@kubbisec/ai-linux-x64 0.1.27 → 0.1.28

package/bundled/extensions/kubbisec-ui.extension.js

@@ -0,0 +1,143 @@
+/**
+ * KubbiSec AI shell: closed cyan editor frame (┌─┐ │ │ └─┘) around the chat input.
+ */
+import { CustomEditor, } from "@earendil-works/pi-coding-agent";
+import { truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
+// import { handleClarifyPanelKey } from "../clarify/clarify-select-panel.js";
+// import {
+//   getClarifyUiSnapshot,
+//   isClarifyAsking,
+//   setClarifyUiSnapshot,
+// } from "../clarify/clarify-ui-state.js";
+// import { formatSelectionSubmit } from "../clarify/parse-clarify-answer.js";
+import { KUBBISEC_EDITOR_PLACEHOLDER, KUBBISEC_EXIT_SLASH_COMMAND, } from "../copy/kubbisec-shell-copy.js";
+import { renderLineWithMentionChips } from "../skills/chat-mention-render.js";
+import { withKubbisecSelectListTheme } from "../theme/kubbisec-menu-themes.js";
+/** Horizontal inset inside the cyan editor frame (per side). */
+const EDITOR_PADDING_X = 1;
+function buildPlaceholderContent(theme, innerWidth, rawLine) {
+    if (innerWidth <= 0)
+        return "";
+    const showCursor = rawLine.includes("\x1b[7m");
+    const dim = (text) => theme.fg("dim", text);
+    const inset = " ".repeat(EDITOR_PADDING_X);
+    if (!showCursor) {
+        const text = `${inset}${dim(KUBBISEC_EDITOR_PLACEHOLDER)}`;
+        const pad = Math.max(0, innerWidth - visibleWidth(text));
+        return `${text}${" ".repeat(pad)}`;
+    }
+    const first = KUBBISEC_EDITOR_PLACEHOLDER[0] ?? " ";
+    const rest = KUBBISEC_EDITOR_PLACEHOLDER.slice(1);
+    const cursor = `\x1b[7m${first}\x1b[0m`;
+    const content = `${inset}${cursor}${dim(rest)}`;
+    const pad = Math.max(0, innerWidth - visibleWidth(content));
+    return `${content}${" ".repeat(pad)}`;
+}
+function horizontalBorder(width, leftCap, rightCap, border) {
+    if (width <= 0)
+        return "";
+    if (width === 1)
+        return border(leftCap);
+    const mid = Math.max(0, width - 2);
+    return `${border(leftCap)}${border("─".repeat(mid))}${border(rightCap)}`;
+}
+function wrapWithVerticalBorders(content, width, border) {
+    if (width <= 0)
+        return "";
+    if (width === 1)
+        return border("│");
+    const innerWidth = Math.max(0, width - 2);
+    const inner = truncateToWidth(content, innerWidth, "");
+    const pad = Math.max(0, innerWidth - visibleWidth(inner));
+    return `${border("│")}${inner}${" ".repeat(pad)}${border("│")}`;
+}
+export default function kubbisecUi(pi) {
+    pi.on("session_start", (_event, ctx) => {
+        if (!ctx.hasUI)
+            return;
+        ctx.ui.setWorkingVisible(false);
+        ctx.ui.setHiddenThinkingLabel("reasoning");
+        ctx.ui.setWorkingIndicator({ frames: ["◆", "◇", "◆", "◇"], intervalMs: 120 });
+        class KubbisecBorderEditor extends CustomEditor {
+            constructor(tui, theme, keybindings) {
+                super(tui, withKubbisecSelectListTheme(theme), keybindings, {
+                    paddingX: EDITOR_PADDING_X,
+                    autocompleteMaxVisible: 12,
+                });
+                this.installExitSlashRedirect();
+            }
+            installExitSlashRedirect() {
+                let submitHandler;
+                Object.defineProperty(this, "onSubmit", {
+                    configurable: true,
+                    enumerable: true,
+                    get: () => submitHandler,
+                    set: (handler) => {
+                        submitHandler = handler
+                            ? async (text) => {
+                                if (text.trim() === "/quit") {
+                                    return handler(KUBBISEC_EXIT_SLASH_COMMAND);
+                                }
+                                /*
+                                if (isClarifyAsking()) {
+                                  const snapshot = getClarifyUiSnapshot();
+                                  const trimmed = text.trim();
+                                  if (!trimmed) {
+                                    const fromPanel = formatSelectionSubmit(
+                                      new Set(snapshot.selected),
+                                      snapshot.selectionMode,
+                                    );
+                                    if (fromPanel) {
+                                      return handler(fromPanel);
+                                    }
+                                  }
+                                }
+                                */
+                                return handler(text);
+                            }
+                            : undefined;
+                    },
+                });
+            }
+            handleInput(data) {
+                /*
+                if (isClarifyAsking()) {
+                  const snapshot = getClarifyUiSnapshot();
+                  const result = handleClarifyPanelKey(snapshot, data);
+                  if (result.consumed) {
+                    setClarifyUiSnapshot(result.snapshot);
+                    if (result.submitText && this.onSubmit) {
+                      void this.onSubmit(result.submitText);
+                      return;
+                    }
+                    return;
+                  }
+                }
+                */
+                super.handleInput(data);
+            }
+            render(width) {
+                const lines = super.render(width);
+                if (lines.length < 2)
+                    return lines;
+                const thm = ctx.ui.theme;
+                const borderColor = (text) => thm.fg("borderAccent", text);
+                const isEmpty = this.getText().length === 0;
+                const innerWidth = Math.max(0, width - 2);
+                lines[0] = horizontalBorder(width, "┌", "┐", borderColor);
+                for (let i = 1; i < lines.length - 1; i += 1) {
+                    const rawLine = lines[i] ?? "";
+                    const base = isEmpty && i === 1
+                        ? buildPlaceholderContent(thm, innerWidth, rawLine)
+                        : rawLine;
+                    const content = renderLineWithMentionChips(base, thm);
+                    lines[i] = wrapWithVerticalBorders(content, width, borderColor);
+                }
+                lines[lines.length - 1] = horizontalBorder(width, "└", "┘", borderColor);
+                return lines;
+            }
+        }
+        ctx.ui.setEditorComponent((tui, theme, keybindings) => new KubbisecBorderEditor(tui, theme, keybindings));
+    });
+}
+//# sourceMappingURL=kubbisec-ui.extension.js.map

package/bundled/extensions/kubbisec-ui.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-ui.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-ui.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,YAAY,GAGb,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,8EAA8E;AAC9E,WAAW;AACX,0BAA0B;AAC1B,qBAAqB;AACrB,0BAA0B;AAC1B,2CAA2C;AAC3C,8EAA8E;AAC9E,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAE/E,gEAAgE;AAChE,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAM3B,SAAS,uBAAuB,CAC9B,KAAwB,EACxB,UAAkB,EAClB,OAAe;IAEf,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAE/B,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAE3C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,KAAK,GAAG,2BAA2B,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IACpD,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,UAAU,KAAK,SAAS,CAAC;IACxC,MAAM,OAAO,GAAG,GAAG,KAAK,GAAG,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,OAAO,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAa,EACb,OAAe,EACf,QAAgB,EAChB,MAAgC;IAEhC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAe,EACf,KAAa,EACb,MAAgC;IAEhC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,EAAgB;IACjD,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACrC,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QAEvB,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChC,GAAG,CAAC,EAAE,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAE9E,MAAM,oBAAqB,SAAQ,YAAY;YAC7C,YAAY,GAAQ,EAAE,KAAkB,EAAE,WAA+B;gBACvE,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE;oBAC1D,QAAQ,EAAE,gBAAgB;oBAC1B,sBAAsB,EAAE,EAAE;iBAC3B,CAAC,CAAC;gBACH,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAClC,CAAC;YAEO,wBAAwB;gBAC9B,IAAI,aAAmE,CAAC;gBACxE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE;oBACtC,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,IAAI;oBAChB,GAAG,EAAE,GAAG,EAAE,CAAC,aAAa;oBACxB,GAAG,EAAE,CAAC,OAA6D,EAAE,EAAE;wBACrE,aAAa,GAAG,OAAO;4BACrB,CAAC,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;gCACrB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;oCAC5B,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAC;gCAC9C,CAAC;gCACD;;;;;;;;;;;;;;kCAcE;gCACF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;4BACvB,CAAC;4BACH,CAAC,CAAC,SAAS,CAAC;oBAChB,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YAED,WAAW,CAAC,IAAY;gBACtB;;;;;;;;;;;;;kBAaE;gBACF,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,CAAC,KAAa;gBAClB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAEnC,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC;gBACzB,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBAEnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAE1C,KAAK,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC/B,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,KAAK,CAAC;wBAChB,CAAC,CAAC,uBAAuB,CAAC,GAAwB,EAAE,UAAU,EAAE,OAAO,CAAC;wBACxE,CAAC,CAAC,OAAO,CAAC;oBACd,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,EAAE,GAAwB,CAAC,CAAC;oBAC3E,KAAK,CAAC,CAAC,CAAC,GAAG,uBAAuB,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;gBAClE,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACzE,OAAO,KAAK,CAAC;YACf,CAAC;SACF;QAED,GAAG,CAAC,EAAE,CAAC,kBAAkB,CACvB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,CAC/E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-workflow.extension.d.ts

@@ -0,0 +1,38 @@
+export type ChatWorkflowMode = "default" | "plan" | "review";
+export type SessionWorkflowState = {
+    mode: ChatWorkflowMode;
+    specApproved: boolean;
+    specPath?: string;
+};
+export declare function isMutationTool(toolName: string): boolean;
+export declare function detectModeFromPrompt(prompt: string, envMode?: string): ChatWorkflowMode;
+export declare function parseRuntimeSpecStatus(content: string): string | null;
+export declare function findApprovedSpec(cwd: string): {
+    approved: boolean;
+    specPath?: string;
+};
+export declare function resolveSpecApproval(cwd: string): {
+    approved: boolean;
+    specPath?: string;
+};
+export declare function shouldBlockMutationTool(state: SessionWorkflowState): boolean;
+export declare function userApprovedSpecKeyword(text: string): boolean;
+export declare function buildPlanModeContextMessage(): string;
+export declare function buildReviewModeContextMessage(): string;
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: ExtensionContext) => undefined | Promise<unknown>) => void;
+};
+type ExtensionContext = {
+    hasUI: boolean;
+    cwd: string;
+    ui: {
+        notify: (message: string, level?: string) => void;
+        setStatus: (key: string, text: string | undefined) => void;
+        theme: {
+            fg: (role: string, text: string) => string;
+        };
+    };
+};
+export default function kubbisecWorkflow(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-workflow.extension.d.ts.map

package/bundled/extensions/kubbisec-workflow.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-workflow.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-workflow.extension.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE7D,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAcF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGxD;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAavF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKrE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAoBtF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAEzF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAE5E;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAKpD;AAED,wBAAgB,6BAA6B,IAAI,MAAM,CAItD;AAED,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CACF,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,KAAK,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,KAC7E,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE;QACF,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAClD,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;QAC3D,KAAK,EAAE;YAAE,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;SAAE,CAAC;KACvD,CAAC;CACH,CAAC;AA2BF,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAqFhE"}

package/bundled/extensions/kubbisec-workflow.extension.js

@@ -0,0 +1,179 @@
+/**
+ * KubbiSec workflow: /mode:plan HARD-GATE, spec approval, and plan/review session modes.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { getSessionWorkflowFooterBadge, getSessionWorkflowMode, setSessionSpecApproved, setSessionWorkflowMode, } from "../workflow/session-workflow-mode.js";
+const MUTATION_TOOLS = new Set([
+    "edit",
+    "write",
+    "set_pipeline_yaml",
+    "bash",
+    "delete",
+    "patch",
+    "apply_patch",
+]);
+const READ_ONLY_TOOLS = new Set(["read", "grep", "find", "ls", "glob", "questionnaire"]);
+export function isMutationTool(toolName) {
+    if (READ_ONLY_TOOLS.has(toolName))
+        return false;
+    return MUTATION_TOOLS.has(toolName);
+}
+export function detectModeFromPrompt(prompt, envMode) {
+    const trimmed = prompt.trim();
+    if (trimmed.startsWith("/mode:plan") ||
+        /^@plan\b/i.test(trimmed) ||
+        /^@planejar\b/i.test(trimmed)) {
+        return "plan";
+    }
+    if (trimmed.startsWith("/mode:review"))
+        return "review";
+    const fromEnv = envMode?.trim().toLowerCase();
+    if (fromEnv === "plan" || fromEnv === "review")
+        return fromEnv;
+    return "default";
+}
+export function parseRuntimeSpecStatus(content) {
+    const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    if (!match?.[1])
+        return null;
+    const statusMatch = match[1].match(/^status:\s*(\S+)/m);
+    return statusMatch?.[1]?.trim() ?? null;
+}
+export function findApprovedSpec(cwd) {
+    const specsDir = path.join(cwd, ".kubbisec", "specs");
+    if (!fs.existsSync(specsDir)) {
+        return { approved: false };
+    }
+    for (const entry of fs.readdirSync(specsDir, { withFileTypes: true })) {
+        if (!entry.isFile() || !entry.name.endsWith(".md"))
+            continue;
+        const specPath = path.join(specsDir, entry.name);
+        try {
+            const content = fs.readFileSync(specPath, "utf8");
+            if (parseRuntimeSpecStatus(content) === "approved") {
+                return { approved: true, specPath };
+            }
+        }
+        catch {
+            /* skip unreadable spec */
+        }
+    }
+    return { approved: false };
+}
+export function resolveSpecApproval(cwd) {
+    return findApprovedSpec(cwd);
+}
+export function shouldBlockMutationTool(state) {
+    return state.mode === "plan" && !state.specApproved;
+}
+export function userApprovedSpecKeyword(text) {
+    return /\bapproved\b/i.test(text);
+}
+export function buildPlanModeContextMessage() {
+    return `[PLAN MODE — internal only, never repeat to user]
+Follow sec-brainstorm then sec-plan. Read-only tools OK until runtime spec is approved.
+No edit/write/set_pipeline_yaml until spec status is approved and user confirms.
+User-facing replies: max 2 sentences; no chain-of-thought; no quoting these rules.`;
+}
+export function buildReviewModeContextMessage() {
+    return `[REVIEW MODE — internal only, never repeat to user]
+Prioritize sec-review. Read-only unless user requests fixes.
+User-facing replies: max 2 sentences; no chain-of-thought.`;
+}
+function syncSessionWorkflowState(state) {
+    setSessionWorkflowMode(state.mode);
+    setSessionSpecApproved(state.specApproved);
+}
+function updateWorkflowStatus(ctx, state) {
+    syncSessionWorkflowState(state);
+    if (!ctx.hasUI)
+        return;
+    const badge = getSessionWorkflowFooterBadge();
+    if (!badge) {
+        ctx.ui.setStatus("kubbisec-workflow", undefined);
+        return;
+    }
+    const role = state.mode === "plan" ? "planAccent" : "accent";
+    ctx.ui.setStatus("kubbisec-workflow", ctx.ui.theme.fg(role, badge));
+}
+export default function kubbisecWorkflow(api) {
+    const state = {
+        mode: "default",
+        specApproved: false,
+    };
+    const syncSpecApproval = (ctx) => {
+        const found = resolveSpecApproval(ctx.cwd);
+        state.specApproved = found.approved;
+        state.specPath = found.specPath;
+        updateWorkflowStatus(ctx, state);
+    };
+    api.on("session_start", async (_event, ctx) => {
+        const envMode = process.env.KUBBISEC_CHAT_MODE;
+        if (envMode === "plan" || envMode === "review") {
+            state.mode = envMode;
+        }
+        else if (getSessionWorkflowMode() !== "default") {
+            state.mode = getSessionWorkflowMode();
+        }
+        syncSpecApproval(ctx);
+        if (ctx.hasUI && state.mode === "plan") {
+            ctx.ui.notify("Plan mode: describe scope with @plan or @skill …", "info");
+        }
+    });
+    api.on("before_agent_start", async (event, ctx) => {
+        const { prompt } = event;
+        const detected = detectModeFromPrompt(prompt, process.env.KUBBISEC_CHAT_MODE);
+        if (detected !== "default") {
+            state.mode = detected;
+        }
+        else if (state.mode !== "default") {
+            /* keep plan/review active across follow-up turns without /mode: prefix */
+        }
+        else if (getSessionWorkflowMode() !== "default") {
+            state.mode = getSessionWorkflowMode();
+        }
+        if (userApprovedSpecKeyword(prompt)) {
+            syncSpecApproval(ctx);
+            if (!state.specApproved) {
+                state.specApproved = true;
+            }
+        }
+        else {
+            syncSpecApproval(ctx);
+        }
+        updateWorkflowStatus(ctx, state);
+        if (state.mode === "plan") {
+            return {
+                message: {
+                    customType: "kubbisec-plan-mode",
+                    content: buildPlanModeContextMessage(),
+                    display: false,
+                },
+            };
+        }
+        if (state.mode === "review") {
+            return {
+                message: {
+                    customType: "kubbisec-review-mode",
+                    content: buildReviewModeContextMessage(),
+                    display: false,
+                },
+            };
+        }
+        return undefined;
+    });
+    api.on("tool_call", async (event, ctx) => {
+        syncSpecApproval(ctx);
+        const { toolName } = event;
+        if (!shouldBlockMutationTool(state) || !isMutationTool(toolName)) {
+            return undefined;
+        }
+        return {
+            block: true,
+            reason: `Plan mode HARD-GATE: mutation tool "${toolName}" blocked until a runtime spec is approved.\n` +
+                `Create or update \`.kubbisec/specs/<slug>.md\` with \`status: approved\` in frontmatter, then confirm with "approved".`,
+        };
+    });
+}
+//# sourceMappingURL=kubbisec-workflow.extension.js.map

package/bundled/extensions/kubbisec-workflow.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-workflow.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-workflow.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,sCAAsC,CAAC;AAU9C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,OAAO;IACP,mBAAmB;IACnB,MAAM;IACN,QAAQ;IACR,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;AAEzF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,OAAgB;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IACE,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;QAChC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QACzB,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAC7B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxD,MAAM,OAAO,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACxD,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClD,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;gBACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAA2B;IACjE,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO;;;mFAG0E,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO;;2DAEkD,CAAC;AAC5D,CAAC;AA2BD,SAAS,wBAAwB,CAAC,KAA2B;IAC3D,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,sBAAsB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAqB,EAAE,KAA2B;IAC9E,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO;IACvB,MAAM,KAAK,GAAG,6BAA6B,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7D,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,mBAAmB,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,GAAiB;IACxD,MAAM,KAAK,GAAyB;QAClC,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,KAAK;KACpB,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,GAAqB,EAAQ,EAAE;QACvD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC;QACpC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC/C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;QACvB,CAAC;aAAM,IAAI,sBAAsB,EAAE,KAAK,SAAS,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACxC,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACvC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,kDAAkD,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,KAA8B,CAAC;QAClD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;QACxB,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,0EAA0E;QAC5E,CAAC;aAAM,IAAI,sBAAsB,EAAE,KAAK,SAAS,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,GAAG,sBAAsB,EAAE,CAAC;QACxC,CAAC;QAED,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBACxB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEjC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE;oBACP,UAAU,EAAE,oBAAoB;oBAChC,OAAO,EAAE,2BAA2B,EAAE;oBACtC,OAAO,EAAE,KAAK;iBACf;aACF,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE;oBACP,UAAU,EAAE,sBAAsB;oBAClC,OAAO,EAAE,6BAA6B,EAAE;oBACxC,OAAO,EAAE,KAAK;iBACf;aACF,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAsB,CAAC;QAC5C,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EACJ,uCAAuC,QAAQ,+CAA+C;gBAC9F,wHAAwH;SAC3H,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/gate-system.md

@@ -0,0 +1,27 @@
+# Gate system prompt (SkillOpt port — KubbiSec adaptation)
+
+<!-- origin: SkillOpt OSS gate template -->
+
+## Role
+
+Judge whether a candidate overlay improves the base skill given trajectory evidence.
+
+## Inputs
+
+- Skill: {{skillName}}
+- Base skill: {{baseSkill}}
+- Candidate overlay: {{overlay}}
+- Trajectory summary: {{trajectorySummary}}
+
+## Output
+
+Return JSON only:
+
+```json
+{ "accept": boolean, "reasons": string[] }
+```
+
+## Constraints
+
+- Reject overlays that weaken security guidance.
+- Reject edits that contradict HARD-GATE rules.

package/bundled/node_modules/@kubbisec/chat-memory/dist/client.d.ts

@@ -0,0 +1,20 @@
+import type { MemoryRecord, MemoryScope } from "./types.js";
+export declare function searchChatMemory(scope: MemoryScope, query: string, limit?: number): Promise<MemoryRecord[]>;
+export declare function addChatMemoryTurn(scope: MemoryScope, text: string, metadata?: Record<string, string>): Promise<MemoryRecord | null>;
+export declare function forgetChatMemory(scope: MemoryScope, memoryId: string): Promise<boolean>;
+export declare function forgetAllChatMemory(scope: Partial<MemoryScope>): Promise<number>;
+export declare function listChatMemories(scope: Partial<MemoryScope>): MemoryRecord[];
+/** Test helper — clears the in-memory store. */
+export declare function resetChatMemoryStoreForTests(): void;
+export type MemoryStatus = {
+    enabled: boolean;
+    storageDir: string;
+    count: number;
+    scopes: {
+        organizationId?: string;
+        userId?: string;
+        byProject: Record<string, number>;
+    };
+};
+export declare function getMemoryStatus(scope: Partial<MemoryScope>): MemoryStatus;
+//# sourceMappingURL=client.d.ts.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAsB5D,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,SAAI,GACR,OAAO,CAAC,YAAY,EAAE,CAAC,CAiBzB;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB9B;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO7F;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAatF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,YAAY,EAAE,CAO5E;AAED,gDAAgD;AAChD,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE;QACN,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACnC,CAAC;CACH,CAAC;AAEF,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,YAAY,CAmBzE"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/client.js

@@ -0,0 +1,121 @@
+import { randomUUID } from "node:crypto";
+import { isMemoryEnabled } from "./feature-flags.js";
+import { sanitizeMemoryText } from "./sanitizer.js";
+import { resolveMemoryDir } from "./storage-paths.js";
+const inMemoryStore = [];
+function matchesScope(record, scope) {
+    if (record.scope.organizationId !== scope.organizationId)
+        return false;
+    if (record.scope.userId !== scope.userId)
+        return false;
+    if (scope.projectId && record.scope.projectId !== scope.projectId)
+        return false;
+    return true;
+}
+function scoreMatch(text, query) {
+    const q = query.toLowerCase().trim();
+    if (!q)
+        return 0;
+    const t = text.toLowerCase();
+    if (t.includes(q))
+        return q.length;
+    const tokens = q.split(/\s+/).filter(Boolean);
+    return tokens.reduce((acc, token) => (t.includes(token) ? acc + token.length : acc), 0);
+}
+export async function searchChatMemory(scope, query, limit = 5) {
+    if (!isMemoryEnabled())
+        return [];
+    const hits = inMemoryStore
+        .filter((record) => matchesScope(record, scope))
+        .map((record) => ({ record, score: scoreMatch(record.text, query) }))
+        .filter(({ score }) => score > 0 || !query.trim())
+        .sort((a, b) => b.score - a.score || b.record.createdAt.localeCompare(a.record.createdAt))
+        .slice(0, limit)
+        .map(({ record }) => {
+        const sanitized = sanitizeMemoryText(record.text);
+        if (sanitized.rejected || !sanitized.text.trim())
+            return null;
+        return { ...record, text: sanitized.text };
+    })
+        .filter((r) => r !== null);
+    return hits;
+}
+export async function addChatMemoryTurn(scope, text, metadata) {
+    if (!isMemoryEnabled())
+        return null;
+    const sanitized = sanitizeMemoryText(text);
+    if (sanitized.rejected || !sanitized.text.trim()) {
+        if (process.env.KUBBISEC_DEBUG === "1") {
+            console.warn(`memory sanitize rejected: ${sanitized.reason ?? "unknown"}`);
+        }
+        return null;
+    }
+    const record = {
+        id: randomUUID(),
+        text: sanitized.text,
+        scope: { ...scope },
+        createdAt: new Date().toISOString(),
+        metadata,
+    };
+    inMemoryStore.push(record);
+    return record;
+}
+export async function forgetChatMemory(scope, memoryId) {
+    const idx = inMemoryStore.findIndex((record) => record.id === memoryId && matchesScope(record, scope));
+    if (idx === -1)
+        return false;
+    inMemoryStore.splice(idx, 1);
+    return true;
+}
+export async function forgetAllChatMemory(scope) {
+    if (!scope.organizationId || !scope.userId)
+        return 0;
+    const before = inMemoryStore.length;
+    for (let i = inMemoryStore.length - 1; i >= 0; i -= 1) {
+        const record = inMemoryStore[i];
+        if (!record)
+            continue;
+        if (record.scope.organizationId !== scope.organizationId)
+            continue;
+        if (record.scope.userId !== scope.userId)
+            continue;
+        if (scope.projectId && record.scope.projectId !== scope.projectId)
+            continue;
+        inMemoryStore.splice(i, 1);
+    }
+    return before - inMemoryStore.length;
+}
+export function listChatMemories(scope) {
+    return inMemoryStore.filter((record) => {
+        if (scope.organizationId && record.scope.organizationId !== scope.organizationId)
+            return false;
+        if (scope.userId && record.scope.userId !== scope.userId)
+            return false;
+        if (scope.projectId && record.scope.projectId !== scope.projectId)
+            return false;
+        return true;
+    });
+}
+/** Test helper — clears the in-memory store. */
+export function resetChatMemoryStoreForTests() {
+    inMemoryStore.length = 0;
+}
+export function getMemoryStatus(scope) {
+    const records = listChatMemories(scope);
+    const byProject = {};
+    for (const record of records) {
+        const key = record.scope.projectId ?? "(global)";
+        byProject[key] = (byProject[key] ?? 0) + 1;
+    }
+    return {
+        enabled: isMemoryEnabled(),
+        storageDir: resolveMemoryDir(),
+        count: records.length,
+        scopes: {
+            organizationId: scope.organizationId,
+            userId: scope.userId,
+            byProject,
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAKtD,MAAM,aAAa,GAAmB,EAAE,CAAC;AAEzC,SAAS,YAAY,CAAC,MAAoB,EAAE,KAAkB;IAC5D,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAkB,EAClB,KAAa,EACb,KAAK,GAAG,CAAC;IAET,IAAI,CAAC,eAAe,EAAE;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,IAAI,GAAG,aAAa;SACvB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;SAC/C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SACpE,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SACjD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;SACzF,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;SACf,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QAClB,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,SAAS,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9D,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAEhD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAkB,EAClB,IAAY,EACZ,QAAiC;IAEjC,IAAI,CAAC,eAAe,EAAE;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,6BAA6B,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,EAAE,EAAE,UAAU,EAAE;QAChB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;QACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,QAAQ;KACT,CAAC;IAEF,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAkB,EAAE,QAAgB;IACzE,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CACjC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAClE,CAAC;IACF,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA2B;IACnE,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAErD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;YAAE,SAAS;QACnE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,SAAS;QACnD,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,SAAS;QAC5E,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA2B;IAC1D,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,IAAI,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QAC/F,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACvE,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,4BAA4B;IAC1C,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3B,CAAC;AAaD,MAAM,UAAU,eAAe,CAAC,KAA2B;IACzD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,SAAS,GAA2B,EAAE,CAAC;IAE7C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC;QACjD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO;QACL,OAAO,EAAE,eAAe,EAAE;QAC1B,UAAU,EAAE,gBAAgB,EAAE;QAC9B,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,MAAM,EAAE;YACN,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS;SACV;KACF,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/feature-flags.d.ts

@@ -0,0 +1,15 @@
+/** Truthy only when env value is exactly "1". */
+export declare function envFlagOn(env: NodeJS.ProcessEnv, key: string): boolean;
+export declare function isMemoryEnabled(env?: NodeJS.ProcessEnv): boolean;
+export type ChatMode = "default" | "plan" | "review";
+export type KubbisecAiFeatureFlags = {
+    skillOpt: boolean;
+    mem0: boolean;
+    lowResource: boolean;
+    orchestrate: boolean;
+    chatMode: ChatMode;
+};
+export declare function parseChatMode(raw: string | undefined): ChatMode;
+export declare function isSkillRouterEnabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function resolveFeatureFlags(env?: NodeJS.ProcessEnv): KubbisecAiFeatureFlags;
+//# sourceMappingURL=feature-flags.d.ts.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/feature-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-flags.d.ts","sourceRoot":"","sources":["../src/feature-flags.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAI7E;AAED,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;CACpB,CAAC;AAIF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAM/D;AAED,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAElF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,sBAAsB,CAWhG"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/feature-flags.js

@@ -0,0 +1,34 @@
+/** Truthy only when env value is exactly "1". */
+export function envFlagOn(env, key) {
+    return env[key]?.trim() === "1";
+}
+export function isMemoryEnabled(env = process.env) {
+    if (envFlagOn(env, "KUBBISEC_MEMORY_DISABLED"))
+        return false;
+    if (env.KUBBISEC_MEM0?.trim() === "0")
+        return false;
+    return true;
+}
+const CHAT_MODES = new Set(["default", "plan", "review"]);
+export function parseChatMode(raw) {
+    const value = (raw ?? "default").trim().toLowerCase();
+    if (!CHAT_MODES.has(value)) {
+        throw new Error(`Invalid KUBBISEC_CHAT_MODE: ${raw ?? ""}`);
+    }
+    return value;
+}
+export function isSkillRouterEnabled(env = process.env) {
+    return envFlagOn(env, "KUBBISEC_SKILL_ROUTER");
+}
+export function resolveFeatureFlags(env = process.env) {
+    const chatModeRaw = env.KUBBISEC_CHAT_MODE?.trim();
+    const chatMode = chatModeRaw ? parseChatMode(chatModeRaw) : "default";
+    return {
+        skillOpt: envFlagOn(env, "KUBBISEC_SKILL_OPT"),
+        mem0: isMemoryEnabled(env),
+        lowResource: envFlagOn(env, "KUBBISEC_LOW_RESOURCE"),
+        orchestrate: envFlagOn(env, "KUBBISEC_ORCHESTRATE"),
+        chatMode,
+    };
+}
+//# sourceMappingURL=feature-flags.js.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/feature-flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-flags.js","sourceRoot":"","sources":["../src/feature-flags.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,MAAM,UAAU,SAAS,CAAC,GAAsB,EAAE,GAAW;IAC3D,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,IAAI,SAAS,CAAC,GAAG,EAAE,0BAA0B,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE1D,MAAM,UAAU,aAAa,CAAC,GAAuB;IACnD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAiB,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,OAAO,SAAS,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,WAAW,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtE,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC;QAC9C,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;QAC1B,WAAW,EAAE,SAAS,CAAC,GAAG,EAAE,uBAAuB,CAAC;QACpD,WAAW,EAAE,SAAS,CAAC,GAAG,EAAE,sBAAsB,CAAC;QACnD,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@kubbisec/chat-memory/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { addChatMemoryTurn, forgetAllChatMemory, forgetChatMemory, getMemoryStatus, listChatMemories, type MemoryStatus, resetChatMemoryStoreForTests, searchChatMemory, } from "./client.js";
+export { type ChatMode, envFlagOn, isMemoryEnabled, isSkillRouterEnabled, type KubbisecAiFeatureFlags, parseChatMode, resolveFeatureFlags, } from "./feature-flags.js";
+export { MEMORY_BLOCKLIST, sanitizeMemoryText } from "./sanitizer.js";
+export { resolveMemoryDir } from "./storage-paths.js";
+export type { MemoryAllowedTopic, MemoryRecord, MemoryScope, SanitizeResult } from "./types.js";
+export { MEMORY_ALLOWED_TOPICS } from "./types.js";
+export declare const MEMORY_INJECT_HEADER = "## KubbiSec \u2014 mem\u00F3rias relevantes\n";
+export declare function buildMemoryInjectBlock(memories: Array<{
+    text: string;
+}>, maxBytes?: number): string;
+export declare function extractRememberCandidates(userMessage: string, assistantMessage: string): string[];
+//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@kubbisec/chat-memory/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,KAAK,YAAY,EACjB,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,QAAQ,EACb,SAAS,EACT,eAAe,EACf,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,aAAa,EACb,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,eAAO,MAAM,oBAAoB,kDAAwC,CAAC;AAE1E,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,QAAQ,SAAO,GAAG,MAAM,CAYjG;AA0CD,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,MAAM,EAAE,CAiCjG"}