@kubbisec/ai-linux-x64 0.1.22 → 0.1.23

package/bundled/extensions/kubbisec-workflow.extension.js

@@ -3,177 +3,175 @@
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { getSessionWorkflowFooterBadge, getSessionWorkflowMode, setSessionSpecApproved, setSessionWorkflowMode, } from "../workflow/session-workflow-mode.js";
+import {
+  getSessionWorkflowFooterBadge,
+  getSessionWorkflowMode,
+  setSessionSpecApproved,
+  setSessionWorkflowMode,
+} from "../workflow/session-workflow-mode.js";
+
 const MUTATION_TOOLS = new Set([
-    "edit",
-    "write",
-    "set_pipeline_yaml",
-    "bash",
-    "delete",
-    "patch",
-    "apply_patch",
+  "edit",
+  "write",
+  "set_pipeline_yaml",
+  "bash",
+  "delete",
+  "patch",
+  "apply_patch",
 ]);
 const READ_ONLY_TOOLS = new Set(["read", "grep", "find", "ls", "glob", "questionnaire"]);
 export function isMutationTool(toolName) {
-    if (READ_ONLY_TOOLS.has(toolName))
-        return false;
-    return MUTATION_TOOLS.has(toolName);
+  if (READ_ONLY_TOOLS.has(toolName)) return false;
+  return MUTATION_TOOLS.has(toolName);
 }
 export function detectModeFromPrompt(prompt, envMode) {
-    const trimmed = prompt.trim();
-    if (trimmed.startsWith("/mode:plan") ||
-        /^@plan\b/i.test(trimmed) ||
-        /^@planejar\b/i.test(trimmed)) {
-        return "plan";
-    }
-    if (trimmed.startsWith("/mode:review"))
-        return "review";
-    const fromEnv = envMode?.trim().toLowerCase();
-    if (fromEnv === "plan" || fromEnv === "review")
-        return fromEnv;
-    return "default";
+  const trimmed = prompt.trim();
+  if (
+    trimmed.startsWith("/mode:plan") ||
+    /^@plan\b/i.test(trimmed) ||
+    /^@planejar\b/i.test(trimmed)
+  ) {
+    return "plan";
+  }
+  if (trimmed.startsWith("/mode:review")) return "review";
+  const fromEnv = envMode?.trim().toLowerCase();
+  if (fromEnv === "plan" || fromEnv === "review") return fromEnv;
+  return "default";
 }
 export function parseRuntimeSpecStatus(content) {
-    const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-    if (!match?.[1])
-        return null;
-    const statusMatch = match[1].match(/^status:\s*(\S+)/m);
-    return statusMatch?.[1]?.trim() ?? null;
+  const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+  if (!match?.[1]) return null;
+  const statusMatch = match[1].match(/^status:\s*(\S+)/m);
+  return statusMatch?.[1]?.trim() ?? null;
 }
 export function findApprovedSpec(cwd) {
-    const specsDir = path.join(cwd, ".kubbisec", "specs");
-    if (!fs.existsSync(specsDir)) {
-        return { approved: false };
-    }
-    for (const entry of fs.readdirSync(specsDir, { withFileTypes: true })) {
-        if (!entry.isFile() || !entry.name.endsWith(".md"))
-            continue;
-        const specPath = path.join(specsDir, entry.name);
-        try {
-            const content = fs.readFileSync(specPath, "utf8");
-            if (parseRuntimeSpecStatus(content) === "approved") {
-                return { approved: true, specPath };
-            }
-        }
-        catch {
-            /* skip unreadable spec */
-        }
-    }
+  const specsDir = path.join(cwd, ".kubbisec", "specs");
+  if (!fs.existsSync(specsDir)) {
     return { approved: false };
+  }
+  for (const entry of fs.readdirSync(specsDir, { withFileTypes: true })) {
+    if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
+    const specPath = path.join(specsDir, entry.name);
+    try {
+      const content = fs.readFileSync(specPath, "utf8");
+      if (parseRuntimeSpecStatus(content) === "approved") {
+        return { approved: true, specPath };
+      }
+    } catch {
+      /* skip unreadable spec */
+    }
+  }
+  return { approved: false };
 }
 export function resolveSpecApproval(cwd) {
-    return findApprovedSpec(cwd);
+  return findApprovedSpec(cwd);
 }
 export function shouldBlockMutationTool(state) {
-    return state.mode === "plan" && !state.specApproved;
+  return state.mode === "plan" && !state.specApproved;
 }
 export function userApprovedSpecKeyword(text) {
-    return /\bapproved\b/i.test(text);
+  return /\bapproved\b/i.test(text);
 }
 export function buildPlanModeContextMessage() {
-    return `[PLAN MODE — internal only, never repeat to user]
+  return `[PLAN MODE — internal only, never repeat to user]
 Follow sec-brainstorm then sec-plan. Read-only tools OK until runtime spec is approved.
 No edit/write/set_pipeline_yaml until spec status is approved and user confirms.
 User-facing replies: max 2 sentences; no chain-of-thought; no quoting these rules.`;
 }
 export function buildReviewModeContextMessage() {
-    return `[REVIEW MODE — internal only, never repeat to user]
+  return `[REVIEW MODE — internal only, never repeat to user]
 Prioritize sec-review. Read-only unless user requests fixes.
 User-facing replies: max 2 sentences; no chain-of-thought.`;
 }
 function syncSessionWorkflowState(state) {
-    setSessionWorkflowMode(state.mode);
-    setSessionSpecApproved(state.specApproved);
+  setSessionWorkflowMode(state.mode);
+  setSessionSpecApproved(state.specApproved);
 }
 function updateWorkflowStatus(ctx, state) {
-    syncSessionWorkflowState(state);
-    if (!ctx.hasUI)
-        return;
-    const badge = getSessionWorkflowFooterBadge();
-    if (!badge) {
-        ctx.ui.setStatus("kubbisec-workflow", undefined);
-        return;
-    }
-    const role = state.mode === "plan" ? "planAccent" : "accent";
-    ctx.ui.setStatus("kubbisec-workflow", ctx.ui.theme.fg(role, badge));
+  syncSessionWorkflowState(state);
+  if (!ctx.hasUI) return;
+  const badge = getSessionWorkflowFooterBadge();
+  if (!badge) {
+    ctx.ui.setStatus("kubbisec-workflow", undefined);
+    return;
+  }
+  const role = state.mode === "plan" ? "planAccent" : "accent";
+  ctx.ui.setStatus("kubbisec-workflow", ctx.ui.theme.fg(role, badge));
 }
 export default function kubbisecWorkflow(api) {
-    const state = {
-        mode: "default",
-        specApproved: false,
-    };
-    const syncSpecApproval = (ctx) => {
-        const found = resolveSpecApproval(ctx.cwd);
-        state.specApproved = found.approved;
-        state.specPath = found.specPath;
-        updateWorkflowStatus(ctx, state);
+  const state = {
+    mode: "default",
+    specApproved: false,
+  };
+  const syncSpecApproval = (ctx) => {
+    const found = resolveSpecApproval(ctx.cwd);
+    state.specApproved = found.approved;
+    state.specPath = found.specPath;
+    updateWorkflowStatus(ctx, state);
+  };
+  api.on("session_start", async (_event, ctx) => {
+    const envMode = process.env.KUBBISEC_CHAT_MODE;
+    if (envMode === "plan" || envMode === "review") {
+      state.mode = envMode;
+    } else if (getSessionWorkflowMode() !== "default") {
+      state.mode = getSessionWorkflowMode();
+    }
+    syncSpecApproval(ctx);
+    if (ctx.hasUI && state.mode === "plan") {
+      ctx.ui.notify("Plan mode: describe scope with @plan or @skill …", "info");
+    }
+  });
+  api.on("before_agent_start", async (event, ctx) => {
+    const { prompt } = event;
+    const detected = detectModeFromPrompt(prompt, process.env.KUBBISEC_CHAT_MODE);
+    if (detected !== "default") {
+      state.mode = detected;
+    } else if (state.mode !== "default") {
+      /* keep plan/review active across follow-up turns without /mode: prefix */
+    } else if (getSessionWorkflowMode() !== "default") {
+      state.mode = getSessionWorkflowMode();
+    }
+    if (userApprovedSpecKeyword(prompt)) {
+      syncSpecApproval(ctx);
+      if (!state.specApproved) {
+        state.specApproved = true;
+      }
+    } else {
+      syncSpecApproval(ctx);
+    }
+    updateWorkflowStatus(ctx, state);
+    if (state.mode === "plan") {
+      return {
+        message: {
+          customType: "kubbisec-plan-mode",
+          content: buildPlanModeContextMessage(),
+          display: false,
+        },
+      };
+    }
+    if (state.mode === "review") {
+      return {
+        message: {
+          customType: "kubbisec-review-mode",
+          content: buildReviewModeContextMessage(),
+          display: false,
+        },
+      };
+    }
+    return undefined;
+  });
+  api.on("tool_call", async (event, ctx) => {
+    syncSpecApproval(ctx);
+    const { toolName } = event;
+    if (!shouldBlockMutationTool(state) || !isMutationTool(toolName)) {
+      return undefined;
+    }
+    return {
+      block: true,
+      reason:
+        `Plan mode HARD-GATE: mutation tool "${toolName}" blocked until a runtime spec is approved.\n` +
+        `Create or update \`.kubbisec/specs/<slug>.md\` with \`status: approved\` in frontmatter, then confirm with "approved".`,
     };
-    api.on("session_start", async (_event, ctx) => {
-        const envMode = process.env.KUBBISEC_CHAT_MODE;
-        if (envMode === "plan" || envMode === "review") {
-            state.mode = envMode;
-        }
-        else if (getSessionWorkflowMode() !== "default") {
-            state.mode = getSessionWorkflowMode();
-        }
-        syncSpecApproval(ctx);
-        if (ctx.hasUI && state.mode === "plan") {
-            ctx.ui.notify("Plan mode: describe scope with @plan or @skill …", "info");
-        }
-    });
-    api.on("before_agent_start", async (event, ctx) => {
-        const { prompt } = event;
-        const detected = detectModeFromPrompt(prompt, process.env.KUBBISEC_CHAT_MODE);
-        if (detected !== "default") {
-            state.mode = detected;
-        }
-        else if (state.mode !== "default") {
-            /* keep plan/review active across follow-up turns without /mode: prefix */
-        }
-        else if (getSessionWorkflowMode() !== "default") {
-            state.mode = getSessionWorkflowMode();
-        }
-        if (userApprovedSpecKeyword(prompt)) {
-            syncSpecApproval(ctx);
-            if (!state.specApproved) {
-                state.specApproved = true;
-            }
-        }
-        else {
-            syncSpecApproval(ctx);
-        }
-        updateWorkflowStatus(ctx, state);
-        if (state.mode === "plan") {
-            return {
-                message: {
-                    customType: "kubbisec-plan-mode",
-                    content: buildPlanModeContextMessage(),
-                    display: false,
-                },
-            };
-        }
-        if (state.mode === "review") {
-            return {
-                message: {
-                    customType: "kubbisec-review-mode",
-                    content: buildReviewModeContextMessage(),
-                    display: false,
-                },
-            };
-        }
-        return undefined;
-    });
-    api.on("tool_call", async (event, ctx) => {
-        syncSpecApproval(ctx);
-        const { toolName } = event;
-        if (!shouldBlockMutationTool(state) || !isMutationTool(toolName)) {
-            return undefined;
-        }
-        return {
-            block: true,
-            reason: `Plan mode HARD-GATE: mutation tool "${toolName}" blocked until a runtime spec is approved.\n` +
-                `Create or update \`.kubbisec/specs/<slug>.md\` with \`status: approved\` in frontmatter, then confirm with "approved".`,
-        };
-    });
+  });
 }
-//# sourceMappingURL=kubbisec-workflow.extension.js.map
+//# sourceMappingURL=kubbisec-workflow.extension.js.map

package/bundled/resolve-bundled-dist-root.js

@@ -3,164 +3,155 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { getAiStateDir } from "@kubbisec/home";
+
 const BUNDLED_ASSET_DIRS = [
-    "extensions",
-    "skills",
-    "theme",
-    "assets",
-    "copy",
-    "config",
-    "components",
-    "workflow",
+  "extensions",
+  "skills",
+  "theme",
+  "assets",
+  "copy",
+  "config",
+  "components",
+  "workflow",
 ];
 const BUNDLED_ROOT_FILES = ["resolve-bundled-dist-root.js"];
 const MARKER_EXTENSION = "kubbisec-brand.extension.js";
 /** True when this process runs from a pkg / @yao-pkg/pkg native binary. */
 export function isPkgBundledCli() {
-    if (process.pkg)
-        return true;
-    try {
-        const selfPath = fileURLToPath(import.meta.url);
-        return selfPath.includes("/snapshot/") || selfPath.includes("\\snapshot\\");
-    }
-    catch {
-        return false;
-    }
+  if (process.pkg) return true;
+  try {
+    const selfPath = fileURLToPath(import.meta.url);
+    return selfPath.includes("/snapshot/") || selfPath.includes("\\snapshot\\");
+  } catch {
+    return false;
+  }
 }
 function hasCompiledBundledAssets(distDir) {
-    return fs.existsSync(path.join(distDir, "extensions", MARKER_EXTENSION));
+  return fs.existsSync(path.join(distDir, "extensions", MARKER_EXTENSION));
 }
 /** Dist directory inside the bundle (extensions/, skills/, …). */
 export function resolveSnapshotBundledDistDir() {
-    const entryDir = path.dirname(fileURLToPath(import.meta.url));
-    if (hasCompiledBundledAssets(entryDir)) {
-        return entryDir;
-    }
-    const packageDist = path.join(entryDir, "..", "dist");
-    if (hasCompiledBundledAssets(packageDist)) {
-        return packageDist;
-    }
+  const entryDir = path.dirname(fileURLToPath(import.meta.url));
+  if (hasCompiledBundledAssets(entryDir)) {
+    return entryDir;
+  }
+  const packageDist = path.join(entryDir, "..", "dist");
+  if (hasCompiledBundledAssets(packageDist)) {
     return packageDist;
+  }
+  return packageDist;
 }
 function fingerprintBundledDist(distDir) {
-    const hash = crypto.createHash("sha256");
-    for (const dir of BUNDLED_ASSET_DIRS) {
-        const base = path.join(distDir, dir);
-        if (!fs.existsSync(base))
-            continue;
-        for (const rel of listFilesRecursive(base)) {
-            hash.update(rel);
-            hash.update(fs.readFileSync(path.join(base, rel)));
-        }
-    }
-    for (const file of BUNDLED_ROOT_FILES) {
-        const full = path.join(distDir, file);
-        if (!fs.existsSync(full))
-            continue;
-        hash.update(file);
-        hash.update(fs.readFileSync(full));
-    }
-    for (const scope of ["@kubbisec", "@aspm"]) {
-        const scopeModules = path.join(distDir, "node_modules", scope);
-        if (!fs.existsSync(scopeModules))
-            continue;
-        for (const rel of listFilesRecursive(scopeModules)) {
-            hash.update(`${scope}/${rel}`);
-            hash.update(fs.readFileSync(path.join(scopeModules, rel)));
-        }
-    }
-    for (const name of fs.readdirSync(distDir)) {
-        if (!name.endsWith(".md"))
-            continue;
-        hash.update(name);
-        hash.update(fs.readFileSync(path.join(distDir, name)));
-    }
-    return hash.digest("hex").slice(0, 16);
+  const hash = crypto.createHash("sha256");
+  for (const dir of BUNDLED_ASSET_DIRS) {
+    const base = path.join(distDir, dir);
+    if (!fs.existsSync(base)) continue;
+    for (const rel of listFilesRecursive(base)) {
+      hash.update(rel);
+      hash.update(fs.readFileSync(path.join(base, rel)));
+    }
+  }
+  for (const file of BUNDLED_ROOT_FILES) {
+    const full = path.join(distDir, file);
+    if (!fs.existsSync(full)) continue;
+    hash.update(file);
+    hash.update(fs.readFileSync(full));
+  }
+  for (const scope of ["@kubbisec", "@aspm"]) {
+    const scopeModules = path.join(distDir, "node_modules", scope);
+    if (!fs.existsSync(scopeModules)) continue;
+    for (const rel of listFilesRecursive(scopeModules)) {
+      hash.update(`${scope}/${rel}`);
+      hash.update(fs.readFileSync(path.join(scopeModules, rel)));
+    }
+  }
+  for (const name of fs.readdirSync(distDir)) {
+    if (!name.endsWith(".md")) continue;
+    hash.update(name);
+    hash.update(fs.readFileSync(path.join(distDir, name)));
+  }
+  return hash.digest("hex").slice(0, 16);
 }
 function listFilesRecursive(root, prefix = "") {
-    const out = [];
-    for (const entry of fs.readdirSync(path.join(root, prefix), { withFileTypes: true })) {
-        const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
-        if (entry.isDirectory()) {
-            out.push(...listFilesRecursive(root, rel));
-        }
-        else {
-            out.push(rel);
-        }
-    }
-    return out;
+  const out = [];
+  for (const entry of fs.readdirSync(path.join(root, prefix), { withFileTypes: true })) {
+    const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+    if (entry.isDirectory()) {
+      out.push(...listFilesRecursive(root, rel));
+    } else {
+      out.push(rel);
+    }
+  }
+  return out;
 }
 function copyBundledDist(sourceDist, targetDist) {
-    fs.mkdirSync(targetDist, { recursive: true, mode: 0o755 });
-    for (const dir of BUNDLED_ASSET_DIRS) {
-        const src = path.join(sourceDist, dir);
-        if (!fs.existsSync(src))
-            continue;
-        fs.cpSync(src, path.join(targetDist, dir), { recursive: true });
-    }
-    for (const file of BUNDLED_ROOT_FILES) {
-        const src = path.join(sourceDist, file);
-        if (!fs.existsSync(src))
-            continue;
-        fs.copyFileSync(src, path.join(targetDist, file));
-    }
-    const modulesSrc = path.join(sourceDist, "node_modules");
-    if (fs.existsSync(modulesSrc)) {
-        fs.cpSync(modulesSrc, path.join(targetDist, "node_modules"), { recursive: true });
-    }
-    for (const name of fs.readdirSync(sourceDist)) {
-        if (!name.endsWith(".md"))
-            continue;
-        fs.copyFileSync(path.join(sourceDist, name), path.join(targetDist, name));
-    }
+  fs.mkdirSync(targetDist, { recursive: true, mode: 0o755 });
+  for (const dir of BUNDLED_ASSET_DIRS) {
+    const src = path.join(sourceDist, dir);
+    if (!fs.existsSync(src)) continue;
+    fs.cpSync(src, path.join(targetDist, dir), { recursive: true });
+  }
+  for (const file of BUNDLED_ROOT_FILES) {
+    const src = path.join(sourceDist, file);
+    if (!fs.existsSync(src)) continue;
+    fs.copyFileSync(src, path.join(targetDist, file));
+  }
+  const modulesSrc = path.join(sourceDist, "node_modules");
+  if (fs.existsSync(modulesSrc)) {
+    fs.cpSync(modulesSrc, path.join(targetDist, "node_modules"), { recursive: true });
+  }
+  for (const name of fs.readdirSync(sourceDist)) {
+    if (!name.endsWith(".md")) continue;
+    fs.copyFileSync(path.join(sourceDist, name), path.join(targetDist, name));
+  }
 }
 export function materializeBundledDistForHost(snapshotDist) {
-    const version = process.env.KUBBISEC_AI_VERSION?.trim() || process.env.npm_package_version?.trim() || "bundled";
-    const fingerprint = fingerprintBundledDist(snapshotDist);
-    const targetDist = path.join(getAiStateDir(), "bundled", version, fingerprint);
-    const marker = path.join(targetDist, "extensions", MARKER_EXTENSION);
-    const stampPath = path.join(targetDist, ".fingerprint");
-    if (fs.existsSync(marker)) {
-        try {
-            if (fs.readFileSync(stampPath, "utf8").trim() === fingerprint) {
-                return targetDist;
-            }
-        }
-        catch {
-            /* re-materialize */
-        }
-    }
-    if (fs.existsSync(targetDist)) {
-        fs.rmSync(targetDist, { recursive: true, force: true });
-    }
-    copyBundledDist(snapshotDist, targetDist);
-    fs.writeFileSync(stampPath, `${fingerprint}\n`, "utf8");
-    return targetDist;
+  const version =
+    process.env.KUBBISEC_AI_VERSION?.trim() || process.env.npm_package_version?.trim() || "bundled";
+  const fingerprint = fingerprintBundledDist(snapshotDist);
+  const targetDist = path.join(getAiStateDir(), "bundled", version, fingerprint);
+  const marker = path.join(targetDist, "extensions", MARKER_EXTENSION);
+  const stampPath = path.join(targetDist, ".fingerprint");
+  if (fs.existsSync(marker)) {
+    try {
+      if (fs.readFileSync(stampPath, "utf8").trim() === fingerprint) {
+        return targetDist;
+      }
+    } catch {
+      /* re-materialize */
+    }
+  }
+  if (fs.existsSync(targetDist)) {
+    fs.rmSync(targetDist, { recursive: true, force: true });
+  }
+  copyBundledDist(snapshotDist, targetDist);
+  fs.writeFileSync(stampPath, `${fingerprint}\n`, "utf8");
+  return targetDist;
 }
 /** Assets shipped next to the platform npm binary (`../bundled` from `bin/kubbisec`). */
 export function resolvePackagedBundledDistDir() {
-    const packaged = path.join(path.dirname(process.execPath), "..", "bundled");
-    if (hasCompiledBundledAssets(packaged)) {
-        return packaged;
-    }
-    return null;
+  const packaged = path.join(path.dirname(process.execPath), "..", "bundled");
+  if (hasCompiledBundledAssets(packaged)) {
+    return packaged;
+  }
+  return null;
 }
 /**
  * Directory containing extensions/, skills/, theme/, assets/ for Pi `-e` / `--skill`.
  * Native CLI: prefer `../bundled` beside the executable; else copy pkg snapshot assets to ~/.kubbisec/ai/bundled/.
  */
 export function resolveBundledDistRoot() {
-    const packaged = resolvePackagedBundledDistDir();
-    if (packaged) {
-        return packaged;
-    }
-    const snapshotDist = resolveSnapshotBundledDistDir();
-    if (!isPkgBundledCli()) {
-        return snapshotDist;
-    }
-    if (hasCompiledBundledAssets(snapshotDist)) {
-        return materializeBundledDistForHost(snapshotDist);
-    }
+  const packaged = resolvePackagedBundledDistDir();
+  if (packaged) {
+    return packaged;
+  }
+  const snapshotDist = resolveSnapshotBundledDistDir();
+  if (!isPkgBundledCli()) {
     return snapshotDist;
+  }
+  if (hasCompiledBundledAssets(snapshotDist)) {
+    return materializeBundledDistForHost(snapshotDist);
+  }
+  return snapshotDist;
 }
-//# sourceMappingURL=resolve-bundled-dist-root.js.map
+//# sourceMappingURL=resolve-bundled-dist-root.js.map

package/bundled/skills/at-path-mentions.d.ts

@@ -4,4 +4,4 @@ export declare function isAtFileAttachmentPrefix(atPrefix: string | null): boole
 /** List cwd-scoped entries for `@` / `@path` (Pi getFileSuggestions semantics). */
 export declare function getAtPathFileSuggestions(cwd: string, atPrefix: string): AutocompleteItem[];
 export declare function extractAtFilePrefix(textBeforeCursor: string): string | null;
-//# sourceMappingURL=at-path-mentions.d.ts.map
+//# sourceMappingURL=at-path-mentions.d.ts.map