@kubbisec/ai-linux-x64 0.1.25 → 0.1.28

package/bundled/node_modules/@kubbisec/shared/dist/enums.d.ts

@@ -0,0 +1,88 @@
+export declare enum ScanSource {
+    TRIVY = "TRIVY",
+    SONAR = "SONAR",
+    SEMGREP = "SEMGREP",
+    NMAP = "NMAP",
+    SKIPFISH = "SKIPFISH",
+    OSV = "OSV",
+    GITLEAKS = "GITLEAKS",
+    SYFT = "SYFT",
+    VULNDB = "VULNDB",
+    KUBBISEC_AI = "KUBBISEC_AI"
+}
+export declare enum ScanType {
+    CONTAINER = "CONTAINER",
+    SAST = "SAST",
+    NETWORK = "NETWORK",
+    WEB = "WEB",
+    DEPENDENCIES = "DEPENDENCIES",
+    SECRETS = "SECRETS",
+    SBOM = "SBOM"
+}
+export declare enum Severity {
+    CRITICAL = "CRITICAL",
+    HIGH = "HIGH",
+    MEDIUM = "MEDIUM",
+    LOW = "LOW",
+    INFO = "INFO"
+}
+export declare enum VulnerabilityStatus {
+    OPEN = "OPEN",
+    CONFIRMED = "CONFIRMED",
+    REOPENED = "REOPENED",
+    FALSE_POSITIVE = "FALSE_POSITIVE",
+    /** Remediação (ex.: IA + PR) entregue; ainda não validada como corrigida em produção — entre aberto e corrigido. */
+    PENDING_REMED_REVIEW = "PENDING_REMED_REVIEW",
+    FIXED = "FIXED",
+    ACCEPTED = "ACCEPTED"
+}
+export declare const ACTIVE_VULNERABILITY_STATUSES: readonly [VulnerabilityStatus.OPEN, VulnerabilityStatus.CONFIRMED, VulnerabilityStatus.REOPENED, VulnerabilityStatus.PENDING_REMED_REVIEW];
+/** Statuses that allow creating a new Jira issue card (manual or automated). */
+export declare const JIRA_ISSUE_ELIGIBLE_STATUSES: readonly [VulnerabilityStatus.OPEN, VulnerabilityStatus.REOPENED];
+export type JiraIssueEligibleStatus = (typeof JIRA_ISSUE_ELIGIBLE_STATUSES)[number];
+export declare function isJiraIssueEligibleStatus(status: string): status is JiraIssueEligibleStatus;
+export declare enum FindingType {
+    VULNERABILITY = "VULNERABILITY",
+    SECRET = "SECRET",
+    LICENSE = "LICENSE",
+    MISCONFIGURATION = "MISCONFIGURATION",
+    DEPENDENCY = "DEPENDENCY",
+    CODE_QUALITY = "CODE_QUALITY",
+    COMPLIANCE = "COMPLIANCE",
+    BUG = "BUG",
+    CODE_SMELL = "CODE_SMELL",
+    SECURITY_HOTSPOT = "SECURITY_HOTSPOT",
+    OTHER = "OTHER"
+}
+export declare enum ExposureLevel {
+    INTERNET_FACING = "INTERNET_FACING",
+    INTERNAL = "INTERNAL",
+    ISOLATED = "ISOLATED",
+    UNKNOWN = "UNKNOWN"
+}
+export declare enum RiskLevel {
+    CRITICAL = "CRITICAL",
+    HIGH = "HIGH",
+    MEDIUM = "MEDIUM",
+    LOW = "LOW",
+    INFO = "INFO"
+}
+export declare const RISK_LEVEL_THRESHOLDS: {
+    readonly CRITICAL: 800;
+    readonly HIGH: 600;
+    readonly MEDIUM: 400;
+    readonly LOW: 200;
+    readonly INFO: 0;
+};
+export declare enum RepositoryProvider {
+    GITHUB = "GITHUB",
+    GITLAB = "GITLAB",
+    BITBUCKET = "BITBUCKET"
+}
+export declare enum ExecutionTrigger {
+    PIPELINE = "pipeline",
+    LOCAL = "local",
+    MANUAL = "manual"
+}
+export declare const SOURCE_SCAN_TYPE_MAP: Record<ScanSource, ScanType>;
+//# sourceMappingURL=enums.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/enums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,QAAQ;IAClB,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,oBAAY,QAAQ;IAClB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,oBAAoB,yBAAyB;IAC7C,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,4IAKhC,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,mEAG/B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,uBAAuB,CAE3F;AAGD,oBAAY,WAAW;IAErB,aAAa,kBAAkB;IAE/B,MAAM,WAAW;IAEjB,OAAO,YAAY;IAEnB,gBAAgB,qBAAqB;IAErC,UAAU,eAAe;IAEzB,YAAY,iBAAiB;IAE7B,UAAU,eAAe;IAEzB,GAAG,QAAQ;IAEX,UAAU,eAAe;IAEzB,gBAAgB,qBAAqB;IAErC,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IACvB,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAGD,oBAAY,SAAS;IACnB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAGD,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AAEX,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAW7D,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/enums.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SOURCE_SCAN_TYPE_MAP = exports.ExecutionTrigger = exports.RepositoryProvider = exports.RISK_LEVEL_THRESHOLDS = exports.RiskLevel = exports.ExposureLevel = exports.FindingType = exports.JIRA_ISSUE_ELIGIBLE_STATUSES = exports.ACTIVE_VULNERABILITY_STATUSES = exports.VulnerabilityStatus = exports.Severity = exports.ScanType = exports.ScanSource = void 0;
+exports.isJiraIssueEligibleStatus = isJiraIssueEligibleStatus;
+var ScanSource;
+(function (ScanSource) {
+    ScanSource["TRIVY"] = "TRIVY";
+    ScanSource["SONAR"] = "SONAR";
+    ScanSource["SEMGREP"] = "SEMGREP";
+    ScanSource["NMAP"] = "NMAP";
+    ScanSource["SKIPFISH"] = "SKIPFISH";
+    ScanSource["OSV"] = "OSV";
+    ScanSource["GITLEAKS"] = "GITLEAKS";
+    ScanSource["SYFT"] = "SYFT";
+    ScanSource["VULNDB"] = "VULNDB";
+    ScanSource["KUBBISEC_AI"] = "KUBBISEC_AI";
+})(ScanSource || (exports.ScanSource = ScanSource = {}));
+var ScanType;
+(function (ScanType) {
+    ScanType["CONTAINER"] = "CONTAINER";
+    ScanType["SAST"] = "SAST";
+    ScanType["NETWORK"] = "NETWORK";
+    ScanType["WEB"] = "WEB";
+    ScanType["DEPENDENCIES"] = "DEPENDENCIES";
+    ScanType["SECRETS"] = "SECRETS";
+    ScanType["SBOM"] = "SBOM";
+})(ScanType || (exports.ScanType = ScanType = {}));
+var Severity;
+(function (Severity) {
+    Severity["CRITICAL"] = "CRITICAL";
+    Severity["HIGH"] = "HIGH";
+    Severity["MEDIUM"] = "MEDIUM";
+    Severity["LOW"] = "LOW";
+    Severity["INFO"] = "INFO";
+})(Severity || (exports.Severity = Severity = {}));
+var VulnerabilityStatus;
+(function (VulnerabilityStatus) {
+    VulnerabilityStatus["OPEN"] = "OPEN";
+    VulnerabilityStatus["CONFIRMED"] = "CONFIRMED";
+    VulnerabilityStatus["REOPENED"] = "REOPENED";
+    VulnerabilityStatus["FALSE_POSITIVE"] = "FALSE_POSITIVE";
+    /** Remediação (ex.: IA + PR) entregue; ainda não validada como corrigida em produção — entre aberto e corrigido. */
+    VulnerabilityStatus["PENDING_REMED_REVIEW"] = "PENDING_REMED_REVIEW";
+    VulnerabilityStatus["FIXED"] = "FIXED";
+    VulnerabilityStatus["ACCEPTED"] = "ACCEPTED";
+})(VulnerabilityStatus || (exports.VulnerabilityStatus = VulnerabilityStatus = {}));
+exports.ACTIVE_VULNERABILITY_STATUSES = [
+    VulnerabilityStatus.OPEN,
+    VulnerabilityStatus.CONFIRMED,
+    VulnerabilityStatus.REOPENED,
+    VulnerabilityStatus.PENDING_REMED_REVIEW,
+];
+/** Statuses that allow creating a new Jira issue card (manual or automated). */
+exports.JIRA_ISSUE_ELIGIBLE_STATUSES = [
+    VulnerabilityStatus.OPEN,
+    VulnerabilityStatus.REOPENED,
+];
+function isJiraIssueEligibleStatus(status) {
+    return exports.JIRA_ISSUE_ELIGIBLE_STATUSES.includes(status);
+}
+/// Tipos normalizados de findings para classificação consistente
+var FindingType;
+(function (FindingType) {
+    /// Vulnerabilidade de segurança (CVE, CWE, etc.)
+    FindingType["VULNERABILITY"] = "VULNERABILITY";
+    /// Credencial ou chave exposta (API keys, tokens, senhas)
+    FindingType["SECRET"] = "SECRET";
+    /// Problema de licença de software (incompatível, expirada, etc.)
+    FindingType["LICENSE"] = "LICENSE";
+    /// Problema de configuração (misconfiguration)
+    FindingType["MISCONFIGURATION"] = "MISCONFIGURATION";
+    /// Problema de dependência (versão desatualizada, incompatível)
+    FindingType["DEPENDENCY"] = "DEPENDENCY";
+    /// Problema de qualidade de código (code smell, technical debt)
+    FindingType["CODE_QUALITY"] = "CODE_QUALITY";
+    /// Problema de conformidade (compliance)
+    FindingType["COMPLIANCE"] = "COMPLIANCE";
+    /// Bug funcional
+    FindingType["BUG"] = "BUG";
+    /// Code smell
+    FindingType["CODE_SMELL"] = "CODE_SMELL";
+    /// Security hotspot (potencial vulnerabilidade)
+    FindingType["SECURITY_HOTSPOT"] = "SECURITY_HOTSPOT";
+    /// Outro tipo de finding não classificado acima
+    FindingType["OTHER"] = "OTHER";
+})(FindingType || (exports.FindingType = FindingType = {}));
+/// Enterprise exposure levels para classificação de risco
+var ExposureLevel;
+(function (ExposureLevel) {
+    ExposureLevel["INTERNET_FACING"] = "INTERNET_FACING";
+    ExposureLevel["INTERNAL"] = "INTERNAL";
+    ExposureLevel["ISOLATED"] = "ISOLATED";
+    ExposureLevel["UNKNOWN"] = "UNKNOWN";
+})(ExposureLevel || (exports.ExposureLevel = ExposureLevel = {}));
+/// Níveis de risco baseados no score calculado
+var RiskLevel;
+(function (RiskLevel) {
+    RiskLevel["CRITICAL"] = "CRITICAL";
+    RiskLevel["HIGH"] = "HIGH";
+    RiskLevel["MEDIUM"] = "MEDIUM";
+    RiskLevel["LOW"] = "LOW";
+    RiskLevel["INFO"] = "INFO";
+})(RiskLevel || (exports.RiskLevel = RiskLevel = {}));
+/// Thresholds para níveis de risco (0-1000)
+exports.RISK_LEVEL_THRESHOLDS = {
+    CRITICAL: 800,
+    HIGH: 600,
+    MEDIUM: 400,
+    LOW: 200,
+    INFO: 0,
+};
+var RepositoryProvider;
+(function (RepositoryProvider) {
+    RepositoryProvider["GITHUB"] = "GITHUB";
+    RepositoryProvider["GITLAB"] = "GITLAB";
+    RepositoryProvider["BITBUCKET"] = "BITBUCKET";
+})(RepositoryProvider || (exports.RepositoryProvider = RepositoryProvider = {}));
+var ExecutionTrigger;
+(function (ExecutionTrigger) {
+    ExecutionTrigger["PIPELINE"] = "pipeline";
+    ExecutionTrigger["LOCAL"] = "local";
+    ExecutionTrigger["MANUAL"] = "manual";
+})(ExecutionTrigger || (exports.ExecutionTrigger = ExecutionTrigger = {}));
+exports.SOURCE_SCAN_TYPE_MAP = {
+    [ScanSource.TRIVY]: ScanType.CONTAINER,
+    [ScanSource.SONAR]: ScanType.SAST,
+    [ScanSource.SEMGREP]: ScanType.SAST,
+    [ScanSource.NMAP]: ScanType.NETWORK,
+    [ScanSource.SKIPFISH]: ScanType.WEB,
+    [ScanSource.OSV]: ScanType.DEPENDENCIES,
+    [ScanSource.GITLEAKS]: ScanType.SECRETS,
+    [ScanSource.SYFT]: ScanType.SBOM,
+    [ScanSource.VULNDB]: ScanType.DEPENDENCIES,
+    [ScanSource.KUBBISEC_AI]: ScanType.SAST,
+};
+//# sourceMappingURL=enums.js.map

package/bundled/node_modules/@kubbisec/shared/dist/enums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AAyDA,8DAEC;AA3DD,IAAY,UAWX;AAXD,WAAY,UAAU;IACpB,6BAAe,CAAA;IACf,6BAAe,CAAA;IACf,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,mCAAqB,CAAA;IACrB,yBAAW,CAAA;IACX,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,+BAAiB,CAAA;IACjB,yCAA2B,CAAA;AAC7B,CAAC,EAXW,UAAU,0BAAV,UAAU,QAWrB;AAED,IAAY,QAQX;AARD,WAAY,QAAQ;IAClB,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,+BAAmB,CAAA;IACnB,yBAAa,CAAA;AACf,CAAC,EARW,QAAQ,wBAAR,QAAQ,QAQnB;AAED,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EANW,QAAQ,wBAAR,QAAQ,QAMnB;AAED,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,wDAAiC,CAAA;IACjC,oHAAoH;IACpH,oEAA6C,CAAA;IAC7C,sCAAe,CAAA;IACf,4CAAqB,CAAA;AACvB,CAAC,EATW,mBAAmB,mCAAnB,mBAAmB,QAS9B;AAEY,QAAA,6BAA6B,GAAG;IAC3C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,SAAS;IAC7B,mBAAmB,CAAC,QAAQ;IAC5B,mBAAmB,CAAC,oBAAoB;CAChC,CAAC;AAEX,gFAAgF;AACnE,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,QAAQ;CACpB,CAAC;AAIX,SAAgB,yBAAyB,CAAC,MAAc;IACtD,OAAQ,oCAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AACjE,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB,iDAAiD;IACjD,8CAA+B,CAAA;IAC/B,0DAA0D;IAC1D,gCAAiB,CAAA;IACjB,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,+CAA+C;IAC/C,oDAAqC,CAAA;IACrC,gEAAgE;IAChE,wCAAyB,CAAA;IACzB,gEAAgE;IAChE,4CAA6B,CAAA;IAC7B,yCAAyC;IACzC,wCAAyB,CAAA;IACzB,iBAAiB;IACjB,0BAAW,CAAA;IACX,cAAc;IACd,wCAAyB,CAAA;IACzB,gDAAgD;IAChD,oDAAqC,CAAA;IACrC,gDAAgD;IAChD,8BAAe,CAAA;AACjB,CAAC,EAvBW,WAAW,2BAAX,WAAW,QAuBtB;AAED,0DAA0D;AAC1D,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,oDAAmC,CAAA;IACnC,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;IACrB,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AAED,+CAA+C;AAC/C,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,kCAAqB,CAAA;IACrB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,wBAAW,CAAA;IACX,0BAAa,CAAA;AACf,CAAC,EANW,SAAS,yBAAT,SAAS,QAMpB;AAED,4CAA4C;AAC/B,QAAA,qBAAqB,GAAG;IACnC,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,mCAAe,CAAA;IACf,qCAAiB,CAAA;AACnB,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAEY,QAAA,oBAAoB,GAAiC;IAChE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,SAAS;IACtC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI;IACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI;IACnC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO;IACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG;IACnC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,YAAY;IACvC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO;IACvC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI;IAChC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,YAAY;IAC1C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,IAAI;CACxC,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/github/kubbisec-github-label.d.ts

@@ -0,0 +1,6 @@
+export declare const KUBBISEC_GITHUB_PR_LABEL: {
+    readonly name: "kubbisec";
+    readonly color: "00d9f6";
+    readonly description: "Pull requests opened by KubbiSec";
+};
+//# sourceMappingURL=kubbisec-github-label.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/github/kubbisec-github-label.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-github-label.d.ts","sourceRoot":"","sources":["../../src/github/kubbisec-github-label.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB;;;;CAI3B,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/github/kubbisec-github-label.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KUBBISEC_GITHUB_PR_LABEL = void 0;
+exports.KUBBISEC_GITHUB_PR_LABEL = {
+    name: "kubbisec",
+    color: "00d9f6",
+    description: "Pull requests opened by KubbiSec",
+};
+//# sourceMappingURL=kubbisec-github-label.js.map

package/bundled/node_modules/@kubbisec/shared/dist/github/kubbisec-github-label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-github-label.js","sourceRoot":"","sources":["../../src/github/kubbisec-github-label.ts"],"names":[],"mappings":";;;AAAa,QAAA,wBAAwB,GAAG;IACtC,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,kCAAkC;CACvC,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/index.d.ts

@@ -0,0 +1,23 @@
+export * from "./ai";
+export * from "./api-key";
+export * from "./assistant";
+export * from "./billing";
+export * from "./ci";
+export * from "./cli-user-error";
+export * from "./dto";
+export * from "./dto/metrics.dto";
+export * from "./enums";
+export * from "./github/kubbisec-github-label";
+export * from "./mcp/constants";
+export * from "./mcp/oauth-metadata";
+export * from "./product-docs";
+export * from "./project-scanner-summary";
+export * from "./rbac";
+export * from "./redaction";
+export * from "./security";
+export * from "./severity-map";
+export * from "./shared-project";
+export * from "./sonar-safe-string";
+export * from "./sort-findings";
+export * from "./trusted-path";
+//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,MAAM,CAAC;AACrB,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,MAAM,CAAC;AACrB,cAAc,kBAAkB,CAAC;AACjC,cAAc,OAAO,CAAC;AACtB,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,QAAQ,CAAC;AACvB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/index.js

@@ -0,0 +1,39 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./ai"), exports);
+__exportStar(require("./api-key"), exports);
+__exportStar(require("./assistant"), exports);
+__exportStar(require("./billing"), exports);
+__exportStar(require("./ci"), exports);
+__exportStar(require("./cli-user-error"), exports);
+__exportStar(require("./dto"), exports);
+__exportStar(require("./dto/metrics.dto"), exports);
+__exportStar(require("./enums"), exports);
+__exportStar(require("./github/kubbisec-github-label"), exports);
+__exportStar(require("./mcp/constants"), exports);
+__exportStar(require("./mcp/oauth-metadata"), exports);
+__exportStar(require("./product-docs"), exports);
+__exportStar(require("./project-scanner-summary"), exports);
+__exportStar(require("./rbac"), exports);
+__exportStar(require("./redaction"), exports);
+__exportStar(require("./security"), exports);
+__exportStar(require("./severity-map"), exports);
+__exportStar(require("./shared-project"), exports);
+__exportStar(require("./sonar-safe-string"), exports);
+__exportStar(require("./sort-findings"), exports);
+__exportStar(require("./trusted-path"), exports);
+//# sourceMappingURL=index.js.map

package/bundled/node_modules/@kubbisec/shared/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uCAAqB;AACrB,4CAA0B;AAC1B,8CAA4B;AAC5B,4CAA0B;AAC1B,uCAAqB;AACrB,mDAAiC;AACjC,wCAAsB;AACtB,oDAAkC;AAClC,0CAAwB;AACxB,iEAA+C;AAC/C,kDAAgC;AAChC,uDAAqC;AACrC,iDAA+B;AAC/B,4DAA0C;AAC1C,yCAAuB;AACvB,8CAA4B;AAC5B,6CAA2B;AAC3B,iDAA+B;AAC/B,mDAAiC;AACjC,sDAAoC;AACpC,kDAAgC;AAChC,iDAA+B"}

package/bundled/node_modules/@kubbisec/shared/dist/mcp/constants.d.ts

@@ -0,0 +1,22 @@
+export declare const KUBBISEC_HOSTED_MCP_URL = "https://mcp.kubbisec.com/mcp";
+export declare const KUBBISEC_MCP_API_ORIGIN = "https://api.kubbisec.com";
+export declare const KUBBISEC_MCP_OAUTH_AUTHORIZE_URL = "https://app.kubbisec.com/oauth/device";
+export declare const KUBBISEC_MCP_OAUTH_TOKEN_URL = "https://api.kubbisec.com/v1/oauth/token";
+export declare const KUBBISEC_MCP_OAUTH_DEVICE_TOKEN_URL = "https://api.kubbisec.com/v1/oauth/device/token";
+export declare const KUBBISEC_MCP_OAUTH_DEVICE_URL = "https://api.kubbisec.com/v1/oauth/device";
+export declare const KUBBISEC_MCP_DEVICE_URL = "https://app.kubbisec.com/oauth/device";
+export declare const KUBBISEC_MCP_APP_ORIGIN = "https://app.kubbisec.com";
+export declare const KUBBISEC_MCP_BRAND_ICON_PATH = "/assets/icons/mcp-logo.png";
+export declare const KUBBISEC_MCP_DEFAULT_SCOPES: readonly ["mcp:read", "mcp:scan:trigger", "mcp:remediate:trigger"];
+export declare function buildHostedMcpOAuthConfig(): {
+    type: "oauth2";
+    authorizationUrl: string;
+    tokenUrl: string;
+    scopes: ("mcp:read" | "mcp:scan:trigger" | "mcp:remediate:trigger")[];
+};
+export declare function buildHostedMcpCursorSnippet(): string;
+export declare function buildStdioApiKeyCursorSnippet(input: {
+    organizationSlug: string;
+    apiKeyPlaceholder?: string;
+}): string;
+//# sourceMappingURL=constants.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/mcp/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/mcp/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,iCAAiC,CAAC;AACtE,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAClE,eAAO,MAAM,gCAAgC,0CAA0C,CAAC;AACxF,eAAO,MAAM,4BAA4B,4CAA4C,CAAC;AACtF,eAAO,MAAM,mCAAmC,mDAAmD,CAAC;AACpG,eAAO,MAAM,6BAA6B,6CAA6C,CAAC;AACxF,eAAO,MAAM,uBAAuB,0CAA0C,CAAC;AAC/E,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAClE,eAAO,MAAM,4BAA4B,+BAA+B,CAAC;AAEzE,eAAO,MAAM,2BAA2B,oEAI9B,CAAC;AAEX,wBAAgB,yBAAyB;;;;;EAOxC;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAYpD;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,MAAM,CAiBT"}

package/bundled/node_modules/@kubbisec/shared/dist/mcp/constants.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KUBBISEC_MCP_DEFAULT_SCOPES = exports.KUBBISEC_MCP_BRAND_ICON_PATH = exports.KUBBISEC_MCP_APP_ORIGIN = exports.KUBBISEC_MCP_DEVICE_URL = exports.KUBBISEC_MCP_OAUTH_DEVICE_URL = exports.KUBBISEC_MCP_OAUTH_DEVICE_TOKEN_URL = exports.KUBBISEC_MCP_OAUTH_TOKEN_URL = exports.KUBBISEC_MCP_OAUTH_AUTHORIZE_URL = exports.KUBBISEC_MCP_API_ORIGIN = exports.KUBBISEC_HOSTED_MCP_URL = void 0;
+exports.buildHostedMcpOAuthConfig = buildHostedMcpOAuthConfig;
+exports.buildHostedMcpCursorSnippet = buildHostedMcpCursorSnippet;
+exports.buildStdioApiKeyCursorSnippet = buildStdioApiKeyCursorSnippet;
+exports.KUBBISEC_HOSTED_MCP_URL = "https://mcp.kubbisec.com/mcp";
+exports.KUBBISEC_MCP_API_ORIGIN = "https://api.kubbisec.com";
+exports.KUBBISEC_MCP_OAUTH_AUTHORIZE_URL = "https://app.kubbisec.com/oauth/device";
+exports.KUBBISEC_MCP_OAUTH_TOKEN_URL = "https://api.kubbisec.com/v1/oauth/token";
+exports.KUBBISEC_MCP_OAUTH_DEVICE_TOKEN_URL = "https://api.kubbisec.com/v1/oauth/device/token";
+exports.KUBBISEC_MCP_OAUTH_DEVICE_URL = "https://api.kubbisec.com/v1/oauth/device";
+exports.KUBBISEC_MCP_DEVICE_URL = "https://app.kubbisec.com/oauth/device";
+exports.KUBBISEC_MCP_APP_ORIGIN = "https://app.kubbisec.com";
+exports.KUBBISEC_MCP_BRAND_ICON_PATH = "/assets/icons/mcp-logo.png";
+exports.KUBBISEC_MCP_DEFAULT_SCOPES = [
+    "mcp:read",
+    "mcp:scan:trigger",
+    "mcp:remediate:trigger",
+];
+function buildHostedMcpOAuthConfig() {
+    return {
+        type: "oauth2",
+        authorizationUrl: exports.KUBBISEC_MCP_OAUTH_AUTHORIZE_URL,
+        tokenUrl: exports.KUBBISEC_MCP_OAUTH_TOKEN_URL,
+        scopes: [...exports.KUBBISEC_MCP_DEFAULT_SCOPES],
+    };
+}
+function buildHostedMcpCursorSnippet() {
+    return JSON.stringify({
+        mcpServers: {
+            kubbisec: {
+                url: exports.KUBBISEC_HOSTED_MCP_URL,
+            },
+        },
+    }, null, 2);
+}
+function buildStdioApiKeyCursorSnippet(input) {
+    return JSON.stringify({
+        mcpServers: {
+            kubbisec: {
+                command: "npx",
+                args: ["-y", "@kubbisec/mcp"],
+                env: {
+                    KUBBISEC_API_KEY: input.apiKeyPlaceholder ?? "<sua-key>",
+                    KUBBISEC_ORGANIZATION_SLUG: input.organizationSlug,
+                },
+            },
+        },
+    }, null, 2);
+}
+//# sourceMappingURL=constants.js.map

package/bundled/node_modules/@kubbisec/shared/dist/mcp/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/mcp/constants.ts"],"names":[],"mappings":";;;AAgBA,8DAOC;AAED,kEAYC;AAED,sEAoBC;AA3DY,QAAA,uBAAuB,GAAG,8BAA8B,CAAC;AACzD,QAAA,uBAAuB,GAAG,0BAA0B,CAAC;AACrD,QAAA,gCAAgC,GAAG,uCAAuC,CAAC;AAC3E,QAAA,4BAA4B,GAAG,yCAAyC,CAAC;AACzE,QAAA,mCAAmC,GAAG,gDAAgD,CAAC;AACvF,QAAA,6BAA6B,GAAG,0CAA0C,CAAC;AAC3E,QAAA,uBAAuB,GAAG,uCAAuC,CAAC;AAClE,QAAA,uBAAuB,GAAG,0BAA0B,CAAC;AACrD,QAAA,4BAA4B,GAAG,4BAA4B,CAAC;AAE5D,QAAA,2BAA2B,GAAG;IACzC,UAAU;IACV,kBAAkB;IAClB,uBAAuB;CACf,CAAC;AAEX,SAAgB,yBAAyB;IACvC,OAAO;QACL,IAAI,EAAE,QAAiB;QACvB,gBAAgB,EAAE,wCAAgC;QAClD,QAAQ,EAAE,oCAA4B;QACtC,MAAM,EAAE,CAAC,GAAG,mCAA2B,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAgB,2BAA2B;IACzC,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,UAAU,EAAE;YACV,QAAQ,EAAE;gBACR,GAAG,EAAE,+BAAuB;aAC7B;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,6BAA6B,CAAC,KAG7C;IACC,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,UAAU,EAAE;YACV,QAAQ,EAAE;gBACR,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC;gBAC7B,GAAG,EAAE;oBACH,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,IAAI,WAAW;oBACxD,0BAA0B,EAAE,KAAK,CAAC,gBAAgB;iBACnD;aACF;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/mcp/oauth-metadata.d.ts

@@ -0,0 +1,37 @@
+export type McpOAuthProtectedResourceMetadata = {
+    resource: string;
+    authorization_servers: string[];
+    bearer_methods_supported: ["header"];
+    scopes_supported: string[];
+};
+export type McpOAuthAuthorizationServerMetadata = {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    device_authorization_endpoint: string;
+    response_types_supported: string[];
+    grant_types_supported: string[];
+    token_endpoint_auth_methods_supported: string[];
+    code_challenge_methods_supported: string[];
+    scopes_supported: string[];
+};
+export declare function buildMcpOAuthProtectedResourceMetadata(input: {
+    resourceUrl: string;
+    authorizationServerUrl: string;
+    scopes?: readonly string[];
+}): McpOAuthProtectedResourceMetadata;
+export declare function buildMcpOAuthAuthorizationServerMetadata(input: {
+    apiBaseUrl: string;
+    webAppBaseUrl: string;
+    scopes?: readonly string[];
+}): McpOAuthAuthorizationServerMetadata;
+export declare function buildMcpOAuthWwwAuthenticateHeader(input: {
+    resourceMetadataUrl: string;
+    realm?: string;
+    error?: string;
+}): string;
+export declare function buildMcpOAuthProtectedResourceMetadataUrls(resourceUrl: string): {
+    root: string;
+    pathInserted: string;
+};
+//# sourceMappingURL=oauth-metadata.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/mcp/oauth-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-metadata.d.ts","sourceRoot":"","sources":["../../src/mcp/oauth-metadata.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,iCAAiC,GAAG;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,wBAAwB,EAAE,CAAC,QAAQ,CAAC,CAAC;IACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,6BAA6B,EAAE,MAAM,CAAC;IACtC,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,qCAAqC,EAAE,MAAM,EAAE,CAAC;IAChD,gCAAgC,EAAE,MAAM,EAAE,CAAC;IAC3C,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,wBAAgB,sCAAsC,CAAC,KAAK,EAAE;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,GAAG,iCAAiC,CAOpC;AAED,wBAAgB,wCAAwC,CAAC,KAAK,EAAE;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,GAAG,mCAAmC,CAetC;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAOT;AAED,wBAAgB,0CAA0C,CAAC,WAAW,EAAE,MAAM,GAAG;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB,CAWA"}

package/bundled/node_modules/@kubbisec/shared/dist/mcp/oauth-metadata.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildMcpOAuthProtectedResourceMetadata = buildMcpOAuthProtectedResourceMetadata;
+exports.buildMcpOAuthAuthorizationServerMetadata = buildMcpOAuthAuthorizationServerMetadata;
+exports.buildMcpOAuthWwwAuthenticateHeader = buildMcpOAuthWwwAuthenticateHeader;
+exports.buildMcpOAuthProtectedResourceMetadataUrls = buildMcpOAuthProtectedResourceMetadataUrls;
+const sonar_safe_string_1 = require("../sonar-safe-string");
+const constants_1 = require("./constants");
+function buildMcpOAuthProtectedResourceMetadata(input) {
+    return {
+        resource: (0, sonar_safe_string_1.trimTrailingSlashes)(input.resourceUrl),
+        authorization_servers: [(0, sonar_safe_string_1.trimTrailingSlashes)(input.authorizationServerUrl)],
+        bearer_methods_supported: ["header"],
+        scopes_supported: [...(input.scopes ?? constants_1.KUBBISEC_MCP_DEFAULT_SCOPES)],
+    };
+}
+function buildMcpOAuthAuthorizationServerMetadata(input) {
+    const apiBase = (0, sonar_safe_string_1.trimTrailingSlashes)(input.apiBaseUrl);
+    const webAppBase = (0, sonar_safe_string_1.trimTrailingSlashes)(input.webAppBaseUrl);
+    return {
+        issuer: apiBase,
+        authorization_endpoint: `${webAppBase}/oauth/device`,
+        token_endpoint: `${apiBase}/v1/oauth/token`,
+        device_authorization_endpoint: `${apiBase}/v1/oauth/device`,
+        response_types_supported: ["code"],
+        grant_types_supported: ["urn:ietf:params:oauth:grant-type:device_code", "refresh_token"],
+        token_endpoint_auth_methods_supported: ["none"],
+        code_challenge_methods_supported: ["S256"],
+        scopes_supported: [...(input.scopes ?? constants_1.KUBBISEC_MCP_DEFAULT_SCOPES)],
+    };
+}
+function buildMcpOAuthWwwAuthenticateHeader(input) {
+    const realm = input.realm ?? "kubbisec-mcp";
+    const parts = [`Bearer realm="${realm}"`, `resource_metadata="${input.resourceMetadataUrl}"`];
+    if (input.error) {
+        parts.push(`error="${input.error}"`);
+    }
+    return parts.join(", ");
+}
+function buildMcpOAuthProtectedResourceMetadataUrls(resourceUrl) {
+    const resource = new URL(resourceUrl);
+    const origin = resource.origin;
+    const resourcePath = resource.pathname.replace(/^\//, "");
+    return {
+        root: `${origin}/.well-known/oauth-protected-resource`,
+        pathInserted: resourcePath
+            ? `${origin}/.well-known/oauth-protected-resource/${resourcePath}`
+            : `${origin}/.well-known/oauth-protected-resource`,
+    };
+}
+//# sourceMappingURL=oauth-metadata.js.map

package/bundled/node_modules/@kubbisec/shared/dist/mcp/oauth-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-metadata.js","sourceRoot":"","sources":["../../src/mcp/oauth-metadata.ts"],"names":[],"mappings":";;AAsBA,wFAWC;AAED,4FAmBC;AAED,gFAWC;AAED,gGAcC;AAnFD,4DAA2D;AAC3D,2CAA0D;AAqB1D,SAAgB,sCAAsC,CAAC,KAItD;IACC,OAAO;QACL,QAAQ,EAAE,IAAA,uCAAmB,EAAC,KAAK,CAAC,WAAW,CAAC;QAChD,qBAAqB,EAAE,CAAC,IAAA,uCAAmB,EAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1E,wBAAwB,EAAE,CAAC,QAAQ,CAAC;QACpC,gBAAgB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,uCAA2B,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAgB,wCAAwC,CAAC,KAIxD;IACC,MAAM,OAAO,GAAG,IAAA,uCAAmB,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAA,uCAAmB,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAE5D,OAAO;QACL,MAAM,EAAE,OAAO;QACf,sBAAsB,EAAE,GAAG,UAAU,eAAe;QACpD,cAAc,EAAE,GAAG,OAAO,iBAAiB;QAC3C,6BAA6B,EAAE,GAAG,OAAO,kBAAkB;QAC3D,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,qBAAqB,EAAE,CAAC,8CAA8C,EAAE,eAAe,CAAC;QACxF,qCAAqC,EAAE,CAAC,MAAM,CAAC;QAC/C,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,gBAAgB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,uCAA2B,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAgB,kCAAkC,CAAC,KAIlD;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,cAAc,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,iBAAiB,KAAK,GAAG,EAAE,sBAAsB,KAAK,CAAC,mBAAmB,GAAG,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAgB,0CAA0C,CAAC,WAAmB;IAI5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,GAAG,MAAM,uCAAuC;QACtD,YAAY,EAAE,YAAY;YACxB,CAAC,CAAC,GAAG,MAAM,yCAAyC,YAAY,EAAE;YAClE,CAAC,CAAC,GAAG,MAAM,uCAAuC;KACrD,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/ai-docs-bundle.loader.d.ts

@@ -0,0 +1,6 @@
+export declare function loadAiDocsBundleFromDisk(): Promise<{
+    bundle: string;
+    sourceDir: string | null;
+    triedPaths: string[];
+}>;
+//# sourceMappingURL=ai-docs-bundle.loader.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/ai-docs-bundle.loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-docs-bundle.loader.d.ts","sourceRoot":"","sources":["../../src/product-docs/ai-docs-bundle.loader.ts"],"names":[],"mappings":"AAuCA,wBAAsB,wBAAwB,IAAI,OAAO,CAAC;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC,CA6BD"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/ai-docs-bundle.loader.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadAiDocsBundleFromDisk = loadAiDocsBundleFromDisk;
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const monorepo_root_js_1 = require("./monorepo-root.js");
+function listAiDocDirCandidates() {
+    const out = [];
+    const add = (p) => {
+        if (!out.includes(p))
+            out.push(p);
+    };
+    const envDir = process.env.AI_DOCS_DIR?.trim();
+    if (envDir)
+        add(envDir);
+    const mcpSynced = process.env.MCP_DOCS_CONTENT_ROOT?.trim();
+    if (mcpSynced)
+        add((0, node_path_1.join)(mcpSynced, "ai"));
+    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
+    add((0, node_path_1.join)(root, "apps", "mcp", "src", "resources", "content", "ai"));
+    add((0, node_path_1.join)(root, "apps", "mcp", "dist", "resources", "content", "ai"));
+    add((0, node_path_1.join)(root, "apps", "web", "src", "pages", "private", "docs", "content", "ai"));
+    const cwd = process.cwd();
+    add((0, node_path_1.join)(cwd, "apps", "web", "src", "pages", "private", "docs", "content", "ai"));
+    add((0, node_path_1.join)(cwd, "src", "resources", "content", "ai"));
+    add((0, node_path_1.join)(cwd, "resources", "content", "ai"));
+    add((0, node_path_1.join)(cwd, "..", "apps", "web", "src", "pages", "private", "docs", "content", "ai"));
+    add((0, node_path_1.join)(cwd, "..", "..", "apps", "web", "src", "pages", "private", "docs", "content", "ai"));
+    return out;
+}
+function listAiMarkdownIds(dir) {
+    return (0, node_fs_1.readdirSync)(dir)
+        .filter((name) => name.endsWith(".md") && name !== "index.md")
+        .map((name) => name.replace(/\.md$/u, ""))
+        .sort((a, b) => a.localeCompare(b));
+}
+async function loadAiDocsBundleFromDisk() {
+    const candidates = listAiDocDirCandidates();
+    for (const dir of candidates) {
+        if (!(0, node_fs_1.existsSync)(dir))
+            continue;
+        const ids = listAiMarkdownIds(dir);
+        if (ids.length === 0)
+            continue;
+        const chunks = [];
+        for (const id of ids) {
+            const fp = (0, node_path_1.join)(dir, `${id}.md`);
+            if (!(0, node_fs_1.existsSync)(fp))
+                continue;
+            const text = await (0, promises_1.readFile)(fp, "utf8");
+            chunks.push(`## ai/${id}.md\n\n${text.trim()}\n`);
+        }
+        if (chunks.length > 0) {
+            return {
+                bundle: chunks.join("\n---\n\n"),
+                sourceDir: dir,
+                triedPaths: candidates,
+            };
+        }
+    }
+    return {
+        bundle: "",
+        sourceDir: null,
+        triedPaths: candidates,
+    };
+}
+//# sourceMappingURL=ai-docs-bundle.loader.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/ai-docs-bundle.loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-docs-bundle.loader.js","sourceRoot":"","sources":["../../src/product-docs/ai-docs-bundle.loader.ts"],"names":[],"mappings":";;AAuCA,4DAiCC;AAxED,qCAAkD;AAClD,+CAA4C;AAC5C,yCAAiC;AACjC,yDAAkE;AAElE,SAAS,sBAAsB;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,SAAS;QAAE,GAAG,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAE1C,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACrE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAEnF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAClF,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACxF,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAE9F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,IAAA,qBAAW,EAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,UAAU,CAAC;SAC7D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAEM,KAAK,UAAU,wBAAwB;IAK5C,MAAM,UAAU,GAAG,sBAAsB,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAE/B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,IAAA,oBAAU,EAAC,EAAE,CAAC;gBAAE,SAAS;YAC9B,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;gBAChC,SAAS,EAAE,GAAG;gBACd,UAAU,EAAE,UAAU;aACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,UAAU;KACvB,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/aspm-docs-bundle.loader.d.ts

@@ -0,0 +1,8 @@
+/** Markdown under apps/web private docs — overview first. */
+export declare const ASPM_DOC_FILES: readonly ["aspm-quickstart.md", "aspm-login.md", "aspm-scan.md", "aspm-upload.md", "aspm-parse.md", "aspm-cicd.md", "aspm-commands.md", "aspm-gate.md", "aspm-coverage.md", "aspm-api-keys.md", "aspm-scanner-trivy.md", "aspm-scanner-gitleaks.md", "aspm-scanner-syft.md", "aspm-scanner-osv.md", "aspm-scanner-semgrep.md", "aspm-scanner-sonar.md", "aspm-scanner-nmap.md", "aspm-scanner-skipfish.md", "aspm-multiple-scanners.md", "aspm-troubleshooting.md"];
+export declare function loadAspmDocsBundleFromDisk(): Promise<{
+    bundle: string;
+    sourceDir: string | null;
+    triedPaths: string[];
+}>;
+//# sourceMappingURL=aspm-docs-bundle.loader.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/aspm-docs-bundle.loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspm-docs-bundle.loader.d.ts","sourceRoot":"","sources":["../../src/product-docs/aspm-docs-bundle.loader.ts"],"names":[],"mappings":"AAKA,6DAA6D;AAC7D,eAAO,MAAM,cAAc,qcAqBjB,CAAC;AAoDX,wBAAsB,0BAA0B,IAAI,OAAO,CAAC;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC,CAmCD"}