@cdxgen/cdxgen 13.5.0 → 13.7.0

package/types/lib/evinser/evinser.d.ts

@@ -41,6 +41,37 @@ export declare function defaultEvidenceLanguage(dirPath: string, bomJson?: Objec
  * @returns {Object} Options for prepareDB, analyzeProject, and createEvinseFile
  */
 export declare function buildEvinseOptions(options: Object, args: Object, input: string): Object;
+/**
+ * Read the evinse input BOM as cdxgen's 1.x-shaped internal model. A
+ * CycloneDX 2.0 document is converted with loadBomForAnalysis; a 1.x document
+ * (or an internal model) is returned as is. When `options.inputBomJson` holds
+ * a model converted earlier, a copy of it is returned instead of reading
+ * `options.input` again, so prepareDB, analyzeProject and createEvinseFile
+ * each get their own object, as they did when each parsed the file.
+ *
+ * @param {Object} options Evinse options with `input` and optional
+ *   `inputBomJson`
+ * @returns {{bomJson: Object, losses: Array<{pointer: string, reason: string}>}}
+ *   The internal model and the losses of the 2.0 read (none when
+ *   `inputBomJson` was given)
+ */
+export declare function loadEvinseInputBom(options: Object): {
+    bomJson: Object;
+    losses: Array<{
+        pointer: string;
+        reason: string;
+    }>;
+};
+/**
+ * Print the one-line notice for the losses of reading a 2.0 evinse input,
+ * with the details in thoughtLog.
+ *
+ * @param {Array<{pointer: string, reason: string}>} losses Reader losses
+ */
+export declare function reportEvinseInputLosses(losses: Array<{
+    pointer: string;
+    reason: string;
+}>): void;
 /**
  * Function to create the db for the libraries referred in the sbom.
  *
@@ -147,15 +178,18 @@ export declare function purlToLanguage(purl: string, filePath?: string): string
  * Walks the supplied components reading `internal:ImportedModules` (or
  * `internal:Namespaces` for php/ruby, plus the `internal:ImportedSymbols` the
  * C/C++ collector records) and `evidence.occurrences` properties to construct
- * lookup maps used during slice analysis.
+ * lookup maps used during slice analysis. An occurrence that carries `offset`
+ * or `symbol` seeds those too, so a re-run over a previous evinse output keys
+ * and annotates the same use sites the fresh slice adds.
  *
  * @param {Object[]} components CycloneDX components from the input SBOM
  * @param {string} language Application language used to select the import property name
- * @returns {{ purlLocationMap: Object<string, Set>, purlImportsMap: Object<string, string[]> }} Seeded purl location and import maps
+ * @returns {{ purlLocationMap: Object<string, Set>, purlImportsMap: Object<string, string[]>, purlSymbolMap: Object<string, Object<string, string>> }} Seeded purl location, import and symbol maps
  */
 export declare function initFromSbom(components: Object[], language: string): {
     purlLocationMap: Record<string, Set<any>>;
     purlImportsMap: Record<string, string[]>;
+    purlSymbolMap: Record<string, Record<string, string>>;
 };
 /**
  * Load a semantics slices file for reuse when it belongs to this project.
@@ -223,6 +257,7 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     servicesMap: {};
     dataFlowFrames: {};
     userDefinedTypesMap: {};
+    purlSymbolMap: Record<string, Record<string, string>>;
     componentPropertiesMap?: undefined;
     metadataProperties?: undefined;
     workspaceComponent?: undefined;
@@ -231,6 +266,7 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     dataFlowSlicesFile?: undefined;
     reachablesSlicesFile?: undefined;
     semanticsSlicesFile?: undefined;
+    clearedOccurrencePurls?: undefined;
     tempDir?: undefined;
     tempDirOwned?: undefined;
     cryptoComponents?: undefined;
@@ -246,12 +282,14 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     cryptoGeneratePurls: any;
     servicesMap: {};
     userDefinedTypesMap: {};
+    purlSymbolMap: Record<string, Record<string, string>>;
     workspaceComponent?: undefined;
     atomFile?: undefined;
     usagesSlicesFile?: undefined;
     dataFlowSlicesFile?: undefined;
     reachablesSlicesFile?: undefined;
     semanticsSlicesFile?: undefined;
+    clearedOccurrencePurls?: undefined;
     tempDir?: undefined;
     tempDirOwned?: undefined;
     aiComponents?: undefined;
@@ -266,11 +304,13 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     servicesMap: {};
     userDefinedTypesMap: {};
     workspaceComponent: Object | undefined;
+    purlSymbolMap: Record<string, Record<string, string>>;
     atomFile?: undefined;
     usagesSlicesFile?: undefined;
     dataFlowSlicesFile?: undefined;
     reachablesSlicesFile?: undefined;
     semanticsSlicesFile?: undefined;
+    clearedOccurrencePurls?: undefined;
     tempDir?: undefined;
     tempDirOwned?: undefined;
     aiComponents?: undefined;
@@ -291,8 +331,10 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     cryptoComponents: any[];
     aiComponents: any[];
     cryptoGeneratePurls: {};
+    purlSymbolMap: Record<string, Record<string, string>>;
     atomFile?: undefined;
     reachablesSlicesFile?: undefined;
+    clearedOccurrencePurls?: undefined;
     openapiSpecFile?: undefined;
 } | {
     componentPropertiesMap?: undefined;
@@ -304,6 +346,8 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     reachablesSlicesFile: any;
     semanticsSlicesFile: any;
     purlLocationMap: Record<string, Set<any>>;
+    purlSymbolMap: Record<string, Record<string, string>>;
+    clearedOccurrencePurls: Set<any>;
     servicesMap: {};
     dataFlowFrames: {};
     tempDir: any;
@@ -417,14 +461,7 @@ export declare function isFilterableType(language: string, userDefinedTypesMap:
  * @returns {void}
  */
 export declare function detectServicesFromOpenAPI(_language: string, openapiSpecFile: string, servicesMap: Object): void;
-/**
- * Method to detect services from annotation objects in the usage slice
- *
- * @param {string} language Application language
- * @param {Array} slice Usages array for each objectSlice
- * @param {Object} servicesMap Existing service map
- */
-export declare function detectServicesFromUsages(language: string, slice: any[], servicesMap?: Object): never[] | undefined;
+export declare function detectServicesFromUsages(language: any, slice: any, servicesMap?: {}): never[] | undefined;
 /**
  * Method to detect services from user defined types in the usage slice
  *
@@ -457,14 +494,46 @@ export declare function constructServiceName(_language: string, slice: Object):
  * @returns {string[]|undefined} Array of endpoint paths or `undefined` when none are found
  */
 export declare function extractEndpoints(language: string, code: string): string[] | undefined;
+/**
+ * Key naming the package a purl refers to, independent of its version,
+ * qualifiers and subpath. Namespace and name are the decoded purl segments,
+ * so an encoded scope (`%40angular/common`) keys like a plain one.
+ *
+ * @param {string} purl Purl string
+ * @returns {string|undefined} `type/namespace/name`, or undefined for a non-purl
+ */
+export declare function versionlessPurlKey(purl: string): string | undefined;
+/**
+ * Index the data-flow frames recorded under versionless flow purls by
+ * {@link versionlessPurlKey}. A flow purl without a version attaches to every
+ * BOM component of the same package name, whatever its version (maintainer
+ * decision, 2026-10-27); chen leaves the version off exactly when it cannot
+ * pick one between apps that pin the package differently.
+ *
+ * @param {Object} dataFlowFrames Frames keyed by flow purl
+ * @returns {Object} Frames keyed by versionless purl key
+ */
+export declare function indexVersionlessPurls(dataFlowFrames: Object): Object;
+/**
+ * Index the crypto generate pools recorded under versionless flow purls by
+ * {@link versionlessPurlKey}, the crypto counterpart of
+ * {@link indexVersionlessPurls}.
+ *
+ * @param {Object} cryptoGeneratePurls Algorithm bom-refs keyed by flow purl
+ * @returns {Object} Algorithm bom-ref sets keyed by versionless purl key
+ */
+export declare function indexVersionlessCrypto(cryptoGeneratePurls: Object): Object;
 /**
  * Method to create the SBOM with evidence file called evinse file.
  *
  * @param {Object} sliceArtefacts Various artefacts from the slice operation
- * @param {Object} options Command line options
- * @returns
+ * @param {Object} options Command line options. With `returnInternalModel`,
+ *   a CycloneDX 2.0 run returns the 1.x-shaped internal model instead of the
+ *   rendered document; the file written is the rendered document either way.
+ * @returns {Promise<Object>} The BOM written to the output file, or its
+ *   internal model when `returnInternalModel` is set
  */
-export declare function createEvinseFile(sliceArtefacts: Object, options: Object): Promise<any>;
+export declare function createEvinseFile(sliceArtefacts: Object, options: Object): Promise<Object>;
 /**
  * Method to convert dataflow slice into usable callstack frames
  * Implemented based on the logic proposed here - https://github.com/AppThreat/atom/blob/main/specification/docs/slices.md#data-flow-slice
@@ -526,4 +595,42 @@ export declare function simplifyType(typeFullName: string): string;
  * @returns {string|undefined} Enclosing class type or `undefined` when it cannot be resolved
  */
 export declare function getClassTypeFromSignature(language: string, typeFullName: string): string | undefined;
+/**
+ * npm package name of a JavaScript module specifier: `@scope/pkg/sub` -> `@scope/pkg`,
+ * `lodash/fp` -> `lodash`. Node.js builtins (`node:fs`, `fs`) are not packages.
+ *
+ * @param {string} module module specifier
+ * @returns {string|undefined} package name
+ */
+export declare function jsPackageOfModule(module: string): string | undefined;
+/**
+ * Attribute a JavaScript usage's module-qualified entries to the packages providing them.
+ *
+ * Each call entry with a `module` is a use of that module's package at the call's line. When
+ * the slice's object is an import binding (defined by a require/import naming the module),
+ * every call the object takes part in is a use of that package too.
+ *
+ * @param {Object} ausage usage entry of an object slice
+ * @param {string} fileName file of the slice
+ * @param {Object} purlImportsMap purl -> imported modules and symbols
+ * @param {Object} purlLocationMap purl -> Set of `file#line`
+ */
+export declare function attributeJsModules(ausage: Object, fileName: string, purlImportsMap: Object, purlLocationMap: Object): void;
+/**
+ * Attribute a callsites slice's records to the packages providing their modules.
+ *
+ * Each record of `{"callsites": [...]}` (atom `callsites` command) is one external use site
+ * carrying its own file, line and column; the record is an occurrence of every purl whose
+ * package matches the record's module. A record with a column (0 or more; atom writes -1 for
+ * none) is keyed `file:line:col`, so two use sites on one line are two occurrences, and its
+ * occurrence carries the column as `offset` and `module` joined with `path` by `.` as
+ * `symbol`. A record without a column keys the line (`file#line`) and its occurrence carries
+ * the `symbol` alone; a record without a `path` leaves the symbol at the bare `module`.
+ *
+ * @param {Object} callsitesSlice callsites slice with a `callsites` array
+ * @param {Object} purlImportsMap purl -> imported modules and symbols
+ * @param {Object} purlLocationMap purl -> Set of occurrence keys
+ * @param {Object} [purlSymbolMap] purl -> occurrence key -> symbol, filled in place
+ */
+export declare function attributeJsCallsites(callsitesSlice: Object, purlImportsMap: Object, purlLocationMap: Object, purlSymbolMap?: Object): void;
 //# sourceMappingURL=evinser.d.ts.map

package/types/lib/evinser/evinser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"AA8HA;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAJA,MAIA,EACT,kBAAkB,GAJT,MAAM,EAIQ,QAkBxB;AAyBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EALpC,MAKoC,EAAE,OAAO,AAJrD,CACA,EADQ,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,IAAI,EAJrC,MAIqC,EAAE,KAAK,EAH5C,MAG4C,GAF1C,MAAM,CA2ClB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAF5B,MAE4B;;;;;;;eAuDtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAI6B,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAPE,MAOF,EACP,SAAS,wBAAA,EACT,UAAU,EAPD,MAOC,EACV,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,IAAI,CAAC,CAuDzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EANE,MAMF,EACP,SAAS,wBAAA,EACT,UAAU,EAND,MAMC,EACV,OAAO,KAAK,GAND,OAAO,CAAC,IAAI,CAAC,CA8CzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAPK,MAOL,EACJ,SAAS,wBAAA,EACT,MAAM,EAPG,MAOH,EACN,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAuBrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAH9B,MAG8B,GAF5B,MAAM,CAOlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAC/B,eAAe,EAPN,MAAM,GAAC,MAAM,EAOP,EACf,QAAQ,EAPC,MAOD,EACR,SAAS,AAPR,CACA,EADQ,MAOW,EACpB,OAAO,AAPN,CACA,EADQ,MAOG,GAND,OAAO,CAAC,MAAM,CAAC,CA0N3B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAJxB,MAIwB,EAAE,QAAQ,AAH1C,CACA,EADQ,MAGkC,GAFhC,MAAM,GAAC,SAAS,CA4B5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAJ5B,MAAM,EAIsB,EAAE,QAAQ,EAHtC,MAGsC,GAFpC;IAAE,eAAe,2BAAsB;IAAC,cAAc,2BAA0B;CAAE,CAiD9F;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAPC,MAOD,EACR,UAAU,EAPD,MAOC,EACV,OAAO,EAPE,MAOF,EACP,OAAO,EAPE,MAOF,GANI,SAAS,GAAC,MAAM,CAqC5B;AA4KD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAJnC,MAImC,EAAE,MAAM,EAH3C,MAG2C,GAFzC,MAAM,CAgClB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EARF,MAAM,GAAC,IAAI,GAAC,SAQV,EACX,OAAO,EAPE,MAOF,EACP,OAAO,GAPE,MAOG,EACZ,WAAW,AAPV,CACA,EADQ,MAOO,GANL,MAAM,CAmBlB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAHlC,MAGkC,EAAE,OAAO,EAF3C,MAE2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0gBrD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,OAAO,GARE,MAQG,GAPD;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAAC,CA0EpF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,cAAc,GARL,MAQU,EACnB,OAAO,GARE,MAQG,GAPD,MAAM,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,KAAA,EACR,UAAU,KAAA,EACV,QAAQ,KAAA,EACR,WAAW,KAAK,EAChB,eAAe,KAAK,EACpB,cAAc,KAAK,EACnB,eAAe,YAAY,eAuD5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EATC,MASD,EACR,mBAAmB,EATV,MASU,EACnB,KAAK,OAAA,EACL,QAAQ,EATC,MASD,EACR,eAAe,EATN,MASM,EACf,cAAc,EATL,MASK,iBA4Nf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,KAAA,EAAE,UAAU,OAAA,EAAE,cAAc,EAH9D,MAG8D,GAF5D,MAAM,CAsDlB;AA2LD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAL9B,MAK8B,EAAE,mBAAmB,yBAAA,EAAE,YAAY,EAHjE,MAGiE,GAF/D,OAAO,CA2EnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EANA,MAMA,EACT,eAAe,EANN,MAMM,EACf,WAAW,EANF,MAME,GALA,IAAI,CAqChB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,KAAK,OAAA,EAAE,WAAW,GAF1D,MAE+D,uBA2DzE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAJnC,MAImC,EAAE,gBAAgB,OAAA,EAAE,WAAW,EAFlE,MAEkE,QAgD5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAJnC,MAImC,EAAE,KAAK,EAH1C,MAG0C,GAFxC,MAAM,CAalB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAJ9B,MAI8B,EAAE,IAAI,EAHpC,MAGoC,GAFlC,MAAM,EAAE,GAAC,SAAS,CAwF9B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,cAAc,EAJ1C,MAI0C,EAAE,OAAO,EAHnD,MAGmD,gBA8M7D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EARC,MAQD,EACR,mBAAmB,EARV,MAQU,EACnB,aAAa,EARJ,MAQI,EACb,QAAQ,EARC,MAQD,EACR,gBAAgB,EARP,MAQO,EAChB,cAAc,EARL,MAQK,eA4Gf;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,EAAE,eAAe,EAFtD,MAEsD;;;;;;;;YAgFzD,SAAS;YACT,GAAG;;;;EASV;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,OAAA,qBA4DnC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAH9B,MAG8B,UAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAJvC,MAIuC,EAAE,YAAY,EAHrD,MAGqD,GAFnD,MAAM,GAAC,SAAS,CAmD5B"}
+{"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"AA6IA;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAJA,MAIA,EACT,kBAAkB,GAJT,MAAM,EAIQ,QAkBxB;AAyBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EALpC,MAKoC,EAAE,OAAO,AAJrD,CACA,EADQ,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,IAAI,EAJrC,MAIqC,EAAE,KAAK,EAH5C,MAG4C,GAF1C,MAAM,CA4ClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAN/B,MAM+B,GAJ7B;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAC,CAAC,CAAA;CAAC,CAW/E;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAFnC,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAEJ,QAQ7C;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAF5B,MAE4B;;;;;;;eAuDtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAI6B,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAPE,MAOF,EACP,SAAS,wBAAA,EACT,UAAU,EAPD,MAOC,EACV,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,IAAI,CAAC,CAuDzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EANE,MAMF,EACP,SAAS,wBAAA,EACT,UAAU,EAND,MAMC,EACV,OAAO,KAAK,GAND,OAAO,CAAC,IAAI,CAAC,CA8CzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAPK,MAOL,EACJ,SAAS,wBAAA,EACT,MAAM,EAPG,MAOH,EACN,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAuBrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAH9B,MAG8B,GAF5B,MAAM,CAOlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAC/B,eAAe,EAPN,MAAM,GAAC,MAAM,EAOP,EACf,QAAQ,EAPC,MAOD,EACR,SAAS,AAPR,CACA,EADQ,MAOW,EACpB,OAAO,AAPN,CACA,EADQ,MAOG,GAND,OAAO,CAAC,MAAM,CAAC,CA2N3B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAJxB,MAIwB,EAAE,QAAQ,AAH1C,CACA,EADQ,MAGkC,GAFhC,MAAM,GAAC,SAAS,CA4B5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAJ5B,MAAM,EAIsB,EAAE,QAAQ,EAHtC,MAGsC,GAFpC;IAAE,eAAe,2BAAsB;IAAC,cAAc,2BAA2B;IAAC,aAAa,yCAAwC;CAAE,CA+DrJ;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAPC,MAOD,EACR,UAAU,EAPD,MAOC,EACV,OAAO,EAPE,MAOF,EACP,OAAO,EAPE,MAOF,GANI,SAAS,GAAC,MAAM,CAqC5B;AA4KD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAJnC,MAImC,EAAE,MAAM,EAH3C,MAG2C,GAFzC,MAAM,CAgClB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EARF,MAAM,GAAC,IAAI,GAAC,SAQV,EACX,OAAO,EAPE,MAOF,EACP,OAAO,GAPE,MAOG,EACZ,WAAW,AAPV,CACA,EADQ,MAOO,GANL,MAAM,CAmBlB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAHlC,MAGkC,EAAE,OAAO,EAF3C,MAE2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAylBrD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,OAAO,GARE,MAQG,GAPD;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAAC,CAsEpF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,cAAc,GARL,MAQU,EACnB,OAAO,GARE,MAQG,GAPD,MAAM,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,KAAA,EACR,UAAU,KAAA,EACV,QAAQ,KAAA,EACR,WAAW,KAAK,EAChB,eAAe,KAAK,EACpB,cAAc,KAAK,EACnB,eAAe,YAAY,eAuD5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EATC,MASD,EACR,mBAAmB,EATV,MASU,EACnB,KAAK,OAAA,EACL,QAAQ,EATC,MASD,EACR,eAAe,EATN,MASM,EACf,cAAc,EATL,MASK,iBA4Of;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,KAAA,EAAE,UAAU,OAAA,EAAE,cAAc,EAH9D,MAG8D,GAF5D,MAAM,CAsDlB;AA2LD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAL9B,MAK8B,EAAE,mBAAmB,yBAAA,EAAE,YAAY,EAHjE,MAGiE,GAF/D,OAAO,CA2EnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EANA,MAMA,EACT,eAAe,EANN,MAMM,EACf,WAAW,EANF,MAME,GALA,IAAI,CAqChB;AAoBD,wBAAgB,wBAAwB,CAAC,QAAQ,KAAA,EAAE,KAAK,KAAA,EAAE,WAAW,KAAK,uBA2DzE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAJnC,MAImC,EAAE,gBAAgB,OAAA,EAAE,WAAW,EAFlE,MAEkE,QAgD5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAJnC,MAImC,EAAE,KAAK,EAH1C,MAG0C,GAFxC,MAAM,CAalB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAJ9B,MAI8B,EAAE,IAAI,EAHpC,MAGoC,GAFlC,MAAM,EAAE,GAAC,SAAS,CAwF9B;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAQ5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAHzC,MAGyC,GAFvC,MAAM,CAelB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,mBAAmB,EAH/C,MAG+C,GAF7C,MAAM,CAiBlB;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,cAAc,EAP1C,MAO0C,EAAE,OAAO,EANnD,MAMmD,GAHjD,OAAO,CAAC,MAAM,CAAC,CAwQ3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EARC,MAQD,EACR,mBAAmB,EARV,MAQU,EACnB,aAAa,EARJ,MAQI,EACb,QAAQ,EARC,MAQD,EACR,gBAAgB,EARP,MAQO,EAChB,cAAc,EARL,MAQK,eA4Gf;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,EAAE,eAAe,EAFtD,MAEsD;;;;;;;;YAgFzD,SAAS;YACT,GAAG;;;;EASV;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,OAAA,qBA4DnC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAH9B,MAG8B,UAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAJvC,MAIuC,EAAE,YAAY,EAHrD,MAGqD,GAFnD,MAAM,GAAC,SAAS,CAmD5B;AAgBD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAH7B,MAG6B,GAF3B,MAAM,GAAC,SAAS,CAY5B;AAiCD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EANG,MAMH,EACN,QAAQ,EANC,MAMD,EACR,cAAc,EANL,MAMK,EACd,eAAe,EANN,MAMM,QAoChB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EANL,MAMK,EACd,cAAc,EANL,MAMK,EACd,eAAe,EANN,MAMM,EACf,aAAa,AANZ,CACF,EADU,MAMS,QA2BnB"}

package/types/lib/evinser/scalasem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/evinser/scalasem.js"],"names":[],"mappings":"AAuBA;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAJjC,MAAM,EAI2B,EAAE,cAAc,EAHjD,MAGiD,GAF/C;IAAE,eAAe,2BAA0B;CAAE,CAgCzD"}
+{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/evinser/scalasem.js"],"names":[],"mappings":"AAyBA;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAJjC,MAAM,EAI2B,EAAE,cAAc,EAHjD,MAGiD,GAF/C;IAAE,eAAe,2BAA0B;CAAE,CAkCzD"}

package/types/lib/helpers/agenticToolutils.d.ts

@@ -1,17 +1,11 @@
+import { redactHomePath } from "../core/paths.js";
+export { redactHomePath };
 /**
  * The purl type used for installed agentic CLI tools. These tools ship as
  * self-contained executables rather than as a resolvable source package, so a
  * `pkg:generic/...` identifier is the honest representation.
  */
 export declare const AGENTIC_TOOL_PURL_TYPE = "generic";
-/**
- * Rewrite an absolute path under the user's home directory to a `~`-relative
- * form so the emitted BOM does not carry the local username.
- *
- * @param {string} filePath Absolute path
- * @returns {string} Home-relative path when applicable, else the input
- */
-export declare function redactHomePath(filePath: string): string;
 /**
  * Describe where each supported agentic CLI tool stores its per-user state.
  *
@@ -20,28 +14,56 @@ export declare function redactHomePath(filePath: string): string;
  * extension locations). Only the current platform's directories plus
  * always-present dot-directories are included.
  *
- * @returns {Array<{tool: string, name: string, dirs: string[], supportDirs?: string[]}>}
+ * An entry may also name `mcpConfigs`, the files and keys where the tool
+ * lists its MCP servers, and `ide`, the IDE_PRODUCTS id of the editor the tool
+ * ships in, whose installed version and extensions folder it then reports.
+ *
+ * @param {string} [home] Home directory to resolve the folders against
+ * @returns {Array<{tool: string, name: string, dirs: string[], supportDirs?: string[], mcpConfigs?: Array<{file: string, key: string}>, ide?: string}>}
  *   One entry per known agentic CLI tool.
  */
-export declare function getAgenticToolDirs(): Array<{
+export declare function getAgenticToolDirs(home?: string): Array<{
     tool: string;
     name: string;
     dirs: string[];
     supportDirs?: string[];
+    mcpConfigs?: Array<{
+        file: string;
+        key: string;
+    }>;
+    ide?: string;
 }>;
 /**
  * Discover which agentic CLI tools are installed for the current user by
  * checking their known home directories.
  *
- * @returns {Array<{tool: string, name: string, dir: string, supportDir?: string}>}
+ * @param {string} [home] Home directory to resolve the folders against
+ * @returns {Array<{tool: string, name: string, dir: string, supportDir?: string, mcpConfigs?: Object[], ide?: string}>}
  *   One entry per discovered tool, using the first existing directory.
  */
-export declare function discoverAgenticTools(): Array<{
+export declare function discoverAgenticTools(home?: string): Array<{
     tool: string;
     name: string;
     dir: string;
     supportDir?: string;
+    mcpConfigs?: Object[];
+    ide?: string;
 }>;
+/**
+ * Count the MCP servers a tool lists across its configuration files. A server
+ * named in two files is counted once.
+ *
+ * @param {string} dir Tool home directory, which relative files resolve against
+ * @param {Array<{file: string, key: string}>} [mcpConfigs] Files and the key
+ *   holding the server map. A key is looked up as written first, so a dotted
+ *   key such as `amp.mcpServers` matches a literal property.
+ * @returns {number|undefined} Number of servers, or undefined when no file
+ *   defines any
+ */
+export declare function countConfiguredMcpServers(dir: string, mcpConfigs?: Array<{
+    file: string;
+    key: string;
+}>): number | undefined;
 /**
  * Compute safe, redacted signal counts for a discovered tool. Only structural
  * counts and small enumerated values are returned; no credential, transcript,
@@ -50,14 +72,21 @@ export declare function discoverAgenticTools(): Array<{
  * @param {string} tool Tool key
  * @param {string} dir Discovered tool home directory
  * @param {string} [supportDir] Optional platform support directory
+ * @param {Array<{file: string, key: string}>} [mcpConfigs] Files that list
+ *   the tool's MCP servers, used when the tool has no reader of its own
+ * @param {string} [home] Home directory the tool was found in
  * @returns {Object} Map of signal name to count/boolean/small-string value
  */
-export declare function collectToolSignals(tool: string, dir: string, supportDir?: string): Object;
+export declare function collectToolSignals(tool: string, dir: string, supportDir?: string, mcpConfigs?: Array<{
+    file: string;
+    key: string;
+}>, home?: string): Object;
 /**
  * Build a CycloneDX application component for one discovered agentic tool.
  *
- * @param {{tool: string, name: string, dir: string, supportDir?: string}} entry
+ * @param {{tool: string, name: string, dir: string, supportDir?: string, mcpConfigs?: Object[], ide?: string}} entry
  *   Discovered tool entry
+ * @param {string} [home] Home directory, used to find the tool's editor
  * @returns {Object} CycloneDX component
  */
 export declare function componentForAgenticTool(entry: {
@@ -65,7 +94,9 @@ export declare function componentForAgenticTool(entry: {
     name: string;
     dir: string;
     supportDir?: string;
-}): Object;
+    mcpConfigs?: Object[];
+    ide?: string;
+}, home?: string): Object;
 /**
  * Discover installed agentic CLI tools on the current host and return CycloneDX
  * components describing each one, plus the child agents, plugins, and providers
@@ -73,13 +104,16 @@ export declare function componentForAgenticTool(entry: {
  *
  * This host scan is unconditional: it does not consult scan filters such as
  * `--exclude` or profile/technique options, because it inventories fixed tool
- * home directories rather than a project tree. The `options` argument is
- * accepted for signature parity and is intentionally not used to alter results.
+ * home directories rather than a project tree.
  *
- * @param {Object} [options={}] Collection options (accepted but not applied)
+ * @param {Object} [options={}] Collection options
+ * @param {string} [options.home] Home directory to scan, defaulting to the
+ *   current user's
  * @returns {{components: Object[], services: Object[], dependencies: Object[]}} Discovered inventory
  */
-export declare function collectAgenticTools(_options?: {}): {
+export declare function collectAgenticTools(options?: {
+    home?: string;
+}): {
     components: Object[];
     services: Object[];
     dependencies: Object[];

package/types/lib/helpers/agenticToolutils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agenticToolutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/agenticToolutils.js"],"names":[],"mappings":"AAYA;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YAAY,CAAC;AA8BhD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAH5B,MAG4B,GAF1B,MAAM,CAgBlB;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,IAHrB,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAC,CAAC,CAyGvF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,IAHvB,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAgBjF;AAoUD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAL5B,MAK4B,EAAE,GAAG,EAJjC,MAIiC,EAAE,UAAU,AAHrD,CACA,EADQ,MAG6C,GAF3C,MAAM,CAkClB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAJlC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAI3B,GAFhC,MAAM,CA8ClB;AA0OD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,KAAK,GAFpC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAoC9E"}
+{"version":3,"file":"agenticToolutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/agenticToolutils.js"],"names":[],"mappings":"AAUA,OAAO,EAAgB,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAQhE,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAiDhD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,AAJpC,CACA,EADQ,MAIwC,GAHtC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAgOtJ;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,AAJtC,CACA,EADQ,MAI0C,GAHxC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAuBtH;AA4eD;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAPlC,MAOkC,EAAE,UAAU,AANtD,CAGA,EAHQ,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAMa,GAH5C,MAAM,GAAC,SAAS,CAuB5B;AAkCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EATK,MASL,EACJ,GAAG,EATM,MASN,EACH,UAAU,AATT,CACA,EADQ,MASC,EACV,UAAU,AATT,CAEA,EAFQ,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAShC,EACV,IAAI,AARH,CACA,EADQ,MAQO,GAPL,MAAM,CAsBlB;AA6BD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EALlC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAKhE,EAAE,IAAI,AAHhD,CACA,EADQ,MAGoD,GAFlD,MAAM,CAqElB;AA0QD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,AALxC,CAGA,EAFA;IAAyB,IAAI,AAA7B,CAEA,EAFQ,MAAM,CAEd;CAE6C,GAFnC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CA0C9E"}

package/types/lib/helpers/bomSigner.d.ts

@@ -6,11 +6,18 @@ import crypto from "node:crypto";
  */
 export declare const MAX_SIGNATURE_ENTRIES = 32;
 /**
- * Members the CycloneDX 1.4 to 1.7 and 2.0 schemas define at the root of a
- * BOM. A root signature is only accepted on an object made of these members,
- * so a signed component, service, or annotation cannot pass as a signed BOM.
+ * Members the CycloneDX 1.4 to 1.7 schemas define at the root of a BOM, plus
+ * `specFormat`, which an early 2.0 draft used in place of `bomFormat`. A JSF
+ * root signature is only accepted on an object made of these members, so a
+ * signed component, service, or annotation cannot pass as a signed BOM.
  */
 export declare const BOM_ROOT_MEMBERS: readonly string[];
+/**
+ * Members the CycloneDX 2.0 draft schema defines at the root of a document.
+ * A JSS root signature (lib/helpers/jssSigner.js) is only accepted on an
+ * object made of these members.
+ */
+export declare const BOM_20_ROOT_MEMBERS: readonly string[];
 /**
  * Renders a value taken from a document for a message. JSON can make any field
  * an object or array, and interpolating those directly can throw.
@@ -19,6 +26,16 @@ export declare const BOM_ROOT_MEMBERS: readonly string[];
  * @returns {string} - Printable text
  */
 export declare function displayValue(value: any): string;
+/**
+ * Deterministic JSON canonicalizer following RFC 8785 (JCS), which JSF uses to
+ * produce the signed data. Values are serialized the way JSON.stringify would
+ * see them, so an in-memory object and its parsed JSON form canonicalize
+ * identically.
+ *
+ * @param {any} value - The JSON object/value to canonicalize
+ * @returns {string|undefined} - Canonicalized JSON string, or undefined for values JSON omits
+ */
+export declare function canonicalizeJson(value: any): string | undefined;
 /**
  * Wraps shared-secret material for HMAC (HS256, HS384, HS512) signing or
  * verification.

package/types/lib/helpers/bomSigner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bomSigner.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomSigner.js"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAyDjC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,mBAqB3B,CAAC;AAmBH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAHvB,GAGuB,GAFrB,MAAM,CAWlB;AA+LD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAGS,GAF5B,MAAM,CAAC,SAAS,CA2B5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAGA,GAF1B,MAAM,CAAC,SAAS,CAW5B;AAwBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,GAFnC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA2BrD;AAmYD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAdpB,MAcoB,EAAE,OAAO,GAZrC;IAAuD,UAAU,EAAzD,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAC7C;IAAyB,SAAS,AAAlC,CACA,EADQ,MAAM,CACd;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;IAA0B,cAAc,AAAxC,CACA,EADQ,OAAO,CACf;IAA0B,oBAAoB,AAA9C,CACA,EADQ,OAAO,CACf;IAAyB,KAAK,AAA9B,CACA,EADQ,MAAM,CACd;IAAyB,IAAI,AAA7B,CACA,EADQ,MAAM,CACd;IAA0B,cAAc,AAAxC,CACA,EADQ,OAAO,CACf;IAA0B,YAAY,AAAtC,CACA,EADQ,OAAO,CACf;IAA0B,eAAe,AAAzC,CACA,EADQ,OAAO,CACf;CAE0C,GAFhC,MAAM,CA4FlB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,UAAU,CAAC,IAAI,EANpB,MAMoB,EAAE,SAAS,EAL/B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAKG,EAAE,OAAO,AAJhD,CAEA,EADA;IAA2B,OAAO,AAAlC,CACA,EADQ,MAAM,EAAE,CAChB;CAEqD,GAF3C,OAAO,GAAC,MAAM,CAe1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAX5B,MAW4B,EAAE,IAAI,EAVlC,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAAC,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAUvC,EAAE,OAAO,AATnD,CAIA,EAHA;IAA0B,IAAI,AAA9B,CACA,EADQ,OAAO,CACf;IAA0B,eAAe,AAAzC,CACA,EADQ,OAAO,CACf;IAA0B,UAAU,AAApC,CACA,EADQ,OAAO,CACf;CAKwD,GAL9C;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAqH3G;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAepB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,GAAG,EALlB,MAKkB,EAAE,SAAS,EAJ7B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAIC,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,OAAO,GAAC,MAAM,CAc1B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAJ/B,MAI+B,EAAE,IAAI,AAH7C,CACA,EADQ,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAGD,GAFxC,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAoBtG"}
+{"version":3,"file":"bomSigner.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomSigner.js"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAyDjC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,mBAqB3B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,mBA0B9B,CAAC;AAmBH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAHvB,GAGuB,GAFrB,MAAM,CAWlB;AA+BD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAH3B,GAG2B,GAFzB,MAAM,GAAC,SAAS,CAoB5B;AAqID;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAGS,GAF5B,MAAM,CAAC,SAAS,CA2B5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAGA,GAF1B,MAAM,CAAC,SAAS,CAW5B;AAwBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,GAFnC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA2BrD;AAmYD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAdpB,MAcoB,EAAE,OAAO,GAZrC;IAAuD,UAAU,EAAzD,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAC7C;IAAyB,SAAS,AAAlC,CACA,EADQ,MAAM,CACd;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;IAA0B,cAAc,AAAxC,CACA,EADQ,OAAO,CACf;IAA0B,oBAAoB,AAA9C,CACA,EADQ,OAAO,CACf;IAAyB,KAAK,AAA9B,CACA,EADQ,MAAM,CACd;IAAyB,IAAI,AAA7B,CACA,EADQ,MAAM,CACd;IAA0B,cAAc,AAAxC,CACA,EADQ,OAAO,CACf;IAA0B,YAAY,AAAtC,CACA,EADQ,OAAO,CACf;IAA0B,eAAe,AAAzC,CACA,EADQ,OAAO,CACf;CAE0C,GAFhC,MAAM,CA4FlB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,UAAU,CAAC,IAAI,EANpB,MAMoB,EAAE,SAAS,EAL/B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAKG,EAAE,OAAO,AAJhD,CAEA,EADA;IAA2B,OAAO,AAAlC,CACA,EADQ,MAAM,EAAE,CAChB;CAEqD,GAF3C,OAAO,GAAC,MAAM,CAe1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAX5B,MAW4B,EAAE,IAAI,EAVlC,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAAC,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAUvC,EAAE,OAAO,AATnD,CAIA,EAHA;IAA0B,IAAI,AAA9B,CACA,EADQ,OAAO,CACf;IAA0B,eAAe,AAAzC,CACA,EADQ,OAAO,CACf;IAA0B,UAAU,AAApC,CACA,EADQ,OAAO,CACf;CAKwD,GAL9C;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAqH3G;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAepB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,GAAG,EALlB,MAKkB,EAAE,SAAS,EAJ7B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAIC,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,OAAO,GAAC,MAAM,CAc1B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAJ/B,MAI+B,EAAE,IAAI,AAH7C,CACA,EADQ,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAGD,GAFxC,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAoBtG"}