vaspera 2.5.0

package/dist/compliance/frameworks/index.d.ts

@@ -0,0 +1,67 @@
+/**
+ * AI Compliance Frameworks Index
+ *
+ * Exports all AI-specific compliance frameworks for agent and LLM security.
+ *
+ * @module compliance/frameworks
+ */
+export { OWASP_LLM_CONTROLS, OWASP_LLM_TO_SOC2_MAPPING, OWASP_LLM_TO_ISO27001_MAPPING, getOWASPLLMControls, getOWASPLLMControlById, getOWASPLLMControlsByCategory, getOWASPLLMCategories, getSOC2MappingForLLMControl, getISO27001MappingForLLMControl, getRemediationGuidance, } from "./owasp-llm.js";
+export type { AIComplianceFramework } from "./owasp-llm.js";
+export { NIST_AI_RMF_CONTROLS, getNISTAIRMFControls, getNISTAIRMFControlById, getNISTAIRMFControlsByFunction, getNISTAIRMFControlsByCategory, getNISTAIRMFCategories, getGenAIProfileControls, getNISTAIRMFFunctions, } from "./nist-ai-rmf.js";
+export type { AIRMFFunction } from "./nist-ai-rmf.js";
+export { MITRE_ATLAS_CONTROLS, ATLAS_TO_ATTACK_MAPPING, getMITREATLASControls, getMITREATLASControlById, getMITREATLASControlsByTactic, getMITREATLASTactics, getMitigationsForTechnique, } from "./mitre-atlas.js";
+export type { ATLASTactic, ATLASTechnique } from "./mitre-atlas.js";
+export { EU_AI_ACT_CONTROLS, EU_AI_ACT_TO_OWASP_LLM_MAPPING, getEUAIActControls, getEUAIActControlById, getEUAIActControlsByCategory, getEUAIActCategories, determineRiskLevel, getApplicableArticles, } from "./eu-ai-act.js";
+export type { AIActRiskLevel, AIActCategory } from "./eu-ai-act.js";
+export { ISO_42001_CONTROLS, ISO_42001_TO_ISO_27001_MAPPING, ISO_42001_TO_NIST_AI_RMF_MAPPING, getISO42001Controls, getISO42001ControlById, getISO42001ControlsByClause, getISO42001ControlsByCategory, getISO42001Categories, getISO42001Clauses, } from "./iso-42001.js";
+export type { ISO42001Clause, ISO42001AnnexCategory } from "./iso-42001.js";
+import type { ComplianceControl } from "../types.js";
+/**
+ * Get all AI framework controls
+ */
+export declare function getAllAIFrameworkControls(): ComplianceControl[];
+/**
+ * Get controls for a specific AI framework
+ */
+export declare function getAIFrameworkControls(framework: "OWASP-LLM" | "NIST-AI-RMF" | "MITRE-ATLAS" | "EU-AI-ACT" | "ISO-42001"): ComplianceControl[];
+/**
+ * AI Frameworks metadata
+ */
+export declare const AI_FRAMEWORKS_METADATA: {
+    "OWASP-LLM": {
+        name: string;
+        version: string;
+        controlCount: number;
+        description: string;
+        url: string;
+    };
+    "NIST-AI-RMF": {
+        name: string;
+        version: string;
+        controlCount: number;
+        description: string;
+        url: string;
+    };
+    "MITRE-ATLAS": {
+        name: string;
+        version: string;
+        controlCount: number;
+        description: string;
+        url: string;
+    };
+    "EU-AI-ACT": {
+        name: string;
+        version: string;
+        controlCount: number;
+        description: string;
+        url: string;
+    };
+    "ISO-42001": {
+        name: string;
+        version: string;
+        controlCount: number;
+        description: string;
+        url: string;
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/compliance/frameworks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/frameworks/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,EAC7B,qBAAqB,EACrB,2BAA2B,EAC3B,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAG5D,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,EAC9B,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGpE,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,kBAAkB,EAClB,qBAAqB,EACrB,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpE,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,gCAAgC,EAChC,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,6BAA6B,EAC7B,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAU5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,iBAAiB,EAAE,CAQ/D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,WAAW,GAAG,WAAW,GACjF,iBAAiB,EAAE,CAerB;AAED;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoClC,CAAC"}

package/dist/compliance/frameworks/index.js

@@ -0,0 +1,97 @@
+/**
+ * AI Compliance Frameworks Index
+ *
+ * Exports all AI-specific compliance frameworks for agent and LLM security.
+ *
+ * @module compliance/frameworks
+ */
+// OWASP LLM Top 10
+export { OWASP_LLM_CONTROLS, OWASP_LLM_TO_SOC2_MAPPING, OWASP_LLM_TO_ISO27001_MAPPING, getOWASPLLMControls, getOWASPLLMControlById, getOWASPLLMControlsByCategory, getOWASPLLMCategories, getSOC2MappingForLLMControl, getISO27001MappingForLLMControl, getRemediationGuidance, } from "./owasp-llm.js";
+// NIST AI RMF
+export { NIST_AI_RMF_CONTROLS, getNISTAIRMFControls, getNISTAIRMFControlById, getNISTAIRMFControlsByFunction, getNISTAIRMFControlsByCategory, getNISTAIRMFCategories, getGenAIProfileControls, getNISTAIRMFFunctions, } from "./nist-ai-rmf.js";
+// MITRE ATLAS
+export { MITRE_ATLAS_CONTROLS, ATLAS_TO_ATTACK_MAPPING, getMITREATLASControls, getMITREATLASControlById, getMITREATLASControlsByTactic, getMITREATLASTactics, getMitigationsForTechnique, } from "./mitre-atlas.js";
+// EU AI Act
+export { EU_AI_ACT_CONTROLS, EU_AI_ACT_TO_OWASP_LLM_MAPPING, getEUAIActControls, getEUAIActControlById, getEUAIActControlsByCategory, getEUAIActCategories, determineRiskLevel, getApplicableArticles, } from "./eu-ai-act.js";
+// ISO/IEC 42001
+export { ISO_42001_CONTROLS, ISO_42001_TO_ISO_27001_MAPPING, ISO_42001_TO_NIST_AI_RMF_MAPPING, getISO42001Controls, getISO42001ControlById, getISO42001ControlsByClause, getISO42001ControlsByCategory, getISO42001Categories, getISO42001Clauses, } from "./iso-42001.js";
+/**
+ * All AI compliance framework controls
+ */
+import { OWASP_LLM_CONTROLS } from "./owasp-llm.js";
+import { NIST_AI_RMF_CONTROLS } from "./nist-ai-rmf.js";
+import { MITRE_ATLAS_CONTROLS } from "./mitre-atlas.js";
+import { EU_AI_ACT_CONTROLS } from "./eu-ai-act.js";
+import { ISO_42001_CONTROLS } from "./iso-42001.js";
+/**
+ * Get all AI framework controls
+ */
+export function getAllAIFrameworkControls() {
+    return [
+        ...OWASP_LLM_CONTROLS,
+        ...NIST_AI_RMF_CONTROLS,
+        ...MITRE_ATLAS_CONTROLS,
+        ...EU_AI_ACT_CONTROLS,
+        ...ISO_42001_CONTROLS,
+    ];
+}
+/**
+ * Get controls for a specific AI framework
+ */
+export function getAIFrameworkControls(framework) {
+    switch (framework) {
+        case "OWASP-LLM":
+            return OWASP_LLM_CONTROLS;
+        case "NIST-AI-RMF":
+            return NIST_AI_RMF_CONTROLS;
+        case "MITRE-ATLAS":
+            return MITRE_ATLAS_CONTROLS;
+        case "EU-AI-ACT":
+            return EU_AI_ACT_CONTROLS;
+        case "ISO-42001":
+            return ISO_42001_CONTROLS;
+        default:
+            return [];
+    }
+}
+/**
+ * AI Frameworks metadata
+ */
+export const AI_FRAMEWORKS_METADATA = {
+    "OWASP-LLM": {
+        name: "OWASP LLM Top 10",
+        version: "2025",
+        controlCount: OWASP_LLM_CONTROLS.length,
+        description: "OWASP Top 10 for Large Language Model Applications",
+        url: "https://owasp.org/www-project-top-10-for-large-language-model-applications/",
+    },
+    "NIST-AI-RMF": {
+        name: "NIST AI RMF",
+        version: "1.0 + GenAI Profile",
+        controlCount: NIST_AI_RMF_CONTROLS.length,
+        description: "NIST AI Risk Management Framework with GenAI Profile extensions",
+        url: "https://www.nist.gov/itl/ai-risk-management-framework",
+    },
+    "MITRE-ATLAS": {
+        name: "MITRE ATLAS",
+        version: "4.5",
+        controlCount: MITRE_ATLAS_CONTROLS.length,
+        description: "Adversarial Threat Landscape for AI Systems",
+        url: "https://atlas.mitre.org/",
+    },
+    "EU-AI-ACT": {
+        name: "EU AI Act",
+        version: "2024/1689",
+        controlCount: EU_AI_ACT_CONTROLS.length,
+        description: "European Union Artificial Intelligence Act",
+        url: "https://eur-lex.europa.eu/eli/reg/2024/1689",
+    },
+    "ISO-42001": {
+        name: "ISO/IEC 42001",
+        version: "2023",
+        controlCount: ISO_42001_CONTROLS.length,
+        description: "AI Management System Requirements",
+        url: "https://www.iso.org/standard/81230.html",
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/compliance/frameworks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/compliance/frameworks/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,mBAAmB;AACnB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,EAC7B,qBAAqB,EACrB,2BAA2B,EAC3B,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAGxB,cAAc;AACd,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,EAC9B,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,cAAc;AACd,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAG1B,YAAY;AACZ,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,kBAAkB,EAClB,qBAAqB,EACrB,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAGxB,gBAAgB;AAChB,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,gCAAgC,EAChC,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,6BAA6B,EAC7B,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAGxB;;GAEG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,GAAG,kBAAkB;QACrB,GAAG,oBAAoB;QACvB,GAAG,oBAAoB;QACvB,GAAG,kBAAkB;QACrB,GAAG,kBAAkB;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAkF;IAElF,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC;QAC5B,KAAK,aAAa;YAChB,OAAO,oBAAoB,CAAC;QAC9B,KAAK,aAAa;YAChB,OAAO,oBAAoB,CAAC;QAC9B,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC;QAC5B,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC;QAC5B;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,WAAW,EAAE;QACX,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,MAAM;QACf,YAAY,EAAE,kBAAkB,CAAC,MAAM;QACvC,WAAW,EAAE,oDAAoD;QACjE,GAAG,EAAE,6EAA6E;KACnF;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,qBAAqB;QAC9B,YAAY,EAAE,oBAAoB,CAAC,MAAM;QACzC,WAAW,EAAE,iEAAiE;QAC9E,GAAG,EAAE,uDAAuD;KAC7D;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,oBAAoB,CAAC,MAAM;QACzC,WAAW,EAAE,6CAA6C;QAC1D,GAAG,EAAE,0BAA0B;KAChC;IACD,WAAW,EAAE;QACX,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,kBAAkB,CAAC,MAAM;QACvC,WAAW,EAAE,4CAA4C;QACzD,GAAG,EAAE,6CAA6C;KACnD;IACD,WAAW,EAAE;QACX,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,MAAM;QACf,YAAY,EAAE,kBAAkB,CAAC,MAAM;QACvC,WAAW,EAAE,mCAAmC;QAChD,GAAG,EAAE,yCAAyC;KAC/C;CACF,CAAC"}

package/dist/compliance/frameworks/iso-42001.d.ts

@@ -0,0 +1,59 @@
+/**
+ * ISO/IEC 42001 AI Management System Compliance Framework
+ *
+ * Maps security findings to ISO/IEC 42001:2023 requirements.
+ * ISO/IEC 42001 specifies requirements for establishing, implementing,
+ * maintaining and continually improving an AI management system (AIMS).
+ *
+ * @see https://www.iso.org/standard/81230.html
+ * @module compliance/frameworks/iso-42001
+ */
+import type { ComplianceControl } from "../types.js";
+/**
+ * ISO 42001 Management System Clauses
+ */
+export type ISO42001Clause = "Context" | "Leadership" | "Planning" | "Support" | "Operation" | "Performance" | "Improvement";
+/**
+ * ISO/IEC 42001 Annex A Control Categories
+ */
+export type ISO42001AnnexCategory = "AI Policies" | "Internal Organization" | "AI System Resources" | "AI System Impact Assessment" | "AI System Life Cycle" | "Data for AI Systems" | "Information for Interested Parties" | "Use of AI System" | "Third-Party Relationships";
+/**
+ * ISO/IEC 42001 Controls
+ *
+ * Based on ISO/IEC 42001:2023 requirements and Annex A controls.
+ * Controls cover both management system clauses and specific AI controls.
+ */
+export declare const ISO_42001_CONTROLS: ComplianceControl[];
+/**
+ * Get all ISO 42001 controls
+ */
+export declare function getISO42001Controls(): ComplianceControl[];
+/**
+ * Get ISO 42001 control by ID
+ */
+export declare function getISO42001ControlById(id: string): ComplianceControl | undefined;
+/**
+ * Get ISO 42001 controls by clause
+ */
+export declare function getISO42001ControlsByClause(clause: ISO42001Clause): ComplianceControl[];
+/**
+ * Get ISO 42001 controls by category
+ */
+export declare function getISO42001ControlsByCategory(category: string): ComplianceControl[];
+/**
+ * Get all ISO 42001 categories
+ */
+export declare function getISO42001Categories(): string[];
+/**
+ * Get ISO 42001 clauses
+ */
+export declare function getISO42001Clauses(): ISO42001Clause[];
+/**
+ * Cross-mapping to ISO 27001 controls
+ */
+export declare const ISO_42001_TO_ISO_27001_MAPPING: Record<string, string[]>;
+/**
+ * Cross-mapping to NIST AI RMF
+ */
+export declare const ISO_42001_TO_NIST_AI_RMF_MAPPING: Record<string, string[]>;
+//# sourceMappingURL=iso-42001.d.ts.map

package/dist/compliance/frameworks/iso-42001.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iso-42001.d.ts","sourceRoot":"","sources":["../../../src/compliance/frameworks/iso-42001.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,SAAS,GACT,YAAY,GACZ,UAAU,GACV,SAAS,GACT,WAAW,GACX,aAAa,GACb,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAC7B,aAAa,GACb,uBAAuB,GACvB,qBAAqB,GACrB,6BAA6B,GAC7B,sBAAsB,GACtB,qBAAqB,GACrB,oCAAoC,GACpC,kBAAkB,GAClB,2BAA2B,CAAC;AAEhC;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,iBAAiB,EA2rBjD,CAAC;AAEF;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,iBAAiB,EAAE,CAEzD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEhF;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAEvF;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAEnF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAEhD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,cAAc,EAAE,CAErD;AAED;;GAEG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CASnE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gCAAgC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAQrE,CAAC"}