@kubbisec/ai-linux-arm64 0.1.9 → 0.1.11

package/bundled/node_modules/@aspm/shared/dist/redaction.js

@@ -0,0 +1,249 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REDACTED_VALUE = void 0;
+exports.redactSensitiveData = redactSensitiveData;
+exports.sanitizeReportPayload = sanitizeReportPayload;
+/**
+ * Structured redaction uses **@pinojs/redact** (Pino / Node.js logging stack), the same path
+ * model as `fast-redact` and Pino log redaction.
+ * @see https://github.com/pinojs/redact
+ *
+ * Key rules (headers vs env, substring keys, allowlist for fingerprint/secretHash) and
+ * inline secret patterns in strings stay defined here for ASPM report shapes.
+ */
+const redact_1 = __importDefault(require("@pinojs/redact"));
+exports.REDACTED_VALUE = "[REDACTED]";
+const SENSITIVE_KEY_PARTS = [
+    "accesstoken",
+    "apikey",
+    "apitoken",
+    "authorization",
+    "bearertoken",
+    "clientsecret",
+    "credential",
+    "idtoken",
+    "password",
+    "passwd",
+    "privatekey",
+    "refreshtoken",
+    "secret",
+    "session",
+    "token",
+];
+const SENSITIVE_EXACT_KEYS = new Set([
+    "auth",
+    "cookie",
+    "match",
+    "offender",
+    "proxyauthorization",
+    "pwd",
+    "secret",
+    "setcookie",
+]);
+const SENSITIVE_HEADER_KEYS = new Set([
+    "authorization",
+    "cookie",
+    "proxyauthorization",
+    "setcookie",
+    "xapikey",
+    "xauthtoken",
+    "xcsrftoken",
+    "xgithubtoken",
+]);
+const NON_SENSITIVE_EXACT_KEYS = new Set(["fingerprint", "secrethash"]);
+const ENV_CONTAINER_KEYS = new Set(["env", "environment", "environmentvariables", "envvars"]);
+const HEADER_CONTAINER_KEYS = new Set(["header", "headers", "requestheaders", "responseheaders"]);
+const MAX_REDACTION_DEPTH = 20;
+function normalizeKey(key) {
+    return key.toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+function isSensitiveKey(key) {
+    const normalized = normalizeKey(key);
+    if (NON_SENSITIVE_EXACT_KEYS.has(normalized))
+        return false;
+    return (SENSITIVE_EXACT_KEYS.has(normalized) ||
+        SENSITIVE_KEY_PARTS.some((part) => normalized.includes(part)));
+}
+function shouldRedactValue(key, parentKey) {
+    const normalizedKey = normalizeKey(key);
+    const normalizedParentKey = parentKey ? normalizeKey(parentKey) : "";
+    if (HEADER_CONTAINER_KEYS.has(normalizedParentKey)) {
+        return SENSITIVE_HEADER_KEYS.has(normalizedKey) || isSensitiveKey(key);
+    }
+    if (ENV_CONTAINER_KEYS.has(normalizedParentKey)) {
+        return isSensitiveKey(key);
+    }
+    return isSensitiveKey(key);
+}
+function redactString(value) {
+    return value
+        .replace(/\b((?:[A-Z][A-Z0-9_]{1,80})(?:TOKEN|SECRET|PASSWORD|PASSWD|PWD|API_KEY|PRIVATE_KEY|CLIENT_SECRET|AUTH)[A-Z0-9_]*\s*=\s*)(["']?)[^\s"'`]+/gi, `$1$2${exports.REDACTED_VALUE}`)
+        .replace(/\b(Bearer\s+)[A-Za-z0-9._~+/=-]{8,}/gi, `$1${exports.REDACTED_VALUE}`)
+        .replace(/\b(Basic\s+)[A-Za-z0-9+/=-]{8,}/gi, `$1${exports.REDACTED_VALUE}`)
+        .replace(/\bgh[pousr]_[A-Za-z0-9_]{20,255}\b/g, exports.REDACTED_VALUE)
+        .replace(/\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g, exports.REDACTED_VALUE)
+        .replace(/\bAIza[0-9A-Za-z_-]{35}\b/g, exports.REDACTED_VALUE)
+        .replace(/\b(AccountKey|SharedAccessSignature)=([^;\n]+)/gi, `$1=${exports.REDACTED_VALUE}`)
+        .replace(/\b((?:password|passwd|pwd|secret|token|api[_-]?key|client[_-]?secret)\b\s*[:=]\s*)(["'`]?)[^,\s"'`]+/gi, `$1$2${exports.REDACTED_VALUE}`)
+        .replace(/(https?:\/\/)([^/@\s:]+):([^/@\s]+)@/gi, `$1${exports.REDACTED_VALUE}@`);
+}
+/** Path string for @pinojs/redact / fast-redact. */
+function serializeRedactPath(parts) {
+    let out = "";
+    for (const p of parts) {
+        if (typeof p === "number" || (typeof p === "string" && /^\d+$/.test(p))) {
+            const n = typeof p === "number" ? p : Number(p);
+            out += `[${n}]`;
+            continue;
+        }
+        const k = String(p);
+        if (/^[a-zA-Z_$][\w$]*$/.test(k)) {
+            out += out === "" ? k : `.${k}`;
+        }
+        else {
+            const escaped = k.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+            out += out === "" ? `["${escaped}"]` : `["${escaped}"]`;
+        }
+    }
+    return out;
+}
+/** Normalize path segments so @pinojs/redact callback keys match our collected paths. */
+function pathKey(parts) {
+    return JSON.stringify(parts.map(String));
+}
+function markFull(parts, fullPathKeys, pinoPaths) {
+    const pk = pathKey(parts);
+    fullPathKeys.add(pk);
+    pinoPaths.add(serializeRedactPath(parts));
+}
+/** Deep clone for JSON-serializable report trees (no cycles, no special types). */
+function cloneReportTree(value) {
+    return JSON.parse(JSON.stringify(value));
+}
+function markString(parts, stringPathKeys, pinoPaths) {
+    const pk = pathKey(parts);
+    stringPathKeys.add(pk);
+    pinoPaths.add(serializeRedactPath(parts));
+}
+/**
+ * Mirrors legacy `redactValue` traversal: `containerKey` is the key passed into `redactValue`
+ * (how the parent refers to this node — array field name for array items, child key for nested objects).
+ */
+function collectRedactionTargets(value, parts, containerKey, depth, fullPathKeys, stringPathKeys, pinoPaths) {
+    if (value === null || typeof value !== "object") {
+        return;
+    }
+    if (containerKey !== undefined && shouldRedactValue(containerKey)) {
+        markFull(parts, fullPathKeys, pinoPaths);
+        return;
+    }
+    if (depth >= MAX_REDACTION_DEPTH) {
+        markFull(parts, fullPathKeys, pinoPaths);
+        return;
+    }
+    if (Array.isArray(value)) {
+        const nextDepth = depth + 1;
+        for (let i = 0; i < value.length; i++) {
+            const item = value[i];
+            const itemParts = [...parts, i];
+            if (item === null || typeof item !== "object") {
+                if (typeof item === "string") {
+                    markString(itemParts, stringPathKeys, pinoPaths);
+                }
+                continue;
+            }
+            if (nextDepth >= MAX_REDACTION_DEPTH) {
+                markFull(itemParts, fullPathKeys, pinoPaths);
+                continue;
+            }
+            collectRedactionTargets(item, itemParts, containerKey, nextDepth, fullPathKeys, stringPathKeys, pinoPaths);
+        }
+        return;
+    }
+    const input = value;
+    for (const [childKey, childValue] of Object.entries(input)) {
+        const nextParts = [...parts, childKey];
+        if (shouldRedactValue(childKey, containerKey)) {
+            markFull(nextParts, fullPathKeys, pinoPaths);
+            continue;
+        }
+        if (childValue === null || typeof childValue !== "object") {
+            if (typeof childValue === "string") {
+                markString(nextParts, stringPathKeys, pinoPaths);
+            }
+            continue;
+        }
+        const nextDepth = depth + 1;
+        if (nextDepth >= MAX_REDACTION_DEPTH) {
+            markFull(nextParts, fullPathKeys, pinoPaths);
+            continue;
+        }
+        collectRedactionTargets(childValue, nextParts, childKey, nextDepth, fullPathKeys, stringPathKeys, pinoPaths);
+    }
+}
+function redactSensitiveData(value) {
+    if (value == null || typeof value !== "object") {
+        if (typeof value === "string") {
+            return redactString(value);
+        }
+        return value;
+    }
+    const fullPathKeys = new Set();
+    const stringPathKeys = new Set();
+    const pinoPaths = new Set();
+    collectRedactionTargets(value, [], undefined, 0, fullPathKeys, stringPathKeys, pinoPaths);
+    if (pinoPaths.size === 0) {
+        return value;
+    }
+    const redact = (0, redact_1.default)({
+        paths: [...pinoPaths],
+        serialize: false,
+        strict: false,
+        censor: ((v, keyPath) => {
+            const parts = Array.isArray(keyPath) ? keyPath.map((x) => String(x)) : [];
+            const pk = pathKey(parts);
+            if (fullPathKeys.has(pk)) {
+                return exports.REDACTED_VALUE;
+            }
+            if (typeof v === "string" && stringPathKeys.has(pk)) {
+                return redactString(v);
+            }
+            return v;
+        }),
+    });
+    const raw = redact(cloneReportTree(value));
+    if (typeof raw.restore === "function") {
+        const { restore: _drop, ...rest } = raw;
+        return rest;
+    }
+    return raw;
+}
+function sanitizeReportPayload(report, options = {}) {
+    const { redactRawData = true, redactMetadata = true } = options;
+    return {
+        ...report,
+        ...(redactMetadata && report.metadata
+            ? { metadata: redactSensitiveData(report.metadata) }
+            : {}),
+        ...(Array.isArray(report.vulnerabilities)
+            ? {
+                vulnerabilities: report.vulnerabilities.map((vulnerability) => {
+                    const { rawData, ...vulnerabilityFields } = vulnerability;
+                    const hasRawData = Object.prototype.hasOwnProperty.call(vulnerability, "rawData");
+                    return {
+                        ...redactSensitiveData(vulnerabilityFields),
+                        ...(hasRawData
+                            ? {
+                                rawData: redactRawData && rawData ? redactSensitiveData(rawData) : rawData,
+                            }
+                            : {}),
+                    };
+                }),
+            }
+            : {}),
+    };
+}
+//# sourceMappingURL=redaction.js.map

package/bundled/node_modules/@aspm/shared/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":";;;;;;AA6PA,kDA2CC;AAED,sDA+BC;AAzUD;;;;;;;GAOG;AACH,4DAAwC;AAE3B,QAAA,cAAc,GAAG,YAAY,CAAC;AAE3C,MAAM,mBAAmB,GAAG;IAC1B,aAAa;IACb,QAAQ;IACR,UAAU;IACV,eAAe;IACf,aAAa;IACb,cAAc;IACd,YAAY;IACZ,SAAS;IACT,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AAEF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,oBAAoB;IACpB,KAAK;IACL,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe;IACf,QAAQ;IACR,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AACxE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9F,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAS/B,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CACL,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,SAAkB;IACxD,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,IAAI,qBAAqB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,OAAO,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK;SACT,OAAO,CACN,4IAA4I,EAC5I,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CAAC,uCAAuC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACvE,OAAO,CAAC,mCAAmC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACnE,OAAO,CAAC,qCAAqC,EAAE,sBAAc,CAAC;SAC9D,OAAO,CAAC,gCAAgC,EAAE,sBAAc,CAAC;SACzD,OAAO,CAAC,4BAA4B,EAAE,sBAAc,CAAC;SACrD,OAAO,CAAC,kDAAkD,EAAE,MAAM,sBAAc,EAAE,CAAC;SACnF,OAAO,CACN,wGAAwG,EACxG,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CAAC,wCAAwC,EAAE,KAAK,sBAAc,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,oDAAoD;AACpD,SAAS,mBAAmB,CAAC,KAA6B;IACxD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC9D,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,KAA6B;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CACf,KAA6B,EAC7B,YAAyB,EACzB,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAI,KAAQ;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CACjB,KAA6B,EAC7B,cAA2B,EAC3B,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,KAAc,EACd,KAA6B,EAC7B,YAAgC,EAChC,KAAa,EACb,YAAyB,EACzB,cAA2B,EAC3B,SAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAEhC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;gBACnD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YAED,uBAAuB,CACrB,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,KAAuB,CAAC;IACtC,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEvC,IAAI,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1D,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;YACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,uBAAuB,CACrB,UAAU,EACV,SAAS,EACT,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAI,KAAQ;IAC7C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,YAAY,CAAC,KAAK,CAAM,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAE1F,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,gBAAU,EAAC;QACxB,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC;QACrB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,CAAC,CAAC,CAAU,EAAE,OAAgB,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,OAAO,sBAAc,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpD,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAA4B;KAC9B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAExC,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACxC,OAAO,IAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CAKnC,MAAS,EAAE,UAA4B,EAAE;IACzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,cAAc,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEhE,OAAO;QACL,GAAG,MAAM;QACT,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ;YACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YACvC,CAAC,CAAC;gBACE,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE;oBAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,GAAG,aAAa,CAAC;oBAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;oBAClF,OAAO;wBACL,GAAG,mBAAmB,CAAC,mBAAmB,CAAC;wBAC3C,GAAG,CAAC,UAAU;4BACZ,CAAC,CAAC;gCACE,OAAO,EACL,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;6BACpE;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;gBACJ,CAAC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/severity-map.d.ts

@@ -0,0 +1,8 @@
+import { Severity } from "./enums";
+export declare const TRIVY_SEVERITY_MAP: Record<string, Severity>;
+export declare const SONAR_SEVERITY_MAP: Record<string, Severity>;
+/** Semgrep CLI JSON: extra.severity */
+export declare const SEMGREP_SEVERITY_MAP: Record<string, Severity>;
+export declare const SKIPFISH_SEVERITY_MAP: Record<number, Severity>;
+export declare function mapNmapSeverity(port: number, service: string): Severity;
+//# sourceMappingURL=severity-map.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/severity-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity-map.d.ts","sourceRoot":"","sources":["../src/severity-map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAMvD,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAMvD,CAAC;AAEF,uCAAuC;AACvC,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAKzD,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAM1D,CAAC;AAEF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAavE"}

package/bundled/node_modules/@aspm/shared/dist/severity-map.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SKIPFISH_SEVERITY_MAP = exports.SEMGREP_SEVERITY_MAP = exports.SONAR_SEVERITY_MAP = exports.TRIVY_SEVERITY_MAP = void 0;
+exports.mapNmapSeverity = mapNmapSeverity;
+const enums_1 = require("./enums");
+exports.TRIVY_SEVERITY_MAP = {
+    CRITICAL: enums_1.Severity.CRITICAL,
+    HIGH: enums_1.Severity.HIGH,
+    MEDIUM: enums_1.Severity.MEDIUM,
+    LOW: enums_1.Severity.LOW,
+    UNKNOWN: enums_1.Severity.INFO,
+};
+exports.SONAR_SEVERITY_MAP = {
+    BLOCKER: enums_1.Severity.CRITICAL,
+    CRITICAL: enums_1.Severity.HIGH,
+    MAJOR: enums_1.Severity.MEDIUM,
+    MINOR: enums_1.Severity.LOW,
+    INFO: enums_1.Severity.INFO,
+};
+/** Semgrep CLI JSON: extra.severity */
+exports.SEMGREP_SEVERITY_MAP = {
+    ERROR: enums_1.Severity.HIGH,
+    WARNING: enums_1.Severity.MEDIUM,
+    INFO: enums_1.Severity.LOW,
+    INVENTORY: enums_1.Severity.INFO,
+};
+exports.SKIPFISH_SEVERITY_MAP = {
+    5: enums_1.Severity.HIGH,
+    4: enums_1.Severity.MEDIUM,
+    3: enums_1.Severity.LOW,
+    2: enums_1.Severity.LOW,
+    1: enums_1.Severity.INFO,
+};
+function mapNmapSeverity(port, service) {
+    const criticalPorts = [21, 23, 445, 3389, 5900];
+    const highPorts = [22, 25, 53, 110, 143, 389, 636, 1433, 3306, 5432, 6379, 27017];
+    if (criticalPorts.includes(port))
+        return enums_1.Severity.HIGH;
+    if (highPorts.includes(port))
+        return enums_1.Severity.MEDIUM;
+    const riskyServices = ["telnet", "ftp", "vnc", "rdp", "smb"];
+    if (riskyServices.some((s) => service.toLowerCase().includes(s))) {
+        return enums_1.Severity.HIGH;
+    }
+    return enums_1.Severity.LOW;
+}
+//# sourceMappingURL=severity-map.js.map

package/bundled/node_modules/@aspm/shared/dist/severity-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity-map.js","sourceRoot":"","sources":["../src/severity-map.ts"],"names":[],"mappings":";;;AAkCA,0CAaC;AA/CD,mCAAmC;AAEtB,QAAA,kBAAkB,GAA6B;IAC1D,QAAQ,EAAE,gBAAQ,CAAC,QAAQ;IAC3B,IAAI,EAAE,gBAAQ,CAAC,IAAI;IACnB,MAAM,EAAE,gBAAQ,CAAC,MAAM;IACvB,GAAG,EAAE,gBAAQ,CAAC,GAAG;IACjB,OAAO,EAAE,gBAAQ,CAAC,IAAI;CACvB,CAAC;AAEW,QAAA,kBAAkB,GAA6B;IAC1D,OAAO,EAAE,gBAAQ,CAAC,QAAQ;IAC1B,QAAQ,EAAE,gBAAQ,CAAC,IAAI;IACvB,KAAK,EAAE,gBAAQ,CAAC,MAAM;IACtB,KAAK,EAAE,gBAAQ,CAAC,GAAG;IACnB,IAAI,EAAE,gBAAQ,CAAC,IAAI;CACpB,CAAC;AAEF,uCAAuC;AAC1B,QAAA,oBAAoB,GAA6B;IAC5D,KAAK,EAAE,gBAAQ,CAAC,IAAI;IACpB,OAAO,EAAE,gBAAQ,CAAC,MAAM;IACxB,IAAI,EAAE,gBAAQ,CAAC,GAAG;IAClB,SAAS,EAAE,gBAAQ,CAAC,IAAI;CACzB,CAAC;AAEW,QAAA,qBAAqB,GAA6B;IAC7D,CAAC,EAAE,gBAAQ,CAAC,IAAI;IAChB,CAAC,EAAE,gBAAQ,CAAC,MAAM;IAClB,CAAC,EAAE,gBAAQ,CAAC,GAAG;IACf,CAAC,EAAE,gBAAQ,CAAC,GAAG;IACf,CAAC,EAAE,gBAAQ,CAAC,IAAI;CACjB,CAAC;AAEF,SAAgB,eAAe,CAAC,IAAY,EAAE,OAAe;IAC3D,MAAM,aAAa,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAElF,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,gBAAQ,CAAC,IAAI,CAAC;IACvD,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,gBAAQ,CAAC,MAAM,CAAC;IAErD,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,gBAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,OAAO,gBAAQ,CAAC,GAAG,CAAC;AACtB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/sort-findings.d.ts

@@ -0,0 +1,16 @@
+/** Matches SecurityFilterPanel status order (active → closed). */
+export declare const FINDING_STATUS_SORT_ORDER: readonly ["OPEN", "CONFIRMED", "REOPENED", "PENDING_REMED_REVIEW", "FIXED", "ACCEPTED", "FALSE_POSITIVE"];
+export type SortableFinding = {
+    severity: string;
+    status: string;
+    createdAt: string | Date;
+    lastSeenAt?: string | Date | null;
+    fixedAt?: string | Date | null;
+};
+/**
+ * Workbench list order: status (Aberto→…→Corrigido→…, matching the filter panel),
+ * then severity (Crítico→…→Info), then most recently seen within the same bucket.
+ * Closed findings (incl. Corrigido) always appear after all active ones.
+ */
+export declare function sortFindingsForDisplay<T extends SortableFinding>(findings: T[]): T[];
+//# sourceMappingURL=sort-findings.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/sort-findings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sort-findings.d.ts","sourceRoot":"","sources":["../src/sort-findings.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,eAAO,MAAM,yBAAyB,2GAQ5B,CAAC;AAcX,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;CAChC,CAAC;AAmCF;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAYpF"}

package/bundled/node_modules/@aspm/shared/dist/sort-findings.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FINDING_STATUS_SORT_ORDER = void 0;
+exports.sortFindingsForDisplay = sortFindingsForDisplay;
+/** Matches SecurityFilterPanel status order (active → closed). */
+exports.FINDING_STATUS_SORT_ORDER = [
+    "OPEN",
+    "CONFIRMED",
+    "REOPENED",
+    "PENDING_REMED_REVIEW",
+    "FIXED",
+    "ACCEPTED",
+    "FALSE_POSITIVE",
+];
+const SEVERITY_ORDER = new Map([
+    ["CRITICAL", 0],
+    ["HIGH", 1],
+    ["MEDIUM", 2],
+    ["LOW", 3],
+    ["INFO", 4],
+]);
+const STATUS_ORDER = new Map(exports.FINDING_STATUS_SORT_ORDER.map((status, index) => [status, index]));
+function toTimestamp(value) {
+    if (value == null)
+        return 0;
+    const time = value instanceof Date ? value.getTime() : new Date(value).getTime();
+    return Number.isFinite(time) ? time : 0;
+}
+function lifecycleTime(finding) {
+    return Math.max(toTimestamp(finding.createdAt), toTimestamp(finding.lastSeenAt), toTimestamp(finding.fixedAt));
+}
+function normalizeStatus(status) {
+    return status.trim().toUpperCase();
+}
+function statusSortRank(finding) {
+    const normalized = normalizeStatus(finding.status);
+    const fixedRank = STATUS_ORDER.get("FIXED") ?? exports.FINDING_STATUS_SORT_ORDER.length;
+    const activeLastRank = STATUS_ORDER.get("PENDING_REMED_REVIEW") ?? 3;
+    if (finding.fixedAt) {
+        const rank = STATUS_ORDER.get(normalized);
+        if (rank === undefined || rank <= activeLastRank)
+            return fixedRank;
+    }
+    const rank = STATUS_ORDER.get(normalized);
+    if (rank !== undefined)
+        return rank;
+    return 0;
+}
+/**
+ * Workbench list order: status (Aberto→…→Corrigido→…, matching the filter panel),
+ * then severity (Crítico→…→Info), then most recently seen within the same bucket.
+ * Closed findings (incl. Corrigido) always appear after all active ones.
+ */
+function sortFindingsForDisplay(findings) {
+    return [...findings].sort((a, b) => {
+        const statusA = statusSortRank(a);
+        const statusB = statusSortRank(b);
+        if (statusA !== statusB)
+            return statusA - statusB;
+        const severityA = SEVERITY_ORDER.get(a.severity) ?? Number.MAX_SAFE_INTEGER;
+        const severityB = SEVERITY_ORDER.get(b.severity) ?? Number.MAX_SAFE_INTEGER;
+        if (severityA !== severityB)
+            return severityA - severityB;
+        return lifecycleTime(b) - lifecycleTime(a);
+    });
+}
+//# sourceMappingURL=sort-findings.js.map

package/bundled/node_modules/@aspm/shared/dist/sort-findings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sort-findings.js","sourceRoot":"","sources":["../src/sort-findings.ts"],"names":[],"mappings":";;;AAqEA,wDAYC;AAjFD,kEAAkE;AACrD,QAAA,yBAAyB,GAAG;IACvC,MAAM;IACN,WAAW;IACX,UAAU;IACV,sBAAsB;IACtB,OAAO;IACP,UAAU;IACV,gBAAgB;CACR,CAAC;AAEX,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,MAAM,EAAE,CAAC,CAAC;IACX,CAAC,QAAQ,EAAE,CAAC,CAAC;IACb,CAAC,KAAK,EAAE,CAAC,CAAC;IACV,CAAC,MAAM,EAAE,CAAC,CAAC;CACZ,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,iCAAyB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAClE,CAAC;AAUF,SAAS,WAAW,CAAC,KAAuC;IAC1D,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IACjF,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,OAAwB;IAC7C,OAAO,IAAI,CAAC,GAAG,CACb,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAC9B,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAC/B,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,OAAwB;IAC9C,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,iCAAyB,CAAC,MAAM,CAAC;IAChF,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAErE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,cAAc;YAAE,OAAO,SAAS,CAAC;IACrE,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CAA4B,QAAa;IAC7E,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,OAAO,GAAG,OAAO,CAAC;QAElD,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC;QAC5E,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC;QAC5E,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,GAAG,SAAS,CAAC;QAE1D,OAAO,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/node_modules/@aspm/shared/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@aspm/shared",
+  "version": "0.0.1",
+  "private": true,
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./github/kubbisec-github-label": {
+      "types": "./dist/github/kubbisec-github-label.d.ts",
+      "default": "./dist/github/kubbisec-github-label.js"
+    },
+    "./cli-user-error": {
+      "types": "./dist/cli-user-error.d.ts",
+      "default": "./dist/cli-user-error.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist",
+    "test": "vitest",
+    "test:run": "vitest run"
+  },
+  "dependencies": {
+    "@pinojs/redact": "^0.4.0",
+    "class-validator": "^0.14.1",
+    "class-transformer": "^0.5.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "reflect-metadata": "^0.2.2",
+    "typescript": "^5.7.0",
+    "vitest": "^4.1.4"
+  }
+}

package/bundled/resolve-bundled-dist-root.js

@@ -11,6 +11,8 @@ const BUNDLED_ASSET_DIRS = [
     "copy",
     "config",
     "clarify",
+    "components",
+    "workflow",
 ];
 const BUNDLED_ROOT_FILES = ["resolve-bundled-dist-root.js"];
 const MARKER_EXTENSION = "kubbisec-brand.extension.js";
@@ -59,11 +61,13 @@ function fingerprintBundledDist(distDir) {
         hash.update(file);
         hash.update(fs.readFileSync(full));
     }
-    const kubbisecModules = path.join(distDir, "node_modules", "@kubbisec");
-    if (fs.existsSync(kubbisecModules)) {
-        for (const rel of listFilesRecursive(kubbisecModules)) {
-            hash.update(`@kubbisec/${rel}`);
-            hash.update(fs.readFileSync(path.join(kubbisecModules, rel)));
+    for (const scope of ["@kubbisec", "@aspm"]) {
+        const scopeModules = path.join(distDir, "node_modules", scope);
+        if (!fs.existsSync(scopeModules))
+            continue;
+        for (const rel of listFilesRecursive(scopeModules)) {
+            hash.update(`${scope}/${rel}`);
+            hash.update(fs.readFileSync(path.join(scopeModules, rel)));
         }
     }
     for (const name of fs.readdirSync(distDir)) {

package/bundled/resolve-bundled-dist-root.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-bundled-dist-root.js","sourceRoot":"","sources":["../src/resolve-bundled-dist-root.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,kBAAkB,GAAG;IACzB,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;CACD,CAAC;AAEX,MAAM,kBAAkB,GAAG,CAAC,8BAA8B,CAAU,CAAC;AACrE,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAIvD,2EAA2E;AAC3E,MAAM,UAAU,eAAe;IAC7B,IAAK,OAA0B,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,6BAA6B;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,wBAAwB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IACxE,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IACnD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACrF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,UAAkB;IAC7D,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,YAAoB;IAChE,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,SAAS,CAAC;IACZ,MAAM,WAAW,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAExD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;gBAC9D,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC1C,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,WAAW,IAAI,EAAE,MAAM,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,6BAA6B;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5E,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,6BAA6B,EAAE,CAAC;IACrD,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,wBAAwB,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,OAAO,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}
+{"version":3,"file":"resolve-bundled-dist-root.js","sourceRoot":"","sources":["../src/resolve-bundled-dist-root.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,kBAAkB,GAAG;IACzB,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,UAAU;CACF,CAAC;AAEX,MAAM,kBAAkB,GAAG,CAAC,8BAA8B,CAAU,CAAC;AACrE,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAIvD,2EAA2E;AAC3E,MAAM,UAAU,eAAe;IAC7B,IAAK,OAA0B,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,6BAA6B;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,wBAAwB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,OAAO,CAAU,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE;IACnD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACrF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,UAAkB;IAC7D,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,YAAoB;IAChE,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,SAAS,CAAC;IACZ,MAAM,WAAW,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAExD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;gBAC9D,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC1C,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,WAAW,IAAI,EAAE,MAAM,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,6BAA6B;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5E,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,6BAA6B,EAAE,CAAC;IACrD,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,wBAAwB,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,OAAO,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/bundled/theme/footer-render-hook.d.ts

@@ -0,0 +1,3 @@
+export declare function setKubbisecFooterRequestRender(handler: (() => void) | undefined): void;
+export declare function requestKubbisecFooterRender(): void;
+//# sourceMappingURL=footer-render-hook.d.ts.map

package/bundled/theme/footer-render-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"footer-render-hook.d.ts","sourceRoot":"","sources":["../../src/theme/footer-render-hook.ts"],"names":[],"mappings":"AAEA,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,GAAG,IAAI,CAEtF;AAED,wBAAgB,2BAA2B,IAAI,IAAI,CAElD"}

package/bundled/theme/footer-render-hook.js

@@ -0,0 +1,8 @@
+let requestRender;
+export function setKubbisecFooterRequestRender(handler) {
+    requestRender = handler;
+}
+export function requestKubbisecFooterRender() {
+    requestRender?.();
+}
+//# sourceMappingURL=footer-render-hook.js.map

package/bundled/theme/footer-render-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"footer-render-hook.js","sourceRoot":"","sources":["../../src/theme/footer-render-hook.ts"],"names":[],"mappings":"AAAA,IAAI,aAAuC,CAAC;AAE5C,MAAM,UAAU,8BAA8B,CAAC,OAAiC;IAC/E,aAAa,GAAG,OAAO,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,2BAA2B;IAC1C,aAAa,EAAE,EAAE,CAAC;AACnB,CAAC"}

package/bundled/theme/kubbisec-brand-fg.d.ts

@@ -0,0 +1,4 @@
+/** Brand cyan #28DCF9 — kubbisec.json `accent`, footer branch, hex `mark.ansi`. */
+export declare const KUBBISEC_BRAND_CYAN_ANSI = "\u001B[38;2;40;220;249m";
+export declare function kubbisecBrandFg(text: string): string;
+//# sourceMappingURL=kubbisec-brand-fg.d.ts.map

package/bundled/theme/kubbisec-brand-fg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-brand-fg.d.ts","sourceRoot":"","sources":["../../src/theme/kubbisec-brand-fg.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,4BAA0B,CAAC;AAGhE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/bundled/theme/kubbisec-brand-fg.js

@@ -0,0 +1,7 @@
+/** Brand cyan #28DCF9 — kubbisec.json `accent`, footer branch, hex `mark.ansi`. */
+export const KUBBISEC_BRAND_CYAN_ANSI = "\x1b[38;2;40;220;249m";
+const ANSI_RESET = "\x1b[0m";
+export function kubbisecBrandFg(text) {
+    return `${KUBBISEC_BRAND_CYAN_ANSI}${text}${ANSI_RESET}`;
+}
+//# sourceMappingURL=kubbisec-brand-fg.js.map

package/bundled/theme/kubbisec-brand-fg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-brand-fg.js","sourceRoot":"","sources":["../../src/theme/kubbisec-brand-fg.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,MAAM,CAAC,MAAM,wBAAwB,GAAG,uBAAuB,CAAC;AAChE,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,GAAG,wBAAwB,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC;AAC3D,CAAC"}

package/bundled/theme/kubbisec-menu-themes.d.ts

@@ -0,0 +1,16 @@
+import type { EditorTheme } from "@earendil-works/pi-tui";
+declare function dimText(text: string): string;
+/** `/settings` list — current value column and cursor use brand cyan (#28DCF9). */
+export declare function buildKubbisecSettingsListTheme(): {
+    label: (text: string, selected: boolean) => string;
+    value: (text: string, _selected: boolean) => string;
+    description: typeof dimText;
+    cursor: string;
+    hint: typeof dimText;
+};
+/** Map Pi `accent` role to exact brand RGB (footer branch, header). */
+export declare function patchGlobalThemeAccent(): void;
+/** Slash-command autocomplete inside the editor — selected row uses brand cyan (#28DCF9). */
+export declare function withKubbisecSelectListTheme(theme: EditorTheme): EditorTheme;
+export {};
+//# sourceMappingURL=kubbisec-menu-themes.d.ts.map

package/bundled/theme/kubbisec-menu-themes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-menu-themes.d.ts","sourceRoot":"","sources":["../../src/theme/kubbisec-menu-themes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAgB1D,iBAAS,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGrC;AAED,mFAAmF;AACnF,wBAAgB,8BAA8B;kBAE9B,MAAM,YAAY,OAAO;kBACzB,MAAM,aAAa,OAAO;;;;EAKzC;AAED,uEAAuE;AACvE,wBAAgB,sBAAsB,IAAI,IAAI,CAU7C;AAED,6FAA6F;AAC7F,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,WAAW,GAAG,WAAW,CAW3E"}

package/bundled/theme/kubbisec-menu-themes.js

@@ -0,0 +1,47 @@
+import { kubbisecBrandFg } from "./kubbisec-brand-fg.js";
+const brand = (text) => kubbisecBrandFg(text);
+const PI_THEME_KEY = Symbol.for("@earendil-works/pi-coding-agent:theme");
+function getPiThemeInstance() {
+    return globalThis[PI_THEME_KEY];
+}
+function dimText(text) {
+    const instance = getPiThemeInstance();
+    return instance ? instance.fg("dim", text) : text;
+}
+/** `/settings` list — current value column and cursor use brand cyan (#28DCF9). */
+export function buildKubbisecSettingsListTheme() {
+    return {
+        label: (text, selected) => (selected ? brand(text) : text),
+        value: (text, _selected) => brand(text),
+        description: dimText,
+        cursor: brand("→ "),
+        hint: dimText,
+    };
+}
+/** Map Pi `accent` role to exact brand RGB (footer branch, header). */
+export function patchGlobalThemeAccent() {
+    const instance = getPiThemeInstance();
+    if (!instance || instance.__kubbisecMenuPatched)
+        return;
+    const originalFg = instance.fg.bind(instance);
+    instance.fg = (role, text) => {
+        if (role === "accent")
+            return brand(text);
+        return originalFg(role, text);
+    };
+    instance.__kubbisecMenuPatched = true;
+}
+/** Slash-command autocomplete inside the editor — selected row uses brand cyan (#28DCF9). */
+export function withKubbisecSelectListTheme(theme) {
+    return {
+        ...theme,
+        selectList: {
+            selectedPrefix: brand,
+            selectedText: brand,
+            description: theme.selectList.description,
+            scrollInfo: theme.selectList.scrollInfo,
+            noMatch: theme.selectList.noMatch,
+        },
+    };
+}
+//# sourceMappingURL=kubbisec-menu-themes.js.map