@sebastienrousseau/crypto-cli 0.0.7 → 0.0.9

package/README.md

@@ -75,7 +75,23 @@ yarn add @sebastienrousseau/crypto-cli
 
 ## Quick Start
 
-Launch the interactive menu:
+Run a subcommand, for scripts and CI:
+
+```bash
+crypto-cli hash --json < file.txt
+crypto-cli hash --algorithm blake3 file.txt
+crypto-cli cbom scan src --output cbom.json
+
+openssl rand -hex 32 > secret.key && chmod 600 secret.key
+crypto-cli encrypt --key-file secret.key file.txt > file.txt.sealed
+crypto-cli decrypt --key-file secret.key file.txt.sealed > file.txt.out
+
+crypto-cli keygen --algorithm ed25519 --json > signer.json && chmod 600 signer.json
+crypto-cli sign --key-file signer.json file.txt > file.txt.sig
+crypto-cli verify --key-file signer.json --signature-file file.txt.sig file.txt
+```
+
+Run it with no arguments in a terminal for the interactive menu:
 
 ```bash
 cryptocli
@@ -134,8 +150,10 @@ crypto-cli is the command-line interface for the Crypto Service
 Suite. It offers both legacy OpenPGP commands (key generation,
 encryption, decryption, signing, verification, revocation) and
 modern v2 commands using `@noble/*` primitives with post-quantum
-algorithm support. All operations run interactively via a guided
-prompt menu.
+algorithm support. Hashing, key generation, symmetric encryption,
+signing, password hashing and CBOM scan and audit also run as
+non-interactive subcommands with JSON output; every operation is
+available from the interactive menu.
 
 <p align="right"><a href="#contents">Back to Top</a></p>
 
@@ -164,6 +182,310 @@ prompt menu.
 | `Modern Sign`    | Sign and verify with 8 algorithms including ML-DSA          |
 | `Password Hash`  | Hash and verify passwords with 3 Argon2 variants            |
 
+### Non-interactive commands
+
+With arguments, `crypto-cli` runs a subcommand instead of the menu:
+
+- `--json` prints the result as one line of JSON on stdout, and
+  nothing else goes to stdout.
+- A command that takes a file reads standard input when the file is
+  omitted or `-`.
+- Errors, usage and notes go to stderr.
+- Exit codes: `0` success, `1` the operation failed (unreadable input,
+  a cryptographic error, a wrong key or modified ciphertext, a
+  signature or password that does not verify, an invalid CBOM, a CBOM
+  audit with status `FAIL`), `2` usage error (unknown command or
+  option, missing or invalid argument, no key or password source, key
+  and data both on standard input).
+- With no arguments, the interactive menu starts only when stdin and
+  stdout are both terminals; otherwise usage goes to stderr and the
+  exit code is `2`.
+
+Keys and passwords are never command-line values, which other users
+can see in the process list and shells keep in their history:
+
+- `encrypt`, `decrypt`, `sign` and `verify` read the key from
+  `--key-file <path>`, or from standard input with `--key-stdin`, in
+  which case the data must be a file argument (a run with both on
+  standard input exits `2`). `password hash` and `password verify`
+  take `--password-file <path>` or `--password-stdin` in the same way
+  (one trailing line break is ignored), and otherwise ask for the
+  password with a hidden prompt when standard input is a terminal
+  (twice for `password hash`).
+- `encrypt` and `decrypt` use XChaCha20-Poly1305 (crypto-lib's
+  secretbox). The key is 32 bytes, written as 64 hexadecimal
+  characters or raw. `encrypt` prints base64 of the 24-byte nonce,
+  the ciphertext and the 16-byte tag; `decrypt` reads that or the
+  `encrypt --json` line and writes the plaintext bytes unchanged
+  (base64 in its `--json` output).
+- `sign` reads a key pair saved from `keygen --json` (Ed25519,
+  Ed448, P-256, P-384 or ML-DSA) and prints the signature in hex.
+  `verify` reads the same file, or JSON with only `algorithm` and
+  `publicKey`, and prints `valid` or `invalid` (`{"valid": ...}` with
+  `--json`), exiting `1` when the signature does not verify.
+- `password hash` uses Argon2id with crypto-lib's defaults (t=3,
+  m=64 MiB, p=4) and prints a PHC string; `password verify` reads it
+  from a file or standard input.
+- On Linux and macOS, a secret file that its group or other users can
+  read gets a warning on stderr (`chmod 600` it); the command still
+  runs, because secrets mounted by container platforms are often
+  group- or world-readable. Windows has no such mode bits, so nothing
+  is checked there.
+
+The reference below is generated from the command definitions
+(`pnpm run readme:usage`); a test fails when it is out of date.
+
+<!-- cli-usage:start (generated: pnpm run readme:usage) -->
+
+#### `crypto-cli`
+
+```text
+Usage: crypto-cli [options] [command]
+
+Cryptographic operations from the command line. Run without arguments in a
+terminal for the interactive menu.
+
+Options:
+  -V, --version             print the version
+  -h, --help                print help
+
+Commands:
+  hash [options] [file]     Hash a file, or standard input when no file is given
+  keygen [options]          Generate a key pair (the private key is printed to
+                            stdout)
+  encrypt [options] [file]  Encrypt with XChaCha20-Poly1305 and print the sealed
+                            box as base64
+  decrypt [options] [file]  Decrypt the output of encrypt; exits 1 on a wrong
+                            key or modified input
+  sign [options] [file]     Sign a file with a key pair from keygen --json and
+                            print the signature in hex
+  verify [options] [file]   Verify a signature from sign; exits 1 when it is not
+                            valid
+  password                  Hash or verify a password (Argon2id)
+  cbom                      Generate or audit a Cryptographic Bill of Materials
+```
+
+#### `crypto-cli hash`
+
+```text
+Usage: crypto-cli hash [options] [file]
+
+Hash a file, or standard input when no file is given
+
+Arguments:
+  file                    file to hash; '-' or omitted reads standard input
+
+Options:
+  -a, --algorithm <name>  hash algorithm (choices: "sha256", "sha384", "sha512",
+                          "sha3-256", "sha3-512", "blake2b", "blake3", default:
+                          "sha256")
+  --json                  print the result as one line of JSON
+  -h, --help              print help
+```
+
+#### `crypto-cli keygen`
+
+```text
+Usage: crypto-cli keygen [options]
+
+Generate a key pair (the private key is printed to stdout)
+
+Options:
+  -a, --algorithm <name>  key algorithm (choices: "ed25519", "x25519", "ed448",
+                          "x448", "p256", "p384", "ml-kem-512", "ml-kem-768",
+                          "ml-kem-1024", "ml-dsa-44", "ml-dsa-65", "ml-dsa-87")
+  --kid <id>              key ID (default: thumbprint of the public key)
+  --use <use>             intended key usage (choices: "sig", "enc")
+  --json                  print the key pair as one line of JSON
+  -h, --help              print help
+```
+
+#### `crypto-cli encrypt`
+
+```text
+Usage: crypto-cli encrypt [options] [file]
+
+Encrypt with XChaCha20-Poly1305 and print the sealed box as base64
+
+Arguments:
+  file               file to encrypt; '-' or omitted reads standard input
+
+Options:
+  --key-file <path>  read the key from a file: 32 bytes, as 64 hex characters or
+                     raw
+  --key-stdin        read the key from standard input (the data must then be a
+                     file argument)
+  --json             print the result as one line of JSON
+  -h, --help         print help
+```
+
+#### `crypto-cli decrypt`
+
+```text
+Usage: crypto-cli decrypt [options] [file]
+
+Decrypt the output of encrypt; exits 1 on a wrong key or modified input
+
+Arguments:
+  file               output of encrypt (base64 or its --json line); '-' or
+                     omitted reads standard input
+
+Options:
+  --key-file <path>  read the key from a file: 32 bytes, as 64 hex characters or
+                     raw
+  --key-stdin        read the key from standard input (the data must then be a
+                     file argument)
+  --json             print the result as one line of JSON
+  -h, --help         print help
+```
+
+#### `crypto-cli sign`
+
+```text
+Usage: crypto-cli sign [options] [file]
+
+Sign a file with a key pair from keygen --json and print the signature in hex
+
+Arguments:
+  file               file to sign; '-' or omitted reads standard input
+
+Options:
+  --key-file <path>  read the key pair from a file: keygen --json output
+                     (ed25519, ed448, p256, p384, ml-dsa-44, ml-dsa-65,
+                     ml-dsa-87)
+  --key-stdin        read the key pair from standard input (the data must then
+                     be a file argument)
+  --json             print the result as one line of JSON
+  -h, --help         print help
+```
+
+#### `crypto-cli verify`
+
+```text
+Usage: crypto-cli verify [options] [file]
+
+Verify a signature from sign; exits 1 when it is not valid
+
+Arguments:
+  file                     file to verify; '-' or omitted reads standard input
+
+Options:
+  --key-file <path>        read the public key from a file: keygen --json
+                           output, or JSON with algorithm and publicKey
+  --key-stdin              read the public key from standard input (the data
+                           must then be a file argument)
+  --signature <hex>        the signature, in hex
+  --signature-file <path>  read the signature from a file (sign output or its
+                           --json line)
+  --json                   print the result as one line of JSON
+  -h, --help               print help
+```
+
+#### `crypto-cli password`
+
+```text
+Usage: crypto-cli password [options] [command]
+
+Hash or verify a password (Argon2id)
+
+Options:
+  -h, --help               print help
+
+Commands:
+  hash [options]           Hash a password with Argon2id (crypto-lib defaults:
+                           t=3, m=64 MiB, p=4) and print its PHC string
+  verify [options] [file]  Check a password against a PHC string; exits 1 when
+                           it does not match
+```
+
+#### `crypto-cli password hash`
+
+```text
+Usage: crypto-cli password hash [options]
+
+Hash a password with Argon2id (crypto-lib defaults: t=3, m=64 MiB, p=4) and
+print its PHC string
+
+Options:
+  --password-file <path>  read the password from a file: one trailing line break
+                          is ignored
+  --password-stdin        read the password from standard input
+  --json                  print the result as one line of JSON
+  -h, --help              print help
+```
+
+#### `crypto-cli password verify`
+
+```text
+Usage: crypto-cli password verify [options] [file]
+
+Check a password against a PHC string; exits 1 when it does not match
+
+Arguments:
+  file                    PHC string (password hash output or its --json line);
+                          '-' or omitted reads standard input
+
+Options:
+  --password-file <path>  read the password from a file: one trailing line break
+                          is ignored
+  --password-stdin        read the password from standard input (the data must
+                          then be a file argument)
+  --json                  print the result as one line of JSON
+  -h, --help              print help
+```
+
+#### `crypto-cli cbom`
+
+```text
+Usage: crypto-cli cbom [options] [command]
+
+Generate or audit a Cryptographic Bill of Materials
+
+Options:
+  -h, --help                  print help
+
+Commands:
+  scan [options] [directory]  Scan source code and print its CBOM
+  audit [options] [file]      Validate and audit a CBOM; exits 1 when the audit
+                              status is FAIL
+```
+
+#### `crypto-cli cbom scan`
+
+```text
+Usage: crypto-cli cbom scan [options] [directory]
+
+Scan source code and print its CBOM
+
+Arguments:
+  directory              directory or file to scan (default: ".")
+
+Options:
+  -f, --format <format>  CBOM standard (choices: "cyclonedx", "spdx", default:
+                         "cyclonedx")
+  -o, --output <file>    write the CBOM to a file, not stdout
+  --json                 print the CBOM as one line of JSON
+  -h, --help             print help
+```
+
+#### `crypto-cli cbom audit`
+
+```text
+Usage: crypto-cli cbom audit [options] [file]
+
+Validate and audit a CBOM; exits 1 when the audit status is FAIL
+
+Arguments:
+  file                 CBOM JSON file; '-' or omitted reads standard input
+
+Options:
+  -o, --output <file>  write the audit report to a file, not stdout
+  --json               print the audit report as one line of JSON
+  -h, --help           print help
+```
+
+<!-- cli-usage:end -->
+
 <p align="right"><a href="#contents">Back to Top</a></p>
 
 ## Configuration

package/dist/cli.js

@@ -1,201 +1,42 @@
 #!/usr/bin/env node
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const index_1 = require("./commands/index");
-const banner_1 = require("./helpers/banner");
-const index_2 = require("./constants/index");
-const write_utils_1 = require("./utils/write.utils");
-const kleur_1 = __importDefault(require("kleur"));
-const prompts_1 = __importDefault(require("prompts"));
-(0, index_2.language)(index_2.locale);
-console.clear();
-(0, banner_1.welcome)(index_2.constants.CLI_TITLE);
-write_utils_1.writeUtils.writeLn(index_2.constants.CLI_TITLE);
-write_utils_1.writeUtils.writeLn("");
-write_utils_1.writeUtils.writeLn(index_2.constants.CLI_DESCRIPTION);
-write_utils_1.writeUtils.writeLn("");
-(async () => {
-    const response = await (0, prompts_1.default)({
-        type: "select",
-        name: index_2.constants.PROMPT_SELECT_TTL,
-        message: index_2.constants.PROMPT_SELECT_DES + "\n\n",
-        choices: [
-            {
-                title: index_2.constants.CLI_FN_1_TTL,
-                description: index_2.constants.CLI_FN_1_DES,
-                value: index_2.constants.CLI_FN_1_TTL,
-            },
-            {
-                title: index_2.constants.CLI_FN_2_TTL,
-                description: index_2.constants.CLI_FN_2_DES,
-                value: index_2.constants.CLI_FN_2_TTL,
-            },
-            {
-                title: index_2.constants.CLI_FN_3_TTL,
-                description: index_2.constants.CLI_FN_3_DES,
-                value: index_2.constants.CLI_FN_3_TTL,
-            },
-            {
-                title: index_2.constants.CLI_FN_4_TTL,
-                description: index_2.constants.CLI_FN_4_DES,
-                value: index_2.constants.CLI_FN_4_TTL,
-            },
-            {
-                title: index_2.constants.CLI_FN_5_TTL,
-                description: index_2.constants.CLI_FN_5_DES,
-                value: index_2.constants.CLI_FN_5_TTL,
-            },
-            {
-                title: index_2.constants.CLI_FN_6_TTL,
-                description: index_2.constants.CLI_FN_6_DES,
-                value: index_2.constants.CLI_FN_6_TTL,
-            },
-            {
-                title: index_2.constants.CLI_FN_7_TTL,
-                description: index_2.constants.CLI_FN_7_DES,
-                value: index_2.constants.CLI_FN_7_TTL,
-            },
-            {
-                title: index_2.constants.CLI_FN_8_TTL,
-                description: index_2.constants.CLI_FN_8_DES,
-                value: index_2.constants.CLI_FN_8_TTL,
-            },
-            {
-                title: "Modern Keygen",
-                description: "Generate keys (Ed25519, ML-DSA, ML-KEM, P-256, etc.)",
-                value: "Modern Keygen",
-            },
-            {
-                title: "Modern Hash",
-                description: "Hash data (SHA-2, SHA-3, BLAKE2b, BLAKE3)",
-                value: "Modern Hash",
-            },
-            {
-                title: "Modern Encrypt",
-                description: "Encrypt (XChaCha20, AES-GCM, AES-GCM-SIV)",
-                value: "Modern Encrypt",
-            },
-            {
-                title: "Modern Sign",
-                description: "Sign/verify (Ed25519, ECDSA, Schnorr, ML-DSA)",
-                value: "Modern Sign",
-            },
-            {
-                title: "Password Hash",
-                description: "Hash/verify passwords (Argon2id/i/d)",
-                value: "Password Hash",
-            },
-            {
-                title: "CBOM",
-                description: "Generate or audit Cryptographic Bill of Materials",
-                value: "CBOM",
-            },
-            {
-                title: index_2.constants.CLI_FN_9_TTL,
-                description: index_2.constants.CLI_FN_9_DES,
-                value: index_2.constants.CLI_FN_9_TTL,
-            },
-        ],
-    });
-    switch (response.Selection) {
-        case index_2.constants.CLI_FN_1_TTL: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(index_2.constants.CLI_HDL_1_DES));
-            index_1.Command.handleGenerate();
-            break;
-        }
-        case index_2.constants.CLI_FN_2_TTL: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(index_2.constants.CLI_HDL_1_DES));
-            index_1.Command.handleEncrypt();
-            break;
-        }
-        case index_2.constants.CLI_FN_3_TTL: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(index_2.constants.CLI_HDL_1_DES));
-            index_1.Command.handleDecrypt();
-            break;
-        }
-        case index_2.constants.CLI_FN_4_TTL: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(index_2.constants.CLI_HDL_1_DES));
-            index_1.Command.handleReformat();
-            break;
-        }
-        case index_2.constants.CLI_FN_5_TTL: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(index_2.constants.CLI_HDL_1_DES));
-            index_1.Command.handleRevoke();
-            break;
-        }
-        case index_2.constants.CLI_FN_6_TTL: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(index_2.constants.CLI_HDL_1_DES));
-            index_1.Command.handleSession();
-            break;
-        }
-        case index_2.constants.CLI_FN_7_TTL: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(index_2.constants.CLI_HDL_1_DES));
-            index_1.Command.handleSign();
-            break;
-        }
-        case index_2.constants.CLI_FN_8_TTL: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(index_2.constants.CLI_HDL_1_DES));
-            index_1.Command.handleVerify();
-            break;
-        }
-        case "Modern Keygen": {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green("Modern Key Generation"));
-            index_1.Command.handleModernKeygen();
-            break;
-        }
-        case "Modern Hash": {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green("Modern Hashing"));
-            index_1.Command.handleModernHash();
-            break;
-        }
-        case "Modern Encrypt": {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green("Modern Encryption"));
-            index_1.Command.handleModernEncrypt();
-            break;
-        }
-        case "Modern Sign": {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green("Modern Signing"));
-            index_1.Command.handleModernSign();
-            break;
-        }
-        case "Password Hash": {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green("Password Hashing (Argon2)"));
-            index_1.Command.handlePasswordHash();
-            break;
-        }
-        case "CBOM": {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green("Cryptographic Bill of Materials (CBOM)"));
-            index_1.Command.handleModernCbom();
-            break;
-        }
-        case index_2.constants.CLI_FN_9_TTL: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(index_2.constants.CLI_FN_9_TTL));
-            index_1.Command.handleHelp();
-            break;
-        }
-        default: {
-            write_utils_1.writeUtils.writeLn("");
-            write_utils_1.writeUtils.writeLn(kleur_1.default.red(index_2.constants.CLI_ERR_1));
-            break;
-        }
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
     }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
 })();
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_1 = require("./program/index");
+(0, index_1.exitOnClosedPipe)(process.stdout, (code) => process.exit(code));
+(0, index_1.main)(process.argv.slice(2), (0, index_1.processIO)(), () => Promise.resolve().then(() => __importStar(require("./menu"))).then((menu) => menu.runMenu())).then((code) => {
+    process.exitCode = code;
+});
 //# sourceMappingURL=cli.js.map

package/dist/commands/decrypt.command.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const decrypt_1 = __importDefault(require("@sebastienrousseau/crypto-lib/dist/lib/decrypt"));
+const pgp_1 = require("@sebastienrousseau/crypto-lib/pgp");
 const prompts_1 = __importDefault(require("prompts"));
 const handleDecrypt = async () => {
     const responseDecrypt = await (0, prompts_1.default)([
@@ -34,7 +34,7 @@ const handleDecrypt = async () => {
         console.error("\n🔔 You must provide a value for each of the properties.\n");
     }
     else {
-        await (0, decrypt_1.default)(data);
+        await (0, pgp_1.decrypt)(data);
     }
 };
 exports.default = handleDecrypt;

package/dist/commands/encrypt.command.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const encrypt_1 = __importDefault(require("@sebastienrousseau/crypto-lib/dist/lib/encrypt"));
+const pgp_1 = require("@sebastienrousseau/crypto-lib/pgp");
 const prompts_1 = __importDefault(require("prompts"));
 const handleEncrypt = async () => {
     const responseEncrypt = await (0, prompts_1.default)([
@@ -34,7 +34,7 @@ const handleEncrypt = async () => {
         console.error("\n🔔 You must provide a value for each of the properties.\n");
     }
     else {
-        await (0, encrypt_1.default)(data);
+        await (0, pgp_1.encrypt)(data);
     }
 };
 exports.default = handleEncrypt;

package/dist/commands/generate.command.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const generate_1 = __importDefault(require("@sebastienrousseau/crypto-lib/dist/lib/generate"));
+const pgp_1 = require("@sebastienrousseau/crypto-lib/pgp");
 const prompts_1 = __importDefault(require("prompts"));
 const handleGenerate = async () => {
     const responseGenerate = await (0, prompts_1.default)([
@@ -60,7 +60,7 @@ const handleGenerate = async () => {
         keyExpirationTime: responseGenerate.expiration,
         format: responseGenerate.format,
     };
-    await (0, generate_1.default)(data);
+    await (0, pgp_1.generate)(data);
 };
 exports.default = handleGenerate;
 //# sourceMappingURL=generate.command.js.map

package/dist/commands/modern/cbom.command.d.ts

@@ -1,7 +1,8 @@
+import { type CbomFormat } from "./cbom.core";
 export interface ModernCbomOptions {
     action?: "scan" | "audit";
     directory?: string;
-    format?: "cyclonedx" | "spdx";
+    format?: CbomFormat;
     output?: string;
     filePath?: string;
 }

package/dist/commands/modern/cbom.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cbom.command.d.ts","sourceRoot":"","sources":["../../../src/commands/modern/cbom.command.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAWD,QAAA,MAAM,gBAAgB,GAAU,UAAU,iBAAiB,kBAuI1D,CAAC;AAGF,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"cbom.command.d.ts","sourceRoot":"","sources":["../../../src/commands/modern/cbom.command.ts"],"names":[],"mappings":"AASA,OAAO,EAA4B,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAGxE,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AA8HD,QAAA,MAAM,gBAAgB,GAAU,UAAS,iBAAsB,kBAO9D,CAAC;AAGF,eAAe,gBAAgB,CAAC"}