@cdxgen/cdxgen 13.4.0 → 13.6.0

package/types/lib/inventory/dosai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dosai.d.ts","sourceRoot":"","sources":["../../../lib/inventory/dosai.js"],"names":[],"mappings":"AA+WA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAAM,EAI8B,EAAE,OAAO,EAH7C,MAG6C,GAF3C;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,CAyFtE;AAoCD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,GAAC,SAAS,CAW5B;AA2ED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAPtC,MAOsC,EAAE,OAAO,AANvD,CAIA,EAHA;IAA2B,QAAQ,AAAnC,CACA,EADQ,MAAM,EAAE,CAChB;IAA2B,cAAc,AAAzC,CACA,WAAA;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;CAE4D,GAFlD,MAAM,GAAC,SAAS,CA0B5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EALvC,MAKuC,EAAE,OAAO,AAJxD,CAEA,EADA;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;CAE6D,GAFnD,MAAM,GAAC,SAAS,CAa5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAH5B,MAG4B,GAF1B,OAAO,CAInB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,SAAS,GAAC,QAAQ,GAAC,QAAQ,GAAC,SAAS,CAajD;AAMD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAHlC,MAGkC,GAFhC,OAAO,CAKnB;AAYD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAN5B,MAM4B,EAAE,GAAG,EALjC,MAKiC,EAAE,UAAU,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,OAAO,CAuGnB;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,UAAU,EAJ5C,MAI4C,EAAE,OAAO,AAH7D,CACA,EADQ,MAG0D,GAFxD,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EALjC,MAKiC,EAAE,UAAU,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EALlC,MAKkC,EAAE,UAAU,EAJ9C,MAI8C,EAAE,OAAO,AAH/D,CACA,EADQ,MAG4D,GAF1D,OAAO,CAInB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,AAH5C,CACA,EADQ,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAe5B;AAuDD;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,KAAA,EACP,YAAY,KAAA,EACZ,aAAa,KAAA,OAyDd;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,AAJzC,CACA,EADQ,MAAM,EAIgC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAI/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAN9B,MAM8B,EAAE,YAAY,EAL5C,GAAG,CAAC,MAAM,EAAE,MAAM,CAK0B,EAAE,QAAQ,AAJ9D,CACA,EADQ,MAIsD,GAHpD,MAAM,GAAC,SAAS,CAK5B;AAwCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAH7C,MAG6C,EAAE,YAAY,EAF3D,MAE2D,QAyBrE;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,YAAY,EARH,MAQG,EACZ,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CA4ClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EARH,MAQG,EACZ,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CA8FlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,cAAc,EARL,MAQK,EACd,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CAwDlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAJ1C,MAI0C,EAAE,UAAU,AAH9D,CACA,OAEmE,SA6FrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAJ/C,MAI+C,EAAE,WAAW,AAHpE,CACA,EADQ,MAGiE,GAF/D,MAAM,CAyKlB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,YAAY,EALH,MAKG,EACZ,WAAW,AALV,CACA,EADQ,MAKO,GAJL,MAAM,CA+GlB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,AAHjD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CA6CpB"}
+{"version":3,"file":"dosai.d.ts","sourceRoot":"","sources":["../../../lib/inventory/dosai.js"],"names":[],"mappings":"AA+KA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,EAL1C,MAAM,GAAC,MAKmC,GAJxC;IAAC,OAAO,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CAAC,GAAC,SAAS,CAmB9E;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,AAHrD,CACA,EADQ;IAAC,OAAO,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CAGV,GAF3C,MAAM,CAUlB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,AAHrD,CACA,EADQ;IAAC,OAAO,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAC,SAAS,CAAC,CAAA;CAGV,GAF3C,MAAM,CAIlB;AAwMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAAM,EAI8B,EAAE,OAAO,EAH7C,MAG6C,GAF3C;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,CAyFtE;AAoDD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAHnC,MAGmC,GAFjC,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,GAAC,SAAS,CAW5B;AAkBD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,IAF/B,MAAM,CAIlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAHjC,MAGiC,GAF/B,OAAO,CAInB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,AAHxC,CACA,EADQ,MAGgC,GAF9B,MAAM,EAAE,CAOpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAH9C,MAG8C,GAF5C,MAAM,EAAE,CAapB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,eAAe,EAH7C,MAAM,EAGuC,GAF3C,MAAM,EAAE,CAMpB;AAgCD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,IAFtB,MAAM,CAWlB;AAmHD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EARtC,MAQsC,EAAE,OAAO,AAPvD,CAKA,EAJA;IAA2B,QAAQ,AAAnC,CACA,EADQ,MAAM,EAAE,CAChB;IAA2B,cAAc,AAAzC,CACA,WAAA;IAAyB,cAAc,AAAvC,CACA,EADQ,MAAM,CACd;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;CAE4D,GAFlD,MAAM,GAAC,SAAS,CAkD5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EALvC,MAKuC,EAAE,OAAO,AAJxD,CAEA,EADA;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;CAE6D,GAFnD,MAAM,GAAC,SAAS,CAa5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAH5B,MAG4B,GAF1B,OAAO,CAInB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,SAAS,GAAC,QAAQ,GAAC,QAAQ,GAAC,SAAS,CAajD;AAeD;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAF9C,MAE8C,QAKxD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAHlC,MAGkC,GAFhC,OAAO,CAKnB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAHpC,MAGoC,GAFlC,OAAO,CASnB;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAN5B,MAM4B,EAAE,GAAG,EALjC,MAKiC,EAAE,UAAU,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,OAAO,CAmLnB;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,UAAU,EAJ5C,MAI4C,EAAE,OAAO,AAH7D,CACA,EADQ,MAG0D,GAFxD,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EALjC,MAKiC,EAAE,UAAU,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,OAAO,CAInB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EALlC,MAKkC,EAAE,UAAU,EAJ9C,MAI8C,EAAE,OAAO,AAH/D,CACA,EADQ,MAG4D,GAF1D,OAAO,CAInB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,AAH5C,CACA,EADQ,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAe5B;AAiFD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EALnC,MAKmC,EAAE,MAAM,AAJnD,CACA,EADQ,MAI2C,EAAE,iBAAiB,AAHtE,CACA,EADQ,MAG8D,GAF5D,MAAM,EAAE,CAoCpB;AAuDD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,KAAA,EACP,YAAY,KAAA,EACZ,aAAa,KAAA,OAsEd;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,AAJzC,CACA,EADQ,MAAM,EAIgC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAI/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAN9B,MAM8B,EAAE,YAAY,EAL5C,GAAG,CAAC,MAAM,EAAE,MAAM,CAK0B,EAAE,QAAQ,AAJ9D,CACA,EADQ,MAIsD,GAHpD,MAAM,GAAC,SAAS,CAK5B;AAwCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAH7C,MAG6C,EAAE,YAAY,EAF3D,MAE2D,QAyBrE;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,YAAY,EARH,MAQG,EACZ,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CA4ClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EARH,MAQG,EACZ,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CA8FlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,cAAc,EARL,MAQK,EACd,UAAU,AART,CACA,EADQ,MAAM,EAQA,EACf,OAAO,AARN,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAKW,GALD,MAAM,CAwDlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAJ1C,MAI0C,EAAE,UAAU,AAH9D,CACA,OAEmE,SA6FrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAJ/C,MAI+C,EAAE,WAAW,AAHpE,CACA,EADQ,MAGiE,GAF/D,MAAM,CAyKlB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,YAAY,EALH,MAKG,EACZ,WAAW,AALV,CACA,EADQ,MAKO,GAJL,MAAM,CA+GlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,AAHjD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CAmDpB"}

package/types/lib/inventory/dotnetRuntime.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Read the runtime pack a shared framework's deps.json was built from.
+ *
+ * @param {Object} depsJson parsed <framework>.deps.json
+ * @param {string} framework framework directory name
+ * @returns {{pack: string, version: string, rid: string}|undefined}
+ */
+export declare function runtimePackFromDepsJson(depsJson: Object, framework: string): {
+    pack: string;
+    version: string;
+    rid: string;
+} | undefined;
+/**
+ * The CPE NVD uses for a shared framework version: `.net` from 5.0 on,
+ * `.net_core` before it, and `asp.net_core` for ASP.NET Core.
+ *
+ * @param {string} framework framework directory name
+ * @param {string} version runtime version
+ * @returns {string|undefined} CPE 2.3 string
+ */
+export declare function dotnetCpe(framework: string, version: string): string | undefined;
+/**
+ * Create the platform component for one installed shared framework.
+ *
+ * @param {string} framework framework directory name
+ * @param {{pack: string, version: string, rid: string}} runtime runtime pack
+ * @param {string} location root-relative path of the deps.json
+ * @returns {Object|undefined} component, or undefined when no purl can be built
+ */
+export declare function createDotnetRuntimeComponent(framework: string, runtime: {
+    pack: string;
+    version: string;
+    rid: string;
+}, location: string): Object | undefined;
+/**
+ * Find the .NET shared frameworks installed under a root that no package
+ * manager owns, and return one platform component per runtime pack.
+ *
+ * @param {string} rootDir extracted root file system
+ * @param {string[]} [ownedPaths] root-relative paths a package database owns
+ * @returns {Object[]} platform components
+ */
+export declare function collectDotnetRuntimes(rootDir: string, ownedPaths?: string[]): Object[];
+//# sourceMappingURL=dotnetRuntime.d.ts.map

package/types/lib/inventory/dotnetRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotnetRuntime.d.ts","sourceRoot":"","sources":["../../../lib/inventory/dotnetRuntime.js"],"names":[],"mappings":"AAgEA;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,EAAE,SAAS,EAHhD,MAGgD,GAF9C;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAuBlE;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAJxB,MAIwB,EAAE,OAAO,EAHjC,MAGiC,GAF/B,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,EAL3C,MAK2C,EAAE,OAAO,EAJpD;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAIS,EAAE,QAAQ,EAH9D,MAG8D,GAF5D,MAAM,GAAC,SAAS,CA4B5B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAJlC,MAIkC,EAAE,UAAU,AAHtD,CACA,EADQ,MAAM,EAG6C,GAFjD,MAAM,EAAE,CAwDpB"}

package/types/lib/inventory/dynamic.d.ts

@@ -23,13 +23,18 @@ export declare function librarySubpath(libPath: string): string | null;
  * Services are detected from HTTP request URLs collected during tracing and
  * follow the CycloneDX service schema with endpoints.
  *
+ * The certificate chains servers presented in TLS ≤ 1.2 handshakes become the
+ * shared certificate model, with `provides` edges from the TLS protocol
+ * components.
+ *
  * @param {string} commandStr - Shell command to execute and trace (e.g. "node --version")
  * @param {string} workingDir - Working directory for the traced process
  * @param {Object} [traceOptions] - Additional sandbox options forwarded to executeAndTrace
- * @returns {Promise<{components: Array<Object>, services: Array<Object>}>} Components and services
+ * @returns {Promise<{components: Array<Object>, services: Array<Object>, dependencies: Array<Object>}>} Components, services and dependencies
  */
 export declare function buildDynamicComponents(commandStr: string, workingDir: string, traceOptions?: Object): Promise<{
     components: Array<Object>;
     services: Array<Object>;
+    dependencies: Array<Object>;
 }>;
 //# sourceMappingURL=dynamic.d.ts.map

package/types/lib/inventory/dynamic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dynamic.d.ts","sourceRoot":"","sources":["../../../lib/inventory/dynamic.js"],"names":[],"mappings":"AAYA;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,GAFzB,MAAM,GAAC,IAAI,CAevB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAND,MAMC,EACV,UAAU,EAND,MAMC,EACV,YAAY,AANX,CACA,EADQ,MAMQ,GALN,OAAO,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;CAAC,CAAC,CA8KzE"}
+{"version":3,"file":"dynamic.d.ts","sourceRoot":"","sources":["../../../lib/inventory/dynamic.js"],"names":[],"mappings":"AAaA;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,GAFzB,MAAM,GAAC,IAAI,CAevB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAND,MAMC,EACV,UAAU,EAND,MAMC,EACV,YAAY,AANX,CACA,EADQ,MAMQ,GALN,OAAO,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;CAAC,CAAC,CAmNtG"}

package/types/lib/inventory/envcontext.d.ts

@@ -177,16 +177,86 @@ export declare function collectSwiftInfo(dir: string): {
     version: string;
 } | undefined;
 /**
- * Collect Ruby version
+ * Whether a Ruby executable is one the operating system or a package manager
+ * that patches it owns. Distros backport fixes under the old upstream version,
+ * so its version must not be matched against upstream advisories by CPE.
+ *
+ * @param {string|undefined} realPath real path of the executable
+ * @returns {boolean}
+ */
+export declare function isPackagedRubyPath(realPath: string | undefined): boolean;
+/**
+ * Collect the Ruby on the PATH.
+ *
+ * `ruby --version` prints the interpreter's description, such as
+ * `ruby 3.3.6 (2024-11-05 revision 75015d4c1f) [x86_64-linux]`, which is kept
+ * as the component description. The identity is `pkg:generic/ruby@3.3.6`
+ * (or jruby, truffleruby), with the CPE of the release unless a package
+ * manager owns the executable: a distro backports fixes under the old upstream
+ * version.
  *
  * @param {string} dir Working directory
  * @returns Object containing Ruby details
  */
-export declare function collectRubyInfo(dir: string): {
-    type: string;
-    name: string;
-    version: string;
-} | undefined;
+export declare function collectRubyInfo(dir: string): Object | undefined;
+/**
+ * Whether the Ruby collectRubyInfo found is the MRI release a project needs.
+ *
+ * @param {Object|undefined} info result of collectRubyInfo
+ * @param {string} version wanted MRI version
+ * @returns {boolean}
+ */
+export declare function isRubyVersionActive(info: Object | undefined, version: string): boolean;
+/**
+ * Collect the RubyGems version. `gem --version` prints the bare version.
+ *
+ * @param {string} dir Working directory
+ * @returns {Object|undefined} the RubyGems component
+ */
+export declare function collectRubyGemsInfo(dir: string): Object | undefined;
+/**
+ * Collect the Bundler version. `bundle --version` prints `Bundler version
+ * 2.5.22`, or the bare version from Bundler 2.6 on.
+ *
+ * @param {string} dir Working directory
+ * @returns {Object|undefined} the Bundler component
+ */
+export declare function collectBundlerInfo(dir: string): Object | undefined;
+/**
+ * Collect the PHP version of the PHP found on the PATH.
+ *
+ * `-n` stops PHP loading any php.ini, so a PHPRC or an auto_prepend_file cannot
+ * run code, and `-v` is used rather than `-r 'echo PHP_VERSION;'` because the
+ * shell on Windows does not quote arguments. The first line is
+ * `PHP 8.5.11 (cli) (built: Sep 22 2026 13:32:06) (NTS)`.
+ *
+ * The identity is `pkg:generic/php`: a probe of the PATH cannot tell which
+ * package manager, if any, installed this PHP. A banner with a distro revision,
+ * such as Ubuntu 22.04's `PHP 8.1.2-1ubuntu2.14`, is recorded as reported but
+ * without a CPE: the distro backports fixes under the old upstream number.
+ *
+ * @param {string} dir Working directory
+ * @returns Object containing the PHP details
+ */
+export declare function collectPhpInfo(dir: string): Object | undefined;
+/**
+ * Collect the Composer version.
+ *
+ * `--no-plugins` and `--no-scripts` keep the plugins and scripts of the
+ * project in the working directory from running, which `composer --version`
+ * would otherwise let a plugin do. It needs no network. The banner is
+ * `Composer version 2.10.3 2026-08-27 13:34:23`, but an older Composer on a
+ * newer PHP prints deprecation notices above it, so the first line that starts
+ * with it is read; the line after it names the PHP Composer runs on, with its
+ * path, and is never read. The banner must start its line: an indented echo of
+ * the project's composer.json in an error block does not count. Only a stable
+ * release is recorded: a pre-release or a snapshot has no version a CPE can
+ * name.
+ *
+ * @param {string} dir Working directory
+ * @returns Object containing the Composer details
+ */
+export declare function collectComposerInfo(dir: string): Object | undefined;
 /**
  * Method to run a swift command
  *
@@ -199,12 +269,15 @@ export declare function runSwiftCommand(dir: string, args: any[]): string | unde
  * Collect toolchain information components for the current environment.
  *
  * Probes the working directory for java, dotnet, python, node, gcc, rust, go,
- * and ruby toolchains and returns one component per detected tool.
+ * ruby, php and composer toolchains and returns one component per detected
+ * tool.
  *
  * @param {string} dir Working directory to inspect
+ * @param {Object} [options] CLI options, which decide whether the project's
+ *   own toolchain files may choose the tools that run
  * @returns {Object[]} Array of toolchain component objects; empty when nothing is detected
  */
-export declare function collectEnvInfo(dir: string): Object[];
+export declare function collectEnvInfo(dir: string, options?: Object): Object[];
 /**
  * Method to check if sdkman is available.
  */
@@ -343,6 +416,17 @@ export declare function gitAiNotes(dir: string, options?: {
  * @returns {Array<Object>} Array of { hash, message } revert/hotfix commits
  */
 export declare function gitRevertsAndHotfixes(dir: string, maxCount?: number): Array<Object>;
+/**
+ * Whether the running Node.js links a bundled dependency as a shared library,
+ * from the `node_shared_<name>` configure variables it reports.
+ *
+ * @param {string} name key of process.versions
+ * @param {Object} [variables] configure variables, process.config.variables
+ *   by default
+ * @returns {string|undefined} `shared`, `bundled`, or undefined when the build
+ *   does not say
+ */
+export declare function nodeComponentLinkage(name: string, variables?: Object): string | undefined;
 /**
  * Get information about the runtime.
  *

package/types/lib/inventory/envcontext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envcontext.d.ts","sourceRoot":"","sources":["../../../lib/inventory/envcontext.js"],"names":[],"mappings":"AAkDA;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAFd,MAE4D,CAAC;AAuCvE;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAapC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAL3B,MAK2B,EAAE,GAAG,EAJhC,MAIgC,sBAE1C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAJrB,MAIqB,sBAE/B;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,UAAU,KAAA,EAAE,GAAG,EAJ9B,MAI8B,sBAExC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAJtB,MAIsB,MAkBhC;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAJlB,MAIkB,SA4B5B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,IAAI,OAAA,sBAiBvC;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EALtB,MAKsB,EAAE,QAAQ,GAJhC,MAIqC,GAFnC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CAAC,CA+BhD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,QAAQ,GAJjC,MAIsC,GAFpC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CA8BlD;AAwDD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;;;;;cAsBlC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAgBpC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAiBpC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB,GAFtB,MAAM,CAkBlB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB;;;;;cAejC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;cAelC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAHtB,MAGsB;;;;cAahC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAHzB,MAGyB;;;;cAanC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;cAalC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,QAAA,EAAE,IAAI,OAAA,sBAExC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB,GAFrB,MAAM,EAAE,CAqCpB;AA6CD;;GAEG;AACH,wBAAgB,iBAAiB,YAiBhC;AAED;;GAEG;AACH,wBAAgB,cAAc,YAO7B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA0BvD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA8GnD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,QAAA,UA8B3C;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA,UA8B9C;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,YAgB/B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAH/B,MAG+B,GAF7B,MAAM,CAWlB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,KAAA,EAAE,aAAa,KAAA,EAAE,QAAQ,KAAA,WAuC3E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA;;;;;;EA2HvD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,cAAc,KAAA,WA2D7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,KAAA,EACb,WAAW,KAAA,EACX,aAAa,KAAA,EACb,QAAQ,KAAA,GANG,OAAO,CA+MnB;AAmDD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CAmDzB;AAyDD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,UAAU,EAH1C,MAG0C,GAFxC,MAAM,CA6FlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EANnB,MAMmB,EAAE,OAAO,AALpC,CAGA,EAFA;IAAyB,GAAG,AAA5B,CACA,EADQ,MAAM,CACd;IAAyB,QAAQ,AAAjC,CACA,EADQ,MAAM,CACd;CAEyC,GAF/B,KAAK,CAAC,MAAM,CAAC,CA4CzB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CA+BzB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,CA4GlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,WAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,IAF9B,MAAM,GAAC,SAAS,CAc5B"}
+{"version":3,"file":"envcontext.d.ts","sourceRoot":"","sources":["../../../lib/inventory/envcontext.js"],"names":[],"mappings":"AAkEA;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAFd,MAE4D,CAAC;AAwDvE;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAkBpC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAL3B,MAK2B,EAAE,GAAG,EAJhC,MAIgC,sBAE1C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAJrB,MAIqB,sBAE/B;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,UAAU,KAAA,EAAE,GAAG,EAJ9B,MAI8B,sBAExC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAJtB,MAIsB,MAkBhC;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAJlB,MAIkB,SA4B5B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,IAAI,OAAA,sBAiBvC;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EALtB,MAKsB,EAAE,QAAQ,GAJhC,MAIqC,GAFnC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CAAC,CA+BhD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,QAAQ,GAJjC,MAIsC,GAFpC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CA8BlD;AA0DD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;;;;;cAsBlC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAgBpC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAiBpC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB,GAFtB,MAAM,CA4BlB;AAgCD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB;;;;;cAejC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;cAelC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAHtB,MAGsB;;;;cAahC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAHzB,MAGyB;;;;cAanC;AAoCD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAAM,GAAC,SAGyB,GAF9B,OAAO,CAenB;AA+BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB,sBA2ClC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAJ7B,MAAM,GAAC,SAIsB,EAAE,OAAO,EAHtC,MAGsC,GAFpC,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAoB5B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CAyB5B;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB,sBAuBjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAG4B,sBAkCtC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,QAAA,EAAE,IAAI,OAAA,sBAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,OAAO,AAJxC,CAEA,EAFQ,MAI4C,GAF1C,MAAM,EAAE,CA6DpB;AA6CD;;GAEG;AACH,wBAAgB,iBAAiB,YAiBhC;AAED;;GAEG;AACH,wBAAgB,cAAc,YAO7B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA0BvD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA8GnD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,QAAA,UA8B3C;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA,UA8B9C;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,YAgB/B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAH/B,MAG+B,GAF7B,MAAM,CAWlB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,KAAA,EAAE,aAAa,KAAA,EAAE,QAAQ,KAAA,WAuC3E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA;;;;;;EA2HvD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,cAAc,KAAA,WA2D7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,KAAA,EACb,WAAW,KAAA,EACX,aAAa,KAAA,EACb,QAAQ,KAAA,GANG,OAAO,CA+MnB;AAmDD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CAmDzB;AAyDD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,UAAU,EAH1C,MAG0C,GAFxC,MAAM,CA6FlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EANnB,MAMmB,EAAE,OAAO,AALpC,CAGA,EAFA;IAAyB,GAAG,AAA5B,CACA,EADQ,MAAM,CACd;IAAyB,QAAQ,AAAjC,CACA,EADQ,MAAM,CACd;CAEyC,GAF/B,KAAK,CAAC,MAAM,CAAC,CA4CzB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CA+BzB;AAUD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAPK,MAOL,EACJ,SAAS,AAPR,CAEA,EAFQ,MAOwC,GALtC,MAAM,GAAC,SAAS,CAa5B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,CAsHlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,WAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,IAF9B,MAAM,GAAC,SAAS,CAc5B"}

package/types/lib/inventory/evidenceUtils.d.ts

@@ -76,14 +76,33 @@ export declare function addEvidenceForDotnet(pkgList: Object[], slicesFile: stri
  * @param {Array} results Query Results
  * @param {Boolean} enhance Optionally enhance results by invoking additional package manager commands
  */
-export declare function convertOSQueryResults(queryCategory: string, queryObj: Object, results: any[], enhance?: boolean, osPackageListers?: undefined): {
-    name: string;
-    group: string;
-    version: string;
-    description: any;
-    publisher: string;
-    "bom-ref": string;
-    scope: any;
-    type: any;
-}[];
+export declare function convertOSQueryResults(queryCategory: string, queryObj: Object, results: any[], enhance?: boolean, osPackageListers?: undefined): any[];
+/**
+ * Convert the packages of an apk installed database into components.
+ *
+ * The packages are named as the container scan names an Alpine, Wolfi or
+ * Chainguard package, and grouped with the other OS package categories under
+ * `cdx:osquery:category` = `apk_packages`. Beyond what an osquery package row
+ * gives, an apk record knows its licence and home page, which become
+ * `licenses` and a `website` external reference.
+ *
+ * @param {Object[]} packages Packages from readApkInstalledDb()
+ * @returns {Object[]} Components
+ */
+export declare function convertApkPackages(packages: Object[]): Object[];
+/**
+ * Convert the rows of the `ai_agent_skills` query into components.
+ *
+ * A skill installed on the host is what the `ai-skill` project scan finds in a
+ * repository, so it is a `file` component with the same `cdx:file:kind` and
+ * `cdx:skill:*` properties, and no purl: a skill has no package identity. Its
+ * bom-ref is the SHA-256 of its SKILL.md rather than the path, which is under a
+ * home directory, and where it was found is an occurrence. The same skill
+ * found under several roots, such as a plugin marketplace checkout and the
+ * plugin cache, is one component with one occurrence for each.
+ *
+ * @param {Object[]} results Rows of `ai_agent_skills` joined with `hash`
+ * @returns {Object[]} Components
+ */
+export declare function convertAgentSkillRows(results: Object[]): Object[];
 //# sourceMappingURL=evidenceUtils.d.ts.map

package/types/lib/inventory/evidenceUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evidenceUtils.d.ts","sourceRoot":"","sources":["../../../lib/inventory/evidenceUtils.js"],"names":[],"mappings":"AAiCA;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CA8B5B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAHxC,MAGwC,GAFtC,MAAM,CAalB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAJ1B,MAAM,EAAE,GAAC,MAIiB,EAAE,SAAS,UAAA,GAFnC,MAAM,EAAE,CAmDpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAJjC,MAAM,GAAC,MAAM,EAIoB,EAAE,QAAQ,EAH3C,MAAM,EAGqC,GAFzC,MAAM,GAAC,MAAM,EAAE,CAwB3B;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAPjC,MAAM,EAO2B,EAAE,UAAU,EAN7C,MAM6C,EAAE,OAAO,AAL9D,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAEmE,GAFzD,MAAM,EAAE,CAsQpB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EANJ,MAMI,EACb,QAAQ,EANC,MAMD,EACR,OAAO,OAAA,EACP,OAAO,UAAQ,EACf,gBAAgB,YAAY;;;;;;;;;IA6H7B"}
+{"version":3,"file":"evidenceUtils.d.ts","sourceRoot":"","sources":["../../../lib/inventory/evidenceUtils.js"],"names":[],"mappings":"AA6CA;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CA8B5B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAHxC,MAGwC,GAFtC,MAAM,CAalB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAJ1B,MAAM,EAAE,GAAC,MAIiB,EAAE,SAAS,UAAA,GAFnC,MAAM,EAAE,CAmDpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAJjC,MAAM,GAAC,MAAM,EAIoB,EAAE,QAAQ,EAH3C,MAAM,EAGqC,GAFzC,MAAM,GAAC,MAAM,EAAE,CAwB3B;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAPjC,MAAM,EAO2B,EAAE,UAAU,EAN7C,MAM6C,EAAE,OAAO,AAL9D,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAEmE,GAFzD,MAAM,EAAE,CAsQpB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EANJ,MAMI,EACb,QAAQ,EANC,MAMD,EACR,OAAO,OAAA,EACP,OAAO,UAAQ,EACf,gBAAgB,YAAY,SAsO7B;AAgJD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAAM,EAG0B,GAF9B,MAAM,EAAE,CAqCpB;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAHlC,MAAM,EAG4B,GAFhC,MAAM,EAAE,CAgEpB"}

package/types/lib/inventory/formulationParsers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formulationParsers.d.ts","sourceRoot":"","sources":["../../../lib/inventory/formulationParsers.js"],"names":[],"mappings":"AA0GA;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAF1B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAEvB,QAkBpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,IAFb,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,CAAC,CAItE;AAgDD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAZnC,MAYmC,EAAE,OAAO,EAX5C,MAW4C,EAAE,OAAO,AAT7D,CAIA,EAJQ,MAS0D,GALxD;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAuN7D"}
+{"version":3,"file":"formulationParsers.d.ts","sourceRoot":"","sources":["../../../lib/inventory/formulationParsers.js"],"names":[],"mappings":"AA4GA;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAF1B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAEvB,QAkBpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,IAFb,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,CAAC,CAItE;AA0DD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAZnC,MAYmC,EAAE,OAAO,EAX5C,MAW4C,EAAE,OAAO,AAT7D,CAIA,EAJQ,MAS0D,GALxD;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAwO7D"}

package/types/lib/inventory/goBuildInfo.d.ts

@@ -0,0 +1,10 @@
+export declare const PRE_1_18_VERSION = "unknown-pre-1.18";
+/**
+ * Read the Go toolchain version from an executable's buildinfo header.
+ *
+ * @param {string} filePath absolute path to a possible Go binary
+ * @returns {string|undefined} `go1.x.y`, `unknown-pre-1.18` for old layouts,
+ *   or undefined when the file carries no Go buildinfo
+ */
+export declare function readGoBuildVersion(filePath: string): string | undefined;
+//# sourceMappingURL=goBuildInfo.d.ts.map

package/types/lib/inventory/goBuildInfo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goBuildInfo.d.ts","sourceRoot":"","sources":["../../../lib/inventory/goBuildInfo.js"],"names":[],"mappings":"AAuBA,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAyDnD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAJhC,MAIgC,GAH9B,MAAM,GAAC,SAAS,CAuD5B"}

package/types/lib/inventory/gtfobins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/inventory/gtfobins.js"],"names":[],"mappings":"AAwJA;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAL7B,MAK6B,EAAE,UAAU,AAJjD,CACA,EADQ,MAIyC,GAHvC,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,UAAU,AAHtD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CAmCpB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,aAAa,EAJlD,MAIkD,EAAE,GAAG,EAHvD,MAGuD,GAFrD,KAAK,CAAC,MAAM,CAAC,CA0FzB"}
+{"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/inventory/gtfobins.js"],"names":[],"mappings":"AAiKA;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAL7B,MAK6B,EAAE,UAAU,AAJjD,CACA,EADQ,MAIyC,GAHvC,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,UAAU,AAHtD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CAmCpB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,aAAa,EAJlD,MAIkD,EAAE,GAAG,EAHvD,MAGuD,GAFrD,KAAK,CAAC,MAAM,CAAC,CA8FzB"}

package/types/lib/inventory/hbom.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hbom.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hbom.js"],"names":[],"mappings":"AAwSA;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAHpC,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAGU,GAFlC,OAAO,CAMnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAHxC,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAGc,GAFtC,OAAO,CAUnB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAF/C,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAEqB,QAgBzD;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAF/C,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,IAEuB,QAOzD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,AAH7C,CACA,EADQ,MAG0C,EAAE,WAAW,AAF/D,CACF,EADU,MAEgE,QAmB1E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,AAHzC,CACA,EADQ,MAGsC,GAFpC,MAAM,CA2BlB;AA8GD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAHtC,MAGsC,GAFpC,MAAM,CA8HlB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,AAH7C,CACA,EADQ,MAG0C,GAFxC,OAAO,CAAC,MAAM,CAAC,CAiC3B"}
+{"version":3,"file":"hbom.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hbom.js"],"names":[],"mappings":"AAiWA;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAHpC,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAGU,GAFlC,OAAO,CAMnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAHxC,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAGc,GAFtC,OAAO,CAUnB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAF/C,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAEqB,QAgBzD;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAF/C,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,IAEuB,QAOzD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,AAH7C,CACA,EADQ,MAG0C,EAAE,WAAW,AAF/D,CACF,EADU,MAEgE,QAmB1E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,AAHzC,CACA,EADQ,MAGsC,GAFpC,MAAM,CA8BlB;AA8GD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAHtC,MAGsC,GAFpC,MAAM,CA8HlB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,AAH7C,CACA,EADQ,MAG0C,GAFxC,OAAO,CAAC,MAAM,CAAC,CAiC3B"}

package/types/lib/inventory/hbomAnalysis.d.ts

@@ -19,6 +19,16 @@ export declare function getHbomCommandDiagnosticSummary(bomJson: Object): Object
  * @returns {boolean} `true` when the BOM looks like an HBOM
  */
 export declare function isHbomLikeBom(bomJson: Object): boolean;
+/**
+ * Explain how the permission-denied enrichments of an HBOM can be recovered.
+ *
+ * Windows never uses sudo: the elevated-only batch needs an already-elevated
+ * session, and a network logon is denied every WMI query.
+ *
+ * @param {string|undefined} platform `cdx:hbom:platform` of the HBOM
+ * @returns {string} Guidance for the platform; the Linux wording for any other platform
+ */
+export declare function getHbomPrivilegeGuidance(platform: string | undefined): string;
 /**
  * Return a component's `cdx:hbom:hardwareClass` property value.
  *

package/types/lib/inventory/hbomAnalysis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hbomAnalysis.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hbomAnalysis.js"],"names":[],"mappings":"AAoDA;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAHtC,MAGsC,GAFpC,MAAM,EAAE,CAMpB;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAH5C,MAG4C,GAF1C,MAAM,CAuElB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,MAG0B,GAFxB,OAAO,CA6BnB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAHnC,MAGmC,GAFjC,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,AAHlD,CACA,EADQ,MAAM,EAGyC,GAF7C;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,EAAE,CAkBpD;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,mBAAmB,AAH/D,CACA,EADQ;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,EAGsB,GAF1D,MAAM,CAOlB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,GAFzB,MAAM,CAkFlB"}
+{"version":3,"file":"hbomAnalysis.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hbomAnalysis.js"],"names":[],"mappings":"AAoDA;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAHtC,MAGsC,GAFpC,MAAM,EAAE,CAMpB;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAH5C,MAG4C,GAF1C,MAAM,CAuElB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAH1B,MAG0B,GAFxB,OAAO,CA6BnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAHtC,MAAM,GAAC,SAG+B,GAFpC,MAAM,CAOlB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAHnC,MAGmC,GAFjC,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,AAHlD,CACA,EADQ,MAAM,EAGyC,GAF7C;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,EAAE,CAkBpD;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,mBAAmB,AAH/D,CACA,EADQ;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,EAGsB,GAF1D,MAAM,CAOlB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAH3B,MAG2B,GAFzB,MAAM,CAkFlB"}

package/types/lib/inventory/hostRuntimeProbe.d.ts

@@ -0,0 +1,44 @@
+export declare function listDirectory(directory: any): any;
+export declare function isDirectory(path: any): any;
+/**
+ * Look for a runtime no package manager owns, in the directories a spec names.
+ * Components come back only for the files nothing owns: a `file` component for
+ * each runtime binary or library the spec could read a build from, the
+ * components the spec's inventory builds from them, and the edges between them.
+ *
+ * @param {Object} options probe options, as probeHostPhp documents them
+ * @param {Object} spec the runtime: `label`, `ecosystem`, `capability`,
+ *   `remediationId` (a remediation catalog id, spelled out by the caller),
+ *   `maxProbes`, `directories(context)`, `classify(name, platform)`,
+ *   `readBuild(context, candidate)`, `createInventory()`,
+ *   `attach(inventory, component, build, candidate)`, `finish(inventory)`,
+ *   optional `chocolateyPackages` and `chocolateyDirectories(context)` (where
+ *   those packages unpack outside Chocolatey's folder), and `hooks` carrying
+ *   the caller's
+ *   `isDryRun`, `readEnvironmentVariable`, `recordActivity` and
+ *   `recordDegradation`
+ * @returns {{components: Object[], dependencies: Object[]}}
+ */
+export declare function probeHostRuntime(options: Object, spec: Object): {
+    components: Object[];
+    dependencies: Object[];
+};
+/**
+ * Ask the package databases of a POSIX host which package owns each path.
+ * The paths are named as the host names them (`/usr/lib/ruby/...`). A
+ * database that exists but cannot be read is reported, so the caller can tell
+ * "no owner" from "unknown".
+ *
+ * @param {Object} options probe options, as probeHostRuntime takes them
+ * @param {string[]} paths logical paths to look up
+ * @returns {{owners: Map<string, {database: string, packageName: string}>,
+ *   unreadable: string[]}}
+ */
+export declare function findHostPathOwners(options: Object, paths: string[]): {
+    owners: Map<string, {
+        database: string;
+        packageName: string;
+    }>;
+    unreadable: string[];
+};
+//# sourceMappingURL=hostRuntimeProbe.d.ts.map

package/types/lib/inventory/hostRuntimeProbe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostRuntimeProbe.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hostRuntimeProbe.js"],"names":[],"mappings":"AAmDA,wBAAgB,aAAa,CAAC,SAAS,KAAA,OAMtC;AAED,wBAAgB,WAAW,CAAC,IAAI,KAAA,OAM/B;AAgeD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAb7B,MAa6B,EAAE,IAAI,EAZnC,MAYmC,GAFjC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CA2D1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,KAAK,EAJtC,MAAM,EAIgC,GAHpC;IAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IACtE,UAAU,EAAE,MAAM,EAAE,CAAA;CAAC,CAqDzB"}

package/types/lib/inventory/hostTopology.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hostTopology.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hostTopology.js"],"names":[],"mappings":"AA2mBA;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,OAAO,CAUnB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAH/B,MAG+B,GAF7B;IAAC,4BAA4B,EAAE,MAAM,CAAC;IAAC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAC,SAAS,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAC,CA0BnM;AAYD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAHvC,MAGuC,GAFrC,MAAM,CAiFlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAIoC,EAAE,QAAQ,EAH9C;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAGG,GAF5C,MAAM,CA0DlB"}
+{"version":3,"file":"hostTopology.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hostTopology.js"],"names":[],"mappings":"AA4nBA;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAHhC,MAGgC,GAF9B,OAAO,CAUnB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAH/B,MAG+B,GAF7B;IAAC,4BAA4B,EAAE,MAAM,CAAC;IAAC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAC,SAAS,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAC,CA0BnM;AAYD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAHvC,MAGuC,GAFrC,MAAM,CAiFlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAJpC,MAIoC,EAAE,QAAQ,EAH9C;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAGG,GAF5C,MAAM,CA8DlB"}

package/types/lib/inventory/jvmToolEnv.d.ts

@@ -126,6 +126,18 @@ export declare function determineRequiredJavaVersion(toolPins: Array<{
  * @returns {string|undefined} Minimum Gradle version, when capped.
  */
 export declare function minimumGradleVersionForJava(javaMajor: number): string | undefined;
+/**
+ * Pick the newest stable Gradle version from `sdk list` output that can run on
+ * the given JDK major. Without a known cap this is the newest stable version,
+ * matching the plain default install; with a cap, versions below it are
+ * skipped so a project that declared a new JDK never gets a Gradle that
+ * refuses to run on it, even when the sdkman list is stale.
+ *
+ * @param {string} stdout Raw `sdk list gradle` output
+ * @param {number|undefined} javaMajor JDK major the Gradle daemon must run on
+ * @returns {string|undefined} Best matching version identifier.
+ */
+export declare function resolveGradleVersionForJava(stdout: string, javaMajor: number | undefined): string | undefined;
 /**
  * Collect the version tokens printed by `sdk list <candidate>`. The output is
  * a fixed-width table whose cells may carry `+`, `*`, or `>` status markers;

package/types/lib/inventory/jvmToolEnv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jvmToolEnv.d.ts","sourceRoot":"","sources":["../../../lib/inventory/jvmToolEnv.js"],"names":[],"mappings":"AAMA,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,gBAAgB,EAChB,mBAAmB,GACpB,CAAC;AAuBF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAHjC,MAGiC,GAF/B,OAAO,CASnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EALxC,MAKwC,GAJtC,MAAM,GAAC,SAAS,CAmB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAJ3B,MAI2B,GAHzB,MAAM,GAAC,SAAS,CA4C5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,GAHpC,MAAM,GAAC,SAAS,CAwC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,GAHnC,MAAM,GAAC,SAAS,CAgC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAH9C,MAG8C,GAF5C,MAAM,GAAC,SAAS,CAkB5B;AAsDD;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,iDAKjC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,wBAM5B,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,OAAO,EAH3C,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAY5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAH1C,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAGK,GAFxC,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAH1C,MAG0C,GAFxC,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAgBpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAJjC,MAIiC,EAAE,MAAM,EAHzC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAHjC,MAGiC,GAF/B,MAAM,GAAC,SAAS,CAS5B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAHhC,MAGgC,GAF9B,MAAM,GAAC,SAAS,CAS5B;AASD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAHvC,MAGuC,GAFrC,MAAM,GAAC,SAAS,CAuB5B"}
+{"version":3,"file":"jvmToolEnv.d.ts","sourceRoot":"","sources":["../../../lib/inventory/jvmToolEnv.js"],"names":[],"mappings":"AAMA,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,gBAAgB,EAChB,mBAAmB,GACpB,CAAC;AAuBF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAHjC,MAGiC,GAF/B,OAAO,CASnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EALxC,MAKwC,GAJtC,MAAM,GAAC,SAAS,CAmB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAJ3B,MAI2B,GAHzB,MAAM,GAAC,SAAS,CA4C5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,GAHpC,MAAM,GAAC,SAAS,CAwC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,GAHnC,MAAM,GAAC,SAAS,CAgC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAH9C,MAG8C,GAF5C,MAAM,GAAC,SAAS,CAkB5B;AAsDD;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,iDAKjC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,wBAO5B,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,OAAO,EAH3C,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAY5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAH1C,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAGK,GAFxC,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAH1C,MAG0C,GAFxC,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAJvC,MAIuC,EAAE,SAAS,EAHlD,MAAM,GAAC,SAG2C,GAFhD,MAAM,GAAC,SAAS,CAiB5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAgBpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAJjC,MAIiC,EAAE,MAAM,EAHzC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAHjC,MAGiC,GAF/B,MAAM,GAAC,SAAS,CAS5B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAHhC,MAGgC,GAF9B,MAAM,GAAC,SAAS,CAS5B;AASD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAHvC,MAGuC,GAFrC,MAAM,GAAC,SAAS,CAuB5B"}

package/types/lib/inventory/licenseEnhancer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"licenseEnhancer.d.ts","sourceRoot":"","sources":["../../../lib/inventory/licenseEnhancer.js"],"names":[],"mappings":"AAOA,OAAO,EAIL,mBAAmB,EAIpB,MAAM,qBAAqB,CAAC;AAkF7B;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAH1B,MAG0B,GAFxB,MAAM,GAAC,IAAI,CAavB;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,IAAI,GAH/B,MAGoC,GAFlC,MAAM,GAAC,IAAI,CAwFvB;AAgBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,CA8BlB;AA0DD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAAM,GAAC,MAIsB,EAAE,IAAI,GAHnC,MAGwC,GAFtC,MAAM,CAqFlB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAJvC,MAIuC,EAAE,IAAI,GAH7C,MAGkD,GAFhD,MAAM,CA4ClB;AAoGD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EALzC,MAKyC,EAAE,MAAM,EAJjD,MAIiD,EAAE,KAAK,KAAK,GAF3D,MAAM,CAyElB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAJnB,MAImB,EAAE,IAAI,GAHzB,MAG8B,GAF5B,MAAM,CAgDlB;AA4KD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,MAAM,EAJxC,MAIwC,EAAE,IAAI,AAHtD,CACA,EADQ,MAGmD,GAFjD,MAAM,EAAE,CA0CpB"}
+{"version":3,"file":"licenseEnhancer.d.ts","sourceRoot":"","sources":["../../../lib/inventory/licenseEnhancer.js"],"names":[],"mappings":"AAOA,OAAO,EAIL,mBAAmB,EAIpB,MAAM,qBAAqB,CAAC;AAkF7B;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAH1B,MAG0B,GAFxB,MAAM,GAAC,IAAI,CAavB;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,IAAI,GAH/B,MAGoC,GAFlC,MAAM,GAAC,IAAI,CAoGvB;AAgBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,CA8BlB;AA0DD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAAM,GAAC,MAIsB,EAAE,IAAI,GAHnC,MAGwC,GAFtC,MAAM,CAqFlB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAJvC,MAIuC,EAAE,IAAI,GAH7C,MAGkD,GAFhD,MAAM,CA4ClB;AAoGD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EALzC,MAKyC,EAAE,MAAM,EAJjD,MAIiD,EAAE,KAAK,KAAK,GAF3D,MAAM,CAyElB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAJnB,MAImB,EAAE,IAAI,GAHzB,MAG8B,GAF5B,MAAM,CAgDlB;AA4KD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,MAAM,EAJxC,MAIwC,EAAE,IAAI,AAHtD,CACA,EADQ,MAGmD,GAFjD,MAAM,EAAE,CA0CpB"}

package/types/lib/inventory/mavenCentralMirror.d.ts

@@ -0,0 +1,170 @@
+/**
+ * Opt-in switch that points every Maven Central consumer at Google's public
+ * mirror: cdxgen's own POM, licence and metadata lookups, and every JVM build
+ * tool cdxgen runs (Maven and its wrapper, Gradle, sbt, Mill, Bazel and the
+ * Clojure tools). The value selects the mirror:
+ *
+ *   `true`/`google`  the global mirror bucket
+ *   `eu`             the Europe bucket
+ *   `asia`           the Asia bucket
+ *   `http(s)://...`  any other mirror or repository manager of Maven Central
+ *
+ * An explicit `MAVEN_CENTRAL_URL` still wins for cdxgen's own lookups, and a
+ * repository the user or the project already configures is never replaced:
+ * only the default Maven Central URLs are moved. Nothing is written to the
+ * scanned project or the user's home directory; the injection goes through
+ * command-line arguments and environment variables, and any settings or init
+ * script it needs is written under cdxgen's temp directory and removed again.
+ */
+export declare const MAVEN_CENTRAL_MIRROR_VAR = "MAVEN_CENTRAL_MIRROR";
+/**
+ * Google's public Maven Central mirror buckets, named by region.
+ *
+ * @type {Object<string, string>}
+ */
+export declare const MAVEN_CENTRAL_MIRROR_URLS: Record<string, string>;
+/**
+ * The default Maven Central repository URLs that the mirror replaces, for
+ * tools that name repositories by URL.
+ *
+ * @type {string[]}
+ */
+export declare const MAVEN_CENTRAL_DEFAULT_URLS: string[];
+/**
+ * Read the mirror switch. Undefined when cdxgen should use Maven Central
+ * itself, the mirror URL otherwise.
+ *
+ * @returns {string|undefined} Mirror base URL with a trailing slash
+ */
+export declare function mavenCentralMirrorUrl(): string | undefined;
+/**
+ * Whether the mirror switch is on. Names and URLs that do not resolve to a
+ * mirror leave it off, so a typo never silently redirects builds.
+ *
+ * @returns {boolean}
+ */
+export declare function isMavenCentralMirrorEnabled(): boolean;
+/**
+ * The repository cdxgen's own POM, licence and metadata lookups should fetch
+ * from. An explicit `MAVEN_CENTRAL_URL` is a deliberate choice, often a
+ * repository manager holding private artefacts, so it keeps winning over the
+ * mirror.
+ *
+ * @returns {string|undefined} Mirror URL, or undefined to keep the existing
+ *   `MAVEN_CENTRAL_URL` behaviour
+ */
+export declare function mavenCentralFetchUrl(): string | undefined;
+/**
+ * Insert the mirror into the content of a settings file that is passed to
+ * Maven anyway, keeping every other element as it is. The mirror is appended
+ * to the existing ones, so the file's own mirror of Central still wins.
+ *
+ * @param {string} content Existing settings.xml content
+ * @param {string} mirrorUrl Mirror base URL
+ * @returns {string|undefined} Merged content, or undefined when the file
+ *   holds no recognisable settings element to merge into
+ */
+export declare function mergeMavenMirrorSettings(content: string, mirrorUrl: string): string | undefined;
+/**
+ * Extra Maven arguments that send Central to the mirror, written as a global
+ * settings file under cdxgen's temp directory. An existing `-gs` settings
+ * file named by the caller is merged with the mirror instead, so a project
+ * that ships its own settings.xml keeps its repositories and its own mirror.
+ * A settings file the user named themselves (in `MVN_ARGS`/`MAVEN_ARGS`) is
+ * never touched, and neither is secure mode.
+ *
+ * @param {string} [existingSettingsFile] Settings file the caller already
+ *   passes to Maven
+ * @returns {string[]} Arguments to append to the Maven command line
+ */
+export declare function mavenMirrorSettingsArgs(existingSettingsFile?: string): string[];
+/**
+ * Environment for a Maven or Maven wrapper invocation that moves the
+ * wrapper's own distribution download off Maven Central. Plain `mvn`
+ * invocations ignore it.
+ *
+ * @returns {Object} Environment variables to add to the child process
+ */
+export declare function mavenWrapperMirrorEnv(): Object;
+/**
+ * A Gradle init script that rewrites Maven Central repository URLs to the
+ * mirror as the settings and every project declare them. Repositories that are
+ * not Maven Central keep their URL, so private repositories and declared
+ * mirrors are untouched.
+ *
+ * @param {string} mirrorUrl Mirror base URL
+ * @returns {string}
+ */
+export declare function gradleMirrorInitScript(mirrorUrl: string): string;
+/**
+ * Extra Gradle arguments that install the mirror init script. Gradle applies
+ * every init script it is given, so cdxgen's own helper script keeps working.
+ *
+ * @returns {string[]} Arguments to append to the Gradle command line
+ */
+export declare function gradleMirrorInitScriptArgs(): string[];
+/**
+ * An sbt launcher repositories file that resolves Maven Central from the
+ * mirror. The launcher replaces its default list with this file, so the
+ * plugin and Typesafe repositories it must still reach are named here, and
+ * only the Central entry points at the mirror.
+ *
+ * @param {string} mirrorUrl Mirror base URL
+ * @returns {string}
+ */
+export declare function sbtRepositoriesFile(mirrorUrl: string): string;
+/**
+ * Environment for an sbt invocation that resolves Maven Central from the
+ * mirror: a repositories file under cdxgen's temp directory, named through
+ * `SBT_OPTS`. A user who already configures repositories (`~/.sbt/repositories`
+ * or their own `sbt.repository.config`) keeps their configuration, and the
+ * mirror stays out of the way.
+ *
+ * @returns {Object} Environment variables to add to the child process
+ */
+export declare function sbtMirrorEnv(): Object;
+/**
+ * Environment for tools that resolve through the Coursier CLI.
+ *
+ * @returns {Object} Environment variables to add to the child process
+ */
+export declare function coursierMirrorEnv(): Object;
+/**
+ * Extra Bazel build arguments that hand the mirror to repository rules, whose
+ * environment Bazel otherwise keeps isolated from the client's. Repositories
+ * whose URLs the project pins, as rules_jvm_external projects do, are not
+ * changed by this; it covers the ones that resolve through Coursier defaults.
+ *
+ * @returns {string[]} Arguments to append to the Bazel build command line
+ */
+export declare function bazelMirrorArgs(): string[];
+/**
+ * The `-Sdeps` data that repoints the default `central` repository of the
+ * Clojure CLI at the mirror. Repositories merge by name, so a project's other
+ * repositories, including Clojars, keep resolving as declared.
+ *
+ * @param {string} mirrorUrl Mirror base URL
+ * @returns {string}
+ */
+export declare function clojureMirrorSdeps(mirrorUrl: string): string;
+/**
+ * Extra arguments for a Clojure CLI invocation. Skipped when the user already
+ * passes `-Sdeps`, whose data would otherwise be replaced.
+ *
+ * @param {string[]} baseArgs Arguments the caller already assembled
+ * @returns {string[]} Arguments to append
+ */
+export declare function clojureMirrorArgs(baseArgs?: string[]): string[];
+/**
+ * Arguments for a Leiningen invocation that repoint its `central` repository
+ * at the mirror, through `lein update-in`, which changes the project map in
+ * memory and never the project.clj file. Skipped when the project declares
+ * its own `:mirrors`, which must keep winning.
+ *
+ * @param {string[]} baseArgs Arguments the caller already assembled
+ * @param {string} [projectFileContent] The project's project.clj, when the
+ *   caller has it at hand
+ * @returns {string[]} Full argument list to invoke Leiningen with
+ */
+export declare function leiningenMirrorArgs(baseArgs: string[], projectFileContent?: string): string[];
+//# sourceMappingURL=mavenCentralMirror.d.ts.map

package/types/lib/inventory/mavenCentralMirror.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mavenCentralMirror.d.ts","sourceRoot":"","sources":["../../../lib/inventory/mavenCentralMirror.js"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,wBAIrC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAF7B,MAAM,EAKf,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,GAAC,SAAS,CAuB5B;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,IAF9B,OAAO,CAInB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAHvB,MAAM,GAAC,SAAS,CAW5B;AAkFD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EALrC,MAKqC,EAAE,SAAS,EAJhD,MAIgD,GAH9C,MAAM,GAAC,SAAS,CAuB5B;AAoBD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,oBAAoB,AAJzD,CAEA,EAFQ,MAIiD,GAF/C,MAAM,EAAE,CAyBpB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,CAUlB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,GAFnC,MAAM,CAmClB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAF7B,MAAM,EAAE,CAapB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAHlC,MAGkC,GAFhC,MAAM,CASlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,IAFf,MAAM,CA0BlB;AAQD;;;;GAIG;AACH,wBAAgB,iBAAiB,IAFpB,MAAM,CAYlB;AAMD;;;;;;;GAOG;AACH,wBAAgB,eAAe,IAFlB,MAAM,EAAE,CAWpB;AAMD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAHjC,MAGiC,GAF/B,MAAM,CAIlB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,GAH/B,MAAM,EAG8B,GAFlC,MAAM,EAAE,CAWpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EALjC,MAAM,EAK2B,EAAE,kBAAkB,AAJ7D,CAEA,EAFQ,MAIqD,GAFnD,MAAM,EAAE,CAgBpB"}