@effected/sbom 0.12.0 → 0.14.0

package/IdentityToken.js

@@ -1,6 +1,6 @@
 import { Context, Effect, Layer, Redacted, Schema } from "effect";
 
-//#region src/IdentityToken.ts
+// src/IdentityToken.ts
 /**
 * Raised when an identity token cannot be obtained.
 *
@@ -69,5 +69,4 @@ var IdentityToken = class IdentityToken extends Context.Service()("@effected/sbo
 	static layerTest = (overrides = {}) => Layer.succeed(IdentityToken, IdentityToken.makeTest(overrides));
 };
 
-//#endregion
 export { IdentityToken, IdentityTokenError };

package/InTotoStatement.js

@@ -1,6 +1,6 @@
 import { Effect, Result, Schema } from "effect";
 
-//#region src/InTotoStatement.ts
+// src/InTotoStatement.ts
 /**
 * The in-toto Statement v1 type URI, stamped onto every statement this package
 * emits.
@@ -159,5 +159,4 @@ var InTotoStatement = class InTotoStatement extends Schema.Class("InTotoStatemen
 	}
 };
 
-//#endregion
 export { CYCLONEDX_BOM_PREDICATE, IN_TOTO_STATEMENT_V1, InTotoStatement, InTotoSubject, InvalidSha256DigestError, Sha256Digest };

package/NtiaReport.js

@@ -1,6 +1,6 @@
 import { Schema } from "effect";
 
-//#region src/NtiaReport.ts
+// src/NtiaReport.ts
 /**
 * The seven NTIA minimum elements, by stable identifier.
 *
@@ -141,5 +141,4 @@ elements: Schema.Array(NtiaElement) }) {
 	}
 };
 
-//#endregion
 export { NtiaElement, NtiaElementId, NtiaReport };

package/Sbom.js

@@ -1,7 +1,7 @@
 import { BOM_FORMAT, SbomDocument, SbomMetadata, documentJson } from "./SbomDocument.js";
 import { Effect, FileSystem, Schema } from "effect";
 
-//#region src/Sbom.ts
+// src/Sbom.ts
 /**
 * Raised when a BOM cannot be written to disk.
 *
@@ -98,5 +98,4 @@ var Sbom = class {
 	static write = write;
 };
 
-//#endregion
 export { Sbom, SbomWriteError };

package/SbomDocument.js

@@ -1,7 +1,7 @@
 import { Schema } from "effect";
 import { License, isValidExpression } from "@effected/spdx";
 
-//#region src/SbomDocument.ts
+// src/SbomDocument.ts
 /** The BOM format discriminator. CycloneDX requires this exact string. */
 const BOM_FORMAT = "CycloneDX";
 /** The only specification version this package emits. */
@@ -219,5 +219,4 @@ const documentJson = (document) => compact({
 	components: document.components.map(componentJson)
 });
 
-//#endregion
 export { BOM_FORMAT, Component, ComponentType, Contact, ExternalReference, ExternalReferenceType, SbomDocument, SbomMetadata, Supplier, documentJson };

package/SbomMetadataSource.js

@@ -1,7 +1,7 @@
 import { Component, Contact, ExternalReference, SbomMetadata, Supplier } from "./SbomDocument.js";
 import { Option } from "effect";
 
-//#region src/SbomMetadataSource.ts
+// src/SbomMetadataSource.ts
 /** The purl namespace and name segments for an npm package name. */
 const purlSegments = (name) => {
 	const separator = name.lastIndexOf("/");
@@ -205,5 +205,4 @@ var SbomMetadataSource = class {
 	static merge = merge;
 };
 
-//#endregion
 export { SbomMetadataSource };

package/SigstoreBundle.js

@@ -1,6 +1,6 @@
 import { Schema } from "effect";
 
-//#region src/SigstoreBundle.ts
+// src/SigstoreBundle.ts
 /**
 * The Sigstore bundle media type this package produces.
 *
@@ -44,5 +44,4 @@ var SigstoreBundle = class extends Schema.Class("SigstoreBundle")({
 	dsseEnvelope: Schema.Unknown
 }) {};
 
-//#endregion
 export { IN_TOTO_PAYLOAD_TYPE, SIGSTORE_BUNDLE_V0_3_MEDIA_TYPE, SigstoreBundle };

package/SigstoreSigner.js

@@ -4,7 +4,7 @@ import { Context, Effect, Layer, Redacted, Schema } from "effect";
 import { bundleToJSON } from "@sigstore/bundle";
 import { DSSEBundleBuilder, FulcioSigner, RekorWitness } from "@sigstore/sign";
 
-//#region src/SigstoreSigner.ts
+// src/SigstoreSigner.ts
 /**
 * The OIDC audience Sigstore's certificate authority requires.
 *
@@ -149,5 +149,4 @@ var SigstoreSigner = class SigstoreSigner extends Context.Service()("@effected/s
 	static layerTest = (overrides = {}) => Layer.succeed(SigstoreSigner, SigstoreSigner.makeTest(overrides));
 };
 
-//#endregion
 export { SIGSTORE_OIDC_AUDIENCE, SigningError, SigningErrorKind, SigstoreSigner };

package/SlsaProvenance.js

@@ -1,6 +1,6 @@
 import { Schema } from "effect";
 
-//#region src/SlsaProvenance.ts
+// src/SlsaProvenance.ts
 /**
 * The SLSA Provenance v1 predicate type URI.
 *
@@ -154,5 +154,4 @@ var SlsaProvenance = class SlsaProvenance extends Schema.Class("SlsaProvenance")
 	}
 };
 
-//#endregion
 export { GITHUB_BUILD_TYPE, SLSA_PROVENANCE_V1, SlsaBuildDefinition, SlsaProvenance, SlsaRunDetails };

package/index.d.ts

@@ -1,7 +1,6 @@
 import { Package, Package as Package$1, Person, Repository } from "@effected/package-json";
 import { Brand, Context, Effect, FileSystem, Layer, Redacted, Result, Schema } from "effect";
 import { Signer, Witness } from "@sigstore/sign";
-//#region src/IdentityToken.d.ts
 declare const IdentityTokenError_base: Schema.Class<IdentityTokenError, Schema.TaggedStruct<"IdentityTokenError", {
   /** The audience the token was requested for. */
   readonly audience: Schema.String;
@@ -82,8 +81,6 @@ export declare class IdentityToken extends IdentityToken_base {
   /** {@link (IdentityToken:class).makeTest} behind a `Layer`. */
   static readonly layerTest: (overrides?: Partial<IdentityTokenShape>) => Layer.Layer<IdentityToken>;
 }
-//#endregion
-//#region src/InTotoStatement.d.ts
 /**
  * The in-toto Statement v1 type URI, stamped onto every statement this package
  * emits.
@@ -267,8 +264,6 @@ export declare class InTotoStatement extends InTotoStatement_base {
     readonly space?: number | undefined;
   }): string;
 }
-//#endregion
-//#region src/SbomDocument.d.ts
 /**
  * The CycloneDX component types this package emits.
  *
@@ -423,8 +418,6 @@ declare const SbomDocument_base: Schema.Class<SbomDocument, Schema.Struct<{
  * @public
  */
 export declare class SbomDocument extends SbomDocument_base {}
-//#endregion
-//#region src/NtiaReport.d.ts
 /**
  * The seven NTIA minimum elements, by stable identifier.
  *
@@ -486,8 +479,6 @@ export declare class NtiaReport extends NtiaReport_base {
    */
   static of(document: SbomDocument): NtiaReport;
 }
-//#endregion
-//#region src/Sbom.d.ts
 /**
  * Input to {@link Sbom.generate}.
  *
@@ -573,8 +564,6 @@ export declare class Sbom {
    */
   static readonly write: (document: SbomDocument, path: string, options?: SbomJsonOptions | undefined) => Effect.Effect<void, SbomWriteError, FileSystem.FileSystem>;
 }
-//#endregion
-//#region src/SbomMetadataSource.d.ts
 /**
  * What a manifest cannot supply, and the two places an explicit value wins.
  *
@@ -736,8 +725,6 @@ export declare class SbomMetadataSource {
    */
   static readonly merge: (base: SbomMetadata, override: SbomMetadata) => SbomMetadata;
 }
-//#endregion
-//#region src/SigstoreBundle.d.ts
 /**
  * The Sigstore bundle media type this package produces.
  *
@@ -781,8 +768,6 @@ declare const SigstoreBundle_base: Schema.Class<SigstoreBundle, Schema.Struct<{
  * @public
  */
 export declare class SigstoreBundle extends SigstoreBundle_base {}
-//#endregion
-//#region src/SigstoreSigner.d.ts
 /**
  * The OIDC audience Sigstore's certificate authority requires.
  *
@@ -911,8 +896,6 @@ export declare class SigstoreSigner extends SigstoreSigner_base {
   /** {@link (SigstoreSigner:class).makeTest} behind a `Layer`. */
   static readonly layerTest: (overrides?: Partial<SigstoreSignerShape>) => Layer.Layer<SigstoreSigner>;
 }
-//#endregion
-//#region src/SlsaProvenance.d.ts
 /**
  * The SLSA Provenance v1 predicate type URI.
  *
@@ -1079,6 +1062,5 @@ export declare class SlsaProvenance extends SlsaProvenance_base {
    */
   static forGitHubWorkflow(input: GitHubWorkflowProvenance): SlsaProvenance;
 }
-//#endregion
 export { type ComponentInput, type CopyrightYears, type GitHubWorkflowProvenance, type IdentityTokenShape, type InTotoStatementInput, type InTotoSubjectInput, Package, Person, type PredicateType, Repository, type SbomInput, type SbomJsonOptions, type SbomMetadataOptions, type SigstoreSignerOptions, type SigstoreSignerShape };
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@effected/sbom",
-	"version": "0.12.0",
+	"version": "0.14.0",
 	"private": false,
 	"description": "CycloneDX 1.6 SBOM construction, SLSA provenance, NTIA validation and Sigstore signing as typed services.",
 	"keywords": [
@@ -39,8 +39,8 @@
 		"./package.json": "./package.json"
 	},
 	"dependencies": {
-		"@effected/package-json": "^0.22.0",
-		"@effected/spdx": "^0.14.0",
+		"@effected/package-json": "^0.24.0",
+		"@effected/spdx": "^0.16.0",
 		"@sigstore/bundle": "^5.0.0",
 		"@sigstore/sign": "^5.0.0"
 	},