'compliant');
+        const actions = nonCompliant.map((nc, idx) => ({
+            id: `action-${idx}-${Date.now()}`,
+            controlId: nc.controlId,
+            action: 'remediate',
+            resource: nc.controlId,
+            evidenceRequired: ['scan', 'config'],
+            sla: '4h',
+        }));
+        const estimatedCost = actions.length * 500;
+        return {
+            id: `plan-${framework}-${Date.now()}`,
+            orgId: this.config.orgId,
+            framework,
+            createdAt: new Date().toISOString(),
+            actions,
+            estimatedCost,
+            estimatedDuration: `${Math.ceil(actions.length / 4)} days`,
+        };
+    }
+    async executeAudit(framework, reasoningContext) {
+        const state = await this.reasoner.reason(reasoningContext);
+        const controls = state.controlStatuses.map((cs) => ({
+            controlId: cs.controlId,
+            status: cs.status === 'compliant' ? 'pass' : 'fail',
+            evidence: [],
+            issues: cs.issues,
+            duration: 0,
+        }));
+        const passed = controls.filter((c) => c.status === 'pass').length;
+        const failed = controls.filter((c) => c.status === 'fail').length;
+        return {
+            id: `audit-${framework}-${Date.now()}`,
+            orgId: this.config.orgId,
+            framework,
+            startedAt: new Date().toISOString(),
+            completedAt: new Date().toISOString(),
+            controls,
+            summary: {
+                totalControls: controls.length,
+                passed,
+                failed,
+                skipped: 0,
+                errors: 0,
+                complianceScore: controls.length > 0 ? (passed / controls.length) * 100 : 0,
+                criticalFindings: failed,
+                highFindings: 0,
+            },
+        };
+    }
+    findCrosswalk(framework, controlCode) {
+        return this.compiler.findEquivalent(framework, controlCode);
+    }
+    getState(framework) {
+        return this.states.get(framework);
+    }
+    getGraph() {
+        return this.graph;
+    }
+    getCompiler() {
+        return this.compiler;
+    }
+    getReasoner() {
+        return this.reasoner;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAY3E,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AACzG,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAsB3E,MAAM,OAAO,2BAA2B;IAC9B,QAAQ,CAAwB;IAChC,QAAQ,CAAwB;IAChC,KAAK,CAAyB;IAC9B,MAAM,CAA+B;IACrC,MAAM,GAAwC,IAAI,GAAG,EAAE,CAAC;IAEhE,YAAY,MAAoC;QAC9C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,KAAK,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,iBAAqG;QAErG,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAqB,EAAE,CAAC;QAEtC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,iBAAiB,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,eAAe,GAAG,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,EAClF,CAAC,CACF,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/D,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM;YACN,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE;YACpC,YAAY;SACb,CAAC;IACJ,CAAC;IAED,sBAAsB,CAAC,SAAwB,EAAE,IAAY;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtE,OAAO,OAAO,CAAC,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,SAAwB,EACxB,YAA6B,EAC7B,WAAmB;QAEnB,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7C,EAAE,EAAE,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;YACjC,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,MAAM,EAAE,WAAoB;YAC5B,QAAQ,EAAE,EAAE,CAAC,SAAS;YACtB,gBAAgB,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;YACpC,GAAG,EAAE,IAAI;SACV,CAAC,CAAC,CAAC;QAEJ,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC;QAE3C,OAAO;YACL,EAAE,EAAE,QAAQ,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;YACrC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;YACP,aAAa;YACb,iBAAiB,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO;SAC3D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,SAAwB,EACxB,gBAAgF;QAEhF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAClD,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,MAAe;YACrE,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAElE,OAAO;YACL,EAAE,EAAE,SAAS,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;YACtC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,QAAQ;YACR,OAAO,EAAE;gBACP,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,MAAM;gBACN,MAAM;gBACN,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,CAAC;gBACT,eAAe,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC3E,gBAAgB,EAAE,MAAM;gBACxB,YAAY,EAAE,CAAC;aAChB;SACF,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,SAAwB,EAAE,WAAmB;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9D,CAAC;IAED,QAAQ,CAAC,SAAwB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF"}

package/dist/reasoner/NeuroSymbolicReasoner.d.ts

@@ -0,0 +1,99 @@
+import type { FrameworkCode, RegulationAST, ASTControlNode, DriftEvent, ComplianceState } from '../types.js';
+export interface ReasoningResult {
+    control: string;
+    decision: 'compliant' | 'non-compliant' | 'partial' | 'unknown';
+    confidence: number;
+    proof: string[];
+    counterExample?: string;
+    reasoningPath: string[];
+    symbolicProof: SymbolicProof;
+}
+export interface SymbolicProof {
+    obligations: ProofObligation[];
+    discharged: string[];
+    remaining: string[];
+    valid: boolean;
+}
+export interface ProofObligation {
+    id: string;
+    formula: string;
+    status: 'proven' | 'disproven' | 'unknown' | 'assumed';
+    evidenceRef?: string;
+}
+export interface ReasoningContext {
+    orgId: string;
+    framework: FrameworkCode;
+    currentEvidence: Map<string, EvidenceItem[]>;
+    configurationState: ConfigurationState;
+    riskTolerance: 'low' | 'medium' | 'high';
+    previousState?: ComplianceState;
+}
+export interface EvidenceItem {
+    id: string;
+    controlId: string;
+    type: string;
+    hash: string;
+    timestamp: string;
+    valid: boolean;
+    metadata?: Record<string, unknown>;
+}
+export interface ConfigurationState {
+    iam: IAMState;
+    network: NetworkState;
+    data: DataState;
+    monitoring: MonitoringState;
+    physical: PhysicalState;
+}
+export interface IAMState {
+    mfaEnabled: boolean;
+    privilegedUsers: string[];
+    sessionTimeout: number;
+    lastPasswordRotation: string;
+    rbacPolicyVersion: string;
+    mfaEnforcementRate: number;
+}
+export interface NetworkState {
+    firewallRules: number;
+    segmentationEnabled: boolean;
+    idsEnabled: boolean;
+    tlsVersion: string;
+    publicEndpoints: string[];
+}
+export interface DataState {
+    encryptionAtRest: boolean;
+    encryptionInTransit: boolean;
+    backupEnabled: boolean;
+    backupFrequency: string;
+    lastBackup: string;
+    retentionDays: number;
+}
+export interface MonitoringState {
+    siemEnabled: boolean;
+    logRetentionDays: number;
+    alertingEnabled: boolean;
+    mttr: number;
+    monitoringCoverage: number;
+}
+export interface PhysicalState {
+    accessControl: boolean;
+    cctvEnabled: boolean;
+    environmentalMonitoring: boolean;
+    visitorManagement: boolean;
+}
+export declare class NeuroSymbolicReasoner {
+    private asts;
+    private constraintCache;
+    constructor(asts: Map<FrameworkCode, RegulationAST>);
+    reason(context: ReasoningContext): Promise<ComplianceState>;
+    evaluateControl(control: ASTControlNode, context: ReasoningContext): ReasoningResult;
+    private symbolicCheck;
+    private isPasswordFresh;
+    private calculateConfidence;
+    private evidenceFreshnessScore;
+    private mapDecisionToStatus;
+    private assessRisk;
+    private calculateBlastRadius;
+    detectDrift(context: ReasoningContext): Promise<DriftEvent[]>;
+    synthesizeRemediation(drift: DriftEvent): Promise<string>;
+}
+//# sourceMappingURL=NeuroSymbolicReasoner.d.ts.map