@kubbisec/ai-linux-x64 0.1.27 → 0.1.28

package/bundled/extensions/kubbisec-platform-tools.extension.js

@@ -0,0 +1,185 @@
+/**
+ * Registers KubbiSec DevSecOps assistant tools from the API catalog (session_start).
+ */
+import * as fs from "node:fs";
+import { Type } from "@earendil-works/pi-ai";
+import { getKubbisecConfigPath } from "@kubbisec/home";
+import { isCliDebugMode } from "@kubbisec/shared/cli-user-error";
+import { extendedContextEnabled, resolveExtendedWorkspace } from "../config/extended-context.js";
+const MAX_TOOL_RESULT_CHARS = 24_000;
+function resolveApiBaseUrl() {
+    const raw = process.env.KUBBISEC_API_URL?.trim() ||
+        process.env.KUBBISEC_AI_API_URL?.trim() ||
+        process.env.ASPM_API_URL?.trim();
+    return raw?.replace(/\/$/, "");
+}
+function resolveApiKey() {
+    return (process.env.KUBBISEC_API_KEY?.trim() ||
+        process.env.KUBBISEC_JOB_TOKEN?.trim() ||
+        process.env.OPENAI_API_KEY?.trim());
+}
+function readDefaultProjectId() {
+    const fromEnv = process.env.KUBBISEC_CONTEXT_PROJECT_ID?.trim();
+    if (fromEnv)
+        return fromEnv;
+    try {
+        const raw = fs.readFileSync(getKubbisecConfigPath(), "utf8");
+        const parsed = JSON.parse(raw);
+        return parsed.defaultProject?.trim() || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function extractVulnerabilityIdFromParams(params) {
+    const id = (typeof params.vulnerabilityId === "string" ? params.vulnerabilityId.trim() : "") ||
+        (typeof params.vulnerability_id === "string" ? params.vulnerability_id.trim() : "") ||
+        "";
+    return id || undefined;
+}
+export function catalogParametersSchema(parameters) {
+    if (parameters && typeof parameters === "object" && Object.keys(parameters).length > 0) {
+        return parameters;
+    }
+    return Type.Object({});
+}
+function truncateToolText(text) {
+    if (text.length <= MAX_TOOL_RESULT_CHARS)
+        return text;
+    return `${text.slice(0, MAX_TOOL_RESULT_CHARS)}\n\n…[truncated ${text.length - MAX_TOOL_RESULT_CHARS} chars]`;
+}
+function catalogHeaders(apiKey) {
+    const headers = {
+        "x-api-key": apiKey,
+        "Content-Type": "application/json",
+    };
+    const orgId = process.env.KUBBISEC_ORG_ID?.trim();
+    if (orgId)
+        headers["x-organization-id"] = orgId;
+    return headers;
+}
+async function fetchCatalog(baseUrl, apiKey) {
+    const res = await fetch(`${baseUrl}/v1/ai/assistant/tools/catalog`, {
+        headers: catalogHeaders(apiKey),
+    });
+    if (!res.ok) {
+        throw new Error(`catalog HTTP ${res.status}`);
+    }
+    const body = (await res.json());
+    return (body.tools ?? []).filter((t) => t.available);
+}
+export default function kubbisecPlatformTools(api) {
+    let activeVulnerabilityId;
+    function buildToolContext() {
+        const projectId = readDefaultProjectId();
+        const ctx = projectId ? { projectId, mode: "draft" } : {};
+        if (extendedContextEnabled()) {
+            ctx.allowExtendedLocalContext = true;
+            ctx.localWorkspacePath = resolveExtendedWorkspace();
+        }
+        if (activeVulnerabilityId) {
+            ctx.vulnerabilityId = activeVulnerabilityId;
+            ctx.finding = { vulnerabilityId: activeVulnerabilityId };
+        }
+        return ctx;
+    }
+    async function executeRemoteTool(baseUrl, apiKey, name, args) {
+        const remembered = extractVulnerabilityIdFromParams(args);
+        if (remembered)
+            activeVulnerabilityId = remembered;
+        const res = await fetch(`${baseUrl}/v1/ai/assistant/tools/execute`, {
+            method: "POST",
+            headers: catalogHeaders(apiKey),
+            body: JSON.stringify({
+                name,
+                arguments: args,
+                context: buildToolContext(),
+            }),
+        });
+        if (!res.ok) {
+            return {
+                ok: false,
+                result: { error: "Não foi possível contactar a API KubbiSec." },
+                userMessage: "Não foi possível contactar a API KubbiSec.",
+            };
+        }
+        return (await res.json());
+    }
+    function formatRemoteToolText(remote) {
+        if (!remote.ok) {
+            return remote.userMessage ?? "A operação na plataforma KubbiSec falhou.";
+        }
+        if (isCliDebugMode()) {
+            return truncateToolText(JSON.stringify(remote.result, null, 2));
+        }
+        if (remote.result && typeof remote.result === "object" && !Array.isArray(remote.result)) {
+            const record = remote.result;
+            const safe = {};
+            for (const [key, value] of Object.entries(record)) {
+                if (key === "stack" || key === "traceId" || key === "trace")
+                    continue;
+                safe[key] = value;
+            }
+            return truncateToolText(JSON.stringify(safe, null, 2));
+        }
+        return truncateToolText(JSON.stringify(remote.result, null, 2));
+    }
+    api.on("session_start", async (_event, ctx) => {
+        activeVulnerabilityId = undefined;
+        const baseUrl = resolveApiBaseUrl();
+        const apiKey = resolveApiKey();
+        if (!baseUrl || !apiKey) {
+            ctx.ui?.setStatus("kubbisec-tools", "tools skipped");
+            ctx.ui?.notify("KubbiSec platform tools skipped (set KUBBISEC_API_URL + KUBBISEC_API_KEY)", "warning");
+            return;
+        }
+        let tools;
+        try {
+            tools = await fetchCatalog(baseUrl, apiKey);
+        }
+        catch {
+            ctx.ui?.setStatus("kubbisec-tools", "tools unavailable");
+            ctx.ui?.notify("Não foi possível carregar as ferramentas da plataforma KubbiSec.", "warning");
+            return;
+        }
+        for (const tool of tools) {
+            api.registerTool({
+                name: tool.name,
+                label: tool.name,
+                description: tool.description,
+                parameters: catalogParametersSchema(tool.parameters),
+                async execute(_toolCallId, params) {
+                    try {
+                        const remote = await executeRemoteTool(baseUrl, apiKey, tool.name, params);
+                        const text = formatRemoteToolText(remote);
+                        return {
+                            content: [{ type: "text", text }],
+                            details: {
+                                ok: remote.ok,
+                                name: tool.name,
+                                userMessage: remote.userMessage,
+                            },
+                        };
+                    }
+                    catch {
+                        return {
+                            content: [
+                                {
+                                    type: "text",
+                                    text: "Não foi possível executar a ferramenta na plataforma KubbiSec.",
+                                },
+                            ],
+                            details: {
+                                ok: false,
+                                name: tool.name,
+                                userMessage: "Não foi possível executar a ferramenta na plataforma KubbiSec.",
+                            },
+                        };
+                    }
+                },
+            });
+        }
+        ctx.ui?.setStatus("kubbisec-tools", `${tools.length} tools`);
+    });
+}
+//# sourceMappingURL=kubbisec-platform-tools.extension.js.map

package/bundled/extensions/kubbisec-platform-tools.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-platform-tools.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-platform-tools.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEjG,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAoCrC,SAAS,iBAAiB;IACxB,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE;QACpC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IACnC,OAAO,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE;QACpC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgC,CAAC;QAC9D,OAAO,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,MAA+B;IAE/B,MAAM,EAAE,GACN,CAAC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,CAAC,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,EAAE,CAAC;IACL,OAAO,EAAE,IAAI,SAAS,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAmC;IACzE,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,MAAM,IAAI,qBAAqB;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,IAAI,CAAC,MAAM,GAAG,qBAAqB,SAAS,CAAC;AAChH,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,OAAO,GAA2B;QACtC,WAAW,EAAE,MAAM;QACnB,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,KAAK;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc;IACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,gCAAgC,EAAE;QAClE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAiB;IAC7D,IAAI,qBAAyC,CAAC;IAE9C,SAAS,gBAAgB;QACvB,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;QACzC,MAAM,GAAG,GAA4B,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,sBAAsB,EAAE,EAAE,CAAC;YAC7B,GAAG,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACrC,GAAG,CAAC,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,qBAAqB,EAAE,CAAC;YAC1B,GAAG,CAAC,eAAe,GAAG,qBAAqB,CAAC;YAC5C,GAAG,CAAC,OAAO,GAAG,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,UAAU,iBAAiB,CAC9B,OAAe,EACf,MAAc,EACd,IAAY,EACZ,IAA6B;QAE7B,MAAM,UAAU,GAAG,gCAAgC,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,UAAU;YAAE,qBAAqB,GAAG,UAAU,CAAC;QAEnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,gCAAgC,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI;gBACJ,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,gBAAgB,EAAE;aAC5B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,EAAE,KAAK,EAAE,4CAA4C,EAAE;gBAC/D,WAAW,EAAE,4CAA4C;aAC1D,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqC,CAAC;IAChE,CAAC;IAED,SAAS,oBAAoB,CAAC,MAI7B;QACC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,WAAW,IAAI,2CAA2C,CAAC;QAC3E,CAAC;QACD,IAAI,cAAc,EAAE,EAAE,CAAC;YACrB,OAAO,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiC,CAAC;YACxD,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO;oBAAE,SAAS;gBACtE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,CAAC;YACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,qBAAqB,GAAG,SAAS,CAAC;QAElC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;YACrD,GAAG,CAAC,EAAE,EAAE,MAAM,CACZ,2EAA2E,EAC3E,SAAS,CACV,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;YACzD,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,kEAAkE,EAAE,SAAS,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,YAAY,CAAC;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,IAAI;gBAChB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC;gBACpD,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM;oBAC/B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAC3E,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;wBAC1C,OAAO;4BACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;4BACjC,OAAO,EAAE;gCACP,EAAE,EAAE,MAAM,CAAC,EAAE;gCACb,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,MAAM,CAAC,WAAW;6BAChC;yBACF,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO;4BACL,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,MAAM;oCACZ,IAAI,EAAE,gEAAgE;iCACvE;6BACF;4BACD,OAAO,EAAE;gCACP,EAAE,EAAE,KAAK;gCACT,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,gEAAgE;6BAC9E;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAED,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,gBAAgB,EAAE,GAAG,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-runtime-status.extension.d.ts

@@ -0,0 +1,13 @@
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: ExtensionContext) => void | Promise<void>) => void;
+};
+type ExtensionContext = {
+    hasUI: boolean;
+    cwd: string;
+    ui: {
+        setStatus: (key: string, text: string | undefined) => void;
+    };
+};
+export default function kubbisecRuntimeStatus(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-runtime-status.extension.d.ts.map

package/bundled/extensions/kubbisec-runtime-status.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-runtime-status.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-runtime-status.extension.ts"],"names":[],"mappings":"AAQA,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CACF,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KACrE,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE;QACF,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;KAC5D,CAAC;CACH,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAarE"}

package/bundled/extensions/kubbisec-runtime-status.extension.js

@@ -0,0 +1,18 @@
+/**
+ * Footer status for loaded context file (AGENTS.md / CLAUDE.md) — not shown in chat startup listing.
+ */
+import { findAgentsContextFile, formatKubbisecContextStatus, } from "../config/resolve-agents-context-file.js";
+export default function kubbisecRuntimeStatus(api) {
+    api.on("session_start", async (_event, ctx) => {
+        if (!ctx.hasUI)
+            return;
+        const agentsFile = findAgentsContextFile(ctx.cwd);
+        if (!agentsFile) {
+            ctx.ui.setStatus("kubbisec-ctx", undefined);
+            return;
+        }
+        const home = process.env.HOME || process.env.USERPROFILE;
+        ctx.ui.setStatus("kubbisec-ctx", formatKubbisecContextStatus(agentsFile, home));
+    });
+}
+//# sourceMappingURL=kubbisec-runtime-status.extension.js.map

package/bundled/extensions/kubbisec-runtime-status.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-runtime-status.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-runtime-status.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0CAA0C,CAAC;AAiBlD,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAiB;IAC7D,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QAEvB,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACzD,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-scope.extension.d.ts

@@ -0,0 +1,14 @@
+type ExtensionApi = {
+    on: (event: string, handler: (event: {
+        type?: string;
+        content?: string;
+    }, ctx: ExtensionContext) => void | Promise<void>) => void;
+};
+type ExtensionContext = {
+    ui?: {
+        notify: (message: string, level: string) => void;
+    };
+};
+export default function kubbisecScope(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-scope.extension.d.ts.map

package/bundled/extensions/kubbisec-scope.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-scope.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-scope.extension.ts"],"names":[],"mappings":"AAIA,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CACF,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CACP,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAC1C,GAAG,EAAE,gBAAgB,KAClB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KACtB,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,EAAE,CAAC,EAAE;QAAE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CAC3D,CAAC;AAQF,MAAM,CAAC,OAAO,UAAU,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAQ7D"}

package/bundled/extensions/kubbisec-scope.extension.js

@@ -0,0 +1,18 @@
+/** Soft guard: only nudge on clearly non-technical chit-chat; platform/NAUS questions use tools. */
+const OFF_TOPIC_HINT = "This looks like general chat. For KubbiSec product or pipeline help, ask about ASPM, NAUS, findings, or CI — tools can fetch real docs and data.";
+const OFF_TOPIC_PATTERNS = [
+    /\bwrite (me )?a poem\b/i,
+    /\btell (me )?a joke\b/i,
+    /\bplay a game\b/i,
+];
+export default function kubbisecScope(api) {
+    api.on("before_user_message", async (event, ctx) => {
+        const text = typeof event.content === "string" ? event.content.trim() : "";
+        if (!text || text.startsWith("/"))
+            return;
+        if (OFF_TOPIC_PATTERNS.some((p) => p.test(text)) && text.length < 80) {
+            ctx.ui?.notify(OFF_TOPIC_HINT, "info");
+        }
+    });
+}
+//# sourceMappingURL=kubbisec-scope.extension.js.map

package/bundled/extensions/kubbisec-scope.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-scope.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-scope.extension.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,MAAM,cAAc,GAClB,kJAAkJ,CAAC;AAgBrJ,MAAM,kBAAkB,GAAG;IACzB,yBAAyB;IACzB,wBAAwB;IACxB,kBAAkB;CACnB,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,aAAa,CAAC,GAAiB;IACrD,GAAG,CAAC,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1C,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-skill-mentions.extension.d.ts

@@ -0,0 +1,25 @@
+/**
+ * KubbiSec skills: invoke with `@skill <name>` (autocomplete) instead of `/skill:name` in the slash menu.
+ */
+import type { AutocompleteProvider } from "@earendil-works/pi-tui";
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: ExtensionContext) => undefined | Promise<undefined | InputEventResult>) => void;
+};
+type ExtensionContext = {
+    hasUI: boolean;
+    cwd: string;
+    ui: {
+        addAutocompleteProvider: (factory: (current: AutocompleteProvider) => AutocompleteProvider) => void;
+    };
+};
+type InputEventResult = {
+    action: "continue";
+} | {
+    action: "transform";
+    text: string;
+} | {
+    action: "handled";
+};
+export default function kubbisecSkillMentions(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-skill-mentions.extension.d.ts.map

package/bundled/extensions/kubbisec-skill-mentions.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-skill-mentions.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-skill-mentions.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAenE,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CACF,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CACP,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,gBAAgB,KAClB,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,gBAAgB,CAAC,KACnD,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE;QACF,uBAAuB,EAAE,CACvB,OAAO,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,oBAAoB,KAC7D,IAAI,CAAC;KACX,CAAC;CACH,CAAC;AAMF,KAAK,gBAAgB,GACjB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAiD1B,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CA2BrE"}

package/bundled/extensions/kubbisec-skill-mentions.extension.js

@@ -0,0 +1,71 @@
+import { extractAtFilePrefix, getAtPathFileSuggestions } from "../skills/at-path-mentions.js";
+import { applySkillMentionCompletion, extractAtPrefix, extractSkillMentionPrefix, filterSkillSuggestions, messageActivatesPlanMode, parsePlanMentionPrefix, parseSkillMentionPrefix, transformAtSkillMentions, } from "../skills/chat-mentions.js";
+import { listBundledKubbisecSkills } from "../skills/list-bundled-skills.js";
+import { setSessionWorkflowMode } from "../workflow/session-workflow-mode.js";
+function wrapAutocompleteProvider(current, skills, sessionCwd) {
+    return {
+        async getSuggestions(lines, cursorLine, cursorCol, options) {
+            const textBeforeCursor = (lines[cursorLine] ?? "").slice(0, cursorCol);
+            const atPrefix = extractSkillMentionPrefix(textBeforeCursor);
+            const skillMention = parseSkillMentionPrefix(atPrefix);
+            if (skillMention && atPrefix) {
+                const items = filterSkillSuggestions(skills, skillMention.query);
+                if (items.length === 0)
+                    return null;
+                return { items, prefix: atPrefix };
+            }
+            const fileAtPrefix = extractAtFilePrefix(textBeforeCursor);
+            if (fileAtPrefix) {
+                const cwdItems = getAtPathFileSuggestions(sessionCwd, fileAtPrefix);
+                if (cwdItems.length > 0) {
+                    return { items: cwdItems, prefix: fileAtPrefix };
+                }
+                return current.getSuggestions(lines, cursorLine, cursorCol, options);
+            }
+            return current.getSuggestions(lines, cursorLine, cursorCol, options);
+        },
+        applyCompletion(lines, cursorLine, cursorCol, item, prefix) {
+            if (prefix.startsWith("@skill")) {
+                return applySkillMentionCompletion(lines, cursorLine, cursorCol, item, prefix);
+            }
+            return current.applyCompletion(lines, cursorLine, cursorCol, item, prefix);
+        },
+        shouldTriggerFileCompletion(lines, cursorLine, cursorCol) {
+            const textBeforeCursor = (lines[cursorLine] ?? "").slice(0, cursorCol);
+            const atPrefix = extractAtPrefix(textBeforeCursor);
+            if (parseSkillMentionPrefix(atPrefix) || parsePlanMentionPrefix(atPrefix)) {
+                return false;
+            }
+            if (extractAtFilePrefix(textBeforeCursor)) {
+                return true;
+            }
+            return current.shouldTriggerFileCompletion?.(lines, cursorLine, cursorCol) ?? true;
+        },
+    };
+}
+export default function kubbisecSkillMentions(api) {
+    const skills = listBundledKubbisecSkills();
+    api.on("session_start", async (_event, ctx) => {
+        if (!ctx.hasUI)
+            return undefined;
+        const sessionCwd = ctx.cwd;
+        ctx.ui.addAutocompleteProvider((current) => wrapAutocompleteProvider(current, skills, sessionCwd));
+        return undefined;
+    });
+    api.on("input", async (event, _ctx) => {
+        const input = event;
+        const text = typeof input.text === "string" ? input.text : "";
+        if (messageActivatesPlanMode(text)) {
+            setSessionWorkflowMode("plan");
+        }
+        if (!text.includes("@skill")) {
+            return { action: "continue" };
+        }
+        const transformed = transformAtSkillMentions(text);
+        if (transformed === text) {
+            return { action: "continue" };
+        }
+        return { action: "transform", text: transformed };
+    });
+}
+//# sourceMappingURL=kubbisec-skill-mentions.extension.js.map

package/bundled/extensions/kubbisec-skill-mentions.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-skill-mentions.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-skill-mentions.extension.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9F,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AA+B9E,SAAS,wBAAwB,CAC/B,OAA6B,EAC7B,MAAoD,EACpD,UAAkB;IAElB,OAAO;QACL,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO;YACxD,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBACjE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACpC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrC,CAAC;YAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;YAC3D,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;gBACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;gBACnD,CAAC;gBACD,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACvE,CAAC;YAED,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;QACD,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM;YACxD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChC,OAAO,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7E,CAAC;QACD,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS;YACtD,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;YACnD,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1E,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,OAAO,CAAC,2BAA2B,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC;QACrF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAiB;IAC7D,MAAM,MAAM,GAAG,yBAAyB,EAAE,CAAC;IAE3C,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QACjC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC;QAC3B,GAAG,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CACtD,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,KAAmB,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,UAAU,EAA6B,CAAC;QAC3D,CAAC;QACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,UAAU,EAA6B,CAAC;QAC3D,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAA6B,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-skill-telemetry.extension.d.ts

@@ -0,0 +1,6 @@
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: unknown) => void | Promise<void>) => void;
+};
+export default function kubbisecSkillTelemetry(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-skill-telemetry.extension.d.ts.map

package/bundled/extensions/kubbisec-skill-telemetry.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-skill-telemetry.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-skill-telemetry.extension.ts"],"names":[],"mappings":"AAKA,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;CAC9F,CAAC;AA+DF,MAAM,CAAC,OAAO,UAAU,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAgCtE"}

package/bundled/extensions/kubbisec-skill-telemetry.extension.js

@@ -0,0 +1,85 @@
+/**
+ * KubbiSec trajectory telemetry — forwards Pi TUI events to parent adapter via JSONL file.
+ */
+import * as fs from "node:fs";
+function isOptOut() {
+    return process.env.KUBBISEC_TELEMETRY_OPT_OUT === "1";
+}
+function eventsPath() {
+    const sessionId = process.env.KUBBISEC_TELEMETRY_SESSION_ID?.trim();
+    const eventsFile = process.env.KUBBISEC_TELEMETRY_EVENTS_PATH?.trim();
+    if (!sessionId || !eventsFile)
+        return null;
+    return eventsFile;
+}
+function shouldEmit(surface) {
+    if (isOptOut())
+        return false;
+    if (surface === "chat" && process.env.KUBBISEC_TELEMETRY_CHAT !== "1") {
+        return process.env.KUBBISEC_SKILL_ROUTER === "1";
+    }
+    if (surface === "fix" && process.env.KUBBISEC_TELEMETRY_FIX !== "1")
+        return false;
+    return true;
+}
+function resolveSurface() {
+    return process.env.KUBBISEC_TELEMETRY_SURFACE === "fix" ? "fix" : "chat";
+}
+const SECRET_ARG_PATTERN = /KUBBISEC_API_KEY|GITHUB_TOKEN|password=/i;
+function scrubToolArgs(args) {
+    const raw = typeof args === "string" ? args : JSON.stringify(args ?? "");
+    if (SECRET_ARG_PATTERN.test(raw)) {
+        return "[REDACTED]";
+    }
+    return args;
+}
+function appendEvent(kind, payload) {
+    const file = eventsPath();
+    if (!file)
+        return;
+    const surface = resolveSurface();
+    if (!shouldEmit(surface))
+        return;
+    try {
+        const line = JSON.stringify({
+            ts: new Date().toISOString(),
+            kind,
+            payload,
+        });
+        fs.appendFileSync(file, `${line}\n`, { encoding: "utf8", mode: 0o600 });
+    }
+    catch {
+        /* swallow — telemetry must not block TUI */
+    }
+}
+export default function kubbisecSkillTelemetry(api) {
+    if (isOptOut() || !eventsPath()) {
+        return;
+    }
+    api.on("input", async (event) => {
+        const input = event;
+        const text = typeof input.text === "string" ? input.text : "";
+        if (!text.trim())
+            return;
+        appendEvent("user_message", { text: text.slice(0, 4096) });
+    });
+    api.on("tool_start", async (event) => {
+        const tool = event;
+        appendEvent("tool_call", {
+            name: tool.name ?? "unknown",
+            args: scrubToolArgs(tool.args),
+        });
+    });
+    api.on("tool_end", async (event) => {
+        const tool = event;
+        const output = typeof tool.output === "string" && tool.output.length > 2048
+            ? `${tool.output.slice(0, 2048)}…`
+            : tool.output;
+        appendEvent("tool_result", {
+            name: tool.name ?? "unknown",
+            exitCode: tool.exitCode ?? null,
+            output,
+        });
+    });
+}
+//# sourceMappingURL=kubbisec-skill-telemetry.extension.js.map

package/bundled/extensions/kubbisec-skill-telemetry.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-skill-telemetry.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-skill-telemetry.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAe9B,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;AACxD,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE,CAAC;IACtE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,OAAuB;IACzC,IAAI,QAAQ,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,EAAE,CAAC;QACtE,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAClF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3E,CAAC;AAED,MAAM,kBAAkB,GAAG,0CAA0C,CAAC;AAEtE,SAAS,aAAa,CAAC,IAAa;IAClC,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAgC;IACjE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,OAAO;SACR,CAAC,CAAC;QACH,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,sBAAsB,CAAC,GAAiB;IAC9D,IAAI,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAChC,OAAO;IACT,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,KAAmB,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QACzB,WAAW,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,KAAkB,CAAC;QAChC,WAAW,CAAC,WAAW,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,KAAkB,CAAC;QAChC,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI;YAC1D,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG;YAClC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAClB,WAAW,CAAC,aAAa,EAAE;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-theme-lock.extension.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Locks the KubbiSec TUI to the bundled `kubbisec` theme — no user theme switching.
+ */
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+export default function kubbisecThemeLock(api: ExtensionAPI): void;
+//# sourceMappingURL=kubbisec-theme-lock.extension.d.ts.map

package/bundled/extensions/kubbisec-theme-lock.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-theme-lock.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-theme-lock.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,iCAAiC,CAAC;AAyBtF,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CA0BjE"}

package/bundled/extensions/kubbisec-theme-lock.extension.js

@@ -0,0 +1,43 @@
+import { patchGlobalThemeAccent } from "../theme/kubbisec-menu-themes.js";
+import { KUBBISEC_THEME_NAME } from "../theme/kubbisec-theme-name.js";
+const THEME_GUARD_MS = 1_500;
+const NOTIFY_COOLDOWN_MS = 8_000;
+const THEME_LOCKED_MESSAGE = "O tema KubbiSec é fixo. Alterações em /settings ou /reload não mudam o visual.";
+let lastNotifyAt = 0;
+function lockTheme(ctx, notify) {
+    if (!ctx.hasUI)
+        return;
+    if (ctx.ui.theme.name === KUBBISEC_THEME_NAME)
+        return;
+    const result = ctx.ui.setTheme(KUBBISEC_THEME_NAME);
+    if (!result.success || !notify)
+        return;
+    const now = Date.now();
+    if (now - lastNotifyAt < NOTIFY_COOLDOWN_MS)
+        return;
+    lastNotifyAt = now;
+    ctx.ui.notify(THEME_LOCKED_MESSAGE, "info");
+}
+export default function kubbisecThemeLock(api) {
+    let guardTimer;
+    const stopGuard = () => {
+        if (!guardTimer)
+            return;
+        clearInterval(guardTimer);
+        guardTimer = undefined;
+    };
+    const startGuard = (ctx) => {
+        stopGuard();
+        guardTimer = setInterval(() => lockTheme(ctx, true), THEME_GUARD_MS);
+    };
+    api.on("session_start", async (_event, ctx) => {
+        lockTheme(ctx, false);
+        patchGlobalThemeAccent();
+        await import("../theme/patch-pi-settings-theme.runtime.js").then((mod) => mod.patchPiSettingsListTheme());
+        startGuard(ctx);
+    });
+    api.on("session_shutdown", () => {
+        stopGuard();
+    });
+}
+//# sourceMappingURL=kubbisec-theme-lock.extension.js.map

package/bundled/extensions/kubbisec-theme-lock.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-theme-lock.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-theme-lock.extension.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAM,oBAAoB,GACxB,gFAAgF,CAAC;AAEnF,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,SAAS,SAAS,CAAC,GAAqB,EAAE,MAAe;IACvD,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO;IACvB,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO;IAEtD,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO;IAEvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,YAAY,GAAG,kBAAkB;QAAE,OAAO;IACpD,YAAY,GAAG,GAAG,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,GAAiB;IACzD,IAAI,UAAsD,CAAC;IAE3D,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1B,UAAU,GAAG,SAAS,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,GAAqB,EAAE,EAAE;QAC3C,SAAS,EAAE,CAAC;QACZ,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC;IACvE,CAAC,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,sBAAsB,EAAE,CAAC;QACzB,MAAM,MAAM,CAAC,6CAA6C,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACvE,GAAG,CAAC,wBAAwB,EAAE,CAC/B,CAAC;QACF,UAAU,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC9B,SAAS,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-ui.extension.d.ts

@@ -0,0 +1,6 @@
+/**
+ * KubbiSec AI shell: closed cyan editor frame (┌─┐ │ │ └─┘) around the chat input.
+ */
+import { type ExtensionAPI } from "@earendil-works/pi-coding-agent";
+export default function kubbisecUi(pi: ExtensionAPI): void;
+//# sourceMappingURL=kubbisec-ui.extension.d.ts.map

package/bundled/extensions/kubbisec-ui.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-ui.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-ui.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,iCAAiC,CAAC;AA0EzC,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAkGzD"}