@kubbisec/ai-linux-x64 0.1.22 → 0.1.23

package/bundled/extensions/cli-local-shared.js

@@ -1,159 +1,169 @@
 import { spawn } from "node:child_process";
 import * as path from "node:path";
-import { isCliDebugMode, summarizeSubprocessFailure, toUserError, } from "@aspm/shared/cli-user-error";
-import { ensureDelegatedCliInstalled, } from "@kubbisec/remediation";
-import { EXTENDED_CONTEXT_DENY_MESSAGE, extendedContextEnabled, resolveExtendedWorkspace, } from "../config/extended-context.js";
+import {
+  isCliDebugMode,
+  summarizeSubprocessFailure,
+  toUserError,
+} from "@aspm/shared/cli-user-error";
+import { ensureDelegatedCliInstalled } from "@kubbisec/remediation";
+import {
+  EXTENDED_CONTEXT_DENY_MESSAGE,
+  extendedContextEnabled,
+  resolveExtendedWorkspace,
+} from "../config/extended-context.js";
+
 export { extendedContextEnabled } from "../config/extended-context.js";
 export const CLI_LOCAL_MAX_OUTPUT_CHARS = 12_000;
 export const NAUS_LOCAL_RUN_TIMEOUT_MS = 15 * 60 * 1000;
 export function resolveWorkspace() {
-    return resolveExtendedWorkspace();
+  return resolveExtendedWorkspace();
 }
 export function truncateCliOutput(text, max = CLI_LOCAL_MAX_OUTPUT_CHARS) {
-    if (text.length <= max)
-        return text;
-    return `${text.slice(0, max)}\n\n… (output truncated at ${max} chars)`;
+  if (text.length <= max) return text;
+  return `${text.slice(0, max)}\n\n… (output truncated at ${max} chars)`;
 }
 export function denyExtendedContextMessage() {
-    return {
-        content: [
-            {
-                type: "text",
-                text: EXTENDED_CONTEXT_DENY_MESSAGE,
-            },
-        ],
-    };
+  return {
+    content: [
+      {
+        type: "text",
+        text: EXTENDED_CONTEXT_DENY_MESSAGE,
+      },
+    ],
+  };
 }
 export function ensureLocalCliOrInstall(name) {
-    return ensureDelegatedCliInstalled(name);
+  return ensureDelegatedCliInstalled(name);
 }
 export function buildCliEnsureFailureResult(bin, cwd, message) {
-    const text = `workspace: ${cwd}\n\n${message}`;
-    return {
-        content: [{ type: "text", text }],
-        details: { ok: false, exitCode: 127, userMessage: `${bin} nao esta disponivel localmente.` },
-    };
+  const text = `workspace: ${cwd}\n\n${message}`;
+  return {
+    content: [{ type: "text", text }],
+    details: { ok: false, exitCode: 127, userMessage: `${bin} nao esta disponivel localmente.` },
+  };
 }
 /** Full subprocess output for model debug (extended context + debug flag). */
 export function formatExecResultForModel(bin, args, cwd, result) {
-    const combined = [result.stdout, result.stderr].filter(Boolean).join("\n");
-    return truncateCliOutput([
-        `command: ${bin} ${args.join(" ")}`,
-        `cwd: ${cwd}`,
-        `exit: ${result.code}`,
-        "",
-        combined.trim() || "(no output)",
-    ].join("\n"));
+  const combined = [result.stdout, result.stderr].filter(Boolean).join("\n");
+  return truncateCliOutput(
+    [
+      `command: ${bin} ${args.join(" ")}`,
+      `cwd: ${cwd}`,
+      `exit: ${result.code}`,
+      "",
+      combined.trim() || "(no output)",
+    ].join("\n"),
+  );
 }
 /** @deprecated use formatExecResultForModel */
 export const formatExecResult = formatExecResultForModel;
 export function formatExecResultForUser(bin, result) {
-    const ok = result.code === 0;
-    if (ok) {
-        const hint = result.stdout
-            .trim()
-            .split(/\r?\n/)
-            .find((line) => line.trim())
-            ?.trim();
-        const userMessage = hint
-            ? `${bin} concluiu: ${hint.length > 160 ? `${hint.slice(0, 157)}…` : hint}`
-            : `${bin} concluiu com sucesso.`;
-        return { ok: true, exitCode: result.code, userMessage };
-    }
-    return {
-        ok: false,
-        exitCode: result.code,
-        userMessage: summarizeSubprocessFailure({
-            bin,
-            code: result.code,
-            stderr: result.stderr,
-            stdout: result.stdout,
-        }),
-    };
+  const ok = result.code === 0;
+  if (ok) {
+    const hint = result.stdout
+      .trim()
+      .split(/\r?\n/)
+      .find((line) => line.trim())
+      ?.trim();
+    const userMessage = hint
+      ? `${bin} concluiu: ${hint.length > 160 ? `${hint.slice(0, 157)}…` : hint}`
+      : `${bin} concluiu com sucesso.`;
+    return { ok: true, exitCode: result.code, userMessage };
+  }
+  return {
+    ok: false,
+    exitCode: result.code,
+    userMessage: summarizeSubprocessFailure({
+      bin,
+      code: result.code,
+      stderr: result.stderr,
+      stdout: result.stdout,
+    }),
+  };
 }
 export function buildCliToolResult(bin, args, cwd, result, suffix = "") {
-    const details = formatExecResultForUser(bin, result);
-    const useFullDump = extendedContextEnabled() && isCliDebugMode();
-    const text = (useFullDump ? formatExecResultForModel(bin, args, cwd, result) : details.userMessage) + suffix;
-    return {
-        content: [{ type: "text", text }],
-        details,
-    };
+  const details = formatExecResultForUser(bin, result);
+  const useFullDump = extendedContextEnabled() && isCliDebugMode();
+  const text =
+    (useFullDump ? formatExecResultForModel(bin, args, cwd, result) : details.userMessage) + suffix;
+  return {
+    content: [{ type: "text", text }],
+    details,
+  };
 }
 export function cliToolErrorContent(error) {
-    const shaped = toUserError(error, "Falha ao executar comando local");
-    return {
-        content: [{ type: "text", text: shaped.detail }],
-        details: { ok: false, exitCode: 127, userMessage: shaped.detail },
-    };
+  const shaped = toUserError(error, "Falha ao executar comando local");
+  return {
+    content: [{ type: "text", text: shaped.detail }],
+    details: { ok: false, exitCode: 127, userMessage: shaped.detail },
+  };
 }
 export function execCapture(bin, args, cwd, options) {
-    return new Promise((resolve) => {
-        const child = spawn(bin, args, {
-            cwd,
-            env: process.env,
-            stdio: ["ignore", "pipe", "pipe"],
-        });
-        let stdout = "";
-        let stderr = "";
-        let timedOut = false;
-        const timer = options?.timeoutMs != null
-            ? setTimeout(() => {
-                timedOut = true;
-                child.kill("SIGTERM");
-            }, options.timeoutMs)
-            : undefined;
-        const onAbort = () => {
+  return new Promise((resolve) => {
+    const child = spawn(bin, args, {
+      cwd,
+      env: process.env,
+      stdio: ["ignore", "pipe", "pipe"],
+    });
+    let stdout = "";
+    let stderr = "";
+    let timedOut = false;
+    const timer =
+      options?.timeoutMs != null
+        ? setTimeout(() => {
+            timedOut = true;
             child.kill("SIGTERM");
-        };
-        options?.signal?.addEventListener("abort", onAbort);
-        child.stdout?.on("data", (c) => {
-            stdout += String(c);
-        });
-        child.stderr?.on("data", (c) => {
-            stderr += String(c);
-        });
-        child.on("error", (err) => {
-            if (timer)
-                clearTimeout(timer);
-            options?.signal?.removeEventListener("abort", onAbort);
-            resolve({
-                code: 127,
-                stdout: "",
-                stderr: toUserError(err).detail,
-            });
+          }, options.timeoutMs)
+        : undefined;
+    const onAbort = () => {
+      child.kill("SIGTERM");
+    };
+    options?.signal?.addEventListener("abort", onAbort);
+    child.stdout?.on("data", (c) => {
+      stdout += String(c);
+    });
+    child.stderr?.on("data", (c) => {
+      stderr += String(c);
+    });
+    child.on("error", (err) => {
+      if (timer) clearTimeout(timer);
+      options?.signal?.removeEventListener("abort", onAbort);
+      resolve({
+        code: 127,
+        stdout: "",
+        stderr: toUserError(err).detail,
+      });
+    });
+    child.on("close", (code) => {
+      if (timer) clearTimeout(timer);
+      options?.signal?.removeEventListener("abort", onAbort);
+      if (options?.signal?.aborted) {
+        resolve({
+          code: 130,
+          stdout,
+          stderr: `${stderr}\n(aborted)`.trim(),
         });
-        child.on("close", (code) => {
-            if (timer)
-                clearTimeout(timer);
-            options?.signal?.removeEventListener("abort", onAbort);
-            if (options?.signal?.aborted) {
-                resolve({
-                    code: 130,
-                    stdout,
-                    stderr: `${stderr}\n(aborted)`.trim(),
-                });
-                return;
-            }
-            if (timedOut) {
-                resolve({
-                    code: 124,
-                    stdout,
-                    stderr: `${stderr}\n(timed out after ${options?.timeoutMs}ms)`.trim(),
-                });
-                return;
-            }
-            resolve({ code: code ?? 1, stdout, stderr });
+        return;
+      }
+      if (timedOut) {
+        resolve({
+          code: 124,
+          stdout,
+          stderr: `${stderr}\n(timed out after ${options?.timeoutMs}ms)`.trim(),
         });
+        return;
+      }
+      resolve({ code: code ?? 1, stdout, stderr });
     });
+  });
 }
 export function resolvePathInWorkspace(relativePath, workspace) {
-    const resolved = path.resolve(workspace, relativePath);
-    const ws = path.resolve(workspace);
-    const relative = path.relative(ws, resolved);
-    if (relative.startsWith("..") || path.isAbsolute(relative)) {
-        throw new Error("path must stay inside the workspace");
-    }
-    return resolved;
+  const resolved = path.resolve(workspace, relativePath);
+  const ws = path.resolve(workspace);
+  const relative = path.relative(ws, resolved);
+  if (relative.startsWith("..") || path.isAbsolute(relative)) {
+    throw new Error("path must stay inside the workspace");
+  }
+  return resolved;
 }
-//# sourceMappingURL=cli-local-shared.js.map
+//# sourceMappingURL=cli-local-shared.js.map

package/bundled/extensions/kubbisec-aspm-local.extension.d.ts

@@ -1,18 +1,21 @@
 type ExtensionApi = {
-    registerTool: (def: {
-        name: string;
-        label: string;
-        description: string;
-        parameters: unknown;
-        execute: (toolCallId: string, params: Record<string, unknown>, signal: AbortSignal) => Promise<{
-            content: Array<{
-                type: "text";
-                text: string;
-            }>;
-            details?: unknown;
-        }>;
-    }) => void;
+  registerTool: (def: {
+    name: string;
+    label: string;
+    description: string;
+    parameters: unknown;
+    execute: (
+      toolCallId: string,
+      params: Record<string, unknown>,
+      signal: AbortSignal,
+    ) => Promise<{
+      content: Array<{
+        type: "text";
+        text: string;
+      }>;
+      details?: unknown;
+    }>;
+  }) => void;
 };
 export default function kubbisecAspmLocal(api: ExtensionApi): void;
-export {};
-//# sourceMappingURL=kubbisec-aspm-local.extension.d.ts.map
+//# sourceMappingURL=kubbisec-aspm-local.extension.d.ts.map

package/bundled/extensions/kubbisec-aspm-local.extension.js

@@ -1,109 +1,112 @@
 import { Type } from "@earendil-works/pi-ai";
-import { buildCliEnsureFailureResult, buildCliToolResult, ensureLocalCliOrInstall, execCapture, resolvePathInWorkspace, resolveWorkspace, } from "./cli-local-shared.js";
-const ASPM_SOURCES = [
-    "trivy",
-    "sonar",
-    "semgrep",
-    "nmap",
-    "skipfish",
-    "osv",
-    "gitleaks",
-    "syft",
-];
+import {
+  buildCliEnsureFailureResult,
+  buildCliToolResult,
+  ensureLocalCliOrInstall,
+  execCapture,
+  resolvePathInWorkspace,
+  resolveWorkspace,
+} from "./cli-local-shared.js";
+
+const ASPM_SOURCES = ["trivy", "sonar", "semgrep", "nmap", "skipfish", "osv", "gitleaks", "syft"];
 export default function kubbisecAspmLocal(api) {
-    api.registerTool({
-        name: "aspm_local_status",
-        label: "ASPM CLI status",
-        description: "Checks local `aspm` availability and shows version output.",
-        parameters: Type.Object({}),
-        async execute() {
-            const cwd = resolveWorkspace();
-            const parts = [`workspace: ${cwd}`];
-            const ensured = ensureLocalCliOrInstall("aspm");
-            if (!ensured.ok)
-                return buildCliEnsureFailureResult("aspm", cwd, ensured.message);
-            const version = await execCapture("aspm", ["--version"], cwd);
-            const versionResult = buildCliToolResult("aspm", ["--version"], cwd, version);
-            return {
-                content: [
-                    { type: "text", text: `${parts.join("\n")}\n\n${versionResult.content[0]?.text ?? ""}` },
-                ],
-                details: versionResult.details,
-            };
-        },
-    });
-    api.registerTool({
-        name: "aspm_local_doctor",
-        label: "ASPM doctor",
-        description: "Runs `aspm doctor` (config, API, git, optional scanner binaries).",
-        parameters: Type.Object({}),
-        async execute() {
-            const cwd = resolveWorkspace();
-            const ensured = ensureLocalCliOrInstall("aspm");
-            if (!ensured.ok)
-                return buildCliEnsureFailureResult("aspm", cwd, ensured.message);
-            const result = await execCapture("aspm", ["doctor"], cwd);
-            return buildCliToolResult("aspm", ["doctor"], cwd, result);
-        },
-    });
-    api.registerTool({
-        name: "aspm_local_scan",
-        label: "ASPM scan (local)",
-        description: "Runs `aspm scan <file> -s <source>` without uploading to the platform.",
-        parameters: Type.Object({
-            file: Type.String({ description: "Report file path relative to workspace" }),
-            source: Type.Union(ASPM_SOURCES.map((s) => Type.Literal(s)), { description: "Scanner source id" }),
-        }),
-        async execute(_id, params) {
-            const cwd = resolveWorkspace();
-            const ensured = ensureLocalCliOrInstall("aspm");
-            if (!ensured.ok)
-                return buildCliEnsureFailureResult("aspm", cwd, ensured.message);
-            const filePath = resolvePathInWorkspace(String(params.file), cwd);
-            const source = String(params.source);
-            const args = ["scan", filePath, "-s", source];
-            const result = await execCapture("aspm", args, cwd);
-            return buildCliToolResult("aspm", args, cwd, result);
-        },
-    });
-    api.registerTool({
-        name: "aspm_local_upload",
-        label: "ASPM upload",
-        description: "Runs `aspm upload <file> -s <source> -p <projectId>` using local ~/.kubbisec config for API key.",
-        parameters: Type.Object({
-            file: Type.String({ description: "Report file path relative to workspace" }),
-            source: Type.Union(ASPM_SOURCES.map((s) => Type.Literal(s)), { description: "Scanner source id" }),
-            projectId: Type.String({
-                description: "KubbiSec project id (required; also KUBBISEC_CONTEXT_PROJECT_ID if omitted)",
-            }),
-        }),
-        async execute(_id, params) {
-            const cwd = resolveWorkspace();
-            const ensured = ensureLocalCliOrInstall("aspm");
-            if (!ensured.ok)
-                return buildCliEnsureFailureResult("aspm", cwd, ensured.message);
-            const filePath = resolvePathInWorkspace(String(params.file), cwd);
-            const source = String(params.source);
-            const projectId = String(params.projectId).trim() || process.env.KUBBISEC_CONTEXT_PROJECT_ID?.trim() || "";
-            if (!projectId) {
-                return {
-                    content: [
-                        {
-                            type: "text",
-                            text: "Indique o projectId ou configure KUBBISEC_CONTEXT_PROJECT_ID (kubbisec chat -p).",
-                        },
-                    ],
-                    details: {
-                        ok: false,
-                        exitCode: 1,
-                        userMessage: "projectId em falta para upload ASPM.",
-                    },
-                };
-            }
-            const args = ["upload", filePath, "-s", source, "-p", projectId];
-            const result = await execCapture("aspm", args, cwd);
-            return buildCliToolResult("aspm", args, cwd, result);
-        },
-    });
+  api.registerTool({
+    name: "aspm_local_status",
+    label: "ASPM CLI status",
+    description: "Checks local `aspm` availability and shows version output.",
+    parameters: Type.Object({}),
+    async execute() {
+      const cwd = resolveWorkspace();
+      const parts = [`workspace: ${cwd}`];
+      const ensured = ensureLocalCliOrInstall("aspm");
+      if (!ensured.ok) return buildCliEnsureFailureResult("aspm", cwd, ensured.message);
+      const version = await execCapture("aspm", ["--version"], cwd);
+      const versionResult = buildCliToolResult("aspm", ["--version"], cwd, version);
+      return {
+        content: [
+          { type: "text", text: `${parts.join("\n")}\n\n${versionResult.content[0]?.text ?? ""}` },
+        ],
+        details: versionResult.details,
+      };
+    },
+  });
+  api.registerTool({
+    name: "aspm_local_doctor",
+    label: "ASPM doctor",
+    description: "Runs `aspm doctor` (config, API, git, optional scanner binaries).",
+    parameters: Type.Object({}),
+    async execute() {
+      const cwd = resolveWorkspace();
+      const ensured = ensureLocalCliOrInstall("aspm");
+      if (!ensured.ok) return buildCliEnsureFailureResult("aspm", cwd, ensured.message);
+      const result = await execCapture("aspm", ["doctor"], cwd);
+      return buildCliToolResult("aspm", ["doctor"], cwd, result);
+    },
+  });
+  api.registerTool({
+    name: "aspm_local_scan",
+    label: "ASPM scan (local)",
+    description: "Runs `aspm scan <file> -s <source>` without uploading to the platform.",
+    parameters: Type.Object({
+      file: Type.String({ description: "Report file path relative to workspace" }),
+      source: Type.Union(
+        ASPM_SOURCES.map((s) => Type.Literal(s)),
+        { description: "Scanner source id" },
+      ),
+    }),
+    async execute(_id, params) {
+      const cwd = resolveWorkspace();
+      const ensured = ensureLocalCliOrInstall("aspm");
+      if (!ensured.ok) return buildCliEnsureFailureResult("aspm", cwd, ensured.message);
+      const filePath = resolvePathInWorkspace(String(params.file), cwd);
+      const source = String(params.source);
+      const args = ["scan", filePath, "-s", source];
+      const result = await execCapture("aspm", args, cwd);
+      return buildCliToolResult("aspm", args, cwd, result);
+    },
+  });
+  api.registerTool({
+    name: "aspm_local_upload",
+    label: "ASPM upload",
+    description:
+      "Runs `aspm upload <file> -s <source> -p <projectId>` using local ~/.kubbisec config for API key.",
+    parameters: Type.Object({
+      file: Type.String({ description: "Report file path relative to workspace" }),
+      source: Type.Union(
+        ASPM_SOURCES.map((s) => Type.Literal(s)),
+        { description: "Scanner source id" },
+      ),
+      projectId: Type.String({
+        description: "KubbiSec project id (required; also KUBBISEC_CONTEXT_PROJECT_ID if omitted)",
+      }),
+    }),
+    async execute(_id, params) {
+      const cwd = resolveWorkspace();
+      const ensured = ensureLocalCliOrInstall("aspm");
+      if (!ensured.ok) return buildCliEnsureFailureResult("aspm", cwd, ensured.message);
+      const filePath = resolvePathInWorkspace(String(params.file), cwd);
+      const source = String(params.source);
+      const projectId =
+        String(params.projectId).trim() || process.env.KUBBISEC_CONTEXT_PROJECT_ID?.trim() || "";
+      if (!projectId) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "Indique o projectId ou configure KUBBISEC_CONTEXT_PROJECT_ID (kubbisec chat -p).",
+            },
+          ],
+          details: {
+            ok: false,
+            exitCode: 1,
+            userMessage: "projectId em falta para upload ASPM.",
+          },
+        };
+      }
+      const args = ["upload", filePath, "-s", source, "-p", projectId];
+      const result = await execCapture("aspm", args, cwd);
+      return buildCliToolResult("aspm", args, cwd, result);
+    },
+  });
 }
-//# sourceMappingURL=kubbisec-aspm-local.extension.js.map
+//# sourceMappingURL=kubbisec-aspm-local.extension.js.map

package/bundled/extensions/kubbisec-brand.extension.d.ts

@@ -1,3 +1,3 @@
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 export default function kubbisecBrand(api: ExtensionAPI): void;
-//# sourceMappingURL=kubbisec-brand.extension.d.ts.map
+//# sourceMappingURL=kubbisec-brand.extension.d.ts.map

package/bundled/extensions/kubbisec-brand.extension.js

@@ -1,32 +1,32 @@
 import * as path from "node:path";
 import { KUBBISEC_PRODUCT_NAME } from "../copy/kubbisec-shell-copy.js";
 import { renderChatHeaderLines } from "../theme/render-compact-header.js";
+
 function buildBrandHeaderComponent(theme, version) {
-    let cachedWidth = 0;
-    let cachedLines = renderChatHeaderLines(theme, version, 80);
-    return {
-        render(width) {
-            if (width !== cachedWidth) {
-                cachedWidth = width;
-                cachedLines = renderChatHeaderLines(theme, version, width);
-            }
-            return cachedLines;
-        },
-        invalidate() {
-            cachedWidth = 0;
-        },
-    };
+  let cachedWidth = 0;
+  let cachedLines = renderChatHeaderLines(theme, version, 80);
+  return {
+    render(width) {
+      if (width !== cachedWidth) {
+        cachedWidth = width;
+        cachedLines = renderChatHeaderLines(theme, version, width);
+      }
+      return cachedLines;
+    },
+    invalidate() {
+      cachedWidth = 0;
+    },
+  };
 }
 export default function kubbisecBrand(api) {
-    const version = process.env.KUBBISEC_AI_VERSION?.trim() || "0.1.0";
-    api.on("session_start", (_event, ctx) => {
-        if (!ctx.hasUI)
-            return;
-        // Header sits above the chat log so messages never render above KubbiSec chrome.
-        ctx.ui.setHeader((_tui, theme) => buildBrandHeaderComponent(theme, version));
-        const cwd = process.cwd();
-        const base = path.basename(cwd) || cwd;
-        ctx.ui.setTitle(`${KUBBISEC_PRODUCT_NAME} — ${base}`);
-    });
+  const version = process.env.KUBBISEC_AI_VERSION?.trim() || "0.1.0";
+  api.on("session_start", (_event, ctx) => {
+    if (!ctx.hasUI) return;
+    // Header sits above the chat log so messages never render above KubbiSec chrome.
+    ctx.ui.setHeader((_tui, theme) => buildBrandHeaderComponent(theme, version));
+    const cwd = process.cwd();
+    const base = path.basename(cwd) || cwd;
+    ctx.ui.setTitle(`${KUBBISEC_PRODUCT_NAME} — ${base}`);
+  });
 }
-//# sourceMappingURL=kubbisec-brand.extension.js.map
+//# sourceMappingURL=kubbisec-brand.extension.js.map

package/bundled/extensions/kubbisec-byok-provider.extension.d.ts

@@ -3,4 +3,4 @@
  */
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 export default function kubbisecByokProvider(api: ExtensionAPI): void;
-//# sourceMappingURL=kubbisec-byok-provider.extension.d.ts.map
+//# sourceMappingURL=kubbisec-byok-provider.extension.d.ts.map

package/bundled/extensions/kubbisec-byok-provider.extension.js

@@ -1,5 +1,5 @@
 import { registerKubbisecLlmProvider } from "../config/register-kubbisec-llm-provider.js";
 export default function kubbisecByokProvider(api) {
-    registerKubbisecLlmProvider(api.registerProvider.bind(api));
+  registerKubbisecLlmProvider(api.registerProvider.bind(api));
 }
-//# sourceMappingURL=kubbisec-byok-provider.extension.js.map
+//# sourceMappingURL=kubbisec-byok-provider.extension.js.map