governance-sdk 0.5.0

package/dist/compliance-articles.js

@@ -0,0 +1,201 @@
+/**
+ * EU AI Act Article Definitions
+ *
+ * Static article and requirement definitions for the 6 EU AI Act
+ * articles tracked by governance-sdk. Separated from assessment
+ * logic to keep files under 300 LOC.
+ */
+// ─── Article Definitions ────────────────────────────────────
+export const EU_AI_ACT_ARTICLES = [
+    {
+        article: "9",
+        title: "Risk Management System",
+        description: "Establish, implement, document, and maintain a risk management system throughout the AI system lifecycle.",
+        deadline: "2026-08-02",
+        maxFine: "Up to 15M EUR or 3% of global annual turnover",
+        requirements: [
+            {
+                id: "art9-risk-identification",
+                requirement: "Identify and analyze known and reasonably foreseeable risks",
+                sdkFeature: "Policy engine with blockTools(), allowOnlyTools() — identifies and blocks risky tool usage",
+                checkDescription: "At least one policy rule configured to block or restrict dangerous operations",
+                automatable: true,
+            },
+            {
+                id: "art9-risk-mitigation",
+                requirement: "Implement risk mitigation measures",
+                sdkFeature: "Before-action enforcement via gov.enforce() — prevents risky actions before execution",
+                checkDescription: "Enforcement is active and has blocked at least one action",
+                automatable: true,
+            },
+            {
+                id: "art9-residual-risk",
+                requirement: "Evaluate and manage residual risks",
+                sdkFeature: "7-dimension governance scoring — composite risk score per agent",
+                checkDescription: "All agents have been scored and assessed",
+                automatable: true,
+            },
+            {
+                id: "art9-testing",
+                requirement: "Test the AI system to identify appropriate risk management measures",
+                sdkFeature: "Enforcement playground — interactive testing of policy rules",
+                checkDescription: "Policy rules have been tested with representative scenarios",
+                automatable: false,
+            },
+        ],
+    },
+    {
+        article: "11",
+        title: "Technical Documentation",
+        description: "Technical documentation shall be drawn up before the AI system is placed on the market or put into service.",
+        deadline: "2026-08-02",
+        maxFine: "Up to 15M EUR or 3% of global annual turnover",
+        requirements: [
+            {
+                id: "art11-system-description",
+                requirement: "General description of the AI system including intended purpose",
+                sdkFeature: "Agent registration with name, description, owner, framework metadata",
+                checkDescription: "All agents have description and owner fields populated",
+                automatable: true,
+            },
+            {
+                id: "art11-capabilities",
+                requirement: "Document system capabilities and limitations",
+                sdkFeature: "Agent tools list, permissions, governance level, and scoring dimensions",
+                checkDescription: "All agents have tools and permissions documented",
+                automatable: true,
+            },
+            {
+                id: "art11-monitoring",
+                requirement: "Description of monitoring, functioning, and control measures",
+                sdkFeature: "Policy rules, enforcement decisions, audit trail configuration",
+                checkDescription: "Governance configuration is documented and version-controlled",
+                automatable: false,
+            },
+        ],
+    },
+    {
+        article: "12",
+        title: "Record-Keeping",
+        description: "AI systems shall technically allow for automatic recording of events (logs) throughout the system lifecycle.",
+        deadline: "2026-08-02",
+        maxFine: "Up to 15M EUR or 3% of global annual turnover",
+        requirements: [
+            {
+                id: "art12-automatic-logging",
+                requirement: "Automatic recording of events throughout the AI system lifecycle",
+                sdkFeature: "Audit trail — gov.audit.log() records every action and decision automatically",
+                checkDescription: "Audit logging is active and recording events",
+                automatable: true,
+            },
+            {
+                id: "art12-traceability",
+                requirement: "Ensure traceability of the AI system operation",
+                sdkFeature: "Audit events include agentId, eventType, outcome, severity, detail, timestamps",
+                checkDescription: "Audit events contain sufficient context for traceability",
+                automatable: true,
+            },
+            {
+                id: "art12-integrity",
+                requirement: "Logging system ensures integrity — logs cannot be tampered with",
+                sdkFeature: "Tamper-evident audit via HMAC-SHA256 hash chaining (createIntegrityAudit)",
+                checkDescription: "Integrity audit is enabled and chain is valid",
+                automatable: true,
+            },
+            {
+                id: "art12-retention",
+                requirement: "Logs retained for appropriate period",
+                sdkFeature: "Storage adapter pattern — implement retention policies in your backend",
+                checkDescription: "Log retention policy is configured",
+                automatable: false,
+            },
+        ],
+    },
+    {
+        article: "14",
+        title: "Human Oversight",
+        description: "AI systems shall be designed to be effectively overseen by natural persons during the period of use.",
+        deadline: "2026-08-02",
+        maxFine: "Up to 15M EUR or 3% of global annual turnover",
+        requirements: [
+            {
+                id: "art14-intervention",
+                requirement: "Ability to intervene or interrupt the AI system",
+                sdkFeature: "requireApproval() policy — flags actions for human review before execution",
+                checkDescription: "At least one requireApproval rule is configured for sensitive operations",
+                automatable: true,
+            },
+            {
+                id: "art14-understanding",
+                requirement: "Enable human overseers to understand capabilities and limitations",
+                sdkFeature: "Governance scoring with 7 explainable dimensions — each score has evidence",
+                checkDescription: "Agent assessments include dimensional breakdowns with evidence",
+                automatable: true,
+            },
+            {
+                id: "art14-monitoring",
+                requirement: "Enable monitoring of the AI system operation",
+                sdkFeature: "Real-time audit trail queries, fleet scoring, processor session statistics",
+                checkDescription: "Audit trail is queryable and fleet monitoring is active",
+                automatable: true,
+            },
+        ],
+    },
+    {
+        article: "15",
+        title: "Accuracy, Robustness, Cybersecurity",
+        description: "AI systems shall achieve appropriate levels of accuracy, robustness, and cybersecurity.",
+        deadline: "2026-08-02",
+        maxFine: "Up to 15M EUR or 3% of global annual turnover",
+        requirements: [
+            {
+                id: "art15-resilience",
+                requirement: "Resilient against errors, faults, or inconsistencies",
+                sdkFeature: "Policy engine with default-deny option, rate limiting, token budgets",
+                checkDescription: "Defensive policies configured (rate limits, token budgets)",
+                automatable: true,
+            },
+            {
+                id: "art15-security",
+                requirement: "Appropriate cybersecurity measures",
+                sdkFeature: "HMAC-SHA256 signed audit trail, tool blocking, agent authentication support",
+                checkDescription: "Agent has auth configured and audit integrity is enabled",
+                automatable: true,
+            },
+        ],
+    },
+    {
+        article: "50",
+        title: "Transparency Obligations",
+        description: "AI systems interacting with natural persons must disclose they are AI. AI-generated content must be machine-readable marked.",
+        deadline: "2026-08-02",
+        maxFine: "Up to 15M EUR or 3% of global annual turnover",
+        requirements: [
+            {
+                id: "art50-disclosure",
+                requirement: "Inform persons they are interacting with an AI system",
+                sdkFeature: "Agent registration metadata + transparency markers in output",
+                checkDescription: "Agents have disclosure configuration indicating AI interaction",
+                automatable: true,
+            },
+            {
+                id: "art50-content-marking",
+                requirement: "AI-generated content must be marked in machine-readable format",
+                sdkFeature: "Audit trail attaches agent ID, model version, and timestamp to all outputs",
+                checkDescription: "Agent outputs include provenance metadata",
+                automatable: true,
+            },
+        ],
+    },
+];
+/** Get the list of EU AI Act articles tracked by this module */
+export function getArticles() {
+    return EU_AI_ACT_ARTICLES;
+}
+/** Get days until EU AI Act enforcement deadline */
+export function getDaysUntilDeadline() {
+    const deadline = new Date("2026-08-02");
+    const now = new Date();
+    return Math.ceil((deadline.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));
+}
+//# sourceMappingURL=compliance-articles.js.map

package/dist/compliance-articles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-articles.js","sourceRoot":"","sources":["../src/compliance-articles.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAoEH,+DAA+D;AAE/D,MAAM,CAAC,MAAM,kBAAkB,GAAqB;IAClD;QACE,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,2GAA2G;QACxH,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,+CAA+C;QACxD,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,0BAA0B;gBAC9B,WAAW,EAAE,6DAA6D;gBAC1E,UAAU,EAAE,4FAA4F;gBACxG,gBAAgB,EAAE,+EAA+E;gBACjG,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,sBAAsB;gBAC1B,WAAW,EAAE,oCAAoC;gBACjD,UAAU,EAAE,uFAAuF;gBACnG,gBAAgB,EAAE,2DAA2D;gBAC7E,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,oBAAoB;gBACxB,WAAW,EAAE,oCAAoC;gBACjD,UAAU,EAAE,iEAAiE;gBAC7E,gBAAgB,EAAE,0CAA0C;gBAC5D,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,cAAc;gBAClB,WAAW,EAAE,qEAAqE;gBAClF,UAAU,EAAE,8DAA8D;gBAC1E,gBAAgB,EAAE,6DAA6D;gBAC/E,WAAW,EAAE,KAAK;aACnB;SACF;KACF;IACD;QACE,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,6GAA6G;QAC1H,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,+CAA+C;QACxD,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,0BAA0B;gBAC9B,WAAW,EAAE,iEAAiE;gBAC9E,UAAU,EAAE,sEAAsE;gBAClF,gBAAgB,EAAE,wDAAwD;gBAC1E,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,oBAAoB;gBACxB,WAAW,EAAE,8CAA8C;gBAC3D,UAAU,EAAE,yEAAyE;gBACrF,gBAAgB,EAAE,kDAAkD;gBACpE,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,WAAW,EAAE,8DAA8D;gBAC3E,UAAU,EAAE,gEAAgE;gBAC5E,gBAAgB,EAAE,+DAA+D;gBACjF,WAAW,EAAE,KAAK;aACnB;SACF;KACF;IACD;QACE,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,8GAA8G;QAC3H,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,+CAA+C;QACxD,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,yBAAyB;gBAC7B,WAAW,EAAE,kEAAkE;gBAC/E,UAAU,EAAE,+EAA+E;gBAC3F,gBAAgB,EAAE,8CAA8C;gBAChE,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,oBAAoB;gBACxB,WAAW,EAAE,gDAAgD;gBAC7D,UAAU,EAAE,gFAAgF;gBAC5F,gBAAgB,EAAE,0DAA0D;gBAC5E,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,iBAAiB;gBACrB,WAAW,EAAE,iEAAiE;gBAC9E,UAAU,EAAE,2EAA2E;gBACvF,gBAAgB,EAAE,+CAA+C;gBACjE,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,iBAAiB;gBACrB,WAAW,EAAE,sCAAsC;gBACnD,UAAU,EAAE,wEAAwE;gBACpF,gBAAgB,EAAE,oCAAoC;gBACtD,WAAW,EAAE,KAAK;aACnB;SACF;KACF;IACD;QACE,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,sGAAsG;QACnH,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,+CAA+C;QACxD,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,oBAAoB;gBACxB,WAAW,EAAE,iDAAiD;gBAC9D,UAAU,EAAE,4EAA4E;gBACxF,gBAAgB,EAAE,0EAA0E;gBAC5F,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,qBAAqB;gBACzB,WAAW,EAAE,mEAAmE;gBAChF,UAAU,EAAE,4EAA4E;gBACxF,gBAAgB,EAAE,gEAAgE;gBAClF,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,WAAW,EAAE,8CAA8C;gBAC3D,UAAU,EAAE,4EAA4E;gBACxF,gBAAgB,EAAE,yDAAyD;gBAC3E,WAAW,EAAE,IAAI;aAClB;SACF;KACF;IACD;QACE,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,yFAAyF;QACtG,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,+CAA+C;QACxD,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,kBAAkB;gBACtB,WAAW,EAAE,sDAAsD;gBACnE,UAAU,EAAE,sEAAsE;gBAClF,gBAAgB,EAAE,4DAA4D;gBAC9E,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,gBAAgB;gBACpB,WAAW,EAAE,oCAAoC;gBACjD,UAAU,EAAE,6EAA6E;gBACzF,gBAAgB,EAAE,0DAA0D;gBAC5E,WAAW,EAAE,IAAI;aAClB;SACF;KACF;IACD;QACE,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,8HAA8H;QAC3I,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,+CAA+C;QACxD,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,kBAAkB;gBACtB,WAAW,EAAE,uDAAuD;gBACpE,UAAU,EAAE,8DAA8D;gBAC1E,gBAAgB,EAAE,gEAAgE;gBAClF,WAAW,EAAE,IAAI;aAClB;YACD;gBACE,EAAE,EAAE,uBAAuB;gBAC3B,WAAW,EAAE,gEAAgE;gBAC7E,UAAU,EAAE,4EAA4E;gBACxF,gBAAgB,EAAE,2CAA2C;gBAC7D,WAAW,EAAE,IAAI;aAClB;SACF;KACF;CACF,CAAC;AAEF,gEAAgE;AAChE,MAAM,UAAU,WAAW;IACzB,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC"}

package/dist/compliance.d.ts

@@ -0,0 +1,24 @@
+/**
+ * governance-sdk — EU AI Act Compliance Assessment
+ *
+ * Assesses governance configuration against EU AI Act article requirements.
+ * Article definitions are in compliance-articles.ts.
+ *
+ * Enforcement deadline: August 2, 2026
+ */
+import type { StoredAgent, GovernanceInstance } from "./index.js";
+import { type ComplianceReport } from "./compliance-articles.js";
+export type { EuAiActArticle, ArticleRequirement, ComplianceStatus, RequirementAssessment, ArticleAssessment, ComplianceReport, } from "./compliance-articles.js";
+export { getArticles, getDaysUntilDeadline } from "./compliance-articles.js";
+/** Configuration for compliance assessment */
+export interface ComplianceAssessmentConfig {
+    governance: GovernanceInstance;
+    agents: StoredAgent[];
+    auditIntegrity?: boolean;
+    humanOversight?: boolean;
+    logRetention?: boolean;
+    configVersionControlled?: boolean;
+    policiesTested?: boolean;
+}
+export declare function assessCompliance(config: ComplianceAssessmentConfig): Promise<ComplianceReport>;
+//# sourceMappingURL=compliance.d.ts.map

package/dist/compliance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.d.ts","sourceRoot":"","sources":["../src/compliance.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAML,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAGlC,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAI7E,8CAA8C;AAC9C,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAID,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,gBAAgB,CAAC,CA4D3B"}

package/dist/compliance.js

@@ -0,0 +1,183 @@
+/**
+ * governance-sdk — EU AI Act Compliance Assessment
+ *
+ * Assesses governance configuration against EU AI Act article requirements.
+ * Article definitions are in compliance-articles.ts.
+ *
+ * Enforcement deadline: August 2, 2026
+ */
+import { EU_AI_ACT_ARTICLES, } from "./compliance-articles.js";
+export { getArticles, getDaysUntilDeadline } from "./compliance-articles.js";
+// ─── Compliance Assessment ───────────────────────────────────
+export async function assessCompliance(config) {
+    const { agents } = config;
+    const articleAssessments = [];
+    for (const article of EU_AI_ACT_ARTICLES) {
+        const reqAssessments = [];
+        for (const req of article.requirements) {
+            reqAssessments.push(await assessRequirement(req, config));
+        }
+        const compliantCount = reqAssessments.filter((r) => r.status === "compliant").length;
+        const partialCount = reqAssessments.filter((r) => r.status === "partial").length;
+        const total = reqAssessments.length;
+        const score = Math.round(((compliantCount + partialCount * 0.5) / total) * 100);
+        const coverage = score >= 80 ? "compliant" : score >= 40 ? "partial" : "non-compliant";
+        articleAssessments.push({
+            article: article.article,
+            title: article.title,
+            coverage,
+            score,
+            requirements: reqAssessments,
+            deadline: article.deadline,
+            maxFine: article.maxFine,
+        });
+    }
+    const overallScore = Math.round(articleAssessments.reduce((sum, a) => sum + a.score, 0) / articleAssessments.length);
+    const status = overallScore >= 80 ? "compliant" : overallScore >= 40 ? "partial" : "non-compliant";
+    const criticalGaps = articleAssessments.flatMap((a) => a.requirements
+        .filter((r) => r.status === "non-compliant")
+        .map((r) => `${a.title} (Art. ${a.article}): ${r.evidence}`));
+    const recommendations = articleAssessments
+        .flatMap((a) => a.requirements.filter((r) => r.remediation).map((r) => r.remediation))
+        .filter((v, i, arr) => arr.indexOf(v) === i);
+    const deadline = new Date("2026-08-02");
+    const now = new Date();
+    const daysUntilDeadline = Math.ceil((deadline.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));
+    return {
+        overallScore,
+        status,
+        articles: articleAssessments,
+        agentsAssessed: agents.length,
+        criticalGaps,
+        recommendations,
+        generatedAt: new Date().toISOString(),
+        daysUntilDeadline,
+    };
+}
+// ─── Requirement Assessors ───────────────────────────────────
+async function assessRequirement(req, config) {
+    const { governance, agents } = config;
+    switch (req.id) {
+        case "art9-risk-identification": {
+            const rules = governance.policies.getRules();
+            if (rules.length > 0)
+                return ok(req.id, `${rules.length} policy rule(s) configured`);
+            return fail(req.id, "No policy rules configured", "Add policy rules via blockTools(), requireLevel(), or custom rules");
+        }
+        case "art9-risk-mitigation": {
+            const blockedCount = await governance.audit.count({ outcome: "blocked" });
+            if (blockedCount > 0)
+                return ok(req.id, `${blockedCount} action(s) blocked by enforcement`);
+            const rules = governance.policies.getRules();
+            if (rules.length > 0)
+                return partial(req.id, "Policies configured but no actions blocked yet");
+            return fail(req.id, "No enforcement active", "Enable policy enforcement with gov.enforce() in your agent pipeline");
+        }
+        case "art9-residual-risk": {
+            if (agents.length === 0)
+                return fail(req.id, "No agents registered", "Register agents via gov.register() to enable risk scoring");
+            const allScored = agents.every((a) => a.compositeScore > 0);
+            if (allScored)
+                return ok(req.id, `${agents.length} agent(s) scored with 7-dimension assessment`);
+            return partial(req.id, "Some agents not yet scored", "Re-score agents via gov.score(agentId)");
+        }
+        case "art9-testing":
+            return config.policiesTested ? ok(req.id, "Policy rules have been tested") : partial(req.id, "Policy testing not confirmed", "Test policies with representative scenarios using the enforcement playground");
+        case "art11-system-description": {
+            if (agents.length === 0)
+                return fail(req.id, "No agents registered", "Register agents with description and owner fields");
+            const documented = agents.filter((a) => a.description && a.owner);
+            if (documented.length === agents.length)
+                return ok(req.id, `${agents.length} agent(s) have description and owner`);
+            return partial(req.id, `${documented.length}/${agents.length} agents documented`, "Add description and owner to all agent registrations");
+        }
+        case "art11-capabilities": {
+            if (agents.length === 0)
+                return fail(req.id, "No agents registered");
+            const withTools = agents.filter((a) => a.tools && a.tools.length > 0);
+            if (withTools.length === agents.length)
+                return ok(req.id, `${agents.length} agent(s) have documented tools/capabilities`);
+            return partial(req.id, `${withTools.length}/${agents.length} have documented tools`, "Add tools list to all agent registrations");
+        }
+        case "art11-monitoring":
+            return config.configVersionControlled ? ok(req.id, "Governance config is version-controlled") : partial(req.id, "Version control not confirmed", "Commit governance.config.ts to version control");
+        case "art12-automatic-logging": {
+            const totalEvents = await governance.audit.count();
+            if (totalEvents > 0)
+                return ok(req.id, `${totalEvents} audit event(s) recorded`);
+            return fail(req.id, "No audit events recorded", "Enable audit logging via gov.audit.log() or gov.enforce()");
+        }
+        case "art12-traceability": {
+            const events = await governance.audit.query({ limit: 1 });
+            if (events.length > 0) {
+                const e = events[0];
+                if (e.agentId && e.eventType && e.outcome && e.createdAt)
+                    return ok(req.id, "Audit events contain agent ID, event type, outcome, and timestamp");
+            }
+            return partial(req.id, "Audit events lack sufficient context", "Ensure all audit events include agentId, eventType, outcome, and detail");
+        }
+        case "art12-integrity":
+            return config.auditIntegrity ? ok(req.id, "HMAC-SHA256 tamper-evident audit logging enabled") : fail(req.id, "Audit logs are not tamper-evident", "Enable createIntegrityAudit() for HMAC-SHA256 hash-chained logging");
+        case "art12-retention":
+            return config.logRetention ? ok(req.id, "Log retention policy configured") : partial(req.id, "No explicit retention policy", "Configure log retention in your storage adapter");
+        case "art14-intervention": {
+            const rules = governance.policies.getRules();
+            if (rules.some((r) => r.outcome === "require_approval"))
+                return ok(req.id, "requireApproval() policy configured for human review");
+            if (config.humanOversight)
+                return ok(req.id, "Human oversight mechanism confirmed");
+            return fail(req.id, "No human oversight mechanism", "Add requireApproval() policy for sensitive operations");
+        }
+        case "art14-understanding":
+            return (agents.length > 0 && agents.every((a) => a.compositeScore > 0)) ? ok(req.id, "7-dimension scoring with explainable evidence for all agents") : partial(req.id, "Not all agents have explainable assessments", "Ensure all agents are scored with gov.score()");
+        case "art14-monitoring": {
+            const totalEvents = await governance.audit.count();
+            if (totalEvents > 0)
+                return ok(req.id, `Audit trail active with ${totalEvents} events queryable in real-time`);
+            return fail(req.id, "No monitoring data available", "Enable audit logging for real-time monitoring");
+        }
+        case "art15-resilience": {
+            const rules = governance.policies.getRules();
+            if (rules.some((r) => r.condition.type === "token_limit" || r.condition.type === "rate_limit"))
+                return ok(req.id, "Defensive policies configured (token budget and/or rate limiting)");
+            return partial(req.id, "No defensive policies", "Add tokenBudget() and rateLimit() policies");
+        }
+        case "art15-security": {
+            const hasAuth = agents.some((a) => a.metadata && a.metadata["hasAuth"]);
+            if (config.auditIntegrity && hasAuth)
+                return ok(req.id, "Audit integrity + agent authentication configured");
+            if (config.auditIntegrity)
+                return partial(req.id, "Audit integrity enabled but agent auth not confirmed");
+            return fail(req.id, "No cybersecurity measures", "Enable createIntegrityAudit() and configure agent authentication");
+        }
+        case "art50-disclosure": {
+            if (agents.length === 0)
+                return fail(req.id, "No agents registered", "Register agents with disclosure metadata via gov.register()");
+            const disclosed = agents.filter((a) => a.name && a.description);
+            if (disclosed.length === agents.length)
+                return ok(req.id, `${agents.length} agent(s) have identity and description for disclosure`);
+            return partial(req.id, `${disclosed.length}/${agents.length} agents have disclosure metadata`);
+        }
+        case "art50-content-marking": {
+            const totalEvents = await governance.audit.count();
+            if (totalEvents > 0 && config.auditIntegrity)
+                return ok(req.id, "Audit trail with integrity metadata provides content provenance");
+            if (totalEvents > 0)
+                return partial(req.id, "Audit trail active but no integrity metadata for provenance", "Enable createIntegrityAudit() for verifiable content provenance");
+            return fail(req.id, "No content provenance tracking", "Enable audit logging with integrity for machine-readable content marking");
+        }
+        default:
+            return { requirementId: req.id, status: "not-applicable", evidence: "Unknown requirement" };
+    }
+}
+// ─── Helpers ─────────────────────────────────────────────────
+function ok(id, evidence) {
+    return { requirementId: id, status: "compliant", evidence };
+}
+function partial(id, evidence, remediation) {
+    return { requirementId: id, status: "partial", evidence, remediation };
+}
+function fail(id, evidence, remediation) {
+    return { requirementId: id, status: "non-compliant", evidence, remediation };
+}
+//# sourceMappingURL=compliance.js.map

package/dist/compliance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.js","sourceRoot":"","sources":["../src/compliance.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,kBAAkB,GAMnB,MAAM,0BAA0B,CAAC;AAWlC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAe7E,gEAAgE;AAEhE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAkC;IAElC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,MAAM,kBAAkB,GAAwB,EAAE,CAAC;IAEnD,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,cAAc,GAA4B,EAAE,CAAC;QACnD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACvC,cAAc,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;QACrF,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACjF,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,GAAG,YAAY,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;QAEhF,MAAM,QAAQ,GACZ,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;QAExE,kBAAkB,CAAC,IAAI,CAAC;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ;YACR,KAAK;YACL,YAAY,EAAE,cAAc;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAC7B,kBAAkB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,kBAAkB,CAAC,MAAM,CACpF,CAAC;IAEF,MAAM,MAAM,GACV,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;IAEtF,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACpD,CAAC,CAAC,YAAY;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAC/D,CAAC;IAEF,MAAM,eAAe,GAAG,kBAAkB;SACvC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAY,CAAC,CAAC;SACtF,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAElG,OAAO;QACL,YAAY;QACZ,MAAM;QACN,QAAQ,EAAE,kBAAkB;QAC5B,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,YAAY;QACZ,eAAe;QACf,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,gEAAgE;AAEhE,KAAK,UAAU,iBAAiB,CAC9B,GAAuB,EACvB,MAAkC;IAElC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAEtC,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC;QACf,KAAK,0BAA0B,CAAC,CAAC,CAAC;YAChC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,4BAA4B,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,4BAA4B,EAAE,oEAAoE,CAAC,CAAC;QAC1H,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1E,IAAI,YAAY,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,YAAY,mCAAmC,CAAC,CAAC;YAC5F,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,gDAAgD,CAAC,CAAC;YAC/F,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,EAAE,qEAAqE,CAAC,CAAC;QACtH,CAAC;QACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,sBAAsB,EAAE,2DAA2D,CAAC,CAAC;YAClI,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;YAC5D,IAAI,SAAS;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,8CAA8C,CAAC,CAAC;YACjG,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,4BAA4B,EAAE,wCAAwC,CAAC,CAAC;QACjG,CAAC;QACD,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,8BAA8B,EAAE,8EAA8E,CAAC,CAAC;QAE/M,KAAK,0BAA0B,CAAC,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,sBAAsB,EAAE,mDAAmD,CAAC,CAAC;YAC1H,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,sCAAsC,CAAC,CAAC;YACnH,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,oBAAoB,EAAE,sDAAsD,CAAC,CAAC;QAC5I,CAAC;QACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;YACrE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACtE,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,8CAA8C,CAAC,CAAC;YAC1H,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,wBAAwB,EAAE,2CAA2C,CAAC,CAAC;QACpI,CAAC;QACD,KAAK,kBAAkB;YACrB,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,yCAAyC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,+BAA+B,EAAE,gDAAgD,CAAC,CAAC;QAErM,KAAK,yBAAyB,CAAC,CAAC,CAAC;YAC/B,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnD,IAAI,WAAW,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,WAAW,0BAA0B,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,0BAA0B,EAAE,2DAA2D,CAAC,CAAC;QAC/G,CAAC;QACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACpB,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS;oBACtD,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,mEAAmE,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,sCAAsC,EAAE,yEAAyE,CAAC,CAAC;QAC5I,CAAC;QACD,KAAK,iBAAiB;YACpB,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,kDAAkD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,mCAAmC,EAAE,oEAAoE,CAAC,CAAC;QAC1N,KAAK,iBAAiB;YACpB,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,8BAA8B,EAAE,iDAAiD,CAAC,CAAC;QAElL,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,kBAAkB,CAAC;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,sDAAsD,CAAC,CAAC;YACnI,IAAI,MAAM,CAAC,cAAc;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,qCAAqC,CAAC,CAAC;YACpF,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,8BAA8B,EAAE,uDAAuD,CAAC,CAAC;QAC/G,CAAC;QACD,KAAK,qBAAqB;YACxB,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,8DAA8D,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,6CAA6C,EAAE,+CAA+C,CAAC,CAAC;QACzQ,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnD,IAAI,WAAW,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,2BAA2B,WAAW,gCAAgC,CAAC,CAAC;YAC/G,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,8BAA8B,EAAE,+CAA+C,CAAC,CAAC;QACvG,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY,CAAC;gBAC5F,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,mEAAmE,CAAC,CAAC;YACzF,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,EAAE,4CAA4C,CAAC,CAAC;QAChG,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAK,CAAC,CAAC,QAAoC,CAAC,SAAS,CAAC,CAAC,CAAC;YACrG,IAAI,MAAM,CAAC,cAAc,IAAI,OAAO;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,mDAAmD,CAAC,CAAC;YAC7G,IAAI,MAAM,CAAC,cAAc;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,sDAAsD,CAAC,CAAC;YAC1G,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,2BAA2B,EAAE,kEAAkE,CAAC,CAAC;QACvH,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,sBAAsB,EAAE,6DAA6D,CAAC,CAAC;YACpI,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC;YAChE,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,wDAAwD,CAAC,CAAC;YACpI,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,kCAAkC,CAAC,CAAC;QACjG,CAAC;QACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnD,IAAI,WAAW,GAAG,CAAC,IAAI,MAAM,CAAC,cAAc;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,iEAAiE,CAAC,CAAC;YACnI,IAAI,WAAW,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,6DAA6D,EAAE,iEAAiE,CAAC,CAAC;YAC9K,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,gCAAgC,EAAE,0EAA0E,CAAC,CAAC;QACpI,CAAC;QAED;YACE,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAChG,CAAC;AACH,CAAC;AAED,gEAAgE;AAEhE,SAAS,EAAE,CAAC,EAAU,EAAE,QAAgB;IACtC,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,OAAO,CAAC,EAAU,EAAE,QAAgB,EAAE,WAAoB;IACjE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,IAAI,CAAC,EAAU,EAAE,QAAgB,EAAE,WAAoB;IAC9D,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAC/E,CAAC"}

package/dist/conditions/builtins.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Built-in condition evaluators — registered at engine initialization.
+ * All 25 condition types from the original switch statement, now pluggable.
+ */
+import type { ConditionEvaluator, EnforcementContext, PolicyCondition } from "../policy.js";
+type BuiltinDef = {
+    name: string;
+    description: string;
+    evaluator: ConditionEvaluator;
+};
+/**
+ * Create the full list of built-in condition definitions.
+ * Accepts `evalCondition` so combinators (any_of, all_of, not) can recurse.
+ */
+export declare function getBuiltinConditions(evalCondition: (condition: PolicyCondition, ctx: EnforcementContext) => boolean): BuiltinDef[];
+export {};
+//# sourceMappingURL=builtins.d.ts.map

package/dist/conditions/builtins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../../src/conditions/builtins.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAmB5F,KAAK,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEvF;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,kBAAkB,KAAK,OAAO,GAC9E,UAAU,EAAE,CAkLd"}