@cdxgen/cdxgen 13.5.0 → 13.7.0

package/types/lib/inventory/envcontext.d.ts

@@ -33,7 +33,8 @@ export declare function getOriginUrl(dir: string): string | undefined;
  * @param {string} configKey Git config key
  * @param {string} dir repo directory
  *
- * @returns Output from git config or undefined
+ * @returns {string|undefined} The branch name, or undefined when git fails,
+ * for example when the directory is not a git working tree or has no commit
  */
 export declare function getBranch(_configKey: any, dir: string): string | undefined;
 /**
@@ -44,19 +45,28 @@ export declare function getBranch(_configKey: any, dir: string): string | undefi
  */
 export declare function gitTreeHashes(dir: string): {};
 /**
- * Retrieves the files list from git
- * @param {string} dir repo directory
+ * Retrieves the files git tracks under a directory at HEAD. Only the
+ * directory's own subtree is listed, with names relative to it, so a scan of
+ * one directory of a larger repository does not record the rest of that
+ * repository.
  *
- * @returns Output from git config or undefined
+ * @param {string} dir directory inside a git working tree
+ *
+ * @returns {Object[]} files with their blob hash, name, OmniBOR id and SWHID;
+ * empty when git fails, for example when the directory is not a git working
+ * tree or has no commit
  */
-export declare function listFiles(dir: string): any[];
+export declare function listFiles(dir: string): Object[];
 /**
  * Execute a git command
  *
  * @param {string} dir Repo directory
  * @param {Array} args arguments to git command
  *
- * @returns Output from the git command
+ * @returns {string|undefined} git's standard output, or undefined when git
+ * could not run or exited with a non-zero status. Text git writes to standard
+ * error, including warnings of a successful command, is never part of the
+ * result.
  */
 export declare function execGitCommand(dir: string, args: any[]): string | undefined;
 /**
@@ -102,6 +112,12 @@ export declare function collectJavaInfo(dir: string): {
 /**
  * Collect dotnet version
  *
+ * `version` is the version `dotnet --version` prints, which is the SDK's. .NET
+ * advisories name runtime versions, so the component itself carries no purl
+ * and no CPE. Each shared framework `dotnet --list-runtimes` reports is a
+ * nested component built by createHostDotnetRuntimeComponent, without a
+ * bom-ref like the other toolchains.
+ *
  * @param {string} dir Working directory
  * @returns Object containing dotnet details
  */
@@ -177,16 +193,51 @@ export declare function collectSwiftInfo(dir: string): {
     version: string;
 } | undefined;
 /**
- * Collect Ruby version
+ * Whether a Ruby executable is one the operating system or a package manager
+ * that patches it owns. Distros backport fixes under the old upstream version,
+ * so its version must not be matched against upstream advisories by CPE.
+ *
+ * @param {string|undefined} realPath real path of the executable
+ * @returns {boolean}
+ */
+export declare function isPackagedRubyPath(realPath: string | undefined): boolean;
+/**
+ * Collect the Ruby on the PATH.
+ *
+ * `ruby --version` prints the interpreter's description, such as
+ * `ruby 3.3.6 (2024-11-05 revision 75015d4c1f) [x86_64-linux]`, which is kept
+ * as the component description. The identity is `pkg:generic/ruby@3.3.6`
+ * (or jruby, truffleruby), with the CPE of the release unless a package
+ * manager owns the executable: a distro backports fixes under the old upstream
+ * version.
  *
  * @param {string} dir Working directory
  * @returns Object containing Ruby details
  */
-export declare function collectRubyInfo(dir: string): {
-    type: string;
-    name: string;
-    version: string;
-} | undefined;
+export declare function collectRubyInfo(dir: string): Object | undefined;
+/**
+ * Whether the Ruby collectRubyInfo found is the MRI release a project needs.
+ *
+ * @param {Object|undefined} info result of collectRubyInfo
+ * @param {string} version wanted MRI version
+ * @returns {boolean}
+ */
+export declare function isRubyVersionActive(info: Object | undefined, version: string): boolean;
+/**
+ * Collect the RubyGems version. `gem --version` prints the bare version.
+ *
+ * @param {string} dir Working directory
+ * @returns {Object|undefined} the RubyGems component
+ */
+export declare function collectRubyGemsInfo(dir: string): Object | undefined;
+/**
+ * Collect the Bundler version. `bundle --version` prints `Bundler version
+ * 2.5.22`, or the bare version from Bundler 2.6 on.
+ *
+ * @param {string} dir Working directory
+ * @returns {Object|undefined} the Bundler component
+ */
+export declare function collectBundlerInfo(dir: string): Object | undefined;
 /**
  * Collect the PHP version of the PHP found on the PATH.
  *
@@ -381,6 +432,17 @@ export declare function gitAiNotes(dir: string, options?: {
  * @returns {Array<Object>} Array of { hash, message } revert/hotfix commits
  */
 export declare function gitRevertsAndHotfixes(dir: string, maxCount?: number): Array<Object>;
+/**
+ * Whether the running Node.js links a bundled dependency as a shared library,
+ * from the `node_shared_<name>` configure variables it reports.
+ *
+ * @param {string} name key of process.versions
+ * @param {Object} [variables] configure variables, process.config.variables
+ *   by default
+ * @returns {string|undefined} `shared`, `bundled`, or undefined when the build
+ *   does not say
+ */
+export declare function nodeComponentLinkage(name: string, variables?: Object): string | undefined;
 /**
  * Get information about the runtime.
  *

package/types/lib/inventory/envcontext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envcontext.d.ts","sourceRoot":"","sources":["../../../lib/inventory/envcontext.js"],"names":[],"mappings":"AAyDA;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAFd,MAE4D,CAAC;AAwDvE;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAapC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAL3B,MAK2B,EAAE,GAAG,EAJhC,MAIgC,sBAE1C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAJrB,MAIqB,sBAE/B;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,UAAU,KAAA,EAAE,GAAG,EAJ9B,MAI8B,sBAExC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAJtB,MAIsB,MAkBhC;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAJlB,MAIkB,SA4B5B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,IAAI,OAAA,sBAiBvC;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EALtB,MAKsB,EAAE,QAAQ,GAJhC,MAIqC,GAFnC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CAAC,CA+BhD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,QAAQ,GAJjC,MAIsC,GAFpC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CA8BlD;AA0DD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;;;;;cAsBlC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAgBpC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAiBpC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB,GAFtB,MAAM,CAkBlB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB;;;;;cAejC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;cAelC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAHtB,MAGsB;;;;cAahC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAHzB,MAGyB;;;;cAanC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;cAalC;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB,sBAuBjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAG4B,sBAkCtC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,QAAA,EAAE,IAAI,OAAA,sBAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,OAAO,AAJxC,CAEA,EAFQ,MAI4C,GAF1C,MAAM,EAAE,CAqDpB;AA6CD;;GAEG;AACH,wBAAgB,iBAAiB,YAiBhC;AAED;;GAEG;AACH,wBAAgB,cAAc,YAO7B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA0BvD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA8GnD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,QAAA,UA8B3C;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA,UA8B9C;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,YAgB/B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAH/B,MAG+B,GAF7B,MAAM,CAWlB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,KAAA,EAAE,aAAa,KAAA,EAAE,QAAQ,KAAA,WAuC3E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA;;;;;;EA2HvD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,cAAc,KAAA,WA2D7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,KAAA,EACb,WAAW,KAAA,EACX,aAAa,KAAA,EACb,QAAQ,KAAA,GANG,OAAO,CA+MnB;AAmDD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CAmDzB;AAyDD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,UAAU,EAH1C,MAG0C,GAFxC,MAAM,CA6FlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EANnB,MAMmB,EAAE,OAAO,AALpC,CAGA,EAFA;IAAyB,GAAG,AAA5B,CACA,EADQ,MAAM,CACd;IAAyB,QAAQ,AAAjC,CACA,EADQ,MAAM,CACd;CAEyC,GAF/B,KAAK,CAAC,MAAM,CAAC,CA4CzB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CA+BzB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,CA4GlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,WAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,IAF9B,MAAM,GAAC,SAAS,CAc5B"}
+{"version":3,"file":"envcontext.d.ts","sourceRoot":"","sources":["../../../lib/inventory/envcontext.js"],"names":[],"mappings":"AAsEA;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAFd,MAE4D,CAAC;AAwDvE;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,wBAkBpC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAL3B,MAK2B,EAAE,GAAG,EAJhC,MAIgC,sBAE1C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAJrB,MAIqB,sBAE/B;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,UAAU,KAAA,EAAE,GAAG,EAL9B,MAK8B,GAH5B,MAAM,GAAC,SAAS,CAK5B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAJtB,MAIsB,MAkBhC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,GAAG,EANlB,MAMkB,GAJhB,MAAM,EAAE,CA0BpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,GAAG,EARvB,MAQuB,EAAE,IAAI,OAAA,GAL3B,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EALtB,MAKsB,EAAE,QAAQ,GAJhC,MAIqC,GAFnC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,CAAC,CA+BhD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,QAAQ,GAJjC,MAIsC,GAFpC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CA8BlD;AA0ED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;;;;;cAsBlC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cA+BpC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B,MAG0B;;;;;cAiBpC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB,GAFtB,MAAM,CA4BlB;AAgCD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB;;;;;cAejC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB;;;;;cAelC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAHtB,MAGsB;;;;cAahC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAHzB,MAGyB;;;;cAanC;AAoCD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAAM,GAAC,SAGyB,GAF9B,OAAO,CAenB;AA+BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAHxB,MAGwB,sBA2ClC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAJ7B,MAAM,GAAC,SAIsB,EAAE,OAAO,EAHtC,MAGsC,GAFpC,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAsB5B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CAyB5B;AA0BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAHvB,MAGuB,sBAuBjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAG4B,sBAkCtC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,QAAA,EAAE,IAAI,OAAA,sBAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EALvB,MAKuB,EAAE,OAAO,AAJxC,CAEA,EAFQ,MAI4C,GAF1C,MAAM,EAAE,CA6DpB;AA0FD;;GAEG;AACH,wBAAgB,iBAAiB,YAiBhC;AAED;;GAEG;AACH,wBAAgB,cAAc,YAO7B;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA0BvD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,EAAE,QAAQ,QAAA,WA8GnD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,QAAA,UA8B3C;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA,UA8B9C;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,YAgB/B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAH/B,MAG+B,GAF7B,MAAM,CAWlB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,KAAA,EAAE,aAAa,KAAA,EAAE,QAAQ,KAAA,WAuC3E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,QAAQ,KAAA;;;;;;EA2HvD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,KAAA,EAAE,cAAc,KAAA,WA2D7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,KAAA,EACb,WAAW,KAAA,EACX,aAAa,KAAA,EACb,QAAQ,KAAA,GANG,OAAO,CA+MnB;AAmDD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CAmDzB;AAyDD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,UAAU,EAH1C,MAG0C,GAFxC,MAAM,CA6FlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EANnB,MAMmB,EAAE,OAAO,AALpC,CAGA,EAFA;IAAyB,GAAG,AAA5B,CACA,EADQ,MAAM,CACd;IAAyB,QAAQ,AAAjC,CACA,EADQ,MAAM,CACd;CAEyC,GAF/B,KAAK,CAAC,MAAM,CAAC,CA4CzB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAJ9B,MAI8B,EAAE,QAAQ,GAHxC,MAG6C,GAF3C,KAAK,CAAC,MAAM,CAAC,CA+BzB;AAUD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAPK,MAOL,EACJ,SAAS,AAPR,CAEA,EAFQ,MAOwC,GALtC,MAAM,GAAC,SAAS,CAa5B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,CAsHlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,WAUpC;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,IAF9B,MAAM,GAAC,SAAS,CAc5B"}

package/types/lib/inventory/evidenceUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evidenceUtils.d.ts","sourceRoot":"","sources":["../../../lib/inventory/evidenceUtils.js"],"names":[],"mappings":"AA6CA;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CA8B5B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAHxC,MAGwC,GAFtC,MAAM,CAalB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAJ1B,MAAM,EAAE,GAAC,MAIiB,EAAE,SAAS,UAAA,GAFnC,MAAM,EAAE,CAmDpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAJjC,MAAM,GAAC,MAAM,EAIoB,EAAE,QAAQ,EAH3C,MAAM,EAGqC,GAFzC,MAAM,GAAC,MAAM,EAAE,CAwB3B;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAPjC,MAAM,EAO2B,EAAE,UAAU,EAN7C,MAM6C,EAAE,OAAO,AAL9D,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAEmE,GAFzD,MAAM,EAAE,CAsQpB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EANJ,MAMI,EACb,QAAQ,EANC,MAMD,EACR,OAAO,OAAA,EACP,OAAO,UAAQ,EACf,gBAAgB,YAAY,SAsO7B;AA6ID;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAAM,EAG0B,GAF9B,MAAM,EAAE,CAqCpB;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAHlC,MAAM,EAG4B,GAFhC,MAAM,EAAE,CAgEpB"}
+{"version":3,"file":"evidenceUtils.d.ts","sourceRoot":"","sources":["../../../lib/inventory/evidenceUtils.js"],"names":[],"mappings":"AA+CA;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,EAAE,OAAO,AAHvD,CACA,EADQ,MAGoD,GAFlD,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAJ7C,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CA8B5B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAHxC,MAGwC,GAFtC,MAAM,CAalB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAJ1B,MAAM,EAAE,GAAC,MAIiB,EAAE,SAAS,UAAA,GAFnC,MAAM,EAAE,CAmDpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAJjC,MAAM,GAAC,MAAM,EAIoB,EAAE,QAAQ,EAH3C,MAAM,EAGqC,GAFzC,MAAM,GAAC,MAAM,EAAE,CAwB3B;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAPjC,MAAM,EAO2B,EAAE,UAAU,EAN7C,MAM6C,EAAE,OAAO,AAL9D,CAGA,EAFA;IAAyB,OAAO,AAAhC,CAEA,EAFQ,MAAM,CAEd;CAEmE,GAFzD,MAAM,EAAE,CAsQpB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EANJ,MAMI,EACb,QAAQ,EANC,MAMD,EACR,OAAO,OAAA,EACP,OAAO,UAAQ,EACf,gBAAgB,YAAY,SA6O7B;AAgJD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAAM,EAG0B,GAF9B,MAAM,EAAE,CAqCpB;AAgCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAHlC,MAAM,EAG4B,GAFhC,MAAM,EAAE,CAgEpB"}

package/types/lib/inventory/formulationParsers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formulationParsers.d.ts","sourceRoot":"","sources":["../../../lib/inventory/formulationParsers.js"],"names":[],"mappings":"AA0GA;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAF1B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAEvB,QAkBpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,IAFb,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,CAAC,CAItE;AAgDD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAZnC,MAYmC,EAAE,OAAO,EAX5C,MAW4C,EAAE,OAAO,AAT7D,CAIA,EAJQ,MAS0D,GALxD;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAwN7D"}
+{"version":3,"file":"formulationParsers.d.ts","sourceRoot":"","sources":["../../../lib/inventory/formulationParsers.js"],"names":[],"mappings":"AA6HA;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAF1B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAEvB,QAkBpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,IAFb,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,WAAU;CAAE,CAAC,CAItE;AAqGD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAZnC,MAYmC,EAAE,OAAO,EAX5C,MAW4C,EAAE,OAAO,AAT7D,CAIA,EAJQ,MAS0D,GALxD;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CA8P7D"}

package/types/lib/inventory/gtfobins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/inventory/gtfobins.js"],"names":[],"mappings":"AAwJA;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAL7B,MAK6B,EAAE,UAAU,AAJjD,CACA,EADQ,MAIyC,GAHvC,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,UAAU,AAHtD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CAmCpB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,aAAa,EAJlD,MAIkD,EAAE,GAAG,EAHvD,MAGuD,GAFrD,KAAK,CAAC,MAAM,CAAC,CA0FzB"}
+{"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/inventory/gtfobins.js"],"names":[],"mappings":"AAiKA;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAL7B,MAK6B,EAAE,UAAU,AAJjD,CACA,EADQ,MAIyC,GAHvC,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,UAAU,AAHtD,CACA,EADQ,MAG8C,GAF5C,MAAM,EAAE,CAmCpB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,aAAa,EAJlD,MAIkD,EAAE,GAAG,EAHvD,MAGuD,GAFrD,KAAK,CAAC,MAAM,CAAC,CA8FzB"}

package/types/lib/inventory/hbom.d.ts

@@ -48,6 +48,17 @@ export declare function normalizeHbomOptions(options?: object): object;
  * @returns {Object} The same BOM with refreshed analysis properties
  */
 export declare function addHbomAnalysisProperties(bomJson: Object): Object;
+/**
+ * The 1.x-shaped model of a collector result. cdxgen asks the collector for
+ * 1.7; a collector that still answers with a CycloneDX 2.0 document (a
+ * `specFormat`, or specVersion 2.0) is read with readCycloneDx20, so the
+ * 1.x pipeline that follows never mistakes it for a 1.x BOM and loses its
+ * inventories.
+ *
+ * @param {object} collected What collectHardware returned
+ * @returns {object} The 1.x-shaped HBOM
+ */
+export declare function toInternalHbom(collected: object): object;
 /**
  * Generate an HBOM using the optional cdx-hbom package.
  *

package/types/lib/inventory/hbom.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hbom.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hbom.js"],"names":[],"mappings":"AAiWA;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAHpC,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAGU,GAFlC,OAAO,CAMnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAHxC,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAGc,GAFtC,OAAO,CAUnB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAF/C,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAEqB,QAgBzD;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAF/C,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,IAEuB,QAOzD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,AAH7C,CACA,EADQ,MAG0C,EAAE,WAAW,AAF/D,CACF,EADU,MAEgE,QAmB1E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,AAHzC,CACA,EADQ,MAGsC,GAFpC,MAAM,CA8BlB;AA8GD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAHtC,MAGsC,GAFpC,MAAM,CA8HlB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,AAH7C,CACA,EADQ,MAG0C,GAFxC,OAAO,CAAC,MAAM,CAAC,CAiC3B"}
+{"version":3,"file":"hbom.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hbom.js"],"names":[],"mappings":"AAoWA;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAHpC,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAGU,GAFlC,OAAO,CAMnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAHxC,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAGc,GAFtC,OAAO,CAUnB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAF/C,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAEqB,QAgBzD;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAF/C,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,IAEuB,QAQzD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,AAH7C,CACA,EADQ,MAG0C,EAAE,WAAW,AAF/D,CACF,EADU,MAEgE,QAmB1E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,AAHzC,CACA,EADQ,MAGsC,GAFpC,MAAM,CAkClB;AA8GD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAHtC,MAGsC,GAFpC,MAAM,CA8HlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAH7B,MAG6B,GAF3B,MAAM,CAsBlB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,AAH7C,CACA,EADQ,MAG0C,GAFxC,OAAO,CAAC,MAAM,CAAC,CAgC3B"}

package/types/lib/inventory/hbomLoader.d.ts

@@ -1,7 +1,61 @@
+/**
+ * The places cdx-hbom is loaded from, in order: a local checkout next to
+ * cdxgen, else the installed package.
+ */
+export declare const HBOM_MODULE_LOCATIONS: Readonly<{
+    localModulePath: any;
+    localMapperPath: any;
+    packageMapperSpecifier: "@cdxgen/cdx-hbom/cdx20";
+}>;
 /**
  * Resolve the optional cdx-hbom module.
  *
  * @returns {Promise<object>} Loaded cdx-hbom module namespace.
  */
 export declare function importHbomModule(): Promise<object>;
+/**
+ * Load the optional CycloneDX 2.0 hardware mapper,
+ * `toCdx20HardwareComponent`, from the same cdx-hbom that importHbomModule
+ * loads: the local checkout when it exists (its src/common/cdx20.js), else
+ * the installed package's `./cdx20` export. A cdx-hbom without the mapper
+ * (the published 0.7.0 has no `./cdx20` export) or one that fails to load
+ * gives null, and the 2.0 render then keeps its generic conversion.
+ *
+ * @param {object} [locations] Where to look; defaults to
+ *   HBOM_MODULE_LOCATIONS
+ * @returns {Promise<Function|null>} The mapper, or null
+ */
+export declare function loadHardwareMapper(locations?: object): Promise<Function | null>;
+/** The identifier policy cdx-hbom records when raw identifiers were kept. */
+export declare const RAW_IDENTIFIER_POLICY = "raw-identifiers-enabled";
+/**
+ * The identifier policy the collector recorded for the run, on the HBOM
+ * subject (`metadata.component`) or in `metadata.properties`.
+ *
+ * @param {object} internalBom The 1.x-shaped internal model
+ * @returns {string|undefined} The `cdx:hbom:identifierPolicy` value
+ */
+export declare function recordedIdentifierPolicy(internalBom: object): string | undefined;
+/**
+ * The renderCycloneDx20 context for an internal model: the hardware mapper
+ * and its identifier options when the model has a component with a
+ * cdx:hbom:* property and a mapper is available, otherwise an empty context,
+ * so a BOM without hardware never loads cdx-hbom. Hardware identifiers are
+ * asserted only when the collector recorded `raw-identifiers-enabled` for the
+ * run (it does when HBOM generation was asked to include sensitive
+ * identifiers); a redacted run never yields identifiers, whichever command
+ * renders it.
+ *
+ * @param {object} internalBom The 1.x-shaped internal model
+ * @param {object} [locations] Passed to loadHardwareMapper
+ * @returns {Promise<{hardwareMapper?: Function, hardwareOptions?: {includeSensitiveIdentifiers: boolean, identifierPolicy?: string}}>}
+ *   The render context
+ */
+export declare function hardwareRenderContext(internalBom: object, locations?: object): Promise<{
+    hardwareMapper?: Function;
+    hardwareOptions?: {
+        includeSensitiveIdentifiers: boolean;
+        identifierPolicy?: string;
+    };
+}>;
 //# sourceMappingURL=hbomLoader.d.ts.map

package/types/lib/inventory/hbomLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hbomLoader.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hbomLoader.js"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,wBAAsB,gBAAgB,IAFzB,OAAO,CAAC,MAAM,CAAC,CAqB3B"}
+{"version":3,"file":"hbomLoader.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hbomLoader.js"],"names":[],"mappings":"AAeA;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;EAIhC,CAAC;AAEH;;;;GAIG;AACH,wBAAsB,gBAAgB,IAFzB,OAAO,CAAC,MAAM,CAAC,CAqB3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,AAJ/C,CAEA,EAFQ,MAI+D,GAF7D,OAAO,CAAC,WAAS,IAAI,CAAC,CA2BlC;AAgCD,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAE/D;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAHzC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAe5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,WAAW,EAL5C,MAK4C,EAAE,SAAS,AAJ/D,CACA,EADQ,MAIuD,GAHrD,OAAO,CAAC;IAAC,cAAc,CAAC,WAAW;IAAC,eAAe,CAAC,EAAE;QAAC,2BAA2B,EAAE,OAAO,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAC,CAAA;CAAC,CAAC,CAmBrI"}

package/types/lib/inventory/hostRuntimeProbe.d.ts

@@ -0,0 +1,44 @@
+export declare function listDirectory(directory: any): any;
+export declare function isDirectory(path: any): any;
+/**
+ * Look for a runtime no package manager owns, in the directories a spec names.
+ * Components come back only for the files nothing owns: a `file` component for
+ * each runtime binary or library the spec could read a build from, the
+ * components the spec's inventory builds from them, and the edges between them.
+ *
+ * @param {Object} options probe options, as probeHostPhp documents them
+ * @param {Object} spec the runtime: `label`, `ecosystem`, `capability`,
+ *   `remediationId` (a remediation catalog id, spelled out by the caller),
+ *   `maxProbes`, `directories(context)`, `classify(name, platform)`,
+ *   `readBuild(context, candidate)`, `createInventory()`,
+ *   `attach(inventory, component, build, candidate)`, `finish(inventory)`,
+ *   optional `chocolateyPackages` and `chocolateyDirectories(context)` (where
+ *   those packages unpack outside Chocolatey's folder), and `hooks` carrying
+ *   the caller's
+ *   `isDryRun`, `readEnvironmentVariable`, `recordActivity` and
+ *   `recordDegradation`
+ * @returns {{components: Object[], dependencies: Object[]}}
+ */
+export declare function probeHostRuntime(options: Object, spec: Object): {
+    components: Object[];
+    dependencies: Object[];
+};
+/**
+ * Ask the package databases of a POSIX host which package owns each path.
+ * The paths are named as the host names them (`/usr/lib/ruby/...`). A
+ * database that exists but cannot be read is reported, so the caller can tell
+ * "no owner" from "unknown".
+ *
+ * @param {Object} options probe options, as probeHostRuntime takes them
+ * @param {string[]} paths logical paths to look up
+ * @returns {{owners: Map<string, {database: string, packageName: string}>,
+ *   unreadable: string[]}}
+ */
+export declare function findHostPathOwners(options: Object, paths: string[]): {
+    owners: Map<string, {
+        database: string;
+        packageName: string;
+    }>;
+    unreadable: string[];
+};
+//# sourceMappingURL=hostRuntimeProbe.d.ts.map

package/types/lib/inventory/hostRuntimeProbe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostRuntimeProbe.d.ts","sourceRoot":"","sources":["../../../lib/inventory/hostRuntimeProbe.js"],"names":[],"mappings":"AAmDA,wBAAgB,aAAa,CAAC,SAAS,KAAA,OAMtC;AAED,wBAAgB,WAAW,CAAC,IAAI,KAAA,OAM/B;AAgeD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAb7B,MAa6B,EAAE,IAAI,EAZnC,MAYmC,GAFjC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CA2D1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,KAAK,EAJtC,MAAM,EAIgC,GAHpC;IAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IACtE,UAAU,EAAE,MAAM,EAAE,CAAA;CAAC,CAqDzB"}

package/types/lib/inventory/jvmLocalRepos.d.ts

@@ -84,7 +84,11 @@ export declare function coursierCacheDir(): string | undefined;
  */
 export declare function coursierPrefixToUrl(parts: string[]): string | null;
 /**
- * Locate a Maven coordinate's directory in the Coursier cache.
+ * Locate a Maven coordinate's directory in the Coursier cache. Coursier
+ * leaves an empty version directory behind in every repository it asked and
+ * missed, so a directory counts only when it holds the artifact's jar or POM;
+ * otherwise a project's own module would be credited to whichever repository
+ * the build happened to probe first.
  *
  * @param {string} group Maven groupId.
  * @param {string} name Maven artifactId, including any Scala suffix.

package/types/lib/inventory/jvmLocalRepos.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jvmLocalRepos.d.ts","sourceRoot":"","sources":["../../../lib/inventory/jvmLocalRepos.js"],"names":[],"mappings":"AA2CA;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAF1B,IAAI,CAShB;AAuDD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAH7C,MAG6C,GAF3C,MAAM,GAAC,SAAS,CAkC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAJvB,MAAM,EAIiB,EAAE,OAAO,AAHxC,CACA,EADQ,MAGgD,GAF9C;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAC,CA8BvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAJnC,MAImC,EAAE,EAAE,UAAkB,EAAE,AAHnE,CACA,EADQ;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAG2C,GAF9D;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,GAAC,eAAe,CAAA;CAAC,CAuB5F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,UAAU,EAAE,AAJlD,CAEA,EADA;IAAsB,UAAU,AAAhC,CACA,EADQ,MAAM,CACd;CAEuD,GAF7C,MAAM,EAAE,CAuDpB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,IAFnB,MAAM,EAAE,CAqBpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAFnB,MAAM,GAAC,SAAS,CAsB5B;AAiDD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAH9B,MAAM,EAGwB,GAF5B,MAAM,GAAC,IAAI,CAqBvB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EALhC,MAKgC,EAAE,IAAI,EAJtC,MAIsC,EAAE,OAAO,EAH/C,MAG+C,GAF7C;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,GAAC,IAAI,CAoC/C;AA2CD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EATjC,MASiC,EAAE,IAAI,EARvC,MAQuC,EAAE,OAAO,EAPhD,MAOgD,EAAE,IAAI,AAN9D,CAIA,EAHA;IAAsB,UAAU,AAAhC,CACA,EADQ,MAAM,CACd;IAAsB,SAAS,AAA/B,CACA,EADQ,MAAM,CACd;IAAsB,UAAU,AAAhC,CACA,EADQ,MAAM,CACd;CAEmE,GAFzD;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAC,GAAC,IAAI,CAmFtF;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EANnC,MAMmC,EAAE,IAAI,EALzC,MAKyC,EAAE,OAAO,EAJlD,MAIkD,GAHhD;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAsB7D;AA0ED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAH3C,MAG2C,GAFzC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAmD1H;AAiHD;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAHpC,MAGoC,GAFlC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAqBzH"}
+{"version":3,"file":"jvmLocalRepos.d.ts","sourceRoot":"","sources":["../../../lib/inventory/jvmLocalRepos.js"],"names":[],"mappings":"AA2CA;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAF1B,IAAI,CAShB;AAuDD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAH7C,MAG6C,GAF3C,MAAM,GAAC,SAAS,CAkC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAJvB,MAAM,EAIiB,EAAE,OAAO,AAHxC,CACA,EADQ,MAGgD,GAF9C;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAC,CA8BvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAJnC,MAImC,EAAE,EAAE,UAAkB,EAAE,AAHnE,CACA,EADQ;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAG2C,GAF9D;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,GAAC,eAAe,CAAA;CAAC,CAuB5F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,UAAU,EAAE,AAJlD,CAEA,EADA;IAAsB,UAAU,AAAhC,CACA,EADQ,MAAM,CACd;CAEuD,GAF7C,MAAM,EAAE,CAuDpB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,IAFnB,MAAM,EAAE,CAqBpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAFnB,MAAM,GAAC,SAAS,CAsB5B;AAiDD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAH9B,MAAM,EAGwB,GAF5B,MAAM,GAAC,IAAI,CAqBvB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EALhC,MAKgC,EAAE,IAAI,EAJtC,MAIsC,EAAE,OAAO,EAH/C,MAG+C,GAF7C;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,GAAC,IAAI,CAuC/C;AA2CD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EATjC,MASiC,EAAE,IAAI,EARvC,MAQuC,EAAE,OAAO,EAPhD,MAOgD,EAAE,IAAI,AAN9D,CAIA,EAHA;IAAsB,UAAU,AAAhC,CACA,EADQ,MAAM,CACd;IAAsB,SAAS,AAA/B,CACA,EADQ,MAAM,CACd;IAAsB,UAAU,AAAhC,CACA,EADQ,MAAM,CACd;CAEmE,GAFzD;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAC,GAAC,IAAI,CAmFtF;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EANnC,MAMmC,EAAE,IAAI,EALzC,MAKyC,EAAE,OAAO,EAJlD,MAIkD,GAHhD;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAsB7D;AA0ED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAH3C,MAG2C,GAFzC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAmD1H;AAiHD;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAHpC,MAGoC,GAFlC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CAqBzH"}

package/types/lib/inventory/jvmToolEnv.d.ts

@@ -126,6 +126,18 @@ export declare function determineRequiredJavaVersion(toolPins: Array<{
  * @returns {string|undefined} Minimum Gradle version, when capped.
  */
 export declare function minimumGradleVersionForJava(javaMajor: number): string | undefined;
+/**
+ * Pick the newest stable Gradle version from `sdk list` output that can run on
+ * the given JDK major. Without a known cap this is the newest stable version,
+ * matching the plain default install; with a cap, versions below it are
+ * skipped so a project that declared a new JDK never gets a Gradle that
+ * refuses to run on it, even when the sdkman list is stale.
+ *
+ * @param {string} stdout Raw `sdk list gradle` output
+ * @param {number|undefined} javaMajor JDK major the Gradle daemon must run on
+ * @returns {string|undefined} Best matching version identifier.
+ */
+export declare function resolveGradleVersionForJava(stdout: string, javaMajor: number | undefined): string | undefined;
 /**
  * Collect the version tokens printed by `sdk list <candidate>`. The output is
  * a fixed-width table whose cells may carry `+`, `*`, or `>` status markers;

package/types/lib/inventory/jvmToolEnv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jvmToolEnv.d.ts","sourceRoot":"","sources":["../../../lib/inventory/jvmToolEnv.js"],"names":[],"mappings":"AAMA,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,gBAAgB,EAChB,mBAAmB,GACpB,CAAC;AAuBF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAHjC,MAGiC,GAF/B,OAAO,CASnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EALxC,MAKwC,GAJtC,MAAM,GAAC,SAAS,CAmB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAJ3B,MAI2B,GAHzB,MAAM,GAAC,SAAS,CA4C5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,GAHpC,MAAM,GAAC,SAAS,CAwC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,GAHnC,MAAM,GAAC,SAAS,CAgC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAH9C,MAG8C,GAF5C,MAAM,GAAC,SAAS,CAkB5B;AAsDD;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,iDAKjC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,wBAM5B,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,OAAO,EAH3C,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAY5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAH1C,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAGK,GAFxC,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAH1C,MAG0C,GAFxC,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAgBpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAJjC,MAIiC,EAAE,MAAM,EAHzC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAHjC,MAGiC,GAF/B,MAAM,GAAC,SAAS,CAS5B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAHhC,MAGgC,GAF9B,MAAM,GAAC,SAAS,CAS5B;AASD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAHvC,MAGuC,GAFrC,MAAM,GAAC,SAAS,CAuB5B"}
+{"version":3,"file":"jvmToolEnv.d.ts","sourceRoot":"","sources":["../../../lib/inventory/jvmToolEnv.js"],"names":[],"mappings":"AAMA,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,gBAAgB,EAChB,mBAAmB,GACpB,CAAC;AAuBF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAHjC,MAGiC,GAF/B,OAAO,CASnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EALxC,MAKwC,GAJtC,MAAM,GAAC,SAAS,CAmB5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAJ3B,MAI2B,GAHzB,MAAM,GAAC,SAAS,CA4C5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAJtC,MAIsC,GAHpC,MAAM,GAAC,SAAS,CAwC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAJrC,MAIqC,GAHnC,MAAM,GAAC,SAAS,CAgC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,WAAW,EAH9C,MAG8C,GAF5C,MAAM,GAAC,SAAS,CAkB5B;AAsDD;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,iDAKjC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,wBAO5B,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAJlC,MAIkC,EAAE,OAAO,EAH3C,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAY5B;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAH1C,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAGK,GAFxC,MAAM,GAAC,SAAS,CAc5B;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAH1C,MAG0C,GAFxC,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAJvC,MAIuC,EAAE,SAAS,EAHlD,MAAM,GAAC,SAG2C,GAFhD,MAAM,GAAC,SAAS,CAiB5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAgBpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAJjC,MAIiC,EAAE,MAAM,EAHzC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,wBAKtC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAHjC,MAGiC,GAF/B,MAAM,GAAC,SAAS,CAS5B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAHhC,MAGgC,GAF9B,MAAM,GAAC,SAAS,CAS5B;AASD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAHvC,MAGuC,GAFrC,MAAM,GAAC,SAAS,CAuB5B"}

package/types/lib/inventory/licenseEnhancer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"licenseEnhancer.d.ts","sourceRoot":"","sources":["../../../lib/inventory/licenseEnhancer.js"],"names":[],"mappings":"AAOA,OAAO,EAIL,mBAAmB,EAIpB,MAAM,qBAAqB,CAAC;AAkF7B;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAH1B,MAG0B,GAFxB,MAAM,GAAC,IAAI,CAavB;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,IAAI,GAH/B,MAGoC,GAFlC,MAAM,GAAC,IAAI,CAwFvB;AAgBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,CA8BlB;AA0DD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAAM,GAAC,MAIsB,EAAE,IAAI,GAHnC,MAGwC,GAFtC,MAAM,CAqFlB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAJvC,MAIuC,EAAE,IAAI,GAH7C,MAGkD,GAFhD,MAAM,CA4ClB;AAoGD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EALzC,MAKyC,EAAE,MAAM,EAJjD,MAIiD,EAAE,KAAK,KAAK,GAF3D,MAAM,CAyElB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAJnB,MAImB,EAAE,IAAI,GAHzB,MAG8B,GAF5B,MAAM,CAgDlB;AA4KD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,MAAM,EAJxC,MAIwC,EAAE,IAAI,AAHtD,CACA,EADQ,MAGmD,GAFjD,MAAM,EAAE,CA0CpB"}
+{"version":3,"file":"licenseEnhancer.d.ts","sourceRoot":"","sources":["../../../lib/inventory/licenseEnhancer.js"],"names":[],"mappings":"AAOA,OAAO,EAIL,mBAAmB,EAIpB,MAAM,qBAAqB,CAAC;AAkF7B;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAH1B,MAG0B,GAFxB,MAAM,GAAC,IAAI,CAavB;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAJzB,MAIyB,EAAE,IAAI,GAH/B,MAGoC,GAFlC,MAAM,GAAC,IAAI,CAoGvB;AAgBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAH/B,MAG+B,GAF7B,MAAM,CA8BlB;AA0DD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAAM,GAAC,MAIsB,EAAE,IAAI,GAHnC,MAGwC,GAFtC,MAAM,CAqFlB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAJvC,MAIuC,EAAE,IAAI,GAH7C,MAGkD,GAFhD,MAAM,CA4ClB;AAoGD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EALzC,MAKyC,EAAE,MAAM,EAJjD,MAIiD,EAAE,KAAK,KAAK,GAF3D,MAAM,CAyElB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAJnB,MAImB,EAAE,IAAI,GAHzB,MAG8B,GAF5B,MAAM,CAgDlB;AA4KD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EALhC,MAKgC,EAAE,MAAM,EAJxC,MAIwC,EAAE,IAAI,AAHtD,CACA,EADQ,MAGmD,GAFjD,MAAM,EAAE,CA0CpB"}

package/types/lib/inventory/mavenCentralMirror.d.ts

@@ -0,0 +1,170 @@
+/**
+ * Opt-in switch that points every Maven Central consumer at Google's public
+ * mirror: cdxgen's own POM, licence and metadata lookups, and every JVM build
+ * tool cdxgen runs (Maven and its wrapper, Gradle, sbt, Mill, Bazel and the
+ * Clojure tools). The value selects the mirror:
+ *
+ *   `true`/`google`  the global mirror bucket
+ *   `eu`             the Europe bucket
+ *   `asia`           the Asia bucket
+ *   `http(s)://...`  any other mirror or repository manager of Maven Central
+ *
+ * An explicit `MAVEN_CENTRAL_URL` still wins for cdxgen's own lookups, and a
+ * repository the user or the project already configures is never replaced:
+ * only the default Maven Central URLs are moved. Nothing is written to the
+ * scanned project or the user's home directory; the injection goes through
+ * command-line arguments and environment variables, and any settings or init
+ * script it needs is written under cdxgen's temp directory and removed again.
+ */
+export declare const MAVEN_CENTRAL_MIRROR_VAR = "MAVEN_CENTRAL_MIRROR";
+/**
+ * Google's public Maven Central mirror buckets, named by region.
+ *
+ * @type {Object<string, string>}
+ */
+export declare const MAVEN_CENTRAL_MIRROR_URLS: Record<string, string>;
+/**
+ * The default Maven Central repository URLs that the mirror replaces, for
+ * tools that name repositories by URL.
+ *
+ * @type {string[]}
+ */
+export declare const MAVEN_CENTRAL_DEFAULT_URLS: string[];
+/**
+ * Read the mirror switch. Undefined when cdxgen should use Maven Central
+ * itself, the mirror URL otherwise.
+ *
+ * @returns {string|undefined} Mirror base URL with a trailing slash
+ */
+export declare function mavenCentralMirrorUrl(): string | undefined;
+/**
+ * Whether the mirror switch is on. Names and URLs that do not resolve to a
+ * mirror leave it off, so a typo never silently redirects builds.
+ *
+ * @returns {boolean}
+ */
+export declare function isMavenCentralMirrorEnabled(): boolean;
+/**
+ * The repository cdxgen's own POM, licence and metadata lookups should fetch
+ * from. An explicit `MAVEN_CENTRAL_URL` is a deliberate choice, often a
+ * repository manager holding private artefacts, so it keeps winning over the
+ * mirror.
+ *
+ * @returns {string|undefined} Mirror URL, or undefined to keep the existing
+ *   `MAVEN_CENTRAL_URL` behaviour
+ */
+export declare function mavenCentralFetchUrl(): string | undefined;
+/**
+ * Insert the mirror into the content of a settings file that is passed to
+ * Maven anyway, keeping every other element as it is. The mirror is appended
+ * to the existing ones, so the file's own mirror of Central still wins.
+ *
+ * @param {string} content Existing settings.xml content
+ * @param {string} mirrorUrl Mirror base URL
+ * @returns {string|undefined} Merged content, or undefined when the file
+ *   holds no recognisable settings element to merge into
+ */
+export declare function mergeMavenMirrorSettings(content: string, mirrorUrl: string): string | undefined;
+/**
+ * Extra Maven arguments that send Central to the mirror, written as a global
+ * settings file under cdxgen's temp directory. An existing `-gs` settings
+ * file named by the caller is merged with the mirror instead, so a project
+ * that ships its own settings.xml keeps its repositories and its own mirror.
+ * A settings file the user named themselves (in `MVN_ARGS`/`MAVEN_ARGS`) is
+ * never touched, and neither is secure mode.
+ *
+ * @param {string} [existingSettingsFile] Settings file the caller already
+ *   passes to Maven
+ * @returns {string[]} Arguments to append to the Maven command line
+ */
+export declare function mavenMirrorSettingsArgs(existingSettingsFile?: string): string[];
+/**
+ * Environment for a Maven or Maven wrapper invocation that moves the
+ * wrapper's own distribution download off Maven Central. Plain `mvn`
+ * invocations ignore it.
+ *
+ * @returns {Object} Environment variables to add to the child process
+ */
+export declare function mavenWrapperMirrorEnv(): Object;
+/**
+ * A Gradle init script that rewrites Maven Central repository URLs to the
+ * mirror as the settings and every project declare them. Repositories that are
+ * not Maven Central keep their URL, so private repositories and declared
+ * mirrors are untouched.
+ *
+ * @param {string} mirrorUrl Mirror base URL
+ * @returns {string}
+ */
+export declare function gradleMirrorInitScript(mirrorUrl: string): string;
+/**
+ * Extra Gradle arguments that install the mirror init script. Gradle applies
+ * every init script it is given, so cdxgen's own helper script keeps working.
+ *
+ * @returns {string[]} Arguments to append to the Gradle command line
+ */
+export declare function gradleMirrorInitScriptArgs(): string[];
+/**
+ * An sbt launcher repositories file that resolves Maven Central from the
+ * mirror. The launcher replaces its default list with this file, so the
+ * plugin and Typesafe repositories it must still reach are named here, and
+ * only the Central entry points at the mirror.
+ *
+ * @param {string} mirrorUrl Mirror base URL
+ * @returns {string}
+ */
+export declare function sbtRepositoriesFile(mirrorUrl: string): string;
+/**
+ * Environment for an sbt invocation that resolves Maven Central from the
+ * mirror: a repositories file under cdxgen's temp directory, named through
+ * `SBT_OPTS`. A user who already configures repositories (`~/.sbt/repositories`
+ * or their own `sbt.repository.config`) keeps their configuration, and the
+ * mirror stays out of the way.
+ *
+ * @returns {Object} Environment variables to add to the child process
+ */
+export declare function sbtMirrorEnv(): Object;
+/**
+ * Environment for tools that resolve through the Coursier CLI.
+ *
+ * @returns {Object} Environment variables to add to the child process
+ */
+export declare function coursierMirrorEnv(): Object;
+/**
+ * Extra Bazel build arguments that hand the mirror to repository rules, whose
+ * environment Bazel otherwise keeps isolated from the client's. Repositories
+ * whose URLs the project pins, as rules_jvm_external projects do, are not
+ * changed by this; it covers the ones that resolve through Coursier defaults.
+ *
+ * @returns {string[]} Arguments to append to the Bazel build command line
+ */
+export declare function bazelMirrorArgs(): string[];
+/**
+ * The `-Sdeps` data that repoints the default `central` repository of the
+ * Clojure CLI at the mirror. Repositories merge by name, so a project's other
+ * repositories, including Clojars, keep resolving as declared.
+ *
+ * @param {string} mirrorUrl Mirror base URL
+ * @returns {string}
+ */
+export declare function clojureMirrorSdeps(mirrorUrl: string): string;
+/**
+ * Extra arguments for a Clojure CLI invocation. Skipped when the user already
+ * passes `-Sdeps`, whose data would otherwise be replaced.
+ *
+ * @param {string[]} baseArgs Arguments the caller already assembled
+ * @returns {string[]} Arguments to append
+ */
+export declare function clojureMirrorArgs(baseArgs?: string[]): string[];
+/**
+ * Arguments for a Leiningen invocation that repoint its `central` repository
+ * at the mirror, through `lein update-in`, which changes the project map in
+ * memory and never the project.clj file. Skipped when the project declares
+ * its own `:mirrors`, which must keep winning.
+ *
+ * @param {string[]} baseArgs Arguments the caller already assembled
+ * @param {string} [projectFileContent] The project's project.clj, when the
+ *   caller has it at hand
+ * @returns {string[]} Full argument list to invoke Leiningen with
+ */
+export declare function leiningenMirrorArgs(baseArgs: string[], projectFileContent?: string): string[];
+//# sourceMappingURL=mavenCentralMirror.d.ts.map

package/types/lib/inventory/mavenCentralMirror.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mavenCentralMirror.d.ts","sourceRoot":"","sources":["../../../lib/inventory/mavenCentralMirror.js"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,wBAIrC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAF7B,MAAM,EAKf,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,GAAC,SAAS,CAuB5B;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,IAF9B,OAAO,CAInB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAHvB,MAAM,GAAC,SAAS,CAW5B;AAkFD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EALrC,MAKqC,EAAE,SAAS,EAJhD,MAIgD,GAH9C,MAAM,GAAC,SAAS,CAuB5B;AAoBD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,oBAAoB,AAJzD,CAEA,EAFQ,MAIiD,GAF/C,MAAM,EAAE,CAyBpB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,IAFxB,MAAM,CAUlB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,GAFnC,MAAM,CAmClB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAF7B,MAAM,EAAE,CAapB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAHlC,MAGkC,GAFhC,MAAM,CASlB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,IAFf,MAAM,CA0BlB;AAQD;;;;GAIG;AACH,wBAAgB,iBAAiB,IAFpB,MAAM,CAYlB;AAMD;;;;;;;GAOG;AACH,wBAAgB,eAAe,IAFlB,MAAM,EAAE,CAWpB;AAMD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAHjC,MAGiC,GAF/B,MAAM,CAIlB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,GAH/B,MAAM,EAG8B,GAFlC,MAAM,EAAE,CAWpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EALjC,MAAM,EAK2B,EAAE,kBAAkB,AAJ7D,CAEA,EAFQ,MAIqD,GAFnD,MAAM,EAAE,CAgBpB"}

package/types/lib/inventory/mcpConfigParser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcpConfigParser.d.ts","sourceRoot":"","sources":["../../../lib/inventory/mcpConfigParser.js"],"names":[],"mappings":"AAmxBA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe,EAFlB;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAC,CAAA;CAiD9H,CAAC"}
+{"version":3,"file":"mcpConfigParser.d.ts","sourceRoot":"","sources":["../../../lib/inventory/mcpConfigParser.js"],"names":[],"mappings":"AAwxBA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe,EAFlB;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAC,CAAA;CAiD9H,CAAC"}