@x12i/memorix-descriptors 1.21.0 → 1.23.0

package/dist/having-narratives/discover-signals.js

@@ -0,0 +1,298 @@
+import { discoverMetaNarrativeSignals } from "./meta-narratives.js";
+import { buildHasKey, normalizeEntityTargetSlug, pluralizeSlug, singularizeSlug, toKebab, } from "./narrative-keys.js";
+import { discoverRecordPredicateSignals } from "./record-predicates.js";
+export const NARRATIVE_SYNC_DETECTED_BY = "entity-pipeline.narrative-sync";
+const DEFAULT_IGNORED_COMMON_VALUES = [
+    "",
+    "unknown",
+    "none",
+    "n/a",
+    "na",
+    "null",
+    "undefined",
+    "not_applicable",
+];
+const SECURITY_OPS_PROPERTY_PATTERNS = [
+    "severity",
+    "status",
+    "risk",
+    "risk-level",
+    "priority",
+    "priority-score",
+    "priority-level",
+    "known-exploited",
+    "exploitability",
+    "exploitability-level",
+    "exposure",
+    "outside-exposure-class",
+    "reachability",
+    "internal-reachability-class",
+    "agent-status",
+    "operational-status",
+    "remote-access-adjacent",
+    "partner-link-adjacent",
+    "dmz-adjacent",
+    "zone-class",
+    "vr",
+];
+function contentPostfixLabel(postfix) {
+    return postfix.charAt(0).toUpperCase() + postfix.slice(1);
+}
+function buildHasLabel(target) {
+    return `Has ${contentPostfixLabel(target)}`;
+}
+function propertySlug(propertyKey) {
+    const slug = toKebab(propertyKey).replace(/^xdr-/, "");
+    if (slug === "operational-status")
+        return "operational-status";
+    if (slug === "agent-status")
+        return "agent-status";
+    return slug;
+}
+function propertyLabel(propertyKey, descriptor) {
+    return descriptor?.label?.replace(/^XDR\s+/i, "") ?? contentPostfixLabel(propertySlug(propertyKey));
+}
+function propertySearchText(propertyKey, descriptor) {
+    return [propertyKey, descriptor.label, descriptor.source?.path]
+        .filter((value) => typeof value === "string")
+        .map((value) => toKebab(value).replace(/\./g, "-"))
+        .join(" ");
+}
+function classifyCommonProperty(propertyKey, descriptor) {
+    if (descriptor.valueType === "boolean")
+        return "boolean";
+    if (descriptor.valueType === "enum")
+        return "enum";
+    const text = propertySearchText(propertyKey, descriptor);
+    return SECURITY_OPS_PROPERTY_PATTERNS.some((pattern) => text.includes(pattern))
+        ? "security-ops"
+        : undefined;
+}
+function propertyPathFromDescriptor(propertyKey, descriptor) {
+    return descriptor.source?.path ?? propertyKey;
+}
+function linkedCommonPropertyLabel(targetEntity, propertyKey, propertyDescriptor) {
+    const target = normalizeEntityTargetSlug(targetEntity);
+    const propSlug = propertySlug(propertyKey);
+    return {
+        key: buildHasKey(`${target}-with-${propSlug}`),
+        label: `Has ${contentPostfixLabel(target)} With ${propertyLabel(propertyKey, propertyDescriptor)}`,
+    };
+}
+function associatedPropertyTargetLabel(propertyName, linkedObjectType, linkedContentType) {
+    if (linkedObjectType) {
+        const entityPlural = normalizeEntityTargetSlug(linkedObjectType);
+        const contentSuffix = linkedContentType && linkedContentType !== "snapshots"
+            ? `-${toKebab(linkedContentType)}`
+            : "";
+        return {
+            key: buildHasKey(`${entityPlural}${contentSuffix}`),
+            label: buildHasLabel(linkedContentType && linkedContentType !== "snapshots"
+                ? `${singularizeSlug(entityPlural)} ${linkedContentType}`
+                : entityPlural),
+        };
+    }
+    const stripped = propertyName.replace(/^associated/, "");
+    const kebab = toKebab(stripped || propertyName);
+    return {
+        key: buildHasKey(pluralizeSlug(kebab)),
+        label: buildHasLabel(pluralizeSlug(kebab)),
+    };
+}
+function relationTargetLabel(targetEntity) {
+    const slug = normalizeEntityTargetSlug(targetEntity);
+    return {
+        key: buildHasKey(slug),
+        label: buildHasLabel(slug),
+    };
+}
+function rootPropertyLabel(rootName, descriptor) {
+    return {
+        key: buildHasKey(toKebab(rootName)),
+        label: descriptor?.label ? `Has ${descriptor.label}` : buildHasLabel(toKebab(rootName)),
+    };
+}
+function sideContentLabel(postfix) {
+    return {
+        key: buildHasKey(postfix),
+        label: buildHasLabel(postfix),
+    };
+}
+function isCanonicalPostfix(descriptor, postfix) {
+    const canonical = descriptor.defaults.canonicalContentType;
+    for (const [key, ct] of Object.entries(descriptor.contentTypes)) {
+        const ctPostfix = (ct.postfix ?? key).toLowerCase();
+        if (ctPostfix === postfix.toLowerCase()) {
+            return key === canonical || ct.isCanonical === true;
+        }
+    }
+    return false;
+}
+function defaultExcludedPostfixes() {
+    return new Set(["core", "raw", "snapshots", "scoped", "legacy"]);
+}
+function targetEntityHasContentType(linkedObjectType, linkedContentType, descriptorByEntity) {
+    if (!linkedObjectType || !linkedContentType || linkedContentType === "snapshots")
+        return true;
+    const targetDescriptor = descriptorByEntity.get(linkedObjectType);
+    if (!targetDescriptor)
+        return false;
+    const wanted = linkedContentType.toLowerCase();
+    return Object.entries(targetDescriptor.contentTypes).some(([key, ct]) => {
+        const postfix = (ct.postfix ?? key).toLowerCase();
+        return postfix === wanted;
+    });
+}
+function isAssociatedPropertyBlocked(prop, descriptorByEntity) {
+    if (!prop.linkedContentType || prop.linkedContentType === "snapshots")
+        return false;
+    return !targetEntityHasContentType(prop.linkedObjectType, prop.linkedContentType, descriptorByEntity);
+}
+function mergeAssociatedPropertySignal(signalByKey, signal) {
+    const existing = signalByKey.get(signal.key);
+    if (!existing) {
+        signalByKey.set(signal.key, { ...signal, sourceRefs: [signal.sourceRef] });
+        return;
+    }
+    if (existing.kind !== "associated-property" || signal.kind !== "associated-property")
+        return;
+    const refs = new Set([...(existing.sourceRefs ?? [existing.sourceRef]), signal.sourceRef]);
+    existing.sourceRefs = [...refs];
+    if (signal.blocked)
+        existing.blocked = true;
+}
+/**
+ * Discover auto-generated "having X" narrative signals from entity descriptor metadata.
+ * No hand-authored narrative definitions are required.
+ */
+export function discoverHavingNarrativeSignals(descriptor, allDescriptors = []) {
+    const signalByKey = new Map();
+    const descriptorByEntity = new Map([descriptor, ...allDescriptors].map((entry) => [entry.entityName, entry]));
+    function push(signal) {
+        if (signal.kind === "associated-property") {
+            mergeAssociatedPropertySignal(signalByKey, signal);
+            return;
+        }
+        if (!signalByKey.has(signal.key)) {
+            signalByKey.set(signal.key, signal);
+        }
+    }
+    for (const prop of descriptor.associatedProperties ?? []) {
+        const { key, label } = associatedPropertyTargetLabel(prop.name, prop.linkedObjectType, prop.linkedContentType);
+        push({
+            key,
+            label,
+            kind: "associated-property",
+            sourceRef: prop.name,
+            linkedContentType: prop.linkedContentType,
+            targetEntity: prop.linkedObjectType,
+            blocked: isAssociatedPropertyBlocked(prop, descriptorByEntity),
+            minItems: 1,
+        });
+    }
+    for (const [relationKey, relation] of Object.entries(descriptor.relations ?? {})) {
+        const { key, label } = relationTargetLabel(relation.targetEntity);
+        push({
+            key,
+            label,
+            kind: "relation",
+            sourceRef: relationKey,
+            targetEntity: relation.targetEntity,
+            minItems: 1,
+        });
+        const targetDescriptor = descriptorByEntity.get(relation.targetEntity);
+        const targetFields = relation.targetFields ?? [];
+        for (const targetField of targetFields) {
+            const targetProperty = targetDescriptor?.properties?.[targetField];
+            const family = targetProperty && classifyCommonProperty(targetField, targetProperty);
+            if (!family)
+                continue;
+            const linked = linkedCommonPropertyLabel(relation.targetEntity, targetField, targetProperty);
+            push({
+                key: linked.key,
+                label: linked.label,
+                kind: "linked-common-property",
+                sourceRef: relationKey,
+                relationKey,
+                targetEntity: relation.targetEntity,
+                propertyKey: targetField,
+                targetPropertyKey: targetField,
+                targetPropertyPath: targetProperty
+                    ? propertyPathFromDescriptor(targetField, targetProperty)
+                    : targetField,
+                propertyFamily: family,
+                ignoredValues: DEFAULT_IGNORED_COMMON_VALUES,
+                minItems: 1,
+            });
+        }
+    }
+    for (const [rootName, rootDescriptor] of Object.entries(descriptor.rootProperties ?? {})) {
+        const { key, label } = rootPropertyLabel(rootName, rootDescriptor);
+        push({
+            key,
+            label,
+            kind: "root-property",
+            sourceRef: rootName,
+            rootPath: rootDescriptor.source?.path ?? rootName,
+            minItems: 1,
+        });
+    }
+    const excluded = new Set([
+        ...defaultExcludedPostfixes(),
+        ...(descriptor.processing?.associatedContent?.excludePostfixes ?? []).map((p) => p.toLowerCase()),
+    ]);
+    for (const [contentKey, ct] of Object.entries(descriptor.contentTypes)) {
+        const postfix = (ct.postfix ?? contentKey).toLowerCase();
+        if (excluded.has(postfix))
+            continue;
+        if (isCanonicalPostfix(descriptor, postfix))
+            continue;
+        const { key, label } = sideContentLabel(postfix);
+        push({
+            key,
+            label,
+            kind: "side-content",
+            sourceRef: postfix,
+            contentPostfix: postfix,
+            minItems: 1,
+        });
+    }
+    for (const [propertyKey, propertyDescriptor] of Object.entries(descriptor.properties ?? {})) {
+        const family = classifyCommonProperty(propertyKey, propertyDescriptor);
+        if (!family)
+            continue;
+        const propSlug = propertySlug(propertyKey);
+        push({
+            key: buildHasKey(propSlug),
+            label: `Has ${propertyLabel(propertyKey, propertyDescriptor)}`,
+            kind: "common-property",
+            sourceRef: propertyKey,
+            propertyKey,
+            propertyPath: propertyPathFromDescriptor(propertyKey, propertyDescriptor),
+            propertyFamily: family,
+            ignoredValues: DEFAULT_IGNORED_COMMON_VALUES,
+            minItems: 1,
+        });
+    }
+    for (const predicate of discoverRecordPredicateSignals(descriptor.entityName)) {
+        push(predicate);
+    }
+    for (const meta of discoverMetaNarrativeSignals(descriptor.entityName)) {
+        push(meta);
+    }
+    return [...signalByKey.values()].sort((a, b) => a.key.localeCompare(b.key));
+}
+export function havingNarrativeSummaryFromSignal(signal, entityName, target) {
+    return {
+        entity: entityName,
+        key: signal.key,
+        label: signal.label,
+        target,
+        detectionMethod: signal.blocked ? "blocked-signal" : "having-signal",
+        generated: true,
+        signalKind: signal.kind,
+        propertyFamily: signal.propertyFamily,
+        blocked: signal.blocked,
+    };
+}
+//# sourceMappingURL=discover-signals.js.map

package/dist/having-narratives/discover-signals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover-signals.js","sourceRoot":"","sources":["../../src/having-narratives/discover-signals.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EACL,WAAW,EACX,yBAAyB,EACzB,aAAa,EACb,eAAe,EACf,OAAO,GACR,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAExE,MAAM,CAAC,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AAE3E,MAAM,6BAA6B,GAAG;IACpC,EAAE;IACF,SAAS;IACT,MAAM;IACN,KAAK;IACL,IAAI;IACJ,MAAM;IACN,WAAW;IACX,gBAAgB;CACjB,CAAC;AAEF,MAAM,8BAA8B,GAAG;IACrC,UAAU;IACV,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,sBAAsB;IACtB,UAAU;IACV,wBAAwB;IACxB,cAAc;IACd,6BAA6B;IAC7B,cAAc;IACd,oBAAoB;IACpB,wBAAwB;IACxB,uBAAuB;IACvB,cAAc;IACd,YAAY;IACZ,IAAI;CACL,CAAC;AAEF,SAAS,mBAAmB,CAAC,OAAe;IAC1C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,OAAO,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,oBAAoB,CAAC;IAC/D,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,UAAsC;IAChF,OAAO,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,kBAAkB,CACzB,WAAmB,EACnB,UAAqC;IAErC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;SAC5D,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;SAC7D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SAClD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAAmB,EACnB,UAAqC;IAErC,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,UAAU,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAEnD,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACzD,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7E,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAmB,EAAE,UAAqC;IAC5F,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,IAAI,WAAW,CAAC;AAChD,CAAC;AAED,SAAS,yBAAyB,CAChC,YAAoB,EACpB,WAAmB,EACnB,kBAA8C;IAE9C,MAAM,MAAM,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,EAAE,WAAW,CAAC,GAAG,MAAM,SAAS,QAAQ,EAAE,CAAC;QAC9C,KAAK,EAAE,OAAO,mBAAmB,CAAC,MAAM,CAAC,SAAS,aAAa,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE;KACnG,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CACpC,YAAoB,EACpB,gBAAyB,EACzB,iBAA0B;IAE1B,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,aAAa,GACjB,iBAAiB,IAAI,iBAAiB,KAAK,WAAW;YACpD,CAAC,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,EAAE;YAClC,CAAC,CAAC,EAAE,CAAC;QACT,OAAO;YACL,GAAG,EAAE,WAAW,CAAC,GAAG,YAAY,GAAG,aAAa,EAAE,CAAC;YACnD,KAAK,EAAE,aAAa,CAClB,iBAAiB,IAAI,iBAAiB,KAAK,WAAW;gBACpD,CAAC,CAAC,GAAG,eAAe,CAAC,YAAY,CAAC,IAAI,iBAAiB,EAAE;gBACzD,CAAC,CAAC,YAAY,CACjB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;IAChD,OAAO;QACL,GAAG,EAAE,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,KAAK,EAAE,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB;IAC/C,MAAM,IAAI,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACrD,OAAO;QACL,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC;QACtB,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,UAA+B;IAC1E,OAAO;QACL,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;KACxF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO;QACL,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC;QACzB,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAmC,EAAE,OAAe;IAC9E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,CAAC,EAAE,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,IAAI,SAAS,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YACxC,OAAO,GAAG,KAAK,SAAS,IAAI,EAAE,CAAC,WAAW,KAAK,IAAI,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,0BAA0B,CACjC,gBAAoC,EACpC,iBAAqC,EACrC,kBAAwD;IAExD,IAAI,CAAC,gBAAgB,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9F,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClE,IAAI,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,CAAC,EAAE,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,OAAO,OAAO,KAAK,MAAM,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAClC,IAAsC,EACtC,kBAAwD;IAExD,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,iBAAiB,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACpF,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,6BAA6B,CACpC,WAAsD,EACtD,MAAoC;IAEpC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,qBAAqB,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB;QAAE,OAAO;IAC7F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3F,QAAQ,CAAC,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,OAAO;QAAE,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAAmC,EACnC,iBAA4C,EAAE;IAE9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwC,CAAC;IACpE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,CAAC,UAAU,EAAE,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAC1E,CAAC;IAEF,SAAS,IAAI,CAAC,MAAoC;QAChD,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YAC1C,6BAA6B,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,6BAA6B,CAClD,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,iBAAiB,CACvB,CAAC;QACF,IAAI,CAAC;YACH,GAAG;YACH,KAAK;YACL,IAAI,EAAE,qBAAqB;YAC3B,SAAS,EAAE,IAAI,CAAC,IAAI;YACpB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,OAAO,EAAE,2BAA2B,CAAC,IAAI,EAAE,kBAAkB,CAAC;YAC9D,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QACjF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,GAAG;YACH,KAAK;YACL,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,WAAW;YACtB,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC;QACjD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,cAAc,GAAG,gBAAgB,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,cAAc,IAAI,sBAAsB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;YACrF,IAAI,CAAC,MAAM;gBAAE,SAAS;YAEtB,MAAM,MAAM,GAAG,yBAAyB,CAAC,QAAQ,CAAC,YAAY,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;YAC7F,IAAI,CAAC;gBACH,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,wBAAwB;gBAC9B,SAAS,EAAE,WAAW;gBACtB,WAAW;gBACX,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,WAAW,EAAE,WAAW;gBACxB,iBAAiB,EAAE,WAAW;gBAC9B,kBAAkB,EAAE,cAAc;oBAChC,CAAC,CAAC,0BAA0B,CAAC,WAAW,EAAE,cAAc,CAAC;oBACzD,CAAC,CAAC,WAAW;gBACf,cAAc,EAAE,MAAM;gBACtB,aAAa,EAAE,6BAA6B;gBAC5C,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;QACzF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,GAAG;YACH,KAAK;YACL,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ;YACjD,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;QACvB,GAAG,wBAAwB,EAAE;QAC7B,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E,CAAC,CAAC,WAAW,EAAE,CAChB;KACF,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,CAAC,EAAE,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACzD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACpC,IAAI,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC;YAAE,SAAS;QAEtD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,GAAG;YACH,KAAK;YACL,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,OAAO;YAClB,cAAc,EAAE,OAAO;YACvB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5F,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC;YAC1B,KAAK,EAAE,OAAO,aAAa,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE;YAC9D,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,WAAW;YACtB,WAAW;YACX,YAAY,EAAE,0BAA0B,CAAC,WAAW,EAAE,kBAAkB,CAAC;YACzE,cAAc,EAAE,MAAM;YACtB,aAAa,EAAE,6BAA6B;YAC5C,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,8BAA8B,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,SAAS,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,4BAA4B,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,MAAoC,EACpC,UAAkB,EAClB,MAAwC;IAYxC,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM;QACN,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe;QACpE,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC"}

package/dist/having-narratives/meta-narratives.d.ts

@@ -0,0 +1,15 @@
+import type { MemorixHavingNarrativeSignal } from "../types/descriptors.js";
+export type MetaNarrativeRuleId = "asset-critical-or-high-vulns" | "asset-exploited-critical" | "asset-exposed-critical";
+export type MetaNarrativeRule = {
+    id: MetaNarrativeRuleId;
+    key: string;
+    label: string;
+    entityName: string;
+    requireAny?: string[];
+    requireAll?: string[];
+};
+declare const META_RULES: MetaNarrativeRule[];
+export declare function discoverMetaNarrativeSignals(entityName: string): MemorixHavingNarrativeSignal[];
+export declare function evaluateMetaNarrative(ruleId: MetaNarrativeRuleId, evaluated: Record<string, boolean>): boolean;
+export { META_RULES };
+//# sourceMappingURL=meta-narratives.d.ts.map

package/dist/having-narratives/meta-narratives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta-narratives.d.ts","sourceRoot":"","sources":["../../src/having-narratives/meta-narratives.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAG5E,MAAM,MAAM,mBAAmB,GAC3B,8BAA8B,GAC9B,0BAA0B,GAC1B,wBAAwB,CAAC;AAE7B,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,mBAAmB,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,QAAA,MAAM,UAAU,EAAE,iBAAiB,EAsBlC,CAAC;AAEF,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,4BAA4B,EAAE,CAS/F;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAWT;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/having-narratives/meta-narratives.js

@@ -0,0 +1,50 @@
+import { buildHasKey } from "./narrative-keys.js";
+const META_RULES = [
+    {
+        id: "asset-critical-or-high-vulns",
+        key: buildHasKey("critical-or-high-vulnerabilities"),
+        label: "Has Critical Or High Vulnerabilities",
+        entityName: "assets",
+        requireAny: ["has-critical-vulnerabilities", "has-high-vulnerabilities"],
+    },
+    {
+        id: "asset-exploited-critical",
+        key: buildHasKey("exploited-critical-vulnerabilities"),
+        label: "Has Exploited Critical Vulnerabilities",
+        entityName: "assets",
+        requireAll: ["has-critical-vulnerabilities", "has-known-exploited-vulnerabilities"],
+    },
+    {
+        id: "asset-exposed-critical",
+        key: buildHasKey("exposed-critical-asset"),
+        label: "Has Exposed Critical Asset",
+        entityName: "assets",
+        requireAll: ["has-external-adjacent-subnets", "has-critical-vulnerabilities"],
+    },
+];
+export function discoverMetaNarrativeSignals(entityName) {
+    return META_RULES.filter((rule) => rule.entityName === entityName).map((rule) => ({
+        key: rule.key,
+        label: rule.label,
+        kind: "meta",
+        sourceRef: rule.id,
+        metaRuleId: rule.id,
+        minItems: 1,
+    }));
+}
+export function evaluateMetaNarrative(ruleId, evaluated) {
+    const rule = META_RULES.find((entry) => entry.id === ruleId);
+    if (!rule)
+        return false;
+    if (rule.requireAll?.length) {
+        if (!rule.requireAll.every((key) => evaluated[key]))
+            return false;
+    }
+    if (rule.requireAny?.length) {
+        if (!rule.requireAny.some((key) => evaluated[key]))
+            return false;
+    }
+    return true;
+}
+export { META_RULES };
+//# sourceMappingURL=meta-narratives.js.map

package/dist/having-narratives/meta-narratives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta-narratives.js","sourceRoot":"","sources":["../../src/having-narratives/meta-narratives.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAgBlD,MAAM,UAAU,GAAwB;IACtC;QACE,EAAE,EAAE,8BAA8B;QAClC,GAAG,EAAE,WAAW,CAAC,kCAAkC,CAAC;QACpD,KAAK,EAAE,sCAAsC;QAC7C,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,CAAC,8BAA8B,EAAE,0BAA0B,CAAC;KACzE;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,GAAG,EAAE,WAAW,CAAC,oCAAoC,CAAC;QACtD,KAAK,EAAE,wCAAwC;QAC/C,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,CAAC,8BAA8B,EAAE,qCAAqC,CAAC;KACpF;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,GAAG,EAAE,WAAW,CAAC,wBAAwB,CAAC;QAC1C,KAAK,EAAE,4BAA4B;QACnC,UAAU,EAAE,QAAQ;QACpB,UAAU,EAAE,CAAC,+BAA+B,EAAE,8BAA8B,CAAC;KAC9E;CACF,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,UAAkB;IAC7D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChF,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,MAAe;QACrB,SAAS,EAAE,IAAI,CAAC,EAAE;QAClB,UAAU,EAAE,IAAI,CAAC,EAAE;QACnB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAA2B,EAC3B,SAAkC;IAElC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAExB,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/having-narratives/narrative-keys.d.ts

@@ -0,0 +1,18 @@
+export declare const NARRATIVE_KEY_RE: RegExp;
+export declare const COMMON_PROPERTY_FIELDS: Set<string>;
+/** Boolean adjacency fields — emit at most one tag per field per target. */
+export declare const BOOLEAN_ADJACENCY_FIELDS: Set<string>;
+/** Zone-name fields — separate from adjacency class tags. */
+export declare const ZONE_NAME_FIELDS: Set<string>;
+export declare const IGNORED_COMMON_VALUES: Set<string>;
+export declare function toKebab(value: string): string;
+export declare function pluralizeSlug(value: string): string;
+export declare function singularizeSlug(value: string): string;
+export declare function entitySlug(entityName: string): string;
+export declare function buildHasKey(target: string): string;
+export declare function commonPropertyValueToSlug(value: unknown): string | undefined;
+export declare function buildDerivedCommonPropertyKey(targetSlug: string, field: string, value: unknown): string | undefined;
+export declare function targetSlugFromSignalParts(targetEntity?: string, sourceRef?: string): string | undefined;
+export declare function vulnerabilityGroupTargetSlug(): string;
+export declare function normalizeEntityTargetSlug(entityName: string): string;
+//# sourceMappingURL=narrative-keys.d.ts.map

package/dist/having-narratives/narrative-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"narrative-keys.d.ts","sourceRoot":"","sources":["../../src/having-narratives/narrative-keys.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,QAAuB,CAAC;AAErD,eAAO,MAAM,sBAAsB,aA2BjC,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,aAInC,CAAC;AAEH,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,aAA0B,CAAC;AAExD,eAAO,MAAM,qBAAqB,aAUhC,CAAC;AAEH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQ7C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOnD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAO5E;AAED,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,GACb,MAAM,GAAG,SAAS,CAQpB;AAED,wBAAgB,yBAAyB,CACvC,YAAY,CAAC,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAIpE"}

package/dist/having-narratives/narrative-keys.js

@@ -0,0 +1,131 @@
+export const NARRATIVE_KEY_RE = /^[a-z][a-z0-9_-]*$/;
+export const COMMON_PROPERTY_FIELDS = new Set([
+    "severity",
+    "riskLevel",
+    "risk",
+    "priority",
+    "priorityLevel",
+    "priorityScore",
+    "status",
+    "operationalStatus",
+    "xdrOperationalStatus",
+    "agentStatus",
+    "xdrAgentStatus",
+    "agentType",
+    "knownExploited",
+    "isKnownExploited",
+    "exploitabilityLevel",
+    "zone",
+    "zoneClass",
+    "vr",
+    "outsideExposureClass",
+    "internalReachabilityClass",
+    "remoteAccessAdjacent",
+    "partnerLinkAdjacent",
+    "dmzAdjacent",
+    "vulnerability_family",
+    "vulnerability_type",
+    "potentialImpactLevel",
+]);
+/** Boolean adjacency fields — emit at most one tag per field per target. */
+export const BOOLEAN_ADJACENCY_FIELDS = new Set([
+    "remoteAccessAdjacent",
+    "partnerLinkAdjacent",
+    "dmzAdjacent",
+]);
+/** Zone-name fields — separate from adjacency class tags. */
+export const ZONE_NAME_FIELDS = new Set(["zone", "vr"]);
+export const IGNORED_COMMON_VALUES = new Set([
+    "",
+    "unknown",
+    "none",
+    "n/a",
+    "na",
+    "null",
+    "undefined",
+    "not-applicable",
+    "not_applicable",
+]);
+export function toKebab(value) {
+    return String(value)
+        .trim()
+        .replace(/([a-z0-9])([A-Z])/g, "$1-$2")
+        .replace(/_/g, "-")
+        .replace(/[^a-zA-Z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .toLowerCase();
+}
+export function pluralizeSlug(value) {
+    if (value.endsWith("analysis"))
+        return value;
+    if (value.endsWith("discovery"))
+        return value;
+    if (value.endsWith("ies"))
+        return value;
+    if (value.endsWith("s"))
+        return value;
+    if (value.endsWith("y"))
+        return `${value.slice(0, -1)}ies`;
+    return `${value}s`;
+}
+export function singularizeSlug(value) {
+    if (value.endsWith("ies"))
+        return `${value.slice(0, -3)}y`;
+    if (value.endsWith("ses"))
+        return value.slice(0, -2);
+    if (value.endsWith("s") && value.length > 1)
+        return value.slice(0, -1);
+    return value;
+}
+export function entitySlug(entityName) {
+    return toKebab(entityName);
+}
+export function buildHasKey(target) {
+    const key = `has-${toKebab(target)}`;
+    if (!NARRATIVE_KEY_RE.test(key)) {
+        throw new Error(`Invalid generated narrative key: ${key}`);
+    }
+    return key;
+}
+export function commonPropertyValueToSlug(value) {
+    if (typeof value === "boolean")
+        return undefined;
+    if (typeof value === "number")
+        return undefined;
+    if (typeof value !== "string")
+        return undefined;
+    const slug = toKebab(value);
+    if (IGNORED_COMMON_VALUES.has(slug))
+        return undefined;
+    return slug;
+}
+export function buildDerivedCommonPropertyKey(targetSlug, field, value) {
+    if (typeof value === "boolean") {
+        if (!value)
+            return undefined;
+        return buildHasKey(`${toKebab(field)}-${targetSlug}`);
+    }
+    const valueSlug = commonPropertyValueToSlug(value);
+    if (!valueSlug)
+        return undefined;
+    return buildHasKey(`${valueSlug}-${targetSlug}`);
+}
+export function targetSlugFromSignalParts(targetEntity, sourceRef) {
+    if (targetEntity)
+        return pluralizeSlug(entitySlug(targetEntity));
+    if (!sourceRef)
+        return undefined;
+    const stripped = sourceRef.replace(/^associated/, "");
+    const slug = toKebab(stripped || sourceRef);
+    return slug ? pluralizeSlug(slug) : undefined;
+}
+export function vulnerabilityGroupTargetSlug() {
+    return "vulnerability-groups";
+}
+export function normalizeEntityTargetSlug(entityName) {
+    const slug = entitySlug(entityName);
+    if (slug === "vulnerabilities-groups")
+        return vulnerabilityGroupTargetSlug();
+    return pluralizeSlug(slug);
+}
+//# sourceMappingURL=narrative-keys.js.map

package/dist/having-narratives/narrative-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"narrative-keys.js","sourceRoot":"","sources":["../../src/having-narratives/narrative-keys.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,UAAU;IACV,WAAW;IACX,MAAM;IACN,UAAU;IACV,eAAe;IACf,eAAe;IACf,QAAQ;IACR,mBAAmB;IACnB,sBAAsB;IACtB,aAAa;IACb,gBAAgB;IAChB,WAAW;IACX,gBAAgB;IAChB,kBAAkB;IAClB,qBAAqB;IACrB,MAAM;IACN,WAAW;IACX,IAAI;IACJ,sBAAsB;IACtB,2BAA2B;IAC3B,sBAAsB;IACtB,qBAAqB;IACrB,aAAa;IACb,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;CACvB,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IAC9C,sBAAsB;IACtB,qBAAqB;IACrB,aAAa;CACd,CAAC,CAAC;AAEH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IAC3C,EAAE;IACF,SAAS;IACT,MAAM;IACN,KAAK;IACL,IAAI;IACJ,MAAM;IACN,WAAW;IACX,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAO,MAAM,CAAC,KAAK,CAAC;SACjB,IAAI,EAAE;SACN,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3D,OAAO,GAAG,KAAK,GAAG,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,UAAkB,EAClB,KAAa,EACb,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO,WAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,WAAW,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,YAAqB,EACrB,SAAkB;IAElB,IAAI,YAAY;QAAE,OAAO,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,wBAAwB;QAAE,OAAO,4BAA4B,EAAE,CAAC;IAC7E,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/having-narratives/record-predicates.d.ts

@@ -0,0 +1,11 @@
+import type { MemorixHavingNarrativeSignal } from "../types/descriptors.js";
+export type RecordPredicateId = "vuln-empty-associated-assets" | "vuln-scan-only-host" | "vuln-critical-orphan" | "vuln-high-orphan";
+export type RecordPredicateDefinition = {
+    id: RecordPredicateId;
+    key: string;
+    label: string;
+    entityName: string;
+};
+export declare function discoverRecordPredicateSignals(entityName: string): MemorixHavingNarrativeSignal[];
+export declare function evaluateRecordPredicate(record: Record<string, unknown>, predicateId: RecordPredicateId): boolean;
+//# sourceMappingURL=record-predicates.d.ts.map

package/dist/having-narratives/record-predicates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-predicates.d.ts","sourceRoot":"","sources":["../../src/having-narratives/record-predicates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAG5E,MAAM,MAAM,iBAAiB,GACzB,8BAA8B,GAC9B,qBAAqB,GACrB,sBAAsB,GACtB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,yBAAyB,GAAG;IACtC,EAAE,EAAE,iBAAiB,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AA6BF,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GACjB,4BAA4B,EAAE,CAWhC;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAuBT"}

package/dist/having-narratives/record-predicates.js

@@ -0,0 +1,58 @@
+const VULNERABILITY_PREDICATES = [
+    {
+        id: "vuln-empty-associated-assets",
+        key: "has-no-inventory-asset",
+        label: "Has No Inventory Asset",
+        entityName: "vulnerabilities",
+    },
+    {
+        id: "vuln-scan-only-host",
+        key: "has-scan-only-host",
+        label: "Has Scan-Only Host",
+        entityName: "vulnerabilities",
+    },
+    {
+        id: "vuln-critical-orphan",
+        key: "has-critical-orphan",
+        label: "Has Critical Orphan Finding",
+        entityName: "vulnerabilities",
+    },
+    {
+        id: "vuln-high-orphan",
+        key: "has-high-orphan",
+        label: "Has High Orphan Finding",
+        entityName: "vulnerabilities",
+    },
+];
+export function discoverRecordPredicateSignals(entityName) {
+    return VULNERABILITY_PREDICATES.filter((entry) => entry.entityName === entityName).map((entry) => ({
+        key: entry.key,
+        label: entry.label,
+        kind: "record-predicate",
+        sourceRef: entry.id,
+        predicateId: entry.id,
+        minItems: 1,
+    }));
+}
+export function evaluateRecordPredicate(record, predicateId) {
+    const associatedAssets = record.associatedAssets;
+    const hasInventoryAsset = Array.isArray(associatedAssets) && associatedAssets.length > 0;
+    const assetIp = record.data?.assetIp ?? record.assetIp;
+    const hasHost = assetIp !== undefined && assetIp !== null && String(assetIp).trim() !== "";
+    const severity = String(record.data?.severity ?? record.severity ?? "")
+        .trim()
+        .toLowerCase();
+    switch (predicateId) {
+        case "vuln-empty-associated-assets":
+            return hasHost && !hasInventoryAsset;
+        case "vuln-scan-only-host":
+            return hasHost && !hasInventoryAsset;
+        case "vuln-critical-orphan":
+            return hasHost && !hasInventoryAsset && severity === "critical";
+        case "vuln-high-orphan":
+            return hasHost && !hasInventoryAsset && severity === "high";
+        default:
+            return false;
+    }
+}
+//# sourceMappingURL=record-predicates.js.map

package/dist/having-narratives/record-predicates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-predicates.js","sourceRoot":"","sources":["../../src/having-narratives/record-predicates.ts"],"names":[],"mappings":"AAgBA,MAAM,wBAAwB,GAAgC;IAC5D;QACE,EAAE,EAAE,8BAA8B;QAClC,GAAG,EAAE,wBAAwB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,UAAU,EAAE,iBAAiB;KAC9B;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,GAAG,EAAE,oBAAoB;QACzB,KAAK,EAAE,oBAAoB;QAC3B,UAAU,EAAE,iBAAiB;KAC9B;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,GAAG,EAAE,qBAAqB;QAC1B,KAAK,EAAE,6BAA6B;QACpC,UAAU,EAAE,iBAAiB;KAC9B;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,GAAG,EAAE,iBAAiB;QACtB,KAAK,EAAE,yBAAyB;QAChC,UAAU,EAAE,iBAAiB;KAC9B;CACF,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAC5C,UAAkB;IAElB,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,GAAG,CACpF,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACV,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,kBAA2B;QACjC,SAAS,EAAE,KAAK,CAAC,EAAE;QACnB,WAAW,EAAE,KAAK,CAAC,EAAE;QACrB,QAAQ,EAAE,CAAC;KACZ,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAA+B,EAC/B,WAA8B;IAE9B,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACjD,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IACzF,MAAM,OAAO,GAAI,MAAM,CAAC,IAA4C,EAAE,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IAChG,MAAM,OAAO,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3F,MAAM,QAAQ,GAAG,MAAM,CACpB,MAAM,CAAC,IAA4C,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,CACxF;SACE,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IAEjB,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,8BAA8B;YACjC,OAAO,OAAO,IAAI,CAAC,iBAAiB,CAAC;QACvC,KAAK,qBAAqB;YACxB,OAAO,OAAO,IAAI,CAAC,iBAAiB,CAAC;QACvC,KAAK,sBAAsB;YACzB,OAAO,OAAO,IAAI,CAAC,iBAAiB,IAAI,QAAQ,KAAK,UAAU,CAAC;QAClE,KAAK,kBAAkB;YACrB,OAAO,OAAO,IAAI,CAAC,iBAAiB,IAAI,QAAQ,KAAK,MAAM,CAAC;QAC9D;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC"}