@kubbisec/ai-linux-x64 0.1.21 → 0.1.23

package/bundled/config/register-kubbisec-llm-provider.js

@@ -1,53 +1,61 @@
 import { readLlmConfig } from "./llm-config.js";
-import { KUBBISEC_LLM_PROVIDER_ID, KUBBISEC_LLM_PROVIDER_NAME, mergeKubbisecModelCatalog, toProviderModelConfig, } from "./llm-provider-catalog.js";
+import {
+  KUBBISEC_LLM_PROVIDER_ID,
+  KUBBISEC_LLM_PROVIDER_NAME,
+  mergeKubbisecModelCatalog,
+  toProviderModelConfig,
+} from "./llm-provider-catalog.js";
+
 function resolveLlmBaseUrl() {
-    return (process.env.KUBBISEC_AI_LLM_BASE_URL?.trim() ||
-        process.env.KUBBISEC_PI_LLM_BASE_URL?.trim() ||
-        process.env.OPENAI_BASE_URL?.trim());
+  return (
+    process.env.KUBBISEC_AI_LLM_BASE_URL?.trim() ||
+    process.env.KUBBISEC_PI_LLM_BASE_URL?.trim() ||
+    process.env.OPENAI_BASE_URL?.trim()
+  );
 }
 function resolveModelId(config = readLlmConfig()) {
-    return (config.defaultModel?.trim() ||
-        process.env.KUBBISEC_AI_MODEL_ID?.trim() ||
-        process.env.KUBBISEC_AI_MODEL?.trim() ||
-        process.env.KUBBISEC_PI_MODEL?.trim() ||
-        process.env.NAUS_PI_MODEL?.trim() ||
-        "gpt-4o");
+  return (
+    config.defaultModel?.trim() ||
+    process.env.KUBBISEC_AI_MODEL_ID?.trim() ||
+    process.env.KUBBISEC_AI_MODEL?.trim() ||
+    process.env.KUBBISEC_PI_MODEL?.trim() ||
+    process.env.NAUS_PI_MODEL?.trim() ||
+    "gpt-4o"
+  );
 }
 function resolveProxyHeaders(token) {
-    const headers = {
-        Authorization: `Bearer ${token}`,
-        "x-api-key": token,
-    };
-    const orgId = process.env.KUBBISEC_ORG_ID?.trim();
-    if (orgId)
-        headers["x-organization-id"] = orgId;
-    return headers;
+  const headers = {
+    Authorization: `Bearer ${token}`,
+    "x-api-key": token,
+  };
+  const orgId = process.env.KUBBISEC_ORG_ID?.trim();
+  if (orgId) headers["x-organization-id"] = orgId;
+  return headers;
 }
 export function buildKubbisecLlmProviderConfig(cwd = process.cwd()) {
-    const baseUrl = resolveLlmBaseUrl();
-    if (!baseUrl)
-        return null;
-    const token = process.env.KUBBISEC_JOB_TOKEN?.trim() ||
-        process.env.KUBBISEC_API_KEY?.trim() ||
-        process.env.OPENAI_API_KEY?.trim();
-    const headers = token ? resolveProxyHeaders(token) : {};
-    const llmConfig = readLlmConfig(cwd);
-    const defaultModelId = resolveModelId(llmConfig);
-    const catalog = mergeKubbisecModelCatalog(defaultModelId, llmConfig.kubbisec?.models);
-    return {
-        name: KUBBISEC_LLM_PROVIDER_NAME,
-        baseUrl,
-        ...(token ? { apiKey: token } : {}),
-        api: "openai-completions",
-        ...(Object.keys(headers).length > 0 ? { headers } : {}),
-        models: catalog.map(toProviderModelConfig),
-    };
+  const baseUrl = resolveLlmBaseUrl();
+  if (!baseUrl) return null;
+  const token =
+    process.env.KUBBISEC_JOB_TOKEN?.trim() ||
+    process.env.KUBBISEC_API_KEY?.trim() ||
+    process.env.OPENAI_API_KEY?.trim();
+  const headers = token ? resolveProxyHeaders(token) : {};
+  const llmConfig = readLlmConfig(cwd);
+  const defaultModelId = resolveModelId(llmConfig);
+  const catalog = mergeKubbisecModelCatalog(defaultModelId, llmConfig.kubbisec?.models);
+  return {
+    name: KUBBISEC_LLM_PROVIDER_NAME,
+    baseUrl,
+    ...(token ? { apiKey: token } : {}),
+    api: "openai-completions",
+    ...(Object.keys(headers).length > 0 ? { headers } : {}),
+    models: catalog.map(toProviderModelConfig),
+  };
 }
 export function registerKubbisecLlmProvider(register, cwd = process.cwd()) {
-    const config = buildKubbisecLlmProviderConfig(cwd);
-    if (!config)
-        return false;
-    register(KUBBISEC_LLM_PROVIDER_ID, config);
-    return true;
+  const config = buildKubbisecLlmProviderConfig(cwd);
+  if (!config) return false;
+  register(KUBBISEC_LLM_PROVIDER_ID, config);
+  return true;
 }
-//# sourceMappingURL=register-kubbisec-llm-provider.js.map
+//# sourceMappingURL=register-kubbisec-llm-provider.js.map

package/bundled/config/resolve-agents-context-file.d.ts

@@ -1,4 +1,4 @@
 export declare function findAgentsContextFile(startDir: string): string | undefined;
 export declare function formatAgentsContextLabel(filePath: string, home?: string): string;
 export declare function formatKubbisecContextStatus(filePath: string, home?: string): string;
-//# sourceMappingURL=resolve-agents-context-file.d.ts.map
+//# sourceMappingURL=resolve-agents-context-file.d.ts.map

package/bundled/config/resolve-agents-context-file.js

@@ -1,47 +1,46 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { isAbsolute, relative, resolve, sep } from "node:path";
+
 const CONTEXT_FILENAMES = ["AGENTS.md", "CLAUDE.md"];
 export function findAgentsContextFile(startDir) {
-    let dir = path.resolve(startDir);
-    while (true) {
-        for (const name of CONTEXT_FILENAMES) {
-            const candidate = path.join(dir, name);
-            if (fs.existsSync(candidate) && fs.statSync(candidate).isFile()) {
-                return candidate;
-            }
-        }
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            return undefined;
-        dir = parent;
+  let dir = path.resolve(startDir);
+  while (true) {
+    for (const name of CONTEXT_FILENAMES) {
+      const candidate = path.join(dir, name);
+      if (fs.existsSync(candidate) && fs.statSync(candidate).isFile()) {
+        return candidate;
+      }
     }
+    const parent = path.dirname(dir);
+    if (parent === dir) return undefined;
+    dir = parent;
+  }
 }
 export function formatAgentsContextLabel(filePath, home) {
-    const base = path.basename(filePath);
-    const homeDir = home?.trim();
-    if (!homeDir)
-        return base;
-    const resolved = resolve(filePath);
-    const resolvedHome = resolve(homeDir);
-    const rel = relative(resolvedHome, resolved);
-    const insideHome = rel === "" || (rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));
-    if (!insideHome) {
-        return `${base} (${truncatePathMiddle(resolved, 48)})`;
-    }
-    const short = rel === "" ? `~/${base}` : `~${sep}${rel}`;
-    return truncatePathMiddle(short, 56);
+  const base = path.basename(filePath);
+  const homeDir = home?.trim();
+  if (!homeDir) return base;
+  const resolved = resolve(filePath);
+  const resolvedHome = resolve(homeDir);
+  const rel = relative(resolvedHome, resolved);
+  const insideHome =
+    rel === "" || (rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));
+  if (!insideHome) {
+    return `${base} (${truncatePathMiddle(resolved, 48)})`;
+  }
+  const short = rel === "" ? `~/${base}` : `~${sep}${rel}`;
+  return truncatePathMiddle(short, 56);
 }
 function truncatePathMiddle(text, maxLen) {
-    if (text.length <= maxLen)
-        return text;
-    const ellipsis = "…";
-    const room = Math.max(4, maxLen - ellipsis.length);
-    const head = Math.max(2, Math.ceil(room * 0.45));
-    const tail = Math.max(2, room - head);
-    return text.slice(0, head) + ellipsis + text.slice(-tail);
+  if (text.length <= maxLen) return text;
+  const ellipsis = "…";
+  const room = Math.max(4, maxLen - ellipsis.length);
+  const head = Math.max(2, Math.ceil(room * 0.45));
+  const tail = Math.max(2, room - head);
+  return text.slice(0, head) + ellipsis + text.slice(-tail);
 }
 export function formatKubbisecContextStatus(filePath, home) {
-    return `ctx ${formatAgentsContextLabel(filePath, home)}`;
+  return `ctx ${formatAgentsContextLabel(filePath, home)}`;
 }
-//# sourceMappingURL=resolve-agents-context-file.js.map
+//# sourceMappingURL=resolve-agents-context-file.js.map

package/bundled/config/resource-budget.d.ts

@@ -1,17 +1,17 @@
 export type ResourceBudget = {
-    lowResource: boolean;
-    maxActiveSkills: number;
-    maxSkillsArgv: number;
-    routerTopK: number;
-    gateSampleSize: number;
-    orchestratorParallel: number;
-    onlineTrainerConcurrency: number;
-    telemetryMaxStepsPerFlush: number;
-    mem0AutoCapture: boolean;
-    clarifyMaxRounds: number;
-    editBudgetMaxOps: number;
+  lowResource: boolean;
+  maxActiveSkills: number;
+  maxSkillsArgv: number;
+  routerTopK: number;
+  gateSampleSize: number;
+  orchestratorParallel: number;
+  onlineTrainerConcurrency: number;
+  telemetryMaxStepsPerFlush: number;
+  mem0AutoCapture: boolean;
+  clarifyMaxRounds: number;
+  editBudgetMaxOps: number;
 };
 export declare const LOW_RESOURCE_DEFAULTS: Omit<ResourceBudget, "lowResource">;
 export declare const NORMAL_RESOURCE_DEFAULTS: Omit<ResourceBudget, "lowResource">;
 export declare function resolveResourceBudget(env?: NodeJS.ProcessEnv): ResourceBudget;
-//# sourceMappingURL=resource-budget.d.ts.map
+//# sourceMappingURL=resource-budget.d.ts.map

package/bundled/config/resource-budget.js

@@ -1,35 +1,35 @@
 import { envFlagOn, isMemoryEnabled } from "./feature-flags.js";
 export const LOW_RESOURCE_DEFAULTS = {
-    maxActiveSkills: 2,
-    maxSkillsArgv: 2,
-    routerTopK: 2,
-    gateSampleSize: 2,
-    orchestratorParallel: 1,
-    onlineTrainerConcurrency: 1,
-    telemetryMaxStepsPerFlush: 20,
-    mem0AutoCapture: false,
-    clarifyMaxRounds: 1,
-    editBudgetMaxOps: 6,
+  maxActiveSkills: 2,
+  maxSkillsArgv: 2,
+  routerTopK: 2,
+  gateSampleSize: 2,
+  orchestratorParallel: 1,
+  onlineTrainerConcurrency: 1,
+  telemetryMaxStepsPerFlush: 20,
+  mem0AutoCapture: false,
+  clarifyMaxRounds: 1,
+  editBudgetMaxOps: 6,
 };
 export const NORMAL_RESOURCE_DEFAULTS = {
-    maxActiveSkills: 3,
-    maxSkillsArgv: 3,
-    routerTopK: 3,
-    gateSampleSize: 8,
-    orchestratorParallel: 3,
-    onlineTrainerConcurrency: 2,
-    telemetryMaxStepsPerFlush: 50,
-    mem0AutoCapture: true,
-    clarifyMaxRounds: 2,
-    editBudgetMaxOps: 12,
+  maxActiveSkills: 3,
+  maxSkillsArgv: 3,
+  routerTopK: 3,
+  gateSampleSize: 8,
+  orchestratorParallel: 3,
+  onlineTrainerConcurrency: 2,
+  telemetryMaxStepsPerFlush: 50,
+  mem0AutoCapture: true,
+  clarifyMaxRounds: 2,
+  editBudgetMaxOps: 12,
 };
 export function resolveResourceBudget(env = process.env) {
-    const lowResource = envFlagOn(env, "KUBBISEC_LOW_RESOURCE");
-    const defaults = lowResource ? LOW_RESOURCE_DEFAULTS : NORMAL_RESOURCE_DEFAULTS;
-    return {
-        lowResource,
-        ...defaults,
-        mem0AutoCapture: lowResource ? false : isMemoryEnabled(env),
-    };
+  const lowResource = envFlagOn(env, "KUBBISEC_LOW_RESOURCE");
+  const defaults = lowResource ? LOW_RESOURCE_DEFAULTS : NORMAL_RESOURCE_DEFAULTS;
+  return {
+    lowResource,
+    ...defaults,
+    mem0AutoCapture: lowResource ? false : isMemoryEnabled(env),
+  };
 }
-//# sourceMappingURL=resource-budget.js.map
+//# sourceMappingURL=resource-budget.js.map

package/bundled/config/sync-kubbisec-pi-models.d.ts

@@ -6,7 +6,10 @@ export declare function resolvePiAgentModelsJsonPath(): string;
  * Materialize KubbiSec (and custom BYOK/local) providers into `~/.kubbisec/agent/models.json`
  * so chat bootstrap can use `defaultProvider` from `.kubbisec/llm.json`.
  */
-export declare function syncKubbisecProvidersToPiModelsJson(cwd?: string, options?: {
+export declare function syncKubbisecProvidersToPiModelsJson(
+  cwd?: string,
+  options?: {
     modelsJsonPath?: string;
-}): boolean;
-//# sourceMappingURL=sync-kubbisec-pi-models.d.ts.map
+  },
+): boolean;
+//# sourceMappingURL=sync-kubbisec-pi-models.d.ts.map

package/bundled/config/sync-kubbisec-pi-models.js

@@ -3,51 +3,51 @@ import * as os from "node:os";
 import * as path from "node:path";
 import { readLlmConfig, resolveApiKeyValue } from "./llm-config.js";
 import { KUBBISEC_LLM_PROVIDER_ID, toProviderModelConfig } from "./llm-provider-catalog.js";
-import { buildKubbisecLlmProviderConfig, } from "./register-kubbisec-llm-provider.js";
+import { buildKubbisecLlmProviderConfig } from "./register-kubbisec-llm-provider.js";
 /** Matches Pi `getAgentDir()` when runtime is branded (`piConfig.configDir: ".kubbisec"`). */
 export const KUBBISEC_PI_AGENT_CONFIG_DIR = ".kubbisec";
 function expandTildePath(filePath) {
-    if (filePath === "~")
-        return os.homedir();
-    if (filePath.startsWith("~/"))
-        return path.join(os.homedir(), filePath.slice(2));
-    return filePath;
+  if (filePath === "~") return os.homedir();
+  if (filePath.startsWith("~/")) return path.join(os.homedir(), filePath.slice(2));
+  return filePath;
 }
 export function resolvePiAgentModelsJsonPath() {
-    const envDir = process.env.KUBBISEC_CODING_AGENT_DIR?.trim();
-    if (envDir) {
-        return path.join(expandTildePath(envDir), "models.json");
-    }
-    return path.join(os.homedir(), KUBBISEC_PI_AGENT_CONFIG_DIR, "agent", "models.json");
+  const envDir = process.env.KUBBISEC_CODING_AGENT_DIR?.trim();
+  if (envDir) {
+    return path.join(expandTildePath(envDir), "models.json");
+  }
+  return path.join(os.homedir(), KUBBISEC_PI_AGENT_CONFIG_DIR, "agent", "models.json");
 }
 function readPiModelsJson(filePath) {
-    try {
-        const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
-        if (parsed &&
-            typeof parsed === "object" &&
-            !Array.isArray(parsed) &&
-            typeof parsed.providers === "object" &&
-            parsed.providers !== null) {
-            return parsed;
-        }
-    }
-    catch {
-        /* missing or invalid */
+  try {
+    const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
+    if (
+      parsed &&
+      typeof parsed === "object" &&
+      !Array.isArray(parsed) &&
+      typeof parsed.providers === "object" &&
+      parsed.providers !== null
+    ) {
+      return parsed;
     }
-    return { providers: {} };
+  } catch {
+    /* missing or invalid */
+  }
+  return { providers: {} };
 }
 function buildCustomProviderPiEntry(provider) {
-    const apiKey = resolveApiKeyValue(provider.apiKey) ?? (provider.autodetected ? provider.apiKey : undefined);
-    return {
-        name: provider.name?.trim() || provider.id,
-        baseUrl: provider.baseUrl,
-        ...(apiKey ? { apiKey } : {}),
-        api: provider.api ?? "openai-completions",
-        ...(provider.headers && Object.keys(provider.headers).length > 0
-            ? { headers: provider.headers }
-            : {}),
-        models: provider.models.map(toProviderModelConfig),
-    };
+  const apiKey =
+    resolveApiKeyValue(provider.apiKey) ?? (provider.autodetected ? provider.apiKey : undefined);
+  return {
+    name: provider.name?.trim() || provider.id,
+    baseUrl: provider.baseUrl,
+    ...(apiKey ? { apiKey } : {}),
+    api: provider.api ?? "openai-completions",
+    ...(provider.headers && Object.keys(provider.headers).length > 0
+      ? { headers: provider.headers }
+      : {}),
+    models: provider.models.map(toProviderModelConfig),
+  };
 }
 /**
  * Pi resolves `--provider` from models.json before extensions load.
@@ -55,27 +55,27 @@ function buildCustomProviderPiEntry(provider) {
  * so chat bootstrap can use `defaultProvider` from `.kubbisec/llm.json`.
  */
 export function syncKubbisecProvidersToPiModelsJson(cwd = process.cwd(), options) {
-    const kubbisec = buildKubbisecLlmProviderConfig(cwd);
-    const customProviders = readLlmConfig(cwd).providers ?? [];
-    if (!kubbisec && customProviders.length === 0) {
-        return false;
-    }
-    const filePath = options?.modelsJsonPath ?? resolvePiAgentModelsJsonPath();
-    fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o755 });
-    const existing = readPiModelsJson(filePath);
-    const providers = {
-        ...existing.providers,
-    };
-    if (kubbisec) {
-        providers[KUBBISEC_LLM_PROVIDER_ID] = kubbisec;
-    }
-    for (const provider of customProviders) {
-        providers[provider.id] = buildCustomProviderPiEntry(provider);
-    }
-    fs.writeFileSync(filePath, `${JSON.stringify({ providers }, null, 2)}\n`, {
-        encoding: "utf8",
-        mode: 0o600,
-    });
-    return Boolean(kubbisec);
+  const kubbisec = buildKubbisecLlmProviderConfig(cwd);
+  const customProviders = readLlmConfig(cwd).providers ?? [];
+  if (!kubbisec && customProviders.length === 0) {
+    return false;
+  }
+  const filePath = options?.modelsJsonPath ?? resolvePiAgentModelsJsonPath();
+  fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o755 });
+  const existing = readPiModelsJson(filePath);
+  const providers = {
+    ...existing.providers,
+  };
+  if (kubbisec) {
+    providers[KUBBISEC_LLM_PROVIDER_ID] = kubbisec;
+  }
+  for (const provider of customProviders) {
+    providers[provider.id] = buildCustomProviderPiEntry(provider);
+  }
+  fs.writeFileSync(filePath, `${JSON.stringify({ providers }, null, 2)}\n`, {
+    encoding: "utf8",
+    mode: 0o600,
+  });
+  return Boolean(kubbisec);
 }
-//# sourceMappingURL=sync-kubbisec-pi-models.js.map
+//# sourceMappingURL=sync-kubbisec-pi-models.js.map

package/bundled/copy/cli-reference-index.d.ts

@@ -1,6 +1,2 @@
-/**
- * Compact CLI index preloaded into kubbisec chat system prompt.
- * Keep in sync with apps/web/.../aspm-commands.md, naus-commands.md, and ai-commands.md.
- */
-export declare const KUBBISEC_CLI_REFERENCE_INDEX = "<cli-reference-index>\nASPM CLI (npm install -g @kubbisec/aspm):\n| Command | Purpose |\n| aspm init | Interactive setup |\n| aspm login | Configure credentials |\n| aspm whoami | Show current config |\n| aspm doctor | Diagnose configuration |\n| aspm scan <file> -s <source> | Local parse only (no API upload) |\n| aspm parse <file> -s <source> | Local dry-run parse |\n| aspm upload <file> -s <source> | Upload security report to API |\n| aspm coverage <file> | Upload coverage (lcov) |\n| aspm parse-coverage <file> | Local coverage parse |\n| aspm gate | Evaluate local reports against inline rules |\n| aspm projects | List org projects |\n| aspm dashboard | Terminal security posture summary |\nGlobal flags: -k/--api-key, -o/--org (org slug, e.g. minha-empresa), -p/--project\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix aspm_\nEnv: KUBBISEC_API_KEY, KUBBISEC_ORG_ID (slug), KUBBISEC_PROJECT (aliases ASPM_API_URL, ASPM_API_KEY, ASPM_ORG_ID)\nScanners (-s): trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish\nReport files: trivy-report.json, gitleaks-report.json, sbom.json, osv-report.json, semgrep-report.json, sonar-report.json, nmap-report.xml, skipfish-report.json\nPer-scanner install (Linux/macOS/Windows): kubbisec://aspm/aspm-scanner-{name} (e.g. aspm-scanner-trivy, aspm-scanner-semgrep)\nCoverage frameworks: kubbisec://aspm/aspm-coverage (Jest, Vitest, pytest, JaCoCo\u2192lcov, PHPUnit/clover, Go)\n\nNAUS CLI (npm install -g @kubbisec/naus):\n| Command | Purpose |\n| naus register [token] [--renew] | Enroll runner (mTLS bootstrap) |\n| naus start [--daemon] [--allow-privileged] | Start runner daemon |\n| naus migrate | Migrate legacy token runner to mTLS |\n| naus validate <file> / naus check <file> | Validate pipeline YAML |\n| naus plan <file> [--format mermaid] | Show dependency waves |\n| naus run <file> | Execute pipeline locally |\n| naus daemon list / naus daemon stop | Background runner sessions |\nDefault pipeline file: .naus.yml\nLocal env: naus run .naus.yml [--env-file .env] [--secret-file .secrets|.secret] (repeatable; defaults .env/.secrets in cwd).\nCloud secrets: Env Packs in KubbiSec UI (not .secrets on remote runner).\nEnv: NAUS_BOOTSTRAP_TOKEN, NAUS_RENEW_RUNNER\n\nKubbiSec AI CLI (npm install -g @kubbisec/ai):\n| Command | Purpose |\n| kubbisec login / logout / whoami | API session |\n| kubbisec doctor | Diagnose CLI setup |\n| kubbisec ls / show <id> | List/show findings |\n| kubbisec fix <id> [-m auto] | AI remediation |\n| kubbisec chat | Interactive terminal chat |\n| kubbisec do [intent] | Orchestrated agent run |\n| kubbisec watch [--logs] | Remediation queue daemon |\n| kubbisec daemon list|logs|stop | Manage watch sessions |\n| kubbisec ap | Trigger Autopilot cycle |\n| kubbisec naus \u2026 / kubbisec aspm \u2026 | CLI hub forwarding |\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix kbs_\nOrg: -o minha-empresa (slug)\nFull docs: kubbisec://ai/README, section ai-commands\n\nNAUS YAML (NOT GitHub Actions): top-level run: (never jobs:); script: + depends_on: (never commands:/needs:); ASPM jobs kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).\nFull docs via tools: aspm_docs (section aspm-commands), naus_pipeline_docs (naus-commands, naus-pipeline-overview, naus-aspm-integration), kubbisec://ai/* (KubbiSec AI CLI).\naspm-cicd.md is GitHub Actions only \u2014 do not use for NAUS pipelines.\n</cli-reference-index>";
-//# sourceMappingURL=cli-reference-index.d.ts.map
+export { KUBBISEC_CLI_REFERENCE_INDEX } from "@aspm/shared";
+//# sourceMappingURL=cli-reference-index.d.ts.map

package/bundled/copy/cli-reference-index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-reference-index.d.ts","sourceRoot":"","sources":["../../src/copy/cli-reference-index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,4BAA4B,y3GAwDlB,CAAC"}
+{"version":3,"file":"cli-reference-index.d.ts","sourceRoot":"","sources":["../../src/copy/cli-reference-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC"}

package/bundled/copy/cli-reference-index.js

@@ -1,62 +1,2 @@
-/**
- * Compact CLI index preloaded into kubbisec chat system prompt.
- * Keep in sync with apps/web/.../aspm-commands.md, naus-commands.md, and ai-commands.md.
- */
-export const KUBBISEC_CLI_REFERENCE_INDEX = `<cli-reference-index>
-ASPM CLI (npm install -g @kubbisec/aspm):
-| Command | Purpose |
-| aspm init | Interactive setup |
-| aspm login | Configure credentials |
-| aspm whoami | Show current config |
-| aspm doctor | Diagnose configuration |
-| aspm scan <file> -s <source> | Local parse only (no API upload) |
-| aspm parse <file> -s <source> | Local dry-run parse |
-| aspm upload <file> -s <source> | Upload security report to API |
-| aspm coverage <file> | Upload coverage (lcov) |
-| aspm parse-coverage <file> | Local coverage parse |
-| aspm gate | Evaluate local reports against inline rules |
-| aspm projects | List org projects |
-| aspm dashboard | Terminal security posture summary |
-Global flags: -k/--api-key, -o/--org (org slug, e.g. minha-empresa), -p/--project
-API key: Perfil → API Keys (/profile/api-keys), prefix aspm_
-Env: KUBBISEC_API_KEY, KUBBISEC_ORG_ID (slug), KUBBISEC_PROJECT (aliases ASPM_API_URL, ASPM_API_KEY, ASPM_ORG_ID)
-Scanners (-s): trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish
-Report files: trivy-report.json, gitleaks-report.json, sbom.json, osv-report.json, semgrep-report.json, sonar-report.json, nmap-report.xml, skipfish-report.json
-Per-scanner install (Linux/macOS/Windows): kubbisec://aspm/aspm-scanner-{name} (e.g. aspm-scanner-trivy, aspm-scanner-semgrep)
-Coverage frameworks: kubbisec://aspm/aspm-coverage (Jest, Vitest, pytest, JaCoCo→lcov, PHPUnit/clover, Go)
-
-NAUS CLI (npm install -g @kubbisec/naus):
-| Command | Purpose |
-| naus register [token] [--renew] | Enroll runner (mTLS bootstrap) |
-| naus start [--daemon] [--allow-privileged] | Start runner daemon |
-| naus migrate | Migrate legacy token runner to mTLS |
-| naus validate <file> / naus check <file> | Validate pipeline YAML |
-| naus plan <file> [--format mermaid] | Show dependency waves |
-| naus run <file> | Execute pipeline locally |
-| naus daemon list / naus daemon stop | Background runner sessions |
-Default pipeline file: .naus.yml
-Local env: naus run .naus.yml [--env-file .env] [--secret-file .secrets|.secret] (repeatable; defaults .env/.secrets in cwd).
-Cloud secrets: Env Packs in KubbiSec UI (not .secrets on remote runner).
-Env: NAUS_BOOTSTRAP_TOKEN, NAUS_RENEW_RUNNER
-
-KubbiSec AI CLI (npm install -g @kubbisec/ai):
-| Command | Purpose |
-| kubbisec login / logout / whoami | API session |
-| kubbisec doctor | Diagnose CLI setup |
-| kubbisec ls / show <id> | List/show findings |
-| kubbisec fix <id> [-m auto] | AI remediation |
-| kubbisec chat | Interactive terminal chat |
-| kubbisec do [intent] | Orchestrated agent run |
-| kubbisec watch [--logs] | Remediation queue daemon |
-| kubbisec daemon list|logs|stop | Manage watch sessions |
-| kubbisec ap | Trigger Autopilot cycle |
-| kubbisec naus … / kubbisec aspm … | CLI hub forwarding |
-API key: Perfil → API Keys (/profile/api-keys), prefix kbs_
-Org: -o minha-empresa (slug)
-Full docs: kubbisec://ai/README, section ai-commands
-
-NAUS YAML (NOT GitHub Actions): top-level run: (never jobs:); script: + depends_on: (never commands:/needs:); ASPM jobs kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).
-Full docs via tools: aspm_docs (section aspm-commands), naus_pipeline_docs (naus-commands, naus-pipeline-overview, naus-aspm-integration), kubbisec://ai/* (KubbiSec AI CLI).
-aspm-cicd.md is GitHub Actions only — do not use for NAUS pipelines.
-</cli-reference-index>`;
-//# sourceMappingURL=cli-reference-index.js.map
+export { KUBBISEC_CLI_REFERENCE_INDEX } from "@aspm/shared";
+//# sourceMappingURL=cli-reference-index.js.map

package/bundled/copy/cli-reference-index.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-reference-index.js","sourceRoot":"","sources":["../../src/copy/cli-reference-index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAwDrB,CAAC"}
+{"version":3,"file":"cli-reference-index.js","sourceRoot":"","sources":["../../src/copy/cli-reference-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC"}

package/bundled/copy/kubbisec-shell-copy.d.ts

@@ -1,21 +1,26 @@
 /** Shared KubbiSec AI TUI copy (CLI extensions). */
 export declare const KUBBISEC_PRODUCT_NAME = "KubbiSec Assistant";
-export declare const KUBBISEC_SUBTITLE_LINE = "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
-export declare const KUBBISEC_COMPACT_HEADER_TAGLINE = "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
+export declare const KUBBISEC_SUBTITLE_LINE =
+  "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
+export declare const KUBBISEC_COMPACT_HEADER_TAGLINE =
+  "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
 export declare const KUBBISEC_WORDMARK = "KUBBISEC";
 export declare const KUBBISEC_EDITOR_LABEL = "Coding";
 export declare const KUBBISEC_EDITOR_PLACEHOLDER = "Ask anything...";
 /** Skill invoke pattern shown in the chat header hints row. */
 export declare const KUBBISEC_HEADER_HINTS_SKILL = "@skill name";
 export declare const KUBBISEC_EXIT_SLASH_COMMAND = "/exit";
-export declare const KUBBISEC_HEADER_HINTS_COMMANDS = "kubbisec fix \u00B7 kubbisec watch \u00B7 kubbisec ls \u00B7 /help \u00B7 /exit";
+export declare const KUBBISEC_HEADER_HINTS_COMMANDS =
+  "kubbisec fix \u00B7 kubbisec watch \u00B7 kubbisec ls \u00B7 /help \u00B7 /exit";
 /** @deprecated Use KUBBISEC_HEADER_HINTS_SKILL + KUBBISEC_HEADER_HINTS_COMMANDS */
-export declare const KUBBISEC_HEADER_HINTS = "@skill name \u00B7 kubbisec fix \u00B7 kubbisec watch \u00B7 kubbisec ls \u00B7 /help \u00B7 /exit";
+export declare const KUBBISEC_HEADER_HINTS =
+  "@skill name \u00B7 kubbisec fix \u00B7 kubbisec watch \u00B7 kubbisec ls \u00B7 /help \u00B7 /exit";
 /** @deprecated Verbose TUI only (KUBBISEC_TUI_VERBOSE=1) */
 export declare const KUBBISEC_RAIL_HINT = "chat \u00B7 org BYOK";
 export declare const KUBBISEC_PROVIDER_LABEL = "kubbisec";
 /** @deprecated Verbose TUI only */
 export declare const KUBBISEC_RAIL_LINE = "KubbiSec Assistant \u00B7 chat \u00B7 org BYOK";
 /** @deprecated Verbose TUI only */
-export declare const KUBBISEC_HEADER_TAGLINE = "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
-//# sourceMappingURL=kubbisec-shell-copy.d.ts.map
+export declare const KUBBISEC_HEADER_TAGLINE =
+  "Assistant \u00B7 ASPM Remediation \u00B7 Naus CI \u00B7 Coding";
+//# sourceMappingURL=kubbisec-shell-copy.d.ts.map

package/bundled/copy/kubbisec-shell-copy.js

@@ -18,4 +18,4 @@ export const KUBBISEC_PROVIDER_LABEL = "kubbisec";
 export const KUBBISEC_RAIL_LINE = `${KUBBISEC_PRODUCT_NAME} · ${KUBBISEC_RAIL_HINT}`;
 /** @deprecated Verbose TUI only */
 export const KUBBISEC_HEADER_TAGLINE = KUBBISEC_SUBTITLE_LINE;
-//# sourceMappingURL=kubbisec-shell-copy.js.map
+//# sourceMappingURL=kubbisec-shell-copy.js.map