@kubbisec/ai-linux-x64 0.1.25 → 0.1.28

package/bundled/node_modules/@kubbisec/chat-memory/dist/index.js

@@ -0,0 +1,85 @@
+export { addChatMemoryTurn, forgetAllChatMemory, forgetChatMemory, getMemoryStatus, listChatMemories, resetChatMemoryStoreForTests, searchChatMemory, } from "./client.js";
+export { envFlagOn, isMemoryEnabled, isSkillRouterEnabled, parseChatMode, resolveFeatureFlags, } from "./feature-flags.js";
+export { MEMORY_BLOCKLIST, sanitizeMemoryText } from "./sanitizer.js";
+export { resolveMemoryDir } from "./storage-paths.js";
+export { MEMORY_ALLOWED_TOPICS } from "./types.js";
+export const MEMORY_INJECT_HEADER = "## KubbiSec — memórias relevantes\n";
+export function buildMemoryInjectBlock(memories, maxBytes = 2048) {
+    if (memories.length === 0)
+        return "";
+    const lines = memories.map((m) => `- ${m.text.trim()}`);
+    let block = `${MEMORY_INJECT_HEADER}${lines.join("\n")}`;
+    while (Buffer.byteLength(block, "utf8") > maxBytes && lines.length > 1) {
+        lines.shift();
+        block = `${MEMORY_INJECT_HEADER}${lines.join("\n")}\n…`;
+    }
+    return block;
+}
+function findTokenAfterKeyword(text, keyword, allowed) {
+    const lower = text.toLowerCase();
+    const key = keyword.toLowerCase();
+    const idx = lower.indexOf(key);
+    if (idx === -1)
+        return null;
+    let i = idx + key.length;
+    while (i < text.length && /\s/.test(text[i] ?? ""))
+        i += 1;
+    const rest = text.slice(i);
+    for (const value of allowed) {
+        if (rest.toLowerCase().startsWith(value.toLowerCase()))
+            return value;
+    }
+    return null;
+}
+function findProjectIdHint(text) {
+    const lower = text.toLowerCase();
+    const marker = "projectid";
+    const idx = lower.indexOf(marker);
+    if (idx === -1)
+        return null;
+    let i = idx + marker.length;
+    while (i < text.length && (text[i] === " " || text[i] === "\t"))
+        i += 1;
+    if (text[i] === ":")
+        i += 1;
+    while (i < text.length && (text[i] === " " || text[i] === "\t"))
+        i += 1;
+    let token = "";
+    while (i < text.length) {
+        const ch = text[i] ?? "";
+        const code = ch.charCodeAt(0);
+        const ok = (code >= 48 && code <= 57) ||
+            (code >= 65 && code <= 90) ||
+            (code >= 97 && code <= 122) ||
+            ch === "-" ||
+            ch === "_";
+        if (!ok)
+            break;
+        token += ch;
+        i += 1;
+    }
+    return token ? `projectId ${token}` : null;
+}
+export function extractRememberCandidates(userMessage, assistantMessage) {
+    const candidates = [];
+    const combined = `${userMessage}\n${assistantMessage}`;
+    const severity = findTokenAfterKeyword(combined, "severity", new Set(["HIGH", "CRITICAL", "MEDIUM", "LOW"]));
+    if (severity)
+        candidates.push(`severity ${severity}`);
+    const severityMin = findTokenAfterKeyword(combined, "severityMin", new Set(["HIGH", "CRITICAL", "MEDIUM", "LOW"]));
+    if (severityMin)
+        candidates.push(`severityMin ${severityMin}`);
+    const remediationMode = findTokenAfterKeyword(combined, "remediationMode", new Set(["auto", "guided", "patch_only"]));
+    if (remediationMode)
+        candidates.push(`remediationMode ${remediationMode}`);
+    const projectId = findProjectIdHint(combined);
+    if (projectId)
+        candidates.push(projectId);
+    const lower = combined.toLowerCase();
+    if (lower.includes("sempre auto"))
+        candidates.push("sempre auto");
+    if (lower.includes("prefer high"))
+        candidates.push("prefer HIGH");
+    return [...new Set(candidates)].slice(0, 3);
+}
+//# sourceMappingURL=index.js.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAEhB,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,SAAS,EACT,eAAe,EACf,oBAAoB,EAEpB,aAAa,EACb,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AAE1E,MAAM,UAAU,sBAAsB,CAAC,QAAiC,EAAE,QAAQ,GAAG,IAAI;IACvF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,GAAG,GAAG,oBAAoB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAEzD,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,KAAK,GAAG,GAAG,oBAAoB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IAC1D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,OAAe,EAAE,OAAoB;IAChF,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACzB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,WAAW,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5B,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IACxE,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,EAAE,GACN,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YAC1B,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YAC1B,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC;YAC3B,EAAE,KAAK,GAAG;YACV,EAAE,KAAK,GAAG,CAAC;QACb,IAAI,CAAC,EAAE;YAAE,MAAM;QACf,KAAK,IAAI,EAAE,CAAC;QACZ,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,WAAmB,EAAE,gBAAwB;IACrF,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,GAAG,WAAW,KAAK,gBAAgB,EAAE,CAAC;IAEvD,MAAM,QAAQ,GAAG,qBAAqB,CACpC,QAAQ,EACR,UAAU,EACV,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAC/C,CAAC;IACF,IAAI,QAAQ;QAAE,UAAU,CAAC,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC;IAEtD,MAAM,WAAW,GAAG,qBAAqB,CACvC,QAAQ,EACR,aAAa,EACb,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAC/C,CAAC;IACF,IAAI,WAAW;QAAE,UAAU,CAAC,IAAI,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;IAE/D,MAAM,eAAe,GAAG,qBAAqB,CAC3C,QAAQ,EACR,iBAAiB,EACjB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAC1C,CAAC;IACF,IAAI,eAAe;QAAE,UAAU,CAAC,IAAI,CAAC,mBAAmB,eAAe,EAAE,CAAC,CAAC;IAE3E,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,SAAS;QAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAElE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/sanitizer.d.ts

@@ -0,0 +1,4 @@
+import type { SanitizeResult } from "./types.js";
+export declare const MEMORY_BLOCKLIST: RegExp[];
+export declare function sanitizeMemoryText(input: string): SanitizeResult;
+//# sourceMappingURL=sanitizer.d.ts.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.d.ts","sourceRoot":"","sources":["../src/sanitizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,eAAO,MAAM,gBAAgB,EAAE,MAAM,EAOpC,CAAC;AA4CF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CA8ChE"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/sanitizer.js

@@ -0,0 +1,89 @@
+export const MEMORY_BLOCKLIST = [
+    /\b(sk|pk)[_-]?live[_-]?[a-zA-Z0-9]{10,}\b/i,
+    /-----BEGIN (RSA |EC )?PRIVATE KEY-----/,
+    /Bearer\s+[A-Za-z0-9\-._~+/]+=*/,
+    /\b(AWS|GITHUB|OPENAI)_\w+KEY\s*=\s*\S+/i,
+    /\bghp_[a-zA-Z0-9]{20,}\b/,
+    /\bsk-[a-zA-Z0-9]{20,}\b/,
+];
+const MAX_MEMORY_LENGTH = 512;
+const REDACTION_REJECT_RATIO = 0.3;
+const PREFERENCE_PHRASES = [
+    /\bsempre auto\b/i,
+    /\bprefer HIGH\b/i,
+    /\bprefer high\b/i,
+    /\bseverity (HIGH|CRITICAL|MEDIUM|LOW)\b/i,
+    /\bremediationMode\b/i,
+    /\bnausConstraints\b/i,
+    /\blanguagePreference\b/i,
+    /\bprojectId\b/i,
+    /\bseverityMin\b/i,
+];
+const UUID_PATTERN = /\b[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\b/i;
+function matchesAllowlist(input) {
+    if (PREFERENCE_PHRASES.some((p) => p.test(input)))
+        return true;
+    if (UUID_PATTERN.test(input))
+        return true;
+    return false;
+}
+function applyBlocklist(input) {
+    let text = input;
+    let redactionCount = 0;
+    for (const pattern of MEMORY_BLOCKLIST) {
+        try {
+            const matches = text.match(new RegExp(pattern.source, `${pattern.flags}g`));
+            if (matches) {
+                redactionCount += matches.length;
+                text = text.replace(new RegExp(pattern.source, `${pattern.flags}g`), "[REDACTED]");
+            }
+        }
+        catch {
+            return { text: input, redactionCount: input.length };
+        }
+    }
+    return { text, redactionCount };
+}
+export function sanitizeMemoryText(input) {
+    try {
+        const trimmed = input.trim();
+        if (!trimmed) {
+            return { text: "", redacted: false, redactionCount: 0, rejected: true, reason: "empty" };
+        }
+        const { text: redactedText, redactionCount } = applyBlocklist(trimmed);
+        const originalLen = trimmed.length;
+        const redacted = redactionCount > 0;
+        if (originalLen > 0 && redactionCount / originalLen > REDACTION_REJECT_RATIO) {
+            return {
+                text: redactedText.slice(0, MAX_MEMORY_LENGTH),
+                redacted: true,
+                redactionCount,
+                rejected: true,
+                reason: "high_redaction_ratio",
+            };
+        }
+        if (!matchesAllowlist(redactedText)) {
+            return {
+                text: redactedText.slice(0, MAX_MEMORY_LENGTH),
+                redacted,
+                redactionCount,
+                rejected: true,
+                reason: "allowlist_fail",
+            };
+        }
+        const capped = redactedText.length > MAX_MEMORY_LENGTH
+            ? redactedText.slice(0, MAX_MEMORY_LENGTH)
+            : redactedText;
+        return { text: capped, redacted, redactionCount, rejected: false };
+    }
+    catch {
+        return {
+            text: "",
+            redacted: false,
+            redactionCount: 0,
+            rejected: true,
+            reason: "sanitize_error",
+        };
+    }
+}
+//# sourceMappingURL=sanitizer.js.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.js","sourceRoot":"","sources":["../src/sanitizer.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAAa;IACxC,4CAA4C;IAC5C,wCAAwC;IACxC,gCAAgC;IAChC,yCAAyC;IACzC,0BAA0B;IAC1B,yBAAyB;CAC1B,CAAC;AAEF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,MAAM,kBAAkB,GAAG;IACzB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,0CAA0C;IAC1C,sBAAsB;IACtB,sBAAsB;IACtB,yBAAyB;IACzB,gBAAgB;IAChB,kBAAkB;CACnB,CAAC;AAEF,MAAM,YAAY,GAAG,8EAA8E,CAAC;AAEpG,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC5E,IAAI,OAAO,EAAE,CAAC;gBACZ,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;gBACjC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC3F,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;QACnC,MAAM,QAAQ,GAAG,cAAc,GAAG,CAAC,CAAC;QAEpC,IAAI,WAAW,GAAG,CAAC,IAAI,cAAc,GAAG,WAAW,GAAG,sBAAsB,EAAE,CAAC;YAC7E,OAAO;gBACL,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC;gBAC9C,QAAQ,EAAE,IAAI;gBACd,cAAc;gBACd,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,sBAAsB;aAC/B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC;gBAC9C,QAAQ;gBACR,cAAc;gBACd,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,gBAAgB;aACzB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GACV,YAAY,CAAC,MAAM,GAAG,iBAAiB;YACrC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC;YAC1C,CAAC,CAAC,YAAY,CAAC;QAEnB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,KAAK;YACf,cAAc,EAAE,CAAC;YACjB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/storage-paths.d.ts

@@ -0,0 +1,2 @@
+export declare function resolveMemoryDir(env?: NodeJS.ProcessEnv): string;
+//# sourceMappingURL=storage-paths.d.ts.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/storage-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-paths.d.ts","sourceRoot":"","sources":["../src/storage-paths.ts"],"names":[],"mappings":"AAKA,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAM7E"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/storage-paths.js

@@ -0,0 +1,11 @@
+import * as os from "node:os";
+import * as path from "node:path";
+import { getMemoryDir } from "@kubbisec/home";
+export function resolveMemoryDir(env = process.env) {
+    const fromEnv = env.KUBBISEC_MEMORY_DIR?.trim();
+    if (fromEnv) {
+        return fromEnv.startsWith("~") ? path.join(os.homedir(), fromEnv.slice(1)) : fromEnv;
+    }
+    return getMemoryDir();
+}
+//# sourceMappingURL=storage-paths.js.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/storage-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-paths.js","sourceRoot":"","sources":["../src/storage-paths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,OAAO,GAAG,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACvF,CAAC;IACD,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/types.d.ts

@@ -0,0 +1,24 @@
+export type MemoryScope = {
+    userId: string;
+    organizationId: string;
+    projectId?: string;
+    sessionId?: string;
+    agentId?: string;
+};
+export type MemoryRecord = {
+    id: string;
+    text: string;
+    scope: MemoryScope;
+    createdAt: string;
+    metadata?: Record<string, string>;
+};
+export type SanitizeResult = {
+    text: string;
+    redacted: boolean;
+    redactionCount: number;
+    rejected: boolean;
+    reason?: string;
+};
+export declare const MEMORY_ALLOWED_TOPICS: readonly ["projectId", "severityMin", "remediationMode", "nausConstraints", "extendedContext", "languagePreference"];
+export type MemoryAllowedTopic = (typeof MEMORY_ALLOWED_TOPICS)[number];
+//# sourceMappingURL=types.d.ts.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,eAAO,MAAM,qBAAqB,sHAOxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/types.js

@@ -0,0 +1,9 @@
+export const MEMORY_ALLOWED_TOPICS = [
+    "projectId",
+    "severityMin",
+    "remediationMode",
+    "nausConstraints",
+    "extendedContext",
+    "languagePreference",
+];
+//# sourceMappingURL=types.js.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAwBA,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,WAAW;IACX,aAAa;IACb,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,oBAAoB;CACZ,CAAC"}

package/bundled/node_modules/@kubbisec/chat-memory/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@kubbisec/chat-memory",
+  "version": "0.1.0",
+  "private": true,
+  "description": "KubbiSec chat memory — mem0 wrapper with in-memory fallback",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "check-types": "tsc --noEmit",
+    "test": "vitest",
+    "test:run": "vitest run"
+  },
+  "optionalDependencies": {
+    "mem0ai": "^3.1.1"
+  },
+  "dependencies": {
+    "@kubbisec/home": "workspace:*"
+  },
+  "devDependencies": {
+    "@types/node": "^26.1.1",
+    "typescript": "~5.9.3",
+    "vitest": "^4.1.10"
+  }
+}

package/bundled/node_modules/@kubbisec/home/dist/api-url.d.ts

@@ -0,0 +1,8 @@
+/** Production KubbiSec API base URL (no trailing slash). */
+export declare const DEFAULT_KUBBISEC_API_URL = "https://api.kubbisec.com";
+/**
+ * Resolves API base URL: explicit override → env → cloud default.
+ * Env override is for development/self-hosted only; end-user CLIs do not expose URL flags.
+ */
+export declare function resolveKubbisecApiUrl(override?: string): string;
+//# sourceMappingURL=api-url.d.ts.map

package/bundled/node_modules/@kubbisec/home/dist/api-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-url.d.ts","sourceRoot":"","sources":["../src/api-url.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAUnE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ/D"}

package/bundled/node_modules/@kubbisec/home/dist/api-url.js

@@ -0,0 +1,25 @@
+/** Production KubbiSec API base URL (no trailing slash). */
+export const DEFAULT_KUBBISEC_API_URL = "https://api.kubbisec.com";
+/** Remove trailing `/` without regex (matches @kubbisec/shared sonar-safe-string). */
+function trimTrailingSlash(url) {
+    if (!url)
+        return url;
+    let end = url.length;
+    while (end > 0 && url.charCodeAt(end - 1) === 47)
+        end -= 1;
+    return end === url.length ? url : url.slice(0, end);
+}
+/**
+ * Resolves API base URL: explicit override → env → cloud default.
+ * Env override is for development/self-hosted only; end-user CLIs do not expose URL flags.
+ */
+export function resolveKubbisecApiUrl(override) {
+    const fromOverride = override?.trim();
+    if (fromOverride)
+        return trimTrailingSlash(fromOverride);
+    const fromEnv = process.env.KUBBISEC_API_URL?.trim() || process.env.ASPM_API_URL?.trim() || "";
+    if (fromEnv)
+        return trimTrailingSlash(fromEnv);
+    return DEFAULT_KUBBISEC_API_URL;
+}
+//# sourceMappingURL=api-url.js.map

package/bundled/node_modules/@kubbisec/home/dist/api-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-url.js","sourceRoot":"","sources":["../src/api-url.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAEnE,sFAAsF;AACtF,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,OAAO,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,IAAI,CAAC,CAAC;IAC3D,OAAO,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAiB;IACrD,MAAM,YAAY,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,YAAY;QAAE,OAAO,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/F,IAAI,OAAO;QAAE,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE/C,OAAO,wBAAwB,CAAC;AAClC,CAAC"}

package/bundled/node_modules/@kubbisec/home/dist/cli-auth.types.d.ts

@@ -0,0 +1,17 @@
+export type CliAuthOrganization = {
+    id: string;
+    name: string;
+    slug: string;
+};
+export type CliAuthContext = {
+    defaultOrganizationId: string;
+    organizations: CliAuthOrganization[];
+    apiKeyScope: "organization" | "user";
+};
+export declare function matchCliOrganization(organizations: CliAuthOrganization[], ref: string): CliAuthOrganization | undefined;
+/**
+ * Picks organization for CLI login when no interactive picker is needed.
+ * Returns null when the caller must prompt (multiple orgs, no --org flag).
+ */
+export declare function pickLoginOrganization(context: CliAuthContext, orgFlag?: string): string | null;
+//# sourceMappingURL=cli-auth.types.d.ts.map

package/bundled/node_modules/@kubbisec/home/dist/cli-auth.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-auth.types.d.ts","sourceRoot":"","sources":["../src/cli-auth.types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,aAAa,EAAE,mBAAmB,EAAE,CAAC;IACrC,WAAW,EAAE,cAAc,GAAG,MAAM,CAAC;CACtC,CAAC;AAEF,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,mBAAmB,EAAE,EACpC,GAAG,EAAE,MAAM,GACV,mBAAmB,GAAG,SAAS,CASjC;AAMD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqB9F"}

package/bundled/node_modules/@kubbisec/home/dist/cli-auth.types.js

@@ -0,0 +1,35 @@
+export function matchCliOrganization(organizations, ref) {
+    const trimmed = ref.trim();
+    if (!trimmed)
+        return undefined;
+    const byId = organizations.find((org) => org.id === trimmed);
+    if (byId)
+        return byId;
+    const normalized = trimmed.toLowerCase();
+    return organizations.find((org) => org.slug.toLowerCase() === normalized);
+}
+function formatOrganizationChoices(organizations) {
+    return organizations.map((o) => `${o.name} (${o.slug})`).join(", ");
+}
+/**
+ * Picks organization for CLI login when no interactive picker is needed.
+ * Returns null when the caller must prompt (multiple orgs, no --org flag).
+ */
+export function pickLoginOrganization(context, orgFlag) {
+    const trimmedFlag = orgFlag?.trim();
+    if (trimmedFlag) {
+        const match = matchCliOrganization(context.organizations, trimmedFlag);
+        if (!match) {
+            throw new Error(`Organization "${trimmedFlag}" is not available for this API key (use organization ID or slug). Available: ${formatOrganizationChoices(context.organizations)}`);
+        }
+        return match.id;
+    }
+    if (context.organizations.length === 0) {
+        throw new Error("No workspaces found for this API key.");
+    }
+    if (context.organizations.length === 1) {
+        return context.organizations[0].id;
+    }
+    return null;
+}
+//# sourceMappingURL=cli-auth.types.js.map

package/bundled/node_modules/@kubbisec/home/dist/cli-auth.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-auth.types.js","sourceRoot":"","sources":["../src/cli-auth.types.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,oBAAoB,CAClC,aAAoC,EACpC,GAAW;IAEX,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAC7D,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,yBAAyB,CAAC,aAAoC;IACrE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAuB,EAAE,OAAgB;IAC7E,MAAM,WAAW,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,iBAAiB,WAAW,iFAAiF,yBAAyB,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAChK,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/bundled/node_modules/@kubbisec/home/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { DEFAULT_KUBBISEC_API_URL, resolveKubbisecApiUrl } from "./api-url.js";
+export { type CliAuthContext, type CliAuthOrganization, matchCliOrganization, pickLoginOrganization, } from "./cli-auth.types.js";
+export { migrateLegacyKubbisecPaths, resetMigrationGuardForTests } from "./migrate.js";
+export { getAiStateDir, getAspmConfigPath, getAspmStateDir, getKbsConfigPath, getKubbisecConfigPath, getKubbisecHomeDir, getMemoryDir, getNausStateDir, getSkillOptBaseDir, getTelemetryDir, } from "./paths.js";
+//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@kubbisec/home/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,eAAe,GAChB,MAAM,YAAY,CAAC"}

package/bundled/node_modules/@kubbisec/home/dist/index.js

@@ -0,0 +1,5 @@
+export { DEFAULT_KUBBISEC_API_URL, resolveKubbisecApiUrl } from "./api-url.js";
+export { matchCliOrganization, pickLoginOrganization, } from "./cli-auth.types.js";
+export { migrateLegacyKubbisecPaths, resetMigrationGuardForTests } from "./migrate.js";
+export { getAiStateDir, getAspmConfigPath, getAspmStateDir, getKbsConfigPath, getKubbisecConfigPath, getKubbisecHomeDir, getMemoryDir, getNausStateDir, getSkillOptBaseDir, getTelemetryDir, } from "./paths.js";
+//# sourceMappingURL=index.js.map

package/bundled/node_modules/@kubbisec/home/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,EAGL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,eAAe,GAChB,MAAM,YAAY,CAAC"}

package/bundled/node_modules/@kubbisec/home/dist/migrate.d.ts

@@ -0,0 +1,10 @@
+/**
+ * One-time idempotent migration from legacy paths:
+ * - `~/.naus` → `~/.kubbisec/naus`
+ * - `~/.kubbisec/config.json` → `~/.kubbisec/aspm/config.json`
+ * - AI artifacts at `~/.kubbisec/*` → `~/.kubbisec/ai/*`
+ */
+export declare function migrateLegacyKubbisecPaths(): void;
+/** Test helper — reset in-process migration guard. */
+export declare function resetMigrationGuardForTests(): void;
+//# sourceMappingURL=migrate.d.ts.map

package/bundled/node_modules/@kubbisec/home/dist/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../src/migrate.ts"],"names":[],"mappings":"AA6DA;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAsCjD;AAED,sDAAsD;AACtD,wBAAgB,2BAA2B,IAAI,IAAI,CAElD"}

package/bundled/node_modules/@kubbisec/home/dist/migrate.js

@@ -0,0 +1,107 @@
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { getAiStateDir, getAspmConfigPath, getKubbisecHomeDir, getNausStateDir } from "./paths.js";
+const AI_ROOT_ENTRIES = [
+    "kubbisec.json",
+    "kbs.json",
+    "daemon",
+    "memory",
+    "skill-opt",
+    "telemetry",
+    "tools",
+];
+function pathExists(p) {
+    try {
+        fs.accessSync(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function dirIsEmpty(dir) {
+    if (!pathExists(dir))
+        return true;
+    try {
+        return fs.readdirSync(dir).length === 0;
+    }
+    catch {
+        return true;
+    }
+}
+function ensureDir(dir) {
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+}
+/** Move `src` → `dest` when dest is absent; skip if src missing. */
+function moveIfAbsent(src, dest) {
+    if (!pathExists(src))
+        return false;
+    if (pathExists(dest))
+        return false;
+    ensureDir(path.dirname(dest));
+    fs.renameSync(src, dest);
+    return true;
+}
+/** Move directory when dest absent or empty. */
+function moveDirIfAbsent(src, dest) {
+    if (!pathExists(src))
+        return false;
+    if (pathExists(dest) && !dirIsEmpty(dest))
+        return false;
+    if (pathExists(dest) && dirIsEmpty(dest)) {
+        fs.rmdirSync(dest);
+    }
+    ensureDir(path.dirname(dest));
+    fs.renameSync(src, dest);
+    return true;
+}
+let migrationDone = false;
+/**
+ * One-time idempotent migration from legacy paths:
+ * - `~/.naus` → `~/.kubbisec/naus`
+ * - `~/.kubbisec/config.json` → `~/.kubbisec/aspm/config.json`
+ * - AI artifacts at `~/.kubbisec/*` → `~/.kubbisec/ai/*`
+ */
+export function migrateLegacyKubbisecPaths() {
+    if (migrationDone)
+        return;
+    migrationDone = true;
+    if (process.env.KUBBISEC_SKIP_HOME_MIGRATION === "1")
+        return;
+    const legacyNaus = path.join(os.homedir(), ".naus");
+    const nausDest = getNausStateDir();
+    if (!process.env.NAUS_STATE_DIR?.trim()) {
+        moveDirIfAbsent(legacyNaus, nausDest);
+    }
+    const home = getKubbisecHomeDir();
+    ensureDir(home);
+    const legacyAspmConfig = path.join(home, "config.json");
+    const aspmConfig = getAspmConfigPath();
+    if (!process.env.ASPM_STATE_DIR?.trim() && !process.env.KUBBISEC_ASPM_DIR?.trim()) {
+        moveIfAbsent(legacyAspmConfig, aspmConfig);
+    }
+    const aiDir = getAiStateDir();
+    if (!process.env.KUBBISEC_STATE_DIR?.trim()) {
+        ensureDir(aiDir);
+        for (const entry of AI_ROOT_ENTRIES) {
+            const src = path.join(home, entry);
+            const dest = path.join(aiDir, entry);
+            const stat = pathExists(src) ? fs.statSync(src) : null;
+            if (!stat)
+                continue;
+            if (stat.isDirectory()) {
+                moveDirIfAbsent(src, dest);
+            }
+            else {
+                moveIfAbsent(src, dest);
+            }
+        }
+        moveIfAbsent(path.join(aiDir, "kbs.json"), path.join(aiDir, "kubbisec.json"));
+    }
+}
+/** Test helper — reset in-process migration guard. */
+export function resetMigrationGuardForTests() {
+    migrationDone = false;
+}
+//# sourceMappingURL=migrate.js.map

package/bundled/node_modules/@kubbisec/home/dist/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../src/migrate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEnG,MAAM,eAAe,GAAG;IACtB,eAAe;IACf,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,WAAW;IACX,OAAO;CACC,CAAC;AAEX,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,GAAW,EAAE,IAAY;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gDAAgD;AAChD,SAAS,eAAe,CAAC,GAAW,EAAE,IAAY;IAChD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,IAAI,aAAa;QAAE,OAAO;IAC1B,aAAa,GAAG,IAAI,CAAC;IAErB,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,GAAG;QAAE,OAAO;IAE7D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;QACxC,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhB,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC;QAClF,YAAY,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5C,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvD,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,2BAA2B;IACzC,aAAa,GAAG,KAAK,CAAC;AACxB,CAAC"}

package/bundled/node_modules/@kubbisec/home/dist/paths.d.ts

@@ -0,0 +1,22 @@
+/** Root KubbiSec user data directory: `~/.kubbisec`. */
+export declare function getKubbisecHomeDir(): string;
+/** NAUS runner state (certs, config, workspaces). Override: `NAUS_STATE_DIR`. */
+export declare function getNausStateDir(): string;
+/** ASPM CLI config directory. Overrides: `ASPM_STATE_DIR`, `KUBBISEC_ASPM_DIR`. */
+export declare function getAspmStateDir(): string;
+export declare function getAspmConfigPath(): string;
+/**
+ * KubbiSec AI CLI state (kubbisec.json, daemon, memory, skill-opt, telemetry, tools).
+ * Override: `KUBBISEC_STATE_DIR` (legacy name kept for compatibility).
+ */
+export declare function getAiStateDir(): string;
+export declare function getKubbisecConfigPath(): string;
+/** @deprecated Use {@link getKubbisecConfigPath}. */
+export declare function getKbsConfigPath(): string;
+/** Default chat memory store under AI state. Override: `KUBBISEC_MEMORY_DIR`. */
+export declare function getMemoryDir(): string;
+/** Default skill-opt store under AI state. Override: `KUBBISEC_SKILL_OPT_DIR`. */
+export declare function getSkillOptBaseDir(): string;
+/** Telemetry exports under AI state. */
+export declare function getTelemetryDir(): string;
+//# sourceMappingURL=paths.d.ts.map

package/bundled/node_modules/@kubbisec/home/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAGA,wDAAwD;AACxD,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAED,iFAAiF;AACjF,wBAAgB,eAAe,IAAI,MAAM,CAIxC;AAED,mFAAmF;AACnF,wBAAgB,eAAe,IAAI,MAAM,CAIxC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAItC;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,qDAAqD;AACrD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,iFAAiF;AACjF,wBAAgB,YAAY,IAAI,MAAM,CAIrC;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAED,wCAAwC;AACxC,wBAAgB,eAAe,IAAI,MAAM,CAExC"}