@mitre/hdf-generators 3.0.1 → 3.1.0-rc.1

package/LICENSE.md

@@ -0,0 +1,55 @@
+# License
+
+Copyright © 2025 The MITRE Corporation.
+
+Approved for Public Release; Distribution Unlimited. Case Number 18-3678.
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may
+not use this file except in compliance with the License. You may obtain a
+copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+License for the specific language governing permissions and limitations
+under the License.
+
+## Redistribution Terms
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+- Redistributions of source code must retain the above copyright/digital
+  rights legend, this list of conditions and the following Notice.
+- Redistributions in binary form must reproduce the above
+  copyright/digital rights legend, this list of conditions and the
+  following Notice in the documentation and/or other materials provided
+  with the distribution.
+- Neither the name of The MITRE Corporation nor the names of its contributors
+  may be used to endorse or promote products derived from this software
+  without specific prior written permission.
+
+## Notice
+
+The MITRE Corporation grants permission to reproduce, distribute, modify, and
+otherwise use this software to the extent permitted by the licensed terms
+provided in the LICENSE file included with this project.
+
+This software was produced by The MITRE Corporation for the U.S. Government
+under contract. As such the U.S. Government has certain use and data
+rights in this software. No use other than those granted to the U.S.
+Government, or to those acting on behalf of the U.S. Government, under
+these contract arrangements is authorized without the express written
+permission of The MITRE Corporation.
+
+Some files in this codebase were generated by generative AI, under the
+direction and review of The MITRE Corporation employees, for the purpose of
+development efficiency. All AI-generated code functionality was validated
+by standard quality and assurance testing.
+
+For further information, please contact The MITRE Corporation,
+Contracts Management Office, 7515 Colshire Drive, McLean, VA 22102-7539,
+(703) 983-6000.

package/dist/index.d.ts

@@ -1,6 +1,84 @@
-export type { GeneratorOptions, ProfileMetadata, InSpecProfile } from './types.js';
-export { escapeQuotes } from './ruby-escape.js';
-export { generateControlStub } from './control-stub.js';
-export { generateInSpecYml } from './inspec-yml.js';
-export { generateInSpecProfile } from './profile-generator.js';
+import { BaselineRequirement, HdfBaseline } from "@mitre/hdf-schema";
+
+//#region src/types.d.ts
+/**
+ * Options for controlling InSpec profile generation.
+ */
+interface GeneratorOptions {
+  /** Put all controls in a single controls.rb file instead of one file per control. */
+  singleFile?: boolean;
+  /** Override baseline metadata in the generated inspec.yml. */
+  metadata?: ProfileMetadata;
+  /** InSpec version constraint for inspec.yml. Default: '~>6.0'. */
+  inspecVersion?: string;
+}
+/**
+ * Metadata overrides for the generated inspec.yml.
+ */
+interface ProfileMetadata {
+  maintainer?: string;
+  copyright?: string;
+  license?: string;
+  version?: string;
+}
+/**
+ * An in-memory InSpec profile. No file I/O — the CLI is responsible for writing.
+ */
+interface InSpecProfile {
+  /** The inspec.yml content as a YAML string. */
+  inspecYml: string;
+  /** Map of filename (e.g. 'controls/SV-238196.rb') to Ruby source code. */
+  controls: Map<string, string>;
+}
+//#endregion
+//#region src/ruby-escape.d.ts
+/**
+ * Escape a string for use as a Ruby string literal.
+ *
+ * Strategy:
+ * - If the string contains both single and double quotes → %q() wrapper
+ * - If the string contains only single quotes → double-quoted with escaping
+ * - Otherwise → single-quoted with escaping
+ *
+ * Ported from ts-inspec-objects escapeQuotes(), cross-referenced with
+ * inspec-parser's RubyRebuilder.
+ */
+declare function escapeQuotes(s: string): string;
+//#endregion
+//#region src/control-stub.d.ts
+/**
+ * Generate a Ruby InSpec control stub from an HDF BaselineRequirement.
+ *
+ * Output follows the InSpec DSL ordering convention:
+ *   control 'ID' do
+ *     title ...
+ *     desc ...
+ *     desc 'check', ...
+ *     impact ...
+ *     tag key: value
+ *     <code or stub comment>
+ *   end
+ */
+declare function generateControlStub(req: BaselineRequirement): string;
+//#endregion
+//#region src/inspec-yml.d.ts
+/**
+ * Generate an inspec.yml YAML string from an HDF Baseline and options.
+ *
+ * Uses string interpolation — no YAML library needed since the structure
+ * is fixed and shallow.
+ */
+declare function generateInSpecYml(baseline: HdfBaseline, options?: GeneratorOptions): string;
+//#endregion
+//#region src/profile-generator.d.ts
+/**
+ * Generate an in-memory InSpec profile from an HDF Baseline.
+ *
+ * Returns an InSpecProfile with inspec.yml content and a Map of
+ * control filenames to Ruby source code. No file I/O — the CLI
+ * is responsible for writing files to disk.
+ */
+declare function generateInSpecProfile(baseline: HdfBaseline, options?: GeneratorOptions): InSpecProfile;
+//#endregion
+export { type GeneratorOptions, type InSpecProfile, type ProfileMetadata, escapeQuotes, generateControlStub, generateInSpecProfile, generateInSpecYml };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types.ts","../src/ruby-escape.ts","../src/control-stub.ts","../src/inspec-yml.ts","../src/profile-generator.ts"],"mappings":";;;;;;UAGiB,gBAAA;EAAgB;EAE/B,UAAA;EAE0B;EAA1B,QAAA,GAAW,eAAA;EAAX;EAEA,aAAA;AAAA;;;AAMF;UAAiB,eAAA;EACf,UAAA;EACA,SAAA;EACA,OAAA;EACA,OAAA;AAAA;;;;UAMe,aAAA;EAAa;EAE5B,SAAA;EAEa;EAAb,QAAA,EAAU,GAAA;AAAA;;;;;;AA1BZ;;;;;;;;iBCQgB,YAAA,CAAa,CAAA;;;;;ADR7B;;;;;;;;;;AAYA;iBECgB,mBAAA,CAAoB,GAAA,EAAK,mBAAA;;;;AFbzC;;;;;iBGMgB,iBAAA,CACd,QAAA,EAAU,WAAA,EACV,OAAA,GAAU,gBAAA;;;;AHRZ;;;;;;iBISgB,qBAAA,CACd,QAAA,EAAU,WAAA,EACV,OAAA,GAAU,gBAAA,GACT,aAAA"}

package/dist/index.js

@@ -1,5 +1,174 @@
-export { escapeQuotes } from './ruby-escape.js';
-export { generateControlStub } from './control-stub.js';
-export { generateInSpecYml } from './inspec-yml.js';
-export { generateInSpecProfile } from './profile-generator.js';
+//#region src/ruby-escape.ts
+/**
+* Escape a string for use as a Ruby string literal.
+*
+* Strategy:
+* - If the string contains both single and double quotes → %q() wrapper
+* - If the string contains only single quotes → double-quoted with escaping
+* - Otherwise → single-quoted with escaping
+*
+* Ported from ts-inspec-objects escapeQuotes(), cross-referenced with
+* inspec-parser's RubyRebuilder.
+*/
+function escapeQuotes(s) {
+	const hasSingle = s.includes("'");
+	const hasDouble = s.includes("\"");
+	if (hasSingle && hasDouble) return `%q(${s.replace(/\\\)/g, "\\\\)")})`;
+	if (hasSingle) return `"${s.replace(/\\/g, "\\\\").replace(/"/g, "\\\"")}"`;
+	return `'${s.replace(/\\/g, "\\\\").replace(/'/g, "\\'")}'`;
+}
+//#endregion
+//#region src/control-stub.ts
+/**
+* Generate a Ruby InSpec control stub from an HDF BaselineRequirement.
+*
+* Output follows the InSpec DSL ordering convention:
+*   control 'ID' do
+*     title ...
+*     desc ...
+*     desc 'check', ...
+*     impact ...
+*     tag key: value
+*     <code or stub comment>
+*   end
+*/
+function generateControlStub(req) {
+	const lines = [];
+	lines.push(`control '${req.id}' do`);
+	if (req.title) lines.push(`  title ${escapeQuotes(req.title)}`);
+	const defaultDesc = req.descriptions.find((d) => d.label === "default");
+	if (defaultDesc) lines.push(`  desc ${escapeQuotes(defaultDesc.data)}`);
+	const seenDefault = /* @__PURE__ */ new Set();
+	for (const d of req.descriptions) {
+		if (d.label === "default") {
+			if (seenDefault.has("default")) continue;
+			seenDefault.add("default");
+			continue;
+		}
+		lines.push(`  desc '${d.label}', ${escapeQuotes(d.data)}`);
+	}
+	if (req.impact !== void 0) {
+		const impactStr = Number.isInteger(req.impact) ? req.impact.toFixed(1) : String(req.impact);
+		lines.push(`  impact ${impactStr}`);
+	}
+	for (const [key, value] of Object.entries(req.tags)) lines.push(`  ${formatTag(key, value)}`);
+	if (req.code) {
+		lines.push("");
+		lines.push(req.code);
+	} else {
+		lines.push("");
+		lines.push("  # TODO: Add InSpec test code here");
+	}
+	lines.push("end");
+	lines.push("");
+	return lines.join("\n");
+}
+/** Format a single tag key-value pair as Ruby DSL. */
+function formatTag(key, value) {
+	if (value === null || value === void 0) return `tag ${key}: nil`;
+	if (Array.isArray(value)) return `tag ${key}: [${value.map((v) => `'${String(v)}'`).join(", ")}]`;
+	if (typeof value === "boolean") return `tag ${key}: ${value}`;
+	if (typeof value === "string") return `tag ${key}: ${escapeQuotes(value)}`;
+	return `tag ${key}: ${JSON.stringify(value)}`;
+}
+//#endregion
+//#region src/inspec-yml.ts
+/**
+* Generate an inspec.yml YAML string from an HDF Baseline and options.
+*
+* Uses string interpolation — no YAML library needed since the structure
+* is fixed and shallow.
+*/
+function generateInSpecYml(baseline, options) {
+	const lines = [];
+	const meta = options?.metadata;
+	lines.push(`name: ${baseline.name}`);
+	if (baseline.title) lines.push(`title: ${baseline.title}`);
+	const maintainer = meta?.maintainer ?? baseline.maintainer;
+	if (maintainer) lines.push(`maintainer: ${maintainer}`);
+	const copyright = meta?.copyright ?? baseline.copyright;
+	if (copyright) lines.push(`copyright: ${copyright}`);
+	const license = meta?.license ?? baseline.license;
+	if (license) lines.push(`license: ${license}`);
+	if (baseline.summary) lines.push(`summary: ${baseline.summary}`);
+	const version = meta?.version ?? baseline.version;
+	if (version) lines.push(`version: '${version}'`);
+	const inspecVersion = options?.inspecVersion ?? "~>6.0";
+	lines.push(`inspec_version: '${inspecVersion}'`);
+	if (baseline.supports && baseline.supports.length > 0) {
+		lines.push("supports:");
+		for (const support of baseline.supports) {
+			const entries = [];
+			if (support.platformName) entries.push(`  platform-name: ${support.platformName}`);
+			if (support.platformFamily) entries.push(`  platform-family: ${support.platformFamily}`);
+			if (support.platform) entries.push(`  platform: ${support.platform}`);
+			if (support.release) entries.push(`  release: ${support.release}`);
+			if (entries.length > 0) {
+				lines.push(`- ${entries[0].trimStart()}`);
+				for (let i = 1; i < entries.length; i++) lines.push(entries[i]);
+			}
+		}
+	}
+	if (baseline.depends && baseline.depends.length > 0) {
+		lines.push("depends:");
+		for (const dep of baseline.depends) {
+			const entries = [];
+			if (dep.name) entries.push(`name: ${dep.name}`);
+			if (dep.git) entries.push(`git: ${dep.git}`);
+			if (dep.url) entries.push(`url: ${dep.url}`);
+			if (dep.path) entries.push(`path: ${dep.path}`);
+			if (dep.branch) entries.push(`branch: ${dep.branch}`);
+			if (dep.compliance) entries.push(`compliance: ${dep.compliance}`);
+			if (dep.supermarket) entries.push(`supermarket: ${dep.supermarket}`);
+			if (entries.length > 0) {
+				lines.push(`- ${entries[0]}`);
+				for (let i = 1; i < entries.length; i++) lines.push(`  ${entries[i]}`);
+			}
+		}
+	}
+	if (baseline.inputs && baseline.inputs.length > 0) {
+		lines.push("inputs:");
+		for (const input of baseline.inputs) for (const [key, value] of Object.entries(input)) lines.push(`- ${key}: ${formatYamlValue(value)}`);
+	}
+	lines.push("");
+	return lines.join("\n");
+}
+/** Format a value for inline YAML output. */
+function formatYamlValue(value) {
+	if (typeof value === "boolean") return String(value);
+	if (typeof value === "number") return String(value);
+	if (typeof value === "string") return value;
+	return JSON.stringify(value);
+}
+//#endregion
+//#region src/profile-generator.ts
+/**
+* Generate an in-memory InSpec profile from an HDF Baseline.
+*
+* Returns an InSpecProfile with inspec.yml content and a Map of
+* control filenames to Ruby source code. No file I/O — the CLI
+* is responsible for writing files to disk.
+*/
+function generateInSpecProfile(baseline, options) {
+	const inspecYml = generateInSpecYml(baseline, options);
+	const controls = /* @__PURE__ */ new Map();
+	if (baseline.requirements.length === 0) return {
+		inspecYml,
+		controls
+	};
+	if (options?.singleFile) {
+		const stubs = baseline.requirements.map((req) => generateControlStub(req));
+		controls.set("controls/controls.rb", stubs.join("\n"));
+	} else for (const req of baseline.requirements) {
+		const filename = `controls/${req.id.replace(/\.\./g, "").replace(/[/\\]/g, "") || "unknown"}.rb`;
+		controls.set(filename, generateControlStub(req));
+	}
+	return {
+		inspecYml,
+		controls
+	};
+}
+//#endregion
+export { escapeQuotes, generateControlStub, generateInSpecProfile, generateInSpecYml };
+
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/ruby-escape.ts","../src/control-stub.ts","../src/inspec-yml.ts","../src/profile-generator.ts"],"sourcesContent":["/**\n * Escape a string for use as a Ruby string literal.\n *\n * Strategy:\n * - If the string contains both single and double quotes → %q() wrapper\n * - If the string contains only single quotes → double-quoted with escaping\n * - Otherwise → single-quoted with escaping\n *\n * Ported from ts-inspec-objects escapeQuotes(), cross-referenced with\n * inspec-parser's RubyRebuilder.\n */\nexport function escapeQuotes(s: string): string {\n  const hasSingle = s.includes(\"'\");\n  const hasDouble = s.includes('\"');\n\n  if (hasSingle && hasDouble) {\n    // %q() — escape backslashes before ) so Ruby doesn't treat \\) as escaped delimiter\n    return `%q(${s.replace(/\\\\\\)/g, '\\\\\\\\)')})`;\n  }\n\n  if (hasSingle) {\n    // Double-quoted: escape backslashes, then double quotes\n    return `\"${s.replace(/\\\\/g, '\\\\\\\\').replace(/\"/g, '\\\\\"')}\"`;\n  }\n\n  // Single-quoted: escape backslashes, then single quotes\n  return `'${s.replace(/\\\\/g, '\\\\\\\\').replace(/'/g, \"\\\\'\")}'`;\n}\n","import type { BaselineRequirement } from '@mitre/hdf-schema';\nimport { escapeQuotes } from './ruby-escape.js';\n\n/**\n * Generate a Ruby InSpec control stub from an HDF BaselineRequirement.\n *\n * Output follows the InSpec DSL ordering convention:\n *   control 'ID' do\n *     title ...\n *     desc ...\n *     desc 'check', ...\n *     impact ...\n *     tag key: value\n *     <code or stub comment>\n *   end\n */\nexport function generateControlStub(req: BaselineRequirement): string {\n  const lines: string[] = [];\n\n  lines.push(`control '${req.id}' do`);\n\n  // Title\n  if (req.title) {\n    lines.push(`  title ${escapeQuotes(req.title)}`);\n  }\n\n  // Descriptions: default first (as bare `desc`), then labeled\n  const defaultDesc = req.descriptions.find((d) => d.label === 'default');\n  if (defaultDesc) {\n    lines.push(`  desc ${escapeQuotes(defaultDesc.data)}`);\n  }\n\n  const seenDefault = new Set<string>();\n  for (const d of req.descriptions) {\n    if (d.label === 'default') {\n      if (seenDefault.has('default')) {\n        continue; // skip duplicate default\n      }\n      seenDefault.add('default');\n      continue; // already emitted above as bare desc\n    }\n    lines.push(`  desc '${d.label}', ${escapeQuotes(d.data)}`);\n  }\n\n  // Impact — always render with at least one decimal place for 0 and whole numbers\n  if (req.impact !== undefined) {\n    const impactStr = Number.isInteger(req.impact)\n      ? req.impact.toFixed(1)\n      : String(req.impact);\n    lines.push(`  impact ${impactStr}`);\n  }\n\n  // Tags\n  for (const [key, value] of Object.entries(req.tags)) {\n    lines.push(`  ${formatTag(key, value)}`);\n  }\n\n  // Code body or stub placeholder\n  if (req.code) {\n    lines.push('');\n    lines.push(req.code);\n  } else {\n    lines.push('');\n    lines.push('  # TODO: Add InSpec test code here');\n  }\n\n  lines.push('end');\n  lines.push(''); // trailing newline\n\n  return lines.join('\\n');\n}\n\n/** Format a single tag key-value pair as Ruby DSL. */\nfunction formatTag(key: string, value: unknown): string {\n  if (value === null || value === undefined) {\n    return `tag ${key}: nil`;\n  }\n\n  if (Array.isArray(value)) {\n    // Ruby array syntax: tag key: ['val1', 'val2']\n    const items = value.map((v: unknown) => `'${String(v)}'`).join(', ');\n    return `tag ${key}: [${items}]`;\n  }\n\n  if (typeof value === 'boolean') {\n    return `tag ${key}: ${value}`;\n  }\n\n  if (typeof value === 'string') {\n    return `tag ${key}: ${escapeQuotes(value)}`;\n  }\n\n  // Fallback for other types (numbers, objects)\n  return `tag ${key}: ${JSON.stringify(value)}`;\n}\n","import type { HdfBaseline } from '@mitre/hdf-schema';\nimport type { GeneratorOptions } from './types.js';\n\n/**\n * Generate an inspec.yml YAML string from an HDF Baseline and options.\n *\n * Uses string interpolation — no YAML library needed since the structure\n * is fixed and shallow.\n */\nexport function generateInSpecYml(\n  baseline: HdfBaseline,\n  options?: GeneratorOptions,\n): string {\n  const lines: string[] = [];\n  const meta = options?.metadata;\n\n  // Required: name\n  lines.push(`name: ${baseline.name}`);\n\n  // Optional metadata fields\n  if (baseline.title) {\n    lines.push(`title: ${baseline.title}`);\n  }\n\n  const maintainer = meta?.maintainer ?? baseline.maintainer;\n  if (maintainer) {\n    lines.push(`maintainer: ${maintainer}`);\n  }\n\n  const copyright = meta?.copyright ?? baseline.copyright;\n  if (copyright) {\n    lines.push(`copyright: ${copyright}`);\n  }\n\n  const license = meta?.license ?? baseline.license;\n  if (license) {\n    lines.push(`license: ${license}`);\n  }\n\n  if (baseline.summary) {\n    lines.push(`summary: ${baseline.summary}`);\n  }\n\n  // Version: metadata override takes priority\n  const version = meta?.version ?? baseline.version;\n  if (version) {\n    lines.push(`version: '${version}'`);\n  }\n\n  // InSpec version constraint\n  const inspecVersion = options?.inspecVersion ?? '~>6.0';\n  lines.push(`inspec_version: '${inspecVersion}'`);\n\n  // Supports array\n  if (baseline.supports && baseline.supports.length > 0) {\n    lines.push('supports:');\n    for (const support of baseline.supports) {\n      const entries: string[] = [];\n      if (support.platformName) {\n        entries.push(`  platform-name: ${support.platformName}`);\n      }\n      if (support.platformFamily) {\n        entries.push(`  platform-family: ${support.platformFamily}`);\n      }\n      if (support.platform) {\n        entries.push(`  platform: ${support.platform}`);\n      }\n      if (support.release) {\n        entries.push(`  release: ${support.release}`);\n      }\n      if (entries.length > 0) {\n        lines.push(`- ${entries[0]!.trimStart()}`);\n        for (let i = 1; i < entries.length; i++) {\n          lines.push(entries[i]!);\n        }\n      }\n    }\n  }\n\n  // Depends array\n  if (baseline.depends && baseline.depends.length > 0) {\n    lines.push('depends:');\n    for (const dep of baseline.depends) {\n      const entries: string[] = [];\n      if (dep.name) entries.push(`name: ${dep.name}`);\n      if (dep.git) entries.push(`git: ${dep.git}`);\n      if (dep.url) entries.push(`url: ${dep.url}`);\n      if (dep.path) entries.push(`path: ${dep.path}`);\n      if (dep.branch) entries.push(`branch: ${dep.branch}`);\n      if (dep.compliance) entries.push(`compliance: ${dep.compliance}`);\n      if (dep.supermarket) entries.push(`supermarket: ${dep.supermarket}`);\n      if (entries.length > 0) {\n        lines.push(`- ${entries[0]}`);\n        for (let i = 1; i < entries.length; i++) {\n          lines.push(`  ${entries[i]}`);\n        }\n      }\n    }\n  }\n\n  // Inputs array\n  if (baseline.inputs && baseline.inputs.length > 0) {\n    lines.push('inputs:');\n    for (const input of baseline.inputs) {\n      for (const [key, value] of Object.entries(input)) {\n        lines.push(`- ${key}: ${formatYamlValue(value)}`);\n      }\n    }\n  }\n\n  lines.push(''); // trailing newline\n  return lines.join('\\n');\n}\n\n/** Format a value for inline YAML output. */\nfunction formatYamlValue(value: unknown): string {\n  if (typeof value === 'boolean') return String(value);\n  if (typeof value === 'number') return String(value);\n  if (typeof value === 'string') return value;\n  return JSON.stringify(value);\n}\n","import type { HdfBaseline } from '@mitre/hdf-schema';\nimport type { GeneratorOptions, InSpecProfile } from './types.js';\nimport { generateControlStub } from './control-stub.js';\nimport { generateInSpecYml } from './inspec-yml.js';\n\n/**\n * Generate an in-memory InSpec profile from an HDF Baseline.\n *\n * Returns an InSpecProfile with inspec.yml content and a Map of\n * control filenames to Ruby source code. No file I/O — the CLI\n * is responsible for writing files to disk.\n */\nexport function generateInSpecProfile(\n  baseline: HdfBaseline,\n  options?: GeneratorOptions,\n): InSpecProfile {\n  const inspecYml = generateInSpecYml(baseline, options);\n  const controls = new Map<string, string>();\n\n  if (baseline.requirements.length === 0) {\n    return { inspecYml, controls };\n  }\n\n  if (options?.singleFile) {\n    // All controls in a single file\n    const stubs = baseline.requirements.map((req) => generateControlStub(req));\n    controls.set('controls/controls.rb', stubs.join('\\n'));\n  } else {\n    // One file per control — sanitize ID for safe filenames\n    for (const req of baseline.requirements) {\n      const safeId = req.id.replace(/\\.\\./g, '').replace(/[/\\\\]/g, '') || 'unknown';\n      const filename = `controls/${safeId}.rb`;\n      controls.set(filename, generateControlStub(req));\n    }\n  }\n\n  return { inspecYml, controls };\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,aAAa,GAAmB;CAC9C,MAAM,YAAY,EAAE,SAAS,IAAI;CACjC,MAAM,YAAY,EAAE,SAAS,KAAI;AAEjC,KAAI,aAAa,UAEf,QAAO,MAAM,EAAE,QAAQ,SAAS,QAAQ,CAAC;AAG3C,KAAI,UAEF,QAAO,IAAI,EAAE,QAAQ,OAAO,OAAO,CAAC,QAAQ,MAAM,OAAM,CAAC;AAI3D,QAAO,IAAI,EAAE,QAAQ,OAAO,OAAO,CAAC,QAAQ,MAAM,MAAM,CAAC;;;;;;;;;;;;;;;;;ACV3D,SAAgB,oBAAoB,KAAkC;CACpE,MAAM,QAAkB,EAAE;AAE1B,OAAM,KAAK,YAAY,IAAI,GAAG,MAAM;AAGpC,KAAI,IAAI,MACN,OAAM,KAAK,WAAW,aAAa,IAAI,MAAM,GAAG;CAIlD,MAAM,cAAc,IAAI,aAAa,MAAM,MAAM,EAAE,UAAU,UAAU;AACvE,KAAI,YACF,OAAM,KAAK,UAAU,aAAa,YAAY,KAAK,GAAG;CAGxD,MAAM,8BAAc,IAAI,KAAa;AACrC,MAAK,MAAM,KAAK,IAAI,cAAc;AAChC,MAAI,EAAE,UAAU,WAAW;AACzB,OAAI,YAAY,IAAI,UAAU,CAC5B;AAEF,eAAY,IAAI,UAAU;AAC1B;;AAEF,QAAM,KAAK,WAAW,EAAE,MAAM,KAAK,aAAa,EAAE,KAAK,GAAG;;AAI5D,KAAI,IAAI,WAAW,KAAA,GAAW;EAC5B,MAAM,YAAY,OAAO,UAAU,IAAI,OAAO,GAC1C,IAAI,OAAO,QAAQ,EAAE,GACrB,OAAO,IAAI,OAAO;AACtB,QAAM,KAAK,YAAY,YAAY;;AAIrC,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,KAAK,CACjD,OAAM,KAAK,KAAK,UAAU,KAAK,MAAM,GAAG;AAI1C,KAAI,IAAI,MAAM;AACZ,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,IAAI,KAAK;QACf;AACL,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,sCAAsC;;AAGnD,OAAM,KAAK,MAAM;AACjB,OAAM,KAAK,GAAG;AAEd,QAAO,MAAM,KAAK,KAAK;;;AAIzB,SAAS,UAAU,KAAa,OAAwB;AACtD,KAAI,UAAU,QAAQ,UAAU,KAAA,EAC9B,QAAO,OAAO,IAAI;AAGpB,KAAI,MAAM,QAAQ,MAAM,CAGtB,QAAO,OAAO,IAAI,KADJ,MAAM,KAAK,MAAe,IAAI,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CACvC;AAG/B,KAAI,OAAO,UAAU,UACnB,QAAO,OAAO,IAAI,IAAI;AAGxB,KAAI,OAAO,UAAU,SACnB,QAAO,OAAO,IAAI,IAAI,aAAa,MAAM;AAI3C,QAAO,OAAO,IAAI,IAAI,KAAK,UAAU,MAAM;;;;;;;;;;ACpF7C,SAAgB,kBACd,UACA,SACQ;CACR,MAAM,QAAkB,EAAE;CAC1B,MAAM,OAAO,SAAS;AAGtB,OAAM,KAAK,SAAS,SAAS,OAAO;AAGpC,KAAI,SAAS,MACX,OAAM,KAAK,UAAU,SAAS,QAAQ;CAGxC,MAAM,aAAa,MAAM,cAAc,SAAS;AAChD,KAAI,WACF,OAAM,KAAK,eAAe,aAAa;CAGzC,MAAM,YAAY,MAAM,aAAa,SAAS;AAC9C,KAAI,UACF,OAAM,KAAK,cAAc,YAAY;CAGvC,MAAM,UAAU,MAAM,WAAW,SAAS;AAC1C,KAAI,QACF,OAAM,KAAK,YAAY,UAAU;AAGnC,KAAI,SAAS,QACX,OAAM,KAAK,YAAY,SAAS,UAAU;CAI5C,MAAM,UAAU,MAAM,WAAW,SAAS;AAC1C,KAAI,QACF,OAAM,KAAK,aAAa,QAAQ,GAAG;CAIrC,MAAM,gBAAgB,SAAS,iBAAiB;AAChD,OAAM,KAAK,oBAAoB,cAAc,GAAG;AAGhD,KAAI,SAAS,YAAY,SAAS,SAAS,SAAS,GAAG;AACrD,QAAM,KAAK,YAAY;AACvB,OAAK,MAAM,WAAW,SAAS,UAAU;GACvC,MAAM,UAAoB,EAAE;AAC5B,OAAI,QAAQ,aACV,SAAQ,KAAK,oBAAoB,QAAQ,eAAe;AAE1D,OAAI,QAAQ,eACV,SAAQ,KAAK,sBAAsB,QAAQ,iBAAiB;AAE9D,OAAI,QAAQ,SACV,SAAQ,KAAK,eAAe,QAAQ,WAAW;AAEjD,OAAI,QAAQ,QACV,SAAQ,KAAK,cAAc,QAAQ,UAAU;AAE/C,OAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,KAAK,KAAK,QAAQ,GAAI,WAAW,GAAG;AAC1C,SAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,IAClC,OAAM,KAAK,QAAQ,GAAI;;;;AAO/B,KAAI,SAAS,WAAW,SAAS,QAAQ,SAAS,GAAG;AACnD,QAAM,KAAK,WAAW;AACtB,OAAK,MAAM,OAAO,SAAS,SAAS;GAClC,MAAM,UAAoB,EAAE;AAC5B,OAAI,IAAI,KAAM,SAAQ,KAAK,SAAS,IAAI,OAAO;AAC/C,OAAI,IAAI,IAAK,SAAQ,KAAK,QAAQ,IAAI,MAAM;AAC5C,OAAI,IAAI,IAAK,SAAQ,KAAK,QAAQ,IAAI,MAAM;AAC5C,OAAI,IAAI,KAAM,SAAQ,KAAK,SAAS,IAAI,OAAO;AAC/C,OAAI,IAAI,OAAQ,SAAQ,KAAK,WAAW,IAAI,SAAS;AACrD,OAAI,IAAI,WAAY,SAAQ,KAAK,eAAe,IAAI,aAAa;AACjE,OAAI,IAAI,YAAa,SAAQ,KAAK,gBAAgB,IAAI,cAAc;AACpE,OAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,KAAK,KAAK,QAAQ,KAAK;AAC7B,SAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,IAClC,OAAM,KAAK,KAAK,QAAQ,KAAK;;;;AAOrC,KAAI,SAAS,UAAU,SAAS,OAAO,SAAS,GAAG;AACjD,QAAM,KAAK,UAAU;AACrB,OAAK,MAAM,SAAS,SAAS,OAC3B,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,CAC9C,OAAM,KAAK,KAAK,IAAI,IAAI,gBAAgB,MAAM,GAAG;;AAKvD,OAAM,KAAK,GAAG;AACd,QAAO,MAAM,KAAK,KAAK;;;AAIzB,SAAS,gBAAgB,OAAwB;AAC/C,KAAI,OAAO,UAAU,UAAW,QAAO,OAAO,MAAM;AACpD,KAAI,OAAO,UAAU,SAAU,QAAO,OAAO,MAAM;AACnD,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAO,KAAK,UAAU,MAAM;;;;;;;;;;;AC3G9B,SAAgB,sBACd,UACA,SACe;CACf,MAAM,YAAY,kBAAkB,UAAU,QAAQ;CACtD,MAAM,2BAAW,IAAI,KAAqB;AAE1C,KAAI,SAAS,aAAa,WAAW,EACnC,QAAO;EAAE;EAAW;EAAU;AAGhC,KAAI,SAAS,YAAY;EAEvB,MAAM,QAAQ,SAAS,aAAa,KAAK,QAAQ,oBAAoB,IAAI,CAAC;AAC1E,WAAS,IAAI,wBAAwB,MAAM,KAAK,KAAK,CAAC;OAGtD,MAAK,MAAM,OAAO,SAAS,cAAc;EAEvC,MAAM,WAAW,YADF,IAAI,GAAG,QAAQ,SAAS,GAAG,CAAC,QAAQ,UAAU,GAAG,IAAI,UAChC;AACpC,WAAS,IAAI,UAAU,oBAAoB,IAAI,CAAC;;AAIpD,QAAO;EAAE;EAAW;EAAU"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mitre/hdf-generators",
-  "version": "3.0.1",
+  "version": "3.1.0-rc.1",
   "description": "Generate InSpec profile stubs from HDF Baseline definitions",
   "publishConfig": {
     "access": "public"
@@ -10,24 +10,13 @@
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "import": "./dist/index.js",
-      "types": "./dist/index.d.ts"
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
     }
   },
   "files": [
     "dist"
   ],
-  "scripts": {
-    "build": "pnpm clean && tsc",
-    "clean": "rimraf dist",
-    "test": "pnpm run test:ts",
-    "test:ts": "vitest run",
-    "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "type-check": "tsc --noEmit",
-    "lint": "eslint src test",
-    "lint:fix": "eslint src test --fix"
-  },
   "repository": {
     "type": "git",
     "url": "https://github.com/mitre/hdf-libs.git",
@@ -36,10 +25,10 @@
   "author": "MITRE Corporation",
   "license": "Apache-2.0",
   "dependencies": {
-    "@mitre/hdf-schema": "workspace:*"
+    "@mitre/hdf-schema": "^3.1.0-rc.1"
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   },
   "keywords": [
     "hdf",
@@ -48,5 +37,16 @@
     "generator",
     "profile",
     "stig"
-  ]
-}
+  ],
+  "scripts": {
+    "build": "tsdown",
+    "clean": "rimraf dist",
+    "test": "pnpm run test:ts",
+    "test:ts": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint src test",
+    "lint:fix": "eslint src test --fix"
+  }
+}

package/dist/control-stub.d.ts

@@ -1,16 +0,0 @@
-import type { BaselineRequirement } from '@mitre/hdf-schema';
-/**
- * Generate a Ruby InSpec control stub from an HDF BaselineRequirement.
- *
- * Output follows the InSpec DSL ordering convention:
- *   control 'ID' do
- *     title ...
- *     desc ...
- *     desc 'check', ...
- *     impact ...
- *     tag key: value
- *     <code or stub comment>
- *   end
- */
-export declare function generateControlStub(req: BaselineRequirement): string;
-//# sourceMappingURL=control-stub.d.ts.map

package/dist/control-stub.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"control-stub.d.ts","sourceRoot":"","sources":["../src/control-stub.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAG7D;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAsDpE"}

package/dist/control-stub.js

@@ -1,81 +0,0 @@
-import { escapeQuotes } from './ruby-escape.js';
-/**
- * Generate a Ruby InSpec control stub from an HDF BaselineRequirement.
- *
- * Output follows the InSpec DSL ordering convention:
- *   control 'ID' do
- *     title ...
- *     desc ...
- *     desc 'check', ...
- *     impact ...
- *     tag key: value
- *     <code or stub comment>
- *   end
- */
-export function generateControlStub(req) {
-    const lines = [];
-    lines.push(`control '${req.id}' do`);
-    // Title
-    if (req.title) {
-        lines.push(`  title ${escapeQuotes(req.title)}`);
-    }
-    // Descriptions: default first (as bare `desc`), then labeled
-    const defaultDesc = req.descriptions.find((d) => d.label === 'default');
-    if (defaultDesc) {
-        lines.push(`  desc ${escapeQuotes(defaultDesc.data)}`);
-    }
-    const seenDefault = new Set();
-    for (const d of req.descriptions) {
-        if (d.label === 'default') {
-            if (seenDefault.has('default')) {
-                continue; // skip duplicate default
-            }
-            seenDefault.add('default');
-            continue; // already emitted above as bare desc
-        }
-        lines.push(`  desc '${d.label}', ${escapeQuotes(d.data)}`);
-    }
-    // Impact — always render with at least one decimal place for 0 and whole numbers
-    if (req.impact !== undefined) {
-        const impactStr = Number.isInteger(req.impact)
-            ? req.impact.toFixed(1)
-            : String(req.impact);
-        lines.push(`  impact ${impactStr}`);
-    }
-    // Tags
-    for (const [key, value] of Object.entries(req.tags)) {
-        lines.push(`  ${formatTag(key, value)}`);
-    }
-    // Code body or stub placeholder
-    if (req.code) {
-        lines.push('');
-        lines.push(req.code);
-    }
-    else {
-        lines.push('');
-        lines.push('  # TODO: Add InSpec test code here');
-    }
-    lines.push('end');
-    lines.push(''); // trailing newline
-    return lines.join('\n');
-}
-/** Format a single tag key-value pair as Ruby DSL. */
-function formatTag(key, value) {
-    if (value === null || value === undefined) {
-        return `tag ${key}: nil`;
-    }
-    if (Array.isArray(value)) {
-        // Ruby array syntax: tag key: ['val1', 'val2']
-        const items = value.map((v) => `'${String(v)}'`).join(', ');
-        return `tag ${key}: [${items}]`;
-    }
-    if (typeof value === 'boolean') {
-        return `tag ${key}: ${value}`;
-    }
-    if (typeof value === 'string') {
-        return `tag ${key}: ${escapeQuotes(value)}`;
-    }
-    // Fallback for other types (numbers, objects)
-    return `tag ${key}: ${JSON.stringify(value)}`;
-}
-//# sourceMappingURL=control-stub.js.map

package/dist/control-stub.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"control-stub.js","sourceRoot":"","sources":["../src/control-stub.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAwB;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAErC,QAAQ;IACR,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,WAAW,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,6DAA6D;IAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACxE,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,UAAU,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,SAAS,CAAC,yBAAyB;YACrC,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC3B,SAAS,CAAC,qCAAqC;QACjD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,MAAM,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,iFAAiF;IACjF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;IACP,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,gCAAgC;IAChC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB;IAEnC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,sDAAsD;AACtD,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,+CAA+C;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,OAAO,GAAG,MAAM,KAAK,GAAG,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,OAAO,GAAG,KAAK,KAAK,EAAE,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,OAAO,GAAG,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,8CAA8C;IAC9C,OAAO,OAAO,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AAChD,CAAC"}

package/dist/inspec-yml.d.ts

@@ -1,10 +0,0 @@
-import type { HdfBaseline } from '@mitre/hdf-schema';
-import type { GeneratorOptions } from './types.js';
-/**
- * Generate an inspec.yml YAML string from an HDF Baseline and options.
- *
- * Uses string interpolation — no YAML library needed since the structure
- * is fixed and shallow.
- */
-export declare function generateInSpecYml(baseline: HdfBaseline, options?: GeneratorOptions): string;
-//# sourceMappingURL=inspec-yml.d.ts.map

package/dist/inspec-yml.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"inspec-yml.d.ts","sourceRoot":"","sources":["../src/inspec-yml.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE,gBAAgB,GACzB,MAAM,CAoGR"}

package/dist/inspec-yml.js

@@ -1,113 +0,0 @@
-/**
- * Generate an inspec.yml YAML string from an HDF Baseline and options.
- *
- * Uses string interpolation — no YAML library needed since the structure
- * is fixed and shallow.
- */
-export function generateInSpecYml(baseline, options) {
-    const lines = [];
-    const meta = options?.metadata;
-    // Required: name
-    lines.push(`name: ${baseline.name}`);
-    // Optional metadata fields
-    if (baseline.title) {
-        lines.push(`title: ${baseline.title}`);
-    }
-    const maintainer = meta?.maintainer ?? baseline.maintainer;
-    if (maintainer) {
-        lines.push(`maintainer: ${maintainer}`);
-    }
-    const copyright = meta?.copyright ?? baseline.copyright;
-    if (copyright) {
-        lines.push(`copyright: ${copyright}`);
-    }
-    const license = meta?.license ?? baseline.license;
-    if (license) {
-        lines.push(`license: ${license}`);
-    }
-    if (baseline.summary) {
-        lines.push(`summary: ${baseline.summary}`);
-    }
-    // Version: metadata override takes priority
-    const version = meta?.version ?? baseline.version;
-    if (version) {
-        lines.push(`version: '${version}'`);
-    }
-    // InSpec version constraint
-    const inspecVersion = options?.inspecVersion ?? '~>6.0';
-    lines.push(`inspec_version: '${inspecVersion}'`);
-    // Supports array
-    if (baseline.supports && baseline.supports.length > 0) {
-        lines.push('supports:');
-        for (const support of baseline.supports) {
-            const entries = [];
-            if (support.platformName) {
-                entries.push(`  platform-name: ${support.platformName}`);
-            }
-            if (support.platformFamily) {
-                entries.push(`  platform-family: ${support.platformFamily}`);
-            }
-            if (support.platform) {
-                entries.push(`  platform: ${support.platform}`);
-            }
-            if (support.release) {
-                entries.push(`  release: ${support.release}`);
-            }
-            if (entries.length > 0) {
-                lines.push(`- ${entries[0].trimStart()}`);
-                for (let i = 1; i < entries.length; i++) {
-                    lines.push(entries[i]);
-                }
-            }
-        }
-    }
-    // Depends array
-    if (baseline.depends && baseline.depends.length > 0) {
-        lines.push('depends:');
-        for (const dep of baseline.depends) {
-            const entries = [];
-            if (dep.name)
-                entries.push(`name: ${dep.name}`);
-            if (dep.git)
-                entries.push(`git: ${dep.git}`);
-            if (dep.url)
-                entries.push(`url: ${dep.url}`);
-            if (dep.path)
-                entries.push(`path: ${dep.path}`);
-            if (dep.branch)
-                entries.push(`branch: ${dep.branch}`);
-            if (dep.compliance)
-                entries.push(`compliance: ${dep.compliance}`);
-            if (dep.supermarket)
-                entries.push(`supermarket: ${dep.supermarket}`);
-            if (entries.length > 0) {
-                lines.push(`- ${entries[0]}`);
-                for (let i = 1; i < entries.length; i++) {
-                    lines.push(`  ${entries[i]}`);
-                }
-            }
-        }
-    }
-    // Inputs array
-    if (baseline.inputs && baseline.inputs.length > 0) {
-        lines.push('inputs:');
-        for (const input of baseline.inputs) {
-            for (const [key, value] of Object.entries(input)) {
-                lines.push(`- ${key}: ${formatYamlValue(value)}`);
-            }
-        }
-    }
-    lines.push(''); // trailing newline
-    return lines.join('\n');
-}
-/** Format a value for inline YAML output. */
-function formatYamlValue(value) {
-    if (typeof value === 'boolean')
-        return String(value);
-    if (typeof value === 'number')
-        return String(value);
-    if (typeof value === 'string')
-        return value;
-    return JSON.stringify(value);
-}
-//# sourceMappingURL=inspec-yml.js.map

package/dist/inspec-yml.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"inspec-yml.js","sourceRoot":"","sources":["../src/inspec-yml.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAqB,EACrB,OAA0B;IAE1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,EAAE,QAAQ,CAAC;IAE/B,iBAAiB;IACjB,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAErC,2BAA2B;IAC3B,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,UAAU,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC;IAC3D,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;IACxD,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,4CAA4C;IAC5C,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,4BAA4B;IAC5B,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,oBAAoB,aAAa,GAAG,CAAC,CAAC;IAEjD,iBAAiB;IACjB,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,OAAO,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACxC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,GAAG,CAAC,GAAG;gBAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,GAAG;gBAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YAClE,IAAI,GAAG,CAAC,WAAW;gBAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACxC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,6CAA6C;AAC7C,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/profile-generator.d.ts

@@ -1,11 +0,0 @@
-import type { HdfBaseline } from '@mitre/hdf-schema';
-import type { GeneratorOptions, InSpecProfile } from './types.js';
-/**
- * Generate an in-memory InSpec profile from an HDF Baseline.
- *
- * Returns an InSpecProfile with inspec.yml content and a Map of
- * control filenames to Ruby source code. No file I/O — the CLI
- * is responsible for writing files to disk.
- */
-export declare function generateInSpecProfile(baseline: HdfBaseline, options?: GeneratorOptions): InSpecProfile;
-//# sourceMappingURL=profile-generator.d.ts.map

package/dist/profile-generator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile-generator.d.ts","sourceRoot":"","sources":["../src/profile-generator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIlE;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE,gBAAgB,GACzB,aAAa,CAsBf"}

package/dist/profile-generator.js

@@ -1,31 +0,0 @@
-import { generateControlStub } from './control-stub.js';
-import { generateInSpecYml } from './inspec-yml.js';
-/**
- * Generate an in-memory InSpec profile from an HDF Baseline.
- *
- * Returns an InSpecProfile with inspec.yml content and a Map of
- * control filenames to Ruby source code. No file I/O — the CLI
- * is responsible for writing files to disk.
- */
-export function generateInSpecProfile(baseline, options) {
-    const inspecYml = generateInSpecYml(baseline, options);
-    const controls = new Map();
-    if (baseline.requirements.length === 0) {
-        return { inspecYml, controls };
-    }
-    if (options?.singleFile) {
-        // All controls in a single file
-        const stubs = baseline.requirements.map((req) => generateControlStub(req));
-        controls.set('controls/controls.rb', stubs.join('\n'));
-    }
-    else {
-        // One file per control — sanitize ID for safe filenames
-        for (const req of baseline.requirements) {
-            const safeId = req.id.replace(/\.\./g, '').replace(/[/\\]/g, '') || 'unknown';
-            const filename = `controls/${safeId}.rb`;
-            controls.set(filename, generateControlStub(req));
-        }
-    }
-    return { inspecYml, controls };
-}
-//# sourceMappingURL=profile-generator.js.map

package/dist/profile-generator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile-generator.js","sourceRoot":"","sources":["../src/profile-generator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAqB,EACrB,OAA0B;IAE1B,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;QACxB,gCAAgC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,QAAQ,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,wDAAwD;QACxD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;YAC9E,MAAM,QAAQ,GAAG,YAAY,MAAM,KAAK,CAAC;YACzC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC"}

package/dist/ruby-escape.d.ts

@@ -1,13 +0,0 @@
-/**
- * Escape a string for use as a Ruby string literal.
- *
- * Strategy:
- * - If the string contains both single and double quotes → %q() wrapper
- * - If the string contains only single quotes → double-quoted with escaping
- * - Otherwise → single-quoted with escaping
- *
- * Ported from ts-inspec-objects escapeQuotes(), cross-referenced with
- * inspec-parser's RubyRebuilder.
- */
-export declare function escapeQuotes(s: string): string;
-//# sourceMappingURL=ruby-escape.d.ts.map

package/dist/ruby-escape.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ruby-escape.d.ts","sourceRoot":"","sources":["../src/ruby-escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAgB9C"}

package/dist/ruby-escape.js

@@ -1,26 +0,0 @@
-/**
- * Escape a string for use as a Ruby string literal.
- *
- * Strategy:
- * - If the string contains both single and double quotes → %q() wrapper
- * - If the string contains only single quotes → double-quoted with escaping
- * - Otherwise → single-quoted with escaping
- *
- * Ported from ts-inspec-objects escapeQuotes(), cross-referenced with
- * inspec-parser's RubyRebuilder.
- */
-export function escapeQuotes(s) {
-    const hasSingle = s.includes("'");
-    const hasDouble = s.includes('"');
-    if (hasSingle && hasDouble) {
-        // %q() — escape backslashes before ) so Ruby doesn't treat \) as escaped delimiter
-        return `%q(${s.replace(/\\\)/g, '\\\\)')})`;
-    }
-    if (hasSingle) {
-        // Double-quoted: escape backslashes, then double quotes
-        return `"${s.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
-    }
-    // Single-quoted: escape backslashes, then single quotes
-    return `'${s.replace(/\\/g, '\\\\').replace(/'/g, "\\'")}'`;
-}
-//# sourceMappingURL=ruby-escape.js.map

package/dist/ruby-escape.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ruby-escape.js","sourceRoot":"","sources":["../src/ruby-escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAElC,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC3B,mFAAmF;QACnF,OAAO,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;IAC9C,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,wDAAwD;QACxD,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;IAC9D,CAAC;IAED,wDAAwD;IACxD,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAC9D,CAAC"}

package/dist/types.d.ts

@@ -1,30 +0,0 @@
-/**
- * Options for controlling InSpec profile generation.
- */
-export interface GeneratorOptions {
-    /** Put all controls in a single controls.rb file instead of one file per control. */
-    singleFile?: boolean;
-    /** Override baseline metadata in the generated inspec.yml. */
-    metadata?: ProfileMetadata;
-    /** InSpec version constraint for inspec.yml. Default: '~>6.0'. */
-    inspecVersion?: string;
-}
-/**
- * Metadata overrides for the generated inspec.yml.
- */
-export interface ProfileMetadata {
-    maintainer?: string;
-    copyright?: string;
-    license?: string;
-    version?: string;
-}
-/**
- * An in-memory InSpec profile. No file I/O — the CLI is responsible for writing.
- */
-export interface InSpecProfile {
-    /** The inspec.yml content as a YAML string. */
-    inspecYml: string;
-    /** Map of filename (e.g. 'controls/SV-238196.rb') to Ruby source code. */
-    controls: Map<string, string>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qFAAqF;IACrF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B"}

package/dist/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}