monora-ai 2.0.0 → 2.1.3

package/dist/dataResidency.js

@@ -0,0 +1,203 @@
+"use strict";
+/**
+ * Data residency validation for sinks.
+ *
+ * Validates that endpoint URLs match configured data residency requirements
+ * based on domain patterns for different geographic regions.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectEndpointRegion = detectEndpointRegion;
+exports.validateDataResidency = validateDataResidency;
+exports.enforceDataResidency = enforceDataResidency;
+const logger_1 = require("./logger");
+/**
+ * Known GDPR-adequate region domain patterns (not limited to EU member states).
+ * These patterns indicate endpoints that may store/process data in GDPR-adequate regions.
+ */
+const GDPR_ADEQUATE_PATTERNS = [
+    // Explicit EU subdomains
+    /\.eu\./i,
+    /\-eu\./i,
+    /eu\-/i,
+    /\.europe\./i,
+    /\-europe\./i,
+    // Country-specific EU TLDs
+    /\.eu$/i,
+    /\.de$/i,
+    /\.fr$/i,
+    /\.nl$/i,
+    /\.ie$/i,
+    /\.it$/i,
+    /\.es$/i,
+    /\.pl$/i,
+    /\.at$/i,
+    /\.be$/i,
+    /\.se$/i,
+    /\.dk$/i,
+    /\.fi$/i,
+    /\.pt$/i,
+    /\.cz$/i,
+    /\.ro$/i,
+    /\.hu$/i,
+    /\.sk$/i,
+    /\.bg$/i,
+    /\.hr$/i,
+    /\.si$/i,
+    /\.lt$/i,
+    /\.lv$/i,
+    /\.ee$/i,
+    /\.lu$/i,
+    /\.mt$/i,
+    /\.cy$/i,
+    /\.gr$/i,
+    // Cloud provider EU regions
+    /eu-west/i,
+    /eu-central/i,
+    /eu-north/i,
+    /eu-south/i,
+    /europe-west/i,
+    /europe-north/i,
+    /europewest/i,
+    /frankfurt/i,
+    /ireland/i,
+    /london/i,
+    /paris/i,
+    /amsterdam/i,
+    /stockholm/i,
+    /milan/i,
+    /zurich/i,
+];
+/**
+ * Known US region domain patterns.
+ * These patterns indicate endpoints that store/process data in the US.
+ */
+const US_PATTERNS = [
+    // Explicit US subdomains
+    /\.us\./i,
+    /\-us\./i,
+    /us\-/i,
+    /\.usa\./i,
+    /\-usa\./i,
+    // US TLD
+    /\.us$/i,
+    // Cloud provider US regions
+    /us-east/i,
+    /us-west/i,
+    /us-central/i,
+    /useast/i,
+    /uswest/i,
+    /america/i,
+    /virginia/i,
+    /ohio/i,
+    /oregon/i,
+    /california/i,
+    /n-virginia/i,
+    // Common US-based service patterns
+    /\.com$/i, // Treated as potentially US unless EU pattern matches
+];
+/**
+ * Extract the hostname from a URL.
+ */
+function extractHostname(url) {
+    try {
+        const parsed = new URL(url);
+        return parsed.hostname.toLowerCase();
+    }
+    catch {
+        // If URL parsing fails, try to extract hostname manually
+        const match = url.match(/^(?:https?:\/\/)?([^\/\?#:]+)/i);
+        return match ? match[1].toLowerCase() : url.toLowerCase();
+    }
+}
+/**
+ * Detect the likely data residency region of an endpoint URL.
+ */
+function detectEndpointRegion(endpoint) {
+    const hostname = extractHostname(endpoint);
+    const fullUrl = endpoint.toLowerCase();
+    // Check GDPR-adequate patterns first (more specific)
+    for (const pattern of GDPR_ADEQUATE_PATTERNS) {
+        if (pattern.test(hostname) || pattern.test(fullUrl)) {
+            return 'eu';
+        }
+    }
+    // Check US patterns
+    for (const pattern of US_PATTERNS) {
+        if (pattern.test(hostname) || pattern.test(fullUrl)) {
+            // .com is ambiguous - only count as US if no EU indicators
+            if (pattern.source === '\\.com$') {
+                continue; // Skip .com as it's too ambiguous
+            }
+            return 'us';
+        }
+    }
+    return 'unknown';
+}
+/**
+ * Validate that an endpoint URL matches the required data residency.
+ *
+ * @param endpoint - The endpoint URL to validate
+ * @param requiredResidency - The required data residency ('us', 'eu', 'any', or null)
+ * @returns Validation result with details
+ */
+function validateDataResidency(endpoint, requiredResidency) {
+    // No requirement means always valid
+    if (!requiredResidency || requiredResidency === 'any') {
+        return {
+            valid: true,
+            detectedRegion: detectEndpointRegion(endpoint),
+            requiredRegion: requiredResidency,
+            endpoint,
+            message: 'No data residency requirement configured',
+        };
+    }
+    const detectedRegion = detectEndpointRegion(endpoint);
+    // If we can't determine the region, we can't validate
+    if (detectedRegion === 'unknown') {
+        return {
+            valid: false,
+            detectedRegion,
+            requiredRegion: requiredResidency,
+            endpoint,
+            message: `Cannot determine data residency for endpoint '${endpoint}'. Required: ${requiredResidency.toUpperCase()}. Consider using an endpoint with explicit region indicators.`,
+        };
+    }
+    // Check if detected region matches required
+    if (detectedRegion === requiredResidency) {
+        return {
+            valid: true,
+            detectedRegion,
+            requiredRegion: requiredResidency,
+            endpoint,
+            message: `Endpoint matches ${requiredResidency.toUpperCase()} data residency requirement`,
+        };
+    }
+    // Mismatch
+    return {
+        valid: false,
+        detectedRegion,
+        requiredRegion: requiredResidency,
+        endpoint,
+        message: `Data residency mismatch: endpoint '${endpoint}' appears to be in ${detectedRegion.toUpperCase()}, but ${requiredResidency.toUpperCase()} is required`,
+    };
+}
+/**
+ * Enforce data residency requirements for a sink endpoint.
+ *
+ * @param endpoint - The endpoint URL to validate
+ * @param residency - The required data residency
+ * @param action - Action on failure: 'block' throws error, 'warn' logs warning
+ * @throws Error if action is 'block' and validation fails
+ */
+function enforceDataResidency(endpoint, residency, action = 'warn') {
+    const result = validateDataResidency(endpoint, residency);
+    if (!result.valid) {
+        if (action === 'block') {
+            throw new Error(`Data residency enforcement failed: ${result.message}`);
+        }
+        else {
+            logger_1.logger.warning('Data residency warning: %s', result.message);
+        }
+    }
+    return result;
+}

package/dist/dispatcher.d.ts

@@ -3,6 +3,38 @@
  */
 import { Sink } from './sinks/base';
 import { MonoraConfig } from './config';
+/**
+ * Callback function for audit hooks.
+ */
+export type AuditCallback = (event: Record<string, unknown>) => void | Promise<void>;
+/**
+ * Register an audit callback that is invoked for every emitted event.
+ *
+ * Use this to integrate with external audit systems, SIEM tools, or
+ * compliance logging infrastructure.
+ *
+ * @param callback - Function to call with each event.
+ * @returns Unsubscribe function.
+ *
+ * @example
+ * ```typescript
+ * const unsubscribe = onEvent((event) => {
+ *   console.log('Audit:', event.event_type, event.event_id);
+ *   // Send to external audit system
+ * });
+ *
+ * // Later: unsubscribe();
+ * ```
+ */
+export declare function onEvent(callback: AuditCallback): () => void;
+/**
+ * Clear all registered audit callbacks.
+ */
+export declare function clearAuditCallbacks(): void;
+/**
+ * Get the number of registered audit callbacks.
+ */
+export declare function getAuditCallbackCount(): number;
 export declare class EventDispatcher {
     private sinks;
     private queue;

package/dist/dispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../src/dispatcher.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,IAAI,EAAa,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAcxC,qBAAa,eAAe;IAC1B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,gBAAgB,CAAC,CAAS;IAClC,OAAO,CAAC,eAAe,CAA8B;IACrD,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAW;IAChC,OAAO,CAAC,mBAAmB,CAAC,CAA6B;IACzD,OAAO,CAAC,SAAS,CAAe;IAChC,OAAO,CAAC,MAAM,CAAC,CAAiB;IAChC,OAAO,CAAC,UAAU,CAAC,CAAQ;IAC3B,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,iBAAiB,CAAC,CAAa;IACvC,OAAO,CAAC,gBAAgB,CAAU;IAClC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,YAAY,CAAS;gBAEjB,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY;IA0C/C,KAAK,IAAI,IAAI;IAkBb,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAoCtC,OAAO,CAAC,iBAAiB;IA4BzB,KAAK,IAAI,IAAI;IAoBb,KAAK,IAAI,IAAI;IA8Db,OAAO,CAAC,wBAAwB;IAoBhC,OAAO,CAAC,iBAAiB,CAAa;IAEtC,OAAO,CAAC,YAAY;IA+BpB,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,eAAe;IAiBvB,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,cAAc;CAwBvB"}
+{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../src/dispatcher.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,IAAI,EAAa,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AASxC;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAKrF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI,CAQ3D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AA4BD,qBAAa,eAAe;IAC1B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,gBAAgB,CAAC,CAAS;IAClC,OAAO,CAAC,eAAe,CAA8B;IACrD,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAW;IAChC,OAAO,CAAC,mBAAmB,CAAC,CAA6B;IACzD,OAAO,CAAC,SAAS,CAAe;IAChC,OAAO,CAAC,MAAM,CAAC,CAAiB;IAChC,OAAO,CAAC,UAAU,CAAC,CAAQ;IAC3B,OAAO,CAAC,KAAK,CAA6B;IAC1C,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,iBAAiB,CAAC,CAAa;IACvC,OAAO,CAAC,gBAAgB,CAAU;IAClC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,YAAY,CAAS;gBAEjB,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY;IAyD/C,KAAK,IAAI,IAAI;IAkBb,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAoCtC,OAAO,CAAC,iBAAiB;IA4BzB,KAAK,IAAI,IAAI;IAoBb,KAAK,IAAI,IAAI;IA8Db,OAAO,CAAC,wBAAwB;IAoBhC,OAAO,CAAC,iBAAiB,CAAa;IAEtC,OAAO,CAAC,YAAY;IA+BpB,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,WAAW;IA8BnB,OAAO,CAAC,eAAe;IAiBvB,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,cAAc;CAwBvB"}

package/dist/dispatcher.js

@@ -4,12 +4,78 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EventDispatcher = void 0;
+exports.onEvent = onEvent;
+exports.clearAuditCallbacks = clearAuditCallbacks;
+exports.getAuditCallbackCount = getAuditCallbackCount;
 const events_1 = require("events");
 const base_1 = require("./sinks/base");
 const file_1 = require("./sinks/file");
 const alerts_1 = require("./alerts");
 const logger_1 = require("./logger");
+const streaming_1 = require("./streaming");
 const telemetry_1 = require("./telemetry");
+// Global audit callbacks registry
+const auditCallbacks = [];
+/**
+ * Register an audit callback that is invoked for every emitted event.
+ *
+ * Use this to integrate with external audit systems, SIEM tools, or
+ * compliance logging infrastructure.
+ *
+ * @param callback - Function to call with each event.
+ * @returns Unsubscribe function.
+ *
+ * @example
+ * ```typescript
+ * const unsubscribe = onEvent((event) => {
+ *   console.log('Audit:', event.event_type, event.event_id);
+ *   // Send to external audit system
+ * });
+ *
+ * // Later: unsubscribe();
+ * ```
+ */
+function onEvent(callback) {
+    auditCallbacks.push(callback);
+    return () => {
+        const index = auditCallbacks.indexOf(callback);
+        if (index !== -1) {
+            auditCallbacks.splice(index, 1);
+        }
+    };
+}
+/**
+ * Clear all registered audit callbacks.
+ */
+function clearAuditCallbacks() {
+    auditCallbacks.length = 0;
+}
+/**
+ * Get the number of registered audit callbacks.
+ */
+function getAuditCallbackCount() {
+    return auditCallbacks.length;
+}
+/**
+ * Invoke all registered audit callbacks for an event.
+ * Errors are logged but don't propagate.
+ */
+function invokeAuditCallbacks(event) {
+    const callbacks = auditCallbacks.slice();
+    for (const callback of callbacks) {
+        try {
+            const result = callback(event);
+            if (result && typeof result === 'object' && 'then' in result) {
+                result.catch((error) => {
+                    logger_1.logger.debug('Audit callback error: %s', error);
+                });
+            }
+        }
+        catch (error) {
+            logger_1.logger.debug('Audit callback error: %s', error);
+        }
+    }
+}
 class EventDispatcher {
     constructor(sinks, config) {
         this.lastMetricsUpdate = 0;
@@ -20,10 +86,12 @@ class EventDispatcher {
         this.maxQueueSize = buffering.queue_size || 1000;
         this.batchSize = buffering.batch_size || 50;
         this.flushInterval = buffering.flush_interval_sec || 1.0;
-        this.queueFullTimeout = buffering.queue_full_timeout_sec !== null ? buffering.queue_full_timeout_sec : undefined;
+        this.queueFullTimeout = buffering.queue_full_timeout_sec !== null
+            ? buffering.queue_full_timeout_sec
+            : undefined;
         this.sinkFailureMode = errorHandling.sink_failure_mode || 'warn';
         this.queueFullMode = errorHandling.queue_full_mode || 'warn';
-        this.fallbackPath = errorHandling.fallback_path;
+        this.fallbackPath = errorHandling.fallback_path ?? undefined;
         const alerts = config.alerts || {};
         if (alerts.violation_webhook) {
             // ViolationWebhookDispatcher doesn't support 'block' mode, map to 'warn'
@@ -46,8 +114,17 @@ class EventDispatcher {
         this.running = false;
         // Adaptive batching config
         this.adaptiveBatching = buffering.adaptive_batching ?? true;
-        this.minBatchSize = buffering.min_batch_size || 10;
-        this.maxBatchSize = buffering.max_batch_size || 500;
+        const minBatchSize = buffering.min_batch_size ?? 10;
+        const maxBatchSize = buffering.max_batch_size ?? 500;
+        if (!Number.isInteger(minBatchSize)
+            || !Number.isInteger(maxBatchSize)
+            || minBatchSize <= 0
+            || maxBatchSize <= 0
+            || minBatchSize > maxBatchSize) {
+            throw new Error(`Invalid adaptive batching configuration: minBatchSize (${minBatchSize}) and maxBatchSize (${maxBatchSize}) must be positive integers with minBatchSize <= maxBatchSize.`);
+        }
+        this.minBatchSize = minBatchSize;
+        this.maxBatchSize = maxBatchSize;
     }
     start() {
         if (this.running) {
@@ -265,6 +342,16 @@ class EventDispatcher {
         if (events.length === 0) {
             return;
         }
+        for (const event of events) {
+            // Invoke audit callbacks for each event
+            invokeAuditCallbacks(event);
+            try {
+                (0, streaming_1.publishEvent)(event);
+            }
+            catch {
+                // Ignore subscriber errors
+            }
+        }
         for (const sink of this.sinks) {
             try {
                 const result = sink.emit(events);

package/dist/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAwIxC,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAA2B;IAC3C,OAAO,CAAC,SAAS,CAAa;gBAElB,MAAM,EAAE,YAAY;IAWhC,KAAK,CACH,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,OAAO,CAAC,EAAE;QACR,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,GACA,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CA4CvB"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AA2KxC,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAA2B;IAC3C,OAAO,CAAC,SAAS,CAAa;gBAElB,MAAM,EAAE,YAAY;IAWhC,KAAK,CACH,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,OAAO,CAAC,EAAE;QACR,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,GACA,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CAgDvB"}

package/dist/events.js

@@ -40,6 +40,7 @@ exports.EventBuilder = void 0;
 const os = __importStar(require("os"));
 const context_1 = require("./context");
 const ids_1 = require("./ids");
+const attribution_1 = require("./attribution");
 const lineage_1 = require("./lineage");
 class TimestampEnricher {
     enrich(event) {
@@ -143,6 +144,39 @@ class ProcessEnricher {
         event.process_id = this.processId;
     }
 }
+function buildAuditMetadata() {
+    const audit = (0, attribution_1.getAuditMetadata)();
+    if (!audit) {
+        return null;
+    }
+    const payload = {
+        use_case_name: audit.useCaseName,
+        business_owner: audit.businessOwner,
+        data_categories: audit.dataCategories,
+        risk_level: audit.riskLevel,
+        compliance_frameworks: audit.complianceFrameworks,
+        review_date: audit.reviewDate,
+        reviewer: audit.reviewer,
+        notes: audit.notes,
+    };
+    const cleaned = {};
+    for (const [key, value] of Object.entries(payload)) {
+        if (value === undefined || value === null) {
+            continue;
+        }
+        if (typeof value === 'string' && value.trim() === '') {
+            continue;
+        }
+        if (Array.isArray(value) && value.length === 0) {
+            continue;
+        }
+        if (typeof value === 'object' && !Array.isArray(value) && Object.keys(value).length === 0) {
+            continue;
+        }
+        cleaned[key] = value;
+    }
+    return Object.keys(cleaned).length > 0 ? cleaned : null;
+}
 class EventBuilder {
     constructor(config) {
         this.defaults = config.defaults || {};
@@ -180,6 +214,10 @@ class EventBuilder {
             reason: options?.reason || null,
             body,
         };
+        const auditMetadata = buildAuditMetadata();
+        if (auditMetadata) {
+            event.audit_metadata = auditMetadata;
+        }
         const sequence = (0, context_1.nextEventSequence)();
         if (sequence !== null) {
             event.event_sequence = sequence;

package/dist/evidence_store.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Evidence store with hash chaining and lineage graph support.
+ */
+export interface EvidenceHashRecord {
+    evidence_id: string;
+    evidence_hash: string;
+    prev_hash: string | null;
+    recorded_at: string;
+    collected_at?: string | null;
+}
+export interface EvidenceHashChain {
+    chain_type: 'evidence_hash_chain';
+    algorithm: string;
+    generated_at: string;
+    item_count: number;
+    first_hash: string | null;
+    last_hash: string | null;
+    verification_status: 'verified' | 'invalid';
+    verification_error?: string | null;
+    records: EvidenceHashRecord[];
+}
+export interface EvidenceLineageGraph {
+    graph_type: 'evidence_lineage';
+    generated_at: string;
+    node_counts: Record<string, number>;
+    nodes: Array<Record<string, any>>;
+    edges: Array<Record<string, any>>;
+}
+export interface EvidenceManifest {
+    manifest_type: 'evidence_manifest';
+    manifest_version: string;
+    standard: string;
+    generated_at: string;
+    scope?: string | null;
+    generated_by?: string | null;
+    notes?: string | null;
+    evidence_items: Array<Record<string, any>>;
+    hash_chain?: EvidenceHashChain;
+    lineage_graph?: EvidenceLineageGraph;
+    control_workflow_state?: Record<string, any>;
+    aims_governance_state?: Record<string, any>;
+}
+export interface EvidenceStoreOptions {
+    hashAlgorithm?: string;
+}
+export declare function computeEvidenceItemHash(item: Record<string, any>, options?: {
+    prevHash?: string | null;
+    algorithm?: string;
+}): string;
+export declare function verifyEvidenceHashChain(evidenceItems: Array<Record<string, any>>, records: EvidenceHashRecord[], algorithm?: string): {
+    valid: boolean;
+    error?: string;
+};
+export declare function buildEvidenceHashChain(evidenceItems: Array<Record<string, any>>, options?: {
+    algorithm?: string;
+    sortBy?: (item: Record<string, any>) => string;
+}): EvidenceHashChain;
+export declare function buildEvidenceLineageGraph(evidenceItems: Array<Record<string, any>>): EvidenceLineageGraph;
+export declare function buildHashedEvidenceManifest(options: {
+    standard: string;
+    evidenceItems: Array<Record<string, any>>;
+    scope?: string;
+    generatedBy?: string;
+    notes?: string;
+    generatedAt?: string;
+    includeLineage?: boolean;
+    includeHashChain?: boolean;
+    hashAlgorithm?: string;
+}): EvidenceManifest;
+export declare class EvidenceStore {
+    private items;
+    private algorithm;
+    constructor(options?: EvidenceStoreOptions);
+    clear(): void;
+    addEvidence(item: Record<string, any>): Record<string, any>;
+    addMany(items: Array<Record<string, any>>): Array<Record<string, any>>;
+    listItems(): Array<Record<string, any>>;
+    get(evidenceId: string): Record<string, any> | null;
+    buildManifest(options: {
+        standard: string;
+        scope?: string;
+        generatedBy?: string;
+        notes?: string;
+        includeLineage?: boolean;
+        includeHashChain?: boolean;
+    }): EvidenceManifest;
+    getHashAlgorithm(): string;
+}
+export declare function getRuntimeEvidenceStore(): EvidenceStore;
+export declare function clearRuntimeEvidenceStore(): void;
+export declare function recordRuntimeEvidence(item: Record<string, any>): Record<string, any>;
+export declare function buildRuntimeEvidenceManifest(options?: {
+    standard?: string;
+    scope?: string;
+    generatedBy?: string;
+    notes?: string;
+    includeLineage?: boolean;
+    includeHashChain?: boolean;
+    includeControlWorkflowState?: boolean;
+    includeAimsGovernanceState?: boolean;
+    controlCatalog?: Record<string, any> | null;
+}): EvidenceManifest;
+//# sourceMappingURL=evidence_store.d.ts.map

package/dist/evidence_store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence_store.d.ts","sourceRoot":"","sources":["../src/evidence_store.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,qBAAqB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mBAAmB,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAClC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,mBAAmB,CAAC;IACnC,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3C,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7C,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA6ED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACzD,MAAM,CAWR;AAED,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EACzC,OAAO,EAAE,kBAAkB,EAAE,EAC7B,SAAS,CAAC,EAAE,MAAM,GACjB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAmCpC;AAED,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EACzC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,MAAM,CAAA;CAAE,GAC/E,iBAAiB,CAuCnB;AAYD,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GACxC,oBAAoB,CAsItB;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,gBAAgB,CAwBnB;AAiCD,qBAAa,aAAa;IACxB,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,SAAS,CAAS;gBAEd,OAAO,CAAC,EAAE,oBAAoB;IAK1C,KAAK,IAAI,IAAI;IAIb,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAM3D,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAItE,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAIvC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAKnD,aAAa,CAAC,OAAO,EAAE;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,GAAG,gBAAgB;IAapB,gBAAgB,IAAI,MAAM;CAG3B;AAID,wBAAgB,uBAAuB,IAAI,aAAa,CAEvD;AAED,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAEpF;AAED,wBAAgB,4BAA4B,CAAC,OAAO,CAAC,EAAE;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;CAC7C,GAAG,gBAAgB,CA6BnB"}