@weave_protocol/domere 1.0.13 → 1.0.14

package/dist/compliance/checkpoint.d.ts

@@ -0,0 +1,183 @@
+/**
+ * Dōmere - Compliance Checkpoints (SOC2/HIPAA)
+ *
+ * Automated compliance tracking and reporting for AI systems.
+ * Supports SOC2, HIPAA, GDPR, and custom frameworks.
+ */
+export type ComplianceFramework = 'SOC2' | 'HIPAA' | 'GDPR' | 'PCI-DSS' | 'ISO27001' | 'CUSTOM';
+export type SOC2Control = 'CC1.1' | 'CC1.2' | 'CC1.3' | 'CC1.4' | 'CC1.5' | 'CC2.1' | 'CC2.2' | 'CC2.3' | 'CC3.1' | 'CC3.2' | 'CC3.3' | 'CC3.4' | 'CC4.1' | 'CC4.2' | 'CC5.1' | 'CC5.2' | 'CC5.3' | 'CC6.1' | 'CC6.2' | 'CC6.3' | 'CC6.4' | 'CC6.5' | 'CC6.6' | 'CC6.7' | 'CC6.8' | 'CC7.1' | 'CC7.2' | 'CC7.3' | 'CC7.4' | 'CC7.5' | 'CC8.1' | 'CC9.1' | 'CC9.2';
+export type HIPAAControl = 'ACCESS_CONTROL' | 'AUDIT_CONTROLS' | 'INTEGRITY' | 'PERSON_AUTH' | 'TRANSMISSION_SECURITY' | 'PRIVACY_RULE' | 'BREACH_NOTIFICATION' | 'MINIMUM_NECESSARY';
+export interface ComplianceCheckpointRecord {
+    id: string;
+    thread_id: string;
+    timestamp: Date;
+    framework: ComplianceFramework;
+    control: string;
+    control_description: string;
+    event_type: 'access' | 'modification' | 'disclosure' | 'deletion' | 'transmission' | 'authentication' | 'authorization' | 'audit';
+    event_description: string;
+    data_classification: 'public' | 'internal' | 'confidential' | 'restricted' | 'phi' | 'pii';
+    data_categories: string[];
+    agent_id: string;
+    user_id?: string;
+    data_subject_id?: string;
+    legal_basis?: 'consent' | 'contract' | 'legal_obligation' | 'vital_interests' | 'public_task' | 'legitimate_interests' | 'treatment' | 'payment' | 'operations';
+    retention_days?: number;
+    retention_policy?: string;
+    risk_level: 'low' | 'medium' | 'high' | 'critical';
+    mitigations_applied: string[];
+    checkpoint_hash: string;
+    signed: boolean;
+    signature?: string;
+}
+export interface ComplianceViolationRecord {
+    id: string;
+    checkpoint_id: string;
+    thread_id: string;
+    timestamp: Date;
+    framework: ComplianceFramework;
+    control: string;
+    violation_type: 'unauthorized_access' | 'data_breach' | 'policy_violation' | 'retention_violation' | 'consent_violation' | 'audit_gap' | 'encryption_failure';
+    severity: 'low' | 'medium' | 'high' | 'critical';
+    description: string;
+    affected_records: number;
+    affected_subjects: string[];
+    remediation_required: boolean;
+    remediation_deadline?: Date;
+    remediation_status: 'pending' | 'in_progress' | 'completed' | 'waived';
+    remediation_notes?: string;
+}
+export interface ComplianceReportOutput {
+    id: string;
+    generated_at: Date;
+    period_start: Date;
+    period_end: Date;
+    framework: ComplianceFramework;
+    total_checkpoints: number;
+    checkpoints_by_control: Record<string, number>;
+    checkpoints_by_event_type: Record<string, number>;
+    checkpoints_by_risk_level: Record<string, number>;
+    total_violations: number;
+    violations_by_severity: Record<string, number>;
+    open_violations: number;
+    remediated_violations: number;
+    unique_data_subjects: number;
+    data_access_count: number;
+    compliance_score: number;
+    control_coverage: Record<string, {
+        covered: boolean;
+        checkpoint_count: number;
+    }>;
+    attestation?: {
+        attester: string;
+        attested_at: Date;
+        statement: string;
+        signature: string;
+    };
+}
+export interface RetentionPolicy {
+    name: string;
+    data_categories: string[];
+    retention_days: number;
+    deletion_method: 'soft' | 'hard' | 'anonymize';
+    legal_hold_exempt: boolean;
+}
+export declare const SOC2_CONTROLS: Record<SOC2Control, string>;
+export declare const HIPAA_CONTROLS: Record<HIPAAControl, string>;
+export declare class ComplianceManager {
+    private checkpoints;
+    private violations;
+    private retentionPolicies;
+    private signingKey;
+    constructor(signingKey: string);
+    /**
+     * Record a compliance checkpoint
+     */
+    checkpoint(params: {
+        thread_id: string;
+        framework: ComplianceFramework;
+        control: string;
+        event_type: ComplianceCheckpointRecord['event_type'];
+        event_description: string;
+        data_classification: ComplianceCheckpointRecord['data_classification'];
+        data_categories?: string[];
+        agent_id: string;
+        user_id?: string;
+        data_subject_id?: string;
+        legal_basis?: ComplianceCheckpointRecord['legal_basis'];
+        retention_days?: number;
+        risk_level?: ComplianceCheckpointRecord['risk_level'];
+        mitigations_applied?: string[];
+        sign?: boolean;
+    }): Promise<ComplianceCheckpointRecord>;
+    /**
+     * Record a compliance violation
+     */
+    recordViolation(params: {
+        checkpoint_id?: string;
+        thread_id: string;
+        framework: ComplianceFramework;
+        control: string;
+        violation_type: ComplianceViolationRecord['violation_type'];
+        severity: ComplianceViolationRecord['severity'];
+        description: string;
+        affected_records?: number;
+        affected_subjects?: string[];
+        remediation_deadline?: Date;
+    }): Promise<ComplianceViolationRecord>;
+    /**
+     * Update remediation status
+     */
+    updateRemediation(violationId: string, status: ComplianceViolationRecord['remediation_status'], notes?: string): Promise<ComplianceViolationRecord | null>;
+    /**
+     * Generate compliance report
+     */
+    generateReport(params: {
+        framework: ComplianceFramework;
+        period_start: Date;
+        period_end: Date;
+        attester?: string;
+    }): Promise<ComplianceReportOutput>;
+    /**
+     * Get checkpoints for a thread
+     */
+    getCheckpoints(threadId: string): Promise<ComplianceCheckpointRecord[]>;
+    /**
+     * Get violations for a thread
+     */
+    getViolations(threadId: string): Promise<ComplianceViolationRecord[]>;
+    /**
+     * Add retention policy
+     */
+    addRetentionPolicy(policy: RetentionPolicy): void;
+    /**
+     * HIPAA-specific: Log PHI access
+     */
+    logPHIAccess(params: {
+        thread_id: string;
+        agent_id: string;
+        patient_id: string;
+        access_reason: string;
+        data_accessed: string[];
+        legal_basis: 'treatment' | 'payment' | 'operations';
+    }): Promise<ComplianceCheckpointRecord>;
+    /**
+     * SOC2-specific: Log access control event
+     */
+    logAccessControl(params: {
+        thread_id: string;
+        agent_id: string;
+        user_id?: string;
+        resource: string;
+        action: 'grant' | 'revoke' | 'modify' | 'review';
+        success: boolean;
+    }): Promise<ComplianceCheckpointRecord>;
+    private initDefaultPolicies;
+    private assessRisk;
+    private getRetentionDays;
+    private checkViolations;
+    private computeCheckpointHash;
+    private sign;
+}
+export default ComplianceManager;
+//# sourceMappingURL=checkpoint.d.ts.map

package/dist/compliance/checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../../src/compliance/checkpoint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEhG,MAAM,MAAM,WAAW,GACnB,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAC/C,OAAO,GAAG,OAAO,GAAG,OAAO,GAC3B,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GACrC,OAAO,GAAG,OAAO,GACjB,OAAO,GAAG,OAAO,GAAG,OAAO,GAC3B,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAC7E,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAC/C,OAAO,GACP,OAAO,GAAG,OAAO,CAAC;AAEtB,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,WAAW,GACX,aAAa,GACb,uBAAuB,GACvB,cAAc,GACd,qBAAqB,GACrB,mBAAmB,CAAC;AAExB,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAGhB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAG5B,UAAU,EAAE,QAAQ,GAAG,cAAc,GAAG,YAAY,GAAG,UAAU,GAAG,cAAc,GAAG,gBAAgB,GAAG,eAAe,GAAG,OAAO,CAAC;IAClI,iBAAiB,EAAE,MAAM,CAAC;IAG1B,mBAAmB,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,GAAG,KAAK,GAAG,KAAK,CAAC;IAC3F,eAAe,EAAE,MAAM,EAAE,CAAC;IAG1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,WAAW,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,kBAAkB,GAAG,iBAAiB,GAAG,aAAa,GAAG,sBAAsB,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAGhK,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACnD,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAG9B,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAEhB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAEhB,cAAc,EAAE,qBAAqB,GAAG,aAAa,GAAG,kBAAkB,GAAG,qBAAqB,GAAG,mBAAmB,GAAG,WAAW,GAAG,oBAAoB,CAAC;IAC9J,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,WAAW,EAAE,MAAM,CAAC;IAEpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAE5B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,oBAAoB,CAAC,EAAE,IAAI,CAAC;IAC5B,kBAAkB,EAAE,SAAS,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,IAAI,CAAC;IACnB,YAAY,EAAE,IAAI,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IAEjB,SAAS,EAAE,mBAAmB,CAAC;IAG/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGlD,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAG9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAG1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAGjF,WAAW,CAAC,EAAE;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,IAAI,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;IAC/C,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAMD,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAkCrD,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CASvD,CAAC;AAMF,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,WAAW,CAAsD;IACzE,OAAO,CAAC,UAAU,CAAqD;IACvE,OAAO,CAAC,iBAAiB,CAA2C;IACpE,OAAO,CAAC,UAAU,CAAS;gBAEf,UAAU,EAAE,MAAM;IAK9B;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,mBAAmB,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,0BAA0B,CAAC,YAAY,CAAC,CAAC;QACrD,iBAAiB,EAAE,MAAM,CAAC;QAC1B,mBAAmB,EAAE,0BAA0B,CAAC,qBAAqB,CAAC,CAAC;QACvE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,0BAA0B,CAAC,aAAa,CAAC,CAAC;QACxD,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,UAAU,CAAC,EAAE,0BAA0B,CAAC,YAAY,CAAC,CAAC;QACtD,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IA+DvC;;OAEG;IACG,eAAe,CAAC,MAAM,EAAE;QAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,mBAAmB,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QAC5D,QAAQ,EAAE,yBAAyB,CAAC,UAAU,CAAC,CAAC;QAChD,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC7B,oBAAoB,CAAC,EAAE,IAAI,CAAC;KAC7B,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA6BtC;;OAEG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,CAAC,oBAAoB,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC;IAUhK;;OAEG;IACG,cAAc,CAAC,MAAM,EAAE;QAC3B,SAAS,EAAE,mBAAmB,CAAC;QAC/B,YAAY,EAAE,IAAI,CAAC;QACnB,UAAU,EAAE,IAAI,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAuGnC;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC;IAM7E;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAM3E;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAIjD;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,EAAE,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;KACrD,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAgBvC;;OAEG;IACG,gBAAgB,CAAC,MAAM,EAAE;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACjD,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAqBvC,OAAO,CAAC,mBAAmB;IA0B3B,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,gBAAgB;YAYV,eAAe;IA8B7B,OAAO,CAAC,qBAAqB;IAgB7B,OAAO,CAAC,IAAI;CAKb;AAED,eAAe,iBAAiB,CAAC"}

package/dist/compliance/checkpoint.js

@@ -0,0 +1,394 @@
+/**
+ * Dōmere - Compliance Checkpoints (SOC2/HIPAA)
+ *
+ * Automated compliance tracking and reporting for AI systems.
+ * Supports SOC2, HIPAA, GDPR, and custom frameworks.
+ */
+import * as crypto from 'crypto';
+// =============================================================================
+// SOC2 Control Descriptions
+// =============================================================================
+export const SOC2_CONTROLS = {
+    'CC1.1': 'Integrity and Ethical Values',
+    'CC1.2': 'Board Independence and Oversight',
+    'CC1.3': 'Organizational Structure',
+    'CC1.4': 'Commitment to Competence',
+    'CC1.5': 'Accountability',
+    'CC2.1': 'Information Quality',
+    'CC2.2': 'Internal Communication',
+    'CC2.3': 'External Communication',
+    'CC3.1': 'Risk Assessment Objectives',
+    'CC3.2': 'Risk Identification',
+    'CC3.3': 'Fraud Risk',
+    'CC3.4': 'Change Impact Analysis',
+    'CC4.1': 'Monitoring Activities',
+    'CC4.2': 'Deficiency Evaluation',
+    'CC5.1': 'Control Selection',
+    'CC5.2': 'Technology Controls',
+    'CC5.3': 'Policy Deployment',
+    'CC6.1': 'Logical Access Security',
+    'CC6.2': 'Access Provisioning',
+    'CC6.3': 'Access Removal',
+    'CC6.4': 'Access Review',
+    'CC6.5': 'Authentication',
+    'CC6.6': 'Access Restrictions',
+    'CC6.7': 'Data Transmission Protection',
+    'CC6.8': 'Malicious Software Prevention',
+    'CC7.1': 'Infrastructure Monitoring',
+    'CC7.2': 'Security Event Detection',
+    'CC7.3': 'Incident Response',
+    'CC7.4': 'Business Continuity',
+    'CC7.5': 'Data Recovery',
+    'CC8.1': 'Change Management',
+    'CC9.1': 'Risk Mitigation',
+    'CC9.2': 'Vendor Management',
+};
+export const HIPAA_CONTROLS = {
+    'ACCESS_CONTROL': 'Access Control (§164.312(a)(1))',
+    'AUDIT_CONTROLS': 'Audit Controls (§164.312(b))',
+    'INTEGRITY': 'Integrity Controls (§164.312(c)(1))',
+    'PERSON_AUTH': 'Person Authentication (§164.312(d))',
+    'TRANSMISSION_SECURITY': 'Transmission Security (§164.312(e)(1))',
+    'PRIVACY_RULE': 'Privacy Rule Compliance',
+    'BREACH_NOTIFICATION': 'Breach Notification (§164.400-414)',
+    'MINIMUM_NECESSARY': 'Minimum Necessary Standard',
+};
+// =============================================================================
+// Compliance Manager
+// =============================================================================
+export class ComplianceManager {
+    checkpoints = new Map();
+    violations = new Map();
+    retentionPolicies = new Map();
+    signingKey;
+    constructor(signingKey) {
+        this.signingKey = crypto.scryptSync(signingKey, 'domere-compliance', 32);
+        this.initDefaultPolicies();
+    }
+    /**
+     * Record a compliance checkpoint
+     */
+    async checkpoint(params) {
+        const id = `chk_${crypto.randomUUID()}`;
+        // Get control description
+        let controlDescription = params.control;
+        if (params.framework === 'SOC2' && SOC2_CONTROLS[params.control]) {
+            controlDescription = SOC2_CONTROLS[params.control];
+        }
+        else if (params.framework === 'HIPAA' && HIPAA_CONTROLS[params.control]) {
+            controlDescription = HIPAA_CONTROLS[params.control];
+        }
+        // Auto-assess risk if not provided
+        const riskLevel = params.risk_level || this.assessRisk(params);
+        // Get retention from policy
+        const retention = params.retention_days || this.getRetentionDays(params.data_categories || []);
+        const checkpoint = {
+            id,
+            thread_id: params.thread_id,
+            timestamp: new Date(),
+            framework: params.framework,
+            control: params.control,
+            control_description: controlDescription,
+            event_type: params.event_type,
+            event_description: params.event_description,
+            data_classification: params.data_classification,
+            data_categories: params.data_categories || [],
+            agent_id: params.agent_id,
+            user_id: params.user_id,
+            data_subject_id: params.data_subject_id,
+            legal_basis: params.legal_basis,
+            retention_days: retention,
+            risk_level: riskLevel,
+            mitigations_applied: params.mitigations_applied || [],
+            checkpoint_hash: '',
+            signed: params.sign || false,
+        };
+        // Compute hash
+        checkpoint.checkpoint_hash = this.computeCheckpointHash(checkpoint);
+        // Sign if requested
+        if (params.sign) {
+            checkpoint.signature = this.sign(checkpoint.checkpoint_hash);
+        }
+        // Store
+        this.checkpoints.set(id, checkpoint);
+        // Check for violations
+        await this.checkViolations(checkpoint);
+        return checkpoint;
+    }
+    /**
+     * Record a compliance violation
+     */
+    async recordViolation(params) {
+        const id = `vio_${crypto.randomUUID()}`;
+        const violation = {
+            id,
+            checkpoint_id: params.checkpoint_id || '',
+            thread_id: params.thread_id,
+            timestamp: new Date(),
+            framework: params.framework,
+            control: params.control,
+            violation_type: params.violation_type,
+            severity: params.severity,
+            description: params.description,
+            affected_records: params.affected_records || 0,
+            affected_subjects: params.affected_subjects || [],
+            remediation_required: params.severity !== 'low',
+            remediation_deadline: params.remediation_deadline,
+            remediation_status: 'pending',
+        };
+        this.violations.set(id, violation);
+        return violation;
+    }
+    /**
+     * Update remediation status
+     */
+    async updateRemediation(violationId, status, notes) {
+        const violation = this.violations.get(violationId);
+        if (!violation)
+            return null;
+        violation.remediation_status = status;
+        if (notes)
+            violation.remediation_notes = notes;
+        return violation;
+    }
+    /**
+     * Generate compliance report
+     */
+    async generateReport(params) {
+        const id = `rpt_${crypto.randomUUID()}`;
+        // Filter checkpoints
+        const relevantCheckpoints = Array.from(this.checkpoints.values()).filter(c => c.framework === params.framework &&
+            c.timestamp >= params.period_start &&
+            c.timestamp <= params.period_end);
+        // Filter violations
+        const relevantViolations = Array.from(this.violations.values()).filter(v => v.framework === params.framework &&
+            v.timestamp >= params.period_start &&
+            v.timestamp <= params.period_end);
+        // Compute stats
+        const checkpointsByControl = {};
+        const checkpointsByEventType = {};
+        const checkpointsByRiskLevel = {};
+        const dataSubjects = new Set();
+        let dataAccessCount = 0;
+        for (const c of relevantCheckpoints) {
+            checkpointsByControl[c.control] = (checkpointsByControl[c.control] || 0) + 1;
+            checkpointsByEventType[c.event_type] = (checkpointsByEventType[c.event_type] || 0) + 1;
+            checkpointsByRiskLevel[c.risk_level] = (checkpointsByRiskLevel[c.risk_level] || 0) + 1;
+            if (c.data_subject_id)
+                dataSubjects.add(c.data_subject_id);
+            if (c.event_type === 'access')
+                dataAccessCount++;
+        }
+        const violationsBySeverity = {};
+        let openViolations = 0;
+        let remediatedViolations = 0;
+        for (const v of relevantViolations) {
+            violationsBySeverity[v.severity] = (violationsBySeverity[v.severity] || 0) + 1;
+            if (v.remediation_status === 'pending' || v.remediation_status === 'in_progress') {
+                openViolations++;
+            }
+            else if (v.remediation_status === 'completed') {
+                remediatedViolations++;
+            }
+        }
+        // Calculate control coverage
+        const controlCoverage = {};
+        const controlList = params.framework === 'SOC2' ? Object.keys(SOC2_CONTROLS) :
+            params.framework === 'HIPAA' ? Object.keys(HIPAA_CONTROLS) : [];
+        for (const control of controlList) {
+            const count = checkpointsByControl[control] || 0;
+            controlCoverage[control] = { covered: count > 0, checkpoint_count: count };
+        }
+        // Calculate compliance score
+        const coveredControls = Object.values(controlCoverage).filter(c => c.covered).length;
+        const totalControls = controlList.length;
+        const controlScore = totalControls > 0 ? (coveredControls / totalControls) * 50 : 50;
+        const violationPenalty = Math.min(50, relevantViolations.length * 5);
+        const complianceScore = Math.max(0, Math.round(controlScore + 50 - violationPenalty));
+        const report = {
+            id,
+            generated_at: new Date(),
+            period_start: params.period_start,
+            period_end: params.period_end,
+            framework: params.framework,
+            total_checkpoints: relevantCheckpoints.length,
+            checkpoints_by_control: checkpointsByControl,
+            checkpoints_by_event_type: checkpointsByEventType,
+            checkpoints_by_risk_level: checkpointsByRiskLevel,
+            total_violations: relevantViolations.length,
+            violations_by_severity: violationsBySeverity,
+            open_violations: openViolations,
+            remediated_violations: remediatedViolations,
+            unique_data_subjects: dataSubjects.size,
+            data_access_count: dataAccessCount,
+            compliance_score: complianceScore,
+            control_coverage: controlCoverage,
+        };
+        // Add attestation if requested
+        if (params.attester) {
+            const statement = `I, ${params.attester}, attest that this compliance report accurately reflects the state of the ${params.framework} controls for the period ${params.period_start.toISOString()} to ${params.period_end.toISOString()}.`;
+            report.attestation = {
+                attester: params.attester,
+                attested_at: new Date(),
+                statement,
+                signature: this.sign(statement),
+            };
+        }
+        return report;
+    }
+    /**
+     * Get checkpoints for a thread
+     */
+    async getCheckpoints(threadId) {
+        return Array.from(this.checkpoints.values())
+            .filter(c => c.thread_id === threadId)
+            .sort((a, b) => a.timestamp.getTime() - b.timestamp.getTime());
+    }
+    /**
+     * Get violations for a thread
+     */
+    async getViolations(threadId) {
+        return Array.from(this.violations.values())
+            .filter(v => v.thread_id === threadId)
+            .sort((a, b) => a.timestamp.getTime() - b.timestamp.getTime());
+    }
+    /**
+     * Add retention policy
+     */
+    addRetentionPolicy(policy) {
+        this.retentionPolicies.set(policy.name, policy);
+    }
+    /**
+     * HIPAA-specific: Log PHI access
+     */
+    async logPHIAccess(params) {
+        return this.checkpoint({
+            thread_id: params.thread_id,
+            framework: 'HIPAA',
+            control: 'ACCESS_CONTROL',
+            event_type: 'access',
+            event_description: `PHI accessed for ${params.access_reason}`,
+            data_classification: 'phi',
+            data_categories: params.data_accessed,
+            agent_id: params.agent_id,
+            data_subject_id: params.patient_id,
+            legal_basis: params.legal_basis,
+            sign: true,
+        });
+    }
+    /**
+     * SOC2-specific: Log access control event
+     */
+    async logAccessControl(params) {
+        return this.checkpoint({
+            thread_id: params.thread_id,
+            framework: 'SOC2',
+            control: params.action === 'grant' ? 'CC6.2' :
+                params.action === 'revoke' ? 'CC6.3' :
+                    params.action === 'review' ? 'CC6.4' : 'CC6.1',
+            event_type: 'authorization',
+            event_description: `Access ${params.action} for ${params.resource}: ${params.success ? 'success' : 'failed'}`,
+            data_classification: 'internal',
+            agent_id: params.agent_id,
+            user_id: params.user_id,
+            risk_level: params.success ? 'low' : 'medium',
+            sign: true,
+        });
+    }
+    // ===========================================================================
+    // Private Methods
+    // ===========================================================================
+    initDefaultPolicies() {
+        this.addRetentionPolicy({
+            name: 'phi_retention',
+            data_categories: ['phi', 'medical_records', 'patient_data'],
+            retention_days: 2190, // 6 years for HIPAA
+            deletion_method: 'hard',
+            legal_hold_exempt: false,
+        });
+        this.addRetentionPolicy({
+            name: 'pii_retention',
+            data_categories: ['pii', 'personal_data'],
+            retention_days: 365,
+            deletion_method: 'anonymize',
+            legal_hold_exempt: false,
+        });
+        this.addRetentionPolicy({
+            name: 'audit_log_retention',
+            data_categories: ['audit_logs', 'access_logs'],
+            retention_days: 365, // SOC2 requirement
+            deletion_method: 'soft',
+            legal_hold_exempt: true,
+        });
+    }
+    assessRisk(params) {
+        if (params.data_classification === 'phi' || params.data_classification === 'restricted') {
+            if (params.event_type === 'disclosure' || params.event_type === 'transmission') {
+                return 'critical';
+            }
+            return 'high';
+        }
+        if (params.data_classification === 'pii' || params.data_classification === 'confidential') {
+            return 'medium';
+        }
+        return 'low';
+    }
+    getRetentionDays(categories) {
+        let maxRetention = 90; // Default
+        for (const policy of this.retentionPolicies.values()) {
+            if (categories.some(c => policy.data_categories.includes(c))) {
+                maxRetention = Math.max(maxRetention, policy.retention_days);
+            }
+        }
+        return maxRetention;
+    }
+    async checkViolations(checkpoint) {
+        // Check for missing legal basis on PHI
+        if (checkpoint.data_classification === 'phi' && !checkpoint.legal_basis) {
+            await this.recordViolation({
+                checkpoint_id: checkpoint.id,
+                thread_id: checkpoint.thread_id,
+                framework: 'HIPAA',
+                control: 'MINIMUM_NECESSARY',
+                violation_type: 'policy_violation',
+                severity: 'high',
+                description: 'PHI accessed without documented legal basis',
+                affected_records: 1,
+                affected_subjects: checkpoint.data_subject_id ? [checkpoint.data_subject_id] : [],
+            });
+        }
+        // Check for high-risk access without mitigations
+        if (checkpoint.risk_level === 'critical' && checkpoint.mitigations_applied.length === 0) {
+            await this.recordViolation({
+                checkpoint_id: checkpoint.id,
+                thread_id: checkpoint.thread_id,
+                framework: checkpoint.framework,
+                control: checkpoint.control,
+                violation_type: 'policy_violation',
+                severity: 'medium',
+                description: 'Critical risk event without documented mitigations',
+            });
+        }
+    }
+    computeCheckpointHash(checkpoint) {
+        const data = [
+            checkpoint.id,
+            checkpoint.thread_id,
+            checkpoint.timestamp.toISOString(),
+            checkpoint.framework,
+            checkpoint.control,
+            checkpoint.event_type,
+            checkpoint.event_description,
+            checkpoint.data_classification,
+            checkpoint.agent_id,
+        ].join('|');
+        return crypto.createHash('sha256').update(data).digest('hex');
+    }
+    sign(data) {
+        const hmac = crypto.createHmac('sha256', this.signingKey);
+        hmac.update(data);
+        return hmac.digest('hex');
+    }
+}
+export default ComplianceManager;
+//# sourceMappingURL=checkpoint.js.map

package/dist/compliance/checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../src/compliance/checkpoint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAwIjC,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,aAAa,GAAgC;IACxD,OAAO,EAAE,8BAA8B;IACvC,OAAO,EAAE,kCAAkC;IAC3C,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,4BAA4B;IACrC,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,yBAAyB;IAClC,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,8BAA8B;IACvC,OAAO,EAAE,+BAA+B;IACxC,OAAO,EAAE,2BAA2B;IACpC,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,mBAAmB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,mBAAmB;CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAiC;IAC1D,gBAAgB,EAAE,iCAAiC;IACnD,gBAAgB,EAAE,8BAA8B;IAChD,WAAW,EAAE,qCAAqC;IAClD,aAAa,EAAE,qCAAqC;IACpD,uBAAuB,EAAE,wCAAwC;IACjE,cAAc,EAAE,yBAAyB;IACzC,qBAAqB,EAAE,oCAAoC;IAC3D,mBAAmB,EAAE,4BAA4B;CAClD,CAAC;AAEF,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,MAAM,OAAO,iBAAiB;IACpB,WAAW,GAA4C,IAAI,GAAG,EAAE,CAAC;IACjE,UAAU,GAA2C,IAAI,GAAG,EAAE,CAAC;IAC/D,iBAAiB,GAAiC,IAAI,GAAG,EAAE,CAAC;IAC5D,UAAU,CAAS;IAE3B,YAAY,UAAkB;QAC5B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,MAgBhB;QACC,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAExC,0BAA0B;QAC1B,IAAI,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC;QACxC,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,OAAsB,CAAC,EAAE,CAAC;YAChF,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,OAAsB,CAAC,CAAC;QACpE,CAAC;aAAM,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,OAAuB,CAAC,EAAE,CAAC;YAC1F,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,OAAuB,CAAC,CAAC;QACtE,CAAC;QAED,mCAAmC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE/D,4BAA4B;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QAE/F,MAAM,UAAU,GAA+B;YAC7C,EAAE;YACF,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE;YAErB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,mBAAmB,EAAE,kBAAkB;YAEvC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAE3C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;YAE7C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,eAAe,EAAE,MAAM,CAAC,eAAe;YAEvC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,cAAc,EAAE,SAAS;YAEzB,UAAU,EAAE,SAAS;YACrB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,EAAE;YAErD,eAAe,EAAE,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,KAAK;SAC7B,CAAC;QAEF,eAAe;QACf,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAEpE,oBAAoB;QACpB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAC/D,CAAC;QAED,QAAQ;QACR,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAErC,uBAAuB;QACvB,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAEvC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,MAWrB;QACC,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAExC,MAAM,SAAS,GAA8B;YAC3C,EAAE;YACF,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE;YAErB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YAEvB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAE/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,CAAC;YAC9C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;YAEjD,oBAAoB,EAAE,MAAM,CAAC,QAAQ,KAAK,KAAK;YAC/C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,kBAAkB,EAAE,SAAS;SAC9B,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAEnC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,MAAuD,EAAE,KAAc;QAClH,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,SAAS,CAAC,kBAAkB,GAAG,MAAM,CAAC;QACtC,IAAI,KAAK;YAAE,SAAS,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAE/C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,MAKpB;QACC,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAExC,qBAAqB;QACrB,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3E,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;YAChC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY;YAClC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,CACjC,CAAC;QAEF,oBAAoB;QACpB,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACzE,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;YAChC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY;YAClC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,CACjC,CAAC;QAEF,gBAAgB;QAChB,MAAM,oBAAoB,GAA2B,EAAE,CAAC;QACxD,MAAM,sBAAsB,GAA2B,EAAE,CAAC;QAC1D,MAAM,sBAAsB,GAA2B,EAAE,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;YACpC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7E,sBAAsB,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACvF,sBAAsB,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAEvF,IAAI,CAAC,CAAC,eAAe;gBAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ;gBAAE,eAAe,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,oBAAoB,GAA2B,EAAE,CAAC;QACxD,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAE7B,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC;YACnC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/E,IAAI,CAAC,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,CAAC,kBAAkB,KAAK,aAAa,EAAE,CAAC;gBACjF,cAAc,EAAE,CAAC;YACnB,CAAC;iBAAM,IAAI,CAAC,CAAC,kBAAkB,KAAK,WAAW,EAAE,CAAC;gBAChD,oBAAoB,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,eAAe,GAAmE,EAAE,CAAC;QAC3F,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEpF,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjD,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAC7E,CAAC;QAED,6BAA6B;QAC7B,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACrF,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC;QACzC,MAAM,YAAY,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAErF,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC;QAEtF,MAAM,MAAM,GAA2B;YACrC,EAAE;YACF,YAAY,EAAE,IAAI,IAAI,EAAE;YACxB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;YAE7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAE3B,iBAAiB,EAAE,mBAAmB,CAAC,MAAM;YAC7C,sBAAsB,EAAE,oBAAoB;YAC5C,yBAAyB,EAAE,sBAAsB;YACjD,yBAAyB,EAAE,sBAAsB;YAEjD,gBAAgB,EAAE,kBAAkB,CAAC,MAAM;YAC3C,sBAAsB,EAAE,oBAAoB;YAC5C,eAAe,EAAE,cAAc;YAC/B,qBAAqB,EAAE,oBAAoB;YAE3C,oBAAoB,EAAE,YAAY,CAAC,IAAI;YACvC,iBAAiB,EAAE,eAAe;YAElC,gBAAgB,EAAE,eAAe;YACjC,gBAAgB,EAAE,eAAe;SAClC,CAAC;QAEF,+BAA+B;QAC/B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,6EAA6E,MAAM,CAAC,SAAS,4BAA4B,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC;YAC3O,MAAM,CAAC,WAAW,GAAG;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvB,SAAS;gBACT,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;aAChC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;aACzC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;aACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;aACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,MAAuB;QACxC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,MAOlB;QACC,OAAO,IAAI,CAAC,UAAU,CAAC;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,gBAAgB;YACzB,UAAU,EAAE,QAAQ;YACpB,iBAAiB,EAAE,oBAAoB,MAAM,CAAC,aAAa,EAAE;YAC7D,mBAAmB,EAAE,KAAK;YAC1B,eAAe,EAAE,MAAM,CAAC,aAAa;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,eAAe,EAAE,MAAM,CAAC,UAAU;YAClC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAOtB;QACC,OAAO,IAAI,CAAC,UAAU,CAAC;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBACtC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;YACvD,UAAU,EAAE,eAAe;YAC3B,iBAAiB,EAAE,UAAU,MAAM,CAAC,MAAM,QAAQ,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC7G,mBAAmB,EAAE,UAAU;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YAC7C,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAEtE,mBAAmB;QACzB,IAAI,CAAC,kBAAkB,CAAC;YACtB,IAAI,EAAE,eAAe;YACrB,eAAe,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,cAAc,CAAC;YAC3D,cAAc,EAAE,IAAI,EAAE,oBAAoB;YAC1C,eAAe,EAAE,MAAM;YACvB,iBAAiB,EAAE,KAAK;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,CAAC;YACtB,IAAI,EAAE,eAAe;YACrB,eAAe,EAAE,CAAC,KAAK,EAAE,eAAe,CAAC;YACzC,cAAc,EAAE,GAAG;YACnB,eAAe,EAAE,WAAW;YAC5B,iBAAiB,EAAE,KAAK;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,CAAC;YACtB,IAAI,EAAE,qBAAqB;YAC3B,eAAe,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;YAC9C,cAAc,EAAE,GAAG,EAAE,mBAAmB;YACxC,eAAe,EAAE,MAAM;YACvB,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,MAA2D;QAC5E,IAAI,MAAM,CAAC,mBAAmB,KAAK,KAAK,IAAI,MAAM,CAAC,mBAAmB,KAAK,YAAY,EAAE,CAAC;YACxF,IAAI,MAAM,CAAC,UAAU,KAAK,YAAY,IAAI,MAAM,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;gBAC/E,OAAO,UAAU,CAAC;YACpB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,mBAAmB,KAAK,KAAK,IAAI,MAAM,CAAC,mBAAmB,KAAK,cAAc,EAAE,CAAC;YAC1F,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,UAAoB;QAC3C,IAAI,YAAY,GAAG,EAAE,CAAC,CAAC,UAAU;QAEjC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;YACrD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,UAAsC;QAClE,uCAAuC;QACvC,IAAI,UAAU,CAAC,mBAAmB,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YACxE,MAAM,IAAI,CAAC,eAAe,CAAC;gBACzB,aAAa,EAAE,UAAU,CAAC,EAAE;gBAC5B,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,SAAS,EAAE,OAAO;gBAClB,OAAO,EAAE,mBAAmB;gBAC5B,cAAc,EAAE,kBAAkB;gBAClC,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,6CAA6C;gBAC1D,gBAAgB,EAAE,CAAC;gBACnB,iBAAiB,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE;aAClF,CAAC,CAAC;QACL,CAAC;QAED,iDAAiD;QACjD,IAAI,UAAU,CAAC,UAAU,KAAK,UAAU,IAAI,UAAU,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,CAAC,eAAe,CAAC;gBACzB,aAAa,EAAE,UAAU,CAAC,EAAE;gBAC5B,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,cAAc,EAAE,kBAAkB;gBAClC,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,oDAAoD;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,UAAsC;QAClE,MAAM,IAAI,GAAG;YACX,UAAU,CAAC,EAAE;YACb,UAAU,CAAC,SAAS;YACpB,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAClC,UAAU,CAAC,SAAS;YACpB,UAAU,CAAC,OAAO;YAClB,UAAU,CAAC,UAAU;YACrB,UAAU,CAAC,iBAAiB;YAC5B,UAAU,CAAC,mBAAmB;YAC9B,UAAU,CAAC,QAAQ;SACpB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,eAAe,iBAAiB,CAAC"}

package/dist/compliance/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./checkpoint.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/compliance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/compliance/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC"}

package/dist/compliance/index.js

@@ -0,0 +1,2 @@
+export * from "./checkpoint.js";
+//# sourceMappingURL=index.js.map

package/dist/compliance/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/compliance/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC"}

package/dist/handoff/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./verification.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/handoff/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/handoff/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC"}

package/dist/handoff/index.js

@@ -0,0 +1,2 @@
+export * from "./verification.js";
+//# sourceMappingURL=index.js.map

package/dist/handoff/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/handoff/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC"}