@kubbisec/ai-win32-x64 0.1.32 → 0.1.34

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/mcp-instructions.d.ts

@@ -1,2 +1,2 @@
-export declare const KUBBISEC_MCP_INSTRUCTIONS = "<kubbisec-mcp-instructions>\n<kubbisec-product-knowledge>\n  <products>\n    <product id=\"naus\" npm=\"@kubbisec/naus\" bin=\"naus\">KubbiSec CI engine: .naus.yml pipelines, runners, validate/plan/run. Cloud CI uses Env Packs; local run uses --env-file / --secret-file.</product>\n    <product id=\"aspm\" npm=\"@kubbisec/aspm\" bin=\"aspm\">Security CLI: parse/upload scanner reports (trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish), coverage, gate.</product>\n    <product id=\"ai\" npm=\"@kubbisec/ai\" bin=\"kubbisec\">CLI hub: login, findings (ls/show), fix/watch/chat, optional naus/aspm forwarding when binaries are on PATH.</product>\n  </products>\n  <boundaries>\n    <boundary>NAUS YAML is NOT GitHub Actions: top-level run: (never jobs:); script: + depends_on: (never commands:/needs:/steps:); ASPM jobs use kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).</boundary>\n    <boundary>aspm-cicd.md / aspm_docs section aspm-cicd describe GitHub Actions only. For KubbiSec native CI use naus_pipeline_docs (naus-aspm-integration, naus-aspm-preset, naus-aspm-matrix, naus-aspm-gate).</boundary>\n    <boundary>Do not mix CLIs: naus for pipelines/runners; aspm for scan upload/parse; kubbisec for AI remediation/chat. Org flag -o uses organization slug.</boundary>\n  </boundaries>\n  <anti-hallucination>\n    <rule>HARD-GATE: never invent CLI flags or full command lines \u2014 call naus_pipeline_docs (naus-commands), aspm_docs (aspm-commands), ai_docs (ai-commands), or security_scanner_playbook first.</rule>\n    <rule>HARD-GATE: never output fenced NAUS pipeline YAML unless naus_validate_yaml (or naus_local_validate) returned ok in this session.</rule>\n    <rule>HARD-GATE: never claim a tool/action succeeded without a successful tool_result in this turn.</rule>\n  </anti-hallucination>\n  <tool-routing>\n    <route intent=\"platform-knowledge\">kubbisec_mcp_knowledge (start of naus/aspm/ai product questions)</route>\n    <route intent=\"naus-docs-yaml\">naus_pipeline_docs \u2192 naus_schema_overview \u2192 validate_naus_pipeline_yaml</route>\n    <route intent=\"aspm-docs\">aspm_docs; scanners: security_scanners_catalog \u2192 security_scanner_playbook</route>\n    <route intent=\"ai-cli-docs\">ai_docs (ai-commands, ai-watch, mcp-login, scan, scan-watch)</route>\n    <route intent=\"local-clis\">naus_local_* / aspm_local_* / github_local_* always available in chat (no --extended-context); github uses host-first auth; missing naus/aspm auto-install @kubbisec/naus|aspm</route>\n  </tool-routing>\n</kubbisec-product-knowledge>\n\n<flows>\n  <flow id=\"findings\">Recommended flow: use resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), then list_vulnerabilities with the same repository fields or project_id/projectId. Tools accept snake_case and camelCase interchangeably. To act on a finding, use get_vulnerability (MCP) or get_finding_summary / list_findings (assistant CLI), then generate_remediation_plan and, if you want automation, start_ai_remediation_run followed by get_ai_remediation_run_status/get_ai_remediation_run_logs (run_id or runId). Pass vulnerabilityId (or vulnerability_id) in tool arguments when using kbs chat \u2014 there is no separate set_active_finding tool.</flow>\n  <flow id=\"naus-cloud\">Naus CI YAML in MCP: call validate_naus_pipeline_yaml before proposing or persisting YAML. Pipeline IDE flows (set_editor_yaml, trigger_run) are Platform Assistant only.</flow>\n  <flow id=\"naus-aspm-local\">Naus / ASPM / git on the developer machine (kbs or kubbisec chat; no --extended-context required): naus_local_validate | naus_local_plan | naus_local_run; aspm_local_scan | aspm_local_upload | aspm_local_doctor; github_local_* uses host-first gh/git auth (platform token only as remediation fallback). Missing naus/aspm binaries auto-install @kubbisec/naus and @kubbisec/aspm globally via npm/pnpm (allowlist). Local naus run/plan: default .secrets and .env in cwd, or --env-file / --secret-file; naus_local_run and naus_local_plan accept envFiles/secretFiles arrays. Cloud runners use Env Packs instead. Runner enrollment: naus register / naus start \u2014 do not spawn long-lived daemons from MCP chat.</flow>\n  <flow id=\"kubbisec-scan\">Hybrid local scan: MCP cannot run Pi/Superpowers on the host. (1) resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), or project_id/projectId. (2) trigger_kubbisec_scan with profile quick|full|ci (default full), upload (default true), require_scanners/requireScanners optional. (3) get_kubbisec_scan_status with task_id/taskId until status is done, failed, or cancelled; list_kubbisec_scan_tasks or cancel_kubbisec_scan_task as needed. Requires kubbisec watch or kubbisec scan --watch on a developer machine with repo checkout \u2014 task stays pending until claimed. Findings upload with source=KUBBISEC_AI; filter via list_vulnerabilities source=KUBBISEC_AI. For immediate local scan without queue, user runs kubbisec scan in terminal (not an MCP tool).</flow>\n</flows>\n\n<intent-matrix>\n| Intent | Cloud (API/MCP) | Local (host CLI) |\n| Validate YAML | validate_naus_pipeline_yaml | naus_local_validate |\n| Run pipeline | trigger_run (assistant) | naus_local_run |\n| Dependency graph | \u2014 | naus_local_plan |\n| Upload scan report | CI / findings API | aspm_local_upload |\n| ASPM CLI health | \u2014 | aspm_local_doctor |\n| Hybrid AI scan | trigger_kubbisec_scan | kubbisec scan |\n| Scan status | get_kubbisec_scan_status | stdout / .kubbisec/scan/&lt;runId&gt;/ |\n| Filter AI findings | list_vulnerabilities + source=KUBBISEC_AI | \u2014 |\n| MCP auth | hosted OAuth / device login | kubbisec mcp login |\n| Product docs | Platform Assistant / kubbisec chat | \u2014 |\n</intent-matrix>\n\n<rules>\n  <rule id=\"superpowers-mcp\">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. MCP has no documentation tools \u2014 use validate_naus_pipeline_yaml for YAML. Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>\n  <rule id=\"hosted-mcp\">Hosted MCP endpoint: https://mcp.kubbisec.com/mcp (OAuth2 for cloud IDEs). Local stdio: set KUBBISEC_ORGANIZATION_SLUG (preferred, e.g. minha-empresa) and KUBBISEC_API_KEY, or run kubbisec mcp login for device flow. Legacy KUBBISEC_ORGANIZATION_ID remains supported.</rule>\n</rules>\n</kubbisec-mcp-instructions>";
+export declare const KUBBISEC_MCP_INSTRUCTIONS = "<kubbisec-mcp-instructions>\n<kubbisec-product-knowledge>\n  <products>\n    <product id=\"naus\" npm=\"@kubbisec/naus\" bin=\"naus\">KubbiSec CI engine: .naus.yml pipelines, runners, validate/plan/run. Cloud CI uses Env Packs; local run uses --env-file / --secret-file.</product>\n    <product id=\"aspm\" npm=\"@kubbisec/aspm\" bin=\"aspm\">Security CLI: parse/upload scanner reports (trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish), coverage, gate.</product>\n    <product id=\"ai\" npm=\"@kubbisec/ai\" bin=\"kubbisec\">CLI hub: login, findings (ls/show), fix/watch/chat, optional naus/aspm forwarding when binaries are on PATH.</product>\n  </products>\n  <boundaries>\n    <boundary>NAUS YAML is NOT GitHub Actions: top-level run: (never jobs:); script: + depends_on: (never commands:/needs:/steps:); ASPM jobs use kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).</boundary>\n    <boundary>aspm-cicd.md / aspm_docs section aspm-cicd describe GitHub Actions only. For KubbiSec native CI use naus_pipeline_docs (naus-aspm-integration, naus-aspm-preset, naus-aspm-matrix, naus-aspm-gate).</boundary>\n    <boundary>Do not mix CLIs: naus for pipelines/runners; aspm for scan upload/parse; kubbisec for AI remediation/chat. Org flag -o uses organization slug.</boundary>\n  </boundaries>\n  <anti-hallucination>\n    <rule>HARD-GATE: never invent CLI flags or full command lines \u2014 call naus_pipeline_docs (naus-commands), aspm_docs (aspm-commands), ai_docs (ai-commands), or security_scanner_playbook first.</rule>\n    <rule>HARD-GATE: never output fenced NAUS pipeline YAML unless naus_validate_yaml (or naus_local_validate) returned ok in this session.</rule>\n    <rule>HARD-GATE: never claim a tool/action succeeded without a successful tool_result in this turn.</rule>\n  </anti-hallucination>\n  <tool-routing>\n    <route intent=\"platform-knowledge\">kubbisec_mcp_knowledge (start of naus/aspm/ai product questions)</route>\n    <route intent=\"naus-docs-yaml\">naus_pipeline_docs \u2192 naus_schema_overview \u2192 validate_naus_pipeline_yaml</route>\n    <route intent=\"aspm-docs\">aspm_docs; scanners: security_scanners_catalog \u2192 security_scanner_playbook</route>\n    <route intent=\"ai-cli-docs\">ai_docs (ai-commands, ai-watch, mcp-login, scan, scan-watch)</route>\n    <route intent=\"local-clis\">naus_local_* / aspm_local_* / github_local_* always available in chat (no --extended-context); github uses host-first auth; missing naus/aspm auto-install @kubbisec/naus|aspm</route>\n  </tool-routing>\n</kubbisec-product-knowledge>\n\n<flows>\n  <flow id=\"findings\">Recommended flow: use resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), then list_vulnerabilities with the same repository fields or project_id/projectId. Tools accept snake_case and camelCase interchangeably. To act on a finding, use get_vulnerability (MCP) or get_finding_summary / list_findings (assistant CLI), then generate_remediation_plan and, if you want automation, start_ai_remediation_run followed by get_ai_remediation_run_status/get_ai_remediation_run_logs (run_id or runId). Pass vulnerabilityId (or vulnerability_id) in tool arguments when using kbs chat \u2014 there is no separate set_active_finding tool.</flow>\n  <flow id=\"naus-cloud\">Naus CI YAML in MCP: call validate_naus_pipeline_yaml or naus_validate_yaml before proposing or persisting YAML. The platform MCP exposes the same assistant functions via the API, including set_pipeline_yaml, trigger_run, naus_pipeline_docs and aspm_docs.</flow>\n  <flow id=\"naus-aspm-local\">Naus / ASPM / git on the developer machine (kbs or kubbisec chat; no --extended-context required): naus_local_validate | naus_local_plan | naus_local_run; aspm_local_scan | aspm_local_upload | aspm_local_doctor; github_local_* uses host-first gh/git auth (platform token only as remediation fallback). Missing naus/aspm binaries auto-install @kubbisec/naus and @kubbisec/aspm globally via npm/pnpm (allowlist). Local naus run/plan: default .secrets and .env in cwd, or --env-file / --secret-file; naus_local_run and naus_local_plan accept envFiles/secretFiles arrays. Cloud runners use Env Packs instead. Runner enrollment: naus register / naus start \u2014 do not spawn long-lived daemons from MCP chat.</flow>\n  <flow id=\"kubbisec-scan\">Hybrid local scan: MCP cannot run Pi/Superpowers on the host. (1) resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), or project_id/projectId. (2) trigger_kubbisec_scan with profile quick|full|ci (default full), upload (default true), require_scanners/requireScanners optional. (3) get_kubbisec_scan_status with task_id/taskId until status is done, failed, or cancelled; list_kubbisec_scan_tasks or cancel_kubbisec_scan_task as needed. Requires kubbisec watch or kubbisec scan --watch on a developer machine with repo checkout \u2014 task stays pending until claimed. Findings upload with source=KUBBISEC_AI; filter via list_vulnerabilities source=KUBBISEC_AI. For immediate local scan without queue, user runs kubbisec scan in terminal (not an MCP tool).</flow>\n</flows>\n\n<intent-matrix>\n| Intent | Cloud (API/MCP) | Local (host CLI) |\n| Validate YAML | validate_naus_pipeline_yaml | naus_local_validate |\n| Run pipeline | trigger_run | naus_local_run |\n| Dependency graph | \u2014 | naus_local_plan |\n| Upload scan report | CI / findings API | aspm_local_upload |\n| ASPM CLI health | \u2014 | aspm_local_doctor |\n| Hybrid AI scan | trigger_kubbisec_scan | kubbisec scan |\n| Scan status | get_kubbisec_scan_status | stdout / .kubbisec/scan/&lt;runId&gt;/ |\n| Filter AI findings | list_vulnerabilities + source=KUBBISEC_AI | \u2014 |\n| MCP auth | hosted OAuth / device login | kubbisec mcp login |\n| Product docs | aspm_docs / naus_pipeline_docs (API) | \u2014 |\n</intent-matrix>\n\n<rules>\n  <rule id=\"superpowers-mcp\">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. Documentation and pipeline tools are the same as the KubbiSec assistant and run through the API (aspm_docs, naus_pipeline_docs, naus_validate_yaml, trigger_run). Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>\n  <rule id=\"hosted-mcp\">Hosted MCP endpoint: https://mcp.kubbisec.com/mcp (OAuth2 for cloud IDEs). Local stdio: set KUBBISEC_ORGANIZATION_SLUG (preferred, e.g. minha-empresa) and KUBBISEC_API_KEY, or run kubbisec mcp login for device flow. Legacy KUBBISEC_ORGANIZATION_ID remains supported.</rule>\n</rules>\n</kubbisec-mcp-instructions>";
 //# sourceMappingURL=mcp-instructions.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/mcp-instructions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-instructions.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/mcp-instructions.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,yBAAyB,ozMA4BT,CAAC"}
+{"version":3,"file":"mcp-instructions.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/mcp-instructions.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,yBAAyB,k9MA4BT,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/mcp-instructions.js

@@ -8,7 +8,7 @@ ${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
 
 <flows>
   <flow id="findings">Recommended flow: use resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), then list_vulnerabilities with the same repository fields or project_id/projectId. Tools accept snake_case and camelCase interchangeably. To act on a finding, use get_vulnerability (MCP) or get_finding_summary / list_findings (assistant CLI), then generate_remediation_plan and, if you want automation, start_ai_remediation_run followed by get_ai_remediation_run_status/get_ai_remediation_run_logs (run_id or runId). Pass vulnerabilityId (or vulnerability_id) in tool arguments when using kbs chat — there is no separate set_active_finding tool.</flow>
-  <flow id="naus-cloud">Naus CI YAML in MCP: call validate_naus_pipeline_yaml before proposing or persisting YAML. Pipeline IDE flows (set_editor_yaml, trigger_run) are Platform Assistant only.</flow>
+  <flow id="naus-cloud">Naus CI YAML in MCP: call validate_naus_pipeline_yaml or naus_validate_yaml before proposing or persisting YAML. The platform MCP exposes the same assistant functions via the API, including set_pipeline_yaml, trigger_run, naus_pipeline_docs and aspm_docs.</flow>
   <flow id="naus-aspm-local">Naus / ASPM / git on the developer machine (kbs or kubbisec chat; no --extended-context required): naus_local_validate | naus_local_plan | naus_local_run; aspm_local_scan | aspm_local_upload | aspm_local_doctor; github_local_* uses host-first gh/git auth (platform token only as remediation fallback). Missing naus/aspm binaries auto-install @kubbisec/naus and @kubbisec/aspm globally via npm/pnpm (allowlist). Local naus run/plan: default .secrets and .env in cwd, or --env-file / --secret-file; naus_local_run and naus_local_plan accept envFiles/secretFiles arrays. Cloud runners use Env Packs instead. Runner enrollment: naus register / naus start — do not spawn long-lived daemons from MCP chat.</flow>
   <flow id="kubbisec-scan">Hybrid local scan: MCP cannot run Pi/Superpowers on the host. (1) resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), or project_id/projectId. (2) trigger_kubbisec_scan with profile quick|full|ci (default full), upload (default true), require_scanners/requireScanners optional. (3) get_kubbisec_scan_status with task_id/taskId until status is done, failed, or cancelled; list_kubbisec_scan_tasks or cancel_kubbisec_scan_task as needed. Requires kubbisec watch or kubbisec scan --watch on a developer machine with repo checkout — task stays pending until claimed. Findings upload with source=KUBBISEC_AI; filter via list_vulnerabilities source=KUBBISEC_AI. For immediate local scan without queue, user runs kubbisec scan in terminal (not an MCP tool).</flow>
 </flows>
@@ -16,7 +16,7 @@ ${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
 <intent-matrix>
 | Intent | Cloud (API/MCP) | Local (host CLI) |
 | Validate YAML | validate_naus_pipeline_yaml | naus_local_validate |
-| Run pipeline | trigger_run (assistant) | naus_local_run |
+| Run pipeline | trigger_run | naus_local_run |
 | Dependency graph | — | naus_local_plan |
 | Upload scan report | CI / findings API | aspm_local_upload |
 | ASPM CLI health | — | aspm_local_doctor |
@@ -24,11 +24,11 @@ ${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
 | Scan status | get_kubbisec_scan_status | stdout / .kubbisec/scan/&lt;runId&gt;/ |
 | Filter AI findings | list_vulnerabilities + source=KUBBISEC_AI | — |
 | MCP auth | hosted OAuth / device login | kubbisec mcp login |
-| Product docs | Platform Assistant / kubbisec chat | — |
+| Product docs | aspm_docs / naus_pipeline_docs (API) | — |
 </intent-matrix>
 
 <rules>
-  <rule id="superpowers-mcp">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. MCP has no documentation tools — use validate_naus_pipeline_yaml for YAML. Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>
+  <rule id="superpowers-mcp">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. Documentation and pipeline tools are the same as the KubbiSec assistant and run through the API (aspm_docs, naus_pipeline_docs, naus_validate_yaml, trigger_run). Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>
   <rule id="hosted-mcp">Hosted MCP endpoint: ${constants_1.KUBBISEC_HOSTED_MCP_URL} (OAuth2 for cloud IDEs). Local stdio: set KUBBISEC_ORGANIZATION_SLUG (preferred, e.g. minha-empresa) and KUBBISEC_API_KEY, or run kubbisec mcp login for device flow. Legacy KUBBISEC_ORGANIZATION_ID remains supported.</rule>
 </rules>
 </kubbisec-mcp-instructions>`;

package/bundled/node_modules/@kubbisec/shared/dist/dto/create-report.dto.d.ts

@@ -1,4 +1,4 @@
-import { ScanSource, ScanType } from "../enums";
+import { ScanType } from "../enums";
 import { CreateVulnerabilityDto } from "./create-vulnerability.dto";
 export declare class ExecutionContextDto {
     trigger?: string;
@@ -15,7 +15,8 @@ export declare class ExecutionContextDto {
     ciPipelineRunId?: string;
 }
 export declare class CreateReportDto {
-    source: ScanSource;
+    /** Scanner id or document provider (`TRIVY`, `CodeQL`, `generic-sarif`). Column is varchar(20). */
+    source: string;
     scanType: ScanType;
     target: string;
     rawFileName?: string;

package/bundled/node_modules/@kubbisec/shared/dist/dto/create-report.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-report.dto.d.ts","sourceRoot":"","sources":["../../src/dto/create-report.dto.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,qBAAa,mBAAmB;IAG9B,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,aAAa,CAAC,EAAE,MAAM,CAAC;IAIvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAI1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAIlB,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,eAAe;IAE1B,MAAM,EAAG,UAAU,CAAC;IAGpB,QAAQ,EAAG,QAAQ,CAAC;IAKpB,MAAM,EAAG,MAAM,CAAC;IAKhB,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAKnC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAKhC,eAAe,EAAG,sBAAsB,EAAE,CAAC;CAC5C"}
+{"version":3,"file":"create-report.dto.d.ts","sourceRoot":"","sources":["../../src/dto/create-report.dto.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,qBAAa,mBAAmB;IAG9B,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,aAAa,CAAC,EAAE,MAAM,CAAC;IAIvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAI1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAIlB,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,eAAe;IAC1B,mGAAmG;IAInG,MAAM,EAAG,MAAM,CAAC;IAGhB,QAAQ,EAAG,QAAQ,CAAC;IAKpB,MAAM,EAAG,MAAM,CAAC;IAKhB,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAKnC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAKhC,eAAe,EAAG,sBAAsB,EAAE,CAAC;CAC5C"}

package/bundled/node_modules/@kubbisec/shared/dist/dto/create-report.dto.js

@@ -90,6 +90,7 @@ __decorate([
     __metadata("design:type", String)
 ], ExecutionContextDto.prototype, "ciPipelineRunId", void 0);
 class CreateReportDto {
+    /** Scanner id or document provider (`TRIVY`, `CodeQL`, `generic-sarif`). Column is varchar(20). */
     source;
     scanType;
     target;
@@ -101,7 +102,9 @@ class CreateReportDto {
 }
 exports.CreateReportDto = CreateReportDto;
 __decorate([
-    (0, class_validator_1.IsEnum)(enums_1.ScanSource),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(20),
     __metadata("design:type", String)
 ], CreateReportDto.prototype, "source", void 0);
 __decorate([

package/bundled/node_modules/@kubbisec/shared/dist/dto/create-report.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-report.dto.js","sourceRoot":"","sources":["../../src/dto/create-report.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAUyB;AACzB,oCAAgD;AAChD,yEAAoE;AAEpE,MAAa,mBAAmB;IAG9B,OAAO,CAAU;IAIjB,SAAS,CAAU;IAInB,MAAM,CAAU;IAIhB,aAAa,CAAU;IAIvB,gBAAgB,CAAU;IAI1B,iBAAiB,CAAU;IAI3B,QAAQ,CAAU;IAIlB,OAAO,CAAU;IAIjB,UAAU,CAAU;IAIpB,WAAW,CAAU;IAIrB,UAAU,CAAU;IAIpB,eAAe,CAAU;CAC1B;AAhDD,kDAgDC;AA7CC;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oDACM;AAIjB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;sDACQ;AAInB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;mDACK;AAIhB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;0DACY;AAIvB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;6DACe;AAI1B;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8DACgB;AAI3B;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;qDACO;AAIlB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oDACM;AAIjB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACS;AAIpB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;wDACU;AAIrB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACS;AAIpB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;4DACc;AAG3B,MAAa,eAAe;IAE1B,MAAM,CAAc;IAGpB,QAAQ,CAAY;IAKpB,MAAM,CAAU;IAKhB,WAAW,CAAU;IAIrB,SAAS,CAAU;IAInB,QAAQ,CAA2B;IAKnC,SAAS,CAAuB;IAKhC,eAAe,CAA4B;CAC5C;AAlCD,0CAkCC;AAhCC;IADC,IAAA,wBAAM,EAAC,kBAAU,CAAC;;+CACC;AAGpB;IADC,IAAA,wBAAM,EAAC,gBAAQ,CAAC;;iDACG;AAKpB;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;+CACC;AAKhB;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;oDACM;AAIrB;IAFC,IAAA,8BAAY,GAAE;IACd,IAAA,4BAAU,GAAE;;kDACM;AAInB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;iDACsB;AAKnC;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC;8BACpB,mBAAmB;kDAAC;AAKhC;IAHC,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,iDAAsB,CAAC;;wDACQ"}
+{"version":3,"file":"create-report.dto.js","sourceRoot":"","sources":["../../src/dto/create-report.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAUyB;AACzB,oCAAoC;AACpC,yEAAoE;AAEpE,MAAa,mBAAmB;IAG9B,OAAO,CAAU;IAIjB,SAAS,CAAU;IAInB,MAAM,CAAU;IAIhB,aAAa,CAAU;IAIvB,gBAAgB,CAAU;IAI1B,iBAAiB,CAAU;IAI3B,QAAQ,CAAU;IAIlB,OAAO,CAAU;IAIjB,UAAU,CAAU;IAIpB,WAAW,CAAU;IAIrB,UAAU,CAAU;IAIpB,eAAe,CAAU;CAC1B;AAhDD,kDAgDC;AA7CC;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oDACM;AAIjB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;sDACQ;AAInB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;mDACK;AAIhB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;0DACY;AAIvB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;6DACe;AAI1B;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8DACgB;AAI3B;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;qDACO;AAIlB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oDACM;AAIjB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACS;AAIpB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;wDACU;AAIrB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACS;AAIpB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;4DACc;AAG3B,MAAa,eAAe;IAC1B,mGAAmG;IAInG,MAAM,CAAU;IAGhB,QAAQ,CAAY;IAKpB,MAAM,CAAU;IAKhB,WAAW,CAAU;IAIrB,SAAS,CAAU;IAInB,QAAQ,CAA2B;IAKnC,SAAS,CAAuB;IAKhC,eAAe,CAA4B;CAC5C;AArCD,0CAqCC;AAhCC;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;+CACE;AAGhB;IADC,IAAA,wBAAM,EAAC,gBAAQ,CAAC;;iDACG;AAKpB;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;+CACC;AAKhB;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;oDACM;AAIrB;IAFC,IAAA,8BAAY,GAAE;IACd,IAAA,4BAAU,GAAE;;kDACM;AAInB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;iDACsB;AAKnC;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC;8BACpB,mBAAmB;kDAAC;AAKhC;IAHC,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,iDAAsB,CAAC;;wDACQ"}

package/bundled/node_modules/@kubbisec/shared/dist/enums.d.ts

@@ -17,7 +17,58 @@ export declare enum ScanType {
     WEB = "WEB",
     DEPENDENCIES = "DEPENDENCIES",
     SECRETS = "SECRETS",
-    SBOM = "SBOM"
+    SBOM = "SBOM",
+    /** Category ids accepted alongside the legacy values above. */
+    sast = "sast",
+    sca = "sca",
+    secrets = "secrets",
+    dast = "dast",
+    iac = "iac",
+    container = "container",
+    sbom = "sbom",
+    api_security = "api_security",
+    k8s_manifest = "k8s_manifest",
+    k8s_runtime = "k8s_runtime",
+    cspm = "cspm",
+    cwpp = "cwpp",
+    cnapp = "cnapp",
+    host_vuln = "host_vuln",
+    network_vuln = "network_vuln",
+    attack_surface = "attack_surface",
+    port_scanning = "port_scanning",
+    web_vuln = "web_vuln",
+    cve = "cve",
+    malware = "malware",
+    supply_chain = "supply_chain",
+    dependency_confusion = "dependency_confusion",
+    typosquatting = "typosquatting",
+    license = "license",
+    binary = "binary",
+    firmware = "firmware",
+    mobile = "mobile",
+    android = "android",
+    ios = "ios",
+    infra_compliance = "infra_compliance",
+    k8s_compliance = "k8s_compliance",
+    docker_compliance = "docker_compliance",
+    cloud_compliance = "cloud_compliance",
+    policy_as_code = "policy_as_code",
+    cicd_security = "cicd_security",
+    github_posture = "github_posture",
+    gitlab_security = "gitlab_security",
+    repository_security = "repository_security",
+    artifact_registry = "artifact_registry",
+    package_registry = "package_registry",
+    pentest = "pentest",
+    bug_bounty = "bug_bounty",
+    red_team = "red_team",
+    bas = "bas",
+    threat_model = "threat_model",
+    threat_intel = "threat_intel",
+    exploit_intel = "exploit_intel",
+    epss = "epss",
+    llm_security = "llm_security",
+    mcp_agent = "mcp_agent"
 }
 export declare enum Severity {
     CRITICAL = "CRITICAL",

package/bundled/node_modules/@kubbisec/shared/dist/enums.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,QAAQ;IAClB,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,oBAAY,QAAQ;IAClB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,oBAAoB,yBAAyB;IAC7C,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,4IAKhC,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,mEAG/B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,uBAAuB,CAE3F;AAGD,oBAAY,WAAW;IAErB,aAAa,kBAAkB;IAE/B,MAAM,WAAW;IAEjB,OAAO,YAAY;IAEnB,gBAAgB,qBAAqB;IAErC,UAAU,eAAe;IAEzB,YAAY,iBAAiB;IAE7B,UAAU,eAAe;IAEzB,GAAG,QAAQ;IAEX,UAAU,eAAe;IAEzB,gBAAgB,qBAAqB;IAErC,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IACvB,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAGD,oBAAY,SAAS;IACnB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAGD,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AAEX,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAW7D,CAAC"}
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,QAAQ;IAClB,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,+DAA+D;IAC/D,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;IAC7B,WAAW,gBAAgB;IAC3B,IAAI,SAAS;IACb,IAAI,SAAS;IACb,KAAK,UAAU;IACf,SAAS,cAAc;IACvB,YAAY,iBAAiB;IAC7B,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,YAAY,iBAAiB;IAC7B,oBAAoB,yBAAyB;IAC7C,aAAa,kBAAkB;IAC/B,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,gBAAgB,qBAAqB;IACrC,cAAc,mBAAmB;IACjC,iBAAiB,sBAAsB;IACvC,gBAAgB,qBAAqB;IACrC,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,iBAAiB,sBAAsB;IACvC,gBAAgB,qBAAqB;IACrC,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,IAAI,SAAS;IACb,YAAY,iBAAiB;IAC7B,SAAS,cAAc;CACxB;AAED,oBAAY,QAAQ;IAClB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,oBAAoB,yBAAyB;IAC7C,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,4IAKhC,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,mEAG/B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,uBAAuB,CAE3F;AAGD,oBAAY,WAAW;IAErB,aAAa,kBAAkB;IAE/B,MAAM,WAAW;IAEjB,OAAO,YAAY;IAEnB,gBAAgB,qBAAqB;IAErC,UAAU,eAAe;IAEzB,YAAY,iBAAiB;IAE7B,UAAU,eAAe;IAEzB,GAAG,QAAQ;IAEX,UAAU,eAAe;IAEzB,gBAAgB,qBAAqB;IAErC,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IACvB,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAGD,oBAAY,SAAS;IACnB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAGD,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AAEX,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAW7D,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/enums.js

@@ -24,6 +24,57 @@ var ScanType;
     ScanType["DEPENDENCIES"] = "DEPENDENCIES";
     ScanType["SECRETS"] = "SECRETS";
     ScanType["SBOM"] = "SBOM";
+    /** Category ids accepted alongside the legacy values above. */
+    ScanType["sast"] = "sast";
+    ScanType["sca"] = "sca";
+    ScanType["secrets"] = "secrets";
+    ScanType["dast"] = "dast";
+    ScanType["iac"] = "iac";
+    ScanType["container"] = "container";
+    ScanType["sbom"] = "sbom";
+    ScanType["api_security"] = "api_security";
+    ScanType["k8s_manifest"] = "k8s_manifest";
+    ScanType["k8s_runtime"] = "k8s_runtime";
+    ScanType["cspm"] = "cspm";
+    ScanType["cwpp"] = "cwpp";
+    ScanType["cnapp"] = "cnapp";
+    ScanType["host_vuln"] = "host_vuln";
+    ScanType["network_vuln"] = "network_vuln";
+    ScanType["attack_surface"] = "attack_surface";
+    ScanType["port_scanning"] = "port_scanning";
+    ScanType["web_vuln"] = "web_vuln";
+    ScanType["cve"] = "cve";
+    ScanType["malware"] = "malware";
+    ScanType["supply_chain"] = "supply_chain";
+    ScanType["dependency_confusion"] = "dependency_confusion";
+    ScanType["typosquatting"] = "typosquatting";
+    ScanType["license"] = "license";
+    ScanType["binary"] = "binary";
+    ScanType["firmware"] = "firmware";
+    ScanType["mobile"] = "mobile";
+    ScanType["android"] = "android";
+    ScanType["ios"] = "ios";
+    ScanType["infra_compliance"] = "infra_compliance";
+    ScanType["k8s_compliance"] = "k8s_compliance";
+    ScanType["docker_compliance"] = "docker_compliance";
+    ScanType["cloud_compliance"] = "cloud_compliance";
+    ScanType["policy_as_code"] = "policy_as_code";
+    ScanType["cicd_security"] = "cicd_security";
+    ScanType["github_posture"] = "github_posture";
+    ScanType["gitlab_security"] = "gitlab_security";
+    ScanType["repository_security"] = "repository_security";
+    ScanType["artifact_registry"] = "artifact_registry";
+    ScanType["package_registry"] = "package_registry";
+    ScanType["pentest"] = "pentest";
+    ScanType["bug_bounty"] = "bug_bounty";
+    ScanType["red_team"] = "red_team";
+    ScanType["bas"] = "bas";
+    ScanType["threat_model"] = "threat_model";
+    ScanType["threat_intel"] = "threat_intel";
+    ScanType["exploit_intel"] = "exploit_intel";
+    ScanType["epss"] = "epss";
+    ScanType["llm_security"] = "llm_security";
+    ScanType["mcp_agent"] = "mcp_agent";
 })(ScanType || (exports.ScanType = ScanType = {}));
 var Severity;
 (function (Severity) {
@@ -127,7 +178,7 @@ exports.SOURCE_SCAN_TYPE_MAP = {
     [ScanSource.SEMGREP]: ScanType.SAST,
     [ScanSource.NMAP]: ScanType.NETWORK,
     [ScanSource.SKIPFISH]: ScanType.WEB,
-    [ScanSource.OSV]: ScanType.DEPENDENCIES,
+    [ScanSource.OSV]: ScanType.sca,
     [ScanSource.GITLEAKS]: ScanType.SECRETS,
     [ScanSource.SYFT]: ScanType.SBOM,
     [ScanSource.VULNDB]: ScanType.DEPENDENCIES,

package/bundled/node_modules/@kubbisec/shared/dist/enums.js.map

@@ -1 +1 @@
-{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AAyDA,8DAEC;AA3DD,IAAY,UAWX;AAXD,WAAY,UAAU;IACpB,6BAAe,CAAA;IACf,6BAAe,CAAA;IACf,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,mCAAqB,CAAA;IACrB,yBAAW,CAAA;IACX,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,+BAAiB,CAAA;IACjB,yCAA2B,CAAA;AAC7B,CAAC,EAXW,UAAU,0BAAV,UAAU,QAWrB;AAED,IAAY,QAQX;AARD,WAAY,QAAQ;IAClB,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,+BAAmB,CAAA;IACnB,yBAAa,CAAA;AACf,CAAC,EARW,QAAQ,wBAAR,QAAQ,QAQnB;AAED,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EANW,QAAQ,wBAAR,QAAQ,QAMnB;AAED,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,wDAAiC,CAAA;IACjC,oHAAoH;IACpH,oEAA6C,CAAA;IAC7C,sCAAe,CAAA;IACf,4CAAqB,CAAA;AACvB,CAAC,EATW,mBAAmB,mCAAnB,mBAAmB,QAS9B;AAEY,QAAA,6BAA6B,GAAG;IAC3C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,SAAS;IAC7B,mBAAmB,CAAC,QAAQ;IAC5B,mBAAmB,CAAC,oBAAoB;CAChC,CAAC;AAEX,gFAAgF;AACnE,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,QAAQ;CACpB,CAAC;AAIX,SAAgB,yBAAyB,CAAC,MAAc;IACtD,OAAQ,oCAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AACjE,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB,iDAAiD;IACjD,8CAA+B,CAAA;IAC/B,0DAA0D;IAC1D,gCAAiB,CAAA;IACjB,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,+CAA+C;IAC/C,oDAAqC,CAAA;IACrC,gEAAgE;IAChE,wCAAyB,CAAA;IACzB,gEAAgE;IAChE,4CAA6B,CAAA;IAC7B,yCAAyC;IACzC,wCAAyB,CAAA;IACzB,iBAAiB;IACjB,0BAAW,CAAA;IACX,cAAc;IACd,wCAAyB,CAAA;IACzB,gDAAgD;IAChD,oDAAqC,CAAA;IACrC,gDAAgD;IAChD,8BAAe,CAAA;AACjB,CAAC,EAvBW,WAAW,2BAAX,WAAW,QAuBtB;AAED,0DAA0D;AAC1D,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,oDAAmC,CAAA;IACnC,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;IACrB,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AAED,+CAA+C;AAC/C,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,kCAAqB,CAAA;IACrB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,wBAAW,CAAA;IACX,0BAAa,CAAA;AACf,CAAC,EANW,SAAS,yBAAT,SAAS,QAMpB;AAED,4CAA4C;AAC/B,QAAA,qBAAqB,GAAG;IACnC,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,mCAAe,CAAA;IACf,qCAAiB,CAAA;AACnB,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAEY,QAAA,oBAAoB,GAAiC;IAChE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,SAAS;IACtC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI;IACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI;IACnC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO;IACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG;IACnC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,YAAY;IACvC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO;IACvC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI;IAChC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,YAAY;IAC1C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,IAAI;CACxC,CAAC"}
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AA4GA,8DAEC;AA9GD,IAAY,UAWX;AAXD,WAAY,UAAU;IACpB,6BAAe,CAAA;IACf,6BAAe,CAAA;IACf,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,mCAAqB,CAAA;IACrB,yBAAW,CAAA;IACX,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,+BAAiB,CAAA;IACjB,yCAA2B,CAAA;AAC7B,CAAC,EAXW,UAAU,0BAAV,UAAU,QAWrB;AAED,IAAY,QA2DX;AA3DD,WAAY,QAAQ;IAClB,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,+BAAmB,CAAA;IACnB,yBAAa,CAAA;IACb,+DAA+D;IAC/D,yBAAa,CAAA;IACb,uBAAW,CAAA;IACX,+BAAmB,CAAA;IACnB,yBAAa,CAAA;IACb,uBAAW,CAAA;IACX,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,yCAA6B,CAAA;IAC7B,yCAA6B,CAAA;IAC7B,uCAA2B,CAAA;IAC3B,yBAAa,CAAA;IACb,yBAAa,CAAA;IACb,2BAAe,CAAA;IACf,mCAAuB,CAAA;IACvB,yCAA6B,CAAA;IAC7B,6CAAiC,CAAA;IACjC,2CAA+B,CAAA;IAC/B,iCAAqB,CAAA;IACrB,uBAAW,CAAA;IACX,+BAAmB,CAAA;IACnB,yCAA6B,CAAA;IAC7B,yDAA6C,CAAA;IAC7C,2CAA+B,CAAA;IAC/B,+BAAmB,CAAA;IACnB,6BAAiB,CAAA;IACjB,iCAAqB,CAAA;IACrB,6BAAiB,CAAA;IACjB,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,iDAAqC,CAAA;IACrC,6CAAiC,CAAA;IACjC,mDAAuC,CAAA;IACvC,iDAAqC,CAAA;IACrC,6CAAiC,CAAA;IACjC,2CAA+B,CAAA;IAC/B,6CAAiC,CAAA;IACjC,+CAAmC,CAAA;IACnC,uDAA2C,CAAA;IAC3C,mDAAuC,CAAA;IACvC,iDAAqC,CAAA;IACrC,+BAAmB,CAAA;IACnB,qCAAyB,CAAA;IACzB,iCAAqB,CAAA;IACrB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,yCAA6B,CAAA;IAC7B,2CAA+B,CAAA;IAC/B,yBAAa,CAAA;IACb,yCAA6B,CAAA;IAC7B,mCAAuB,CAAA;AACzB,CAAC,EA3DW,QAAQ,wBAAR,QAAQ,QA2DnB;AAED,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EANW,QAAQ,wBAAR,QAAQ,QAMnB;AAED,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,wDAAiC,CAAA;IACjC,oHAAoH;IACpH,oEAA6C,CAAA;IAC7C,sCAAe,CAAA;IACf,4CAAqB,CAAA;AACvB,CAAC,EATW,mBAAmB,mCAAnB,mBAAmB,QAS9B;AAEY,QAAA,6BAA6B,GAAG;IAC3C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,SAAS;IAC7B,mBAAmB,CAAC,QAAQ;IAC5B,mBAAmB,CAAC,oBAAoB;CAChC,CAAC;AAEX,gFAAgF;AACnE,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,QAAQ;CACpB,CAAC;AAIX,SAAgB,yBAAyB,CAAC,MAAc;IACtD,OAAQ,oCAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AACjE,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB,iDAAiD;IACjD,8CAA+B,CAAA;IAC/B,0DAA0D;IAC1D,gCAAiB,CAAA;IACjB,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,+CAA+C;IAC/C,oDAAqC,CAAA;IACrC,gEAAgE;IAChE,wCAAyB,CAAA;IACzB,gEAAgE;IAChE,4CAA6B,CAAA;IAC7B,yCAAyC;IACzC,wCAAyB,CAAA;IACzB,iBAAiB;IACjB,0BAAW,CAAA;IACX,cAAc;IACd,wCAAyB,CAAA;IACzB,gDAAgD;IAChD,oDAAqC,CAAA;IACrC,gDAAgD;IAChD,8BAAe,CAAA;AACjB,CAAC,EAvBW,WAAW,2BAAX,WAAW,QAuBtB;AAED,0DAA0D;AAC1D,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,oDAAmC,CAAA;IACnC,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;IACrB,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AAED,+CAA+C;AAC/C,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,kCAAqB,CAAA;IACrB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,wBAAW,CAAA;IACX,0BAAa,CAAA;AACf,CAAC,EANW,SAAS,yBAAT,SAAS,QAMpB;AAED,4CAA4C;AAC/B,QAAA,qBAAqB,GAAG;IACnC,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,mCAAe,CAAA;IACf,qCAAiB,CAAA;AACnB,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAEY,QAAA,oBAAoB,GAAiC;IAChE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,SAAS;IACtC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI;IACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI;IACnC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO;IACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG;IACnC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG;IAC9B,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO;IACvC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI;IAChC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,YAAY;IAC1C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,IAAI;CACxC,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.d.ts

@@ -1,7 +1,7 @@
 export { loadAiDocsBundleFromDisk } from "./ai-docs-bundle.loader.js";
 export { ASPM_DOC_FILES, loadAspmDocsBundleFromDisk } from "./aspm-docs-bundle.loader.js";
 export { buildDocSectionIndex, listDocSectionIds, type ParsedDocSection, parseDocBundle, pickDocSection, sectionIdFromHeading, } from "./doc-bundle-utils.js";
-export { KUBBISEC_MCP_ACTION_TOOLS, KUBBISEC_MCP_TOOLS, } from "./mcp-tools-catalog.js";
+export { KUBBISEC_ASSISTANT_PARITY_TOOLS, KUBBISEC_MCP_ACTION_TOOLS, KUBBISEC_MCP_TOOLS, } from "./mcp-tools-catalog.js";
 export { loadNausPipelineDocsBundleFromDisk, NAUS_WEB_DOC_IDS, } from "./naus-pipeline-docs-bundle.loader.js";
 export { NAUS_SCHEMA_OVERVIEW } from "./naus-schema-overview.js";
 export { buildSecurityScannerPlaybookPayload, buildSecurityScannersCatalogPayload, isSecurityScannerId, listPlaybookNausKindAspmSnippets, PLAYBOOK_ASPM_MATRIX_EXAMPLE, type PlaybookTopic, parseSecurityScannerPlaybookArgs, SCANNER_META, type ScannerPlatform, type ScannerPlaybookEntry, SECURITY_SCANNER_IDS, type SecurityScannerId, wrapPlaybookSnippetAsPipelineYaml, } from "./security-scanner-playbooks.js";

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kCAAkC,EAClC,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,mBAAmB,EACnB,gCAAgC,EAChC,4BAA4B,EAC5B,KAAK,aAAa,EAClB,gCAAgC,EAChC,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,iCAAiC,GAClC,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kCAAkC,EAClC,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,mBAAmB,EACnB,gCAAgC,EAChC,4BAA4B,EAC5B,KAAK,aAAa,EAClB,gCAAgC,EAChC,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,iCAAiC,GAClC,MAAM,iCAAiC,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.wrapPlaybookSnippetAsPipelineYaml = exports.SECURITY_SCANNER_IDS = exports.SCANNER_META = exports.parseSecurityScannerPlaybookArgs = exports.PLAYBOOK_ASPM_MATRIX_EXAMPLE = exports.listPlaybookNausKindAspmSnippets = exports.isSecurityScannerId = exports.buildSecurityScannersCatalogPayload = exports.buildSecurityScannerPlaybookPayload = exports.NAUS_SCHEMA_OVERVIEW = exports.NAUS_WEB_DOC_IDS = exports.loadNausPipelineDocsBundleFromDisk = exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = exports.sectionIdFromHeading = exports.pickDocSection = exports.parseDocBundle = exports.listDocSectionIds = exports.buildDocSectionIndex = exports.loadAspmDocsBundleFromDisk = exports.ASPM_DOC_FILES = exports.loadAiDocsBundleFromDisk = void 0;
+exports.wrapPlaybookSnippetAsPipelineYaml = exports.SECURITY_SCANNER_IDS = exports.SCANNER_META = exports.parseSecurityScannerPlaybookArgs = exports.PLAYBOOK_ASPM_MATRIX_EXAMPLE = exports.listPlaybookNausKindAspmSnippets = exports.isSecurityScannerId = exports.buildSecurityScannersCatalogPayload = exports.buildSecurityScannerPlaybookPayload = exports.NAUS_SCHEMA_OVERVIEW = exports.NAUS_WEB_DOC_IDS = exports.loadNausPipelineDocsBundleFromDisk = exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = exports.KUBBISEC_ASSISTANT_PARITY_TOOLS = exports.sectionIdFromHeading = exports.pickDocSection = exports.parseDocBundle = exports.listDocSectionIds = exports.buildDocSectionIndex = exports.loadAspmDocsBundleFromDisk = exports.ASPM_DOC_FILES = exports.loadAiDocsBundleFromDisk = void 0;
 var ai_docs_bundle_loader_js_1 = require("./ai-docs-bundle.loader.js");
 Object.defineProperty(exports, "loadAiDocsBundleFromDisk", { enumerable: true, get: function () { return ai_docs_bundle_loader_js_1.loadAiDocsBundleFromDisk; } });
 var aspm_docs_bundle_loader_js_1 = require("./aspm-docs-bundle.loader.js");
@@ -13,6 +13,7 @@ Object.defineProperty(exports, "parseDocBundle", { enumerable: true, get: functi
 Object.defineProperty(exports, "pickDocSection", { enumerable: true, get: function () { return doc_bundle_utils_js_1.pickDocSection; } });
 Object.defineProperty(exports, "sectionIdFromHeading", { enumerable: true, get: function () { return doc_bundle_utils_js_1.sectionIdFromHeading; } });
 var mcp_tools_catalog_js_1 = require("./mcp-tools-catalog.js");
+Object.defineProperty(exports, "KUBBISEC_ASSISTANT_PARITY_TOOLS", { enumerable: true, get: function () { return mcp_tools_catalog_js_1.KUBBISEC_ASSISTANT_PARITY_TOOLS; } });
 Object.defineProperty(exports, "KUBBISEC_MCP_ACTION_TOOLS", { enumerable: true, get: function () { return mcp_tools_catalog_js_1.KUBBISEC_MCP_ACTION_TOOLS; } });
 Object.defineProperty(exports, "KUBBISEC_MCP_TOOLS", { enumerable: true, get: function () { return mcp_tools_catalog_js_1.KUBBISEC_MCP_TOOLS; } });
 var naus_pipeline_docs_bundle_loader_js_1 = require("./naus-pipeline-docs-bundle.loader.js");

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":";;;AAAA,uEAAsE;AAA7D,oIAAA,wBAAwB,OAAA;AACjC,2EAA0F;AAAjF,4HAAA,cAAc,OAAA;AAAE,wIAAA,0BAA0B,OAAA;AACnD,6DAO+B;AAN7B,2HAAA,oBAAoB,OAAA;AACpB,wHAAA,iBAAiB,OAAA;AAEjB,qHAAA,cAAc,OAAA;AACd,qHAAA,cAAc,OAAA;AACd,2HAAA,oBAAoB,OAAA;AAEtB,+DAGgC;AAF9B,iIAAA,yBAAyB,OAAA;AACzB,0HAAA,kBAAkB,OAAA;AAEpB,6FAG+C;AAF7C,yJAAA,kCAAkC,OAAA;AAClC,uIAAA,gBAAgB,OAAA;AAElB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iFAcyC;AAbvC,oJAAA,mCAAmC,OAAA;AACnC,oJAAA,mCAAmC,OAAA;AACnC,oIAAA,mBAAmB,OAAA;AACnB,iJAAA,gCAAgC,OAAA;AAChC,6IAAA,4BAA4B,OAAA;AAE5B,iJAAA,gCAAgC,OAAA;AAChC,6HAAA,YAAY,OAAA;AAGZ,qIAAA,oBAAoB,OAAA;AAEpB,kJAAA,iCAAiC,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":";;;AAAA,uEAAsE;AAA7D,oIAAA,wBAAwB,OAAA;AACjC,2EAA0F;AAAjF,4HAAA,cAAc,OAAA;AAAE,wIAAA,0BAA0B,OAAA;AACnD,6DAO+B;AAN7B,2HAAA,oBAAoB,OAAA;AACpB,wHAAA,iBAAiB,OAAA;AAEjB,qHAAA,cAAc,OAAA;AACd,qHAAA,cAAc,OAAA;AACd,2HAAA,oBAAoB,OAAA;AAEtB,+DAIgC;AAH9B,uIAAA,+BAA+B,OAAA;AAC/B,iIAAA,yBAAyB,OAAA;AACzB,0HAAA,kBAAkB,OAAA;AAEpB,6FAG+C;AAF7C,yJAAA,kCAAkC,OAAA;AAClC,uIAAA,gBAAgB,OAAA;AAElB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iFAcyC;AAbvC,oJAAA,mCAAmC,OAAA;AACnC,oJAAA,mCAAmC,OAAA;AACnC,oIAAA,mBAAmB,OAAA;AACnB,iJAAA,gCAAgC,OAAA;AAChC,6IAAA,4BAA4B,OAAA;AAE5B,iJAAA,gCAAgC,OAAA;AAChC,6HAAA,YAAY,OAAA;AAGZ,qIAAA,oBAAoB,OAAA;AAEpB,kJAAA,iCAAiC,OAAA"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.d.ts

@@ -1,4 +1,6 @@
-/** Action tools exposed by @kubbisec/mcp (no documentation tools). */
+/** Tools the platform MCP registers itself (REST). Assistant-parity tools are added from the API catalog. */
 export declare const KUBBISEC_MCP_ACTION_TOOLS: readonly ["resolve_project_by_repository", "list_project_by_repository_candidates", "list_vulnerabilities", "get_vulnerability", "trigger_kubbisec_scan", "get_kubbisec_scan_status", "list_kubbisec_scan_tasks", "cancel_kubbisec_scan_task", "generate_remediation_plan", "generate_issue_draft_for_vulnerability", "start_ai_remediation_run", "get_ai_remediation_run_status", "get_ai_remediation_run_logs", "validate_naus_pipeline_yaml", "list_pipeline_generation_jobs"];
-export declare const KUBBISEC_MCP_TOOLS: readonly ["resolve_project_by_repository", "list_project_by_repository_candidates", "list_vulnerabilities", "get_vulnerability", "trigger_kubbisec_scan", "get_kubbisec_scan_status", "list_kubbisec_scan_tasks", "cancel_kubbisec_scan_task", "generate_remediation_plan", "generate_issue_draft_for_vulnerability", "start_ai_remediation_run", "get_ai_remediation_run_status", "get_ai_remediation_run_logs", "validate_naus_pipeline_yaml", "list_pipeline_generation_jobs"];
+/** Same function names as the KubbiSec assistant tool catalog, executed via the API. */
+export declare const KUBBISEC_ASSISTANT_PARITY_TOOLS: readonly ["kubbisec_mcp_knowledge", "aspm_docs", "security_scanners_catalog", "security_scanner_playbook", "kubsec_github_repository", "github_extended_context_policy", "explain_vulnerability", "explain_follow_up", "get_finding_summary", "list_findings", "get_ci_run_status", "get_ci_run_detail", "get_ci_run_logs_excerpt", "pause_ci_job", "resume_ci_job", "replay_run", "list_run_artifacts", "create_pipeline", "naus_pipeline_docs", "naus_schema_overview", "naus_validate_yaml", "kubsec_list_projects", "kubsec_get_project", "get_ci_tree", "get_recent_runs", "get_run_logs_excerpt", "get_pipeline_schedules", "get_pipeline_env_packs", "get_pipeline_env_preview", "update_pipeline_fields", "trigger_run", "cancel_run", "create_pipeline_schedule", "update_pipeline_schedule", "delete_pipeline_schedule", "attach_env_pack", "detach_env_pack", "replace_editor_yaml_range", "set_pipeline_yaml", "set_editor_yaml"];
+export declare const KUBBISEC_MCP_TOOLS: readonly ["resolve_project_by_repository", "list_project_by_repository_candidates", "list_vulnerabilities", "get_vulnerability", "trigger_kubbisec_scan", "get_kubbisec_scan_status", "list_kubbisec_scan_tasks", "cancel_kubbisec_scan_task", "generate_remediation_plan", "generate_issue_draft_for_vulnerability", "start_ai_remediation_run", "get_ai_remediation_run_status", "get_ai_remediation_run_logs", "validate_naus_pipeline_yaml", "list_pipeline_generation_jobs", "kubbisec_mcp_knowledge", "aspm_docs", "security_scanners_catalog", "security_scanner_playbook", "kubsec_github_repository", "github_extended_context_policy", "explain_vulnerability", "explain_follow_up", "get_finding_summary", "list_findings", "get_ci_run_status", "get_ci_run_detail", "get_ci_run_logs_excerpt", "pause_ci_job", "resume_ci_job", "replay_run", "list_run_artifacts", "create_pipeline", "naus_pipeline_docs", "naus_schema_overview", "naus_validate_yaml", "kubsec_list_projects", "kubsec_get_project", "get_ci_tree", "get_recent_runs", "get_run_logs_excerpt", "get_pipeline_schedules", "get_pipeline_env_packs", "get_pipeline_env_preview", "update_pipeline_fields", "trigger_run", "cancel_run", "create_pipeline_schedule", "update_pipeline_schedule", "delete_pipeline_schedule", "attach_env_pack", "detach_env_pack", "replace_editor_yaml_range", "set_pipeline_yaml", "set_editor_yaml"];
 //# sourceMappingURL=mcp-tools-catalog.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-tools-catalog.d.ts","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,eAAO,MAAM,yBAAyB,mdAgB5B,CAAC;AAEX,eAAO,MAAM,kBAAkB,mdAA0C,CAAC"}
+{"version":3,"file":"mcp-tools-catalog.d.ts","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,eAAO,MAAM,yBAAyB,mdAgB5B,CAAC;AAEX,wFAAwF;AACxF,eAAO,MAAM,+BAA+B,+4BAyClC,CAAC;AAEX,eAAO,MAAM,kBAAkB,u1CAGrB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = void 0;
-/** Action tools exposed by @kubbisec/mcp (no documentation tools). */
+exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_ASSISTANT_PARITY_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = void 0;
+/** Tools the platform MCP registers itself (REST). Assistant-parity tools are added from the API catalog. */
 exports.KUBBISEC_MCP_ACTION_TOOLS = [
     "resolve_project_by_repository",
     "list_project_by_repository_candidates",
@@ -19,5 +19,51 @@ exports.KUBBISEC_MCP_ACTION_TOOLS = [
     "validate_naus_pipeline_yaml",
     "list_pipeline_generation_jobs",
 ];
-exports.KUBBISEC_MCP_TOOLS = [...exports.KUBBISEC_MCP_ACTION_TOOLS];
+/** Same function names as the KubbiSec assistant tool catalog, executed via the API. */
+exports.KUBBISEC_ASSISTANT_PARITY_TOOLS = [
+    "kubbisec_mcp_knowledge",
+    "aspm_docs",
+    "security_scanners_catalog",
+    "security_scanner_playbook",
+    "kubsec_github_repository",
+    "github_extended_context_policy",
+    "explain_vulnerability",
+    "explain_follow_up",
+    "get_finding_summary",
+    "list_findings",
+    "get_ci_run_status",
+    "get_ci_run_detail",
+    "get_ci_run_logs_excerpt",
+    "pause_ci_job",
+    "resume_ci_job",
+    "replay_run",
+    "list_run_artifacts",
+    "create_pipeline",
+    "naus_pipeline_docs",
+    "naus_schema_overview",
+    "naus_validate_yaml",
+    "kubsec_list_projects",
+    "kubsec_get_project",
+    "get_ci_tree",
+    "get_recent_runs",
+    "get_run_logs_excerpt",
+    "get_pipeline_schedules",
+    "get_pipeline_env_packs",
+    "get_pipeline_env_preview",
+    "update_pipeline_fields",
+    "trigger_run",
+    "cancel_run",
+    "create_pipeline_schedule",
+    "update_pipeline_schedule",
+    "delete_pipeline_schedule",
+    "attach_env_pack",
+    "detach_env_pack",
+    "replace_editor_yaml_range",
+    "set_pipeline_yaml",
+    "set_editor_yaml",
+];
+exports.KUBBISEC_MCP_TOOLS = [
+    ...exports.KUBBISEC_MCP_ACTION_TOOLS,
+    ...exports.KUBBISEC_ASSISTANT_PARITY_TOOLS,
+];
 //# sourceMappingURL=mcp-tools-catalog.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-tools-catalog.js","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":";;;AAAA,sEAAsE;AACzD,QAAA,yBAAyB,GAAG;IACvC,+BAA+B;IAC/B,uCAAuC;IACvC,sBAAsB;IACtB,mBAAmB;IACnB,uBAAuB;IACvB,0BAA0B;IAC1B,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,wCAAwC;IACxC,0BAA0B;IAC1B,+BAA+B;IAC/B,6BAA6B;IAC7B,6BAA6B;IAC7B,+BAA+B;CACvB,CAAC;AAEE,QAAA,kBAAkB,GAAG,CAAC,GAAG,iCAAyB,CAAU,CAAC"}
+{"version":3,"file":"mcp-tools-catalog.js","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":";;;AAAA,6GAA6G;AAChG,QAAA,yBAAyB,GAAG;IACvC,+BAA+B;IAC/B,uCAAuC;IACvC,sBAAsB;IACtB,mBAAmB;IACnB,uBAAuB;IACvB,0BAA0B;IAC1B,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,wCAAwC;IACxC,0BAA0B;IAC1B,+BAA+B;IAC/B,6BAA6B;IAC7B,6BAA6B;IAC7B,+BAA+B;CACvB,CAAC;AAEX,wFAAwF;AAC3E,QAAA,+BAA+B,GAAG;IAC7C,wBAAwB;IACxB,WAAW;IACX,2BAA2B;IAC3B,2BAA2B;IAC3B,0BAA0B;IAC1B,gCAAgC;IAChC,uBAAuB;IACvB,mBAAmB;IACnB,qBAAqB;IACrB,eAAe;IACf,mBAAmB;IACnB,mBAAmB;IACnB,yBAAyB;IACzB,cAAc;IACd,eAAe;IACf,YAAY;IACZ,oBAAoB;IACpB,iBAAiB;IACjB,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,aAAa;IACb,iBAAiB;IACjB,sBAAsB;IACtB,wBAAwB;IACxB,wBAAwB;IACxB,0BAA0B;IAC1B,wBAAwB;IACxB,aAAa;IACb,YAAY;IACZ,0BAA0B;IAC1B,0BAA0B;IAC1B,0BAA0B;IAC1B,iBAAiB;IACjB,iBAAiB;IACjB,2BAA2B;IAC3B,mBAAmB;IACnB,iBAAiB;CACT,CAAC;AAEE,QAAA,kBAAkB,GAAG;IAChC,GAAG,iCAAyB;IAC5B,GAAG,uCAA+B;CAC1B,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.d.ts

@@ -1,5 +1,5 @@
-/** Web internal docs. Order matters for readability. */
-export declare const NAUS_WEB_DOC_IDS: readonly ["naus-quickstart", "naus-commands", "naus-runners", "naus-security", "naus-pipeline-overview", "naus-pipeline-only", "naus-pipeline-run", "naus-pipeline-depends", "naus-pipeline-anchors", "naus-pipeline-variables", "naus-pipeline-volumes", "naus-pipeline-script", "naus-pipeline-repository", "naus-pipeline-image", "naus-pipeline-docker-preset", "naus-pipeline-examples", "naus-aspm-integration", "naus-aspm-preset", "naus-aspm-matrix", "naus-aspm-gate"];
+/** Web internal docs. Order matches apps/web/.../naus-docs-meta.ts sidebar. */
+export declare const NAUS_WEB_DOC_IDS: readonly ["naus-quickstart", "naus-commands", "naus-pipeline-overview", "naus-pipeline-run", "naus-pipeline-image", "naus-pipeline-script", "naus-pipeline-before-script", "naus-pipeline-after-script", "naus-pipeline-when", "naus-pipeline-cache", "naus-pipeline-depends", "naus-pipeline-variables", "naus-pipeline-volumes", "naus-pipeline-repository", "naus-pipeline-only", "naus-pipeline-artifacts", "naus-pipeline-anchors", "naus-pipeline-examples", "naus-pipeline-docker-preset", "naus-pipeline-special-values", "naus-pipeline-platform", "naus-pipeline-helm-kubectl", "naus-aspm-integration", "naus-aspm-preset", "naus-aspm-matrix", "naus-aspm-gate", "naus-security", "naus-runners"];
 /**
  * Reads NAUS markdown: web content/naus, legacy docs/naus extras, @kubbisec/naus-validation README.
  */

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"naus-pipeline-docs-bundle.loader.d.ts","sourceRoot":"","sources":["../../src/product-docs/naus-pipeline-docs-bundle.loader.ts"],"names":[],"mappings":"AAKA,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,kdAqBnB,CAAC;AA2EX;;GAEG;AACH,wBAAsB,kCAAkC,IAAI,OAAO,CAAC;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC,CA8CD"}
+{"version":3,"file":"naus-pipeline-docs-bundle.loader.d.ts","sourceRoot":"","sources":["../../src/product-docs/naus-pipeline-docs-bundle.loader.ts"],"names":[],"mappings":"AAKA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,+qBA6BnB,CAAC;AA2EX;;GAEG;AACH,wBAAsB,kCAAkC,IAAI,OAAO,CAAC;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC,CAmDD"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.js

@@ -6,28 +6,36 @@ const node_fs_1 = require("node:fs");
 const promises_1 = require("node:fs/promises");
 const node_path_1 = require("node:path");
 const monorepo_root_js_1 = require("./monorepo-root.js");
-/** Web internal docs. Order matters for readability. */
+/** Web internal docs. Order matches apps/web/.../naus-docs-meta.ts sidebar. */
 exports.NAUS_WEB_DOC_IDS = [
     "naus-quickstart",
     "naus-commands",
-    "naus-runners",
-    "naus-security",
     "naus-pipeline-overview",
-    "naus-pipeline-only",
     "naus-pipeline-run",
+    "naus-pipeline-image",
+    "naus-pipeline-script",
+    "naus-pipeline-before-script",
+    "naus-pipeline-after-script",
+    "naus-pipeline-when",
+    "naus-pipeline-cache",
     "naus-pipeline-depends",
-    "naus-pipeline-anchors",
     "naus-pipeline-variables",
     "naus-pipeline-volumes",
-    "naus-pipeline-script",
     "naus-pipeline-repository",
-    "naus-pipeline-image",
-    "naus-pipeline-docker-preset",
+    "naus-pipeline-only",
+    "naus-pipeline-artifacts",
+    "naus-pipeline-anchors",
     "naus-pipeline-examples",
+    "naus-pipeline-docker-preset",
+    "naus-pipeline-special-values",
+    "naus-pipeline-platform",
+    "naus-pipeline-helm-kubectl",
     "naus-aspm-integration",
     "naus-aspm-preset",
     "naus-aspm-matrix",
     "naus-aspm-gate",
+    "naus-security",
+    "naus-runners",
 ];
 /** Extra markdown only under docs/naus/ (not duplicated in web tree). */
 const NAUS_LEGACY_DOC_FILES = [
@@ -103,6 +111,8 @@ async function loadNausPipelineDocsBundleFromDisk() {
     const triedPaths = [...webCandidates, ...legacyCandidates, ...listValidationReadmeCandidates()];
     const chunks = [];
     let sourceDir = null;
+    let bestWebChunks = [];
+    let bestWebDir = null;
     for (const dir of webCandidates) {
         if (!(0, node_fs_1.existsSync)(dir))
             continue;
@@ -113,12 +123,15 @@ async function loadNausPipelineDocsBundleFromDisk() {
             if (chunk)
                 webChunks.push(chunk);
         }
-        if (webChunks.length > 0) {
-            chunks.push(...webChunks);
-            sourceDir = dir;
-            break;
+        if (webChunks.length > bestWebChunks.length) {
+            bestWebChunks = webChunks;
+            bestWebDir = dir;
         }
     }
+    if (bestWebChunks.length > 0) {
+        chunks.push(...bestWebChunks);
+        sourceDir = bestWebDir;
+    }
     for (const dir of legacyCandidates) {
         if (!(0, node_fs_1.existsSync)(dir))
             continue;

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"naus-pipeline-docs-bundle.loader.js","sourceRoot":"","sources":["../../src/product-docs/naus-pipeline-docs-bundle.loader.ts"],"names":[],"mappings":";;;AAyGA,gFAkDC;AA3JD,qCAAqC;AACrC,+CAA4C;AAC5C,yCAAiC;AACjC,yDAAkE;AAElE,wDAAwD;AAC3C,QAAA,gBAAgB,GAAG;IAC9B,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,eAAe;IACf,wBAAwB;IACxB,oBAAoB;IACpB,mBAAmB;IACnB,uBAAuB;IACvB,uBAAuB;IACvB,yBAAyB;IACzB,uBAAuB;IACvB,sBAAsB;IACtB,0BAA0B;IAC1B,qBAAqB;IACrB,6BAA6B;IAC7B,wBAAwB;IACxB,uBAAuB;IACvB,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;CACR,CAAC;AAEX,yEAAyE;AACzE,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;CACZ,CAAC;AAEX,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,SAAS;QAAE,GAAG,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAErF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,8BAA8B;IACrC,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,OAAO;QACL,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACzD,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACtD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACxD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACrD,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IAChE,IAAI,CAAC,IAAA,oBAAU,EAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,GAAG,OAAO,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;AAC1C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kCAAkC;IAKtD,MAAM,aAAa,GAAG,wBAAwB,EAAE,CAAC;IACjD,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,gBAAgB,EAAE,GAAG,8BAA8B,EAAE,CAAC,CAAC;IAChG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,wBAAgB,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,KAAK;gBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;YAC1B,SAAS,GAAG,GAAG,CAAC;YAChB,MAAM;QACR,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,GAAG,GAAG,CAAC;QACrD,MAAM;IACR,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,8BAA8B,EAAE,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAChE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACzD,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC"}
+{"version":3,"file":"naus-pipeline-docs-bundle.loader.js","sourceRoot":"","sources":["../../src/product-docs/naus-pipeline-docs-bundle.loader.ts"],"names":[],"mappings":";;;AAiHA,gFAuDC;AAxKD,qCAAqC;AACrC,+CAA4C;AAC5C,yCAAiC;AACjC,yDAAkE;AAElE,+EAA+E;AAClE,QAAA,gBAAgB,GAAG;IAC9B,iBAAiB;IACjB,eAAe;IACf,wBAAwB;IACxB,mBAAmB;IACnB,qBAAqB;IACrB,sBAAsB;IACtB,6BAA6B;IAC7B,4BAA4B;IAC5B,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,yBAAyB;IACzB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,yBAAyB;IACzB,uBAAuB;IACvB,wBAAwB;IACxB,6BAA6B;IAC7B,8BAA8B;IAC9B,wBAAwB;IACxB,4BAA4B;IAC5B,uBAAuB;IACvB,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,cAAc;CACN,CAAC;AAEX,yEAAyE;AACzE,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;CACZ,CAAC;AAEX,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,SAAS;QAAE,GAAG,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAErF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,8BAA8B;IACrC,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,OAAO;QACL,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACzD,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACtD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACxD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACrD,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IAChE,IAAI,CAAC,IAAA,oBAAU,EAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,GAAG,OAAO,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;AAC1C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kCAAkC;IAKtD,MAAM,aAAa,GAAG,wBAAwB,EAAE,CAAC;IACjD,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,gBAAgB,EAAE,GAAG,8BAA8B,EAAE,CAAC,CAAC;IAChG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,wBAAgB,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,KAAK;gBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC;YAC5C,aAAa,GAAG,SAAS,CAAC;YAC1B,UAAU,GAAG,GAAG,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAC9B,SAAS,GAAG,UAAU,CAAC;IACzB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,GAAG,GAAG,CAAC;QACrD,MAAM;IACR,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,8BAA8B,EAAE,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAChE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACzD,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.d.ts

@@ -1,2 +1,2 @@
-export declare const NAUS_SCHEMA_OVERVIEW = "NAUS pipeline YAML (cheat sheet \u2014 authoritative prose: naus_pipeline_docs, docs/naus/pipeline-reference.md):\n\nTOP-LEVEL (not GitHub Actions):\n- Required: run: (array of single-key job objects OR map job_id \u2192 config)\n- Optional: name, description, local, stages[], variables (map or KEY=value list), volumes[], repository, only[]\n- NEVER use top-level jobs:, env: (use variables:), needs:, commands:, steps:, or scanner:\n\nCONTAINER JOB (default kind: container):\n- image: + script: [string, ...] (required for container)\n- depends_on: [job_ids] (not needs:)\n- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged\n\nASPM JOBS (declarative \u2014 no manual trivy/aspm CLI in script):\n- kind: aspm + tool: (trivy|gitleaks|syft|osv|semgrep|sonar|nmap|skipfish) + mode: scan|upload|scan-and-upload\n- kind: aspm_matrix + parallel: [{ tool: ... }, ...] + matrix_strategy: chain|fanout\n- kind: aspm_gate + rules: { vulnerabilities, coverage, risk_score, ... }\n- kind: aspm_preset + preset: kubbisec/default-security\n- kind: docker \u2014 build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules)\n\nMINIMAL EXAMPLE:\nname: ci\nrun:\n  - build:\n      image: node:20-alpine\n      script: [npm ci, npm run build --if-present]\n  - security:\n      kind: aspm\n      tool: trivy\n      mode: scan-and-upload\n      depends_on: [build]\n\nAlways call validate_naus_pipeline_yaml before persisting. privileged: true needs kbsc.ci.privileged.run.";
+export declare const NAUS_SCHEMA_OVERVIEW = "NAUS pipeline YAML (cheat sheet \u2014 authoritative prose: naus_pipeline_docs, docs/naus/pipeline-reference.md):\n\nTOP-LEVEL (not GitHub Actions):\n- Required: run: (array of single-key job objects OR map job_id \u2192 config)\n- Optional: name, description, local, stages[], variables (map or KEY=value list), volumes[], repository, only[]\n- Optional infra: kubernetes (namespace, aws, kubeconfig), helm (default values), registry (aws_ecr), npm (userconfig), services (sidecars map)\n- NEVER use top-level jobs:, env: (use variables:), needs:, commands:, steps:, or scanner:\n\nCONTAINER JOB (default kind: container):\n- image: + script: [string or {run, when}, ...] (script required for container)\n- before_script / after_script: merged into script on expand\n- depends_on: [job_ids] (not needs:)\n- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged, cache, npm: inherit|true, when, services[]\n\nASPM JOBS (declarative \u2014 no manual trivy/aspm CLI in script):\n- kind: aspm + tool: (trivy|gitleaks|syft|osv|semgrep|sonar|nmap|skipfish) + mode: scan|upload|scan-and-upload\n- kind: aspm_matrix + parallel: [{ tool: ... }, ...] + matrix_strategy: chain|fanout\n- kind: aspm_gate + rules: { vulnerabilities, coverage, risk_score, ... }\n- kind: aspm_preset + preset: kubbisec/default-security\n- kind: docker \u2014 build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules; executor for DinD)\n\nK8S PRESETS:\n- kind: helm + action: lint|template|upgrade; chart required; release required for upgrade; executor.image only (alpine/helm)\n- kind: kubectl + action: rollout_status|apply|wait; resource/files/condition per action\n- pipeline kubernetes: / helm.values: / registry.provider: aws_ecr for ECR+deploy flows\n\nWHEN (job or script step):\n- when.env.VAR: equals|not_equals|in|not_in|exists|empty\n- when.path_exists / path_not_exists: workspace-relative paths\n\nMINIMAL EXAMPLE:\nname: ci\nrun:\n  - build:\n      image: node:20-alpine\n      script: [npm ci, npm run build --if-present]\n  - security:\n      kind: aspm\n      tool: trivy\n      mode: scan-and-upload\n      depends_on: [build]\n\nAlways call validate_naus_pipeline_yaml before persisting. privileged: true (docker executor) needs kbsc.ci.privileged.run. helm/kubectl executor accepts image only, not privileged/variables.";
 //# sourceMappingURL=naus-schema-overview.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"naus-schema-overview.d.ts","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,y/CA+ByE,CAAC"}
+{"version":3,"file":"naus-schema-overview.d.ts","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,60EA0C+J,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.js

@@ -6,19 +6,30 @@ exports.NAUS_SCHEMA_OVERVIEW = `NAUS pipeline YAML (cheat sheet — authoritativ
 TOP-LEVEL (not GitHub Actions):
 - Required: run: (array of single-key job objects OR map job_id → config)
 - Optional: name, description, local, stages[], variables (map or KEY=value list), volumes[], repository, only[]
+- Optional infra: kubernetes (namespace, aws, kubeconfig), helm (default values), registry (aws_ecr), npm (userconfig), services (sidecars map)
 - NEVER use top-level jobs:, env: (use variables:), needs:, commands:, steps:, or scanner:
 
 CONTAINER JOB (default kind: container):
-- image: + script: [string, ...] (required for container)
+- image: + script: [string or {run, when}, ...] (script required for container)
+- before_script / after_script: merged into script on expand
 - depends_on: [job_ids] (not needs:)
-- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged
+- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged, cache, npm: inherit|true, when, services[]
 
 ASPM JOBS (declarative — no manual trivy/aspm CLI in script):
 - kind: aspm + tool: (trivy|gitleaks|syft|osv|semgrep|sonar|nmap|skipfish) + mode: scan|upload|scan-and-upload
 - kind: aspm_matrix + parallel: [{ tool: ... }, ...] + matrix_strategy: chain|fanout
 - kind: aspm_gate + rules: { vulnerabilities, coverage, risk_score, ... }
 - kind: aspm_preset + preset: kubbisec/default-security
-- kind: docker — build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules)
+- kind: docker — build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules; executor for DinD)
+
+K8S PRESETS:
+- kind: helm + action: lint|template|upgrade; chart required; release required for upgrade; executor.image only (alpine/helm)
+- kind: kubectl + action: rollout_status|apply|wait; resource/files/condition per action
+- pipeline kubernetes: / helm.values: / registry.provider: aws_ecr for ECR+deploy flows
+
+WHEN (job or script step):
+- when.env.VAR: equals|not_equals|in|not_in|exists|empty
+- when.path_exists / path_not_exists: workspace-relative paths
 
 MINIMAL EXAMPLE:
 name: ci
@@ -32,5 +43,5 @@ run:
       mode: scan-and-upload
       depends_on: [build]
 
-Always call validate_naus_pipeline_yaml before persisting. privileged: true needs kbsc.ci.privileged.run.`;
+Always call validate_naus_pipeline_yaml before persisting. privileged: true (docker executor) needs kbsc.ci.privileged.run. helm/kubectl executor accepts image only, not privileged/variables.`;
 //# sourceMappingURL=naus-schema-overview.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.js.map

@@ -1 +1 @@
-{"version":3,"file":"naus-schema-overview.js","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":";;;AAAa,QAAA,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0GA+BsE,CAAC"}
+{"version":3,"file":"naus-schema-overview.js","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":";;;AAAa,QAAA,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gMA0C4J,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/security/index.d.ts

@@ -2,6 +2,7 @@ export * from "./aspm-gate-rules";
 export * from "./build-aspm-security-matrix-pipeline-yaml";
 export * from "./build-github-security-workflow-yaml";
 export * from "./github-workflow-action-pins";
+export * from "./report-provider-catalog";
 export * from "./security-tool.types";
 export * from "./security-tool-catalog";
 //# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/security/index.js

@@ -18,6 +18,7 @@ __exportStar(require("./aspm-gate-rules"), exports);
 __exportStar(require("./build-aspm-security-matrix-pipeline-yaml"), exports);
 __exportStar(require("./build-github-security-workflow-yaml"), exports);
 __exportStar(require("./github-workflow-action-pins"), exports);
+__exportStar(require("./report-provider-catalog"), exports);
 __exportStar(require("./security-tool.types"), exports);
 __exportStar(require("./security-tool-catalog"), exports);
 //# sourceMappingURL=index.js.map

package/bundled/node_modules/@kubbisec/shared/dist/security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,6EAA2D;AAC3D,wEAAsD;AACtD,gEAA8C;AAC9C,wDAAsC;AACtC,0DAAwC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,6EAA2D;AAC3D,wEAAsD;AACtD,gEAA8C;AAC9C,4DAA0C;AAC1C,wDAAsC;AACtC,0DAAwC"}

package/bundled/node_modules/@kubbisec/shared/dist/security/report-provider-catalog.d.ts

@@ -0,0 +1,15 @@
+/** Stable ingestion categories. Distinct from the Naus CI tool catalog. */
+export declare const REPORT_CATEGORY_IDS: readonly ["sast", "sca", "secrets", "dast", "iac", "container", "sbom", "api_security", "k8s_manifest", "k8s_runtime", "cspm", "cwpp", "cnapp", "host_vuln", "network_vuln", "attack_surface", "port_scanning", "web_vuln", "cve", "malware", "supply_chain", "dependency_confusion", "typosquatting", "license", "binary", "firmware", "mobile", "android", "ios", "infra_compliance", "k8s_compliance", "docker_compliance", "cloud_compliance", "policy_as_code", "cicd_security", "github_posture", "gitlab_security", "repository_security", "artifact_registry", "package_registry", "pentest", "bug_bounty", "red_team", "bas", "threat_model", "threat_intel", "exploit_intel", "epss", "llm_security", "mcp_agent"];
+export type ReportCategoryId = (typeof REPORT_CATEGORY_IDS)[number];
+/** Legacy aliases stored on scan reports before category ids existed. */
+export type ReportProviderCategory = ReportCategoryId | "network" | "web";
+export type ReportProviderCatalogEntry = {
+    provider: string;
+    categories: readonly ReportProviderCategory[];
+    formats: readonly string[];
+};
+export declare const REPORT_PROVIDER_CATALOG: readonly ReportProviderCatalogEntry[];
+export declare function isReportCategoryId(value: string): value is ReportCategoryId;
+/** Legacy families keep the historical scan type strings (`container` → CONTAINER, `network` → NETWORK). */
+export declare function scanTypeForReportCategory(category: string): string;
+//# sourceMappingURL=report-provider-catalog.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/security/report-provider-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-provider-catalog.d.ts","sourceRoot":"","sources":["../../src/security/report-provider-catalog.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,8rBAmDtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,yEAAyE;AACzE,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,GAAG,SAAS,GAAG,KAAK,CAAC;AAE1E,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC9C,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,SAAS,0BAA0B,EAmGxE,CAAC;AAIF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,gBAAgB,CAE3E;AAED,4GAA4G;AAC5G,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAoBlE"}

package/bundled/node_modules/@kubbisec/shared/dist/security/report-provider-catalog.js

@@ -0,0 +1,185 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REPORT_PROVIDER_CATALOG = exports.REPORT_CATEGORY_IDS = void 0;
+exports.isReportCategoryId = isReportCategoryId;
+exports.scanTypeForReportCategory = scanTypeForReportCategory;
+/** Stable ingestion categories. Distinct from the Naus CI tool catalog. */
+exports.REPORT_CATEGORY_IDS = [
+    "sast",
+    "sca",
+    "secrets",
+    "dast",
+    "iac",
+    "container",
+    "sbom",
+    "api_security",
+    "k8s_manifest",
+    "k8s_runtime",
+    "cspm",
+    "cwpp",
+    "cnapp",
+    "host_vuln",
+    "network_vuln",
+    "attack_surface",
+    "port_scanning",
+    "web_vuln",
+    "cve",
+    "malware",
+    "supply_chain",
+    "dependency_confusion",
+    "typosquatting",
+    "license",
+    "binary",
+    "firmware",
+    "mobile",
+    "android",
+    "ios",
+    "infra_compliance",
+    "k8s_compliance",
+    "docker_compliance",
+    "cloud_compliance",
+    "policy_as_code",
+    "cicd_security",
+    "github_posture",
+    "gitlab_security",
+    "repository_security",
+    "artifact_registry",
+    "package_registry",
+    "pentest",
+    "bug_bounty",
+    "red_team",
+    "bas",
+    "threat_model",
+    "threat_intel",
+    "exploit_intel",
+    "epss",
+    "llm_security",
+    "mcp_agent",
+];
+exports.REPORT_PROVIDER_CATALOG = [
+    {
+        provider: "trivy",
+        categories: ["sca", "container", "iac", "secrets"],
+        formats: ["trivy-json", "sarif", "cyclonedx", "spdx"],
+    },
+    {
+        provider: "semgrep",
+        categories: ["sast", "secrets"],
+        formats: ["semgrep-json", "sarif"],
+    },
+    {
+        provider: "syft",
+        categories: ["sbom"],
+        formats: ["syft-json", "cyclonedx", "spdx"],
+    },
+    {
+        provider: "gitleaks",
+        categories: ["secrets"],
+        formats: ["gitleaks-json", "sarif"],
+    },
+    {
+        provider: "osv",
+        categories: ["sca"],
+        formats: ["osv-json"],
+    },
+    {
+        provider: "sonar",
+        categories: ["sast"],
+        formats: ["sonar-json"],
+    },
+    {
+        provider: "nmap",
+        categories: ["port_scanning", "network"],
+        formats: ["nmap-xml"],
+    },
+    {
+        provider: "skipfish",
+        categories: ["dast", "web"],
+        formats: ["skipfish-json"],
+    },
+    {
+        provider: "generic-sarif",
+        categories: ["sast", "secrets", "iac"],
+        formats: ["sarif"],
+    },
+    {
+        provider: "generic-cyclonedx",
+        categories: ["sbom", "sca", "container"],
+        formats: ["cyclonedx"],
+    },
+    {
+        provider: "generic-spdx",
+        categories: ["sbom", "sca"],
+        formats: ["spdx"],
+    },
+    {
+        provider: "generic-gitlab",
+        categories: ["sast", "sca", "container", "secrets", "dast", "iac"],
+        formats: ["gitlab-security"],
+    },
+    {
+        provider: "generic-ocsf",
+        categories: ["cspm", "cnapp", "host_vuln", "cloud_compliance", "k8s_runtime", "container"],
+        formats: ["ocsf"],
+    },
+    {
+        provider: "generic-asff",
+        categories: ["cspm", "host_vuln", "container"],
+        formats: ["asff"],
+    },
+    {
+        provider: "generic-csaf",
+        categories: ["cve", "sca"],
+        formats: ["csaf"],
+    },
+    {
+        provider: "generic-openvex",
+        categories: ["sca", "cve"],
+        formats: ["openvex"],
+    },
+    {
+        provider: "generic-osv",
+        categories: ["sca", "cve"],
+        formats: ["osv"],
+    },
+    {
+        provider: "generic-epss",
+        categories: ["epss"],
+        formats: ["epss"],
+    },
+    { provider: "nuclei", categories: ["dast", "network_vuln", "sast"], formats: ["nuclei-json"] },
+    { provider: "zap", categories: ["dast", "web"], formats: ["zap-json", "zap-xml"] },
+    { provider: "prowler", categories: ["cspm", "k8s_compliance"], formats: ["prowler-json"] },
+    { provider: "nessus", categories: ["host_vuln"], formats: ["nessus-json", "nessus-xml"] },
+    { provider: "mobsf", categories: ["mobile", "android", "ios"], formats: ["mobsf-json"] },
+    { provider: "burp", categories: ["dast", "web"], formats: ["burp-json", "burp-xml"] },
+    { provider: "qualys", categories: ["host_vuln"], formats: ["qualys-json", "qualys-xml"] },
+    { provider: "rapid7", categories: ["host_vuln"], formats: ["rapid7-json", "rapid7-xml"] },
+];
+const REPORT_CATEGORY_ID_SET = new Set(exports.REPORT_CATEGORY_IDS);
+function isReportCategoryId(value) {
+    return REPORT_CATEGORY_ID_SET.has(value);
+}
+/** Legacy families keep the historical scan type strings (`container` → CONTAINER, `network` → NETWORK). */
+function scanTypeForReportCategory(category) {
+    switch (category) {
+        case "container":
+            return "CONTAINER";
+        case "sast":
+            return "SAST";
+        case "secrets":
+            return "SECRETS";
+        case "sbom":
+            return "SBOM";
+        case "network":
+        case "network_vuln":
+        case "port_scanning":
+            return "NETWORK";
+        case "web":
+        case "web_vuln":
+            return "WEB";
+        default:
+            return isReportCategoryId(category) ? category : "SAST";
+    }
+}
+//# sourceMappingURL=report-provider-catalog.js.map

package/bundled/node_modules/@kubbisec/shared/dist/security/report-provider-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-provider-catalog.js","sourceRoot":"","sources":["../../src/security/report-provider-catalog.ts"],"names":[],"mappings":";;;AAwKA,gDAEC;AAGD,8DAoBC;AAjMD,2EAA2E;AAC9D,QAAA,mBAAmB,GAAG;IACjC,MAAM;IACN,KAAK;IACL,SAAS;IACT,MAAM;IACN,KAAK;IACL,WAAW;IACX,MAAM;IACN,cAAc;IACd,cAAc;IACd,aAAa;IACb,MAAM;IACN,MAAM;IACN,OAAO;IACP,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,UAAU;IACV,KAAK;IACL,SAAS;IACT,cAAc;IACd,sBAAsB;IACtB,eAAe;IACf,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,KAAK;IACL,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,qBAAqB;IACrB,mBAAmB;IACnB,kBAAkB;IAClB,SAAS;IACT,YAAY;IACZ,UAAU;IACV,KAAK;IACL,cAAc;IACd,cAAc;IACd,eAAe;IACf,MAAM;IACN,cAAc;IACd,WAAW;CACH,CAAC;AAaE,QAAA,uBAAuB,GAA0C;IAC5E;QACE,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC;QAClD,OAAO,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;KACtD;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QAC/B,OAAO,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC;KACnC;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC;KAC5C;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,CAAC,SAAS,CAAC;QACvB,OAAO,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;KACpC;IACD;QACE,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,CAAC,KAAK,CAAC;QACnB,OAAO,EAAE,CAAC,UAAU,CAAC;KACtB;IACD;QACE,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC,YAAY,CAAC;KACxB;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC;QACxC,OAAO,EAAE,CAAC,UAAU,CAAC;KACtB;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;QAC3B,OAAO,EAAE,CAAC,eAAe,CAAC;KAC3B;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC;QACtC,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,QAAQ,EAAE,mBAAmB;QAC7B,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC;QACxC,OAAO,EAAE,CAAC,WAAW,CAAC;KACvB;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;QAC3B,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;QAClE,OAAO,EAAE,CAAC,iBAAiB,CAAC;KAC7B;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,CAAC;QAC1F,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC;QAC9C,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QAC1B,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QAC1B,OAAO,EAAE,CAAC,SAAS,CAAC;KACrB;IACD;QACE,QAAQ,EAAE,aAAa;QACvB,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QAC1B,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE;IAC9F,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE;IAClF,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE;IAC1F,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE;IACzF,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE;IACxF,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE;IACrF,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE;IACzF,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE;CAC1F,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAS,2BAAmB,CAAC,CAAC;AAEpE,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,4GAA4G;AAC5G,SAAgB,yBAAyB,CAAC,QAAgB;IACxD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,SAAS,CAAC;QACnB,KAAK,KAAK,CAAC;QACX,KAAK,UAAU;YACb,OAAO,KAAK,CAAC;QACf;YACE,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/server/mcp-sessions.d.ts

@@ -0,0 +1,30 @@
+export declare function mcpSessionOwner(kind: string, context: {
+    apiBase: string;
+    apiKey: string;
+    organizationId: string;
+    organizationSlug: string;
+}): string;
+export declare function mcpPositiveLimit(value: string | undefined, fallback: number): number;
+/** Reserves capacity before async initialization; credentials bind every subsequent request. */
+export declare class McpSessionStore<T> {
+    private readonly closeValue;
+    private readonly entries;
+    private readonly timer;
+    private readonly ttlMs;
+    private readonly maxSessions;
+    private readonly maxPerOwner;
+    private readonly maxPerTenant;
+    constructor(closeValue: (value: T) => Promise<void>, options?: {
+        ttlMs?: number;
+        maxSessions?: number;
+        maxPerOwner?: number;
+        maxPerTenant?: number;
+    });
+    reserve(owner: string, tenant: string): string | undefined;
+    commit(reservation: string, sessionId: string, value: T): boolean;
+    get(sessionId: string, owner: string): T | undefined;
+    delete(sessionId: string): Promise<void>;
+    close(): Promise<void>;
+    private prune;
+}
+//# sourceMappingURL=mcp-sessions.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/server/mcp-sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-sessions.d.ts","sourceRoot":"","sources":["../../src/server/mcp-sessions.ts"],"names":[],"mappings":"AAEA,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GACA,MAAM,CAYR;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGpF;AAID,gGAAgG;AAChG,qBAAa,eAAe,CAAC,CAAC;IAS1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAR7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAGnB,UAAU,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,EACxD,OAAO,GAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;KAClB;IAeR,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAe1D,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO;IAQjE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAQ9C,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAM5B,OAAO,CAAC,KAAK;CAMd"}

package/bundled/node_modules/@kubbisec/shared/dist/server/mcp-sessions.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpSessionStore = void 0;
+exports.mcpSessionOwner = mcpSessionOwner;
+exports.mcpPositiveLimit = mcpPositiveLimit;
+const node_crypto_1 = require("node:crypto");
+function mcpSessionOwner(kind, context) {
+    return (0, node_crypto_1.createHash)("sha256")
+        .update(JSON.stringify([
+        kind,
+        context.apiBase,
+        context.apiKey,
+        context.organizationId,
+        context.organizationSlug,
+    ]))
+        .digest("hex");
+}
+function mcpPositiveLimit(value, fallback) {
+    const number = Number(value);
+    return Number.isSafeInteger(number) && number > 0 ? number : fallback;
+}
+/** Reserves capacity before async initialization; credentials bind every subsequent request. */
+class McpSessionStore {
+    closeValue;
+    entries = new Map();
+    timer;
+    ttlMs;
+    maxSessions;
+    maxPerOwner;
+    maxPerTenant;
+    constructor(closeValue, options = {}) {
+        this.closeValue = closeValue;
+        this.ttlMs =
+            options.ttlMs ?? mcpPositiveLimit(process.env.KUBBISEC_MCP_SESSION_TTL_MS, 30 * 60_000);
+        this.maxSessions =
+            options.maxSessions ?? mcpPositiveLimit(process.env.KUBBISEC_MCP_MAX_SESSIONS, 256);
+        this.maxPerOwner =
+            options.maxPerOwner ?? mcpPositiveLimit(process.env.KUBBISEC_MCP_MAX_SESSIONS_PER_OWNER, 16);
+        this.maxPerTenant =
+            options.maxPerTenant ??
+                mcpPositiveLimit(process.env.KUBBISEC_MCP_MAX_SESSIONS_PER_TENANT, 32);
+        this.timer = setInterval(() => this.prune(), Math.min(this.ttlMs, 60_000));
+        this.timer.unref();
+    }
+    reserve(owner, tenant) {
+        this.prune();
+        if (this.entries.size >= this.maxSessions)
+            return undefined;
+        let byOwner = 0;
+        let byTenant = 0;
+        for (const entry of this.entries.values()) {
+            if (entry.owner === owner)
+                byOwner++;
+            if (entry.tenant === tenant)
+                byTenant++;
+        }
+        if (byOwner >= this.maxPerOwner || byTenant >= this.maxPerTenant)
+            return undefined;
+        const reservation = `pending:${(0, node_crypto_1.randomUUID)()}`;
+        this.entries.set(reservation, { owner, tenant, touchedAt: Date.now() });
+        return reservation;
+    }
+    commit(reservation, sessionId, value) {
+        const record = this.entries.get(reservation);
+        if (!record || this.entries.has(sessionId))
+            return false;
+        this.entries.delete(reservation);
+        this.entries.set(sessionId, { ...record, value, touchedAt: Date.now() });
+        return true;
+    }
+    get(sessionId, owner) {
+        this.prune();
+        const record = this.entries.get(sessionId);
+        if (!record || record.owner !== owner || record.value === undefined)
+            return undefined;
+        record.touchedAt = Date.now();
+        return record.value;
+    }
+    async delete(sessionId) {
+        const record = this.entries.get(sessionId);
+        this.entries.delete(sessionId);
+        if (record?.value !== undefined)
+            await this.closeValue(record.value);
+    }
+    async close() {
+        clearInterval(this.timer);
+        const ids = [...this.entries.keys()];
+        await Promise.allSettled(ids.map((id) => this.delete(id)));
+    }
+    prune() {
+        const cutoff = Date.now() - this.ttlMs;
+        for (const [id, record] of this.entries) {
+            if (record.touchedAt <= cutoff)
+                void this.delete(id).catch(() => { });
+        }
+    }
+}
+exports.McpSessionStore = McpSessionStore;
+//# sourceMappingURL=mcp-sessions.js.map

package/bundled/node_modules/@kubbisec/shared/dist/server/mcp-sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-sessions.js","sourceRoot":"","sources":["../../src/server/mcp-sessions.ts"],"names":[],"mappings":";;;AAEA,0CAoBC;AAED,4CAGC;AA3BD,6CAAqD;AAErD,SAAgB,eAAe,CAC7B,IAAY,EACZ,OAKC;IAED,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;QACb,IAAI;QACJ,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,cAAc;QACtB,OAAO,CAAC,gBAAgB;KACzB,CAAC,CACH;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAyB,EAAE,QAAgB;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxE,CAAC;AAID,gGAAgG;AAChG,MAAa,eAAe;IASP;IARF,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9C,KAAK,CAAiC;IACtC,KAAK,CAAS;IACd,WAAW,CAAS;IACpB,WAAW,CAAS;IACpB,YAAY,CAAS;IAEtC,YACmB,UAAuC,EACxD,UAKI,EAAE;QANW,eAAU,GAAV,UAAU,CAA6B;QAQxD,IAAI,CAAC,KAAK;YACR,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,WAAW;YACd,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QACtF,IAAI,CAAC,WAAW;YACd,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,YAAY;YACf,OAAO,CAAC,YAAY;gBACpB,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,MAAc;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;gBAAE,QAAQ,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,CAAC,WAAW,IAAI,QAAQ,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAC;QACnF,MAAM,WAAW,GAAG,WAAW,IAAA,wBAAU,GAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,WAAmB,EAAE,SAAiB,EAAE,KAAQ;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,SAAiB,EAAE,KAAa;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACtF,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM;gBAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;CACF;AA/ED,0CA+EC"}

package/bundled/node_modules/@kubbisec/shared/package.json

@@ -4,7 +4,18 @@
   "private": true,
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "typesVersions": {
+    "*": {
+      "server/mcp-sessions": [
+        "dist/server/mcp-sessions.d.ts"
+      ]
+    }
+  },
   "exports": {
+    "./server/mcp-sessions": {
+      "types": "./dist/server/mcp-sessions.d.ts",
+      "default": "./dist/server/mcp-sessions.js"
+    },
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubbisec/ai-win32-x64",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "description": "KubbiSec CLI — Windows x64 binary",
   "license": "UNLICENSED",
   "os": [