@planu/cli 1.3.0 → 1.5.0

package/dist/config/license-plans.json

@@ -409,7 +409,24 @@
     "review_pr_against_spec",
     "pr_agent_status",
     "generate_e2e_tests",
-    "e2e_test_status"
+    "e2e_test_status",
+    "validate_docs_registry",
+    "discover_docs_url",
+    "doc_compliance_report",
+    "export_audit_trail",
+    "watch_spec_drift",
+    "coordinate_refactor",
+    "sync_refactor_status",
+    "generate_compliance_tests",
+    "compliance_coverage_report",
+    "configure_auto_promotion",
+    "check_auto_promotion",
+    "set_spec_budget",
+    "budget_status",
+    "record_spend",
+    "discover_mcp_gateways",
+    "federation_discovery_status",
+    "dogfood_status"
   ],
   "alwaysAllowed": [
     "activate_license",

package/dist/engine/audit-trail/formatter.d.ts

@@ -0,0 +1,13 @@
+import type { AuditTrailEntry } from '../../types/audit.js';
+/**
+ * Build a partial AuditTrailEntry (without the `hash` field) from a tool invocation.
+ * The caller must compute and attach `hash` via `hashEntry()` before storing.
+ */
+export declare function buildAuditEntry(params: {
+    toolName: string;
+    args: unknown;
+    outputType: 'success' | 'error';
+    durationMs: number;
+    prevHash: string;
+}): Omit<AuditTrailEntry, 'hash'>;
+//# sourceMappingURL=formatter.d.ts.map

package/dist/engine/audit-trail/formatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatter.d.ts","sourceRoot":"","sources":["../../../src/engine/audit-trail/formatter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAW5D;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,SAAS,GAAG,OAAO,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAehC"}

package/dist/engine/audit-trail/formatter.js

@@ -0,0 +1,43 @@
+// engine/audit-trail/formatter.ts — Builds AuditTrailEntry records for SPEC-387
+import { randomUUID } from 'node:crypto';
+/** Maximum length of the sanitized inputSummary field. */
+const INPUT_SUMMARY_MAX = 200;
+/**
+ * Patterns that look like secret tokens/keys in serialized args.
+ * Replaces the value with [REDACTED] to prevent credential leakage.
+ */
+const SECRET_PATTERN = /(token|key|secret|password|auth)["']?\s*[:=]\s*["'][^"']{4,}/gi;
+/**
+ * Build a partial AuditTrailEntry (without the `hash` field) from a tool invocation.
+ * The caller must compute and attach `hash` via `hashEntry()` before storing.
+ */
+export function buildAuditEntry(params) {
+    const raw = JSON.stringify(params.args ?? {}).slice(0, INPUT_SUMMARY_MAX);
+    const sanitized = raw.replace(SECRET_PATTERN, '[REDACTED]');
+    return {
+        id: randomUUID(),
+        timestamp: new Date().toISOString(),
+        toolName: params.toolName,
+        inputSummary: sanitized,
+        outputType: params.outputType,
+        durationMs: params.durationMs,
+        specId: extractSpecId(params.args),
+        projectPath: extractProjectPath(params.args),
+        prevHash: params.prevHash,
+    };
+}
+function extractSpecId(args) {
+    if (typeof args === 'object' && args !== null && 'specId' in args) {
+        const val = args.specId;
+        return typeof val === 'string' ? val : undefined;
+    }
+    return undefined;
+}
+function extractProjectPath(args) {
+    if (typeof args === 'object' && args !== null && 'projectPath' in args) {
+        const val = args.projectPath;
+        return typeof val === 'string' ? val : undefined;
+    }
+    return undefined;
+}
+//# sourceMappingURL=formatter.js.map

package/dist/engine/audit-trail/formatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatter.js","sourceRoot":"","sources":["../../../src/engine/audit-trail/formatter.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B;;;GAGG;AACH,MAAM,cAAc,GAAG,gEAAgE,CAAC;AAExF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAM/B;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAE5D,OAAO;QACL,EAAE,EAAE,UAAU,EAAE;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,WAAW,EAAE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QAClE,MAAM,GAAG,GAAI,IAAgC,CAAC,MAAM,CAAC;QACrD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QACvE,MAAM,GAAG,GAAI,IAAgC,CAAC,WAAW,CAAC;QAC1D,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/engine/audit-trail/hasher.d.ts

@@ -0,0 +1,18 @@
+import type { AuditTrailEntry } from '../../types/audit.js';
+/**
+ * Compute the SHA-256 hex digest for an audit entry.
+ * Fields are joined with '|' in a deterministic order so the hash is stable
+ * across serialization formats.
+ */
+export declare function hashEntry(entry: Omit<AuditTrailEntry, 'hash'>): string;
+/**
+ * Verify the integrity of a chain of audit entries.
+ *
+ * For each entry:
+ *   1. `prevHash` must match the previous entry's `hash` (empty string for index 0).
+ *   2. The recomputed hash of the entry's fields must match the stored `hash`.
+ *
+ * Returns true only when every entry passes both checks.
+ */
+export declare function verifyChain(entries: AuditTrailEntry[]): boolean;
+//# sourceMappingURL=hasher.d.ts.map

package/dist/engine/audit-trail/hasher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hasher.d.ts","sourceRoot":"","sources":["../../../src/engine/audit-trail/hasher.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,MAAM,CAWtE;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,OAAO,CAkB/D"}

package/dist/engine/audit-trail/hasher.js

@@ -0,0 +1,46 @@
+// engine/audit-trail/hasher.ts — SHA-256 hash chain for SPEC-387 audit entries
+import { createHash } from 'node:crypto';
+/**
+ * Compute the SHA-256 hex digest for an audit entry.
+ * Fields are joined with '|' in a deterministic order so the hash is stable
+ * across serialization formats.
+ */
+export function hashEntry(entry) {
+    const content = [
+        entry.id,
+        entry.timestamp,
+        entry.toolName,
+        entry.inputSummary,
+        entry.outputType,
+        String(entry.durationMs),
+        entry.prevHash,
+    ].join('|');
+    return createHash('sha256').update(content, 'utf8').digest('hex');
+}
+/**
+ * Verify the integrity of a chain of audit entries.
+ *
+ * For each entry:
+ *   1. `prevHash` must match the previous entry's `hash` (empty string for index 0).
+ *   2. The recomputed hash of the entry's fields must match the stored `hash`.
+ *
+ * Returns true only when every entry passes both checks.
+ */
+export function verifyChain(entries) {
+    for (let i = 0; i < entries.length; i++) {
+        const entry = entries[i];
+        if (entry === undefined) {
+            return false;
+        }
+        const expectedPrevHash = i === 0 ? '' : (entries[i - 1]?.hash ?? '');
+        if (entry.prevHash !== expectedPrevHash) {
+            return false;
+        }
+        const { hash, ...rest } = entry;
+        if (hashEntry(rest) !== hash) {
+            return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=hasher.js.map

package/dist/engine/audit-trail/hasher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hasher.js","sourceRoot":"","sources":["../../../src/engine/audit-trail/hasher.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAoC;IAC5D,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,EAAE;QACR,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,UAAU;QAChB,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QACxB,KAAK,CAAC,QAAQ;KACf,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,OAA0B;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAChC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/engine/audit-trail/index.d.ts

@@ -3,4 +3,6 @@ export type { AppendEventInput } from './logger.js';
 export { queryAuditLog } from './query.js';
 export { verifyChainIntegrity } from './verifier.js';
 export { generateAttestation } from './attestation.js';
+export { hashEntry, verifyChain } from './hasher.js';
+export { buildAuditEntry } from './formatter.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/engine/audit-trail/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/engine/audit-trail/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/engine/audit-trail/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/engine/audit-trail/index.js

@@ -1,6 +1,9 @@
-// engine/audit-trail/index.ts — Barrel export for audit-trail engine module (SPEC-167)
+// engine/audit-trail/index.ts — Barrel export for audit-trail engine module (SPEC-167 + SPEC-387)
 export { appendEvent } from './logger.js';
 export { queryAuditLog } from './query.js';
 export { verifyChainIntegrity } from './verifier.js';
 export { generateAttestation } from './attestation.js';
+// SPEC-387: EU AI Act Article 12 — tool-invocation audit chain
+export { hashEntry, verifyChain } from './hasher.js';
+export { buildAuditEntry } from './formatter.js';
 //# sourceMappingURL=index.js.map

package/dist/engine/audit-trail/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/engine/audit-trail/index.ts"],"names":[],"mappings":"AAAA,uFAAuF;AAEvF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/engine/audit-trail/index.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAElG,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,+DAA+D;AAC/D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/engine/auto-promoter.d.ts

@@ -0,0 +1,14 @@
+import type { Spec } from '../types/spec/core.js';
+import type { AutoPromoterConfig, ConfidenceScore } from '../types/auto-promoter.js';
+/**
+ * Calculate a confidence score for auto-promoting a spec.
+ * High-risk specs always get riskPenalty=100 (never eligible).
+ * Medium-risk specs get penalty=20. Low-risk gets 0.
+ * A dependency bonus of +10 is added when all dependencies are satisfied.
+ */
+export declare function calculateConfidence(spec: Spec, readinessScore: number, config: AutoPromoterConfig): ConfidenceScore;
+/**
+ * Return the default AutoPromoterConfig for a project.
+ */
+export declare function getDefaultConfig(projectPath: string): AutoPromoterConfig;
+//# sourceMappingURL=auto-promoter.d.ts.map

package/dist/engine/auto-promoter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-promoter.d.ts","sourceRoot":"","sources":["../../src/engine/auto-promoter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAErF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,IAAI,EACV,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,kBAAkB,GACzB,eAAe,CA0BjB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,CAQxE"}

package/dist/engine/auto-promoter.js

@@ -0,0 +1,40 @@
+// engine/auto-promoter.ts — Auto-Promotion Confidence Scoring logic (SPEC-391)
+/**
+ * Calculate a confidence score for auto-promoting a spec.
+ * High-risk specs always get riskPenalty=100 (never eligible).
+ * Medium-risk specs get penalty=20. Low-risk gets 0.
+ * A dependency bonus of +10 is added when all dependencies are satisfied.
+ */
+export function calculateConfidence(spec, readinessScore, config) {
+    const riskPenalty = spec.risk === 'high' ? 100 : spec.risk === 'medium' ? 20 : 0;
+    // Dependency bonus: +10 when spec has no pending dependencies
+    const noDeps = spec.dependencies.length === 0;
+    const dependencyBonus = noDeps ? 10 : 0;
+    const overall = Math.max(0, Math.min(100, readinessScore - riskPenalty + dependencyBonus));
+    const riskAllowed = spec.risk !== 'high' && (config.maxRisk === 'medium' ? true : spec.risk === 'low');
+    const eligible = overall >= config.readinessThreshold && riskAllowed;
+    const reason = eligible
+        ? `Score ${overall} >= threshold ${config.readinessThreshold}. Ready to auto-promote.`
+        : `Score ${overall} < threshold ${config.readinessThreshold} or risk too high.`;
+    return {
+        overall,
+        readiness: readinessScore,
+        riskPenalty,
+        dependencyBonus,
+        eligible,
+        reason,
+    };
+}
+/**
+ * Return the default AutoPromoterConfig for a project.
+ */
+export function getDefaultConfig(projectPath) {
+    return {
+        projectPath,
+        enabled: false,
+        readinessThreshold: 85,
+        maxRisk: 'medium',
+        requireDependenciesDone: true,
+    };
+}
+//# sourceMappingURL=auto-promoter.js.map

package/dist/engine/auto-promoter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-promoter.js","sourceRoot":"","sources":["../../src/engine/auto-promoter.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAK/E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAU,EACV,cAAsB,EACtB,MAA0B;IAE1B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjF,8DAA8D;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,GAAG,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC;IAE3F,MAAM,WAAW,GACf,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAErF,MAAM,QAAQ,GAAG,OAAO,IAAI,MAAM,CAAC,kBAAkB,IAAI,WAAW,CAAC;IAErE,MAAM,MAAM,GAAG,QAAQ;QACrB,CAAC,CAAC,SAAS,OAAO,iBAAiB,MAAM,CAAC,kBAAkB,0BAA0B;QACtF,CAAC,CAAC,SAAS,OAAO,gBAAgB,MAAM,CAAC,kBAAkB,oBAAoB,CAAC;IAElF,OAAO;QACL,OAAO;QACP,SAAS,EAAE,cAAc;QACzB,WAAW;QACX,eAAe;QACf,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO;QACL,WAAW;QACX,OAAO,EAAE,KAAK;QACd,kBAAkB,EAAE,EAAE;QACtB,OAAO,EAAE,QAAQ;QACjB,uBAAuB,EAAE,IAAI;KAC9B,CAAC;AACJ,CAAC"}

package/dist/engine/compliance-test-generator/control-mapper.d.ts

@@ -0,0 +1,4 @@
+import type { ComplianceTestFramework, ComplianceTestControl, MappedTest } from '../../types/compliance-tests.js';
+export declare function getControlsForFrameworks(frameworks: ComplianceTestFramework[]): ComplianceTestControl[];
+export declare function mapCriteriaToControls(criteria: string[], frameworks: ComplianceTestFramework[]): MappedTest[];
+//# sourceMappingURL=control-mapper.d.ts.map

package/dist/engine/compliance-test-generator/control-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-mapper.d.ts","sourceRoot":"","sources":["../../../src/engine/compliance-test-generator/control-mapper.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACrB,UAAU,EACX,MAAM,iCAAiC,CAAC;AAKzC,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,uBAAuB,EAAE,GACpC,qBAAqB,EAAE,CAazB;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAAE,EAClB,UAAU,EAAE,uBAAuB,EAAE,GACpC,UAAU,EAAE,CAqBd"}

package/dist/engine/compliance-test-generator/control-mapper.js

@@ -0,0 +1,41 @@
+// engine/compliance-test-generator/control-mapper.ts — SPEC-390: Maps criteria to compliance controls
+import { SOC2_CONTROLS } from './frameworks/soc2.js';
+import { PCI_DSS_CONTROLS } from './frameworks/pci-dss.js';
+import { ISO_42001_CONTROLS } from './frameworks/iso42001.js';
+export function getControlsForFrameworks(frameworks) {
+    const controls = [];
+    for (const fw of frameworks) {
+        if (fw === 'soc2') {
+            controls.push(...SOC2_CONTROLS);
+        }
+        else if (fw === 'pci-dss') {
+            controls.push(...PCI_DSS_CONTROLS);
+        }
+        else if (fw === 'iso-42001') {
+            controls.push(...ISO_42001_CONTROLS);
+        }
+        // hipaa and gdpr: no built-in controls yet — extensible via future framework files
+    }
+    return controls;
+}
+export function mapCriteriaToControls(criteria, frameworks) {
+    const allControls = getControlsForFrameworks(frameworks);
+    const mapped = [];
+    for (const criterion of criteria) {
+        const lowerCriterion = criterion.toLowerCase();
+        for (const control of allControls) {
+            const matchedKeywords = control.keywords.filter((kw) => lowerCriterion.includes(kw));
+            if (matchedKeywords.length >= 1) {
+                mapped.push({
+                    control,
+                    criterion,
+                    testCode: '', // filled by formatter
+                    rationale: `Criterion mentions: ${matchedKeywords.join(', ')}`,
+                });
+                break; // one control per criterion
+            }
+        }
+    }
+    return mapped;
+}
+//# sourceMappingURL=control-mapper.js.map

package/dist/engine/compliance-test-generator/control-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-mapper.js","sourceRoot":"","sources":["../../../src/engine/compliance-test-generator/control-mapper.ts"],"names":[],"mappings":"AAAA,sGAAsG;AAOtG,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,UAAU,wBAAwB,CACtC,UAAqC;IAErC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC;QACvC,CAAC;QACD,mFAAmF;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAkB,EAClB,UAAqC;IAErC,MAAM,WAAW,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/C,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACrF,IAAI,eAAe,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO;oBACP,SAAS;oBACT,QAAQ,EAAE,EAAE,EAAE,sBAAsB;oBACpC,SAAS,EAAE,uBAAuB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC/D,CAAC,CAAC;gBACH,MAAM,CAAC,4BAA4B;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/engine/compliance-test-generator/frameworks/iso42001.d.ts

@@ -0,0 +1,3 @@
+import type { ComplianceTestControl } from '../../../types/compliance-tests.js';
+export declare const ISO_42001_CONTROLS: ComplianceTestControl[];
+//# sourceMappingURL=iso42001.d.ts.map

package/dist/engine/compliance-test-generator/frameworks/iso42001.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iso42001.d.ts","sourceRoot":"","sources":["../../../../src/engine/compliance-test-generator/frameworks/iso42001.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAEhF,eAAO,MAAM,kBAAkB,EAAE,qBAAqB,EAoDrD,CAAC"}

package/dist/engine/compliance-test-generator/frameworks/iso42001.js

@@ -0,0 +1,55 @@
+// engine/compliance-test-generator/frameworks/iso42001.ts — SPEC-390: ISO-42001 control definitions
+export const ISO_42001_CONTROLS = [
+    {
+        id: 'ISO-42001-4.1',
+        framework: 'iso-42001',
+        title: 'AI System Scope',
+        description: 'Organization defines the scope and context of the AI management system',
+        keywords: [
+            'ai system',
+            'scope',
+            'context',
+            'boundary',
+            'ai model',
+            'machine learning',
+            'model',
+        ],
+    },
+    {
+        id: 'ISO-42001-6.1',
+        framework: 'iso-42001',
+        title: 'Risk Assessment',
+        description: 'AI risks identified, analyzed, and evaluated',
+        keywords: ['risk', 'threat', 'hazard', 'bias', 'fairness', 'harm', 'impact assessment'],
+    },
+    {
+        id: 'ISO-42001-8.4',
+        framework: 'iso-42001',
+        title: 'Data Governance',
+        description: 'Data used for AI is managed with appropriate controls',
+        keywords: [
+            'data quality',
+            'dataset',
+            'training data',
+            'data governance',
+            'data management',
+            'pii',
+            'personal data',
+        ],
+    },
+    {
+        id: 'ISO-42001-9.1',
+        framework: 'iso-42001',
+        title: 'AI Performance Monitoring',
+        description: 'AI system performance is monitored, measured, and evaluated',
+        keywords: ['monitor', 'performance', 'metric', 'accuracy', 'drift', 'evaluation', 'benchmark'],
+    },
+    {
+        id: 'ISO-42001-10.1',
+        framework: 'iso-42001',
+        title: 'Continual Improvement',
+        description: 'Organization continually improves the AI management system',
+        keywords: ['improve', 'improvement', 'feedback', 'corrective action', 'review', 'update model'],
+    },
+];
+//# sourceMappingURL=iso42001.js.map

package/dist/engine/compliance-test-generator/frameworks/iso42001.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iso42001.js","sourceRoot":"","sources":["../../../../src/engine/compliance-test-generator/frameworks/iso42001.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAIpG,MAAM,CAAC,MAAM,kBAAkB,GAA4B;IACzD;QACE,EAAE,EAAE,eAAe;QACnB,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,wEAAwE;QACrF,QAAQ,EAAE;YACR,WAAW;YACX,OAAO;YACP,SAAS;YACT,UAAU;YACV,UAAU;YACV,kBAAkB;YAClB,OAAO;SACR;KACF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,CAAC;KACxF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE;YACR,cAAc;YACd,SAAS;YACT,eAAe;YACf,iBAAiB;YACjB,iBAAiB;YACjB,KAAK;YACL,eAAe;SAChB;KACF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,6DAA6D;QAC1E,QAAQ,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC;KAC/F;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,4DAA4D;QACzE,QAAQ,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,CAAC;KAChG;CACF,CAAC"}

package/dist/engine/compliance-test-generator/frameworks/pci-dss.d.ts

@@ -0,0 +1,3 @@
+import type { ComplianceTestControl } from '../../../types/compliance-tests.js';
+export declare const PCI_DSS_CONTROLS: ComplianceTestControl[];
+//# sourceMappingURL=pci-dss.d.ts.map

package/dist/engine/compliance-test-generator/frameworks/pci-dss.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pci-dss.d.ts","sourceRoot":"","sources":["../../../../src/engine/compliance-test-generator/frameworks/pci-dss.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAEhF,eAAO,MAAM,gBAAgB,EAAE,qBAAqB,EAoDnD,CAAC"}

package/dist/engine/compliance-test-generator/frameworks/pci-dss.js

@@ -0,0 +1,55 @@
+// engine/compliance-test-generator/frameworks/pci-dss.ts — SPEC-390: PCI-DSS control definitions
+export const PCI_DSS_CONTROLS = [
+    {
+        id: 'PCI-3.4',
+        framework: 'pci-dss',
+        title: 'Cardholder Data Encryption',
+        description: 'Primary account numbers must be rendered unreadable',
+        keywords: ['encrypt', 'card', 'pan', 'cardholder', 'payment', 'token', 'mask'],
+    },
+    {
+        id: 'PCI-6.3',
+        framework: 'pci-dss',
+        title: 'Secure Coding Practices',
+        description: 'Software developed according to secure coding guidelines',
+        keywords: [
+            'injection',
+            'xss',
+            'csrf',
+            'input validation',
+            'sanitize',
+            'secure coding',
+            'vulnerability',
+        ],
+    },
+    {
+        id: 'PCI-8.2',
+        framework: 'pci-dss',
+        title: 'User Authentication Management',
+        description: 'Proper identification and authentication for users',
+        keywords: [
+            'password',
+            'mfa',
+            'multi-factor',
+            'credential',
+            'user account',
+            'identity',
+            'session',
+        ],
+    },
+    {
+        id: 'PCI-10.1',
+        framework: 'pci-dss',
+        title: 'Audit Logging',
+        description: 'Link all access to system components to individual users',
+        keywords: ['audit', 'log', 'trail', 'trace', 'event', 'record', 'history'],
+    },
+    {
+        id: 'PCI-12.1',
+        framework: 'pci-dss',
+        title: 'Security Policy',
+        description: 'Establish, publish, maintain, and disseminate a security policy',
+        keywords: ['policy', 'security policy', 'compliance', 'procedure', 'standard', 'guideline'],
+    },
+];
+//# sourceMappingURL=pci-dss.js.map

package/dist/engine/compliance-test-generator/frameworks/pci-dss.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pci-dss.js","sourceRoot":"","sources":["../../../../src/engine/compliance-test-generator/frameworks/pci-dss.ts"],"names":[],"mappings":"AAAA,iGAAiG;AAIjG,MAAM,CAAC,MAAM,gBAAgB,GAA4B;IACvD;QACE,EAAE,EAAE,SAAS;QACb,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,qDAAqD;QAClE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,SAAS;QACb,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,0DAA0D;QACvE,QAAQ,EAAE;YACR,WAAW;YACX,KAAK;YACL,MAAM;YACN,kBAAkB;YAClB,UAAU;YACV,eAAe;YACf,eAAe;SAChB;KACF;IACD;QACE,EAAE,EAAE,SAAS;QACb,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,oDAAoD;QACjE,QAAQ,EAAE;YACR,UAAU;YACV,KAAK;YACL,cAAc;YACd,YAAY;YACZ,cAAc;YACd,UAAU;YACV,SAAS;SACV;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,0DAA0D;QACvE,QAAQ,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;KAC3E;IACD;QACE,EAAE,EAAE,UAAU;QACd,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,iEAAiE;QAC9E,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC;KAC5F;CACF,CAAC"}

package/dist/engine/compliance-test-generator/frameworks/soc2.d.ts

@@ -0,0 +1,3 @@
+import type { ComplianceTestControl } from '../../../types/compliance-tests.js';
+export declare const SOC2_CONTROLS: ComplianceTestControl[];
+//# sourceMappingURL=soc2.d.ts.map

package/dist/engine/compliance-test-generator/frameworks/soc2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"soc2.d.ts","sourceRoot":"","sources":["../../../../src/engine/compliance-test-generator/frameworks/soc2.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAEhF,eAAO,MAAM,aAAa,EAAE,qBAAqB,EA4ChD,CAAC"}

package/dist/engine/compliance-test-generator/frameworks/soc2.js

@@ -0,0 +1,47 @@
+// engine/compliance-test-generator/frameworks/soc2.ts — SPEC-390: SOC2 control definitions
+export const SOC2_CONTROLS = [
+    {
+        id: 'SOC2-CC6.1',
+        framework: 'soc2',
+        title: 'Logical Access Controls',
+        description: 'Controls to prevent unauthorized access',
+        keywords: [
+            'auth',
+            'login',
+            'permission',
+            'access control',
+            'authentication',
+            'authorization',
+            'role',
+        ],
+    },
+    {
+        id: 'SOC2-CC6.3',
+        framework: 'soc2',
+        title: 'Access Removal',
+        description: 'Procedures to remove access when no longer needed',
+        keywords: ['revoke', 'delete user', 'deactivate', 'offboard', 'remove access'],
+    },
+    {
+        id: 'SOC2-CC7.2',
+        framework: 'soc2',
+        title: 'Anomaly Detection',
+        description: 'System monitors for anomalies and security events',
+        keywords: ['monitor', 'alert', 'anomaly', 'detect', 'log', 'audit trail', 'notification'],
+    },
+    {
+        id: 'SOC2-CC8.1',
+        framework: 'soc2',
+        title: 'Change Management',
+        description: 'Authorized, tested, and documented changes',
+        keywords: ['deploy', 'release', 'migration', 'rollback', 'change', 'version'],
+    },
+    {
+        id: 'SOC2-A1.1',
+        framework: 'soc2',
+        title: 'Availability',
+        description: 'System available for operation as committed',
+        keywords: ['uptime', 'availability', 'health check', 'failover', 'sla', 'backup'],
+    },
+];
+//# sourceMappingURL=soc2.js.map

package/dist/engine/compliance-test-generator/frameworks/soc2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"soc2.js","sourceRoot":"","sources":["../../../../src/engine/compliance-test-generator/frameworks/soc2.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAI3F,MAAM,CAAC,MAAM,aAAa,GAA4B;IACpD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,yCAAyC;QACtD,QAAQ,EAAE;YACR,MAAM;YACN,OAAO;YACP,YAAY;YACZ,gBAAgB;YAChB,gBAAgB;YAChB,eAAe;YACf,MAAM;SACP;KACF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,mDAAmD;QAChE,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,mDAAmD;QAChE,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC;KAC1F;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,4CAA4C;QACzD,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;KAC9E;IACD;QACE,EAAE,EAAE,WAAW;QACf,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC;KAClF;CACF,CAAC"}

package/dist/engine/compliance-test-generator/index.d.ts

@@ -0,0 +1,3 @@
+import type { ComplianceTestFramework, TestOutputFormat, ComplianceTestsResult } from '../../types/compliance-tests.js';
+export declare function generateComplianceTests(specPath: string, specId: string, frameworks: ComplianceTestFramework[], outputFormat?: TestOutputFormat): Promise<ComplianceTestsResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/engine/compliance-test-generator/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/engine/compliance-test-generator/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EAEtB,MAAM,iCAAiC,CAAC;AA6CzC,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,uBAAuB,EAAE,EACrC,YAAY,GAAE,gBAAyB,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAuChC"}

package/dist/engine/compliance-test-generator/index.js

@@ -0,0 +1,64 @@
+// engine/compliance-test-generator/index.ts — SPEC-390: Orchestrator for compliance test generation
+import { readFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { mapCriteriaToControls, getControlsForFrameworks } from './control-mapper.js';
+import { formatTest } from './test-formatter.js';
+function extractCriteria(specContent) {
+    const lines = specContent.split('\n');
+    return lines
+        .filter((line) => /^\s*-\s*\[[ x]\]/.test(line))
+        .map((line) => line.replace(/^\s*-\s*\[[ x]\]\s*/, '').trim())
+        .filter((line) => line.length > 0);
+}
+function buildOutputFiles(specId, frameworks, mappedTests, outputFormat) {
+    const files = [];
+    for (const framework of frameworks) {
+        const testsForFramework = mappedTests.filter((t) => t.control.framework === framework);
+        if (testsForFramework.length === 0) {
+            continue;
+        }
+        const ext = outputFormat === 'jest' ? '.test.ts' : outputFormat === 'gherkin' ? '.feature' : '.md';
+        const filePath = `compliance/${specId}/${framework}${ext}`;
+        const content = testsForFramework.map((t) => t.testCode).join('\n');
+        files.push({ path: filePath, content });
+    }
+    return files;
+}
+function buildCoverageReport(frameworks, mappedTests) {
+    const allControls = getControlsForFrameworks(frameworks);
+    const coveredIds = new Set(mappedTests.map((t) => t.control.id));
+    return allControls.map((c) => ({ controlId: c.id, covered: coveredIds.has(c.id) }));
+}
+export async function generateComplianceTests(specPath, specId, frameworks, outputFormat = 'jest') {
+    // Read spec content
+    let specContent = '';
+    if (existsSync(specPath)) {
+        specContent = await readFile(specPath, 'utf-8');
+    }
+    // Extract acceptance criteria lines
+    const criteria = extractCriteria(specContent);
+    // Map criteria to controls
+    const mappedTests = mapCriteriaToControls(criteria, frameworks);
+    // Format each mapped test
+    for (const test of mappedTests) {
+        test.testCode = formatTest(test, outputFormat);
+    }
+    // Build output files (one per framework)
+    const generatedFiles = buildOutputFiles(specId, frameworks, mappedTests, outputFormat);
+    // Build coverage report
+    const coverageReport = buildCoverageReport(frameworks, mappedTests);
+    const coveredCount = coverageReport.filter((r) => r.covered).length;
+    const totalCount = coverageReport.length;
+    return {
+        specId,
+        frameworks,
+        mappedTests,
+        outputFormat,
+        generatedFiles,
+        coverageReport,
+        message: `Generated ${mappedTests.length} compliance tests for ${specId}. ` +
+            `Control coverage: ${coveredCount}/${totalCount}. ` +
+            `Output format: ${outputFormat}.`,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/engine/compliance-test-generator/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/engine/compliance-test-generator/index.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAEpG,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAOrC,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,SAAS,eAAe,CAAC,WAAmB;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC/C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SAC7D,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAc,EACd,UAAqC,EACrC,WAAyB,EACzB,YAA8B;IAE9B,MAAM,KAAK,GAAwC,EAAE,CAAC;IAEtD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QACvF,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GACP,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;QACzF,MAAM,QAAQ,GAAG,cAAc,MAAM,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAAqC,EACrC,WAAyB;IAEzB,MAAM,WAAW,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,MAAc,EACd,UAAqC,EACrC,eAAiC,MAAM;IAEvC,oBAAoB;IACpB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,WAAW,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,oCAAoC;IACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAE9C,2BAA2B;IAC3B,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEhE,0BAA0B;IAC1B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,yCAAyC;IACzC,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAEvF,wBAAwB;IACxB,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAEpE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACpE,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC;IAEzC,OAAO;QACL,MAAM;QACN,UAAU;QACV,WAAW;QACX,YAAY;QACZ,cAAc;QACd,cAAc;QACd,OAAO,EACL,aAAa,WAAW,CAAC,MAAM,yBAAyB,MAAM,IAAI;YAClE,qBAAqB,YAAY,IAAI,UAAU,IAAI;YACnD,kBAAkB,YAAY,GAAG;KACpC,CAAC;AACJ,CAAC"}

package/dist/engine/compliance-test-generator/test-formatter.d.ts

@@ -0,0 +1,6 @@
+import type { MappedTest, TestOutputFormat } from '../../types/compliance-tests.js';
+export declare function formatAsJest(test: MappedTest): string;
+export declare function formatAsGherkin(test: MappedTest): string;
+export declare function formatAsMarkdown(test: MappedTest): string;
+export declare function formatTest(test: MappedTest, format: TestOutputFormat): string;
+//# sourceMappingURL=test-formatter.d.ts.map

package/dist/engine/compliance-test-generator/test-formatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-formatter.d.ts","sourceRoot":"","sources":["../../../src/engine/compliance-test-generator/test-formatter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEpF,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAWrD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAQxD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAMzD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAQ7E"}