/**
 * @connexum/ai-governance
 *
 * Enterprise AI governance framework for Claude Code environments.
 * Hook-based enforcement, compliance packs, audit trails.
 *
 * Connexum Network Inc.
 */
// Utilities
export { ensureDir, sha256File, sha256, appendJsonl, readJsonl, readJsonlWithResults, parseJsonlLine, loadJson, saveJson, readLastLines, readFromOffset, } from './util/fs.js';
export { Logger, createLogger, } from './util/log.js';
// Unified Configuration
export { GovernanceConfig, } from './governance-config.js';
// Governance
//
// AIAG-021: `governance-runtime.ts` defines its own `GovernanceConfig`
// interface, which collides with the `GovernanceConfig` class exported
// above from `./governance-config`. We re-export the runtime interface
// under the clearer name `GovernanceRuntimeConfig` and intentionally
// do NOT re-export the raw `GovernanceConfig` name from this module.
// Consumers should import the runtime config as `GovernanceRuntimeConfig`.
export { GovernanceRuntime, GovernanceTamperError, } from './governance/governance-runtime.js';
export { createCapabilityBundle, } from './governance/capability-bundle.js';
// Security
export { CircuitBreaker, } from './security/circuit-breaker.js';
export { AnomalyDetector, } from './security/anomaly-detector.js';
export { InstinctSystem, } from './governance/instinct-system.js';
export { GateGuard, } from './governance/gateguard.js';
export { Council, } from './governance/council.js';
// Session & Memory
export { SessionPersistence, } from './governance/session-persistence.js';
export { MemoryIntegrity, } from './governance/memory-integrity.js';
// Inter-Agent Auth (Phase 10)
export { AgentAuth, } from './security/agent-auth.js';
// Supply Chain (Phase 11)
export { SupplyChain, } from './security/supply-chain.js';
// Provider Compliance (LLM provider verification)
export { ProviderCompliance, } from './security/provider-compliance.js';
// Provider Compliance boot-hook (operator-visible config verification).
// C-2 (2026-04-21): wire into server boot to refuse permissive+unknown.
export { verifyProviderComplianceConfig, } from './security/provider-compliance-boot.js';
// Encryption at Rest (AES-256-GCM)
export { EncryptionLayer, } from './security/encryption-layer.js';
// Data Classification (HIPAA PHI, GDPR PII, PCI DSS PAN)
export { DataClassifier, } from './security/data-classifier.js';
// Audit
export { EventBus, } from './audit/event-bus.js';
export { AuditIntegrity, } from './audit/audit-integrity.js';
// Approval Queue (APPROVAL_REQUIRED workflow)
export { ApprovalQueue, } from './governance/approval-queue.js';
// Approval Service (REST API wrapper for dashboard integration)
export { ApprovalService, } from './governance/approval-service.js';
// Persistent Nonce Store (cross-restart replay protection)
export { NonceStore, } from './security/nonce-store.js';
export { ComplianceReporter, } from './audit/compliance-reporter.js';
// Incident Notification
export { IncidentNotifier, } from './governance/incident-notifier.js';
// Retention Manager
export { RetentionManager, } from './governance/retention-manager.js';
// Compliance Packs
export { PackRegistry, } from './packs/index.js';
export { SOC2_PACK } from './packs/soc2.js';
export { HIPAA_PACK } from './packs/hipaa.js';
export { GDPR_PACK } from './packs/gdpr.js';
export { PCIDSS_PACK } from './packs/pcidss.js';
export { DORA_PACK } from './packs/dora.js';
export { EUAIACT_PACK } from './packs/euaiact.js';
export { ISO27001_PACK } from './packs/iso27001.js';
export { NIST_AI_RMF_PACK } from './packs/nist-ai-rmf.js';
export { ISO_42001_PACK } from './packs/iso42001.js';
export { MIFID2_PACK } from './packs/mifid2.js';
export { NAIC_MDL_PACK } from './packs/naic-mdl.js';
export { FRCP26_PACK } from './packs/frcp26.js';
export { FOIA_PACK } from './packs/foia.js';
export { LPO2024_PACK } from './packs/lpo2024.js';
export { JP_APPI_PACK as APPI_PACK, JP_APPI_PACK } from './packs/jp-appi.js';
export { FERPA_PACK } from './packs/ferpa.js';
export { FEDRAMP_PACK } from './packs/fedramp.js';
export { STATERAMP_PACK } from './packs/stateramp.js';
export { CJIS_PACK } from './packs/cjis.js';
export { CMMC2_PACK } from './packs/cmmc2.js';
// Operator RBAC
export { OperatorRoles, } from './security/operator-roles.js';
// Transparency (EU AI Act)
export { TransparencyInjector, } from './governance/transparency-injector.js';
// Webhook Delivery (SIEM integration)
export { WebhookDelivery, } from './audit/webhook-delivery.js';
// Data Subject Rights (GDPR Art. 15-22)
export { DataSubjectRights, } from './governance/data-subject-rights.js';
// Log Rotation
export { LogRotation, } from './util/log-rotation.js';
// Shared State Manager
export { StateManager, } from './governance/state-manager.js';
// Quarterly Access Review
export { AccessReview, } from './security/access-review.js';
// Pluggable Storage Backend
export { FileSystemBackend, CURRENT_SCHEMA_VERSION, } from './util/storage-backend.js';
// Session Timeout Enforcement
export { SessionTimeout, TIMEOUT_PRESETS, } from './security/session-timeout.js';
// Async I/O Utilities
export { ensureDirAsync, appendJsonlAsync, readJsonlAsync, loadJsonAsync, saveJsonAsync, sha256FileAsync, readFromOffsetAsync, readLastLinesAsync, fileExistsAsync, fileStatsAsync, } from './util/async-io.js';
// HMAC-Signed Hash Manifests
export { HashManifest, } from './security/hash-manifest.js';
// Encrypted Storage (AES-256-GCM at rest)
export { EncryptedStorage, } from './security/encrypted-storage.js';
// Key Management & Rotation
export { KeyManager, } from './security/key-manager.js';
// Bias Monitor (EU AI Act Art. 9) (T-072)
export { BiasMonitor, } from './governance/bias-monitor.js';
// Post-Market Monitor (EU AI Act Art. 72) (T-074)
export { PostMarketMonitor, } from './governance/post-market-monitor.js';
// Cross-Agent Anomaly Correlation (T-071)
export { AnomalyCorrelator, } from './security/anomaly-correlator.js';
// EU AI Act Art. 5 Prohibited Practices (T-073)
export { ProhibitedPractices, } from './governance/prohibited-practices.js';
// Vendor Registry & Risk Scoring
export { VendorRegistry, } from './security/vendor-registry.js';
// Platform Adapters
export { BaseGovernanceAdapter, ActionDecisionType, allow, deny, requireApproval, createActionContext, } from './adapters/index.js';
export { OpenAIAdapter, } from './llm-adapters/openai.js';
// Gemini Adapter
export { GeminiAdapter, } from './llm-adapters/gemini.js';
// Orchestrator Adapter (Paperclip, CrewAI, AutoGen, LangGraph)
export { OrchestratorGovernanceAdapter, } from './orchestrator-adapters/orchestrator-adapter.js';
// Paperclip Adapter (first concrete orchestrator implementation)
export { PaperclipAdapter, } from './orchestrator-adapters/paperclip-adapter.js';
// Multi-Tenancy
export { MultiTenantGovernance, TenantNotFoundError, } from './governance/multi-tenant.js';
// Plugin System
export { PluginRegistry, PluginValidationError, } from './governance/plugin-system.js';
// License (JWT-based validation and issuance)
export { JwtValidator, JwtIssuer, TIER_LIMITS, } from './license/index.js';
// Governed Agent (Layer 1 entry point)
export { createGovernedAgent, } from './governed-agent.js';
// Governance Reporter (SDK Event Streaming)
export { GovernanceReporter, } from './reporting/governance-reporter.js';
// Policy Tuning (False Positive Reduction)
export { PolicyTuningEngine, } from './governance/policy-tuning.js';
// Channel Partner Management
export { PartnerManager, } from './governance/partner-manager.js';
// ---------------------------------------------------------------------------
// P3-T1 Memory Governance (Group 2)
// ---------------------------------------------------------------------------
// Session-scoped memory with auto-clear
export { SessionMemoryStore, SessionMemoryExpiredError, } from './governance/memory/session-memory.js';
// Cross-session memory with pseudonymisation
export { CrossSessionMemoryStore, ReidentificationTokenRequiredError, InvalidReidentificationTokenError, PACK_POLICIES, } from './governance/memory/cross-session-memory.js';
// Memory-state audit chain verification
export { MemoryChainVerifier, MemoryPoisoningDetectedError, } from './governance/memory/memory-chain.js';
// Retrieval source allowlisting
export { RetrievalAllowlistEnforcer, UnauthorizedRetrievalSourceError, } from './governance/memory/retrieval-allowlist.js';
// ---------------------------------------------------------------------------
// Team Workspace + RBAC + Org-level Policy Inheritance (team-tier substrate)
// ---------------------------------------------------------------------------
export { WorkspaceStore, WorkspaceMemberStore, getWorkspaceStore, getWorkspaceMemberStore, __resetWorkspaceStoresForTest, } from './tenant/workspace.js';
export { WorkspacePermission, WORKSPACE_ROLE_PERMISSIONS, hasWorkspacePermission, requireRole, requirePermission, WorkspaceAuthError, } from './tenant/rbac.js';
export { PolicyInheritanceResolver, PolicyWeakeningRefusedError, getPolicyInheritanceResolver, __resetPolicyResolverForTest, } from './tenant/policy-inheritance.js';
// ---------------------------------------------------------------------------
// P3-SUB-ADAPT-01: Claude Agent SDK / Managed Agents adapter
// ---------------------------------------------------------------------------
export { ClaudeAgentSdkAdapter, UnboundDataError, WebAccessDeniedError, PhantomAgentError, SubscriptionGateError, } from './orchestrator-adapters/claude-agent-sdk.js';
// Google Agent Development Kit (ADK) orchestrator adapter (P3-SUB-ADAPT-02)
export { GoogleAdkAdapter, AdkUnboundDataError, AdkBaaRegionError, AdkSubscriptionGateError, VERTEX_AI_BAA_REGIONS, } from './orchestrator-adapters/google-adk.js';
// AWS Bedrock AgentCore orchestrator adapter (P3-SUB-ADAPT-03)
export { BedrockAgentCoreAdapter, BedrockBaaRegionError, BedrockUnboundDataError, BedrockKbPhiError, BEDROCK_BAA_REGIONS, } from './orchestrator-adapters/bedrock-agentcore.js';
// deepagents orchestrator adapter (P3-SUB-ADAPT-06, layered on LangGraph)
export { DeepAgentsAdapter, } from './orchestrator-adapters/deepagents.js';
// LlamaIndex Agents orchestrator adapter (P3-SUB-ADAPT-04)
export { LlamaIndexAdapter, LlamaIndexUnboundDataError, LlamaIndexPhiRetrievalError, LlamaIndexSynthesisPhiError, LlamaIndexReactObservationLeakError, HEALTHCARE_DOC_KEYWORDS, } from './orchestrator-adapters/llamaindex.js';
// Haystack Agents (deepset) orchestrator adapter (P3-SUB-ADAPT-05)
export { HaystackAdapter, HaystackUnboundDataError, HaystackNonBaaProviderError, HaystackGdprErasureRequestEvent, HAYSTACK_BAA_BACKENDS, } from './orchestrator-adapters/haystack.js';
// OpenClaw orchestrator adapter (P3-SUB-ADAPT-07)
export { OpenClawAdapter, OpenClawUnboundDataError, OpenClawMemoryPhiError, OpenClawUnsanctionedWorkspaceError, } from './orchestrator-adapters/openclaw.js';
// Raw HTTP Interception (CrabTrap-style governance net) — P3-SUB
export { RawHttpInterceptor, HttpRequestBlockedError, HttpInterceptorConfigError, UnboundHttpRequestError, redactBody, getDefaultInterceptor, clearDefaultInterceptor, } from './security/http-interceptor.js';
export { BUILT_IN_LLM_PROVIDERS, BUILT_IN_LLM_HOSTNAMES, } from './security/built-in-llm-providers.js';
export { SecretLeakDetector, } from './security/secret-leak-detector.js';
// CR-CRIT-01 SDK passport surface (2026-05-12). Customers call issuePassport()
// to obtain a signed passport from the trust-api daemon and verifyInboundPassport()
// to verify passports offline against the cached platform CA public key.
export { issuePassport, verifyInboundPassport, } from './trust-passport/index.js';
//# sourceMappingURL=index.js.map