@kubbisec/ai-linux-arm64 0.1.10 → 0.1.11

package/bundled/node_modules/@aspm/shared/dist/dto/update-security-gate.dto.js

@@ -0,0 +1,58 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateSecurityGateDto = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+class UpdateSecurityGateDto {
+    minScore;
+    maxBySeverity;
+    enabled;
+    inheritFromOrg;
+    exceptionReason;
+    exceptionExpiresAt;
+}
+exports.UpdateSecurityGateDto = UpdateSecurityGateDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(0),
+    (0, class_validator_1.Max)(1000),
+    __metadata("design:type", Object)
+], UpdateSecurityGateDto.prototype, "minScore", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsObject)(),
+    __metadata("design:type", Object)
+], UpdateSecurityGateDto.prototype, "maxBySeverity", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], UpdateSecurityGateDto.prototype, "enabled", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], UpdateSecurityGateDto.prototype, "inheritFromOrg", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(500),
+    __metadata("design:type", Object)
+], UpdateSecurityGateDto.prototype, "exceptionReason", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsDateString)(),
+    __metadata("design:type", Object)
+], UpdateSecurityGateDto.prototype, "exceptionExpiresAt", void 0);
+//# sourceMappingURL=update-security-gate.dto.js.map

package/bundled/node_modules/@aspm/shared/dist/dto/update-security-gate.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-security-gate.dto.js","sourceRoot":"","sources":["../../src/dto/update-security-gate.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAUyB;AAEzB,MAAa,qBAAqB;IAMhC,QAAQ,CAAiB;IAIzB,aAAa,CAAiC;IAI9C,OAAO,CAAW;IAIlB,cAAc,CAAW;IAKzB,eAAe,CAAiB;IAIhC,kBAAkB,CAAiB;CACpC;AA5BD,sDA4BC;AAtBC;IALC,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,GAAE;IACP,IAAA,qBAAG,EAAC,CAAC,CAAC;IACN,IAAA,qBAAG,EAAC,IAAI,CAAC;;uDACe;AAIzB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;4DACmC;AAI9C;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;sDACM;AAIlB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;;6DACa;AAKzB;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;8DACiB;AAIhC;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,8BAAY,GAAE;;iEACoB"}

package/bundled/node_modules/@aspm/shared/dist/dto/update-vulnerability.dto.d.ts

@@ -0,0 +1,6 @@
+import { VulnerabilityStatus } from "../enums";
+export declare class UpdateVulnerabilityDto {
+    status?: VulnerabilityStatus;
+    recommendation?: string;
+}
+//# sourceMappingURL=update-vulnerability.dto.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/dto/update-vulnerability.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-vulnerability.dto.d.ts","sourceRoot":"","sources":["../../src/dto/update-vulnerability.dto.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE/C,qBAAa,sBAAsB;IAGjC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAI7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB"}

package/bundled/node_modules/@aspm/shared/dist/dto/update-vulnerability.dto.js

@@ -0,0 +1,30 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateVulnerabilityDto = void 0;
+const class_validator_1 = require("class-validator");
+const enums_1 = require("../enums");
+class UpdateVulnerabilityDto {
+    status;
+    recommendation;
+}
+exports.UpdateVulnerabilityDto = UpdateVulnerabilityDto;
+__decorate([
+    (0, class_validator_1.IsEnum)(enums_1.VulnerabilityStatus),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], UpdateVulnerabilityDto.prototype, "status", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], UpdateVulnerabilityDto.prototype, "recommendation", void 0);
+//# sourceMappingURL=update-vulnerability.dto.js.map

package/bundled/node_modules/@aspm/shared/dist/dto/update-vulnerability.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-vulnerability.dto.js","sourceRoot":"","sources":["../../src/dto/update-vulnerability.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA+D;AAC/D,oCAA+C;AAE/C,MAAa,sBAAsB;IAGjC,MAAM,CAAuB;IAI7B,cAAc,CAAU;CACzB;AARD,wDAQC;AALC;IAFC,IAAA,wBAAM,EAAC,2BAAmB,CAAC;IAC3B,IAAA,4BAAU,GAAE;;sDACgB;AAI7B;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;8DACW"}

package/bundled/node_modules/@aspm/shared/dist/enums.d.ts

@@ -0,0 +1,86 @@
+export declare enum ScanSource {
+    TRIVY = "TRIVY",
+    SONAR = "SONAR",
+    SEMGREP = "SEMGREP",
+    NMAP = "NMAP",
+    SKIPFISH = "SKIPFISH",
+    OSV = "OSV",
+    GITLEAKS = "GITLEAKS",
+    SYFT = "SYFT"
+}
+export declare enum ScanType {
+    CONTAINER = "CONTAINER",
+    SAST = "SAST",
+    NETWORK = "NETWORK",
+    WEB = "WEB",
+    DEPENDENCIES = "DEPENDENCIES",
+    SECRETS = "SECRETS",
+    SBOM = "SBOM"
+}
+export declare enum Severity {
+    CRITICAL = "CRITICAL",
+    HIGH = "HIGH",
+    MEDIUM = "MEDIUM",
+    LOW = "LOW",
+    INFO = "INFO"
+}
+export declare enum VulnerabilityStatus {
+    OPEN = "OPEN",
+    CONFIRMED = "CONFIRMED",
+    REOPENED = "REOPENED",
+    FALSE_POSITIVE = "FALSE_POSITIVE",
+    /** Remediação (ex.: IA + PR) entregue; ainda não validada como corrigida em produção — entre aberto e corrigido. */
+    PENDING_REMED_REVIEW = "PENDING_REMED_REVIEW",
+    FIXED = "FIXED",
+    ACCEPTED = "ACCEPTED"
+}
+export declare const ACTIVE_VULNERABILITY_STATUSES: readonly [VulnerabilityStatus.OPEN, VulnerabilityStatus.CONFIRMED, VulnerabilityStatus.REOPENED, VulnerabilityStatus.PENDING_REMED_REVIEW];
+/** Statuses that allow creating a new Jira issue card (manual or automated). */
+export declare const JIRA_ISSUE_ELIGIBLE_STATUSES: readonly [VulnerabilityStatus.OPEN, VulnerabilityStatus.REOPENED];
+export type JiraIssueEligibleStatus = (typeof JIRA_ISSUE_ELIGIBLE_STATUSES)[number];
+export declare function isJiraIssueEligibleStatus(status: string): status is JiraIssueEligibleStatus;
+export declare enum FindingType {
+    VULNERABILITY = "VULNERABILITY",
+    SECRET = "SECRET",
+    LICENSE = "LICENSE",
+    MISCONFIGURATION = "MISCONFIGURATION",
+    DEPENDENCY = "DEPENDENCY",
+    CODE_QUALITY = "CODE_QUALITY",
+    COMPLIANCE = "COMPLIANCE",
+    BUG = "BUG",
+    CODE_SMELL = "CODE_SMELL",
+    SECURITY_HOTSPOT = "SECURITY_HOTSPOT",
+    OTHER = "OTHER"
+}
+export declare enum ExposureLevel {
+    INTERNET_FACING = "INTERNET_FACING",
+    INTERNAL = "INTERNAL",
+    ISOLATED = "ISOLATED",
+    UNKNOWN = "UNKNOWN"
+}
+export declare enum RiskLevel {
+    CRITICAL = "CRITICAL",
+    HIGH = "HIGH",
+    MEDIUM = "MEDIUM",
+    LOW = "LOW",
+    INFO = "INFO"
+}
+export declare const RISK_LEVEL_THRESHOLDS: {
+    readonly CRITICAL: 800;
+    readonly HIGH: 600;
+    readonly MEDIUM: 400;
+    readonly LOW: 200;
+    readonly INFO: 0;
+};
+export declare enum RepositoryProvider {
+    GITHUB = "GITHUB",
+    GITLAB = "GITLAB",
+    BITBUCKET = "BITBUCKET"
+}
+export declare enum ExecutionTrigger {
+    PIPELINE = "pipeline",
+    LOCAL = "local",
+    MANUAL = "manual"
+}
+export declare const SOURCE_SCAN_TYPE_MAP: Record<ScanSource, ScanType>;
+//# sourceMappingURL=enums.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/enums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,QAAQ,aAAa;IACrB,IAAI,SAAS;CACd;AAED,oBAAY,QAAQ;IAClB,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,oBAAY,QAAQ;IAClB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,oBAAoB,yBAAyB;IAC7C,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,4IAKhC,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,mEAG/B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,uBAAuB,CAE3F;AAGD,oBAAY,WAAW;IAErB,aAAa,kBAAkB;IAE/B,MAAM,WAAW;IAEjB,OAAO,YAAY;IAEnB,gBAAgB,qBAAqB;IAErC,UAAU,eAAe;IAEzB,YAAY,iBAAiB;IAE7B,UAAU,eAAe;IAEzB,GAAG,QAAQ;IAEX,UAAU,eAAe;IAEzB,gBAAgB,qBAAqB;IAErC,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IACvB,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAGD,oBAAY,SAAS;IACnB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAGD,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AAEX,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAS7D,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/enums.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SOURCE_SCAN_TYPE_MAP = exports.ExecutionTrigger = exports.RepositoryProvider = exports.RISK_LEVEL_THRESHOLDS = exports.RiskLevel = exports.ExposureLevel = exports.FindingType = exports.JIRA_ISSUE_ELIGIBLE_STATUSES = exports.ACTIVE_VULNERABILITY_STATUSES = exports.VulnerabilityStatus = exports.Severity = exports.ScanType = exports.ScanSource = void 0;
+exports.isJiraIssueEligibleStatus = isJiraIssueEligibleStatus;
+var ScanSource;
+(function (ScanSource) {
+    ScanSource["TRIVY"] = "TRIVY";
+    ScanSource["SONAR"] = "SONAR";
+    ScanSource["SEMGREP"] = "SEMGREP";
+    ScanSource["NMAP"] = "NMAP";
+    ScanSource["SKIPFISH"] = "SKIPFISH";
+    ScanSource["OSV"] = "OSV";
+    ScanSource["GITLEAKS"] = "GITLEAKS";
+    ScanSource["SYFT"] = "SYFT";
+})(ScanSource || (exports.ScanSource = ScanSource = {}));
+var ScanType;
+(function (ScanType) {
+    ScanType["CONTAINER"] = "CONTAINER";
+    ScanType["SAST"] = "SAST";
+    ScanType["NETWORK"] = "NETWORK";
+    ScanType["WEB"] = "WEB";
+    ScanType["DEPENDENCIES"] = "DEPENDENCIES";
+    ScanType["SECRETS"] = "SECRETS";
+    ScanType["SBOM"] = "SBOM";
+})(ScanType || (exports.ScanType = ScanType = {}));
+var Severity;
+(function (Severity) {
+    Severity["CRITICAL"] = "CRITICAL";
+    Severity["HIGH"] = "HIGH";
+    Severity["MEDIUM"] = "MEDIUM";
+    Severity["LOW"] = "LOW";
+    Severity["INFO"] = "INFO";
+})(Severity || (exports.Severity = Severity = {}));
+var VulnerabilityStatus;
+(function (VulnerabilityStatus) {
+    VulnerabilityStatus["OPEN"] = "OPEN";
+    VulnerabilityStatus["CONFIRMED"] = "CONFIRMED";
+    VulnerabilityStatus["REOPENED"] = "REOPENED";
+    VulnerabilityStatus["FALSE_POSITIVE"] = "FALSE_POSITIVE";
+    /** Remediação (ex.: IA + PR) entregue; ainda não validada como corrigida em produção — entre aberto e corrigido. */
+    VulnerabilityStatus["PENDING_REMED_REVIEW"] = "PENDING_REMED_REVIEW";
+    VulnerabilityStatus["FIXED"] = "FIXED";
+    VulnerabilityStatus["ACCEPTED"] = "ACCEPTED";
+})(VulnerabilityStatus || (exports.VulnerabilityStatus = VulnerabilityStatus = {}));
+exports.ACTIVE_VULNERABILITY_STATUSES = [
+    VulnerabilityStatus.OPEN,
+    VulnerabilityStatus.CONFIRMED,
+    VulnerabilityStatus.REOPENED,
+    VulnerabilityStatus.PENDING_REMED_REVIEW,
+];
+/** Statuses that allow creating a new Jira issue card (manual or automated). */
+exports.JIRA_ISSUE_ELIGIBLE_STATUSES = [
+    VulnerabilityStatus.OPEN,
+    VulnerabilityStatus.REOPENED,
+];
+function isJiraIssueEligibleStatus(status) {
+    return exports.JIRA_ISSUE_ELIGIBLE_STATUSES.includes(status);
+}
+/// Tipos normalizados de findings para classificação consistente
+var FindingType;
+(function (FindingType) {
+    /// Vulnerabilidade de segurança (CVE, CWE, etc.)
+    FindingType["VULNERABILITY"] = "VULNERABILITY";
+    /// Credencial ou chave exposta (API keys, tokens, senhas)
+    FindingType["SECRET"] = "SECRET";
+    /// Problema de licença de software (incompatível, expirada, etc.)
+    FindingType["LICENSE"] = "LICENSE";
+    /// Problema de configuração (misconfiguration)
+    FindingType["MISCONFIGURATION"] = "MISCONFIGURATION";
+    /// Problema de dependência (versão desatualizada, incompatível)
+    FindingType["DEPENDENCY"] = "DEPENDENCY";
+    /// Problema de qualidade de código (code smell, technical debt)
+    FindingType["CODE_QUALITY"] = "CODE_QUALITY";
+    /// Problema de conformidade (compliance)
+    FindingType["COMPLIANCE"] = "COMPLIANCE";
+    /// Bug funcional
+    FindingType["BUG"] = "BUG";
+    /// Code smell
+    FindingType["CODE_SMELL"] = "CODE_SMELL";
+    /// Security hotspot (potencial vulnerabilidade)
+    FindingType["SECURITY_HOTSPOT"] = "SECURITY_HOTSPOT";
+    /// Outro tipo de finding não classificado acima
+    FindingType["OTHER"] = "OTHER";
+})(FindingType || (exports.FindingType = FindingType = {}));
+/// Enterprise exposure levels para classificação de risco
+var ExposureLevel;
+(function (ExposureLevel) {
+    ExposureLevel["INTERNET_FACING"] = "INTERNET_FACING";
+    ExposureLevel["INTERNAL"] = "INTERNAL";
+    ExposureLevel["ISOLATED"] = "ISOLATED";
+    ExposureLevel["UNKNOWN"] = "UNKNOWN";
+})(ExposureLevel || (exports.ExposureLevel = ExposureLevel = {}));
+/// Níveis de risco baseados no score calculado
+var RiskLevel;
+(function (RiskLevel) {
+    RiskLevel["CRITICAL"] = "CRITICAL";
+    RiskLevel["HIGH"] = "HIGH";
+    RiskLevel["MEDIUM"] = "MEDIUM";
+    RiskLevel["LOW"] = "LOW";
+    RiskLevel["INFO"] = "INFO";
+})(RiskLevel || (exports.RiskLevel = RiskLevel = {}));
+/// Thresholds para níveis de risco (0-1000)
+exports.RISK_LEVEL_THRESHOLDS = {
+    CRITICAL: 800,
+    HIGH: 600,
+    MEDIUM: 400,
+    LOW: 200,
+    INFO: 0,
+};
+var RepositoryProvider;
+(function (RepositoryProvider) {
+    RepositoryProvider["GITHUB"] = "GITHUB";
+    RepositoryProvider["GITLAB"] = "GITLAB";
+    RepositoryProvider["BITBUCKET"] = "BITBUCKET";
+})(RepositoryProvider || (exports.RepositoryProvider = RepositoryProvider = {}));
+var ExecutionTrigger;
+(function (ExecutionTrigger) {
+    ExecutionTrigger["PIPELINE"] = "pipeline";
+    ExecutionTrigger["LOCAL"] = "local";
+    ExecutionTrigger["MANUAL"] = "manual";
+})(ExecutionTrigger || (exports.ExecutionTrigger = ExecutionTrigger = {}));
+exports.SOURCE_SCAN_TYPE_MAP = {
+    [ScanSource.TRIVY]: ScanType.CONTAINER,
+    [ScanSource.SONAR]: ScanType.SAST,
+    [ScanSource.SEMGREP]: ScanType.SAST,
+    [ScanSource.NMAP]: ScanType.NETWORK,
+    [ScanSource.SKIPFISH]: ScanType.WEB,
+    [ScanSource.OSV]: ScanType.DEPENDENCIES,
+    [ScanSource.GITLEAKS]: ScanType.SECRETS,
+    [ScanSource.SYFT]: ScanType.SBOM,
+};
+//# sourceMappingURL=enums.js.map

package/bundled/node_modules/@aspm/shared/dist/enums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AAuDA,8DAEC;AAzDD,IAAY,UASX;AATD,WAAY,UAAU;IACpB,6BAAe,CAAA;IACf,6BAAe,CAAA;IACf,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,mCAAqB,CAAA;IACrB,yBAAW,CAAA;IACX,mCAAqB,CAAA;IACrB,2BAAa,CAAA;AACf,CAAC,EATW,UAAU,0BAAV,UAAU,QASrB;AAED,IAAY,QAQX;AARD,WAAY,QAAQ;IAClB,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,+BAAmB,CAAA;IACnB,yBAAa,CAAA;AACf,CAAC,EARW,QAAQ,wBAAR,QAAQ,QAQnB;AAED,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EANW,QAAQ,wBAAR,QAAQ,QAMnB;AAED,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,wDAAiC,CAAA;IACjC,oHAAoH;IACpH,oEAA6C,CAAA;IAC7C,sCAAe,CAAA;IACf,4CAAqB,CAAA;AACvB,CAAC,EATW,mBAAmB,mCAAnB,mBAAmB,QAS9B;AAEY,QAAA,6BAA6B,GAAG;IAC3C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,SAAS;IAC7B,mBAAmB,CAAC,QAAQ;IAC5B,mBAAmB,CAAC,oBAAoB;CAChC,CAAC;AAEX,gFAAgF;AACnE,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,QAAQ;CACpB,CAAC;AAIX,SAAgB,yBAAyB,CAAC,MAAc;IACtD,OAAQ,oCAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AACjE,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB,iDAAiD;IACjD,8CAA+B,CAAA;IAC/B,0DAA0D;IAC1D,gCAAiB,CAAA;IACjB,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,+CAA+C;IAC/C,oDAAqC,CAAA;IACrC,gEAAgE;IAChE,wCAAyB,CAAA;IACzB,gEAAgE;IAChE,4CAA6B,CAAA;IAC7B,yCAAyC;IACzC,wCAAyB,CAAA;IACzB,iBAAiB;IACjB,0BAAW,CAAA;IACX,cAAc;IACd,wCAAyB,CAAA;IACzB,gDAAgD;IAChD,oDAAqC,CAAA;IACrC,gDAAgD;IAChD,8BAAe,CAAA;AACjB,CAAC,EAvBW,WAAW,2BAAX,WAAW,QAuBtB;AAED,0DAA0D;AAC1D,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,oDAAmC,CAAA;IACnC,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;IACrB,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AAED,+CAA+C;AAC/C,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,kCAAqB,CAAA;IACrB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,wBAAW,CAAA;IACX,0BAAa,CAAA;AACf,CAAC,EANW,SAAS,yBAAT,SAAS,QAMpB;AAED,4CAA4C;AAC/B,QAAA,qBAAqB,GAAG;IACnC,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,mCAAe,CAAA;IACf,qCAAiB,CAAA;AACnB,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAEY,QAAA,oBAAoB,GAAiC;IAChE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,SAAS;IACtC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI;IACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI;IACnC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO;IACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG;IACnC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,YAAY;IACvC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO;IACvC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI;CACjC,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/github/kubbisec-github-label.d.ts

@@ -0,0 +1,6 @@
+export declare const KUBBISEC_GITHUB_PR_LABEL: {
+    readonly name: "kubbisec";
+    readonly color: "00d9f6";
+    readonly description: "Pull requests opened by KubbiSec";
+};
+//# sourceMappingURL=kubbisec-github-label.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/github/kubbisec-github-label.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-github-label.d.ts","sourceRoot":"","sources":["../../src/github/kubbisec-github-label.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB;;;;CAI3B,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/github/kubbisec-github-label.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KUBBISEC_GITHUB_PR_LABEL = void 0;
+exports.KUBBISEC_GITHUB_PR_LABEL = {
+    name: "kubbisec",
+    color: "00d9f6",
+    description: "Pull requests opened by KubbiSec",
+};
+//# sourceMappingURL=kubbisec-github-label.js.map

package/bundled/node_modules/@aspm/shared/dist/github/kubbisec-github-label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-github-label.js","sourceRoot":"","sources":["../../src/github/kubbisec-github-label.ts"],"names":[],"mappings":";;;AAAa,QAAA,wBAAwB,GAAG;IACtC,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,kCAAkC;CACvC,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/index.d.ts

@@ -0,0 +1,12 @@
+export * from "./assistant";
+export * from "./github/kubbisec-github-label";
+export * from "./dto";
+export * from "./dto/metrics.dto";
+export * from "./ai";
+export * from "./enums";
+export * from "./rbac";
+export * from "./cli-user-error";
+export * from "./redaction";
+export * from "./severity-map";
+export * from "./sort-findings";
+//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,OAAO,CAAC;AACtB,cAAc,mBAAmB,CAAC;AAClC,cAAc,MAAM,CAAC;AACrB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/index.js

@@ -0,0 +1,28 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./assistant"), exports);
+__exportStar(require("./github/kubbisec-github-label"), exports);
+__exportStar(require("./dto"), exports);
+__exportStar(require("./dto/metrics.dto"), exports);
+__exportStar(require("./ai"), exports);
+__exportStar(require("./enums"), exports);
+__exportStar(require("./rbac"), exports);
+__exportStar(require("./cli-user-error"), exports);
+__exportStar(require("./redaction"), exports);
+__exportStar(require("./severity-map"), exports);
+__exportStar(require("./sort-findings"), exports);
+//# sourceMappingURL=index.js.map

package/bundled/node_modules/@aspm/shared/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,iEAA+C;AAC/C,wCAAsB;AACtB,oDAAkC;AAClC,uCAAqB;AACrB,0CAAwB;AACxB,yCAAuB;AACvB,mDAAiC;AACjC,8CAA4B;AAC5B,iDAA+B;AAC/B,kDAAgC"}

package/bundled/node_modules/@aspm/shared/dist/rbac/better-auth-org-roles.d.ts

@@ -0,0 +1,23 @@
+import type { OrgRoleSlug } from "./kubbisec-permissions";
+/** Stored on `member.role` / invitation; must match Better Auth `organization({ roles })` keys. */
+export declare const BETTER_AUTH_ORG_ROLE_BY_SLUG: {
+    readonly org_administrator: "org_administrator";
+    readonly org_finance: "org_finance";
+    readonly org_security_engineer: "org_security_engineer";
+    readonly org_delivery_engineer: "org_delivery_engineer";
+    readonly org_observer: "org_observer";
+};
+export declare const ORG_INVITE_ROLE_OPTIONS: {
+    value: OrgRoleSlug;
+    label: string;
+}[];
+/** All assignable org roles (invites exclude org_administrator by design). */
+export declare const ORG_MEMBER_ROLE_OPTIONS: {
+    value: OrgRoleSlug;
+    label: string;
+}[];
+/** Maps legacy Better Auth roles and Kubbisec slugs stored in DB → canonical `OrgRoleSlug`. */
+export declare function normalizeStoredOrgRole(raw: string | null | undefined): OrgRoleSlug;
+/** Role string stored by Better Auth / Prisma `member.role` (single slug). */
+export declare function toBetterAuthOrgRole(slug: OrgRoleSlug): OrgRoleSlug;
+//# sourceMappingURL=better-auth-org-roles.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/rbac/better-auth-org-roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-org-roles.d.ts","sourceRoot":"","sources":["../../src/rbac/better-auth-org-roles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,mGAAmG;AACnG,eAAO,MAAM,4BAA4B;;;;;;CAMY,CAAC;AAEtD,eAAO,MAAM,uBAAuB,EAAE;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAK1E,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,EAAE;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAI1E,CAAC;AAEF,+FAA+F;AAC/F,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,CAyBlF;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAElE"}

package/bundled/node_modules/@aspm/shared/dist/rbac/better-auth-org-roles.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ORG_MEMBER_ROLE_OPTIONS = exports.ORG_INVITE_ROLE_OPTIONS = exports.BETTER_AUTH_ORG_ROLE_BY_SLUG = void 0;
+exports.normalizeStoredOrgRole = normalizeStoredOrgRole;
+exports.toBetterAuthOrgRole = toBetterAuthOrgRole;
+/** Stored on `member.role` / invitation; must match Better Auth `organization({ roles })` keys. */
+exports.BETTER_AUTH_ORG_ROLE_BY_SLUG = {
+    org_administrator: "org_administrator",
+    org_finance: "org_finance",
+    org_security_engineer: "org_security_engineer",
+    org_delivery_engineer: "org_delivery_engineer",
+    org_observer: "org_observer",
+};
+exports.ORG_INVITE_ROLE_OPTIONS = [
+    { value: "org_finance", label: "Financeiro" },
+    { value: "org_security_engineer", label: "AppSec / DevSecOps" },
+    { value: "org_delivery_engineer", label: "DevOps / entrega" },
+    { value: "org_observer", label: "Observador" },
+];
+/** All assignable org roles (invites exclude org_administrator by design). */
+exports.ORG_MEMBER_ROLE_OPTIONS = [
+    { value: "org_administrator", label: "Administrador da organização" },
+    { value: "org_finance", label: "Financeiro" },
+    ...exports.ORG_INVITE_ROLE_OPTIONS,
+];
+/** Maps legacy Better Auth roles and Kubbisec slugs stored in DB → canonical `OrgRoleSlug`. */
+function normalizeStoredOrgRole(raw) {
+    if (!raw)
+        return "org_observer";
+    const r = raw.trim();
+    if (r === "org_administrator" ||
+        r === "org_finance" ||
+        r === "org_security_engineer" ||
+        r === "org_delivery_engineer" ||
+        r === "org_observer") {
+        return r;
+    }
+    const lower = r.toLowerCase();
+    if (lower === "owner" ||
+        lower === "admin" ||
+        lower === "administrator" ||
+        lower === "org_admin") {
+        return "org_administrator";
+    }
+    if (lower === "member" || lower === "org_member") {
+        return "org_delivery_engineer";
+    }
+    return "org_observer";
+}
+/** Role string stored by Better Auth / Prisma `member.role` (single slug). */
+function toBetterAuthOrgRole(slug) {
+    return exports.BETTER_AUTH_ORG_ROLE_BY_SLUG[slug];
+}
+//# sourceMappingURL=better-auth-org-roles.js.map

package/bundled/node_modules/@aspm/shared/dist/rbac/better-auth-org-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-org-roles.js","sourceRoot":"","sources":["../../src/rbac/better-auth-org-roles.ts"],"names":[],"mappings":";;;AA0BA,wDAyBC;AAGD,kDAEC;AAtDD,mGAAmG;AACtF,QAAA,4BAA4B,GAAG;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,WAAW,EAAE,aAAa;IAC1B,qBAAqB,EAAE,uBAAuB;IAC9C,qBAAqB,EAAE,uBAAuB;IAC9C,YAAY,EAAE,cAAc;CACuB,CAAC;AAEzC,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IAC7C,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC/D,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC7D,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE;CAC/C,CAAC;AAEF,8EAA8E;AACjE,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACrE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IAC7C,GAAG,+BAAuB;CAC3B,CAAC;AAEF,+FAA+F;AAC/F,SAAgB,sBAAsB,CAAC,GAA8B;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,cAAc,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IACE,CAAC,KAAK,mBAAmB;QACzB,CAAC,KAAK,aAAa;QACnB,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,cAAc,EACpB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,IACE,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,WAAW,EACrB,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QACjD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,8EAA8E;AAC9E,SAAgB,mBAAmB,CAAC,IAAiB;IACnD,OAAO,oCAA4B,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/rbac/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./kubbisec-permissions";
+export * from "./kubbisec-permission-descriptions";
+export * from "./better-auth-org-roles";
+export * from "./resolve-org-permissions";
+export * from "./resolve-platform-permissions";
+export * from "./platform-staff";
+//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/rbac/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rbac/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,oCAAoC,CAAC;AACnD,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kBAAkB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/rbac/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./kubbisec-permissions"), exports);
+__exportStar(require("./kubbisec-permission-descriptions"), exports);
+__exportStar(require("./better-auth-org-roles"), exports);
+__exportStar(require("./resolve-org-permissions"), exports);
+__exportStar(require("./resolve-platform-permissions"), exports);
+__exportStar(require("./platform-staff"), exports);
+//# sourceMappingURL=index.js.map

package/bundled/node_modules/@aspm/shared/dist/rbac/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rbac/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,qEAAmD;AACnD,0DAAwC;AACxC,4DAA0C;AAC1C,iEAA+C;AAC/C,mDAAiC"}

package/bundled/node_modules/@aspm/shared/dist/rbac/kubbisec-permission-descriptions.d.ts

@@ -0,0 +1,9 @@
+import { type KubbisecPermission } from "./kubbisec-permissions";
+/**
+ * Human-readable descriptions (pt-BR) — keep in sync with docs/core/rbac-catalog.md
+ */
+export declare const KUBBISEC_PERMISSION_DESCRIPTIONS: Record<KubbisecPermission, string>;
+export declare function getKubbisecPermissionDescription(permission: KubbisecPermission): string;
+/** Ensures every catalog permission has a pt-BR description at build/test time. */
+export declare function assertKubbisecPermissionDescriptionsComplete(): void;
+//# sourceMappingURL=kubbisec-permission-descriptions.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/rbac/kubbisec-permission-descriptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-permission-descriptions.d.ts","sourceRoot":"","sources":["../../src/rbac/kubbisec-permission-descriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEvF;;GAEG;AACH,eAAO,MAAM,gCAAgC,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAyF/E,CAAC;AAEF,wBAAgB,gCAAgC,CAAC,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAEvF;AAED,mFAAmF;AACnF,wBAAgB,4CAA4C,IAAI,IAAI,CAOnE"}