@grc-claw/regulatory-change-management 0.8.0

package/dist/index.d.ts

@@ -0,0 +1,180 @@
+/**
+ * RegulatoryChangeManagement - Automated tracking of regulatory changes
+ *
+ * Monitors regulatory sources, detects changes, and maps them to existing controls.
+ * Provides impact analysis and remediation recommendations.
+ *
+ * Features:
+ * - Multi-source regulatory monitoring (RSS, API, web scraping)
+ * - Change detection and classification
+ * - Impact analysis on existing controls
+ * - Automated remediation recommendations
+ * - Compliance gap identification
+ * - Regulatory timeline tracking
+ */
+export interface RegulatorySource {
+    id: string;
+    name: string;
+    type: 'rss' | 'api' | 'webhook' | 'manual';
+    url: string;
+    framework: string;
+    frequency: 'realtime' | 'daily' | 'weekly' | 'monthly';
+    lastChecked: Date;
+    enabled: boolean;
+}
+export interface RegulatoryChange {
+    id: string;
+    sourceId: string;
+    title: string;
+    description: string;
+    effectiveDate: Date;
+    publishedDate: Date;
+    framework: string;
+    changeType: 'new_regulation' | 'amendment' | 'guidance' | 'enforcement' | 'deadline';
+    severity: 'critical' | 'high' | 'medium' | 'low';
+    affectedControls: string[];
+    impactAnalysis?: ImpactAnalysis;
+    status: 'detected' | 'analyzed' | 'acknowledged' | 'in_remediation' | 'completed';
+}
+export interface ImpactAnalysis {
+    affectedControls: AffectedControl[];
+    overallImpact: 'critical' | 'high' | 'medium' | 'low' | 'none';
+    estimatedEffort: string;
+    recommendedActions: string[];
+    deadlineImplications: string[];
+}
+export interface AffectedControl {
+    controlId: string;
+    framework: string;
+    impact: 'critical' | 'high' | 'medium' | 'low' | 'none';
+    gapDescription: string;
+    remediationRequired: boolean;
+    estimatedEffort: string;
+}
+export interface RegulatoryTimeline {
+    changeId: string;
+    milestones: TimelineMilestone[];
+    currentPhase: string;
+    daysRemaining?: number;
+}
+export interface TimelineMilestone {
+    name: string;
+    date: Date;
+    status: 'pending' | 'in_progress' | 'completed' | 'overdue';
+    description: string;
+}
+export interface ComplianceGap {
+    id: string;
+    changeId: string;
+    controlId: string;
+    framework: string;
+    gapType: 'new_requirement' | 'strengthened_requirement' | 'new_evidence' | 'deadline_change';
+    description: string;
+    remediationPlan?: RemediationPlan;
+    status: 'open' | 'in_remediation' | 'closed';
+}
+export interface RemediationPlan {
+    steps: RemediationStep[];
+    estimatedEffort: string;
+    assignedTo?: string;
+    deadline?: Date;
+    status: 'not_started' | 'in_progress' | 'completed';
+}
+export interface RemediationStep {
+    name: string;
+    description: string;
+    estimatedHours: number;
+    dependencies: string[];
+    status: 'pending' | 'in_progress' | 'completed';
+}
+export declare class RegulatoryChangeManagement {
+    private readonly options;
+    private sources;
+    private changes;
+    private gaps;
+    private timelines;
+    constructor(options?: {
+        checkIntervalMs?: number;
+        maxChanges?: number;
+        autoAnalyze?: boolean;
+    });
+    /**
+     * Register a regulatory source
+     */
+    registerSource(source: RegulatorySource): void;
+    /**
+     * Check for regulatory changes
+     */
+    checkForChanges(): Promise<RegulatoryChange[]>;
+    /**
+     * Analyze impact of a regulatory change
+     */
+    analyzeChange(changeId: string): Promise<ImpactAnalysis | null>;
+    /**
+     * Get all regulatory changes
+     */
+    getChanges(filters?: {
+        framework?: string;
+        severity?: string;
+        status?: string;
+        fromDate?: Date;
+        toDate?: Date;
+    }): RegulatoryChange[];
+    /**
+     * Get compliance gaps
+     */
+    getGaps(filters?: {
+        framework?: string;
+        status?: string;
+        changeId?: string;
+    }): ComplianceGap[];
+    /**
+     * Get timeline for a change
+     */
+    getTimeline(changeId: string): RegulatoryTimeline | undefined;
+    /**
+     * Update gap status
+     */
+    updateGapStatus(gapId: string, status: ComplianceGap['status']): void;
+    /**
+     * Create remediation plan for a gap
+     */
+    createRemediationPlan(gapId: string, plan: RemediationPlan): void;
+    /**
+     * Get regulatory sources
+     */
+    getSources(): RegulatorySource[];
+    /**
+     * Fetch changes from a source (stub - would integrate with real APIs)
+     */
+    private fetchChanges;
+    /**
+     * Analyze affected controls
+     */
+    private analyzeAffectedControls;
+    /**
+     * Calculate overall impact
+     */
+    private calculateOverallImpact;
+    /**
+     * Estimate remediation effort
+     */
+    private estimateRemediationEffort;
+    /**
+     * Generate recommendations
+     */
+    private generateRecommendations;
+    /**
+     * Analyze deadline implications
+     */
+    private analyzeDeadlineImplications;
+    /**
+     * Create compliance gaps
+     */
+    private createComplianceGaps;
+    /**
+     * Create timeline
+     */
+    private createTimeline;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IACvD,WAAW,EAAE,IAAI,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,IAAI,CAAC;IACpB,aAAa,EAAE,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,gBAAgB,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,UAAU,CAAC;IACrF,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,cAAc,GAAG,gBAAgB,GAAG,WAAW,CAAC;CACnF;AAED,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,eAAe,EAAE,CAAC;IACpC,aAAa,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC/D,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,CAAC;IAC5D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,iBAAiB,GAAG,0BAA0B,GAAG,cAAc,GAAG,iBAAiB,CAAC;IAC7F,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,QAAQ,CAAC;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,MAAM,EAAE,aAAa,GAAG,aAAa,GAAG,WAAW,CAAC;CACrD;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;CACjD;AAED,qBAAa,0BAA0B;IAOnC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,OAAO,CAAC,OAAO,CAA4C;IAC3D,OAAO,CAAC,OAAO,CAA4C;IAC3D,OAAO,CAAC,IAAI,CAAyC;IACrD,OAAO,CAAC,SAAS,CAA8C;gBAG5C,OAAO,GAAE;QACxB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,OAAO,CAAC;KAClB;IAUR;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAI9C;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IA6BpD;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IA2BrE;;OAEG;IACH,UAAU,CAAC,OAAO,CAAC,EAAE;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,IAAI,CAAC;QAChB,MAAM,CAAC,EAAE,IAAI,CAAC;KACf,GAAG,gBAAgB,EAAE;IAwBtB;;OAEG;IACH,OAAO,CAAC,OAAO,CAAC,EAAE;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,aAAa,EAAE;IAkBnB;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAI7D;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,IAAI;IAOrE;;OAEG;IACH,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI;IAQjE;;OAEG;IACH,UAAU,IAAI,gBAAgB,EAAE;IAIhC;;OAEG;YACW,YAAY;IAM1B;;OAEG;YACW,uBAAuB;IAMrC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAa9B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAYjC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAoBnC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;OAEG;IACH,OAAO,CAAC,cAAc;CAkCvB"}

package/dist/index.js

@@ -0,0 +1,308 @@
+"use strict";
+/**
+ * RegulatoryChangeManagement - Automated tracking of regulatory changes
+ *
+ * Monitors regulatory sources, detects changes, and maps them to existing controls.
+ * Provides impact analysis and remediation recommendations.
+ *
+ * Features:
+ * - Multi-source regulatory monitoring (RSS, API, web scraping)
+ * - Change detection and classification
+ * - Impact analysis on existing controls
+ * - Automated remediation recommendations
+ * - Compliance gap identification
+ * - Regulatory timeline tracking
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RegulatoryChangeManagement = void 0;
+class RegulatoryChangeManagement {
+    options;
+    sources = new Map();
+    changes = new Map();
+    gaps = new Map();
+    timelines = new Map();
+    constructor(options = {}) {
+        this.options = options;
+        this.options = {
+            checkIntervalMs: 3600000, // 1 hour
+            maxChanges: 1000,
+            autoAnalyze: true,
+            ...options
+        };
+    }
+    /**
+     * Register a regulatory source
+     */
+    registerSource(source) {
+        this.sources.set(source.id, source);
+    }
+    /**
+     * Check for regulatory changes
+     */
+    async checkForChanges() {
+        const newChanges = [];
+        for (const source of this.sources.values()) {
+            if (!source.enabled)
+                continue;
+            try {
+                const changes = await this.fetchChanges(source);
+                for (const change of changes) {
+                    if (!this.changes.has(change.id)) {
+                        this.changes.set(change.id, change);
+                        newChanges.push(change);
+                        // Auto-analyze if enabled
+                        if (this.options.autoAnalyze) {
+                            await this.analyzeChange(change.id);
+                        }
+                    }
+                }
+                source.lastChecked = new Date();
+            }
+            catch (error) {
+                console.error(`Failed to check source ${source.name}:`, error);
+            }
+        }
+        return newChanges;
+    }
+    /**
+     * Analyze impact of a regulatory change
+     */
+    async analyzeChange(changeId) {
+        const change = this.changes.get(changeId);
+        if (!change)
+            return null;
+        // Analyze impact on controls
+        const affectedControls = await this.analyzeAffectedControls(change);
+        const impactAnalysis = {
+            affectedControls,
+            overallImpact: this.calculateOverallImpact(affectedControls),
+            estimatedEffort: this.estimateRemediationEffort(affectedControls),
+            recommendedActions: this.generateRecommendations(change, affectedControls),
+            deadlineImplications: this.analyzeDeadlineImplications(change)
+        };
+        change.impactAnalysis = impactAnalysis;
+        change.status = 'analyzed';
+        // Create compliance gaps
+        this.createComplianceGaps(change, affectedControls);
+        // Create timeline
+        this.createTimeline(change);
+        return impactAnalysis;
+    }
+    /**
+     * Get all regulatory changes
+     */
+    getChanges(filters) {
+        let changes = Array.from(this.changes.values());
+        if (filters) {
+            if (filters.framework) {
+                changes = changes.filter(c => c.framework === filters.framework);
+            }
+            if (filters.severity) {
+                changes = changes.filter(c => c.severity === filters.severity);
+            }
+            if (filters.status) {
+                changes = changes.filter(c => c.status === filters.status);
+            }
+            if (filters.fromDate) {
+                changes = changes.filter(c => c.publishedDate >= filters.fromDate);
+            }
+            if (filters.toDate) {
+                changes = changes.filter(c => c.publishedDate <= filters.toDate);
+            }
+        }
+        return changes.sort((a, b) => b.publishedDate.getTime() - a.publishedDate.getTime());
+    }
+    /**
+     * Get compliance gaps
+     */
+    getGaps(filters) {
+        let gaps = Array.from(this.gaps.values());
+        if (filters) {
+            if (filters.framework) {
+                gaps = gaps.filter(g => g.framework === filters.framework);
+            }
+            if (filters.status) {
+                gaps = gaps.filter(g => g.status === filters.status);
+            }
+            if (filters.changeId) {
+                gaps = gaps.filter(g => g.changeId === filters.changeId);
+            }
+        }
+        return gaps;
+    }
+    /**
+     * Get timeline for a change
+     */
+    getTimeline(changeId) {
+        return this.timelines.get(changeId);
+    }
+    /**
+     * Update gap status
+     */
+    updateGapStatus(gapId, status) {
+        const gap = this.gaps.get(gapId);
+        if (gap) {
+            gap.status = status;
+        }
+    }
+    /**
+     * Create remediation plan for a gap
+     */
+    createRemediationPlan(gapId, plan) {
+        const gap = this.gaps.get(gapId);
+        if (gap) {
+            gap.remediationPlan = plan;
+            gap.status = 'in_remediation';
+        }
+    }
+    /**
+     * Get regulatory sources
+     */
+    getSources() {
+        return Array.from(this.sources.values());
+    }
+    /**
+     * Fetch changes from a source (stub - would integrate with real APIs)
+     */
+    async fetchChanges(source) {
+        // In a real implementation, this would fetch from RSS/API/webhook
+        // For now, return empty array
+        return [];
+    }
+    /**
+     * Analyze affected controls
+     */
+    async analyzeAffectedControls(change) {
+        // In a real implementation, this would analyze the change against the control framework
+        // For now, return empty array
+        return [];
+    }
+    /**
+     * Calculate overall impact
+     */
+    calculateOverallImpact(controls) {
+        if (controls.length === 0)
+            return 'none';
+        const hasCritical = controls.some(c => c.impact === 'critical');
+        const hasHigh = controls.some(c => c.impact === 'high');
+        const hasMedium = controls.some(c => c.impact === 'medium');
+        if (hasCritical)
+            return 'critical';
+        if (hasHigh)
+            return 'high';
+        if (hasMedium)
+            return 'medium';
+        return 'low';
+    }
+    /**
+     * Estimate remediation effort
+     */
+    estimateRemediationEffort(controls) {
+        const totalHours = controls.reduce((sum, c) => {
+            const hours = parseInt(c.estimatedEffort) || 0;
+            return sum + hours;
+        }, 0);
+        if (totalHours === 0)
+            return 'Minimal';
+        if (totalHours < 40)
+            return `${totalHours} hours`;
+        if (totalHours < 160)
+            return `${Math.round(totalHours / 40)} weeks`;
+        return `${Math.round(totalHours / 160)} months`;
+    }
+    /**
+     * Generate recommendations
+     */
+    generateRecommendations(change, controls) {
+        const recommendations = [];
+        if (controls.length > 0) {
+            recommendations.push(`Review and update ${controls.length} affected controls`);
+        }
+        if (change.severity === 'critical' || change.severity === 'high') {
+            recommendations.push('Prioritize remediation for high-impact changes');
+        }
+        if (change.effectiveDate) {
+            const daysUntilEffective = Math.ceil((change.effectiveDate.getTime() - Date.now()) / (1000 * 60 * 60 * 24));
+            if (daysUntilEffective < 90) {
+                recommendations.push(`Deadline approaching: ${daysUntilEffective} days remaining`);
+            }
+        }
+        return recommendations;
+    }
+    /**
+     * Analyze deadline implications
+     */
+    analyzeDeadlineImplications(change) {
+        const implications = [];
+        if (change.effectiveDate) {
+            const daysUntilEffective = Math.ceil((change.effectiveDate.getTime() - Date.now()) / (1000 * 60 * 60 * 24));
+            if (daysUntilEffective < 30) {
+                implications.push('CRITICAL: Less than 30 days to compliance deadline');
+            }
+            else if (daysUntilEffective < 90) {
+                implications.push('WARNING: Less than 90 days to compliance deadline');
+            }
+            else if (daysUntilEffective < 180) {
+                implications.push('PLANNING: Less than 180 days to compliance deadline');
+            }
+        }
+        return implications;
+    }
+    /**
+     * Create compliance gaps
+     */
+    createComplianceGaps(change, controls) {
+        for (const control of controls) {
+            if (control.remediationRequired) {
+                const gap = {
+                    id: `gap-${change.id}-${control.controlId}`,
+                    changeId: change.id,
+                    controlId: control.controlId,
+                    framework: control.framework,
+                    gapType: 'new_requirement',
+                    description: control.gapDescription,
+                    status: 'open'
+                };
+                this.gaps.set(gap.id, gap);
+            }
+        }
+    }
+    /**
+     * Create timeline
+     */
+    createTimeline(change) {
+        const timeline = {
+            changeId: change.id,
+            milestones: [
+                {
+                    name: 'Detection',
+                    date: change.publishedDate,
+                    status: 'completed',
+                    description: 'Regulatory change detected'
+                },
+                {
+                    name: 'Analysis',
+                    date: new Date(),
+                    status: 'in_progress',
+                    description: 'Impact analysis in progress'
+                },
+                {
+                    name: 'Remediation',
+                    date: new Date(Date.now() + 30 * 24 * 60 * 60 * 1000), // 30 days from now
+                    status: 'pending',
+                    description: 'Implement required changes'
+                },
+                {
+                    name: 'Compliance',
+                    date: change.effectiveDate,
+                    status: 'pending',
+                    description: 'Full compliance achieved'
+                }
+            ],
+            currentPhase: 'Analysis'
+        };
+        this.timelines.set(change.id, timeline);
+    }
+}
+exports.RegulatoryChangeManagement = RegulatoryChangeManagement;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAsFH,MAAa,0BAA0B;IAOlB;IANX,OAAO,GAAkC,IAAI,GAAG,EAAE,CAAC;IACnD,OAAO,GAAkC,IAAI,GAAG,EAAE,CAAC;IACnD,IAAI,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC7C,SAAS,GAAoC,IAAI,GAAG,EAAE,CAAC;IAE/D,YACmB,UAIb,EAAE;QAJW,YAAO,GAAP,OAAO,CAIlB;QAEN,IAAI,CAAC,OAAO,GAAG;YACb,eAAe,EAAE,OAAO,EAAE,SAAS;YACnC,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;YACjB,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAwB;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,UAAU,GAAuB,EAAE,CAAC;QAE1C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,SAAS;YAE9B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAChD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;wBACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;wBACpC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAExB,0BAA0B;wBAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;4BAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;wBACtC,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,MAAM,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;YAClC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,6BAA6B;QAC7B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEpE,MAAM,cAAc,GAAmB;YACrC,gBAAgB;YAChB,aAAa,EAAE,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC;YAC5D,eAAe,EAAE,IAAI,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;YACjE,kBAAkB,EAAE,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,CAAC;YAC1E,oBAAoB,EAAE,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC;SAC/D,CAAC;QAEF,MAAM,CAAC,cAAc,GAAG,cAAc,CAAC;QACvC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;QAE3B,yBAAyB;QACzB,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAEpD,kBAAkB;QAClB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAE5B,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAMV;QACC,IAAI,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAEhD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,QAAS,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,MAAO,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,OAIP;QACC,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAE1C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,KAAa,EAAE,MAA+B;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,KAAa,EAAE,IAAqB;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;YAC3B,GAAG,CAAC,MAAM,GAAG,gBAAgB,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,MAAwB;QACjD,kEAAkE;QAClE,8BAA8B;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB,CAAC,MAAwB;QAC5D,wFAAwF;QACxF,8BAA8B;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,QAA2B;QACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAEzC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAE5D,IAAI,WAAW;YAAE,OAAO,UAAU,CAAC;QACnC,IAAI,OAAO;YAAE,OAAO,MAAM,CAAC;QAC3B,IAAI,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,QAA2B;QAC3D,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,GAAG,GAAG,KAAK,CAAC;QACrB,CAAC,EAAE,CAAC,CAAC,CAAC;QAEN,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACvC,IAAI,UAAU,GAAG,EAAE;YAAE,OAAO,GAAG,UAAU,QAAQ,CAAC;QAClD,IAAI,UAAU,GAAG,GAAG;YAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC;QACpE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC;IAClD,CAAC;IAED;;OAEG;IACK,uBAAuB,CAC7B,MAAwB,EACxB,QAA2B;QAE3B,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,eAAe,CAAC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,MAAM,oBAAoB,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACjE,eAAe,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CACtE,CAAC;YACF,IAAI,kBAAkB,GAAG,EAAE,EAAE,CAAC;gBAC5B,eAAe,CAAC,IAAI,CAAC,yBAAyB,kBAAkB,iBAAiB,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,2BAA2B,CAAC,MAAwB;QAC1D,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CACtE,CAAC;YAEF,IAAI,kBAAkB,GAAG,EAAE,EAAE,CAAC;gBAC5B,YAAY,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAC1E,CAAC;iBAAM,IAAI,kBAAkB,GAAG,EAAE,EAAE,CAAC;gBACnC,YAAY,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACzE,CAAC;iBAAM,IAAI,kBAAkB,GAAG,GAAG,EAAE,CAAC;gBACpC,YAAY,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,MAAwB,EACxB,QAA2B;QAE3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAkB;oBACzB,EAAE,EAAE,OAAO,MAAM,CAAC,EAAE,IAAI,OAAO,CAAC,SAAS,EAAE;oBAC3C,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO,EAAE,iBAAiB;oBAC1B,WAAW,EAAE,OAAO,CAAC,cAAc;oBACnC,MAAM,EAAE,MAAM;iBACf,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,MAAwB;QAC7C,MAAM,QAAQ,GAAuB;YACnC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,MAAM,CAAC,aAAa;oBAC1B,MAAM,EAAE,WAAW;oBACnB,WAAW,EAAE,4BAA4B;iBAC1C;gBACD;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,IAAI,IAAI,EAAE;oBAChB,MAAM,EAAE,aAAa;oBACrB,WAAW,EAAE,6BAA6B;iBAC3C;gBACD;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,mBAAmB;oBAC1E,MAAM,EAAE,SAAS;oBACjB,WAAW,EAAE,4BAA4B;iBAC1C;gBACD;oBACE,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,MAAM,CAAC,aAAa;oBAC1B,MAAM,EAAE,SAAS;oBACjB,WAAW,EAAE,0BAA0B;iBACxC;aACF;YACD,YAAY,EAAE,UAAU;SACzB,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;CACF;AAxVD,gEAwVC"}

package/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@grc-claw/regulatory-change-management",
+  "version": "0.8.0",
+  "description": "Automated tracking of regulatory changes and impact analysis",
+  "license": "MIT",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "node --test dist/**/*.test.js"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "typescript": "^5.7.0"
+  }
+}

package/src/index.ts

@@ -0,0 +1,444 @@
+/**
+ * RegulatoryChangeManagement - Automated tracking of regulatory changes
+ * 
+ * Monitors regulatory sources, detects changes, and maps them to existing controls.
+ * Provides impact analysis and remediation recommendations.
+ * 
+ * Features:
+ * - Multi-source regulatory monitoring (RSS, API, web scraping)
+ * - Change detection and classification
+ * - Impact analysis on existing controls
+ * - Automated remediation recommendations
+ * - Compliance gap identification
+ * - Regulatory timeline tracking
+ */
+
+export interface RegulatorySource {
+  id: string;
+  name: string;
+  type: 'rss' | 'api' | 'webhook' | 'manual';
+  url: string;
+  framework: string;
+  frequency: 'realtime' | 'daily' | 'weekly' | 'monthly';
+  lastChecked: Date;
+  enabled: boolean;
+}
+
+export interface RegulatoryChange {
+  id: string;
+  sourceId: string;
+  title: string;
+  description: string;
+  effectiveDate: Date;
+  publishedDate: Date;
+  framework: string;
+  changeType: 'new_regulation' | 'amendment' | 'guidance' | 'enforcement' | 'deadline';
+  severity: 'critical' | 'high' | 'medium' | 'low';
+  affectedControls: string[];
+  impactAnalysis?: ImpactAnalysis;
+  status: 'detected' | 'analyzed' | 'acknowledged' | 'in_remediation' | 'completed';
+}
+
+export interface ImpactAnalysis {
+  affectedControls: AffectedControl[];
+  overallImpact: 'critical' | 'high' | 'medium' | 'low' | 'none';
+  estimatedEffort: string;
+  recommendedActions: string[];
+  deadlineImplications: string[];
+}
+
+export interface AffectedControl {
+  controlId: string;
+  framework: string;
+  impact: 'critical' | 'high' | 'medium' | 'low' | 'none';
+  gapDescription: string;
+  remediationRequired: boolean;
+  estimatedEffort: string;
+}
+
+export interface RegulatoryTimeline {
+  changeId: string;
+  milestones: TimelineMilestone[];
+  currentPhase: string;
+  daysRemaining?: number;
+}
+
+export interface TimelineMilestone {
+  name: string;
+  date: Date;
+  status: 'pending' | 'in_progress' | 'completed' | 'overdue';
+  description: string;
+}
+
+export interface ComplianceGap {
+  id: string;
+  changeId: string;
+  controlId: string;
+  framework: string;
+  gapType: 'new_requirement' | 'strengthened_requirement' | 'new_evidence' | 'deadline_change';
+  description: string;
+  remediationPlan?: RemediationPlan;
+  status: 'open' | 'in_remediation' | 'closed';
+}
+
+export interface RemediationPlan {
+  steps: RemediationStep[];
+  estimatedEffort: string;
+  assignedTo?: string;
+  deadline?: Date;
+  status: 'not_started' | 'in_progress' | 'completed';
+}
+
+export interface RemediationStep {
+  name: string;
+  description: string;
+  estimatedHours: number;
+  dependencies: string[];
+  status: 'pending' | 'in_progress' | 'completed';
+}
+
+export class RegulatoryChangeManagement {
+  private sources: Map<string, RegulatorySource> = new Map();
+  private changes: Map<string, RegulatoryChange> = new Map();
+  private gaps: Map<string, ComplianceGap> = new Map();
+  private timelines: Map<string, RegulatoryTimeline> = new Map();
+
+  constructor(
+    private readonly options: {
+      checkIntervalMs?: number;
+      maxChanges?: number;
+      autoAnalyze?: boolean;
+    } = {}
+  ) {
+    this.options = {
+      checkIntervalMs: 3600000, // 1 hour
+      maxChanges: 1000,
+      autoAnalyze: true,
+      ...options
+    };
+  }
+
+  /**
+   * Register a regulatory source
+   */
+  registerSource(source: RegulatorySource): void {
+    this.sources.set(source.id, source);
+  }
+
+  /**
+   * Check for regulatory changes
+   */
+  async checkForChanges(): Promise<RegulatoryChange[]> {
+    const newChanges: RegulatoryChange[] = [];
+
+    for (const source of this.sources.values()) {
+      if (!source.enabled) continue;
+
+      try {
+        const changes = await this.fetchChanges(source);
+        for (const change of changes) {
+          if (!this.changes.has(change.id)) {
+            this.changes.set(change.id, change);
+            newChanges.push(change);
+
+            // Auto-analyze if enabled
+            if (this.options.autoAnalyze) {
+              await this.analyzeChange(change.id);
+            }
+          }
+        }
+
+        source.lastChecked = new Date();
+      } catch (error) {
+        console.error(`Failed to check source ${source.name}:`, error);
+      }
+    }
+
+    return newChanges;
+  }
+
+  /**
+   * Analyze impact of a regulatory change
+   */
+  async analyzeChange(changeId: string): Promise<ImpactAnalysis | null> {
+    const change = this.changes.get(changeId);
+    if (!change) return null;
+
+    // Analyze impact on controls
+    const affectedControls = await this.analyzeAffectedControls(change);
+    
+    const impactAnalysis: ImpactAnalysis = {
+      affectedControls,
+      overallImpact: this.calculateOverallImpact(affectedControls),
+      estimatedEffort: this.estimateRemediationEffort(affectedControls),
+      recommendedActions: this.generateRecommendations(change, affectedControls),
+      deadlineImplications: this.analyzeDeadlineImplications(change)
+    };
+
+    change.impactAnalysis = impactAnalysis;
+    change.status = 'analyzed';
+
+    // Create compliance gaps
+    this.createComplianceGaps(change, affectedControls);
+
+    // Create timeline
+    this.createTimeline(change);
+
+    return impactAnalysis;
+  }
+
+  /**
+   * Get all regulatory changes
+   */
+  getChanges(filters?: {
+    framework?: string;
+    severity?: string;
+    status?: string;
+    fromDate?: Date;
+    toDate?: Date;
+  }): RegulatoryChange[] {
+    let changes = Array.from(this.changes.values());
+
+    if (filters) {
+      if (filters.framework) {
+        changes = changes.filter(c => c.framework === filters.framework);
+      }
+      if (filters.severity) {
+        changes = changes.filter(c => c.severity === filters.severity);
+      }
+      if (filters.status) {
+        changes = changes.filter(c => c.status === filters.status);
+      }
+      if (filters.fromDate) {
+        changes = changes.filter(c => c.publishedDate >= filters.fromDate!);
+      }
+      if (filters.toDate) {
+        changes = changes.filter(c => c.publishedDate <= filters.toDate!);
+      }
+    }
+
+    return changes.sort((a, b) => b.publishedDate.getTime() - a.publishedDate.getTime());
+  }
+
+  /**
+   * Get compliance gaps
+   */
+  getGaps(filters?: {
+    framework?: string;
+    status?: string;
+    changeId?: string;
+  }): ComplianceGap[] {
+    let gaps = Array.from(this.gaps.values());
+
+    if (filters) {
+      if (filters.framework) {
+        gaps = gaps.filter(g => g.framework === filters.framework);
+      }
+      if (filters.status) {
+        gaps = gaps.filter(g => g.status === filters.status);
+      }
+      if (filters.changeId) {
+        gaps = gaps.filter(g => g.changeId === filters.changeId);
+      }
+    }
+
+    return gaps;
+  }
+
+  /**
+   * Get timeline for a change
+   */
+  getTimeline(changeId: string): RegulatoryTimeline | undefined {
+    return this.timelines.get(changeId);
+  }
+
+  /**
+   * Update gap status
+   */
+  updateGapStatus(gapId: string, status: ComplianceGap['status']): void {
+    const gap = this.gaps.get(gapId);
+    if (gap) {
+      gap.status = status;
+    }
+  }
+
+  /**
+   * Create remediation plan for a gap
+   */
+  createRemediationPlan(gapId: string, plan: RemediationPlan): void {
+    const gap = this.gaps.get(gapId);
+    if (gap) {
+      gap.remediationPlan = plan;
+      gap.status = 'in_remediation';
+    }
+  }
+
+  /**
+   * Get regulatory sources
+   */
+  getSources(): RegulatorySource[] {
+    return Array.from(this.sources.values());
+  }
+
+  /**
+   * Fetch changes from a source (stub - would integrate with real APIs)
+   */
+  private async fetchChanges(source: RegulatorySource): Promise<RegulatoryChange[]> {
+    // In a real implementation, this would fetch from RSS/API/webhook
+    // For now, return empty array
+    return [];
+  }
+
+  /**
+   * Analyze affected controls
+   */
+  private async analyzeAffectedControls(change: RegulatoryChange): Promise<AffectedControl[]> {
+    // In a real implementation, this would analyze the change against the control framework
+    // For now, return empty array
+    return [];
+  }
+
+  /**
+   * Calculate overall impact
+   */
+  private calculateOverallImpact(controls: AffectedControl[]): ImpactAnalysis['overallImpact'] {
+    if (controls.length === 0) return 'none';
+    
+    const hasCritical = controls.some(c => c.impact === 'critical');
+    const hasHigh = controls.some(c => c.impact === 'high');
+    const hasMedium = controls.some(c => c.impact === 'medium');
+
+    if (hasCritical) return 'critical';
+    if (hasHigh) return 'high';
+    if (hasMedium) return 'medium';
+    return 'low';
+  }
+
+  /**
+   * Estimate remediation effort
+   */
+  private estimateRemediationEffort(controls: AffectedControl[]): string {
+    const totalHours = controls.reduce((sum, c) => {
+      const hours = parseInt(c.estimatedEffort) || 0;
+      return sum + hours;
+    }, 0);
+
+    if (totalHours === 0) return 'Minimal';
+    if (totalHours < 40) return `${totalHours} hours`;
+    if (totalHours < 160) return `${Math.round(totalHours / 40)} weeks`;
+    return `${Math.round(totalHours / 160)} months`;
+  }
+
+  /**
+   * Generate recommendations
+   */
+  private generateRecommendations(
+    change: RegulatoryChange, 
+    controls: AffectedControl[]
+  ): string[] {
+    const recommendations: string[] = [];
+
+    if (controls.length > 0) {
+      recommendations.push(`Review and update ${controls.length} affected controls`);
+    }
+
+    if (change.severity === 'critical' || change.severity === 'high') {
+      recommendations.push('Prioritize remediation for high-impact changes');
+    }
+
+    if (change.effectiveDate) {
+      const daysUntilEffective = Math.ceil(
+        (change.effectiveDate.getTime() - Date.now()) / (1000 * 60 * 60 * 24)
+      );
+      if (daysUntilEffective < 90) {
+        recommendations.push(`Deadline approaching: ${daysUntilEffective} days remaining`);
+      }
+    }
+
+    return recommendations;
+  }
+
+  /**
+   * Analyze deadline implications
+   */
+  private analyzeDeadlineImplications(change: RegulatoryChange): string[] {
+    const implications: string[] = [];
+
+    if (change.effectiveDate) {
+      const daysUntilEffective = Math.ceil(
+        (change.effectiveDate.getTime() - Date.now()) / (1000 * 60 * 60 * 24)
+      );
+
+      if (daysUntilEffective < 30) {
+        implications.push('CRITICAL: Less than 30 days to compliance deadline');
+      } else if (daysUntilEffective < 90) {
+        implications.push('WARNING: Less than 90 days to compliance deadline');
+      } else if (daysUntilEffective < 180) {
+        implications.push('PLANNING: Less than 180 days to compliance deadline');
+      }
+    }
+
+    return implications;
+  }
+
+  /**
+   * Create compliance gaps
+   */
+  private createComplianceGaps(
+    change: RegulatoryChange, 
+    controls: AffectedControl[]
+  ): void {
+    for (const control of controls) {
+      if (control.remediationRequired) {
+        const gap: ComplianceGap = {
+          id: `gap-${change.id}-${control.controlId}`,
+          changeId: change.id,
+          controlId: control.controlId,
+          framework: control.framework,
+          gapType: 'new_requirement',
+          description: control.gapDescription,
+          status: 'open'
+        };
+        this.gaps.set(gap.id, gap);
+      }
+    }
+  }
+
+  /**
+   * Create timeline
+   */
+  private createTimeline(change: RegulatoryChange): void {
+    const timeline: RegulatoryTimeline = {
+      changeId: change.id,
+      milestones: [
+        {
+          name: 'Detection',
+          date: change.publishedDate,
+          status: 'completed',
+          description: 'Regulatory change detected'
+        },
+        {
+          name: 'Analysis',
+          date: new Date(),
+          status: 'in_progress',
+          description: 'Impact analysis in progress'
+        },
+        {
+          name: 'Remediation',
+          date: new Date(Date.now() + 30 * 24 * 60 * 60 * 1000), // 30 days from now
+          status: 'pending',
+          description: 'Implement required changes'
+        },
+        {
+          name: 'Compliance',
+          date: change.effectiveDate,
+          status: 'pending',
+          description: 'Full compliance achieved'
+        }
+      ],
+      currentPhase: 'Analysis'
+    };
+
+    this.timelines.set(change.id, timeline);
+  }
+}

package/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "rootDir": "src",
+    "outDir": "dist",
+    "composite": true
+  },
+  "include": ["src/**/*"]
+}