@waratahlabs/canopy 0.5.0

package/dist/output/tc-assembler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tc-assembler.js","sourceRoot":"","sources":["../../src/output/tc-assembler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAQ5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAoB,MAAM,kCAAkC,CAAC;AAEvF,2DAA2D;AAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7E,2DAA2D;AAC3D,MAAM,EAAE,GAAG,CAAC,OAAqB,EAAgB,EAAE,CACjD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClB,GAAG,CAAC;IACJ,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE;CAC1F,CAAC,CAAC,CAAC;AAiCN;;;;;;;;;;;;;;GAcG;AACH,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3E,OAAO;QACL,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACb,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE;QACrB,GAAG,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE;QAC9B,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KAChB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,OAAe,EACf,WAAmB,EACnB,MAAc,EACd,WAAmB;IAEnB,OAAO,GAAG,OAAO,KAAK,WAAW,KAAK,MAAM,KAAK,WAAW,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,MAAc,EACd,WAAmB;IAEnB,OAAO,GAAG,OAAO,KAAK,MAAM,KAAK,WAAW,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,QAAuB;IAC1C,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAClE,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAkB,EAAE,SAAiB;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAC5D,OAAO,GAAG,KAAK,CAAC,YAAY,GAAG,OAAO,QAAQ,MAAM,IAAI,SAAS,OAAO,MAAM,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,WAAW,GAAgB,MAAM,CAAC,WAAW,IAAI,eAAe,CAAC;IACvE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,WAAW,GAAmB,EAAE,CAAC;IACvC,MAAM,eAAe,GAAuB,EAAE,CAAC;IAC/C,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,wDAAwD;IACxD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1C,MAAM,QAAQ,GACZ,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAC9B,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CACvD,IAAI,MAAM,CAAC;YACd,IAAI,QAAQ,KAAK,MAAM;gBAAE,SAAS;YAElC,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAClD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAClC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAChE,CAAC;gBACF,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAClE,IAAI,CAAC,SAAS;oBAAE,SAAS;gBAEzB,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC;gBACrD,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;gBACxC,MAAM,QAAQ,GAAiB;oBAC7B,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;oBAC5C,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;oBACvD,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;oBAC/C,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE;oBAC1C,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE;oBAClD,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE;oBACtD,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE;oBACtC,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,CAAC,iBAAiB,EAAE;oBAC7D,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE;oBACpC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;oBACxC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE;oBACjD,qEAAqE;oBACrE,mEAAmE;oBACnE,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE;oBAC3C,wEAAwE;oBACxE,kFAAkF;oBAClF,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;wBACxC,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;wBACxD,OAAO,IAAI;4BACT,CAAC,CAAC;gCACE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;gCACzD,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;gCACrE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;6BAClE;4BACH,CAAC,CAAC,EAAE,CAAC;oBACT,CAAC,CAAC;iBACH,CAAC;gBAEF,aAAa,IAAI,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,QAAQ,CAAC,WAAW,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,EAAE,CAAC;oBAC3F,SAAS,EAAE,aAAa;oBACxB,YAAY,EAAE,aAAa;oBAC3B,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,SAAS,EAAE,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;oBAC5C,MAAM,EAAE,kBAAkB;oBAC1B,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC;oBACtB,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,iBAAiB,CAAC;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnC,aAAa,IAAI,CAAC,CAAC;QACnB,MAAM,kBAAkB,GAAG,eAAe,CAAC;QAC3C,gBAAgB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,QAAQ,CAAC,YAAY,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,WAAW,KAAK,kBAAkB,EAAE,CAAC;YAC1F,SAAS,EAAE,aAAa;YACxB,YAAY,EAAE,aAAa;YAC3B,YAAY,EAAE,mBAAmB;YACjC,aAAa,EAAE,qBAAqB,IAAI,CAAC,aAAa,WAAW;YACjE,YAAY,EAAE,gCAAgC,IAAI,CAAC,WAAW,oBAAoB;YAClF,YAAY,EAAE,SAAS,IAAI,CAAC,WAAW,gCAAgC;YACvE,YAAY,EAAE,CAAC,WAAW,CAAC;YAC3B,cAAc,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;YAChD,SAAS,EAAE,uCAAuC,IAAI,CAAC,aAAa,8CAA8C,IAAI,CAAC,WAAW,+BAA+B,IAAI,CAAC,WAAW,gCAAgC;YACjN,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,EAAE,CAAC;gBACX,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE;gBACpC,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,kBAAkB,EAAE;gBACxD,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE;gBAChD,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE;gBAChD,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE;gBAC5C,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE;gBAClC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE;aAC5C,CAAC;YACF,IAAI,EAAE,CAAC,IAAI,EAAE,kBAAkB,EAAE,eAAe,EAAE,iBAAiB,CAAC;SACrE,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAClE,+EAA+E;IAC/E,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,uBAAuB,GAAG,CAAC,WAAmB,EAAE,EAAE,CACtD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,CAAC,CAAC,UAAyD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACtE,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,KAAK,WAAW,CAAC;QACpD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CACH,CAAC;IAEJ,KAAK,MAAM,WAAW,IAAI,gBAAgB,EAAE,CAAC;QAC3C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC9D,KAAK,MAAM,UAAU,IAAI,gBAAgB,EAAE,CAAC;YAC1C,IAAI,YAAY,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,YAAY,GAAG,QAAQ,CAAC,eAAe,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxD,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;gBACvD,iBAAiB,IAAI,CAAC,CAAC;gBACvB,WAAW,CAAC,IAAI,CAAC;oBACf,EAAE,EAAE,YAAY;oBAChB,SAAS,EAAE,iBAAiB;oBAC5B,YAAY,EAAE,iBAAiB;oBAC/B,OAAO,EAAE,GAAG,UAAU,CAAC,EAAE,MAAM,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW,EAAE;oBAC3E,IAAI,EAAE,CAAC,kBAAkB,EAAE,UAAU,CAAC,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,2BAA2B,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CACxE,CAAC;gBACF,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBACxB,eAAe,CAAC,IAAI,CAAC;oBACnB,YAAY;oBACZ,QAAQ,EAAE,MAAM,CAAC,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,oBAAoB,CAAwB,CAAC;IAClE,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAG;QACnB,UAAU,GAAG,CAAC,OAAO,EAAE;QACvB,cAAc;QACd,4BAA4B;QAC5B,cAAc;QACd,oBAAoB;KACrB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEd,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAEhD,OAAO;QACL,MAAM,EAAE,CAAC;QACT,eAAe,EAAE;YACf,IAAI,EAAE,MAAM,CAAC,eAAe;YAC5B,WAAW,EACT,qCAAqC,MAAM,CAAC,MAAM,CAAC,MAAM,YAAY;gBACrE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,kBAAkB;gBAC/C,4BAA4B;gBAC5B,cAAc,WAAW,MAAM;gBAC/B,eAAe,YAAY,MAAM;gBACjC,iBAAiB,WAAW,MAAM,QAAQ,CAAC,OAAO,MAAM;gBACxD,iBAAiB,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,4CAA4C,EAAE;SAC5I;QACD,OAAO;QACP,WAAW;QACX,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/output/tc-types.d.ts

@@ -0,0 +1,41 @@
+export type TCMetadata = {
+    key: string;
+    value: string | string[];
+};
+export interface TCEntityBase {
+    id: string;
+    numericId: number;
+    displayOrder?: number;
+    metadata?: TCMetadata[];
+    tags?: string[];
+}
+export type TCThreatStatus = "threatIdentified" | "threatResolved" | "threatResolvedNotUseful";
+export interface TCThreatStatement extends TCEntityBase {
+    threatSource?: string;
+    prerequisites?: string;
+    threatAction?: string;
+    threatImpact?: string;
+    impactedGoal?: string[];
+    impactedAssets?: string[];
+    statement?: string;
+    status?: TCThreatStatus;
+}
+export interface TCMitigation extends TCEntityBase {
+    content: string;
+}
+export interface TCMitigationLink {
+    mitigationId: string;
+    linkedId: string;
+}
+export interface TCApplicationInfo {
+    name: string;
+    description?: string;
+}
+export interface DataExchangeFormat {
+    schema: 1;
+    applicationInfo?: TCApplicationInfo;
+    threats?: TCThreatStatement[];
+    mitigations?: TCMitigation[];
+    mitigationLinks?: TCMitigationLink[];
+}
+//# sourceMappingURL=tc-types.d.ts.map

package/dist/output/tc-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tc-types.d.ts","sourceRoot":"","sources":["../../src/output/tc-types.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,UAAU,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,yBAAyB,CAAC;AAE/F,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,CAAC,CAAC;IACV,eAAe,CAAC,EAAE,iBAAiB,CAAC;IACpC,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACtC"}

package/dist/output/tc-types.js

@@ -0,0 +1,5 @@
+// Minimal subset of the Threat Composer DataExchangeFormat — only what we emit.
+// Intentionally not depending on the @aws/threat-composer package to keep the
+// library standalone.
+export {};
+//# sourceMappingURL=tc-types.js.map

package/dist/output/tc-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tc-types.js","sourceRoot":"","sources":["../../src/output/tc-types.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,sBAAsB"}

package/dist/output/tc-validator.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Unit tests for the inline TC schema validator.
+ *
+ * The validator is embedded in cli.ts as a module-private function. We duplicate
+ * the core logic here as a thin testable wrapper so CI catches regressions
+ * without needing to spawn the full CLI binary.
+ */
+export {};
+//# sourceMappingURL=tc-validator.test.d.ts.map

package/dist/output/tc-validator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tc-validator.test.d.ts","sourceRoot":"","sources":["../../src/output/tc-validator.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/output/tc-validator.test.js

@@ -0,0 +1,194 @@
+/**
+ * Unit tests for the inline TC schema validator.
+ *
+ * The validator is embedded in cli.ts as a module-private function. We duplicate
+ * the core logic here as a thin testable wrapper so CI catches regressions
+ * without needing to spawn the full CLI binary.
+ */
+import { describe, it, expect } from "bun:test";
+// ── Inline replica of validateTCOutput from cli.ts ────────────────────────────
+// Keep in sync if cli.ts validator changes.
+const VALID_STATUSES = new Set([
+    "threatIdentified",
+    "threatResolved",
+    "threatResolvedNotUseful",
+]);
+const ROOT_ALLOWED = new Set([
+    "schema", "applicationInfo", "threats", "mitigations", "mitigationLinks",
+]);
+function validate(data) {
+    const errors = [];
+    if (data.schema !== 1)
+        errors.push(`/ schema must be 1, got ${data.schema}`);
+    for (const key of Object.keys(data)) {
+        if (!ROOT_ALLOWED.has(key))
+            errors.push(`/ unexpected root field "${key}"`);
+    }
+    for (const t of data.threats ?? []) {
+        if (t.status !== undefined && !VALID_STATUSES.has(t.status)) {
+            errors.push(`/threats[${t.id}] invalid status "${t.status}"`);
+        }
+        for (const m of t.metadata ?? []) {
+            if (m.key.length > 50)
+                errors.push(`/threats[${t.id}]/metadata key too long (>50): "${m.key}"`);
+            if (!["Priority", "Comments", "STRIDE", "source"].includes(m.key) && !m.key.startsWith("custom:")) {
+                errors.push(`/threats[${t.id}]/metadata key missing custom: prefix: "${m.key}"`);
+            }
+        }
+    }
+    for (const m of data.mitigations ?? []) {
+        for (const meta of m.metadata ?? []) {
+            errors.push(`/mitigations[${m.id}] has metadata (schema rejects it): key="${meta.key}"`);
+        }
+    }
+    for (const lnk of data.mitigationLinks ?? []) {
+        const extra = Object.keys(lnk).filter((k) => k !== "mitigationId" && k !== "linkedId");
+        if (extra.length)
+            errors.push(`/mitigationLinks unexpected fields: ${extra.join(", ")}`);
+    }
+    return { valid: errors.length === 0, errors };
+}
+// ── Helpers ───────────────────────────────────────────────────────────────────
+function minimalValid() {
+    return { schema: 1 };
+}
+// ── Tests ─────────────────────────────────────────────────────────────────────
+describe("TC validator — root structure", () => {
+    it("minimal valid document passes", () => {
+        expect(validate(minimalValid()).valid).toBe(true);
+    });
+    it("schema !== 1 fails", () => {
+        const { valid, errors } = validate({ schema: 2 });
+        expect(valid).toBe(false);
+        expect(errors[0]).toMatch(/schema must be 1/);
+    });
+    it("unexpected root field fails", () => {
+        const doc = { ...minimalValid(), metadata: [] };
+        const { valid, errors } = validate(doc);
+        expect(valid).toBe(false);
+        expect(errors[0]).toMatch(/unexpected root field "metadata"/);
+    });
+    it("all known root fields pass", () => {
+        const doc = {
+            schema: 1,
+            applicationInfo: { name: "Test" },
+            threats: [],
+            mitigations: [],
+            mitigationLinks: [],
+        };
+        expect(validate(doc).valid).toBe(true);
+    });
+});
+describe("TC validator — threat status enum", () => {
+    it("valid status threatIdentified passes", () => {
+        const doc = {
+            schema: 1,
+            threats: [{ id: "1", numericId: 1, status: "threatIdentified", metadata: [] }],
+        };
+        expect(validate(doc).valid).toBe(true);
+    });
+    it("invalid status 'identified' fails", () => {
+        const doc = {
+            schema: 1,
+            threats: [{ id: "1", numericId: 1, status: "identified", metadata: [] }],
+        };
+        const { valid, errors } = validate(doc);
+        expect(valid).toBe(false);
+        expect(errors[0]).toMatch(/invalid status "identified"/);
+    });
+});
+describe("TC validator — metadata key rules", () => {
+    it("TC-native key Priority passes without custom: prefix", () => {
+        const doc = {
+            schema: 1,
+            threats: [{
+                    id: "1", numericId: 1, status: "threatIdentified",
+                    metadata: [{ key: "Priority", value: "High" }],
+                }],
+        };
+        expect(validate(doc).valid).toBe(true);
+    });
+    it("non-native key without custom: prefix fails", () => {
+        const doc = {
+            schema: 1,
+            threats: [{
+                    id: "1", numericId: 1, status: "threatIdentified",
+                    metadata: [{ key: "atlas-technique-id", value: "AML.T0051" }],
+                }],
+        };
+        const { valid, errors } = validate(doc);
+        expect(valid).toBe(false);
+        expect(errors[0]).toMatch(/missing custom: prefix/);
+    });
+    it("custom: prefixed key passes", () => {
+        const doc = {
+            schema: 1,
+            threats: [{
+                    id: "1", numericId: 1, status: "threatIdentified",
+                    metadata: [{ key: "custom:atlas-technique-id", value: "AML.T0051" }],
+                }],
+        };
+        expect(validate(doc).valid).toBe(true);
+    });
+    it("key longer than 50 chars fails", () => {
+        const longKey = "custom:" + "x".repeat(44); // 51 chars total
+        const doc = {
+            schema: 1,
+            threats: [{
+                    id: "1", numericId: 1, status: "threatIdentified",
+                    metadata: [{ key: longKey, value: "v" }],
+                }],
+        };
+        const { valid, errors } = validate(doc);
+        expect(valid).toBe(false);
+        expect(errors[0]).toMatch(/key too long/);
+    });
+    it("key of exactly 50 chars passes", () => {
+        const key50 = "custom:" + "x".repeat(43); // 50 chars total
+        const doc = {
+            schema: 1,
+            threats: [{
+                    id: "1", numericId: 1, status: "threatIdentified",
+                    metadata: [{ key: key50, value: "v" }],
+                }],
+        };
+        expect(validate(doc).valid).toBe(true);
+    });
+});
+describe("TC validator — mitigations must not have metadata", () => {
+    it("mitigation without metadata passes", () => {
+        const doc = {
+            schema: 1,
+            mitigations: [{ id: "m1", numericId: 1, content: "Mitigate it" }],
+        };
+        expect(validate(doc).valid).toBe(true);
+    });
+    it("mitigation with metadata fails", () => {
+        const doc = {
+            schema: 1,
+            mitigations: [{ id: "m1", numericId: 1, content: "Mitigate it", metadata: [{ key: "custom:x", value: "v" }] }],
+        };
+        const { valid, errors } = validate(doc);
+        expect(valid).toBe(false);
+        expect(errors[0]).toMatch(/has metadata/);
+    });
+});
+describe("TC validator — mitigationLinks shape", () => {
+    it("clean mitigationLink passes", () => {
+        const doc = {
+            schema: 1,
+            mitigationLinks: [{ mitigationId: "m1", linkedId: "t1" }],
+        };
+        expect(validate(doc).valid).toBe(true);
+    });
+    it("mitigationLink with extra field fails", () => {
+        const doc = {
+            schema: 1,
+            mitigationLinks: [{ mitigationId: "m1", linkedId: "t1", type: "Threat" }],
+        };
+        const { valid, errors } = validate(doc);
+        expect(valid).toBe(false);
+        expect(errors[0]).toMatch(/unexpected fields/);
+    });
+});
+//# sourceMappingURL=tc-validator.test.js.map

package/dist/output/tc-validator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tc-validator.test.js","sourceRoot":"","sources":["../../src/output/tc-validator.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGhD,iFAAiF;AACjF,4CAA4C;AAE5C,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,kBAAkB;IAClB,gBAAgB;IAChB,yBAAyB;CAC1B,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB;CACzE,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,IAAwB;IACxC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,GAAG,GAAG,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAwB,CAAC,EAAE,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,mCAAmC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAChG,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,2CAA2C,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAK,CAAsC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,4CAA4C,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC;QACvF,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,uCAAuC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,iFAAiF;AAEjF,SAAS,YAAY;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AACvB,CAAC;AAED,iFAAiF;AAEjF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,EAAmC,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,GAAG,GAAG,EAAE,GAAG,YAAY,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAmC,CAAC;QACjF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,CAAC;YACT,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACjC,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,EAAE;SACpB,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;SAC/E,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG;YACV,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;SACxC,CAAC;QACnC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;oBACR,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB;oBACjD,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBAC/C,CAAC;SACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;oBACR,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB;oBACjD,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;iBAC9D,CAAC;SACH,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;oBACR,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB;oBACjD,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;iBACrE,CAAC;SACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,OAAO,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAC7D,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;oBACR,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB;oBACjD,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;iBACzC,CAAC;SACH,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,KAAK,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAC3D,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,CAAC;oBACR,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB;oBACjD,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;iBACvC,CAAC;SACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;SAClE,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,GAAG,GAAG;YACV,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;SAC9E,CAAC;QACnC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,CAAC;YACT,eAAe,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC1D,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,GAAG,GAAG;YACV,MAAM,EAAE,CAAC;YACT,eAAe,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;SACzC,CAAC;QACnC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/providers/anthropic.d.ts

@@ -0,0 +1,9 @@
+import type { InferenceProvider } from "./types";
+export declare class AnthropicProvider implements InferenceProvider {
+    readonly name = "anthropic-claude";
+    private readonly client;
+    private readonly modelId;
+    constructor(apiKey?: string, modelId?: string);
+    complete(systemPrompt: string, userPrompt: string): Promise<string>;
+}
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/providers/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/providers/anthropic.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAEjD,qBAAa,iBAAkB,YAAW,iBAAiB;IACzD,QAAQ,CAAC,IAAI,sBAAsB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,SAA8B;IAM5D,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAwB1E"}

package/dist/providers/anthropic.js

@@ -0,0 +1,30 @@
+import Anthropic from "@anthropic-ai/sdk";
+export class AnthropicProvider {
+    constructor(apiKey, modelId = "claude-haiku-4-5-20251001") {
+        this.name = "anthropic-claude";
+        // Anthropic SDK reads ANTHROPIC_API_KEY from env when apiKey is undefined.
+        this.client = new Anthropic(apiKey ? { apiKey } : {});
+        this.modelId = modelId;
+    }
+    async complete(systemPrompt, userPrompt) {
+        let response;
+        try {
+            response = await this.client.messages.create({
+                model: this.modelId,
+                max_tokens: 1024,
+                system: systemPrompt,
+                messages: [{ role: "user", content: userPrompt }],
+            });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            throw new Error(`Anthropic messages.create failed (${this.modelId}): ${message}`);
+        }
+        const block = response.content[0];
+        if (!block || block.type !== "text") {
+            throw new Error(`Anthropic response missing text block (got type ${block?.type ?? "none"})`);
+        }
+        return block.text;
+    }
+}
+//# sourceMappingURL=anthropic.js.map

package/dist/providers/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAG1C,MAAM,OAAO,iBAAiB;IAK5B,YAAY,MAAe,EAAE,OAAO,GAAG,2BAA2B;QAJzD,SAAI,GAAG,kBAAkB,CAAC;QAKjC,2EAA2E;QAC3E,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,UAAkB;QACrD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC3C,KAAK,EAAE,IAAI,CAAC,OAAO;gBACnB,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,OAAO,MAAM,OAAO,EAAE,CACjE,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,mDAAmD,KAAK,EAAE,IAAI,IAAI,MAAM,GAAG,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;CACF"}

package/dist/providers/bedrock.d.ts

@@ -0,0 +1,9 @@
+import type { InferenceProvider } from "./types";
+export declare class BedrockProvider implements InferenceProvider {
+    readonly name = "bedrock-nova-lite";
+    private readonly client;
+    private readonly modelId;
+    constructor(region?: string, modelId?: string);
+    complete(systemPrompt: string, userPrompt: string): Promise<string>;
+}
+//# sourceMappingURL=bedrock.d.ts.map

package/dist/providers/bedrock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bedrock.d.ts","sourceRoot":"","sources":["../../src/providers/bedrock.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAEjD,qBAAa,eAAgB,YAAW,iBAAiB;IACvD,QAAQ,CAAC,IAAI,uBAAuB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,SAAc,EAAE,OAAO,SAA0B;IAK7D,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAqC1E"}

package/dist/providers/bedrock.js

@@ -0,0 +1,38 @@
+import { BedrockRuntimeClient, InvokeModelCommand, } from "@aws-sdk/client-bedrock-runtime";
+export class BedrockProvider {
+    constructor(region = "us-east-1", modelId = "amazon.nova-lite-v1:0") {
+        this.name = "bedrock-nova-lite";
+        this.client = new BedrockRuntimeClient({ region });
+        this.modelId = modelId;
+    }
+    async complete(systemPrompt, userPrompt) {
+        const body = JSON.stringify({
+            system: [{ text: systemPrompt }],
+            messages: [{ role: "user", content: [{ text: userPrompt }] }],
+            inferenceConfig: { maxTokens: 1024, temperature: 0 },
+        });
+        let response;
+        try {
+            response = await this.client.send(new InvokeModelCommand({
+                modelId: this.modelId,
+                contentType: "application/json",
+                accept: "application/json",
+                body: new TextEncoder().encode(body),
+            }));
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            throw new Error(`Bedrock InvokeModel failed (${this.modelId}): ${message}`);
+        }
+        if (!response.body) {
+            throw new Error(`Bedrock returned empty body for model ${this.modelId}`);
+        }
+        const decoded = JSON.parse(new TextDecoder().decode(response.body));
+        const text = decoded.output?.message?.content?.[0]?.text;
+        if (typeof text !== "string") {
+            throw new Error(`Bedrock Nova response missing output.message.content[0].text (got ${JSON.stringify(decoded).slice(0, 200)})`);
+        }
+        return text;
+    }
+}
+//# sourceMappingURL=bedrock.js.map

package/dist/providers/bedrock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bedrock.js","sourceRoot":"","sources":["../../src/providers/bedrock.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAGzC,MAAM,OAAO,eAAe;IAK1B,YAAY,MAAM,GAAG,WAAW,EAAE,OAAO,GAAG,uBAAuB;QAJ1D,SAAI,GAAG,mBAAmB,CAAC;QAKlC,IAAI,CAAC,MAAM,GAAG,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,UAAkB;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAChC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YAC7D,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE;SACrD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAC/B,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,WAAW,EAAE,kBAAkB;gBAC/B,MAAM,EAAE,kBAAkB;gBAC1B,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;aACrC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,OAAO,MAAM,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAEjE,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACzD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,qEAAqE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAC9G,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/providers/index.d.ts

@@ -0,0 +1,6 @@
+import type { InferenceProvider, ProviderConfig } from "./types";
+export { BedrockProvider } from "./bedrock";
+export { AnthropicProvider } from "./anthropic";
+export type { InferenceProvider, ProviderConfig } from "./types";
+export declare function createProvider(config: ProviderConfig): InferenceProvider;
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEjE,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAQxE"}

package/dist/providers/index.js

@@ -0,0 +1,14 @@
+import { AnthropicProvider } from "./anthropic";
+import { BedrockProvider } from "./bedrock";
+export { BedrockProvider } from "./bedrock";
+export { AnthropicProvider } from "./anthropic";
+export function createProvider(config) {
+    if (config.type === "bedrock") {
+        return new BedrockProvider(config.region, config.modelId);
+    }
+    if (config.type === "anthropic") {
+        return new AnthropicProvider(config.apiKey, config.anthropicModelId);
+    }
+    throw new Error(`Unknown provider type: ${config.type}`);
+}
+//# sourceMappingURL=index.js.map

package/dist/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0BAA2B,MAA2B,CAAC,IAAI,EAAE,CAAC,CAAC;AACjF,CAAC"}

package/dist/providers/types.d.ts

@@ -0,0 +1,12 @@
+export interface InferenceProvider {
+    readonly name: string;
+    complete(systemPrompt: string, userPrompt: string): Promise<string>;
+}
+export interface ProviderConfig {
+    type: "bedrock" | "anthropic";
+    region?: string;
+    modelId?: string;
+    apiKey?: string;
+    anthropicModelId?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/providers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/providers/types.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAGtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,SAAS,GAAG,WAAW,CAAC;IAE9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B"}

package/dist/providers/types.js

@@ -0,0 +1,5 @@
+// Provider-agnostic inference interface.
+// Adding a third provider (OpenAI, Ollama) requires implementing this interface
+// and adding one branch to createProvider().
+export {};
+//# sourceMappingURL=types.js.map

package/dist/providers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/providers/types.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,gFAAgF;AAChF,6CAA6C"}

package/dist/references/acsc-risks.d.ts

@@ -0,0 +1,18 @@
+/**
+ * ACSC Agentic AI Risk Taxonomy
+ *
+ * Source: "Careful adoption of agentic AI services" (2025)
+ * Authors: Australian Signals Directorate's Australian Cyber Security Centre (ACSC),
+ *          US Cybersecurity and Infrastructure Security Agency (CISA),
+ *          US National Security Agency (NSA),
+ *          Canadian Centre for Cyber Security (Cyber Centre),
+ *          New Zealand National Cyber Security Centre (NCSC-NZ),
+ *          UK National Cyber Security Centre (NCSC-UK / GCHQ)
+ * URL: https://www.cyber.gov.au/business-government/secure-design/artificial-intelligence/careful-adoption-of-agentic-ai-services
+ */
+import type { FrameworkCitation, FrameworkRisk } from "./registry.js";
+export declare const ACSC_RISKS: FrameworkRisk[];
+export declare const ACSC_CITATION: FrameworkCitation;
+export declare const getRisksForMetric: (metric: import("../aivss/types.js").MetricCode) => FrameworkRisk[], getRisksByType: (type: import("./registry.js").RiskType) => FrameworkRisk[], getRiskById: (id: string) => FrameworkRisk | undefined;
+export declare const ACSC_ADAPTER: import("./registry.js").FrameworkAdapter;
+//# sourceMappingURL=acsc-risks.d.ts.map

package/dist/references/acsc-risks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acsc-risks.d.ts","sourceRoot":"","sources":["../../src/references/acsc-risks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEtE,eAAO,MAAM,UAAU,EAAE,aAAa,EA2NrC,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,iBAa3B,CAAC;AAEF,eAAO,MAAQ,iBAAiB,uEAAE,cAAc,+DAAE,WAAW,2CACnC,CAAC;AAE3B,eAAO,MAAM,YAAY,EAAE,OAAO,eAAe,EAAE,gBAMlD,CAAC"}