@tracepass/dpp-validate 0.1.0

package/dist/vendor/publish-gate.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Pure "can this passport be published?" check, shared between:
+ *   - GET /api/passports (list response includes publishReady per row)
+ *   - POST /api/passports/[id]/publish (single-publish eligibility)
+ *   - POST /api/passports/bulk-publish (skipped-reason messages)
+ *
+ * One rule, one implementation. If the product policy for publishing
+ * changes (e.g. "warnings block", "min coverage %"), change it here.
+ */
+import type { Passport, Template } from "@tracepass/dpp-types";
+export interface PublishCheck {
+    ready: boolean;
+    /** Field keys that have no value set. */
+    missingFields: string[];
+    /** Field keys with a value but status != approved. */
+    unapprovedFields: string[];
+    /** Short human reason suitable for a tooltip or toast — undefined when ready. */
+    reason?: string;
+    /**
+     * Distinguishes WHY the passport isn't ready:
+     *   - "hard"  → structural blocker that can't be bypassed
+     *               (already-published, wrong status, template missing).
+     *   - "gap"   → required fields are missing or unapproved. The UI
+     *               can offer to publish anyway with an explicit "I
+     *               understand the risk" acknowledgement.
+     *   - `undefined` when ready === true.
+     */
+    blockerType?: "hard" | "gap";
+}
+/**
+ * Returns whether `passport` satisfies every publish precondition given
+ * its `template`. A passport is publish-ready iff:
+ *   - status is in PUBLISHABLE_STATUSES (already-published + terminal
+ *     states return ready:false with a specific reason),
+ *   - every template field with validation.required has a non-empty
+ *     value AND status === "approved".
+ *
+ * `undefined` template means we can't evaluate — treat as not-ready.
+ */
+export declare function checkPublishReady(passport: Passport, template: Template | undefined): PublishCheck;
+//# sourceMappingURL=publish-gate.d.ts.map

package/dist/vendor/publish-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-gate.d.ts","sourceRoot":"","sources":["../../src/vendor/publish-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,yCAAyC;IACzC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sDAAsD;IACtD,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CAC9B;AAQD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAC7B,YAAY,CAgEd"}

package/dist/vendor/publish-gate.js

@@ -0,0 +1,85 @@
+/**
+ * Pure "can this passport be published?" check, shared between:
+ *   - GET /api/passports (list response includes publishReady per row)
+ *   - POST /api/passports/[id]/publish (single-publish eligibility)
+ *   - POST /api/passports/bulk-publish (skipped-reason messages)
+ *
+ * One rule, one implementation. If the product policy for publishing
+ * changes (e.g. "warnings block", "min coverage %"), change it here.
+ */
+const PUBLISHABLE_STATUSES = new Set([
+    "draft",
+    "in_review",
+    "approved",
+]);
+/**
+ * Returns whether `passport` satisfies every publish precondition given
+ * its `template`. A passport is publish-ready iff:
+ *   - status is in PUBLISHABLE_STATUSES (already-published + terminal
+ *     states return ready:false with a specific reason),
+ *   - every template field with validation.required has a non-empty
+ *     value AND status === "approved".
+ *
+ * `undefined` template means we can't evaluate — treat as not-ready.
+ */
+export function checkPublishReady(passport, template) {
+    if (passport.status === "published") {
+        return {
+            ready: false,
+            missingFields: [],
+            unapprovedFields: [],
+            reason: "Already published",
+            blockerType: "hard",
+        };
+    }
+    if (!PUBLISHABLE_STATUSES.has(passport.status)) {
+        return {
+            ready: false,
+            missingFields: [],
+            unapprovedFields: [],
+            reason: `Cannot publish from status ${passport.status}`,
+            blockerType: "hard",
+        };
+    }
+    if (!template) {
+        return {
+            ready: false,
+            missingFields: [],
+            unapprovedFields: [],
+            reason: "Template missing",
+            blockerType: "hard",
+        };
+    }
+    const missingFields = [];
+    const unapprovedFields = [];
+    for (const tf of template.fields) {
+        if (!tf.validation.required)
+            continue;
+        const f = passport.fields[tf.key];
+        if (!f ||
+            f.value === null ||
+            f.value === undefined ||
+            f.value === "") {
+            missingFields.push(tf.key);
+        }
+        else if (f.status !== "approved") {
+            unapprovedFields.push(tf.key);
+        }
+    }
+    if (missingFields.length === 0 && unapprovedFields.length === 0) {
+        return { ready: true, missingFields: [], unapprovedFields: [] };
+    }
+    const parts = [];
+    if (missingFields.length > 0)
+        parts.push(`${missingFields.length} missing`);
+    if (unapprovedFields.length > 0)
+        parts.push(`${unapprovedFields.length} not approved`);
+    return {
+        ready: false,
+        missingFields,
+        unapprovedFields,
+        reason: `Required fields: ${parts.join(", ")}`,
+        blockerType: "gap",
+    };
+}
+//# sourceMappingURL=publish-gate.js.map

package/dist/vendor/publish-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-gate.js","sourceRoot":"","sources":["../../src/vendor/publish-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAwBH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAqB;IACvD,OAAO;IACP,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAkB,EAClB,QAA8B;IAE9B,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,aAAa,EAAE,EAAE;YACjB,gBAAgB,EAAE,EAAE;YACpB,MAAM,EAAE,mBAAmB;YAC3B,WAAW,EAAE,MAAM;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,aAAa,EAAE,EAAE;YACjB,gBAAgB,EAAE,EAAE;YACpB,MAAM,EAAE,8BAA8B,QAAQ,CAAC,MAAM,EAAE;YACvD,WAAW,EAAE,MAAM;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,aAAa,EAAE,EAAE;YACjB,gBAAgB,EAAE,EAAE;YACpB,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EAAE,MAAM;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ;YAAE,SAAS;QACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAClC,IACE,CAAC,CAAC;YACF,CAAC,CAAC,KAAK,KAAK,IAAI;YAChB,CAAC,CAAC,KAAK,KAAK,SAAS;YACrB,CAAC,CAAC,KAAK,KAAK,EAAE,EACd,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACnC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,UAAU,CAAC,CAAC;IAC5E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,eAAe,CAAC,CAAC;IAEvF,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,aAAa;QACb,gBAAgB;QAChB,MAAM,EAAE,oBAAoB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC9C,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC"}

package/dist/vendor/required-roles.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Per-category required and optional party roles.
+ *
+ * Source of truth for "which parties does this passport need before it can
+ * be considered complete." Used by:
+ *   - the editor UI (red asterisks on required roles, hides irrelevant ones)
+ *   - the CSV bulk-import column generator (only emits columns for roles
+ *     this category actually uses)
+ *   - the publish-precondition check (warns on missing required roles, in
+ *     parallel to the existing missing-required-fields warning)
+ *   - the per-passport completionPercentage calculation
+ *
+ * The TypeScript module is the single source of truth — the role map is
+ * NOT mirrored into the templates collection. Adding or removing roles
+ * from a category is a code change + deploy, deliberate so we don't drift
+ * the regulation interpretation across environments.
+ *
+ * v1 design calls (per Malin's confirmation):
+ *   - Chemicals "downstream user" (REACH-specific role) → folded into
+ *     `distributor` for now; revisit when a chemicals customer pulls.
+ *   - Tyre "retreader" → ignored for v1; retreaded tyres treated as a
+ *     separate passport whose `manufacturer` is the retreader.
+ *
+ * When a category's regulation tightens (a new delegated act lands and
+ * adds a mandate), update the entry here and the change ships in the
+ * next deploy — no template re-seed needed.
+ */
+import type { PartyRole } from "@tracepass/dpp-types";
+/**
+ * The 12 categories the platform models. Mirrors the filenames in
+ * `templates/*.json`. We re-declare the union here rather than import
+ * a CategoryKey from elsewhere so this module stays the canonical
+ * place a future contributor looks when adding a 13th category.
+ */
+export type CategoryKey = "battery" | "chemicals" | "construction" | "electronics" | "fmcg" | "furniture" | "jewelry" | "packaging" | "steel" | "textile" | "toys" | "tyres";
+export interface CategoryPartyRoles {
+    /** Roles that MUST be set before the passport is considered complete.
+     *  The publish flow warns (not blocks) when these are missing — a
+     *  user can still publish via the existing "I acknowledge incomplete"
+     *  ack, which sets `publishedIncomplete: true`. */
+    required: readonly PartyRole[];
+    /** Roles that the editor surfaces but doesn't require. Order matters —
+     *  the UI renders them in this order under the required block. */
+    optional: readonly PartyRole[];
+}
+/**
+ * Per-category role requirements. Each entry's `required` is the
+ * regulator's mandate; `optional` is roles that a tenant might
+ * legitimately want to record but isn't compelled to.
+ */
+export declare const CATEGORY_PARTY_ROLES: Record<CategoryKey, CategoryPartyRoles>;
+/**
+ * Get the required + optional role lists for a category. Returns
+ * `null` when the category isn't one of the 12 modeled categories,
+ * so callers can early-return rather than crash on legacy / unknown
+ * category strings.
+ */
+export declare function getPartyRoles(category: string): CategoryPartyRoles | null;
+/**
+ * True when `role` is required for the given category. Used by the
+ * publish-precondition check + the editor's red-asterisk render.
+ * Unknown categories return false (don't block on what we can't
+ * interpret).
+ */
+export declare function isRequiredRole(category: string, role: PartyRole): boolean;
+/**
+ * Combined role list (required first, then optional, in declaration
+ * order). Returns `[]` for unknown categories. Convenience for UI
+ * iteration when both sets need to render.
+ */
+export declare function allRolesForCategory(category: string): readonly PartyRole[];
+//# sourceMappingURL=required-roles.d.ts.map

package/dist/vendor/required-roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"required-roles.d.ts","sourceRoot":"","sources":["../../src/vendor/required-roles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GACnB,SAAS,GACT,WAAW,GACX,cAAc,GACd,aAAa,GACb,MAAM,GACN,WAAW,GACX,SAAS,GACT,WAAW,GACX,OAAO,GACP,SAAS,GACT,MAAM,GACN,OAAO,CAAC;AAEZ,MAAM,WAAW,kBAAkB;IACjC;;;uDAGmD;IACnD,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IAC/B;sEACkE;IAClE,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,WAAW,EAAE,kBAAkB,CA2F/D,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,GACf,kBAAkB,GAAG,IAAI,CAE3B;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAGzE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,SAAS,EAAE,CAI1E"}

package/dist/vendor/required-roles.js

@@ -0,0 +1,144 @@
+/**
+ * Per-category required and optional party roles.
+ *
+ * Source of truth for "which parties does this passport need before it can
+ * be considered complete." Used by:
+ *   - the editor UI (red asterisks on required roles, hides irrelevant ones)
+ *   - the CSV bulk-import column generator (only emits columns for roles
+ *     this category actually uses)
+ *   - the publish-precondition check (warns on missing required roles, in
+ *     parallel to the existing missing-required-fields warning)
+ *   - the per-passport completionPercentage calculation
+ *
+ * The TypeScript module is the single source of truth — the role map is
+ * NOT mirrored into the templates collection. Adding or removing roles
+ * from a category is a code change + deploy, deliberate so we don't drift
+ * the regulation interpretation across environments.
+ *
+ * v1 design calls (per Malin's confirmation):
+ *   - Chemicals "downstream user" (REACH-specific role) → folded into
+ *     `distributor` for now; revisit when a chemicals customer pulls.
+ *   - Tyre "retreader" → ignored for v1; retreaded tyres treated as a
+ *     separate passport whose `manufacturer` is the retreader.
+ *
+ * When a category's regulation tightens (a new delegated act lands and
+ * adds a mandate), update the entry here and the change ships in the
+ * next deploy — no template re-seed needed.
+ */
+/**
+ * Per-category role requirements. Each entry's `required` is the
+ * regulator's mandate; `optional` is roles that a tenant might
+ * legitimately want to record but isn't compelled to.
+ */
+export const CATEGORY_PARTY_ROLES = {
+    // Battery Regulation 2023/1542 Articles 47–50 require all three
+    // operators to be identifiable on the passport for serial-level
+    // batteries (LMT, EV, industrial >2 kWh).
+    battery: {
+        required: ["manufacturer", "recycler", "producerResponsibilityOrg"],
+        optional: ["importer", "authorisedRepresentative", "distributor"],
+    },
+    // RoHS / WEEE / RED / EMC — manufacturer is mandatory for any
+    // EU placement; AR + importer become mandatory for non-EU
+    // manufacturers under Article 4 of the relevant directive, but
+    // since we can't tell at schema time whether the manufacturer is
+    // EU or not, we keep them optional and let the editor surface
+    // them when the manufacturer's `country` is non-EU.
+    electronics: {
+        required: ["manufacturer"],
+        optional: ["importer", "authorisedRepresentative", "distributor", "recycler"],
+    },
+    // Toy Safety Directive 2009/48 Article 4 — both manufacturer and
+    // importer are mandatory for non-EU toys, the most common case.
+    toys: {
+        required: ["manufacturer", "importer"],
+        optional: ["authorisedRepresentative", "distributor"],
+    },
+    // PPWR 2025/40 Article 11 + national packaging EPR schemes —
+    // PRO required where the EPR scheme applies (most EU member states).
+    fmcg: {
+        required: ["manufacturer", "producerResponsibilityOrg"],
+        optional: ["importer", "distributor", "recycler"],
+    },
+    // PPWR Articles 7 + 45 — packaging materials themselves carry
+    // direct PRO obligations.
+    packaging: {
+        required: ["manufacturer", "producerResponsibilityOrg"],
+        optional: ["importer", "distributor", "recycler"],
+    },
+    // Textile EPR is national (DE, FR, NL have schemes; harmonised
+    // EU rules pending). Keep PRO optional until ESPR delegated act
+    // mandates it. Manufacturer canonical.
+    textile: {
+        required: ["manufacturer"],
+        optional: ["producerResponsibilityOrg", "importer", "distributor", "recycler"],
+    },
+    // No EU-level operator mandate beyond CE for upholstered furniture
+    // (national flammability rules in IT/UK/FR). Manufacturer canonical.
+    furniture: {
+        required: ["manufacturer"],
+        optional: ["importer", "distributor"],
+    },
+    // REACH places obligations on manufacturer + importer + downstream
+    // user. v1 maps "downstream user" to `distributor` per design call;
+    // revisit when a chemicals customer pulls.
+    chemicals: {
+        required: ["manufacturer"],
+        optional: ["importer", "distributor", "authorisedRepresentative"],
+    },
+    // CPR 2024/3110 — manufacturer mandatory; AR for non-EU
+    // construction-product placers.
+    construction: {
+        required: ["manufacturer"],
+        optional: ["importer", "distributor", "authorisedRepresentative"],
+    },
+    // Tyre Labelling Reg (EU) 2020/740 places obligations on the
+    // manufacturer. Retreader role deferred to v2 — see module doc.
+    tyres: {
+        required: ["manufacturer"],
+        optional: ["importer", "distributor"],
+    },
+    // CBAM places obligations on the importer of CBAM goods, not
+    // the steel-mill DPP itself. Manufacturer canonical here.
+    steel: {
+        required: ["manufacturer"],
+        optional: ["importer", "distributor"],
+    },
+    // REACH SVHC notification — manufacturer canonical; no specific
+    // party-mandate beyond that for fine jewellery.
+    jewelry: {
+        required: ["manufacturer"],
+        optional: ["importer", "distributor"],
+    },
+};
+/**
+ * Get the required + optional role lists for a category. Returns
+ * `null` when the category isn't one of the 12 modeled categories,
+ * so callers can early-return rather than crash on legacy / unknown
+ * category strings.
+ */
+export function getPartyRoles(category) {
+    return CATEGORY_PARTY_ROLES[category] ?? null;
+}
+/**
+ * True when `role` is required for the given category. Used by the
+ * publish-precondition check + the editor's red-asterisk render.
+ * Unknown categories return false (don't block on what we can't
+ * interpret).
+ */
+export function isRequiredRole(category, role) {
+    const roles = getPartyRoles(category);
+    return roles?.required.includes(role) ?? false;
+}
+/**
+ * Combined role list (required first, then optional, in declaration
+ * order). Returns `[]` for unknown categories. Convenience for UI
+ * iteration when both sets need to render.
+ */
+export function allRolesForCategory(category) {
+    const roles = getPartyRoles(category);
+    if (!roles)
+        return [];
+    return [...roles.required, ...roles.optional];
+}
+//# sourceMappingURL=required-roles.js.map

package/dist/vendor/required-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"required-roles.js","sourceRoot":"","sources":["../../src/vendor/required-roles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAmCH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA4C;IAC3E,gEAAgE;IAChE,gEAAgE;IAChE,0CAA0C;IAC1C,OAAO,EAAE;QACP,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,2BAA2B,CAAC;QACnE,QAAQ,EAAE,CAAC,UAAU,EAAE,0BAA0B,EAAE,aAAa,CAAC;KAClE;IAED,8DAA8D;IAC9D,0DAA0D;IAC1D,+DAA+D;IAC/D,iEAAiE;IACjE,8DAA8D;IAC9D,oDAAoD;IACpD,WAAW,EAAE;QACX,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,QAAQ,EAAE,CAAC,UAAU,EAAE,0BAA0B,EAAE,aAAa,EAAE,UAAU,CAAC;KAC9E;IAED,iEAAiE;IACjE,gEAAgE;IAChE,IAAI,EAAE;QACJ,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC;QACtC,QAAQ,EAAE,CAAC,0BAA0B,EAAE,aAAa,CAAC;KACtD;IAED,6DAA6D;IAC7D,qEAAqE;IACrE,IAAI,EAAE;QACJ,QAAQ,EAAE,CAAC,cAAc,EAAE,2BAA2B,CAAC;QACvD,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC;KAClD;IAED,8DAA8D;IAC9D,0BAA0B;IAC1B,SAAS,EAAE;QACT,QAAQ,EAAE,CAAC,cAAc,EAAE,2BAA2B,CAAC;QACvD,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC;KAClD;IAED,+DAA+D;IAC/D,gEAAgE;IAChE,uCAAuC;IACvC,OAAO,EAAE;QACP,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,QAAQ,EAAE,CAAC,2BAA2B,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC;KAC/E;IAED,mEAAmE;IACnE,qEAAqE;IACrE,SAAS,EAAE;QACT,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;KACtC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,2CAA2C;IAC3C,SAAS,EAAE;QACT,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,0BAA0B,CAAC;KAClE;IAED,wDAAwD;IACxD,gCAAgC;IAChC,YAAY,EAAE;QACZ,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,0BAA0B,CAAC;KAClE;IAED,6DAA6D;IAC7D,gEAAgE;IAChE,KAAK,EAAE;QACL,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;KACtC;IAED,6DAA6D;IAC7D,0DAA0D;IAC1D,KAAK,EAAE;QACL,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;KACtC;IAED,gEAAgE;IAChE,gDAAgD;IAChD,OAAO,EAAE;QACP,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;KACtC;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAgB;IAEhB,OAAO,oBAAoB,CAAC,QAAuB,CAAC,IAAI,IAAI,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAe;IAC9D,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC"}

package/dist/verdict.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Compliance-verdict engine.
+ *
+ * Takes a passport, its template, and the category; returns a three-tier
+ * verdict (compliant / compliant_with_warnings / incomplete) with
+ * regulation-cited findings a caller can act on, then re-check after fixing
+ * — the read → fix → verify loop.
+ *
+ * Pure and IO-free: no database, no network, no clock.
+ *
+ * Composition:
+ *   static tier      — required fields (checkPublishReady) + required
+ *                      economic operators (required-roles) + format validation
+ *   conditional tier — CONDITIONAL_RULES[category] + CROSS_CUTTING_RULES
+ *   coverage         — "evaluated" if the category has conditional rules,
+ *                      else "static-only"
+ *
+ * Each finding cites the article of the instrument that mandates it, taken
+ * from the template field's own `regulationRef`.
+ */
+import type { Passport, Template } from "@tracepass/dpp-types";
+import type { ComplianceResult } from "./types.js";
+/**
+ * Evaluate a passport's compliance. `template` undefined → we can't
+ * assess; returns an `incomplete` verdict with a single explanatory
+ * critical finding (mirrors checkPublishReady's "template missing" hard
+ * blocker rather than throwing).
+ */
+export declare function evaluateCompliance(passport: Passport, template: Template | undefined, category: string): ComplianceResult;
+//# sourceMappingURL=verdict.d.ts.map

package/dist/verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../src/verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAiB,MAAM,sBAAsB,CAAC;AAK9E,OAAO,KAAK,EAEV,gBAAgB,EAGjB,MAAM,YAAY,CAAC;AAiEpB;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,QAAQ,GAAG,SAAS,EAC9B,QAAQ,EAAE,MAAM,GACf,gBAAgB,CA2GlB"}

package/dist/verdict.js

@@ -0,0 +1,189 @@
+/**
+ * Compliance-verdict engine.
+ *
+ * Takes a passport, its template, and the category; returns a three-tier
+ * verdict (compliant / compliant_with_warnings / incomplete) with
+ * regulation-cited findings a caller can act on, then re-check after fixing
+ * — the read → fix → verify loop.
+ *
+ * Pure and IO-free: no database, no network, no clock.
+ *
+ * Composition:
+ *   static tier      — required fields (checkPublishReady) + required
+ *                      economic operators (required-roles) + format validation
+ *   conditional tier — CONDITIONAL_RULES[category] + CROSS_CUTTING_RULES
+ *   coverage         — "evaluated" if the category has conditional rules,
+ *                      else "static-only"
+ *
+ * Each finding cites the article of the instrument that mandates it, taken
+ * from the template field's own `regulationRef`.
+ */
+import { checkPublishReady } from "./vendor/publish-gate.js";
+import { getPartyRoles } from "./vendor/required-roles.js";
+import { derivePassportCounts } from "./vendor/counts.js";
+import { CONDITIONAL_RULES, CROSS_CUTTING_RULES } from "./rules.js";
+/** Validate a filled value against a template field's format rules.
+ *  Returns a finding (warning) on mismatch, or null when clean. Empty
+ *  values are NOT checked here — presence is the static field check's
+ *  job; this only judges the SHAPE of values that ARE set. */
+function checkFieldFormat(tf, value) {
+    const v = tf.validation;
+    const base = {
+        type: "invalid_format",
+        severity: "warning",
+        target: tf.key,
+        regulation: undefined,
+        // Template JSON stores an absent article as an explicit `null`; findings
+        // expose it as `undefined` so consumers only handle one absent case.
+        article: tf.regulationRef?.article ?? undefined,
+    };
+    // enum / multi_enum: value(s) must be among the allowed options.
+    if ((tf.dataType === "enum" || tf.dataType === "multi_enum") && tf.enumOptions) {
+        const allowed = new Set(tf.enumOptions.map((o) => o.value));
+        const vals = Array.isArray(value) ? value : [value];
+        const bad = vals.filter((x) => !allowed.has(String(x)));
+        if (bad.length > 0) {
+            return { ...base, why: `Value "${bad.join(", ")}" is not one of the allowed options for ${tf.key}.`, fix: `Use one of: ${[...allowed].join(", ")}.` };
+        }
+    }
+    // string-shaped checks (string / url). Bounds use `!= null` so an
+    // explicit `null` in the template JSON (the seeded shape for "no
+    // bound" — not `undefined`) is correctly treated as "no constraint"
+    // rather than coercing to 0.
+    if (typeof value === "string") {
+        if (v.minLength != null && value.length < v.minLength) {
+            return { ...base, why: `${tf.key} is shorter than the required ${v.minLength} characters.`, fix: `Provide at least ${v.minLength} characters.` };
+        }
+        if (v.maxLength != null && value.length > v.maxLength) {
+            return { ...base, why: `${tf.key} exceeds the maximum ${v.maxLength} characters.`, fix: `Shorten to at most ${v.maxLength} characters.` };
+        }
+        if (v.pattern) {
+            let re = null;
+            try {
+                re = new RegExp(v.pattern);
+            }
+            catch {
+                re = null;
+            }
+            if (re && !re.test(value)) {
+                return { ...base, why: `${tf.key} doesn't match the required format.`, fix: `Expected format: ${tf.aiHints?.expectedFormat ?? v.pattern}.` };
+            }
+        }
+    }
+    // numeric bounds — `!= null` for the same reason (template carries
+    // explicit `min: null` / `max: null`, which must not coerce to 0).
+    if (typeof value === "number") {
+        if (v.min != null && value < v.min) {
+            return { ...base, why: `${tf.key} (${value}) is below the minimum ${v.min}.`, fix: `Use a value ≥ ${v.min}.` };
+        }
+        if (v.max != null && value > v.max) {
+            return { ...base, why: `${tf.key} (${value}) is above the maximum ${v.max}.`, fix: `Use a value ≤ ${v.max}.` };
+        }
+    }
+    return null;
+}
+/**
+ * Evaluate a passport's compliance. `template` undefined → we can't
+ * assess; returns an `incomplete` verdict with a single explanatory
+ * critical finding (mirrors checkPublishReady's "template missing" hard
+ * blocker rather than throwing).
+ */
+export function evaluateCompliance(passport, template, category) {
+    const { completionPercentage } = derivePassportCounts(passport.fields);
+    if (!template) {
+        return {
+            verdict: "incomplete",
+            category,
+            conditionalCoverage: "static-only",
+            critical: [
+                {
+                    type: "missing_field",
+                    severity: "critical",
+                    why: "No template is available for this passport, so compliance can't be evaluated.",
+                    fix: "Ensure the passport references a valid category template.",
+                },
+            ],
+            warnings: [],
+            checkedRules: [],
+            completionPercentage,
+        };
+    }
+    const critical = [];
+    const warnings = [];
+    const checkedRules = [];
+    // ── Static tier 1: required fields (reuse the publish gate) ────────
+    checkedRules.push("static:required-fields");
+    const publish = checkPublishReady(passport, template);
+    const fieldRef = (key) => template.fields.find((f) => f.key === key)?.regulationRef;
+    for (const key of publish.missingFields) {
+        const ref = fieldRef(key);
+        critical.push({
+            type: "missing_field",
+            severity: "critical",
+            target: key,
+            regulation: ref ? template.regulation?.number : undefined,
+            article: ref?.article ?? undefined,
+            why: `Required field "${key}" has no value.`,
+            fix: `Provide a value for ${key}.`,
+        });
+    }
+    for (const key of publish.unapprovedFields) {
+        critical.push({
+            type: "unapproved_field",
+            severity: "critical",
+            target: key,
+            why: `Required field "${key}" has a value but isn't approved yet.`,
+            fix: `Review and approve ${key}.`,
+        });
+    }
+    // ── Static tier 2: required economic-operator parties ──────────────
+    checkedRules.push("static:required-parties");
+    const roles = getPartyRoles(category);
+    if (roles) {
+        for (const role of roles.required) {
+            if (!passport.parties?.[role]) {
+                critical.push({
+                    type: "missing_party",
+                    severity: "critical",
+                    target: role,
+                    why: `Required economic operator "${role}" is not set for a ${category} passport.`,
+                    fix: `Add the ${role} party (legal name + GS1 GLN where available).`,
+                });
+            }
+        }
+    }
+    // ── Static tier 3: format of filled values (warnings) ──────────────
+    checkedRules.push("static:format");
+    for (const tf of template.fields) {
+        const f = passport.fields[tf.key];
+        if (!f || f.value === null || f.value === undefined || f.value === "")
+            continue;
+        const bad = checkFieldFormat(tf, f.value);
+        if (bad)
+            warnings.push(bad);
+    }
+    // ── Conditional tier: per-category + cross-cutting ─────────────────
+    const categoryRules = CONDITIONAL_RULES[category] ?? [];
+    const conditionalCoverage = categoryRules.length > 0 ? "evaluated" : "static-only";
+    for (const rule of [...categoryRules, ...CROSS_CUTTING_RULES]) {
+        checkedRules.push(rule.id);
+        for (const finding of rule.run(passport, template)) {
+            (finding.severity === "critical" ? critical : warnings).push(finding);
+        }
+    }
+    const verdict = critical.length > 0
+        ? "incomplete"
+        : warnings.length > 0
+            ? "compliant_with_warnings"
+            : "compliant";
+    return {
+        verdict,
+        category,
+        conditionalCoverage,
+        critical,
+        warnings,
+        checkedRules,
+        completionPercentage,
+    };
+}
+//# sourceMappingURL=verdict.js.map

package/dist/verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.js","sourceRoot":"","sources":["../src/verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAQpE;;;8DAG8D;AAC9D,SAAS,gBAAgB,CACvB,EAAiB,EACjB,KAAc;IAEd,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC;IACxB,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,gBAAyB;QAC/B,QAAQ,EAAE,SAAkB;QAC5B,MAAM,EAAE,EAAE,CAAC,GAAG;QACd,UAAU,EAAE,SAA+B;QAC3C,yEAAyE;QACzE,qEAAqE;QACrE,OAAO,EAAE,EAAE,CAAC,aAAa,EAAE,OAAO,IAAI,SAAS;KAChD,CAAC;IAEF,iEAAiE;IACjE,IAAI,CAAC,EAAE,CAAC,QAAQ,KAAK,MAAM,IAAI,EAAE,CAAC,QAAQ,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,2CAA2C,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACxJ,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,iEAAiE;IACjE,oEAAoE;IACpE,6BAA6B;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;YACtD,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,iCAAiC,CAAC,CAAC,SAAS,cAAc,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC,SAAS,cAAc,EAAE,CAAC;QACnJ,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;YACtD,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,wBAAwB,CAAC,CAAC,SAAS,cAAc,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC,SAAS,cAAc,EAAE,CAAC;QAC5I,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,IAAI,EAAE,GAAkB,IAAI,CAAC;YAC7B,IAAI,CAAC;gBAAC,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,EAAE,GAAG,IAAI,CAAC;YAAC,CAAC;YACxD,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,qCAAqC,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,OAAO,EAAE,cAAc,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC;YAC/I,CAAC;QACH,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,mEAAmE;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACnC,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,KAAK,0BAA0B,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QACjH,CAAC;QACD,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACnC,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,KAAK,0BAA0B,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QACjH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAkB,EAClB,QAA8B,EAC9B,QAAgB;IAEhB,MAAM,EAAE,oBAAoB,EAAE,GAAG,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEvE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;YACR,mBAAmB,EAAE,aAAa;YAClC,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,UAAU;oBACpB,GAAG,EAAE,+EAA+E;oBACpF,GAAG,EAAE,2DAA2D;iBACjE;aACF;YACD,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,EAAE;YAChB,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,sEAAsE;IACtE,YAAY,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAC/B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,aAAa,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS;YACzD,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,SAAS;YAClC,GAAG,EAAE,mBAAmB,GAAG,iBAAiB;YAC5C,GAAG,EAAE,uBAAuB,GAAG,GAAG;SACnC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,GAAG;YACX,GAAG,EAAE,mBAAmB,GAAG,uCAAuC;YAClE,GAAG,EAAE,sBAAsB,GAAG,GAAG;SAClC,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,YAAY,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,IAAI;oBACZ,GAAG,EAAE,+BAA+B,IAAI,sBAAsB,QAAQ,YAAY;oBAClF,GAAG,EAAE,WAAW,IAAI,gDAAgD;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE;YAAE,SAAS;QAChF,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,sEAAsE;IACtE,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,mBAAmB,GACvB,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;IAEzD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,aAAa,EAAE,GAAG,mBAAmB,CAAC,EAAE,CAAC;QAC9D,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnD,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GACX,QAAQ,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACnB,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,WAAW,CAAC;IAEpB,OAAO;QACL,OAAO;QACP,QAAQ;QACR,mBAAmB;QACnB,QAAQ;QACR,QAAQ;QACR,YAAY;QACZ,oBAAoB;KACrB,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@tracepass/dpp-validate",
+  "version": "0.1.0",
+  "description": "Evaluate an EU Digital Product Passport against its category field-spec — a three-tier compliance verdict with regulation-cited findings. Pure functions, no third-party runtime dependencies.",
+  "keywords": ["digital-product-passport", "dpp", "espr", "compliance", "eu-regulation", "battery-passport", "validation", "circular-economy"],
+  "license": "Apache-2.0",
+  "author": "TracePass LTD (https://tracepass.eu)",
+  "homepage": "https://github.com/malinoto/tracepass-open/tree/main/packages/dpp-validate#readme",
+  "repository": { "type": "git", "url": "git+https://github.com/malinoto/tracepass-open.git", "directory": "packages/dpp-validate" },
+  "bugs": "https://github.com/malinoto/tracepass-open/issues",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": { ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" } },
+  "files": ["dist", "README.md", "LICENSE"],
+  "sideEffects": false,
+  "publishConfig": { "access": "public" },
+  "scripts": { "build": "tsc -p tsconfig.build.json", "clean": "rm -rf dist" },
+  "dependencies": { "@tracepass/dpp-types": "^0.1.0" },
+  "devDependencies": { "typescript": "^5.6.3" },
+  "engines": { "node": ">=18" }
+}