@cdxgen/cdxgen 13.6.0 → 13.7.0

package/types/lib/ecosystems/parsers-python.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers-python.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-python.js"],"names":[],"mappings":"AAgEA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA;;;cAqB9C;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EALpC,MAKoC,EAAE,iBAAiB,AAJ/D,CAGF,EAHU,MAAM,EAIiD,kBAoBjE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EALnC,MAKmC,EAAE,IAAI,EAJzC,MAIyC,EAAE,KAAK,EAHhD,MAGgD,GAF9C,IAAI,CAkBhB;AAuMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,CAwSlB;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAH/C,MAG+C,GAF7C,MAAM,GAAG,SAAS,CA2C9B;AAiBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAU5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CAM5B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAPxC,MAAM,EAOkC,EAAE,iBAAiB,EAN3D,MAAM,EAMqD,GAJzD,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAiBD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAHjC,MAGiC,GAF/B,OAAO,CAWnB;AAsBD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EATC,MASD,EACR,QAAQ,EATC,MASD,EACR,aAAa,EATJ,MASI,EACb,OAAO,AATN,CAIF,EAHE;IAA2B,iBAAiB,AAA5C,CAGF,EAHU,MAAM,EAAE,CAGlB;CAKa;;;;;;;;;;;;;;;;;;;;;;GA4pBb;AAYD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,OAAO,QAAA,EACP,aAAa,UAAQ,EACrB,iBAAiB,AAThB,CAIA,EAJQ,MAAM,EASc,OAG9B;AAySD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,QAAA,GAFhC,KAAK,CAAC,MAAM,CAAC,CAmCzB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAFvC,MAEuC,qBAqBjD;AA6CD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,QAAA,EAAE,IAAI,QAAA;;;;;;;;;EAkLvD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,MAiCzC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAHrC,MAGqC,GAFnC,OAAO,CAqBnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CA8C1D"}
+{"version":3,"file":"parsers-python.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-python.js"],"names":[],"mappings":"AAiEA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,QAAA;;;cAqB9C;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EALpC,MAKoC,EAAE,iBAAiB,AAJ/D,CAGF,EAHU,MAAM,EAIiD,kBAoBjE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EALnC,MAKmC,EAAE,IAAI,EAJzC,MAIyC,EAAE,KAAK,EAHhD,MAGgD,GAF9C,IAAI,CAkBhB;AAuMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAHpC,MAGoC,GAFlC,MAAM,CAwSlB;AAqFD;;;;;;;;;;GAUG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAH/C,MAG+C,GAF7C,MAAM,GAAG,SAAS,CA2C9B;AAiBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAU5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAH3B,MAG2B,GAFzB,MAAM,GAAC,SAAS,CAM5B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAPxC,MAAM,EAOkC,EAAE,iBAAiB,EAN3D,MAAM,EAMqD,GAJzD,GAAG,CAAC,MAAM,CAAC,CA0CvB;AAiBD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAHjC,MAGiC,GAF/B,OAAO,CAWnB;AAsBD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EATC,MASD,EACR,QAAQ,EATC,MASD,EACR,aAAa,EATJ,MASI,EACb,OAAO,AATN,CAIF,EAHE;IAA2B,iBAAiB,AAA5C,CAGF,EAHU,MAAM,EAAE,CAGlB;CAKa;;;;;;;;;;;;;;;;;;;;;;GAwqBb;AAsCD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,OAAO,QAAA,EACP,aAAa,UAAQ,EACrB,iBAAiB,AAThB,CAIA,EAJQ,MAAM,EASc,OAG9B;AAmSD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,QAAA,GAFhC,KAAK,CAAC,MAAM,CAAC,CAmCzB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,WAAW,EAFvC,MAEuC,qBAqBjD;AAwED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,gBAAgB,QAAA,EAAE,IAAI,QAAA;;;;;;;;;EAmLvD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,QAAA,MAiCzC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAHrC,MAGqC,GAFnC,OAAO,CAqBnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,EAHrC,MAGqC,GAFnC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CA8C1D"}

package/types/lib/ecosystems/parsers-rust.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers-rust.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-rust.js"],"names":[],"mappings":"AAisBA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,QAAA,EACb,MAAM,GAPG,OAOK,EACd,WAAW,GAPF,MAOO,EAChB,OAAO,KAAK,SAuQb;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,aAAa,QAAA,EACb,MAAM,GAPG,OAOK,EACd,WAAW,GAPF,MAOO,SAyGjB;AAgCD;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAAC,aAAa,EAJnD,MAImD,EAAE,OAAO,AAHpE,CACA,EADQ,MAGiE,GAF/D,MAAM,EAAE,CAsIpB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,aAAa,EAH3C,MAG2C,GAFzC,MAAM,EAAE,CA8DpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAH/B,MAAM,GAAC,IAAI,GAAC,SAGmB,GAF7B,MAAM,CAOlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAHlC,MAGkC,GAFhC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CA8BrD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAGJ,GAFxB,MAAM,CAOlB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAHjC,MAGiC,GAF/B,MAAM,CAUlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iCAAiC,CAAC,aAAa,EAJpD,MAIoD,EAAE,OAAO,AAHrE,CACA,EADQ,MAGkE,GAFhE,GAAG,CAAC,MAAM,EAAE;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,CAAC,CA+DtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAJ3D;IAAwB,QAAQ,EAAxB,MAAM,EAAE,CAChB;IAA+E,KAAK,EAA5E,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC,CACvE;CAE2D,GAFjD,GAAG,CAAC,MAAM,EAAE;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAC,CAAC,CAsEvG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAHvC,MAGuC,GAFrC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAC,CAoGhI;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAC3C,gBAAgB,EALP,MAAM,EAKC,EAChB,mBAAmB,EALV,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAKrB,GAJR;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;CAAC,CAmCnE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EATE,MAAM,EASR,EACP,MAAM,EATG,GAAG,CAAC,MAAM,EAAE,MAAM,CASrB,EACN,WAAW,AATV,CACA,EADQ,GAAG,CAAC,MAAM,EAAE,MAAM,CASJ,EACvB,OAAO,AATN,CAGA,EAFA;IAA0B,iBAAiB,AAA3C,CAEA,EAFQ,OAAO,CAEf;CAMW,GAND,MAAM,EAAE,CAsFpB;AAkCD;;;;;;;;;;;GAWG;AACH,wBAAgB,oCAAoC,CAAC,YAAY,EAHtD,MAGsD,GAFpD,MAAM,CAalB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kCAAkC,CAAC,EACjD,QAAQ,EACR,KAAK,EACL,WAAW,EACX,gBAAqB,EACrB,gBAA4B,GAC7B,EAbE;IAAqB,QAAQ,EAArB,MAAM,CACd;IAAqB,KAAK,EAAlB,MAAM,CACd;IAAqB,WAAW,EAAxB,MAAM,CACd;IAAwB,gBAAgB,AAAxC,CACA,EADQ,MAAM,EAAE,CAChB;IAA2B,gBAAgB,AAA3C,CACA,EADQ,GAAG,CAAC,MAAM,CAAC,CACnB;CAQF,GARY;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAC,CA2FrE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iCAAiC,CAAC,WAAW,EALlD,GAAG,CAAC,MAAM,EAAE,MAAM,CAKgC,EAAE,KAAK,EAJzD,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAIgC,EAAE,MAAM,EAHjE,GAAG,CAAC,MAAM,EAAE,MAAM,CAG+C,GAF/D;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAwJ1D;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAAC,SAAS,EAH5C,MAG4C,GAF1C,OAAO,CAAC,MAAM,EAAE,CAAC,CA4B7B"}
+{"version":3,"file":"parsers-rust.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/parsers-rust.js"],"names":[],"mappings":"AAuyBA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,kBAAkB,CACtC,aAAa,QAAA,EACb,MAAM,GAPG,OAOK,EACd,WAAW,GAPF,MAOO,EAChB,OAAO,KAAK,SAuQb;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,aAAa,QAAA,EACb,MAAM,GAPG,OAOK,EACd,WAAW,GAPF,MAOO,SAyGjB;AAgCD;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAAC,aAAa,EAJnD,MAImD,EAAE,OAAO,AAHpE,CACA,EADQ,MAGiE,GAF/D,MAAM,EAAE,CAsIpB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,aAAa,EAH3C,MAG2C,GAFzC,MAAM,EAAE,CA8DpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAH/B,MAAM,GAAC,IAAI,GAAC,SAGmB,GAF7B,MAAM,CAOlB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAHlC,MAGkC,GAFhC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,GAAC,SAAS,CA8BrD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAH1B;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAGJ,GAFxB,MAAM,CAOlB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAHjC,MAGiC,GAF/B,MAAM,CAUlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iCAAiC,CAAC,aAAa,EAJpD,MAIoD,EAAE,OAAO,AAHrE,CACA,EADQ,MAGkE,GAFhE,GAAG,CAAC,MAAM,EAAE;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,CAAC,CA+DtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAJ3D;IAAwB,QAAQ,EAAxB,MAAM,EAAE,CAChB;IAA+E,KAAK,EAA5E,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC,CACvE;CAE2D,GAFjD,GAAG,CAAC,MAAM,EAAE;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAC,CAAC,CAsEvG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAHvC,MAGuC,GAFrC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAC,CAoGhI;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAC3C,gBAAgB,EALP,MAAM,EAKC,EAChB,mBAAmB,EALV,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAKrB,GAJR;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;CAAC,CAmCnE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EATE,MAAM,EASR,EACP,MAAM,EATG,GAAG,CAAC,MAAM,EAAE,MAAM,CASrB,EACN,WAAW,AATV,CACA,EADQ,GAAG,CAAC,MAAM,EAAE,MAAM,CASJ,EACvB,OAAO,AATN,CAGA,EAFA;IAA0B,iBAAiB,AAA3C,CAEA,EAFQ,OAAO,CAEf;CAMW,GAND,MAAM,EAAE,CAsFpB;AAkCD;;;;;;;;;;;GAWG;AACH,wBAAgB,oCAAoC,CAAC,YAAY,EAHtD,MAGsD,GAFpD,MAAM,CAalB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kCAAkC,CAAC,EACjD,QAAQ,EACR,KAAK,EACL,WAAW,EACX,gBAAqB,EACrB,gBAA4B,GAC7B,EAbE;IAAqB,QAAQ,EAArB,MAAM,CACd;IAAqB,KAAK,EAAlB,MAAM,CACd;IAAqB,WAAW,EAAxB,MAAM,CACd;IAAwB,gBAAgB,AAAxC,CACA,EADQ,MAAM,EAAE,CAChB;IAA2B,gBAAgB,AAA3C,CACA,EADQ,GAAG,CAAC,MAAM,CAAC,CACnB;CAQF,GARY;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAC,CA2FrE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iCAAiC,CAAC,WAAW,EALlD,GAAG,CAAC,MAAM,EAAE,MAAM,CAKgC,EAAE,KAAK,EAJzD,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAIgC,EAAE,MAAM,EAHjE,GAAG,CAAC,MAAM,EAAE,MAAM,CAG+C,GAF/D;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAwJ1D;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAAC,SAAS,EAH5C,MAG4C,GAF1C,OAAO,CAAC,MAAM,EAAE,CAAC,CA4B7B"}

package/types/lib/ecosystems/pythonutils.d.ts

@@ -114,8 +114,8 @@ export declare function getPoetryInstallArgs(pyprojectFile: string): string[];
  */
 export declare function getPipFrozenTree(basePath: string, reqOrSetupFile: string, tempVenvDir: string, parentComponent: Object, projectRoot: any, getTreeWithPluginFn: any): Object;
 export declare function getPipTreeForPackages(basePath: any, pkgList: any, tempVenvDir: any, parentComponent: any, getTreeWithPluginFn: any): {
-    rootList?: undefined;
     failedPkgList?: undefined;
+    rootList?: undefined;
     dependenciesList?: undefined;
 } | {
     failedPkgList: any[];

package/types/lib/ecosystems/remote/huggingface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"huggingface.d.ts","sourceRoot":"","sources":["../../../../lib/ecosystems/remote/huggingface.js"],"names":[],"mappings":"AA6JA,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,wBAAgB,4BAA4B,SAG3C;AAu6BD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,aAH5B,MAAM,KACJ,OAOV,CAAC;AAEJ;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CA0MrC;AAED;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAarC"}
+{"version":3,"file":"huggingface.d.ts","sourceRoot":"","sources":["../../../../lib/ecosystems/remote/huggingface.js"],"names":[],"mappings":"AAkKA,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAE3C;;GAEG;AACH,wBAAgB,4BAA4B,SAG3C;AAu6BD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,aAH5B,MAAM,KACJ,OAOV,CAAC;AAEJ;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CA2NrC;AAED;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,SAAS,EANA,MAMA,EACT,MAAM,EANG,MAMH,EACN,OAAO,AANN,CACA,EADQ,MAMG,GALD,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAarC"}

package/types/lib/ecosystems/rusi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rusi.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rusi.js"],"names":[],"mappings":"AAqWA;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAW5B;AAsZD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EALxB,MAKwB,EAAE,UAAU,EAJpC,MAIoC,EAAE,OAAO,GAH7C,MAGkD,GAFhD,OAAO,CAyEnB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CA2B5B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,GAJnC,MAIwC,EAAE,UAAU,QAAK,GAFvD,MAAM,CA8DlB"}
+{"version":3,"file":"rusi.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/rusi.js"],"names":[],"mappings":"AAmWA;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CAW5B;AAsZD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAInB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAG8B,GAF5B,MAAM,GAAC,SAAS,CAW5B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EALxB,MAKwB,EAAE,UAAU,EAJpC,MAIoC,EAAE,OAAO,GAH7C,MAGkD,GAFhD,OAAO,CAyEnB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAJ3B,MAI2B,EAAE,OAAO,GAHpC,MAGyC,GAFvC,MAAM,GAAC,SAAS,CA2B5B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,GAJnC,MAIwC,EAAE,UAAU,QAAK,GAFvD,MAAM,CA8DlB"}

package/types/lib/ecosystems/scalasem.d.ts

@@ -30,12 +30,13 @@ export declare function resolveScalasemCommand(): string | undefined;
 /**
  * Where the scalasem report is persisted. An absolute --semantics-slices-file
  * keeps its directory; anything else lands in the evinse output directory, the
- * same rule the atom slice writer follows.
+ * same rule the atom slice writer follows. Without either there is nowhere to
+ * keep it, and the report lives only as long as the run.
  *
  * @param {Object} options CLI options carrying `output` and `semanticsSlicesFile`.
- * @returns {string} Absolute report path.
+ * @returns {string|undefined} Absolute report path.
  */
-export declare function scalasemOutputFile(options?: Object): string;
+export declare function scalasemOutputFile(options?: Object): string | undefined;
 /**
  * A version 1 semantics slice (the shape atom's scalasem wrote before schema
  * version 2): keyed by .scala files with `usedTypes`, no `_meta.schemaVersion`.
@@ -46,8 +47,9 @@ export declare function scalasemOutputFile(options?: Object): string;
 export declare function isV1SemanticsSlice(parsed: Object): boolean;
 /**
  * Run scalasem over a Scala project and return its report, reusing a
- * persisted version 2 report that belongs to this project and is newer than
- * the input BOM.
+ * persisted version 2 report that belongs to this project, is newer than the
+ * input BOM and than the build files and sources it describes, and, when
+ * cdxgen kept it, was made with the settings this run asks for.
  *
  * Failures are visible rather than silent: the reason is printed once, the
  * run's diagnostics reach the caller as `cdx:scalasem:diagnostic` properties,
@@ -70,11 +72,13 @@ export declare function analyzeScalaProject(src: string, options?: Object): Obje
  * @param {Object[]} diagnostics Run diagnostics, from the report or the spawn.
  * @returns {Object[]} Metadata properties.
  */
-export declare function scalasemMetadataProperties(report: Object | undefined, diagnostics?: Object[]): Object[];
+export declare function scalasemMetadataProperties(report: Object | undefined, allDiagnostics?: any): Object[];
 export declare function sortedCsv(values: any): string | undefined;
 /**
  * The platform a purl's artifact name targets: `_sjs1` is Scala.js,
- * `_native0.x` is Scala Native, and neither is the JVM.
+ * `_native0.x` is Scala Native, and neither is the JVM. The platform suffix
+ * counts whether the Scala binary suffix follows it (`upickle_sjs1_3`, the
+ * published name a jar scan keeps) or not (`upickle_sjs1`, the sbt name).
  *
  * @param {string} purl Package URL.
  * @returns {"jvm"|"js"|"native"} Platform key.
@@ -136,6 +140,12 @@ export declare class ScalaJoinIndex {
      * sits in. A package the project also fills is ambiguous and joins nothing,
      * and `javax.` names join only through an exact class, since the JDK ships
      * most of them.
+     *
+     * The package is the part of the symbol before its first type name, which
+     * starts with a capital letter (`io.circe` of `io.circe.Json.fromString`). A
+     * symbol without one names a package (`io.circe`) or a member of one, such
+     * as a package object member (`io.circe.syntax.asJson`). Parent packages
+     * never answer: a missing `io.circe.generic` is not circe-core.
      */
     packageOwners(symbol: any): any;
     /**
@@ -175,8 +185,13 @@ export declare function isReportFileKey(key: any): boolean;
  * Index the BOM components by their normalized Scala coordinates, both with
  * and without the version, so a classpath jar, a namespace property and a map
  * entry of the same library meet on one component. Each entry keeps the Scala
- * binary version the component was built for, so the `_2.13` and `_3`
- * artifacts of one library in a Maven build stay apart.
+ * binary versions the component was built for, so the `_2.13` and `_3`
+ * artifacts of one library in a Maven build stay apart. Components that share
+ * a normalized coordinate and were built for an overlapping set of Scala
+ * binary versions are one library listed more than once (a repository_url
+ * qualifier, a `_3` suffix beside the sbt name built for 2.13 and 3, a stale
+ * duplicate), so they share one entry, which the preferred component of the
+ * group stands for.
  */
 export declare function componentCoordinateIndex(components?: any[]): {
     byVersion: Map<any, any>;
@@ -192,13 +207,31 @@ export declare function componentCoordinateIndex(components?: any[]): {
  * @returns {{component: Object, exact: boolean}|undefined} The component, and
  *   whether its version is the one on the classpath.
  */
-export declare function matchClasspathEntry(entry: any, { byVersion, withoutVersion }: {
-    byVersion: any;
-    withoutVersion: any;
-}, platform: any): {
+export declare function matchClasspathEntry(entry: any, coordinateIndex: any, platform: any): {
     component: Object;
     exact: boolean;
 } | undefined;
+/**
+ * The coordinates a classpath jar's path spells, for the layouts the report
+ * does not read itself, most specific first:
+ *
+ * - a Maven layout `<group dirs>/<artifact>/<version>/<file>` whose group is
+ *   a dotted tail of the group the report recorded, so a group is only ever
+ *   shortened by the directories the report took for it, never guessed
+ * - the Gradle cache `files-2.1/<group>/<artifact>/<version>/<sha1>/<file>`
+ * - an Ivy cache `<org>/<artifact>/jars/<artifact>-<version>.jar`, as sbt 0.13
+ *   and sbt 1.0 to 1.2 keep it, and an Ivy local repository
+ *   `<org>/<artifact>/<version>/jars/<artifact>.jar`
+ *
+ * @param {Object} entry Classpath entry with `path` and, when the report read
+ *   them, `group`, `artifact` and `version`.
+ * @returns {{group: string, artifact: string, version: string}[]}
+ */
+export declare function jarPathCoordinates(entry: Object): {
+    group: string;
+    artifact: string;
+    version: string;
+}[];
 /**
  * Build the symbol index from the three sources, reading each classpath jar
  * once, and only for components that carry no namespaces yet.
@@ -241,9 +274,18 @@ export declare function collectScalasemEvidence(report?: Object, components?: Ob
 /**
  * The component purl of the library a crypto finding names as its provider.
  * Maven coordinates match on group and base artifact; the short aliases cover
- * the providers the rules emit for libraries without a coordinate.
+ * the providers the rules emit for libraries without a coordinate. Of several
+ * matching components, one on the referencing module's classpath wins, then
+ * the artifact whose name extends the provider's least (`bcprov-jdk18on`
+ * over `bcprov-ext-jdk18on`), then the first purl, so the choice never
+ * depends on the order of the BOM.
+ *
+ * @param {string} provider Provider the finding names.
+ * @param {Object[]} components BOM components.
+ * @param {Set<string>} [classpathPurls] Purls on the module's classpath.
+ * @returns {string|undefined} Component purl.
  */
-export declare function scalasemProviderPurl(provider: any, components?: any[]): any;
+export declare function scalasemProviderPurl(provider: string, components?: Object[], classpathPurls?: Set<string>): string | undefined;
 /**
  * A JDBC address without what may carry credentials: userinfo, the Oracle
  * `user/password@` prefix, URL parameters and the `;key=value` properties
@@ -265,7 +307,7 @@ export declare function scalasemServiceName(service: any): any;
  * host, a host as it is, a topic as `client:topic`, a JDBC URL with its
  * credentials and parameters dropped.
  */
-export declare function scalasemServiceEndpoint(service: any): any;
+export declare function scalasemServiceEndpoint(service: any): string | undefined;
 /**
  * Outbound services: HTTP and websocket clients, data stores, messaging
  * topics and cloud clients. Locations ride in

package/types/lib/ecosystems/scalasem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalasem.js"],"names":[],"mappings":"AAgDA,eAAO,MAAM,kBAAkB,UAA4B,CAAC;AAM5D,eAAO,MAAM,sBAAsB,aAQjC,CAAC;AAEH,wBAAgB,oBAAoB,CAAC,UAAU,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAY3D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAMrD;AAED,wBAAgB,WAAW,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,KAAK,KAAA,QAM1C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAMnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAH7B,MAGkC,GAFhC,OAAO,CASnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAFzB,MAAM,GAAC,SAAS,CAM5B;AAwBD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAH/B,MAGoC,GAFlC,MAAM,CAyBlB;AAuBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,OAAO,CAOnB;AAiBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAL5B,MAK4B,EAAE,OAAO,GAJrC,MAI0C,GAHxC,MAAM,GAAC,SAAS,CAmD5B;AAgLD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EALG,MAAM,GAAC,SAKV,EACN,WAAW,GALF,MAAM,EAK+B,GAJnC,MAAM,EAAE,CAyDpB;AAED,wBAAgB,SAAS,CAAC,MAAM,KAAA,sBAI/B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,KAAK,GAAC,IAAI,GAAC,QAAQ,CAc/B;AAcD;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IAElB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,eAAe;IAPtB,cAQC;IAED,aAAa,CAAC,IAAI,KAAA,WAEjB;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,IAAI,EAJP,MAIO,EAAE,KAAK,EAHd,MAAM,EAGQ,EAAE,MAAM,EAFtB,MAEsB,QAgChC;IAED,SAAS,CAAC,GAAG,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA,EAAE,MAAM,KAAA,QAelC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,MAAM,EAFjB,MAEiB,QAiB3B;IAED;;;OAGG;IACH,SAAS,CAAC,MAAM,KAAA,WAWf;IAED;;;OAGG;IACH,WAAW,CAAC,MAAM,KAAA,OASjB;IAED;;;;;OAKG;IACH,aAAa,CAAC,MAAM,KAAA,OAanB;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,MAAM,EALF,MAKE,EAAE,QAAQ,EAJZ,MAAM,GAAC,SAIK,EAAE,YAAY,EAH1B,GAAG,CAAC,MAAM,CAAC,GAAC,SAGc,GAFxB,MAAM,GAAC,SAAS,CAoB5B;IAED;;;;OAIG;IACH,SAAS,CAAC,MAAM,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SAcvC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SA4BxC;CACF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,KAAA,WAElC;AA4BD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,QAAK;;;EA8BvD;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,KAAA,EACL,EAAE,SAAS,EAAE,cAAc,EAAE;;;CAAA,EAC7B,QAAQ,KAAA,GANG;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAC,GAAC,SAAS,CAmCzD;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EALrC,MAKqC,EAAE,UAAU,EAJjD,MAAM,EAI2C,EAAE,YAAY,EAH/D,MAG+D,GAF7D,OAAO,CAAC,cAAc,CAAC,CAkFnC;AAsFD,eAAO,MAAM,uBAAuB,aASlC,CAAC;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAGH,eAAO,MAAM,6BAA6B,aAUxC,CAAC;AACH,eAAO,MAAM,0BAA0B,aA0CrC,CAAC;AAqEH;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAP9B,MAO8B,EAAE,OAAO,AAN/C,CACA,EADQ,MAMuC,EAAE,IAAI,AALrD,CACA,EADQ,MAK6C,EAAE,KAAK,AAJ5D,CACA,EADQ,MAIoD,EAAE,OAAO,AAHrE,CACA,EADQ,MAG6D,GAF3D,MAAM,GAAC,SAAS,CA6C5B;AAgDD;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,GAPG,MAOE,EACX,UAAU,GAPD,MAAM,EAOA,EACf,OAAO,GAPE,MAOG,GALD,OAAO,CAAC,MAAM,CAAC,CAyE3B;AA+WD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,KAAA,EAAE,UAAU,QAAK,OA+B7D;AAkTD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAH1B,MAG0B,GAFxB,MAAM,CAmClB;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,KAAA,OAmB1C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,KAAA,OAuB9C;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,GAJnC,MAIwC,EAAE,WAAW,GAHrD,MAG0D,GAFxD,MAAM,CAmDlB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,GAJvC,MAI4C,EAAE,WAAW,GAHzD,MAG8D,GAF5D,MAAM,CA6DlB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,2BAA2B,CAC/C,GAAG,EARM,MAQN,EACH,OAAO,GARE,MAAM,EAQH,EACZ,OAAO,AARN,CACA,EADQ,MAQG,GAPD,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAAC,CAqEpF"}
+{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/ecosystems/scalasem.js"],"names":[],"mappings":"AAyDA,eAAO,MAAM,kBAAkB,UAA4B,CAAC;AAM5D,eAAO,MAAM,sBAAsB,aAQjC,CAAC;AAEH,wBAAgB,oBAAoB,CAAC,UAAU,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAY3D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,IAAI,KAAA,EAAE,KAAK,KAAA,QAMrD;AAED,wBAAgB,WAAW,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,KAAK,KAAA,QAM1C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAHhC,MAGgC,GAF9B,OAAO,CAMnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAH7B,MAGkC,GAFhC,OAAO,CASnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAFzB,MAAM,GAAC,SAAS,CAM5B;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAH/B,MAGoC,GAFlC,MAAM,GAAC,SAAS,CAsB5B;AAuBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAH9B,MAG8B,GAF5B,OAAO,CAOnB;AAqHD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAL5B,MAK4B,EAAE,OAAO,GAJrC,MAI0C,GAHxC,MAAM,GAAC,SAAS,CA2D5B;AAwOD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EALG,MAAM,GAAC,SAKV,EACN,cAAc,MAAmC,GAJtC,MAAM,EAAE,CA0DpB;AAED,wBAAgB,SAAS,CAAC,MAAM,KAAA,sBAI/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAH3B,MAG2B,GAFzB,KAAK,GAAC,IAAI,GAAC,QAAQ,CAI/B;AAuCD;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IAElB,UAAU;IACV,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,eAAe;IAPtB,cAQC;IAED,aAAa,CAAC,IAAI,KAAA,WAEjB;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,IAAI,EAJP,MAIO,EAAE,KAAK,EAHd,MAAM,EAGQ,EAAE,MAAM,EAFtB,MAEsB,QA2ChC;IAED,SAAS,CAAC,GAAG,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA,EAAE,MAAM,KAAA,QAelC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,MAAM,EAFjB,MAEiB,QAiB3B;IAED;;;OAGG;IACH,SAAS,CAAC,MAAM,KAAA,WAWf;IAED;;;OAGG;IACH,WAAW,CAAC,MAAM,KAAA,OASjB;IAED;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,MAAM,KAAA,OAiBnB;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,MAAM,EALF,MAKE,EAAE,QAAQ,EAJZ,MAAM,GAAC,SAIK,EAAE,YAAY,EAH1B,GAAG,CAAC,MAAM,CAAC,GAAC,SAGc,GAFxB,MAAM,GAAC,SAAS,CAoB5B;IAED;;;;OAIG;IACH,SAAS,CAAC,MAAM,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SAcvC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,UAAU,KAAA,EAAE,QAAQ,KAAA,EAAE,YAAY,KAAA,SA4BxC;CACF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,KAAA,WAElC;AA+CD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,QAAK;;;EAgDvD;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,KAAA,EAAE,eAAe,KAAA,EAAE,QAAQ,KAAA,GAHvD;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAC,GAAC,SAAS,CA2BzD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAJ7B,MAI6B,GAF3B;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,EAAE,CA0EhE;AAoCD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EALrC,MAKqC,EAAE,UAAU,EAJjD,MAAM,EAI2C,EAAE,YAAY,EAH/D,MAG+D,GAF7D,OAAO,CAAC,cAAc,CAAC,CAwFnC;AAsFD,eAAO,MAAM,uBAAuB,aASlC,CAAC;AACH,eAAO,MAAM,uBAAuB,aAKlC,CAAC;AAGH,eAAO,MAAM,6BAA6B,aAUxC,CAAC;AACH,eAAO,MAAM,0BAA0B,aA0CrC,CAAC;AAqEH;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAP9B,MAO8B,EAAE,OAAO,AAN/C,CACA,EADQ,MAMuC,EAAE,IAAI,AALrD,CACA,EADQ,MAK6C,EAAE,KAAK,AAJ5D,CACA,EADQ,MAIoD,EAAE,OAAO,AAHrE,CACA,EADQ,MAG6D,GAF3D,MAAM,GAAC,SAAS,CA8C5B;AAgDD;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,GAPG,MAOE,EACX,UAAU,GAPD,MAAM,EAOA,EACf,OAAO,GAPE,MAOG,GALD,OAAO,CAAC,MAAM,CAAC,CA0E3B;AAyXD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EANC,MAMD,EACR,UAAU,GAND,MAAM,EAMA,EACf,cAAc,AANb,CACA,EADQ,GAAG,CAAC,MAAM,CAMO,GALf,MAAM,GAAC,SAAS,CAmD5B;AAwfD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAH1B,MAG0B,GAFxB,MAAM,CAKlB;AAoDD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,KAAA,OAiB1C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,KAAA,sBAoB9C;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,GAJnC,MAIwC,EAAE,WAAW,GAHrD,MAG0D,GAFxD,MAAM,CAmDlB;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,GAJvC,MAI4C,EAAE,WAAW,GAHzD,MAG8D,GAF5D,MAAM,CA6DlB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,2BAA2B,CAC/C,GAAG,EARM,MAQN,EACH,OAAO,GARE,MAAM,EAQH,EACZ,OAAO,AARN,CACA,EADQ,MAQG,GAPD,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAAC,CAwEpF"}

package/types/lib/evinser/evinser.d.ts

@@ -41,6 +41,37 @@ export declare function defaultEvidenceLanguage(dirPath: string, bomJson?: Objec
  * @returns {Object} Options for prepareDB, analyzeProject, and createEvinseFile
  */
 export declare function buildEvinseOptions(options: Object, args: Object, input: string): Object;
+/**
+ * Read the evinse input BOM as cdxgen's 1.x-shaped internal model. A
+ * CycloneDX 2.0 document is converted with loadBomForAnalysis; a 1.x document
+ * (or an internal model) is returned as is. When `options.inputBomJson` holds
+ * a model converted earlier, a copy of it is returned instead of reading
+ * `options.input` again, so prepareDB, analyzeProject and createEvinseFile
+ * each get their own object, as they did when each parsed the file.
+ *
+ * @param {Object} options Evinse options with `input` and optional
+ *   `inputBomJson`
+ * @returns {{bomJson: Object, losses: Array<{pointer: string, reason: string}>}}
+ *   The internal model and the losses of the 2.0 read (none when
+ *   `inputBomJson` was given)
+ */
+export declare function loadEvinseInputBom(options: Object): {
+    bomJson: Object;
+    losses: Array<{
+        pointer: string;
+        reason: string;
+    }>;
+};
+/**
+ * Print the one-line notice for the losses of reading a 2.0 evinse input,
+ * with the details in thoughtLog.
+ *
+ * @param {Array<{pointer: string, reason: string}>} losses Reader losses
+ */
+export declare function reportEvinseInputLosses(losses: Array<{
+    pointer: string;
+    reason: string;
+}>): void;
 /**
  * Function to create the db for the libraries referred in the sbom.
  *
@@ -147,15 +178,18 @@ export declare function purlToLanguage(purl: string, filePath?: string): string
  * Walks the supplied components reading `internal:ImportedModules` (or
  * `internal:Namespaces` for php/ruby, plus the `internal:ImportedSymbols` the
  * C/C++ collector records) and `evidence.occurrences` properties to construct
- * lookup maps used during slice analysis.
+ * lookup maps used during slice analysis. An occurrence that carries `offset`
+ * or `symbol` seeds those too, so a re-run over a previous evinse output keys
+ * and annotates the same use sites the fresh slice adds.
  *
  * @param {Object[]} components CycloneDX components from the input SBOM
  * @param {string} language Application language used to select the import property name
- * @returns {{ purlLocationMap: Object<string, Set>, purlImportsMap: Object<string, string[]> }} Seeded purl location and import maps
+ * @returns {{ purlLocationMap: Object<string, Set>, purlImportsMap: Object<string, string[]>, purlSymbolMap: Object<string, Object<string, string>> }} Seeded purl location, import and symbol maps
  */
 export declare function initFromSbom(components: Object[], language: string): {
     purlLocationMap: Record<string, Set<any>>;
     purlImportsMap: Record<string, string[]>;
+    purlSymbolMap: Record<string, Record<string, string>>;
 };
 /**
  * Load a semantics slices file for reuse when it belongs to this project.
@@ -223,6 +257,7 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     servicesMap: {};
     dataFlowFrames: {};
     userDefinedTypesMap: {};
+    purlSymbolMap: Record<string, Record<string, string>>;
     componentPropertiesMap?: undefined;
     metadataProperties?: undefined;
     workspaceComponent?: undefined;
@@ -231,6 +266,7 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     dataFlowSlicesFile?: undefined;
     reachablesSlicesFile?: undefined;
     semanticsSlicesFile?: undefined;
+    clearedOccurrencePurls?: undefined;
     tempDir?: undefined;
     tempDirOwned?: undefined;
     cryptoComponents?: undefined;
@@ -246,12 +282,14 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     cryptoGeneratePurls: any;
     servicesMap: {};
     userDefinedTypesMap: {};
+    purlSymbolMap: Record<string, Record<string, string>>;
     workspaceComponent?: undefined;
     atomFile?: undefined;
     usagesSlicesFile?: undefined;
     dataFlowSlicesFile?: undefined;
     reachablesSlicesFile?: undefined;
     semanticsSlicesFile?: undefined;
+    clearedOccurrencePurls?: undefined;
     tempDir?: undefined;
     tempDirOwned?: undefined;
     aiComponents?: undefined;
@@ -266,11 +304,13 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     servicesMap: {};
     userDefinedTypesMap: {};
     workspaceComponent: Object | undefined;
+    purlSymbolMap: Record<string, Record<string, string>>;
     atomFile?: undefined;
     usagesSlicesFile?: undefined;
     dataFlowSlicesFile?: undefined;
     reachablesSlicesFile?: undefined;
     semanticsSlicesFile?: undefined;
+    clearedOccurrencePurls?: undefined;
     tempDir?: undefined;
     tempDirOwned?: undefined;
     aiComponents?: undefined;
@@ -291,8 +331,10 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     cryptoComponents: any[];
     aiComponents: any[];
     cryptoGeneratePurls: {};
+    purlSymbolMap: Record<string, Record<string, string>>;
     atomFile?: undefined;
     reachablesSlicesFile?: undefined;
+    clearedOccurrencePurls?: undefined;
     openapiSpecFile?: undefined;
 } | {
     componentPropertiesMap?: undefined;
@@ -304,6 +346,8 @@ export declare function analyzeProject(dbObjMap: Object, options: Object): Promi
     reachablesSlicesFile: any;
     semanticsSlicesFile: any;
     purlLocationMap: Record<string, Set<any>>;
+    purlSymbolMap: Record<string, Record<string, string>>;
+    clearedOccurrencePurls: Set<any>;
     servicesMap: {};
     dataFlowFrames: {};
     tempDir: any;
@@ -483,10 +527,13 @@ export declare function indexVersionlessCrypto(cryptoGeneratePurls: Object): Obj
  * Method to create the SBOM with evidence file called evinse file.
  *
  * @param {Object} sliceArtefacts Various artefacts from the slice operation
- * @param {Object} options Command line options
- * @returns
+ * @param {Object} options Command line options. With `returnInternalModel`,
+ *   a CycloneDX 2.0 run returns the 1.x-shaped internal model instead of the
+ *   rendered document; the file written is the rendered document either way.
+ * @returns {Promise<Object>} The BOM written to the output file, or its
+ *   internal model when `returnInternalModel` is set
  */
-export declare function createEvinseFile(sliceArtefacts: Object, options: Object): Promise<any>;
+export declare function createEvinseFile(sliceArtefacts: Object, options: Object): Promise<Object>;
 /**
  * Method to convert dataflow slice into usable callstack frames
  * Implemented based on the logic proposed here - https://github.com/AppThreat/atom/blob/main/specification/docs/slices.md#data-flow-slice
@@ -573,12 +620,17 @@ export declare function attributeJsModules(ausage: Object, fileName: string, pur
  * Attribute a callsites slice's records to the packages providing their modules.
  *
  * Each record of `{"callsites": [...]}` (atom `callsites` command) is one external use site
- * carrying its own file and line; the record is an occurrence of every purl whose package
- * matches the record's module.
+ * carrying its own file, line and column; the record is an occurrence of every purl whose
+ * package matches the record's module. A record with a column (0 or more; atom writes -1 for
+ * none) is keyed `file:line:col`, so two use sites on one line are two occurrences, and its
+ * occurrence carries the column as `offset` and `module` joined with `path` by `.` as
+ * `symbol`. A record without a column keys the line (`file#line`) and its occurrence carries
+ * the `symbol` alone; a record without a `path` leaves the symbol at the bare `module`.
  *
  * @param {Object} callsitesSlice callsites slice with a `callsites` array
  * @param {Object} purlImportsMap purl -> imported modules and symbols
- * @param {Object} purlLocationMap purl -> Set of `file#line`
+ * @param {Object} purlLocationMap purl -> Set of occurrence keys
+ * @param {Object} [purlSymbolMap] purl -> occurrence key -> symbol, filled in place
  */
-export declare function attributeJsCallsites(callsitesSlice: Object, purlImportsMap: Object, purlLocationMap: Object): void;
+export declare function attributeJsCallsites(callsitesSlice: Object, purlImportsMap: Object, purlLocationMap: Object, purlSymbolMap?: Object): void;
 //# sourceMappingURL=evinser.d.ts.map

package/types/lib/evinser/evinser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"AAkIA;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAJA,MAIA,EACT,kBAAkB,GAJT,MAAM,EAIQ,QAkBxB;AAyBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EALpC,MAKoC,EAAE,OAAO,AAJrD,CACA,EADQ,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,IAAI,EAJrC,MAIqC,EAAE,KAAK,EAH5C,MAG4C,GAF1C,MAAM,CA4ClB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAF5B,MAE4B;;;;;;;eAuDtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAI6B,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAPE,MAOF,EACP,SAAS,wBAAA,EACT,UAAU,EAPD,MAOC,EACV,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,IAAI,CAAC,CAuDzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EANE,MAMF,EACP,SAAS,wBAAA,EACT,UAAU,EAND,MAMC,EACV,OAAO,KAAK,GAND,OAAO,CAAC,IAAI,CAAC,CA8CzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAPK,MAOL,EACJ,SAAS,wBAAA,EACT,MAAM,EAPG,MAOH,EACN,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAuBrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAH9B,MAG8B,GAF5B,MAAM,CAOlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAC/B,eAAe,EAPN,MAAM,GAAC,MAAM,EAOP,EACf,QAAQ,EAPC,MAOD,EACR,SAAS,AAPR,CACA,EADQ,MAOW,EACpB,OAAO,AAPN,CACA,EADQ,MAOG,GAND,OAAO,CAAC,MAAM,CAAC,CA2N3B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAJxB,MAIwB,EAAE,QAAQ,AAH1C,CACA,EADQ,MAGkC,GAFhC,MAAM,GAAC,SAAS,CA4B5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAJ5B,MAAM,EAIsB,EAAE,QAAQ,EAHtC,MAGsC,GAFpC;IAAE,eAAe,2BAAsB;IAAC,cAAc,2BAA0B;CAAE,CAiD9F;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAPC,MAOD,EACR,UAAU,EAPD,MAOC,EACV,OAAO,EAPE,MAOF,EACP,OAAO,EAPE,MAOF,GANI,SAAS,GAAC,MAAM,CAqC5B;AA4KD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAJnC,MAImC,EAAE,MAAM,EAH3C,MAG2C,GAFzC,MAAM,CAgClB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EARF,MAAM,GAAC,IAAI,GAAC,SAQV,EACX,OAAO,EAPE,MAOF,EACP,OAAO,GAPE,MAOG,EACZ,WAAW,AAPV,CACA,EADQ,MAOO,GANL,MAAM,CAmBlB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAHlC,MAGkC,EAAE,OAAO,EAF3C,MAE2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyiBrD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,OAAO,GARE,MAQG,GAPD;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAAC,CA0EpF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,cAAc,GARL,MAQU,EACnB,OAAO,GARE,MAQG,GAPD,MAAM,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,KAAA,EACR,UAAU,KAAA,EACV,QAAQ,KAAA,EACR,WAAW,KAAK,EAChB,eAAe,KAAK,EACpB,cAAc,KAAK,EACnB,eAAe,YAAY,eAuD5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EATC,MASD,EACR,mBAAmB,EATV,MASU,EACnB,KAAK,OAAA,EACL,QAAQ,EATC,MASD,EACR,eAAe,EATN,MASM,EACf,cAAc,EATL,MASK,iBA4Of;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,KAAA,EAAE,UAAU,OAAA,EAAE,cAAc,EAH9D,MAG8D,GAF5D,MAAM,CAsDlB;AA2LD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAL9B,MAK8B,EAAE,mBAAmB,yBAAA,EAAE,YAAY,EAHjE,MAGiE,GAF/D,OAAO,CA2EnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EANA,MAMA,EACT,eAAe,EANN,MAMM,EACf,WAAW,EANF,MAME,GALA,IAAI,CAqChB;AAoBD,wBAAgB,wBAAwB,CAAC,QAAQ,KAAA,EAAE,KAAK,KAAA,EAAE,WAAW,KAAK,uBA2DzE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAJnC,MAImC,EAAE,gBAAgB,OAAA,EAAE,WAAW,EAFlE,MAEkE,QAgD5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAJnC,MAImC,EAAE,KAAK,EAH1C,MAG0C,GAFxC,MAAM,CAalB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAJ9B,MAI8B,EAAE,IAAI,EAHpC,MAGoC,GAFlC,MAAM,EAAE,GAAC,SAAS,CAwF9B;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAQ5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAHzC,MAGyC,GAFvC,MAAM,CAelB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,mBAAmB,EAH/C,MAG+C,GAF7C,MAAM,CAiBlB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,cAAc,EAJ1C,MAI0C,EAAE,OAAO,EAHnD,MAGmD,gBAsO7D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EARC,MAQD,EACR,mBAAmB,EARV,MAQU,EACnB,aAAa,EARJ,MAQI,EACb,QAAQ,EARC,MAQD,EACR,gBAAgB,EARP,MAQO,EAChB,cAAc,EARL,MAQK,eA4Gf;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,EAAE,eAAe,EAFtD,MAEsD;;;;;;;;YAgFzD,SAAS;YACT,GAAG;;;;EASV;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,OAAA,qBA4DnC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAH9B,MAG8B,UAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAJvC,MAIuC,EAAE,YAAY,EAHrD,MAGqD,GAFnD,MAAM,GAAC,SAAS,CAmD5B;AAgBD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAH7B,MAG6B,GAF3B,MAAM,GAAC,SAAS,CAY5B;AAiCD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EANG,MAMH,EACN,QAAQ,EANC,MAMD,EACR,cAAc,EANL,MAMK,EACd,eAAe,EANN,MAMM,QAoChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EALL,MAKK,EACd,cAAc,EALL,MAKK,EACd,eAAe,EALN,MAKM,QAehB"}
+{"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"AA6IA;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAJA,MAIA,EACT,kBAAkB,GAJT,MAAM,EAIQ,QAkBxB;AAyBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EALpC,MAKoC,EAAE,OAAO,AAJrD,CACA,EADQ,MAI6C,EAAE,OAAO,AAH9D,CACA,EADQ,MAG2D,GAFzD,MAAM,GAAC,SAAS,CAyC5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAL/B,MAK+B,EAAE,IAAI,EAJrC,MAIqC,EAAE,KAAK,EAH5C,MAG4C,GAF1C,MAAM,CA4ClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAN/B,MAM+B,GAJ7B;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAC,CAAC,CAAA;CAAC,CAW/E;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAFnC,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAEJ,QAQ7C;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAF5B,MAE4B;;;;;;;eAuDtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAJ7B,MAI6B,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAPE,MAOF,EACP,SAAS,wBAAA,EACT,UAAU,EAPD,MAOC,EACV,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,IAAI,CAAC,CAuDzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EANE,MAMF,EACP,SAAS,wBAAA,EACT,UAAU,EAND,MAMC,EACV,OAAO,KAAK,GAND,OAAO,CAAC,IAAI,CAAC,CA8CzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAPK,MAOL,EACJ,SAAS,wBAAA,EACT,MAAM,EAPG,MAOH,EACN,OAAO,GAPE,MAOG,GAND,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAuBrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAH9B,MAG8B,GAF5B,MAAM,CAOlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAC/B,eAAe,EAPN,MAAM,GAAC,MAAM,EAOP,EACf,QAAQ,EAPC,MAOD,EACR,SAAS,AAPR,CACA,EADQ,MAOW,EACpB,OAAO,AAPN,CACA,EADQ,MAOG,GAND,OAAO,CAAC,MAAM,CAAC,CA2N3B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAJxB,MAIwB,EAAE,QAAQ,AAH1C,CACA,EADQ,MAGkC,GAFhC,MAAM,GAAC,SAAS,CA4B5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAJ5B,MAAM,EAIsB,EAAE,QAAQ,EAHtC,MAGsC,GAFpC;IAAE,eAAe,2BAAsB;IAAC,cAAc,2BAA2B;IAAC,aAAa,yCAAwC;CAAE,CA+DrJ;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAPC,MAOD,EACR,UAAU,EAPD,MAOC,EACV,OAAO,EAPE,MAOF,EACP,OAAO,EAPE,MAOF,GANI,SAAS,GAAC,MAAM,CAqC5B;AA4KD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAJnC,MAImC,EAAE,MAAM,EAH3C,MAG2C,GAFzC,MAAM,CAgClB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EARF,MAAM,GAAC,IAAI,GAAC,SAQV,EACX,OAAO,EAPE,MAOF,EACP,OAAO,GAPE,MAOG,EACZ,WAAW,AAPV,CACA,EADQ,MAOO,GANL,MAAM,CAmBlB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAHlC,MAGkC,EAAE,OAAO,EAF3C,MAE2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAylBrD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,OAAO,GARE,MAQG,GAPD;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAAC,CAsEpF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EARD,MAQC,EACV,UAAU,EARD,MAAM,EAQL,EACV,OAAO,EARE,MAQF,EACP,cAAc,GARL,MAQU,EACnB,OAAO,GARE,MAQG,GAPD,MAAM,CAqBlB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,KAAA,EACR,UAAU,KAAA,EACV,QAAQ,KAAA,EACR,WAAW,KAAK,EAChB,eAAe,KAAK,EACpB,cAAc,KAAK,EACnB,eAAe,YAAY,eAuD5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EATC,MASD,EACR,mBAAmB,EATV,MASU,EACnB,KAAK,OAAA,EACL,QAAQ,EATC,MASD,EACR,eAAe,EATN,MASM,EACf,cAAc,EATL,MASK,iBA4Of;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,KAAA,EAAE,UAAU,OAAA,EAAE,cAAc,EAH9D,MAG8D,GAF5D,MAAM,CAsDlB;AA2LD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAL9B,MAK8B,EAAE,mBAAmB,yBAAA,EAAE,YAAY,EAHjE,MAGiE,GAF/D,OAAO,CA2EnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EANA,MAMA,EACT,eAAe,EANN,MAMM,EACf,WAAW,EANF,MAME,GALA,IAAI,CAqChB;AAoBD,wBAAgB,wBAAwB,CAAC,QAAQ,KAAA,EAAE,KAAK,KAAA,EAAE,WAAW,KAAK,uBA2DzE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAJnC,MAImC,EAAE,gBAAgB,OAAA,EAAE,WAAW,EAFlE,MAEkE,QAgD5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAJnC,MAImC,EAAE,KAAK,EAH1C,MAG0C,GAFxC,MAAM,CAalB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAJ9B,MAI8B,EAAE,IAAI,EAHpC,MAGoC,GAFlC,MAAM,EAAE,GAAC,SAAS,CAwF9B;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAH5B,MAG4B,GAF1B,MAAM,GAAC,SAAS,CAQ5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAHzC,MAGyC,GAFvC,MAAM,CAelB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,mBAAmB,EAH/C,MAG+C,GAF7C,MAAM,CAiBlB;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,cAAc,EAP1C,MAO0C,EAAE,OAAO,EANnD,MAMmD,GAHjD,OAAO,CAAC,MAAM,CAAC,CAwQ3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EARC,MAQD,EACR,mBAAmB,EARV,MAQU,EACnB,aAAa,EARJ,MAQI,EACb,QAAQ,EARC,MAQD,EACR,gBAAgB,EARP,MAQO,EAChB,cAAc,EARL,MAQK,eA4Gf;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,EAAE,eAAe,EAFtD,MAEsD;;;;;;;;YAgFzD,SAAS;YACT,GAAG;;;;EASV;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,OAAA,qBA4DnC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAH9B,MAG8B,UAExC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAJvC,MAIuC,EAAE,YAAY,EAHrD,MAGqD,GAFnD,MAAM,GAAC,SAAS,CAmD5B;AAgBD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAH7B,MAG6B,GAF3B,MAAM,GAAC,SAAS,CAY5B;AAiCD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EANG,MAMH,EACN,QAAQ,EANC,MAMD,EACR,cAAc,EANL,MAMK,EACd,eAAe,EANN,MAMM,QAoChB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EANL,MAMK,EACd,cAAc,EANL,MAMK,EACd,eAAe,EANN,MAMM,EACf,aAAa,AANZ,CACF,EADU,MAMS,QA2BnB"}

package/types/lib/evinser/scalasem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/evinser/scalasem.js"],"names":[],"mappings":"AAuBA;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAJjC,MAAM,EAI2B,EAAE,cAAc,EAHjD,MAGiD,GAF/C;IAAE,eAAe,2BAA0B;CAAE,CAgCzD"}
+{"version":3,"file":"scalasem.d.ts","sourceRoot":"","sources":["../../../lib/evinser/scalasem.js"],"names":[],"mappings":"AAyBA;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAJjC,MAAM,EAI2B,EAAE,cAAc,EAHjD,MAGiD,GAF/C;IAAE,eAAe,2BAA0B;CAAE,CAkCzD"}

package/types/lib/helpers/agenticToolutils.d.ts

@@ -1,17 +1,11 @@
+import { redactHomePath } from "../core/paths.js";
+export { redactHomePath };
 /**
  * The purl type used for installed agentic CLI tools. These tools ship as
  * self-contained executables rather than as a resolvable source package, so a
  * `pkg:generic/...` identifier is the honest representation.
  */
 export declare const AGENTIC_TOOL_PURL_TYPE = "generic";
-/**
- * Rewrite an absolute path under the user's home directory to a `~`-relative
- * form so the emitted BOM does not carry the local username.
- *
- * @param {string} filePath Absolute path
- * @returns {string} Home-relative path when applicable, else the input
- */
-export declare function redactHomePath(filePath: string): string;
 /**
  * Describe where each supported agentic CLI tool stores its per-user state.
  *
@@ -20,28 +14,56 @@ export declare function redactHomePath(filePath: string): string;
  * extension locations). Only the current platform's directories plus
  * always-present dot-directories are included.
  *
- * @returns {Array<{tool: string, name: string, dirs: string[], supportDirs?: string[]}>}
+ * An entry may also name `mcpConfigs`, the files and keys where the tool
+ * lists its MCP servers, and `ide`, the IDE_PRODUCTS id of the editor the tool
+ * ships in, whose installed version and extensions folder it then reports.
+ *
+ * @param {string} [home] Home directory to resolve the folders against
+ * @returns {Array<{tool: string, name: string, dirs: string[], supportDirs?: string[], mcpConfigs?: Array<{file: string, key: string}>, ide?: string}>}
  *   One entry per known agentic CLI tool.
  */
-export declare function getAgenticToolDirs(): Array<{
+export declare function getAgenticToolDirs(home?: string): Array<{
     tool: string;
     name: string;
     dirs: string[];
     supportDirs?: string[];
+    mcpConfigs?: Array<{
+        file: string;
+        key: string;
+    }>;
+    ide?: string;
 }>;
 /**
  * Discover which agentic CLI tools are installed for the current user by
  * checking their known home directories.
  *
- * @returns {Array<{tool: string, name: string, dir: string, supportDir?: string}>}
+ * @param {string} [home] Home directory to resolve the folders against
+ * @returns {Array<{tool: string, name: string, dir: string, supportDir?: string, mcpConfigs?: Object[], ide?: string}>}
  *   One entry per discovered tool, using the first existing directory.
  */
-export declare function discoverAgenticTools(): Array<{
+export declare function discoverAgenticTools(home?: string): Array<{
     tool: string;
     name: string;
     dir: string;
     supportDir?: string;
+    mcpConfigs?: Object[];
+    ide?: string;
 }>;
+/**
+ * Count the MCP servers a tool lists across its configuration files. A server
+ * named in two files is counted once.
+ *
+ * @param {string} dir Tool home directory, which relative files resolve against
+ * @param {Array<{file: string, key: string}>} [mcpConfigs] Files and the key
+ *   holding the server map. A key is looked up as written first, so a dotted
+ *   key such as `amp.mcpServers` matches a literal property.
+ * @returns {number|undefined} Number of servers, or undefined when no file
+ *   defines any
+ */
+export declare function countConfiguredMcpServers(dir: string, mcpConfigs?: Array<{
+    file: string;
+    key: string;
+}>): number | undefined;
 /**
  * Compute safe, redacted signal counts for a discovered tool. Only structural
  * counts and small enumerated values are returned; no credential, transcript,
@@ -50,14 +72,21 @@ export declare function discoverAgenticTools(): Array<{
  * @param {string} tool Tool key
  * @param {string} dir Discovered tool home directory
  * @param {string} [supportDir] Optional platform support directory
+ * @param {Array<{file: string, key: string}>} [mcpConfigs] Files that list
+ *   the tool's MCP servers, used when the tool has no reader of its own
+ * @param {string} [home] Home directory the tool was found in
  * @returns {Object} Map of signal name to count/boolean/small-string value
  */
-export declare function collectToolSignals(tool: string, dir: string, supportDir?: string): Object;
+export declare function collectToolSignals(tool: string, dir: string, supportDir?: string, mcpConfigs?: Array<{
+    file: string;
+    key: string;
+}>, home?: string): Object;
 /**
  * Build a CycloneDX application component for one discovered agentic tool.
  *
- * @param {{tool: string, name: string, dir: string, supportDir?: string}} entry
+ * @param {{tool: string, name: string, dir: string, supportDir?: string, mcpConfigs?: Object[], ide?: string}} entry
  *   Discovered tool entry
+ * @param {string} [home] Home directory, used to find the tool's editor
  * @returns {Object} CycloneDX component
  */
 export declare function componentForAgenticTool(entry: {
@@ -65,7 +94,9 @@ export declare function componentForAgenticTool(entry: {
     name: string;
     dir: string;
     supportDir?: string;
-}): Object;
+    mcpConfigs?: Object[];
+    ide?: string;
+}, home?: string): Object;
 /**
  * Discover installed agentic CLI tools on the current host and return CycloneDX
  * components describing each one, plus the child agents, plugins, and providers
@@ -73,13 +104,16 @@ export declare function componentForAgenticTool(entry: {
  *
  * This host scan is unconditional: it does not consult scan filters such as
  * `--exclude` or profile/technique options, because it inventories fixed tool
- * home directories rather than a project tree. The `options` argument is
- * accepted for signature parity and is intentionally not used to alter results.
+ * home directories rather than a project tree.
  *
- * @param {Object} [options={}] Collection options (accepted but not applied)
+ * @param {Object} [options={}] Collection options
+ * @param {string} [options.home] Home directory to scan, defaulting to the
+ *   current user's
  * @returns {{components: Object[], services: Object[], dependencies: Object[]}} Discovered inventory
  */
-export declare function collectAgenticTools(_options?: {}): {
+export declare function collectAgenticTools(options?: {
+    home?: string;
+}): {
     components: Object[];
     services: Object[];
     dependencies: Object[];

package/types/lib/helpers/agenticToolutils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agenticToolutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/agenticToolutils.js"],"names":[],"mappings":"AAYA;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YAAY,CAAC;AA8BhD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAH5B,MAG4B,GAF1B,MAAM,CAgBlB;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,IAHrB,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAC,CAAC,CAyGvF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,IAHvB,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAgBjF;AAoUD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAL5B,MAK4B,EAAE,GAAG,EAJjC,MAIiC,EAAE,UAAU,AAHrD,CACA,EADQ,MAG6C,GAF3C,MAAM,CAkClB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAJlC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAI3B,GAFhC,MAAM,CA8ClB;AA0OD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,KAAK,GAFpC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CAoC9E"}
+{"version":3,"file":"agenticToolutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/agenticToolutils.js"],"names":[],"mappings":"AAUA,OAAO,EAAgB,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAQhE,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAiDhD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,AAJpC,CACA,EADQ,MAIwC,GAHtC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAgOtJ;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,AAJtC,CACA,EADQ,MAI0C,GAHxC,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAuBtH;AA4eD;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAPlC,MAOkC,EAAE,UAAU,AANtD,CAGA,EAHQ,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAMa,GAH5C,MAAM,GAAC,SAAS,CAuB5B;AAkCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EATK,MASL,EACJ,GAAG,EATM,MASN,EACH,UAAU,AATT,CACA,EADQ,MASC,EACV,UAAU,AATT,CAEA,EAFQ,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAShC,EACV,IAAI,AARH,CACA,EADQ,MAQO,GAPL,MAAM,CAsBlB;AA6BD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EALlC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAKhE,EAAE,IAAI,AAHhD,CACA,EADQ,MAGoD,GAFlD,MAAM,CAqElB;AA0QD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,AALxC,CAGA,EAFA;IAAyB,IAAI,AAA7B,CAEA,EAFQ,MAAM,CAEd;CAE6C,GAFnC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAC,CA0C9E"}

package/types/lib/helpers/bomSigner.d.ts

@@ -6,11 +6,18 @@ import crypto from "node:crypto";
  */
 export declare const MAX_SIGNATURE_ENTRIES = 32;
 /**
- * Members the CycloneDX 1.4 to 1.7 and 2.0 schemas define at the root of a
- * BOM. A root signature is only accepted on an object made of these members,
- * so a signed component, service, or annotation cannot pass as a signed BOM.
+ * Members the CycloneDX 1.4 to 1.7 schemas define at the root of a BOM, plus
+ * `specFormat`, which an early 2.0 draft used in place of `bomFormat`. A JSF
+ * root signature is only accepted on an object made of these members, so a
+ * signed component, service, or annotation cannot pass as a signed BOM.
  */
 export declare const BOM_ROOT_MEMBERS: readonly string[];
+/**
+ * Members the CycloneDX 2.0 draft schema defines at the root of a document.
+ * A JSS root signature (lib/helpers/jssSigner.js) is only accepted on an
+ * object made of these members.
+ */
+export declare const BOM_20_ROOT_MEMBERS: readonly string[];
 /**
  * Renders a value taken from a document for a message. JSON can make any field
  * an object or array, and interpolating those directly can throw.
@@ -19,6 +26,16 @@ export declare const BOM_ROOT_MEMBERS: readonly string[];
  * @returns {string} - Printable text
  */
 export declare function displayValue(value: any): string;
+/**
+ * Deterministic JSON canonicalizer following RFC 8785 (JCS), which JSF uses to
+ * produce the signed data. Values are serialized the way JSON.stringify would
+ * see them, so an in-memory object and its parsed JSON form canonicalize
+ * identically.
+ *
+ * @param {any} value - The JSON object/value to canonicalize
+ * @returns {string|undefined} - Canonicalized JSON string, or undefined for values JSON omits
+ */
+export declare function canonicalizeJson(value: any): string | undefined;
 /**
  * Wraps shared-secret material for HMAC (HS256, HS384, HS512) signing or
  * verification.

package/types/lib/helpers/bomSigner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bomSigner.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomSigner.js"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAyDjC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,mBAqB3B,CAAC;AAmBH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAHvB,GAGuB,GAFrB,MAAM,CAWlB;AA+LD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAGS,GAF5B,MAAM,CAAC,SAAS,CA2B5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAGA,GAF1B,MAAM,CAAC,SAAS,CAW5B;AAwBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,GAFnC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA2BrD;AAmYD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAdpB,MAcoB,EAAE,OAAO,GAZrC;IAAuD,UAAU,EAAzD,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAC7C;IAAyB,SAAS,AAAlC,CACA,EADQ,MAAM,CACd;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;IAA0B,cAAc,AAAxC,CACA,EADQ,OAAO,CACf;IAA0B,oBAAoB,AAA9C,CACA,EADQ,OAAO,CACf;IAAyB,KAAK,AAA9B,CACA,EADQ,MAAM,CACd;IAAyB,IAAI,AAA7B,CACA,EADQ,MAAM,CACd;IAA0B,cAAc,AAAxC,CACA,EADQ,OAAO,CACf;IAA0B,YAAY,AAAtC,CACA,EADQ,OAAO,CACf;IAA0B,eAAe,AAAzC,CACA,EADQ,OAAO,CACf;CAE0C,GAFhC,MAAM,CA4FlB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,UAAU,CAAC,IAAI,EANpB,MAMoB,EAAE,SAAS,EAL/B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAKG,EAAE,OAAO,AAJhD,CAEA,EADA;IAA2B,OAAO,AAAlC,CACA,EADQ,MAAM,EAAE,CAChB;CAEqD,GAF3C,OAAO,GAAC,MAAM,CAe1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAX5B,MAW4B,EAAE,IAAI,EAVlC,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAAC,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAUvC,EAAE,OAAO,AATnD,CAIA,EAHA;IAA0B,IAAI,AAA9B,CACA,EADQ,OAAO,CACf;IAA0B,eAAe,AAAzC,CACA,EADQ,OAAO,CACf;IAA0B,UAAU,AAApC,CACA,EADQ,OAAO,CACf;CAKwD,GAL9C;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAqH3G;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAepB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,GAAG,EALlB,MAKkB,EAAE,SAAS,EAJ7B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAIC,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,OAAO,GAAC,MAAM,CAc1B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAJ/B,MAI+B,EAAE,IAAI,AAH7C,CACA,EADQ,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAGD,GAFxC,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAoBtG"}
+{"version":3,"file":"bomSigner.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomSigner.js"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAyDjC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,mBAqB3B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,mBA0B9B,CAAC;AAmBH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAHvB,GAGuB,GAFrB,MAAM,CAWlB;AA+BD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAH3B,GAG2B,GAFzB,MAAM,GAAC,SAAS,CAoB5B;AAqID;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAH9B,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAGS,GAF5B,MAAM,CAAC,SAAS,CA2B5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAH5B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAGA,GAF1B,MAAM,CAAC,SAAS,CAW5B;AAwBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAHrC,MAGqC,GAFnC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA2BrD;AAmYD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAdpB,MAcoB,EAAE,OAAO,GAZrC;IAAuD,UAAU,EAAzD,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAC7C;IAAyB,SAAS,AAAlC,CACA,EADQ,MAAM,CACd;IAAyB,YAAY,AAArC,CACA,EADQ,MAAM,CACd;IAA0B,cAAc,AAAxC,CACA,EADQ,OAAO,CACf;IAA0B,oBAAoB,AAA9C,CACA,EADQ,OAAO,CACf;IAAyB,KAAK,AAA9B,CACA,EADQ,MAAM,CACd;IAAyB,IAAI,AAA7B,CACA,EADQ,MAAM,CACd;IAA0B,cAAc,AAAxC,CACA,EADQ,OAAO,CACf;IAA0B,YAAY,AAAtC,CACA,EADQ,OAAO,CACf;IAA0B,eAAe,AAAzC,CACA,EADQ,OAAO,CACf;CAE0C,GAFhC,MAAM,CA4FlB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,UAAU,CAAC,IAAI,EANpB,MAMoB,EAAE,SAAS,EAL/B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAKG,EAAE,OAAO,AAJhD,CAEA,EADA;IAA2B,OAAO,AAAlC,CACA,EADQ,MAAM,EAAE,CAChB;CAEqD,GAF3C,OAAO,GAAC,MAAM,CAe1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAX5B,MAW4B,EAAE,IAAI,EAVlC,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAAC,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAUvC,EAAE,OAAO,AATnD,CAIA,EAHA;IAA0B,IAAI,AAA9B,CACA,EADQ,OAAO,CACf;IAA0B,eAAe,AAAzC,CACA,EADQ,OAAO,CACf;IAA0B,UAAU,AAApC,CACA,EADQ,OAAO,CACf;CAKwD,GAL9C;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,GAAC,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAqH3G;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAHlC,MAGkC,GAFhC,MAAM,EAAE,CAepB;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,GAAG,EALlB,MAKkB,EAAE,SAAS,EAJ7B,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAIC,EAAE,OAAO,AAH9C,CACA,EADQ,MAG2C,GAFzC,OAAO,GAAC,MAAM,CAc1B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAJ/B,MAI+B,EAAE,IAAI,AAH7C,CACA,EADQ,KAAK,CAAC,MAAM,GAAC,MAAM,GAAC,MAAM,GAAC,MAAM,CAAC,SAAS,CAGD,GAFxC,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAoBtG"}