@mitre/hdf-converters 2.13.0 → 3.0.0

package/dist/shared/typescript/hdf-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hdf-version.d.ts","sourceRoot":"","sources":["../../../shared/typescript/hdf-version.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AAQ5D;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAU1F;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtD"}

package/dist/shared/typescript/hdf-version.js

@@ -0,0 +1,206 @@
+/**
+ * HDF version transform router.
+ *
+ * Converts between HDF schema versions (v1 ↔ v2) using a registry of
+ * transform functions. Adding new versions means registering new pairs —
+ * the router logic does not change.
+ */
+const hdfTransforms = new Map();
+// Register v1 ↔ v2 transforms
+hdfTransforms.set('1→2', upgradeV1ToV2);
+hdfTransforms.set('2→1', downgradeV2ToV1);
+/**
+ * Transform HDF data between schema versions.
+ * Returns the input unchanged when fromVersion === toVersion.
+ * Throws for unknown version pairs.
+ */
+export function transformHDF(input, fromVersion, toVersion) {
+    if (fromVersion === toVersion)
+        return input;
+    const key = `${fromVersion}→${toVersion}`;
+    const transform = hdfTransforms.get(key);
+    if (!transform) {
+        throw new Error(`No HDF transform registered for ${fromVersion} → ${toVersion}`);
+    }
+    return transform(input);
+}
+/**
+ * Detect HDF version from structural markers.
+ * Returns "1" or "2", or throws if unrecognizable.
+ */
+export function detectHDFVersion(input) {
+    const obj = JSON.parse(input);
+    if ('profiles' in obj && 'platform' in obj)
+        return '1';
+    if ('baselines' in obj && 'components' in obj)
+        return '2';
+    throw new Error('Cannot determine HDF version: missing expected structural fields');
+}
+function upgradeV1ToV2(input) {
+    const v1 = JSON.parse(input);
+    const baselines = (v1.profiles ?? []).map(convertProfileToBaseline);
+    const components = [];
+    if (v1.platform) {
+        components.push({
+            type: 'host',
+            name: v1.platform.name,
+            ...(v1.platform.release ? { osVersion: v1.platform.release } : {}),
+            labels: {},
+        });
+    }
+    const v2 = {
+        baselines,
+        components,
+        statistics: v1.statistics ?? {},
+    };
+    return JSON.stringify(v2, null, 2);
+}
+function convertProfileToBaseline(p) {
+    return {
+        name: p.name,
+        ...(p.version ? { version: p.version } : {}),
+        ...(p.title ? { title: p.title } : {}),
+        ...(p.maintainer ? { maintainer: p.maintainer } : {}),
+        ...(p.summary ? { summary: p.summary } : {}),
+        ...(p.license ? { license: p.license } : {}),
+        ...(p.copyright ? { copyright: p.copyright } : {}),
+        ...(p.copyright_email ? { copyrightEmail: p.copyright_email } : {}),
+        supports: p.supports ?? [],
+        groups: (p.groups ?? []).map(g => ({
+            id: g.id,
+            ...(g.title ? { title: g.title } : {}),
+            requirements: g.controls ?? [],
+        })),
+        requirements: (p.controls ?? []).map(convertControlToRequirement),
+        depends: p.depends ?? [],
+        inputs: (p.attributes ?? []).map(a => ({ ...a })),
+    };
+}
+function convertControlToRequirement(c) {
+    const descriptions = c.descriptions ?? [];
+    if (descriptions.length === 0 && c.desc) {
+        descriptions.push({ label: 'default', data: c.desc });
+    }
+    if (descriptions.length === 0) {
+        descriptions.push({ label: 'default', data: '' });
+    }
+    return {
+        id: c.id,
+        ...(c.title ? { title: c.title } : {}),
+        impact: c.impact,
+        tags: c.tags ?? {},
+        descriptions,
+        results: (c.results ?? []).map(convertV1Result),
+        ...(c.code ? { code: c.code } : {}),
+        ...(c.source_location ? {
+            sourceLocation: {
+                ...(c.source_location.ref ? { ref: c.source_location.ref } : {}),
+                ...(c.source_location.line !== undefined ? { line: c.source_location.line } : {}),
+            },
+        } : {}),
+        refs: c.refs ?? [],
+    };
+}
+const statusMap = {
+    passed: 'passed',
+    failed: 'failed',
+    error: 'error',
+    not_applicable: 'notApplicable',
+    not_reviewed: 'notReviewed',
+    skipped: 'notReviewed',
+};
+function convertV1Result(r) {
+    return {
+        status: statusMap[r.status] ?? r.status,
+        codeDesc: r.code_desc ?? '',
+        startTime: r.start_time ?? new Date().toISOString(),
+        ...(r.run_time !== undefined ? { runTime: r.run_time } : {}),
+        ...(r.message ? { message: r.message } : {}),
+        ...(r.exception ? { exception: r.exception } : {}),
+        ...(r.backtrace?.length ? { backtrace: r.backtrace } : {}),
+    };
+}
+// --- v2 → v1 downgrade (lossy) ---
+function downgradeV2ToV1(input) {
+    const v2 = JSON.parse(input);
+    const targets = v2.components ?? [];
+    const baselines = v2.baselines ?? [];
+    const statistics = v2.statistics ?? {};
+    const platform = { name: '' };
+    if (targets.length > 0) {
+        const t = targets[0];
+        platform.name = t.name ?? '';
+        if (t.osVersion)
+            platform.release = t.osVersion;
+        if (t.name)
+            platform.target_id = t.name;
+    }
+    const profiles = baselines.map(convertBaselineToV1Profile);
+    const v1 = { platform, profiles, statistics };
+    return JSON.stringify(v1, null, 2);
+}
+function convertBaselineToV1Profile(b) {
+    const requirements = b.requirements ?? [];
+    const groups = b.groups ?? [];
+    return {
+        name: b.name ?? '',
+        ...(b.version ? { version: b.version } : {}),
+        ...(b.title ? { title: b.title } : {}),
+        ...(b.maintainer ? { maintainer: b.maintainer } : {}),
+        ...(b.summary ? { summary: b.summary } : {}),
+        ...(b.license ? { license: b.license } : {}),
+        ...(b.copyright ? { copyright: b.copyright } : {}),
+        ...(b.copyrightEmail ? { copyright_email: b.copyrightEmail } : {}),
+        groups: groups.map(g => ({
+            id: g.id,
+            ...(g.title ? { title: g.title } : {}),
+            controls: g.requirements ?? [],
+        })),
+        controls: requirements.map(convertRequirementToV1Control),
+        depends: b.depends ?? [],
+    };
+}
+const reverseStatusMap = {
+    passed: 'passed',
+    failed: 'failed',
+    error: 'error',
+    notApplicable: 'not_applicable',
+    notReviewed: 'not_reviewed',
+};
+function convertRequirementToV1Control(r) {
+    const descriptions = r.descriptions ?? [];
+    const results = r.results ?? [];
+    let desc;
+    for (const d of descriptions) {
+        if (d.label === 'default') {
+            desc = d.data;
+            break;
+        }
+    }
+    return {
+        id: r.id,
+        ...(r.title ? { title: r.title } : {}),
+        ...(desc !== undefined ? { desc } : {}),
+        impact: r.impact ?? 0,
+        tags: r.tags ?? {},
+        descriptions: descriptions.map(d => ({ label: d.label, data: d.data })),
+        results: results.map(res => ({
+            status: reverseStatusMap[res.status] ?? res.status,
+            code_desc: res.codeDesc ?? '',
+            ...(res.startTime ? { start_time: res.startTime } : {}),
+            ...(res.runTime !== undefined ? { run_time: res.runTime } : {}),
+            ...(res.message ? { message: res.message } : {}),
+            ...(res.exception ? { exception: res.exception } : {}),
+            ...(res.backtrace?.length ? { backtrace: res.backtrace } : {}),
+        })),
+        ...(r.code ? { code: r.code } : {}),
+        ...(r.sourceLocation ? {
+            source_location: {
+                ...(r.sourceLocation.ref ? { ref: r.sourceLocation.ref } : {}),
+                ...(r.sourceLocation.line !== undefined ? { line: r.sourceLocation.line } : {}),
+            },
+        } : {}),
+        refs: r.refs ?? [],
+    };
+}
+//# sourceMappingURL=hdf-version.js.map

package/dist/shared/typescript/hdf-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hdf-version.js","sourceRoot":"","sources":["../../../shared/typescript/hdf-version.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,aAAa,GAAG,IAAI,GAAG,EAA+B,CAAC;AAE7D,8BAA8B;AAC9B,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;AACxC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,WAAmB,EAAE,SAAiB;IAChF,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,GAAG,GAAG,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mCAAmC,WAAW,MAAM,SAAS,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAC;IAEzD,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACvD,IAAI,WAAW,IAAI,GAAG,IAAI,YAAY,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAE1D,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;AACtF,CAAC;AAqDD,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAc,CAAC;IAE1C,MAAM,SAAS,GAAG,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAEpE,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI;YACtB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAA4B;QAClC,SAAS;QACT,UAAU;QACV,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE;KAChC,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,wBAAwB,CAAC,CAAY;IAC5C,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;QAC1B,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,YAAY,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;SAC/B,CAAC,CAAC;QACH,YAAY,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC;QACjE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;QACxB,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,CAAY;IAC/C,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC;IAC1C,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,YAAY;QACZ,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;QAC/C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YACtB,cAAc,EAAE;gBACd,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClF;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAA2B;IACxC,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,cAAc,EAAE,eAAe;IAC/B,YAAY,EAAE,aAAa;IAC3B,OAAO,EAAE,aAAa;CACvB,CAAC;AAEF,SAAS,eAAe,CAAC,CAAW;IAClC,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;QACvC,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;QAC3B,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnD,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,oCAAoC;AAEpC,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAC;IAExD,MAAM,OAAO,GAAG,EAAE,CAAC,UAA4C,IAAI,EAAE,CAAC;IACtE,MAAM,SAAS,GAAG,EAAE,CAAC,SAA2C,IAAI,EAAE,CAAC;IACvE,MAAM,UAAU,GAAG,EAAE,CAAC,UAAqC,IAAI,EAAE,CAAC;IAElE,MAAM,QAAQ,GAA4B,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,SAAS;YAAE,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC;QAChD,IAAI,CAAC,CAAC,IAAI;YAAE,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAE3D,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,0BAA0B,CAAC,CAA0B;IAC5D,MAAM,YAAY,GAAG,CAAC,CAAC,YAA8C,IAAI,EAAE,CAAC;IAC5E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAwC,IAAI,EAAE,CAAC;IAEhE,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,QAAQ,EAAE,CAAC,CAAC,YAAY,IAAI,EAAE;SAC/B,CAAC,CAAC;QACH,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,6BAA6B,CAAC;QACzD,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAA2B;IAC/C,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,aAAa,EAAE,gBAAgB;IAC/B,WAAW,EAAE,cAAc;CAC5B,CAAC;AAEF,SAAS,6BAA6B,CAAC,CAA0B;IAC/D,MAAM,YAAY,GAAG,CAAC,CAAC,YAAsD,IAAI,EAAE,CAAC;IACpF,MAAM,OAAO,GAAG,CAAC,CAAC,OAAyC,IAAI,EAAE,CAAC;IAElE,IAAI,IAAwB,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;YAAC,MAAM;QAAC,CAAC;IACtD,CAAC;IAED,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;QAClB,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3B,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,MAAgB,CAAC,IAAI,GAAG,CAAC,MAAM;YAC5D,SAAS,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;YAC7B,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAE,GAAG,CAAC,SAAuB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YACrB,eAAe,EAAE;gBACf,GAAG,CAAE,CAAC,CAAC,cAA0C,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAG,CAAC,CAAC,cAA0C,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxH,GAAG,CAAE,CAAC,CAAC,cAA0C,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAG,CAAC,CAAC,cAA0C,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1I;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;KACnB,CAAC;AACJ,CAAC"}

package/dist/shared/typescript/register-all.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Explicit fingerprint registration for all converters.
+ *
+ * Consumers call registerAllFingerprints() once at startup.
+ * This avoids side-effect imports that bundlers tree-shake away.
+ */
+/**
+ * Register all known converter fingerprints.
+ * Idempotent — safe to call multiple times or after _resetRegistry().
+ */
+export declare function registerAllFingerprints(): void;
+//# sourceMappingURL=register-all.d.ts.map

package/dist/shared/typescript/register-all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-all.d.ts","sourceRoot":"","sources":["../../../shared/typescript/register-all.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwGH;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAM9C"}

package/dist/shared/typescript/register-all.js

@@ -0,0 +1,111 @@
+/**
+ * Explicit fingerprint registration for all converters.
+ *
+ * Consumers call registerAllFingerprints() once at startup.
+ * This avoids side-effect imports that bundlers tree-shake away.
+ */
+import { registerFingerprint, getFingerprint } from './registry.js';
+// JSON ingest converters
+import { awsConfigFingerprint } from '../../converters/aws-config-to-hdf/typescript/fingerprint.js';
+import { conveyorFingerprint } from '../../converters/conveyor-to-hdf/typescript/fingerprint.js';
+import { cyclonedxFingerprint } from '../../converters/cyclonedx-to-hdf/typescript/fingerprint.js';
+import { deptrackFingerprint } from '../../converters/deptrack-to-hdf/typescript/fingerprint.js';
+import { gitlabFingerprint } from '../../converters/gitlab-to-hdf/typescript/fingerprint.js';
+import { gosecFingerprint } from '../../converters/gosec-to-hdf/typescript/fingerprint.js';
+import { grypeFingerprint } from '../../converters/grype-to-hdf/typescript/fingerprint.js';
+import { jfrogXrayFingerprint } from '../../converters/jfrog-xray-to-hdf/typescript/fingerprint.js';
+import { msftDefenderCloudFingerprint } from '../../converters/msft-defender-cloud-to-hdf/typescript/fingerprint.js';
+import { msftDefenderDevopsFingerprint } from '../../converters/msft-defender-devops-to-hdf/typescript/fingerprint.js';
+import { msftDefenderEndpointFingerprint } from '../../converters/msft-defender-endpoint-to-hdf/typescript/fingerprint.js';
+import { msftSecureScoreFingerprint } from '../../converters/msft-secure-score-to-hdf/typescript/fingerprint.js';
+import { neuvectorFingerprint } from '../../converters/neuvector-to-hdf/typescript/fingerprint.js';
+import { sarifFingerprint } from '../../converters/sarif-to-hdf/typescript/fingerprint.js';
+import { scoutsuiteFingerprint } from '../../converters/scoutsuite-to-hdf/typescript/fingerprint.js';
+import { snykFingerprint } from '../../converters/snyk-to-hdf/typescript/fingerprint.js';
+import { sonarqubeFingerprint } from '../../converters/sonarqube-to-hdf/typescript/fingerprint.js';
+import { splunkFingerprint } from '../../converters/splunk-to-hdf/typescript/fingerprint.js';
+import { trufflehogFingerprint } from '../../converters/trufflehog-to-hdf/typescript/fingerprint.js';
+import { twistlockFingerprint } from '../../converters/twistlock-to-hdf/typescript/fingerprint.js';
+// JSON ingest converters (input is JSON despite tool names suggesting XML)
+import { niktoFingerprint } from '../../converters/nikto-to-hdf/typescript/fingerprint.js';
+import { zapFingerprint } from '../../converters/zap-to-hdf/typescript/fingerprint.js';
+// XML ingest converters
+import { burpsuiteFingerprint } from '../../converters/burpsuite-to-hdf/typescript/fingerprint.js';
+import { dbprotectFingerprint } from '../../converters/dbprotect-to-hdf/typescript/fingerprint.js';
+import { fortifyFingerprint } from '../../converters/fortify-to-hdf/typescript/fingerprint.js';
+import { junitFingerprint } from '../../converters/junit-to-hdf/typescript/fingerprint.js';
+import { nessusFingerprint } from '../../converters/nessus-to-hdf/typescript/fingerprint.js';
+import { netsparkerFingerprint } from '../../converters/netsparker-to-hdf/typescript/fingerprint.js';
+import { veracodeFingerprint } from '../../converters/veracode-to-hdf/typescript/fingerprint.js';
+import { xccdfFingerprint } from '../../converters/xccdf-results-to-hdf/typescript/fingerprint.js';
+// Text/CSV ingest converters
+import { prismaFingerprint } from '../../converters/prisma-to-hdf/typescript/fingerprint.js';
+// HDF native detection
+import { hdfV2Fingerprint } from '../../converters/hdf-v2-passthrough/typescript/fingerprint.js';
+import { legacyHdfFingerprint } from '../../converters/legacyhdf-to-hdf/typescript/fingerprint.js';
+// OSCAL converters (7 fingerprints in one array)
+import { oscalFingerprints } from '../../converters/oscal-to-hdf/typescript/fingerprint.js';
+// Export converters
+import { hdfToCsvFingerprint } from '../../converters/hdf-to-csv/typescript/fingerprint.js';
+import { hdfToXmlFingerprint } from '../../converters/hdf-to-xml/typescript/fingerprint.js';
+import { hdfToOscalSarFingerprint } from '../../converters/hdf-to-oscal-sar/typescript/fingerprint.js';
+import { hdfToOscalPoamFingerprint } from '../../converters/hdf-to-oscal-poam/typescript/fingerprint.js';
+const allFingerprints = [
+    // JSON ingest
+    awsConfigFingerprint,
+    conveyorFingerprint,
+    cyclonedxFingerprint,
+    deptrackFingerprint,
+    gitlabFingerprint,
+    gosecFingerprint,
+    grypeFingerprint,
+    jfrogXrayFingerprint,
+    msftDefenderCloudFingerprint,
+    msftDefenderDevopsFingerprint,
+    msftDefenderEndpointFingerprint,
+    msftSecureScoreFingerprint,
+    neuvectorFingerprint,
+    sarifFingerprint,
+    scoutsuiteFingerprint,
+    snykFingerprint,
+    sonarqubeFingerprint,
+    splunkFingerprint,
+    trufflehogFingerprint,
+    twistlockFingerprint,
+    // JSON ingest (input is JSON despite tool names)
+    niktoFingerprint,
+    zapFingerprint,
+    // XML ingest
+    burpsuiteFingerprint,
+    dbprotectFingerprint,
+    fortifyFingerprint,
+    junitFingerprint,
+    nessusFingerprint,
+    netsparkerFingerprint,
+    veracodeFingerprint,
+    xccdfFingerprint,
+    // Text/CSV ingest
+    prismaFingerprint,
+    // HDF native
+    hdfV2Fingerprint,
+    legacyHdfFingerprint,
+    // OSCAL (7 fingerprints)
+    ...oscalFingerprints,
+    // Export converters
+    hdfToCsvFingerprint,
+    hdfToXmlFingerprint,
+    hdfToOscalSarFingerprint,
+    hdfToOscalPoamFingerprint,
+];
+/**
+ * Register all known converter fingerprints.
+ * Idempotent — safe to call multiple times or after _resetRegistry().
+ */
+export function registerAllFingerprints() {
+    for (const fp of allFingerprints) {
+        if (!getFingerprint(fp.id)) {
+            registerFingerprint(fp);
+        }
+    }
+}
+//# sourceMappingURL=register-all.js.map

package/dist/shared/typescript/register-all.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-all.js","sourceRoot":"","sources":["../../../shared/typescript/register-all.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,eAAe,CAAC;AAE/F,yBAAyB;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,uEAAuE,CAAC;AACrH,OAAO,EAAE,6BAA6B,EAAE,MAAM,wEAAwE,CAAC;AACvH,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,MAAM,qEAAqE,CAAC;AACjH,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,8DAA8D,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,8DAA8D,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AAEnG,2EAA2E;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AAEvF,wBAAwB;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,2DAA2D,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,8DAA8D,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,iEAAiE,CAAC;AAEnG,6BAA6B;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0DAA0D,CAAC;AAE7F,uBAAuB;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,+DAA+D,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AAEnG,iDAAiD;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yDAAyD,CAAC;AAE5F,oBAAoB;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uDAAuD,CAAC;AAC5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,uDAAuD,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,6DAA6D,CAAC;AACvG,OAAO,EAAE,yBAAyB,EAAE,MAAM,8DAA8D,CAAC;AAEzG,MAAM,eAAe,GAA2B;IAC9C,cAAc;IACd,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,mBAAmB;IACnB,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,4BAA4B;IAC5B,6BAA6B;IAC7B,+BAA+B;IAC/B,0BAA0B;IAC1B,oBAAoB;IACpB,gBAAgB;IAChB,qBAAqB;IACrB,eAAe;IACf,oBAAoB;IACpB,iBAAiB;IACjB,qBAAqB;IACrB,oBAAoB;IACpB,iDAAiD;IACjD,gBAAgB;IAChB,cAAc;IACd,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,gBAAgB;IAChB,iBAAiB;IACjB,qBAAqB;IACrB,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;IACjB,aAAa;IACb,gBAAgB;IAChB,oBAAoB;IACpB,yBAAyB;IACzB,GAAG,iBAAiB;IACpB,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,yBAAyB;CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/shared/typescript/registry.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Converter fingerprint registry.
+ *
+ * Lightweight fingerprint metadata — NO converter function imports.
+ * Safe for client bundles. Converters are loaded lazily by consumers.
+ */
+export type InputFamily = 'json' | 'xml' | 'csv' | 'text';
+export type ConverterDirection = 'ingest' | 'export';
+export type OutputType = 'results' | 'baseline' | 'plan' | 'amendments' | 'system' | 'evidence-package' | 'raw';
+export interface ConverterFingerprint {
+    /** Unique ID matching directory name: e.g. 'sarif-to-hdf' */
+    id: string;
+    /** Human-readable label: e.g. 'SARIF' */
+    label: string;
+    /** Direction of conversion */
+    direction: ConverterDirection;
+    /** Input format family */
+    inputFamily: InputFamily;
+    /** What the converter produces */
+    outputType: OutputType;
+    /** Structural fingerprint. Returns confidence 0.0-1.0. */
+    fingerprint: (input: unknown) => number;
+    /**
+     * Optional version detector. Returns a version string from the parsed input.
+     * For example, SARIF returns obj.version ("2.1.0"), CycloneDX returns
+     * obj.specVersion ("1.5"). Undefined means version detection is not supported.
+     */
+    detectVersion?: (input: unknown) => string;
+}
+export declare function registerFingerprint(fp: ConverterFingerprint): void;
+export declare function getFingerprints(): readonly ConverterFingerprint[];
+export declare function getIngestFingerprints(): readonly ConverterFingerprint[];
+export declare function getFingerprint(id: string): ConverterFingerprint | undefined;
+export declare function _resetRegistry(): void;
+//# sourceMappingURL=registry.d.ts.map

package/dist/shared/typescript/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../shared/typescript/registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;AAC1D,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACrD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,YAAY,GAC9C,QAAQ,GAAG,kBAAkB,GAAG,KAAK,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,EAAE,EAAE,MAAM,CAAC;IACX,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,SAAS,EAAE,kBAAkB,CAAC;IAC9B,0BAA0B;IAC1B,WAAW,EAAE,WAAW,CAAC;IACzB,kCAAkC;IAClC,UAAU,EAAE,UAAU,CAAC;IACvB,0DAA0D;IAC1D,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IACxC;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;CAC5C;AAID,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,oBAAoB,GAAG,IAAI,CAKlE;AAED,wBAAgB,eAAe,IAAI,SAAS,oBAAoB,EAAE,CAEjE;AAED,wBAAgB,qBAAqB,IAAI,SAAS,oBAAoB,EAAE,CAEvE;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAG3E;AAED,wBAAgB,cAAc,IAAI,IAAI,CAErC"}

package/dist/shared/typescript/registry.js

@@ -0,0 +1,27 @@
+/**
+ * Converter fingerprint registry.
+ *
+ * Lightweight fingerprint metadata — NO converter function imports.
+ * Safe for client bundles. Converters are loaded lazily by consumers.
+ */
+const registry = [];
+export function registerFingerprint(fp) {
+    if (registry.some(d => d.id === fp.id)) {
+        throw new Error(`Duplicate fingerprint: ${fp.id}`);
+    }
+    registry.push(fp);
+}
+export function getFingerprints() {
+    return [...registry];
+}
+export function getIngestFingerprints() {
+    return registry.filter(d => d.direction === 'ingest');
+}
+export function getFingerprint(id) {
+    const found = registry.find(d => d.id === id);
+    return found ? { ...found } : undefined;
+}
+export function _resetRegistry() {
+    registry.length = 0;
+}
+//# sourceMappingURL=registry.js.map

package/dist/shared/typescript/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../shared/typescript/registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4BH,MAAM,QAAQ,GAA2B,EAAE,CAAC;AAE5C,MAAM,UAAU,mBAAmB,CAAC,EAAwB;IAC1D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,0BAA0B,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;AACtB,CAAC"}

package/dist/shared/typescript/xml-utils.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Shared XML utilities for fingerprint detection.
+ *
+ * Extracts root element name from XML strings, handling declarations,
+ * comments, DOCTYPE (including internal subsets), and namespace prefixes.
+ */
+/**
+ * Extract the root element local name from an XML string.
+ * Skips XML declarations (<?...?>), comments (<!--...-->),
+ * and DOCTYPE declarations (<!DOCTYPE ... [...]>).
+ * Strips namespace prefixes (e.g., xccdf:Benchmark -> Benchmark).
+ *
+ * Returns null if no element found.
+ */
+export declare function extractXmlRootElement(input: string): string | null;
+//# sourceMappingURL=xml-utils.d.ts.map

package/dist/shared/typescript/xml-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xml-utils.d.ts","sourceRoot":"","sources":["../../../shared/typescript/xml-utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwClE"}

package/dist/shared/typescript/xml-utils.js

@@ -0,0 +1,66 @@
+/**
+ * Shared XML utilities for fingerprint detection.
+ *
+ * Extracts root element name from XML strings, handling declarations,
+ * comments, DOCTYPE (including internal subsets), and namespace prefixes.
+ */
+/**
+ * Extract the root element local name from an XML string.
+ * Skips XML declarations (<?...?>), comments (<!--...-->),
+ * and DOCTYPE declarations (<!DOCTYPE ... [...]>).
+ * Strips namespace prefixes (e.g., xccdf:Benchmark -> Benchmark).
+ *
+ * Returns null if no element found.
+ */
+export function extractXmlRootElement(input) {
+    let s = input;
+    while (true) {
+        s = s.trimStart();
+        if (s.startsWith('<?')) {
+            // XML processing instruction: <?...?>
+            const end = s.indexOf('?>');
+            if (end === -1)
+                return null;
+            s = s.slice(end + 2);
+        }
+        else if (s.startsWith('<!--')) {
+            // XML comment: <!--...-->
+            const end = s.indexOf('-->');
+            if (end === -1)
+                return null;
+            s = s.slice(end + 3);
+        }
+        else if (s.startsWith('<!DOCTYPE') || s.startsWith('<!doctype')) {
+            // DOCTYPE: may have internal subset in [...]
+            const bracket = s.indexOf('[');
+            const gt = s.indexOf('>');
+            if (gt === -1)
+                return null;
+            if (bracket !== -1 && bracket < gt) {
+                // Has internal subset: skip to ]>
+                const endSubset = s.indexOf(']>');
+                if (endSubset === -1)
+                    return null;
+                s = s.slice(endSubset + 2);
+            }
+            else {
+                // Simple DOCTYPE without internal subset
+                s = s.slice(gt + 1);
+            }
+        }
+        else if (s.startsWith('<!')) {
+            // Other markup declaration
+            const end = s.indexOf('>');
+            if (end === -1)
+                return null;
+            s = s.slice(end + 1);
+        }
+        else {
+            break;
+        }
+    }
+    // Match the root element, stripping optional namespace prefix
+    const m = s.match(/^<(?:[a-zA-Z_][\w.-]*:)?([a-zA-Z_][\w.-]*)/);
+    return m?.[1] ?? null;
+}
+//# sourceMappingURL=xml-utils.js.map

package/dist/shared/typescript/xml-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xml-utils.js","sourceRoot":"","sources":["../../../shared/typescript/xml-utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAClB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,sCAAsC;YACtC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5B,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,0BAA0B;YAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5B,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,6CAA6C;YAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,EAAE,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3B,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;gBACnC,kCAAkC;gBAClC,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,SAAS,KAAK,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAClC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,yCAAyC;gBACzC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,2BAA2B;YAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5B,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,MAAM;QACR,CAAC;IACH,CAAC;IACD,8DAA8D;IAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxB,CAAC"}

package/dist/src/detect.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @mitre/hdf-converters/detect
+ *
+ * Sub-path entry point for format auto-detection.
+ * Lightweight — no converter function imports in this path.
+ *
+ * Usage:
+ *   import { registerAllFingerprints, detectConverter } from '@mitre/hdf-converters/detect';
+ *   registerAllFingerprints();
+ *   const result = detectConverter(rawInput);
+ */
+export { detectConverter, detectConverterAll, detectFamily, type DetectionResult } from '../shared/typescript/fingerprint.js';
+export { registerAllFingerprints } from '../shared/typescript/register-all.js';
+export { registerFingerprint, getFingerprints, getIngestFingerprints, getFingerprint, type ConverterFingerprint, type InputFamily, type ConverterDirection, type OutputType, } from '../shared/typescript/registry.js';
+//# sourceMappingURL=detect.d.ts.map

package/dist/src/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../src/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC9H,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,UAAU,GAChB,MAAM,kCAAkC,CAAC"}

package/dist/src/detect.js

@@ -0,0 +1,15 @@
+/**
+ * @mitre/hdf-converters/detect
+ *
+ * Sub-path entry point for format auto-detection.
+ * Lightweight — no converter function imports in this path.
+ *
+ * Usage:
+ *   import { registerAllFingerprints, detectConverter } from '@mitre/hdf-converters/detect';
+ *   registerAllFingerprints();
+ *   const result = detectConverter(rawInput);
+ */
+export { detectConverter, detectConverterAll, detectFamily } from '../shared/typescript/fingerprint.js';
+export { registerAllFingerprints } from '../shared/typescript/register-all.js';
+export { registerFingerprint, getFingerprints, getIngestFingerprints, getFingerprint, } from '../shared/typescript/registry.js';
+//# sourceMappingURL=detect.js.map

package/dist/src/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAwB,MAAM,qCAAqC,CAAC;AAC9H,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,cAAc,GAKf,MAAM,kCAAkC,CAAC"}

package/dist/src/index.d.ts

@@ -0,0 +1,52 @@
+/**
+ * @mitre/hdf-converters
+ *
+ * Converters for security tool outputs and HDF format versions
+ */
+export { convertV1ToV2, isHDFV1, type HDFV1Results, type HDFV2Results, } from '../converters/legacyhdf-to-hdf/typescript/index.js';
+export { convertSarifToHdf } from '../converters/sarif-to-hdf/typescript/index.js';
+export { convertJunitToHdf } from '../converters/junit-to-hdf/typescript/index.js';
+export { convertXccdfResultsToHdf } from '../converters/xccdf-results-to-hdf/typescript/index.js';
+export { convertSnykToHdf } from '../converters/snyk-to-hdf/typescript/index.js';
+export { convertGrypeToHdf } from '../converters/grype-to-hdf/typescript/index.js';
+export { convertNessusToHdf } from '../converters/nessus-to-hdf/typescript/index.js';
+export { convertSonarqubeToHdf } from '../converters/sonarqube-to-hdf/typescript/index.js';
+export { convertAwsConfigToHdf } from '../converters/aws-config-to-hdf/typescript/index.js';
+export { convertGosecToHdf } from '../converters/gosec-to-hdf/typescript/index.js';
+export { convertNiktoToHdf } from '../converters/nikto-to-hdf/typescript/index.js';
+export { convertZapToHdf } from '../converters/zap-to-hdf/typescript/index.js';
+export { convertCyclonedxToHdf } from '../converters/cyclonedx-to-hdf/typescript/index.js';
+export { convertHdfToCsv } from '../converters/hdf-to-csv/typescript/index.js';
+export { convertSplunkToHdf } from '../converters/splunk-to-hdf/typescript/index.js';
+export { convertHdfToXml } from '../converters/hdf-to-xml/typescript/index.js';
+export { convertGitlabToHdf } from '../converters/gitlab-to-hdf/typescript/index.js';
+export { convertTrufflehogToHdf } from '../converters/trufflehog-to-hdf/typescript/index.js';
+export { convertBurpsuiteToHdf } from '../converters/burpsuite-to-hdf/typescript/index.js';
+export { convertDbprotectToHdf } from '../converters/dbprotect-to-hdf/typescript/index.js';
+export { convertTwistlockToHdf } from '../converters/twistlock-to-hdf/typescript/index.js';
+export { convertDeptrackToHdf } from '../converters/deptrack-to-hdf/typescript/index.js';
+export { convertJfrogXrayToHdf } from '../converters/jfrog-xray-to-hdf/typescript/index.js';
+export { convertNeuvectorToHdf } from '../converters/neuvector-to-hdf/typescript/index.js';
+export { convertFortifyToHdf } from '../converters/fortify-to-hdf/typescript/index.js';
+export { convertPrismaToHdf } from '../converters/prisma-to-hdf/typescript/index.js';
+export { convertNetsparkerToHdf } from '../converters/netsparker-to-hdf/typescript/index.js';
+export { convertScoutsuiteToHdf } from '../converters/scoutsuite-to-hdf/typescript/index.js';
+export { convertConveyorToHdf } from '../converters/conveyor-to-hdf/typescript/index.js';
+export { convertVeracodeToHdf } from '../converters/veracode-to-hdf/typescript/index.js';
+export { convertMsftSecureScoreToHdf } from '../converters/msft-secure-score-to-hdf/typescript/index.js';
+export { convertMsftDefenderDevopsToHdf } from '../converters/msft-defender-devops-to-hdf/typescript/index.js';
+export { convertMsftDefenderCloudToHdf } from '../converters/msft-defender-cloud-to-hdf/typescript/index.js';
+export { convertMsftDefenderEndpointToHdf } from '../converters/msft-defender-endpoint-to-hdf/typescript/index.js';
+export { convertHdfToXccdf } from '../converters/hdf-to-xccdf/typescript/index.js';
+export { convertHdfToOscalSar } from '../converters/hdf-to-oscal-sar/typescript/index.js';
+export { convertHdfToOscalPoam } from '../converters/hdf-to-oscal-poam/typescript/index.js';
+export { convertIonchannelToHdf } from '../converters/ionchannel-to-hdf/typescript/index.js';
+export { convertOscalCatalogToHdf } from '../converters/oscal-to-hdf/typescript/index.js';
+export { convertOscalProfileToHdf } from '../converters/oscal-to-hdf/typescript/index.js';
+export { convertOscalComponentToHdf } from '../converters/oscal-to-hdf/typescript/index.js';
+export { convertOscalSspToHdf } from '../converters/oscal-to-hdf/typescript/index.js';
+export { convertOscalSapToHdf } from '../converters/oscal-to-hdf/typescript/index.js';
+export { convertOscalPoamToHdf } from '../converters/oscal-to-hdf/typescript/index.js';
+export { convertOscalSarToHdf } from '../converters/oscal-to-hdf/typescript/index.js';
+export { detectOscalDocumentType } from '../converters/oscal-to-hdf/typescript/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,aAAa,EACb,OAAO,EACP,KAAK,YAAY,EACjB,KAAK,YAAY,GAClB,MAAM,oDAAoD,CAAC;AAG5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAGlG,OAAO,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAGjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAGrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAG3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAG5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAG/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAG3F,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAG/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAGrF,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAG/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAGrF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qDAAqD,CAAC;AAG7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAG3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAG3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAG3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,mDAAmD,CAAC;AAGzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAG5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAG3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,kDAAkD,CAAC;AAGvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAGrF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qDAAqD,CAAC;AAG7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qDAAqD,CAAC;AAG7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,mDAAmD,CAAC;AAGzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mDAAmD,CAAC;AAGzF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4DAA4D,CAAC;AAGzG,OAAO,EAAE,8BAA8B,EAAE,MAAM,+DAA+D,CAAC;AAG/G,OAAO,EAAE,6BAA6B,EAAE,MAAM,8DAA8D,CAAC;AAG7G,OAAO,EAAE,gCAAgC,EAAE,MAAM,iEAAiE,CAAC;AAGnH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAC;AAG1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAG5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,qDAAqD,CAAC;AAG7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC"}