@cdxgen/cdxgen 0.0.1 → 13.0.0

package/types/lib/parsers/cmakeCache.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Pure parser for CMakeCache.txt.
+ *
+ * CMakeCache is produced by `cmake` during configuration. Each non-comment line
+ * is `KEY:TYPE=VALUE`, where TYPE is one of BOOL, PATH, FILEPATH, STRING,
+ * INTERNAL, STATIC, UNINITIALIZED. Comment lines start with `//`; a leading
+ * `# This is the CMakeCache file.` header and blank lines are ignored.
+ *
+ * This module is layer 1 (pure text in, data out): it has no filesystem or
+ * subprocess access. The git/build-directory orchestration that consumes these
+ * facts lives in `lib/ecosystems/cmakeResolver.js`.
+ */
+/**
+ * Parse the raw text of a CMakeCache.txt file into an ordered key→entry map.
+ *
+ * Only well-formed `KEY:TYPE=VALUE` lines are captured. Comment (`//`), blank,
+ * and the `# This is the CMakeCache file.` header lines are ignored, as are
+ * lines that do not carry a recognised CMake cache type.
+ *
+ * @param {string} text Raw CMakeCache.txt contents
+ * @returns {Map<string, {type: string, value: string}>} Ordered map of cache entries
+ */
+export declare function parseCmakeCache(text: string): Map<string, {
+    type: string;
+    value: string;
+}>;
+/**
+ * Extract the version from a `FIND_PACKAGE_MESSAGE_DETAILS_<Pkg>:INTERNAL`
+ * value.
+ *
+ * The value is a sequence of `[...]` groups whose last group is
+ * `[v<VERSION>()]`. The version may be empty (`[v()]`). Only the final
+ * `[v...]` group is matched so a `[v...]` fragment inside an earlier bracket
+ * (a library path) cannot poison the result.
+ *
+ * @param {string} value The INTERNAL value after `=`
+ * @returns {string|null} The resolved version, empty string when the group is
+ *   present but empty, or `null` when no `[v...]` group is present.
+ */
+export declare function parseFindPackageVersion(value: string): string | null;
+/**
+ * Resolve the high-level facts a CMakeCache exposes about a configured build.
+ *
+ * Harvests the root project, every project directory, FetchContent sources, and
+ * the resolved versions of `find_package` lookups. `<name>_VERSION` is **not**
+ * present in the cache for subprojects, so fetched/submodule versions must be
+ * resolved from git or the gitclone script instead.
+ *
+ * @param {Map<string, {type: string, value: string}>} map Output of {@link parseCmakeCache}
+ * @returns {{ rootProject: {name?: string, version?: string} | null, projects: Map<string, {version?: string, sourceDir?: string, binaryDir?: string, isTopLevel?: boolean, kind: string}>, findPackages: Map<string, string>, fetchContentBase?: string }}
+ */
+export declare function resolveCmakeCacheFacts(map: Map<string, {
+    type: string;
+    value: string;
+}>): {
+    rootProject: {
+        name?: string;
+        version?: string;
+    } | null;
+    projects: Map<string, {
+        version?: string;
+        sourceDir?: string;
+        binaryDir?: string;
+        isTopLevel?: boolean;
+        kind: string;
+    }>;
+    findPackages: Map<string, string>;
+    fetchContentBase?: string;
+};
+//# sourceMappingURL=cmakeCache.d.ts.map

package/types/lib/parsers/cmakeCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cmakeCache.d.ts","sourceRoot":"","sources":["../../../lib/parsers/cmakeCache.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAHzB,MAGyB,GAFvB,GAAG,CAAC,MAAM,EAAE;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CAAC,CA0BtD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAJlC,MAIkC,GAHhC,MAAM,GAAC,IAAI,CA0BvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAH/B,GAAG,CAAC,MAAM,EAAE;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CAGV,GAF7B;IAAE,WAAW,EAAE;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAC,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,CAiG1P"}

package/types/lib/parsers/gguf.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Convert a GGUF `general.file_type` enumeration value to a stable encoding label.
+ *
+ * The mapping follows the current `llama_ftype` enumeration used by GGUF writers.
+ * Unknown values intentionally return `undefined` so callers can fall back to
+ * filename-derived or executor-specific hints.
+ *
+ * @param {number|string|undefined} fileType numeric GGUF file type value
+ * @returns {string|undefined} encoding label such as `Q5_K_M` or `BF16`
+ */
+export declare function ggufFileTypeName(fileType: number | string | undefined): string | undefined;
+/**
+ * Parse a GGUF filename using the upstream naming convention documented by the
+ * GGUF specification.
+ *
+ * The convention is intentionally strict and will return `undefined` for files
+ * that do not follow the recommended layout. Callers that need to support older
+ * or community-specific names can use this as a first pass and then fall back to
+ * project-specific heuristics.
+ *
+ * @param {string} filePathOrName absolute path or bare filename
+ * @returns {Object|undefined} parsed filename details when recognized
+ */
+export declare function parseGgufFilename(filePathOrName: string): Object | undefined;
+/**
+ * Parse GGUF metadata from an in-memory header buffer.
+ *
+ * @param {Uint8Array|Buffer} buffer GGUF header buffer
+ * @returns {Object} parsed metadata map
+ */
+export declare function parseGgufMetadataBuffer(buffer: Uint8Array | Buffer): Object;
+/**
+ * Read selected GGUF metadata keys from a model artifact without loading the whole file.
+ *
+ * @param {string} filePath GGUF file path
+ * @returns {Object|undefined} parsed GGUF metadata
+ */
+export declare function readGgufMetadata(filePath: string): Object | undefined;
+//# sourceMappingURL=gguf.d.ts.map

package/types/lib/parsers/gguf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gguf.d.ts","sourceRoot":"","sources":["../../../lib/parsers/gguf.js"],"names":[],"mappings":"AAsTA;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAAM,GAAC,MAAM,GAAC,SAGgB,GAF5B,MAAM,GAAC,SAAS,CAQ5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,cAAc,EAHrC,MAGqC,GAFnC,MAAM,GAAC,SAAS,CA6D5B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAHnC,UAAU,GAAC,MAGwB,GAFjC,MAAM,CAgDlB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAgC5B"}

package/types/lib/parsers/gitAiNotes.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Tolerant parser for git-ai notes.
+ *
+ * Supports three shapes, all degrading gracefully (never throws):
+ *  1. The real git-ai `authorship/*` schema: per-file attribution blocks
+ *     followed by a `---` separator and a JSON metadata block carrying
+ *     `sessions` (each with an `agent_id` describing the AI tool/model).
+ *  2. A flat JSON object `{ agent, model, session, prompt, lines, ranges }`.
+ *  3. Line-oriented `key: value` / `key = value` text.
+ *
+ * @param {string} raw Raw git note content
+ * @returns {Object} Extracted fields { agent, model, session, prompt, lines, ranges, sessions, prompts, agents, models, aiAttributionCount }
+ */
+export declare function parseGitAiNote(raw: string): Object;
+//# sourceMappingURL=gitAiNotes.d.ts.map

package/types/lib/parsers/gitAiNotes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitAiNotes.d.ts","sourceRoot":"","sources":["../../../lib/parsers/gitAiNotes.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB,GAFrB,MAAM,CAyFlB"}

package/types/lib/parsers/gitmodules.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Pure parser for `.gitmodules` (git config INI) and a URL→purl coordinate helper.
+ *
+ * The file format is git-config INI:
+ *
+ * ```
+ * [submodule "name"]
+ *     path = third_party/foo
+ *     url = https://github.com/org/foo.git
+ *     branch = main
+ * ```
+ *
+ * Submodule URLs are frequently *relative* (`../dep`, `../../org/dep`). Such a
+ * URL is meaningless until resolved against the origin remote. The
+ * {@link resolveSubmoduleUrl} helper takes the origin URL as an argument
+ * (rather than discovering it) so this module stays layer 1 — no git, no fs.
+ *
+ * Purl coordinates are produced here as plain data; the purl *string* is built
+ * by the layer-3 resolver via `tryBuildPurl`, because cdx-purl lives in layer 2
+ * and a layer-1 parser may not reach it.
+ */
+/**
+ * Parse `.gitmodules` text into an ordered list of submodule descriptors.
+ *
+ * @param {string} text Raw `.gitmodules` contents
+ * @returns {{ name: string, path?: string, url?: string, branch?: string }[]} Submodules in file order
+ */
+export declare function parseGitmodules(text: string): {
+    name: string;
+    path?: string;
+    url?: string;
+    branch?: string;
+}[];
+/**
+ * Parse a git remote URL into an origin descriptor.
+ *
+ * Supports https, the `git@host:owner/repo` SSH shorthand, and
+ * `ssh://git@host/owner/repo` URLs.
+ *
+ * @param {string} url Origin remote URL
+ * @returns {{ scheme: string, host?: string, owner?: string, name?: string, baseUrl?: string } | null}
+ */
+export declare function parseGitRemoteUrl(url: string): {
+    scheme: string;
+    host?: string;
+    owner?: string;
+    name?: string;
+    baseUrl?: string;
+} | null;
+/**
+ * Resolve a submodule URL that may be relative against the origin remote.
+ *
+ * Git treats the superproject URL as a *directory* rather than a file, so
+ * `../bar` against `https://example.com/repositories/foo` resolves to
+ * `https://example.com/repositories/bar`, and `./inner` resolves to
+ * `https://example.com/repositories/foo/inner`. RFC 3986 would strip the last
+ * segment first and land a level higher, so the base carries an explicit
+ * trailing slash before resolution. SSH shorthand origins (`git@host:o/root`)
+ * are normalised to `https://host/o/root` first.
+ *
+ * @param {string} submoduleUrl URL from `.gitmodules` (absolute or relative)
+ * @param {string} originUrl Origin remote URL of the containing repo
+ * @returns {string|null} Absolute URL, or null when it cannot be resolved
+ */
+export declare function resolveSubmoduleUrl(submoduleUrl: string, originUrl: string): string | null;
+/**
+ * Build purl coordinates from a resolved submodule URL.
+ *
+ * GitHub remotes become `pkg:github/<owner>/<name>@<version>`; every other
+ * host becomes `pkg:generic` coordinates with a `vcs_url` qualifier, because
+ * only GitHub has a registered purl type that cdx-purl recognises.
+ *
+ * The caller (layer 3) turns these into a purl string via `tryBuildPurl`.
+ *
+ * @param {string} resolvedUrl Absolute git URL
+ * @param {string} [version] Resolved version (tag or commit SHA)
+ * @returns {{ type: string, namespace: string|null, name: string, version: string|null, qualifiers?: { vcs_url: string } } | null}
+ */
+export declare function submodulePurlCoordinates(resolvedUrl: string, version?: string): {
+    type: string;
+    namespace: string | null;
+    name: string;
+    version: string | null;
+    qualifiers?: {
+        vcs_url: string;
+    };
+} | null;
+//# sourceMappingURL=gitmodules.d.ts.map

package/types/lib/parsers/gitmodules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitmodules.d.ts","sourceRoot":"","sources":["../../../lib/parsers/gitmodules.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAHzB,MAGyB,GAFvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,CAwC5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B,GAFxB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA4DrG;AA0BD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAJrC,MAIqC,EAAE,SAAS,EAHhD,MAGgD,GAF9C,MAAM,GAAC,IAAI,CAwBvB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAJzC,MAIyC,EAAE,OAAO,AAH1D,CACA,EADQ,MAGkD,GAFhD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAAG,IAAI,CAyBjI"}

package/types/lib/parsers/htmlExtract.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Decode named (`&`) and numeric (`'` / `'`) HTML entities.
+ * Unrecognised sequences are returned verbatim so licence text is never mangled.
+ *
+ * @param {string} str Text that may contain entity references.
+ * @returns {string} Decoded text.
+ */
+export declare function decodeEntities(str: string): string;
+/**
+ * Extract the licence heading from a pkg.go.dev page.
+ *
+ * Current markup puts the licence in `<section class="License"><h2>`, and
+ * several licences arrive as one comma-separated heading — `Apache-2.0, MIT`
+ * for gopkg.in/yaml.v3 — which the caller splits on ", ". Older markup used a
+ * container with `id="LICENSE"`; that path is tried first and costs one scan.
+ *
+ * Should a page ever carry several licence sections, their headings are joined
+ * with ", " so they split into separate licences rather than fusing into one
+ * nonsense identifier.
+ *
+ * @param {string} html Raw pkg.go.dev HTML.
+ * @returns {string} Trimmed licence text, or "" when nothing matches.
+ */
+export declare function extractLicenseText(html: string): string;
+/**
+ * Extract the repository URL from a pkg.go.dev page: the decoded `href` of the
+ * first direct anchor inside `div.UnitMeta-repo`. Anchors nested deeper in the
+ * container are links to other things, so only a direct child counts.
+ *
+ * @param {string} html Raw pkg.go.dev HTML.
+ * @returns {string|undefined}
+ */
+export declare function extractRepoUrl(html: string): string | undefined;
+//# sourceMappingURL=htmlExtract.d.ts.map

package/types/lib/parsers/htmlExtract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"htmlExtract.d.ts","sourceRoot":"","sources":["../../../lib/parsers/htmlExtract.js"],"names":[],"mappings":"AAsDA;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB,GAFrB,MAAM,CAmDlB;AA+aD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAH5B,MAG4B,GAF1B,MAAM,CA6BlB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAHxB,MAGwB,GAFtB,MAAM,GAAC,SAAS,CAkB5B"}

package/types/lib/parsers/huggingfaceManifest.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Glob patterns used to locate Hugging Face model-card README files.
+ *
+ * @type {string[]}
+ */
+export declare const HUGGING_FACE_MODEL_CARD_PATTERNS: string[];
+/**
+ * Glob patterns used to locate Hugging Face `config.json` files.
+ *
+ * @type {string[]}
+ */
+export declare const HUGGING_FACE_CONFIG_PATTERNS: string[];
+/**
+ * Glob patterns used to locate Hugging Face PEFT `adapter_config.json` files.
+ *
+ * @type {string[]}
+ */
+export declare const HUGGING_FACE_ADAPTER_PATTERNS: string[];
+/**
+ * Parse YAML frontmatter from a local Hugging Face README/model card.
+ *
+ * @param {string} raw README contents
+ * @returns {object|undefined} parsed frontmatter object
+ */
+export declare function parseHuggingFaceReadmeFrontmatter(raw: string): object | undefined;
+/**
+ * Check whether parsed README frontmatter looks like a Hugging Face model card.
+ *
+ * @param {object|undefined} cardData parsed frontmatter
+ * @returns {boolean} true when Hugging Face model-card keys are present
+ */
+export declare function hasHuggingFaceCardSignals(cardData: object | undefined): boolean;
+/**
+ * Infer a Hugging Face repo id from a fixture directory name such as namespace--name.
+ *
+ * @param {string} filePath manifest file path inside the repository fixture
+ * @returns {string|undefined} inferred namespace/name repository id
+ */
+export declare function repoIdFromFixtureDirectory(filePath: string): string | undefined;
+/**
+ * Create a CycloneDX component reference for a related Hugging Face asset.
+ *
+ * @param {string} modelRef model, dataset, or space reference
+ * @param {{ includeDatasetPurl?: boolean }} [options={}] pedigree reference options
+ * @returns {{ "bom-ref": string, group: string, name: string, purl?: string, type: string }|undefined} component reference
+ */
+export declare function createHuggingFaceComponentReference(modelRef: string, _options?: {}): {
+    "bom-ref": string;
+    group: string;
+    name: string;
+    purl?: string;
+    type: string;
+} | undefined;
+/**
+ * Create a reusable dataset reference and optional component for Hugging Face model-card datasets.
+ *
+ * @param {object|string} dataset dataset reference from model-card metadata
+ * @param {{
+ *   componentProperties?: Array<{ name: string, value: string }>,
+ *   componentScope?: string,
+ *   componentSource?: string,
+ *   componentTags?: string[],
+ *   urlSanitizer?: (url: string|undefined) => string|undefined,
+ * }} [options={}] dataset normalization and component options
+ * @returns {{
+ *   assetType: "dataset",
+ *   bomRef: string,
+ *   component: {
+ *     "bom-ref": string,
+ *     data: Array<object>,
+ *     description?: string,
+ *     externalReferences?: Array<object>,
+ *     group: string,
+ *     name: string,
+ *     properties?: Array<object>,
+ *     purl?: string,
+ *     scope?: string,
+ *     tags?: string[],
+ *     type: "data",
+ *   },
+ *   description?: string,
+ *   externalReferences?: Array<object>,
+ *   group: string,
+ *   modelId: string,
+ *   name: string,
+ *   provider: "huggingface",
+ *   purl?: string,
+ *   ref: { ref: string },
+ * }|undefined} dataset reference and component metadata
+ */
+export declare function createHuggingFaceDatasetReference(dataset: object | string, options?: {
+    componentProperties?: Array<{
+        name: string;
+        value: string;
+    }>;
+    componentScope?: string;
+    componentSource?: string;
+    componentTags?: string[];
+    urlSanitizer?: (url: string | undefined) => string | undefined;
+}): {
+    assetType: "dataset";
+    bomRef: string;
+    component: {
+        "bom-ref": string;
+        data: Array<object>;
+        description?: string;
+        externalReferences?: Array<object>;
+        group: string;
+        name: string;
+        properties?: Array<object>;
+        purl?: string;
+        scope?: string;
+        tags?: string[];
+        type: "data";
+    };
+    description?: string;
+    externalReferences?: Array<object>;
+    group: string;
+    modelId: string;
+    name: string;
+    provider: "huggingface";
+    purl?: string;
+    ref: {
+        ref: string;
+    };
+} | undefined;
+/**
+ * Create a CycloneDX model card from local or remote Hugging Face manifest data.
+ *
+ * @param {object} [cardData={}] parsed model-card frontmatter
+ * @param {object} [config={}] parsed config.json data
+ * @param {(dataset: object|string) => object|undefined} [addDatasetReference] optional dataset reference mapper
+ * @param {{ urlSanitizer?: (url: string|undefined) => string|undefined }} [options={}] dataset normalization options
+ * @returns {object|undefined} sanitized CycloneDX model card
+ */
+export declare function createHuggingFaceModelCard(cardData?: object, config?: object, addDatasetReference?: (dataset: object | string) => object | undefined, options?: {
+    urlSanitizer?: (url: string | undefined) => string | undefined;
+}): object | undefined;
+/**
+ * Create pedigree lineage from Hugging Face model-card and adapter manifest metadata.
+ *
+ * @param {object} [cardData={}] parsed README frontmatter
+ * @param {object} [adapterConfig={}] parsed adapter config
+ * @param {string|undefined} quantization detected quantization label
+ * @param {{
+ *   createPedigreeModelReference?: (modelRef: string) => object|undefined,
+ * }} [options={}] pedigree reference options
+ * @returns {object|undefined} CycloneDX pedigree object
+ */
+export declare function createHuggingFacePedigree(cardData?: object, adapterConfig?: object, quantization: string | undefined, options?: {
+    createPedigreeModelReference?: (modelRef: string) => object | undefined;
+}): object | undefined;
+//# sourceMappingURL=huggingfaceManifest.d.ts.map

package/types/lib/parsers/huggingfaceManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"huggingfaceManifest.d.ts","sourceRoot":"","sources":["../../../lib/parsers/huggingfaceManifest.js"],"names":[],"mappings":"AAmBA;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,EAFnC,MAAM,EAE6D,CAAC;AAC9E;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,EAF/B,MAAM,EAE6D,CAAC;AAC9E;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAFhC,MAAM,EAKf,CAAC;AA0LF;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,GAAG,EAH1C,MAG0C,GAFxC,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAHvC,MAAM,GAAC,SAGgC,GAFrC,OAAO,CAOnB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAHxC,MAGwC,GAFtC,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CAAC,QAAQ,EAJjD,MAIiD,EAAE,QAAQ,KAAK,GAF9D;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAC,SAAS,CAyBrG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,iCAAiC,CAAC,OAAO,EAlC9C,MAAM,GAAC,MAkCuC,EAAE,OAAO,AAjC/D,CAOA,EAPQ;IACN,mBAAmB,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAC,SAAS,KAAK,MAAM,GAAC,SAAS,CAAC;CA4BO,GA1B1D;IACR,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE;QACf,SAAe,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB,GAAC,SAAS,CAqDb;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,AAPP,CACA,EADQ,MAOI,EACb,MAAM,AAPL,CACA,EADQ,MAOE,EACX,mBAAmB,AAPlB,CACA,EADQ,CAAC,OAAO,EAAE,MAAM,GAAC,MAAM,KAAK,MAAM,GAAC,SAOb,EAC/B,OAAO,AAPN,CACA,EADQ;IAAE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAC,SAAS,KAAK,MAAM,GAAC,SAAS,CAAA;CAOzD,GAND,MAAM,GAAC,SAAS,CAsF5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,AATP,CACA,EADQ,MASD,EACR,aAAa,AATZ,CACA,EADQ,MASI,EACb,YAAY,EATH,MAAM,GAAC,SASJ,EACZ,OAAO,AATN,CAGA,EAHQ;IACN,4BAA4B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAC,SAAS,CAAC;CAQ7D,GAND,MAAM,GAAC,SAAS,CAiD5B"}

package/types/lib/parsers/huggingfaceUtils.d.ts

@@ -0,0 +1,155 @@
+/**
+ * Base URL for the Hugging Face Hub.
+ *
+ * @type {string}
+ */
+export declare const HF_BASE_URL: string;
+/**
+ * Relation labels that indicate a Hugging Face pedigree "ancestors" link, as
+ * opposed to sibling "variants". Includes adapter, finetune, merge, and
+ * quantization relation spellings.
+ *
+ * @type {Set<string>}
+ */
+export declare const HUGGING_FACE_ANCESTOR_RELATIONS: Set<string>;
+/**
+ * Canonical Hugging Face datasets repository URL.
+ *
+ * @type {string}
+ */
+export declare const HUGGING_FACE_DATASET_REPOSITORY_URL: string;
+/**
+ * Canonical Hugging Face spaces repository URL.
+ *
+ * @type {string}
+ */
+export declare const HUGGING_FACE_SPACE_REPOSITORY_URL: string;
+/**
+ * Map a Hugging Face asset type to its canonical Hub repository URL.
+ *
+ * @param {string} assetType One of "dataset", "space", or "model".
+ * @returns {string|undefined} The repository URL for the asset type, or the
+ *   base Hub URL for models/unknown types.
+ */
+export declare function repositoryUrlForHuggingFaceAssetType(assetType: string): string | undefined;
+/**
+ * Infer the Hugging Face asset type (model, dataset, or space) from a
+ * repository URL.
+ *
+ * @param {string} repositoryUrl The Hugging Face repository URL to inspect.
+ * @returns {string|undefined} The inferred asset type ("model", "dataset", or
+ *   "space").
+ */
+export declare function assetTypeFromHuggingFaceRepositoryUrl(repositoryUrl: string): string | undefined;
+/**
+ * Normalize a Hugging Face repository identifier to the canonical namespace/name form.
+ *
+ * @param {string} repoId Hugging Face repository id candidate
+ * @returns {string|undefined} normalized repository id
+ */
+export declare function sanitizeHuggingFaceRepoId(repoId: string): string | undefined;
+/**
+ * Encode Hugging Face path segments while preserving path separators.
+ *
+ * @param {string} value path-like repository identifier
+ * @returns {string} encoded path segments
+ */
+export declare function encodeHuggingFacePathSegments(value: string): string;
+/**
+ * Convert a Hugging Face asset reference to a canonical web path.
+ *
+ * @param {string} assetType asset type such as model, dataset, or space
+ * @param {string} repoId Hugging Face repository id
+ * @returns {string|undefined} canonical path under huggingface.co
+ */
+export declare function toHuggingFaceAssetPath(assetType: string, repoId: string): string | undefined;
+/**
+ * Convert a Hugging Face asset reference to a canonical web URL.
+ *
+ * @param {string} assetType asset type such as model, dataset, or space
+ * @param {string} repoId Hugging Face repository id
+ * @returns {string|undefined} canonical URL under huggingface.co
+ */
+export declare function toHuggingFaceAssetUrl(assetType: string, repoId: string): string | undefined;
+/**
+ * Convert a Hugging Face repo reference to a package URL.
+ *
+ * @param {string} repoId Hugging Face repository id
+ * @param {string} [version] optional revision or sha
+ * @param {string} [repositoryUrl] optional registry URL override
+ * @returns {string|undefined} normalized Hugging Face purl
+ */
+export declare function toHuggingFacePurl(repoId: string, version?: string, repositoryUrl?: string): string | undefined;
+/**
+ * Normalize a direct Hugging Face URL or purl into a repo reference.
+ *
+ * @param {string} value direct URL, API URL, or purl
+ * @returns {{ assetType: string, repoId: string, version?: string }|undefined} normalized reference
+ */
+export declare function normalizeHuggingFaceReference(value: string): {
+    assetType: string;
+    repoId: string;
+    version?: string;
+} | undefined;
+/**
+ * Normalize a Hugging Face dataset descriptor into reusable fields.
+ *
+ * @param {object|string} dataset dataset reference from model-card metadata
+ * @param {{ urlSanitizer?: (url: string|undefined) => string|undefined }} [options={}] dataset normalization options
+ * @returns {{
+ *   assetType: "dataset",
+ *   bomRef: string,
+ *   description?: string,
+ *   group: string,
+ *   name: string,
+ *   repoId: string,
+ *   url: string,
+ * }|undefined} normalized dataset metadata
+ */
+export declare function normalizeHuggingFaceDataset(dataset: object | string, options?: {
+    urlSanitizer?: (url: string | undefined) => string | undefined;
+}): {
+    assetType: "dataset";
+    bomRef: string;
+    description?: string;
+    group: string;
+    name: string;
+    repoId: string;
+    url: string;
+} | undefined;
+/**
+ * Create an inline CycloneDX dataset object from Hugging Face model-card metadata.
+ *
+ * @param {object|string} dataset dataset reference from model-card metadata
+ * @param {{ urlSanitizer?: (url: string|undefined) => string|undefined }} [options={}] dataset normalization options
+ * @returns {{ contents?: { url: string }, description?: string, name: string, type: string }|undefined} inline dataset object
+ */
+export declare function createInlineHuggingFaceDataset(dataset: object | string, options?: {
+    urlSanitizer?: (url: string | undefined) => string | undefined;
+}): {
+    contents?: {
+        url: string;
+    };
+    description?: string;
+    name: string;
+    type: string;
+} | undefined;
+/**
+ * Convert Hugging Face model-index entries into CycloneDX performance metrics.
+ *
+ * @param {Array<object>} [modelIndex=[]] model-index entries from model-card metadata
+ * @returns {Array<{ slice?: string, type: string, value: string }>} CycloneDX performance metrics
+ */
+export declare function createPerformanceMetrics(modelIndex?: Array<object>): Array<{
+    slice?: string;
+    type: string;
+    value: string;
+}>;
+/**
+ * Derive a human-readable quantization label from a Hugging Face quantization config.
+ *
+ * @param {object|string} quantizationConfig Hugging Face quantization configuration
+ * @returns {string|undefined} normalized quantization label
+ */
+export declare function quantizationValueFromConfig(quantizationConfig: object | string): string | undefined;
+//# sourceMappingURL=huggingfaceUtils.d.ts.map

package/types/lib/parsers/huggingfaceUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"huggingfaceUtils.d.ts","sourceRoot":"","sources":["../../../lib/parsers/huggingfaceUtils.js"],"names":[],"mappings":"AAiBA;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAFd,MAEyC,CAAC;AACpD;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,EAFlC,GAAG,CAAC,MAAM,CAYlB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,EAFtC,MAEkE,CAAC;AAC7E;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,EAFpC,MAE8D,CAAC;AAEzE;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CAAC,SAAS,EAJnD,MAImD,GAHjD,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;;GAOG;AACH,wBAAgB,qCAAqC,CAAC,aAAa,EAJxD,MAIwD,GAHtD,MAAM,GAAC,SAAS,CAiB5B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAHrC,MAGqC,GAFnC,MAAM,GAAC,SAAS,CAoC5B;AAYD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAHxC,MAGwC,GAFtC,MAAM,CAQlB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAJrC,MAIqC,EAAE,MAAM,EAH7C,MAG6C,GAF3C,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAJpC,MAIoC,EAAE,MAAM,EAH5C,MAG4C,GAF1C,MAAM,GAAC,SAAS,CAK5B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAL7B,MAK6B,EAAE,OAAO,AAJ9C,CACA,EADQ,MAIsC,EAAE,aAAa,AAH7D,CACA,EADQ,MAGqD,GAFnD,MAAM,GAAC,SAAS,CA8B5B;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAHxC,MAGwC,GAFtC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAC,SAAS,CA6G7E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAZxC,MAAM,GAAC,MAYiC,EAAE,OAAO,AAXzD,CACA,EADQ;IAAE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAC,SAAS,KAAK,MAAM,GAAC,SAAS,CAAA;CAWN,GAVpD;IACR,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb,GAAC,SAAS,CAqDb;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAJ3C,MAAM,GAAC,MAIoC,EAAE,OAAO,AAH5D,CACA,EADQ;IAAE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAC,SAAS,KAAK,MAAM,GAAC,SAAS,CAAA;CAGH,GAFvD;IAAE,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAC,SAAS,CAyBtG;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,AAHhD,CACA,EADQ,KAAK,CAAC,MAAM,CAGiC,GAF3C,KAAK,CAAC;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBlE;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,kBAAkB,EAHnD,MAAM,GAAC,MAG4C,GAFjD,MAAM,GAAC,SAAS,CAoB5B"}

package/types/lib/parsers/iri.d.ts

@@ -0,0 +1,68 @@
+export type IRIComponents = {
+    scheme: string;
+    userinfo?: string;
+    host?: string;
+    port?: string;
+    path: string;
+    query?: string;
+    fragment?: string;
+    valid: boolean;
+    error?: string;
+};
+/**
+ * Represents the parsed components of an IRI.
+ * @typedef {Object} IRIComponents
+ * @property {string} scheme
+ * @property {string} [userinfo]
+ * @property {string} [host]
+ * @property {string} [port]
+ * @property {string} path
+ * @property {string} [query]
+ * @property {string} [fragment]
+ * @property {boolean} valid
+ * @property {string} [error]
+ */
+/**
+ * Parses an IRI string according to RFC 3987.
+ * @param {string} iri The IRI string to parse.
+ * @returns {IRIComponents} An object containing the parsed components and validity status.
+ */
+export declare function parseIRI(iri: string): IRIComponents;
+/**
+ * Possible ways of validating an IRI.
+ */
+export declare const IriValidationStrategy: Readonly<{
+    /**
+     * Validates the IRI according to RFC 3987 using a custom parser.
+     */
+    Parse: "parse";
+    /**
+     * Validates that the IRI has a valid scheme and does not contain any character forbidden by the Turtle specification.
+     */
+    Pragmatic: "pragmatic";
+    /**
+     * Does not validate the IRI at all.
+     */
+    None: "none";
+}>;
+/**
+ * Validate a given IRI according to the given strategy.
+ *
+ * @param {string} iri a string that may be an IRI.
+ * @param {IriValidationStrategy} strategy IRI validation strategy.
+ * @return {Error | undefined} An error if the IRI is invalid, or undefined if it is valid.
+ */
+export declare function validateIri(iri: string, strategy?: IriValidationStrategy): Error | undefined;
+/**
+ * Function to validate an externalReference URL for conforming to the JSON schema or bomLink
+ * https://github.com/CycloneDX/cyclonedx-core-java/blob/75575318b268dda9e2a290761d7db11b4f414255/src/main/resources/bom-1.5.schema.json#L1140
+ * https://datatracker.ietf.org/doc/html/rfc3987#section-2.2
+ * https://cyclonedx.org/capabilities/bomlink/
+ *
+ * @param {String} iri IRI to validate
+ *
+ * @returns {Boolean} Flag indicating whether the supplied URL is valid or not
+ *
+ */
+export declare function isValidIriReference(iri: string): boolean;
+//# sourceMappingURL=iri.d.ts.map

package/types/lib/parsers/iri.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iri.d.ts","sourceRoot":"","sources":["../../../lib/parsers/iri.js"],"names":[],"mappings":"AAKG,YAAkB,aAAa,GAC/B;IAAmB,MAAM,EAAd,MAAM,CACjB;IAAoB,QAAQ,AAA5B,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAmB,IAAI,EAAZ,MAAM,CACjB;IAAoB,KAAK,AAAzB,CACA,EADW,MAAM,CACjB;IAAoB,QAAQ,AAA5B,CACA,EADW,MAAM,CACjB;IAAoB,KAAK,EAAd,OAAO,CAClB;IAAoB,KAAK,AAAzB,CAA0B,EAAf,MAAM,CAAS;CAAA,CAAA;AAX7B;;;;;;;;;;;;GAYG;AAEH;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAHjB,MAGiB,GAFf,aAAa,CAiLzB;AAsQD;;GAEG;AACH,eAAO,MAAM,qBAAqB;IAChC;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;EAEH,CAAC;AAQH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAJpB,MAIoB,EAAE,QAAQ,GAH9B,qBAG4D,GAF3D,KAAK,GAAG,SAAS,CA8C5B;AAyBD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,QAAA,WA6CtC"}