@mitre/hdf-converters 2.13.0 → 3.0.0

package/dist/converters/oscal-to-hdf/typescript/converter-catalog.js

@@ -0,0 +1,134 @@
+/**
+ * OSCAL Catalog to HDF Baseline converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_catalog.go.
+ */
+import { parseJSON } from '@mitre/hdf-utilities';
+import { inputIntegrity, validateInputSize } from '../../../shared/typescript/converterutil.js';
+import { controlIdToNistTag, extractPropValue, flattenPartsByName, extractMetadata, toKebabCase, } from './shared.js';
+/**
+ * Converts an OSCAL Catalog document to HDF Baseline JSON.
+ *
+ * @param input - Raw JSON string containing an OSCAL catalog
+ * @returns HDF Baseline JSON string
+ */
+export async function convertOscalCatalogToHdf(input) {
+    validateInputSize(input, 'oscal-catalog');
+    if (!input || input.trim().length === 0) {
+        throw new Error('empty input');
+    }
+    const doc = parseJSON(input);
+    if (!doc.catalog) {
+        throw new Error("oscal-catalog: input is not a catalog document (root key is not 'catalog')");
+    }
+    const baseline = await catalogToBaseline(doc.catalog, input);
+    return JSON.stringify(baseline, null, 2);
+}
+/**
+ * Shared logic: converts a parsed Catalog to HDFBaseline.
+ * Also used by the profile converter after resolving.
+ */
+export async function catalogToBaseline(catalog, rawInput) {
+    const integrity = await inputIntegrity(rawInput);
+    const meta = extractMetadata(catalog.metadata);
+    const requirements = [];
+    const groups = [];
+    for (const group of catalog.groups ?? []) {
+        const reqIDs = [];
+        for (const ctrl of group.controls ?? []) {
+            const req = controlToBaselineRequirement(ctrl);
+            requirements.push(req);
+            reqIDs.push(req.id);
+            // Include control enhancements
+            for (const enh of ctrl.controls ?? []) {
+                const enhReq = controlToBaselineRequirement(enh);
+                requirements.push(enhReq);
+                reqIDs.push(enhReq.id);
+            }
+        }
+        if (reqIDs.length > 0) {
+            groups.push({
+                id: group.id ?? '',
+                title: group.title,
+                requirements: reqIDs,
+            });
+        }
+    }
+    // Top-level controls (outside groups)
+    for (const ctrl of catalog.controls ?? []) {
+        const req = controlToBaselineRequirement(ctrl);
+        requirements.push(req);
+        for (const enh of ctrl.controls ?? []) {
+            const enhReq = controlToBaselineRequirement(enh);
+            requirements.push(enhReq);
+        }
+    }
+    const baseline = {
+        name: catalogBaselineName(catalog),
+        title: meta.title,
+        version: meta.version,
+        status: 'loaded',
+        integrity,
+        requirements,
+        groups,
+        generator: {
+            name: 'hdf-converters',
+            version: '1.0.0',
+        },
+    };
+    return baseline;
+}
+/** Converts a single OSCAL Control to an HDF BaselineRequirement. */
+function controlToBaselineRequirement(ctrl) {
+    const nistTag = controlIdToNistTag(ctrl.id);
+    const descriptions = buildCatalogDescriptions(ctrl);
+    const tags = buildCatalogTags(ctrl);
+    return {
+        id: nistTag,
+        title: ctrl.title,
+        impact: 0.5, // default for catalog controls
+        descriptions,
+        tags,
+    };
+}
+/** Creates HDF Description entries from control parts. */
+function buildCatalogDescriptions(ctrl) {
+    const descriptions = [];
+    // Statement -> default description
+    const statement = flattenPartsByName(ctrl.parts, 'statement');
+    descriptions.push({
+        label: 'default',
+        data: statement || '',
+    });
+    // Guidance -> rationale
+    const guidance = flattenPartsByName(ctrl.parts, 'guidance');
+    if (guidance) {
+        descriptions.push({ label: 'rationale', data: guidance });
+    }
+    // Assessment objective -> check
+    const check = flattenPartsByName(ctrl.parts, 'assessment-objective');
+    if (check) {
+        descriptions.push({ label: 'check', data: check });
+    }
+    return descriptions;
+}
+/** Builds the tags map for an OSCAL catalog control. */
+function buildCatalogTags(ctrl) {
+    const tags = {};
+    const nistTag = controlIdToNistTag(ctrl.id);
+    tags['nist'] = [nistTag];
+    const label = extractPropValue(ctrl.props, 'label');
+    if (label !== undefined) {
+        tags['label'] = label;
+    }
+    const sortId = extractPropValue(ctrl.props, 'sort-id');
+    if (sortId !== undefined) {
+        tags['sort-id'] = sortId;
+    }
+    return tags;
+}
+/** Derives a baseline name from catalog metadata. */
+function catalogBaselineName(catalog) {
+    return toKebabCase(catalog.metadata.title, 'oscal-catalog');
+}
+//# sourceMappingURL=converter-catalog.js.map

package/dist/converters/oscal-to-hdf/typescript/converter-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-catalog.js","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAIhG,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAa;IAC1D,iBAAiB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAE1C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAQ,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,QAAgB;IAEhB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE/C,MAAM,YAAY,GAA0B,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACzC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;YAC/C,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEpB,+BAA+B;YAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;gBACjD,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,YAAY,EAAE,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAC/C,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;YACjD,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAgB;QAC5B,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC;QAClC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,QAAQ;QAChB,SAAS;QACT,YAAY;QACZ,MAAM;QACN,SAAS,EAAE;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;SACjB;KACF,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qEAAqE;AACrE,SAAS,4BAA4B,CAAC,IAAa;IACjD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEpC,OAAO;QACL,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,GAAG,EAAE,+BAA+B;QAC5C,YAAY;QACZ,IAAI;KACL,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,SAAS,wBAAwB,CAAC,IAAa;IAC7C,MAAM,YAAY,GAAkB,EAAE,CAAC;IAEvC,mCAAmC;IACnC,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC9D,YAAY,CAAC,IAAI,CAAC;QAChB,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,SAAS,IAAI,EAAE;KACtB,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,gCAAgC;IAChC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IACrE,IAAI,KAAK,EAAE,CAAC;QACV,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,wDAAwD;AACxD,SAAS,gBAAgB,CAAC,IAAa;IACrC,MAAM,IAAI,GAA4B,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAEzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IACxB,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC;IAC3B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qDAAqD;AACrD,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,OAAO,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;AAC9D,CAAC"}

package/dist/converters/oscal-to-hdf/typescript/converter-component.d.ts

@@ -0,0 +1,13 @@
+/**
+ * OSCAL Component Definition to HDF Baseline converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_component.go.
+ */
+/**
+ * Converts an OSCAL Component Definition document to HDF Baseline JSON.
+ *
+ * @param input - Raw JSON string containing an OSCAL component-definition
+ * @returns HDF Baseline JSON string
+ */
+export declare function convertOscalComponentToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter-component.d.ts.map

package/dist/converters/oscal-to-hdf/typescript/converter-component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-component.d.ts","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-component.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA+C/E"}

package/dist/converters/oscal-to-hdf/typescript/converter-component.js

@@ -0,0 +1,92 @@
+/**
+ * OSCAL Component Definition to HDF Baseline converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_component.go.
+ */
+import { parseJSON } from '@mitre/hdf-utilities';
+import { inputIntegrity, validateInputSize } from '../../../shared/typescript/converterutil.js';
+import { controlIdToNistTag, extractMetadata, toKebabCase } from './shared.js';
+/**
+ * Converts an OSCAL Component Definition document to HDF Baseline JSON.
+ *
+ * @param input - Raw JSON string containing an OSCAL component-definition
+ * @returns HDF Baseline JSON string
+ */
+export async function convertOscalComponentToHdf(input) {
+    validateInputSize(input, 'oscal-component-definition');
+    if (!input || input.trim().length === 0) {
+        throw new Error('empty input');
+    }
+    const doc = parseJSON(input);
+    if (!doc['component-definition']) {
+        throw new Error("oscal-component-definition: input is not a component-definition document (root key is not 'component-definition')");
+    }
+    const compDef = doc['component-definition'];
+    if (!compDef.components || compDef.components.length === 0) {
+        throw new Error('oscal-component-definition: document contains no components');
+    }
+    const integrity = await inputIntegrity(input);
+    const meta = extractMetadata(compDef.metadata);
+    // Use the first component to build the baseline
+    const comp = compDef.components[0];
+    const requirements = [];
+    for (const ci of comp['control-implementations'] ?? []) {
+        for (const ir of ci['implemented-requirements'] ?? []) {
+            requirements.push(implementedRequirementToBaselineRequirement(ir));
+        }
+    }
+    const baseline = {
+        name: componentBaselineName(comp, compDef),
+        title: meta.title,
+        version: meta.version,
+        status: 'loaded',
+        integrity,
+        requirements,
+        generator: {
+            name: 'hdf-converters',
+            version: '1.0.0',
+        },
+    };
+    return JSON.stringify(baseline, null, 2);
+}
+/** Converts a single ImplementedRequirement to a BaselineRequirement. */
+function implementedRequirementToBaselineRequirement(ir) {
+    const nistTag = controlIdToNistTag(ir['control-id']);
+    const descriptions = [];
+    // Primary description
+    descriptions.push({
+        label: 'default',
+        data: ir.description ?? '',
+    });
+    // Add statement prose as additional descriptions
+    for (const stmt of ir.statements ?? []) {
+        if (stmt.description) {
+            descriptions.push({
+                label: stmt['statement-id'],
+                data: stmt.description,
+            });
+        }
+        if (stmt.remarks) {
+            descriptions.push({
+                label: stmt['statement-id'] + '-remarks',
+                data: stmt.remarks,
+            });
+        }
+    }
+    const tags = {
+        nist: [nistTag],
+    };
+    return {
+        id: nistTag,
+        title: nistTag,
+        impact: 0.5,
+        descriptions,
+        tags,
+    };
+}
+/** Derives a baseline name from the component or component-definition metadata. */
+function componentBaselineName(comp, compDef) {
+    const name = comp.title || compDef.metadata.title;
+    return toKebabCase(name, 'oscal-component-definition');
+}
+//# sourceMappingURL=converter-component.js.map

package/dist/converters/oscal-to-hdf/typescript/converter-component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-component.js","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-component.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAIhG,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAa;IAC5D,iBAAiB,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAEvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAQ,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAE5C,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE/C,gDAAgD;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;IAEpC,MAAM,YAAY,GAA0B,EAAE,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,EAAE,CAAC;QACvD,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,EAAE,CAAC;YACtD,YAAY,CAAC,IAAI,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAgB;QAC5B,IAAI,EAAE,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,QAAQ;QAChB,SAAS;QACT,YAAY;QACZ,SAAS,EAAE;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;SACjB;KACF,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,yEAAyE;AACzE,SAAS,2CAA2C,CAClD,EAAiC;IAEjC,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAErD,MAAM,YAAY,GAAkB,EAAE,CAAC;IAEvC,sBAAsB;IACtB,YAAY,CAAC,IAAI,CAAC;QAChB,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE;KAC3B,CAAC,CAAC;IAEH,iDAAiD;IACjD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC;gBAChB,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC;gBAC3B,IAAI,EAAE,IAAI,CAAC,WAAW;aACvB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,YAAY,CAAC,IAAI,CAAC;gBAChB,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,UAAU;gBACxC,IAAI,EAAE,IAAI,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,CAAC,OAAO,CAAC;KAChB,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,GAAG;QACX,YAAY;QACZ,IAAI;KACL,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,qBAAqB,CAC5B,IAAkC,EAClC,OAA4B;IAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IAClD,OAAO,WAAW,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;AACzD,CAAC"}

package/dist/converters/oscal-to-hdf/typescript/converter-poam.d.ts

@@ -0,0 +1,13 @@
+/**
+ * OSCAL Plan of Action and Milestones (POA&M) to HDF Amendments converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_poam.go.
+ */
+/**
+ * Converts an OSCAL POA&M document to HDF Amendments JSON.
+ *
+ * @param input - Raw JSON string containing an OSCAL POA&M
+ * @returns HDF Amendments JSON string
+ */
+export declare function convertOscalPoamToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter-poam.d.ts.map

package/dist/converters/oscal-to-hdf/typescript/converter-poam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-poam.d.ts","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-poam.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiCH;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA+C1E"}

package/dist/converters/oscal-to-hdf/typescript/converter-poam.js

@@ -0,0 +1,196 @@
+/**
+ * OSCAL Plan of Action and Milestones (POA&M) to HDF Amendments converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_poam.go.
+ */
+import { parseJSON } from '@mitre/hdf-utilities';
+import { inputIntegrity, validateInputSize } from '../../../shared/typescript/converterutil.js';
+import { OverrideType, } from '@mitre/hdf-schema';
+import { controlIdToNistTag, extractPropValue, oscalStatusToHdf, extractMetadata, toKebabCase, } from './shared.js';
+/**
+ * Converts an OSCAL POA&M document to HDF Amendments JSON.
+ *
+ * @param input - Raw JSON string containing an OSCAL POA&M
+ * @returns HDF Amendments JSON string
+ */
+export async function convertOscalPoamToHdf(input) {
+    validateInputSize(input, 'oscal-poam');
+    if (!input || input.trim().length === 0) {
+        throw new Error('empty input');
+    }
+    const doc = parseJSON(input);
+    if (!doc['plan-of-action-and-milestones']) {
+        throw new Error("oscal-poam: input is not a plan-of-action-and-milestones document (root key is not 'plan-of-action-and-milestones')");
+    }
+    const poam = doc['plan-of-action-and-milestones'];
+    const integrity = await inputIntegrity(input);
+    const meta = extractMetadata(poam.metadata);
+    // Build risk lookup map
+    const riskMap = buildRiskMap(poam.risks ?? []);
+    // Convert poam-items to StandaloneOverrides
+    const overrides = [];
+    for (const item of poam['poam-items']) {
+        overrides.push(poamItemToOverride(item, riskMap, poam));
+    }
+    // Extract systemRef from import-ssp
+    const systemRef = poam['import-ssp']?.href || undefined;
+    // Build appliedBy from metadata responsible-parties
+    const appliedBy = extractAppliedBy(poam.metadata);
+    const amendments = {
+        name: toKebabCase(poam.metadata.title, 'oscal-poam'),
+        overrides,
+        integrity,
+        systemRef,
+        version: meta.version,
+        appliedBy,
+        generator: {
+            name: 'hdf-converters',
+            version: '1.0.0',
+        },
+    };
+    return JSON.stringify(amendments, null, 2);
+}
+function buildRiskMap(risks) {
+    const m = new Map();
+    for (const risk of risks) {
+        m.set(risk.uuid, risk);
+    }
+    return m;
+}
+function poamItemToOverride(item, riskMap, poam) {
+    return {
+        type: OverrideType.Poam,
+        requirementId: extractRequirementIdFromPOAMItem(item, riskMap),
+        reason: poamItemReason(item),
+        status: poamItemStatus(item, riskMap),
+        appliedBy: poamItemAppliedBy(poam),
+        appliedAt: poamItemAppliedAt(poam),
+        expiresAt: poamItemExpiresAt(),
+        milestones: extractMilestones(item, riskMap),
+    };
+}
+function extractRequirementIdFromPOAMItem(item, riskMap) {
+    // Check related risks for impacted-control-id
+    for (const rr of item['related-risks'] ?? []) {
+        const riskUuid = rr['risk-uuid'];
+        if (riskUuid) {
+            const risk = riskMap.get(riskUuid);
+            if (risk) {
+                const controlId = extractPropValue(risk.props, 'impacted-control-id');
+                if (controlId) {
+                    return controlIdToNistTag(controlId);
+                }
+            }
+        }
+    }
+    // Check poam-item props for POAM-ID
+    const poamId = extractPropValue(item.props, 'POAM-ID');
+    if (poamId)
+        return poamId;
+    // Fall back to the title
+    if (item.title)
+        return item.title;
+    return 'unknown';
+}
+function poamItemReason(item) {
+    if (item.description)
+        return item.description;
+    if (item.title)
+        return item.title;
+    return 'POA&M item';
+}
+function poamItemStatus(item, riskMap) {
+    for (const rr of item['related-risks'] ?? []) {
+        const riskUuid = rr['risk-uuid'];
+        if (riskUuid) {
+            const risk = riskMap.get(riskUuid);
+            if (risk) {
+                const status = oscalStatusToHdf(risk.status);
+                if (status === 'passed')
+                    return 'passed';
+                if (status === 'failed')
+                    return 'failed';
+            }
+        }
+    }
+    // Default: POA&M items typically represent open/failed findings
+    return 'failed';
+}
+function poamItemAppliedBy(poam) {
+    // Look for prepared-by in responsible-parties
+    const rps = poam.metadata['responsible-parties'];
+    if (rps) {
+        for (const rp of rps) {
+            if (rp['role-id'] === 'prepared-by' && rp['party-uuids'].length > 0) {
+                return {
+                    type: 'simple',
+                    identifier: rp['party-uuids'][0],
+                };
+            }
+        }
+        // Fall back to any responsible party
+        if (rps.length > 0 && rps[0]['party-uuids'].length > 0) {
+            return {
+                type: 'simple',
+                identifier: rps[0]['party-uuids'][0],
+            };
+        }
+    }
+    return {
+        type: 'system',
+        identifier: 'oscal-poam-converter',
+    };
+}
+function poamItemAppliedAt(poam) {
+    if (poam.metadata['last-modified']) {
+        const t = new Date(poam.metadata['last-modified']);
+        if (!isNaN(t.getTime())) {
+            return t;
+        }
+    }
+    return new Date();
+}
+function poamItemExpiresAt() {
+    // Default: 1 year from now
+    const d = new Date();
+    d.setFullYear(d.getFullYear() + 1);
+    return d;
+}
+function extractMilestones(item, riskMap) {
+    const milestones = [];
+    for (const rr of item['related-risks'] ?? []) {
+        const riskUuid = rr['risk-uuid'];
+        if (!riskUuid)
+            continue;
+        const risk = riskMap.get(riskUuid);
+        if (!risk)
+            continue;
+        for (const rem of risk.remediations ?? []) {
+            if (rem.lifecycle !== 'planned')
+                continue;
+            const estimatedCompletion = new Date();
+            estimatedCompletion.setMonth(estimatedCompletion.getMonth() + 3);
+            milestones.push({
+                description: rem.title + ': ' + rem.description,
+                estimatedCompletion,
+                status: 'pending',
+            });
+        }
+    }
+    return milestones;
+}
+function extractAppliedBy(meta) {
+    const rps = meta['responsible-parties'];
+    if (rps) {
+        for (const rp of rps) {
+            if (rp['role-id'] === 'prepared-by' && rp['party-uuids'].length > 0) {
+                return {
+                    type: 'simple',
+                    identifier: rp['party-uuids'][0],
+                };
+            }
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=converter-poam.js.map

package/dist/converters/oscal-to-hdf/typescript/converter-poam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-poam.js","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-poam.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAMhG,OAAO,EACL,YAAY,GACb,MAAM,mBAAmB,CAAC;AAc3B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAEvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAQ,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE5C,wBAAwB;IACxB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,oCAAoC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,IAAI,SAAS,CAAC;IAExD,oDAAoD;IACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAElD,MAAM,UAAU,GAAkB;QAChC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;QACpD,SAAS;QACT,SAAS;QACT,SAAS;QACT,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS;QACT,SAAS,EAAE;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;SACjB;KACF,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB;IAC3C,MAAM,CAAC,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAc,EACd,OAAoC,EACpC,IAAmC;IAEnC,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,aAAa,EAAE,gCAAgC,CAAC,IAAI,EAAE,OAAO,CAAC;QAC9D,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC;QACrC,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAClC,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAClC,SAAS,EAAE,iBAAiB,EAAE;QAC9B,UAAU,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAQ;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,IAAc,EACd,OAAoC;IAEpC,8CAA8C;IAC9C,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;gBACtE,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,yBAAyB;IACzB,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAElC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC;IAC9C,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAClC,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CACrB,IAAc,EACd,OAAoC;IAEpC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,MAAM,KAAK,QAAQ;oBAAE,OAAO,QAAe,CAAC;gBAChD,IAAI,MAAM,KAAK,QAAQ;oBAAE,OAAO,QAAe,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,OAAO,QAAe,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAmC;IAEnC,8CAA8C;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACjD,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,aAAa,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpE,OAAO;oBACL,IAAI,EAAE,QAAe;oBACrB,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAE;iBAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAE,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO;gBACL,IAAI,EAAE,QAAe;gBACrB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAE;aACvC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAe;QACrB,UAAU,EAAE,sBAAsB;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAmC;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB;IACxB,2BAA2B;IAC3B,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAc,EACd,OAAoC;IAEpC,MAAM,UAAU,GAAmB,EAAE,CAAC;IAEtC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YAE1C,MAAM,mBAAmB,GAAG,IAAI,IAAI,EAAE,CAAC;YACvC,mBAAmB,CAAC,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;YAEjE,UAAU,CAAC,IAAI,CAAC;gBACd,WAAW,EAAE,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,WAAW;gBAC/C,mBAAmB;gBACnB,MAAM,EAAE,SAAgB;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAsB;IAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,aAAa,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpE,OAAO;oBACL,IAAI,EAAE,QAAe;oBACrB,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAE;iBAClC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/converters/oscal-to-hdf/typescript/converter-profile.d.ts

@@ -0,0 +1,26 @@
+/**
+ * OSCAL Profile to HDF Baseline converter.
+ *
+ * Mirrors the Go implementation in converters/oscal-to-hdf/go/converter_profile.go.
+ *
+ * This implements the "simple resolver" -- it handles:
+ * - A single catalog import
+ * - include-controls with with-ids filtering
+ * - set-parameters from modify section
+ * - merge as-is (preserve catalog structure)
+ *
+ * It does NOT handle:
+ * - Multiple imports
+ * - Nested profile imports
+ * - alter directives
+ * - Complex merge strategies
+ */
+/**
+ * Converts an OSCAL Profile against a provided catalog to HDF Baseline JSON.
+ *
+ * @param profileInput - Raw JSON string containing an OSCAL profile
+ * @param catalogInput - Raw JSON string containing an OSCAL catalog
+ * @returns HDF Baseline JSON string
+ */
+export declare function convertOscalProfileToHdf(profileInput: string, catalogInput: string): Promise<string>;
+//# sourceMappingURL=converter-profile.d.ts.map

package/dist/converters/oscal-to-hdf/typescript/converter-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter-profile.d.ts","sourceRoot":"","sources":["../../../../converters/oscal-to-hdf/typescript/converter-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAeH;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAoEjB"}