@kubbisec/ai-linux-arm64 0.1.21 → 0.1.22

package/bundled/extensions/kubbisec-clarify.extension.js

@@ -4,360 +4,378 @@
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs";
 import { getKubbisecConfigPath } from "@kubbisec/home";
-import { shouldClarify, } from "../clarify/clarify-gate.js";
+import { shouldClarify } from "../clarify/clarify-gate.js";
 import { setClarifyGateActive } from "../clarify/clarify-gate-state.js";
 import { renderClarifySelectPanel } from "../clarify/clarify-select-panel.js";
-import { getClarifyUiSnapshot, resetClarifyUiSnapshot, setClarifyUiChangeListener, setClarifyUiSnapshot, } from "../clarify/clarify-ui-state.js";
+import {
+  getClarifyUiSnapshot,
+  resetClarifyUiSnapshot,
+  setClarifyUiChangeListener,
+  setClarifyUiSnapshot,
+} from "../clarify/clarify-ui-state.js";
 import { parseClarifyAnswer } from "../clarify/parse-clarify-answer.js";
 import { inferScenarioFromMessage } from "../clarify/question-format.js";
-import { applyParsedUserAnswerIfPending, executeQuestionnaireTool, questionnaireToolParametersSchema, } from "../clarify/questionnaire-tool.js";
+import {
+  applyParsedUserAnswerIfPending,
+  executeQuestionnaireTool,
+  questionnaireToolParametersSchema,
+} from "../clarify/questionnaire-tool.js";
 import { discoverScopeHints } from "../clarify/scope-discovery.js";
-import { buildClarifyProgressLabel, finalizeQuestionnaireAtRoundLimit, hasMinimumScopeForScenario, readDefaultProjectId, readSessionQuestionnaire, shouldAcceptClarifyAnswer, writeSessionQuestionnaire, } from "../clarify/session-questionnaire.js";
+import {
+  buildClarifyProgressLabel,
+  finalizeQuestionnaireAtRoundLimit,
+  hasMinimumScopeForScenario,
+  readDefaultProjectId,
+  readSessionQuestionnaire,
+  shouldAcceptClarifyAnswer,
+  writeSessionQuestionnaire,
+} from "../clarify/session-questionnaire.js";
 import { resolveResourceBudget } from "../config/resource-budget.js";
 import { getSessionWorkflowMode } from "../workflow/session-workflow-mode.js";
 export const CLARIFY_MUTATION_TOOLS = new Set([
-    "edit",
-    "write",
-    "bash",
-    "delete",
-    "patch",
-    "apply_patch",
-    "set_pipeline_yaml",
+  "edit",
+  "write",
+  "bash",
+  "delete",
+  "patch",
+  "apply_patch",
+  "set_pipeline_yaml",
 ]);
 export const CLARIFY_READ_ONLY_TOOLS = new Set([
-    "read",
-    "grep",
-    "find",
-    "ls",
-    "glob",
-    "questionnaire",
-    "aspm_docs",
-    "naus_pipeline_docs",
-    "list_findings",
+  "read",
+  "grep",
+  "find",
+  "ls",
+  "glob",
+  "questionnaire",
+  "aspm_docs",
+  "naus_pipeline_docs",
+  "list_findings",
 ]);
-export const CLARIFY_TOOL_BLOCK_REASON = "Complete o questionário de escopo (use o painel acima ou escreva a resposta) antes de editar ficheiros.";
+export const CLARIFY_TOOL_BLOCK_REASON =
+  "Complete o questionário de escopo (use o painel acima ou escreva a resposta) antes de editar ficheiros.";
 export function isClarifyMutationTool(toolName) {
-    if (CLARIFY_READ_ONLY_TOOLS.has(toolName))
-        return false;
-    return CLARIFY_MUTATION_TOOLS.has(toolName);
+  if (CLARIFY_READ_ONLY_TOOLS.has(toolName)) return false;
+  return CLARIFY_MUTATION_TOOLS.has(toolName);
 }
 export function shouldBlockClarifyTool(toolName, gateActive, questionnaire) {
-    if (!gateActive)
-        return false;
-    if (!questionnaire || questionnaire.status === "ready")
-        return false;
-    if (!isClarifyMutationTool(toolName))
-        return false;
-    return true;
+  if (!gateActive) return false;
+  if (!questionnaire || questionnaire.status === "ready") return false;
+  if (!isClarifyMutationTool(toolName)) return false;
+  return true;
 }
 function readDefaultProjectConfigured() {
-    if (readDefaultProjectId())
-        return true;
-    try {
-        const raw = fs.readFileSync(getKubbisecConfigPath(), "utf8");
-        const parsed = JSON.parse(raw);
-        return Boolean(parsed.defaultProject?.trim());
-    }
-    catch {
-        return false;
-    }
+  if (readDefaultProjectId()) return true;
+  try {
+    const raw = fs.readFileSync(getKubbisecConfigPath(), "utf8");
+    const parsed = JSON.parse(raw);
+    return Boolean(parsed.defaultProject?.trim());
+  } catch {
+    return false;
+  }
 }
 export function detectChatMode(prompt) {
-    if (getSessionWorkflowMode() === "plan") {
-        return "plan";
-    }
-    const trimmed = prompt.trim();
-    if (trimmed.startsWith("/mode:plan") ||
-        /@plan\b/i.test(trimmed) ||
-        /@planejar\b/i.test(trimmed)) {
-        return "plan";
-    }
-    const envMode = process.env.KUBBISEC_CHAT_MODE?.trim().toLowerCase();
-    if (envMode === "plan")
-        return "plan";
-    return "default";
+  if (getSessionWorkflowMode() === "plan") {
+    return "plan";
+  }
+  const trimmed = prompt.trim();
+  if (
+    trimmed.startsWith("/mode:plan") ||
+    /@plan\b/i.test(trimmed) ||
+    /@planejar\b/i.test(trimmed)
+  ) {
+    return "plan";
+  }
+  const envMode = process.env.KUBBISEC_CHAT_MODE?.trim().toLowerCase();
+  if (envMode === "plan") return "plan";
+  return "default";
 }
 function resolveSurface() {
-    const surface = process.env.KUBBISEC_CLARIFY_SURFACE?.trim().toLowerCase();
-    if (surface === "fix" || surface === "watch" || surface === "task-consumer") {
-        return surface;
-    }
-    if (process.env.KUBBISEC_FIX_MODE === "1" || process.env.KUBBISEC_WATCH_MODE === "1") {
-        return process.env.KUBBISEC_WATCH_MODE === "1" ? "watch" : "fix";
-    }
-    return "chat";
+  const surface = process.env.KUBBISEC_CLARIFY_SURFACE?.trim().toLowerCase();
+  if (surface === "fix" || surface === "watch" || surface === "task-consumer") {
+    return surface;
+  }
+  if (process.env.KUBBISEC_FIX_MODE === "1" || process.env.KUBBISEC_WATCH_MODE === "1") {
+    return process.env.KUBBISEC_WATCH_MODE === "1" ? "watch" : "fix";
+  }
+  return "chat";
 }
 function buildGateInput(prompt, questionnaire) {
-    const msg = prompt.trim();
-    const budget = resolveResourceBudget();
-    const scenario = questionnaire.scenario ?? inferScenarioFromMessage(msg);
-    return {
-        surface: resolveSurface(),
-        userMessage: msg,
-        hasProjectId: readDefaultProjectConfigured() || questionnaire.fields.projectIds.length > 0,
-        hasVulnerabilityId: /\b(cve-|vuln|finding)/i.test(msg),
-        hasSeverityFilter: Boolean(questionnaire.fields.severityMin) || /\b(severity|critical|high)\b/i.test(msg),
-        mode: detectChatMode(msg),
-        scenario,
-        questionnaireStatus: questionnaire.status,
-        fields: questionnaire.fields,
-        historyCount: questionnaire.history.length,
-        clarifyMaxRounds: budget.clarifyMaxRounds,
-    };
+  const msg = prompt.trim();
+  const budget = resolveResourceBudget();
+  const scenario = questionnaire.scenario ?? inferScenarioFromMessage(msg);
+  return {
+    surface: resolveSurface(),
+    userMessage: msg,
+    hasProjectId: readDefaultProjectConfigured() || questionnaire.fields.projectIds.length > 0,
+    hasVulnerabilityId: /\b(cve-|vuln|finding)/i.test(msg),
+    hasSeverityFilter:
+      Boolean(questionnaire.fields.severityMin) || /\b(severity|critical|high)\b/i.test(msg),
+    mode: detectChatMode(msg),
+    scenario,
+    questionnaireStatus: questionnaire.status,
+    fields: questionnaire.fields,
+    historyCount: questionnaire.history.length,
+    clarifyMaxRounds: budget.clarifyMaxRounds,
+  };
 }
 export function buildClarifyContextMessage(questionnaire) {
-    const panelReady = questionnaire.awaitingUserAnswer && questionnaire.pending?.questionMarkdown;
-    return `[SCOPE GATE — internal only, never repeat to user]
+  const panelReady = questionnaire.awaitingUserAnswer && questionnaire.pending?.questionMarkdown;
+  return `[SCOPE GATE — internal only, never repeat to user]
 ${panelReady ? "Questionnaire panel is visible — do NOT ask user to look at the panel." : "Scope still missing — questionnaire auto-ask may run."}
 Read-only until scope ready. User-facing replies: max 2 sentences; no chain-of-thought.
 ${questionnaire.awaitingUserAnswer ? "Wait for panel answer or free text." : "Use questionnaire record if user already gave scope in prose."}`;
 }
 function extractQuestionText(markdown) {
-    for (const line of markdown.split("\n")) {
-        const trimmed = line.trim();
-        if (trimmed && !/^[A-D]\)/.test(trimmed))
-            return trimmed;
-    }
-    return markdown.split("\n")[0]?.trim() ?? "";
+  for (const line of markdown.split("\n")) {
+    const trimmed = line.trim();
+    if (trimmed && !/^[A-D]\)/.test(trimmed)) return trimmed;
+  }
+  return markdown.split("\n")[0]?.trim() ?? "";
 }
 export function syncClarifyUi(questionnaire) {
-    if (questionnaire.status === "ready") {
-        setClarifyUiSnapshot({
-            phase: "ready",
-            progressLabel: null,
-            questionMarkdown: null,
-            questionText: null,
-            optionLabels: [],
-            selected: [],
-            focusedIndex: 0,
-        });
-        return;
-    }
-    if (!questionnaire.awaitingUserAnswer || !questionnaire.pending?.questionMarkdown) {
-        setClarifyUiSnapshot({
-            phase: "idle",
-            progressLabel: null,
-            questionMarkdown: null,
-            questionText: null,
-            optionLabels: [],
-            selected: [],
-            focusedIndex: 0,
-        });
-        return;
-    }
-    const pending = questionnaire.pending;
+  if (questionnaire.status === "ready") {
     setClarifyUiSnapshot({
-        phase: "asking",
-        progressLabel: buildClarifyProgressLabel(questionnaire),
-        questionMarkdown: pending.questionMarkdown,
-        questionText: extractQuestionText(pending.questionMarkdown),
-        optionLabels: pending.optionLabels,
-        selectionMode: pending.selectionMode ?? "single",
-        selected: [],
-        focusedIndex: 0,
+      phase: "ready",
+      progressLabel: null,
+      questionMarkdown: null,
+      questionText: null,
+      optionLabels: [],
+      selected: [],
+      focusedIndex: 0,
     });
+    return;
+  }
+  if (!questionnaire.awaitingUserAnswer || !questionnaire.pending?.questionMarkdown) {
+    setClarifyUiSnapshot({
+      phase: "idle",
+      progressLabel: null,
+      questionMarkdown: null,
+      questionText: null,
+      optionLabels: [],
+      selected: [],
+      focusedIndex: 0,
+    });
+    return;
+  }
+  const pending = questionnaire.pending;
+  setClarifyUiSnapshot({
+    phase: "asking",
+    progressLabel: buildClarifyProgressLabel(questionnaire),
+    questionMarkdown: pending.questionMarkdown,
+    questionText: extractQuestionText(pending.questionMarkdown),
+    optionLabels: pending.optionLabels,
+    selectionMode: pending.selectionMode ?? "single",
+    selected: [],
+    focusedIndex: 0,
+  });
 }
 function applyDiscoveredScope(questionnaire, prompt, cwd) {
-    const discovered = discoverScopeHints(cwd, prompt);
-    if (!discovered.fields || Object.keys(discovered.fields).length === 0) {
-        return questionnaire;
-    }
-    const result = executeQuestionnaireTool(questionnaire, {
-        action: "record",
-        scenario: discovered.scenario,
-        fields: discovered.fields,
-    });
-    return result.questionnaire;
+  const discovered = discoverScopeHints(cwd, prompt);
+  if (!discovered.fields || Object.keys(discovered.fields).length === 0) {
+    return questionnaire;
+  }
+  const result = executeQuestionnaireTool(questionnaire, {
+    action: "record",
+    scenario: discovered.scenario,
+    fields: discovered.fields,
+  });
+  return result.questionnaire;
 }
 export function autoAskNextQuestion(questionnaire, prompt) {
-    if (questionnaire.awaitingUserAnswer || questionnaire.status === "ready") {
-        return questionnaire;
-    }
-    const scenario = questionnaire.scenario ?? inferScenarioFromMessage(prompt);
-    const result = executeQuestionnaireTool(questionnaire, {
-        action: "ask",
-        scenario,
-    });
-    if (!result.ok)
-        return questionnaire;
-    return result.questionnaire;
+  if (questionnaire.awaitingUserAnswer || questionnaire.status === "ready") {
+    return questionnaire;
+  }
+  const scenario = questionnaire.scenario ?? inferScenarioFromMessage(prompt);
+  const result = executeQuestionnaireTool(questionnaire, {
+    action: "ask",
+    scenario,
+  });
+  if (!result.ok) return questionnaire;
+  return result.questionnaire;
 }
 function maybeMarkReady(questionnaire) {
-    const scenario = questionnaire.scenario ?? "remediation";
-    if (questionnaire.status === "collecting" &&
-        !questionnaire.awaitingUserAnswer &&
-        hasMinimumScopeForScenario(scenario, questionnaire.fields)) {
-        return { ...questionnaire, status: "ready", pending: null };
-    }
-    return questionnaire;
+  const scenario = questionnaire.scenario ?? "remediation";
+  if (
+    questionnaire.status === "collecting" &&
+    !questionnaire.awaitingUserAnswer &&
+    hasMinimumScopeForScenario(scenario, questionnaire.fields)
+  ) {
+    return { ...questionnaire, status: "ready", pending: null };
+  }
+  return questionnaire;
 }
 export function updateClarifyStatus(ctx, questionnaire) {
-    if (!ctx.hasUI)
-        return;
-    if (questionnaire.status === "ready") {
-        ctx.ui.setStatus("kubbisec-clarify", undefined);
-        return;
-    }
-    if (questionnaire.awaitingUserAnswer) {
-        ctx.ui.setStatus("kubbisec-clarify", ctx.ui.theme.fg("warning", `questionário · ${questionnaire.status}`));
-        return;
-    }
+  if (!ctx.hasUI) return;
+  if (questionnaire.status === "ready") {
     ctx.ui.setStatus("kubbisec-clarify", undefined);
+    return;
+  }
+  if (questionnaire.awaitingUserAnswer) {
+    ctx.ui.setStatus(
+      "kubbisec-clarify",
+      ctx.ui.theme.fg("warning", `questionário · ${questionnaire.status}`),
+    );
+    return;
+  }
+  ctx.ui.setStatus("kubbisec-clarify", undefined);
 }
 export function processClarifyPrompt(questionnaire, prompt, cwd, clarifyMaxRounds) {
-    let next = questionnaire;
-    if (next.status === "collecting" && prompt.trim()) {
-        const selectionMode = next.pending?.selectionMode ?? "single";
-        const parsed = parseClarifyAnswer(prompt, selectionMode);
-        if (shouldAcceptClarifyAnswer(next, parsed)) {
-            next = applyParsedUserAnswerIfPending(next, parsed);
-            next = finalizeQuestionnaireAtRoundLimit(next, clarifyMaxRounds);
-            next = maybeMarkReady(next);
-        }
+  let next = questionnaire;
+  if (next.status === "collecting" && prompt.trim()) {
+    const selectionMode = next.pending?.selectionMode ?? "single";
+    const parsed = parseClarifyAnswer(prompt, selectionMode);
+    if (shouldAcceptClarifyAnswer(next, parsed)) {
+      next = applyParsedUserAnswerIfPending(next, parsed);
+      next = finalizeQuestionnaireAtRoundLimit(next, clarifyMaxRounds);
+      next = maybeMarkReady(next);
     }
-    next = applyDiscoveredScope(next, prompt, cwd);
-    next = maybeMarkReady(next);
-    return next;
+  }
+  next = applyDiscoveredScope(next, prompt, cwd);
+  next = maybeMarkReady(next);
+  return next;
 }
 export default function kubbisecClarify(api) {
-    const sessionId = randomUUID();
-    let questionnaire = readSessionQuestionnaire(process.cwd(), sessionId);
-    let gateActive = false;
-    let clarifyWidgetRegistered = false;
-    let lastUserMessage = "";
-    let sessionCwd = process.cwd();
-    function persist(ctx, next) {
-        questionnaire = next;
-        try {
-            writeSessionQuestionnaire(ctx.cwd, next);
-        }
-        catch (error) {
-            console.warn("[kubbisec-clarify] Failed to persist session questionnaire:", error);
-        }
-        updateClarifyStatus(ctx, next);
-        syncClarifyUi(next);
+  const sessionId = randomUUID();
+  let questionnaire = readSessionQuestionnaire(process.cwd(), sessionId);
+  let gateActive = false;
+  let clarifyWidgetRegistered = false;
+  let lastUserMessage = "";
+  let sessionCwd = process.cwd();
+  function persist(ctx, next) {
+    questionnaire = next;
+    try {
+      writeSessionQuestionnaire(ctx.cwd, next);
+    } catch (error) {
+      console.warn("[kubbisec-clarify] Failed to persist session questionnaire:", error);
     }
-    function ensureClarifyWidget(ctx) {
-        if (!ctx.hasUI || clarifyWidgetRegistered)
-            return;
-        clarifyWidgetRegistered = true;
-        ctx.ui.setWidget("kubbisec-clarify-panel", (tui, theme) => {
-            setClarifyUiChangeListener(() => {
-                tui.requestRender();
-            });
-            return {
-                dispose() {
-                    setClarifyUiChangeListener(undefined);
-                },
-                invalidate() {
-                    tui.requestRender();
-                },
-                render(w) {
-                    return renderClarifySelectPanel(w, getClarifyUiSnapshot(), theme);
-                },
-            };
-        }, { placement: "aboveEditor" });
+    updateClarifyStatus(ctx, next);
+    syncClarifyUi(next);
+  }
+  function ensureClarifyWidget(ctx) {
+    if (!ctx.hasUI || clarifyWidgetRegistered) return;
+    clarifyWidgetRegistered = true;
+    ctx.ui.setWidget(
+      "kubbisec-clarify-panel",
+      (tui, theme) => {
+        setClarifyUiChangeListener(() => {
+          tui.requestRender();
+        });
+        return {
+          dispose() {
+            setClarifyUiChangeListener(undefined);
+          },
+          invalidate() {
+            tui.requestRender();
+          },
+          render(w) {
+            return renderClarifySelectPanel(w, getClarifyUiSnapshot(), theme);
+          },
+        };
+      },
+      { placement: "aboveEditor" },
+    );
+  }
+  api.registerTool({
+    name: "questionnaire",
+    label: "Scope questionnaire",
+    description:
+      "Format and track contextual scope questions (ask/record/status/complete). KubbiSec renders options in the panel above the editor.",
+    parameters: questionnaireToolParametersSchema(),
+    async execute(_toolCallId, params) {
+      const input = params;
+      const result = executeQuestionnaireTool(questionnaire, input, lastUserMessage);
+      questionnaire = result.questionnaire;
+      try {
+        writeSessionQuestionnaire(sessionCwd, questionnaire);
+      } catch {
+        // best effort
+      }
+      syncClarifyUi(questionnaire);
+      return {
+        content: [{ type: "text", text: result.message }],
+        details: { ok: result.ok, status: result.status, action: result.action },
+      };
+    },
+  });
+  api.on("session_start", async (_event, ctx) => {
+    sessionCwd = ctx.cwd;
+    questionnaire = readSessionQuestionnaire(ctx.cwd, sessionId);
+    gateActive = false;
+    setClarifyGateActive(false);
+    lastUserMessage = "";
+    resetClarifyUiSnapshot();
+    ensureClarifyWidget(ctx);
+    updateClarifyStatus(ctx, questionnaire);
+    syncClarifyUi(questionnaire);
+  });
+  api.on("session_shutdown", async () => {
+    resetClarifyUiSnapshot();
+    setClarifyGateActive(false);
+  });
+  api.on("before_agent_start", async (event, ctx) => {
+    const { prompt } = event;
+    lastUserMessage = prompt;
+    const surface = resolveSurface();
+    ensureClarifyWidget(ctx);
+    if (surface !== "chat") {
+      gateActive = false;
+      setClarifyGateActive(false);
+      resetClarifyUiSnapshot();
+      return undefined;
     }
-    api.registerTool({
-        name: "questionnaire",
-        label: "Scope questionnaire",
-        description: "Format and track contextual scope questions (ask/record/status/complete). KubbiSec renders options in the panel above the editor.",
-        parameters: questionnaireToolParametersSchema(),
-        async execute(_toolCallId, params) {
-            const input = params;
-            const result = executeQuestionnaireTool(questionnaire, input, lastUserMessage);
-            questionnaire = result.questionnaire;
-            try {
-                writeSessionQuestionnaire(sessionCwd, questionnaire);
-            }
-            catch {
-                // best effort
-            }
-            syncClarifyUi(questionnaire);
-            return {
-                content: [{ type: "text", text: result.message }],
-                details: { ok: result.ok, status: result.status, action: result.action },
-            };
-        },
-    });
-    api.on("session_start", async (_event, ctx) => {
-        sessionCwd = ctx.cwd;
-        questionnaire = readSessionQuestionnaire(ctx.cwd, sessionId);
-        gateActive = false;
-        setClarifyGateActive(false);
-        lastUserMessage = "";
-        resetClarifyUiSnapshot();
-        ensureClarifyWidget(ctx);
-        updateClarifyStatus(ctx, questionnaire);
-        syncClarifyUi(questionnaire);
-    });
-    api.on("session_shutdown", async () => {
-        resetClarifyUiSnapshot();
-        setClarifyGateActive(false);
-    });
-    api.on("before_agent_start", async (event, ctx) => {
-        const { prompt } = event;
-        lastUserMessage = prompt;
-        const surface = resolveSurface();
-        ensureClarifyWidget(ctx);
-        if (surface !== "chat") {
-            gateActive = false;
-            setClarifyGateActive(false);
-            resetClarifyUiSnapshot();
-            return undefined;
-        }
-        const budget = resolveResourceBudget();
-        let next = readSessionQuestionnaire(ctx.cwd, questionnaire.sessionId);
-        next = processClarifyPrompt(next, prompt, ctx.cwd, budget.clarifyMaxRounds);
-        const gateInput = buildGateInput(prompt, next);
-        gateActive = shouldClarify(gateInput);
-        setClarifyGateActive(gateActive);
-        if (!gateActive) {
-            next = maybeMarkReady(next);
-            persist(ctx, next);
-            return undefined;
-        }
-        if (next.status === "collecting" && !next.awaitingUserAnswer) {
-            next = autoAskNextQuestion(next, prompt);
-            next = maybeMarkReady(next);
-            persist(ctx, next);
-            if (next.awaitingUserAnswer) {
-                return {
-                    message: {
-                        customType: "kubbisec-clarify",
-                        content: buildClarifyContextMessage(next),
-                        display: false,
-                    },
-                };
-            }
-            return {
-                message: {
-                    customType: "kubbisec-clarify",
-                    content: buildClarifyContextMessage(next),
-                    display: false,
-                },
-            };
-        }
-        persist(ctx, next);
-        return undefined;
-    });
-    api.on("tool_call", async (event, ctx) => {
-        const surface = resolveSurface();
-        if (surface !== "chat") {
-            return undefined;
-        }
-        questionnaire = readSessionQuestionnaire(ctx.cwd, questionnaire.sessionId);
-        const { toolName } = event;
-        if (toolName === "questionnaire") {
-            return undefined;
-        }
-        if (!shouldBlockClarifyTool(toolName, gateActive, questionnaire)) {
-            return undefined;
-        }
+    const budget = resolveResourceBudget();
+    let next = readSessionQuestionnaire(ctx.cwd, questionnaire.sessionId);
+    next = processClarifyPrompt(next, prompt, ctx.cwd, budget.clarifyMaxRounds);
+    const gateInput = buildGateInput(prompt, next);
+    gateActive = shouldClarify(gateInput);
+    setClarifyGateActive(gateActive);
+    if (!gateActive) {
+      next = maybeMarkReady(next);
+      persist(ctx, next);
+      return undefined;
+    }
+    if (next.status === "collecting" && !next.awaitingUserAnswer) {
+      next = autoAskNextQuestion(next, prompt);
+      next = maybeMarkReady(next);
+      persist(ctx, next);
+      if (next.awaitingUserAnswer) {
         return {
-            block: true,
-            reason: CLARIFY_TOOL_BLOCK_REASON,
+          message: {
+            customType: "kubbisec-clarify",
+            content: buildClarifyContextMessage(next),
+            display: false,
+          },
         };
-    });
+      }
+      return {
+        message: {
+          customType: "kubbisec-clarify",
+          content: buildClarifyContextMessage(next),
+          display: false,
+        },
+      };
+    }
+    persist(ctx, next);
+    return undefined;
+  });
+  api.on("tool_call", async (event, ctx) => {
+    const surface = resolveSurface();
+    if (surface !== "chat") {
+      return undefined;
+    }
+    questionnaire = readSessionQuestionnaire(ctx.cwd, questionnaire.sessionId);
+    const { toolName } = event;
+    if (toolName === "questionnaire") {
+      return undefined;
+    }
+    if (!shouldBlockClarifyTool(toolName, gateActive, questionnaire)) {
+      return undefined;
+    }
+    return {
+      block: true,
+      reason: CLARIFY_TOOL_BLOCK_REASON,
+    };
+  });
 }
-//# sourceMappingURL=kubbisec-clarify.extension.js.map
+//# sourceMappingURL=kubbisec-clarify.extension.js.map