@kubbisec/ai 0.1.1

package/README.md

@@ -0,0 +1,69 @@
+# KubbiSec CLI (`kubbisec`)
+
+Command-line assistant for [KubbiSec](https://kubbisec.com) — remediate findings, chat with security context, and run autopilot in your environment.
+
+| | |
+|---|---|
+| **Package** | `@kubbisec/ai` |
+| **Binary** | `kubbisec` |
+| **Node.js** | 20+ |
+
+**Platforms:** Linux x64, Linux arm64, macOS arm64 (Apple Silicon), Windows x64.
+
+## What it does
+
+- **Remediate vulnerabilities** — AI-assisted fixes from ASPM findings, with optional auto-PR.
+- **Interactive chat** — TUI with KubbiSec skills (pipelines, scanners, remediation, local `gh`/`git` when needed).
+- **Autopilot watch** — background daemon that consumes remediation tasks from your org queue.
+- **CLI hub** — when NAUS or ASPM are on `PATH`, run `kubbisec naus …` or `kubbisec aspm …` from one entry point.
+
+LLM calls go through your KubbiSec API using **BYOK** (Settings → AI in the web app).
+
+## Install
+
+```bash
+npm install -g @kubbisec/ai
+kubbisec doctor
+kubbisec login
+```
+
+## Quick start
+
+Create an API key in the KubbiSec web UI (prefix `kbs_`), then:
+
+```bash
+kubbisec login \
+  --api-url https://api.your-instance.example \
+  --api-key "$KBS_API_KEY" \
+  --org "$ORG_ID" \
+  --project "$PROJECT_ID"
+
+kubbisec whoami
+kubbisec ls
+```
+
+Credentials are stored locally under `~/.kubbisec/ai/kubbisec.json`.
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `kubbisec login` / `logout` / `whoami` | API session |
+| `kubbisec doctor` | Config and API diagnostics |
+| `kubbisec ls` / `show <id>` | Findings |
+| `kubbisec fix <id>` | AI remediation |
+| `kubbisec chat` | Interactive TUI |
+| `kubbisec do` | Multi-step agent run |
+| `kubbisec watch` | Autopilot daemon (heartbeat + tasks) |
+| `kubbisec daemon list` / `stop` / `logs` | Manage watch sessions |
+| `kubbisec naus …` / `kubbisec aspm …` | Forward to NAUS/ASPM when installed |
+
+Run `kubbisec --help` for the full list.
+
+## Terms
+
+The `kubbisec` CLI is distributed as prebuilt binaries for use with the [KubbiSec](https://kubbisec.com) platform. It is not open source. Use is subject to your agreement with KubbiSec.
+
+## Trademarks
+
+**KubbiSec** and related marks are property of their respective owners.

package/bin/kubbisec.js

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+
+"use strict";
+
+const { spawn } = require("child_process");
+const path = require("path");
+const fs = require("fs");
+
+const PLATFORM_MAP = {
+  "linux-x64": "@kubbisec/ai-linux-x64",
+  "linux-arm64": "@kubbisec/ai-linux-arm64",
+  "darwin-arm64": "@kubbisec/ai-darwin-arm64",
+  "win32-x64": "@kubbisec/ai-win32-x64",
+};
+
+const platformKey = `${process.platform}-${process.arch}`;
+const packageName = PLATFORM_MAP[platformKey];
+
+if (!packageName) {
+  console.error(
+    `[kubbisec] Unsupported platform: ${process.platform}/${process.arch}\n` +
+      `Supported: ${Object.keys(PLATFORM_MAP)
+        .map((k) => k.replace("-", "/"))
+        .join(", ")}`,
+  );
+  process.exit(1);
+}
+
+const binaryName = process.platform === "win32" ? "kubbisec.exe" : "kubbisec";
+
+/** @type {string[]} */
+const scopedParts = packageName.split("/");
+
+let binaryPath = null;
+
+try {
+  const pkgDir = path.dirname(require.resolve(`${packageName}/package.json`));
+  const candidate = path.join(pkgDir, "bin", binaryName);
+  if (fs.existsSync(candidate)) {
+    binaryPath = candidate;
+  }
+} catch {
+  // optional dep may be missing
+}
+
+if (!binaryPath) {
+  const globalSearchPaths = [
+    path.resolve(__dirname, "..", "node_modules", ...scopedParts, "bin", binaryName),
+    path.resolve(__dirname, "..", "..", "..", ...scopedParts, "bin", binaryName),
+  ];
+  for (const candidate of globalSearchPaths) {
+    if (fs.existsSync(candidate)) {
+      binaryPath = candidate;
+      break;
+    }
+  }
+}
+
+if (!binaryPath) {
+  console.error(
+    `[kubbisec] Native binary not found for ${process.platform}/${process.arch}.\n` +
+      `Expected package: ${packageName}\n` +
+      `Install the platform binary (optional dependency), then retry:\n` +
+      `  npm install -g ${packageName}\n` +
+      `Or reinstall the meta package including optional deps:\n` +
+      `  npm install -g @kubbisec/ai --include=optional\n` +
+      `If optional installs are disabled globally, run: npm config delete omit`,
+  );
+  process.exit(1);
+}
+
+if (process.platform !== "win32") {
+  try {
+    fs.chmodSync(binaryPath, 0o755);
+  } catch {
+    // ignore
+  }
+}
+
+const child = spawn(binaryPath, process.argv.slice(2), {
+  stdio: "inherit",
+  env: process.env,
+  windowsHide: true,
+});
+
+const forwardSignal = (signal) => {
+  try {
+    child.kill(signal);
+  } catch {
+    // ignore
+  }
+};
+
+process.on("SIGINT", () => forwardSignal("SIGINT"));
+process.on("SIGTERM", () => forwardSignal("SIGTERM"));
+
+child.on("error", (err) => {
+  console.error(`[kubbisec] Failed to execute binary: ${err.message}`);
+  process.exit(1);
+});
+
+child.on("exit", (code, signal) => {
+  if (signal) {
+    process.kill(process.pid, signal);
+  } else {
+    process.exit(code ?? 1);
+  }
+});

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@kubbisec/ai",
+  "version": "0.1.1",
+  "description": "KubbiSec CLI (kubbisec) — AI remediation, chat, autopilot watch, and CLI hub",
+  "license": "UNLICENSED",
+  "bin": {
+    "kubbisec": "bin/kubbisec.js"
+  },
+  "files": [
+    "bin",
+    "README.md"
+  ],
+  "optionalDependencies": {
+    "@kubbisec/ai-linux-x64": "0.1.1",
+    "@kubbisec/ai-linux-arm64": "0.1.1",
+    "@kubbisec/ai-darwin-arm64": "0.1.1",
+    "@kubbisec/ai-win32-x64": "0.1.1"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "kubbisec",
+    "aspm",
+    "security",
+    "ai",
+    "remediation",
+    "cli"
+  ]
+}