@kubbisec/ai-linux-x64 0.1.21 → 0.1.23

package/bundled/node_modules/@aspm/shared/dist/dto/index.js

@@ -1,16 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UpdateVulnerabilityDto = exports.UpdateSecurityGateDto = exports.UpdatePerformanceGateDto = exports.UpdateCoverageGateDto = exports.RecordGateResultDto = exports.UploadSessionStatus = exports.PlanType = exports.IngestionQueueName = exports.ErrorCategory = exports.EnterpriseVulnerabilityDataDto = exports.CreateVulnerabilityDto = exports.CreateScanTargetDto = exports.ExecutionContextDto = exports.CreateReportDto = exports.CreateProjectDto = exports.ASSET_TYPES = exports.ASSET_POLICY_LEVELS = exports.ASSET_EXPOSURES = exports.ASSET_ENVIRONMENTS = exports.ASSET_CRITICALITIES = exports.ASSET_CI_PROVIDERS = exports.CoverageFileDetailDto = exports.CreateCoverageReportDto = exports.BundleEntryDto = exports.CreateBundleReportDto = exports.BulkImportGithubProjectsDto = exports.BulkImportGithubProjectRowDto = exports.BULK_IMPORT_GITHUB_PROJECTS_MAX = void 0;
+exports.UpdateVulnerabilityDto = exports.UpdateSecurityGateDto = exports.UpdateProjectDto = exports.UpdatePerformanceGateDto = exports.UpdateCoverageGateDto = exports.RecordGateResultDto = exports.UploadSessionStatus = exports.PlanType = exports.IngestionQueueName = exports.ErrorCategory = exports.EnterpriseVulnerabilityDataDto = exports.CreateVulnerabilityDto = exports.CreateScanTargetDto = exports.ExecutionContextDto = exports.CreateReportDto = exports.CreateProjectDto = exports.ASSET_TYPES = exports.ASSET_POLICY_LEVELS = exports.ASSET_EXPOSURES = exports.ASSET_ENVIRONMENTS = exports.ASSET_CRITICALITIES = exports.ASSET_CI_PROVIDERS = exports.CreateCoverageReportDto = exports.CoverageFileDetailDto = exports.CreateBundleReportDto = exports.BundleEntryDto = exports.BulkImportGithubProjectsDto = exports.BulkImportGithubProjectRowDto = exports.BULK_IMPORT_GITHUB_PROJECTS_MAX = void 0;
 var bulk_import_github_projects_dto_1 = require("./bulk-import-github-projects.dto");
 Object.defineProperty(exports, "BULK_IMPORT_GITHUB_PROJECTS_MAX", { enumerable: true, get: function () { return bulk_import_github_projects_dto_1.BULK_IMPORT_GITHUB_PROJECTS_MAX; } });
 Object.defineProperty(exports, "BulkImportGithubProjectRowDto", { enumerable: true, get: function () { return bulk_import_github_projects_dto_1.BulkImportGithubProjectRowDto; } });
 Object.defineProperty(exports, "BulkImportGithubProjectsDto", { enumerable: true, get: function () { return bulk_import_github_projects_dto_1.BulkImportGithubProjectsDto; } });
 var create_bundle_report_dto_1 = require("./create-bundle-report.dto");
-Object.defineProperty(exports, "CreateBundleReportDto", { enumerable: true, get: function () { return create_bundle_report_dto_1.CreateBundleReportDto; } });
 Object.defineProperty(exports, "BundleEntryDto", { enumerable: true, get: function () { return create_bundle_report_dto_1.BundleEntryDto; } });
+Object.defineProperty(exports, "CreateBundleReportDto", { enumerable: true, get: function () { return create_bundle_report_dto_1.CreateBundleReportDto; } });
 var create_coverage_report_dto_1 = require("./create-coverage-report.dto");
-Object.defineProperty(exports, "CreateCoverageReportDto", { enumerable: true, get: function () { return create_coverage_report_dto_1.CreateCoverageReportDto; } });
 Object.defineProperty(exports, "CoverageFileDetailDto", { enumerable: true, get: function () { return create_coverage_report_dto_1.CoverageFileDetailDto; } });
+Object.defineProperty(exports, "CreateCoverageReportDto", { enumerable: true, get: function () { return create_coverage_report_dto_1.CreateCoverageReportDto; } });
 var create_project_dto_1 = require("./create-project.dto");
 Object.defineProperty(exports, "ASSET_CI_PROVIDERS", { enumerable: true, get: function () { return create_project_dto_1.ASSET_CI_PROVIDERS; } });
 Object.defineProperty(exports, "ASSET_CRITICALITIES", { enumerable: true, get: function () { return create_project_dto_1.ASSET_CRITICALITIES; } });
@@ -38,6 +38,8 @@ var update_coverage_gate_dto_1 = require("./update-coverage-gate.dto");
 Object.defineProperty(exports, "UpdateCoverageGateDto", { enumerable: true, get: function () { return update_coverage_gate_dto_1.UpdateCoverageGateDto; } });
 var update_performance_gate_dto_1 = require("./update-performance-gate.dto");
 Object.defineProperty(exports, "UpdatePerformanceGateDto", { enumerable: true, get: function () { return update_performance_gate_dto_1.UpdatePerformanceGateDto; } });
+var update_project_dto_1 = require("./update-project.dto");
+Object.defineProperty(exports, "UpdateProjectDto", { enumerable: true, get: function () { return update_project_dto_1.UpdateProjectDto; } });
 var update_security_gate_dto_1 = require("./update-security-gate.dto");
 Object.defineProperty(exports, "UpdateSecurityGateDto", { enumerable: true, get: function () { return update_security_gate_dto_1.UpdateSecurityGateDto; } });
 var update_vulnerability_dto_1 = require("./update-vulnerability.dto");

package/bundled/node_modules/@aspm/shared/dist/dto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;AAAA,qFAI2C;AAHzC,kJAAA,+BAA+B,OAAA;AAC/B,gJAAA,6BAA6B,OAAA;AAC7B,8IAAA,2BAA2B,OAAA;AAE7B,uEAAmF;AAA1E,iIAAA,qBAAqB,OAAA;AAAE,0HAAA,cAAc,OAAA;AAC9C,2EAA8F;AAArF,qIAAA,uBAAuB,OAAA;AAAE,mIAAA,qBAAqB,OAAA;AACvD,2DAc8B;AAb5B,wHAAA,kBAAkB,OAAA;AAClB,yHAAA,mBAAmB,OAAA;AACnB,wHAAA,kBAAkB,OAAA;AAClB,qHAAA,eAAe,OAAA;AACf,yHAAA,mBAAmB,OAAA;AACnB,iHAAA,WAAW,OAAA;AAOX,sHAAA,gBAAgB,OAAA;AAElB,yDAA2E;AAAlE,oHAAA,eAAe,OAAA;AAAE,wHAAA,mBAAmB,OAAA;AAC7C,mEAA+D;AAAtD,6HAAA,mBAAmB,OAAA;AAC5B,uEAGoC;AAFlC,kIAAA,sBAAsB,OAAA;AACtB,0IAAA,8BAA8B,OAAA;AAEhC,6CAgBuB;AAdrB,4GAAA,aAAa,OAAA;AAIb,iHAAA,kBAAkB,OAAA;AAIlB,uGAAA,QAAQ,OAAA;AAKR,kHAAA,mBAAmB,OAAA;AAErB,mEAA+D;AAAtD,6HAAA,mBAAmB,OAAA;AAC5B,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,6EAAyE;AAAhE,uIAAA,wBAAwB,OAAA;AACjC,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,uEAAoE;AAA3D,kIAAA,sBAAsB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;AAAA,qFAI2C;AAHzC,kJAAA,+BAA+B,OAAA;AAC/B,gJAAA,6BAA6B,OAAA;AAC7B,8IAAA,2BAA2B,OAAA;AAE7B,uEAAmF;AAA1E,0HAAA,cAAc,OAAA;AAAE,iIAAA,qBAAqB,OAAA;AAC9C,2EAA8F;AAArF,mIAAA,qBAAqB,OAAA;AAAE,qIAAA,uBAAuB,OAAA;AACvD,2DAc8B;AAb5B,wHAAA,kBAAkB,OAAA;AAClB,yHAAA,mBAAmB,OAAA;AACnB,wHAAA,kBAAkB,OAAA;AAClB,qHAAA,eAAe,OAAA;AACf,yHAAA,mBAAmB,OAAA;AACnB,iHAAA,WAAW,OAAA;AAOX,sHAAA,gBAAgB,OAAA;AAElB,yDAA2E;AAAlE,oHAAA,eAAe,OAAA;AAAE,wHAAA,mBAAmB,OAAA;AAC7C,mEAA+D;AAAtD,6HAAA,mBAAmB,OAAA;AAC5B,uEAGoC;AAFlC,kIAAA,sBAAsB,OAAA;AACtB,0IAAA,8BAA8B,OAAA;AAehC,6CAKuB;AAJrB,4GAAA,aAAa,OAAA;AACb,iHAAA,kBAAkB,OAAA;AAClB,uGAAA,QAAQ,OAAA;AACR,kHAAA,mBAAmB,OAAA;AAErB,mEAA+D;AAAtD,6HAAA,mBAAmB,OAAA;AAC5B,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,6EAAyE;AAAhE,uIAAA,wBAAwB,OAAA;AACjC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,uEAAoE;AAA3D,kIAAA,sBAAsB,OAAA"}

package/bundled/node_modules/@aspm/shared/dist/dto/update-project.dto.d.ts

@@ -0,0 +1,9 @@
+import { type AssetCriticality, type AssetExposure } from "./create-project.dto";
+export declare class UpdateProjectDto {
+    name?: string;
+    description?: string;
+    criticality?: AssetCriticality;
+    exposure?: AssetExposure;
+    defaultBranch?: string;
+}
+//# sourceMappingURL=update-project.dto.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/dto/update-project.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-project.dto.d.ts","sourceRoot":"","sources":["../../src/dto/update-project.dto.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,qBAAa,gBAAgB;IAK3B,IAAI,CAAC,EAAE,MAAM,CAAC;IAKd,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAI/B,QAAQ,CAAC,EAAE,aAAa,CAAC;IAKzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/bundled/node_modules/@aspm/shared/dist/dto/update-project.dto.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateProjectDto = void 0;
+const class_validator_1 = require("class-validator");
+const create_project_dto_1 = require("./create-project.dto");
+class UpdateProjectDto {
+    name;
+    description;
+    criticality;
+    exposure;
+    defaultBranch;
+}
+exports.UpdateProjectDto = UpdateProjectDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(255),
+    __metadata("design:type", String)
+], UpdateProjectDto.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(1000),
+    __metadata("design:type", String)
+], UpdateProjectDto.prototype, "description", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(create_project_dto_1.ASSET_CRITICALITIES),
+    __metadata("design:type", String)
+], UpdateProjectDto.prototype, "criticality", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(create_project_dto_1.ASSET_EXPOSURES),
+    __metadata("design:type", String)
+], UpdateProjectDto.prototype, "exposure", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(100),
+    __metadata("design:type", String)
+], UpdateProjectDto.prototype, "defaultBranch", void 0);
+//# sourceMappingURL=update-project.dto.js.map

package/bundled/node_modules/@aspm/shared/dist/dto/update-project.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-project.dto.js","sourceRoot":"","sources":["../../src/dto/update-project.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAoF;AACpF,6DAK8B;AAE9B,MAAa,gBAAgB;IAK3B,IAAI,CAAU;IAKd,WAAW,CAAU;IAIrB,WAAW,CAAoB;IAI/B,QAAQ,CAAiB;IAKzB,aAAa,CAAU;CACxB;AAxBD,4CAwBC;AAnBC;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;8CACD;AAKd;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;;qDACK;AAIrB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,sBAAI,EAAC,wCAAmB,CAAC;;qDACK;AAI/B;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,sBAAI,EAAC,oCAAe,CAAC;;kDACG;AAKzB;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;;uDACQ"}

package/bundled/node_modules/@aspm/shared/dist/enums.d.ts

@@ -6,7 +6,9 @@ export declare enum ScanSource {
     SKIPFISH = "SKIPFISH",
     OSV = "OSV",
     GITLEAKS = "GITLEAKS",
-    SYFT = "SYFT"
+    SYFT = "SYFT",
+    VULNDB = "VULNDB",
+    KUBBISEC_AI = "KUBBISEC_AI"
 }
 export declare enum ScanType {
     CONTAINER = "CONTAINER",

package/bundled/node_modules/@aspm/shared/dist/enums.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,QAAQ,aAAa;IACrB,IAAI,SAAS;CACd;AAED,oBAAY,QAAQ;IAClB,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,oBAAY,QAAQ;IAClB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,oBAAoB,yBAAyB;IAC7C,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,4IAKhC,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,mEAG/B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,uBAAuB,CAE3F;AAGD,oBAAY,WAAW;IAErB,aAAa,kBAAkB;IAE/B,MAAM,WAAW;IAEjB,OAAO,YAAY;IAEnB,gBAAgB,qBAAqB;IAErC,UAAU,eAAe;IAEzB,YAAY,iBAAiB;IAE7B,UAAU,eAAe;IAEzB,GAAG,QAAQ;IAEX,UAAU,eAAe;IAEzB,gBAAgB,qBAAqB;IAErC,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IACvB,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAGD,oBAAY,SAAS;IACnB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAGD,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AAEX,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAS7D,CAAC"}
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,QAAQ;IAClB,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,oBAAY,QAAQ;IAClB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,oBAAoB,yBAAyB;IAC7C,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,4IAKhC,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,mEAG/B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,uBAAuB,CAE3F;AAGD,oBAAY,WAAW;IAErB,aAAa,kBAAkB;IAE/B,MAAM,WAAW;IAEjB,OAAO,YAAY;IAEnB,gBAAgB,qBAAqB;IAErC,UAAU,eAAe;IAEzB,YAAY,iBAAiB;IAE7B,UAAU,eAAe;IAEzB,GAAG,QAAQ;IAEX,UAAU,eAAe;IAEzB,gBAAgB,qBAAqB;IAErC,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IACvB,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAGD,oBAAY,SAAS;IACnB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAGD,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AAEX,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAW7D,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/enums.js

@@ -12,6 +12,8 @@ var ScanSource;
     ScanSource["OSV"] = "OSV";
     ScanSource["GITLEAKS"] = "GITLEAKS";
     ScanSource["SYFT"] = "SYFT";
+    ScanSource["VULNDB"] = "VULNDB";
+    ScanSource["KUBBISEC_AI"] = "KUBBISEC_AI";
 })(ScanSource || (exports.ScanSource = ScanSource = {}));
 var ScanType;
 (function (ScanType) {
@@ -128,5 +130,7 @@ exports.SOURCE_SCAN_TYPE_MAP = {
     [ScanSource.OSV]: ScanType.DEPENDENCIES,
     [ScanSource.GITLEAKS]: ScanType.SECRETS,
     [ScanSource.SYFT]: ScanType.SBOM,
+    [ScanSource.VULNDB]: ScanType.DEPENDENCIES,
+    [ScanSource.KUBBISEC_AI]: ScanType.SAST,
 };
 //# sourceMappingURL=enums.js.map

package/bundled/node_modules/@aspm/shared/dist/enums.js.map

@@ -1 +1 @@
-{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AAuDA,8DAEC;AAzDD,IAAY,UASX;AATD,WAAY,UAAU;IACpB,6BAAe,CAAA;IACf,6BAAe,CAAA;IACf,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,mCAAqB,CAAA;IACrB,yBAAW,CAAA;IACX,mCAAqB,CAAA;IACrB,2BAAa,CAAA;AACf,CAAC,EATW,UAAU,0BAAV,UAAU,QASrB;AAED,IAAY,QAQX;AARD,WAAY,QAAQ;IAClB,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,+BAAmB,CAAA;IACnB,yBAAa,CAAA;AACf,CAAC,EARW,QAAQ,wBAAR,QAAQ,QAQnB;AAED,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EANW,QAAQ,wBAAR,QAAQ,QAMnB;AAED,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,wDAAiC,CAAA;IACjC,oHAAoH;IACpH,oEAA6C,CAAA;IAC7C,sCAAe,CAAA;IACf,4CAAqB,CAAA;AACvB,CAAC,EATW,mBAAmB,mCAAnB,mBAAmB,QAS9B;AAEY,QAAA,6BAA6B,GAAG;IAC3C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,SAAS;IAC7B,mBAAmB,CAAC,QAAQ;IAC5B,mBAAmB,CAAC,oBAAoB;CAChC,CAAC;AAEX,gFAAgF;AACnE,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,QAAQ;CACpB,CAAC;AAIX,SAAgB,yBAAyB,CAAC,MAAc;IACtD,OAAQ,oCAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AACjE,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB,iDAAiD;IACjD,8CAA+B,CAAA;IAC/B,0DAA0D;IAC1D,gCAAiB,CAAA;IACjB,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,+CAA+C;IAC/C,oDAAqC,CAAA;IACrC,gEAAgE;IAChE,wCAAyB,CAAA;IACzB,gEAAgE;IAChE,4CAA6B,CAAA;IAC7B,yCAAyC;IACzC,wCAAyB,CAAA;IACzB,iBAAiB;IACjB,0BAAW,CAAA;IACX,cAAc;IACd,wCAAyB,CAAA;IACzB,gDAAgD;IAChD,oDAAqC,CAAA;IACrC,gDAAgD;IAChD,8BAAe,CAAA;AACjB,CAAC,EAvBW,WAAW,2BAAX,WAAW,QAuBtB;AAED,0DAA0D;AAC1D,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,oDAAmC,CAAA;IACnC,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;IACrB,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AAED,+CAA+C;AAC/C,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,kCAAqB,CAAA;IACrB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,wBAAW,CAAA;IACX,0BAAa,CAAA;AACf,CAAC,EANW,SAAS,yBAAT,SAAS,QAMpB;AAED,4CAA4C;AAC/B,QAAA,qBAAqB,GAAG;IACnC,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,mCAAe,CAAA;IACf,qCAAiB,CAAA;AACnB,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAEY,QAAA,oBAAoB,GAAiC;IAChE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,SAAS;IACtC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI;IACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI;IACnC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO;IACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG;IACnC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,YAAY;IACvC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO;IACvC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI;CACjC,CAAC"}
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AAyDA,8DAEC;AA3DD,IAAY,UAWX;AAXD,WAAY,UAAU;IACpB,6BAAe,CAAA;IACf,6BAAe,CAAA;IACf,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,mCAAqB,CAAA;IACrB,yBAAW,CAAA;IACX,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,+BAAiB,CAAA;IACjB,yCAA2B,CAAA;AAC7B,CAAC,EAXW,UAAU,0BAAV,UAAU,QAWrB;AAED,IAAY,QAQX;AARD,WAAY,QAAQ;IAClB,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,+BAAmB,CAAA;IACnB,yBAAa,CAAA;AACf,CAAC,EARW,QAAQ,wBAAR,QAAQ,QAQnB;AAED,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EANW,QAAQ,wBAAR,QAAQ,QAMnB;AAED,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,wDAAiC,CAAA;IACjC,oHAAoH;IACpH,oEAA6C,CAAA;IAC7C,sCAAe,CAAA;IACf,4CAAqB,CAAA;AACvB,CAAC,EATW,mBAAmB,mCAAnB,mBAAmB,QAS9B;AAEY,QAAA,6BAA6B,GAAG;IAC3C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,SAAS;IAC7B,mBAAmB,CAAC,QAAQ;IAC5B,mBAAmB,CAAC,oBAAoB;CAChC,CAAC;AAEX,gFAAgF;AACnE,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,QAAQ;CACpB,CAAC;AAIX,SAAgB,yBAAyB,CAAC,MAAc;IACtD,OAAQ,oCAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AACjE,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB,iDAAiD;IACjD,8CAA+B,CAAA;IAC/B,0DAA0D;IAC1D,gCAAiB,CAAA;IACjB,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,+CAA+C;IAC/C,oDAAqC,CAAA;IACrC,gEAAgE;IAChE,wCAAyB,CAAA;IACzB,gEAAgE;IAChE,4CAA6B,CAAA;IAC7B,yCAAyC;IACzC,wCAAyB,CAAA;IACzB,iBAAiB;IACjB,0BAAW,CAAA;IACX,cAAc;IACd,wCAAyB,CAAA;IACzB,gDAAgD;IAChD,oDAAqC,CAAA;IACrC,gDAAgD;IAChD,8BAAe,CAAA;AACjB,CAAC,EAvBW,WAAW,2BAAX,WAAW,QAuBtB;AAED,0DAA0D;AAC1D,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,oDAAmC,CAAA;IACnC,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;IACrB,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AAED,+CAA+C;AAC/C,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,kCAAqB,CAAA;IACrB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,wBAAW,CAAA;IACX,0BAAa,CAAA;AACf,CAAC,EANW,SAAS,yBAAT,SAAS,QAMpB;AAED,4CAA4C;AAC/B,QAAA,qBAAqB,GAAG;IACnC,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,mCAAe,CAAA;IACf,qCAAiB,CAAA;AACnB,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAEY,QAAA,oBAAoB,GAAiC;IAChE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,SAAS;IACtC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI;IACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI;IACnC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO;IACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG;IACnC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,YAAY;IACvC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO;IACvC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI;IAChC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,YAAY;IAC1C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,IAAI;CACxC,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/index.d.ts

@@ -1,16 +1,22 @@
-export * from "./security";
 export * from "./ai";
+export * from "./api-key";
 export * from "./assistant";
+export * from "./billing";
+export * from "./ci";
 export * from "./cli-user-error";
 export * from "./dto";
 export * from "./dto/metrics.dto";
 export * from "./enums";
 export * from "./github/kubbisec-github-label";
+export * from "./mcp/constants";
+export * from "./mcp/oauth-metadata";
+export * from "./project-scanner-summary";
 export * from "./rbac";
 export * from "./redaction";
+export * from "./security";
 export * from "./severity-map";
+export * from "./shared-project";
 export * from "./sonar-safe-string";
 export * from "./sort-findings";
-export * from "./project-scanner-summary";
 export * from "./trusted-path";
 //# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,MAAM,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,OAAO,CAAC;AACtB,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,gCAAgC,CAAC;AAC/C,cAAc,QAAQ,CAAC;AACvB,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,MAAM,CAAC;AACrB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,MAAM,CAAC;AACrB,cAAc,kBAAkB,CAAC;AACjC,cAAc,OAAO,CAAC;AACtB,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,QAAQ,CAAC;AACvB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/index.js

@@ -14,19 +14,25 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./security"), exports);
 __exportStar(require("./ai"), exports);
+__exportStar(require("./api-key"), exports);
 __exportStar(require("./assistant"), exports);
+__exportStar(require("./billing"), exports);
+__exportStar(require("./ci"), exports);
 __exportStar(require("./cli-user-error"), exports);
 __exportStar(require("./dto"), exports);
 __exportStar(require("./dto/metrics.dto"), exports);
 __exportStar(require("./enums"), exports);
 __exportStar(require("./github/kubbisec-github-label"), exports);
+__exportStar(require("./mcp/constants"), exports);
+__exportStar(require("./mcp/oauth-metadata"), exports);
+__exportStar(require("./project-scanner-summary"), exports);
 __exportStar(require("./rbac"), exports);
 __exportStar(require("./redaction"), exports);
+__exportStar(require("./security"), exports);
 __exportStar(require("./severity-map"), exports);
+__exportStar(require("./shared-project"), exports);
 __exportStar(require("./sonar-safe-string"), exports);
 __exportStar(require("./sort-findings"), exports);
-__exportStar(require("./project-scanner-summary"), exports);
 __exportStar(require("./trusted-path"), exports);
 //# sourceMappingURL=index.js.map

package/bundled/node_modules/@aspm/shared/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,uCAAqB;AACrB,8CAA4B;AAC5B,mDAAiC;AACjC,wCAAsB;AACtB,oDAAkC;AAClC,0CAAwB;AACxB,iEAA+C;AAC/C,yCAAuB;AACvB,8CAA4B;AAC5B,iDAA+B;AAC/B,sDAAoC;AACpC,kDAAgC;AAChC,4DAA0C;AAC1C,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uCAAqB;AACrB,4CAA0B;AAC1B,8CAA4B;AAC5B,4CAA0B;AAC1B,uCAAqB;AACrB,mDAAiC;AACjC,wCAAsB;AACtB,oDAAkC;AAClC,0CAAwB;AACxB,iEAA+C;AAC/C,kDAAgC;AAChC,uDAAqC;AACrC,4DAA0C;AAC1C,yCAAuB;AACvB,8CAA4B;AAC5B,6CAA2B;AAC3B,iDAA+B;AAC/B,mDAAiC;AACjC,sDAAoC;AACpC,kDAAgC;AAChC,iDAA+B"}

package/bundled/node_modules/@aspm/shared/dist/mcp/constants.d.ts

@@ -0,0 +1,22 @@
+export declare const KUBBISEC_HOSTED_MCP_URL = "https://mcp.kubbisec.com/mcp";
+export declare const KUBBISEC_MCP_API_ORIGIN = "https://api.kubbisec.com";
+export declare const KUBBISEC_MCP_OAUTH_AUTHORIZE_URL = "https://app.kubbisec.com/oauth/device";
+export declare const KUBBISEC_MCP_OAUTH_TOKEN_URL = "https://api.kubbisec.com/v1/oauth/token";
+export declare const KUBBISEC_MCP_OAUTH_DEVICE_TOKEN_URL = "https://api.kubbisec.com/v1/oauth/device/token";
+export declare const KUBBISEC_MCP_OAUTH_DEVICE_URL = "https://api.kubbisec.com/v1/oauth/device";
+export declare const KUBBISEC_MCP_DEVICE_URL = "https://app.kubbisec.com/oauth/device";
+export declare const KUBBISEC_MCP_APP_ORIGIN = "https://app.kubbisec.com";
+export declare const KUBBISEC_MCP_BRAND_ICON_PATH = "/assets/icons/mcp-logo.png";
+export declare const KUBBISEC_MCP_DEFAULT_SCOPES: readonly ["mcp:read", "mcp:scan:trigger", "mcp:remediate:trigger"];
+export declare function buildHostedMcpOAuthConfig(): {
+    type: "oauth2";
+    authorizationUrl: string;
+    tokenUrl: string;
+    scopes: ("mcp:read" | "mcp:scan:trigger" | "mcp:remediate:trigger")[];
+};
+export declare function buildHostedMcpCursorSnippet(): string;
+export declare function buildStdioApiKeyCursorSnippet(input: {
+    organizationSlug: string;
+    apiKeyPlaceholder?: string;
+}): string;
+//# sourceMappingURL=constants.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/mcp/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/mcp/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,iCAAiC,CAAC;AACtE,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAClE,eAAO,MAAM,gCAAgC,0CAA0C,CAAC;AACxF,eAAO,MAAM,4BAA4B,4CAA4C,CAAC;AACtF,eAAO,MAAM,mCAAmC,mDAAmD,CAAC;AACpG,eAAO,MAAM,6BAA6B,6CAA6C,CAAC;AACxF,eAAO,MAAM,uBAAuB,0CAA0C,CAAC;AAC/E,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAClE,eAAO,MAAM,4BAA4B,+BAA+B,CAAC;AAEzE,eAAO,MAAM,2BAA2B,oEAI9B,CAAC;AAEX,wBAAgB,yBAAyB;;;;;EAOxC;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAYpD;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,MAAM,CAiBT"}

package/bundled/node_modules/@aspm/shared/dist/mcp/constants.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KUBBISEC_MCP_DEFAULT_SCOPES = exports.KUBBISEC_MCP_BRAND_ICON_PATH = exports.KUBBISEC_MCP_APP_ORIGIN = exports.KUBBISEC_MCP_DEVICE_URL = exports.KUBBISEC_MCP_OAUTH_DEVICE_URL = exports.KUBBISEC_MCP_OAUTH_DEVICE_TOKEN_URL = exports.KUBBISEC_MCP_OAUTH_TOKEN_URL = exports.KUBBISEC_MCP_OAUTH_AUTHORIZE_URL = exports.KUBBISEC_MCP_API_ORIGIN = exports.KUBBISEC_HOSTED_MCP_URL = void 0;
+exports.buildHostedMcpOAuthConfig = buildHostedMcpOAuthConfig;
+exports.buildHostedMcpCursorSnippet = buildHostedMcpCursorSnippet;
+exports.buildStdioApiKeyCursorSnippet = buildStdioApiKeyCursorSnippet;
+exports.KUBBISEC_HOSTED_MCP_URL = "https://mcp.kubbisec.com/mcp";
+exports.KUBBISEC_MCP_API_ORIGIN = "https://api.kubbisec.com";
+exports.KUBBISEC_MCP_OAUTH_AUTHORIZE_URL = "https://app.kubbisec.com/oauth/device";
+exports.KUBBISEC_MCP_OAUTH_TOKEN_URL = "https://api.kubbisec.com/v1/oauth/token";
+exports.KUBBISEC_MCP_OAUTH_DEVICE_TOKEN_URL = "https://api.kubbisec.com/v1/oauth/device/token";
+exports.KUBBISEC_MCP_OAUTH_DEVICE_URL = "https://api.kubbisec.com/v1/oauth/device";
+exports.KUBBISEC_MCP_DEVICE_URL = "https://app.kubbisec.com/oauth/device";
+exports.KUBBISEC_MCP_APP_ORIGIN = "https://app.kubbisec.com";
+exports.KUBBISEC_MCP_BRAND_ICON_PATH = "/assets/icons/mcp-logo.png";
+exports.KUBBISEC_MCP_DEFAULT_SCOPES = [
+    "mcp:read",
+    "mcp:scan:trigger",
+    "mcp:remediate:trigger",
+];
+function buildHostedMcpOAuthConfig() {
+    return {
+        type: "oauth2",
+        authorizationUrl: exports.KUBBISEC_MCP_OAUTH_AUTHORIZE_URL,
+        tokenUrl: exports.KUBBISEC_MCP_OAUTH_TOKEN_URL,
+        scopes: [...exports.KUBBISEC_MCP_DEFAULT_SCOPES],
+    };
+}
+function buildHostedMcpCursorSnippet() {
+    return JSON.stringify({
+        mcpServers: {
+            kubbisec: {
+                url: exports.KUBBISEC_HOSTED_MCP_URL,
+            },
+        },
+    }, null, 2);
+}
+function buildStdioApiKeyCursorSnippet(input) {
+    return JSON.stringify({
+        mcpServers: {
+            kubbisec: {
+                command: "npx",
+                args: ["-y", "@kubbisec/mcp"],
+                env: {
+                    KUBBISEC_API_KEY: input.apiKeyPlaceholder ?? "<sua-key>",
+                    KUBBISEC_ORGANIZATION_SLUG: input.organizationSlug,
+                },
+            },
+        },
+    }, null, 2);
+}
+//# sourceMappingURL=constants.js.map

package/bundled/node_modules/@aspm/shared/dist/mcp/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/mcp/constants.ts"],"names":[],"mappings":";;;AAgBA,8DAOC;AAED,kEAYC;AAED,sEAoBC;AA3DY,QAAA,uBAAuB,GAAG,8BAA8B,CAAC;AACzD,QAAA,uBAAuB,GAAG,0BAA0B,CAAC;AACrD,QAAA,gCAAgC,GAAG,uCAAuC,CAAC;AAC3E,QAAA,4BAA4B,GAAG,yCAAyC,CAAC;AACzE,QAAA,mCAAmC,GAAG,gDAAgD,CAAC;AACvF,QAAA,6BAA6B,GAAG,0CAA0C,CAAC;AAC3E,QAAA,uBAAuB,GAAG,uCAAuC,CAAC;AAClE,QAAA,uBAAuB,GAAG,0BAA0B,CAAC;AACrD,QAAA,4BAA4B,GAAG,4BAA4B,CAAC;AAE5D,QAAA,2BAA2B,GAAG;IACzC,UAAU;IACV,kBAAkB;IAClB,uBAAuB;CACf,CAAC;AAEX,SAAgB,yBAAyB;IACvC,OAAO;QACL,IAAI,EAAE,QAAiB;QACvB,gBAAgB,EAAE,wCAAgC;QAClD,QAAQ,EAAE,oCAA4B;QACtC,MAAM,EAAE,CAAC,GAAG,mCAA2B,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAgB,2BAA2B;IACzC,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,UAAU,EAAE;YACV,QAAQ,EAAE;gBACR,GAAG,EAAE,+BAAuB;aAC7B;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,6BAA6B,CAAC,KAG7C;IACC,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,UAAU,EAAE;YACV,QAAQ,EAAE;gBACR,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC;gBAC7B,GAAG,EAAE;oBACH,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,IAAI,WAAW;oBACxD,0BAA0B,EAAE,KAAK,CAAC,gBAAgB;iBACnD;aACF;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/mcp/oauth-metadata.d.ts

@@ -0,0 +1,37 @@
+export type McpOAuthProtectedResourceMetadata = {
+    resource: string;
+    authorization_servers: string[];
+    bearer_methods_supported: ["header"];
+    scopes_supported: string[];
+};
+export type McpOAuthAuthorizationServerMetadata = {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    device_authorization_endpoint: string;
+    response_types_supported: string[];
+    grant_types_supported: string[];
+    token_endpoint_auth_methods_supported: string[];
+    code_challenge_methods_supported: string[];
+    scopes_supported: string[];
+};
+export declare function buildMcpOAuthProtectedResourceMetadata(input: {
+    resourceUrl: string;
+    authorizationServerUrl: string;
+    scopes?: readonly string[];
+}): McpOAuthProtectedResourceMetadata;
+export declare function buildMcpOAuthAuthorizationServerMetadata(input: {
+    apiBaseUrl: string;
+    webAppBaseUrl: string;
+    scopes?: readonly string[];
+}): McpOAuthAuthorizationServerMetadata;
+export declare function buildMcpOAuthWwwAuthenticateHeader(input: {
+    resourceMetadataUrl: string;
+    realm?: string;
+    error?: string;
+}): string;
+export declare function buildMcpOAuthProtectedResourceMetadataUrls(resourceUrl: string): {
+    root: string;
+    pathInserted: string;
+};
+//# sourceMappingURL=oauth-metadata.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/mcp/oauth-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-metadata.d.ts","sourceRoot":"","sources":["../../src/mcp/oauth-metadata.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,iCAAiC,GAAG;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,wBAAwB,EAAE,CAAC,QAAQ,CAAC,CAAC;IACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,6BAA6B,EAAE,MAAM,CAAC;IACtC,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,qCAAqC,EAAE,MAAM,EAAE,CAAC;IAChD,gCAAgC,EAAE,MAAM,EAAE,CAAC;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,wBAAgB,sCAAsC,CAAC,KAAK,EAAE;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,GAAG,iCAAiC,CAOpC;AAED,wBAAgB,wCAAwC,CAAC,KAAK,EAAE;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,GAAG,mCAAmC,CAkBtC;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAOT;AAED,wBAAgB,0CAA0C,CAAC,WAAW,EAAE,MAAM,GAAG;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB,CAWA"}

package/bundled/node_modules/@aspm/shared/dist/mcp/oauth-metadata.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildMcpOAuthProtectedResourceMetadata = buildMcpOAuthProtectedResourceMetadata;
+exports.buildMcpOAuthAuthorizationServerMetadata = buildMcpOAuthAuthorizationServerMetadata;
+exports.buildMcpOAuthWwwAuthenticateHeader = buildMcpOAuthWwwAuthenticateHeader;
+exports.buildMcpOAuthProtectedResourceMetadataUrls = buildMcpOAuthProtectedResourceMetadataUrls;
+const sonar_safe_string_1 = require("../sonar-safe-string");
+const constants_1 = require("./constants");
+function buildMcpOAuthProtectedResourceMetadata(input) {
+    return {
+        resource: (0, sonar_safe_string_1.trimTrailingSlashes)(input.resourceUrl),
+        authorization_servers: [(0, sonar_safe_string_1.trimTrailingSlashes)(input.authorizationServerUrl)],
+        bearer_methods_supported: ["header"],
+        scopes_supported: [...(input.scopes ?? constants_1.KUBBISEC_MCP_DEFAULT_SCOPES)],
+    };
+}
+function buildMcpOAuthAuthorizationServerMetadata(input) {
+    const apiBase = (0, sonar_safe_string_1.trimTrailingSlashes)(input.apiBaseUrl);
+    const webAppBase = (0, sonar_safe_string_1.trimTrailingSlashes)(input.webAppBaseUrl);
+    return {
+        issuer: apiBase,
+        authorization_endpoint: `${webAppBase}/oauth/device`,
+        token_endpoint: `${apiBase}/v1/oauth/token`,
+        device_authorization_endpoint: `${apiBase}/v1/oauth/device`,
+        response_types_supported: ["code"],
+        grant_types_supported: [
+            "urn:ietf:params:oauth:grant-type:device_code",
+            "refresh_token",
+        ],
+        token_endpoint_auth_methods_supported: ["none"],
+        code_challenge_methods_supported: ["S256"],
+        scopes_supported: [...(input.scopes ?? constants_1.KUBBISEC_MCP_DEFAULT_SCOPES)],
+    };
+}
+function buildMcpOAuthWwwAuthenticateHeader(input) {
+    const realm = input.realm ?? "kubbisec-mcp";
+    const parts = [`Bearer realm="${realm}"`, `resource_metadata="${input.resourceMetadataUrl}"`];
+    if (input.error) {
+        parts.push(`error="${input.error}"`);
+    }
+    return parts.join(", ");
+}
+function buildMcpOAuthProtectedResourceMetadataUrls(resourceUrl) {
+    const resource = new URL(resourceUrl);
+    const origin = resource.origin;
+    const resourcePath = resource.pathname.replace(/^\//, "");
+    return {
+        root: `${origin}/.well-known/oauth-protected-resource`,
+        pathInserted: resourcePath
+            ? `${origin}/.well-known/oauth-protected-resource/${resourcePath}`
+            : `${origin}/.well-known/oauth-protected-resource`,
+    };
+}
+//# sourceMappingURL=oauth-metadata.js.map

package/bundled/node_modules/@aspm/shared/dist/mcp/oauth-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-metadata.js","sourceRoot":"","sources":["../../src/mcp/oauth-metadata.ts"],"names":[],"mappings":";;AAsBA,wFAWC;AAED,4FAsBC;AAED,gFAWC;AAED,gGAcC;AAtFD,4DAA2D;AAC3D,2CAA0D;AAqB1D,SAAgB,sCAAsC,CAAC,KAItD;IACC,OAAO;QACL,QAAQ,EAAE,IAAA,uCAAmB,EAAC,KAAK,CAAC,WAAW,CAAC;QAChD,qBAAqB,EAAE,CAAC,IAAA,uCAAmB,EAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1E,wBAAwB,EAAE,CAAC,QAAQ,CAAC;QACpC,gBAAgB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,uCAA2B,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAgB,wCAAwC,CAAC,KAIxD;IACC,MAAM,OAAO,GAAG,IAAA,uCAAmB,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAA,uCAAmB,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAE5D,OAAO;QACL,MAAM,EAAE,OAAO;QACf,sBAAsB,EAAE,GAAG,UAAU,eAAe;QACpD,cAAc,EAAE,GAAG,OAAO,iBAAiB;QAC3C,6BAA6B,EAAE,GAAG,OAAO,kBAAkB;QAC3D,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,qBAAqB,EAAE;YACrB,8CAA8C;YAC9C,eAAe;SAChB;QACD,qCAAqC,EAAE,CAAC,MAAM,CAAC;QAC/C,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,gBAAgB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,uCAA2B,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAgB,kCAAkC,CAAC,KAIlD;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,cAAc,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,iBAAiB,KAAK,GAAG,EAAE,sBAAsB,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAgB,0CAA0C,CAAC,WAAmB;IAI5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,GAAG,MAAM,uCAAuC;QACtD,YAAY,EAAE,YAAY;YACxB,CAAC,CAAC,GAAG,MAAM,yCAAyC,YAAY,EAAE;YAClE,CAAC,CAAC,GAAG,MAAM,uCAAuC;KACrD,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/project-scanner-summary.d.ts

@@ -1,7 +1,9 @@
-import { ScanSource } from "./enums";
 /** Scanners surfaced on project detail scanner tabs. */
-export declare const PROJECT_SCANNER_SUMMARY_SOURCES: readonly [ScanSource.TRIVY, ScanSource.SEMGREP, ScanSource.SONAR];
+export declare const PROJECT_SCANNER_SUMMARY_SOURCES: readonly ["TRIVY", "SEMGREP", "SONAR"];
 export type ProjectScannerSummarySource = (typeof PROJECT_SCANNER_SUMMARY_SOURCES)[number];
+/** Scan source literals (kept local so web `erasableSyntaxOnly` does not pull in shared enums). */
+export declare const SCAN_SOURCE_VALUES: readonly ["TRIVY", "SONAR", "SEMGREP", "NMAP", "SKIPFISH", "OSV", "GITLEAKS", "SYFT", "VULNDB", "KUBBISEC_AI"];
+type SummaryScanSource = (typeof SCAN_SOURCE_VALUES)[number];
 export type ProjectScannerSourceSummary = {
     totalActive: number;
     criticalCount: number;
@@ -13,9 +15,10 @@ export type ProjectScannerSourceSummary = {
     latestReportImportedAt: string | null;
 };
 export type ProjectScannerSummaryResponse = {
-    summaries: Partial<Record<ScanSource, ProjectScannerSourceSummary>>;
+    summaries: Partial<Record<SummaryScanSource, ProjectScannerSourceSummary>>;
 };
-export declare function isScanSource(value: string): value is ScanSource;
+export declare function isScanSource(value: string): value is SummaryScanSource;
 export declare function parseProjectScannerSummarySources(raw: string | undefined | null): ProjectScannerSummarySource[];
 export declare function emptyProjectScannerSourceSummary(): ProjectScannerSourceSummary;
+export {};
 //# sourceMappingURL=project-scanner-summary.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/project-scanner-summary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-scanner-summary.d.ts","sourceRoot":"","sources":["../src/project-scanner-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,wDAAwD;AACxD,eAAO,MAAM,+BAA+B,mEAIlC,CAAC;AAEX,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3F,MAAM,MAAM,2BAA2B,GAAG;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC,CAAC;CACrE,CAAC;AAIF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D;AAED,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAC7B,2BAA2B,EAAE,CAuB/B;AAED,wBAAgB,gCAAgC,IAAI,2BAA2B,CAW9E"}
+{"version":3,"file":"project-scanner-summary.d.ts","sourceRoot":"","sources":["../src/project-scanner-summary.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,eAAO,MAAM,+BAA+B,wCAAyC,CAAC;AAEtF,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3F,mGAAmG;AACnG,eAAO,MAAM,kBAAkB,gHAWrB,CAAC;AAEX,KAAK,iBAAiB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,MAAM,MAAM,2BAA2B,GAAG;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC,CAAC;CAC5E,CAAC;AAIF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAEtE;AAED,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAC7B,2BAA2B,EAAE,CAuB/B;AAED,wBAAgB,gCAAgC,IAAI,2BAA2B,CAW9E"}

package/bundled/node_modules/@aspm/shared/dist/project-scanner-summary.js

@@ -1,17 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PROJECT_SCANNER_SUMMARY_SOURCES = void 0;
+exports.SCAN_SOURCE_VALUES = exports.PROJECT_SCANNER_SUMMARY_SOURCES = void 0;
 exports.isScanSource = isScanSource;
 exports.parseProjectScannerSummarySources = parseProjectScannerSummarySources;
 exports.emptyProjectScannerSourceSummary = emptyProjectScannerSourceSummary;
-const enums_1 = require("./enums");
 /** Scanners surfaced on project detail scanner tabs. */
-exports.PROJECT_SCANNER_SUMMARY_SOURCES = [
-    enums_1.ScanSource.TRIVY,
-    enums_1.ScanSource.SEMGREP,
-    enums_1.ScanSource.SONAR,
+exports.PROJECT_SCANNER_SUMMARY_SOURCES = ["TRIVY", "SEMGREP", "SONAR"];
+/** Scan source literals (kept local so web `erasableSyntaxOnly` does not pull in shared enums). */
+exports.SCAN_SOURCE_VALUES = [
+    "TRIVY",
+    "SONAR",
+    "SEMGREP",
+    "NMAP",
+    "SKIPFISH",
+    "OSV",
+    "GITLEAKS",
+    "SYFT",
+    "VULNDB",
+    "KUBBISEC_AI",
 ];
-const SCAN_SOURCE_SET = new Set(Object.values(enums_1.ScanSource));
+const SCAN_SOURCE_SET = new Set(exports.SCAN_SOURCE_VALUES);
 function isScanSource(value) {
     return SCAN_SOURCE_SET.has(value);
 }

package/bundled/node_modules/@aspm/shared/dist/project-scanner-summary.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-scanner-summary.js","sourceRoot":"","sources":["../src/project-scanner-summary.ts"],"names":[],"mappings":";;;AA4BA,oCAEC;AAED,8EAyBC;AAED,4EAWC;AAtED,mCAAqC;AAErC,wDAAwD;AAC3C,QAAA,+BAA+B,GAAG;IAC7C,kBAAU,CAAC,KAAK;IAChB,kBAAU,CAAC,OAAO;IAClB,kBAAU,CAAC,KAAK;CACR,CAAC;AAmBX,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,kBAAU,CAAC,CAAC,CAAC;AAEnE,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,iCAAiC,CAC/C,GAA8B;IAE9B,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,uCAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,MAAM,GAAkC,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,uCAA+B,CAAC,QAAQ,CAAC,KAAoC,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,KAAoC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,uCAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,gCAAgC;IAC9C,OAAO;QACL,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,CAAC;QACZ,cAAc,EAAE,IAAI;QACpB,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"project-scanner-summary.js","sourceRoot":"","sources":["../src/project-scanner-summary.ts"],"names":[],"mappings":";;;AAsCA,oCAEC;AAED,8EAyBC;AAED,4EAWC;AAhFD,wDAAwD;AAC3C,QAAA,+BAA+B,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAU,CAAC;AAItF,mGAAmG;AACtF,QAAA,kBAAkB,GAAG;IAChC,OAAO;IACP,OAAO;IACP,SAAS;IACT,MAAM;IACN,UAAU;IACV,KAAK;IACL,UAAU;IACV,MAAM;IACN,QAAQ;IACR,aAAa;CACL,CAAC;AAmBX,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,0BAAkB,CAAC,CAAC;AAE5D,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,iCAAiC,CAC/C,GAA8B;IAE9B,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,uCAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,MAAM,GAAkC,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,uCAA+B,CAAC,QAAQ,CAAC,KAAoC,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,KAAoC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,uCAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,gCAAgC;IAC9C,OAAO;QACL,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,CAAC;QACZ,cAAc,EAAE,IAAI;QACpB,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/rbac/index.d.ts

@@ -1,6 +1,7 @@
 export * from "./better-auth-org-roles";
 export * from "./kubbisec-permission-descriptions";
 export * from "./kubbisec-permissions";
+export * from "./member-quota";
 export * from "./platform-staff";
 export * from "./resolve-org-permissions";
 export * from "./resolve-platform-permissions";

package/bundled/node_modules/@aspm/shared/dist/rbac/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rbac/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rbac/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/rbac/index.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./better-auth-org-roles"), exports);
 __exportStar(require("./kubbisec-permission-descriptions"), exports);
 __exportStar(require("./kubbisec-permissions"), exports);
+__exportStar(require("./member-quota"), exports);
 __exportStar(require("./platform-staff"), exports);
 __exportStar(require("./resolve-org-permissions"), exports);
 __exportStar(require("./resolve-platform-permissions"), exports);

package/bundled/node_modules/@aspm/shared/dist/rbac/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rbac/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,qEAAmD;AACnD,yDAAuC;AACvC,mDAAiC;AACjC,4DAA0C;AAC1C,iEAA+C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rbac/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,qEAAmD;AACnD,yDAAuC;AACvC,iDAA+B;AAC/B,mDAAiC;AACjC,4DAA0C;AAC1C,iEAA+C"}

package/bundled/node_modules/@aspm/shared/dist/rbac/kubbisec-permission-descriptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kubbisec-permission-descriptions.d.ts","sourceRoot":"","sources":["../../src/rbac/kubbisec-permission-descriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEvF;;GAEG;AACH,eAAO,MAAM,gCAAgC,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAqF/E,CAAC;AAEF,wBAAgB,gCAAgC,CAAC,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAEvF;AAED,mFAAmF;AACnF,wBAAgB,4CAA4C,IAAI,IAAI,CAOnE"}
+{"version":3,"file":"kubbisec-permission-descriptions.d.ts","sourceRoot":"","sources":["../../src/rbac/kubbisec-permission-descriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEvF;;GAEG;AACH,eAAO,MAAM,gCAAgC,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAuF/E,CAAC;AAEF,wBAAgB,gCAAgC,CAAC,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAEvF;AAED,mFAAmF;AACnF,wBAAgB,4CAA4C,IAAI,IAAI,CAOnE"}

package/bundled/node_modules/@aspm/shared/dist/rbac/kubbisec-permission-descriptions.js

@@ -27,6 +27,8 @@ exports.KUBBISEC_PERMISSION_DESCRIPTIONS = {
     "kbsc.finding.remediation.auto-apply": "Disparar remediação automática (branch + PR GitHub, sem merge).",
     "kbsc.finding.export": "Exportar relatórios de achados (PDF/CSV conforme produto).",
     "kbsc.ingest.report.create": "Ingerir relatórios de scan via API ou runner.",
+    "kbsc.scan.read": "Ver fila e histórico de scans KubbiSec AI (MCP/CLI).",
+    "kbsc.scan.trigger": "Disparar scan híbrido via MCP ou assistente (enfileira para CLI local).",
     "kbsc.ingest.coverage.create": "Ingerir dados de cobertura de testes.",
     "kbsc.ingest.bundle.create": "Ingerir bundles de performance e artefactos.",
     "kbsc.supply.read": "Ver SBOM, pacotes e metadados de dependências.",

package/bundled/node_modules/@aspm/shared/dist/rbac/kubbisec-permission-descriptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"kubbisec-permission-descriptions.js","sourceRoot":"","sources":["../../src/rbac/kubbisec-permission-descriptions.ts"],"names":[],"mappings":";;;AA4FA,4EAEC;AAGD,oGAOC;AAxGD,iEAAuF;AAEvF;;GAEG;AACU,QAAA,gCAAgC,GAAuC;IAClF,uBAAuB,EAAE,sDAAsD;IAC/E,yBAAyB,EAAE,oDAAoD;IAC/E,0BAA0B,EAAE,uDAAuD;IACnF,iBAAiB,EAAE,iDAAiD;IAEpE,2BAA2B,EAAE,iDAAiD;IAC9E,6BAA6B,EAAE,+CAA+C;IAC9E,kCAAkC,EAAE,yCAAyC;IAC7E,6BAA6B,EAAE,6CAA6C;IAC5E,iCAAiC,EAAE,0CAA0C;IAE7E,yBAAyB,EAAE,iDAAiD;IAC5E,2BAA2B,EAAE,gCAAgC;IAC7D,2BAA2B,EAAE,6CAA6C;IAC1E,2BAA2B,EAAE,gCAAgC;IAE7D,mBAAmB,EAAE,4CAA4C;IACjE,4BAA4B,EAAE,qDAAqD;IACnF,iCAAiC,EAAE,wCAAwC;IAC3E,qCAAqC,EACnC,iEAAiE;IACnE,qBAAqB,EAAE,4DAA4D;IAEnF,2BAA2B,EAAE,+CAA+C;IAC5E,6BAA6B,EAAE,uCAAuC;IACtE,2BAA2B,EAAE,8CAA8C;IAE3E,kBAAkB,EAAE,gDAAgD;IACpE,4BAA4B,EAAE,uDAAuD;IACrF,0BAA0B,EAAE,0CAA0C;IAEtE,sBAAsB,EAAE,sDAAsD;IAC9E,iCAAiC,EAAE,+CAA+C;IAElF,uBAAuB,EAAE,kDAAkD;IAC3E,0BAA0B,EAAE,yDAAyD;IACrF,6BAA6B,EAAE,0CAA0C;IACzE,+BAA+B,EAAE,yCAAyC;IAC1E,+BAA+B,EAAE,6CAA6C;IAC9E,4BAA4B,EAAE,wDAAwD;IACtF,2BAA2B,EAAE,qDAAqD;IAElF,kCAAkC,EAAE,4DAA4D;IAChG,+BAA+B,EAAE,mDAAmD;IAEpF,cAAc,EAAE,gDAAgD;IAChE,yBAAyB,EAAE,gDAAgD;IAC3E,sBAAsB,EAAE,yCAAyC;IACjE,wBAAwB,EACtB,2EAA2E;IAC7E,uBAAuB,EAAE,qCAAqC;IAC9D,wBAAwB,EAAE,kDAAkD;IAC5E,0BAA0B,EAAE,uDAAuD;IAEnF,6BAA6B,EAAE,qDAAqD;IACpF,+BAA+B,EAAE,qCAAqC;IACtE,+BAA+B,EAAE,gCAAgC;IAEjE,wBAAwB,EAAE,yCAAyC;IACnE,qCAAqC,EAAE,+CAA+C;IAEtF,yBAAyB,EAAE,4CAA4C;IACvE,oBAAoB,EAAE,6CAA6C;IACnE,uBAAuB,EAAE,qDAAqD;IAC9E,yBAAyB,EACvB,2EAA2E;IAE7E,wBAAwB,EAAE,+CAA+C;IACzE,2BAA2B,EAAE,sDAAsD;IACnF,yBAAyB,EAAE,iDAAiD;IAC5E,mCAAmC,EAAE,sDAAsD;IAC3F,6BAA6B,EAAE,0DAA0D;IAEzF,uBAAuB,EAAE,+DAA+D;IAExF,mBAAmB,EAAE,kEAAkE;IACvF,qBAAqB,EAAE,8DAA8D;IACrF,oBAAoB,EAAE,sDAAsD;IAC5E,sBAAsB,EAAE,6DAA6D;IACrF,wCAAwC,EACtC,2EAA2E;IAC7E,wBAAwB,EAAE,sDAAsD;IAChF,0BAA0B,EAAE,4CAA4C;IACxE,2BAA2B,EAAE,+DAA+D;CAC7F,CAAC;AAEF,SAAgB,gCAAgC,CAAC,UAA8B;IAC7E,OAAO,wCAAgC,CAAC,UAAU,CAAC,CAAC;AACtD,CAAC;AAED,mFAAmF;AACnF,SAAgB,4CAA4C;IAC1D,KAAK,MAAM,UAAU,IAAI,2CAAoB,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,wCAAgC,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,uCAAuC,UAAU,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"kubbisec-permission-descriptions.js","sourceRoot":"","sources":["../../src/rbac/kubbisec-permission-descriptions.ts"],"names":[],"mappings":";;;AA8FA,4EAEC;AAGD,oGAOC;AA1GD,iEAAuF;AAEvF;;GAEG;AACU,QAAA,gCAAgC,GAAuC;IAClF,uBAAuB,EAAE,sDAAsD;IAC/E,yBAAyB,EAAE,oDAAoD;IAC/E,0BAA0B,EAAE,uDAAuD;IACnF,iBAAiB,EAAE,iDAAiD;IAEpE,2BAA2B,EAAE,iDAAiD;IAC9E,6BAA6B,EAAE,+CAA+C;IAC9E,kCAAkC,EAAE,yCAAyC;IAC7E,6BAA6B,EAAE,6CAA6C;IAC5E,iCAAiC,EAAE,0CAA0C;IAE7E,yBAAyB,EAAE,iDAAiD;IAC5E,2BAA2B,EAAE,gCAAgC;IAC7D,2BAA2B,EAAE,6CAA6C;IAC1E,2BAA2B,EAAE,gCAAgC;IAE7D,mBAAmB,EAAE,4CAA4C;IACjE,4BAA4B,EAAE,qDAAqD;IACnF,iCAAiC,EAAE,wCAAwC;IAC3E,qCAAqC,EACnC,iEAAiE;IACnE,qBAAqB,EAAE,4DAA4D;IAEnF,2BAA2B,EAAE,+CAA+C;IAC5E,gBAAgB,EAAE,sDAAsD;IACxE,mBAAmB,EAAE,yEAAyE;IAC9F,6BAA6B,EAAE,uCAAuC;IACtE,2BAA2B,EAAE,8CAA8C;IAE3E,kBAAkB,EAAE,gDAAgD;IACpE,4BAA4B,EAAE,uDAAuD;IACrF,0BAA0B,EAAE,0CAA0C;IAEtE,sBAAsB,EAAE,sDAAsD;IAC9E,iCAAiC,EAAE,+CAA+C;IAElF,uBAAuB,EAAE,kDAAkD;IAC3E,0BAA0B,EAAE,yDAAyD;IACrF,6BAA6B,EAAE,0CAA0C;IACzE,+BAA+B,EAAE,yCAAyC;IAC1E,+BAA+B,EAAE,6CAA6C;IAC9E,4BAA4B,EAAE,wDAAwD;IACtF,2BAA2B,EAAE,qDAAqD;IAElF,kCAAkC,EAAE,4DAA4D;IAChG,+BAA+B,EAAE,mDAAmD;IAEpF,cAAc,EAAE,gDAAgD;IAChE,yBAAyB,EAAE,gDAAgD;IAC3E,sBAAsB,EAAE,yCAAyC;IACjE,wBAAwB,EACtB,2EAA2E;IAC7E,uBAAuB,EAAE,qCAAqC;IAC9D,wBAAwB,EAAE,kDAAkD;IAC5E,0BAA0B,EAAE,uDAAuD;IAEnF,6BAA6B,EAAE,qDAAqD;IACpF,+BAA+B,EAAE,qCAAqC;IACtE,+BAA+B,EAAE,gCAAgC;IAEjE,wBAAwB,EAAE,yCAAyC;IACnE,qCAAqC,EAAE,+CAA+C;IAEtF,yBAAyB,EAAE,4CAA4C;IACvE,oBAAoB,EAAE,6CAA6C;IACnE,uBAAuB,EAAE,qDAAqD;IAC9E,yBAAyB,EACvB,2EAA2E;IAE7E,wBAAwB,EAAE,+CAA+C;IACzE,2BAA2B,EAAE,sDAAsD;IACnF,yBAAyB,EAAE,iDAAiD;IAC5E,mCAAmC,EAAE,sDAAsD;IAC3F,6BAA6B,EAAE,0DAA0D;IAEzF,uBAAuB,EAAE,+DAA+D;IAExF,mBAAmB,EAAE,kEAAkE;IACvF,qBAAqB,EAAE,8DAA8D;IACrF,oBAAoB,EAAE,sDAAsD;IAC5E,sBAAsB,EAAE,6DAA6D;IACrF,wCAAwC,EACtC,2EAA2E;IAC7E,wBAAwB,EAAE,sDAAsD;IAChF,0BAA0B,EAAE,4CAA4C;IACxE,2BAA2B,EAAE,+DAA+D;CAC7F,CAAC;AAEF,SAAgB,gCAAgC,CAAC,UAA8B;IAC7E,OAAO,wCAAgC,CAAC,UAAU,CAAC,CAAC;AACtD,CAAC;AAED,mFAAmF;AACnF,SAAgB,4CAA4C;IAC1D,KAAK,MAAM,UAAU,IAAI,2CAAoB,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,wCAAgC,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,uCAAuC,UAAU,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/rbac/kubbisec-permissions.d.ts

@@ -1,7 +1,7 @@
 /**
  * KubbiSec permission slugs — keep in sync with docs/core/rbac-catalog.md
  */
-export declare const KUBBISEC_PERMISSIONS: readonly ["kbsc.org.profile.read", "kbsc.org.profile.update", "kbsc.org.settings.manage", "kbsc.org.delete", "kbsc.identity.member.read", "kbsc.identity.member.invite", "kbsc.identity.member.role.update", "kbsc.identity.member.remove", "kbsc.identity.invitation.manage", "kbsc.asset.project.read", "kbsc.asset.project.create", "kbsc.asset.project.update", "kbsc.asset.project.delete", "kbsc.finding.read", "kbsc.finding.triage.update", "kbsc.finding.remediation.manage", "kbsc.finding.remediation.auto-apply", "kbsc.finding.export", "kbsc.ingest.report.create", "kbsc.supply.read", "kbsc.supply.policy.comment", "kbsc.supply.scan.trigger", "kbsc.governance.read", "kbsc.governance.coverage.manage", "kbsc.ingest.coverage.create", "kbsc.ingest.bundle.create", "kbsc.integration.read", "kbsc.integration.connect", "kbsc.integration.disconnect", "kbsc.integration.secret.write", "kbsc.integration.issue.create", "kbsc.integration.pr.create", "kbsc.integration.pr.merge", "kbsc.project.ai-autopilot.manage", "kbsc.project.ai-autopilot.run", "kbsc.ci.read", "kbsc.ci.pipeline.manage", "kbsc.ci.pipeline.run", "kbsc.ci.privileged.run", "kbsc.ci.runner.manage", "kbsc.ci.envpack.manage", "kbsc.ci.bootstrap.manage", "kbsc.credential.apikey.read", "kbsc.credential.apikey.create", "kbsc.credential.apikey.revoke", "kbsc.notification.read", "kbsc.notification.preference.manage", "kbsc.ai.provider.manage", "kbsc.ai.usage.read", "kbsc.ai.assistant.use", "kbsc.ai.automation.auto", "kbsc.platform.org.read", "kbsc.platform.org.support", "kbsc.platform.user.read", "kbsc.platform.impersonate.request", "kbsc.platform.config.manage", "kbsc.ops.metrics.read", "kbsc.billing.read", "kbsc.billing.manage", "kbsc.contract.read", "kbsc.contract.manage", "kbsc.identity.member.permission.manage", "kbsc.org.security.read", "kbsc.org.security.manage", "kbsc.org.assistant.manage"];
+export declare const KUBBISEC_PERMISSIONS: readonly ["kbsc.org.profile.read", "kbsc.org.profile.update", "kbsc.org.settings.manage", "kbsc.org.delete", "kbsc.identity.member.read", "kbsc.identity.member.invite", "kbsc.identity.member.role.update", "kbsc.identity.member.remove", "kbsc.identity.invitation.manage", "kbsc.asset.project.read", "kbsc.asset.project.create", "kbsc.asset.project.update", "kbsc.asset.project.delete", "kbsc.finding.read", "kbsc.finding.triage.update", "kbsc.finding.remediation.manage", "kbsc.finding.remediation.auto-apply", "kbsc.finding.export", "kbsc.ingest.report.create", "kbsc.scan.read", "kbsc.scan.trigger", "kbsc.supply.read", "kbsc.supply.policy.comment", "kbsc.supply.scan.trigger", "kbsc.governance.read", "kbsc.governance.coverage.manage", "kbsc.ingest.coverage.create", "kbsc.ingest.bundle.create", "kbsc.integration.read", "kbsc.integration.connect", "kbsc.integration.disconnect", "kbsc.integration.secret.write", "kbsc.integration.issue.create", "kbsc.integration.pr.create", "kbsc.integration.pr.merge", "kbsc.project.ai-autopilot.manage", "kbsc.project.ai-autopilot.run", "kbsc.ci.read", "kbsc.ci.pipeline.manage", "kbsc.ci.pipeline.run", "kbsc.ci.privileged.run", "kbsc.ci.runner.manage", "kbsc.ci.envpack.manage", "kbsc.ci.bootstrap.manage", "kbsc.credential.apikey.read", "kbsc.credential.apikey.create", "kbsc.credential.apikey.revoke", "kbsc.notification.read", "kbsc.notification.preference.manage", "kbsc.ai.provider.manage", "kbsc.ai.usage.read", "kbsc.ai.assistant.use", "kbsc.ai.automation.auto", "kbsc.platform.org.read", "kbsc.platform.org.support", "kbsc.platform.user.read", "kbsc.platform.impersonate.request", "kbsc.platform.config.manage", "kbsc.ops.metrics.read", "kbsc.billing.read", "kbsc.billing.manage", "kbsc.contract.read", "kbsc.contract.manage", "kbsc.identity.member.permission.manage", "kbsc.org.security.read", "kbsc.org.security.manage", "kbsc.org.assistant.manage"];
 export type KubbisecPermission = (typeof KUBBISEC_PERMISSIONS)[number];
 /** Full catalog — super admin / legacy `admin` global role. */
 export declare const ALL_KUBBISEC_PERMISSIONS: ReadonlySet<KubbisecPermission>;

package/bundled/node_modules/@aspm/shared/dist/rbac/kubbisec-permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kubbisec-permissions.d.ts","sourceRoot":"","sources":["../../src/rbac/kubbisec-permissions.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,oBAAoB,u0DAkEvB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,+DAA+D;AAC/D,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,kBAAkB,CAEpE,CAAC;AAEF,eAAO,MAAM,cAAc,iHAMjB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,eAAO,MAAM,mBAAmB,+DAAgE,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"kubbisec-permissions.d.ts","sourceRoot":"","sources":["../../src/rbac/kubbisec-permissions.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,oBAAoB,82DAoEvB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,+DAA+D;AAC/D,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,kBAAkB,CAEpE,CAAC;AAEF,eAAO,MAAM,cAAc,iHAMjB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,eAAO,MAAM,mBAAmB,+DAAgE,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/rbac/kubbisec-permissions.js

@@ -24,6 +24,8 @@ exports.KUBBISEC_PERMISSIONS = [
     "kbsc.finding.remediation.auto-apply",
     "kbsc.finding.export",
     "kbsc.ingest.report.create",
+    "kbsc.scan.read",
+    "kbsc.scan.trigger",
     "kbsc.supply.read",
     "kbsc.supply.policy.comment",
     "kbsc.supply.scan.trigger",