/**
 * The starter verb set, grouped by family, per epic #551 and
 * docs/components/capabilities.mdx. The pilot AWS leaves — `docker-build`,
 * `publish-image`, `load-image-on-host`, `cfn-deploy`, `ecs-update-service`,
 * `code-deploy`, `wait-for-stack`, `wait-steady-state`, `wait-cluster-healthy`
 * — are real implementations over the injectable `CloudExecutor` (#557/#564,
 * epic #551, see ./cloud-executor.ts); every other verb remains a typed stub
 * (../capability.ts). `generate-sbom` (#606) is a real implementation over
 * the injectable, artifact-type-keyed `SbomGenerator` (./sbom-generator.ts);
 * `./lockfile-sbom-generator.ts` (#613) is a real, hermetic backend for it
 * (lockfile/manifest parsing, no external tool), and `./tool-sbom-generator.ts`
 * (#610) is a real, deep-scan backend for it (`syft`/`docker buildx --sbom`/
 * `cyclonedx-maven`/`cdxgen`, shelling out through the injectable
 * `ProcessRunner`, ./process-runner.ts). `extract-config-bom` (#613) parses a
 * synthesized CloudFormation template, so it moved to the aws lexicon (#684);
 * core keeps the agnostic SPDX/CycloneDX writer, ./bom-writer.ts, which both it
 * and `generate-sbom` share. ./component-bom.ts
 * (#614) composes a component's leaf BOMs into one component-level BOM over
 * that same writer, and ./reproducibility.ts (#614) records per-artifact
 * reproducibility + provenance on each `BuildArchiveEntry`. `publish-image`
 * (#610) also gained a best-effort OCI-referrer attach step (`oras attach`,
 * also via `ProcessRunner`) for a supplied SBOM/component BOM — see ./publish.ts.
 * `sign`/`attest-provenance` (#622, ./sign.ts) are real implementations over
 * the same injectable `ProcessRunner`: keyless-by-default `cosign sign`/
 * `cosign attest` for signature + SLSA provenance, reusing #614's
 * `ProvenanceLink` material. `verify` (#622, ./verify.ts) is the matching
 * deploy-time gate — `cosign verify`/`verify-attestation` against a
 * configured identity policy, mirroring ../../lint/policy.ts's `policyGate`.
 */
export * from "./build-archive.js";
export * from "./build.js";
export * from "./bom-writer.js";
export * from "./sbom-generator.js";
export * from "./sbom.js";
export * from "./lockfile-sbom-generator.js";
export * from "./tool-sbom-generator.js";
export * from "./component-bom.js";
export * from "./reproducibility.js";
export * from "./sign.js";
export * from "./verify.js";
export * from "./vuln-scan.js";
export * from "./vex.js";
export * from "./license-policy.js";
export * from "./vuln-gate.js";
export * from "./wait-verify.js";
export * from "./shell.js";
export * from "./cloud-executor.js";
export * from "./process-runner.js";
//# sourceMappingURL=index.d.ts.map