@mitre/hdf-schema 3.3.2 → 3.4.0

package/dist/ts/hdf.js

@@ -34,10 +34,12 @@ export var InputType;
 /**
  * The hash algorithm used for the checksum.
  *
- * Supported cryptographic hash algorithms for checksums and integrity verification.
+ * Supported cryptographic hash algorithms for checksums and integrity verification. blake3
+ * covers container-image and other artifact digests that use it.
  */
 export var HashAlgorithm;
 (function (HashAlgorithm) {
+    HashAlgorithm["Blake3"] = "blake3";
     HashAlgorithm["Sha256"] = "sha256";
     HashAlgorithm["Sha384"] = "sha384";
     HashAlgorithm["Sha512"] = "sha512";
@@ -180,11 +182,16 @@ export var ResultStatus;
 })(ResultStatus || (ResultStatus = {}));
 /**
  * The type of identifier. Use 'email' for email addresses, 'username' for user accounts,
- * 'system' for automated systems, 'simple' for basic string identifiers without additional
- * classification, or 'other' for custom identity systems.
+ * 'system' for deterministic non-interactive automation (CI jobs, cron, scanners), 'agent'
+ * for an AI/LLM agent acting with autonomy — kept distinct from 'system' so auditors can
+ * apply AI-specific scrutiny (e.g. 'an LLM proposed this' vs a deterministic job) and
+ * satisfy AI-source disclosure under frameworks like the EU AI Act and NIST AI RMF,
+ * 'simple' for basic string identifiers without additional classification, or 'other' for
+ * custom identity systems.
  */
 export var IdentityType;
 (function (IdentityType) {
+    IdentityType["Agent"] = "agent";
     IdentityType["Email"] = "email";
     IdentityType["Other"] = "other";
     IdentityType["Simple"] = "simple";
@@ -298,6 +305,29 @@ export var VerificationMethodEnum;
     VerificationMethodEnum["ManualByDesign"] = "manual-by-design";
     VerificationMethodEnum["ManualPendingAutomation"] = "manual-pending-automation";
 })(VerificationMethodEnum || (VerificationMethodEnum = {}));
+/**
+ * Relationship of this dataset to baseDatasetRefs, parallel to the model extension's
+ * adaptationType. Minimal + extensible: filtered (subset by rule), augmented
+ * (added/synthesized records), merged (union of sources), sampled (statistical draw).
+ */
+export var DatasetDerivationType;
+(function (DatasetDerivationType) {
+    DatasetDerivationType["Augmented"] = "augmented";
+    DatasetDerivationType["Filtered"] = "filtered";
+    DatasetDerivationType["Merged"] = "merged";
+    DatasetDerivationType["Sampled"] = "sampled";
+})(DatasetDerivationType || (DatasetDerivationType = {}));
+/**
+ * Lineage relationship to baseModelRef, adopting Hugging Face's base_model_relation
+ * vocabulary (the only typed lineage enum in the ecosystem).
+ */
+export var ModelAdaptationType;
+(function (ModelAdaptationType) {
+    ModelAdaptationType["Adapter"] = "adapter";
+    ModelAdaptationType["Finetune"] = "finetune";
+    ModelAdaptationType["Merge"] = "merge";
+    ModelAdaptationType["Quantized"] = "quantized";
+})(ModelAdaptationType || (ModelAdaptationType = {}));
 export var CloudProvider;
 (function (CloudProvider) {
     CloudProvider["Aws"] = "aws";
@@ -307,18 +337,12 @@ export var CloudProvider;
     CloudProvider["Other"] = "other";
 })(CloudProvider || (CloudProvider = {}));
 /**
- * Format of the SBOM (embedded or referenced). Required when sbom or sbomRef is present.
- */
-export var SBOMFormat;
-(function (SBOMFormat) {
-    SBOMFormat["Cyclonedx"] = "cyclonedx";
-    SBOMFormat["Spdx"] = "spdx";
-})(SBOMFormat || (SBOMFormat = {}));
-/**
- * Component type discriminator. Same values as Target types.
+ * Component type discriminator. Same values as Target types, plus aiModel and dataset (thin
+ * AI subject components whose detail lives in an attached ai-model / dataset BOM).
  */
 export var TargetType;
 (function (TargetType) {
+    TargetType["AIModel"] = "aiModel";
     TargetType["Application"] = "application";
     TargetType["Artifact"] = "artifact";
     TargetType["CloudAccount"] = "cloudAccount";
@@ -327,6 +351,7 @@ export var TargetType;
     TargetType["ContainerInstance"] = "containerInstance";
     TargetType["ContainerPlatform"] = "containerPlatform";
     TargetType["Database"] = "database";
+    TargetType["Dataset"] = "dataset";
     TargetType["Host"] = "host";
     TargetType["Network"] = "network";
     TargetType["Repository"] = "repository";
@@ -550,15 +575,18 @@ export var PlanType;
 /**
  * The type of HDF document being referenced.
  *
- * The type of document referenced in the evidence package.
+ * The type of document referenced in the evidence package. 'bom' covers any
+ * Bill-of-Materials/manifest document (SBOM, AI model/dataset, and reserved future kinds) —
+ * its specific kind is carried by the referenced document's bomType, not by a per-kind
+ * Content_Type value.
  */
 export var ContentType;
 (function (ContentType) {
+    ContentType["BOM"] = "bom";
     ContentType["HdfAmendments"] = "hdf-amendments";
     ContentType["HdfBaseline"] = "hdf-baseline";
     ContentType["HdfComparison"] = "hdf-comparison";
     ContentType["HdfPlan"] = "hdf-plan";
     ContentType["HdfResults"] = "hdf-results";
     ContentType["HdfSystem"] = "hdf-system";
-    ContentType["Sbom"] = "sbom";
 })(ContentType || (ContentType = {}));