@kubbisec/ai-linux-x64 0.1.22 → 0.1.24

package/bundled/node_modules/@aspm/shared/dist/ai/evaluation-dataset-50.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"evaluation-dataset-50.js","sourceRoot":"","sources":["../../src/ai/evaluation-dataset-50.ts"],"names":[],"mappings":";;;AAea,QAAA,mBAAmB,GAAG;IACjC;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EACR,wFAAwF;QAC1F,gBAAgB,EAAE,wEAAwE;QAC1F,UAAU,EAAE,kDAAkD;KAC/D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,wDAAwD;QACpE,gBAAgB,EAAE,4EAA4E;QAC9F,UAAU,EAAE,6CAA6C;KAC1D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,+CAA+C;QAC3D,gBAAgB,EACd,qFAAqF;QACvF,UAAU,EAAE,yBAAyB;KACtC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,+CAA+C;QAC3D,gBAAgB,EAAE,uEAAuE;QACzF,UAAU,EAAE,uCAAuC;KACpD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,0DAA0D;QACtE,gBAAgB,EAAE,2CAA2C;QAC7D,UAAU,EAAE,4BAA4B;KACzC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,+CAA+C;QAC3D,gBAAgB,EAAE,4DAA4D;QAC9E,UAAU,EAAE,+CAA+C;KAC5D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,2CAA2C;QACvD,gBAAgB,EAAE,mCAAmC;QACrD,UAAU,EAAE,0CAA0C;KACvD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,6CAA6C;QACzD,gBAAgB,EAAE,6DAA6D;QAC/E,UAAU,EAAE,+CAA+C;KAC5D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,8BAA8B;QAC1C,gBAAgB,EAAE,oEAAoE;QACtF,UAAU,EAAE,kCAAkC;KAC/C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,gCAAgC;QAC5C,gBAAgB,EAAE,wCAAwC;QAC1D,UAAU,EAAE,yCAAyC;KACtD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,2CAA2C;QACvD,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,+BAA+B;KAC5C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,6CAA6C;QACzD,gBAAgB,EAAE,mEAAmE;QACrF,UAAU,EAAE,gDAAgD;KAC7D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,8CAA8C;QAC1D,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,2BAA2B;KACxC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,kEAAkE;QAC9E,gBAAgB,EAAE,qDAAqD;QACvE,UAAU,EAAE,kCAAkC;KAC/C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,oDAAoD;QAChE,gBAAgB,EAAE,sCAAsC;QACxD,UAAU,EAAE,uCAAuC;KACpD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,oCAAoC;QAChD,gBAAgB,EAAE,yDAAyD;QAC3E,UAAU,EAAE,iCAAiC;KAC9C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,yCAAyC;QACrD,gBAAgB,EAAE,6BAA6B;QAC/C,UAAU,EAAE,gDAAgD;KAC7D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,oCAAoC;QAChD,gBAAgB,EAAE,mDAAmD;QACrE,UAAU,EAAE,qBAAqB;KAClC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,gCAAgC;QAC5C,gBAAgB,EAAE,sDAAsD;QACxE,UAAU,EAAE,iCAAiC;KAC9C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,YAAY;QACtB,UAAU,EAAE,iCAAiC;QAC7C,gBAAgB,EAAE,oDAAoD;QACtE,UAAU,EAAE,6CAA6C;KAC1D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,yBAAyB;QACrC,gBAAgB,EAAE,4DAA4D;QAC9E,UAAU,EAAE,qBAAqB;KAClC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,4BAA4B;QACxC,gBAAgB,EAAE,oDAAoD;QACtE,UAAU,EAAE,uCAAuC;KACpD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,iCAAiC;QAC7C,gBAAgB,EAAE,kDAAkD;QACpE,UAAU,EAAE,qBAAqB;KAClC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,2BAA2B;QACvC,gBAAgB,EAAE,0CAA0C;QAC5D,UAAU,EAAE,uCAAuC;KACpD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,+BAA+B;QAC3C,gBAAgB,EAAE,6CAA6C;QAC/D,UAAU,EAAE,kDAAkD;KAC/D;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,iCAAiC;QAC7C,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,sBAAsB;KACnC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,+BAA+B;QAC3C,gBAAgB,EAAE,gCAAgC;QAClD,UAAU,EAAE,2CAA2C;KACxD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,6CAA6C;QACzD,gBAAgB,EAAE,yCAAyC;QAC3D,UAAU,EAAE,2CAA2C;KACxD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,yCAAyC;QACrD,gBAAgB,EAAE,yCAAyC;QAC3D,UAAU,EAAE,mDAAmD;KAChE;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,iDAAiD;QAC7D,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,8CAA8C;KAC3D;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,kCAAkC;QAC9C,gBAAgB,EAAE,kDAAkD;QACpE,UAAU,EAAE,+BAA+B;KAC5C;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,+BAA+B;QAC3C,gBAAgB,EAAE,yCAAyC;QAC3D,UAAU,EAAE,oCAAoC;KACjD;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,0BAA0B;QACtC,gBAAgB,EAAE,6CAA6C;QAC/D,UAAU,EAAE,gCAAgC;KAC7C;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,6BAA6B;QACzC,gBAAgB,EAAE,iDAAiD;QACnE,UAAU,EAAE,0BAA0B;KACvC;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,wBAAwB;QACpC,gBAAgB,EAAE,4DAA4D;QAC9E,UAAU,EAAE,mCAAmC;KAChD;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,+BAA+B;QAC3C,gBAAgB,EAAE,kDAAkD;QACpE,UAAU,EAAE,0BAA0B;KACvC;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,mCAAmC;QAC/C,gBAAgB,EAAE,iDAAiD;QACnE,UAAU,EAAE,kCAAkC;KAC/C;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,6BAA6B;QACzC,gBAAgB,EAAE,oDAAoD;QACtE,UAAU,EAAE,gCAAgC;KAC7C;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,oBAAoB;QAChC,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,0BAA0B;KACvC;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,0BAA0B;QACtC,gBAAgB,EAAE,4CAA4C;QAC9D,UAAU,EAAE,8BAA8B;KAC3C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,sCAAsC;QAClD,gBAAgB,EAAE,+CAA+C;QACjE,UAAU,EAAE,mBAAmB;KAChC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,2BAA2B;QACvC,gBAAgB,EAAE,sDAAsD;QACxE,UAAU,EAAE,oBAAoB;KACjC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,uBAAuB;QACnC,gBAAgB,EAAE,oCAAoC;QACtD,UAAU,EAAE,uBAAuB;KACpC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,sCAAsC;QAClD,gBAAgB,EAAE,qDAAqD;QACvE,UAAU,EAAE,2BAA2B;KACxC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,sBAAsB;QAChC,UAAU,EAAE,oDAAoD;QAChE,gBAAgB,EAAE,sDAAsD;QACxE,UAAU,EAAE,oCAAoC;KACjD;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,yCAAyC;QACrD,gBAAgB,EAAE,qDAAqD;QACvE,UAAU,EAAE,gCAAgC;KAC7C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,4BAA4B;QACxC,gBAAgB,EAAE,mCAAmC;QACrD,UAAU,EAAE,8BAA8B;KAC3C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,gBAAgB,EAAE,6CAA6C;QAC/D,UAAU,EAAE,uBAAuB;KACpC;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,wBAAwB;QACpC,gBAAgB,EAAE,4CAA4C;QAC9D,UAAU,EAAE,6BAA6B;KAC1C;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,0CAA0C;QACtD,gBAAgB,EAAE,gDAAgD;QAClE,UAAU,EAAE,oCAAoC;KACjD;CACkD,CAAC;AAEzC,QAAA,sBAAsB,GAAG,2BAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/index.d.ts

@@ -1,3 +0,0 @@
-export * from "./evaluation-dataset-50";
-export * from "./product-knowledge";
-//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/ai/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/index.js

@@ -1,19 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./evaluation-dataset-50"), exports);
-__exportStar(require("./product-knowledge"), exports);
-//# sourceMappingURL=index.js.map

package/bundled/node_modules/@aspm/shared/dist/ai/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,sDAAoC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/build-assistant-system-prompt.d.ts

@@ -1,7 +0,0 @@
-export type BuildAssistantSystemPromptInput = {
-    capabilityLines: string[];
-    effectivePermissionKeys: string;
-    screenContextLines: string[];
-};
-export declare function buildAssistantSystemPrompt(input: BuildAssistantSystemPromptInput): string;
-//# sourceMappingURL=build-assistant-system-prompt.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/build-assistant-system-prompt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"build-assistant-system-prompt.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/build-assistant-system-prompt.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,+BAA+B,GAAG;IAC5C,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,+BAA+B,GAAG,MAAM,CA2BzF"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/build-assistant-system-prompt.js

@@ -1,30 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildAssistantSystemPrompt = buildAssistantSystemPrompt;
-const mental_map_1 = require("./mental-map");
-function buildAssistantSystemPrompt(input) {
-    const capabilities = input.capabilityLines.length > 0
-        ? input.capabilityLines.map((l) => `    <capability>${l}</capability>`).join("\n")
-        : "    <capability>Limited permissions in this session</capability>";
-    const screen = input.screenContextLines.length > 0
-        ? input.screenContextLines.map((l) => `    <line>${l}</line>`).join("\n")
-        : "    <line>(general)</line>";
-    return `<kubbisec-assistant>
-  <role>KubbiSec Assistant specialized in ASPM findings, NAUS CI/CD pipelines, secure remediation, and coding in the user's repositories. Goal: understand → decide → execute → verify.</role>
-${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
-  <persona>
-    <rule>Practical, concise Markdown for engineers.</rule>
-    <rule>Match user language (Portuguese when they write in Portuguese).</rule>
-    <rule>Use tools for tenant data and allowed actions. Never claim you ran a tool without a successful tool_result.</rule>
-    <rule>For destructive actions (auto remediation, PR creation), use start_ai_remediation_run with mode "suggestion" unless the user explicitly asked for automatic apply AND you confirmed permissions.</rule>
-  </persona>
-  <rbac>
-${capabilities}
-    <effective-keys>${input.effectivePermissionKeys}</effective-keys>
-  </rbac>
-  <screen-context>
-${screen}
-  </screen-context>
-</kubbisec-assistant>`;
-}
-//# sourceMappingURL=build-assistant-system-prompt.js.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/build-assistant-system-prompt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"build-assistant-system-prompt.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/build-assistant-system-prompt.ts"],"names":[],"mappings":";;AAQA,gEA2BC;AAnCD,6CAA+D;AAQ/D,SAAgB,0BAA0B,CAAC,KAAsC;IAC/E,MAAM,YAAY,GAChB,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QAC9B,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAClF,CAAC,CAAC,kEAAkE,CAAC;IACzE,MAAM,MAAM,GACV,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACzE,CAAC,CAAC,4BAA4B,CAAC;IAEnC,OAAO;;EAEP,4CAA+B;;;;;;;;EAQ/B,YAAY;sBACQ,KAAK,CAAC,uBAAuB;;;EAGjD,MAAM;;sBAEc,CAAC;AACvB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/build-chat-system-prompt.d.ts

@@ -1,7 +0,0 @@
-export type BuildChatSystemPromptInput = {
-    productName: string;
-    /** Inner <rule>…</rule> nodes only (no outer <rules> wrapper required). */
-    channelRulesXml: string;
-};
-export declare function buildChatSystemPrompt(input: BuildChatSystemPromptInput): string;
-//# sourceMappingURL=build-chat-system-prompt.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/build-chat-system-prompt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"build-chat-system-prompt.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/build-chat-system-prompt.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,0BAA0B,GAAG;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,MAAM,CAQ/E"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/build-chat-system-prompt.js

@@ -1,14 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildChatSystemPrompt = buildChatSystemPrompt;
-const mental_map_1 = require("./mental-map");
-function buildChatSystemPrompt(input) {
-    return `<kubbisec-ai>
-  <role>${input.productName} — ASPM findings, NAUS CI/CD pipelines, secure remediation, and coding in the repository. Same knowledge and tool contracts as @kubbisec/mcp (kubbisec:// resources).</role>
-${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
-  <rules>
-${input.channelRulesXml}
-  </rules>
-</kubbisec-ai>`;
-}
-//# sourceMappingURL=build-chat-system-prompt.js.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/build-chat-system-prompt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"build-chat-system-prompt.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/build-chat-system-prompt.ts"],"names":[],"mappings":";;AAQA,sDAQC;AAhBD,6CAA+D;AAQ/D,SAAgB,qBAAqB,CAAC,KAAiC;IACrE,OAAO;UACC,KAAK,CAAC,WAAW;EACzB,4CAA+B;;EAE/B,KAAK,CAAC,eAAe;;eAER,CAAC;AAChB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/cli-reference-index.d.ts

@@ -1,6 +0,0 @@
-/**
- * Compact CLI index preloaded into kubbisec chat system prompt.
- * Keep in sync with apps/web/.../aspm-commands.md, naus-commands.md, and ai-commands.md.
- */
-export declare const KUBBISEC_CLI_REFERENCE_INDEX = "<cli-reference-index>\nASPM CLI (npm install -g @kubbisec/aspm):\n| Command | Purpose |\n| aspm init | Interactive setup |\n| aspm login | Configure credentials |\n| aspm whoami | Show current config |\n| aspm doctor | Diagnose configuration |\n| aspm scan <file> -s <source> | Local parse only (no API upload) |\n| aspm parse <file> -s <source> | Local dry-run parse |\n| aspm upload <file> -s <source> | Upload security report to API |\n| aspm coverage <file> | Upload coverage (lcov) |\n| aspm parse-coverage <file> | Local coverage parse |\n| aspm gate | Evaluate local reports against inline rules |\n| aspm projects | List org projects |\n| aspm dashboard | Terminal security posture summary |\nGlobal flags: -k/--api-key, -o/--org (org slug, e.g. minha-empresa), -p/--project\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix aspm_\nEnv: KUBBISEC_API_KEY, KUBBISEC_ORG_ID (slug), KUBBISEC_PROJECT (aliases ASPM_API_URL, ASPM_API_KEY, ASPM_ORG_ID)\nScanners (-s): trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish\nReport files: trivy-report.json, gitleaks-report.json, sbom.json, osv-report.json, semgrep-report.json, sonar-report.json, nmap-report.xml, skipfish-report.json\nPer-scanner install (Linux/macOS/Windows): kubbisec://aspm/aspm-scanner-{name} (e.g. aspm-scanner-trivy, aspm-scanner-semgrep)\nCoverage frameworks: kubbisec://aspm/aspm-coverage (Jest, Vitest, pytest, JaCoCo\u2192lcov, PHPUnit/clover, Go)\n\nNAUS CLI (npm install -g @kubbisec/naus):\n| Command | Purpose |\n| naus register [token] [--renew] | Enroll runner (mTLS bootstrap) |\n| naus start [--daemon] [--allow-privileged] | Start runner daemon |\n| naus migrate | Migrate legacy token runner to mTLS |\n| naus validate <file> / naus check <file> | Validate pipeline YAML |\n| naus plan <file> [--format mermaid] | Show dependency waves |\n| naus run <file> | Execute pipeline locally |\n| naus daemon list / naus daemon stop | Background runner sessions |\nDefault pipeline file: .naus.yml\nLocal env: naus run .naus.yml [--env-file .env] [--secret-file .secrets|.secret] (repeatable; defaults .env/.secrets in cwd).\nCloud secrets: Env Packs in KubbiSec UI (not .secrets on remote runner).\nEnv: NAUS_BOOTSTRAP_TOKEN, NAUS_RENEW_RUNNER\n\nKubbiSec AI CLI (npm install -g @kubbisec/ai):\n| Command | Purpose |\n| kubbisec login / logout / whoami | API session |\n| kubbisec doctor | Diagnose CLI setup |\n| kubbisec ls / show <id> | List/show findings |\n| kubbisec fix <id> [-m auto] | AI remediation |\n| kubbisec chat | Interactive terminal chat |\n| kubbisec do [intent] | Orchestrated agent run |\n| kubbisec watch [--logs] | Remediation queue daemon |\n| kubbisec daemon list|logs|stop | Manage watch sessions |\n| kubbisec ap | Trigger Autopilot cycle |\n| kubbisec naus \u2026 / kubbisec aspm \u2026 | CLI hub forwarding |\nAPI key: Perfil \u2192 API Keys (/profile/api-keys), prefix kbs_\nOrg: -o minha-empresa (slug)\nFull docs: kubbisec://ai/README, section ai-commands\n\nNAUS YAML (NOT GitHub Actions): top-level run: (never jobs:); script: + depends_on: (never commands:/needs:); ASPM jobs kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).\nFull docs via tools: aspm_docs (section aspm-commands), naus_pipeline_docs (naus-commands, naus-pipeline-overview, naus-aspm-integration), kubbisec://ai/* (KubbiSec AI CLI).\naspm-cicd.md is GitHub Actions only \u2014 do not use for NAUS pipelines.\n</cli-reference-index>";
-//# sourceMappingURL=cli-reference-index.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/cli-reference-index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-reference-index.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/cli-reference-index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,4BAA4B,y3GAwDlB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/cli-reference-index.js

@@ -1,65 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.KUBBISEC_CLI_REFERENCE_INDEX = void 0;
-/**
- * Compact CLI index preloaded into kubbisec chat system prompt.
- * Keep in sync with apps/web/.../aspm-commands.md, naus-commands.md, and ai-commands.md.
- */
-exports.KUBBISEC_CLI_REFERENCE_INDEX = `<cli-reference-index>
-ASPM CLI (npm install -g @kubbisec/aspm):
-| Command | Purpose |
-| aspm init | Interactive setup |
-| aspm login | Configure credentials |
-| aspm whoami | Show current config |
-| aspm doctor | Diagnose configuration |
-| aspm scan <file> -s <source> | Local parse only (no API upload) |
-| aspm parse <file> -s <source> | Local dry-run parse |
-| aspm upload <file> -s <source> | Upload security report to API |
-| aspm coverage <file> | Upload coverage (lcov) |
-| aspm parse-coverage <file> | Local coverage parse |
-| aspm gate | Evaluate local reports against inline rules |
-| aspm projects | List org projects |
-| aspm dashboard | Terminal security posture summary |
-Global flags: -k/--api-key, -o/--org (org slug, e.g. minha-empresa), -p/--project
-API key: Perfil → API Keys (/profile/api-keys), prefix aspm_
-Env: KUBBISEC_API_KEY, KUBBISEC_ORG_ID (slug), KUBBISEC_PROJECT (aliases ASPM_API_URL, ASPM_API_KEY, ASPM_ORG_ID)
-Scanners (-s): trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish
-Report files: trivy-report.json, gitleaks-report.json, sbom.json, osv-report.json, semgrep-report.json, sonar-report.json, nmap-report.xml, skipfish-report.json
-Per-scanner install (Linux/macOS/Windows): kubbisec://aspm/aspm-scanner-{name} (e.g. aspm-scanner-trivy, aspm-scanner-semgrep)
-Coverage frameworks: kubbisec://aspm/aspm-coverage (Jest, Vitest, pytest, JaCoCo→lcov, PHPUnit/clover, Go)
-
-NAUS CLI (npm install -g @kubbisec/naus):
-| Command | Purpose |
-| naus register [token] [--renew] | Enroll runner (mTLS bootstrap) |
-| naus start [--daemon] [--allow-privileged] | Start runner daemon |
-| naus migrate | Migrate legacy token runner to mTLS |
-| naus validate <file> / naus check <file> | Validate pipeline YAML |
-| naus plan <file> [--format mermaid] | Show dependency waves |
-| naus run <file> | Execute pipeline locally |
-| naus daemon list / naus daemon stop | Background runner sessions |
-Default pipeline file: .naus.yml
-Local env: naus run .naus.yml [--env-file .env] [--secret-file .secrets|.secret] (repeatable; defaults .env/.secrets in cwd).
-Cloud secrets: Env Packs in KubbiSec UI (not .secrets on remote runner).
-Env: NAUS_BOOTSTRAP_TOKEN, NAUS_RENEW_RUNNER
-
-KubbiSec AI CLI (npm install -g @kubbisec/ai):
-| Command | Purpose |
-| kubbisec login / logout / whoami | API session |
-| kubbisec doctor | Diagnose CLI setup |
-| kubbisec ls / show <id> | List/show findings |
-| kubbisec fix <id> [-m auto] | AI remediation |
-| kubbisec chat | Interactive terminal chat |
-| kubbisec do [intent] | Orchestrated agent run |
-| kubbisec watch [--logs] | Remediation queue daemon |
-| kubbisec daemon list|logs|stop | Manage watch sessions |
-| kubbisec ap | Trigger Autopilot cycle |
-| kubbisec naus … / kubbisec aspm … | CLI hub forwarding |
-API key: Perfil → API Keys (/profile/api-keys), prefix kbs_
-Org: -o minha-empresa (slug)
-Full docs: kubbisec://ai/README, section ai-commands
-
-NAUS YAML (NOT GitHub Actions): top-level run: (never jobs:); script: + depends_on: (never commands:/needs:); ASPM jobs kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).
-Full docs via tools: aspm_docs (section aspm-commands), naus_pipeline_docs (naus-commands, naus-pipeline-overview, naus-aspm-integration), kubbisec://ai/* (KubbiSec AI CLI).
-aspm-cicd.md is GitHub Actions only — do not use for NAUS pipelines.
-</cli-reference-index>`;
-//# sourceMappingURL=cli-reference-index.js.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/cli-reference-index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-reference-index.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/cli-reference-index.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACU,QAAA,4BAA4B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAwDrB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/format-mcp-knowledge.d.ts

@@ -1,8 +0,0 @@
-export type McpKnowledgePayload = {
-    instructions?: string;
-    resources?: Record<string, unknown>;
-    assistantToolsAlignedWithMcp?: Record<string, string>;
-    cursorMcpPackage?: string;
-};
-export declare function formatMcpKnowledgeForSystemPrompt(payload: McpKnowledgePayload): string;
-//# sourceMappingURL=format-mcp-knowledge.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/format-mcp-knowledge.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"format-mcp-knowledge.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/format-mcp-knowledge.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,4BAA4B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CA0BtF"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/format-mcp-knowledge.js

@@ -1,29 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.formatMcpKnowledgeForSystemPrompt = formatMcpKnowledgeForSystemPrompt;
-const MAX_MCP_PROMPT_CHARS = 28_000;
-function formatMcpKnowledgeForSystemPrompt(payload) {
-    const parts = [
-        "<kubbisec-mcp-knowledge>",
-        "You have the same KubbiSec knowledge surface as the @kubbisec/mcp server (tools + kubbisec:// resources).",
-        "Use assistant tools listed below — they mirror MCP tools and docs.",
-    ];
-    if (payload.instructions?.trim()) {
-        parts.push("", "## MCP instructions", payload.instructions.trim());
-    }
-    if (payload.resources) {
-        parts.push("", "## kubbisec:// resources", JSON.stringify(payload.resources, null, 2));
-    }
-    if (payload.assistantToolsAlignedWithMcp) {
-        parts.push("", "## Tool mapping (MCP ↔ kubbisec chat)", JSON.stringify(payload.assistantToolsAlignedWithMcp, null, 2));
-    }
-    if (payload.cursorMcpPackage) {
-        parts.push("", payload.cursorMcpPackage);
-    }
-    parts.push("</kubbisec-mcp-knowledge>");
-    const text = parts.join("\n");
-    if (text.length <= MAX_MCP_PROMPT_CHARS)
-        return text;
-    return `${text.slice(0, MAX_MCP_PROMPT_CHARS)}\n\n…[MCP knowledge truncated — call kubbisec_mcp_knowledge or aspm_docs / naus_pipeline_docs for full text]`;
-}
-//# sourceMappingURL=format-mcp-knowledge.js.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/format-mcp-knowledge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"format-mcp-knowledge.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/format-mcp-knowledge.ts"],"names":[],"mappings":";;AASA,8EA0BC;AAnCD,MAAM,oBAAoB,GAAG,MAAM,CAAC;AASpC,SAAgB,iCAAiC,CAAC,OAA4B;IAC5E,MAAM,KAAK,GAAa;QACtB,0BAA0B;QAC1B,2GAA2G;QAC3G,oEAAoE;KACrE,CAAC;IACF,IAAI,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,CAAC,4BAA4B,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,uCAAuC,EACvC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,8GAA8G,CAAC;AAC9J,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/index.d.ts

@@ -1,7 +0,0 @@
-export { type BuildAssistantSystemPromptInput, buildAssistantSystemPrompt, } from "./build-assistant-system-prompt";
-export { type BuildChatSystemPromptInput, buildChatSystemPrompt, } from "./build-chat-system-prompt";
-export { KUBBISEC_CLI_REFERENCE_INDEX } from "./cli-reference-index";
-export { formatMcpKnowledgeForSystemPrompt, type McpKnowledgePayload, } from "./format-mcp-knowledge";
-export { KUBBISEC_MCP_INSTRUCTIONS } from "./mcp-instructions";
-export { KUBBISEC_PRODUCT_MENTAL_MAP_XML } from "./mental-map";
-//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,+BAA+B,EACpC,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,KAAK,0BAA0B,EAC/B,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EACL,iCAAiC,EACjC,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/index.js

@@ -1,16 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.KUBBISEC_PRODUCT_MENTAL_MAP_XML = exports.KUBBISEC_MCP_INSTRUCTIONS = exports.formatMcpKnowledgeForSystemPrompt = exports.KUBBISEC_CLI_REFERENCE_INDEX = exports.buildChatSystemPrompt = exports.buildAssistantSystemPrompt = void 0;
-var build_assistant_system_prompt_1 = require("./build-assistant-system-prompt");
-Object.defineProperty(exports, "buildAssistantSystemPrompt", { enumerable: true, get: function () { return build_assistant_system_prompt_1.buildAssistantSystemPrompt; } });
-var build_chat_system_prompt_1 = require("./build-chat-system-prompt");
-Object.defineProperty(exports, "buildChatSystemPrompt", { enumerable: true, get: function () { return build_chat_system_prompt_1.buildChatSystemPrompt; } });
-var cli_reference_index_1 = require("./cli-reference-index");
-Object.defineProperty(exports, "KUBBISEC_CLI_REFERENCE_INDEX", { enumerable: true, get: function () { return cli_reference_index_1.KUBBISEC_CLI_REFERENCE_INDEX; } });
-var format_mcp_knowledge_1 = require("./format-mcp-knowledge");
-Object.defineProperty(exports, "formatMcpKnowledgeForSystemPrompt", { enumerable: true, get: function () { return format_mcp_knowledge_1.formatMcpKnowledgeForSystemPrompt; } });
-var mcp_instructions_1 = require("./mcp-instructions");
-Object.defineProperty(exports, "KUBBISEC_MCP_INSTRUCTIONS", { enumerable: true, get: function () { return mcp_instructions_1.KUBBISEC_MCP_INSTRUCTIONS; } });
-var mental_map_1 = require("./mental-map");
-Object.defineProperty(exports, "KUBBISEC_PRODUCT_MENTAL_MAP_XML", { enumerable: true, get: function () { return mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML; } });
-//# sourceMappingURL=index.js.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/index.ts"],"names":[],"mappings":";;;AAAA,iFAGyC;AADvC,2IAAA,0BAA0B,OAAA;AAE5B,uEAGoC;AADlC,iIAAA,qBAAqB,OAAA;AAEvB,6DAAqE;AAA5D,mIAAA,4BAA4B,OAAA;AACrC,+DAGgC;AAF9B,yIAAA,iCAAiC,OAAA;AAGnC,uDAA+D;AAAtD,6HAAA,yBAAyB,OAAA;AAClC,2CAA+D;AAAtD,6HAAA,+BAA+B,OAAA"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/mcp-instructions.d.ts

@@ -1,2 +0,0 @@
-export declare const KUBBISEC_MCP_INSTRUCTIONS = "<kubbisec-mcp-instructions>\n<kubbisec-product-knowledge>\n  <products>\n    <product id=\"naus\" npm=\"@kubbisec/naus\" bin=\"naus\">KubbiSec CI engine: .naus.yml pipelines, runners, validate/plan/run. Cloud CI uses Env Packs; local run uses --env-file / --secret-file.</product>\n    <product id=\"aspm\" npm=\"@kubbisec/aspm\" bin=\"aspm\">Security CLI: parse/upload scanner reports (trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish), coverage, gate.</product>\n    <product id=\"ai\" npm=\"@kubbisec/ai\" bin=\"kubbisec\">CLI hub: login, findings (ls/show), fix/watch/chat, optional naus/aspm forwarding when binaries are on PATH.</product>\n  </products>\n  <boundaries>\n    <boundary>NAUS YAML is NOT GitHub Actions: top-level run: (never jobs:); script: + depends_on: (never commands:/needs:/steps:); ASPM jobs use kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).</boundary>\n    <boundary>aspm-cicd.md / aspm_docs section aspm-cicd describe GitHub Actions only. For KubbiSec native CI use naus_pipeline_docs (naus-aspm-integration, naus-aspm-preset, naus-aspm-matrix, naus-aspm-gate).</boundary>\n    <boundary>Do not mix CLIs: naus for pipelines/runners; aspm for scan upload/parse; kubbisec for AI remediation/chat. Org flag -o uses organization slug.</boundary>\n  </boundaries>\n  <anti-hallucination>\n    <rule>HARD-GATE: never invent CLI flags or full command lines \u2014 call naus_pipeline_docs (naus-commands), aspm_docs (aspm-commands), kubbisec://ai/ai-commands, or security_scanner_playbook first.</rule>\n    <rule>HARD-GATE: never output fenced NAUS pipeline YAML unless naus_validate_yaml (or naus_local_validate) returned ok in this session.</rule>\n    <rule>HARD-GATE: never claim a tool/action succeeded without a successful tool_result in this turn.</rule>\n  </anti-hallucination>\n  <tool-routing>\n    <route intent=\"platform-knowledge\">kubbisec_mcp_knowledge (start of naus/aspm/ai product questions)</route>\n    <route intent=\"naus-docs-yaml\">naus_pipeline_docs \u2192 naus_schema_overview \u2192 naus_validate_yaml</route>\n    <route intent=\"aspm-docs\">aspm_docs; scanners: security_scanners_catalog \u2192 security_scanner_playbook</route>\n    <route intent=\"ai-cli-docs\">kubbisec://ai/* (ai-commands, ai-watch, ai-login)</route>\n    <route intent=\"local-clis\">naus_local_* / aspm_local_* / github_local_* always available in chat (no --extended-context); github uses host-first auth; missing naus/aspm auto-install @kubbisec/naus|aspm</route>\n  </tool-routing>\n</kubbisec-product-knowledge>\n\n<flows>\n  <flow id=\"findings\">Recommended flow: use resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), then list_vulnerabilities with the same repository fields or project_id/projectId. Tools accept snake_case and camelCase interchangeably. To act on a finding, use get_vulnerability (MCP) or get_finding_summary / list_findings (assistant CLI), then generate_remediation_plan and, if you want automation, start_ai_remediation_run followed by get_ai_remediation_run_status/get_ai_remediation_run_logs (run_id or runId). Pass vulnerabilityId (or vulnerability_id) in tool arguments when using kbs chat \u2014 there is no separate set_active_finding tool. kubbisec:// resources expose the same project \u2194 repository mapping.</flow>\n  <flow id=\"naus-cloud\">Naus CI YAML (cloud / kbs chat): (1) naus_pipeline_docs or kubbisec://naus/* (same web markdown), (2) naus_validate_yaml / validate_naus_pipeline_yaml before persisting, (3) set_editor_yaml \u2192 set_pipeline_yaml \u2192 trigger_run \u2192 get_run_logs_excerpt.</flow>\n  <flow id=\"naus-aspm-local\">Naus / ASPM / git on the developer machine (kbs or kubbisec chat; no --extended-context required): naus_local_validate | naus_local_plan | naus_local_run; aspm_local_scan | aspm_local_upload | aspm_local_doctor; github_local_* uses host-first gh/git auth (platform token only as remediation fallback). Missing naus/aspm binaries auto-install @kubbisec/naus and @kubbisec/aspm globally via npm/pnpm (allowlist). Local naus run/plan: default .secrets and .env in cwd, or --env-file / --secret-file; naus_local_run and naus_local_plan accept envFiles/secretFiles arrays. Cloud runners use Env Packs instead. Runner enrollment (naus register / naus start) is documented in naus_pipeline_docs (runner-management) \u2014 do not spawn long-lived daemons from chat.</flow>\n  <flow id=\"kubbisec-scan\">Hybrid local scan: MCP cannot run Pi/Superpowers on the host. (1) resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), or project_id/projectId. (2) trigger_kubbisec_scan with profile quick|full|ci (default full), upload (default true), require_scanners/requireScanners optional. (3) get_kubbisec_scan_status with task_id/taskId until status is done, failed, or cancelled; list_kubbisec_scan_tasks or cancel_kubbisec_scan_task as needed. Requires kubbisec watch or kubbisec scan --watch on a developer machine with repo checkout \u2014 task stays pending until claimed. Findings upload with source=KUBBISEC_AI; filter via list_vulnerabilities source=KUBBISEC_AI. Docs: kubbisec://ai/scan, kubbisec://ai/scan-watch, kubbisec://ai/mcp-login. For immediate local scan without queue, user runs kubbisec scan in terminal (not an MCP tool).</flow>\n</flows>\n\n<intent-matrix>\n| Intent | Cloud (API/MCP) | Local (host CLI) |\n| Validate YAML | naus_validate_yaml | naus_local_validate |\n| Run pipeline | trigger_run | naus_local_run (prefer cloud for KubbiSec CI) |\n| Dependency graph | \u2014 | naus_local_plan |\n| Upload scan report | CI / findings API | aspm_local_upload |\n| ASPM CLI health | \u2014 | aspm_local_doctor |\n| Hybrid AI scan | trigger_kubbisec_scan | kubbisec scan |\n| Scan status | get_kubbisec_scan_status | stdout / .kubbisec/scan/&lt;runId&gt;/ |\n| Filter AI findings | list_vulnerabilities + source=KUBBISEC_AI | \u2014 |\n| MCP auth | hosted OAuth / device login | kubbisec mcp login |\n</intent-matrix>\n\n<rules>\n  <rule id=\"superpowers-mcp\">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. Read kubbisec://ai/* and kubbisec://naus/* for documentation only. Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>\n  <rule id=\"hosted-mcp\">Hosted MCP endpoint: https://mcp.kubbisec.com/mcp (OAuth2 for cloud IDEs). Local stdio: set KUBBISEC_ORGANIZATION_SLUG (preferred, e.g. minha-empresa) and KUBBISEC_API_KEY, or run kubbisec mcp login for device flow. Legacy KUBBISEC_ORGANIZATION_ID remains supported.</rule>\n</rules>\n\n<aspm>ASPM CLI: aspm_docs includes web guides plus docs/aspm/docker-cli (init, login, doctor, scan, upload).</aspm>\n</kubbisec-mcp-instructions>";
-//# sourceMappingURL=mcp-instructions.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/mcp-instructions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-instructions.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/mcp-instructions.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,yBAAyB,goNA6BT,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/mcp-instructions.js

@@ -1,36 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.KUBBISEC_MCP_INSTRUCTIONS = void 0;
-const constants_1 = require("../../mcp/constants");
-const mental_map_1 = require("./mental-map");
-exports.KUBBISEC_MCP_INSTRUCTIONS = `<kubbisec-mcp-instructions>
-${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
-
-<flows>
-  <flow id="findings">Recommended flow: use resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), then list_vulnerabilities with the same repository fields or project_id/projectId. Tools accept snake_case and camelCase interchangeably. To act on a finding, use get_vulnerability (MCP) or get_finding_summary / list_findings (assistant CLI), then generate_remediation_plan and, if you want automation, start_ai_remediation_run followed by get_ai_remediation_run_status/get_ai_remediation_run_logs (run_id or runId). Pass vulnerabilityId (or vulnerability_id) in tool arguments when using kbs chat — there is no separate set_active_finding tool. kubbisec:// resources expose the same project ↔ repository mapping.</flow>
-  <flow id="naus-cloud">Naus CI YAML (cloud / kbs chat): (1) naus_pipeline_docs or kubbisec://naus/* (same web markdown), (2) naus_validate_yaml / validate_naus_pipeline_yaml before persisting, (3) set_editor_yaml → set_pipeline_yaml → trigger_run → get_run_logs_excerpt.</flow>
-  <flow id="naus-aspm-local">Naus / ASPM / git on the developer machine (kbs or kubbisec chat; no --extended-context required): naus_local_validate | naus_local_plan | naus_local_run; aspm_local_scan | aspm_local_upload | aspm_local_doctor; github_local_* uses host-first gh/git auth (platform token only as remediation fallback). Missing naus/aspm binaries auto-install @kubbisec/naus and @kubbisec/aspm globally via npm/pnpm (allowlist). Local naus run/plan: default .secrets and .env in cwd, or --env-file / --secret-file; naus_local_run and naus_local_plan accept envFiles/secretFiles arrays. Cloud runners use Env Packs instead. Runner enrollment (naus register / naus start) is documented in naus_pipeline_docs (runner-management) — do not spawn long-lived daemons from chat.</flow>
-  <flow id="kubbisec-scan">Hybrid local scan: MCP cannot run Pi/Superpowers on the host. (1) resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), or project_id/projectId. (2) trigger_kubbisec_scan with profile quick|full|ci (default full), upload (default true), require_scanners/requireScanners optional. (3) get_kubbisec_scan_status with task_id/taskId until status is done, failed, or cancelled; list_kubbisec_scan_tasks or cancel_kubbisec_scan_task as needed. Requires kubbisec watch or kubbisec scan --watch on a developer machine with repo checkout — task stays pending until claimed. Findings upload with source=KUBBISEC_AI; filter via list_vulnerabilities source=KUBBISEC_AI. Docs: kubbisec://ai/scan, kubbisec://ai/scan-watch, kubbisec://ai/mcp-login. For immediate local scan without queue, user runs kubbisec scan in terminal (not an MCP tool).</flow>
-</flows>
-
-<intent-matrix>
-| Intent | Cloud (API/MCP) | Local (host CLI) |
-| Validate YAML | naus_validate_yaml | naus_local_validate |
-| Run pipeline | trigger_run | naus_local_run (prefer cloud for KubbiSec CI) |
-| Dependency graph | — | naus_local_plan |
-| Upload scan report | CI / findings API | aspm_local_upload |
-| ASPM CLI health | — | aspm_local_doctor |
-| Hybrid AI scan | trigger_kubbisec_scan | kubbisec scan |
-| Scan status | get_kubbisec_scan_status | stdout / .kubbisec/scan/&lt;runId&gt;/ |
-| Filter AI findings | list_vulnerabilities + source=KUBBISEC_AI | — |
-| MCP auth | hosted OAuth / device login | kubbisec mcp login |
-</intent-matrix>
-
-<rules>
-  <rule id="superpowers-mcp">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. Read kubbisec://ai/* and kubbisec://naus/* for documentation only. Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>
-  <rule id="hosted-mcp">Hosted MCP endpoint: ${constants_1.KUBBISEC_HOSTED_MCP_URL} (OAuth2 for cloud IDEs). Local stdio: set KUBBISEC_ORGANIZATION_SLUG (preferred, e.g. minha-empresa) and KUBBISEC_API_KEY, or run kubbisec mcp login for device flow. Legacy KUBBISEC_ORGANIZATION_ID remains supported.</rule>
-</rules>
-
-<aspm>ASPM CLI: aspm_docs includes web guides plus docs/aspm/docker-cli (init, login, doctor, scan, upload).</aspm>
-</kubbisec-mcp-instructions>`;
-//# sourceMappingURL=mcp-instructions.js.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/mcp-instructions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-instructions.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/mcp-instructions.ts"],"names":[],"mappings":";;;AAAA,mDAA8D;AAC9D,6CAA+D;AAElD,QAAA,yBAAyB,GAAG;EACvC,4CAA+B;;;;;;;;;;;;;;;;;;;;;;;;+CAwBc,mCAAuB;;;;6BAIzC,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/mental-map.d.ts

@@ -1,6 +0,0 @@
-/**
- * Always-on AI product knowledge map (pseudo-XML).
- * Keep under ~8k chars. Detail lives in tools / kubbisec:// resources.
- */
-export declare const KUBBISEC_PRODUCT_MENTAL_MAP_XML = "<kubbisec-product-knowledge>\n  <products>\n    <product id=\"naus\" npm=\"@kubbisec/naus\" bin=\"naus\">KubbiSec CI engine: .naus.yml pipelines, runners, validate/plan/run. Cloud CI uses Env Packs; local run uses --env-file / --secret-file.</product>\n    <product id=\"aspm\" npm=\"@kubbisec/aspm\" bin=\"aspm\">Security CLI: parse/upload scanner reports (trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish), coverage, gate.</product>\n    <product id=\"ai\" npm=\"@kubbisec/ai\" bin=\"kubbisec\">CLI hub: login, findings (ls/show), fix/watch/chat, optional naus/aspm forwarding when binaries are on PATH.</product>\n  </products>\n  <boundaries>\n    <boundary>NAUS YAML is NOT GitHub Actions: top-level run: (never jobs:); script: + depends_on: (never commands:/needs:/steps:); ASPM jobs use kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).</boundary>\n    <boundary>aspm-cicd.md / aspm_docs section aspm-cicd describe GitHub Actions only. For KubbiSec native CI use naus_pipeline_docs (naus-aspm-integration, naus-aspm-preset, naus-aspm-matrix, naus-aspm-gate).</boundary>\n    <boundary>Do not mix CLIs: naus for pipelines/runners; aspm for scan upload/parse; kubbisec for AI remediation/chat. Org flag -o uses organization slug.</boundary>\n  </boundaries>\n  <anti-hallucination>\n    <rule>HARD-GATE: never invent CLI flags or full command lines \u2014 call naus_pipeline_docs (naus-commands), aspm_docs (aspm-commands), kubbisec://ai/ai-commands, or security_scanner_playbook first.</rule>\n    <rule>HARD-GATE: never output fenced NAUS pipeline YAML unless naus_validate_yaml (or naus_local_validate) returned ok in this session.</rule>\n    <rule>HARD-GATE: never claim a tool/action succeeded without a successful tool_result in this turn.</rule>\n  </anti-hallucination>\n  <tool-routing>\n    <route intent=\"platform-knowledge\">kubbisec_mcp_knowledge (start of naus/aspm/ai product questions)</route>\n    <route intent=\"naus-docs-yaml\">naus_pipeline_docs \u2192 naus_schema_overview \u2192 naus_validate_yaml</route>\n    <route intent=\"aspm-docs\">aspm_docs; scanners: security_scanners_catalog \u2192 security_scanner_playbook</route>\n    <route intent=\"ai-cli-docs\">kubbisec://ai/* (ai-commands, ai-watch, ai-login)</route>\n    <route intent=\"local-clis\">naus_local_* / aspm_local_* / github_local_* always available in chat (no --extended-context); github uses host-first auth; missing naus/aspm auto-install @kubbisec/naus|aspm</route>\n  </tool-routing>\n</kubbisec-product-knowledge>";
-//# sourceMappingURL=mental-map.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/mental-map.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mental-map.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/mental-map.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,+BAA+B,++EAuBd,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/mental-map.js

@@ -1,32 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.KUBBISEC_PRODUCT_MENTAL_MAP_XML = void 0;
-/**
- * Always-on AI product knowledge map (pseudo-XML).
- * Keep under ~8k chars. Detail lives in tools / kubbisec:// resources.
- */
-exports.KUBBISEC_PRODUCT_MENTAL_MAP_XML = `<kubbisec-product-knowledge>
-  <products>
-    <product id="naus" npm="@kubbisec/naus" bin="naus">KubbiSec CI engine: .naus.yml pipelines, runners, validate/plan/run. Cloud CI uses Env Packs; local run uses --env-file / --secret-file.</product>
-    <product id="aspm" npm="@kubbisec/aspm" bin="aspm">Security CLI: parse/upload scanner reports (trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish), coverage, gate.</product>
-    <product id="ai" npm="@kubbisec/ai" bin="kubbisec">CLI hub: login, findings (ls/show), fix/watch/chat, optional naus/aspm forwarding when binaries are on PATH.</product>
-  </products>
-  <boundaries>
-    <boundary>NAUS YAML is NOT GitHub Actions: top-level run: (never jobs:); script: + depends_on: (never commands:/needs:/steps:); ASPM jobs use kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).</boundary>
-    <boundary>aspm-cicd.md / aspm_docs section aspm-cicd describe GitHub Actions only. For KubbiSec native CI use naus_pipeline_docs (naus-aspm-integration, naus-aspm-preset, naus-aspm-matrix, naus-aspm-gate).</boundary>
-    <boundary>Do not mix CLIs: naus for pipelines/runners; aspm for scan upload/parse; kubbisec for AI remediation/chat. Org flag -o uses organization slug.</boundary>
-  </boundaries>
-  <anti-hallucination>
-    <rule>HARD-GATE: never invent CLI flags or full command lines — call naus_pipeline_docs (naus-commands), aspm_docs (aspm-commands), kubbisec://ai/ai-commands, or security_scanner_playbook first.</rule>
-    <rule>HARD-GATE: never output fenced NAUS pipeline YAML unless naus_validate_yaml (or naus_local_validate) returned ok in this session.</rule>
-    <rule>HARD-GATE: never claim a tool/action succeeded without a successful tool_result in this turn.</rule>
-  </anti-hallucination>
-  <tool-routing>
-    <route intent="platform-knowledge">kubbisec_mcp_knowledge (start of naus/aspm/ai product questions)</route>
-    <route intent="naus-docs-yaml">naus_pipeline_docs → naus_schema_overview → naus_validate_yaml</route>
-    <route intent="aspm-docs">aspm_docs; scanners: security_scanners_catalog → security_scanner_playbook</route>
-    <route intent="ai-cli-docs">kubbisec://ai/* (ai-commands, ai-watch, ai-login)</route>
-    <route intent="local-clis">naus_local_* / aspm_local_* / github_local_* always available in chat (no --extended-context); github uses host-first auth; missing naus/aspm auto-install @kubbisec/naus|aspm</route>
-  </tool-routing>
-</kubbisec-product-knowledge>`;
-//# sourceMappingURL=mental-map.js.map

package/bundled/node_modules/@aspm/shared/dist/ai/product-knowledge/mental-map.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mental-map.js","sourceRoot":"","sources":["../../../src/ai/product-knowledge/mental-map.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACU,QAAA,+BAA+B,GAAG;;;;;;;;;;;;;;;;;;;;;;;8BAuBjB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/api-key/api-key-scope-groups.d.ts

@@ -1,12 +0,0 @@
-import type { KubbisecPermission } from "../rbac/kubbisec-permissions";
-export type ApiKeyScopeGroup = {
-    id: string;
-    label: string;
-    description?: string;
-    permissions: KubbisecPermission[];
-};
-/** Org API key scopes — GitHub PAT-style groups (excludes platform.*). */
-export declare const ORG_API_KEY_SCOPE_GROUPS: ApiKeyScopeGroup[];
-export declare const ORG_API_KEY_SELECTABLE_PERMISSIONS: KubbisecPermission[];
-export declare function apiKeyPermissionLabel(permission: KubbisecPermission): string;
-//# sourceMappingURL=api-key-scope-groups.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/api-key/api-key-scope-groups.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-key-scope-groups.d.ts","sourceRoot":"","sources":["../../src/api-key/api-key-scope-groups.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,EAiFtD,CAAC;AAEF,eAAO,MAAM,kCAAkC,EAAE,kBAAkB,EACH,CAAC;AAEjE,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAE5E"}

package/bundled/node_modules/@aspm/shared/dist/api-key/api-key-scope-groups.js

@@ -1,93 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ORG_API_KEY_SELECTABLE_PERMISSIONS = exports.ORG_API_KEY_SCOPE_GROUPS = void 0;
-exports.apiKeyPermissionLabel = apiKeyPermissionLabel;
-const kubbisec_permission_descriptions_1 = require("../rbac/kubbisec-permission-descriptions");
-/** Org API key scopes — GitHub PAT-style groups (excludes platform.*). */
-exports.ORG_API_KEY_SCOPE_GROUPS = [
-    {
-        id: "finding",
-        label: "Findings",
-        description: "Read and manage security findings",
-        permissions: [
-            "kbsc.finding.read",
-            "kbsc.finding.triage.update",
-            "kbsc.finding.remediation.manage",
-            "kbsc.finding.remediation.auto-apply",
-            "kbsc.finding.export",
-        ],
-    },
-    {
-        id: "ingest",
-        label: "Ingest & scan",
-        description: "Upload scanner reports and KubbiSec hybrid scan",
-        permissions: [
-            "kbsc.ingest.report.create",
-            "kbsc.ingest.coverage.create",
-            "kbsc.ingest.bundle.create",
-            "kbsc.scan.read",
-            "kbsc.scan.trigger",
-        ],
-    },
-    {
-        id: "ai",
-        label: "AI assistant",
-        description: "CLI proxy, autopilot and in-app assistant",
-        permissions: [
-            "kbsc.ai.assistant.use",
-            "kbsc.project.ai-autopilot.run",
-            "kbsc.project.ai-autopilot.manage",
-            "kbsc.ai.usage.read",
-        ],
-    },
-    {
-        id: "ci",
-        label: "CI / Naus",
-        description: "Pipelines, runners and env packs",
-        permissions: [
-            "kbsc.ci.read",
-            "kbsc.ci.pipeline.manage",
-            "kbsc.ci.pipeline.run",
-            "kbsc.ci.privileged.run",
-            "kbsc.ci.runner.manage",
-            "kbsc.ci.envpack.manage",
-            "kbsc.ci.bootstrap.manage",
-        ],
-    },
-    {
-        id: "integration",
-        label: "Integrations",
-        description: "GitHub, Jira, PR/issue automation",
-        permissions: [
-            "kbsc.integration.read",
-            "kbsc.integration.connect",
-            "kbsc.integration.issue.create",
-            "kbsc.integration.pr.create",
-            "kbsc.integration.pr.merge",
-        ],
-    },
-    {
-        id: "asset",
-        label: "Projects & assets",
-        permissions: [
-            "kbsc.asset.project.read",
-            "kbsc.asset.project.create",
-            "kbsc.asset.project.update",
-        ],
-    },
-    {
-        id: "supply",
-        label: "Supply chain",
-        permissions: ["kbsc.supply.read", "kbsc.supply.scan.trigger"],
-    },
-    {
-        id: "governance",
-        label: "Governance",
-        permissions: ["kbsc.governance.read", "kbsc.governance.coverage.manage"],
-    },
-];
-exports.ORG_API_KEY_SELECTABLE_PERMISSIONS = exports.ORG_API_KEY_SCOPE_GROUPS.flatMap((group) => group.permissions);
-function apiKeyPermissionLabel(permission) {
-    return kubbisec_permission_descriptions_1.KUBBISEC_PERMISSION_DESCRIPTIONS[permission] ?? permission;
-}
-//# sourceMappingURL=api-key-scope-groups.js.map

package/bundled/node_modules/@aspm/shared/dist/api-key/api-key-scope-groups.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-key-scope-groups.js","sourceRoot":"","sources":["../../src/api-key/api-key-scope-groups.ts"],"names":[],"mappings":";;;AAiGA,sDAEC;AAnGD,+FAA4F;AAU5F,0EAA0E;AAC7D,QAAA,wBAAwB,GAAuB;IAC1D;QACE,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,mCAAmC;QAChD,WAAW,EAAE;YACX,mBAAmB;YACnB,4BAA4B;YAC5B,iCAAiC;YACjC,qCAAqC;YACrC,qBAAqB;SACtB;KACF;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,iDAAiD;QAC9D,WAAW,EAAE;YACX,2BAA2B;YAC3B,6BAA6B;YAC7B,2BAA2B;YAC3B,gBAAgB;YAChB,mBAAmB;SACpB;KACF;IACD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,2CAA2C;QACxD,WAAW,EAAE;YACX,uBAAuB;YACvB,+BAA+B;YAC/B,kCAAkC;YAClC,oBAAoB;SACrB;KACF;IACD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,kCAAkC;QAC/C,WAAW,EAAE;YACX,cAAc;YACd,yBAAyB;YACzB,sBAAsB;YACtB,wBAAwB;YACxB,uBAAuB;YACvB,wBAAwB;YACxB,0BAA0B;SAC3B;KACF;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,mCAAmC;QAChD,WAAW,EAAE;YACX,uBAAuB;YACvB,0BAA0B;YAC1B,+BAA+B;YAC/B,4BAA4B;YAC5B,2BAA2B;SAC5B;KACF;IACD;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE;YACX,yBAAyB;YACzB,2BAA2B;YAC3B,2BAA2B;SAC5B;KACF;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;KAC9D;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,CAAC,sBAAsB,EAAE,iCAAiC,CAAC;KACzE;CACF,CAAC;AAEW,QAAA,kCAAkC,GAC7C,gCAAwB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAEjE,SAAgB,qBAAqB,CAAC,UAA8B;IAClE,OAAO,mEAAgC,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC;AACpE,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/api-key/api-key-scope-presets.d.ts

@@ -1,13 +0,0 @@
-import type { KubbisecPermission } from "../rbac/kubbisec-permissions";
-/** Current API key authorization model (GitHub PAT-style scopes). */
-export declare const API_KEY_SCOPES_VERSION = 2;
-export declare const KUBBISEC_API_KEY_DEFAULT_PREFIX = "kbsc_";
-export declare const API_KEY_SCOPE_PRESET_IDS: readonly ["cli-dev", "ci-ingest", "naus-runner", "aspm-ingest", "assistant-chat"];
-export type ApiKeyScopePresetId = (typeof API_KEY_SCOPE_PRESET_IDS)[number];
-export declare const API_KEY_SCOPE_PRESET_LABELS: Record<ApiKeyScopePresetId, string>;
-export declare const API_KEY_SCOPE_PRESETS: Record<ApiKeyScopePresetId, readonly KubbisecPermission[]>;
-export declare function isApiKeyScopePresetId(value: string): value is ApiKeyScopePresetId;
-export declare function resolveApiKeyScopePreset(id: ApiKeyScopePresetId): KubbisecPermission[];
-export declare function permissionsToApiKeyStatements(permissions: KubbisecPermission[]): Record<string, KubbisecPermission[]>;
-export declare function normalizeApiKeyScopeSelection(permissions: KubbisecPermission[]): KubbisecPermission[];
-//# sourceMappingURL=api-key-scope-presets.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/api-key/api-key-scope-presets.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-key-scope-presets.d.ts","sourceRoot":"","sources":["../../src/api-key/api-key-scope-presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,eAAO,MAAM,+BAA+B,UAAU,CAAC;AAEvD,eAAO,MAAM,wBAAwB,mFAM3B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAkC5E,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAM3E,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,mBAAmB,EAAE,SAAS,kBAAkB,EAAE,CAM5F,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,mBAAmB,CAEjF;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,mBAAmB,GAAG,kBAAkB,EAAE,CAEtF;AAED,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,kBAAkB,EAAE,GAChC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAEtC;AAED,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,kBAAkB,EAAE,GAChC,kBAAkB,EAAE,CAStB"}