@kubbisec/ai-linux-x64 0.1.22 → 0.1.23

package/bundled/extensions/kubbisec-naus-local.extension.d.ts

@@ -1,18 +1,21 @@
 type ExtensionApi = {
-    registerTool: (def: {
-        name: string;
-        label: string;
-        description: string;
-        parameters: unknown;
-        execute: (toolCallId: string, params: Record<string, unknown>, signal: AbortSignal) => Promise<{
-            content: Array<{
-                type: "text";
-                text: string;
-            }>;
-            details?: unknown;
-        }>;
-    }) => void;
+  registerTool: (def: {
+    name: string;
+    label: string;
+    description: string;
+    parameters: unknown;
+    execute: (
+      toolCallId: string,
+      params: Record<string, unknown>,
+      signal: AbortSignal,
+    ) => Promise<{
+      content: Array<{
+        type: "text";
+        text: string;
+      }>;
+      details?: unknown;
+    }>;
+  }) => void;
 };
 export default function kubbisecNausLocal(api: ExtensionApi): void;
-export {};
-//# sourceMappingURL=kubbisec-naus-local.extension.d.ts.map
+//# sourceMappingURL=kubbisec-naus-local.extension.d.ts.map

package/bundled/extensions/kubbisec-naus-local.extension.js

@@ -1,112 +1,132 @@
 import { Type } from "@earendil-works/pi-ai";
-import { buildCliEnsureFailureResult, buildCliToolResult, ensureLocalCliOrInstall, execCapture, NAUS_LOCAL_RUN_TIMEOUT_MS, resolvePathInWorkspace, resolveWorkspace, } from "./cli-local-shared.js";
+import {
+  buildCliEnsureFailureResult,
+  buildCliToolResult,
+  ensureLocalCliOrInstall,
+  execCapture,
+  NAUS_LOCAL_RUN_TIMEOUT_MS,
+  resolvePathInWorkspace,
+  resolveWorkspace,
+} from "./cli-local-shared.js";
+
 function appendRepeatableFileFlag(args, flag, paths, cwd) {
-    if (!Array.isArray(paths))
-        return;
-    for (const entry of paths) {
-        if (typeof entry === "string" && entry.trim()) {
-            args.push(flag, resolvePathInWorkspace(entry.trim(), cwd));
-        }
+  if (!Array.isArray(paths)) return;
+  for (const entry of paths) {
+    if (typeof entry === "string" && entry.trim()) {
+      args.push(flag, resolvePathInWorkspace(entry.trim(), cwd));
     }
+  }
 }
 export default function kubbisecNausLocal(api) {
-    api.registerTool({
-        name: "naus_local_status",
-        label: "Naus CLI status",
-        description: "Checks local `naus` availability and shows a help excerpt.",
-        parameters: Type.Object({}),
-        async execute() {
-            const cwd = resolveWorkspace();
-            const parts = [`workspace: ${cwd}`];
-            const ensured = ensureLocalCliOrInstall("naus");
-            if (!ensured.ok)
-                return buildCliEnsureFailureResult("naus", cwd, ensured.message);
-            const help = await execCapture("naus", ["--help"], cwd);
-            const helpResult = buildCliToolResult("naus", ["--help"], cwd, help);
-            return {
-                content: [
-                    { type: "text", text: `${parts.join("\n")}\n\n${helpResult.content[0]?.text ?? ""}` },
-                ],
-                details: helpResult.details,
-            };
-        },
-    });
-    api.registerTool({
-        name: "naus_local_validate",
-        label: "Naus validate file",
-        description: "Runs `naus validate <path>` in the workspace.",
-        parameters: Type.Object({
-            path: Type.String({ description: "Pipeline YAML path relative to workspace" }),
+  api.registerTool({
+    name: "naus_local_status",
+    label: "Naus CLI status",
+    description: "Checks local `naus` availability and shows a help excerpt.",
+    parameters: Type.Object({}),
+    async execute() {
+      const cwd = resolveWorkspace();
+      const parts = [`workspace: ${cwd}`];
+      const ensured = ensureLocalCliOrInstall("naus");
+      if (!ensured.ok) return buildCliEnsureFailureResult("naus", cwd, ensured.message);
+      const help = await execCapture("naus", ["--help"], cwd);
+      const helpResult = buildCliToolResult("naus", ["--help"], cwd, help);
+      return {
+        content: [
+          { type: "text", text: `${parts.join("\n")}\n\n${helpResult.content[0]?.text ?? ""}` },
+        ],
+        details: helpResult.details,
+      };
+    },
+  });
+  api.registerTool({
+    name: "naus_local_validate",
+    label: "Naus validate file",
+    description: "Runs `naus validate <path>` in the workspace.",
+    parameters: Type.Object({
+      path: Type.String({ description: "Pipeline YAML path relative to workspace" }),
+    }),
+    async execute(_id, params) {
+      const cwd = resolveWorkspace();
+      const ensured = ensureLocalCliOrInstall("naus");
+      if (!ensured.ok) return buildCliEnsureFailureResult("naus", cwd, ensured.message);
+      const filePath = resolvePathInWorkspace(String(params.path), cwd);
+      const result = await execCapture("naus", ["validate", filePath], cwd);
+      return buildCliToolResult("naus", ["validate", filePath], cwd, result);
+    },
+  });
+  api.registerTool({
+    name: "naus_local_plan",
+    label: "Naus plan pipeline",
+    description: "Runs `naus plan <path>` (optional mermaid format) in the workspace.",
+    parameters: Type.Object({
+      path: Type.String({ description: "Pipeline YAML path relative to workspace" }),
+      format: Type.Optional(
+        Type.Union([Type.Literal("text"), Type.Literal("mermaid")], {
+          description: "Output format (default text)",
         }),
-        async execute(_id, params) {
-            const cwd = resolveWorkspace();
-            const ensured = ensureLocalCliOrInstall("naus");
-            if (!ensured.ok)
-                return buildCliEnsureFailureResult("naus", cwd, ensured.message);
-            const filePath = resolvePathInWorkspace(String(params.path), cwd);
-            const result = await execCapture("naus", ["validate", filePath], cwd);
-            return buildCliToolResult("naus", ["validate", filePath], cwd, result);
-        },
-    });
-    api.registerTool({
-        name: "naus_local_plan",
-        label: "Naus plan pipeline",
-        description: "Runs `naus plan <path>` (optional mermaid format) in the workspace.",
-        parameters: Type.Object({
-            path: Type.String({ description: "Pipeline YAML path relative to workspace" }),
-            format: Type.Optional(Type.Union([Type.Literal("text"), Type.Literal("mermaid")], {
-                description: "Output format (default text)",
-            })),
-            envFiles: Type.Optional(Type.Array(Type.String(), {
-                description: 'Optional .env-style files (repeatable via --env-file). Example: [".env"]. Default: .env in cwd when present.',
-            })),
-            secretFiles: Type.Optional(Type.Array(Type.String(), {
-                description: 'Optional secret files (repeatable via --secret-file). Example: [".secrets"] or [".secret"]. Default: .secrets in cwd when present.',
-            })),
+      ),
+      envFiles: Type.Optional(
+        Type.Array(Type.String(), {
+          description:
+            'Optional .env-style files (repeatable via --env-file). Example: [".env"]. Default: .env in cwd when present.',
         }),
-        async execute(_id, params) {
-            const cwd = resolveWorkspace();
-            const ensured = ensureLocalCliOrInstall("naus");
-            if (!ensured.ok)
-                return buildCliEnsureFailureResult("naus", cwd, ensured.message);
-            const filePath = resolvePathInWorkspace(String(params.path), cwd);
-            const fmt = params.format === "mermaid" ? "mermaid" : "text";
-            const args = ["plan", filePath, "--format", fmt];
-            appendRepeatableFileFlag(args, "--env-file", params.envFiles, cwd);
-            appendRepeatableFileFlag(args, "--secret-file", params.secretFiles, cwd);
-            const result = await execCapture("naus", args, cwd);
-            return buildCliToolResult("naus", args, cwd, result);
-        },
-    });
-    api.registerTool({
-        name: "naus_local_run",
-        label: "Naus run pipeline locally",
-        description: "Runs `naus run <path>` on this machine (up to 15 min). Optional --env-file / --secret-file (e.g. .env, .secrets). Prefer cloud `trigger_run` for KubbiSec CI.",
-        parameters: Type.Object({
-            path: Type.String({ description: "Pipeline YAML path relative to workspace" }),
-            envFiles: Type.Optional(Type.Array(Type.String(), {
-                description: 'Optional .env-style files (maps to repeated --env-file). Example: [".env"].',
-            })),
-            secretFiles: Type.Optional(Type.Array(Type.String(), {
-                description: 'Optional secret files (maps to repeated --secret-file). Example: [".secrets"] or [".secret"].',
-            })),
+      ),
+      secretFiles: Type.Optional(
+        Type.Array(Type.String(), {
+          description:
+            'Optional secret files (repeatable via --secret-file). Example: [".secrets"] or [".secret"]. Default: .secrets in cwd when present.',
         }),
-        async execute(_id, params, signal) {
-            const cwd = resolveWorkspace();
-            const ensured = ensureLocalCliOrInstall("naus");
-            if (!ensured.ok)
-                return buildCliEnsureFailureResult("naus", cwd, ensured.message);
-            const filePath = resolvePathInWorkspace(String(params.path), cwd);
-            const args = ["run", filePath];
-            appendRepeatableFileFlag(args, "--env-file", params.envFiles, cwd);
-            appendRepeatableFileFlag(args, "--secret-file", params.secretFiles, cwd);
-            const result = await execCapture("naus", args, cwd, {
-                signal,
-                timeoutMs: NAUS_LOCAL_RUN_TIMEOUT_MS,
-            });
-            const note = "\n\nNote: for KubbiSec-hosted CI use API tool trigger_run after set_pipeline_yaml.";
-            return buildCliToolResult("naus", args, cwd, result, note);
-        },
-    });
+      ),
+    }),
+    async execute(_id, params) {
+      const cwd = resolveWorkspace();
+      const ensured = ensureLocalCliOrInstall("naus");
+      if (!ensured.ok) return buildCliEnsureFailureResult("naus", cwd, ensured.message);
+      const filePath = resolvePathInWorkspace(String(params.path), cwd);
+      const fmt = params.format === "mermaid" ? "mermaid" : "text";
+      const args = ["plan", filePath, "--format", fmt];
+      appendRepeatableFileFlag(args, "--env-file", params.envFiles, cwd);
+      appendRepeatableFileFlag(args, "--secret-file", params.secretFiles, cwd);
+      const result = await execCapture("naus", args, cwd);
+      return buildCliToolResult("naus", args, cwd, result);
+    },
+  });
+  api.registerTool({
+    name: "naus_local_run",
+    label: "Naus run pipeline locally",
+    description:
+      "Runs `naus run <path>` on this machine (up to 15 min). Optional --env-file / --secret-file (e.g. .env, .secrets). Prefer cloud `trigger_run` for KubbiSec CI.",
+    parameters: Type.Object({
+      path: Type.String({ description: "Pipeline YAML path relative to workspace" }),
+      envFiles: Type.Optional(
+        Type.Array(Type.String(), {
+          description:
+            'Optional .env-style files (maps to repeated --env-file). Example: [".env"].',
+        }),
+      ),
+      secretFiles: Type.Optional(
+        Type.Array(Type.String(), {
+          description:
+            'Optional secret files (maps to repeated --secret-file). Example: [".secrets"] or [".secret"].',
+        }),
+      ),
+    }),
+    async execute(_id, params, signal) {
+      const cwd = resolveWorkspace();
+      const ensured = ensureLocalCliOrInstall("naus");
+      if (!ensured.ok) return buildCliEnsureFailureResult("naus", cwd, ensured.message);
+      const filePath = resolvePathInWorkspace(String(params.path), cwd);
+      const args = ["run", filePath];
+      appendRepeatableFileFlag(args, "--env-file", params.envFiles, cwd);
+      appendRepeatableFileFlag(args, "--secret-file", params.secretFiles, cwd);
+      const result = await execCapture("naus", args, cwd, {
+        signal,
+        timeoutMs: NAUS_LOCAL_RUN_TIMEOUT_MS,
+      });
+      const note =
+        "\n\nNote: for KubbiSec-hosted CI use API tool trigger_run after set_pipeline_yaml.";
+      return buildCliToolResult("naus", args, cwd, result, note);
+    },
+  });
 }
-//# sourceMappingURL=kubbisec-naus-local.extension.js.map
+//# sourceMappingURL=kubbisec-naus-local.extension.js.map

package/bundled/extensions/kubbisec-platform-tools.extension.d.ts

@@ -2,29 +2,39 @@
  * Registers KubbiSec DevSecOps assistant tools from the API catalog (session_start).
  */
 type ExtensionApi = {
-    on: (event: string, handler: (event: unknown, ctx: ExtensionContext) => void | Promise<void>) => void;
-    registerTool: (def: {
-        name: string;
-        label: string;
-        description: string;
-        parameters: unknown;
-        execute: (toolCallId: string, params: Record<string, unknown>, signal: AbortSignal, onUpdate: unknown, ctx: ExtensionContext) => Promise<{
-            content: Array<{
-                type: "text";
-                text: string;
-            }>;
-            details?: unknown;
-        }>;
-    }) => void;
+  on: (
+    event: string,
+    handler: (event: unknown, ctx: ExtensionContext) => void | Promise<void>,
+  ) => void;
+  registerTool: (def: {
+    name: string;
+    label: string;
+    description: string;
+    parameters: unknown;
+    execute: (
+      toolCallId: string,
+      params: Record<string, unknown>,
+      signal: AbortSignal,
+      onUpdate: unknown,
+      ctx: ExtensionContext,
+    ) => Promise<{
+      content: Array<{
+        type: "text";
+        text: string;
+      }>;
+      details?: unknown;
+    }>;
+  }) => void;
 };
 type ExtensionContext = {
-    ui?: {
-        notify: (message: string, level: string) => void;
-        setStatus: (key: string, text: string | undefined) => void;
-    };
+  ui?: {
+    notify: (message: string, level: string) => void;
+    setStatus: (key: string, text: string | undefined) => void;
+  };
 };
-export declare function extractVulnerabilityIdFromParams(params: Record<string, unknown>): string | undefined;
+export declare function extractVulnerabilityIdFromParams(
+  params: Record<string, unknown>,
+): string | undefined;
 export declare function catalogParametersSchema(parameters: Record<string, unknown>): unknown;
 export default function kubbisecPlatformTools(api: ExtensionApi): void;
-export {};
-//# sourceMappingURL=kubbisec-platform-tools.extension.d.ts.map
+//# sourceMappingURL=kubbisec-platform-tools.extension.d.ts.map