@kubbisec/ai-linux-arm64 0.1.21 → 0.1.22

package/bundled/config/resolve-agents-context-file.js

@@ -1,47 +1,46 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { isAbsolute, relative, resolve, sep } from "node:path";
+
 const CONTEXT_FILENAMES = ["AGENTS.md", "CLAUDE.md"];
 export function findAgentsContextFile(startDir) {
-    let dir = path.resolve(startDir);
-    while (true) {
-        for (const name of CONTEXT_FILENAMES) {
-            const candidate = path.join(dir, name);
-            if (fs.existsSync(candidate) && fs.statSync(candidate).isFile()) {
-                return candidate;
-            }
-        }
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            return undefined;
-        dir = parent;
+  let dir = path.resolve(startDir);
+  while (true) {
+    for (const name of CONTEXT_FILENAMES) {
+      const candidate = path.join(dir, name);
+      if (fs.existsSync(candidate) && fs.statSync(candidate).isFile()) {
+        return candidate;
+      }
     }
+    const parent = path.dirname(dir);
+    if (parent === dir) return undefined;
+    dir = parent;
+  }
 }
 export function formatAgentsContextLabel(filePath, home) {
-    const base = path.basename(filePath);
-    const homeDir = home?.trim();
-    if (!homeDir)
-        return base;
-    const resolved = resolve(filePath);
-    const resolvedHome = resolve(homeDir);
-    const rel = relative(resolvedHome, resolved);
-    const insideHome = rel === "" || (rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));
-    if (!insideHome) {
-        return `${base} (${truncatePathMiddle(resolved, 48)})`;
-    }
-    const short = rel === "" ? `~/${base}` : `~${sep}${rel}`;
-    return truncatePathMiddle(short, 56);
+  const base = path.basename(filePath);
+  const homeDir = home?.trim();
+  if (!homeDir) return base;
+  const resolved = resolve(filePath);
+  const resolvedHome = resolve(homeDir);
+  const rel = relative(resolvedHome, resolved);
+  const insideHome =
+    rel === "" || (rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));
+  if (!insideHome) {
+    return `${base} (${truncatePathMiddle(resolved, 48)})`;
+  }
+  const short = rel === "" ? `~/${base}` : `~${sep}${rel}`;
+  return truncatePathMiddle(short, 56);
 }
 function truncatePathMiddle(text, maxLen) {
-    if (text.length <= maxLen)
-        return text;
-    const ellipsis = "…";
-    const room = Math.max(4, maxLen - ellipsis.length);
-    const head = Math.max(2, Math.ceil(room * 0.45));
-    const tail = Math.max(2, room - head);
-    return text.slice(0, head) + ellipsis + text.slice(-tail);
+  if (text.length <= maxLen) return text;
+  const ellipsis = "…";
+  const room = Math.max(4, maxLen - ellipsis.length);
+  const head = Math.max(2, Math.ceil(room * 0.45));
+  const tail = Math.max(2, room - head);
+  return text.slice(0, head) + ellipsis + text.slice(-tail);
 }
 export function formatKubbisecContextStatus(filePath, home) {
-    return `ctx ${formatAgentsContextLabel(filePath, home)}`;
+  return `ctx ${formatAgentsContextLabel(filePath, home)}`;
 }
-//# sourceMappingURL=resolve-agents-context-file.js.map
+//# sourceMappingURL=resolve-agents-context-file.js.map

package/bundled/config/resource-budget.d.ts

@@ -1,17 +1,17 @@
 export type ResourceBudget = {
-    lowResource: boolean;
-    maxActiveSkills: number;
-    maxSkillsArgv: number;
-    routerTopK: number;
-    gateSampleSize: number;
-    orchestratorParallel: number;
-    onlineTrainerConcurrency: number;
-    telemetryMaxStepsPerFlush: number;
-    mem0AutoCapture: boolean;
-    clarifyMaxRounds: number;
-    editBudgetMaxOps: number;
+  lowResource: boolean;
+  maxActiveSkills: number;
+  maxSkillsArgv: number;
+  routerTopK: number;
+  gateSampleSize: number;
+  orchestratorParallel: number;
+  onlineTrainerConcurrency: number;
+  telemetryMaxStepsPerFlush: number;
+  mem0AutoCapture: boolean;
+  clarifyMaxRounds: number;
+  editBudgetMaxOps: number;
 };
 export declare const LOW_RESOURCE_DEFAULTS: Omit<ResourceBudget, "lowResource">;
 export declare const NORMAL_RESOURCE_DEFAULTS: Omit<ResourceBudget, "lowResource">;
 export declare function resolveResourceBudget(env?: NodeJS.ProcessEnv): ResourceBudget;
-//# sourceMappingURL=resource-budget.d.ts.map
+//# sourceMappingURL=resource-budget.d.ts.map

package/bundled/config/resource-budget.js

@@ -1,35 +1,35 @@
 import { envFlagOn, isMemoryEnabled } from "./feature-flags.js";
 export const LOW_RESOURCE_DEFAULTS = {
-    maxActiveSkills: 2,
-    maxSkillsArgv: 2,
-    routerTopK: 2,
-    gateSampleSize: 2,
-    orchestratorParallel: 1,
-    onlineTrainerConcurrency: 1,
-    telemetryMaxStepsPerFlush: 20,
-    mem0AutoCapture: false,
-    clarifyMaxRounds: 1,
-    editBudgetMaxOps: 6,
+  maxActiveSkills: 2,
+  maxSkillsArgv: 2,
+  routerTopK: 2,
+  gateSampleSize: 2,
+  orchestratorParallel: 1,
+  onlineTrainerConcurrency: 1,
+  telemetryMaxStepsPerFlush: 20,
+  mem0AutoCapture: false,
+  clarifyMaxRounds: 1,
+  editBudgetMaxOps: 6,
 };
 export const NORMAL_RESOURCE_DEFAULTS = {
-    maxActiveSkills: 3,
-    maxSkillsArgv: 3,
-    routerTopK: 3,
-    gateSampleSize: 8,
-    orchestratorParallel: 3,
-    onlineTrainerConcurrency: 2,
-    telemetryMaxStepsPerFlush: 50,
-    mem0AutoCapture: true,
-    clarifyMaxRounds: 2,
-    editBudgetMaxOps: 12,
+  maxActiveSkills: 3,
+  maxSkillsArgv: 3,
+  routerTopK: 3,
+  gateSampleSize: 8,
+  orchestratorParallel: 3,
+  onlineTrainerConcurrency: 2,
+  telemetryMaxStepsPerFlush: 50,
+  mem0AutoCapture: true,
+  clarifyMaxRounds: 2,
+  editBudgetMaxOps: 12,
 };
 export function resolveResourceBudget(env = process.env) {
-    const lowResource = envFlagOn(env, "KUBBISEC_LOW_RESOURCE");
-    const defaults = lowResource ? LOW_RESOURCE_DEFAULTS : NORMAL_RESOURCE_DEFAULTS;
-    return {
-        lowResource,
-        ...defaults,
-        mem0AutoCapture: lowResource ? false : isMemoryEnabled(env),
-    };
+  const lowResource = envFlagOn(env, "KUBBISEC_LOW_RESOURCE");
+  const defaults = lowResource ? LOW_RESOURCE_DEFAULTS : NORMAL_RESOURCE_DEFAULTS;
+  return {
+    lowResource,
+    ...defaults,
+    mem0AutoCapture: lowResource ? false : isMemoryEnabled(env),
+  };
 }
-//# sourceMappingURL=resource-budget.js.map
+//# sourceMappingURL=resource-budget.js.map

package/bundled/config/sync-kubbisec-pi-models.d.ts

@@ -6,7 +6,10 @@ export declare function resolvePiAgentModelsJsonPath(): string;
  * Materialize KubbiSec (and custom BYOK/local) providers into `~/.kubbisec/agent/models.json`
  * so chat bootstrap can use `defaultProvider` from `.kubbisec/llm.json`.
  */
-export declare function syncKubbisecProvidersToPiModelsJson(cwd?: string, options?: {
+export declare function syncKubbisecProvidersToPiModelsJson(
+  cwd?: string,
+  options?: {
     modelsJsonPath?: string;
-}): boolean;
-//# sourceMappingURL=sync-kubbisec-pi-models.d.ts.map
+  },
+): boolean;
+//# sourceMappingURL=sync-kubbisec-pi-models.d.ts.map

package/bundled/config/sync-kubbisec-pi-models.js

@@ -3,51 +3,51 @@ import * as os from "node:os";
 import * as path from "node:path";
 import { readLlmConfig, resolveApiKeyValue } from "./llm-config.js";
 import { KUBBISEC_LLM_PROVIDER_ID, toProviderModelConfig } from "./llm-provider-catalog.js";
-import { buildKubbisecLlmProviderConfig, } from "./register-kubbisec-llm-provider.js";
+import { buildKubbisecLlmProviderConfig } from "./register-kubbisec-llm-provider.js";
 /** Matches Pi `getAgentDir()` when runtime is branded (`piConfig.configDir: ".kubbisec"`). */
 export const KUBBISEC_PI_AGENT_CONFIG_DIR = ".kubbisec";
 function expandTildePath(filePath) {
-    if (filePath === "~")
-        return os.homedir();
-    if (filePath.startsWith("~/"))
-        return path.join(os.homedir(), filePath.slice(2));
-    return filePath;
+  if (filePath === "~") return os.homedir();
+  if (filePath.startsWith("~/")) return path.join(os.homedir(), filePath.slice(2));
+  return filePath;
 }
 export function resolvePiAgentModelsJsonPath() {
-    const envDir = process.env.KUBBISEC_CODING_AGENT_DIR?.trim();
-    if (envDir) {
-        return path.join(expandTildePath(envDir), "models.json");
-    }
-    return path.join(os.homedir(), KUBBISEC_PI_AGENT_CONFIG_DIR, "agent", "models.json");
+  const envDir = process.env.KUBBISEC_CODING_AGENT_DIR?.trim();
+  if (envDir) {
+    return path.join(expandTildePath(envDir), "models.json");
+  }
+  return path.join(os.homedir(), KUBBISEC_PI_AGENT_CONFIG_DIR, "agent", "models.json");
 }
 function readPiModelsJson(filePath) {
-    try {
-        const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
-        if (parsed &&
-            typeof parsed === "object" &&
-            !Array.isArray(parsed) &&
-            typeof parsed.providers === "object" &&
-            parsed.providers !== null) {
-            return parsed;
-        }
-    }
-    catch {
-        /* missing or invalid */
+  try {
+    const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
+    if (
+      parsed &&
+      typeof parsed === "object" &&
+      !Array.isArray(parsed) &&
+      typeof parsed.providers === "object" &&
+      parsed.providers !== null
+    ) {
+      return parsed;
     }
-    return { providers: {} };
+  } catch {
+    /* missing or invalid */
+  }
+  return { providers: {} };
 }
 function buildCustomProviderPiEntry(provider) {
-    const apiKey = resolveApiKeyValue(provider.apiKey) ?? (provider.autodetected ? provider.apiKey : undefined);
-    return {
-        name: provider.name?.trim() || provider.id,
-        baseUrl: provider.baseUrl,
-        ...(apiKey ? { apiKey } : {}),
-        api: provider.api ?? "openai-completions",
-        ...(provider.headers && Object.keys(provider.headers).length > 0
-            ? { headers: provider.headers }
-            : {}),
-        models: provider.models.map(toProviderModelConfig),
-    };
+  const apiKey =
+    resolveApiKeyValue(provider.apiKey) ?? (provider.autodetected ? provider.apiKey : undefined);
+  return {
+    name: provider.name?.trim() || provider.id,
+    baseUrl: provider.baseUrl,
+    ...(apiKey ? { apiKey } : {}),
+    api: provider.api ?? "openai-completions",
+    ...(provider.headers && Object.keys(provider.headers).length > 0
+      ? { headers: provider.headers }
+      : {}),
+    models: provider.models.map(toProviderModelConfig),
+  };
 }
 /**
  * Pi resolves `--provider` from models.json before extensions load.
@@ -55,27 +55,27 @@ function buildCustomProviderPiEntry(provider) {
  * so chat bootstrap can use `defaultProvider` from `.kubbisec/llm.json`.
  */
 export function syncKubbisecProvidersToPiModelsJson(cwd = process.cwd(), options) {
-    const kubbisec = buildKubbisecLlmProviderConfig(cwd);
-    const customProviders = readLlmConfig(cwd).providers ?? [];
-    if (!kubbisec && customProviders.length === 0) {
-        return false;
-    }
-    const filePath = options?.modelsJsonPath ?? resolvePiAgentModelsJsonPath();
-    fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o755 });
-    const existing = readPiModelsJson(filePath);
-    const providers = {
-        ...existing.providers,
-    };
-    if (kubbisec) {
-        providers[KUBBISEC_LLM_PROVIDER_ID] = kubbisec;
-    }
-    for (const provider of customProviders) {
-        providers[provider.id] = buildCustomProviderPiEntry(provider);
-    }
-    fs.writeFileSync(filePath, `${JSON.stringify({ providers }, null, 2)}\n`, {
-        encoding: "utf8",
-        mode: 0o600,
-    });
-    return Boolean(kubbisec);
+  const kubbisec = buildKubbisecLlmProviderConfig(cwd);
+  const customProviders = readLlmConfig(cwd).providers ?? [];
+  if (!kubbisec && customProviders.length === 0) {
+    return false;
+  }
+  const filePath = options?.modelsJsonPath ?? resolvePiAgentModelsJsonPath();
+  fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o755 });
+  const existing = readPiModelsJson(filePath);
+  const providers = {
+    ...existing.providers,
+  };
+  if (kubbisec) {
+    providers[KUBBISEC_LLM_PROVIDER_ID] = kubbisec;
+  }
+  for (const provider of customProviders) {
+    providers[provider.id] = buildCustomProviderPiEntry(provider);
+  }
+  fs.writeFileSync(filePath, `${JSON.stringify({ providers }, null, 2)}\n`, {
+    encoding: "utf8",
+    mode: 0o600,
+  });
+  return Boolean(kubbisec);
 }
-//# sourceMappingURL=sync-kubbisec-pi-models.js.map
+//# sourceMappingURL=sync-kubbisec-pi-models.js.map

package/bundled/copy/cli-reference-index.d.ts

@@ -2,5 +2,6 @@
  * Compact CLI index preloaded into kubbisec chat system prompt.
  * Keep in sync with apps/web/.../aspm-commands.md, naus-commands.md, and ai-commands.md.
  */
-export declare const KUBBISEC_CLI_REFERENCE_INDEX = "<cli-reference-index>\nASPM CLI (npm install -g @kubbisec/aspm):\n| Command | Purpose |\n| aspm init | Interactive setup |\n| aspm login | Configure credentials |\n| aspm whoami | Show current config |\n| aspm doctor | Diagnose configuration |\n| aspm scan <file> -s <source> | Local parse only (no API upload) |\n| aspm parse <file> -s <source> | Local dry-run parse |\n| aspm upload <file> -s <source> | Upload security report to API |\n| aspm coverage <file> | Upload coverage (lcov) |\n| aspm parse-coverage <file> | Local coverage parse |\n| aspm gate | Evaluate local reports against inline rules |\n| aspm projects | List org projects |\n| aspm dashboard | Terminal security posture summary |\nGlobal flags: -k/--api-key, -o/--org (org slug, e.g. minha-empresa), -p/--project\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix aspm_\nEnv: KUBBISEC_API_KEY, KUBBISEC_ORG_ID (slug), KUBBISEC_PROJECT (aliases ASPM_API_URL, ASPM_API_KEY, ASPM_ORG_ID)\nScanners (-s): trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish\nReport files: trivy-report.json, gitleaks-report.json, sbom.json, osv-report.json, semgrep-report.json, sonar-report.json, nmap-report.xml, skipfish-report.json\nPer-scanner install (Linux/macOS/Windows): kubbisec://aspm/aspm-scanner-{name} (e.g. aspm-scanner-trivy, aspm-scanner-semgrep)\nCoverage frameworks: kubbisec://aspm/aspm-coverage (Jest, Vitest, pytest, JaCoCo\u2192lcov, PHPUnit/clover, Go)\n\nNAUS CLI (npm install -g @kubbisec/naus):\n| Command | Purpose |\n| naus register [token] [--renew] | Enroll runner (mTLS bootstrap) |\n| naus start [--daemon] [--allow-privileged] | Start runner daemon |\n| naus migrate | Migrate legacy token runner to mTLS |\n| naus validate <file> / naus check <file> | Validate pipeline YAML |\n| naus plan <file> [--format mermaid] | Show dependency waves |\n| naus run <file> | Execute pipeline locally |\n| naus daemon list / naus daemon stop | Background runner sessions |\nDefault pipeline file: .naus.yml\nLocal env: naus run .naus.yml [--env-file .env] [--secret-file .secrets|.secret] (repeatable; defaults .env/.secrets in cwd).\nCloud secrets: Env Packs in KubbiSec UI (not .secrets on remote runner).\nEnv: NAUS_BOOTSTRAP_TOKEN, NAUS_RENEW_RUNNER\n\nKubbiSec AI CLI (npm install -g @kubbisec/ai):\n| Command | Purpose |\n| kubbisec login / logout / whoami | API session |\n| kubbisec doctor | Diagnose CLI setup |\n| kubbisec ls / show <id> | List/show findings |\n| kubbisec fix <id> [-m auto] | AI remediation |\n| kubbisec chat | Interactive terminal chat |\n| kubbisec do [intent] | Orchestrated agent run |\n| kubbisec watch [--logs] | Remediation queue daemon |\n| kubbisec daemon list|logs|stop | Manage watch sessions |\n| kubbisec ap | Trigger Autopilot cycle |\n| kubbisec naus \u2026 / kubbisec aspm \u2026 | CLI hub forwarding |\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix kbs_\nOrg: -o minha-empresa (slug)\nFull docs: kubbisec://ai/README, section ai-commands\n\nNAUS YAML (NOT GitHub Actions): top-level run: (never jobs:); script: + depends_on: (never commands:/needs:); ASPM jobs kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).\nFull docs via tools: aspm_docs (section aspm-commands), naus_pipeline_docs (naus-commands, naus-pipeline-overview, naus-aspm-integration), kubbisec://ai/* (KubbiSec AI CLI).\naspm-cicd.md is GitHub Actions only \u2014 do not use for NAUS pipelines.\n</cli-reference-index>";
-//# sourceMappingURL=cli-reference-index.d.ts.map
+export declare const KUBBISEC_CLI_REFERENCE_INDEX =
+  "<cli-reference-index>\nASPM CLI (npm install -g @kubbisec/aspm):\n| Command | Purpose |\n| aspm init | Interactive setup |\n| aspm login | Configure credentials |\n| aspm whoami | Show current config |\n| aspm doctor | Diagnose configuration |\n| aspm scan <file> -s <source> | Local parse only (no API upload) |\n| aspm parse <file> -s <source> | Local dry-run parse |\n| aspm upload <file> -s <source> | Upload security report to API |\n| aspm coverage <file> | Upload coverage (lcov) |\n| aspm parse-coverage <file> | Local coverage parse |\n| aspm gate | Evaluate local reports against inline rules |\n| aspm projects | List org projects |\n| aspm dashboard | Terminal security posture summary |\nGlobal flags: -k/--api-key, -o/--org (org slug, e.g. minha-empresa), -p/--project\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix aspm_\nEnv: KUBBISEC_API_KEY, KUBBISEC_ORG_ID (slug), KUBBISEC_PROJECT (aliases ASPM_API_URL, ASPM_API_KEY, ASPM_ORG_ID)\nScanners (-s): trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish\nReport files: trivy-report.json, gitleaks-report.json, sbom.json, osv-report.json, semgrep-report.json, sonar-report.json, nmap-report.xml, skipfish-report.json\nPer-scanner install (Linux/macOS/Windows): kubbisec://aspm/aspm-scanner-{name} (e.g. aspm-scanner-trivy, aspm-scanner-semgrep)\nCoverage frameworks: kubbisec://aspm/aspm-coverage (Jest, Vitest, pytest, JaCoCo\u2192lcov, PHPUnit/clover, Go)\n\nNAUS CLI (npm install -g @kubbisec/naus):\n| Command | Purpose |\n| naus register [token] [--renew] | Enroll runner (mTLS bootstrap) |\n| naus start [--daemon] [--allow-privileged] | Start runner daemon |\n| naus migrate | Migrate legacy token runner to mTLS |\n| naus validate <file> / naus check <file> | Validate pipeline YAML |\n| naus plan <file> [--format mermaid] | Show dependency waves |\n| naus run <file> | Execute pipeline locally |\n| naus daemon list / naus daemon stop | Background runner sessions |\nDefault pipeline file: .naus.yml\nLocal env: naus run .naus.yml [--env-file .env] [--secret-file .secrets|.secret] (repeatable; defaults .env/.secrets in cwd).\nCloud secrets: Env Packs in KubbiSec UI (not .secrets on remote runner).\nEnv: NAUS_BOOTSTRAP_TOKEN, NAUS_RENEW_RUNNER\n\nKubbiSec AI CLI (npm install -g @kubbisec/ai):\n| Command | Purpose |\n| kubbisec login / logout / whoami | API session |\n| kubbisec doctor | Diagnose CLI setup |\n| kubbisec ls / show <id> | List/show findings |\n| kubbisec fix <id> [-m auto] | AI remediation |\n| kubbisec chat | Interactive terminal chat |\n| kubbisec do [intent] | Orchestrated agent run |\n| kubbisec watch [--logs] | Remediation queue daemon |\n| kubbisec daemon list|logs|stop | Manage watch sessions |\n| kubbisec ap | Trigger Autopilot cycle |\n| kubbisec naus \u2026 / kubbisec aspm \u2026 | CLI hub forwarding |\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix kbs_\nOrg: -o minha-empresa (slug)\nFull docs: kubbisec://ai/README, section ai-commands\n\nNAUS YAML (NOT GitHub Actions): top-level run: (never jobs:); script: + depends_on: (never commands:/needs:); ASPM jobs kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).\nFull docs via tools: aspm_docs (section aspm-commands), naus_pipeline_docs (naus-commands, naus-pipeline-overview, naus-aspm-integration), kubbisec://ai/* (KubbiSec AI CLI).\naspm-cicd.md is GitHub Actions only \u2014 do not use for NAUS pipelines.\n</cli-reference-index>";
+//# sourceMappingURL=cli-reference-index.d.ts.map

package/bundled/copy/cli-reference-index.js

@@ -59,4 +59,4 @@ NAUS YAML (NOT GitHub Actions): top-level run: (never jobs:); script: + depends_
 Full docs via tools: aspm_docs (section aspm-commands), naus_pipeline_docs (naus-commands, naus-pipeline-overview, naus-aspm-integration), kubbisec://ai/* (KubbiSec AI CLI).
 aspm-cicd.md is GitHub Actions only — do not use for NAUS pipelines.
 </cli-reference-index>`;
-//# sourceMappingURL=cli-reference-index.js.map
+//# sourceMappingURL=cli-reference-index.js.map

package/bundled/copy/kubbisec-shell-copy.d.ts

@@ -1,21 +1,26 @@
 /** Shared KubbiSec AI TUI copy (CLI extensions). */
 export declare const KUBBISEC_PRODUCT_NAME = "KubbiSec Assistant";
-export declare const KUBBISEC_SUBTITLE_LINE = "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
-export declare const KUBBISEC_COMPACT_HEADER_TAGLINE = "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
+export declare const KUBBISEC_SUBTITLE_LINE =
+  "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
+export declare const KUBBISEC_COMPACT_HEADER_TAGLINE =
+  "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
 export declare const KUBBISEC_WORDMARK = "KUBBISEC";
 export declare const KUBBISEC_EDITOR_LABEL = "Coding";
 export declare const KUBBISEC_EDITOR_PLACEHOLDER = "Ask anything...";
 /** Skill invoke pattern shown in the chat header hints row. */
 export declare const KUBBISEC_HEADER_HINTS_SKILL = "@skill name";
 export declare const KUBBISEC_EXIT_SLASH_COMMAND = "/exit";
-export declare const KUBBISEC_HEADER_HINTS_COMMANDS = "kubbisec fix \u00B7 kubbisec watch \u00B7 kubbisec ls \u00B7 /help \u00B7 /exit";
+export declare const KUBBISEC_HEADER_HINTS_COMMANDS =
+  "kubbisec fix \u00B7 kubbisec watch \u00B7 kubbisec ls \u00B7 /help \u00B7 /exit";
 /** @deprecated Use KUBBISEC_HEADER_HINTS_SKILL + KUBBISEC_HEADER_HINTS_COMMANDS */
-export declare const KUBBISEC_HEADER_HINTS = "@skill name \u00B7 kubbisec fix \u00B7 kubbisec watch \u00B7 kubbisec ls \u00B7 /help \u00B7 /exit";
+export declare const KUBBISEC_HEADER_HINTS =
+  "@skill name \u00B7 kubbisec fix \u00B7 kubbisec watch \u00B7 kubbisec ls \u00B7 /help \u00B7 /exit";
 /** @deprecated Verbose TUI only (KUBBISEC_TUI_VERBOSE=1) */
 export declare const KUBBISEC_RAIL_HINT = "chat \u00B7 org BYOK";
 export declare const KUBBISEC_PROVIDER_LABEL = "kubbisec";
 /** @deprecated Verbose TUI only */
 export declare const KUBBISEC_RAIL_LINE = "KubbiSec Assistant \u00B7 chat \u00B7 org BYOK";
 /** @deprecated Verbose TUI only */
-export declare const KUBBISEC_HEADER_TAGLINE = "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
-//# sourceMappingURL=kubbisec-shell-copy.d.ts.map
+export declare const KUBBISEC_HEADER_TAGLINE =
+  "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
+//# sourceMappingURL=kubbisec-shell-copy.d.ts.map

package/bundled/copy/kubbisec-shell-copy.js

@@ -18,4 +18,4 @@ export const KUBBISEC_PROVIDER_LABEL = "kubbisec";
 export const KUBBISEC_RAIL_LINE = `${KUBBISEC_PRODUCT_NAME} · ${KUBBISEC_RAIL_HINT}`;
 /** @deprecated Verbose TUI only */
 export const KUBBISEC_HEADER_TAGLINE = KUBBISEC_SUBTITLE_LINE;
-//# sourceMappingURL=kubbisec-shell-copy.js.map
+//# sourceMappingURL=kubbisec-shell-copy.js.map

package/bundled/extensions/cli-local-shared.d.ts

@@ -2,45 +2,64 @@ export { extendedContextEnabled } from "../config/extended-context.js";
 export declare const CLI_LOCAL_MAX_OUTPUT_CHARS = 12000;
 export declare const NAUS_LOCAL_RUN_TIMEOUT_MS: number;
 export type ExecCaptureResult = {
-    code: number;
-    stdout: string;
-    stderr: string;
+  code: number;
+  stdout: string;
+  stderr: string;
 };
 export type CliToolDetails = {
-    ok: boolean;
-    exitCode: number;
-    userMessage: string;
+  ok: boolean;
+  exitCode: number;
+  userMessage: string;
 };
 export declare function resolveWorkspace(): string;
 export declare function truncateCliOutput(text: string, max?: number): string;
 export declare function denyExtendedContextMessage(): {
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
+  content: Array<{
+    type: "text";
+    text: string;
+  }>;
 };
 /** Full subprocess output for model debug (extended context + debug flag). */
-export declare function formatExecResultForModel(bin: string, args: string[], cwd: string, result: ExecCaptureResult): string;
+export declare function formatExecResultForModel(
+  bin: string,
+  args: string[],
+  cwd: string,
+  result: ExecCaptureResult,
+): string;
 /** @deprecated use formatExecResultForModel */
 export declare const formatExecResult: typeof formatExecResultForModel;
-export declare function formatExecResultForUser(bin: string, result: ExecCaptureResult): CliToolDetails;
-export declare function buildCliToolResult(bin: string, args: string[], cwd: string, result: ExecCaptureResult, suffix?: string): {
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-    details: CliToolDetails;
+export declare function formatExecResultForUser(
+  bin: string,
+  result: ExecCaptureResult,
+): CliToolDetails;
+export declare function buildCliToolResult(
+  bin: string,
+  args: string[],
+  cwd: string,
+  result: ExecCaptureResult,
+  suffix?: string,
+): {
+  content: Array<{
+    type: "text";
+    text: string;
+  }>;
+  details: CliToolDetails;
 };
 export declare function cliToolErrorContent(error: unknown): {
-    content: Array<{
-        type: "text";
-        text: string;
-    }>;
-    details: CliToolDetails;
+  content: Array<{
+    type: "text";
+    text: string;
+  }>;
+  details: CliToolDetails;
 };
-export declare function execCapture(bin: string, args: string[], cwd: string, options?: {
+export declare function execCapture(
+  bin: string,
+  args: string[],
+  cwd: string,
+  options?: {
     signal?: AbortSignal;
     timeoutMs?: number;
-}): Promise<ExecCaptureResult>;
+  },
+): Promise<ExecCaptureResult>;
 export declare function resolvePathInWorkspace(relativePath: string, workspace: string): string;
-//# sourceMappingURL=cli-local-shared.d.ts.map
+//# sourceMappingURL=cli-local-shared.d.ts.map