@tantainnovative/create-ndpr 0.4.0 → 0.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tantainnovative/create-ndpr",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "CLI scaffolder for Nigeria NDPA 2023 / NDPC GAID 2025 compliance with @tantainnovative/ndpr-toolkit",
   "license": "MIT",
   "author": {

package/templates/drizzle-client.ts

@@ -0,0 +1,44 @@
+/**
+ * NDPR Drizzle integration seam.
+ *
+ * Call configureNDPRDatabase(yourDrizzleInstance) once during server startup.
+ * This package intentionally does not choose a PostgreSQL driver or open a
+ * connection for the host application.
+ */
+export interface NDPRDrizzleTransactionConfig {
+  isolationLevel?: 'read uncommitted' | 'read committed' | 'repeatable read' | 'serializable';
+  accessMode?: 'read only' | 'read write';
+  deferrable?: boolean;
+}
+
+export interface NDPRDrizzleDatabase {
+  select(...args: any[]): any;
+  insert(...args: any[]): any;
+  update(...args: any[]): any;
+  delete(...args: any[]): any;
+  transaction<T>(
+    callback: (tx: NDPRDrizzleDatabase) => Promise<T>,
+    config?: NDPRDrizzleTransactionConfig,
+  ): Promise<T>;
+}
+
+let configuredDatabase: NDPRDrizzleDatabase | null = null;
+
+export function configureNDPRDatabase(database: unknown): void {
+  if (!database || typeof database !== 'object') {
+    throw new TypeError('configureNDPRDatabase requires a Drizzle database instance');
+  }
+  configuredDatabase = database as NDPRDrizzleDatabase;
+}
+
+export const db = new Proxy({} as NDPRDrizzleDatabase, {
+  get(_target, property) {
+    if (!configuredDatabase) {
+      throw new Error(
+        'NDPR Drizzle database is not configured. Call configureNDPRDatabase(db) during server startup.',
+      );
+    }
+    const value = Reflect.get(configuredDatabase, property);
+    return typeof value === 'function' ? value.bind(configuredDatabase) : value;
+  },
+});

package/templates/drizzle-schema.ts

@@ -1,22 +1,3 @@
-/**
- * NDPA Compliance Schema — generated by create-ndpr
- * Organisation: {{ORG_NAME}}
- * DPO: {{DPO_EMAIL}}
- *
- * Covers:
- *   - consentRecords              — NDPA §25–26 (consent & withdrawal)
- *   - dsrRequests                — NDPA Part IV §34–38 (data subject rights)
- *   - breachReports              — NDPA §40 (72-hour breach notification)
- *   - processingRecords          — ROPA (accountability principle)
- *   - dpiaRecords                — NDPA §34(3) (impact assessments)
- *   - lawfulBasisRecords         — NDPA §25 (lawful basis register)
- *   - crossBorderTransferRecords — NDPA §41–42 (cross-border transfers)
- *   - auditLog                   — §44 audit trail
- *
- * Prerequisites: drizzle-orm, @paralleldrive/cuid2
- * Run `drizzle-kit push` to apply.
- */
-
 import {
   pgTable,
   text,
@@ -25,224 +6,265 @@ import {
   boolean,
   integer,
   index,
+  uniqueIndex,
 } from 'drizzle-orm/pg-core';
 import { createId } from '@paralleldrive/cuid2';
 
-// ---------------------------------------------------------------------------
-// ndpr_consent_records — NDPA §25–26
-// ---------------------------------------------------------------------------
+/**
+ * NDPA persistence schema for {{ORG_NAME_COMMENT}}.
+ * Every operational and audit row carries a required server-resolved tenantId.
+ */
 
 export const consentRecords = pgTable(
   'ndpr_consent_records',
   {
-    id:           text('id').primaryKey().$defaultFn(() => createId()),
-    subjectId:    text('subject_id').notNull(),
-    consents:     json('consents').notNull(),
-    version:      text('version').notNull(),
-    method:       text('method').notNull(),
-    lawfulBasis:  text('lawful_basis'),
-    ipAddress:    text('ip_address'),
-    userAgent:    text('user_agent'),
-    createdAt:    timestamp('created_at').defaultNow().notNull(),
-    revokedAt:    timestamp('revoked_at'),
+    id: text('id').primaryKey().$defaultFn(() => createId()),
+    tenantId: text('tenant_id').notNull(),
+    subjectId: text('subject_id').notNull(),
+    activeSubjectKey: text('active_subject_key'),
+    consents: json('consents').notNull(),
+    version: text('version').notNull(),
+    method: text('method').notNull(),
+    hasInteracted: boolean('has_interacted').notNull(),
+    lawfulBasis: text('lawful_basis'),
+    ipAddress: text('ip_address'),
+    userAgent: text('user_agent'),
+    clientTimestamp: timestamp('client_timestamp').notNull(),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    revokedAt: timestamp('revoked_at'),
   },
-  (t) => ({ subjectIdIdx: index('consent_subject_id_idx').on(t.subjectId) }),
+  (table) => ({
+    activeSubjectKeyUnique: uniqueIndex('consent_active_subject_key').on(
+      table.activeSubjectKey,
+    ),
+    tenantSubjectIdx: index('consent_tenant_subject_idx').on(
+      table.tenantId,
+      table.subjectId,
+      table.revokedAt,
+    ),
+    replayIdx: index('consent_replay_idx').on(
+      table.tenantId,
+      table.subjectId,
+      table.clientTimestamp,
+      table.version,
+      table.method,
+    ),
+  }),
 );
 
-// ---------------------------------------------------------------------------
-// ndpr_dsr_requests — NDPA §34–38
-// ---------------------------------------------------------------------------
-
 export const dsrRequests = pgTable(
   'ndpr_dsr_requests',
   {
-    id:              text('id').primaryKey().$defaultFn(() => createId()),
-    type:            text('type').notNull(),
-    status:          text('status').notNull().default('pending'),
-    subjectName:     text('subject_name').notNull(),
-    subjectEmail:    text('subject_email').notNull(),
-    subjectPhone:    text('subject_phone'),
-    identifierType:  text('identifier_type').notNull(),
+    id: text('id').primaryKey().$defaultFn(() => createId()),
+    tenantId: text('tenant_id').notNull(),
+    subjectId: text('subject_id').notNull(),
+    type: text('type').notNull(),
+    status: text('status').notNull().default('pending'),
+    subjectName: text('subject_name').notNull(),
+    subjectEmail: text('subject_email').notNull(),
+    subjectPhone: text('subject_phone'),
+    identifierType: text('identifier_type').notNull(),
     identifierValue: text('identifier_value').notNull(),
-    description:     text('description'),
-    internalNotes:   text('internal_notes'),
-    assignedTo:      text('assigned_to'),
-    submittedAt:     timestamp('submitted_at').defaultNow().notNull(),
-    acknowledgedAt:  timestamp('acknowledged_at'),
-    completedAt:     timestamp('completed_at'),
-    dueAt:           timestamp('due_at').notNull(),
+    description: text('description'),
+    internalNotes: text('internal_notes'),
+    assignedTo: text('assigned_to'),
+    submittedAt: timestamp('submitted_at').defaultNow().notNull(),
+    acknowledgedAt: timestamp('acknowledged_at'),
+    completedAt: timestamp('completed_at'),
+    dueAt: timestamp('due_at').notNull(),
   },
-  (t) => ({
-    statusIdx:      index('dsr_status_idx').on(t.status),
-    subjectEmailIdx: index('dsr_subject_email_idx').on(t.subjectEmail),
+  (table) => ({
+    tenantStatusIdx: index('dsr_tenant_status_idx').on(table.tenantId, table.status),
+    tenantSubjectIdx: index('dsr_tenant_subject_idx').on(table.tenantId, table.subjectId),
+    tenantEmailIdx: index('dsr_tenant_email_idx').on(table.tenantId, table.subjectEmail),
   }),
 );
 
-// ---------------------------------------------------------------------------
-// ndpr_breach_reports — NDPA §40
-// ---------------------------------------------------------------------------
-
 export const breachReports = pgTable(
   'ndpr_breach_reports',
   {
-    id:                   text('id').primaryKey().$defaultFn(() => createId()),
-    title:                text('title').notNull(),
-    description:          text('description').notNull(),
-    category:             text('category').notNull(),
-    severity:             text('severity').notNull(),
-    status:               text('status').notNull().default('ongoing'),
-    discoveredAt:         timestamp('discovered_at').notNull(),
-    occurredAt:           timestamp('occurred_at'),
-    reportedAt:           timestamp('reported_at').defaultNow().notNull(),
-    ndpcNotifiedAt:       timestamp('ndpc_notified_at'),
-    reporterName:         text('reporter_name').notNull(),
-    reporterEmail:        text('reporter_email').notNull(),
-    reporterDepartment:   text('reporter_department'),
-    affectedSystems:      json('affected_systems').notNull(),
-    dataTypes:            json('data_types').notNull(),
-    estimatedAffected:    integer('estimated_affected'),
-    initialActions:       text('initial_actions'),
+    id: text('id').primaryKey().$defaultFn(() => createId()),
+    tenantId: text('tenant_id').notNull(),
+    title: text('title').notNull(),
+    description: text('description').notNull(),
+    category: text('category').notNull(),
+    severity: text('severity').notNull(),
+    status: text('status').notNull().default('ongoing'),
+    discoveredAt: timestamp('discovered_at').notNull(),
+    occurredAt: timestamp('occurred_at'),
+    reportedAt: timestamp('reported_at').defaultNow().notNull(),
+    ndpcNotifiedAt: timestamp('ndpc_notified_at'),
+    reporterName: text('reporter_name').notNull(),
+    reporterEmail: text('reporter_email').notNull(),
+    reporterDepartment: text('reporter_department'),
+    affectedSystems: json('affected_systems').notNull(),
+    dataTypes: json('data_types').notNull(),
+    involvesSensitiveData: boolean('involves_sensitive_data').notNull().default(false),
+    estimatedAffected: integer('estimated_affected'),
+    approximateRecordCount: integer('approximate_record_count'),
+    dataSubjectCategories: json('data_subject_categories').notNull(),
+    likelyConsequences: text('likely_consequences'),
+    mitigationMeasures: text('mitigation_measures'),
+    isPhasedReport: boolean('is_phased_report').notNull().default(false),
+    supplementsReportId: text('supplements_report_id'),
+    initialActions: text('initial_actions'),
     ndpcNotificationSent: boolean('ndpc_notification_sent').notNull().default(false),
   },
-  (t) => ({
-    statusIdx:   index('breach_status_idx').on(t.status),
-    severityIdx: index('breach_severity_idx').on(t.severity),
+  (table) => ({
+    tenantStatusIdx: index('breach_tenant_status_idx').on(table.tenantId, table.status),
+    tenantSeverityIdx: index('breach_tenant_severity_idx').on(table.tenantId, table.severity),
   }),
 );
 
-// ---------------------------------------------------------------------------
-// ndpr_processing_records — ROPA
-// ---------------------------------------------------------------------------
-
-export const processingRecords = pgTable('ndpr_processing_records', {
-  id:                text('id').primaryKey().$defaultFn(() => createId()),
-  purpose:           text('purpose').notNull(),
-  lawfulBasis:       text('lawful_basis').notNull(),
-  dataCategories:    json('data_categories').notNull(),
-  dataSubjects:      json('data_subjects').notNull(),
-  recipients:        json('recipients').notNull(),
-  retentionPeriod:   text('retention_period').notNull(),
-  securityMeasures:  json('security_measures').notNull(),
-  transferCountries: json('transfer_countries'),
-  transferMechanism: text('transfer_mechanism'),
-  dpiaConducted:     boolean('dpia_conducted').notNull().default(false),
-  status:            text('status').notNull().default('active'),
-  createdAt:         timestamp('created_at').defaultNow().notNull(),
-  updatedAt:         timestamp('updated_at').defaultNow().notNull(),
-});
-
-// ---------------------------------------------------------------------------
-// ndpr_dpia_records — NDPA §34(3)
-// ---------------------------------------------------------------------------
+export const processingRecords = pgTable(
+  'ndpr_processing_records',
+  {
+    id: text('id').primaryKey().$defaultFn(() => createId()),
+    tenantId: text('tenant_id').notNull(),
+    purpose: text('purpose').notNull(),
+    lawfulBasis: text('lawful_basis').notNull(),
+    dataCategories: json('data_categories').notNull(),
+    dataSubjects: json('data_subjects').notNull(),
+    recipients: json('recipients').notNull(),
+    retentionPeriod: text('retention_period').notNull(),
+    securityMeasures: json('security_measures').notNull(),
+    transferCountries: json('transfer_countries'),
+    transferMechanism: text('transfer_mechanism'),
+    dpiaConducted: boolean('dpia_conducted').notNull().default(false),
+    status: text('status').notNull().default('active'),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    updatedAt: timestamp('updated_at').defaultNow().notNull(),
+  },
+  (table) => ({
+    tenantStatusIdx: index('processing_tenant_status_idx').on(table.tenantId, table.status),
+  }),
+);
 
 export const dpiaRecords = pgTable(
   'ndpr_dpia_records',
   {
-    id:          text('id').primaryKey().$defaultFn(() => createId()),
+    id: text('id').primaryKey().$defaultFn(() => createId()),
+    tenantId: text('tenant_id').notNull(),
     projectName: text('project_name').notNull(),
     description: text('description').notNull(),
-    dpiaData:    json('dpia_data').notNull(),
+    dpiaData: json('dpia_data').notNull(),
     overallRisk: text('overall_risk').notNull(),
-    score:       integer('score').notNull(),
-    status:      text('status').notNull().default('draft'),
+    score: integer('score').notNull(),
+    status: text('status').notNull().default('draft'),
     conductedBy: text('conducted_by').notNull(),
-    approvedBy:  text('approved_by'),
-    createdAt:   timestamp('created_at').defaultNow().notNull(),
-    updatedAt:   timestamp('updated_at').defaultNow().notNull(),
+    approvedBy: text('approved_by'),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    updatedAt: timestamp('updated_at').defaultNow().notNull(),
+    removedAt: timestamp('removed_at'),
   },
-  (t) => ({
-    statusIdx:      index('dpia_status_idx').on(t.status),
-    conductedByIdx: index('dpia_conducted_by_idx').on(t.conductedBy),
+  (table) => ({
+    tenantStatusIdx: index('dpia_tenant_status_idx').on(
+      table.tenantId,
+      table.removedAt,
+      table.status,
+    ),
   }),
 );
 
-// ---------------------------------------------------------------------------
-// ndpr_lawful_basis_records — NDPA §25
-// ---------------------------------------------------------------------------
-
 export const lawfulBasisRecords = pgTable(
   'ndpr_lawful_basis_records',
   {
-    id:             text('id').primaryKey().$defaultFn(() => createId()),
-    activityName:   text('activity_name').notNull(),
-    lawfulBasis:    text('lawful_basis').notNull(),
-    justification:  text('justification').notNull(),
+    id: text('id').primaryKey().$defaultFn(() => createId()),
+    tenantId: text('tenant_id').notNull(),
+    activityName: text('activity_name').notNull(),
+    lawfulBasis: text('lawful_basis').notNull(),
+    justification: text('justification').notNull(),
     dataCategories: json('data_categories').notNull(),
-    purposes:       json('purposes').notNull(),
-    assessedBy:     text('assessed_by').notNull(),
-    assessedAt:     timestamp('assessed_at').defaultNow().notNull(),
-    reviewDate:     timestamp('review_date'),
-    createdAt:      timestamp('created_at').defaultNow().notNull(),
-    updatedAt:      timestamp('updated_at').defaultNow().notNull(),
+    purposes: json('purposes').notNull(),
+    assessedBy: text('assessed_by').notNull(),
+    assessedAt: timestamp('assessed_at').defaultNow().notNull(),
+    reviewDate: timestamp('review_date'),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    updatedAt: timestamp('updated_at').defaultNow().notNull(),
+    removedAt: timestamp('removed_at'),
   },
-  (t) => ({
-    lawfulBasisIdx: index('lawful_basis_idx').on(t.lawfulBasis),
-    assessedByIdx:  index('lawful_basis_assessed_by_idx').on(t.assessedBy),
+  (table) => ({
+    tenantBasisIdx: index('lawful_basis_tenant_idx').on(
+      table.tenantId,
+      table.removedAt,
+      table.lawfulBasis,
+    ),
   }),
 );
 
-// ---------------------------------------------------------------------------
-// ndpr_cross_border_transfer_records — NDPA §41–42
-// ---------------------------------------------------------------------------
-
 export const crossBorderTransferRecords = pgTable(
   'ndpr_cross_border_transfer_records',
   {
-    id:                    text('id').primaryKey().$defaultFn(() => createId()),
-    destinationCountry:    text('destination_country').notNull(),
-    recipientName:         text('recipient_name').notNull(),
-    transferMechanism:     text('transfer_mechanism').notNull(),
-    safeguards:            text('safeguards').notNull(),
-    dataCategories:        json('data_categories').notNull(),
-    adequacyStatus:        text('adequacy_status').notNull(),
-    ndpcApprovalRequired:  boolean('ndpc_approval_required').notNull().default(false),
+    id: text('id').primaryKey().$defaultFn(() => createId()),
+    tenantId: text('tenant_id').notNull(),
+    destinationCountry: text('destination_country').notNull(),
+    recipientName: text('recipient_name').notNull(),
+    transferMechanism: text('transfer_mechanism').notNull(),
+    safeguards: text('safeguards').notNull(),
+    dataCategories: json('data_categories').notNull(),
+    adequacyStatus: text('adequacy_status').notNull(),
+    ndpcApprovalRequired: boolean('ndpc_approval_required').notNull().default(false),
     ndpcApprovalReference: text('ndpc_approval_reference'),
-    riskLevel:             text('risk_level').notNull(),
-    createdAt:             timestamp('created_at').defaultNow().notNull(),
-    updatedAt:             timestamp('updated_at').defaultNow().notNull(),
+    riskLevel: text('risk_level').notNull(),
+    status: text('status').notNull().default('active'),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
+    updatedAt: timestamp('updated_at').defaultNow().notNull(),
+    removedAt: timestamp('removed_at'),
   },
-  (t) => ({
-    destinationCountryIdx: index('cross_border_destination_idx').on(t.destinationCountry),
-    riskLevelIdx:          index('cross_border_risk_level_idx').on(t.riskLevel),
+  (table) => ({
+    tenantDestinationIdx: index('cross_border_tenant_destination_idx').on(
+      table.tenantId,
+      table.removedAt,
+      table.destinationCountry,
+    ),
+    tenantRiskIdx: index('cross_border_tenant_risk_idx').on(
+      table.tenantId,
+      table.removedAt,
+      table.riskLevel,
+    ),
+    tenantStatusIdx: index('cross_border_tenant_status_idx').on(
+      table.tenantId,
+      table.removedAt,
+      table.status,
+    ),
   }),
 );
 
-// ---------------------------------------------------------------------------
-// ndpr_audit_log — §44 accountability
-// ---------------------------------------------------------------------------
-
-export const auditLog = pgTable(
+/** Append-oriented application audit rows; enforce immutability in DB permissions. */
+export const complianceAuditLog = pgTable(
   'ndpr_audit_log',
   {
-    id:          text('id').primaryKey().$defaultFn(() => createId()),
-    module:      text('module').notNull(),
-    action:      text('action').notNull(),
-    entityId:    text('entity_id').notNull(),
-    entityType:  text('entity_type').notNull(),
-    changes:     json('changes'),
+    id: text('id').primaryKey().$defaultFn(() => createId()),
+    tenantId: text('tenant_id').notNull(),
+    module: text('module').notNull(),
+    action: text('action').notNull(),
+    entityId: text('entity_id').notNull(),
+    entityType: text('entity_type').notNull(),
+    changes: json('changes'),
     performedBy: text('performed_by'),
-    createdAt:   timestamp('created_at').defaultNow().notNull(),
+    createdAt: timestamp('created_at').defaultNow().notNull(),
   },
-  (t) => ({
-    moduleEntityIdx: index('audit_module_entity_idx').on(t.module, t.entityId),
+  (table) => ({
+    tenantEntityIdx: index('audit_tenant_module_entity_idx').on(
+      table.tenantId,
+      table.module,
+      table.entityId,
+    ),
   }),
 );
 
-// ---------------------------------------------------------------------------
-// Inferred types
-// ---------------------------------------------------------------------------
-
-export type ConsentRecord    = typeof consentRecords.$inferSelect;
+export type ConsentRecord = typeof consentRecords.$inferSelect;
 export type NewConsentRecord = typeof consentRecords.$inferInsert;
-export type DSRRequest       = typeof dsrRequests.$inferSelect;
-export type NewDSRRequest    = typeof dsrRequests.$inferInsert;
-export type BreachReport     = typeof breachReports.$inferSelect;
-export type NewBreachReport  = typeof breachReports.$inferInsert;
-export type ProcessingRecord         = typeof processingRecords.$inferSelect;
-export type DPIARecord               = typeof dpiaRecords.$inferSelect;
-export type NewDPIARecord            = typeof dpiaRecords.$inferInsert;
-export type LawfulBasisRecord        = typeof lawfulBasisRecords.$inferSelect;
-export type NewLawfulBasisRecord     = typeof lawfulBasisRecords.$inferInsert;
-export type CrossBorderTransfer      = typeof crossBorderTransferRecords.$inferSelect;
-export type NewCrossBorderTransfer   = typeof crossBorderTransferRecords.$inferInsert;
-export type AuditLogEntry            = typeof auditLog.$inferSelect;
+export type DSRRequest = typeof dsrRequests.$inferSelect;
+export type NewDSRRequest = typeof dsrRequests.$inferInsert;
+export type BreachReport = typeof breachReports.$inferSelect;
+export type NewBreachReport = typeof breachReports.$inferInsert;
+export type ProcessingRecord = typeof processingRecords.$inferSelect;
+export type NewProcessingRecord = typeof processingRecords.$inferInsert;
+export type DPIARecord = typeof dpiaRecords.$inferSelect;
+export type NewDPIARecord = typeof dpiaRecords.$inferInsert;
+export type LawfulBasisRecord = typeof lawfulBasisRecords.$inferSelect;
+export type NewLawfulBasisRecord = typeof lawfulBasisRecords.$inferInsert;
+export type CrossBorderTransfer = typeof crossBorderTransferRecords.$inferSelect;
+export type NewCrossBorderTransfer = typeof crossBorderTransferRecords.$inferInsert;
+export type ComplianceAuditLogEntry = typeof complianceAuditLog.$inferSelect;

package/templates/env-example

@@ -1,4 +1,7 @@
-# NDPA Compliance Database
-# Organisation: {{ORG_NAME}}
-# DPO: {{DPO_EMAIL}}
+# NDPA compliance persistence — generated for {{ORG_NAME_COMMENT}}
 DATABASE_URL="postgresql://user:password@localhost:5432/myapp_dev"
+
+# Server-controlled tenant boundary. Never accept this value from clients.
+# Multi-tenant applications should replace the generated request-context
+# resolver with one that derives tenantId from a verified session.
+NDPR_TENANT_ID="{{TENANT_ID}}"

package/templates/express-breach-route.ts

@@ -0,0 +1,98 @@
+/** Express — staff-only, tenant-scoped breach register for {{ORG_NAME_COMMENT}}. */
+import { Router } from 'express';
+import { assessBreachNotification } from '@tantainnovative/ndpr-toolkit/server';
+import { getNDPRContextProblem, resolveNDPRRequestContext } from '{{NDPR_CONTEXT_IMPORT}}';
+// {{#if ORM=prisma}}
+import { PrismaClient } from '@prisma/client';
+const prisma = new PrismaClient();
+// {{/if}}
+// {{#if ORM=drizzle}}
+import { db } from '{{NDPR_DB_IMPORT}}';
+import { breachReports, complianceAuditLog } from '{{NDPR_SCHEMA_IMPORT}}';
+import { and, desc, eq } from 'drizzle-orm';
+// {{/if}}
+// {{#if ORM=none}}
+// DEVELOPMENT ONLY: replace both stores with one durable transactional store.
+type Severity = 'critical' | 'high' | 'medium' | 'low';
+interface BreachRow { id: string; tenantId: string; title: string; description: string; category: string; severity: Severity; status: string; discoveredAt: Date; occurredAt: Date | null; reportedAt: Date; reporterName: string; reporterEmail: string; reporterDepartment: string | null; affectedSystems: string[]; dataTypes: string[]; estimatedAffected: number | null; approximateRecordCount: number | null; dataSubjectCategories: string[]; likelyConsequences: string | null; mitigationMeasures: string | null; involvesSensitiveData: boolean; isPhasedReport: boolean; supplementsReportId: string | null; initialActions: string | null }
+const breachStore = new Map<string, BreachRow>();
+const auditLog: Array<{ id: string; tenantId: string; action: string; entityId: string; performedBy: string; at: Date }> = [];
+// {{/if}}
+
+type BreachSeverity = 'critical' | 'high' | 'medium' | 'low';
+function severityFor(category: string, affected: number | null): BreachSeverity {
+  const highRisk = new Set(['unauthorized_access', 'ransomware', 'data_exfiltration', 'identity_theft']);
+  if (highRisk.has(category)) return (affected ?? 0) > 1000 ? 'critical' : 'high';
+  if ((affected ?? 0) > 500) return 'high';
+  if ((affected ?? 0) > 50) return 'medium';
+  return 'low';
+}
+function count(value: unknown): number | null { return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 ? value : null; }
+export const breachRouter = Router();
+
+breachRouter.get('/', async (req, res) => {
+  const context = await resolveNDPRRequestContext(req);
+  const problem = getNDPRContextProblem(context, 'staff');
+  if (problem) return res.status(problem.status).json({ error: problem.error });
+  const status = typeof req.query.status === 'string' ? req.query.status : undefined;
+  // {{#if ORM=prisma}}
+  const reports = await prisma.breachReport.findMany({ where: { tenantId: context.tenantId, ...(status ? { status } : {}) }, orderBy: { reportedAt: 'desc' } });
+  // {{/if}}
+  // {{#if ORM=drizzle}}
+  const reports = status
+    ? await db.select().from(breachReports).where(and(eq(breachReports.tenantId, context.tenantId), eq(breachReports.status, status))).orderBy(desc(breachReports.reportedAt))
+    : await db.select().from(breachReports).where(eq(breachReports.tenantId, context.tenantId)).orderBy(desc(breachReports.reportedAt));
+  // {{/if}}
+  // {{#if ORM=none}}
+  const reports = [...breachStore.values()].filter((row) => row.tenantId === context.tenantId && (!status || row.status === status)).sort((a, b) => b.reportedAt.getTime() - a.reportedAt.getTime());
+  // {{/if}}
+  return res.json(reports);
+});
+
+breachRouter.post('/', async (req, res) => {
+  const context = await resolveNDPRRequestContext(req);
+  const problem = getNDPRContextProblem(context, 'staff');
+  if (problem) return res.status(problem.status).json({ error: problem.error });
+  const actor = context.actor;
+  if (!actor) return res.status(401).json({ error: 'Verified staff profile is required' });
+  const actorId = actor.id;
+  if (!req.body || typeof req.body !== 'object') {
+    return res.status(400).json({ error: 'A JSON object is required' });
+  }
+  const input = req.body as Record<string, unknown>;
+  const required = ['title', 'description', 'category', 'discoveredAt'] as const;
+  if (required.some((field) => typeof input[field] !== 'string' || !(input[field] as string).trim()) || !Array.isArray(input.affectedSystems) || !input.affectedSystems.every((v) => typeof v === 'string') || !Array.isArray(input.dataTypes) || !input.dataTypes.every((v) => typeof v === 'string')) {
+    return res.status(400).json({ error: `${required.join(', ')}, affectedSystems, and dataTypes are required` });
+  }
+  const discoveredAt = new Date(input.discoveredAt as string);
+  const occurredAt = typeof input.occurredAt === 'string' ? new Date(input.occurredAt) : null;
+  if (!Number.isFinite(discoveredAt.getTime()) || discoveredAt.getTime() > Date.now() || occurredAt && (!Number.isFinite(occurredAt.getTime()) || occurredAt > discoveredAt)) return res.status(400).json({ error: 'Breach dates are invalid or inconsistent' });
+  const estimatedAffected = input.estimatedAffected == null ? null : count(input.estimatedAffected);
+  const approximateRecordCount = input.approximateRecordCount == null ? null : count(input.approximateRecordCount);
+  if (input.estimatedAffected != null && estimatedAffected === null || input.approximateRecordCount != null && approximateRecordCount === null) return res.status(400).json({ error: 'Counts must be finite non-negative numbers' });
+  const dataSubjectCategories = Array.isArray(input.dataSubjectCategories) && input.dataSubjectCategories.every((v) => typeof v === 'string') ? input.dataSubjectCategories as string[] : [];
+  const severity = severityFor(input.category as string, estimatedAffected);
+  const reportedAt = new Date();
+  const data = { tenantId: context.tenantId, title: input.title as string, description: input.description as string, category: input.category as string, severity, status: 'ongoing', discoveredAt, occurredAt, reporterName: actor.displayName, reporterEmail: actor.email, reporterDepartment: actor.department ?? null, affectedSystems: input.affectedSystems as string[], dataTypes: input.dataTypes as string[], estimatedAffected, approximateRecordCount, dataSubjectCategories, likelyConsequences: typeof input.likelyConsequences === 'string' ? input.likelyConsequences : null, mitigationMeasures: typeof input.mitigationMeasures === 'string' ? input.mitigationMeasures : null, involvesSensitiveData: input.involvesSensitiveData === true, isPhasedReport: input.isPhasedReport === true, supplementsReportId: typeof input.supplementsReportId === 'string' ? input.supplementsReportId : null, initialActions: typeof input.initialActions === 'string' ? input.initialActions : null };
+  // {{#if ORM=prisma}}
+  const report = await prisma.$transaction(async (tx) => {
+    const created = await tx.breachReport.create({ data });
+    await tx.complianceAuditLog.create({ data: { tenantId: context.tenantId, module: 'breach', action: 'reported', entityId: created.id, entityType: 'BreachReport', performedBy: actorId, changes: { title: data.title, category: data.category, severity, status: 'ongoing' } } });
+    return created;
+  });
+  // {{/if}}
+  // {{#if ORM=drizzle}}
+  const report = await db.transaction(async (tx) => {
+    const [created] = await tx.insert(breachReports).values(data).returning();
+    await tx.insert(complianceAuditLog).values({ tenantId: context.tenantId, module: 'breach', action: 'reported', entityId: created.id, entityType: 'BreachReport', performedBy: actorId, changes: { title: data.title, category: data.category, severity, status: 'ongoing' } });
+    return created;
+  });
+  // {{/if}}
+  // {{#if ORM=none}}
+  const report: BreachRow = { id: crypto.randomUUID(), ...data, reportedAt };
+  breachStore.set(report.id, report);
+  auditLog.push({ id: crypto.randomUUID(), tenantId: context.tenantId, action: 'reported', entityId: report.id, performedBy: actorId, at: reportedAt });
+  // {{/if}}
+  const readiness = assessBreachNotification({ id: report.id, title: data.title, description: data.description, category: data.category, discoveredAt: discoveredAt.getTime(), occurredAt: occurredAt?.getTime(), reportedAt: reportedAt.getTime(), reporter: { name: data.reporterName, email: data.reporterEmail, department: data.reporterDepartment ?? '' }, affectedSystems: data.affectedSystems, dataTypes: data.dataTypes, involvesSensitiveData: data.involvesSensitiveData, estimatedAffectedSubjects: estimatedAffected ?? undefined, approximateRecordCount: approximateRecordCount ?? undefined, dataSubjectCategories, likelyConsequences: data.likelyConsequences ?? undefined, mitigationMeasures: data.mitigationMeasures ?? undefined, isPhasedReport: data.isPhasedReport, supplementsReportId: data.supplementsReportId ?? undefined, initialActions: data.initialActions ?? undefined, dpoContact: { name: `{{ORG_NAME_TEMPLATE}} DPO`, email: `{{DPO_EMAIL_TEMPLATE}}` }, status: 'ongoing' });
+  return res.status(201).json({ ...report, ndpcReadiness: { complete: readiness.complete, ready: readiness.ready, valid: readiness.valid, completeness: readiness.completeness, missing: readiness.missing, validationErrors: readiness.validationErrors, notificationRequired: readiness.notificationRequired, hoursRemaining: readiness.timing.hoursRemaining, evidenceRecorded: readiness.evidence.notificationProvided } });
+});