/** * Compliance Assessment Bundle * * Orchestrates compliance assessment with evidence collection and audit * trail verification for any combination of frameworks. * * @module compliance/compliance-bundle */ import type { Finding } from "../certification/types.js"; import type { ComplianceReport, ComplianceFramework, MultiFrameworkReport } from "./types.js"; import type { EvidenceBundle } from "../evidence/types.js"; import type { IntegrityVerificationResult } from "../history/types.js"; /** * Compliance assessment result for a single framework */ export interface SingleFrameworkAssessmentResult { /** Compliance report */ report: ComplianceReport; /** Formatted markdown report */ markdownReport: string; /** Evidence bundle if collected */ evidenceBundle?: EvidenceBundle; /** Audit trail verification result */ auditVerification?: IntegrityVerificationResult; /** Path where evidence was stored */ evidencePath?: string; /** Overall assessment status */ status: "compliant" | "at_risk" | "non_compliant"; } /** * Compliance assessment result for multiple frameworks */ export interface MultiFrameworkAssessmentResult { /** Individual reports per framework */ reports: Partial>; /** Multi-framework report */ multiFrameworkReport: MultiFrameworkReport; /** Formatted markdown report */ markdownReport: string; /** Evidence bundle if collected */ evidenceBundle?: EvidenceBundle; /** Audit trail verification result */ auditVerification?: IntegrityVerificationResult; /** Path where evidence was stored */ evidencePath?: string; /** Overall assessment status */ status: "compliant" | "at_risk" | "non_compliant"; /** Combined compliance score (average across frameworks) */ combinedScore: number; } /** * Options for running compliance assessment */ export interface ComplianceAssessmentOptions { /** Project path to assess */ projectPath: string; /** Security findings from certification/scanning */ findings: Finding[]; /** Framework(s) to assess */ frameworks: ComplianceFramework[]; /** Certification ID to associate with */ certificationId?: string; /** Collect evidence bundle for audit defensibility */ collectEvidence?: boolean; /** Sign evidence with Sigstore */ sign?: boolean; /** Verify audit trail integrity */ verifyAuditTrail?: boolean; /** Store evidence bundle to disk */ storeEvidence?: boolean; /** Include attestation section in report */ includeAttestation?: boolean; } /** * Run a compliance assessment for a single framework * * This function orchestrates: * 1. Compliance control mapping for the framework * 2. Audit trail integrity verification (optional) * 3. Evidence bundle collection (optional) * 4. Audit-defensible report generation */ export declare function runSingleFrameworkAssessment(options: Omit & { framework: ComplianceFramework; }): Promise; /** * Run a compliance assessment for multiple frameworks * * This function orchestrates: * 1. Compliance control mapping for all frameworks * 2. Audit trail integrity verification (optional) * 3. Evidence bundle collection (optional) * 4. Unified audit-defensible report generation */ export declare function runComplianceAssessment(options: ComplianceAssessmentOptions): Promise; /** * Generate a quick compliance summary */ export declare function generateComplianceSummary(result: MultiFrameworkAssessmentResult): string; //# sourceMappingURL=compliance-bundle.d.ts.map