Exporting Reports

GET /api/export?scan_id={id}

{
  "report": {
    "generated_at": "2026-02-28T10:30:00Z",
    "policy": {
      "id": "abc-123",
      "name": "AML FinCEN Compliance"
    },
    "scan": {
      "id": "def-456",
      "score": 87.5,
      "violation_count": 23,
      "scan_date": "2026-02-28T10:15:00Z"
    },
    "violations": [
      {
        "id": "viol-001",
        "rule_id": "aml_rule_1",
        "rule_name": "Currency Transaction Report (CTR)",
        "severity": "CRITICAL",
        "account": "C123456789",
        "amount": 15750.00,
        "transaction_type": "WIRE",
        "evidence": {
          "account": "C123456789",
          "recipient": "C987654321",
          "amount": 15750.00,
          "type": "WIRE",
          "timestamp": "2024-03-15T14:32:00Z"
        },
        "threshold": 10000,
        "actual_value": 15750.00,
        "policy_excerpt": "Financial institutions must file a Currency Transaction Report for cash transactions over $10,000.",
        "policy_section": "31 CFR 1010.311",
        "explanation": "This transaction exceeds the CTR threshold of $10,000...",
        "status": "approved",
        "review_note": "Confirmed with compliance team - no CTR on file",
        "reviewed_by": "user-789",
        "reviewed_at": "2026-02-28T10:25:00Z",
        "created_at": "2026-02-28T10:18:32Z"
      }
    ],
    "reviews": [
      {
        "violation_id": "viol-001",
        "status": "approved",
        "reviewer": "user-789",
        "note": "Confirmed with compliance team - no CTR on file",
        "timestamp": "2026-02-28T10:25:00Z"
      }
    ],
    "summary": {
      "total_violations": 23,
      "critical_severity": 5,
      "high_severity": 12,
      "medium_severity": 6
    }
  }
}

# Export and archive the report
curl -H "Authorization: Bearer $TOKEN" \
  "https://your-app.vercel.app/api/export?scan_id=abc-123" \
  > "compliance-report-2024-03-15.json"

# Store in S3 for long-term retention
aws s3 cp compliance-report-2024-03-15.json \
  s3://compliance-archives/2024/03/

import { api } from './lib/api';

// Fetch the report
const { report } = await api.get('/export', { scan_id: scanId });

// Create Jira tickets for Critical violations
for (const violation of report.violations) {
  if (violation.severity === 'CRITICAL' && violation.status === 'pending') {
    await createJiraTicket({
      summary: `[Compliance] ${violation.rule_name}`,
      description: `
        **Account**: ${violation.account}
        **Policy**: ${violation.policy_section}
        **Explanation**: ${violation.explanation}
        **Evidence**: ${JSON.stringify(violation.evidence, null, 2)}
      `,
      priority: 'Highest',
      labels: ['compliance', 'critical'],
    });
  }
}

// Aggregate violations by rule
const violationsByRule = report.violations.reduce((acc, v) => {
  acc[v.rule_id] = (acc[v.rule_id] || 0) + 1;
  return acc;
}, {} as Record<string, number>);

// Find noisiest rules
const noisyRules = Object.entries(violationsByRule)
  .sort(([, a], [, b]) => b - a)
  .slice(0, 5);

console.log('Top 5 noisiest rules:', noisyRules);

// Export multiple scans
const scan1 = await api.get('/export', { scan_id: 'scan-1' });
const scan2 = await api.get('/export', { scan_id: 'scan-2' });

// Compare scores
const scoreDelta = scan2.report.scan.score - scan1.report.scan.score;

if (scoreDelta > 0) {
  console.log(`✅ Compliance improved by ${scoreDelta.toFixed(1)} points`);
} else {
  console.log(`❌ Compliance declined by ${Math.abs(scoreDelta).toFixed(1)} points`);
}

// Compare violation counts by severity
const criticalDelta =
  scan2.report.summary.critical_severity - scan1.report.summary.critical_severity;

console.log(`Critical violations: ${criticalDelta > 0 ? '+' : ''}${criticalDelta}`);

// Generate a text summary from the export
function generateSummary(report: any): string {
  const { scan, summary, violations } = report;
  const approvedCount = violations.filter((v: any) => v.status === 'approved').length;
  const falsePositiveCount = violations.filter(
    (v: any) => v.status === 'false_positive'
  ).length;

  return `
Compliance Report - ${new Date(scan.scan_date).toLocaleDateString()}

Compliance Score: ${scan.score.toFixed(1)}/100

Violation Summary:
- Total: ${summary.total_violations}
- Critical: ${summary.critical_severity}
- High: ${summary.high_severity}
- Medium: ${summary.medium_severity}

Review Status:
- Confirmed: ${approvedCount}
- False Positives: ${falsePositiveCount}
- Pending: ${summary.total_violations - approvedCount - falsePositiveCount}

Recommendation:
${scan.score >= 90 ? '✅ System is compliant.' : '⚠️  Address Critical and High violations immediately.'}
  `.trim();
}

const summary = generateSummary(report.report);
console.log(summary);

// Get only confirmed violations
const confirmedViolations = report.violations.filter(
  (v) => v.status === 'approved'
);

// Get only Critical violations
const criticalViolations = report.violations.filter(
  (v) => v.severity === 'CRITICAL'
);

// Get unreviewed violations
const pendingViolations = report.violations.filter(
  (v) => v.status === 'pending'
);