monora-ai 2.1.0 → 2.1.4

package/dist/complianceConsolidation.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Framework-level control coverage consolidation helpers.
+ */
+export declare function identifyFrameworkRemainingGaps(options: {
+    standard: string;
+    catalog?: Record<string, any>;
+    targetCoverage?: number;
+}): Record<string, any>;
+export declare function identifySoc2RemainingGaps(options?: {
+    catalog?: Record<string, any>;
+    targetCoverage?: number;
+}): Record<string, any>;
+export declare function identifyGdprRemainingGaps(options?: {
+    catalog?: Record<string, any>;
+    targetCoverage?: number;
+}): Record<string, any>;
+//# sourceMappingURL=complianceConsolidation.d.ts.map

package/dist/complianceConsolidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"complianceConsolidation.d.ts","sourceRoot":"","sources":["../src/complianceConsolidation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAiBH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAkCtB;AAED,wBAAgB,yBAAyB,CAAC,OAAO,CAAC,EAAE;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAMtB;AAED,wBAAgB,yBAAyB,CAAC,OAAO,CAAC,EAAE;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAMtB"}

package/dist/complianceConsolidation.js

@@ -0,0 +1,68 @@
+"use strict";
+/**
+ * Framework-level control coverage consolidation helpers.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.identifyFrameworkRemainingGaps = identifyFrameworkRemainingGaps;
+exports.identifySoc2RemainingGaps = identifySoc2RemainingGaps;
+exports.identifyGdprRemainingGaps = identifyGdprRemainingGaps;
+const control_backbone_1 = require("./control_backbone");
+function normalizeStandard(value) {
+    const normalized = String(value || '').trim().toUpperCase().replace(/[-_]/g, '');
+    if (!normalized)
+        return 'ISO42001';
+    if (normalized === 'ISO42001' || normalized === 'ISOIEC42001')
+        return 'ISO42001';
+    if (normalized === 'SOC2' || normalized === 'SOCII')
+        return 'SOC2';
+    if (normalized === 'GDPR')
+        return 'GDPR';
+    return String(value || '').trim().toUpperCase();
+}
+function identifyFrameworkRemainingGaps(options) {
+    const standard = normalizeStandard(options.standard);
+    const targetCoverage = typeof options.targetCoverage === 'number' ? options.targetCoverage : 0.9;
+    const catalog = options.catalog || (0, control_backbone_1.loadDefaultControlCatalog)(standard);
+    const report = (0, control_backbone_1.generateControlCoverageReport)({
+        catalog,
+        targetCoverage,
+        standard,
+    });
+    const remainingRows = Array.isArray(report.controls)
+        ? report.controls.filter((row) => !row?.reportable)
+        : [];
+    const remainingControls = remainingRows
+        .map((row) => String(row.control_id || '').trim())
+        .filter(Boolean);
+    return {
+        summary: {
+            ...(report.summary || {}),
+            framework: standard,
+            remaining_control_count: remainingControls.length,
+            target_coverage: targetCoverage,
+        },
+        remaining_controls: remainingRows.map((row) => ({
+            control_id: row.control_id,
+            status: row.status,
+            gaps: Array.isArray(row.gaps) ? row.gaps : [],
+            missing_evidence_types: Array.isArray(row.missing_evidence_types)
+                ? row.missing_evidence_types
+                : [],
+        })),
+        prioritized_missing_modules: (0, control_backbone_1.prioritizeMissingWorkflowModules)(remainingControls, standard),
+    };
+}
+function identifySoc2RemainingGaps(options) {
+    return identifyFrameworkRemainingGaps({
+        standard: 'SOC2',
+        catalog: options?.catalog,
+        targetCoverage: options?.targetCoverage,
+    });
+}
+function identifyGdprRemainingGaps(options) {
+    return identifyFrameworkRemainingGaps({
+        standard: 'GDPR',
+        catalog: options?.catalog,
+        targetCoverage: options?.targetCoverage,
+    });
+}

package/dist/complianceTargets.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Compliance Targets - Framework targeting and enrichment mapping.
+ *
+ * Provides compliance framework definitions and automatic configuration
+ * based on selected compliance targets (ISO 42001, SOC 2, GDPR).
+ */
+import { EnrichmentConfig } from './spec';
+/**
+ * Supported compliance frameworks.
+ */
+export type ComplianceFramework = 'gdpr' | 'soc2' | 'iso42001' | 'eu_ai_act' | 'hipaa' | 'iso27001' | 'pci_dss' | 'nist_ai_rmf';
+/**
+ * SOC 2 Trust Services Criteria categories.
+ * Based on AICPA Trust Services Criteria (2017).
+ */
+export type Soc2TrustPrinciple = 'security' | 'availability' | 'processing_integrity' | 'confidentiality' | 'privacy';
+/**
+ * SOC 2 Common Criteria control families.
+ */
+export type Soc2ControlFamily = 'CC1' | 'CC2' | 'CC3' | 'CC4' | 'CC5' | 'CC6' | 'CC7' | 'CC8' | 'CC9' | 'P_SERIES' | 'PI_SERIES';
+/**
+ * GDPR Articles relevant to AI systems.
+ */
+export type GdprArticle = 'art5' | 'art6' | 'art7' | 'art12' | 'art13' | 'art14' | 'art15' | 'art16' | 'art17' | 'art18' | 'art20' | 'art21' | 'art22' | 'art25' | 'art30' | 'art32' | 'art33' | 'art35';
+/**
+ * ISO 42001 Annex A control areas.
+ */
+export type Iso42001ControlArea = 'A2' | 'A3' | 'A4' | 'A5' | 'A6' | 'A7' | 'A8' | 'A9' | 'A10';
+/**
+ * Framework metadata including descriptions and control mappings.
+ */
+export interface FrameworkMetadata {
+    name: string;
+    description: string;
+    version: string;
+    enforcementDate?: string;
+    controlAreas: string[];
+    enrichments: Partial<EnrichmentConfig>;
+    configRequirements: Record<string, any>;
+}
+/**
+ * SOC 2 control to enrichment mapping.
+ */
+export declare const SOC2_CONTROL_MAPPINGS: Record<Soc2ControlFamily, string[]>;
+/**
+ * GDPR article to enrichment mapping.
+ */
+export declare const GDPR_ARTICLE_MAPPINGS: Record<GdprArticle, string[]>;
+/**
+ * ISO 42001 control area to enrichment mapping.
+ */
+export declare const ISO42001_CONTROL_MAPPINGS: Record<Iso42001ControlArea, string[]>;
+/**
+ * Compliance targets configuration.
+ */
+export interface ComplianceTargets {
+    /** Selected compliance frameworks */
+    frameworks: ComplianceFramework[];
+    /** Report output formats */
+    reportFormats?: ('json' | 'markdown' | 'pdf')[];
+    /** Report generation frequency */
+    reportFrequency?: 'per_trace' | 'daily' | 'weekly' | 'monthly';
+    /** Output directory for reports */
+    outputDirectory?: string;
+    /** SOC 2 specific: Trust principles to include */
+    soc2Principles?: Soc2TrustPrinciple[];
+    /** GDPR specific: Articles to prioritize */
+    gdprArticles?: GdprArticle[];
+    /** ISO 42001 specific: Control areas to focus on */
+    iso42001ControlAreas?: Iso42001ControlArea[];
+}
+/**
+ * Create default compliance targets configuration.
+ */
+export declare function createComplianceTargets(options?: Partial<ComplianceTargets>): ComplianceTargets;
+/**
+ * Get framework metadata.
+ */
+export declare function getFrameworkMetadata(framework: ComplianceFramework): FrameworkMetadata;
+/**
+ * Get all available frameworks.
+ */
+export declare function getAllFrameworks(): ComplianceFramework[];
+/**
+ * Get required enrichments for selected compliance targets.
+ */
+export declare function getRequiredEnrichments(targets: ComplianceTargets): EnrichmentConfig;
+/**
+ * Validate that a config meets compliance requirements.
+ */
+export declare function validateComplianceConfig(config: Record<string, any>, targets: ComplianceTargets): string[];
+/**
+ * Generate config sections required for compliance.
+ */
+export declare function generateComplianceConfig(targets: ComplianceTargets): Record<string, any>;
+/**
+ * Suggest frameworks based on industry.
+ */
+export declare function suggestFrameworksForIndustry(industry: string): {
+    frameworks: ComplianceFramework[];
+    reasoning: string;
+}[];
+/**
+ * Get control mapping details for a framework.
+ */
+export declare function getControlMappings(framework: ComplianceFramework): Record<string, string[]> | undefined;
+/**
+ * Check if a framework is supported.
+ */
+export declare function isFrameworkSupported(framework: string): framework is ComplianceFramework;
+//# sourceMappingURL=complianceTargets.d.ts.map

package/dist/complianceTargets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"complianceTargets.d.ts","sourceRoot":"","sources":["../src/complianceTargets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAkD,MAAM,QAAQ,CAAC;AAE1F;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,MAAM,GACN,UAAU,GACV,WAAW,GACX,OAAO,GACP,UAAU,GACV,SAAS,GACT,aAAa,CAAC;AAElB;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,cAAc,GACd,sBAAsB,GACtB,iBAAiB,GACjB,SAAS,CAAC;AAEd;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,KAAK,GACL,KAAK,GACL,KAAK,GACL,KAAK,GACL,KAAK,GACL,KAAK,GACL,KAAK,GACL,KAAK,GACL,KAAK,GACL,UAAU,GACV,WAAW,CAAC;AAEhB;;GAEG;AACH,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,MAAM,GACN,MAAM,GACN,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,CAAC;AAEZ;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,KAAK,CAAC;AAEV;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACzC;AA8QD;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAkBrE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAmB/D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAU3E,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,4BAA4B;IAC5B,aAAa,CAAC,EAAE,CAAC,MAAM,GAAG,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC;IAChD,kCAAkC;IAClC,eAAe,CAAC,EAAE,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC/D,mCAAmC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,cAAc,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACtC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,oDAAoD;IACpD,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC9C;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,OAAO,CAAC,iBAAiB,CAAM,GACvC,iBAAiB,CAUnB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,mBAAmB,GAAG,iBAAiB,CAEtF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,mBAAmB,EAAE,CAExD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CAWnF;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,OAAO,EAAE,iBAAiB,GACzB,MAAM,EAAE,CAyBV;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAqBxF;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,GACf;IAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,CAqD5D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,mBAAmB,GAC7B,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,CAWtC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,IAAI,mBAAmB,CAExF"}