compfn 0.1.0

package/dist/logger.js

@@ -0,0 +1,39 @@
+export class ConsoleLogger {
+    minLevel;
+    constructor(minLevel = "info") {
+        this.minLevel = minLevel;
+    }
+    shouldLog(level) {
+        const levels = ["debug", "info", "warn", "error"];
+        const minIndex = levels.indexOf(this.minLevel);
+        const currentIndex = levels.indexOf(level);
+        return currentIndex >= minIndex;
+    }
+    formatMessage(level, message, context) {
+        const timestamp = new Date().toISOString();
+        const contextStr = context ? ` ${JSON.stringify(context)}` : "";
+        return `[${timestamp}] [${level.toUpperCase()}] ${message}${contextStr}`;
+    }
+    debug(message, context) {
+        if (this.shouldLog("debug")) {
+            console.debug(this.formatMessage("debug", message, context));
+        }
+    }
+    info(message, context) {
+        if (this.shouldLog("info")) {
+            console.info(this.formatMessage("info", message, context));
+        }
+    }
+    warn(message, context) {
+        if (this.shouldLog("warn")) {
+            console.warn(this.formatMessage("warn", message, context));
+        }
+    }
+    error(message, context) {
+        if (this.shouldLog("error")) {
+            console.error(this.formatMessage("error", message, context));
+        }
+    }
+}
+export const defaultLogger = new ConsoleLogger("info");
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,aAAa;IACJ;IAApB,YAAoB,WAAqB,MAAM;QAA3B,aAAQ,GAAR,QAAQ,CAAmB;IAAG,CAAC;IAE3C,SAAS,CAAC,KAAe;QAC/B,MAAM,MAAM,GAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,YAAY,IAAI,QAAQ,CAAC;IAClC,CAAC;IAEO,aAAa,CAAC,KAAe,EAAE,OAAe,EAAE,OAAiC;QACvF,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,SAAS,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,GAAG,UAAU,EAAE,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAiC;QACrD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAiC;QACtD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC"}

package/dist/readiness/service.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Readiness service: forControl, forFramework.
+ *
+ * Policy (deterministic; same evidence set + config → same status):
+ * - not_applicable: when the latest scoping_decision evidence (by evidence.timestamp) for the control
+ *   has payload.status === "not_applicable". Latest = highest timestamp; tie-break by createdAt then id.
+ * - compliant: when applicable and there is at least one evidence record with outcome "pass"
+ *   (excluding type scoping_decision) and evidence.timestamp within the policy window
+ *   (readinessWindowDays days from now; config.readinessWindowDays ?? 90).
+ * - not_compliant: when applicable and no such pass evidence exists within the window.
+ *
+ * All timestamps in ms (Unix). Window: now - (readinessWindowDays * 24 * 60 * 60 * 1000).
+ */
+import type { CompfnEnvelope } from "../errors.js";
+import type { ControlReadiness, FrameworkReadiness } from "../readiness.js";
+import type { Evidence } from "../evidence.js";
+import type { Framework } from "../framework.js";
+export interface ReadinessServiceConfig {
+    /** Get control by id; returns envelope (CONTROL_NOT_FOUND when missing). */
+    getControl: (id: string) => Promise<CompfnEnvelope<{
+        id: string;
+    }>>;
+    /** Get framework by id; returns envelope (FRAMEWORK_NOT_FOUND when missing). */
+    getFramework: (id: string) => Promise<CompfnEnvelope<Framework>>;
+    /** List evidence for a control (no since filter; we apply window in logic). */
+    listEvidence: (controlId: string) => Promise<CompfnEnvelope<Evidence[]>>;
+    /** Policy window in days. Evidence with timestamp within this many days from now counts for compliant. */
+    readinessWindowDays?: number;
+}
+export declare function createReadinessService(config: ReadinessServiceConfig): {
+    forControl(controlId: string, frameworkId?: string): Promise<CompfnEnvelope<ControlReadiness>>;
+    forFramework(frameworkId: string): Promise<CompfnEnvelope<FrameworkReadiness>>;
+};
+//# sourceMappingURL=service.d.ts.map

package/dist/readiness/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/readiness/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAmB,MAAM,iBAAiB,CAAC;AAC7F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,sBAAsB;IACrC,4EAA4E;IAC5E,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACpE,gFAAgF;IAChF,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,+EAA+E;IAC/E,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACzE,0GAA0G;IAC1G,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AA6DD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB;0BAgEpD,MAAM,gBACH,MAAM,GACnB,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;8BAK7B,MAAM,GAClB,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;EAsCjD"}

package/dist/readiness/service.js

@@ -0,0 +1,160 @@
+/**
+ * Readiness service: forControl, forFramework.
+ *
+ * Policy (deterministic; same evidence set + config → same status):
+ * - not_applicable: when the latest scoping_decision evidence (by evidence.timestamp) for the control
+ *   has payload.status === "not_applicable". Latest = highest timestamp; tie-break by createdAt then id.
+ * - compliant: when applicable and there is at least one evidence record with outcome "pass"
+ *   (excluding type scoping_decision) and evidence.timestamp within the policy window
+ *   (readinessWindowDays days from now; config.readinessWindowDays ?? 90).
+ * - not_compliant: when applicable and no such pass evidence exists within the window.
+ *
+ * All timestamps in ms (Unix). Window: now - (readinessWindowDays * 24 * 60 * 60 * 1000).
+ */
+import { READINESS_WINDOW_DAYS_DEFAULT } from "../constants.js";
+function now() {
+    return Date.now();
+}
+/**
+ * Latest scoping_decision for control: the one with greatest timestamp; tie-break by createdAt, then id.
+ * Returns undefined if no scoping_decision evidence.
+ */
+function latestScopingDecision(evidence) {
+    const scoping = evidence.filter((e) => e.type === "scoping_decision");
+    if (scoping.length === 0)
+        return undefined;
+    scoping.sort((a, b) => {
+        if (b.timestamp !== a.timestamp)
+            return b.timestamp - a.timestamp;
+        if (b.createdAt !== a.createdAt)
+            return b.createdAt - a.createdAt;
+        return b.id.localeCompare(a.id);
+    });
+    return scoping[0];
+}
+/**
+ * Evidence that counts for pass-within-window: type !== scoping_decision, outcome === "pass", timestamp >= windowStart.
+ */
+function hasPassInWindow(evidence, windowStartMs) {
+    let maxTs = -1;
+    let lastEvidenceId;
+    let foundPassInWindow = false;
+    for (const e of evidence) {
+        if (e.timestamp > maxTs) {
+            maxTs = e.timestamp;
+            lastEvidenceId = e.id;
+        }
+        if (e.type === "scoping_decision")
+            continue;
+        if (e.outcome === "pass" && e.timestamp >= windowStartMs) {
+            foundPassInWindow = true;
+        }
+    }
+    return {
+        compliant: foundPassInWindow,
+        lastEvidenceAt: maxTs >= 0 ? maxTs : undefined,
+        lastEvidenceId,
+    };
+}
+/**
+ * Requirement IDs (from the given framework) that map to this controlId.
+ */
+function requirementIdsForControl(framework, controlId) {
+    const ids = [];
+    for (const req of framework.requirements) {
+        if (req.controlIds.includes(controlId)) {
+            ids.push(req.requirementId);
+        }
+    }
+    return ids;
+}
+export function createReadinessService(config) {
+    const windowDays = config.readinessWindowDays ?? READINESS_WINDOW_DAYS_DEFAULT;
+    const windowMs = windowDays * 24 * 60 * 60 * 1000;
+    async function computeControlReadiness(controlId, frameworkId) {
+        const controlRes = await config.getControl(controlId);
+        if (!controlRes.ok) {
+            return controlRes;
+        }
+        const evidenceRes = await config.listEvidence(controlId);
+        if (!evidenceRes.ok) {
+            return evidenceRes;
+        }
+        const evidence = evidenceRes.result;
+        const latestScoping = latestScopingDecision(evidence);
+        if (latestScoping &&
+            latestScoping.payload?.status === "not_applicable") {
+            const byTs = [...evidence].sort((a, b) => b.timestamp - a.timestamp);
+            const last = byTs[0];
+            const result = {
+                controlId,
+                status: "not_applicable",
+                lastEvidenceAt: last ? last.timestamp : undefined,
+                lastEvidenceId: last ? last.id : undefined,
+            };
+            if (frameworkId) {
+                const fwRes = await config.getFramework(frameworkId);
+                if (fwRes.ok) {
+                    result.requirementIds = requirementIdsForControl(fwRes.result, controlId);
+                }
+            }
+            return { ok: true, result };
+        }
+        const windowStart = now() - windowMs;
+        const { compliant, lastEvidenceAt, lastEvidenceId } = hasPassInWindow(evidence, windowStart);
+        const status = compliant ? "compliant" : "not_compliant";
+        const result = {
+            controlId,
+            status,
+            lastEvidenceAt,
+            lastEvidenceId,
+        };
+        if (frameworkId) {
+            const fwRes = await config.getFramework(frameworkId);
+            if (fwRes.ok) {
+                result.requirementIds = requirementIdsForControl(fwRes.result, controlId);
+            }
+        }
+        return { ok: true, result };
+    }
+    return {
+        async forControl(controlId, frameworkId) {
+            return computeControlReadiness(controlId, frameworkId);
+        },
+        async forFramework(frameworkId) {
+            const fwRes = await config.getFramework(frameworkId);
+            if (!fwRes.ok) {
+                return fwRes;
+            }
+            const framework = fwRes.result;
+            const controlIds = new Set();
+            for (const req of framework.requirements) {
+                for (const cid of req.controlIds) {
+                    controlIds.add(cid);
+                }
+            }
+            const controlReadiness = [];
+            let frameworkStatus = "compliant";
+            for (const cid of controlIds) {
+                const cr = await computeControlReadiness(cid, frameworkId);
+                if (!cr.ok) {
+                    return cr;
+                }
+                controlReadiness.push(cr.result);
+                if (cr.result.status === "not_compliant") {
+                    frameworkStatus = "not_compliant";
+                }
+            }
+            return {
+                ok: true,
+                result: {
+                    frameworkId,
+                    status: frameworkStatus,
+                    controlReadiness,
+                    lastUpdated: now(),
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/readiness/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/readiness/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAahE,SAAS,GAAG;IACV,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,QAAoB;IACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;YAAE,OAAO,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;YAAE,OAAO,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QAClE,OAAO,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,QAAoB,EACpB,aAAqB;IAErB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,cAAkC,CAAC;IACvC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;YACxB,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC;YACpB,cAAc,GAAG,CAAC,CAAC,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB;YAAE,SAAS;QAC5C,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,aAAa,EAAE,CAAC;YACzD,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS,EAAE,iBAAiB;QAC5B,cAAc,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC9C,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,SAAoB,EAAE,SAAiB;IACvE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QACzC,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA8B;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;IAC/E,MAAM,QAAQ,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAElD,KAAK,UAAU,uBAAuB,CACpC,SAAiB,EACjB,WAAoB;QAEpB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC;QAEpC,MAAM,aAAa,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACtD,IACE,aAAa;YACZ,aAAa,CAAC,OAAO,EAAE,MAAiB,KAAK,gBAAgB,EAC9D,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAqB;gBAC/B,SAAS;gBACT,MAAM,EAAE,gBAAgB;gBACxB,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACjD,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;aAC3C,CAAC;YACF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBACrD,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;oBACb,MAAM,CAAC,cAAc,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC;QACrC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,eAAe,CACnE,QAAQ,EACR,WAAW,CACZ,CAAC;QACF,MAAM,MAAM,GAAoB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC;QAC1E,MAAM,MAAM,GAAqB;YAC/B,SAAS;YACT,MAAM;YACN,cAAc;YACd,cAAc;SACf,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,CAAC,cAAc,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,WAAoB;YAEpB,OAAO,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACzD,CAAC;QAED,KAAK,CAAC,YAAY,CAChB,WAAmB;YAEnB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;YAE/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;gBACzC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;oBACjC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,MAAM,gBAAgB,GAAuB,EAAE,CAAC;YAChD,IAAI,eAAe,GAAoB,WAAW,CAAC;YACnD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,EAAE,GAAG,MAAM,uBAAuB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;gBAC3D,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBACX,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;oBACzC,eAAe,GAAG,eAAe,CAAC;gBACpC,CAAC;YACH,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE;oBACN,WAAW;oBACX,MAAM,EAAE,eAAe;oBACvB,gBAAgB;oBAChB,WAAW,EAAE,GAAG,EAAE;iBACnB;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/readiness.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Readiness types: ControlReadiness, FrameworkReadiness, ReadinessStatus.
+ */
+export type ReadinessStatus = "compliant" | "not_compliant" | "not_applicable";
+export interface ControlReadiness {
+    controlId: string;
+    status: ReadinessStatus;
+    lastEvidenceAt?: number;
+    lastEvidenceId?: string;
+    requirementIds?: string[];
+}
+export interface FrameworkReadiness {
+    frameworkId: string;
+    status: ReadinessStatus;
+    controlReadiness: ControlReadiness[];
+    lastUpdated: number;
+}
+//# sourceMappingURL=readiness.d.ts.map

package/dist/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/readiness.js

@@ -0,0 +1,5 @@
+/**
+ * Readiness types: ControlReadiness, FrameworkReadiness, ReadinessStatus.
+ */
+export {};
+//# sourceMappingURL=readiness.js.map

package/dist/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../src/readiness.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/storage/adapter.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Storage adapter integration: compfn schema + @superfunctions/db adapter.
+ * Callers pass Adapter in CompFnConfig; this module provides schema and helpers for namespace.
+ */
+import type { Adapter, TableSchemaMap } from "@superfunctions/db";
+import { type CompfnSchemaOptions } from "./schema.js";
+export type { CompfnSchemaOptions } from "./schema.js";
+export { getCompfnSchema, getCompfnSchemaMap } from "./schema.js";
+/**
+ * Get schema map for the given namespace (for createSchema / validateSchema with the db adapter).
+ */
+export declare function getSchemaForAdapter(options?: CompfnSchemaOptions): TableSchemaMap;
+/**
+ * Create or migrate schema using the provided adapter.
+ * Adapter must support createSchema (e.g. drizzle/kysely); memory adapter may only validate.
+ */
+export declare function createSchemaIfSupported(database: Adapter, options?: CompfnSchemaOptions): Promise<{
+    success: boolean;
+    errors?: string[];
+}>;
+//# sourceMappingURL=adapter.d.ts.map

package/dist/storage/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/storage/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE3E,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAElE;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,mBAAwB,GAAG,cAAc,CAErF;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,OAAO,EACjB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAqBlD"}

package/dist/storage/adapter.js

@@ -0,0 +1,37 @@
+/**
+ * Storage adapter integration: compfn schema + @superfunctions/db adapter.
+ * Callers pass Adapter in CompFnConfig; this module provides schema and helpers for namespace.
+ */
+import { getCompfnSchemaMap } from "./schema.js";
+export { getCompfnSchema, getCompfnSchemaMap } from "./schema.js";
+/**
+ * Get schema map for the given namespace (for createSchema / validateSchema with the db adapter).
+ */
+export function getSchemaForAdapter(options = {}) {
+    return getCompfnSchemaMap(options);
+}
+/**
+ * Create or migrate schema using the provided adapter.
+ * Adapter must support createSchema (e.g. drizzle/kysely); memory adapter may only validate.
+ */
+export async function createSchemaIfSupported(database, options = {}) {
+    const schema = getCompfnSchemaMap(options);
+    const namespace = options.namespace ?? "compfn";
+    if (typeof database.createSchema !== "function") {
+        // Validate each table instead
+        const tables = Object.values(schema);
+        for (const table of tables) {
+            const result = await database.validateSchema(table);
+            if (!result.valid && result.errors?.length) {
+                return { success: false, errors: result.errors };
+            }
+        }
+        return { success: true };
+    }
+    const result = await database.createSchema({ schema, namespace });
+    return {
+        success: result.success,
+        errors: result.errors,
+    };
+}
+//# sourceMappingURL=adapter.js.map

package/dist/storage/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/storage/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAA4B,MAAM,aAAa,CAAC;AAG3E,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAElE;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA+B,EAAE;IACnE,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAiB,EACjB,UAA+B,EAAE;IAEjC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC;IAEhD,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAChD,8BAA8B;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACnD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC"}

package/dist/storage/schema.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Storage schema for compfn: controls, frameworks, evidence, checks.
+ * Tables are namespaced (e.g. compfn_controls) via adapter namespace.
+ */
+import type { TableSchema, TableSchemaMap } from "@superfunctions/db";
+export interface CompfnSchemaOptions {
+    namespace?: string;
+}
+export declare function getCompfnSchema(options?: CompfnSchemaOptions): {
+    version: number;
+    schemas: TableSchema[];
+};
+export declare function getCompfnSchemaMap(options?: CompfnSchemaOptions): TableSchemaMap;
+//# sourceMappingURL=schema.d.ts.map

package/dist/storage/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/storage/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AASD,wBAAgB,eAAe,CAAC,OAAO,GAAE,mBAAwB,GAAG;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB,CAiFA;AAED,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,cAAc,CAGpF"}

package/dist/storage/schema.js

@@ -0,0 +1,92 @@
+/**
+ * Storage schema for compfn: controls, frameworks, evidence, checks.
+ * Tables are namespaced (e.g. compfn_controls) via adapter namespace.
+ */
+const DEFAULT_NAMESPACE = "compfn";
+function ns(options, suffix) {
+    const prefix = options.namespace ?? DEFAULT_NAMESPACE;
+    return `${prefix}_${suffix}`;
+}
+export function getCompfnSchema(options = {}) {
+    const controls = {
+        modelName: "controls",
+        fields: {
+            id: { type: "string", required: true, unique: true },
+            name: { type: "string", required: true },
+            description: { type: "string", required: true },
+            category: { type: "string", required: true },
+            tags: { type: "json", required: false },
+            createdAt: { type: "number", required: true },
+            updatedAt: { type: "number", required: true },
+        },
+        indexes: [
+            { name: ns(options, "controls_category_idx"), fields: ["category"] },
+            { name: ns(options, "controls_updated_idx"), fields: ["updatedAt"] },
+        ],
+    };
+    const frameworks = {
+        modelName: "frameworks",
+        fields: {
+            id: { type: "string", required: true, unique: true },
+            name: { type: "string", required: true },
+            version: { type: "string", required: false },
+            description: { type: "string", required: false },
+            requirements: { type: "json", required: true },
+            createdAt: { type: "number", required: true },
+            updatedAt: { type: "number", required: true },
+        },
+        indexes: [
+            { name: ns(options, "frameworks_updated_idx"), fields: ["updatedAt"] },
+        ],
+    };
+    const evidence = {
+        modelName: "evidence",
+        fields: {
+            id: { type: "string", required: true, unique: true },
+            controlId: { type: "string", required: true },
+            type: { type: "string", required: true },
+            sourceId: { type: "string", required: false },
+            frameworkRequirementId: { type: "string", required: false },
+            timestamp: { type: "number", required: true },
+            actorId: { type: "string", required: true },
+            outcome: { type: "string", required: true },
+            payload: { type: "json", required: false },
+            artifactRef: { type: "string", required: false },
+            createdAt: { type: "number", required: true },
+        },
+        indexes: [
+            { name: ns(options, "evidence_control_idx"), fields: ["controlId"] },
+            { name: ns(options, "evidence_timestamp_idx"), fields: ["timestamp"] },
+            { name: ns(options, "evidence_type_idx"), fields: ["type"] },
+            { name: ns(options, "evidence_created_idx"), fields: ["createdAt"] },
+        ],
+    };
+    const checks = {
+        modelName: "checks",
+        fields: {
+            id: { type: "string", required: true, unique: true },
+            name: { type: "string", required: true },
+            controlId: { type: "string", required: true },
+            schedule: { type: "string", required: false },
+            trigger: { type: "string", required: false },
+            adapterName: { type: "string", required: false },
+            adapterMethod: { type: "string", required: false },
+            customConfig: { type: "json", required: false },
+            createdAt: { type: "number", required: true },
+            updatedAt: { type: "number", required: true },
+        },
+        indexes: [
+            { name: ns(options, "checks_control_idx"), fields: ["controlId"] },
+            { name: ns(options, "checks_updated_idx"), fields: ["updatedAt"] },
+        ],
+    };
+    return {
+        version: 1,
+        schemas: [controls, frameworks, evidence, checks],
+    };
+}
+export function getCompfnSchemaMap(options = {}) {
+    const { schemas } = getCompfnSchema(options);
+    return Object.fromEntries(schemas.map((s) => [s.modelName, s]));
+}
+//# sourceMappingURL=schema.js.map

package/dist/storage/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/storage/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAEnC,SAAS,EAAE,CAAC,OAA4B,EAAE,MAAc;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC;IACtD,OAAO,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAA+B,EAAE;IAI/D,MAAM,QAAQ,GAAgB;QAC5B,SAAS,EAAE,UAAU;QACrB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YACpD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACxC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC/C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;YACvC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC7C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;QACD,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE;YACpE,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;SACrE;KACF,CAAC;IAEF,MAAM,UAAU,GAAgB;QAC9B,SAAS,EAAE,YAAY;QACvB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YACpD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACxC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC5C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAChD,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC9C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC7C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;QACD,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;SACvE;KACF,CAAC;IAEF,MAAM,QAAQ,GAAgB;QAC5B,SAAS,EAAE,UAAU;QACrB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YACpD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC7C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC7C,sBAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC3D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC7C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC1C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAChD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;QACD,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;YACpE,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;YACtE,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;YAC5D,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;SACrE;KACF,CAAC;IAEF,MAAM,MAAM,GAAgB;QAC1B,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YACpD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC7C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC7C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC5C,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAChD,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE;YAClD,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC/C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC7C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC9C;QACD,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;YAClE,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;SACnE;KACF,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAA+B,EAAE;IAClE,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Re-export all CompFn types from a single entry point.
+ */
+export type { CompfnErrorCode, CompfnError, CompfnEnvelope, } from "./errors.js";
+export type { Control, CreateControlInput, UpdateControlInput, } from "./control.js";
+export type { FrameworkRequirement, Framework, CreateFrameworkInput, } from "./framework.js";
+export type { EvidenceType, Evidence, CreateEvidenceInput, } from "./evidence.js";
+export type { CheckDefinition, RunCheckResult } from "./check.js";
+export type { ReadinessStatus, ControlReadiness, FrameworkReadiness, } from "./readiness.js";
+export type { AuditorPack } from "./export-types.js";
+export type { CompFnConfig, AdapterCheckInput, AdapterEvidence, EvidenceAdapter, CompFnAPI, } from "./api.js";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EACV,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,OAAO,EACP,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,oBAAoB,EACpB,SAAS,EACT,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,YAAY,EACZ,QAAQ,EACR,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAElE,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,SAAS,GACV,MAAM,UAAU,CAAC"}

package/dist/types.js

@@ -0,0 +1,5 @@
+/**
+ * Re-export all CompFn types from a single entry point.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/validation.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Validation for CompFn create/update inputs.
+ * CreateControlInput: name, description, category required; tags optional array.
+ * UpdateControlInput: all optional (partial update).
+ * CreateFrameworkInput: name required; requirements array with requirementId, controlIds; limits (LIMIT-001).
+ */
+import type { CreateControlInput, UpdateControlInput } from "./control.js";
+import type { CreateFrameworkInput } from "./framework.js";
+import type { CreateEvidenceInput } from "./evidence.js";
+import type { CompfnError } from "./errors.js";
+import type { CheckDefinition } from "./check.js";
+export interface ValidationResult<T> {
+    ok: true;
+    value: T;
+}
+export interface ValidationFailure {
+    ok: false;
+    error: CompfnError;
+}
+export type ValidationOutcome<T> = ValidationResult<T> | ValidationFailure;
+/**
+ * Validate CreateControlInput. Required: name, description, category (non-empty strings).
+ * Optional: tags (array of strings).
+ */
+export declare function validateCreateControlInput(input: unknown, path?: string): ValidationOutcome<CreateControlInput>;
+/**
+ * Validate UpdateControlInput. All fields optional; if present must be correct type.
+ * name, description, category: non-empty string if provided. tags: array of strings if provided.
+ */
+export declare function validateUpdateControlInput(input: unknown, path?: string): ValidationOutcome<UpdateControlInput>;
+/**
+ * Validate CreateFrameworkInput. Required: name (non-empty), requirements (array; each requirementId + controlIds; limits).
+ */
+export declare function validateCreateFrameworkInput(input: unknown, path?: string): ValidationOutcome<CreateFrameworkInput>;
+/**
+ * Validate partial framework input for update. Same rules for name/requirements when provided.
+ */
+export declare function validateUpdateFrameworkInput(input: unknown, path?: string): ValidationOutcome<Partial<CreateFrameworkInput>>;
+/**
+ * Validate CreateEvidenceInput. Required: controlId, type (EvidenceType), actorId, outcome.
+ * Optional: sourceId, frameworkRequirementId, timestamp, payload, artifactRef.
+ * For type "scoping_decision": outcome MUST be "unknown"; payload.status MUST be "applicable" or "not_applicable".
+ */
+export declare function validateCreateEvidenceInput(input: unknown, path?: string): ValidationOutcome<CreateEvidenceInput>;
+/** Create check input: Omit<CheckDefinition, "id" | "createdAt" | "updatedAt"> */
+export type CreateCheckInput = Omit<CheckDefinition, "id" | "createdAt" | "updatedAt">;
+/**
+ * Validate CreateCheckInput. Required: name, controlId (non-empty).
+ * At least one of: schedule, trigger, (adapterName and adapterMethod), or customConfig must be present.
+ */
+export declare function validateCreateCheckInput(input: unknown, path?: string): ValidationOutcome<CreateCheckInput>;
+//# sourceMappingURL=validation.d.ts.map

package/dist/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAwB,MAAM,gBAAgB,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAgB,MAAM,eAAe,CAAC;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,CAAC,CAAC;CACV;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;AAE3E;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,EACd,IAAI,GAAE,MAAgB,GACrB,iBAAiB,CAAC,kBAAkB,CAAC,CAgFvC;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,EACd,IAAI,GAAE,MAAgB,GACrB,iBAAiB,CAAC,kBAAkB,CAAC,CAmFvC;AA+FD;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,EACd,IAAI,GAAE,MAAgB,GACrB,iBAAiB,CAAC,oBAAoB,CAAC,CAgCzC;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,EACd,IAAI,GAAE,MAAgB,GACrB,iBAAiB,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAwClD;AAKD;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,EACd,IAAI,GAAE,MAAgB,GACrB,iBAAiB,CAAC,mBAAmB,CAAC,CAsHxC;AAED,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC;AAEvF;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,IAAI,GAAE,MAAgB,GACrB,iBAAiB,CAAC,gBAAgB,CAAC,CA8ErC"}