@kubbisec/ai-linux-arm64 0.1.23 → 0.1.25

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/monorepo-root.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.monorepoRootFromSharedModule = monorepoRootFromSharedModule;
+exports.firstExistingDir = firstExistingDir;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+/** Repo root when running from compiled `packages/shared/dist/product-docs/`. */
+function monorepoRootFromSharedModule() {
+    return (0, node_path_1.join)(__dirname, "..", "..", "..", "..");
+}
+function firstExistingDir(candidates) {
+    for (const dir of candidates) {
+        if ((0, node_fs_1.existsSync)(dir)) {
+            return dir;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=monorepo-root.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/monorepo-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monorepo-root.js","sourceRoot":"","sources":["../../src/product-docs/monorepo-root.ts"],"names":[],"mappings":";;AAIA,oEAEC;AAED,4CAOC;AAfD,qCAAqC;AACrC,yCAAiC;AAEjC,iFAAiF;AACjF,SAAgB,4BAA4B;IAC1C,OAAO,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,gBAAgB,CAAC,UAAoB;IACnD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,IAAA,oBAAU,EAAC,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.d.ts

@@ -0,0 +1,11 @@
+/** Web internal docs. Order matters for readability. */
+export declare const NAUS_WEB_DOC_IDS: readonly ["naus-quickstart", "naus-commands", "naus-runners", "naus-security", "naus-pipeline-overview", "naus-pipeline-only", "naus-pipeline-run", "naus-pipeline-depends", "naus-pipeline-anchors", "naus-pipeline-variables", "naus-pipeline-volumes", "naus-pipeline-script", "naus-pipeline-repository", "naus-pipeline-image", "naus-pipeline-docker-preset", "naus-pipeline-examples", "naus-aspm-integration", "naus-aspm-preset", "naus-aspm-matrix", "naus-aspm-gate"];
+/**
+ * Reads NAUS markdown: web content/naus, legacy docs/naus extras, @kubbisec/naus-validation README.
+ */
+export declare function loadNausPipelineDocsBundleFromDisk(): Promise<{
+    bundle: string;
+    sourceDir: string | null;
+    triedPaths: string[];
+}>;
+//# sourceMappingURL=naus-pipeline-docs-bundle.loader.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"naus-pipeline-docs-bundle.loader.d.ts","sourceRoot":"","sources":["../../src/product-docs/naus-pipeline-docs-bundle.loader.ts"],"names":[],"mappings":"AAKA,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,kdAqBnB,CAAC;AA2EX;;GAEG;AACH,wBAAsB,kCAAkC,IAAI,OAAO,CAAC;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC,CA8CD"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NAUS_WEB_DOC_IDS = void 0;
+exports.loadNausPipelineDocsBundleFromDisk = loadNausPipelineDocsBundleFromDisk;
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const monorepo_root_js_1 = require("./monorepo-root.js");
+/** Web internal docs. Order matters for readability. */
+exports.NAUS_WEB_DOC_IDS = [
+    "naus-quickstart",
+    "naus-commands",
+    "naus-runners",
+    "naus-security",
+    "naus-pipeline-overview",
+    "naus-pipeline-only",
+    "naus-pipeline-run",
+    "naus-pipeline-depends",
+    "naus-pipeline-anchors",
+    "naus-pipeline-variables",
+    "naus-pipeline-volumes",
+    "naus-pipeline-script",
+    "naus-pipeline-repository",
+    "naus-pipeline-image",
+    "naus-pipeline-docker-preset",
+    "naus-pipeline-examples",
+    "naus-aspm-integration",
+    "naus-aspm-preset",
+    "naus-aspm-matrix",
+    "naus-aspm-gate",
+];
+/** Extra markdown only under docs/naus/ (not duplicated in web tree). */
+const NAUS_LEGACY_DOC_FILES = [
+    "README.md",
+    "pipeline-reference.md",
+    "runner-management.md",
+    "troubleshooting.md",
+];
+function listWebNausDirCandidates() {
+    const out = [];
+    const add = (p) => {
+        if (!out.includes(p))
+            out.push(p);
+    };
+    const envDir = process.env.NAUS_WEB_DOCS_DIR?.trim();
+    if (envDir)
+        add(envDir);
+    const mcpSynced = process.env.MCP_DOCS_CONTENT_ROOT?.trim();
+    if (mcpSynced)
+        add((0, node_path_1.join)(mcpSynced, "naus"));
+    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
+    add((0, node_path_1.join)(root, "apps", "mcp", "src", "resources", "content", "naus"));
+    add((0, node_path_1.join)(root, "apps", "mcp", "dist", "resources", "content", "naus"));
+    add((0, node_path_1.join)(root, "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
+    const cwd = process.cwd();
+    add((0, node_path_1.join)(cwd, "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
+    add((0, node_path_1.join)(cwd, "src", "resources", "content", "naus"));
+    add((0, node_path_1.join)(cwd, "resources", "content", "naus"));
+    add((0, node_path_1.join)(cwd, "..", "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
+    add((0, node_path_1.join)(cwd, "..", "..", "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
+    return out;
+}
+function listLegacyNausDirCandidates() {
+    const out = [];
+    const add = (p) => {
+        if (!out.includes(p))
+            out.push(p);
+    };
+    const envDir = process.env.NAUS_PIPELINE_DOCS_DIR?.trim();
+    if (envDir)
+        add(envDir);
+    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
+    add((0, node_path_1.join)(root, "docs", "naus"));
+    const cwd = process.cwd();
+    add((0, node_path_1.join)(cwd, "docs", "naus"));
+    add((0, node_path_1.join)(cwd, "..", "docs", "naus"));
+    add((0, node_path_1.join)(cwd, "..", "..", "docs", "naus"));
+    return out;
+}
+function listValidationReadmeCandidates() {
+    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
+    const cwd = process.cwd();
+    return [
+        (0, node_path_1.join)(root, "packages", "naus", "validation", "README.md"),
+        (0, node_path_1.join)(root, "packages", "naus-validation", "README.md"),
+        (0, node_path_1.join)(cwd, "packages", "naus", "validation", "README.md"),
+        (0, node_path_1.join)(cwd, "packages", "naus-validation", "README.md"),
+        (0, node_path_1.join)(cwd, "..", "packages", "naus", "validation", "README.md"),
+    ];
+}
+async function readChunkIfExists(filePath, heading) {
+    if (!(0, node_fs_1.existsSync)(filePath))
+        return null;
+    const text = await (0, promises_1.readFile)(filePath, "utf8");
+    return `${heading}\n\n${text.trim()}\n`;
+}
+/**
+ * Reads NAUS markdown: web content/naus, legacy docs/naus extras, @kubbisec/naus-validation README.
+ */
+async function loadNausPipelineDocsBundleFromDisk() {
+    const webCandidates = listWebNausDirCandidates();
+    const legacyCandidates = listLegacyNausDirCandidates();
+    const triedPaths = [...webCandidates, ...legacyCandidates, ...listValidationReadmeCandidates()];
+    const chunks = [];
+    let sourceDir = null;
+    for (const dir of webCandidates) {
+        if (!(0, node_fs_1.existsSync)(dir))
+            continue;
+        const webChunks = [];
+        for (const id of exports.NAUS_WEB_DOC_IDS) {
+            const fp = (0, node_path_1.join)(dir, `${id}.md`);
+            const chunk = await readChunkIfExists(fp, `## naus/${id}`);
+            if (chunk)
+                webChunks.push(chunk);
+        }
+        if (webChunks.length > 0) {
+            chunks.push(...webChunks);
+            sourceDir = dir;
+            break;
+        }
+    }
+    for (const dir of legacyCandidates) {
+        if (!(0, node_fs_1.existsSync)(dir))
+            continue;
+        for (const file of NAUS_LEGACY_DOC_FILES) {
+            const fp = (0, node_path_1.join)(dir, file);
+            const chunk = await readChunkIfExists(fp, `## docs/naus/${file}`);
+            if (chunk)
+                chunks.push(chunk);
+        }
+        if (!sourceDir && chunks.length > 0)
+            sourceDir = dir;
+        break;
+    }
+    for (const fp of listValidationReadmeCandidates()) {
+        const chunk = await readChunkIfExists(fp, "## naus/validation");
+        if (chunk) {
+            chunks.push(chunk);
+            break;
+        }
+    }
+    return {
+        bundle: chunks.length > 0 ? chunks.join("\n---\n\n") : "",
+        sourceDir,
+        triedPaths,
+    };
+}
+//# sourceMappingURL=naus-pipeline-docs-bundle.loader.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naus-pipeline-docs-bundle.loader.js","sourceRoot":"","sources":["../../src/product-docs/naus-pipeline-docs-bundle.loader.ts"],"names":[],"mappings":";;;AAyGA,gFAkDC;AA3JD,qCAAqC;AACrC,+CAA4C;AAC5C,yCAAiC;AACjC,yDAAkE;AAElE,wDAAwD;AAC3C,QAAA,gBAAgB,GAAG;IAC9B,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,eAAe;IACf,wBAAwB;IACxB,oBAAoB;IACpB,mBAAmB;IACnB,uBAAuB;IACvB,uBAAuB;IACvB,yBAAyB;IACzB,uBAAuB;IACvB,sBAAsB;IACtB,0BAA0B;IAC1B,qBAAqB;IACrB,6BAA6B;IAC7B,wBAAwB;IACxB,uBAAuB;IACvB,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;CACR,CAAC;AAEX,yEAAyE;AACzE,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;CACZ,CAAC;AAEX,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,SAAS;QAAE,GAAG,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAErF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,8BAA8B;IACrC,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,OAAO;QACL,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACzD,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACtD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACxD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACrD,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IAChE,IAAI,CAAC,IAAA,oBAAU,EAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,GAAG,OAAO,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;AAC1C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kCAAkC;IAKtD,MAAM,aAAa,GAAG,wBAAwB,EAAE,CAAC;IACjD,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,gBAAgB,EAAE,GAAG,8BAA8B,EAAE,CAAC,CAAC;IAChG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,wBAAgB,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,KAAK;gBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;YAC1B,SAAS,GAAG,GAAG,CAAC;YAChB,MAAM;QACR,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,GAAG,GAAG,CAAC;QACrD,MAAM;IACR,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,8BAA8B,EAAE,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAChE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACzD,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.d.ts

@@ -0,0 +1,2 @@
+export declare const NAUS_SCHEMA_OVERVIEW = "NAUS pipeline YAML (cheat sheet \u2014 authoritative prose: naus_pipeline_docs, docs/naus/pipeline-reference.md):\n\nTOP-LEVEL (not GitHub Actions):\n- Required: run: (array of single-key job objects OR map job_id \u2192 config)\n- Optional: name, description, local, stages[], variables (map or KEY=value list), volumes[], repository, only[]\n- NEVER use top-level jobs:, env: (use variables:), needs:, commands:, steps:, or scanner:\n\nCONTAINER JOB (default kind: container):\n- image: + script: [string, ...] (required for container)\n- depends_on: [job_ids] (not needs:)\n- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged\n\nASPM JOBS (declarative \u2014 no manual trivy/aspm CLI in script):\n- kind: aspm + tool: (trivy|gitleaks|syft|osv|semgrep|sonar|nmap|skipfish) + mode: scan|upload|scan-and-upload\n- kind: aspm_matrix + parallel: [{ tool: ... }, ...] + matrix_strategy: chain|fanout\n- kind: aspm_gate + rules: { vulnerabilities, coverage, risk_score, ... }\n- kind: aspm_preset + preset: kubbisec/default-security\n- kind: docker \u2014 build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules)\n\nMINIMAL EXAMPLE:\nname: ci\nrun:\n  - build:\n      image: node:20-alpine\n      script: [npm ci, npm run build --if-present]\n  - security:\n      kind: aspm\n      tool: trivy\n      mode: scan-and-upload\n      depends_on: [build]\n\nAlways call validate_naus_pipeline_yaml before persisting. privileged: true needs kbsc.ci.privileged.run.";
+//# sourceMappingURL=naus-schema-overview.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"naus-schema-overview.d.ts","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,y/CA+ByE,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NAUS_SCHEMA_OVERVIEW = void 0;
+exports.NAUS_SCHEMA_OVERVIEW = `NAUS pipeline YAML (cheat sheet — authoritative prose: naus_pipeline_docs, docs/naus/pipeline-reference.md):
+
+TOP-LEVEL (not GitHub Actions):
+- Required: run: (array of single-key job objects OR map job_id → config)
+- Optional: name, description, local, stages[], variables (map or KEY=value list), volumes[], repository, only[]
+- NEVER use top-level jobs:, env: (use variables:), needs:, commands:, steps:, or scanner:
+
+CONTAINER JOB (default kind: container):
+- image: + script: [string, ...] (required for container)
+- depends_on: [job_ids] (not needs:)
+- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged
+
+ASPM JOBS (declarative — no manual trivy/aspm CLI in script):
+- kind: aspm + tool: (trivy|gitleaks|syft|osv|semgrep|sonar|nmap|skipfish) + mode: scan|upload|scan-and-upload
+- kind: aspm_matrix + parallel: [{ tool: ... }, ...] + matrix_strategy: chain|fanout
+- kind: aspm_gate + rules: { vulnerabilities, coverage, risk_score, ... }
+- kind: aspm_preset + preset: kubbisec/default-security
+- kind: docker — build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules)
+
+MINIMAL EXAMPLE:
+name: ci
+run:
+  - build:
+      image: node:20-alpine
+      script: [npm ci, npm run build --if-present]
+  - security:
+      kind: aspm
+      tool: trivy
+      mode: scan-and-upload
+      depends_on: [build]
+
+Always call validate_naus_pipeline_yaml before persisting. privileged: true needs kbsc.ci.privileged.run.`;
+//# sourceMappingURL=naus-schema-overview.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naus-schema-overview.js","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":";;;AAAa,QAAA,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0GA+BsE,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/security-scanner-playbooks.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Operational playbooks for ASPM scanners (CLI + NAUS).
+ * Duplicated from web guides — API must not import apps/web.
+ */
+export declare const SECURITY_SCANNER_IDS: readonly ["trivy", "gitleaks", "syft", "osv", "semgrep", "sonar", "nmap", "skipfish"];
+export type SecurityScannerId = (typeof SECURITY_SCANNER_IDS)[number];
+export type ScannerPlatform = "linux" | "macos" | "windows";
+export type PlaybookTopic = "install" | "scan" | "upload" | "naus" | "formats" | "all";
+export type ScannerPlaybookEntry = {
+    id: SecurityScannerId;
+    label: string;
+    category: "sca" | "sast" | "secrets" | "sbom" | "network" | "dast";
+    capabilities: string[];
+    defaultReportFile: string;
+    reportFormats: string[];
+    uploadSource: SecurityScannerId;
+    platforms: ScannerPlatform[];
+};
+export declare const SCANNER_META: Record<SecurityScannerId, Omit<ScannerPlaybookEntry, "id" | "platforms">>;
+/** NAUS matrix job example shared across scanner playbooks (for docs + contract tests). */
+export declare const PLAYBOOK_ASPM_MATRIX_EXAMPLE: "kind: aspm_matrix\nmatrix_strategy: fanout\nparallel:\n  - tool: trivy\n  - tool: gitleaks\n  - tool: osv";
+export declare function listPlaybookNausKindAspmSnippets(): Array<{
+    scanner: SecurityScannerId;
+    snippet: string;
+}>;
+export declare function wrapPlaybookSnippetAsPipelineYaml(snippet: string, name?: string): string;
+export declare function isSecurityScannerId(value: string): value is SecurityScannerId;
+export declare function parseSecurityScannerPlaybookArgs(argsRaw: string): {
+    ok: true;
+    scanner: SecurityScannerId;
+    platform: ScannerPlatform;
+    topic: PlaybookTopic;
+} | {
+    ok: false;
+    error: string;
+    hint?: string;
+};
+export declare function buildSecurityScannersCatalogPayload(): {
+    scanners: ScannerPlaybookEntry[];
+    aspmCliInstall: string;
+    uploadFlag: string;
+    nausTools: SecurityScannerId[];
+    assistantTools: {
+        catalog: string;
+        playbook: string;
+    };
+};
+export declare function buildSecurityScannerPlaybookPayload(scanner: SecurityScannerId, platform: ScannerPlatform, topic: PlaybookTopic): Record<string, unknown>;
+//# sourceMappingURL=security-scanner-playbooks.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/security-scanner-playbooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scanner-playbooks.d.ts","sourceRoot":"","sources":["../../src/product-docs/security-scanner-playbooks.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,oBAAoB,uFASvB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAC5D,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;AAwBvF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,iBAAiB,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IACnE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,iBAAiB,CAAC;IAChC,SAAS,EAAE,eAAe,EAAE,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,MAAM,CAC/B,iBAAiB,EACjB,IAAI,CAAC,oBAAoB,EAAE,IAAI,GAAG,WAAW,CAAC,CAkE/C,CAAC;AA4YF,2FAA2F;AAC3F,eAAO,MAAM,4BAA4B,6GAKlB,CAAC;AAExB,wBAAgB,gCAAgC,IAAI,KAAK,CAAC;IACxD,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAKD;AAED,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,SAAkB,GAAG,MAAM,CASjG;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE7E;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,MAAM,GAC5D;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,aAAa,CAAC;CACtB,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAqC9C;AAED,wBAAgB,mCAAmC,IAAI;IACrD,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,cAAc,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD,CAiBA;AAYD,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,aAAa,GACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8CzB"}