@mitre/hdf-diff 2.0.0

package/dist/types.d.ts

@@ -0,0 +1,208 @@
+/**
+ * Why a requirement's effective status changed between two evaluations.
+ *
+ * Aligned with the hdf-comparison schema's Change_Reason enum:
+ * - resultChanged: The underlying test results differ (e.g., a fix was deployed)
+ * - overrideAdded: A new statusOverride (waiver/attestation) was added
+ * - overrideExpired: A statusOverride present in the old scan has expired by the new scan's timestamp
+ * - overrideRemoved: A statusOverride was removed between scans
+ * - overrideModified: An existing statusOverride was modified (reserved for future use)
+ * - impactChanged: The impact score changed (e.g., from 0.7 to 0.0 means N/A)
+ * - baselineUpgraded: The baseline version changed (reserved for future use)
+ * - controlMapped: A control was mapped to a different framework (reserved for future use)
+ * - scannerChanged: A different scanner was used (reserved for future use)
+ * - targetChanged: The scan target changed (reserved for future use)
+ * - configChanged: The scan configuration changed (reserved for future use)
+ * - metadataChanged: Non-impact baseline metadata changed (tags, descriptions, title, etc.)
+ */
+export type ChangeReason = 'resultChanged' | 'overrideAdded' | 'overrideExpired' | 'overrideRemoved' | 'overrideModified' | 'impactChanged' | 'baselineUpgraded' | 'controlMapped' | 'scannerChanged' | 'targetChanged' | 'configChanged' | 'metadataChanged';
+/**
+ * Classification of how a requirement's state changed between evaluations.
+ * Uses SARIF-inspired vocabulary.
+ *
+ * - new: Requirement exists only in the new evaluation (was "added")
+ * - absent: Requirement exists only in the old evaluation (was "removed")
+ * - unchanged: Same effective status in both evaluations
+ * - updated: Status changed but doesn't fit fixed/regressed (was "changed")
+ * - fixed: Was failing/error, now passing
+ * - regressed: Was passing, now failing/error
+ * - moved: Requirement ID changed but content is the same (future use)
+ * - split: One requirement became multiple (future use)
+ * - merged: Multiple requirements became one (future use)
+ */
+export type RequirementState = 'new' | 'absent' | 'unchanged' | 'updated' | 'fixed' | 'regressed' | 'moved' | 'split' | 'merged';
+/**
+ * A field-level difference on a requirement, following JSON Patch-like conventions.
+ */
+export interface FieldChange {
+    /** The operation type: add, remove, or replace */
+    op: 'add' | 'remove' | 'replace';
+    /** Dot-notation path to the changed field (e.g., 'impact', 'tags.cci') */
+    path: string;
+    /** Value in the old evaluation (undefined for 'add' operations) */
+    oldValue?: unknown;
+    /** Value in the new evaluation (undefined for 'remove' operations) */
+    newValue?: unknown;
+}
+/**
+ * The diff for a single requirement across two evaluations.
+ */
+export interface RequirementDiff {
+    /** The requirement ID (e.g., 'SV-238196') */
+    id: string;
+    /** Classification of the change */
+    state: RequirementState;
+    /** Why the status changed — empty array if unchanged */
+    changeReasons: ChangeReason[];
+    /** Full snapshot of the requirement from the old evaluation (null when state = 'new') */
+    before: Record<string, unknown> | null;
+    /** Full snapshot of the requirement from the new evaluation (null when state = 'absent') */
+    after: Record<string, unknown> | null;
+    /** The requirement title (from whichever evaluation has it) */
+    title?: string;
+    /** Effective status in the old evaluation (undefined if new) */
+    oldEffectiveStatus?: string;
+    /** Effective status in the new evaluation (undefined if absent) */
+    newEffectiveStatus?: string;
+    /** Impact in the old evaluation */
+    oldImpact?: number;
+    /** Impact in the new evaluation */
+    newImpact?: number;
+    /** Field-level diffs for non-status fields */
+    fieldChanges: FieldChange[];
+    /** The matching strategy that paired this requirement (e.g., 'exactId') */
+    matchStrategy?: string;
+    /** Confidence of the match (0.0-1.0) */
+    matchConfidence?: number;
+    /** Index into the sources array for fleet mode */
+    sourceIndex?: number;
+}
+/**
+ * Summary counts for the comparison.
+ */
+export interface ComparisonSummary {
+    /** Requirements that went from failing/error to passing */
+    fixed: number;
+    /** Requirements that went from passing to failing/error */
+    regressed: number;
+    /** Requirements present only in the new evaluation (was "added") */
+    new: number;
+    /** Requirements present only in the old evaluation (was "removed") */
+    absent: number;
+    /** Requirements with the same effective status */
+    unchanged: number;
+    /** Requirements whose status changed in a way other than fixed/regressed (was "changed") */
+    updated: number;
+    /** Total unique requirements across both evaluations */
+    total: number;
+    /** Number of requirements matched between old and new */
+    matchedCount: number;
+    /** Number of requirements only in old (unmatched) */
+    unmatchedOldCount: number;
+    /** Number of requirements only in new (unmatched) */
+    unmatchedNewCount: number;
+}
+/**
+ * The diff for a single component across two system documents.
+ * Used in systemDrift comparison mode.
+ */
+export interface ComponentDiff {
+    /** Component name */
+    name: string;
+    /** Classification of the change: new, absent, unchanged, or updated */
+    state: 'new' | 'absent' | 'unchanged' | 'updated';
+    /** Component snapshot from the old system (null when state = 'new') */
+    before: Record<string, unknown> | null;
+    /** Component snapshot from the new system (null when state = 'absent') */
+    after: Record<string, unknown> | null;
+    /** Field-level diffs between old and new component */
+    fieldChanges: FieldChange[];
+}
+/**
+ * The diff for a single baseline across two evaluations.
+ */
+export interface BaselineDiff {
+    /** Baseline name */
+    name: string;
+    /** Version in the old evaluation */
+    oldVersion?: string;
+    /** Version in the new evaluation */
+    newVersion?: string;
+    /** Whether this baseline was new, absent, updated, or unchanged */
+    state: 'new' | 'absent' | 'updated' | 'unchanged';
+}
+/**
+ * Metadata about a source document used in the comparison.
+ */
+export interface Source {
+    /** Role of the source in the comparison */
+    role: 'old' | 'new' | 'golden' | 'reference' | 'system';
+    /** Human-readable label */
+    label: string;
+    /** URI to the source document */
+    uri?: string;
+    /** Original format of the source (e.g., 'hdf-results-v2', 'inspec-exec-json-v1') */
+    originalFormat?: string;
+    /** Assessment timestamp from the source document */
+    assessmentTimestamp?: string;
+}
+/**
+ * An annotation attached to a requirement diff.
+ */
+export interface Annotation {
+    /** Human-readable label */
+    label: string;
+    /** Description of the annotation */
+    text: string;
+    /** When the annotation was created */
+    timestamp?: string;
+}
+/**
+ * The top-level comparison result comparing two or more HDF evaluations.
+ */
+export interface HdfComparison {
+    /** Schema version for the comparison format */
+    formatVersion: '1.0.0';
+    /** The mode of comparison */
+    comparisonMode: 'temporal' | 'baseline' | 'fleet' | 'multiSource' | 'baselineEvolution' | 'systemDrift';
+    /** When the comparison was generated */
+    timestamp?: string;
+    /** Source documents used in the comparison */
+    sources: Source[];
+    /** Matching configuration used */
+    matching?: MatchingConfig;
+    /** Aggregate counts */
+    summary: ComparisonSummary;
+    /** Per-baseline diffs */
+    baselineDiffs: BaselineDiff[];
+    /** Per-requirement diffs, sorted by id */
+    requirementDiffs: RequirementDiff[];
+    /** Per-component diffs (systemDrift mode only) */
+    componentDiffs?: ComponentDiff[];
+    /** Per-package diffs from embedded SBOM comparison (systemDrift mode only) */
+    packageDiffs?: import('./sbom.js').PackageDiff[];
+    /** URI identifying the system being compared (systemDrift mode only) */
+    systemRef?: string;
+    /** Requirements that drifted from a golden baseline (future use) */
+    drift?: RequirementDiff[];
+    /** Annotations keyed by requirement ID */
+    annotations?: Record<string, Annotation>;
+    /** Extension data for custom integrations */
+    extensions?: Record<string, unknown>;
+}
+/**
+ * Configuration for how requirements are matched between evaluations.
+ */
+export interface MatchingConfig {
+    /** The primary strategy used for matching requirements across sources */
+    primaryStrategy: string;
+    /** Minimum confidence threshold for a match */
+    confidenceThreshold?: number;
+}
+/** @deprecated Use RequirementState instead */
+export type DiffStatus = RequirementState;
+/** @deprecated Use ComparisonSummary instead */
+export type DiffSummary = ComparisonSummary;
+/** @deprecated Use HdfComparison instead */
+export type HdfDiff = HdfComparison;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,YAAY,GACpB,eAAe,GACf,eAAe,GACf,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,iBAAiB,CAAC;AAEtB;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,gBAAgB,GACxB,KAAK,GACL,QAAQ,GACR,WAAW,GACX,SAAS,GACT,OAAO,GACP,WAAW,GACX,OAAO,GACP,OAAO,GACP,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,EAAE,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,KAAK,EAAE,gBAAgB,CAAC;IACxB,wDAAwD;IACxD,aAAa,EAAE,YAAY,EAAE,CAAC;IAE9B,yFAAyF;IACzF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,4FAA4F;IAC5F,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAEtC,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,8CAA8C;IAC9C,YAAY,EAAE,WAAW,EAAE,CAAC;IAE5B,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wCAAwC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;IAClD,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,sDAAsD;IACtD,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,2CAA2C;IAC3C,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;IACxD,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,aAAa,EAAE,OAAO,CAAC;IACvB,6BAA6B;IAC7B,cAAc,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,GAAG,aAAa,GAAG,mBAAmB,GAAG,aAAa,CAAC;IACxG,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,uBAAuB;IACvB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,yBAAyB;IACzB,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,0CAA0C;IAC1C,gBAAgB,EAAE,eAAe,EAAE,CAAC;IACpC,kDAAkD;IAClD,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,8EAA8E;IAC9E,YAAY,CAAC,EAAE,OAAO,WAAW,EAAE,WAAW,EAAE,CAAC;IACjD,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,eAAe,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAKD,+CAA+C;AAC/C,MAAM,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAE1C,gDAAgD;AAChD,MAAM,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAE5C,4CAA4C;AAC5C,MAAM,MAAM,OAAO,GAAG,aAAa,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/validate.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Result of validating a document against the hdf-comparison schema.
+ */
+export interface ValidationResult {
+    /** Whether the document conforms to the schema */
+    valid: boolean;
+    /** Human-readable error messages (only present when valid is false) */
+    errors?: string[];
+}
+/**
+ * Validate a document against the hdf-comparison schema.
+ *
+ * Loads and compiles all required schemas from the sibling hdf-schema package.
+ * The compiled validator is cached for performance on subsequent calls.
+ *
+ * @param doc - The document to validate (typically the output of `diffHdf()`)
+ * @returns Validation result with `valid` boolean and optional `errors` array
+ */
+export declare function validateComparison(doc: unknown): ValidationResult;
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AASA;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAkGD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAQjE"}

package/dist/validate.js

@@ -0,0 +1,108 @@
+import Ajv2020 from 'ajv/dist/2020.js';
+import addFormats from 'ajv-formats';
+import { readFileSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+/** Schema ID for the hdf-comparison schema */
+const COMPARISON_SCHEMA_ID = 'https://mitre.github.io/hdf-libs/schemas/hdf-comparison/v1.0.0';
+/**
+ * Resolve the path to the hdf-schema package's schemas directory.
+ *
+ * In the monorepo layout, hdf-schema is a sibling package at `../hdf-schema`.
+ * The schemas are in `src/schemas/` within that package.
+ */
+function schemasDir() {
+    // From src/validate.ts (or dist/validate.js), go up to hdf-diff root, then to sibling
+    return resolve(__dirname, '..', '..', 'hdf-schema', 'src', 'schemas');
+}
+/**
+ * Load a JSON schema file from the hdf-schema package.
+ */
+function loadSchema(relativePath) {
+    const fullPath = resolve(schemasDir(), relativePath);
+    return JSON.parse(readFileSync(fullPath, 'utf-8'));
+}
+/** Cached compiled validator function */
+let cachedValidator = null;
+/**
+ * Build and cache an Ajv 2020-12 validator for the hdf-comparison schema.
+ *
+ * Loads schemas in dependency order:
+ * 1. All primitive schemas (common, platform, target, runner, statistics, result, extensions, comparison)
+ * 2. hdf-results schema (defines Evaluated_Requirement, referenced by comparison)
+ * 3. hdf-comparison schema (the top-level schema we validate against)
+ *
+ * The validator is compiled once and cached for all subsequent calls.
+ */
+function getValidator() {
+    if (cachedValidator)
+        return cachedValidator;
+    const ajv = new Ajv2020({
+        strict: false,
+        allErrors: true,
+        validateFormats: true,
+    });
+    addFormats(ajv);
+    // Load all primitive schemas first (order matters for $ref resolution)
+    const primitiveFiles = [
+        'primitives/common.schema.json',
+        'primitives/platform.schema.json',
+        'primitives/target.schema.json',
+        'primitives/runner.schema.json',
+        'primitives/statistics.schema.json',
+        'primitives/result.schema.json',
+        'primitives/amendments.schema.json',
+        'primitives/extensions.schema.json',
+        'primitives/parameter.schema.json',
+        'primitives/component.schema.json',
+        'primitives/data-flow.schema.json',
+        'primitives/system.schema.json',
+        'primitives/comparison.schema.json',
+    ];
+    for (const file of primitiveFiles) {
+        ajv.addSchema(loadSchema(file));
+    }
+    // Load hdf-results (defines Evaluated_Requirement referenced by comparison)
+    ajv.addSchema(loadSchema('hdf-results.schema.json'));
+    // Load and compile hdf-comparison (the top-level schema we validate against)
+    ajv.addSchema(loadSchema('hdf-comparison.schema.json'));
+    // getSchema compiles on first access; the schema was just added so this always succeeds
+    cachedValidator = ajv.getSchema(COMPARISON_SCHEMA_ID);
+    return cachedValidator;
+}
+/**
+ * Format Ajv validation errors into human-readable strings.
+ */
+function formatErrors(validate) {
+    /* c8 ignore next -- Ajv always populates errors array when validation fails */
+    return (validate.errors ?? []).map((err) => {
+        const path = err.instancePath || '/';
+        /* c8 ignore next -- Ajv always populates err.message */
+        const msg = err.message ?? 'unknown error';
+        // Ajv always populates err.params on validation errors.
+        // The else branch exists for defensive typing since params is typed as optional.
+        /* c8 ignore start */
+        return err.params
+            ? `${path}: ${msg} (${JSON.stringify(err.params)})`
+            : `${path}: ${msg}`;
+        /* c8 ignore stop */
+    });
+}
+/**
+ * Validate a document against the hdf-comparison schema.
+ *
+ * Loads and compiles all required schemas from the sibling hdf-schema package.
+ * The compiled validator is cached for performance on subsequent calls.
+ *
+ * @param doc - The document to validate (typically the output of `diffHdf()`)
+ * @returns Validation result with `valid` boolean and optional `errors` array
+ */
+export function validateComparison(doc) {
+    const validate = getValidator();
+    if (validate(doc)) {
+        return { valid: true };
+    }
+    return { valid: false, errors: formatErrors(validate) };
+}
+//# sourceMappingURL=validate.js.map

package/dist/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,kBAAkB,CAAC;AAEvC,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAY1D,8CAA8C;AAC9C,MAAM,oBAAoB,GAAG,gEAAgE,CAAC;AAE9F;;;;;GAKG;AACH,SAAS,UAAU;IACjB,sFAAsF;IACtF,OAAO,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,YAAoB;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,EAAE,EAAE,YAAY,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA4B,CAAC;AAChF,CAAC;AAED,yCAAyC;AACzC,IAAI,eAAe,GAA4B,IAAI,CAAC;AAEpD;;;;;;;;;GASG;AACH,SAAS,YAAY;IACnB,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAE5C,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC;QACtB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;IACH,UAAU,CAAC,GAAG,CAAC,CAAC;IAEhB,uEAAuE;IACvE,MAAM,cAAc,GAAG;QACrB,+BAA+B;QAC/B,iCAAiC;QACjC,+BAA+B;QAC/B,+BAA+B;QAC/B,mCAAmC;QACnC,+BAA+B;QAC/B,mCAAmC;QACnC,mCAAmC;QACnC,kCAAkC;QAClC,kCAAkC;QAClC,kCAAkC;QAClC,+BAA+B;QAC/B,mCAAmC;KACpC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,4EAA4E;IAC5E,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAErD,6EAA6E;IAC7E,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAExD,wFAAwF;IACxF,eAAe,GAAG,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAE,CAAC;IACvD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAA0B;IAC9C,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC;QACrC,wDAAwD;QACxD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC;QAC3C,wDAAwD;QACxD,iFAAiF;QACjF,qBAAqB;QACrB,OAAO,GAAG,CAAC,MAAM;YACf,CAAC,CAAC,GAAG,IAAI,KAAK,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG;YACnD,CAAC,CAAC,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC;QACtB,oBAAoB;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAEhC,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@mitre/hdf-diff",
+  "version": "2.0.0",
+  "description": "Structured comparison of HDF evaluation results — tracks what changed, why, and by how much",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/mitre/hdf-libs.git",
+    "directory": "hdf-diff"
+  },
+  "author": "MITRE Corporation",
+  "license": "Apache-2.0",
+  "dependencies": {
+    "ajv": "^8.17.0",
+    "ajv-formats": "^3.0.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [
+    "hdf",
+    "heimdall",
+    "diff",
+    "comparison",
+    "security",
+    "compliance"
+  ],
+  "scripts": {
+    "build": "pnpm clean && tsc",
+    "clean": "rimraf dist",
+    "test": "pnpm run test:ts",
+    "test:ts": "vitest run",
+    "test:go": "echo 'No Go tests yet in hdf-diff'",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint src test",
+    "lint:fix": "eslint src test --fix"
+  }
+}