@mitre/hdf-converters 2.12.6 → 3.0.0

package/dist/converters/oscal-to-hdf/typescript/converter-sar.js

@@ -0,0 +1,270 @@
+/**
+ * OSCAL Assessment Results (SAR) to HDF Results converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_sar.go.
+ */
+import { parseJSON } from '@mitre/hdf-utilities';
+import { inputChecksum, inputIntegrity, validateInputSize } from '../../../shared/typescript/converterutil.js';
+import { ResultStatus, createMinimalBaseline, createRequirement, createResult, } from '@mitre/hdf-schema';
+import { controlIdToNistTag, extractControlIdFromObjectiveId, oscalStatusToHdf, extractRiskSeverity, extractMetadata, toKebabCase, } from './shared.js';
+/**
+ * Converts an OSCAL Assessment Results (SAR) document to HDF Results JSON.
+ *
+ * @param input - Raw JSON string containing OSCAL assessment-results
+ * @returns HDF Results JSON string
+ */
+export async function convertOscalSarToHdf(input) {
+    validateInputSize(input, 'oscal-assessment-results');
+    if (!input || input.trim().length === 0) {
+        throw new Error('empty input');
+    }
+    const doc = parseJSON(input);
+    if (!doc['assessment-results']) {
+        throw new Error("oscal-assessment-results: input is not an assessment-results document (root key is not 'assessment-results')");
+    }
+    const sar = doc['assessment-results'];
+    const meta = extractMetadata(sar.metadata);
+    const baselines = [];
+    for (const result of sar.results) {
+        const baseline = await resultToEvaluatedBaseline(result, sar, input);
+        baselines.push(baseline);
+    }
+    // Extract planRef from import-ap
+    const planRef = sar['import-ap']?.href || undefined;
+    // Parse timestamp from metadata
+    let timestamp;
+    if (meta.lastModified) {
+        const t = new Date(meta.lastModified);
+        if (!isNaN(t.getTime())) {
+            timestamp = t;
+        }
+    }
+    const hdf = {
+        baselines,
+        generator: {
+            name: 'oscal-assessment-results-to-hdf',
+            version: '1.0.0',
+        },
+        tool: {
+            name: 'OSCAL Assessment Results',
+            format: 'OSCAL',
+        },
+        timestamp: timestamp ?? new Date(),
+        planRef,
+    };
+    return JSON.stringify(hdf, null, 2);
+}
+async function resultToEvaluatedBaseline(result, sar, rawInput) {
+    const checksum = await inputChecksum(rawInput);
+    // Build lookup maps for observations and risks
+    const obsMap = buildObservationMap(result.observations ?? []);
+    const riskMap = buildRiskMap(result.risks ?? []);
+    // Group findings by control ID, preserving insertion order
+    const controlOrder = [];
+    const controlMap = new Map();
+    for (const f of result.findings ?? []) {
+        const controlId = extractControlIdFromFinding(f);
+        const existing = controlMap.get(controlId);
+        if (existing) {
+            existing.push(f);
+        }
+        else {
+            controlOrder.push(controlId);
+            controlMap.set(controlId, [f]);
+        }
+    }
+    // Build requirements in insertion order
+    const requirements = [];
+    for (const controlId of controlOrder) {
+        const findings = controlMap.get(controlId);
+        const req = findingsToEvaluatedRequirement(controlId, findings, obsMap, riskMap, result);
+        requirements.push(req);
+    }
+    // Derive baseline name
+    const name = sarBaselineName(result, sar);
+    const baseline = createMinimalBaseline(name, requirements, {
+        resultsChecksum: checksum,
+        integrity: await inputIntegrity(rawInput),
+        status: 'loaded',
+        title: result.title,
+    });
+    if (result.description) {
+        baseline.description = result.description;
+    }
+    return baseline;
+}
+function findingsToEvaluatedRequirement(controlId, findings, obsMap, riskMap, result) {
+    const nistTag = controlIdToNistTag(controlId);
+    // Use the first finding for title
+    const firstFinding = findings[0];
+    const title = firstFinding.title || nistTag;
+    // Determine impact from related risks
+    const impact = sarFindingsImpact(findings, riskMap);
+    // Build descriptions from findings and observations
+    const descriptions = sarBuildDescriptions(findings, obsMap);
+    // Build results from each finding
+    const results = [];
+    for (const f of findings) {
+        results.push(findingToRequirementResult(f, obsMap, riskMap, result));
+    }
+    const tags = {
+        nist: [nistTag],
+    };
+    return createRequirement(nistTag, title, descriptions, impact, results, { tags });
+}
+function findingToRequirementResult(f, obsMap, riskMap, result) {
+    const status = mapFindingStatus(f);
+    const codeDesc = buildCodeDesc(f, obsMap);
+    const message = buildRiskMessage(f, riskMap);
+    const startTime = parseResultStartTime(result);
+    return createResult(status, message || undefined, {
+        codeDesc,
+        startTime: startTime.getTime() > 0 ? startTime : undefined,
+    });
+}
+function extractControlIdFromFinding(f) {
+    const targetId = f.target['target-id'];
+    if (!targetId)
+        return 'unknown';
+    // For objective-id and statement-id, extract the base control ID
+    let controlId = extractControlIdFromObjectiveId(targetId);
+    // Handle statement-id format: "au-1_smt.a" -> "au-1"
+    const idx = controlId.indexOf('_');
+    if (idx > 0) {
+        controlId = controlId.slice(0, idx);
+    }
+    return controlId;
+}
+function mapFindingStatus(f) {
+    const status = oscalStatusToHdf(f.target.status.state);
+    if (status === 'passed')
+        return ResultStatus.Passed;
+    if (status === 'failed')
+        return ResultStatus.Failed;
+    return ResultStatus.NotReviewed;
+}
+function buildCodeDesc(f, obsMap) {
+    const parts = [];
+    for (const ref of f['related-observations'] ?? []) {
+        const obsUuid = ref['observation-uuid'];
+        if (!obsUuid)
+            continue;
+        const obs = obsMap.get(obsUuid);
+        if (!obs)
+            continue;
+        if (obs.methods && obs.methods.length > 0) {
+            parts.push('Methods: ' + obs.methods.join(', '));
+        }
+        for (const subj of obs.subjects ?? []) {
+            let subjDesc = subj.type;
+            if (subj.title) {
+                subjDesc = subj.title + ' (' + subj.type + ')';
+            }
+            parts.push('Subject: ' + subjDesc);
+        }
+    }
+    if (parts.length === 0)
+        return f.title;
+    return parts.join('; ');
+}
+function buildRiskMessage(f, riskMap) {
+    const messages = [];
+    for (const ref of f['related-risks'] ?? []) {
+        const riskUuid = ref['risk-uuid'];
+        if (!riskUuid)
+            continue;
+        const risk = riskMap.get(riskUuid);
+        if (!risk)
+            continue;
+        let msg = risk.title;
+        if (risk.description) {
+            msg += ': ' + risk.description;
+        }
+        messages.push(msg);
+    }
+    return messages.join('\n');
+}
+function sarFindingsImpact(findings, riskMap) {
+    let highestImpact = -1.0;
+    for (const f of findings) {
+        for (const ref of f['related-risks'] ?? []) {
+            const riskUuid = ref['risk-uuid'];
+            if (!riskUuid)
+                continue;
+            const risk = riskMap.get(riskUuid);
+            if (!risk)
+                continue;
+            const impact = extractRiskSeverity(risk.characterizations, -1.0);
+            if (impact > highestImpact) {
+                highestImpact = impact;
+            }
+        }
+    }
+    if (highestImpact < 0)
+        return 0.5; // default medium impact
+    return highestImpact;
+}
+function sarBuildDescriptions(findings, obsMap) {
+    const descriptions = [];
+    // Default description from finding descriptions
+    const findingDescs = [];
+    for (const f of findings) {
+        if (f.description) {
+            findingDescs.push(f.description);
+        }
+    }
+    descriptions.push({
+        label: 'default',
+        data: findingDescs.join('\n') || '',
+    });
+    // Rationale from observation descriptions
+    const obsDescs = [];
+    const seen = new Set();
+    for (const f of findings) {
+        for (const ref of f['related-observations'] ?? []) {
+            const obsUuid = ref['observation-uuid'];
+            if (!obsUuid || seen.has(obsUuid))
+                continue;
+            seen.add(obsUuid);
+            const obs = obsMap.get(obsUuid);
+            if (obs?.description) {
+                obsDescs.push(obs.description);
+            }
+        }
+    }
+    if (obsDescs.length > 0) {
+        descriptions.push({
+            label: 'rationale',
+            data: obsDescs.join('\n'),
+        });
+    }
+    return descriptions;
+}
+function buildObservationMap(observations) {
+    const m = new Map();
+    for (const obs of observations) {
+        m.set(obs.uuid, obs);
+    }
+    return m;
+}
+function buildRiskMap(risks) {
+    const m = new Map();
+    for (const risk of risks) {
+        m.set(risk.uuid, risk);
+    }
+    return m;
+}
+function parseResultStartTime(result) {
+    if (result.start) {
+        const t = new Date(result.start);
+        if (!isNaN(t.getTime())) {
+            return t;
+        }
+    }
+    return new Date(0);
+}
+function sarBaselineName(result, sar) {
+    const title = result.title || sar.metadata.title;
+    return toKebabCase(title, 'oscal-assessment-results');
+}
+//# sourceMappingURL=converter-sar.js.map

package/dist/converters/oscal-to-hdf/typescript/converter-sar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-sar.js","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-sar.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAO/G,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,GAEb,MAAM,mBAAmB,CAAC;AAS3B,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAa;IACtD,iBAAiB,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAErD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAQ,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE3C,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACrE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,iCAAiC;IACjC,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,IAAI,SAAS,CAAC;IAEpD,gCAAgC;IAChC,IAAI,SAA2B,CAAC;IAChC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACxB,SAAS,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAe;QACtB,SAAS;QACT,SAAS,EAAE;YACT,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,OAAO;SACjB;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,0BAA0B;YAChC,MAAM,EAAE,OAAO;SAChB;QACD,SAAS,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE;QAClC,OAAO;KACR,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,MAAwB,EACxB,GAAiC,EACjC,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAE/C,+CAA+C;IAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAEjD,2DAA2D;IAC3D,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAqB,CAAC;IAEhD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,8BAA8B,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzF,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,uBAAuB;IACvB,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,YAAY,EAAE;QACzD,eAAe,EAAE,QAAQ;QACzB,SAAS,EAAE,MAAM,cAAc,CAAC,QAAQ,CAAC;QACzC,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAsB,CAAC;IAExB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACtB,QAAoC,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACzE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,8BAA8B,CACrC,SAAiB,EACjB,QAAmB,EACnB,MAAgC,EAChC,OAAoC,EACpC,MAAwB;IAExB,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAE9C,kCAAkC;IAClC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAClC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,IAAI,OAAO,CAAC;IAE5C,sCAAsC;IACtC,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEpD,oDAAoD;IACpD,MAAM,YAAY,GAAG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE5D,kCAAkC;IAClC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,CAAC,OAAO,CAAC;KAChB,CAAC;IAEF,OAAO,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,0BAA0B,CACjC,CAAU,EACV,MAAgC,EAChC,OAAoC,EACpC,MAAwB;IAExB,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE/C,OAAO,YAAY,CAAC,MAAM,EAAE,OAAO,IAAI,SAAS,EAAE;QAChD,QAAQ;QACR,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAAC,CAAU;IAC7C,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,iEAAiE;IACjE,IAAI,SAAS,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAE1D,qDAAqD;IACrD,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,MAAM,CAAC;IACpD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,MAAM,CAAC;IACpD,OAAO,YAAY,CAAC,WAAW,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,CAAU,EAAE,MAAgC;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACzB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,QAAQ,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;YACjD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IAEvC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU,EAAE,OAAoC;IACxE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,IAAI,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAmB,EACnB,OAAoC;IAEpC,IAAI,aAAa,GAAG,CAAC,GAAG,CAAC;IAEzB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;YAClC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;gBAC3B,aAAa,GAAG,MAAM,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,aAAa,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,wBAAwB;IAC3D,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAmB,EACnB,MAAgC;IAEhC,MAAM,YAAY,GAAkB,EAAE,CAAC;IAEvC,gDAAgD;IAChD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAClB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,YAAY,CAAC,IAAI,CAAC;QAChB,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;KACpC,CAAC,CAAC;IAEH,0CAA0C;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC5C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,GAAG,EAAE,WAAW,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,YAAY,CAAC,IAAI,CAAC;YAChB,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,mBAAmB,CAAC,YAA2B;IACtD,MAAM,CAAC,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB;IAC3C,MAAM,CAAC,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAwB;IACpD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,MAAwB,EAAE,GAAiC;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;IACjD,OAAO,WAAW,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;AACxD,CAAC"}

package/dist/converters/oscal-to-hdf/typescript/converter-ssp.d.ts

@@ -0,0 +1,13 @@
+/**
+ * OSCAL System Security Plan (SSP) to HDF System converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_ssp.go.
+ */
+/**
+ * Converts an OSCAL System Security Plan document to HDF System JSON.
+ *
+ * @param input - Raw JSON string containing an OSCAL SSP
+ * @returns HDF System JSON string
+ */
+export declare function convertOscalSspToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter-ssp.d.ts.map

package/dist/converters/oscal-to-hdf/typescript/converter-ssp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-ssp.d.ts","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-ssp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAqBH;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoFzE"}

package/dist/converters/oscal-to-hdf/typescript/converter-ssp.js

@@ -0,0 +1,246 @@
+/**
+ * OSCAL System Security Plan (SSP) to HDF System converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_ssp.go.
+ */
+import { parseJSON } from '@mitre/hdf-utilities';
+import { inputIntegrity, validateInputSize } from '../../../shared/typescript/converterutil.js';
+import { AuthorizationStatus, CategorizationLevel, BoundaryDescription, } from '@mitre/hdf-schema';
+import { controlIdToNistTag, extractMetadata } from './shared.js';
+/**
+ * Converts an OSCAL System Security Plan document to HDF System JSON.
+ *
+ * @param input - Raw JSON string containing an OSCAL SSP
+ * @returns HDF System JSON string
+ */
+export async function convertOscalSspToHdf(input) {
+    validateInputSize(input, 'oscal-ssp');
+    if (!input || input.trim().length === 0) {
+        throw new Error('empty input');
+    }
+    const doc = parseJSON(input);
+    if (!doc['system-security-plan']) {
+        throw new Error("oscal-ssp: input is not a system-security-plan document (root key is not 'system-security-plan')");
+    }
+    const ssp = doc['system-security-plan'];
+    const integrity = await inputIntegrity(input);
+    const system = {
+        name: sspSystemName(ssp),
+        integrity,
+        components: [],
+        generator: {
+            name: 'hdf-converters',
+            version: '1.0.0',
+        },
+    };
+    // Map system characteristics
+    const sc = ssp['system-characteristics'];
+    if (sc) {
+        if (sc.description) {
+            let desc = sc.description;
+            if (sc['authorization-boundary']?.description) {
+                desc += '\n\nAuthorization Boundary: ' + sc['authorization-boundary'].description;
+            }
+            system.description = desc;
+        }
+        // Map categorization level from security impact level
+        const sil = sc['security-impact-level'];
+        if (sil) {
+            system.categorizationLevel = sspCategorizationLevel(sil) ?? undefined;
+        }
+        else if (sc['security-sensitivity-level']) {
+            system.categorizationLevel = mapSensitivityToCategorizationLevel(sc['security-sensitivity-level']) ?? undefined;
+        }
+        // Map authorization status from system status
+        if (sc.status) {
+            system.authorizationStatus = sspAuthorizationStatus(sc.status.state) ?? undefined;
+        }
+        // Map boundary description
+        if (sc['authorization-boundary']?.description) {
+            system.boundaryDescription = sc['authorization-boundary'].description;
+        }
+        // Map system identifier
+        const systemIds = sc['system-ids'];
+        if (systemIds && systemIds.length > 0) {
+            system.identifier = systemIds[0].id;
+            if (systemIds[0]['identifier-type']) {
+                system.identifierScheme = systemIds[0]['identifier-type'];
+            }
+        }
+    }
+    // Map version from metadata
+    const meta = extractMetadata(ssp.metadata);
+    if (meta.version) {
+        system.version = meta.version;
+    }
+    // Build component-UUID -> control-ID mapping
+    const componentControls = buildComponentControlMap(ssp['control-implementation']);
+    // Map system-implementation components to HDF Components
+    const si = ssp['system-implementation'];
+    if (si?.components) {
+        for (const comp of si.components) {
+            system.components.push(sspComponentToHDFComponent(comp, componentControls));
+        }
+    }
+    return JSON.stringify(system, null, 2);
+}
+function sspSystemName(ssp) {
+    const sc = ssp['system-characteristics'];
+    if (sc?.['system-name']) {
+        return sc['system-name'];
+    }
+    if (ssp.metadata.title) {
+        return ssp.metadata.title;
+    }
+    return 'oscal-ssp';
+}
+function sspCategorizationLevel(sil) {
+    const levels = [
+        sil['security-objective-confidentiality'] ?? '',
+        sil['security-objective-integrity'] ?? '',
+        sil['security-objective-availability'] ?? '',
+    ];
+    let highest = '';
+    for (const l of levels) {
+        const normalized = normalizeFIPSLevel(l);
+        if (fipsLevelRank(normalized) > fipsLevelRank(highest)) {
+            highest = normalized;
+        }
+    }
+    if (!highest)
+        return null;
+    switch (highest) {
+        case 'high':
+            return CategorizationLevel.High;
+        case 'moderate':
+            return CategorizationLevel.Moderate;
+        case 'low':
+            return CategorizationLevel.Low;
+        default:
+            return null;
+    }
+}
+function normalizeFIPSLevel(level) {
+    let lower = level.toLowerCase();
+    lower = lower.replace(/^fips-199-/, '');
+    switch (lower) {
+        case 'high':
+            return 'high';
+        case 'moderate':
+        case 'medium':
+            return 'moderate';
+        case 'low':
+            return 'low';
+        default:
+            return '';
+    }
+}
+function fipsLevelRank(level) {
+    switch (level) {
+        case 'high':
+            return 3;
+        case 'moderate':
+            return 2;
+        case 'low':
+            return 1;
+        default:
+            return 0;
+    }
+}
+function mapSensitivityToCategorizationLevel(level) {
+    const normalized = normalizeFIPSLevel(level);
+    if (!normalized)
+        return null;
+    switch (normalized) {
+        case 'high':
+            return CategorizationLevel.High;
+        case 'moderate':
+            return CategorizationLevel.Moderate;
+        case 'low':
+            return CategorizationLevel.Low;
+        default:
+            return null;
+    }
+}
+function sspAuthorizationStatus(state) {
+    switch (state.toLowerCase()) {
+        case 'operational':
+            return AuthorizationStatus.Authorized;
+        case 'under-development':
+            return AuthorizationStatus.PendingAuthorization;
+        case 'disposition':
+            return AuthorizationStatus.Revoked;
+        case 'other':
+            return AuthorizationStatus.NotYetRequested;
+        default:
+            return null;
+    }
+}
+function buildComponentControlMap(ci) {
+    const result = new Map();
+    if (!ci)
+        return result;
+    for (const ir of ci['implemented-requirements'] ?? []) {
+        const controlId = ir['control-id'];
+        // Direct by-components on the implemented-requirement
+        for (const bc of ir['by-components'] ?? []) {
+            addComponentControl(result, bc['component-uuid'], controlId);
+        }
+        // by-components within statements
+        for (const stmt of ir.statements ?? []) {
+            for (const bc of stmt['by-components'] ?? []) {
+                addComponentControl(result, bc['component-uuid'], controlId);
+            }
+        }
+    }
+    return result;
+}
+function addComponentControl(m, compUUID, controlId) {
+    let controls = m.get(compUUID);
+    if (!controls) {
+        controls = new Set();
+        m.set(compUUID, controls);
+    }
+    controls.add(controlId);
+}
+function sspComponentToHDFComponent(sc, componentControls) {
+    const comp = {
+        name: sc.title,
+        type: mapOSCALComponentType(sc.type),
+    };
+    if (sc.description) {
+        comp.description = sc.description;
+    }
+    // Add control IDs as baseline refs (NIST notation)
+    const controls = componentControls.get(sc.uuid);
+    if (controls && controls.size > 0) {
+        const refs = [];
+        for (const controlId of controls) {
+            refs.push(controlIdToNistTag(controlId));
+        }
+        if (refs.length > 0) {
+            comp.baselineRefs = refs;
+        }
+    }
+    return comp;
+}
+function mapOSCALComponentType(oscalType) {
+    switch (oscalType.toLowerCase()) {
+        case 'software':
+        case 'this-system':
+            return BoundaryDescription.Application;
+        case 'service':
+            return BoundaryDescription.Application;
+        case 'hardware':
+            return BoundaryDescription.Host;
+        case 'network':
+            return BoundaryDescription.Network;
+        case 'database':
+            return BoundaryDescription.Database;
+        case 'storage':
+            return BoundaryDescription.Artifact;
+        default:
+            return BoundaryDescription.Application;
+    }
+}
+//# sourceMappingURL=converter-ssp.js.map

package/dist/converters/oscal-to-hdf/typescript/converter-ssp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-ssp.js","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-ssp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAEhG,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAU3B,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAElE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAa;IACtD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAEtC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAQ,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAE9C,MAAM,MAAM,GAAc;QACxB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC;QACxB,SAAS;QACT,UAAU,EAAE,EAAE;QACd,SAAS,EAAE;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;SACjB;KACF,CAAC;IAEF,6BAA6B;IAC7B,MAAM,EAAE,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACzC,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC;YAC1B,IAAI,EAAE,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,CAAC;gBAC9C,IAAI,IAAI,8BAA8B,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,WAAW,CAAC;YACpF,CAAC;YACD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,sDAAsD;QACtD,MAAM,GAAG,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC;QACxC,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,mBAAmB,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;QACxE,CAAC;aAAM,IAAI,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC;YAC5C,MAAM,CAAC,mBAAmB,GAAG,mCAAmC,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,IAAI,SAAS,CAAC;QAClH,CAAC;QAED,8CAA8C;QAC9C,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YACd,MAAM,CAAC,mBAAmB,GAAG,sBAAsB,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;QACpF,CAAC;QAED,2BAA2B;QAC3B,IAAI,EAAE,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,CAAC;YAC9C,MAAM,CAAC,mBAAmB,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,WAAW,CAAC;QACxE,CAAC;QAED,wBAAwB;QACxB,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;QACnC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACrC,IAAI,SAAS,CAAC,CAAC,CAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,iBAAiB,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAChC,CAAC;IAED,6CAA6C;IAC7C,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAElF,yDAAyD;IACzD,MAAM,EAAE,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACxC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,GAA0B;IAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACzC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAAwB;IAExB,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,oCAAoC,CAAC,IAAI,EAAE;QAC/C,GAAG,CAAC,8BAA8B,CAAC,IAAI,EAAE;QACzC,GAAG,CAAC,iCAAiC,CAAC,IAAI,EAAE;KAC7C,CAAC;IAEF,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,OAAO,GAAG,UAAU,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,mBAAmB,CAAC,IAAI,CAAC;QAClC,KAAK,UAAU;YACb,OAAO,mBAAmB,CAAC,QAAQ,CAAC;QACtC,KAAK,KAAK;YACR,OAAO,mBAAmB,CAAC,GAAG,CAAC;QACjC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAChC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACxC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,UAAU,CAAC;QACpB,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM;YACT,OAAO,CAAC,CAAC;QACX,KAAK,UAAU;YACb,OAAO,CAAC,CAAC;QACX,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;QACX;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,mCAAmC,CAC1C,KAAa;IAEb,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,mBAAmB,CAAC,IAAI,CAAC;QAClC,KAAK,UAAU;YACb,OAAO,mBAAmB,CAAC,QAAQ,CAAC;QACtC,KAAK,KAAK;YACR,OAAO,mBAAmB,CAAC,GAAG,CAAC;QACjC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,QAAQ,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,KAAK,aAAa;YAChB,OAAO,mBAAmB,CAAC,UAAU,CAAC;QACxC,KAAK,mBAAmB;YACtB,OAAO,mBAAmB,CAAC,oBAAoB,CAAC;QAClD,KAAK,aAAa;YAChB,OAAO,mBAAmB,CAAC,OAAO,CAAC;QACrC,KAAK,OAAO;YACV,OAAO,mBAAmB,CAAC,eAAe,CAAC;QAC7C;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,EAA0C;IAE1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,IAAI,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAEvB,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;QAEnC,sDAAsD;QACtD,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,mBAAmB,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/D,CAAC;QAED,kCAAkC;QAClC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACvC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7C,mBAAmB,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAC1B,CAA2B,EAC3B,QAAgB,EAChB,SAAiB;IAEjB,IAAI,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7B,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,0BAA0B,CACjC,EAA6B,EAC7B,iBAA2C;IAE3C,MAAM,IAAI,GAAiB;QACzB,IAAI,EAAE,EAAE,CAAC,KAAK;QACd,IAAI,EAAE,qBAAqB,CAAC,EAAE,CAAC,IAAI,CAAC;KACrC,CAAC;IAEF,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC;IACpC,CAAC;IAED,mDAAmD;IACnD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,QAAQ,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAChC,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,mBAAmB,CAAC,WAAW,CAAC;QACzC,KAAK,SAAS;YACZ,OAAO,mBAAmB,CAAC,WAAW,CAAC;QACzC,KAAK,UAAU;YACb,OAAO,mBAAmB,CAAC,IAAI,CAAC;QAClC,KAAK,SAAS;YACZ,OAAO,mBAAmB,CAAC,OAAO,CAAC;QACrC,KAAK,UAAU;YACb,OAAO,mBAAmB,CAAC,QAAQ,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,mBAAmB,CAAC,QAAQ,CAAC;QACtC;YACE,OAAO,mBAAmB,CAAC,WAAW,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/converters/oscal-to-hdf/typescript/detect.d.ts

@@ -0,0 +1,15 @@
+/**
+ * OSCAL document type detection.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/detect.go.
+ */
+/** The 7 valid OSCAL document type strings. */
+export type OscalDocumentType = 'catalog' | 'profile' | 'component-definition' | 'system-security-plan' | 'assessment-plan' | 'assessment-results' | 'plan-of-action-and-milestones';
+/**
+ * Parses the input JSON just enough to determine which OSCAL document type
+ * it contains. Returns one of the 7 OSCAL root key strings.
+ *
+ * @throws Error if the input is not valid OSCAL
+ */
+export declare function detectOscalDocumentType(input: string): OscalDocumentType;
+//# sourceMappingURL=detect.d.ts.map

package/dist/converters/oscal-to-hdf/typescript/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/detect.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,+CAA+C;AAC/C,MAAM,MAAM,iBAAiB,GACzB,SAAS,GACT,SAAS,GACT,sBAAsB,GACtB,sBAAsB,GACtB,iBAAiB,GACjB,oBAAoB,GACpB,+BAA+B,CAAC;AAEpC;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAgBxE"}

package/dist/converters/oscal-to-hdf/typescript/detect.js

@@ -0,0 +1,33 @@
+/**
+ * OSCAL document type detection.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/detect.go.
+ */
+import { parseJSON } from '@mitre/hdf-utilities';
+/**
+ * Parses the input JSON just enough to determine which OSCAL document type
+ * it contains. Returns one of the 7 OSCAL root key strings.
+ *
+ * @throws Error if the input is not valid OSCAL
+ */
+export function detectOscalDocumentType(input) {
+    const doc = parseJSON(input);
+    if (doc.catalog)
+        return 'catalog';
+    if (doc.profile)
+        return 'profile';
+    if (doc['component-definition'])
+        return 'component-definition';
+    if (doc['system-security-plan'])
+        return 'system-security-plan';
+    if (doc['assessment-plan'])
+        return 'assessment-plan';
+    if (doc['assessment-results'])
+        return 'assessment-results';
+    if (doc['plan-of-action-and-milestones'])
+        return 'plan-of-action-and-milestones';
+    throw new Error('unrecognized OSCAL document: expected one of catalog, profile, ' +
+        'component-definition, system-security-plan, assessment-plan, ' +
+        'assessment-results, plan-of-action-and-milestones as root key');
+}
+//# sourceMappingURL=detect.js.map

package/dist/converters/oscal-to-hdf/typescript/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/detect.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAajD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,MAAM,GAAG,GAAG,SAAS,CAAQ,KAAK,CAAC,CAAC;IAEpC,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,GAAG,CAAC,sBAAsB,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC/D,IAAI,GAAG,CAAC,sBAAsB,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC/D,IAAI,GAAG,CAAC,iBAAiB,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACrD,IAAI,GAAG,CAAC,oBAAoB,CAAC;QAAE,OAAO,oBAAoB,CAAC;IAC3D,IAAI,GAAG,CAAC,+BAA+B,CAAC;QAAE,OAAO,+BAA+B,CAAC;IAEjF,MAAM,IAAI,KAAK,CACb,iEAAiE;QACjE,+DAA+D;QAC/D,+DAA+D,CAChE,CAAC;AACJ,CAAC"}

package/dist/converters/oscal-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,12 @@
+/**
+ * OSCAL document type fingerprints.
+ *
+ * Registers 7 separate ConverterFingerprint entries, one for each OSCAL
+ * document type. Each checks for its specific top-level JSON key.
+ *
+ * No converter imports — data only, safe for client bundles.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const oscalFingerprints: ConverterFingerprint[];
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/oscal-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAmB,MAAM,wCAAwC,CAAC;AA8CzI,eAAO,MAAM,iBAAiB,EAAE,oBAAoB,EAAsC,CAAC;AAE3F,wBAAgB,QAAQ,IAAI,IAAI,CAK/B"}