@cdxgen/cdxgen 0.0.1 → 13.0.1

package/types/lib/parsers/huggingfaceManifest.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Glob patterns used to locate Hugging Face model-card README files.
+ *
+ * @type {string[]}
+ */
+export declare const HUGGING_FACE_MODEL_CARD_PATTERNS: string[];
+/**
+ * Glob patterns used to locate Hugging Face `config.json` files.
+ *
+ * @type {string[]}
+ */
+export declare const HUGGING_FACE_CONFIG_PATTERNS: string[];
+/**
+ * Glob patterns used to locate Hugging Face PEFT `adapter_config.json` files.
+ *
+ * @type {string[]}
+ */
+export declare const HUGGING_FACE_ADAPTER_PATTERNS: string[];
+/**
+ * Parse YAML frontmatter from a local Hugging Face README/model card.
+ *
+ * @param {string} raw README contents
+ * @returns {object|undefined} parsed frontmatter object
+ */
+export declare function parseHuggingFaceReadmeFrontmatter(raw: string): object | undefined;
+/**
+ * Check whether parsed README frontmatter looks like a Hugging Face model card.
+ *
+ * @param {object|undefined} cardData parsed frontmatter
+ * @returns {boolean} true when Hugging Face model-card keys are present
+ */
+export declare function hasHuggingFaceCardSignals(cardData: object | undefined): boolean;
+/**
+ * Infer a Hugging Face repo id from a fixture directory name such as namespace--name.
+ *
+ * @param {string} filePath manifest file path inside the repository fixture
+ * @returns {string|undefined} inferred namespace/name repository id
+ */
+export declare function repoIdFromFixtureDirectory(filePath: string): string | undefined;
+/**
+ * Create a CycloneDX component reference for a related Hugging Face asset.
+ *
+ * @param {string} modelRef model, dataset, or space reference
+ * @param {{ includeDatasetPurl?: boolean }} [options={}] pedigree reference options
+ * @returns {{ "bom-ref": string, group: string, name: string, purl?: string, type: string }|undefined} component reference
+ */
+export declare function createHuggingFaceComponentReference(modelRef: string, _options?: {}): {
+    "bom-ref": string;
+    group: string;
+    name: string;
+    purl?: string;
+    type: string;
+} | undefined;
+/**
+ * Create a reusable dataset reference and optional component for Hugging Face model-card datasets.
+ *
+ * @param {object|string} dataset dataset reference from model-card metadata
+ * @param {{
+ *   componentProperties?: Array<{ name: string, value: string }>,
+ *   componentScope?: string,
+ *   componentSource?: string,
+ *   componentTags?: string[],
+ *   urlSanitizer?: (url: string|undefined) => string|undefined,
+ * }} [options={}] dataset normalization and component options
+ * @returns {{
+ *   assetType: "dataset",
+ *   bomRef: string,
+ *   component: {
+ *     "bom-ref": string,
+ *     data: Array<object>,
+ *     description?: string,
+ *     externalReferences?: Array<object>,
+ *     group: string,
+ *     name: string,
+ *     properties?: Array<object>,
+ *     purl?: string,
+ *     scope?: string,
+ *     tags?: string[],
+ *     type: "data",
+ *   },
+ *   description?: string,
+ *   externalReferences?: Array<object>,
+ *   group: string,
+ *   modelId: string,
+ *   name: string,
+ *   provider: "huggingface",
+ *   purl?: string,
+ *   ref: { ref: string },
+ * }|undefined} dataset reference and component metadata
+ */
+export declare function createHuggingFaceDatasetReference(dataset: object | string, options?: {
+    componentProperties?: Array<{
+        name: string;
+        value: string;
+    }>;
+    componentScope?: string;
+    componentSource?: string;
+    componentTags?: string[];
+    urlSanitizer?: (url: string | undefined) => string | undefined;
+}): {
+    assetType: "dataset";
+    bomRef: string;
+    component: {
+        "bom-ref": string;
+        data: Array<object>;
+        description?: string;
+        externalReferences?: Array<object>;
+        group: string;
+        name: string;
+        properties?: Array<object>;
+        purl?: string;
+        scope?: string;
+        tags?: string[];
+        type: "data";
+    };
+    description?: string;
+    externalReferences?: Array<object>;
+    group: string;
+    modelId: string;
+    name: string;
+    provider: "huggingface";
+    purl?: string;
+    ref: {
+        ref: string;
+    };
+} | undefined;
+/**
+ * Create a CycloneDX model card from local or remote Hugging Face manifest data.
+ *
+ * @param {object} [cardData={}] parsed model-card frontmatter
+ * @param {object} [config={}] parsed config.json data
+ * @param {(dataset: object|string) => object|undefined} [addDatasetReference] optional dataset reference mapper
+ * @param {{ urlSanitizer?: (url: string|undefined) => string|undefined }} [options={}] dataset normalization options
+ * @returns {object|undefined} sanitized CycloneDX model card
+ */
+export declare function createHuggingFaceModelCard(cardData?: object, config?: object, addDatasetReference?: (dataset: object | string) => object | undefined, options?: {
+    urlSanitizer?: (url: string | undefined) => string | undefined;
+}): object | undefined;
+/**
+ * Create pedigree lineage from Hugging Face model-card and adapter manifest metadata.
+ *
+ * @param {object} [cardData={}] parsed README frontmatter
+ * @param {object} [adapterConfig={}] parsed adapter config
+ * @param {string|undefined} quantization detected quantization label
+ * @param {{
+ *   createPedigreeModelReference?: (modelRef: string) => object|undefined,
+ * }} [options={}] pedigree reference options
+ * @returns {object|undefined} CycloneDX pedigree object
+ */
+export declare function createHuggingFacePedigree(cardData?: object, adapterConfig?: object, quantization: string | undefined, options?: {
+    createPedigreeModelReference?: (modelRef: string) => object | undefined;
+}): object | undefined;
+//# sourceMappingURL=huggingfaceManifest.d.ts.map

package/types/lib/parsers/huggingfaceManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"huggingfaceManifest.d.ts","sourceRoot":"","sources":["../../../lib/parsers/huggingfaceManifest.js"],"names":[],"mappings":"AAmBA;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,EAFnC,MAAM,EAE6D,CAAC;AAC9E;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,EAF/B,MAAM,EAE6D,CAAC;AAC9E;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAFhC,MAAM,EAKf,CAAC;AA0LF;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAAC,GAAG,EAH1C,MAG0C,GAFxC,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAHvC,MAAM,GAAC,SAGgC,GAFrC,OAAO,CAOnB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAHxC,MAGwC,GAFtC,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CAAC,QAAQ,EAJjD,MAIiD,EAAE,QAAQ,KAAK,GAF9D;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAC,SAAS,CAyBrG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,iCAAiC,CAAC,OAAO,EAlC9C,MAAM,GAAC,MAkCuC,EAAE,OAAO,AAjC/D,CAOA,EAPQ;IACN,mBAAmB,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAC,SAAS,KAAK,MAAM,GAAC,SAAS,CAAC;CA4BO,GA1B1D;IACR,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE;QACf,SAAe,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CACtB,GAAC,SAAS,CAqDb;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,AAPP,CACA,EADQ,MAOI,EACb,MAAM,AAPL,CACA,EADQ,MAOE,EACX,mBAAmB,AAPlB,CACA,EADQ,CAAC,OAAO,EAAE,MAAM,GAAC,MAAM,KAAK,MAAM,GAAC,SAOb,EAC/B,OAAO,AAPN,CACA,EADQ;IAAE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAC,SAAS,KAAK,MAAM,GAAC,SAAS,CAAA;CAOzD,GAND,MAAM,GAAC,SAAS,CAsF5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,AATP,CACA,EADQ,MASD,EACR,aAAa,AATZ,CACA,EADQ,MASI,EACb,YAAY,EATH,MAAM,GAAC,SASJ,EACZ,OAAO,AATN,CAGA,EAHQ;IACN,4BAA4B,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAC,SAAS,CAAC;CAQ7D,GAND,MAAM,GAAC,SAAS,CAiD5B"}

package/types/lib/parsers/huggingfaceUtils.d.ts

@@ -0,0 +1,155 @@
+/**
+ * Base URL for the Hugging Face Hub.
+ *
+ * @type {string}
+ */
+export declare const HF_BASE_URL: string;
+/**
+ * Relation labels that indicate a Hugging Face pedigree "ancestors" link, as
+ * opposed to sibling "variants". Includes adapter, finetune, merge, and
+ * quantization relation spellings.
+ *
+ * @type {Set<string>}
+ */
+export declare const HUGGING_FACE_ANCESTOR_RELATIONS: Set<string>;
+/**
+ * Canonical Hugging Face datasets repository URL.
+ *
+ * @type {string}
+ */
+export declare const HUGGING_FACE_DATASET_REPOSITORY_URL: string;
+/**
+ * Canonical Hugging Face spaces repository URL.
+ *
+ * @type {string}
+ */
+export declare const HUGGING_FACE_SPACE_REPOSITORY_URL: string;
+/**
+ * Map a Hugging Face asset type to its canonical Hub repository URL.
+ *
+ * @param {string} assetType One of "dataset", "space", or "model".
+ * @returns {string|undefined} The repository URL for the asset type, or the
+ *   base Hub URL for models/unknown types.
+ */
+export declare function repositoryUrlForHuggingFaceAssetType(assetType: string): string | undefined;
+/**
+ * Infer the Hugging Face asset type (model, dataset, or space) from a
+ * repository URL.
+ *
+ * @param {string} repositoryUrl The Hugging Face repository URL to inspect.
+ * @returns {string|undefined} The inferred asset type ("model", "dataset", or
+ *   "space").
+ */
+export declare function assetTypeFromHuggingFaceRepositoryUrl(repositoryUrl: string): string | undefined;
+/**
+ * Normalize a Hugging Face repository identifier to the canonical namespace/name form.
+ *
+ * @param {string} repoId Hugging Face repository id candidate
+ * @returns {string|undefined} normalized repository id
+ */
+export declare function sanitizeHuggingFaceRepoId(repoId: string): string | undefined;
+/**
+ * Encode Hugging Face path segments while preserving path separators.
+ *
+ * @param {string} value path-like repository identifier
+ * @returns {string} encoded path segments
+ */
+export declare function encodeHuggingFacePathSegments(value: string): string;
+/**
+ * Convert a Hugging Face asset reference to a canonical web path.
+ *
+ * @param {string} assetType asset type such as model, dataset, or space
+ * @param {string} repoId Hugging Face repository id
+ * @returns {string|undefined} canonical path under huggingface.co
+ */
+export declare function toHuggingFaceAssetPath(assetType: string, repoId: string): string | undefined;
+/**
+ * Convert a Hugging Face asset reference to a canonical web URL.
+ *
+ * @param {string} assetType asset type such as model, dataset, or space
+ * @param {string} repoId Hugging Face repository id
+ * @returns {string|undefined} canonical URL under huggingface.co
+ */
+export declare function toHuggingFaceAssetUrl(assetType: string, repoId: string): string | undefined;
+/**
+ * Convert a Hugging Face repo reference to a package URL.
+ *
+ * @param {string} repoId Hugging Face repository id
+ * @param {string} [version] optional revision or sha
+ * @param {string} [repositoryUrl] optional registry URL override
+ * @returns {string|undefined} normalized Hugging Face purl
+ */
+export declare function toHuggingFacePurl(repoId: string, version?: string, repositoryUrl?: string): string | undefined;
+/**
+ * Normalize a direct Hugging Face URL or purl into a repo reference.
+ *
+ * @param {string} value direct URL, API URL, or purl
+ * @returns {{ assetType: string, repoId: string, version?: string }|undefined} normalized reference
+ */
+export declare function normalizeHuggingFaceReference(value: string): {
+    assetType: string;
+    repoId: string;
+    version?: string;
+} | undefined;
+/**
+ * Normalize a Hugging Face dataset descriptor into reusable fields.
+ *
+ * @param {object|string} dataset dataset reference from model-card metadata
+ * @param {{ urlSanitizer?: (url: string|undefined) => string|undefined }} [options={}] dataset normalization options
+ * @returns {{
+ *   assetType: "dataset",
+ *   bomRef: string,
+ *   description?: string,
+ *   group: string,
+ *   name: string,
+ *   repoId: string,
+ *   url: string,
+ * }|undefined} normalized dataset metadata
+ */
+export declare function normalizeHuggingFaceDataset(dataset: object | string, options?: {
+    urlSanitizer?: (url: string | undefined) => string | undefined;
+}): {
+    assetType: "dataset";
+    bomRef: string;
+    description?: string;
+    group: string;
+    name: string;
+    repoId: string;
+    url: string;
+} | undefined;
+/**
+ * Create an inline CycloneDX dataset object from Hugging Face model-card metadata.
+ *
+ * @param {object|string} dataset dataset reference from model-card metadata
+ * @param {{ urlSanitizer?: (url: string|undefined) => string|undefined }} [options={}] dataset normalization options
+ * @returns {{ contents?: { url: string }, description?: string, name: string, type: string }|undefined} inline dataset object
+ */
+export declare function createInlineHuggingFaceDataset(dataset: object | string, options?: {
+    urlSanitizer?: (url: string | undefined) => string | undefined;
+}): {
+    contents?: {
+        url: string;
+    };
+    description?: string;
+    name: string;
+    type: string;
+} | undefined;
+/**
+ * Convert Hugging Face model-index entries into CycloneDX performance metrics.
+ *
+ * @param {Array<object>} [modelIndex=[]] model-index entries from model-card metadata
+ * @returns {Array<{ slice?: string, type: string, value: string }>} CycloneDX performance metrics
+ */
+export declare function createPerformanceMetrics(modelIndex?: Array<object>): Array<{
+    slice?: string;
+    type: string;
+    value: string;
+}>;
+/**
+ * Derive a human-readable quantization label from a Hugging Face quantization config.
+ *
+ * @param {object|string} quantizationConfig Hugging Face quantization configuration
+ * @returns {string|undefined} normalized quantization label
+ */
+export declare function quantizationValueFromConfig(quantizationConfig: object | string): string | undefined;
+//# sourceMappingURL=huggingfaceUtils.d.ts.map

package/types/lib/parsers/huggingfaceUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"huggingfaceUtils.d.ts","sourceRoot":"","sources":["../../../lib/parsers/huggingfaceUtils.js"],"names":[],"mappings":"AAiBA;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAFd,MAEyC,CAAC;AACpD;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,EAFlC,GAAG,CAAC,MAAM,CAYlB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,EAFtC,MAEkE,CAAC;AAC7E;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,EAFpC,MAE8D,CAAC;AAEzE;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CAAC,SAAS,EAJnD,MAImD,GAHjD,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;;GAOG;AACH,wBAAgB,qCAAqC,CAAC,aAAa,EAJxD,MAIwD,GAHtD,MAAM,GAAC,SAAS,CAiB5B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAHrC,MAGqC,GAFnC,MAAM,GAAC,SAAS,CAoC5B;AAYD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAHxC,MAGwC,GAFtC,MAAM,CAQlB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAJrC,MAIqC,EAAE,MAAM,EAH7C,MAG6C,GAF3C,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAJpC,MAIoC,EAAE,MAAM,EAH5C,MAG4C,GAF1C,MAAM,GAAC,SAAS,CAK5B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAL7B,MAK6B,EAAE,OAAO,AAJ9C,CACA,EADQ,MAIsC,EAAE,aAAa,AAH7D,CACA,EADQ,MAGqD,GAFnD,MAAM,GAAC,SAAS,CA8B5B;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAHxC,MAGwC,GAFtC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAC,SAAS,CA6G7E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAZxC,MAAM,GAAC,MAYiC,EAAE,OAAO,AAXzD,CACA,EADQ;IAAE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAC,SAAS,KAAK,MAAM,GAAC,SAAS,CAAA;CAWN,GAVpD;IACR,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb,GAAC,SAAS,CAqDb;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAJ3C,MAAM,GAAC,MAIoC,EAAE,OAAO,AAH5D,CACA,EADQ;IAAE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAC,SAAS,KAAK,MAAM,GAAC,SAAS,CAAA;CAGH,GAFvD;IAAE,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAC,SAAS,CAyBtG;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,AAHhD,CACA,EADQ,KAAK,CAAC,MAAM,CAGiC,GAF3C,KAAK,CAAC;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBlE;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,kBAAkB,EAHnD,MAAM,GAAC,MAG4C,GAFjD,MAAM,GAAC,SAAS,CAoB5B"}

package/types/lib/parsers/iri.d.ts

@@ -0,0 +1,68 @@
+export type IRIComponents = {
+    scheme: string;
+    userinfo?: string;
+    host?: string;
+    port?: string;
+    path: string;
+    query?: string;
+    fragment?: string;
+    valid: boolean;
+    error?: string;
+};
+/**
+ * Represents the parsed components of an IRI.
+ * @typedef {Object} IRIComponents
+ * @property {string} scheme
+ * @property {string} [userinfo]
+ * @property {string} [host]
+ * @property {string} [port]
+ * @property {string} path
+ * @property {string} [query]
+ * @property {string} [fragment]
+ * @property {boolean} valid
+ * @property {string} [error]
+ */
+/**
+ * Parses an IRI string according to RFC 3987.
+ * @param {string} iri The IRI string to parse.
+ * @returns {IRIComponents} An object containing the parsed components and validity status.
+ */
+export declare function parseIRI(iri: string): IRIComponents;
+/**
+ * Possible ways of validating an IRI.
+ */
+export declare const IriValidationStrategy: Readonly<{
+    /**
+     * Validates the IRI according to RFC 3987 using a custom parser.
+     */
+    Parse: "parse";
+    /**
+     * Validates that the IRI has a valid scheme and does not contain any character forbidden by the Turtle specification.
+     */
+    Pragmatic: "pragmatic";
+    /**
+     * Does not validate the IRI at all.
+     */
+    None: "none";
+}>;
+/**
+ * Validate a given IRI according to the given strategy.
+ *
+ * @param {string} iri a string that may be an IRI.
+ * @param {IriValidationStrategy} strategy IRI validation strategy.
+ * @return {Error | undefined} An error if the IRI is invalid, or undefined if it is valid.
+ */
+export declare function validateIri(iri: string, strategy?: IriValidationStrategy): Error | undefined;
+/**
+ * Function to validate an externalReference URL for conforming to the JSON schema or bomLink
+ * https://github.com/CycloneDX/cyclonedx-core-java/blob/75575318b268dda9e2a290761d7db11b4f414255/src/main/resources/bom-1.5.schema.json#L1140
+ * https://datatracker.ietf.org/doc/html/rfc3987#section-2.2
+ * https://cyclonedx.org/capabilities/bomlink/
+ *
+ * @param {String} iri IRI to validate
+ *
+ * @returns {Boolean} Flag indicating whether the supplied URL is valid or not
+ *
+ */
+export declare function isValidIriReference(iri: string): boolean;
+//# sourceMappingURL=iri.d.ts.map

package/types/lib/parsers/iri.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iri.d.ts","sourceRoot":"","sources":["../../../lib/parsers/iri.js"],"names":[],"mappings":"AAKG,YAAkB,aAAa,GAC/B;IAAmB,MAAM,EAAd,MAAM,CACjB;IAAoB,QAAQ,AAA5B,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAoB,IAAI,AAAxB,CACA,EADW,MAAM,CACjB;IAAmB,IAAI,EAAZ,MAAM,CACjB;IAAoB,KAAK,AAAzB,CACA,EADW,MAAM,CACjB;IAAoB,QAAQ,AAA5B,CACA,EADW,MAAM,CACjB;IAAoB,KAAK,EAAd,OAAO,CAClB;IAAoB,KAAK,AAAzB,CAA0B,EAAf,MAAM,CAAS;CAAA,CAAA;AAX7B;;;;;;;;;;;;GAYG;AAEH;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAHjB,MAGiB,GAFf,aAAa,CAiLzB;AAsQD;;GAEG;AACH,eAAO,MAAM,qBAAqB;IAChC;;OAEG;;IAGH;;OAEG;;IAGH;;OAEG;;EAEH,CAAC;AAQH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAJpB,MAIoB,EAAE,QAAQ,GAH9B,qBAG4D,GAF3D,KAAK,GAAG,SAAS,CA8C5B;AAyBD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,QAAA,WA6CtC"}

package/types/lib/parsers/npmrc.d.ts

@@ -0,0 +1,33 @@
+/**
+ * npmrc keys that are blocked and ignored during parsing for safety, because
+ * they can influence command execution, shell spawning, or sensitive config
+ * locations.
+ *
+ * @type {Set<string>}
+ */
+export declare const DEFAULT_NPMRC_BLOCKLIST: Set<string>;
+/**
+ * Parse .npmrc content into a plain key-value object.
+ *
+ * @param {string} content - Raw .npmrc file content
+ * @returns {Object} Parsed key-value pairs
+ */
+export declare function parseNpmrc(content: string): Object;
+/**
+ * Extract npm/pnpm configuration values from environment variables.
+ * See https://docs.npmjs.com/cli/v11/using-npm/config
+ *
+ * npm uses the NPM_CONFIG_ prefix for env var config:
+ * - Dashes become underscores: --allow-same-version → npm_config_allow_same_version
+ * - Case-insensitive prefix matching: NPM_CONFIG_FOO = npm_config_foo
+ * - Simple keys are lowercased; scoped/URI keys preserve case
+ * - Boolean flags without values are treated as true
+ *
+ * pnpm v11+ uses the PNPM_CONFIG_ prefix instead of NPM_CONFIG_ for pnpm-specific settings.
+ *   Both prefixes are supported; pnpm_config_* takes precedence over npm_config_* for the same key.
+ *   See https://pnpm.io/next/npmrc
+ * @param {Object} env - Environment variables object (defaults to process.env)
+ * @returns {Object} Parsed npm config key-value pairs
+ */
+export declare function parseNpmrcFromEnv(env?: Object): Object;
+//# sourceMappingURL=npmrc.d.ts.map

package/types/lib/parsers/npmrc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npmrc.d.ts","sourceRoot":"","sources":["../../../lib/parsers/npmrc.js"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,EAF1B,GAAG,CAAC,MAAM,CAkBlB,CAAC;AAEH;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAHvB,MAGuB,GAFrB,MAAM,CAiClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAH1B,MAGwC,GAFtC,MAAM,CAoBlB"}

package/types/lib/parsers/ollama.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Parse an Ollama Modelfile into reusable model metadata.
+ *
+ * @param {string} raw Modelfile contents
+ * @returns {{
+ *   adapters: string[],
+ *   from?: string,
+ *   license?: string,
+ *   parameters: Record<string, string>,
+ *   system?: string,
+ *   template?: string,
+ * }} parsed model metadata
+ */
+export declare function parseOllamaModelfile(raw: string): {
+    adapters: string[];
+    from?: string;
+    license?: string;
+    parameters: Record<string, string>;
+    system?: string;
+    template?: string;
+};
+//# sourceMappingURL=ollama.d.ts.map

package/types/lib/parsers/ollama.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama.d.ts","sourceRoot":"","sources":["../../../lib/parsers/ollama.js"],"names":[],"mappings":"AAgCA;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAV7B,MAU6B,GAT3B;IACR,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAyDH"}

package/types/lib/parsers/xml.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Non-validating XML parser for the manifest formats cdxgen reads: Maven poms,
+ * NuGet nuspec and packages.config, MSBuild project and props files, VSIX
+ * manifests and Apple plists.
+ *
+ * Namespace prefixes are kept verbatim in element and attribute names rather
+ * than resolved, so `<PackageManifest:Metadata>` stays under that literal key.
+ * Doctypes are recorded but never interpreted: no internal subset is read and
+ * no external entity is fetched, so a declared entity reference is an unknown
+ * entity and is rejected like any other.
+ */
+/**
+ * Parse an XML document into a plain object.
+ *
+ * In compact form each element becomes a key on its parent, with text under
+ * `textKey`, attributes under `attributesKey` and comments under `commentKey`;
+ * a name that repeats becomes an array. In verbose form the document becomes a
+ * list of typed nodes under `elements`.
+ *
+ * @param {string} source XML document
+ * @param {object} [options] Parse options
+ * @param {Boolean} [options.compact] Emit the compact form
+ * @param {Boolean} [options.alwaysArray] Wrap every compact-form value in an array
+ * @param {string} [options.textKey] Key holding element text
+ * @param {string} [options.attributesKey] Key holding element attributes
+ * @param {string} [options.commentKey] Key holding comment text
+ * @param {string} [options.cdataKey] Key holding CDATA text
+ * @param {Boolean} [options.ignoreComment] Drop comments
+ * @param {Boolean} [options.ignoreCdata] Drop CDATA sections
+ * @param {Boolean} [options.trim] Trim text in the verbose form
+ *
+ * @returns {object} Parsed document
+ *
+ * @throws {Error} When the document is not well formed
+ */
+export declare function xml2js(source: string, options?: {
+    compact?: boolean;
+    alwaysArray?: boolean;
+    textKey?: string;
+    attributesKey?: string;
+    commentKey?: string;
+    cdataKey?: string;
+    ignoreComment?: boolean;
+    ignoreCdata?: boolean;
+    trim?: boolean;
+}): object;
+//# sourceMappingURL=xml.d.ts.map

package/types/lib/parsers/xml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xml.d.ts","sourceRoot":"","sources":["../../../lib/parsers/xml.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAiwBH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAhBlB,MAgBkB,EAAE,OAAO,AAfnC,CAWA,EAVA;IAA0B,OAAO,AAAjC,CACA,UAAA;IAA0B,WAAW,AAArC,CACA,UAAA;IAAyB,OAAO,AAAhC,CACA,EADQ,MAAM,CACd;IAAyB,aAAa,AAAtC,CACA,EADQ,MAAM,CACd;IAAyB,UAAU,AAAnC,CACA,EADQ,MAAM,CACd;IAAyB,QAAQ,AAAjC,CACA,EADQ,MAAM,CACd;IAA0B,aAAa,AAAvC,CACA,UAAA;IAA0B,WAAW,AAArC,CACA,UAAA;IAA0B,IAAI,AAA9B,CAEA,UAAA;CAIwC,GAJ9B,MAAM,CAyClB"}

package/types/lib/server/server.d.ts

@@ -0,0 +1,51 @@
+import { isAllowedHttpHost } from "../core/activity.js";
+export { isAllowedHttpHost };
+/**
+ * Method to safely parse value passed via the query string or body.
+ *
+ * @param {string|number|Array<string|number>} raw
+ * @returns {string|number|boolean|Array<string|number|boolean>}
+ * @throws {TypeError} if raw (or any array element) isn’t string or number
+ */
+export declare function parseValue(raw: string | number | Array<string | number>): string | number | boolean | Array<string | number | boolean>;
+/**
+ * Parses allowed query/body parameters into a typed options object.
+ * Query parameters take priority over body parameters. Handles the
+ * `type` → `projectType` rename, lifecycle-based `installDeps` defaulting,
+ * and profile option expansion.
+ *
+ * @param {Object} q Parsed query string key/value map
+ * @param {Object} [body={}] Parsed request body key/value map
+ * @param {Object} [options={}] Seed options object to merge results into
+ * @returns {Object} Populated options object
+ */
+export declare function parseQueryString(q: Object, body?: Object, options?: Object): Object;
+/**
+ * Extracts query parameters from an incoming HTTP request object.
+ * Handles repeated keys by collecting their values into an array.
+ * Returns an empty object if the URL cannot be parsed.
+ *
+ * @param {Object} req Node.js/connect HTTP request object
+ * @returns {Object} Key/value map of query parameters from the request URL
+ */
+export declare function getQueryParams(req: Object): Object;
+/**
+ * Configure timeout and keepAlive values on the cdxgen HTTP server.
+ *
+ * @param {import("node:http").Server} cdxgenServer HTTP server instance to configure
+ * @returns {void}
+ */
+declare const configureServer: (cdxgenServer: import("node:http").Server) => void;
+/**
+ * Boot the cdxgen HTTP server.
+ *
+ * Performs startup security checks (secure mode, host exposure, privileged
+ * ports), validates the configured port, registers routes, and begins
+ * listening for BOM generation requests.
+ *
+ * @param {object} options CLI options including `serverHost` and `serverPort`
+ * @returns {void}
+ */
+declare const start: (options: object) => void;
+export { configureServer, start };
+//# sourceMappingURL=server.d.ts.map

package/types/lib/server/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../lib/server/server.js"],"names":[],"mappings":"AAWA,OAAO,EACL,iBAAiB,EAGlB,MAAM,qBAAqB,CAAC;AAsE7B,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAc7B;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAJnB,MAAM,GAAC,MAAM,GAAC,KAAK,CAAC,MAAM,GAAC,MAAM,CAId,GAHjB,MAAM,GAAC,MAAM,GAAC,OAAO,GAAC,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,OAAO,CAAC,CAwC9D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EALvB,MAKuB,EAAE,IAAI,AAJrC,CACA,EADQ,MAIkC,EAAE,OAAO,AAHnD,CACA,EADQ,MAGgD,GAF9C,MAAM,CAmBlB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB,GAFrB,MAAM,CAiClB;AAiBD;;;;;GAKG;AACH,QAAA,MAAM,eAAe,iBAHV,OAAO,WAAW,EAAE,MAAM,KACxB,IAOZ,CAAC;AAIF;;;;;;;;;GASG;AACH,QAAA,MAAM,KAAK,YAHA,MAAM,KACJ,IAuWZ,CAAC;AAEF,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC"}

package/types/lib/stages/postgen/annotator.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Method to determine the type of the BOM.
+ *
+ * @param {Object} bomJson BOM JSON Object
+ *
+ * @returns {String} Type of the bom such as sbom, cbom, obom, ml-bom etc
+ */
+export declare function findBomType(bomJson: Object): string;
+/**
+ * Create the textual representation of the metadata section.
+ *
+ * @param {Object} bomJson BOM JSON Object
+ *
+ * @returns {String | undefined} Textual representation of the metadata
+ */
+export declare function textualMetadata(bomJson: Object): string | undefined;
+/**
+ * Build a human-readable summary of AI authorship provenance and human-oversight
+ * rigor from the BOM's root `properties`. Returns an empty string when no
+ * cdx:ai:codegen provenance was detected.
+ *
+ * @param {Object} bomJson CycloneDX BOM
+ * @returns {string} Summary sentence(s), or "" when no AI provenance is present
+ */
+export declare function summarizeAiProvenance(bomJson: Object): string;
+/**
+ * Extract interesting tags from the component attribute
+ *
+ * @param {Object} component CycloneDX component
+ * @param {String} bomType BOM type
+ * @param {String} parentComponentType Parent component type
+ *
+ * @returns {Array | undefined} Array of string tags
+ */
+export declare function extractTags(component: Object, bomType?: string, parentComponentType?: string): any[] | undefined;
+//# sourceMappingURL=annotator.d.ts.map

package/types/lib/stages/postgen/annotator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"annotator.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/annotator.js"],"names":[],"mappings":"AAgXA;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAJxB,MAIwB,UA8DlC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAJ5B,MAI4B,GAF1B,SAAS,SAAS,CA+T9B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAHlC,MAGkC,GAFhC,MAAM,CA+DlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAPA,MAOA,EACT,OAAO,SAAQ,EACf,mBAAmB,SAAgB,GALxB,QAAQ,SAAS,CAqI7B"}