@pactosigna/records 0.1.4 → 0.1.5

package/dist/cli.js

@@ -1996,7 +1996,11 @@ var RiskGapCodeSchema = z29.enum([
   "unacceptable_no_benefit",
   "preliminary_not_analyzed",
   "missing_body_rationale",
-  "orphaned_body_section"
+  "orphaned_body_section",
+  "architecture_no_risk_analysis",
+  "security_hazard_no_asset_ref",
+  "high_cia_no_security_hazard",
+  "hazard_no_software_item"
 ]);
 var RiskGapSeveritySchema = z29.enum(["error", "warning"]);
 var MitigationSchema = z29.object({
@@ -2066,7 +2070,9 @@ var HazardSoftwareFrontmatterSchema = z29.object({
   leads_to: z29.array(z29.string()).optional(),
   hazard_category: z29.string().optional(),
   detection_score: z29.number().int().min(1).max(5).optional(),
-  detection_method: z29.string().optional()
+  detection_method: z29.string().optional(),
+  /** Reference to the HLD/SDD software item this hazard applies to (IEC 62304 §7.1) */
+  software_item: z29.string().min(1).optional()
 });
 var HazardSecurityFrontmatterSchema = z29.object({
   type: z29.literal("haz_soe_security"),
@@ -2078,7 +2084,9 @@ var HazardSecurityFrontmatterSchema = z29.object({
   approvers: z29.array(z29.string()).optional(),
   preliminary: z29.boolean().default(false),
   leads_to: z29.array(z29.string()).optional(),
-  hazard_category: z29.string().optional()
+  hazard_category: z29.string().optional(),
+  /** Reference to the HLD/SDD software item this security hazard applies to (IEC 62304 §7.1, IEC 81001-5-1) */
+  software_item: z29.string().min(1).optional()
 });
 var HazardFrontmatterSchema = z29.discriminatedUnion("type", [
   HazardSoftwareFrontmatterSchema,
@@ -2220,6 +2228,22 @@ var SoftwareTestPlanFrontmatterSchema = z52.object({
   approvers: z52.array(z52.string()).optional()
 });
 var SoftwareItemTypeSchema = z62.enum(["system", "subsystem", "component", "unit"]);
+var AssetTypeSchema = z62.enum([
+  "data_store",
+  "api_endpoint",
+  "background_worker",
+  "auth_provider",
+  "external_service",
+  "user_interface",
+  "message_queue",
+  "network_boundary"
+]);
+var CiaImpactLevelSchema = z62.enum(["low", "medium", "high"]);
+var CiaImpactSchema = z62.object({
+  confidentiality: CiaImpactLevelSchema.optional(),
+  integrity: CiaImpactLevelSchema.optional(),
+  availability: CiaImpactLevelSchema.optional()
+});
 var SegregationSchema = z62.object({
   mechanism: z62.string().min(1),
   rationale: z62.string().min(1)
@@ -2242,7 +2266,11 @@ var ArchitectureFrontmatterSchema = z62.object({
   /** Approver list — required for all regulated document types */
   approvers: z62.array(z62.string()).min(1),
   /** SRS requirement IDs this architecture item implements (IEC 62304 §5.3.1) */
-  implements: z62.array(z62.string().min(1)).optional()
+  implements: z62.array(z62.string().min(1)).optional(),
+  /** IEC 81001-5-1 asset classification for this software item (optional, enables security gap detection) */
+  asset_types: z62.array(AssetTypeSchema).optional(),
+  /** CIA impact assessment — enables automated detection of high-value assets missing security analysis */
+  cia_impact: CiaImpactSchema.optional()
 });
 var DetailedDesignFrontmatterSchema = z62.object({
   id: z62.string().min(1),
@@ -2262,7 +2290,11 @@ var DetailedDesignFrontmatterSchema = z62.object({
   /** Approver list — required for all regulated document types */
   approvers: z62.array(z62.string()).min(1),
   /** SRS requirement IDs this design item implements (IEC 62304 §5.4.2) */
-  implements: z62.array(z62.string().min(1)).optional()
+  implements: z62.array(z62.string().min(1)).optional(),
+  /** IEC 81001-5-1 asset classification for this software item (optional, enables security gap detection) */
+  asset_types: z62.array(AssetTypeSchema).optional(),
+  /** CIA impact assessment — enables automated detection of high-value assets missing security analysis */
+  cia_impact: CiaImpactSchema.optional()
 });
 var AnomalyCategorySchema = z72.enum([
   "bug",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pactosigna/records",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "type": "module",
   "description": "Generate audit-ready regulatory PDF records from PactoSigna-compliant git repositories",
   "publishConfig": {