@effected/sbom 0.4.4 → 0.5.0

package/index.d.ts

@@ -18,7 +18,7 @@ declare const IdentityTokenError_base: Schema.Class<IdentityTokenError, Schema.T
  *
  * @public
  */
-declare class IdentityTokenError extends IdentityTokenError_base {
+export declare class IdentityTokenError extends IdentityTokenError_base {
   get message(): string;
 }
 /**
@@ -50,7 +50,7 @@ declare const IdentityToken_base: Context.ServiceClass<IdentityToken, "@effected
  *
  * @public
  */
-declare class IdentityToken extends IdentityToken_base {
+export declare class IdentityToken extends IdentityToken_base {
   /**
    * A layer answering with a token the caller already holds.
    *
@@ -84,13 +84,13 @@ declare class IdentityToken extends IdentityToken_base {
  *
  * @public
  */
-declare const IN_TOTO_STATEMENT_V1: "https://in-toto.io/Statement/v1";
+export declare const IN_TOTO_STATEMENT_V1: "https://in-toto.io/Statement/v1";
 /**
  * The CycloneDX BOM predicate type, for attesting an SBOM.
  *
  * @public
  */
-declare const CYCLONEDX_BOM_PREDICATE: "https://cyclonedx.org/bom";
+export declare const CYCLONEDX_BOM_PREDICATE: "https://cyclonedx.org/bom";
 /**
  * The URI naming what a statement asserts about its subjects.
  *
@@ -113,7 +113,7 @@ declare const InvalidSha256DigestError_base: Schema.Class<InvalidSha256DigestErr
  *
  * @public
  */
-declare class InvalidSha256DigestError extends InvalidSha256DigestError_base {
+export declare class InvalidSha256DigestError extends InvalidSha256DigestError_base {
   get message(): string;
 }
 /**
@@ -128,7 +128,7 @@ declare class InvalidSha256DigestError extends InvalidSha256DigestError_base {
  *
  * @public
  */
-declare const Sha256Digest: Schema.brand<Schema.String, "Sha256Digest"> & {
+export declare const Sha256Digest: Schema.brand<Schema.String, "Sha256Digest"> & {
   isValid: (value: string) => boolean;
   parseResult: (value: string) => Result.Result<Sha256Digest, InvalidSha256DigestError>;
   parse: (value: string) => Effect.Effect<Sha256Digest, InvalidSha256DigestError, never>;
@@ -138,7 +138,7 @@ declare const Sha256Digest: Schema.brand<Schema.String, "Sha256Digest"> & {
  *
  * @public
  */
-type Sha256Digest = string & Brand.Brand<"Sha256Digest">;
+export type Sha256Digest = string & Brand.Brand<"Sha256Digest">;
 declare const InTotoSubject_base: Schema.Class<InTotoSubject, Schema.Struct<{
   /** How the subject is identified — a purl for an npm package. */
   readonly name: Schema.String;
@@ -156,7 +156,7 @@ declare const InTotoSubject_base: Schema.Class<InTotoSubject, Schema.Struct<{
  *
  * @public
  */
-declare class InTotoSubject extends InTotoSubject_base {
+export declare class InTotoSubject extends InTotoSubject_base {
   /**
    * A subject identified by a SHA-256 digest.
    *
@@ -238,7 +238,7 @@ declare const InTotoStatement_base: Schema.Class<InTotoStatement, Schema.Struct<
  *
  * @public
  */
-declare class InTotoStatement extends InTotoStatement_base {
+export declare class InTotoStatement extends InTotoStatement_base {
   /** A statement over any number of subjects. **Total.** */
   static of(input: InTotoStatementInput): InTotoStatement;
   /** A statement over a single artifact — the common case. **Total.** */
@@ -267,13 +267,13 @@ declare class InTotoStatement extends InTotoStatement_base {
  *
  * @public
  */
-declare const ComponentType: Schema.Literals<readonly ["library", "application", "framework"]>;
+export declare const ComponentType: Schema.Literals<readonly ["library", "application", "framework"]>;
 /**
  * The decoded type of {@link (ComponentType:variable)}.
  *
  * @public
  */
-type ComponentType = typeof ComponentType.Type;
+export type ComponentType = typeof ComponentType.Type;
 /**
  * An external reference's kind.
  *
@@ -284,13 +284,13 @@ type ComponentType = typeof ComponentType.Type;
  *
  * @public
  */
-declare const ExternalReferenceType: Schema.Literals<readonly ["vcs", "issue-tracker", "website", "documentation"]>;
+export declare const ExternalReferenceType: Schema.Literals<readonly ["vcs", "issue-tracker", "website", "documentation"]>;
 /**
  * The decoded type of {@link (ExternalReferenceType:variable)}.
  *
  * @public
  */
-type ExternalReferenceType = typeof ExternalReferenceType.Type;
+export type ExternalReferenceType = typeof ExternalReferenceType.Type;
 declare const ExternalReference_base: Schema.Class<ExternalReference, Schema.Struct<{
   /** The reference kind. */
   readonly type: Schema.Literals<readonly ["vcs", "issue-tracker", "website", "documentation"]>;
@@ -302,7 +302,7 @@ declare const ExternalReference_base: Schema.Class<ExternalReference, Schema.Str
  *
  * @public
  */
-declare class ExternalReference extends ExternalReference_base {}
+export declare class ExternalReference extends ExternalReference_base {}
 declare const Contact_base: Schema.Class<Contact, Schema.Struct<{
   /** The contact's name. */
   readonly name: Schema.optionalKey<Schema.String>;
@@ -316,7 +316,7 @@ declare const Contact_base: Schema.Class<Contact, Schema.Struct<{
  *
  * @public
  */
-declare class Contact extends Contact_base {}
+export declare class Contact extends Contact_base {}
 declare const Supplier_base: Schema.Class<Supplier, Schema.Struct<{
   /** The supplier organization's name. */
   readonly name: Schema.String;
@@ -334,7 +334,7 @@ declare const Supplier_base: Schema.Class<Supplier, Schema.Struct<{
  *
  * @public
  */
-declare class Supplier extends Supplier_base {}
+export declare class Supplier extends Supplier_base {}
 declare const Component_base: Schema.Class<Component, Schema.Struct<{
   /** What kind of component this is. */
   readonly type: Schema.Literals<readonly ["library", "application", "framework"]>;
@@ -371,7 +371,7 @@ declare const Component_base: Schema.Class<Component, Schema.Struct<{
  *
  * @public
  */
-declare class Component extends Component_base {}
+export declare class Component extends Component_base {}
 declare const SbomMetadata_base: Schema.Class<SbomMetadata, Schema.Struct<{
   /** When the BOM was assembled — NTIA minimum element 7. */
   readonly timestamp: Schema.optionalKey<Schema.String>;
@@ -387,7 +387,7 @@ declare const SbomMetadata_base: Schema.Class<SbomMetadata, Schema.Struct<{
  *
  * @public
  */
-declare class SbomMetadata extends SbomMetadata_base {}
+export declare class SbomMetadata extends SbomMetadata_base {}
 declare const SbomDocument_base: Schema.Class<SbomDocument, Schema.Struct<{
   /** Always `"CycloneDX"`. */
   readonly bomFormat: Schema.Literal<"CycloneDX">;
@@ -410,7 +410,7 @@ declare const SbomDocument_base: Schema.Class<SbomDocument, Schema.Struct<{
  *
  * @public
  */
-declare class SbomDocument extends SbomDocument_base {}
+export declare class SbomDocument extends SbomDocument_base {}
 //#endregion
 //#region src/NtiaReport.d.ts
 /**
@@ -422,13 +422,13 @@ declare class SbomDocument extends SbomDocument_base {}
  *
  * @public
  */
-declare const NtiaElementId: Schema.Literals<readonly ["supplierName", "componentName", "componentVersion", "uniqueIdentifier", "dependencyRelationship", "sbomAuthor", "timestamp"]>;
+export declare const NtiaElementId: Schema.Literals<readonly ["supplierName", "componentName", "componentVersion", "uniqueIdentifier", "dependencyRelationship", "sbomAuthor", "timestamp"]>;
 /**
  * The decoded type of {@link (NtiaElementId:variable)}.
  *
  * @public
  */
-type NtiaElementId = typeof NtiaElementId.Type;
+export type NtiaElementId = typeof NtiaElementId.Type;
 declare const NtiaElement_base: Schema.Class<NtiaElement, Schema.Struct<{
   /** Which element this is. */
   readonly id: Schema.Literals<readonly ["supplierName", "componentName", "componentVersion", "uniqueIdentifier", "dependencyRelationship", "sbomAuthor", "timestamp"]>;
@@ -442,7 +442,7 @@ declare const NtiaElement_base: Schema.Class<NtiaElement, Schema.Struct<{
  *
  * @public
  */
-declare class NtiaElement extends NtiaElement_base {}
+export declare class NtiaElement extends NtiaElement_base {}
 declare const NtiaReport_base: Schema.Class<NtiaReport, Schema.Struct<{
   /** One verdict per element, in the published order. */
   readonly elements: Schema.$Array<typeof NtiaElement>;
@@ -460,7 +460,7 @@ declare const NtiaReport_base: Schema.Class<NtiaReport, Schema.Struct<{
  *
  * @public
  */
-declare class NtiaReport extends NtiaReport_base {
+export declare class NtiaReport extends NtiaReport_base {
   /** Whether every element is satisfied. */
   get compliant(): boolean;
   /** The elements the document does not satisfy, by id. */
@@ -510,7 +510,7 @@ declare const SbomWriteError_base: Schema.Class<SbomWriteError, Schema.TaggedStr
  *
  * @public
  */
-declare class SbomWriteError extends SbomWriteError_base {
+export declare class SbomWriteError extends SbomWriteError_base {
   get message(): string;
 }
 /**
@@ -526,7 +526,7 @@ declare class SbomWriteError extends SbomWriteError_base {
  *
  * @public
  */
-declare class Sbom {
+export declare class Sbom {
   private constructor();
   /**
    * Assemble a CycloneDX 1.6 document.
@@ -627,7 +627,7 @@ interface CopyrightYears {
  *
  * @public
  */
-declare class SbomMetadataSource {
+export declare class SbomMetadataSource {
   private constructor();
   /**
    * The canonical npm package URL for a name and optional version.
@@ -722,14 +722,14 @@ declare class SbomMetadataSource {
  *
  * @public
  */
-declare const SIGSTORE_BUNDLE_V0_3_MEDIA_TYPE: "application/vnd.dev.sigstore.bundle.v0.3+json";
+export declare const SIGSTORE_BUNDLE_V0_3_MEDIA_TYPE: "application/vnd.dev.sigstore.bundle.v0.3+json";
 /**
  * The DSSE payload type for an in-toto statement, per the GitHub attestations
  * specification.
  *
  * @public
  */
-declare const IN_TOTO_PAYLOAD_TYPE: "application/vnd.in-toto+json";
+export declare const IN_TOTO_PAYLOAD_TYPE: "application/vnd.in-toto+json";
 declare const SigstoreBundle_base: Schema.Class<SigstoreBundle, Schema.Struct<{
   /** The bundle's media type, usually {@link SIGSTORE_BUNDLE_V0_3_MEDIA_TYPE}. */
   readonly mediaType: Schema.String;
@@ -755,7 +755,7 @@ declare const SigstoreBundle_base: Schema.Class<SigstoreBundle, Schema.Struct<{
  *
  * @public
  */
-declare class SigstoreBundle extends SigstoreBundle_base {}
+export declare class SigstoreBundle extends SigstoreBundle_base {}
 //#endregion
 //#region src/SigstoreSigner.d.ts
 /**
@@ -771,19 +771,19 @@ declare class SigstoreBundle extends SigstoreBundle_base {}
  *
  * @public
  */
-declare const SIGSTORE_OIDC_AUDIENCE: "sigstore";
+export declare const SIGSTORE_OIDC_AUDIENCE: "sigstore";
 /**
  * Which step of signing failed.
  *
  * @public
  */
-declare const SigningErrorKind: Schema.Literals<readonly ["identity", "certificate", "transparencyLog", "bundle"]>;
+export declare const SigningErrorKind: Schema.Literals<readonly ["identity", "certificate", "transparencyLog", "bundle"]>;
 /**
  * The decoded type of {@link (SigningErrorKind:variable)}.
  *
  * @public
  */
-type SigningErrorKind = typeof SigningErrorKind.Type;
+export type SigningErrorKind = typeof SigningErrorKind.Type;
 declare const SigningError_base: Schema.Class<SigningError, Schema.TaggedStruct<"SigningError", {
   /** Which step failed. */
   readonly kind: Schema.Literals<readonly ["identity", "certificate", "transparencyLog", "bundle"]>;
@@ -801,7 +801,7 @@ declare const SigningError_base: Schema.Class<SigningError, Schema.TaggedStruct<
  *
  * @public
  */
-declare class SigningError extends SigningError_base {
+export declare class SigningError extends SigningError_base {
   get message(): string;
 }
 /**
@@ -858,7 +858,7 @@ declare const SigstoreSigner_base: Context.ServiceClass<SigstoreSigner, "@effect
  *
  * @public
  */
-declare class SigstoreSigner extends SigstoreSigner_base {
+export declare class SigstoreSigner extends SigstoreSigner_base {
   /** Signing against the public-good Fulcio and Rekor instances. */
   static readonly layer: Layer.Layer<SigstoreSigner, never, IdentityToken>;
   /** {@link (SigstoreSigner:class).layer} with the signing endpoints, or the signer and witnesses, replaced. */
@@ -884,7 +884,7 @@ declare class SigstoreSigner extends SigstoreSigner_base {
  *
  * @public
  */
-declare const SLSA_PROVENANCE_V1: "https://slsa.dev/provenance/v1";
+export declare const SLSA_PROVENANCE_V1: "https://slsa.dev/provenance/v1";
 /**
  * The SLSA build type identifying a GitHub Actions workflow build.
  *
@@ -897,7 +897,7 @@ declare const SLSA_PROVENANCE_V1: "https://slsa.dev/provenance/v1";
  *
  * @public
  */
-declare const GITHUB_BUILD_TYPE: "https://actions.github.io/buildtypes/workflow/v1";
+export declare const GITHUB_BUILD_TYPE: "https://actions.github.io/buildtypes/workflow/v1";
 declare const SlsaBuildDefinition_base: Schema.Class<SlsaBuildDefinition, Schema.Struct<{
   /** The build type URI — {@link GITHUB_BUILD_TYPE} for an Actions workflow. */
   readonly buildType: Schema.String;
@@ -940,7 +940,7 @@ declare const SlsaBuildDefinition_base: Schema.Class<SlsaBuildDefinition, Schema
  *
  * @public
  */
-declare class SlsaBuildDefinition extends SlsaBuildDefinition_base {}
+export declare class SlsaBuildDefinition extends SlsaBuildDefinition_base {}
 declare const SlsaRunDetails_base: Schema.Class<SlsaRunDetails, Schema.Struct<{
   /** The build platform's identity. */
   readonly builder: Schema.Struct<{
@@ -958,7 +958,7 @@ declare const SlsaRunDetails_base: Schema.Class<SlsaRunDetails, Schema.Struct<{
  *
  * @public
  */
-declare class SlsaRunDetails extends SlsaRunDetails_base {}
+export declare class SlsaRunDetails extends SlsaRunDetails_base {}
 /**
  * The claims and runner facts a GitHub Actions provenance predicate is built
  * from.
@@ -1018,7 +1018,7 @@ declare const SlsaProvenance_base: Schema.Class<SlsaProvenance, Schema.Struct<{
  *
  * @public
  */
-declare class SlsaProvenance extends SlsaProvenance_base {
+export declare class SlsaProvenance extends SlsaProvenance_base {
   /** The predicate type URI a statement carrying this must declare. */
   static readonly predicateType: PredicateType;
   /** The build type this package's GitHub-workflow constructor stamps. */
@@ -1034,5 +1034,5 @@ declare class SlsaProvenance extends SlsaProvenance_base {
   static forGitHubWorkflow(input: GitHubWorkflowProvenance): SlsaProvenance;
 }
 //#endregion
-export { CYCLONEDX_BOM_PREDICATE, Component, type ComponentInput, ComponentType, Contact, type CopyrightYears, ExternalReference, ExternalReferenceType, GITHUB_BUILD_TYPE, type GitHubWorkflowProvenance, IN_TOTO_PAYLOAD_TYPE, IN_TOTO_STATEMENT_V1, IdentityToken, IdentityTokenError, type IdentityTokenShape, InTotoStatement, type InTotoStatementInput, InTotoSubject, type InTotoSubjectInput, InvalidSha256DigestError, NtiaElement, NtiaElementId, NtiaReport, Package, Person, type PredicateType, Repository, SIGSTORE_BUNDLE_V0_3_MEDIA_TYPE, SIGSTORE_OIDC_AUDIENCE, SLSA_PROVENANCE_V1, Sbom, SbomDocument, type SbomInput, type SbomJsonOptions, SbomMetadata, type SbomMetadataOptions, SbomMetadataSource, SbomWriteError, Sha256Digest, SigningError, SigningErrorKind, SigstoreBundle, SigstoreSigner, type SigstoreSignerOptions, type SigstoreSignerShape, SlsaBuildDefinition, SlsaProvenance, SlsaRunDetails, Supplier };
+export { type ComponentInput, type CopyrightYears, type GitHubWorkflowProvenance, type IdentityTokenShape, type InTotoStatementInput, type InTotoSubjectInput, Package, Person, type PredicateType, Repository, type SbomInput, type SbomJsonOptions, type SbomMetadataOptions, type SigstoreSignerOptions, type SigstoreSignerShape };
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@effected/sbom",
-	"version": "0.4.4",
+	"version": "0.5.0",
 	"private": false,
 	"description": "CycloneDX 1.6 SBOM construction, SLSA provenance, NTIA validation and Sigstore signing as typed services.",
 	"keywords": [
@@ -39,13 +39,13 @@
 		"./package.json": "./package.json"
 	},
 	"dependencies": {
-		"@effected/package-json": "^0.13.0",
-		"@effected/spdx": "^0.5.0",
+		"@effected/package-json": "^0.14.0",
+		"@effected/spdx": "^0.6.0",
 		"@sigstore/bundle": "^5.0.0",
 		"@sigstore/sign": "^5.0.0"
 	},
 	"peerDependencies": {
-		"effect": "4.0.0-rc.109"
+		"effect": "4.0.0-rc.112"
 	},
 	"engines": {
 		"node": ">=24.11.0"