@mitre/hdf-schema 3.4.3 → 3.5.0

package/dist/ts/hdf.js

@@ -1,3 +1,32 @@
+/**
+ * The type of identifier. Use 'email' for email addresses, 'username' for user accounts,
+ * 'system' for deterministic non-interactive automation (CI jobs, cron, scanners), 'agent'
+ * for an AI/LLM agent acting with autonomy — kept distinct from 'system' so auditors can
+ * apply AI-specific scrutiny (e.g. 'an LLM proposed this' vs a deterministic job) and
+ * satisfy AI-source disclosure under frameworks like the EU AI Act and NIST AI RMF,
+ * 'simple' for basic string identifiers without additional classification, or 'other' for
+ * custom identity systems.
+ */
+export var IdentityType;
+(function (IdentityType) {
+    IdentityType["Agent"] = "agent";
+    IdentityType["Email"] = "email";
+    IdentityType["Other"] = "other";
+    IdentityType["Simple"] = "simple";
+    IdentityType["System"] = "system";
+    IdentityType["Username"] = "username";
+})(IdentityType || (IdentityType = {}));
+/**
+ * Supported cryptographic hash algorithms for checksums and integrity verification. blake3 covers
+ * container-image and other artifact digests that use it.
+ */
+export var HashAlgorithm;
+(function (HashAlgorithm) {
+    HashAlgorithm["Blake3"] = "blake3";
+    HashAlgorithm["Sha256"] = "sha256";
+    HashAlgorithm["Sha384"] = "sha384";
+    HashAlgorithm["Sha512"] = "sha512";
+})(HashAlgorithm || (HashAlgorithm = {}));
 /**
  * Comparison operator for evaluating the input value against observed values. Numeric:
  * eq/ne/lt/le/gt/ge. String: eq/ne/contains/matches. Collection: in/notIn.
@@ -27,17 +56,6 @@ export var InputType;
     InputType["Regexp"] = "Regexp";
     InputType["String"] = "String";
 })(InputType || (InputType = {}));
-/**
- * Supported cryptographic hash algorithms for checksums and integrity verification. blake3 covers
- * container-image and other artifact digests that use it.
- */
-export var HashAlgorithm;
-(function (HashAlgorithm) {
-    HashAlgorithm["Blake3"] = "blake3";
-    HashAlgorithm["Sha256"] = "sha256";
-    HashAlgorithm["Sha384"] = "sha384";
-    HashAlgorithm["Sha512"] = "sha512";
-})(HashAlgorithm || (HashAlgorithm = {}));
 /**
  * The packaging ecosystem the package belongs to. Use 'generic' for hardware, firmware, or
  * anything outside the listed language/OS package managers.
@@ -147,24 +165,6 @@ export var ResultStatus;
     ResultStatus["NotReviewed"] = "notReviewed";
     ResultStatus["Passed"] = "passed";
 })(ResultStatus || (ResultStatus = {}));
-/**
- * The type of identifier. Use 'email' for email addresses, 'username' for user accounts,
- * 'system' for deterministic non-interactive automation (CI jobs, cron, scanners), 'agent'
- * for an AI/LLM agent acting with autonomy — kept distinct from 'system' so auditors can
- * apply AI-specific scrutiny (e.g. 'an LLM proposed this' vs a deterministic job) and
- * satisfy AI-source disclosure under frameworks like the EU AI Act and NIST AI RMF,
- * 'simple' for basic string identifiers without additional classification, or 'other' for
- * custom identity systems.
- */
-export var IdentityType;
-(function (IdentityType) {
-    IdentityType["Agent"] = "agent";
-    IdentityType["Email"] = "email";
-    IdentityType["Other"] = "other";
-    IdentityType["Simple"] = "simple";
-    IdentityType["System"] = "system";
-    IdentityType["Username"] = "username";
-})(IdentityType || (IdentityType = {}));
 /**
  * The type of evidence being provided.
  */
@@ -355,13 +355,18 @@ export var Op;
     Op["Replace"] = "replace";
 })(Op || (Op = {}));
 /**
- * The reason a requirement's state changed between sources.
+ * The reason a requirement's state changed between sources. 'dispositionChanged' = the governing
+ * override type differs between the sources (e.g. a waiver replaced a riskAdjustment);
+ * 'effectiveImpactChanged' = the post-override impact score differs while the base impact may be
+ * unchanged.
  */
 export var ChangeReason;
 (function (ChangeReason) {
     ChangeReason["BaselineUpgraded"] = "baselineUpgraded";
     ChangeReason["ConfigChanged"] = "configChanged";
     ChangeReason["ControlMapped"] = "controlMapped";
+    ChangeReason["DispositionChanged"] = "dispositionChanged";
+    ChangeReason["EffectiveImpactChanged"] = "effectiveImpactChanged";
     ChangeReason["ImpactChanged"] = "impactChanged";
     ChangeReason["MetadataChanged"] = "metadataChanged";
     ChangeReason["OverrideAdded"] = "overrideAdded";
@@ -518,3 +523,33 @@ export var ContentType;
     ContentType["HdfResults"] = "hdf-results";
     ContentType["HdfSystem"] = "hdf-system";
 })(ContentType || (ContentType = {}));
+/**
+ * The producer-computable subset of the comparison vocabulary's Change_Reason, value-identical with
+ * the parent enum (test-enforced). Batch-only reasons (baselineUpgraded, controlMapped,
+ * scannerChanged, targetChanged, metadataChanged) require cross-corpus context and are excluded.
+ */
+export var EventChangeReason;
+(function (EventChangeReason) {
+    EventChangeReason["ConfigChanged"] = "configChanged";
+    EventChangeReason["ImpactChanged"] = "impactChanged";
+    EventChangeReason["OverrideAdded"] = "overrideAdded";
+    EventChangeReason["OverrideExpired"] = "overrideExpired";
+    EventChangeReason["OverrideModified"] = "overrideModified";
+    EventChangeReason["OverrideRemoved"] = "overrideRemoved";
+    EventChangeReason["ResultChanged"] = "resultChanged";
+})(EventChangeReason || (EventChangeReason = {}));
+/**
+ * The producer-computable subset of the comparison vocabulary's Requirement_State. Kept
+ * value-identical with the parent enum (test-enforced): the batch-only states (moved, split,
+ * merged) are outputs of cross-document identity resolution a per-key producer cannot compute.
+ * Declared as a distinct named type (rather than a $ref intersection) so generated Go/TS types keep
+ * stable, distinct enum names.
+ */
+export var EventRequirementState;
+(function (EventRequirementState) {
+    EventRequirementState["Absent"] = "absent";
+    EventRequirementState["Fixed"] = "fixed";
+    EventRequirementState["New"] = "new";
+    EventRequirementState["Regressed"] = "regressed";
+    EventRequirementState["Updated"] = "updated";
+})(EventRequirementState || (EventRequirementState = {}));