@cdxgen/cdxgen 0.0.1 → 13.0.1

package/types/lib/stages/postgen/auditBom.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Detect whether a BOM looks like an HBOM inventory.
+ *
+ * @param {object} bomJson CycloneDX BOM
+ * @returns {boolean} True when the BOM appears to represent hardware inventory
+ */
+export declare function isHbomLikeBom(bomJson: object): boolean;
+/**
+ * Detect whether a BOM looks like an OBOM/runtime inventory.
+ *
+ * @param {object} bomJson CycloneDX BOM
+ * @returns {boolean} True when the BOM appears to represent operations/runtime data
+ */
+export declare function isObomLikeBom(bomJson: object): boolean;
+/**
+ * Summarize dry-run support across active BOM audit rules.
+ *
+ * @param {Object} [options={}] audit configuration options
+ * @returns {Promise<{ fullCount: number, noCount: number, partialCount: number, totalRules: number }>} dry-run summary
+ */
+export declare function getBomAuditDryRunSupportSummary(options?: Object): Promise<{
+    fullCount: number;
+    noCount: number;
+    partialCount: number;
+    totalRules: number;
+}>;
+/**
+ * Format BOM audit dry-run support as a console-friendly summary line.
+ *
+ * @param {{ fullCount: number, noCount: number, partialCount: number, totalRules: number }} summary dry-run support summary
+ * @returns {string} formatted summary text
+ */
+export declare function formatDryRunSupportSummary(summary: {
+    fullCount: number;
+    noCount: number;
+    partialCount: number;
+    totalRules: number;
+}): string;
+/**
+ * Ensure the BOM carries cdx:ai:codegen properties at the document root
+ * (`bomJson.properties`). If they are already present (for example, generated
+ * with `-t ai-provenance`) the BOM is left untouched. Otherwise the target
+ * directory is scanned and any detected properties are merged into the root
+ * `properties` array.
+ *
+ * @param {Object} bomJson Generated CycloneDX BOM (mutated in place)
+ * @param {Object} options CLI options
+ */
+export declare function ensureAiProvenanceProperties(bomJson: Object, options?: Object): void;
+/**
+ * Ensure the BOM carries cdx:ai:oversight properties at the document root
+ * (`bomJson.properties`). If they are already present or AI codegen was not
+ * detected, the BOM is left untouched.
+ *
+ * @param {Object} bomJson Generated CycloneDX BOM (mutated in place)
+ * @param {Object} options CLI options
+ */
+export declare function ensureAiOversightProperties(bomJson: Object, options?: Object): Promise<void>;
+/**
+ * Audit BOM formulation section using JSONata-powered rule engine
+ * @param {Object} bomJson - Generated CycloneDX BOM
+ * @param {Object} options - CLI options
+ * @returns {Promise<Array>} Array of audit findings
+ */
+export declare function auditBom(bomJson: Object, options: Object): Promise<any[]>;
+/**
+ * Format findings into a console report table.
+ *
+ * @param {Array} findings audit findings
+ * @returns {string} console report table
+ */
+export declare function renderBomAuditConsoleReport(findings: any[]): string;
+/**
+ * Print BOM audit findings to the console.
+ *
+ * @param {Array} findings audit findings
+ * @returns {string} rendered console output
+ */
+export declare function formatConsoleOutput(findings: any[]): string;
+/**
+ * Convert BOM audit findings to CycloneDX annotations.
+ *
+ * @param {Array} findings audit findings
+ * @param {Object} bomJson generated CycloneDX BOM
+ * @returns {Array} CycloneDX annotations
+ */
+export declare function formatAnnotations(findings: any[], bomJson: Object): any[];
+/**
+ * Check if any findings meet the severity threshold for secure mode failure
+ */
+export declare function hasCriticalFindings(findings: any, options: any): any;
+//# sourceMappingURL=auditBom.d.ts.map

package/types/lib/stages/postgen/auditBom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditBom.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/auditBom.js"],"names":[],"mappings":"AA8DA;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,MAG0B,GAFxB,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,MAG0B,GAFxB,OAAO,CA4BnB;AAuBD;;;;;GAKG;AACH,wBAAsB,+BAA+B,CAAC,OAAO,AAH1D,CACA,EADQ,MAGuD,GAFrD,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAKrG;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAHvC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAGvC,GAFrC,MAAM,CAOlB;AA+BD;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAHzC,MAGyC,EAAE,OAAO,GAFlD,MAEuD,QAuBjE;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAAC,OAAO,EAH9C,MAG8C,EAAE,OAAO,GAFvD,MAE4D,iBAkCtE;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAJ3B,MAI2B,EAAE,OAAO,EAHpC,MAGoC,GAFlC,OAAO,OAAO,CAwC1B;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,OAAA,GAFvC,MAAM,CAmClB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,OAAA,GAF/B,MAAM,CAQlB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,OAAA,EAAE,OAAO,EAHxC,MAGwC,SAuFlD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,KAAA,EAAE,OAAO,KAAA,OAQpD"}

package/types/lib/stages/postgen/postgen.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Filter and enhance BOM post generation.
+ *
+ * @param {Object} bomNSData BOM with namespaces object
+ * @param {Object} options CLI options
+ * @param {string} [filePath] Source path used for formulation and metadata context
+ *
+ * @returns {Object} Modified bomNSData
+ */
+export declare function postProcess(bomNSData: Object, options: Object, filePath?: string): Object;
+/**
+ * Apply additional metadata based on components
+ *
+ * @param {Object} bomJson BOM JSON Object
+ * @param {Object} options CLI options
+ *
+ * @returns {Object} Filtered BOM JSON
+ */
+export declare function applyMetadata(bomJson: Object, options: Object): Object;
+/**
+ * Apply definitions.standards based on options
+ *
+ * @param {Object} bomJson BOM JSON Object
+ * @param {Object} options CLI options
+ *
+ * @returns {Object} Filtered BOM JSON
+ */
+export declare function applyStandards(bomJson: Object, options: Object): Object;
+/**
+ * Filter BOM based on options
+ *
+ * @param {Object} bomJson BOM JSON Object
+ * @param {Object} options CLI options
+ *
+ * @returns {Object} Filtered BOM JSON
+ */
+export declare function filterBom(bomJson: Object, options: Object): Object;
+/**
+ * Clean up
+ */
+export declare function cleanupEnv(_options: any): void;
+/**
+ * Removes the cdxgen temporary directory if it was created inside the system
+ * temp directory (as indicated by `CDXGEN_TMP_DIR`). No-ops when the variable
+ * is unset or points outside the system temp directory.
+ *
+ * @returns {void}
+ */
+export declare function cleanupTmpDir(): void;
+/**
+ * Annotate the document with annotator
+ *
+ * @param {Object} bomJson BOM JSON Object
+ * @param {Object} options CLI options
+ *
+ * @returns {Object} Annotated BOM JSON
+ */
+export declare function annotate(bomJson: Object, options: Object): Object;
+//# sourceMappingURL=postgen.d.ts.map

package/types/lib/stages/postgen/postgen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgen.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/postgen.js"],"names":[],"mappings":"AAqbA;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAN1B,MAM0B,EAAE,OAAO,EALnC,MAKmC,EAAE,QAAQ,AAJrD,CAEA,EAFQ,MAI6C,GAF3C,MAAM,CAsDlB;AAgHD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAL1B,MAK0B,EAAE,OAAO,EAJnC,MAImC,GAFjC,MAAM,CA8HlB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAL3B,MAK2B,EAAE,OAAO,EAJpC,MAIoC,GAFlC,MAAM,CAqClB;AAkED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EALtB,MAKsB,EAAE,OAAO,EAJ/B,MAI+B,GAF7B,MAAM,CA0MlB;AAUD;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,KAAA,QAUlC;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,IAFhB,IAAI,CAYhB;AAMD;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EALrB,MAKqB,EAAE,OAAO,EAJ9B,MAI8B,GAF5B,MAAM,CA2HlB"}

package/types/lib/stages/postgen/ruleEngine.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Load and validate rules from a directory of YAML files
+ * @param {string} rulesDir - Path to directory containing .yaml rule files
+ * @returns {Promise<Array>} Array of parsed rule objects
+ */
+export declare function loadRules(rulesDir: string): Promise<any[]>;
+/**
+ * Evaluate a single rule against the BOM using JSONata
+ * @param {Object} rule - Parsed rule object
+ * @param {Object} bomJson - Full CycloneDX BOM object
+ * @returns {Promise<Array>} Array of matched findings
+ */
+export declare function evaluateRule(rule: Object, bomJson: Object, options?: {}): Promise<any[]>;
+/**
+ * Evaluate all rules against a BOM
+ */
+export declare function evaluateRules(rules: any, bomJson: any, options?: {}): Promise<any[]>;
+//# sourceMappingURL=ruleEngine.d.ts.map

package/types/lib/stages/postgen/ruleEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleEngine.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/ruleEngine.js"],"names":[],"mappings":"AAmfA;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EAH7B,MAG6B,GAF3B,OAAO,OAAO,CAuF1B;AAiCD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAJ5B,MAI4B,EAAE,OAAO,EAHrC,MAGqC,EAAE,OAAO,KAAK,GAFjD,OAAO,OAAO,CAuF1B;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,KAAK,KAAA,EAAE,OAAO,KAAA,EAAE,OAAO,KAAK,kBAY/D"}

package/types/lib/stages/postgen/sortBom.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Deterministic ordering for CycloneDX BOM collections.
+ *
+ * Several CycloneDX arrays are sets by semantics — `properties`, `hashes`,
+ * `licenses`, `externalReferences`, `evidence.occurrences`, `evidence.identity`,
+ * `dependencies[].dependsOn`, and `metadata.tools.components` — yet their
+ * insertion order in cdxgen output depends on filesystem traversal order, Map
+ * iteration order, or the order plugin helpers happened to push in. On a
+ * container image that is scanned through ~25 ecosystem legs, two consecutive
+ * runs of the same image can therefore disagree on property ordering inside
+ * otherwise-identical components, which makes the BOM non-byte-comparable.
+ *
+ * Sorting these collections once, at finalization time, makes every BOM a
+ * pure function of its inputs without touching the component or dependency
+ * array order (which callers depend on).
+ *
+ * The comparators are content-derived string keys, the same strategy the golden
+ * normalizer in `contrib/sbom-normalize.js` uses. The two serve opposite ends
+ * and neither gates the other: the normalizer sorts a BOM's arrays *before*
+ * comparing it to a golden, so it erases emission order and no golden can
+ * observe what this module does. Ordering here is covered by `sortBom.poku.js`
+ * and by comparing two consecutive scans of the same input.
+ */
+/**
+ * Sort every unordered collection in a BOM so that two runs on the same input
+ * produce byte-identical output (modulo `serialNumber` and
+ * `metadata.timestamp`).
+ *
+ * Called from {@link postProcess} exactly once per BOM generation cycle.
+ *
+ * @param {object} bomJson CycloneDX BOM object (mutated in place).
+ */
+export declare function sortBomCollections(bomJson: object): object;
+//# sourceMappingURL=sortBom.d.ts.map

package/types/lib/stages/postgen/sortBom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sortBom.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/sortBom.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAyFH;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAF/B,MAE+B,UA0EzC"}

package/types/lib/stages/postgen/spdxConverter.d.ts

@@ -0,0 +1,11 @@
+import { SPDX_JSONLD_CONTEXT, SPDX_SPEC_VERSION } from "../../core/spdx.js";
+export { SPDX_JSONLD_CONTEXT, SPDX_SPEC_VERSION };
+/**
+ * Convert a CycloneDX BOM JSON document into an SPDX 3.0.1 JSON-LD document.
+ *
+ * @param {object|string} bomJson CycloneDX BOM JSON
+ * @param {object} [options] CLI options
+ * @returns {object|undefined} SPDX 3.0.1 JSON-LD document
+ */
+export declare function convertCycloneDxToSpdx(bomJson: object | string, options?: object): object | undefined;
+//# sourceMappingURL=spdxConverter.d.ts.map

package/types/lib/stages/postgen/spdxConverter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spdxConverter.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/spdxConverter.js"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,CAAC;AAspBlD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAJnC,MAAM,GAAC,MAI4B,EAAE,OAAO,AAHpD,CACA,EADQ,MAGiD,GAF/C,MAAM,GAAC,SAAS,CA4H5B"}

package/types/lib/stages/postgen/specVersionCompat.d.ts

@@ -0,0 +1,71 @@
+/**
+ * CycloneDX specification version compatibility.
+ *
+ * A BOM assembled in memory always carries the richest shape cdxgen knows how
+ * to produce. Emitting it at an older specification version therefore means
+ * removing elements that version does not define, and reshaping the ones it
+ * models differently — CycloneDX forbids additional properties, so a stray
+ * field fails schema validation outright.
+ *
+ * The reshaping is not purely subtractive. `evidence.identity` is a single
+ * object up to 1.5 and an array from 1.6, and `metadata.tools` flips from a
+ * `tools` object to component/service arrays at 2.0, so downgrades and upgrades
+ * both rewrite structure rather than just delete keys.
+ *
+ * This module is the single home for that logic. It is applied to generated
+ * BOMs by the postgen stage and to existing BOMs by `cdx-convert --to`, so both
+ * paths produce byte-identical output for the same target version.
+ */
+/**
+ * Restrict a BOM to the component types the caller asked for.
+ *
+ * Dependencies referencing pruned components are dropped so the graph never
+ * points at a `bom-ref` that no longer exists.
+ *
+ * @param {Object} bomJson CycloneDX BOM, mutated in place
+ * @param {Object} options CLI options carrying `componentType`
+ * @returns {Object} The mutated BOM
+ */
+export declare function applyComponentTypeFilter(bomJson: Object, options: Object): Object;
+/**
+ * Reshape a BOM so it is valid at the requested specification version.
+ *
+ * Component types the target version does not define are filtered out first,
+ * then root-level version-only fields are stripped, then the document is walked
+ * key by key to downgrade (below 2.0) or upgrade (2.0 and above) each subject.
+ * The BOM's `specVersion` and `$schema` are rewritten last.
+ *
+ * The target version is taken from `options.specVersion` when set, falling back
+ * to the BOM's own `specVersion`. A malformed explicit version is left alone
+ * rather than guessed at.
+ *
+ * @param {Object} bomJson CycloneDX BOM, mutated in place
+ * @param {Object} options CLI options carrying the requested `specVersion`
+ * @returns {Object} The mutated BOM
+ */
+export declare function applySpecVersionCompatibility(bomJson: Object, options: Object): Object;
+/**
+ * Collect the set of field paths present in a BOM.
+ *
+ * Array nesting does not extend the path, so the result describes which fields
+ * a document carries rather than where they sit. That keeps a comparison
+ * between two BOMs meaningful across a compatibility pass, which both drops
+ * array entries and reshapes fields whose cardinality changed between spec
+ * versions — `evidence.identity` reads the same whether it holds one object or
+ * an array of them.
+ *
+ * @param {Object} subject BOM or BOM fragment
+ * @param {string} [prefix] Path accumulated so far
+ * @param {Set<string>} [paths] Accumulator
+ * @returns {Set<string>} Field paths, e.g. `components.evidence.identity`
+ */
+export declare function collectFieldPaths(subject: Object, prefix?: string, paths?: Set<string>): Set<string>;
+/**
+ * Report which field paths a compatibility pass removed.
+ *
+ * @param {Object} sourceBomJson BOM before normalization
+ * @param {Object} normalizedBomJson BOM after normalization
+ * @returns {string[]} Sorted field paths that no longer appear
+ */
+export declare function diffRemovedFieldPaths(sourceBomJson: Object, normalizedBomJson: Object): string[];
+//# sourceMappingURL=specVersionCompat.d.ts.map

package/types/lib/stages/postgen/specVersionCompat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"specVersionCompat.d.ts","sourceRoot":"","sources":["../../../../lib/stages/postgen/specVersionCompat.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA0SH;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAJrC,MAIqC,EAAE,OAAO,EAH9C,MAG8C,GAF5C,MAAM,CAclB;AAmRD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAJ1C,MAI0C,EAAE,OAAO,EAHnD,MAGmD,GAFjD,MAAM,CA6BlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAL9B,MAK8B,EAAE,MAAM,AAJ9C,CACA,EADQ,MAI2C,EAAE,KAAK,AAH1D,CACA,EADQ,GAAG,CAAC,MAAM,CAGoD,GAF5D,GAAG,CAAC,MAAM,CAAC,CAkBvB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,aAAa,EAJxC,MAIwC,EAAE,iBAAiB,EAH3D,MAG2D,GAFzD,MAAM,EAAE,CAOpB"}

package/types/lib/stages/pregen/envAudit.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Inspect the environment for security risks and return a list of findings.
+ *
+ * Checks include Node.js `NODE_OPTIONS`/`CDXGEN_NODE_OPTIONS` code-execution
+ * and permission flags, TLS bypass indicators, proxy interception, suspicious
+ * credential-naming variables, JVM agent injection (for JVM project types),
+ * root/Deno permission elevation, and debug exposure.
+ *
+ * @param {Object} [env=process.env] The environment record to audit.
+ * @param {Object} [options={}] CLI options used to scope JVM checks.
+ * @returns {Object[]} Security findings describing detected risks.
+ */
+export declare function auditEnvironment(env?: Object, options?: Object): Object[];
+//# sourceMappingURL=envAudit.d.ts.map

package/types/lib/stages/pregen/envAudit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envAudit.d.ts","sourceRoot":"","sources":["../../../../lib/stages/pregen/envAudit.js"],"names":[],"mappings":"AAuHA;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,AAJjC,CACA,EADQ,MAIuC,EAAE,OAAO,AAHxD,CACA,EADQ,MAGqD,GAFnD,MAAM,EAAE,CAkQpB"}

package/types/lib/stages/pregen/pregen.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Method to prepare the build environment for BOM generation purposes.
+ *
+ * @param {String} filePath Path
+ * @param {Object} options CLI options
+ */
+export declare function prepareEnv(filePath: string, options: Object): void;
+/**
+ * Method to prepare sdkman build environment for BOM generation purposes.
+ *
+ * @param {String} projectType Project type
+ */
+export declare function prepareSdkmanBuild(projectType: string): boolean | undefined;
+/**
+ * Method to check and prepare the environment for python
+ *
+ * @param {String} _filePath Path
+ * @param {Object} options CLI Options
+ */
+export declare function preparePythonEnv(_filePath: string, options: Object): void;
+/**
+ * Method to check and prepare the environment for node
+ *
+ * @param {String} filePath Path
+ * @param {Object} options CLI Options
+ */
+export declare function prepareNodeEnv(filePath: string, options: Object): void;
+/**
+ * If NVM_DIR is in path, however nvm command is not loaded.
+ * it is possible that required nodeVersion is not installed.
+ * This function loads nvm and install the nodeVersion
+ *
+ * @param {String} nodeVersion required version number
+ *
+ * @returns {Boolean} true if successful, otherwise false
+ */
+export declare function tryLoadNvmAndInstallTool(nodeVersion: string): boolean;
+/**
+ * This method installs and create package-lock.json
+ *
+ * @param {String} filePath Path
+ * @param {String} nvmNodePath Path to node version in nvm
+ */
+export declare function doNpmInstall(filePath: string, nvmNodePath: string): void;
+/**
+ * Method to check and build the swift project
+ *
+ * @param {String} filePath Path
+ * @param {Object} options CLI Options
+ */
+export declare function prepareSwiftEnv(filePath: string, options: Object): void;
+/**
+ * Method to check and prepare the environment for Ruby projects
+ *
+ * @param {String} filePath Path
+ * @param {Object} options CLI Options
+ */
+export declare function prepareRubyEnv(filePath: string, options: Object): void;
+//# sourceMappingURL=pregen.d.ts.map

package/types/lib/stages/pregen/pregen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pregen.d.ts","sourceRoot":"","sources":["../../../../lib/stages/pregen/pregen.js"],"names":[],"mappings":"AAoCA;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,QAAQ,QAAA,EAAE,OAAO,EAFjC,MAEiC,QAkB3C;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,QAAA,uBAS7C;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,QAAA,EAAE,OAAO,EAFxC,MAEwC,QA4ClD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,QAAA,EAAE,OAAO,EAFrC,MAEqC,QAmE/C;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,QAAA,WAsBnD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,QAAA,EAAE,WAAW,QAAA,QAsCjD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,QAAA,EAAE,OAAO,EAFtC,MAEsC,QA6EhD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,QAAA,EAAE,OAAO,EAFrC,MAEqC,QAqQ/C"}

package/types/lib/third-party/arborist/lib/arborist/index.d.ts

@@ -0,0 +1,47 @@
+declare const _setWorkspaces: unique symbol;
+declare const Base: any;
+declare class Arborist extends Base {
+    registry: string;
+    actualTree: any;
+    idealTree: any;
+    installLinks: any;
+    legacyPeerDeps: any;
+    virtualTree: any;
+    options: {
+        nodeVersion: any;
+        Arborist: Function;
+        allowScripts: any;
+        binLinks: boolean;
+        cache: any;
+        dangerouslyAllowAllScripts: boolean;
+        dryRun: boolean;
+        formatPackageLock: boolean;
+        force: boolean;
+        global: boolean;
+        ignoreScripts: boolean;
+        installStrategy: any;
+        lockfileVersion: any;
+        packageLockOnly: boolean;
+        packumentCache: any;
+        path: any;
+        rebuildBundle: boolean;
+        replaceRegistryHost: any;
+        savePrefix: unknown;
+        scriptShell: any;
+        usePackageLock: unknown;
+        workspaces: any;
+        workspacesEnabled: boolean;
+    };
+    replaceRegistryHost: any;
+    cache: any;
+    diff: any;
+    path: any;
+    scriptsRun: Set<any>;
+    constructor(options?: {});
+    workspaceNodes(tree: any, workspaces: any): any[];
+    workspaceDependencySet(tree: any, workspaces: any, includeWorkspaceRoot: any): Set<any>;
+    excludeWorkspacesDependencySet(tree: any): Set<any>;
+    [_setWorkspaces](node: any): Promise<any>;
+}
+export default Arborist;
+//# sourceMappingURL=index.d.ts.map

package/types/lib/third-party/arborist/lib/arborist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../lib/third-party/arborist/lib/arborist/index.js"],"names":[],"mappings":"AA4CA,QAAA,MAAM,cAAc,eAA8B,CAAC;AACnD,QAAA,MAAM,IAAI,KAA8C,CAAC;AAiBzD,cAAM,QAAS,SAAQ,IAAI;IAOC,QAAQ;IAmB3B,UAAU;IACV,SAAS;IACT,YAAY;IACZ,cAAc;IAEd,WAAW;IAEX,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;IAmCP,mBAAmB;IAMnB,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,UAAU;IA5EjB,YAAY,OAAO,KAAK,EA8EvB;IAOD,cAAc,CAAC,IAAI,KAAA,EAAE,UAAU,KAAA,SA8B9B;IAKD,sBAAsB,CAAC,IAAI,KAAA,EAAE,UAAU,KAAA,EAAE,oBAAoB,KAAA,YAgC5D;IAID,8BAA8B,CAAC,IAAI,KAAA,YAsBlC;IAEK,CAAC,cAAc,CAAC,CAAC,IAAI,KAAA,gBAW1B;CACF;eAEc,QAAQ"}

package/types/lib/third-party/arborist/lib/arborist/load-actual.d.ts

@@ -0,0 +1,4 @@
+export default _default;
+/** @returns {any} */
+declare function _default(cls: any): any;
+//# sourceMappingURL=load-actual.d.ts.map

package/types/lib/third-party/arborist/lib/arborist/load-actual.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-actual.d.ts","sourceRoot":"","sources":["../../../../../../lib/third-party/arborist/lib/arborist/load-actual.js"],"names":[],"mappings":";AAwBA,qBAAqB;0BACL,GAAG,KAAA,GADL,GAAG"}

package/types/lib/third-party/arborist/lib/arborist/load-virtual.d.ts

@@ -0,0 +1,4 @@
+export default _default;
+/** @returns {any} */
+declare function _default(cls: any): any;
+//# sourceMappingURL=load-virtual.d.ts.map

package/types/lib/third-party/arborist/lib/arborist/load-virtual.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-virtual.d.ts","sourceRoot":"","sources":["../../../../../../lib/third-party/arborist/lib/arborist/load-virtual.js"],"names":[],"mappings":";AAmBA,qBAAqB;0BACL,GAAG,KAAA,GADL,GAAG"}

package/types/lib/third-party/arborist/lib/bin-links.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Custom lightweight replacement for the bin-links getPaths function.
+ * Calculates all possible symbolic links or shims that would be created.
+ *
+ * @param {Object} options Options object
+ * @param {string} options.path Path to the package directory
+ * @param {Object} options.pkg The parsed package.json object
+ * @param {boolean} [options.global] Whether this is a global install
+ * @param {boolean} [options.top] Whether this is the top-level package being installed
+ * @returns {string[]} An array of potential link target file paths
+ */
+export default function getPaths({ path, pkg, global, top }: {
+    path: string;
+    pkg: Object;
+    global?: boolean;
+    top?: boolean;
+}): string[];
+//# sourceMappingURL=bin-links.d.ts.map

package/types/lib/third-party/arborist/lib/bin-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin-links.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/bin-links.js"],"names":[],"mappings":"AAqEA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EANxD;IAAwB,IAAI,EAApB,MAAM,CACd;IAAwB,GAAG,EAAnB,MAAM,CACd;IAA0B,MAAM,AAAhC,CACA,EADQ,OAAO,CACf;IAA0B,GAAG,AAA7B,CACA,EADQ,OAAO,CACf;CAEwD,GAF9C,MAAM,EAAE,CAyCpB"}

package/types/lib/third-party/arborist/lib/calc-dep-flags.d.ts

@@ -0,0 +1,3 @@
+declare const calcDepFlags: (tree: any, resetRoot?: boolean) => void;
+export default calcDepFlags;
+//# sourceMappingURL=calc-dep-flags.d.ts.map

package/types/lib/third-party/arborist/lib/calc-dep-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calc-dep-flags.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/calc-dep-flags.js"],"names":[],"mappings":"AAYA,QAAA,MAAM,YAAY,0CAmHjB,CAAC;eAEa,YAAY"}

package/types/lib/third-party/arborist/lib/case-insensitive-map.d.ts

@@ -0,0 +1,9 @@
+export default class CIMap extends Map {
+    #private;
+    constructor(items?: any[]);
+    get(key: any): any;
+    set(key: any, val: any): this;
+    delete(key: any): boolean | undefined;
+    has(key: any): boolean;
+}
+//# sourceMappingURL=case-insensitive-map.d.ts.map

package/types/lib/third-party/arborist/lib/case-insensitive-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-insensitive-map.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/case-insensitive-map.js"],"names":[],"mappings":"AAIA,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,GAAG;;IAGpC,YAAY,KAAK,QAAK,EAKrB;IASD,GAAG,CAAC,GAAG,KAAA,OAKN;IAED,GAAG,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,QAOX;IAED,MAAM,CAAC,GAAG,KAAA,uBAOT;IAED,GAAG,CAAC,GAAG,KAAA,WAGN;CACF"}

package/types/lib/third-party/arborist/lib/consistent-resolve.d.ts

@@ -0,0 +1,3 @@
+declare const consistentResolve: (resolved: any, fromPath: any, toPath: any, relPaths?: boolean) => any;
+export default consistentResolve;
+//# sourceMappingURL=consistent-resolve.d.ts.map

package/types/lib/third-party/arborist/lib/consistent-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consistent-resolve.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/consistent-resolve.js"],"names":[],"mappings":"AAQA,QAAA,MAAM,iBAAiB,wEAgCtB,CAAC;eACa,iBAAiB"}

package/types/lib/third-party/arborist/lib/debug.d.ts

@@ -0,0 +1,3 @@
+declare const debugFunction: (fn: any) => any;
+export default debugFunction;
+//# sourceMappingURL=debug.d.ts.map

package/types/lib/third-party/arborist/lib/debug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/debug.js"],"names":[],"mappings":"AA2BA,QAAA,MAAM,aAAa,kBAId,CAAC;eAkBS,aAAa"}

package/types/lib/third-party/arborist/lib/dep-valid.d.ts

@@ -0,0 +1,3 @@
+export default _default;
+declare function _default(child: any, requested: any, accept: any, requestor: any): any;
+//# sourceMappingURL=dep-valid.d.ts.map

package/types/lib/third-party/arborist/lib/dep-valid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dep-valid.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/dep-valid.js"],"names":[],"mappings":";0BA2LgB,KAAK,KAAA,EAAE,SAAS,KAAA,EAAE,MAAM,KAAA,EAAE,SAAS,KAAA"}

package/types/lib/third-party/arborist/lib/edge.d.ts

@@ -0,0 +1,46 @@
+import util from "node:util";
+declare class ArboristEdge {
+    name: any;
+    spec: any;
+    type: any;
+    from: any;
+    to: any;
+    error: any;
+    peerConflicted: boolean | undefined;
+    overridden: any;
+    constructor(edge: any);
+}
+declare class Edge {
+    #private;
+    [util.inspect.custom]: () => ArboristEdge;
+    overrides: any;
+    peerConflicted: boolean;
+    static types: readonly string[];
+    static errors: readonly string[];
+    constructor(options: any);
+    satisfiedBy(node: any): any;
+    explain(seen?: any[]): any;
+    get bundled(): boolean;
+    get workspace(): boolean;
+    get prod(): boolean;
+    get dev(): boolean;
+    get optional(): boolean;
+    get peer(): boolean;
+    get type(): any;
+    get name(): string;
+    get rawSpec(): string;
+    get spec(): any;
+    get accept(): string | undefined;
+    get valid(): boolean;
+    get missing(): boolean;
+    get invalid(): boolean;
+    get peerLocal(): boolean;
+    get error(): any;
+    reload(hard?: boolean): void;
+    detach(): void;
+    get from(): any;
+    get to(): any;
+    toJSON(): ArboristEdge;
+}
+export default Edge;
+//# sourceMappingURL=edge.d.ts.map

package/types/lib/third-party/arborist/lib/edge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/edge.js"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAU7B,cAAM,YAAY;IAET,IAAI;IACJ,IAAI;IACJ,IAAI;IAOF,IAAI;IAGJ,EAAE;IAGF,KAAK;IAGL,cAAc;IAGd,UAAU;IAtBnB,YAAY,IAAI,KAAA,EAwBf;CACF;AAED,cAAM,IAAI;;IAqXR,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IA9TZ,SAAS;IAaX,cAAc;IA1DrB,MAAM,CAAC,KAAK,oBAOT;IAGH,MAAM,CAAC,MAAM,oBAKV;IAEH,YAAY,OAAO,KAAA,EA0ClB;IAED,WAAW,CAAC,IAAI,KAAA,OAmCf;IAGD,OAAO,CAAC,IAAI,QAAK,OA2DhB;IAED,IAAI,OAAO,YAEV;IAED,IAAI,SAAS,YAEZ;IAED,IAAI,IAAI,YAEP;IAED,IAAI,GAAG,YAEN;IAED,IAAI,QAAQ,YAEX;IAED,IAAI,IAAI,YAEP;IAED,IAAI,IAAI,QAEP;IAED,IAAI,IAAI,WAEP;IAED,IAAI,OAAO,WAEV;IAED,IAAI,IAAI,QA4BP;IAiBD,IAAI,MAAM,uBAET;IAED,IAAI,KAAK,YAER;IAED,IAAI,OAAO,YAEV;IAED,IAAI,OAAO,YAEV;IAED,IAAI,SAAS,YAEZ;IAED,IAAI,KAAK,QAwCR;IAED,MAAM,CAAC,IAAI,UAAQ,QAmClB;IAED,MAAM,SASL;IAED,IAAI,IAAI,QAEP;IAED,IAAI,EAAE,QAEL;IAED,MAAM,iBAEL;CAKF;eAEc,IAAI"}

package/types/lib/third-party/arborist/lib/from-path.d.ts

@@ -0,0 +1,3 @@
+declare const fromPath: (node: any, edge: any) => any;
+export default fromPath;
+//# sourceMappingURL=from-path.d.ts.map

package/types/lib/third-party/arborist/lib/from-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"from-path.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/from-path.js"],"names":[],"mappings":"AASA,QAAA,MAAM,QAAQ,+BAwBb,CAAC;eAEa,QAAQ"}

package/types/lib/third-party/arborist/lib/gather-dep-set.d.ts

@@ -0,0 +1,3 @@
+declare const gatherDepSet: (set: any, edgeFilter: any) => Set<any>;
+export default gatherDepSet;
+//# sourceMappingURL=gather-dep-set.d.ts.map

package/types/lib/third-party/arborist/lib/gather-dep-set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gather-dep-set.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/gather-dep-set.js"],"names":[],"mappings":"AASA,QAAA,MAAM,YAAY,yCA+BjB,CAAC;eAEa,YAAY"}

package/types/lib/third-party/arborist/lib/index.d.ts

@@ -0,0 +1,3 @@
+import Arborist from "./arborist/index.js";
+export default Arborist;
+//# sourceMappingURL=index.d.ts.map

package/types/lib/third-party/arborist/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/index.js"],"names":[],"mappings":"AAKA,OAAO,QAAQ,MAAM,qBAAqB,CAAC;eAgB5B,QAAQ"}

package/types/lib/third-party/arborist/lib/inventory.d.ts

@@ -0,0 +1,14 @@
+declare class Inventory extends Map {
+    #private;
+    constructor();
+    get primaryKey(): string;
+    get indexes(): string[];
+    filter(fn: any): Generator<any, void, unknown>;
+    add(node: any): void;
+    delete(node: any): void;
+    query(key: any, val: any): any;
+    has(node: any): boolean;
+    set(): void;
+}
+export default Inventory;
+//# sourceMappingURL=inventory.d.ts.map

package/types/lib/third-party/arborist/lib/inventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.d.ts","sourceRoot":"","sources":["../../../../../lib/third-party/arborist/lib/inventory.js"],"names":[],"mappings":"AAMA,cAAM,SAAU,SAAQ,GAAG;;IAGzB,cAMC;IAGD,IAAI,UAAU,WAEb;IAGD,IAAI,OAAO,aAEV;IAEA,MAAM,CAAC,EAAE,KAAA,iCAMT;IAED,GAAG,CAAC,IAAI,KAAA,QAyDP;IAED,MAAM,CAAC,IAAI,KAAA,QAqBV;IAED,KAAK,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,OASb;IAED,GAAG,CAAC,IAAI,KAAA,WAEP;IAED,GAAG,SAEF;CACF;eAEc,SAAS"}