@mitre/hdf-fixtures 3.7.2 → 3.8.0-next.42533588944.1

package/README.md

@@ -51,10 +51,10 @@ Fixtures here are **real tool output**, or a schema-valid document derived from
 
 | File | Source | Consumers |
 |------|--------|-----------|
-| `inspec-multilayered.json` | InSpec runner, multi-overlay scan | hdf-extension-graph TS + Go tests + hdf-parsers parser parity test + hdf-engine compliance tests (TS + Go). The bug-exhibiting fixture for `hdf-libs-2nm0` — bare timestamps that broke parsers before #83/#828d landed. Moved from `hdf-extension-graph/test/fixtures/multilayered-inspec.json`. The overlay chain re-reports the same requirement id in every layer it touches (534 ids appear more than once, 406 of them with differing statuses, and `SV-257777` twice within a single baseline), which is what hdf-engine's duplicate-id threshold tests need. |
+| `inspec-multilayered.json` | InSpec runner, multi-overlay scan | hdf-extension-graph TS + Go tests + hdf-parsers parser parity test + hdf-engine compliance tests (TS + Go) + hdf-diff baseline attribution tests (TS + Go). The bug-exhibiting fixture for `hdf-libs-2nm0` — bare timestamps that broke parsers before #83/#828d landed. Moved from `hdf-extension-graph/test/fixtures/multilayered-inspec.json`. The overlay chain re-reports the same requirement id in every layer it touches (534 ids appear more than once, 406 of them with differing statuses, and `SV-257777` twice within a single baseline), which is what hdf-engine's duplicate-id threshold tests need. |
 | `minimal.json` | Hand-crafted minimal valid HDF Results doc | hdf-to-xml converter (TS + Go) + hdf-parsers integration test + hdf-validators integration test. The smallest schema-valid HDF Results document — single baseline, one passing requirement. Moved from `hdf-converters/converters/hdf-to-xml/fixtures/input/minimal.json`. |
 | `duplicate-baselines.json` | Prisma Cloud HDF results (`prisma-to-hdf`) — 16 baselines, 94 requirements, repeated (name, id) keys. Constructed for merge/correlation testing, PR #362. | hdf-engine TS + Go (filter/query index-uniqueness) + hdf-cli MCP tools (inspect/aggregate/compliance) + hdf-to-html converter TS + Go (same-named baselines are labelled by title, and no component carries a count). Moved from `hdf-engine/testdata/duplicate-baselines.json` and `hdf-cli/internal/mcp/tools/testdata/duplicate-baselines.json`. Byte-identical to `hdf-converters/converters/prisma-to-hdf/fixtures/expected/prismacloud_sample.csv.hdf.json` (sha256 `7273e11d8bf3d55d…`); `fixtures_test.go` pins both. |
-| `merge-grype.json` | Grype HDF results (`grype-to-hdf`, Grype 0.79.3) — one baseline, duplicate requirement ids. Constructed for merge/correlation testing, PR #362. | hdf-engine TS + Go (merge parity) + hdf-cli MCP tools (query correlation, multi-source). Moved from `hdf-engine/testdata/merge-grype.json` and `hdf-cli/internal/mcp/tools/testdata/grype-duplicate-ids.json`. |
+| `merge-grype.json` | Grype HDF results (`grype-to-hdf`, Grype 0.79.3) — one baseline, duplicate requirement ids. **Do not regenerate:** grype-to-hdf now rolls duplicate ids into one requirement per CVE, so a fresh conversion would carry none and silently gut the merge/correlation tests below. Constructed for merge/correlation testing, PR #362. | hdf-engine TS + Go (merge parity) + hdf-cli MCP tools (query correlation, multi-source). Moved from `hdf-engine/testdata/merge-grype.json` and `hdf-cli/internal/mcp/tools/testdata/grype-duplicate-ids.json`. |
 | `merge-zap.json` | OWASP ZAP HDF results (`zap-to-hdf`, ZAP 2.7.0) — four baselines/components, no ids. Constructed for merge/correlation testing, PR #362. | hdf-engine TS + Go (merge parity) + hdf-cli MCP tools (inspect, sources, query multi-source) + hdf-cli MCP evals (sources validation). Moved from `hdf-engine/testdata/merge-zap.json` and `hdf-cli/internal/mcp/tools/testdata/zap-webgoat.json`. |
 
 ### `baseline/` — HDF Baseline docs

package/dist/index.d.ts

@@ -1,4 +1,3 @@
-//#region src/index.d.ts
 interface FixtureRef {
   path: string;
   read: () => string;
@@ -45,5 +44,5 @@ export declare const all: {
     readonly wrapper: FixtureRef;
   };
 };
-//#endregion
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"mappings":";UA0BU;EACR;EACA;;qBAYW;;;;;;;qBASA;wBAAA;;qBAKA;sBAAA;qBAAA;;qBAQA;;;;;;qBAOA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"mappings":"A,UA0BU;EACR;EACA;;qBAYW;;;;;;;qBASA;;;qBAKA;;;;qBAQA;;;;;;qBAOA"}

package/dist/index.js

@@ -1,7 +1,7 @@
 import { readFileSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
-//#region src/index.ts
+// src/index.ts
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const PACKAGE_ROOT = path.resolve(__dirname, "..");
 function fixture(category, name) {
@@ -35,7 +35,6 @@ const all = {
 	amendments,
 	inspec
 };
-//#endregion
 export { all, amendments, baseline, inspec, results };
 
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mitre/hdf-fixtures",
-  "version": "3.7.2",
+  "version": "3.8.0-next.42533588944.1",
   "description": "Shared real-world HDF reference fixtures for cross-package consumers (parsers, validators, extension-graph)",
   "type": "module",
   "main": "./dist/index.js",