@kubbisec/ai-win32-x64 0.1.33 → 0.1.34

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/mcp-instructions.d.ts

@@ -1,2 +1,2 @@
-export declare const KUBBISEC_MCP_INSTRUCTIONS = "<kubbisec-mcp-instructions>\n<kubbisec-product-knowledge>\n  <products>\n    <product id=\"naus\" npm=\"@kubbisec/naus\" bin=\"naus\">KubbiSec CI engine: .naus.yml pipelines, runners, validate/plan/run. Cloud CI uses Env Packs; local run uses --env-file / --secret-file.</product>\n    <product id=\"aspm\" npm=\"@kubbisec/aspm\" bin=\"aspm\">Security CLI: parse/upload scanner reports (trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish), coverage, gate.</product>\n    <product id=\"ai\" npm=\"@kubbisec/ai\" bin=\"kubbisec\">CLI hub: login, findings (ls/show), fix/watch/chat, optional naus/aspm forwarding when binaries are on PATH.</product>\n  </products>\n  <boundaries>\n    <boundary>NAUS YAML is NOT GitHub Actions: top-level run: (never jobs:); script: + depends_on: (never commands:/needs:/steps:); ASPM jobs use kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).</boundary>\n    <boundary>aspm-cicd.md / aspm_docs section aspm-cicd describe GitHub Actions only. For KubbiSec native CI use naus_pipeline_docs (naus-aspm-integration, naus-aspm-preset, naus-aspm-matrix, naus-aspm-gate).</boundary>\n    <boundary>Do not mix CLIs: naus for pipelines/runners; aspm for scan upload/parse; kubbisec for AI remediation/chat. Org flag -o uses organization slug.</boundary>\n  </boundaries>\n  <anti-hallucination>\n    <rule>HARD-GATE: never invent CLI flags or full command lines \u2014 call naus_pipeline_docs (naus-commands), aspm_docs (aspm-commands), ai_docs (ai-commands), or security_scanner_playbook first.</rule>\n    <rule>HARD-GATE: never output fenced NAUS pipeline YAML unless naus_validate_yaml (or naus_local_validate) returned ok in this session.</rule>\n    <rule>HARD-GATE: never claim a tool/action succeeded without a successful tool_result in this turn.</rule>\n  </anti-hallucination>\n  <tool-routing>\n    <route intent=\"platform-knowledge\">kubbisec_mcp_knowledge (start of naus/aspm/ai product questions)</route>\n    <route intent=\"naus-docs-yaml\">naus_pipeline_docs \u2192 naus_schema_overview \u2192 validate_naus_pipeline_yaml</route>\n    <route intent=\"aspm-docs\">aspm_docs; scanners: security_scanners_catalog \u2192 security_scanner_playbook</route>\n    <route intent=\"ai-cli-docs\">ai_docs (ai-commands, ai-watch, mcp-login, scan, scan-watch)</route>\n    <route intent=\"local-clis\">naus_local_* / aspm_local_* / github_local_* always available in chat (no --extended-context); github uses host-first auth; missing naus/aspm auto-install @kubbisec/naus|aspm</route>\n  </tool-routing>\n</kubbisec-product-knowledge>\n\n<flows>\n  <flow id=\"findings\">Recommended flow: use resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), then list_vulnerabilities with the same repository fields or project_id/projectId. Tools accept snake_case and camelCase interchangeably. To act on a finding, use get_vulnerability (MCP) or get_finding_summary / list_findings (assistant CLI), then generate_remediation_plan and, if you want automation, start_ai_remediation_run followed by get_ai_remediation_run_status/get_ai_remediation_run_logs (run_id or runId). Pass vulnerabilityId (or vulnerability_id) in tool arguments when using kbs chat \u2014 there is no separate set_active_finding tool.</flow>\n  <flow id=\"naus-cloud\">Naus CI YAML in MCP: call validate_naus_pipeline_yaml before proposing or persisting YAML. Pipeline IDE flows (set_editor_yaml, trigger_run) are Platform Assistant only.</flow>\n  <flow id=\"naus-aspm-local\">Naus / ASPM / git on the developer machine (kbs or kubbisec chat; no --extended-context required): naus_local_validate | naus_local_plan | naus_local_run; aspm_local_scan | aspm_local_upload | aspm_local_doctor; github_local_* uses host-first gh/git auth (platform token only as remediation fallback). Missing naus/aspm binaries auto-install @kubbisec/naus and @kubbisec/aspm globally via npm/pnpm (allowlist). Local naus run/plan: default .secrets and .env in cwd, or --env-file / --secret-file; naus_local_run and naus_local_plan accept envFiles/secretFiles arrays. Cloud runners use Env Packs instead. Runner enrollment: naus register / naus start \u2014 do not spawn long-lived daemons from MCP chat.</flow>\n  <flow id=\"kubbisec-scan\">Hybrid local scan: MCP cannot run Pi/Superpowers on the host. (1) resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), or project_id/projectId. (2) trigger_kubbisec_scan with profile quick|full|ci (default full), upload (default true), require_scanners/requireScanners optional. (3) get_kubbisec_scan_status with task_id/taskId until status is done, failed, or cancelled; list_kubbisec_scan_tasks or cancel_kubbisec_scan_task as needed. Requires kubbisec watch or kubbisec scan --watch on a developer machine with repo checkout \u2014 task stays pending until claimed. Findings upload with source=KUBBISEC_AI; filter via list_vulnerabilities source=KUBBISEC_AI. For immediate local scan without queue, user runs kubbisec scan in terminal (not an MCP tool).</flow>\n</flows>\n\n<intent-matrix>\n| Intent | Cloud (API/MCP) | Local (host CLI) |\n| Validate YAML | validate_naus_pipeline_yaml | naus_local_validate |\n| Run pipeline | trigger_run (assistant) | naus_local_run |\n| Dependency graph | \u2014 | naus_local_plan |\n| Upload scan report | CI / findings API | aspm_local_upload |\n| ASPM CLI health | \u2014 | aspm_local_doctor |\n| Hybrid AI scan | trigger_kubbisec_scan | kubbisec scan |\n| Scan status | get_kubbisec_scan_status | stdout / .kubbisec/scan/&lt;runId&gt;/ |\n| Filter AI findings | list_vulnerabilities + source=KUBBISEC_AI | \u2014 |\n| MCP auth | hosted OAuth / device login | kubbisec mcp login |\n| Product docs | Platform Assistant / kubbisec chat | \u2014 |\n</intent-matrix>\n\n<rules>\n  <rule id=\"superpowers-mcp\">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. MCP has no documentation tools \u2014 use validate_naus_pipeline_yaml for YAML. Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>\n  <rule id=\"hosted-mcp\">Hosted MCP endpoint: https://mcp.kubbisec.com/mcp (OAuth2 for cloud IDEs). Local stdio: set KUBBISEC_ORGANIZATION_SLUG (preferred, e.g. minha-empresa) and KUBBISEC_API_KEY, or run kubbisec mcp login for device flow. Legacy KUBBISEC_ORGANIZATION_ID remains supported.</rule>\n</rules>\n</kubbisec-mcp-instructions>";
+export declare const KUBBISEC_MCP_INSTRUCTIONS = "<kubbisec-mcp-instructions>\n<kubbisec-product-knowledge>\n  <products>\n    <product id=\"naus\" npm=\"@kubbisec/naus\" bin=\"naus\">KubbiSec CI engine: .naus.yml pipelines, runners, validate/plan/run. Cloud CI uses Env Packs; local run uses --env-file / --secret-file.</product>\n    <product id=\"aspm\" npm=\"@kubbisec/aspm\" bin=\"aspm\">Security CLI: parse/upload scanner reports (trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish), coverage, gate.</product>\n    <product id=\"ai\" npm=\"@kubbisec/ai\" bin=\"kubbisec\">CLI hub: login, findings (ls/show), fix/watch/chat, optional naus/aspm forwarding when binaries are on PATH.</product>\n  </products>\n  <boundaries>\n    <boundary>NAUS YAML is NOT GitHub Actions: top-level run: (never jobs:); script: + depends_on: (never commands:/needs:/steps:); ASPM jobs use kind: aspm|aspm_matrix|aspm_gate with tool: (never scanner:).</boundary>\n    <boundary>aspm-cicd.md / aspm_docs section aspm-cicd describe GitHub Actions only. For KubbiSec native CI use naus_pipeline_docs (naus-aspm-integration, naus-aspm-preset, naus-aspm-matrix, naus-aspm-gate).</boundary>\n    <boundary>Do not mix CLIs: naus for pipelines/runners; aspm for scan upload/parse; kubbisec for AI remediation/chat. Org flag -o uses organization slug.</boundary>\n  </boundaries>\n  <anti-hallucination>\n    <rule>HARD-GATE: never invent CLI flags or full command lines \u2014 call naus_pipeline_docs (naus-commands), aspm_docs (aspm-commands), ai_docs (ai-commands), or security_scanner_playbook first.</rule>\n    <rule>HARD-GATE: never output fenced NAUS pipeline YAML unless naus_validate_yaml (or naus_local_validate) returned ok in this session.</rule>\n    <rule>HARD-GATE: never claim a tool/action succeeded without a successful tool_result in this turn.</rule>\n  </anti-hallucination>\n  <tool-routing>\n    <route intent=\"platform-knowledge\">kubbisec_mcp_knowledge (start of naus/aspm/ai product questions)</route>\n    <route intent=\"naus-docs-yaml\">naus_pipeline_docs \u2192 naus_schema_overview \u2192 validate_naus_pipeline_yaml</route>\n    <route intent=\"aspm-docs\">aspm_docs; scanners: security_scanners_catalog \u2192 security_scanner_playbook</route>\n    <route intent=\"ai-cli-docs\">ai_docs (ai-commands, ai-watch, mcp-login, scan, scan-watch)</route>\n    <route intent=\"local-clis\">naus_local_* / aspm_local_* / github_local_* always available in chat (no --extended-context); github uses host-first auth; missing naus/aspm auto-install @kubbisec/naus|aspm</route>\n  </tool-routing>\n</kubbisec-product-knowledge>\n\n<flows>\n  <flow id=\"findings\">Recommended flow: use resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), then list_vulnerabilities with the same repository fields or project_id/projectId. Tools accept snake_case and camelCase interchangeably. To act on a finding, use get_vulnerability (MCP) or get_finding_summary / list_findings (assistant CLI), then generate_remediation_plan and, if you want automation, start_ai_remediation_run followed by get_ai_remediation_run_status/get_ai_remediation_run_logs (run_id or runId). Pass vulnerabilityId (or vulnerability_id) in tool arguments when using kbs chat \u2014 there is no separate set_active_finding tool.</flow>\n  <flow id=\"naus-cloud\">Naus CI YAML in MCP: call validate_naus_pipeline_yaml or naus_validate_yaml before proposing or persisting YAML. The platform MCP exposes the same assistant functions via the API, including set_pipeline_yaml, trigger_run, naus_pipeline_docs and aspm_docs.</flow>\n  <flow id=\"naus-aspm-local\">Naus / ASPM / git on the developer machine (kbs or kubbisec chat; no --extended-context required): naus_local_validate | naus_local_plan | naus_local_run; aspm_local_scan | aspm_local_upload | aspm_local_doctor; github_local_* uses host-first gh/git auth (platform token only as remediation fallback). Missing naus/aspm binaries auto-install @kubbisec/naus and @kubbisec/aspm globally via npm/pnpm (allowlist). Local naus run/plan: default .secrets and .env in cwd, or --env-file / --secret-file; naus_local_run and naus_local_plan accept envFiles/secretFiles arrays. Cloud runners use Env Packs instead. Runner enrollment: naus register / naus start \u2014 do not spawn long-lived daemons from MCP chat.</flow>\n  <flow id=\"kubbisec-scan\">Hybrid local scan: MCP cannot run Pi/Superpowers on the host. (1) resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), or project_id/projectId. (2) trigger_kubbisec_scan with profile quick|full|ci (default full), upload (default true), require_scanners/requireScanners optional. (3) get_kubbisec_scan_status with task_id/taskId until status is done, failed, or cancelled; list_kubbisec_scan_tasks or cancel_kubbisec_scan_task as needed. Requires kubbisec watch or kubbisec scan --watch on a developer machine with repo checkout \u2014 task stays pending until claimed. Findings upload with source=KUBBISEC_AI; filter via list_vulnerabilities source=KUBBISEC_AI. For immediate local scan without queue, user runs kubbisec scan in terminal (not an MCP tool).</flow>\n</flows>\n\n<intent-matrix>\n| Intent | Cloud (API/MCP) | Local (host CLI) |\n| Validate YAML | validate_naus_pipeline_yaml | naus_local_validate |\n| Run pipeline | trigger_run | naus_local_run |\n| Dependency graph | \u2014 | naus_local_plan |\n| Upload scan report | CI / findings API | aspm_local_upload |\n| ASPM CLI health | \u2014 | aspm_local_doctor |\n| Hybrid AI scan | trigger_kubbisec_scan | kubbisec scan |\n| Scan status | get_kubbisec_scan_status | stdout / .kubbisec/scan/&lt;runId&gt;/ |\n| Filter AI findings | list_vulnerabilities + source=KUBBISEC_AI | \u2014 |\n| MCP auth | hosted OAuth / device login | kubbisec mcp login |\n| Product docs | aspm_docs / naus_pipeline_docs (API) | \u2014 |\n</intent-matrix>\n\n<rules>\n  <rule id=\"superpowers-mcp\">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. Documentation and pipeline tools are the same as the KubbiSec assistant and run through the API (aspm_docs, naus_pipeline_docs, naus_validate_yaml, trigger_run). Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>\n  <rule id=\"hosted-mcp\">Hosted MCP endpoint: https://mcp.kubbisec.com/mcp (OAuth2 for cloud IDEs). Local stdio: set KUBBISEC_ORGANIZATION_SLUG (preferred, e.g. minha-empresa) and KUBBISEC_API_KEY, or run kubbisec mcp login for device flow. Legacy KUBBISEC_ORGANIZATION_ID remains supported.</rule>\n</rules>\n</kubbisec-mcp-instructions>";
 //# sourceMappingURL=mcp-instructions.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/mcp-instructions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-instructions.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/mcp-instructions.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,yBAAyB,ozMA4BT,CAAC"}
+{"version":3,"file":"mcp-instructions.d.ts","sourceRoot":"","sources":["../../../src/ai/product-knowledge/mcp-instructions.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,yBAAyB,k9MA4BT,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/ai/product-knowledge/mcp-instructions.js

@@ -8,7 +8,7 @@ ${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
 
 <flows>
   <flow id="findings">Recommended flow: use resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), then list_vulnerabilities with the same repository fields or project_id/projectId. Tools accept snake_case and camelCase interchangeably. To act on a finding, use get_vulnerability (MCP) or get_finding_summary / list_findings (assistant CLI), then generate_remediation_plan and, if you want automation, start_ai_remediation_run followed by get_ai_remediation_run_status/get_ai_remediation_run_logs (run_id or runId). Pass vulnerabilityId (or vulnerability_id) in tool arguments when using kbs chat — there is no separate set_active_finding tool.</flow>
-  <flow id="naus-cloud">Naus CI YAML in MCP: call validate_naus_pipeline_yaml before proposing or persisting YAML. Pipeline IDE flows (set_editor_yaml, trigger_run) are Platform Assistant only.</flow>
+  <flow id="naus-cloud">Naus CI YAML in MCP: call validate_naus_pipeline_yaml or naus_validate_yaml before proposing or persisting YAML. The platform MCP exposes the same assistant functions via the API, including set_pipeline_yaml, trigger_run, naus_pipeline_docs and aspm_docs.</flow>
   <flow id="naus-aspm-local">Naus / ASPM / git on the developer machine (kbs or kubbisec chat; no --extended-context required): naus_local_validate | naus_local_plan | naus_local_run; aspm_local_scan | aspm_local_upload | aspm_local_doctor; github_local_* uses host-first gh/git auth (platform token only as remediation fallback). Missing naus/aspm binaries auto-install @kubbisec/naus and @kubbisec/aspm globally via npm/pnpm (allowlist). Local naus run/plan: default .secrets and .env in cwd, or --env-file / --secret-file; naus_local_run and naus_local_plan accept envFiles/secretFiles arrays. Cloud runners use Env Packs instead. Runner enrollment: naus register / naus start — do not spawn long-lived daemons from MCP chat.</flow>
   <flow id="kubbisec-scan">Hybrid local scan: MCP cannot run Pi/Superpowers on the host. (1) resolve_project_by_repository with repository_url or repositoryUrl (Git URL or org/repo), or project_id/projectId. (2) trigger_kubbisec_scan with profile quick|full|ci (default full), upload (default true), require_scanners/requireScanners optional. (3) get_kubbisec_scan_status with task_id/taskId until status is done, failed, or cancelled; list_kubbisec_scan_tasks or cancel_kubbisec_scan_task as needed. Requires kubbisec watch or kubbisec scan --watch on a developer machine with repo checkout — task stays pending until claimed. Findings upload with source=KUBBISEC_AI; filter via list_vulnerabilities source=KUBBISEC_AI. For immediate local scan without queue, user runs kubbisec scan in terminal (not an MCP tool).</flow>
 </flows>
@@ -16,7 +16,7 @@ ${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
 <intent-matrix>
 | Intent | Cloud (API/MCP) | Local (host CLI) |
 | Validate YAML | validate_naus_pipeline_yaml | naus_local_validate |
-| Run pipeline | trigger_run (assistant) | naus_local_run |
+| Run pipeline | trigger_run | naus_local_run |
 | Dependency graph | — | naus_local_plan |
 | Upload scan report | CI / findings API | aspm_local_upload |
 | ASPM CLI health | — | aspm_local_doctor |
@@ -24,11 +24,11 @@ ${mental_map_1.KUBBISEC_PRODUCT_MENTAL_MAP_XML}
 | Scan status | get_kubbisec_scan_status | stdout / .kubbisec/scan/&lt;runId&gt;/ |
 | Filter AI findings | list_vulnerabilities + source=KUBBISEC_AI | — |
 | MCP auth | hosted OAuth / device login | kubbisec mcp login |
-| Product docs | Platform Assistant / kubbisec chat | — |
+| Product docs | aspm_docs / naus_pipeline_docs (API) | — |
 </intent-matrix>
 
 <rules>
-  <rule id="superpowers-mcp">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. MCP has no documentation tools — use validate_naus_pipeline_yaml for YAML. Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>
+  <rule id="superpowers-mcp">MCP agents must NOT invoke Pi/Superpowers skills or spawn kubbisec chat for scan orchestration. Documentation and pipeline tools are the same as the KubbiSec assistant and run through the API (aspm_docs, naus_pipeline_docs, naus_validate_yaml, trigger_run). Scan = trigger_kubbisec_scan; remediation = start_ai_remediation_run.</rule>
   <rule id="hosted-mcp">Hosted MCP endpoint: ${constants_1.KUBBISEC_HOSTED_MCP_URL} (OAuth2 for cloud IDEs). Local stdio: set KUBBISEC_ORGANIZATION_SLUG (preferred, e.g. minha-empresa) and KUBBISEC_API_KEY, or run kubbisec mcp login for device flow. Legacy KUBBISEC_ORGANIZATION_ID remains supported.</rule>
 </rules>
 </kubbisec-mcp-instructions>`;

package/bundled/node_modules/@kubbisec/shared/dist/dto/create-report.dto.d.ts

@@ -1,4 +1,4 @@
-import { ScanSource, ScanType } from "../enums";
+import { ScanType } from "../enums";
 import { CreateVulnerabilityDto } from "./create-vulnerability.dto";
 export declare class ExecutionContextDto {
     trigger?: string;
@@ -15,7 +15,8 @@ export declare class ExecutionContextDto {
     ciPipelineRunId?: string;
 }
 export declare class CreateReportDto {
-    source: ScanSource;
+    /** Scanner id or document provider (`TRIVY`, `CodeQL`, `generic-sarif`). Column is varchar(20). */
+    source: string;
     scanType: ScanType;
     target: string;
     rawFileName?: string;

package/bundled/node_modules/@kubbisec/shared/dist/dto/create-report.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-report.dto.d.ts","sourceRoot":"","sources":["../../src/dto/create-report.dto.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,qBAAa,mBAAmB;IAG9B,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,aAAa,CAAC,EAAE,MAAM,CAAC;IAIvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAI1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAIlB,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,eAAe;IAE1B,MAAM,EAAG,UAAU,CAAC;IAGpB,QAAQ,EAAG,QAAQ,CAAC;IAKpB,MAAM,EAAG,MAAM,CAAC;IAKhB,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAKnC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAKhC,eAAe,EAAG,sBAAsB,EAAE,CAAC;CAC5C"}
+{"version":3,"file":"create-report.dto.d.ts","sourceRoot":"","sources":["../../src/dto/create-report.dto.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,qBAAa,mBAAmB;IAG9B,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,aAAa,CAAC,EAAE,MAAM,CAAC;IAIvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAI1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAIlB,OAAO,CAAC,EAAE,MAAM,CAAC;IAIjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,UAAU,CAAC,EAAE,MAAM,CAAC;IAIpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,eAAe;IAC1B,mGAAmG;IAInG,MAAM,EAAG,MAAM,CAAC;IAGhB,QAAQ,EAAG,QAAQ,CAAC;IAKpB,MAAM,EAAG,MAAM,CAAC;IAKhB,WAAW,CAAC,EAAE,MAAM,CAAC;IAIrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAKnC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAKhC,eAAe,EAAG,sBAAsB,EAAE,CAAC;CAC5C"}

package/bundled/node_modules/@kubbisec/shared/dist/dto/create-report.dto.js

@@ -90,6 +90,7 @@ __decorate([
     __metadata("design:type", String)
 ], ExecutionContextDto.prototype, "ciPipelineRunId", void 0);
 class CreateReportDto {
+    /** Scanner id or document provider (`TRIVY`, `CodeQL`, `generic-sarif`). Column is varchar(20). */
     source;
     scanType;
     target;
@@ -101,7 +102,9 @@ class CreateReportDto {
 }
 exports.CreateReportDto = CreateReportDto;
 __decorate([
-    (0, class_validator_1.IsEnum)(enums_1.ScanSource),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(20),
     __metadata("design:type", String)
 ], CreateReportDto.prototype, "source", void 0);
 __decorate([

package/bundled/node_modules/@kubbisec/shared/dist/dto/create-report.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-report.dto.js","sourceRoot":"","sources":["../../src/dto/create-report.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAUyB;AACzB,oCAAgD;AAChD,yEAAoE;AAEpE,MAAa,mBAAmB;IAG9B,OAAO,CAAU;IAIjB,SAAS,CAAU;IAInB,MAAM,CAAU;IAIhB,aAAa,CAAU;IAIvB,gBAAgB,CAAU;IAI1B,iBAAiB,CAAU;IAI3B,QAAQ,CAAU;IAIlB,OAAO,CAAU;IAIjB,UAAU,CAAU;IAIpB,WAAW,CAAU;IAIrB,UAAU,CAAU;IAIpB,eAAe,CAAU;CAC1B;AAhDD,kDAgDC;AA7CC;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oDACM;AAIjB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;sDACQ;AAInB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;mDACK;AAIhB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;0DACY;AAIvB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;6DACe;AAI1B;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8DACgB;AAI3B;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;qDACO;AAIlB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oDACM;AAIjB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACS;AAIpB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;wDACU;AAIrB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACS;AAIpB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;4DACc;AAG3B,MAAa,eAAe;IAE1B,MAAM,CAAc;IAGpB,QAAQ,CAAY;IAKpB,MAAM,CAAU;IAKhB,WAAW,CAAU;IAIrB,SAAS,CAAU;IAInB,QAAQ,CAA2B;IAKnC,SAAS,CAAuB;IAKhC,eAAe,CAA4B;CAC5C;AAlCD,0CAkCC;AAhCC;IADC,IAAA,wBAAM,EAAC,kBAAU,CAAC;;+CACC;AAGpB;IADC,IAAA,wBAAM,EAAC,gBAAQ,CAAC;;iDACG;AAKpB;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;+CACC;AAKhB;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;oDACM;AAIrB;IAFC,IAAA,8BAAY,GAAE;IACd,IAAA,4BAAU,GAAE;;kDACM;AAInB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;iDACsB;AAKnC;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC;8BACpB,mBAAmB;kDAAC;AAKhC;IAHC,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,iDAAsB,CAAC;;wDACQ"}
+{"version":3,"file":"create-report.dto.js","sourceRoot":"","sources":["../../src/dto/create-report.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAUyB;AACzB,oCAAoC;AACpC,yEAAoE;AAEpE,MAAa,mBAAmB;IAG9B,OAAO,CAAU;IAIjB,SAAS,CAAU;IAInB,MAAM,CAAU;IAIhB,aAAa,CAAU;IAIvB,gBAAgB,CAAU;IAI1B,iBAAiB,CAAU;IAI3B,QAAQ,CAAU;IAIlB,OAAO,CAAU;IAIjB,UAAU,CAAU;IAIpB,WAAW,CAAU;IAIrB,UAAU,CAAU;IAIpB,eAAe,CAAU;CAC1B;AAhDD,kDAgDC;AA7CC;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oDACM;AAIjB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;sDACQ;AAInB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;mDACK;AAIhB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;0DACY;AAIvB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;6DACe;AAI1B;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8DACgB;AAI3B;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;qDACO;AAIlB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;oDACM;AAIjB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACS;AAIpB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;wDACU;AAIrB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uDACS;AAIpB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;4DACc;AAG3B,MAAa,eAAe;IAC1B,mGAAmG;IAInG,MAAM,CAAU;IAGhB,QAAQ,CAAY;IAKpB,MAAM,CAAU;IAKhB,WAAW,CAAU;IAIrB,SAAS,CAAU;IAInB,QAAQ,CAA2B;IAKnC,SAAS,CAAuB;IAKhC,eAAe,CAA4B;CAC5C;AArCD,0CAqCC;AAhCC;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,CAAC;;+CACE;AAGhB;IADC,IAAA,wBAAM,EAAC,gBAAQ,CAAC;;iDACG;AAKpB;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;+CACC;AAKhB;IAHC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,GAAG,CAAC;;oDACM;AAIrB;IAFC,IAAA,8BAAY,GAAE;IACd,IAAA,4BAAU,GAAE;;kDACM;AAInB;IAFC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;iDACsB;AAKnC;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC;8BACpB,mBAAmB;kDAAC;AAKhC;IAHC,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,iDAAsB,CAAC;;wDACQ"}

package/bundled/node_modules/@kubbisec/shared/dist/enums.d.ts

@@ -17,7 +17,58 @@ export declare enum ScanType {
     WEB = "WEB",
     DEPENDENCIES = "DEPENDENCIES",
     SECRETS = "SECRETS",
-    SBOM = "SBOM"
+    SBOM = "SBOM",
+    /** Category ids accepted alongside the legacy values above. */
+    sast = "sast",
+    sca = "sca",
+    secrets = "secrets",
+    dast = "dast",
+    iac = "iac",
+    container = "container",
+    sbom = "sbom",
+    api_security = "api_security",
+    k8s_manifest = "k8s_manifest",
+    k8s_runtime = "k8s_runtime",
+    cspm = "cspm",
+    cwpp = "cwpp",
+    cnapp = "cnapp",
+    host_vuln = "host_vuln",
+    network_vuln = "network_vuln",
+    attack_surface = "attack_surface",
+    port_scanning = "port_scanning",
+    web_vuln = "web_vuln",
+    cve = "cve",
+    malware = "malware",
+    supply_chain = "supply_chain",
+    dependency_confusion = "dependency_confusion",
+    typosquatting = "typosquatting",
+    license = "license",
+    binary = "binary",
+    firmware = "firmware",
+    mobile = "mobile",
+    android = "android",
+    ios = "ios",
+    infra_compliance = "infra_compliance",
+    k8s_compliance = "k8s_compliance",
+    docker_compliance = "docker_compliance",
+    cloud_compliance = "cloud_compliance",
+    policy_as_code = "policy_as_code",
+    cicd_security = "cicd_security",
+    github_posture = "github_posture",
+    gitlab_security = "gitlab_security",
+    repository_security = "repository_security",
+    artifact_registry = "artifact_registry",
+    package_registry = "package_registry",
+    pentest = "pentest",
+    bug_bounty = "bug_bounty",
+    red_team = "red_team",
+    bas = "bas",
+    threat_model = "threat_model",
+    threat_intel = "threat_intel",
+    exploit_intel = "exploit_intel",
+    epss = "epss",
+    llm_security = "llm_security",
+    mcp_agent = "mcp_agent"
 }
 export declare enum Severity {
     CRITICAL = "CRITICAL",

package/bundled/node_modules/@kubbisec/shared/dist/enums.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,QAAQ;IAClB,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,oBAAY,QAAQ;IAClB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,oBAAoB,yBAAyB;IAC7C,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,4IAKhC,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,mEAG/B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,uBAAuB,CAE3F;AAGD,oBAAY,WAAW;IAErB,aAAa,kBAAkB;IAE/B,MAAM,WAAW;IAEjB,OAAO,YAAY;IAEnB,gBAAgB,qBAAqB;IAErC,UAAU,eAAe;IAEzB,YAAY,iBAAiB;IAE7B,UAAU,eAAe;IAEzB,GAAG,QAAQ;IAEX,UAAU,eAAe;IAEzB,gBAAgB,qBAAqB;IAErC,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IACvB,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAGD,oBAAY,SAAS;IACnB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAGD,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AAEX,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAW7D,CAAC"}
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,QAAQ;IAClB,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,+DAA+D;IAC/D,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;IAC7B,WAAW,gBAAgB;IAC3B,IAAI,SAAS;IACb,IAAI,SAAS;IACb,KAAK,UAAU;IACf,SAAS,cAAc;IACvB,YAAY,iBAAiB;IAC7B,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,YAAY,iBAAiB;IAC7B,oBAAoB,yBAAyB;IAC7C,aAAa,kBAAkB;IAC/B,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,gBAAgB,qBAAqB;IACrC,cAAc,mBAAmB;IACjC,iBAAiB,sBAAsB;IACvC,gBAAgB,qBAAqB;IACrC,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,mBAAmB,wBAAwB;IAC3C,iBAAiB,sBAAsB;IACvC,gBAAgB,qBAAqB;IACrC,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,QAAQ,aAAa;IACrB,GAAG,QAAQ;IACX,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,IAAI,SAAS;IACb,YAAY,iBAAiB;IAC7B,SAAS,cAAc;CACxB;AAED,oBAAY,QAAQ;IAClB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,oHAAoH;IACpH,oBAAoB,yBAAyB;IAC7C,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,4IAKhC,CAAC;AAEX,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,mEAG/B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,uBAAuB,CAE3F;AAGD,oBAAY,WAAW;IAErB,aAAa,kBAAkB;IAE/B,MAAM,WAAW;IAEjB,OAAO,YAAY;IAEnB,gBAAgB,qBAAqB;IAErC,UAAU,eAAe;IAEzB,YAAY,iBAAiB;IAE7B,UAAU,eAAe;IAEzB,GAAG,QAAQ;IAEX,UAAU,eAAe;IAEzB,gBAAgB,qBAAqB;IAErC,KAAK,UAAU;CAChB;AAGD,oBAAY,aAAa;IACvB,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAGD,oBAAY,SAAS;IACnB,QAAQ,aAAa;IACrB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAGD,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AAEX,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAED,oBAAY,gBAAgB;IAC1B,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAW7D,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/enums.js

@@ -24,6 +24,57 @@ var ScanType;
     ScanType["DEPENDENCIES"] = "DEPENDENCIES";
     ScanType["SECRETS"] = "SECRETS";
     ScanType["SBOM"] = "SBOM";
+    /** Category ids accepted alongside the legacy values above. */
+    ScanType["sast"] = "sast";
+    ScanType["sca"] = "sca";
+    ScanType["secrets"] = "secrets";
+    ScanType["dast"] = "dast";
+    ScanType["iac"] = "iac";
+    ScanType["container"] = "container";
+    ScanType["sbom"] = "sbom";
+    ScanType["api_security"] = "api_security";
+    ScanType["k8s_manifest"] = "k8s_manifest";
+    ScanType["k8s_runtime"] = "k8s_runtime";
+    ScanType["cspm"] = "cspm";
+    ScanType["cwpp"] = "cwpp";
+    ScanType["cnapp"] = "cnapp";
+    ScanType["host_vuln"] = "host_vuln";
+    ScanType["network_vuln"] = "network_vuln";
+    ScanType["attack_surface"] = "attack_surface";
+    ScanType["port_scanning"] = "port_scanning";
+    ScanType["web_vuln"] = "web_vuln";
+    ScanType["cve"] = "cve";
+    ScanType["malware"] = "malware";
+    ScanType["supply_chain"] = "supply_chain";
+    ScanType["dependency_confusion"] = "dependency_confusion";
+    ScanType["typosquatting"] = "typosquatting";
+    ScanType["license"] = "license";
+    ScanType["binary"] = "binary";
+    ScanType["firmware"] = "firmware";
+    ScanType["mobile"] = "mobile";
+    ScanType["android"] = "android";
+    ScanType["ios"] = "ios";
+    ScanType["infra_compliance"] = "infra_compliance";
+    ScanType["k8s_compliance"] = "k8s_compliance";
+    ScanType["docker_compliance"] = "docker_compliance";
+    ScanType["cloud_compliance"] = "cloud_compliance";
+    ScanType["policy_as_code"] = "policy_as_code";
+    ScanType["cicd_security"] = "cicd_security";
+    ScanType["github_posture"] = "github_posture";
+    ScanType["gitlab_security"] = "gitlab_security";
+    ScanType["repository_security"] = "repository_security";
+    ScanType["artifact_registry"] = "artifact_registry";
+    ScanType["package_registry"] = "package_registry";
+    ScanType["pentest"] = "pentest";
+    ScanType["bug_bounty"] = "bug_bounty";
+    ScanType["red_team"] = "red_team";
+    ScanType["bas"] = "bas";
+    ScanType["threat_model"] = "threat_model";
+    ScanType["threat_intel"] = "threat_intel";
+    ScanType["exploit_intel"] = "exploit_intel";
+    ScanType["epss"] = "epss";
+    ScanType["llm_security"] = "llm_security";
+    ScanType["mcp_agent"] = "mcp_agent";
 })(ScanType || (exports.ScanType = ScanType = {}));
 var Severity;
 (function (Severity) {
@@ -127,7 +178,7 @@ exports.SOURCE_SCAN_TYPE_MAP = {
     [ScanSource.SEMGREP]: ScanType.SAST,
     [ScanSource.NMAP]: ScanType.NETWORK,
     [ScanSource.SKIPFISH]: ScanType.WEB,
-    [ScanSource.OSV]: ScanType.DEPENDENCIES,
+    [ScanSource.OSV]: ScanType.sca,
     [ScanSource.GITLEAKS]: ScanType.SECRETS,
     [ScanSource.SYFT]: ScanType.SBOM,
     [ScanSource.VULNDB]: ScanType.DEPENDENCIES,

package/bundled/node_modules/@kubbisec/shared/dist/enums.js.map

@@ -1 +1 @@
-{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AAyDA,8DAEC;AA3DD,IAAY,UAWX;AAXD,WAAY,UAAU;IACpB,6BAAe,CAAA;IACf,6BAAe,CAAA;IACf,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,mCAAqB,CAAA;IACrB,yBAAW,CAAA;IACX,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,+BAAiB,CAAA;IACjB,yCAA2B,CAAA;AAC7B,CAAC,EAXW,UAAU,0BAAV,UAAU,QAWrB;AAED,IAAY,QAQX;AARD,WAAY,QAAQ;IAClB,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,+BAAmB,CAAA;IACnB,yBAAa,CAAA;AACf,CAAC,EARW,QAAQ,wBAAR,QAAQ,QAQnB;AAED,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EANW,QAAQ,wBAAR,QAAQ,QAMnB;AAED,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,wDAAiC,CAAA;IACjC,oHAAoH;IACpH,oEAA6C,CAAA;IAC7C,sCAAe,CAAA;IACf,4CAAqB,CAAA;AACvB,CAAC,EATW,mBAAmB,mCAAnB,mBAAmB,QAS9B;AAEY,QAAA,6BAA6B,GAAG;IAC3C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,SAAS;IAC7B,mBAAmB,CAAC,QAAQ;IAC5B,mBAAmB,CAAC,oBAAoB;CAChC,CAAC;AAEX,gFAAgF;AACnE,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,QAAQ;CACpB,CAAC;AAIX,SAAgB,yBAAyB,CAAC,MAAc;IACtD,OAAQ,oCAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AACjE,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB,iDAAiD;IACjD,8CAA+B,CAAA;IAC/B,0DAA0D;IAC1D,gCAAiB,CAAA;IACjB,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,+CAA+C;IAC/C,oDAAqC,CAAA;IACrC,gEAAgE;IAChE,wCAAyB,CAAA;IACzB,gEAAgE;IAChE,4CAA6B,CAAA;IAC7B,yCAAyC;IACzC,wCAAyB,CAAA;IACzB,iBAAiB;IACjB,0BAAW,CAAA;IACX,cAAc;IACd,wCAAyB,CAAA;IACzB,gDAAgD;IAChD,oDAAqC,CAAA;IACrC,gDAAgD;IAChD,8BAAe,CAAA;AACjB,CAAC,EAvBW,WAAW,2BAAX,WAAW,QAuBtB;AAED,0DAA0D;AAC1D,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,oDAAmC,CAAA;IACnC,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;IACrB,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AAED,+CAA+C;AAC/C,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,kCAAqB,CAAA;IACrB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,wBAAW,CAAA;IACX,0BAAa,CAAA;AACf,CAAC,EANW,SAAS,yBAAT,SAAS,QAMpB;AAED,4CAA4C;AAC/B,QAAA,qBAAqB,GAAG;IACnC,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,mCAAe,CAAA;IACf,qCAAiB,CAAA;AACnB,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAEY,QAAA,oBAAoB,GAAiC;IAChE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,SAAS;IACtC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI;IACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI;IACnC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO;IACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG;IACnC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,YAAY;IACvC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO;IACvC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI;IAChC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,YAAY;IAC1C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,IAAI;CACxC,CAAC"}
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../src/enums.ts"],"names":[],"mappings":";;;AA4GA,8DAEC;AA9GD,IAAY,UAWX;AAXD,WAAY,UAAU;IACpB,6BAAe,CAAA;IACf,6BAAe,CAAA;IACf,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,mCAAqB,CAAA;IACrB,yBAAW,CAAA;IACX,mCAAqB,CAAA;IACrB,2BAAa,CAAA;IACb,+BAAiB,CAAA;IACjB,yCAA2B,CAAA;AAC7B,CAAC,EAXW,UAAU,0BAAV,UAAU,QAWrB;AAED,IAAY,QA2DX;AA3DD,WAAY,QAAQ;IAClB,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,+BAAmB,CAAA;IACnB,yBAAa,CAAA;IACb,+DAA+D;IAC/D,yBAAa,CAAA;IACb,uBAAW,CAAA;IACX,+BAAmB,CAAA;IACnB,yBAAa,CAAA;IACb,uBAAW,CAAA;IACX,mCAAuB,CAAA;IACvB,yBAAa,CAAA;IACb,yCAA6B,CAAA;IAC7B,yCAA6B,CAAA;IAC7B,uCAA2B,CAAA;IAC3B,yBAAa,CAAA;IACb,yBAAa,CAAA;IACb,2BAAe,CAAA;IACf,mCAAuB,CAAA;IACvB,yCAA6B,CAAA;IAC7B,6CAAiC,CAAA;IACjC,2CAA+B,CAAA;IAC/B,iCAAqB,CAAA;IACrB,uBAAW,CAAA;IACX,+BAAmB,CAAA;IACnB,yCAA6B,CAAA;IAC7B,yDAA6C,CAAA;IAC7C,2CAA+B,CAAA;IAC/B,+BAAmB,CAAA;IACnB,6BAAiB,CAAA;IACjB,iCAAqB,CAAA;IACrB,6BAAiB,CAAA;IACjB,+BAAmB,CAAA;IACnB,uBAAW,CAAA;IACX,iDAAqC,CAAA;IACrC,6CAAiC,CAAA;IACjC,mDAAuC,CAAA;IACvC,iDAAqC,CAAA;IACrC,6CAAiC,CAAA;IACjC,2CAA+B,CAAA;IAC/B,6CAAiC,CAAA;IACjC,+CAAmC,CAAA;IACnC,uDAA2C,CAAA;IAC3C,mDAAuC,CAAA;IACvC,iDAAqC,CAAA;IACrC,+BAAmB,CAAA;IACnB,qCAAyB,CAAA;IACzB,iCAAqB,CAAA;IACrB,uBAAW,CAAA;IACX,yCAA6B,CAAA;IAC7B,yCAA6B,CAAA;IAC7B,2CAA+B,CAAA;IAC/B,yBAAa,CAAA;IACb,yCAA6B,CAAA;IAC7B,mCAAuB,CAAA;AACzB,CAAC,EA3DW,QAAQ,wBAAR,QAAQ,QA2DnB;AAED,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,iCAAqB,CAAA;IACrB,yBAAa,CAAA;IACb,6BAAiB,CAAA;IACjB,uBAAW,CAAA;IACX,yBAAa,CAAA;AACf,CAAC,EANW,QAAQ,wBAAR,QAAQ,QAMnB;AAED,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,wDAAiC,CAAA;IACjC,oHAAoH;IACpH,oEAA6C,CAAA;IAC7C,sCAAe,CAAA;IACf,4CAAqB,CAAA;AACvB,CAAC,EATW,mBAAmB,mCAAnB,mBAAmB,QAS9B;AAEY,QAAA,6BAA6B,GAAG;IAC3C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,SAAS;IAC7B,mBAAmB,CAAC,QAAQ;IAC5B,mBAAmB,CAAC,oBAAoB;CAChC,CAAC;AAEX,gFAAgF;AACnE,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB,CAAC,IAAI;IACxB,mBAAmB,CAAC,QAAQ;CACpB,CAAC;AAIX,SAAgB,yBAAyB,CAAC,MAAc;IACtD,OAAQ,oCAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,iEAAiE;AACjE,IAAY,WAuBX;AAvBD,WAAY,WAAW;IACrB,iDAAiD;IACjD,8CAA+B,CAAA;IAC/B,0DAA0D;IAC1D,gCAAiB,CAAA;IACjB,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,+CAA+C;IAC/C,oDAAqC,CAAA;IACrC,gEAAgE;IAChE,wCAAyB,CAAA;IACzB,gEAAgE;IAChE,4CAA6B,CAAA;IAC7B,yCAAyC;IACzC,wCAAyB,CAAA;IACzB,iBAAiB;IACjB,0BAAW,CAAA;IACX,cAAc;IACd,wCAAyB,CAAA;IACzB,gDAAgD;IAChD,oDAAqC,CAAA;IACrC,gDAAgD;IAChD,8BAAe,CAAA;AACjB,CAAC,EAvBW,WAAW,2BAAX,WAAW,QAuBtB;AAED,0DAA0D;AAC1D,IAAY,aAKX;AALD,WAAY,aAAa;IACvB,oDAAmC,CAAA;IACnC,sCAAqB,CAAA;IACrB,sCAAqB,CAAA;IACrB,oCAAmB,CAAA;AACrB,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AAED,+CAA+C;AAC/C,IAAY,SAMX;AAND,WAAY,SAAS;IACnB,kCAAqB,CAAA;IACrB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,wBAAW,CAAA;IACX,0BAAa,CAAA;AACf,CAAC,EANW,SAAS,yBAAT,SAAS,QAMpB;AAED,4CAA4C;AAC/B,QAAA,qBAAqB,GAAG;IACnC,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,yCAAqB,CAAA;IACrB,mCAAe,CAAA;IACf,qCAAiB,CAAA;AACnB,CAAC,EAJW,gBAAgB,gCAAhB,gBAAgB,QAI3B;AAEY,QAAA,oBAAoB,GAAiC;IAChE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,SAAS;IACtC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI;IACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI;IACnC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO;IACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG;IACnC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG;IAC9B,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO;IACvC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI;IAChC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,YAAY;IAC1C,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,IAAI;CACxC,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.d.ts

@@ -1,7 +1,7 @@
 export { loadAiDocsBundleFromDisk } from "./ai-docs-bundle.loader.js";
 export { ASPM_DOC_FILES, loadAspmDocsBundleFromDisk } from "./aspm-docs-bundle.loader.js";
 export { buildDocSectionIndex, listDocSectionIds, type ParsedDocSection, parseDocBundle, pickDocSection, sectionIdFromHeading, } from "./doc-bundle-utils.js";
-export { KUBBISEC_MCP_ACTION_TOOLS, KUBBISEC_MCP_TOOLS, } from "./mcp-tools-catalog.js";
+export { KUBBISEC_ASSISTANT_PARITY_TOOLS, KUBBISEC_MCP_ACTION_TOOLS, KUBBISEC_MCP_TOOLS, } from "./mcp-tools-catalog.js";
 export { loadNausPipelineDocsBundleFromDisk, NAUS_WEB_DOC_IDS, } from "./naus-pipeline-docs-bundle.loader.js";
 export { NAUS_SCHEMA_OVERVIEW } from "./naus-schema-overview.js";
 export { buildSecurityScannerPlaybookPayload, buildSecurityScannersCatalogPayload, isSecurityScannerId, listPlaybookNausKindAspmSnippets, PLAYBOOK_ASPM_MATRIX_EXAMPLE, type PlaybookTopic, parseSecurityScannerPlaybookArgs, SCANNER_META, type ScannerPlatform, type ScannerPlaybookEntry, SECURITY_SCANNER_IDS, type SecurityScannerId, wrapPlaybookSnippetAsPipelineYaml, } from "./security-scanner-playbooks.js";

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kCAAkC,EAClC,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,mBAAmB,EACnB,gCAAgC,EAChC,4BAA4B,EAC5B,KAAK,aAAa,EAClB,gCAAgC,EAChC,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,iCAAiC,GAClC,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kCAAkC,EAClC,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,mCAAmC,EACnC,mCAAmC,EACnC,mBAAmB,EACnB,gCAAgC,EAChC,4BAA4B,EAC5B,KAAK,aAAa,EAClB,gCAAgC,EAChC,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,iCAAiC,GAClC,MAAM,iCAAiC,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.wrapPlaybookSnippetAsPipelineYaml = exports.SECURITY_SCANNER_IDS = exports.SCANNER_META = exports.parseSecurityScannerPlaybookArgs = exports.PLAYBOOK_ASPM_MATRIX_EXAMPLE = exports.listPlaybookNausKindAspmSnippets = exports.isSecurityScannerId = exports.buildSecurityScannersCatalogPayload = exports.buildSecurityScannerPlaybookPayload = exports.NAUS_SCHEMA_OVERVIEW = exports.NAUS_WEB_DOC_IDS = exports.loadNausPipelineDocsBundleFromDisk = exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = exports.sectionIdFromHeading = exports.pickDocSection = exports.parseDocBundle = exports.listDocSectionIds = exports.buildDocSectionIndex = exports.loadAspmDocsBundleFromDisk = exports.ASPM_DOC_FILES = exports.loadAiDocsBundleFromDisk = void 0;
+exports.wrapPlaybookSnippetAsPipelineYaml = exports.SECURITY_SCANNER_IDS = exports.SCANNER_META = exports.parseSecurityScannerPlaybookArgs = exports.PLAYBOOK_ASPM_MATRIX_EXAMPLE = exports.listPlaybookNausKindAspmSnippets = exports.isSecurityScannerId = exports.buildSecurityScannersCatalogPayload = exports.buildSecurityScannerPlaybookPayload = exports.NAUS_SCHEMA_OVERVIEW = exports.NAUS_WEB_DOC_IDS = exports.loadNausPipelineDocsBundleFromDisk = exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = exports.KUBBISEC_ASSISTANT_PARITY_TOOLS = exports.sectionIdFromHeading = exports.pickDocSection = exports.parseDocBundle = exports.listDocSectionIds = exports.buildDocSectionIndex = exports.loadAspmDocsBundleFromDisk = exports.ASPM_DOC_FILES = exports.loadAiDocsBundleFromDisk = void 0;
 var ai_docs_bundle_loader_js_1 = require("./ai-docs-bundle.loader.js");
 Object.defineProperty(exports, "loadAiDocsBundleFromDisk", { enumerable: true, get: function () { return ai_docs_bundle_loader_js_1.loadAiDocsBundleFromDisk; } });
 var aspm_docs_bundle_loader_js_1 = require("./aspm-docs-bundle.loader.js");
@@ -13,6 +13,7 @@ Object.defineProperty(exports, "parseDocBundle", { enumerable: true, get: functi
 Object.defineProperty(exports, "pickDocSection", { enumerable: true, get: function () { return doc_bundle_utils_js_1.pickDocSection; } });
 Object.defineProperty(exports, "sectionIdFromHeading", { enumerable: true, get: function () { return doc_bundle_utils_js_1.sectionIdFromHeading; } });
 var mcp_tools_catalog_js_1 = require("./mcp-tools-catalog.js");
+Object.defineProperty(exports, "KUBBISEC_ASSISTANT_PARITY_TOOLS", { enumerable: true, get: function () { return mcp_tools_catalog_js_1.KUBBISEC_ASSISTANT_PARITY_TOOLS; } });
 Object.defineProperty(exports, "KUBBISEC_MCP_ACTION_TOOLS", { enumerable: true, get: function () { return mcp_tools_catalog_js_1.KUBBISEC_MCP_ACTION_TOOLS; } });
 Object.defineProperty(exports, "KUBBISEC_MCP_TOOLS", { enumerable: true, get: function () { return mcp_tools_catalog_js_1.KUBBISEC_MCP_TOOLS; } });
 var naus_pipeline_docs_bundle_loader_js_1 = require("./naus-pipeline-docs-bundle.loader.js");

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":";;;AAAA,uEAAsE;AAA7D,oIAAA,wBAAwB,OAAA;AACjC,2EAA0F;AAAjF,4HAAA,cAAc,OAAA;AAAE,wIAAA,0BAA0B,OAAA;AACnD,6DAO+B;AAN7B,2HAAA,oBAAoB,OAAA;AACpB,wHAAA,iBAAiB,OAAA;AAEjB,qHAAA,cAAc,OAAA;AACd,qHAAA,cAAc,OAAA;AACd,2HAAA,oBAAoB,OAAA;AAEtB,+DAGgC;AAF9B,iIAAA,yBAAyB,OAAA;AACzB,0HAAA,kBAAkB,OAAA;AAEpB,6FAG+C;AAF7C,yJAAA,kCAAkC,OAAA;AAClC,uIAAA,gBAAgB,OAAA;AAElB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iFAcyC;AAbvC,oJAAA,mCAAmC,OAAA;AACnC,oJAAA,mCAAmC,OAAA;AACnC,oIAAA,mBAAmB,OAAA;AACnB,iJAAA,gCAAgC,OAAA;AAChC,6IAAA,4BAA4B,OAAA;AAE5B,iJAAA,gCAAgC,OAAA;AAChC,6HAAA,YAAY,OAAA;AAGZ,qIAAA,oBAAoB,OAAA;AAEpB,kJAAA,iCAAiC,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/product-docs/index.ts"],"names":[],"mappings":";;;AAAA,uEAAsE;AAA7D,oIAAA,wBAAwB,OAAA;AACjC,2EAA0F;AAAjF,4HAAA,cAAc,OAAA;AAAE,wIAAA,0BAA0B,OAAA;AACnD,6DAO+B;AAN7B,2HAAA,oBAAoB,OAAA;AACpB,wHAAA,iBAAiB,OAAA;AAEjB,qHAAA,cAAc,OAAA;AACd,qHAAA,cAAc,OAAA;AACd,2HAAA,oBAAoB,OAAA;AAEtB,+DAIgC;AAH9B,uIAAA,+BAA+B,OAAA;AAC/B,iIAAA,yBAAyB,OAAA;AACzB,0HAAA,kBAAkB,OAAA;AAEpB,6FAG+C;AAF7C,yJAAA,kCAAkC,OAAA;AAClC,uIAAA,gBAAgB,OAAA;AAElB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iFAcyC;AAbvC,oJAAA,mCAAmC,OAAA;AACnC,oJAAA,mCAAmC,OAAA;AACnC,oIAAA,mBAAmB,OAAA;AACnB,iJAAA,gCAAgC,OAAA;AAChC,6IAAA,4BAA4B,OAAA;AAE5B,iJAAA,gCAAgC,OAAA;AAChC,6HAAA,YAAY,OAAA;AAGZ,qIAAA,oBAAoB,OAAA;AAEpB,kJAAA,iCAAiC,OAAA"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.d.ts

@@ -1,4 +1,6 @@
-/** Action tools exposed by @kubbisec/mcp (no documentation tools). */
+/** Tools the platform MCP registers itself (REST). Assistant-parity tools are added from the API catalog. */
 export declare const KUBBISEC_MCP_ACTION_TOOLS: readonly ["resolve_project_by_repository", "list_project_by_repository_candidates", "list_vulnerabilities", "get_vulnerability", "trigger_kubbisec_scan", "get_kubbisec_scan_status", "list_kubbisec_scan_tasks", "cancel_kubbisec_scan_task", "generate_remediation_plan", "generate_issue_draft_for_vulnerability", "start_ai_remediation_run", "get_ai_remediation_run_status", "get_ai_remediation_run_logs", "validate_naus_pipeline_yaml", "list_pipeline_generation_jobs"];
-export declare const KUBBISEC_MCP_TOOLS: readonly ["resolve_project_by_repository", "list_project_by_repository_candidates", "list_vulnerabilities", "get_vulnerability", "trigger_kubbisec_scan", "get_kubbisec_scan_status", "list_kubbisec_scan_tasks", "cancel_kubbisec_scan_task", "generate_remediation_plan", "generate_issue_draft_for_vulnerability", "start_ai_remediation_run", "get_ai_remediation_run_status", "get_ai_remediation_run_logs", "validate_naus_pipeline_yaml", "list_pipeline_generation_jobs"];
+/** Same function names as the KubbiSec assistant tool catalog, executed via the API. */
+export declare const KUBBISEC_ASSISTANT_PARITY_TOOLS: readonly ["kubbisec_mcp_knowledge", "aspm_docs", "security_scanners_catalog", "security_scanner_playbook", "kubsec_github_repository", "github_extended_context_policy", "explain_vulnerability", "explain_follow_up", "get_finding_summary", "list_findings", "get_ci_run_status", "get_ci_run_detail", "get_ci_run_logs_excerpt", "pause_ci_job", "resume_ci_job", "replay_run", "list_run_artifacts", "create_pipeline", "naus_pipeline_docs", "naus_schema_overview", "naus_validate_yaml", "kubsec_list_projects", "kubsec_get_project", "get_ci_tree", "get_recent_runs", "get_run_logs_excerpt", "get_pipeline_schedules", "get_pipeline_env_packs", "get_pipeline_env_preview", "update_pipeline_fields", "trigger_run", "cancel_run", "create_pipeline_schedule", "update_pipeline_schedule", "delete_pipeline_schedule", "attach_env_pack", "detach_env_pack", "replace_editor_yaml_range", "set_pipeline_yaml", "set_editor_yaml"];
+export declare const KUBBISEC_MCP_TOOLS: readonly ["resolve_project_by_repository", "list_project_by_repository_candidates", "list_vulnerabilities", "get_vulnerability", "trigger_kubbisec_scan", "get_kubbisec_scan_status", "list_kubbisec_scan_tasks", "cancel_kubbisec_scan_task", "generate_remediation_plan", "generate_issue_draft_for_vulnerability", "start_ai_remediation_run", "get_ai_remediation_run_status", "get_ai_remediation_run_logs", "validate_naus_pipeline_yaml", "list_pipeline_generation_jobs", "kubbisec_mcp_knowledge", "aspm_docs", "security_scanners_catalog", "security_scanner_playbook", "kubsec_github_repository", "github_extended_context_policy", "explain_vulnerability", "explain_follow_up", "get_finding_summary", "list_findings", "get_ci_run_status", "get_ci_run_detail", "get_ci_run_logs_excerpt", "pause_ci_job", "resume_ci_job", "replay_run", "list_run_artifacts", "create_pipeline", "naus_pipeline_docs", "naus_schema_overview", "naus_validate_yaml", "kubsec_list_projects", "kubsec_get_project", "get_ci_tree", "get_recent_runs", "get_run_logs_excerpt", "get_pipeline_schedules", "get_pipeline_env_packs", "get_pipeline_env_preview", "update_pipeline_fields", "trigger_run", "cancel_run", "create_pipeline_schedule", "update_pipeline_schedule", "delete_pipeline_schedule", "attach_env_pack", "detach_env_pack", "replace_editor_yaml_range", "set_pipeline_yaml", "set_editor_yaml"];
 //# sourceMappingURL=mcp-tools-catalog.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-tools-catalog.d.ts","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,eAAO,MAAM,yBAAyB,mdAgB5B,CAAC;AAEX,eAAO,MAAM,kBAAkB,mdAA0C,CAAC"}
+{"version":3,"file":"mcp-tools-catalog.d.ts","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,eAAO,MAAM,yBAAyB,mdAgB5B,CAAC;AAEX,wFAAwF;AACxF,eAAO,MAAM,+BAA+B,+4BAyClC,CAAC;AAEX,eAAO,MAAM,kBAAkB,u1CAGrB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = void 0;
-/** Action tools exposed by @kubbisec/mcp (no documentation tools). */
+exports.KUBBISEC_MCP_TOOLS = exports.KUBBISEC_ASSISTANT_PARITY_TOOLS = exports.KUBBISEC_MCP_ACTION_TOOLS = void 0;
+/** Tools the platform MCP registers itself (REST). Assistant-parity tools are added from the API catalog. */
 exports.KUBBISEC_MCP_ACTION_TOOLS = [
     "resolve_project_by_repository",
     "list_project_by_repository_candidates",
@@ -19,5 +19,51 @@ exports.KUBBISEC_MCP_ACTION_TOOLS = [
     "validate_naus_pipeline_yaml",
     "list_pipeline_generation_jobs",
 ];
-exports.KUBBISEC_MCP_TOOLS = [...exports.KUBBISEC_MCP_ACTION_TOOLS];
+/** Same function names as the KubbiSec assistant tool catalog, executed via the API. */
+exports.KUBBISEC_ASSISTANT_PARITY_TOOLS = [
+    "kubbisec_mcp_knowledge",
+    "aspm_docs",
+    "security_scanners_catalog",
+    "security_scanner_playbook",
+    "kubsec_github_repository",
+    "github_extended_context_policy",
+    "explain_vulnerability",
+    "explain_follow_up",
+    "get_finding_summary",
+    "list_findings",
+    "get_ci_run_status",
+    "get_ci_run_detail",
+    "get_ci_run_logs_excerpt",
+    "pause_ci_job",
+    "resume_ci_job",
+    "replay_run",
+    "list_run_artifacts",
+    "create_pipeline",
+    "naus_pipeline_docs",
+    "naus_schema_overview",
+    "naus_validate_yaml",
+    "kubsec_list_projects",
+    "kubsec_get_project",
+    "get_ci_tree",
+    "get_recent_runs",
+    "get_run_logs_excerpt",
+    "get_pipeline_schedules",
+    "get_pipeline_env_packs",
+    "get_pipeline_env_preview",
+    "update_pipeline_fields",
+    "trigger_run",
+    "cancel_run",
+    "create_pipeline_schedule",
+    "update_pipeline_schedule",
+    "delete_pipeline_schedule",
+    "attach_env_pack",
+    "detach_env_pack",
+    "replace_editor_yaml_range",
+    "set_pipeline_yaml",
+    "set_editor_yaml",
+];
+exports.KUBBISEC_MCP_TOOLS = [
+    ...exports.KUBBISEC_MCP_ACTION_TOOLS,
+    ...exports.KUBBISEC_ASSISTANT_PARITY_TOOLS,
+];
 //# sourceMappingURL=mcp-tools-catalog.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/mcp-tools-catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-tools-catalog.js","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":";;;AAAA,sEAAsE;AACzD,QAAA,yBAAyB,GAAG;IACvC,+BAA+B;IAC/B,uCAAuC;IACvC,sBAAsB;IACtB,mBAAmB;IACnB,uBAAuB;IACvB,0BAA0B;IAC1B,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,wCAAwC;IACxC,0BAA0B;IAC1B,+BAA+B;IAC/B,6BAA6B;IAC7B,6BAA6B;IAC7B,+BAA+B;CACvB,CAAC;AAEE,QAAA,kBAAkB,GAAG,CAAC,GAAG,iCAAyB,CAAU,CAAC"}
+{"version":3,"file":"mcp-tools-catalog.js","sourceRoot":"","sources":["../../src/product-docs/mcp-tools-catalog.ts"],"names":[],"mappings":";;;AAAA,6GAA6G;AAChG,QAAA,yBAAyB,GAAG;IACvC,+BAA+B;IAC/B,uCAAuC;IACvC,sBAAsB;IACtB,mBAAmB;IACnB,uBAAuB;IACvB,0BAA0B;IAC1B,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,wCAAwC;IACxC,0BAA0B;IAC1B,+BAA+B;IAC/B,6BAA6B;IAC7B,6BAA6B;IAC7B,+BAA+B;CACvB,CAAC;AAEX,wFAAwF;AAC3E,QAAA,+BAA+B,GAAG;IAC7C,wBAAwB;IACxB,WAAW;IACX,2BAA2B;IAC3B,2BAA2B;IAC3B,0BAA0B;IAC1B,gCAAgC;IAChC,uBAAuB;IACvB,mBAAmB;IACnB,qBAAqB;IACrB,eAAe;IACf,mBAAmB;IACnB,mBAAmB;IACnB,yBAAyB;IACzB,cAAc;IACd,eAAe;IACf,YAAY;IACZ,oBAAoB;IACpB,iBAAiB;IACjB,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,aAAa;IACb,iBAAiB;IACjB,sBAAsB;IACtB,wBAAwB;IACxB,wBAAwB;IACxB,0BAA0B;IAC1B,wBAAwB;IACxB,aAAa;IACb,YAAY;IACZ,0BAA0B;IAC1B,0BAA0B;IAC1B,0BAA0B;IAC1B,iBAAiB;IACjB,iBAAiB;IACjB,2BAA2B;IAC3B,mBAAmB;IACnB,iBAAiB;CACT,CAAC;AAEE,QAAA,kBAAkB,GAAG;IAChC,GAAG,iCAAyB;IAC5B,GAAG,uCAA+B;CAC1B,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/security/index.d.ts

@@ -2,6 +2,7 @@ export * from "./aspm-gate-rules";
 export * from "./build-aspm-security-matrix-pipeline-yaml";
 export * from "./build-github-security-workflow-yaml";
 export * from "./github-workflow-action-pins";
+export * from "./report-provider-catalog";
 export * from "./security-tool.types";
 export * from "./security-tool-catalog";
 //# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/security/index.js

@@ -18,6 +18,7 @@ __exportStar(require("./aspm-gate-rules"), exports);
 __exportStar(require("./build-aspm-security-matrix-pipeline-yaml"), exports);
 __exportStar(require("./build-github-security-workflow-yaml"), exports);
 __exportStar(require("./github-workflow-action-pins"), exports);
+__exportStar(require("./report-provider-catalog"), exports);
 __exportStar(require("./security-tool.types"), exports);
 __exportStar(require("./security-tool-catalog"), exports);
 //# sourceMappingURL=index.js.map

package/bundled/node_modules/@kubbisec/shared/dist/security/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,6EAA2D;AAC3D,wEAAsD;AACtD,gEAA8C;AAC9C,wDAAsC;AACtC,0DAAwC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,6EAA2D;AAC3D,wEAAsD;AACtD,gEAA8C;AAC9C,4DAA0C;AAC1C,wDAAsC;AACtC,0DAAwC"}

package/bundled/node_modules/@kubbisec/shared/dist/security/report-provider-catalog.d.ts

@@ -0,0 +1,15 @@
+/** Stable ingestion categories. Distinct from the Naus CI tool catalog. */
+export declare const REPORT_CATEGORY_IDS: readonly ["sast", "sca", "secrets", "dast", "iac", "container", "sbom", "api_security", "k8s_manifest", "k8s_runtime", "cspm", "cwpp", "cnapp", "host_vuln", "network_vuln", "attack_surface", "port_scanning", "web_vuln", "cve", "malware", "supply_chain", "dependency_confusion", "typosquatting", "license", "binary", "firmware", "mobile", "android", "ios", "infra_compliance", "k8s_compliance", "docker_compliance", "cloud_compliance", "policy_as_code", "cicd_security", "github_posture", "gitlab_security", "repository_security", "artifact_registry", "package_registry", "pentest", "bug_bounty", "red_team", "bas", "threat_model", "threat_intel", "exploit_intel", "epss", "llm_security", "mcp_agent"];
+export type ReportCategoryId = (typeof REPORT_CATEGORY_IDS)[number];
+/** Legacy aliases stored on scan reports before category ids existed. */
+export type ReportProviderCategory = ReportCategoryId | "network" | "web";
+export type ReportProviderCatalogEntry = {
+    provider: string;
+    categories: readonly ReportProviderCategory[];
+    formats: readonly string[];
+};
+export declare const REPORT_PROVIDER_CATALOG: readonly ReportProviderCatalogEntry[];
+export declare function isReportCategoryId(value: string): value is ReportCategoryId;
+/** Legacy families keep the historical scan type strings (`container` → CONTAINER, `network` → NETWORK). */
+export declare function scanTypeForReportCategory(category: string): string;
+//# sourceMappingURL=report-provider-catalog.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/security/report-provider-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-provider-catalog.d.ts","sourceRoot":"","sources":["../../src/security/report-provider-catalog.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,8rBAmDtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,yEAAyE;AACzE,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,GAAG,SAAS,GAAG,KAAK,CAAC;AAE1E,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC9C,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,SAAS,0BAA0B,EAmGxE,CAAC;AAIF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,gBAAgB,CAE3E;AAED,4GAA4G;AAC5G,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAoBlE"}

package/bundled/node_modules/@kubbisec/shared/dist/security/report-provider-catalog.js

@@ -0,0 +1,185 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REPORT_PROVIDER_CATALOG = exports.REPORT_CATEGORY_IDS = void 0;
+exports.isReportCategoryId = isReportCategoryId;
+exports.scanTypeForReportCategory = scanTypeForReportCategory;
+/** Stable ingestion categories. Distinct from the Naus CI tool catalog. */
+exports.REPORT_CATEGORY_IDS = [
+    "sast",
+    "sca",
+    "secrets",
+    "dast",
+    "iac",
+    "container",
+    "sbom",
+    "api_security",
+    "k8s_manifest",
+    "k8s_runtime",
+    "cspm",
+    "cwpp",
+    "cnapp",
+    "host_vuln",
+    "network_vuln",
+    "attack_surface",
+    "port_scanning",
+    "web_vuln",
+    "cve",
+    "malware",
+    "supply_chain",
+    "dependency_confusion",
+    "typosquatting",
+    "license",
+    "binary",
+    "firmware",
+    "mobile",
+    "android",
+    "ios",
+    "infra_compliance",
+    "k8s_compliance",
+    "docker_compliance",
+    "cloud_compliance",
+    "policy_as_code",
+    "cicd_security",
+    "github_posture",
+    "gitlab_security",
+    "repository_security",
+    "artifact_registry",
+    "package_registry",
+    "pentest",
+    "bug_bounty",
+    "red_team",
+    "bas",
+    "threat_model",
+    "threat_intel",
+    "exploit_intel",
+    "epss",
+    "llm_security",
+    "mcp_agent",
+];
+exports.REPORT_PROVIDER_CATALOG = [
+    {
+        provider: "trivy",
+        categories: ["sca", "container", "iac", "secrets"],
+        formats: ["trivy-json", "sarif", "cyclonedx", "spdx"],
+    },
+    {
+        provider: "semgrep",
+        categories: ["sast", "secrets"],
+        formats: ["semgrep-json", "sarif"],
+    },
+    {
+        provider: "syft",
+        categories: ["sbom"],
+        formats: ["syft-json", "cyclonedx", "spdx"],
+    },
+    {
+        provider: "gitleaks",
+        categories: ["secrets"],
+        formats: ["gitleaks-json", "sarif"],
+    },
+    {
+        provider: "osv",
+        categories: ["sca"],
+        formats: ["osv-json"],
+    },
+    {
+        provider: "sonar",
+        categories: ["sast"],
+        formats: ["sonar-json"],
+    },
+    {
+        provider: "nmap",
+        categories: ["port_scanning", "network"],
+        formats: ["nmap-xml"],
+    },
+    {
+        provider: "skipfish",
+        categories: ["dast", "web"],
+        formats: ["skipfish-json"],
+    },
+    {
+        provider: "generic-sarif",
+        categories: ["sast", "secrets", "iac"],
+        formats: ["sarif"],
+    },
+    {
+        provider: "generic-cyclonedx",
+        categories: ["sbom", "sca", "container"],
+        formats: ["cyclonedx"],
+    },
+    {
+        provider: "generic-spdx",
+        categories: ["sbom", "sca"],
+        formats: ["spdx"],
+    },
+    {
+        provider: "generic-gitlab",
+        categories: ["sast", "sca", "container", "secrets", "dast", "iac"],
+        formats: ["gitlab-security"],
+    },
+    {
+        provider: "generic-ocsf",
+        categories: ["cspm", "cnapp", "host_vuln", "cloud_compliance", "k8s_runtime", "container"],
+        formats: ["ocsf"],
+    },
+    {
+        provider: "generic-asff",
+        categories: ["cspm", "host_vuln", "container"],
+        formats: ["asff"],
+    },
+    {
+        provider: "generic-csaf",
+        categories: ["cve", "sca"],
+        formats: ["csaf"],
+    },
+    {
+        provider: "generic-openvex",
+        categories: ["sca", "cve"],
+        formats: ["openvex"],
+    },
+    {
+        provider: "generic-osv",
+        categories: ["sca", "cve"],
+        formats: ["osv"],
+    },
+    {
+        provider: "generic-epss",
+        categories: ["epss"],
+        formats: ["epss"],
+    },
+    { provider: "nuclei", categories: ["dast", "network_vuln", "sast"], formats: ["nuclei-json"] },
+    { provider: "zap", categories: ["dast", "web"], formats: ["zap-json", "zap-xml"] },
+    { provider: "prowler", categories: ["cspm", "k8s_compliance"], formats: ["prowler-json"] },
+    { provider: "nessus", categories: ["host_vuln"], formats: ["nessus-json", "nessus-xml"] },
+    { provider: "mobsf", categories: ["mobile", "android", "ios"], formats: ["mobsf-json"] },
+    { provider: "burp", categories: ["dast", "web"], formats: ["burp-json", "burp-xml"] },
+    { provider: "qualys", categories: ["host_vuln"], formats: ["qualys-json", "qualys-xml"] },
+    { provider: "rapid7", categories: ["host_vuln"], formats: ["rapid7-json", "rapid7-xml"] },
+];
+const REPORT_CATEGORY_ID_SET = new Set(exports.REPORT_CATEGORY_IDS);
+function isReportCategoryId(value) {
+    return REPORT_CATEGORY_ID_SET.has(value);
+}
+/** Legacy families keep the historical scan type strings (`container` → CONTAINER, `network` → NETWORK). */
+function scanTypeForReportCategory(category) {
+    switch (category) {
+        case "container":
+            return "CONTAINER";
+        case "sast":
+            return "SAST";
+        case "secrets":
+            return "SECRETS";
+        case "sbom":
+            return "SBOM";
+        case "network":
+        case "network_vuln":
+        case "port_scanning":
+            return "NETWORK";
+        case "web":
+        case "web_vuln":
+            return "WEB";
+        default:
+            return isReportCategoryId(category) ? category : "SAST";
+    }
+}
+//# sourceMappingURL=report-provider-catalog.js.map

package/bundled/node_modules/@kubbisec/shared/dist/security/report-provider-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-provider-catalog.js","sourceRoot":"","sources":["../../src/security/report-provider-catalog.ts"],"names":[],"mappings":";;;AAwKA,gDAEC;AAGD,8DAoBC;AAjMD,2EAA2E;AAC9D,QAAA,mBAAmB,GAAG;IACjC,MAAM;IACN,KAAK;IACL,SAAS;IACT,MAAM;IACN,KAAK;IACL,WAAW;IACX,MAAM;IACN,cAAc;IACd,cAAc;IACd,aAAa;IACb,MAAM;IACN,MAAM;IACN,OAAO;IACP,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,UAAU;IACV,KAAK;IACL,SAAS;IACT,cAAc;IACd,sBAAsB;IACtB,eAAe;IACf,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,KAAK;IACL,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,qBAAqB;IACrB,mBAAmB;IACnB,kBAAkB;IAClB,SAAS;IACT,YAAY;IACZ,UAAU;IACV,KAAK;IACL,cAAc;IACd,cAAc;IACd,eAAe;IACf,MAAM;IACN,cAAc;IACd,WAAW;CACH,CAAC;AAaE,QAAA,uBAAuB,GAA0C;IAC5E;QACE,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC;QAClD,OAAO,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;KACtD;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;QAC/B,OAAO,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC;KACnC;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC;KAC5C;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,CAAC,SAAS,CAAC;QACvB,OAAO,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;KACpC;IACD;QACE,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,CAAC,KAAK,CAAC;QACnB,OAAO,EAAE,CAAC,UAAU,CAAC;KACtB;IACD;QACE,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC,YAAY,CAAC;KACxB;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC;QACxC,OAAO,EAAE,CAAC,UAAU,CAAC;KACtB;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;QAC3B,OAAO,EAAE,CAAC,eAAe,CAAC;KAC3B;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC;QACtC,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;IACD;QACE,QAAQ,EAAE,mBAAmB;QAC7B,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC;QACxC,OAAO,EAAE,CAAC,WAAW,CAAC;KACvB;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;QAC3B,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;QAClE,OAAO,EAAE,CAAC,iBAAiB,CAAC;KAC7B;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,CAAC;QAC1F,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC;QAC9C,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QAC1B,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD;QACE,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QAC1B,OAAO,EAAE,CAAC,SAAS,CAAC;KACrB;IACD;QACE,QAAQ,EAAE,aAAa;QACvB,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QAC1B,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE;IAC9F,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE;IAClF,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE;IAC1F,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE;IACzF,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE;IACxF,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE;IACrF,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE;IACzF,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE;CAC1F,CAAC;AAEF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAS,2BAAmB,CAAC,CAAC;AAEpE,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,4GAA4G;AAC5G,SAAgB,yBAAyB,CAAC,QAAgB;IACxD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,SAAS,CAAC;QACnB,KAAK,KAAK,CAAC;QACX,KAAK,UAAU;YACb,OAAO,KAAK,CAAC;QACf;YACE,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kubbisec/ai-win32-x64",
-  "version": "0.1.33",
+  "version": "0.1.34",
   "description": "KubbiSec CLI — Windows x64 binary",
   "license": "UNLICENSED",
   "os": [