@mitre/hdf-extension-graph 2.0.0

package/LICENSE.md

@@ -0,0 +1,55 @@
+# License
+
+Copyright © 2025 The MITRE Corporation.
+
+Approved for Public Release; Distribution Unlimited. Case Number 18-3678.
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may
+not use this file except in compliance with the License. You may obtain a
+copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+License for the specific language governing permissions and limitations
+under the License.
+
+## Redistribution Terms
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+- Redistributions of source code must retain the above copyright/digital
+  rights legend, this list of conditions and the following Notice.
+- Redistributions in binary form must reproduce the above
+  copyright/digital rights legend, this list of conditions and the
+  following Notice in the documentation and/or other materials provided
+  with the distribution.
+- Neither the name of The MITRE Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this software
+  without specific prior written permission.
+
+## Notice
+
+The MITRE Corporation grants permission to reproduce, distribute, modify, and
+otherwise use this software to the extent permitted by the licensed terms
+provided in the LICENSE file included with this project.
+
+This software was produced by The MITRE Corporation for the U.S. Government
+under contract. As such the U.S. Government has certain use and data
+rights in this software. No use other than those granted to the U.S.
+Government, or to those acting on behalf of the U.S. Government, under
+these contract arrangements is authorized without the express written
+permission of The MITRE Corporation.
+
+Some files in this codebase were generated by generative AI, under the
+direction and review of The MITRE Corporation employees, for the purpose of
+development efficiency. All AI-generated code functionality was validated
+by standard quality and assurance testing.
+
+For further information, please contact The MITRE Corporation,
+Contracts Management Office, 7515 Colshire Drive, McLean, VA 22102-7539,
+(703) 983-6000.

package/README.md

@@ -0,0 +1,144 @@
+# @mitre/hdf-extension-graph
+
+Bidirectional extension graph processing for HDF baseline hierarchies. Builds a navigable graph from `HdfResults` files that reveals how baselines (profiles) and requirements (controls) relate across extension/overlay layers.
+
+Ports the algorithm from Heimdall2's `context.ts` to the HDF v2 schema.
+
+## Installation
+
+```bash
+pnpm add @mitre/hdf-extension-graph
+```
+
+Requires `@mitre/hdf-schema` as a peer dependency.
+
+## Usage
+
+### Build the graph
+
+```typescript
+import { buildExtensionGraph } from '@mitre/hdf-extension-graph';
+import type { HdfResults } from '@mitre/hdf-schema';
+
+const hdfResults: HdfResults = JSON.parse(fileContents);
+const graph = buildExtensionGraph(hdfResults);
+```
+
+### Navigate baselines
+
+```typescript
+// Find root baselines (no parent)
+const roots = graph.rootBaselines;
+
+// Find a specific baseline
+const stig = graph.findBaseline('rhel9-stig-baseline');
+
+// See what extends it
+for (const overlay of stig.extendedBy) {
+  console.log(`${overlay.data.name} extends ${stig.data.name}`);
+}
+```
+
+### Navigate requirements
+
+```typescript
+// Find all instances of a control across all baselines
+const controls = graph.findRequirements('SV-238196');
+
+// Get the root (base) control
+const root = controls[1].root; // walks up the chain
+
+// Get the full code with all layers
+console.log(controls[1].fullCode);
+// # my-overlay
+// describe sshd_config do
+//   its("ClientAliveInterval") { should cmp <= 300 }
+// end
+//
+// # rhel9-stig-baseline
+// describe sshd_config do
+//   its("ClientAliveInterval") { should cmp <= 600 }
+// end
+```
+
+### Detect changes
+
+```typescript
+const overlay = graph.baselines[1].requirements[0];
+
+// Is this overlay just inheriting, or did it change something?
+if (!overlay.isRedundant) {
+  console.log('This overlay modifies the base control');
+}
+
+// What specifically changed?
+for (const mod of overlay.modifications) {
+  console.log(`${mod.field}: ${mod.originalValue} → ${mod.newValue}`);
+}
+// impact: 0.5 → 0.9
+// title: SSH timeout → SSH timeout (project)
+```
+
+### Walk the chain
+
+```typescript
+// Ordered list of baselines from root to current
+const chain = overlay.extensionChain;
+console.log(chain.map(b => b.data.name));
+// ['disa-rhel7-stig', 'cms-rhel7-overlay', 'project-overlay']
+```
+
+## API
+
+### `buildExtensionGraph(results: HdfResults): ExtensionGraph`
+
+Builds a bidirectional extension graph from an HDF Results file. Links baselines via `parentBaseline` and requirements by matching `id` across linked baselines.
+
+### `ExtensionGraph`
+
+| Property / Method | Type | Description |
+|---|---|---|
+| `baselines` | `ContextualizedBaseline[]` | All baselines in the graph |
+| `requirements` | `ContextualizedRequirement[]` | All requirements across all baselines |
+| `rootBaselines` | `ContextualizedBaseline[]` | Baselines with no parent |
+| `findBaseline(name)` | `ContextualizedBaseline \| undefined` | Find baseline by name |
+| `findRequirements(id)` | `ContextualizedRequirement[]` | Find all requirements with given id |
+
+### `ContextualizedBaseline`
+
+| Property | Type | Description |
+|---|---|---|
+| `data` | `EvaluatedBaseline` | Original baseline data |
+| `sourcedFrom` | `HdfResults` | The results file this came from |
+| `extendsFrom` | `ContextualizedBaseline[]` | Parent baselines |
+| `extendedBy` | `ContextualizedBaseline[]` | Child baselines |
+| `requirements` | `ContextualizedRequirement[]` | Wrapped requirements |
+
+### `ContextualizedRequirement`
+
+| Property | Type | Description |
+|---|---|---|
+| `data` | `EvaluatedRequirement` | Original requirement data |
+| `sourcedFrom` | `ContextualizedBaseline` | Owning baseline |
+| `extendsFrom` | `ContextualizedRequirement[]` | Parent requirements |
+| `extendedBy` | `ContextualizedRequirement[]` | Child requirements |
+| `root` | `ContextualizedRequirement` | Base requirement at bottom of chain |
+| `isRedundant` | `boolean` | True if code is empty or matches root |
+| `fullCode` | `string` | Concatenated code from all layers |
+| `extensionChain` | `ContextualizedBaseline[]` | Baselines from root to leaf |
+| `modifications` | `Modification[]` | Fields changed vs immediate parent |
+
+### `Modification`
+
+```typescript
+interface Modification {
+  field: string;        // 'impact', 'title', or 'severity'
+  originalValue: unknown;
+  newValue: unknown;
+  inBaseline: string;   // Name of the baseline making the change
+}
+```
+
+## License
+
+Apache-2.0

package/dist/index.d.ts

@@ -0,0 +1,81 @@
+import type { HdfResults, EvaluatedBaseline, EvaluatedRequirement } from '@mitre/hdf-schema';
+/** A detected change between an overlay requirement and its parent. */
+export interface Modification {
+    field: string;
+    originalValue: unknown;
+    newValue: unknown;
+    inBaseline: string;
+}
+/**
+ * Wraps an EvaluatedRequirement with bidirectional extension links
+ * and derived properties for navigating extension chains.
+ */
+export declare class ContextualizedRequirement {
+    /** The original requirement data. */
+    readonly data: EvaluatedRequirement;
+    /** The baseline this requirement belongs to. */
+    readonly sourcedFrom: ContextualizedBaseline;
+    /** Requirements in parent baselines that this requirement extends (overlays). */
+    readonly extendsFrom: ContextualizedRequirement[];
+    /** Requirements in child baselines that extend this requirement. */
+    readonly extendedBy: ContextualizedRequirement[];
+    constructor(data: EvaluatedRequirement, sourcedFrom: ContextualizedBaseline);
+    /** The root (base) requirement at the bottom of the extension chain. */
+    get root(): ContextualizedRequirement;
+    /** True if this overlay adds no new code (empty/undefined or matches root). */
+    get isRedundant(): boolean;
+    /**
+     * Full code concatenated from all layers, with baseline name headers.
+     * Skips redundant overlay layers. Returns empty string if no code exists.
+     */
+    get fullCode(): string;
+    /** Ordered chain of baselines from root to this requirement's baseline. */
+    get extensionChain(): ContextualizedBaseline[];
+    /** Fields that differ between this requirement and its immediate parent. */
+    get modifications(): Modification[];
+}
+/**
+ * Wraps an EvaluatedBaseline with bidirectional extension links
+ * and contextualized requirements.
+ */
+export declare class ContextualizedBaseline {
+    /** The original baseline data. */
+    readonly data: EvaluatedBaseline;
+    /** The HdfResults this baseline was sourced from. */
+    readonly sourcedFrom: HdfResults;
+    /** Parent baselines that this baseline extends. */
+    readonly extendsFrom: ContextualizedBaseline[];
+    /** Child baselines that extend this baseline. */
+    readonly extendedBy: ContextualizedBaseline[];
+    /** Contextualized wrappers for each requirement in this baseline. */
+    readonly requirements: ContextualizedRequirement[];
+    constructor(data: EvaluatedBaseline, sourcedFrom: HdfResults);
+}
+/**
+ * A bidirectional extension graph built from an HDF Results file.
+ * Contains all baselines and requirements with their extension relationships.
+ */
+export declare class ExtensionGraph {
+    /** All contextualized baselines in the graph. */
+    readonly baselines: readonly ContextualizedBaseline[];
+    /** All contextualized requirements across all baselines. */
+    readonly requirements: readonly ContextualizedRequirement[];
+    constructor(baselines: readonly ContextualizedBaseline[], requirements: readonly ContextualizedRequirement[]);
+    /** Find a baseline by name. Returns undefined if not found. */
+    findBaseline(name: string): ContextualizedBaseline | undefined;
+    /** Find all requirements with the given id across all baselines. */
+    findRequirements(id: string): ContextualizedRequirement[];
+    /** Baselines that have no parent (root of extension chains). */
+    get rootBaselines(): ContextualizedBaseline[];
+}
+/**
+ * Build a bidirectional extension graph from an HDF Results file.
+ *
+ * Four phases:
+ * 1. Wrap each EvaluatedBaseline in a ContextualizedBaseline
+ * 2. Link baselines via parentBaseline name matching (bidirectional)
+ * 3. Collect all requirements into a flat array
+ * 4. Link requirements by id matching across linked baselines
+ */
+export declare function buildExtensionGraph(results: HdfResults): ExtensionGraph;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAK7F,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,yBAAyB;IACpC,qCAAqC;IACrC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAEpC,gDAAgD;IAChD,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAE7C,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,yBAAyB,EAAE,CAAM;IAEvD,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,yBAAyB,EAAE,CAAM;gBAE1C,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,sBAAsB;IAK3E,wEAAwE;IACxE,IAAI,IAAI,IAAI,yBAAyB,CAMpC;IAED,+EAA+E;IAC/E,IAAI,WAAW,IAAI,OAAO,CASzB;IAED;;;OAGG;IACH,IAAI,QAAQ,IAAI,MAAM,CAcrB;IAED,2EAA2E;IAC3E,IAAI,cAAc,IAAI,sBAAsB,EAAE,CAK7C;IAED,4EAA4E;IAC5E,IAAI,aAAa,IAAI,YAAY,EAAE,CAmBlC;CACF;AAED;;;GAGG;AACH,qBAAa,sBAAsB;IACjC,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAEjC,qDAAqD;IACrD,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IAEjC,mDAAmD;IACnD,QAAQ,CAAC,WAAW,EAAE,sBAAsB,EAAE,CAAM;IAEpD,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,sBAAsB,EAAE,CAAM;IAEnD,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,yBAAyB,EAAE,CAAC;gBAEvC,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU;CAO7D;AAED;;;GAGG;AACH,qBAAa,cAAc;IACzB,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAEtD,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,SAAS,yBAAyB,EAAE,CAAC;gBAG1D,SAAS,EAAE,SAAS,sBAAsB,EAAE,EAC5C,YAAY,EAAE,SAAS,yBAAyB,EAAE;IAMpD,+DAA+D;IAC/D,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAI9D,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,yBAAyB,EAAE;IAIzD,gEAAgE;IAChE,IAAI,aAAa,IAAI,sBAAsB,EAAE,CAE5C;CACF;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,UAAU,GAAG,cAAc,CAgDvE"}

package/dist/index.js

@@ -0,0 +1,171 @@
+/** Fields compared for modification detection between overlay and parent. */
+const TRACKED_FIELDS = ['impact', 'title', 'severity'];
+/**
+ * Wraps an EvaluatedRequirement with bidirectional extension links
+ * and derived properties for navigating extension chains.
+ */
+export class ContextualizedRequirement {
+    constructor(data, sourcedFrom) {
+        /** Requirements in parent baselines that this requirement extends (overlays). */
+        this.extendsFrom = [];
+        /** Requirements in child baselines that extend this requirement. */
+        this.extendedBy = [];
+        this.data = data;
+        this.sourcedFrom = sourcedFrom;
+    }
+    /** The root (base) requirement at the bottom of the extension chain. */
+    get root() {
+        if (this.extendsFrom.length === 0) {
+            return this;
+        }
+        // Walk to the first parent's root (first match, like Heimdall2)
+        return this.extendsFrom[0].root;
+    }
+    /** True if this overlay adds no new code (empty/undefined or matches root). */
+    get isRedundant() {
+        if (this.extendsFrom.length === 0) {
+            return false;
+        }
+        const code = this.data.code;
+        if (!code) {
+            return true;
+        }
+        return code === this.root.data.code;
+    }
+    /**
+     * Full code concatenated from all layers, with baseline name headers.
+     * Skips redundant overlay layers. Returns empty string if no code exists.
+     */
+    get fullCode() {
+        if (this.isRedundant && this.extendsFrom.length > 0) {
+            return this.extendsFrom[0].fullCode;
+        }
+        const code = this.data.code;
+        if (!code) {
+            return '';
+        }
+        const header = `# ${this.sourcedFrom.data.name}\n${code}`;
+        if (this.extendsFrom.length === 0) {
+            return header;
+        }
+        const parentCode = this.extendsFrom[0].fullCode;
+        return parentCode ? `${header}\n\n${parentCode}` : header;
+    }
+    /** Ordered chain of baselines from root to this requirement's baseline. */
+    get extensionChain() {
+        if (this.extendsFrom.length === 0) {
+            return [this.sourcedFrom];
+        }
+        return [...this.extendsFrom[0].extensionChain, this.sourcedFrom];
+    }
+    /** Fields that differ between this requirement and its immediate parent. */
+    get modifications() {
+        if (this.extendsFrom.length === 0) {
+            return [];
+        }
+        const parent = this.extendsFrom[0];
+        const mods = [];
+        for (const field of TRACKED_FIELDS) {
+            const parentVal = parent.data[field];
+            const thisVal = this.data[field];
+            if (parentVal !== thisVal) {
+                mods.push({
+                    field,
+                    originalValue: parentVal,
+                    newValue: thisVal,
+                    inBaseline: this.sourcedFrom.data.name,
+                });
+            }
+        }
+        return mods;
+    }
+}
+/**
+ * Wraps an EvaluatedBaseline with bidirectional extension links
+ * and contextualized requirements.
+ */
+export class ContextualizedBaseline {
+    constructor(data, sourcedFrom) {
+        /** Parent baselines that this baseline extends. */
+        this.extendsFrom = [];
+        /** Child baselines that extend this baseline. */
+        this.extendedBy = [];
+        this.data = data;
+        this.sourcedFrom = sourcedFrom;
+        this.requirements = data.requirements.map((req) => new ContextualizedRequirement(req, this));
+    }
+}
+/**
+ * A bidirectional extension graph built from an HDF Results file.
+ * Contains all baselines and requirements with their extension relationships.
+ */
+export class ExtensionGraph {
+    constructor(baselines, requirements) {
+        this.baselines = baselines;
+        this.requirements = requirements;
+    }
+    /** Find a baseline by name. Returns undefined if not found. */
+    findBaseline(name) {
+        return this.baselines.find((b) => b.data.name === name);
+    }
+    /** Find all requirements with the given id across all baselines. */
+    findRequirements(id) {
+        return this.requirements.filter((r) => r.data.id === id);
+    }
+    /** Baselines that have no parent (root of extension chains). */
+    get rootBaselines() {
+        return this.baselines.filter((b) => !b.data.parentBaseline);
+    }
+}
+/**
+ * Build a bidirectional extension graph from an HDF Results file.
+ *
+ * Four phases:
+ * 1. Wrap each EvaluatedBaseline in a ContextualizedBaseline
+ * 2. Link baselines via parentBaseline name matching (bidirectional)
+ * 3. Collect all requirements into a flat array
+ * 4. Link requirements by id matching across linked baselines
+ */
+export function buildExtensionGraph(results) {
+    // Phase 1: Wrap baselines
+    const baselineMap = new Map();
+    const baselines = [];
+    for (const baseline of results.baselines) {
+        const ctx = new ContextualizedBaseline(baseline, results);
+        baselines.push(ctx);
+        baselineMap.set(baseline.name, ctx);
+    }
+    // Phase 2: Link baselines via parentBaseline
+    for (const ctx of baselines) {
+        const parentName = ctx.data.parentBaseline;
+        if (parentName) {
+            const parent = baselineMap.get(parentName);
+            if (parent) {
+                ctx.extendsFrom.push(parent);
+                parent.extendedBy.push(ctx);
+            }
+        }
+    }
+    // Phase 3: Collect all requirements
+    const allRequirements = [];
+    for (const ctx of baselines) {
+        allRequirements.push(...ctx.requirements);
+    }
+    // Phase 4: Link requirements by id across linked baselines
+    for (const ctx of baselines) {
+        if (ctx.extendsFrom.length === 0) {
+            continue;
+        }
+        for (const childReq of ctx.requirements) {
+            for (const parentBaseline of ctx.extendsFrom) {
+                const parentReq = parentBaseline.requirements.find((r) => r.data.id === childReq.data.id);
+                if (parentReq) {
+                    childReq.extendsFrom.push(parentReq);
+                    parentReq.extendedBy.push(childReq);
+                }
+            }
+        }
+    }
+    return new ExtensionGraph(baselines, allRequirements);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E,MAAM,cAAc,GAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;AAUnF;;;GAGG;AACH,MAAM,OAAO,yBAAyB;IAapC,YAAY,IAA0B,EAAE,WAAmC;QAN3E,iFAAiF;QACxE,gBAAW,GAAgC,EAAE,CAAC;QAEvD,oEAAoE;QAC3D,eAAU,GAAgC,EAAE,CAAC;QAGpD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,wEAAwE;IACxE,IAAI,IAAI;QACN,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,gEAAgE;QAChE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;IACnC,CAAC;IAED,+EAA+E;IAC/E,IAAI,WAAW;QACb,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,IAAI,QAAQ;QACV,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC;QACjD,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5D,CAAC;IAED,2EAA2E;IAC3E,IAAI,cAAc;QAChB,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACpE,CAAC;IAED,4EAA4E;IAC5E,IAAI,aAAa;QACf,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QACpC,MAAM,IAAI,GAAmB,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,SAAS,GAAI,MAAM,CAAC,IAAgC,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,OAAO,GAAI,IAAI,CAAC,IAAgC,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC;oBACR,KAAK;oBACL,aAAa,EAAE,SAAS;oBACxB,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAgBjC,YAAY,IAAuB,EAAE,WAAuB;QAT5D,mDAAmD;QAC1C,gBAAW,GAA6B,EAAE,CAAC;QAEpD,iDAAiD;QACxC,eAAU,GAA6B,EAAE,CAAC;QAMjD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CACvC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,CAClD,CAAC;IACJ,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,cAAc;IAOzB,YACE,SAA4C,EAC5C,YAAkD;QAElD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED,+DAA+D;IAC/D,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,oEAAoE;IACpE,gBAAgB,CAAC,EAAU;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,gEAAgE;IAChE,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAmB;IACrD,0BAA0B;IAC1B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC9D,MAAM,SAAS,GAA6B,EAAE,CAAC;IAE/C,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1D,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,6CAA6C;IAC7C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC;QAC3C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC7B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,eAAe,GAAgC,EAAE,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,eAAe,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED,2DAA2D;IAC3D,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACxC,KAAK,MAAM,cAAc,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC7C,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,CAAC,IAAI,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CACtC,CAAC;gBACF,IAAI,SAAS,EAAE,CAAC;oBACd,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AACxD,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@mitre/hdf-extension-graph",
+  "version": "2.0.0",
+  "description": "Bidirectional extension graph processing for HDF profile/baseline hierarchies",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/mitre/hdf-libs.git",
+    "directory": "hdf-extension-graph"
+  },
+  "author": "MITRE Corporation",
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@mitre/hdf-schema": "2.0.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [
+    "hdf",
+    "heimdall",
+    "extension",
+    "overlay",
+    "profile",
+    "graph"
+  ],
+  "scripts": {
+    "build": "pnpm clean && tsc",
+    "clean": "rimraf dist",
+    "test": "pnpm run test:ts",
+    "test:ts": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint src test",
+    "lint:fix": "eslint src test --fix"
+  }
+}