@kubbisec/ai-win32-x64 0.1.35 → 0.1.36

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.js

@@ -1,161 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NAUS_WEB_DOC_IDS = void 0;
-exports.loadNausPipelineDocsBundleFromDisk = loadNausPipelineDocsBundleFromDisk;
-const node_fs_1 = require("node:fs");
-const promises_1 = require("node:fs/promises");
-const node_path_1 = require("node:path");
-const monorepo_root_js_1 = require("./monorepo-root.js");
-/** Web internal docs. Order matches apps/web/.../naus-docs-meta.ts sidebar. */
-exports.NAUS_WEB_DOC_IDS = [
-    "naus-quickstart",
-    "naus-commands",
-    "naus-pipeline-overview",
-    "naus-pipeline-run",
-    "naus-pipeline-image",
-    "naus-pipeline-script",
-    "naus-pipeline-before-script",
-    "naus-pipeline-after-script",
-    "naus-pipeline-when",
-    "naus-pipeline-cache",
-    "naus-pipeline-depends",
-    "naus-pipeline-variables",
-    "naus-pipeline-volumes",
-    "naus-pipeline-repository",
-    "naus-pipeline-only",
-    "naus-pipeline-artifacts",
-    "naus-pipeline-anchors",
-    "naus-pipeline-examples",
-    "naus-pipeline-docker-preset",
-    "naus-pipeline-special-values",
-    "naus-pipeline-platform",
-    "naus-pipeline-helm-kubectl",
-    "naus-aspm-integration",
-    "naus-aspm-preset",
-    "naus-aspm-matrix",
-    "naus-aspm-gate",
-    "naus-security",
-    "naus-runners",
-];
-/** Extra markdown only under docs/naus/ (not duplicated in web tree). */
-const NAUS_LEGACY_DOC_FILES = [
-    "README.md",
-    "pipeline-reference.md",
-    "runner-management.md",
-    "troubleshooting.md",
-];
-function listWebNausDirCandidates() {
-    const out = [];
-    const add = (p) => {
-        if (!out.includes(p))
-            out.push(p);
-    };
-    const envDir = process.env.NAUS_WEB_DOCS_DIR?.trim();
-    if (envDir)
-        add(envDir);
-    const mcpSynced = process.env.MCP_DOCS_CONTENT_ROOT?.trim();
-    if (mcpSynced)
-        add((0, node_path_1.join)(mcpSynced, "naus"));
-    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
-    add((0, node_path_1.join)(root, "apps", "mcp", "src", "resources", "content", "naus"));
-    add((0, node_path_1.join)(root, "apps", "mcp", "dist", "resources", "content", "naus"));
-    add((0, node_path_1.join)(root, "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
-    const cwd = process.cwd();
-    add((0, node_path_1.join)(cwd, "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
-    add((0, node_path_1.join)(cwd, "src", "resources", "content", "naus"));
-    add((0, node_path_1.join)(cwd, "resources", "content", "naus"));
-    add((0, node_path_1.join)(cwd, "..", "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
-    add((0, node_path_1.join)(cwd, "..", "..", "apps", "web", "src", "pages", "private", "docs", "content", "naus"));
-    return out;
-}
-function listLegacyNausDirCandidates() {
-    const out = [];
-    const add = (p) => {
-        if (!out.includes(p))
-            out.push(p);
-    };
-    const envDir = process.env.NAUS_PIPELINE_DOCS_DIR?.trim();
-    if (envDir)
-        add(envDir);
-    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
-    add((0, node_path_1.join)(root, "docs", "naus"));
-    const cwd = process.cwd();
-    add((0, node_path_1.join)(cwd, "docs", "naus"));
-    add((0, node_path_1.join)(cwd, "..", "docs", "naus"));
-    add((0, node_path_1.join)(cwd, "..", "..", "docs", "naus"));
-    return out;
-}
-function listValidationReadmeCandidates() {
-    const root = (0, monorepo_root_js_1.monorepoRootFromSharedModule)();
-    const cwd = process.cwd();
-    return [
-        (0, node_path_1.join)(root, "packages", "naus", "validation", "README.md"),
-        (0, node_path_1.join)(root, "packages", "naus-validation", "README.md"),
-        (0, node_path_1.join)(cwd, "packages", "naus", "validation", "README.md"),
-        (0, node_path_1.join)(cwd, "packages", "naus-validation", "README.md"),
-        (0, node_path_1.join)(cwd, "..", "packages", "naus", "validation", "README.md"),
-    ];
-}
-async function readChunkIfExists(filePath, heading) {
-    if (!(0, node_fs_1.existsSync)(filePath))
-        return null;
-    const text = await (0, promises_1.readFile)(filePath, "utf8");
-    return `${heading}\n\n${text.trim()}\n`;
-}
-/**
- * Reads NAUS markdown: web content/naus, legacy docs/naus extras, @kubbisec/naus-validation README.
- */
-async function loadNausPipelineDocsBundleFromDisk() {
-    const webCandidates = listWebNausDirCandidates();
-    const legacyCandidates = listLegacyNausDirCandidates();
-    const triedPaths = [...webCandidates, ...legacyCandidates, ...listValidationReadmeCandidates()];
-    const chunks = [];
-    let sourceDir = null;
-    let bestWebChunks = [];
-    let bestWebDir = null;
-    for (const dir of webCandidates) {
-        if (!(0, node_fs_1.existsSync)(dir))
-            continue;
-        const webChunks = [];
-        for (const id of exports.NAUS_WEB_DOC_IDS) {
-            const fp = (0, node_path_1.join)(dir, `${id}.md`);
-            const chunk = await readChunkIfExists(fp, `## naus/${id}`);
-            if (chunk)
-                webChunks.push(chunk);
-        }
-        if (webChunks.length > bestWebChunks.length) {
-            bestWebChunks = webChunks;
-            bestWebDir = dir;
-        }
-    }
-    if (bestWebChunks.length > 0) {
-        chunks.push(...bestWebChunks);
-        sourceDir = bestWebDir;
-    }
-    for (const dir of legacyCandidates) {
-        if (!(0, node_fs_1.existsSync)(dir))
-            continue;
-        for (const file of NAUS_LEGACY_DOC_FILES) {
-            const fp = (0, node_path_1.join)(dir, file);
-            const chunk = await readChunkIfExists(fp, `## docs/naus/${file}`);
-            if (chunk)
-                chunks.push(chunk);
-        }
-        if (!sourceDir && chunks.length > 0)
-            sourceDir = dir;
-        break;
-    }
-    for (const fp of listValidationReadmeCandidates()) {
-        const chunk = await readChunkIfExists(fp, "## naus/validation");
-        if (chunk) {
-            chunks.push(chunk);
-            break;
-        }
-    }
-    return {
-        bundle: chunks.length > 0 ? chunks.join("\n---\n\n") : "",
-        sourceDir,
-        triedPaths,
-    };
-}
-//# sourceMappingURL=naus-pipeline-docs-bundle.loader.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-pipeline-docs-bundle.loader.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"naus-pipeline-docs-bundle.loader.js","sourceRoot":"","sources":["../../src/product-docs/naus-pipeline-docs-bundle.loader.ts"],"names":[],"mappings":";;;AAiHA,gFAuDC;AAxKD,qCAAqC;AACrC,+CAA4C;AAC5C,yCAAiC;AACjC,yDAAkE;AAElE,+EAA+E;AAClE,QAAA,gBAAgB,GAAG;IAC9B,iBAAiB;IACjB,eAAe;IACf,wBAAwB;IACxB,mBAAmB;IACnB,qBAAqB;IACrB,sBAAsB;IACtB,6BAA6B;IAC7B,4BAA4B;IAC5B,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,yBAAyB;IACzB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,yBAAyB;IACzB,uBAAuB;IACvB,wBAAwB;IACxB,6BAA6B;IAC7B,8BAA8B;IAC9B,wBAAwB;IACxB,4BAA4B;IAC5B,uBAAuB;IACvB,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,cAAc;CACN,CAAC;AAEX,yEAAyE;AACzE,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;CACZ,CAAC;AAEX,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,SAAS;QAAE,GAAG,CAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAErF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpF,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAExB,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,GAAG,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,8BAA8B;IACrC,MAAM,IAAI,GAAG,IAAA,+CAA4B,GAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,OAAO;QACL,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACzD,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACtD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACxD,IAAA,gBAAI,EAAC,GAAG,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,CAAC;QACrD,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IAChE,IAAI,CAAC,IAAA,oBAAU,EAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,GAAG,OAAO,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;AAC1C,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kCAAkC;IAKtD,MAAM,aAAa,GAAG,wBAAwB,EAAE,CAAC;IACjD,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,gBAAgB,EAAE,GAAG,8BAA8B,EAAE,CAAC,CAAC;IAChG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,wBAAgB,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,KAAK;gBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC;YAC5C,aAAa,GAAG,SAAS,CAAC;YAC1B,UAAU,GAAG,GAAG,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAC9B,SAAS,GAAG,UAAU,CAAC;IACzB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,GAAG,GAAG,CAAC;QACrD,MAAM;IACR,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,8BAA8B,EAAE,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAChE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACzD,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.d.ts

@@ -1,2 +0,0 @@
-export declare const NAUS_SCHEMA_OVERVIEW = "NAUS pipeline YAML (cheat sheet \u2014 authoritative prose: naus_pipeline_docs, docs/naus/pipeline-reference.md):\n\nTOP-LEVEL (not GitHub Actions):\n- Required: run: (array of single-key job objects OR map job_id \u2192 config)\n- Optional: name, description, local, stages[], variables (map or KEY=value list), volumes[], repository, only[]\n- Optional infra: kubernetes (namespace, aws, kubeconfig), helm (default values), registry (aws_ecr), npm (userconfig), services (sidecars map)\n- NEVER use top-level jobs:, env: (use variables:), needs:, commands:, steps:, or scanner:\n\nCONTAINER JOB (default kind: container):\n- image: + script: [string or {run, when}, ...] (script required for container)\n- before_script / after_script: merged into script on expand\n- depends_on: [job_ids] (not needs:)\n- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged, cache, npm: inherit|true, when, services[]\n\nASPM JOBS (declarative \u2014 no manual trivy/aspm CLI in script):\n- kind: aspm + tool: (trivy|gitleaks|syft|osv|semgrep|sonar|nmap|skipfish) + mode: scan|upload|scan-and-upload\n- kind: aspm_matrix + parallel: [{ tool: ... }, ...] + matrix_strategy: chain|fanout\n- kind: aspm_gate + rules: { vulnerabilities, coverage, risk_score, ... }\n- kind: aspm_preset + preset: kubbisec/default-security\n- kind: docker \u2014 build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules; executor for DinD)\n\nK8S PRESETS:\n- kind: helm + action: lint|template|upgrade; chart required; release required for upgrade; executor.image only (alpine/helm)\n- kind: kubectl + action: rollout_status|apply|wait; resource/files/condition per action\n- pipeline kubernetes: / helm.values: / registry.provider: aws_ecr for ECR+deploy flows\n\nWHEN (job or script step):\n- when.env.VAR: equals|not_equals|in|not_in|exists|empty\n- when.path_exists / path_not_exists: workspace-relative paths\n\nMINIMAL EXAMPLE:\nname: ci\nrun:\n  - build:\n      image: node:20-alpine\n      script: [npm ci, npm run build --if-present]\n  - security:\n      kind: aspm\n      tool: trivy\n      mode: scan-and-upload\n      depends_on: [build]\n\nAlways call validate_naus_pipeline_yaml before persisting. privileged: true (docker executor) needs kbsc.ci.privileged.run. helm/kubectl executor accepts image only, not privileged/variables.";
-//# sourceMappingURL=naus-schema-overview.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"naus-schema-overview.d.ts","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,60EA0C+J,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.js

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NAUS_SCHEMA_OVERVIEW = void 0;
-exports.NAUS_SCHEMA_OVERVIEW = `NAUS pipeline YAML (cheat sheet — authoritative prose: naus_pipeline_docs, docs/naus/pipeline-reference.md):
-
-TOP-LEVEL (not GitHub Actions):
-- Required: run: (array of single-key job objects OR map job_id → config)
-- Optional: name, description, local, stages[], variables (map or KEY=value list), volumes[], repository, only[]
-- Optional infra: kubernetes (namespace, aws, kubeconfig), helm (default values), registry (aws_ecr), npm (userconfig), services (sidecars map)
-- NEVER use top-level jobs:, env: (use variables:), needs:, commands:, steps:, or scanner:
-
-CONTAINER JOB (default kind: container):
-- image: + script: [string or {run, when}, ...] (script required for container)
-- before_script / after_script: merged into script on expand
-- depends_on: [job_ids] (not needs:)
-- display_name, stage, variables|environment (one only), artifacts.paths[], only[], privileged, cache, npm: inherit|true, when, services[]
-
-ASPM JOBS (declarative — no manual trivy/aspm CLI in script):
-- kind: aspm + tool: (trivy|gitleaks|syft|osv|semgrep|sonar|nmap|skipfish) + mode: scan|upload|scan-and-upload
-- kind: aspm_matrix + parallel: [{ tool: ... }, ...] + matrix_strategy: chain|fanout
-- kind: aspm_gate + rules: { vulnerabilities, coverage, risk_score, ... }
-- kind: aspm_preset + preset: kubbisec/default-security
-- kind: docker — build/registry preset (registry.server, tags; optional aspm.tool + aspm.gate.rules; executor for DinD)
-
-K8S PRESETS:
-- kind: helm + action: lint|template|upgrade; chart required; release required for upgrade; executor.image only (alpine/helm)
-- kind: kubectl + action: rollout_status|apply|wait; resource/files/condition per action
-- pipeline kubernetes: / helm.values: / registry.provider: aws_ecr for ECR+deploy flows
-
-WHEN (job or script step):
-- when.env.VAR: equals|not_equals|in|not_in|exists|empty
-- when.path_exists / path_not_exists: workspace-relative paths
-
-MINIMAL EXAMPLE:
-name: ci
-run:
-  - build:
-      image: node:20-alpine
-      script: [npm ci, npm run build --if-present]
-  - security:
-      kind: aspm
-      tool: trivy
-      mode: scan-and-upload
-      depends_on: [build]
-
-Always call validate_naus_pipeline_yaml before persisting. privileged: true (docker executor) needs kbsc.ci.privileged.run. helm/kubectl executor accepts image only, not privileged/variables.`;
-//# sourceMappingURL=naus-schema-overview.js.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/naus-schema-overview.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"naus-schema-overview.js","sourceRoot":"","sources":["../../src/product-docs/naus-schema-overview.ts"],"names":[],"mappings":";;;AAAa,QAAA,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gMA0C4J,CAAC"}

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/security-scanner-playbooks.d.ts

@@ -1,49 +0,0 @@
-/**
- * Operational playbooks for ASPM scanners (CLI + NAUS).
- * Duplicated from web guides — API must not import apps/web.
- */
-export declare const SECURITY_SCANNER_IDS: readonly ["trivy", "gitleaks", "syft", "osv", "semgrep", "sonar", "nmap", "skipfish"];
-export type SecurityScannerId = (typeof SECURITY_SCANNER_IDS)[number];
-export type ScannerPlatform = "linux" | "macos" | "windows";
-export type PlaybookTopic = "install" | "scan" | "upload" | "naus" | "formats" | "all";
-export type ScannerPlaybookEntry = {
-    id: SecurityScannerId;
-    label: string;
-    category: "sca" | "sast" | "secrets" | "sbom" | "network" | "dast";
-    capabilities: string[];
-    defaultReportFile: string;
-    reportFormats: string[];
-    uploadSource: SecurityScannerId;
-    platforms: ScannerPlatform[];
-};
-export declare const SCANNER_META: Record<SecurityScannerId, Omit<ScannerPlaybookEntry, "id" | "platforms">>;
-/** NAUS matrix job example shared across scanner playbooks (for docs + contract tests). */
-export declare const PLAYBOOK_ASPM_MATRIX_EXAMPLE: "kind: aspm_matrix\nmatrix_strategy: fanout\nparallel:\n  - tool: trivy\n  - tool: gitleaks\n  - tool: osv";
-export declare function listPlaybookNausKindAspmSnippets(): Array<{
-    scanner: SecurityScannerId;
-    snippet: string;
-}>;
-export declare function wrapPlaybookSnippetAsPipelineYaml(snippet: string, name?: string): string;
-export declare function isSecurityScannerId(value: string): value is SecurityScannerId;
-export declare function parseSecurityScannerPlaybookArgs(argsRaw: string): {
-    ok: true;
-    scanner: SecurityScannerId;
-    platform: ScannerPlatform;
-    topic: PlaybookTopic;
-} | {
-    ok: false;
-    error: string;
-    hint?: string;
-};
-export declare function buildSecurityScannersCatalogPayload(): {
-    scanners: ScannerPlaybookEntry[];
-    aspmCliInstall: string;
-    uploadFlag: string;
-    nausTools: SecurityScannerId[];
-    assistantTools: {
-        catalog: string;
-        playbook: string;
-    };
-};
-export declare function buildSecurityScannerPlaybookPayload(scanner: SecurityScannerId, platform: ScannerPlatform, topic: PlaybookTopic): Record<string, unknown>;
-//# sourceMappingURL=security-scanner-playbooks.d.ts.map

package/bundled/node_modules/@kubbisec/shared/dist/product-docs/security-scanner-playbooks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-scanner-playbooks.d.ts","sourceRoot":"","sources":["../../src/product-docs/security-scanner-playbooks.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,oBAAoB,uFASvB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAC5D,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;AAwBvF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,iBAAiB,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IACnE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,iBAAiB,CAAC;IAChC,SAAS,EAAE,eAAe,EAAE,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,MAAM,CAC/B,iBAAiB,EACjB,IAAI,CAAC,oBAAoB,EAAE,IAAI,GAAG,WAAW,CAAC,CAkE/C,CAAC;AA4YF,2FAA2F;AAC3F,eAAO,MAAM,4BAA4B,6GAKlB,CAAC;AAExB,wBAAgB,gCAAgC,IAAI,KAAK,CAAC;IACxD,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAKD;AAED,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,SAAkB,GAAG,MAAM,CASjG;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,iBAAiB,CAE7E;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,MAAM,GAC5D;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,aAAa,CAAC;CACtB,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAqC9C;AAED,wBAAgB,mCAAmC,IAAI;IACrD,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,cAAc,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CACvD,CAiBA;AAYD,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,aAAa,GACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA8CzB"}