@ucptools/validator 1.0.0 → 1.0.1

package/{src/compliance/templates.ts → dist/compliance/templates.js}

@@ -1,24 +1,24 @@
-/**
- * GDPR/Privacy Compliance Templates
- * Template content for privacy policy addendums and consent language
- */
-
-import type { ComplianceRegion, LawfulBasis, DataProcessor } from './types.js';
-import { LAWFUL_BASIS_DESCRIPTIONS, AI_PLATFORM_PROCESSORS } from './types.js';
-
-/**
- * Generate the AI Commerce privacy policy section
- */
-export function generateAiCommerceSection(
-  companyName: string,
-  platforms: DataProcessor[],
-  lawfulBasis: LawfulBasis,
-  regions: ComplianceRegion[]
-): string {
-  const basisInfo = LAWFUL_BASIS_DESCRIPTIONS[lawfulBasis];
-  const platformList = platforms.map(p => p.name).join(', ');
-
-  let section = `## AI-Powered Shopping and Agentic Commerce
+"use strict";
+/**
+ * GDPR/Privacy Compliance Templates
+ * Template content for privacy policy addendums and consent language
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateAiCommerceSection = generateAiCommerceSection;
+exports.generateProcessorDisclosures = generateProcessorDisclosures;
+exports.generateConsentLanguage = generateConsentLanguage;
+exports.generateMarketingOptIn = generateMarketingOptIn;
+exports.generateDataSubjectRights = generateDataSubjectRights;
+exports.generateTrackingNotice = generateTrackingNotice;
+exports.generateDisclaimer = generateDisclaimer;
+const types_js_1 = require("./types.js");
+/**
+ * Generate the AI Commerce privacy policy section
+ */
+function generateAiCommerceSection(companyName, platforms, lawfulBasis, regions) {
+    const basisInfo = types_js_1.LAWFUL_BASIS_DESCRIPTIONS[lawfulBasis];
+    const platformList = platforms.map(p => p.name).join(', ');
+    let section = `## AI-Powered Shopping and Agentic Commerce
 
 ### How We Use AI Shopping Agents
 
@@ -43,21 +43,19 @@ When you make a purchase through an AI shopping agent, we may collect:
 - Payment confirmation (we do not receive full payment card details)
 - Transaction identifiers for order tracking
 - Communication preferences
-`;
-
-  if (regions.includes('eu') || regions.includes('uk')) {
-    section += `
+`;
+    if (regions.includes('eu') || regions.includes('uk')) {
+        section += `
 ### International Data Transfers
 
 Some AI agent providers are based outside the European Economic Area (EEA) or United Kingdom. When your data is transferred to these providers, it is protected by:
 - Standard Contractual Clauses (SCCs) approved by the European Commission
 - The provider's certification under applicable data protection frameworks
 - Additional technical and organizational security measures
-`;
-  }
-
-  if (regions.includes('california')) {
-    section += `
+`;
+    }
+    if (regions.includes('california')) {
+        section += `
 ### California Privacy Rights (CCPA/CPRA)
 
 California residents have additional rights regarding personal information collected through AI shopping agents:
@@ -67,60 +65,46 @@ California residents have additional rights regarding personal information colle
 - **Right to Non-Discrimination**: We will not discriminate against you for exercising your privacy rights
 
 To exercise these rights, contact us at the email address provided below.
-`;
-  }
-
-  return section;
-}
-
-/**
- * Generate data processor disclosures
- */
-export function generateProcessorDisclosures(
-  processors: DataProcessor[],
-  regions: ComplianceRegion[]
-): string {
-  let disclosure = `## Third-Party Data Processors (AI Commerce)
+`;
+    }
+    return section;
+}
+/**
+ * Generate data processor disclosures
+ */
+function generateProcessorDisclosures(processors, regions) {
+    let disclosure = `## Third-Party Data Processors (AI Commerce)
 
 We work with the following third-party service providers to enable AI-powered shopping:
 
 | Provider | Purpose | Location | Privacy Policy |
 |----------|---------|----------|----------------|
-`;
-
-  for (const processor of processors) {
-    const privacyLink = processor.privacyPolicyUrl
-      ? `[View Policy](${processor.privacyPolicyUrl})`
-      : 'Contact provider';
-    disclosure += `| ${processor.name} | ${processor.purpose} | ${processor.country || 'Various'} | ${privacyLink} |\n`;
-  }
-
-  disclosure += `
+`;
+    for (const processor of processors) {
+        const privacyLink = processor.privacyPolicyUrl
+            ? `[View Policy](${processor.privacyPolicyUrl})`
+            : 'Contact provider';
+        disclosure += `| ${processor.name} | ${processor.purpose} | ${processor.country || 'Various'} | ${privacyLink} |\n`;
+    }
+    disclosure += `
 These processors are contractually bound to:
 - Process data only on our documented instructions
 - Ensure appropriate security measures are in place
 - Assist us in responding to data subject requests
 - Delete or return all personal data at the end of the service relationship
-`;
-
-  if (regions.includes('eu') || regions.includes('uk')) {
-    disclosure += `
+`;
+    if (regions.includes('eu') || regions.includes('uk')) {
+        disclosure += `
 All processors have entered into Data Processing Agreements (DPAs) that comply with Article 28 of the GDPR.
-`;
-  }
-
-  return disclosure;
-}
-
-/**
- * Generate consent language for checkout
- */
-export function generateConsentLanguage(
-  companyName: string,
-  lawfulBasis: LawfulBasis,
-  includeMarketing: boolean
-): string {
-  let consent = `## Consent Language for AI-Assisted Checkout
+`;
+    }
+    return disclosure;
+}
+/**
+ * Generate consent language for checkout
+ */
+function generateConsentLanguage(companyName, lawfulBasis, includeMarketing) {
+    let consent = `## Consent Language for AI-Assisted Checkout
 
 Use the following language at checkout or in order confirmations:
 
@@ -130,18 +114,16 @@ Use the following language at checkout or in order confirmations:
 > - Your order information will be processed by ${companyName} and the AI platform provider
 > - We will use your data to fulfill your order, process payment, and provide customer support
 > - Your data will be handled in accordance with our Privacy Policy
-`;
-
-  if (lawfulBasis === 'consent') {
-    consent += `
+`;
+    if (lawfulBasis === 'consent') {
+        consent += `
 ### Explicit Consent (for consent-based processing)
 
 > [ ] I consent to ${companyName} processing my personal data for the purpose of completing this purchase and providing related services. I understand I can withdraw my consent at any time.
-`;
-  }
-
-  if (includeMarketing) {
-    consent += `
+`;
+    }
+    if (includeMarketing) {
+        consent += `
 ### Marketing Consent (Optional)
 
 > [ ] I would like to receive marketing communications from ${companyName} about products, offers, and updates. I understand I can unsubscribe at any time.
@@ -150,23 +132,20 @@ Use the following language at checkout or in order confirmations:
 - Freely given (not a condition of purchase)
 - Specific and informed
 - Indicated by clear affirmative action (pre-ticked boxes are not valid consent)
-`;
-  }
-
-  consent += `
+`;
+    }
+    consent += `
 ### Agent-Originated Orders Notice
 
 > This order was initiated through an AI shopping assistant. The AI platform may retain conversation history in accordance with their privacy policy. Your transaction data with ${companyName} is subject to our Privacy Policy.
-`;
-
-  return consent;
-}
-
-/**
- * Generate marketing opt-in text
- */
-export function generateMarketingOptIn(companyName: string): string {
-  return `## Marketing Opt-In for Agent-Acquired Customers
+`;
+    return consent;
+}
+/**
+ * Generate marketing opt-in text
+ */
+function generateMarketingOptIn(companyName) {
+    return `## Marketing Opt-In for Agent-Acquired Customers
 
 For customers acquired through AI shopping agents, use the following opt-in language:
 
@@ -187,19 +166,13 @@ For customers who made purchases via AI agents without opting in, you may send O
 > [Subscribe to Updates] [No Thanks]
 
 **Important**: Do not add customers to marketing lists without explicit consent. Agent-originated orders do not imply marketing permission.
-`;
-}
-
-/**
- * Generate data subject rights notice
- */
-export function generateDataSubjectRights(
-  companyName: string,
-  contactEmail: string,
-  dpoEmail: string | undefined,
-  regions: ComplianceRegion[]
-): string {
-  let rights = `## Your Data Rights (AI Commerce Transactions)
+`;
+}
+/**
+ * Generate data subject rights notice
+ */
+function generateDataSubjectRights(companyName, contactEmail, dpoEmail, regions) {
+    let rights = `## Your Data Rights (AI Commerce Transactions)
 
 You have the following rights regarding personal data collected through AI-assisted purchases:
 
@@ -214,31 +187,28 @@ You have the following rights regarding personal data collected through AI-assis
 ### Objection and Restriction
 - Object to processing based on legitimate interests
 - Request restriction of processing in certain circumstances
-`;
-
-  if (regions.includes('eu') || regions.includes('uk')) {
-    rights += `
+`;
+    if (regions.includes('eu') || regions.includes('uk')) {
+        rights += `
 ### GDPR-Specific Rights
 - **Right to be Forgotten**: Request erasure under Article 17
 - **Right to Restrict Processing**: Under Article 18
 - **Right to Data Portability**: Under Article 20
 - **Right to Object**: Under Article 21
 - **Lodge a Complaint**: With your local data protection authority
-`;
-  }
-
-  if (regions.includes('california')) {
-    rights += `
+`;
+    }
+    if (regions.includes('california')) {
+        rights += `
 ### CCPA/CPRA Rights
 - **Right to Know**: Categories and specific pieces of personal information collected
 - **Right to Delete**: Request deletion of personal information
 - **Right to Correct**: Request correction of inaccurate information
 - **Right to Opt-Out**: Of sale or sharing of personal information
 - **Right to Limit Use**: Of sensitive personal information
-`;
-  }
-
-  rights += `
+`;
+    }
+    rights += `
 ### How to Exercise Your Rights
 
 To exercise any of these rights, contact us:
@@ -255,19 +225,14 @@ To protect your privacy, we may need to verify your identity before processing y
 - Order number or transaction ID
 - Email address used for the order
 - Delivery address associated with the order
-`;
-
-  return rights;
-}
-
-/**
- * Generate tracking/cookie notice for agent transactions
- */
-export function generateTrackingNotice(
-  companyName: string,
-  regions: ComplianceRegion[]
-): string {
-  let notice = `## Tracking and Cookies for AI Agent Transactions
+`;
+    return rights;
+}
+/**
+ * Generate tracking/cookie notice for agent transactions
+ */
+function generateTrackingNotice(companyName, regions) {
+    let notice = `## Tracking and Cookies for AI Agent Transactions
 
 ### How Tracking Works with AI Agents
 
@@ -288,10 +253,9 @@ For AI agent transactions, we collect data through:
 - We do **not** place cookies on your device through AI agent transactions
 - We do **not** build behavioral profiles based solely on AI agent purchases
 - We **do** collect necessary transaction data to fulfill your order
-`;
-
-  if (regions.includes('eu') || regions.includes('uk')) {
-    notice += `
+`;
+    if (regions.includes('eu') || regions.includes('uk')) {
+        notice += `
 ### ePrivacy Compliance
 
 AI agent transactions are processed under:
@@ -299,10 +263,9 @@ AI agent transactions are processed under:
 - **Contract Performance**: Data processing necessary to deliver your order
 
 No consent is required for strictly necessary processing of transaction data.
-`;
-  }
-
-  notice += `
+`;
+    }
+    notice += `
 ### AI Platform Tracking
 
 The AI shopping agent (ChatGPT, Google AI, Copilot) may have its own data collection practices. Please review their privacy policies:
@@ -311,16 +274,14 @@ The AI shopping agent (ChatGPT, Google AI, Copilot) may have its own data collec
 - Account information you've provided to the AI service
 
 ${companyName} is not responsible for data collected directly by AI platform providers.
-`;
-
-  return notice;
-}
-
-/**
- * Generate the legal disclaimer
- */
-export function generateDisclaimer(): string {
-  return `---
+`;
+    return notice;
+}
+/**
+ * Generate the legal disclaimer
+ */
+function generateDisclaimer() {
+    return `---
 
 **IMPORTANT DISCLAIMER**
 
@@ -334,5 +295,6 @@ This document was generated by an automated tool and is provided for information
 We recommend consulting with a privacy lawyer or data protection specialist to ensure your privacy policy fully complies with applicable laws.
 
 Generated by [UCP.tools](https://ucptools.dev) - AI Commerce Readiness Platform
-`;
-}
+`;
+}
+//# sourceMappingURL=templates.js.map

package/dist/compliance/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/compliance/templates.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAQH,8DA8DC;AAKD,oEAkCC;AAKD,0DA6CC;AAKD,wDAuBC;AAKD,8DAiEC;AAKD,wDAmDC;AAKD,gDAgBC;AA3UD,yCAA+E;AAE/E;;GAEG;AACH,SAAgB,yBAAyB,CACvC,WAAmB,EACnB,SAA0B,EAC1B,WAAwB,EACxB,OAA2B;IAE3B,MAAM,SAAS,GAAG,oCAAyB,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE3D,IAAI,OAAO,GAAG;;;;EAId,WAAW,gJAAgJ,YAAY;;;;;;;;;iFASxF,SAAS,CAAC,KAAK,OAAO,SAAS,CAAC,WAAW;;EAE1H,SAAS,CAAC,WAAW;;;;;;;;;;CAUtB,CAAC;IAEA,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI;;;;;;;CAOd,CAAC;IACA,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI;;;;;;;;;;CAUd,CAAC;IACA,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAgB,4BAA4B,CAC1C,UAA2B,EAC3B,OAA2B;IAE3B,IAAI,UAAU,GAAG;;;;;;CAMlB,CAAC;IAEA,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,SAAS,CAAC,gBAAgB;YAC5C,CAAC,CAAC,iBAAiB,SAAS,CAAC,gBAAgB,GAAG;YAChD,CAAC,CAAC,kBAAkB,CAAC;QACvB,UAAU,IAAI,KAAK,SAAS,CAAC,IAAI,MAAM,SAAS,CAAC,OAAO,MAAM,SAAS,CAAC,OAAO,IAAI,SAAS,MAAM,WAAW,MAAM,CAAC;IACtH,CAAC;IAED,UAAU,IAAI;;;;;;CAMf,CAAC;IAEA,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,UAAU,IAAI;;CAEjB,CAAC;IACA,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAgB,uBAAuB,CACrC,WAAmB,EACnB,WAAwB,EACxB,gBAAyB;IAEzB,IAAI,OAAO,GAAG;;;;;;;kDAOkC,WAAW;;;CAG5D,CAAC;IAEA,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,IAAI;;;qBAGM,WAAW;CAC/B,CAAC;IACA,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,IAAI;;;8DAG+C,WAAW;;;;;;CAMxE,CAAC;IACA,CAAC;IAED,OAAO,IAAI;;;mLAGsK,WAAW;CAC7L,CAAC;IAEA,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,OAAO;;;;;;6CAMoC,WAAW;;;;gFAIwB,WAAW;;;;;;+IAMoD,WAAW;;;;;CAKzJ,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAgB,yBAAyB,CACvC,WAAmB,EACnB,YAAoB,EACpB,QAA4B,EAC5B,OAA2B;IAE3B,IAAI,MAAM,GAAG;;;;;;;;;;;;;;;CAed,CAAC;IAEA,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI;;;;;;;CAOb,CAAC;IACA,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI;;;;;;;CAOb,CAAC;IACA,CAAC;IAED,MAAM,IAAI;;;;eAIG,YAAY;EACzB,QAAQ,CAAC,CAAC,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;;;EAG5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mEAAmE,CAAC,CAAC,CAAC,EAAE;EAC3H,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC,EAAE;;;;;;;;CAQvG,CAAC;IAEA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CACpC,WAAmB,EACnB,OAA2B;IAE3B,IAAI,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBd,CAAC;IAEA,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI;;;;;;;;CAQb,CAAC;IACA,CAAC;IAED,MAAM,IAAI;;;;;;;;EAQV,WAAW;CACZ,CAAC;IAEA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB;IAChC,OAAO;;;;;;;;;IASL,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;;;;;CAK3B,CAAC;AACF,CAAC"}

package/dist/compliance/types.d.ts

@@ -0,0 +1,64 @@
+/**
+ * GDPR/Privacy Compliance Generator Types
+ * Types for generating privacy policy addendums and consent language
+ */
+export type ComplianceRegion = 'eu' | 'uk' | 'california' | 'global';
+export type LawfulBasis = 'contract' | 'consent' | 'legitimate' | 'legal';
+export type AgentPlatform = 'openai' | 'google' | 'microsoft' | 'other';
+export interface ComplianceGeneratorInput {
+    companyName: string;
+    companyEmail?: string;
+    companyAddress?: string;
+    dpoEmail?: string;
+    regions: ComplianceRegion[];
+    platforms: AgentPlatform[];
+    lawfulBasis: LawfulBasis;
+    includeMarketingConsent?: boolean;
+    includeDataRetention?: boolean;
+    retentionPeriodYears?: number;
+    additionalProcessors?: DataProcessor[];
+}
+export interface DataProcessor {
+    name: string;
+    purpose: string;
+    country?: string;
+    privacyPolicyUrl?: string;
+}
+export interface ComplianceDocument {
+    title: string;
+    sections: ComplianceSection[];
+    disclaimer: string;
+    generatedAt: string;
+    regions: ComplianceRegion[];
+}
+export interface ComplianceSection {
+    id: string;
+    title: string;
+    content: string;
+    required: boolean;
+    applicableRegions: ComplianceRegion[];
+}
+export interface ComplianceGeneratorOutput {
+    privacyAddendum: ComplianceDocument;
+    snippets: {
+        aiCommerceSection: string;
+        processorDisclosures: string;
+        consentLanguage: string;
+        marketingOptIn?: string;
+        dataSubjectRights: string;
+        trackingNotice: string;
+    };
+    embedHtml: string;
+    plainText: string;
+    generatedAt: string;
+    lawfulBasis: LawfulBasis;
+    regions: ComplianceRegion[];
+}
+export declare const AI_PLATFORM_PROCESSORS: Record<AgentPlatform, DataProcessor>;
+export declare const REGION_NAMES: Record<ComplianceRegion, string>;
+export declare const LAWFUL_BASIS_DESCRIPTIONS: Record<LawfulBasis, {
+    title: string;
+    description: string;
+    gdprArticle: string;
+}>;
+//# sourceMappingURL=types.d.ts.map

package/dist/compliance/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/compliance/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,GAAG,YAAY,GAAG,QAAQ,CAAC;AAGrE,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,SAAS,GACT,YAAY,GACZ,OAAO,CAAC;AAGZ,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,OAAO,CAAC;AAGZ,MAAM,WAAW,wBAAwB;IAEvC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAG5B,SAAS,EAAE,aAAa,EAAE,CAAC;IAG3B,WAAW,EAAE,WAAW,CAAC;IAGzB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,oBAAoB,CAAC,EAAE,aAAa,EAAE,CAAC;CACxC;AAGD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAGD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAGD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;CACvC;AAGD,MAAM,WAAW,yBAAyB;IAExC,eAAe,EAAE,kBAAkB,CAAC;IAGpC,QAAQ,EAAE;QAER,iBAAiB,EAAE,MAAM,CAAC;QAG1B,oBAAoB,EAAE,MAAM,CAAC;QAG7B,eAAe,EAAE,MAAM,CAAC;QAGxB,cAAc,CAAC,EAAE,MAAM,CAAC;QAGxB,iBAAiB,EAAE,MAAM,CAAC;QAG1B,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IAGF,SAAS,EAAE,MAAM,CAAC;IAGlB,SAAS,EAAE,MAAM,CAAC;IAGlB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAGD,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,CAwBvE,CAAC;AAGF,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAKzD,CAAC;AAGF,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,WAAW,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAqBtH,CAAC"}

package/dist/compliance/types.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * GDPR/Privacy Compliance Generator Types
+ * Types for generating privacy policy addendums and consent language
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LAWFUL_BASIS_DESCRIPTIONS = exports.REGION_NAMES = exports.AI_PLATFORM_PROCESSORS = void 0;
+// Predefined data processors for AI platforms
+exports.AI_PLATFORM_PROCESSORS = {
+    openai: {
+        name: 'OpenAI, LLC',
+        purpose: 'AI-powered shopping assistant and checkout processing',
+        country: 'United States',
+        privacyPolicyUrl: 'https://openai.com/privacy/',
+    },
+    google: {
+        name: 'Google LLC',
+        purpose: 'AI shopping agent (Google AI Mode, Gemini) and checkout processing',
+        country: 'United States',
+        privacyPolicyUrl: 'https://policies.google.com/privacy',
+    },
+    microsoft: {
+        name: 'Microsoft Corporation',
+        purpose: 'AI shopping assistant (Copilot) and checkout processing',
+        country: 'United States',
+        privacyPolicyUrl: 'https://privacy.microsoft.com/privacystatement',
+    },
+    other: {
+        name: 'Third-party AI Agent Provider',
+        purpose: 'AI-powered shopping and checkout assistance',
+        country: 'Various',
+    },
+};
+// Region display names
+exports.REGION_NAMES = {
+    eu: 'European Union (GDPR)',
+    uk: 'United Kingdom (UK GDPR)',
+    california: 'California (CCPA/CPRA)',
+    global: 'Global (General Best Practices)',
+};
+// Lawful basis descriptions
+exports.LAWFUL_BASIS_DESCRIPTIONS = {
+    contract: {
+        title: 'Performance of a Contract',
+        description: 'Processing is necessary for the performance of a contract with the data subject or to take steps at their request prior to entering into a contract.',
+        gdprArticle: 'Article 6(1)(b)',
+    },
+    consent: {
+        title: 'Consent',
+        description: 'The data subject has given consent to the processing of their personal data for one or more specific purposes.',
+        gdprArticle: 'Article 6(1)(a)',
+    },
+    legitimate: {
+        title: 'Legitimate Interests',
+        description: 'Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.',
+        gdprArticle: 'Article 6(1)(f)',
+    },
+    legal: {
+        title: 'Legal Obligation',
+        description: 'Processing is necessary for compliance with a legal obligation to which the controller is subject.',
+        gdprArticle: 'Article 6(1)(c)',
+    },
+};
+//# sourceMappingURL=types.js.map

package/dist/compliance/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/compliance/types.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA6GH,8CAA8C;AACjC,QAAA,sBAAsB,GAAyC;IAC1E,MAAM,EAAE;QACN,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,uDAAuD;QAChE,OAAO,EAAE,eAAe;QACxB,gBAAgB,EAAE,6BAA6B;KAChD;IACD,MAAM,EAAE;QACN,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,oEAAoE;QAC7E,OAAO,EAAE,eAAe;QACxB,gBAAgB,EAAE,qCAAqC;KACxD;IACD,SAAS,EAAE;QACT,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,yDAAyD;QAClE,OAAO,EAAE,eAAe;QACxB,gBAAgB,EAAE,gDAAgD;KACnE;IACD,KAAK,EAAE;QACL,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,6CAA6C;QACtD,OAAO,EAAE,SAAS;KACnB;CACF,CAAC;AAEF,uBAAuB;AACV,QAAA,YAAY,GAAqC;IAC5D,EAAE,EAAE,uBAAuB;IAC3B,EAAE,EAAE,0BAA0B;IAC9B,UAAU,EAAE,wBAAwB;IACpC,MAAM,EAAE,iCAAiC;CAC1C,CAAC;AAEF,4BAA4B;AACf,QAAA,yBAAyB,GAAqF;IACzH,QAAQ,EAAE;QACR,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,sJAAsJ;QACnK,WAAW,EAAE,iBAAiB;KAC/B;IACD,OAAO,EAAE;QACP,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,gHAAgH;QAC7H,WAAW,EAAE,iBAAiB;KAC/B;IACD,UAAU,EAAE;QACV,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,qHAAqH;QAClI,WAAW,EAAE,iBAAiB;KAC/B;IACD,KAAK,EAAE;QACL,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,oGAAoG;QACjH,WAAW,EAAE,iBAAiB;KAC/B;CACF,CAAC"}

package/dist/db/index.d.ts

@@ -0,0 +1,11 @@
+import { NeonHttpDatabase } from 'drizzle-orm/neon-http';
+import * as schema from './schema.js';
+type Database = NeonHttpDatabase<typeof schema>;
+/**
+ * Get the Drizzle database instance.
+ * Lazily creates the connection on first use.
+ */
+export declare function getDb(): Database;
+export * from './schema.js';
+export { schema };
+//# sourceMappingURL=index.d.ts.map

package/dist/db/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAGtC,KAAK,QAAQ,GAAG,gBAAgB,CAAC,OAAO,MAAM,CAAC,CAAC;AAKhD;;;GAGG;AACH,wBAAgB,KAAK,IAAI,QAAQ,CAShC;AAGD,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/db/index.js

@@ -0,0 +1,63 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.schema = void 0;
+exports.getDb = getDb;
+const neon_http_1 = require("drizzle-orm/neon-http");
+const serverless_1 = require("@neondatabase/serverless");
+const schema = __importStar(require("./schema.js"));
+exports.schema = schema;
+// Lazy-loaded database instance (for serverless cold starts)
+let dbInstance = null;
+/**
+ * Get the Drizzle database instance.
+ * Lazily creates the connection on first use.
+ */
+function getDb() {
+    if (!dbInstance) {
+        if (!process.env.DATABASE_URL) {
+            throw new Error('DATABASE_URL environment variable is not set');
+        }
+        const sql = (0, serverless_1.neon)(process.env.DATABASE_URL);
+        dbInstance = (0, neon_http_1.drizzle)(sql, { schema });
+    }
+    return dbInstance;
+}
+// Re-export schema for convenience
+__exportStar(require("./schema.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/db/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,sBASC;AAvBD,qDAAkE;AAClE,yDAAgD;AAChD,oDAAsC;AAyB7B,wBAAM;AApBf,6DAA6D;AAC7D,IAAI,UAAU,GAAoB,IAAI,CAAC;AAEvC;;;GAGG;AACH,SAAgB,KAAK;IACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,iBAAI,EAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3C,UAAU,GAAG,IAAA,mBAAO,EAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,mCAAmC;AACnC,8CAA4B"}