@plumbus/core 0.1.0

package/dist/governance/__tests__/policies.test.js

@@ -0,0 +1,203 @@
+import { describe, expect, it } from 'vitest';
+import { z } from 'zod';
+import { FieldClassification, PolicyProfile, RuleStatus } from '../../types/enums.js';
+import { builtInProfiles, evaluatePolicyProfile } from '../policies.js';
+import { formatPolicyReport, generateAllPolicyReports, generatePolicyReport } from '../reports.js';
+function mockCap(overrides) {
+    return {
+        name: 'test',
+        kind: 'action',
+        domain: 'test',
+        input: z.object({}),
+        output: z.object({}),
+        effects: { data: [], events: [], external: [], ai: false },
+        handler: async () => ({}),
+        ...overrides,
+    };
+}
+function mockEntity(overrides) {
+    return {
+        name: 'TestEntity',
+        fields: { id: { type: 'id', options: {} } },
+        ...overrides,
+    };
+}
+function emptyInventory(overrides) {
+    return {
+        capabilities: [],
+        entities: [],
+        flows: [],
+        events: [],
+        prompts: [],
+        ...overrides,
+    };
+}
+// ── Policy Profiles Tests ──
+describe('Policy Profiles', () => {
+    it('has all built-in profiles defined', () => {
+        expect(builtInProfiles[PolicyProfile.PciDss]).toBeDefined();
+        expect(builtInProfiles[PolicyProfile.Gdpr]).toBeDefined();
+        expect(builtInProfiles[PolicyProfile.Soc2]).toBeDefined();
+        expect(builtInProfiles[PolicyProfile.Hipaa]).toBeDefined();
+        expect(builtInProfiles[PolicyProfile.InternalSecurityBaseline]).toBeDefined();
+    });
+    it('evaluates PCI DSS — all pass for compliant inventory', () => {
+        const inv = emptyInventory({
+            capabilities: [
+                mockCap({ access: { roles: ['admin'] }, audit: { enabled: true, event: 'x' } }),
+            ],
+            entities: [
+                mockEntity({
+                    tenantScoped: true,
+                    fields: {
+                        ssn: {
+                            type: 'string',
+                            options: { classification: FieldClassification.Sensitive, encrypted: true },
+                        },
+                    },
+                }),
+            ],
+        });
+        const { results, score } = evaluatePolicyProfile(PolicyProfile.PciDss, inv);
+        expect(score).toBe(100);
+        expect(results.every((r) => r.status === RuleStatus.Pass)).toBe(true);
+    });
+    it('evaluates PCI DSS — fails for unencrypted sensitive fields', () => {
+        const inv = emptyInventory({
+            capabilities: [mockCap({ access: { roles: ['admin'] } })],
+            entities: [
+                mockEntity({
+                    tenantScoped: true,
+                    fields: {
+                        card: {
+                            type: 'string',
+                            options: { classification: FieldClassification.Sensitive },
+                        },
+                    },
+                }),
+            ],
+        });
+        const { results } = evaluatePolicyProfile(PolicyProfile.PciDss, inv);
+        const encRule = results.find((r) => r.rule === 'pci-encryption-required');
+        expect(encRule?.status).toBe(RuleStatus.Fail);
+    });
+    it('evaluates GDPR — flags missing retention', () => {
+        const inv = emptyInventory({
+            capabilities: [mockCap({ access: { roles: ['admin'] } })],
+            entities: [
+                mockEntity({
+                    tenantScoped: true,
+                    fields: {
+                        email: {
+                            type: 'string',
+                            options: { classification: FieldClassification.Personal },
+                        },
+                    },
+                }),
+            ],
+        });
+        const { results } = evaluatePolicyProfile(PolicyProfile.Gdpr, inv);
+        const retRule = results.find((r) => r.rule === 'gdpr-retention-policy');
+        expect(retRule?.status).toBe(RuleStatus.Partial);
+    });
+    it('evaluates HIPAA — fails for unmasked sensitive fields', () => {
+        const inv = emptyInventory({
+            capabilities: [mockCap({ access: { roles: ['admin'] } })],
+            entities: [
+                mockEntity({
+                    tenantScoped: true,
+                    fields: {
+                        phi: {
+                            type: 'string',
+                            options: { classification: FieldClassification.Sensitive, encrypted: true },
+                        },
+                    },
+                }),
+            ],
+        });
+        const { results } = evaluatePolicyProfile(PolicyProfile.Hipaa, inv);
+        const maskRule = results.find((r) => r.rule === 'hipaa-field-masking');
+        expect(maskRule?.status).toBe(RuleStatus.Fail);
+    });
+    it('evaluates SOC2 — passes with full audit', () => {
+        const inv = emptyInventory({
+            capabilities: [
+                mockCap({ access: { roles: ['admin'] }, audit: { enabled: true, event: 'x' } }),
+            ],
+            entities: [mockEntity({ tenantScoped: true })],
+        });
+        const { score } = evaluatePolicyProfile(PolicyProfile.Soc2, inv);
+        expect(score).toBe(100);
+    });
+    it('respects overrides in policy evaluation', () => {
+        const inv = emptyInventory({
+            capabilities: [mockCap()], // no access policy — would fail
+        });
+        const { results } = evaluatePolicyProfile(PolicyProfile.InternalSecurityBaseline, inv, [
+            {
+                rule: 'access-control-required',
+                justification: 'testing',
+                author: 'dev',
+                timestamp: new Date(),
+            },
+        ]);
+        const rule = results.find((r) => r.rule === 'access-control-required');
+        expect(rule?.status).toBe(RuleStatus.Override);
+    });
+});
+// ── Report Generator Tests ──
+describe('Policy Report Generator', () => {
+    it('generates a report with score and results', () => {
+        const report = generatePolicyReport(PolicyProfile.PciDss, emptyInventory());
+        expect(report.policy).toBe(PolicyProfile.PciDss);
+        expect(typeof report.compatibilityScore).toBe('number');
+        expect(report.results.length).toBeGreaterThan(0);
+        expect(report.timestamp).toBeInstanceOf(Date);
+    });
+    it('includes recommendations for failing rules', () => {
+        const inv = emptyInventory({
+            capabilities: [mockCap()], // no access policy
+        });
+        const report = generatePolicyReport(PolicyProfile.PciDss, inv);
+        expect(report.recommendations?.length).toBeGreaterThan(0);
+        expect(report.recommendations?.some((r) => r.includes('access-control-required'))).toBe(true);
+    });
+    it('includes overrides in report', () => {
+        const inv = emptyInventory({ capabilities: [mockCap()] });
+        const report = generatePolicyReport(PolicyProfile.PciDss, inv, [
+            {
+                rule: 'access-control-required',
+                justification: 'test',
+                author: 'dev',
+                timestamp: new Date(),
+            },
+        ]);
+        expect(report.overrides?.length).toBeGreaterThan(0);
+    });
+    it('formats report as human-readable text', () => {
+        const report = generatePolicyReport(PolicyProfile.PciDss, emptyInventory());
+        const text = formatPolicyReport(report);
+        expect(text).toContain('Policy: pci_dss');
+        expect(text).toContain('Compatibility Score:');
+        expect(text).toContain('Results:');
+    });
+    it('generates reports for all profiles', () => {
+        const reports = generateAllPolicyReports(emptyInventory());
+        expect(reports).toHaveLength(Object.keys(builtInProfiles).length);
+    });
+    it('formatted report includes override section', () => {
+        const inv = emptyInventory({ capabilities: [mockCap()] });
+        const report = generatePolicyReport(PolicyProfile.PciDss, inv, [
+            {
+                rule: 'access-control-required',
+                justification: 'justified reason',
+                author: 'dev',
+                timestamp: new Date(),
+            },
+        ]);
+        const text = formatPolicyReport(report);
+        expect(text).toContain('Overrides:');
+        expect(text).toContain('justified reason');
+    });
+});
+//# sourceMappingURL=policies.test.js.map

package/dist/governance/__tests__/policies.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.test.js","sourceRoot":"","sources":["../../../src/governance/__tests__/policies.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGnG,SAAS,OAAO,CAAC,SAAuC;IACtD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;QAC1D,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,SAAqC;IACvD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE;QAC3C,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,SAAoC;IAC1D,OAAO;QACL,YAAY,EAAE,EAAE;QAChB,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,EAAE;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,8BAA8B;AAE9B,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5D,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3D,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,YAAY,EAAE;gBACZ,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;aAChF;YACD,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,YAAY,EAAE,IAAI;oBAClB,MAAM,EAAE;wBACN,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE;yBAC5E;qBACF;iBACF,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,YAAY,EAAE,IAAI;oBAClB,MAAM,EAAE;wBACN,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,SAAS,EAAE;yBAC3D;qBACF;iBACF,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC;QAC1E,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,YAAY,EAAE,IAAI;oBAClB,MAAM,EAAE;wBACN,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE;yBAC1D;qBACF;iBACF,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;QACxE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,YAAY,EAAE,IAAI;oBAClB,MAAM,EAAE;wBACN,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE;yBAC5E;qBACF;iBACF,CAAC;aACH;SACF,CAAC,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,YAAY,EAAE;gBACZ,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;aAChF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;SAC/C,CAAC,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,gCAAgC;SAC5D,CAAC,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,aAAa,CAAC,wBAAwB,EAAE,GAAG,EAAE;YACrF;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,aAAa,EAAE,SAAS;gBACxB,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB;SACF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+BAA+B;AAE/B,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC,aAAa,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,mBAAmB;SAC/C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,oBAAoB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE;YAC7D;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,oBAAoB,CAAC,aAAa,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,OAAO,GAAG,wBAAwB,CAAC,cAAc,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,oBAAoB,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE;YAC7D;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,aAAa,EAAE,kBAAkB;gBACjC,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB;SACF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/governance/__tests__/rules.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rules.test.d.ts.map

package/dist/governance/__tests__/rules.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.test.d.ts","sourceRoot":"","sources":["../../../src/governance/__tests__/rules.test.ts"],"names":[],"mappings":""}

package/dist/governance/__tests__/rules.test.js

@@ -0,0 +1,342 @@
+import { describe, expect, it } from 'vitest';
+import { z } from 'zod';
+import { FieldClassification, GovernanceSeverity } from '../../types/enums.js';
+import { createGovernanceRuleEngine } from '../rule-engine.js';
+import { ruleAIWithoutExplanation, ruleExcessiveAIUsage, rulePromptMissingModelConfig, rulePromptMissingOutputSchema, } from '../rules/ai.js';
+import { ruleEntityMissingDescription, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, } from '../rules/architecture.js';
+import { ruleExcessiveDataRetention, ruleMissingFieldClassification, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, } from '../rules/privacy.js';
+import { ruleCapabilityMissingAccessPolicy, ruleCrossTenantDataAccess, ruleEntityTenantIsolation, ruleOverlyPermissiveRoles, securityRules, } from '../rules/security.js';
+function mockCap(overrides) {
+    return {
+        name: 'test',
+        kind: 'action',
+        domain: 'test',
+        input: z.object({}),
+        output: z.object({}),
+        effects: { data: [], events: [], external: [], ai: false },
+        handler: async () => ({}),
+        ...overrides,
+    };
+}
+function mockEntity(overrides) {
+    return {
+        name: 'TestEntity',
+        fields: { id: { type: 'id', options: {} } },
+        ...overrides,
+    };
+}
+function mockFlow(overrides) {
+    return {
+        name: 'test-flow',
+        domain: 'test',
+        input: z.object({}),
+        state: z.object({}),
+        steps: [],
+        ...overrides,
+    };
+}
+function mockPrompt(overrides) {
+    return {
+        name: 'test-prompt',
+        input: z.object({}),
+        output: z.object({}),
+        ...overrides,
+    };
+}
+function emptyInventory(overrides) {
+    return {
+        capabilities: [],
+        entities: [],
+        flows: [],
+        events: [],
+        prompts: [],
+        ...overrides,
+    };
+}
+// ── Rule Engine Tests ──
+describe('GovernanceRuleEngine', () => {
+    it('registers and evaluates rules', () => {
+        const engine = createGovernanceRuleEngine();
+        engine.register(ruleCapabilityMissingAccessPolicy);
+        const result = engine.evaluate(emptyInventory({ capabilities: [mockCap()] }));
+        expect(result.signals).toHaveLength(1);
+        expect(result.effective).toHaveLength(1);
+        expect(result.summary.high).toBe(1);
+    });
+    it('registerMany adds multiple rules', () => {
+        const engine = createGovernanceRuleEngine();
+        engine.registerMany(securityRules);
+        expect(engine.getRules()).toHaveLength(securityRules.length);
+    });
+    it('unregisters a rule', () => {
+        const engine = createGovernanceRuleEngine();
+        engine.register(ruleCapabilityMissingAccessPolicy);
+        engine.unregister('security.capability-access-policy');
+        expect(engine.getRules()).toHaveLength(0);
+    });
+    it('filters rules by category', () => {
+        const engine = createGovernanceRuleEngine();
+        engine.register(ruleCapabilityMissingAccessPolicy);
+        engine.register(ruleExcessiveEffects);
+        expect(engine.getRulesByCategory('security')).toHaveLength(1);
+        expect(engine.getRulesByCategory('architecture')).toHaveLength(1);
+    });
+    it('applies overrides to suppress signals', () => {
+        const engine = createGovernanceRuleEngine();
+        engine.register(ruleCapabilityMissingAccessPolicy);
+        const result = engine.evaluate(emptyInventory({ capabilities: [mockCap()] }), [
+            {
+                rule: 'security.capability-access-policy',
+                justification: 'testing',
+                author: 'dev',
+                timestamp: new Date(),
+            },
+        ]);
+        expect(result.signals).toHaveLength(1);
+        expect(result.effective).toHaveLength(0);
+        expect(result.summary.overridden).toBe(1);
+    });
+    it('returns empty results for clean inventory', () => {
+        const engine = createGovernanceRuleEngine();
+        engine.registerMany(securityRules);
+        const inv = emptyInventory({
+            capabilities: [mockCap({ access: { roles: ['admin'] } })],
+            entities: [mockEntity({ tenantScoped: true })],
+        });
+        const result = engine.evaluate(inv);
+        expect(result.summary.high).toBe(0);
+    });
+});
+// ── Security Rules ──
+describe('Security Rules', () => {
+    it('flags capabilities without access policies', () => {
+        const signals = ruleCapabilityMissingAccessPolicy.evaluate(emptyInventory({ capabilities: [mockCap()] }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.severity).toBe(GovernanceSeverity.High);
+    });
+    it('passes capabilities with access policies', () => {
+        const signals = ruleCapabilityMissingAccessPolicy.evaluate(emptyInventory({ capabilities: [mockCap({ access: { roles: ['admin'] } })] }));
+        expect(signals).toHaveLength(0);
+    });
+    it('flags wildcard roles', () => {
+        const signals = ruleOverlyPermissiveRoles.evaluate(emptyInventory({ capabilities: [mockCap({ access: { roles: ['*'] } })] }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('security.overly-permissive-roles');
+    });
+    it('flags cross-tenant data access', () => {
+        const signals = ruleCrossTenantDataAccess.evaluate(emptyInventory({
+            capabilities: [
+                mockCap({
+                    effects: { data: ['User'], events: [], external: [], ai: false },
+                    access: { tenantScoped: true, roles: ['admin'] },
+                }),
+            ],
+            entities: [mockEntity({ name: 'User', tenantScoped: false })],
+        }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('security.cross-tenant-data-access');
+    });
+    it('flags entities without tenant isolation', () => {
+        const signals = ruleEntityTenantIsolation.evaluate(emptyInventory({ entities: [mockEntity()] }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.severity).toBe(GovernanceSeverity.Info);
+    });
+});
+// ── Privacy Rules ──
+describe('Privacy Rules', () => {
+    it('flags unencrypted sensitive fields', () => {
+        const signals = ruleSensitiveFieldUnencrypted.evaluate(emptyInventory({
+            entities: [
+                mockEntity({
+                    fields: {
+                        ssn: {
+                            type: 'string',
+                            options: { classification: FieldClassification.Sensitive },
+                        },
+                    },
+                }),
+            ],
+        }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.severity).toBe(GovernanceSeverity.High);
+    });
+    it('passes encrypted sensitive fields', () => {
+        const signals = ruleSensitiveFieldUnencrypted.evaluate(emptyInventory({
+            entities: [
+                mockEntity({
+                    fields: {
+                        ssn: {
+                            type: 'string',
+                            options: {
+                                classification: FieldClassification.Sensitive,
+                                encrypted: true,
+                            },
+                        },
+                    },
+                }),
+            ],
+        }));
+        expect(signals).toHaveLength(0);
+    });
+    it('flags personal data not masked in logs', () => {
+        const signals = rulePersonalDataInLogs.evaluate(emptyInventory({
+            entities: [
+                mockEntity({
+                    fields: {
+                        email: {
+                            type: 'string',
+                            options: { classification: FieldClassification.Personal },
+                        },
+                    },
+                }),
+            ],
+        }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('privacy.personal-data-in-logs');
+    });
+    it('flags missing classification on sensitive-looking fields', () => {
+        const signals = ruleMissingFieldClassification.evaluate(emptyInventory({
+            entities: [
+                mockEntity({
+                    fields: {
+                        email: { type: 'string', options: {} },
+                    },
+                }),
+            ],
+        }));
+        expect(signals).toHaveLength(1);
+    });
+    it('flags entities with personal data and no retention', () => {
+        const signals = ruleExcessiveDataRetention.evaluate(emptyInventory({
+            entities: [
+                mockEntity({
+                    fields: {
+                        email: {
+                            type: 'string',
+                            options: { classification: FieldClassification.Personal },
+                        },
+                    },
+                }),
+            ],
+        }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('privacy.excessive-data-retention');
+    });
+    it('passes entities with retention policies', () => {
+        const signals = ruleExcessiveDataRetention.evaluate(emptyInventory({
+            entities: [
+                mockEntity({
+                    retention: { duration: '90d' },
+                    fields: {
+                        email: {
+                            type: 'string',
+                            options: { classification: FieldClassification.Personal },
+                        },
+                    },
+                }),
+            ],
+        }));
+        expect(signals).toHaveLength(0);
+    });
+});
+// ── Architecture Rules ──
+describe('Architecture Rules', () => {
+    it('flags capabilities with excessive effects', () => {
+        const data = Array.from({ length: 12 }, (_, i) => `entity${i}`);
+        const signals = ruleExcessiveEffects.evaluate(emptyInventory({
+            capabilities: [mockCap({ effects: { data, events: [], external: [], ai: false } })],
+        }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('architecture.excessive-effects');
+    });
+    it('passes capabilities with reasonable effects', () => {
+        const signals = ruleExcessiveEffects.evaluate(emptyInventory({
+            capabilities: [
+                mockCap({ effects: { data: ['User'], events: ['created'], external: [], ai: false } }),
+            ],
+        }));
+        expect(signals).toHaveLength(0);
+    });
+    it('flags flows with excessive branching', () => {
+        const steps = Array.from({ length: 6 }, (_, i) => ({
+            name: `cond${i}`,
+            type: 'conditional',
+            if: 'true',
+            then: 'a',
+        }));
+        const signals = ruleExcessiveFlowBranching.evaluate(emptyInventory({ flows: [mockFlow({ steps })] }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('architecture.excessive-flow-branching');
+    });
+    it('flags flows with excessive steps', () => {
+        const steps = Array.from({ length: 25 }, (_, i) => ({
+            name: `step${i}`,
+            type: 'capability',
+        }));
+        const signals = ruleExcessiveFlowSteps.evaluate(emptyInventory({ flows: [mockFlow({ steps })] }));
+        expect(signals).toHaveLength(1);
+    });
+    it('flags capabilities with disabled audit', () => {
+        const signals = ruleMissingAuditConfig.evaluate(emptyInventory({
+            capabilities: [mockCap({ audit: { enabled: false, event: 'x' } })],
+        }));
+        expect(signals).toHaveLength(1);
+    });
+    it('flags entities without descriptions', () => {
+        const signals = ruleEntityMissingDescription.evaluate(emptyInventory({ entities: [mockEntity()] }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('architecture.entity-missing-description');
+    });
+});
+// ── AI Rules ──
+describe('AI Rules', () => {
+    it('flags prompts without output schemas', () => {
+        const signals = rulePromptMissingOutputSchema.evaluate(emptyInventory({
+            prompts: [{ name: 'test', input: z.object({}) }],
+        }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('ai.prompt-missing-output-schema');
+    });
+    it('flags prompts without model config', () => {
+        const signals = rulePromptMissingModelConfig.evaluate(emptyInventory({ prompts: [mockPrompt()] }));
+        expect(signals).toHaveLength(1);
+    });
+    it('flags AI capabilities without explanation', () => {
+        const signals = ruleAIWithoutExplanation.evaluate(emptyInventory({
+            capabilities: [mockCap({ effects: { data: [], events: [], external: [], ai: true } })],
+        }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('ai.missing-explanation');
+    });
+    it('passes AI capabilities with explanation enabled', () => {
+        const signals = ruleAIWithoutExplanation.evaluate(emptyInventory({
+            capabilities: [
+                mockCap({
+                    effects: { data: [], events: [], external: [], ai: true },
+                    explanation: { enabled: true },
+                }),
+            ],
+        }));
+        expect(signals).toHaveLength(0);
+    });
+    it('flags excessive AI usage', () => {
+        const caps = Array.from({ length: 5 }, (_, i) => mockCap({
+            name: `ai-${i}`,
+            effects: { data: [], events: [], external: [], ai: true },
+        }));
+        const signals = ruleExcessiveAIUsage.evaluate(emptyInventory({ capabilities: caps }));
+        expect(signals).toHaveLength(1);
+        expect(signals[0]?.rule).toBe('ai.excessive-usage');
+    });
+    it('passes with reasonable AI usage ratio', () => {
+        const caps = [
+            mockCap({ name: 'a', effects: { data: [], events: [], external: [], ai: true } }),
+            mockCap({ name: 'b' }),
+            mockCap({ name: 'c' }),
+            mockCap({ name: 'd' }),
+        ];
+        const signals = ruleExcessiveAIUsage.evaluate(emptyInventory({ capabilities: caps }));
+        expect(signals).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=rules.test.js.map

package/dist/governance/__tests__/rules.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.test.js","sourceRoot":"","sources":["../../../src/governance/__tests__/rules.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAI/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EACjC,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAE9B,SAAS,OAAO,CAAC,SAAuC;IACtD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;QAC1D,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,SAAqC;IACvD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE;QAC3C,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,SAAmC;IACnD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,KAAK,EAAE,EAAE;QACT,GAAG,SAAS;KACK,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,SAAqC;IACvD,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACpB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,SAAoC;IAC1D,OAAO;QACL,YAAY,EAAE,EAAE;QAChB,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,EAAE;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,0BAA0B;AAE1B,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAC5C,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QACnD,MAAM,CAAC,UAAU,CAAC,mCAAmC,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QACnD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE;YAC5E;gBACE,IAAI,EAAE,mCAAmC;gBACzC,aAAa,EAAE,SAAS;gBACxB,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAC5C,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;SAC/C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,uBAAuB;AAEvB,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,OAAO,GAAG,iCAAiC,CAAC,QAAQ,CACxD,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAC9C,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,OAAO,GAAG,iCAAiC,CAAC,QAAQ,CACxD,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAC9E,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,OAAO,GAAG,yBAAyB,CAAC,QAAQ,CAChD,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAC1E,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,OAAO,GAAG,yBAAyB,CAAC,QAAQ,CAChD,cAAc,CAAC;YACb,YAAY,EAAE;gBACZ,OAAO,CAAC;oBACN,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;oBAChE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE;iBACjD,CAAC;aACH;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;SAC9D,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,OAAO,GAAG,yBAAyB,CAAC,QAAQ,CAChD,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAC7C,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,sBAAsB;AAEtB,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,OAAO,GAAG,6BAA6B,CAAC,QAAQ,CACpD,cAAc,CAAC;YACb,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,MAAM,EAAE;wBACN,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,SAAS,EAAE;yBAC3D;qBACF;iBACF,CAAC;aACH;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,OAAO,GAAG,6BAA6B,CAAC,QAAQ,CACpD,cAAc,CAAC;YACb,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,MAAM,EAAE;wBACN,GAAG,EAAE;4BACH,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE;gCACP,cAAc,EAAE,mBAAmB,CAAC,SAAS;gCAC7C,SAAS,EAAE,IAAI;6BAChB;yBACF;qBACF;iBACF,CAAC;aACH;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAC7C,cAAc,CAAC;YACb,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,MAAM,EAAE;wBACN,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE;yBAC1D;qBACF;iBACF,CAAC;aACH;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,OAAO,GAAG,8BAA8B,CAAC,QAAQ,CACrD,cAAc,CAAC;YACb,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,MAAM,EAAE;wBACN,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE;qBACvC;iBACF,CAAC;aACH;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,CACjD,cAAc,CAAC;YACb,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,MAAM,EAAE;wBACN,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE;yBAC1D;qBACF;iBACF,CAAC;aACH;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,CACjD,cAAc,CAAC;YACb,QAAQ,EAAE;gBACR,UAAU,CAAC;oBACT,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;oBAC9B,MAAM,EAAE;wBACN,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE;yBAC1D;qBACF;iBACF,CAAC;aACH;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2BAA2B;AAE3B,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAC3C,cAAc,CAAC;YACb,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;SACpF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAC3C,cAAc,CAAC;YACb,YAAY,EAAE;gBACZ,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;aACvF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,OAAO,CAAC,EAAE;YAChB,IAAI,EAAE,aAAsB;YAC5B,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,GAAG;SACV,CAAC,CAAC,CAAC;QACJ,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,CACjD,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CACjD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,EAAE,OAAO,CAAC,EAAE;YAChB,IAAI,EAAE,YAAqB;SAC5B,CAAC,CAAC,CAAC;QACJ,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAC7C,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CACjD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAC7C,cAAc,CAAC;YACb,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;SACnE,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,OAAO,GAAG,4BAA4B,CAAC,QAAQ,CACnD,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAC7C,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iBAAiB;AAEjB,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,OAAO,GAAG,6BAA6B,CAAC,QAAQ,CACpD,cAAc,CAAC;YACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAiC,CAAC;SAChF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,OAAO,GAAG,4BAA4B,CAAC,QAAQ,CACnD,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAC5C,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAC/C,cAAc,CAAC;YACb,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;SACvF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,CAC/C,cAAc,CAAC;YACb,YAAY,EAAE;gBACZ,OAAO,CAAC;oBACN,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;oBACzD,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;iBAC/B,CAAC;aACH;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9C,OAAO,CAAC;YACN,IAAI,EAAE,MAAM,CAAC,EAAE;YACf,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SAC1D,CAAC,CACH,CAAC;QACF,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG;YACX,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YACjF,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtB,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtB,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;SACvB,CAAC;QACF,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/governance/index.d.ts

@@ -0,0 +1,10 @@
+export { applyOverrides, createOverrideStore } from './overrides.js';
+export type { OverrideEntry, OverrideStore } from './overrides.js';
+export { builtInProfiles, evaluatePolicyProfile } from './policies.js';
+export type { PolicyProfileDefinition, PolicyProfileRule } from './policies.js';
+export { formatPolicyReport, generateAllPolicyReports, generatePolicyReport } from './reports.js';
+export type { ReportOptions } from './reports.js';
+export { createGovernanceRuleEngine } from './rule-engine.js';
+export type { GovernanceResult, GovernanceRule, GovernanceRuleEngine, RuleCategory, SystemInventory, } from './rule-engine.js';
+export { aiRules, architectureRules, privacyRules, ruleAIWithoutExplanation, ruleCapabilityMissingAccessPolicy, ruleCrossTenantDataAccess, ruleEntityMissingDescription, ruleEntityTenantIsolation, ruleExcessiveAIUsage, ruleExcessiveDataRetention, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, ruleMissingFieldClassification, ruleOverlyPermissiveRoles, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, securityRules, } from './rules/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/governance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACvE,YAAY,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAClG,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,iCAAiC,EACjC,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,GACd,MAAM,kBAAkB,CAAC"}

package/dist/governance/index.js

@@ -0,0 +1,12 @@
+// ── Governance Module ──
+// Advisory governance: rule engine, built-in rules (security, privacy, architecture, AI),
+// override management, policy profiles (SOC2, GDPR, HIPAA, etc.), and compliance reports.
+// Advisory only — warnings never hard-block.
+//
+// Key exports: createGovernanceRuleEngine, securityRules, privacyRules, generatePolicyReport
+export { applyOverrides, createOverrideStore } from './overrides.js';
+export { builtInProfiles, evaluatePolicyProfile } from './policies.js';
+export { formatPolicyReport, generateAllPolicyReports, generatePolicyReport } from './reports.js';
+export { createGovernanceRuleEngine } from './rule-engine.js';
+export { aiRules, architectureRules, privacyRules, ruleAIWithoutExplanation, ruleCapabilityMissingAccessPolicy, ruleCrossTenantDataAccess, ruleEntityMissingDescription, ruleEntityTenantIsolation, ruleExcessiveAIUsage, ruleExcessiveDataRetention, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, ruleMissingFieldClassification, ruleOverlyPermissiveRoles, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, securityRules, } from './rules/index.js';
+//# sourceMappingURL=index.js.map

package/dist/governance/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,0FAA0F;AAC1F,0FAA0F;AAC1F,6CAA6C;AAC7C,EAAE;AACF,6FAA6F;AAE7F,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGlG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAS9D,OAAO,EACL,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,iCAAiC,EACjC,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,GACd,MAAM,kBAAkB,CAAC"}

package/dist/governance/overrides.d.ts

@@ -0,0 +1,24 @@
+import type { GovernanceOverride, GovernanceSignal } from '../types/governance.js';
+export interface OverrideEntry {
+    rule: string;
+    justification: string;
+    author: string;
+    timestamp: string;
+    scope?: string;
+    expiresAt?: string;
+}
+export interface OverrideStore {
+    getOverrides(): GovernanceOverride[];
+    addOverride(entry: OverrideEntry): GovernanceOverride;
+    removeOverride(rule: string, scope?: string): boolean;
+    hasOverride(rule: string, scope?: string): boolean;
+    getExpired(): GovernanceOverride[];
+    serialize(): OverrideEntry[];
+}
+export declare function createOverrideStore(entries?: OverrideEntry[]): OverrideStore;
+/** Filter governance signals by applying overrides — returns only non-overridden signals */
+export declare function applyOverrides(signals: GovernanceSignal[], overrides: GovernanceOverride[]): {
+    effective: GovernanceSignal[];
+    overridden: GovernanceSignal[];
+};
+//# sourceMappingURL=overrides.d.ts.map