@kubbisec/ai-linux-x64 0.1.25 → 0.1.28

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/aspm-docs-bundle.loader.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ASPM_DOC_FILES = void 0;
+exports.loadAspmDocsBundleFromDisk = loadAspmDocsBundleFromDisk;
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const monorepo_root_js_1 = require("./monorepo-root.js");
+/** Markdown under apps/web private docs — overview first. */
+exports.ASPM_DOC_FILES = [
+    "aspm-quickstart.md",
+    "aspm-login.md",
+    "aspm-scan.md",
+    "aspm-upload.md",
+    "aspm-parse.md",
+    "aspm-cicd.md",
+    "aspm-commands.md",
+    "aspm-gate.md",
+    "aspm-coverage.md",
+    "aspm-api-keys.md",
+    "aspm-scanner-trivy.md",
+    "aspm-scanner-gitleaks.md",
+    "aspm-scanner-syft.md",
+    "aspm-scanner-osv.md",
+    "aspm-scanner-semgrep.md",
+    "aspm-scanner-sonar.md",
+    "aspm-scanner-nmap.md",
+    "aspm-scanner-skipfish.md",
+    "aspm-multiple-scanners.md",
+    "aspm-troubleshooting.md",
+];
+/** Operational CLI docs under docs/aspm/ (not in web content tree). */
+const ASPM_CLI_DOC_FILES = ["getting-started.md", "docker-cli.md"];
+function listAspmCliDocDirCandidates() {
+    const out = [];
+    const add = (p) => {
+        if (!out.includes(p))
+            out.push(p);
+    };
+    const envDir = process.env.ASPM_CLI_DOCS_DIR?.trim();
+    if (envDir)
+        add(envDir);
+    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
+    add((0, node_path_1.join)(root, "docs", "aspm"));
+    const cwd = process.cwd();
+    add((0, node_path_1.join)(cwd, "docs", "aspm"));
+    add((0, node_path_1.join)(cwd, "..", "docs", "aspm"));
+    add((0, node_path_1.join)(cwd, "..", "..", "docs", "aspm"));
+    return out;
+}
+function listAspmDocDirCandidates() {
+    const out = [];
+    const add = (p) => {
+        if (!out.includes(p))
+            out.push(p);
+    };
+    const envDir = process.env.ASPM_DOCS_DIR?.trim();
+    if (envDir)
+        add(envDir);
+    const mcpSynced = process.env.MCP_DOCS_CONTENT_ROOT?.trim();
+    if (mcpSynced)
+        add((0, node_path_1.join)(mcpSynced, "aspm"));
+    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
+    add((0, node_path_1.join)(root, "apps", "mcp", "src", "resources", "content", "aspm"));
+    add((0, node_path_1.join)(root, "apps", "mcp", "dist", "resources", "content", "aspm"));
+    add((0, node_path_1.join)(root, "apps", "web", "src", "pages", "private", "docs", "content", "aspm"));
+    const cwd = process.cwd();
+    add((0, node_path_1.join)(cwd, "apps", "web", "src", "pages", "private", "docs", "content", "aspm"));
+    add((0, node_path_1.join)(cwd, "src", "resources", "content", "aspm"));
+    add((0, node_path_1.join)(cwd, "resources", "content", "aspm"));
+    add((0, node_path_1.join)(cwd, "..", "apps", "web", "src", "pages", "private", "docs", "content", "aspm"));
+    add((0, node_path_1.join)(cwd, "..", "..", "apps", "web", "src", "pages", "private", "docs", "content", "aspm"));
+    return out;
+}
+async function loadAspmDocsBundleFromDisk() {
+    const candidates = listAspmDocDirCandidates();
+    for (const dir of candidates) {
+        if (!(0, node_fs_1.existsSync)(dir))
+            continue;
+        const chunks = [];
+        for (const file of exports.ASPM_DOC_FILES) {
+            const fp = (0, node_path_1.join)(dir, file);
+            if (!(0, node_fs_1.existsSync)(fp))
+                continue;
+            const text = await (0, promises_1.readFile)(fp, "utf8");
+            chunks.push(`## aspm/${file}\n\n${text.trim()}\n`);
+        }
+        if (chunks.length > 0) {
+            const cliCandidates = listAspmCliDocDirCandidates();
+            for (const cliDir of cliCandidates) {
+                if (!(0, node_fs_1.existsSync)(cliDir))
+                    continue;
+                for (const file of ASPM_CLI_DOC_FILES) {
+                    const fp = (0, node_path_1.join)(cliDir, file);
+                    if (!(0, node_fs_1.existsSync)(fp))
+                        continue;
+                    const text = await (0, promises_1.readFile)(fp, "utf8");
+                    chunks.push(`## docs/aspm/${file}\n\n${text.trim()}\n`);
+                }
+                break;
+            }
+            return {
+                bundle: chunks.join("\n---\n\n"),
+                sourceDir: dir,
+                triedPaths: [...candidates, ...cliCandidates],
+            };
+        }
+    }
+    return {
+        bundle: "",
+        sourceDir: null,
+        triedPaths: [...candidates, ...listAspmCliDocDirCandidates()],
+    };
+}
+//# sourceMappingURL=aspm-docs-bundle.loader.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/aspm-docs-bundle.loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspm-docs-bundle.loader.js","sourceRoot":"","sources":["../../src/product-docs/aspm-docs-bundle.loader.ts"],"names":[],"mappings":";;;AA+EA,gEAuCC;AAtHD,qCAAqC;AACrC,+CAA4C;AAC5C,yCAAiC;AACjC,yDAAkE;AAElE,6DAA6D;AAChD,QAAA,cAAc,GAAG;IAC5B,oBAAoB;IACpB,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,uBAAuB;IACvB,0BAA0B;IAC1B,sBAAsB;IACtB,qBAAqB;IACrB,yBAAyB;IACzB,uBAAuB;IACvB,sBAAsB;IACtB,0BAA0B;IAC1B,2BAA2B;IAC3B,yBAAyB;CACjB,CAAC;AAEX,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,CAAC,oBAAoB,EAAE,eAAe,CAAU,CAAC;AAE5E,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,SAAS;QAAE,GAAG,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAErF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhG,OAAO,GAAG,CAAC;AACb,CAAC;AAEM,KAAK,UAAU,0BAA0B;IAK9C,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,sBAAc,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAA,oBAAU,EAAC,EAAE,CAAC;gBAAE,SAAS;YAC9B,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,2BAA2B,EAAE,CAAC;YACpD,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC;oBAAE,SAAS;gBAClC,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBAC9B,IAAI,CAAC,IAAA,oBAAU,EAAC,EAAE,CAAC;wBAAE,SAAS;oBAC9B,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,EAAE,EAAE,MAAM,CAAC,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM;YACR,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;gBAChC,SAAS,EAAE,GAAG;gBACd,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,GAAG,aAAa,CAAC;aAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,GAAG,2BAA2B,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/doc-bundle-utils.d.ts

@@ -0,0 +1,12 @@
+export type ParsedDocSection = {
+    id: string;
+    heading: string;
+    content: string;
+};
+/** Extract section id from a bundle chunk heading line. */
+export declare function sectionIdFromHeading(headingLine: string): string | null;
+export declare function parseDocBundle(bundle: string): ParsedDocSection[];
+export declare function listDocSectionIds(bundle: string): string[];
+export declare function pickDocSection(bundle: string, section: string): string | null;
+export declare function buildDocSectionIndex(title: string, sectionIds: string[], toolName: string): string;
+//# sourceMappingURL=doc-bundle-utils.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/doc-bundle-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doc-bundle-utils.d.ts","sourceRoot":"","sources":["../../src/product-docs/doc-bundle-utils.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,2DAA2D;AAC3D,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiCvE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAuBjE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAE1D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW7E;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAAE,EACpB,QAAQ,EAAE,MAAM,GACf,MAAM,CAWR"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/doc-bundle-utils.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sectionIdFromHeading = sectionIdFromHeading;
+exports.parseDocBundle = parseDocBundle;
+exports.listDocSectionIds = listDocSectionIds;
+exports.pickDocSection = pickDocSection;
+exports.buildDocSectionIndex = buildDocSectionIndex;
+const BUNDLE_SEPARATOR = "\n---\n\n";
+/** Extract section id from a bundle chunk heading line. */
+function sectionIdFromHeading(headingLine) {
+    const trimmed = headingLine.trim();
+    if (!trimmed.startsWith("## ")) {
+        return null;
+    }
+    const heading = trimmed.slice(3).trim();
+    const nausMatch = /^naus\/([a-z0-9-]+)$/iu.exec(heading);
+    if (nausMatch) {
+        return nausMatch[1] ?? null;
+    }
+    const aspmMatch = /^aspm\/(.+\.md)$/iu.exec(heading);
+    if (aspmMatch?.[1]) {
+        return aspmMatch[1].replace(/\.md$/u, "");
+    }
+    const aspmCliMatch = /^docs\/aspm\/(.+\.md)$/iu.exec(heading);
+    if (aspmCliMatch?.[1]) {
+        return aspmCliMatch[1].replace(/\.md$/u, "");
+    }
+    const aiMatch = /^ai\/(.+\.md)$/iu.exec(heading);
+    if (aiMatch?.[1]) {
+        return aiMatch[1].replace(/\.md$/u, "");
+    }
+    const legacyNausMatch = /^docs\/naus\/(.+\.md)$/iu.exec(heading);
+    if (legacyNausMatch?.[1]) {
+        return legacyNausMatch[1].replace(/\.md$/u, "");
+    }
+    return null;
+}
+function parseDocBundle(bundle) {
+    if (!bundle.trim()) {
+        return [];
+    }
+    const sections = [];
+    for (const chunk of bundle.split(BUNDLE_SEPARATOR)) {
+        const trimmed = chunk.trim();
+        if (!trimmed)
+            continue;
+        const newline = trimmed.indexOf("\n");
+        const headingLine = newline === -1 ? trimmed : trimmed.slice(0, newline);
+        const id = sectionIdFromHeading(headingLine);
+        if (!id)
+            continue;
+        sections.push({
+            id,
+            heading: headingLine.trim(),
+            content: trimmed,
+        });
+    }
+    return sections;
+}
+function listDocSectionIds(bundle) {
+    return parseDocBundle(bundle).map((s) => s.id);
+}
+function pickDocSection(bundle, section) {
+    const normalized = section.trim().toLowerCase();
+    if (!normalized)
+        return null;
+    for (const parsed of parseDocBundle(bundle)) {
+        if (parsed.id.toLowerCase() === normalized) {
+            return parsed.content;
+        }
+    }
+    return null;
+}
+function buildDocSectionIndex(title, sectionIds, toolName) {
+    const sorted = [...sectionIds].sort((a, b) => a.localeCompare(b));
+    const lines = [
+        `# ${title}`,
+        "",
+        "Call this tool with `section` to load one document. Available sections:",
+        "",
+        ...sorted.map((id) => `- \`${id}\` — \`${toolName}({ section: "${id}" })\``),
+        "",
+    ];
+    return lines.join("\n");
+}
+//# sourceMappingURL=doc-bundle-utils.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/doc-bundle-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doc-bundle-utils.js","sourceRoot":"","sources":["../../src/product-docs/doc-bundle-utils.ts"],"names":[],"mappings":";;AASA,oDAiCC;AAED,wCAuBC;AAED,8CAEC;AAED,wCAWC;AAED,oDAeC;AArGD,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAQrC,2DAA2D;AAC3D,SAAgB,oBAAoB,CAAC,WAAmB;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAExC,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9B,CAAC;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,YAAY,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE;YAAE,SAAS;QAElB,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE;YACF,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE;YAC3B,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAc;IAC9C,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,cAAc,CAAC,MAAc,EAAE,OAAe;IAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,oBAAoB,CAClC,KAAa,EACb,UAAoB,EACpB,QAAgB;IAEhB,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG;QACZ,KAAK,KAAK,EAAE;QACZ,EAAE;QACF,yEAAyE;QACzE,EAAE;QACF,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,UAAU,QAAQ,gBAAgB,EAAE,QAAQ,CAAC;QAC5E,EAAE;KACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.d.ts

@@ -0,0 +1,8 @@
+export { loadAiDocsBundleFromDisk } from "./ai-docs-bundle.loader.js";
+export { ASPM_DOC_FILES, loadAspmDocsBundleFromDisk } from "./aspm-docs-bundle.loader.js";
+export { buildDocSectionIndex, listDocSectionIds, type ParsedDocSection, parseDocBundle, pickDocSection, sectionIdFromHeading, } from "./doc-bundle-utils.js";
+export { KUBBISEC_MCP_ACTION_TOOLS, KUBBISEC_MCP_TOOLS, } from "./mcp-tools-catalog.js";
+export { loadNausPipelineDocsBundleFromDisk, NAUS_WEB_DOC_IDS, } from "./naus-pipeline-docs-bundle.loader.js";
+export { NAUS_SCHEMA_OVERVIEW } from "./naus-schema-overview.js";
+export { buildSecurityScannerPlaybookPayload, buildSecurityScannersCatalogPayload, isSecurityScannerId, listPlaybookNausKindAspmSnippets, PLAYBOOK_ASPM_MATRIX_EXAMPLE, type PlaybookTopic, parseSecurityScannerPlaybookArgs, SCANNER_META, type ScannerPlatform, type ScannerPlaybookEntry, SECURITY_SCANNER_IDS, type SecurityScannerId, wrapPlaybookSnippetAsPipelineYaml, } from "./security-scanner-playbooks.js";
+//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kCAAkC,EAClC,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,mBAAmB,EACnB,gCAAgC,EAChC,4BAA4B,EAC5B,KAAK,aAAa,EAClB,gCAAgC,EAChC,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,iCAAiC,GAClC,MAAM,iCAAiC,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.wrapPlaybookSnippetAsPipelineYaml = exports.SECURITY_SCANNER_IDS = exports.SCANNER_META = exports.parseSecurityScannerPlaybookArgs = exports.PLAYBOOK_ASPM_MATRIX_EXAMPLE = exports.listPlaybookNausKindAspmSnippets = exports.isSecurityScannerId = exports.buildSecurityScannersCatalogPayload = exports.buildSecurityScannerPlaybookPayload = exports.NAUS_SCHEMA_OVERVIEW = exports.NAUS_WEB_DOC_IDS = exports.loadNausPipelineDocsBundleFromDisk = exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = exports.sectionIdFromHeading = exports.pickDocSection = exports.parseDocBundle = exports.listDocSectionIds = exports.buildDocSectionIndex = exports.loadAspmDocsBundleFromDisk = exports.ASPM_DOC_FILES = exports.loadAiDocsBundleFromDisk = void 0;
+var ai_docs_bundle_loader_js_1 = require("./ai-docs-bundle.loader.js");
+Object.defineProperty(exports, "loadAiDocsBundleFromDisk", { enumerable: true, get: function () { return ai_docs_bundle_loader_js_1.loadAiDocsBundleFromDisk; } });
+var aspm_docs_bundle_loader_js_1 = require("./aspm-docs-bundle.loader.js");
+Object.defineProperty(exports, "ASPM_DOC_FILES", { enumerable: true, get: function () { return aspm_docs_bundle_loader_js_1.ASPM_DOC_FILES; } });
+Object.defineProperty(exports, "loadAspmDocsBundleFromDisk", { enumerable: true, get: function () { return aspm_docs_bundle_loader_js_1.loadAspmDocsBundleFromDisk; } });
+var doc_bundle_utils_js_1 = require("./doc-bundle-utils.js");
+Object.defineProperty(exports, "buildDocSectionIndex", { enumerable: true, get: function () { return doc_bundle_utils_js_1.buildDocSectionIndex; } });
+Object.defineProperty(exports, "listDocSectionIds", { enumerable: true, get: function () { return doc_bundle_utils_js_1.listDocSectionIds; } });
+Object.defineProperty(exports, "parseDocBundle", { enumerable: true, get: function () { return doc_bundle_utils_js_1.parseDocBundle; } });
+Object.defineProperty(exports, "pickDocSection", { enumerable: true, get: function () { return doc_bundle_utils_js_1.pickDocSection; } });
+Object.defineProperty(exports, "sectionIdFromHeading", { enumerable: true, get: function () { return doc_bundle_utils_js_1.sectionIdFromHeading; } });
+var mcp_tools_catalog_js_1 = require("./mcp-tools-catalog.js");
+Object.defineProperty(exports, "KUBBISEC_MCP_ACTION_TOOLS", { enumerable: true, get: function () { return mcp_tools_catalog_js_1.KUBBISEC_MCP_ACTION_TOOLS; } });
+Object.defineProperty(exports, "KUBBISEC_MCP_TOOLS", { enumerable: true, get: function () { return mcp_tools_catalog_js_1.KUBBISEC_MCP_TOOLS; } });
+var naus_pipeline_docs_bundle_loader_js_1 = require("./naus-pipeline-docs-bundle.loader.js");
+Object.defineProperty(exports, "loadNausPipelineDocsBundleFromDisk", { enumerable: true, get: function () { return naus_pipeline_docs_bundle_loader_js_1.loadNausPipelineDocsBundleFromDisk; } });
+Object.defineProperty(exports, "NAUS_WEB_DOC_IDS", { enumerable: true, get: function () { return naus_pipeline_docs_bundle_loader_js_1.NAUS_WEB_DOC_IDS; } });
+var naus_schema_overview_js_1 = require("./naus-schema-overview.js");
+Object.defineProperty(exports, "NAUS_SCHEMA_OVERVIEW", { enumerable: true, get: function () { return naus_schema_overview_js_1.NAUS_SCHEMA_OVERVIEW; } });
+var security_scanner_playbooks_js_1 = require("./security-scanner-playbooks.js");
+Object.defineProperty(exports, "buildSecurityScannerPlaybookPayload", { enumerable: true, get: function () { return security_scanner_playbooks_js_1.buildSecurityScannerPlaybookPayload; } });
+Object.defineProperty(exports, "buildSecurityScannersCatalogPayload", { enumerable: true, get: function () { return security_scanner_playbooks_js_1.buildSecurityScannersCatalogPayload; } });
+Object.defineProperty(exports, "isSecurityScannerId", { enumerable: true, get: function () { return security_scanner_playbooks_js_1.isSecurityScannerId; } });
+Object.defineProperty(exports, "listPlaybookNausKindAspmSnippets", { enumerable: true, get: function () { return security_scanner_playbooks_js_1.listPlaybookNausKindAspmSnippets; } });
+Object.defineProperty(exports, "PLAYBOOK_ASPM_MATRIX_EXAMPLE", { enumerable: true, get: function () { return security_scanner_playbooks_js_1.PLAYBOOK_ASPM_MATRIX_EXAMPLE; } });
+Object.defineProperty(exports, "parseSecurityScannerPlaybookArgs", { enumerable: true, get: function () { return security_scanner_playbooks_js_1.parseSecurityScannerPlaybookArgs; } });
+Object.defineProperty(exports, "SCANNER_META", { enumerable: true, get: function () { return security_scanner_playbooks_js_1.SCANNER_META; } });
+Object.defineProperty(exports, "SECURITY_SCANNER_IDS", { enumerable: true, get: function () { return security_scanner_playbooks_js_1.SECURITY_SCANNER_IDS; } });
+Object.defineProperty(exports, "wrapPlaybookSnippetAsPipelineYaml", { enumerable: true, get: function () { return security_scanner_playbooks_js_1.wrapPlaybookSnippetAsPipelineYaml; } });
+//# sourceMappingURL=index.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":";;;AAAA,uEAAsE;AAA7D,oIAAA,wBAAwB,OAAA;AACjC,2EAA0F;AAAjF,4HAAA,cAAc,OAAA;AAAE,wIAAA,0BAA0B,OAAA;AACnD,6DAO+B;AAN7B,2HAAA,oBAAoB,OAAA;AACpB,wHAAA,iBAAiB,OAAA;AAEjB,qHAAA,cAAc,OAAA;AACd,qHAAA,cAAc,OAAA;AACd,2HAAA,oBAAoB,OAAA;AAEtB,+DAGgC;AAF9B,iIAAA,yBAAyB,OAAA;AACzB,0HAAA,kBAAkB,OAAA;AAEpB,6FAG+C;AAF7C,yJAAA,kCAAkC,OAAA;AAClC,uIAAA,gBAAgB,OAAA;AAElB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iFAcyC;AAbvC,oJAAA,mCAAmC,OAAA;AACnC,oJAAA,mCAAmC,OAAA;AACnC,oIAAA,mBAAmB,OAAA;AACnB,iJAAA,gCAAgC,OAAA;AAChC,6IAAA,4BAA4B,OAAA;AAE5B,iJAAA,gCAAgC,OAAA;AAChC,6HAAA,YAAY,OAAA;AAGZ,qIAAA,oBAAoB,OAAA;AAEpB,kJAAA,iCAAiC,OAAA"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.d.ts

@@ -0,0 +1,4 @@
+/** Action tools exposed by @kubbisec/mcp (no documentation tools). */
+export declare const KUBBISEC_MCP_ACTION_TOOLS: readonly ["resolve_project_by_repository", "list_project_by_repository_candidates", "list_vulnerabilities", "get_vulnerability", "trigger_kubbisec_scan", "get_kubbisec_scan_status", "list_kubbisec_scan_tasks", "cancel_kubbisec_scan_task", "generate_remediation_plan", "generate_issue_draft_for_vulnerability", "start_ai_remediation_run", "get_ai_remediation_run_status", "get_ai_remediation_run_logs", "validate_naus_pipeline_yaml", "list_pipeline_generation_jobs"];
+export declare const KUBBISEC_MCP_TOOLS: readonly ["resolve_project_by_repository", "list_project_by_repository_candidates", "list_vulnerabilities", "get_vulnerability", "trigger_kubbisec_scan", "get_kubbisec_scan_status", "list_kubbisec_scan_tasks", "cancel_kubbisec_scan_task", "generate_remediation_plan", "generate_issue_draft_for_vulnerability", "start_ai_remediation_run", "get_ai_remediation_run_status", "get_ai_remediation_run_logs", "validate_naus_pipeline_yaml", "list_pipeline_generation_jobs"];
+//# sourceMappingURL=mcp-tools-catalog.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tools-catalog.d.ts","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,eAAO,MAAM,yBAAyB,mdAgB5B,CAAC;AAEX,eAAO,MAAM,kBAAkB,mdAA0C,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = void 0;
+/** Action tools exposed by @kubbisec/mcp (no documentation tools). */
+exports.KUBBISEC_MCP_ACTION_TOOLS = [
+    "resolve_project_by_repository",
+    "list_project_by_repository_candidates",
+    "list_vulnerabilities",
+    "get_vulnerability",
+    "trigger_kubbisec_scan",
+    "get_kubbisec_scan_status",
+    "list_kubbisec_scan_tasks",
+    "cancel_kubbisec_scan_task",
+    "generate_remediation_plan",
+    "generate_issue_draft_for_vulnerability",
+    "start_ai_remediation_run",
+    "get_ai_remediation_run_status",
+    "get_ai_remediation_run_logs",
+    "validate_naus_pipeline_yaml",
+    "list_pipeline_generation_jobs",
+];
+exports.KUBBISEC_MCP_TOOLS = [...exports.KUBBISEC_MCP_ACTION_TOOLS];
+//# sourceMappingURL=mcp-tools-catalog.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tools-catalog.js","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":";;;AAAA,sEAAsE;AACzD,QAAA,yBAAyB,GAAG;IACvC,+BAA+B;IAC/B,uCAAuC;IACvC,sBAAsB;IACtB,mBAAmB;IACnB,uBAAuB;IACvB,0BAA0B;IAC1B,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,wCAAwC;IACxC,0BAA0B;IAC1B,+BAA+B;IAC/B,6BAA6B;IAC7B,6BAA6B;IAC7B,+BAA+B;CACvB,CAAC;AAEE,QAAA,kBAAkB,GAAG,CAAC,GAAG,iCAAyB,CAAU,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/monorepo-root.d.ts

@@ -0,0 +1,4 @@
+/** Repo root when running from compiled `packages/shared/dist/product-docs/`. */
+export declare function monorepoRootFromSharedModule(): string;
+export declare function firstExistingDir(candidates: string[]): string | null;
+//# sourceMappingURL=monorepo-root.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/monorepo-root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"monorepo-root.d.ts","sourceRoot":"","sources":["../../src/product-docs/monorepo-root.ts"],"names":[],"mappings":"AAGA,iFAAiF;AACjF,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAOpE"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/monorepo-root.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.monorepoRootFromSharedModule = monorepoRootFromSharedModule;
+exports.firstExistingDir = firstExistingDir;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+/** Repo root when running from compiled `packages/shared/dist/product-docs/`. */
+function monorepoRootFromSharedModule() {
+    return (0, node_path_1.join)(__dirname, "..", "..", "..", "..");
+}
+function firstExistingDir(candidates) {
+    for (const dir of candidates) {
+        if ((0, node_fs_1.existsSync)(dir)) {
+            return dir;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=monorepo-root.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/monorepo-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monorepo-root.js","sourceRoot":"","sources":["../../src/product-docs/monorepo-root.ts"],"names":[],"mappings":";;AAIA,oEAEC;AAED,4CAOC;AAfD,qCAAqC;AACrC,yCAAiC;AAEjC,iFAAiF;AACjF,SAAgB,4BAA4B;IAC1C,OAAO,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,gBAAgB,CAAC,UAAoB;IACnD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,IAAA,oBAAU,EAAC,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.d.ts

@@ -0,0 +1,11 @@
+/** Web internal docs. Order matters for readability. */
+export declare const NAUS_WEB_DOC_IDS: readonly ["naus-quickstart", "naus-commands", "naus-runners", "naus-security", "naus-pipeline-overview", "naus-pipeline-only", "naus-pipeline-run", "naus-pipeline-depends", "naus-pipeline-anchors", "naus-pipeline-variables", "naus-pipeline-volumes", "naus-pipeline-script", "naus-pipeline-repository", "naus-pipeline-image", "naus-pipeline-docker-preset", "naus-pipeline-examples", "naus-aspm-integration", "naus-aspm-preset", "naus-aspm-matrix", "naus-aspm-gate"];
+/**
+ * Reads NAUS markdown: web content/naus, legacy docs/naus extras, @kubbisec/naus-validation README.
+ */
+export declare function loadNausPipelineDocsBundleFromDisk(): Promise<{
+    bundle: string;
+    sourceDir: string | null;
+    triedPaths: string[];
+}>;
+//# sourceMappingURL=naus-pipeline-docs-bundle.loader.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"naus-pipeline-docs-bundle.loader.d.ts","sourceRoot":"","sources":["../../src/product-docs/naus-pipeline-docs-bundle.loader.ts"],"names":[],"mappings":"AAKA,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,kdAqBnB,CAAC;AA2EX;;GAEG;AACH,wBAAsB,kCAAkC,IAAI,OAAO,CAAC;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC,CA8CD"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NAUS_WEB_DOC_IDS = void 0;
+exports.loadNausPipelineDocsBundleFromDisk = loadNausPipelineDocsBundleFromDisk;
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const monorepo_root_js_1 = require("./monorepo-root.js");
+/** Web internal docs. Order matters for readability. */
+exports.NAUS_WEB_DOC_IDS = [
+    "naus-quickstart",
+    "naus-commands",
+    "naus-runners",
+    "naus-security",
+    "naus-pipeline-overview",
+    "naus-pipeline-only",
+    "naus-pipeline-run",
+    "naus-pipeline-depends",
+    "naus-pipeline-anchors",
+    "naus-pipeline-variables",
+    "naus-pipeline-volumes",
+    "naus-pipeline-script",
+    "naus-pipeline-repository",
+    "naus-pipeline-image",
+    "naus-pipeline-docker-preset",
+    "naus-pipeline-examples",
+    "naus-aspm-integration",
+    "naus-aspm-preset",
+    "naus-aspm-matrix",
+    "naus-aspm-gate",
+];
+/** Extra markdown only under docs/naus/ (not duplicated in web tree). */
+const NAUS_LEGACY_DOC_FILES = [
+    "README.md",
+    "pipeline-reference.md",
+    "runner-management.md",
+    "troubleshooting.md",
+];
+function listWebNausDirCandidates() {
+    const out = [];
+    const add = (p) => {
+        if (!out.includes(p))
+            out.push(p);
+    };
+    const envDir = process.env.NAUS_WEB_DOCS_DIR?.trim();
+    if (envDir)
+        add(envDir);
+    const mcpSynced = process.env.MCP_DOCS_CONTENT_ROOT?.trim();
+    if (mcpSynced)
+        add((0, node_path_1.join)(mcpSynced, "naus"));
+    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
+    add((0, node_path_1.join)(root, "apps", "mcp", "src", "resources", "content", "naus"));
+    add((0, node_path_1.join)(root, "apps", "mcp", "dist", "resources", "content", "naus"));
+    add((0, node_path_1.join)(root, "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
+    const cwd = process.cwd();
+    add((0, node_path_1.join)(cwd, "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
+    add((0, node_path_1.join)(cwd, "src", "resources", "content", "naus"));
+    add((0, node_path_1.join)(cwd, "resources", "content", "naus"));
+    add((0, node_path_1.join)(cwd, "..", "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
+    add((0, node_path_1.join)(cwd, "..", "..", "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
+    return out;
+}
+function listLegacyNausDirCandidates() {
+    const out = [];
+    const add = (p) => {
+        if (!out.includes(p))
+            out.push(p);
+    };
+    const envDir = process.env.NAUS_PIPELINE_DOCS_DIR?.trim();
+    if (envDir)
+        add(envDir);
+    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
+    add((0, node_path_1.join)(root, "docs", "naus"));
+    const cwd = process.cwd();
+    add((0, node_path_1.join)(cwd, "docs", "naus"));
+    add((0, node_path_1.join)(cwd, "..", "docs", "naus"));
+    add((0, node_path_1.join)(cwd, "..", "..", "docs", "naus"));
+    return out;
+}
+function listValidationReadmeCandidates() {
+    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
+    const cwd = process.cwd();
+    return [
+        (0, node_path_1.join)(root, "packages", "naus", "validation", "README.md"),
+        (0, node_path_1.join)(root, "packages", "naus-validation", "README.md"),
+        (0, node_path_1.join)(cwd, "packages", "naus", "validation", "README.md"),
+        (0, node_path_1.join)(cwd, "packages", "naus-validation", "README.md"),
+        (0, node_path_1.join)(cwd, "..", "packages", "naus", "validation", "README.md"),
+    ];
+}
+async function readChunkIfExists(filePath, heading) {
+    if (!(0, node_fs_1.existsSync)(filePath))
+        return null;
+    const text = await (0, promises_1.readFile)(filePath, "utf8");
+    return `${heading}\n\n${text.trim()}\n`;
+}
+/**
+ * Reads NAUS markdown: web content/naus, legacy docs/naus extras, @kubbisec/naus-validation README.
+ */
+async function loadNausPipelineDocsBundleFromDisk() {
+    const webCandidates = listWebNausDirCandidates();
+    const legacyCandidates = listLegacyNausDirCandidates();
+    const triedPaths = [...webCandidates, ...legacyCandidates, ...listValidationReadmeCandidates()];
+    const chunks = [];
+    let sourceDir = null;
+    for (const dir of webCandidates) {
+        if (!(0, node_fs_1.existsSync)(dir))
+            continue;
+        const webChunks = [];
+        for (const id of exports.NAUS_WEB_DOC_IDS) {
+            const fp = (0, node_path_1.join)(dir, `${id}.md`);
+            const chunk = await readChunkIfExists(fp, `## naus/${id}`);
+            if (chunk)
+                webChunks.push(chunk);
+        }
+        if (webChunks.length > 0) {
+            chunks.push(...webChunks);
+            sourceDir = dir;
+            break;
+        }
+    }
+    for (const dir of legacyCandidates) {
+        if (!(0, node_fs_1.existsSync)(dir))
+            continue;
+        for (const file of NAUS_LEGACY_DOC_FILES) {
+            const fp = (0, node_path_1.join)(dir, file);
+            const chunk = await readChunkIfExists(fp, `## docs/naus/${file}`);
+            if (chunk)
+                chunks.push(chunk);
+        }
+        if (!sourceDir && chunks.length > 0)
+            sourceDir = dir;
+        break;
+    }
+    for (const fp of listValidationReadmeCandidates()) {
+        const chunk = await readChunkIfExists(fp, "## naus/validation");
+        if (chunk) {
+            chunks.push(chunk);
+            break;
+        }
+    }
+    return {
+        bundle: chunks.length > 0 ? chunks.join("\n---\n\n") : "",
+        sourceDir,
+        triedPaths,
+    };
+}
+//# sourceMappingURL=naus-pipeline-docs-bundle.loader.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naus-pipeline-docs-bundle.loader.js","sourceRoot":"","sources":["../../src/product-docs/naus-pipeline-docs-bundle.loader.ts"],"names":[],"mappings":";;;AAyGA,gFAkDC;AA3JD,qCAAqC;AACrC,+CAA4C;AAC5C,yCAAiC;AACjC,yDAAkE;AAElE,wDAAwD;AAC3C,QAAA,gBAAgB,GAAG;IAC9B,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,eAAe;IACf,wBAAwB;IACxB,oBAAoB;IACpB,mBAAmB;IACnB,uBAAuB;IACvB,uBAAuB;IACvB,yBAAyB;IACzB,uBAAuB;IACvB,sBAAsB;IACtB,0BAA0B;IAC1B,qBAAqB;IACrB,6BAA6B;IAC7B,wBAAwB;IACxB,uBAAuB;IACvB,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;CACR,CAAC;AAEX,yEAAyE;AACzE,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;CACZ,CAAC;AAEX,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,SAAS;QAAE,GAAG,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAErF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,8BAA8B;IACrC,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,OAAO;QACL,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACzD,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACtD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACxD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACrD,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IAChE,IAAI,CAAC,IAAA,oBAAU,EAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,GAAG,OAAO,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;AAC1C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kCAAkC;IAKtD,MAAM,aAAa,GAAG,wBAAwB,EAAE,CAAC;IACjD,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,gBAAgB,EAAE,GAAG,8BAA8B,EAAE,CAAC,CAAC;IAChG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,wBAAgB,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,KAAK;gBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;YAC1B,SAAS,GAAG,GAAG,CAAC;YAChB,MAAM;QACR,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,GAAG,GAAG,CAAC;QACrD,MAAM;IACR,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,8BAA8B,EAAE,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAChE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACzD,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.d.ts

@@ -0,0 +1,2 @@
+export declare const NAUS_SCHEMA_OVERVIEW = "NAUS pipeline YAML (cheat sheet \u2014 authoritative prose: naus_pipeline_docs, docs/naus/pipeline-reference.md):\n\nTOP-LEVEL (not GitHub Actions):\n- Required: run: (array of single-key job objects OR map job_id \u2192 config)\n- Optional: name, description, local, stages[], variables (map or KEY=value list), volumes[], repository, only[]\n- NEVER use top-level jobs:, env: (use variables:), needs:, commands:, steps:, or scanner:\n\nCONTAINER JOB (default kind: container):\n- image: + script: [string, ...] (required for container)\n- depends_on: [job_ids] (not needs:)\n- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged\n\nASPM JOBS (declarative \u2014 no manual trivy/aspm CLI in script):\n- kind: aspm + tool: (trivy|gitleaks|syft|osv|semgrep|sonar|nmap|skipfish) + mode: scan|upload|scan-and-upload\n- kind: aspm_matrix + parallel: [{ tool: ... }, ...] + matrix_strategy: chain|fanout\n- kind: aspm_gate + rules: { vulnerabilities, coverage, risk_score, ... }\n- kind: aspm_preset + preset: kubbisec/default-security\n- kind: docker \u2014 build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules)\n\nMINIMAL EXAMPLE:\nname: ci\nrun:\n  - build:\n      image: node:20-alpine\n      script: [npm ci, npm run build --if-present]\n  - security:\n      kind: aspm\n      tool: trivy\n      mode: scan-and-upload\n      depends_on: [build]\n\nAlways call validate_naus_pipeline_yaml before persisting. privileged: true needs kbsc.ci.privileged.run.";
+//# sourceMappingURL=naus-schema-overview.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"naus-schema-overview.d.ts","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,y/CA+ByE,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NAUS_SCHEMA_OVERVIEW = void 0;
+exports.NAUS_SCHEMA_OVERVIEW = `NAUS pipeline YAML (cheat sheet — authoritative prose: naus_pipeline_docs, docs/naus/pipeline-reference.md):
+
+TOP-LEVEL (not GitHub Actions):
+- Required: run: (array of single-key job objects OR map job_id → config)
+- Optional: name, description, local, stages[], variables (map or KEY=value list), volumes[], repository, only[]
+- NEVER use top-level jobs:, env: (use variables:), needs:, commands:, steps:, or scanner:
+
+CONTAINER JOB (default kind: container):
+- image: + script: [string, ...] (required for container)
+- depends_on: [job_ids] (not needs:)
+- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged
+
+ASPM JOBS (declarative — no manual trivy/aspm CLI in script):
+- kind: aspm + tool: (trivy|gitleaks|syft|osv|semgrep|sonar|nmap|skipfish) + mode: scan|upload|scan-and-upload
+- kind: aspm_matrix + parallel: [{ tool: ... }, ...] + matrix_strategy: chain|fanout
+- kind: aspm_gate + rules: { vulnerabilities, coverage, risk_score, ... }
+- kind: aspm_preset + preset: kubbisec/default-security
+- kind: docker — build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules)
+
+MINIMAL EXAMPLE:
+name: ci
+run:
+  - build:
+      image: node:20-alpine
+      script: [npm ci, npm run build --if-present]
+  - security:
+      kind: aspm
+      tool: trivy
+      mode: scan-and-upload
+      depends_on: [build]
+
+Always call validate_naus_pipeline_yaml before persisting. privileged: true needs kbsc.ci.privileged.run.`;
+//# sourceMappingURL=naus-schema-overview.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naus-schema-overview.js","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":";;;AAAa,QAAA,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0GA+BsE,CAAC"}