@kubbisec/ai-linux-x64 0.1.3 → 0.1.5

package/bundled/extensions/kubbisec-github-local.extension.js

@@ -0,0 +1,105 @@
+/**
+ * Local GitHub/gh tools — only when user opted in: KUBBISEC_CHAT_EXTENDED_CONTEXT=1
+ */
+import { spawn } from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { Type } from "@earendil-works/pi-ai";
+function extendedContextEnabled() {
+    return process.env.KUBBISEC_CHAT_EXTENDED_CONTEXT === "1";
+}
+function resolveWorkspace() {
+    const fromEnv = process.env.KUBBISEC_LOCAL_WORKSPACE?.trim() ||
+        process.env.KUBBISEC_AI_WORKSPACE?.trim();
+    return fromEnv ? path.resolve(fromEnv) : process.cwd();
+}
+function execCapture(bin, args, cwd) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(bin, args, {
+            cwd,
+            env: {
+                ...process.env,
+                GIT_TERMINAL_PROMPT: "0",
+                GH_PROMPT_DISABLED: "1",
+            },
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (c) => {
+            stdout += String(c);
+        });
+        child.stderr?.on("data", (c) => {
+            stderr += String(c);
+        });
+        child.on("error", reject);
+        child.on("close", (code) => resolve({ code: code ?? 1, stdout, stderr }));
+    });
+}
+function denyExtended() {
+    return {
+        content: [
+            {
+                type: "text",
+                text: "Extended local context is disabled. Restart with: kubbisec chat --extended-context [-w <workspace>]",
+            },
+        ],
+    };
+}
+export default function kubbisecGithubLocal(api) {
+    api.registerTool({
+        name: "github_local_status",
+        label: "GitHub local status",
+        description: "Reports gh auth and git remote on this machine (requires kubbisec chat --extended-context).",
+        parameters: Type.Object({}),
+        async execute() {
+            if (!extendedContextEnabled())
+                return denyExtended();
+            const cwd = resolveWorkspace();
+            const parts = [`workspace: ${cwd}`];
+            try {
+                const gh = await execCapture("gh", ["auth", "status"], cwd);
+                parts.push(`gh auth status (exit ${gh.code}):\n${gh.stdout}\n${gh.stderr}`.trim());
+            }
+            catch {
+                parts.push("gh: not installed or not on PATH");
+            }
+            if (fs.existsSync(path.join(cwd, ".git"))) {
+                const remote = await execCapture("git", ["remote", "-v"], cwd);
+                const branch = await execCapture("git", ["branch", "--show-current"], cwd);
+                parts.push(`git remote:\n${remote.stdout.trim() || remote.stderr.trim()}`);
+                parts.push(`git branch: ${branch.stdout.trim() || "(detached)"}`);
+            }
+            else {
+                parts.push("git: no .git in workspace (clone via kubsec_github_repository + remediation flow)");
+            }
+            return { content: [{ type: "text", text: parts.join("\n\n") }] };
+        },
+    });
+    api.registerTool({
+        name: "github_local_repo_summary",
+        label: "GitHub local repo summary",
+        description: "Lists top-level files and recent git log in workspace (requires --extended-context).",
+        parameters: Type.Object({}),
+        async execute() {
+            if (!extendedContextEnabled())
+                return denyExtended();
+            const cwd = resolveWorkspace();
+            const entries = fs.existsSync(cwd)
+                ? fs.readdirSync(cwd, { withFileTypes: true }).slice(0, 40).map((e) => (e.isDirectory() ? `${e.name}/` : e.name))
+                : [];
+            let logOut = "";
+            if (fs.existsSync(path.join(cwd, ".git"))) {
+                const log = await execCapture("git", ["log", "-5", "--oneline"], cwd);
+                logOut = log.stdout.trim() || log.stderr.trim();
+            }
+            const text = [
+                `workspace: ${cwd}`,
+                `entries: ${entries.join(", ") || "(empty)"}`,
+                logOut ? `recent commits:\n${logOut}` : "no git history",
+            ].join("\n\n");
+            return { content: [{ type: "text", text }] };
+        },
+    });
+}
+//# sourceMappingURL=kubbisec-github-local.extension.js.map

package/bundled/extensions/kubbisec-github-local.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-github-local.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-github-local.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,SAAS,sBAAsB;IAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,GAAG,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;QAC5C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAClB,GAAW,EACX,IAAc,EACd,GAAW;IAEX,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG;YACH,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,mBAAmB,EAAE,GAAG;gBACxB,kBAAkB,EAAE,GAAG;aACxB;YACD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YAC7B,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YAC7B,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAuBD,SAAS,YAAY;IACnB,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EACF,qGAAqG;aACxG;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,mBAAmB,CAAC,GAAiB;IAC3D,GAAG,CAAC,YAAY,CAAC;QACf,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACT,6FAA6F;QAC/F,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,OAAO;YACX,IAAI,CAAC,sBAAsB,EAAE;gBAAE,OAAO,YAAY,EAAE,CAAC;YAErD,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAa,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;YAE9C,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC5D,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACjD,CAAC;YAED,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC/D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC3E,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC3E,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,EAAE,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;YAClG,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACnE,CAAC;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,YAAY,CAAC;QACf,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,sFAAsF;QACxF,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,OAAO;YACX,IAAI,CAAC,sBAAsB,EAAE;gBAAE,OAAO,YAAY,EAAE,CAAC;YAErD,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAChC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjH,CAAC,CAAC,EAAE,CAAC;YAEP,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;gBACtE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAClD,CAAC;YAED,MAAM,IAAI,GAAG;gBACX,cAAc,GAAG,EAAE;gBACnB,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE;gBAC7C,MAAM,CAAC,CAAC,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC,CAAC,gBAAgB;aACzD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-memory.extension.d.ts

@@ -0,0 +1,12 @@
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: ExtensionContext) => void | Promise<unknown>) => void;
+};
+type ExtensionContext = {
+    hasUI: boolean;
+    ui: {
+        setStatus: (key: string, text: string | undefined) => void;
+    };
+};
+export default function kubbisecMemory(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-memory.extension.d.ts.map

package/bundled/extensions/kubbisec-memory.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-memory.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-memory.extension.ts"],"names":[],"mappings":"AAYA,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CACF,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KACxE,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE;QACF,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;KAC5D,CAAC;CACH,CAAC;AAkDF,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CA2E9D"}

package/bundled/extensions/kubbisec-memory.extension.js

@@ -0,0 +1,107 @@
+/**
+ * KubbiSec memory extension — recall before turn, remember after turn.
+ */
+import { addChatMemoryTurn, buildMemoryInjectBlock, extractRememberCandidates, isMemoryEnabled, searchChatMemory, } from "@kubbisec/chat-memory";
+function resolveMemoryScope() {
+    const organizationId = process.env.KUBBISEC_ORG_ID?.trim();
+    const userId = process.env.KUBBISEC_USER_ID?.trim() ?? process.env.KUBBISEC_CLIENT_ID?.trim();
+    if (!organizationId || !userId)
+        return null;
+    const projectId = process.env.KUBBISEC_PROJECT_ID?.trim();
+    return {
+        organizationId,
+        userId,
+        ...(projectId ? { projectId } : {}),
+    };
+}
+function extractTextContent(content) {
+    if (typeof content === "string")
+        return content;
+    if (!Array.isArray(content))
+        return "";
+    return content
+        .filter((block) => typeof block === "object" && block !== null)
+        .filter((block) => block.type === "text" && typeof block.text === "string")
+        .map((block) => block.text ?? "")
+        .join("\n");
+}
+function lastUserMessage(messages) {
+    for (let i = messages.length - 1; i >= 0; i -= 1) {
+        const msg = messages[i];
+        if (msg?.role === "user") {
+            return extractTextContent(msg.content);
+        }
+    }
+    return "";
+}
+export default function kubbisecMemory(api) {
+    let lastUserPrompt = "";
+    api.on("before_agent_start", async (event) => {
+        if (!isMemoryEnabled())
+            return undefined;
+        const scope = resolveMemoryScope();
+        if (!scope)
+            return undefined;
+        const { prompt } = event;
+        lastUserPrompt = prompt;
+        try {
+            const memories = await Promise.race([
+                searchChatMemory(scope, prompt, 5),
+                new Promise((_, reject) => {
+                    setTimeout(() => reject(new Error("recall_timeout")), 3000);
+                }),
+            ]);
+            const block = buildMemoryInjectBlock(memories);
+            if (!block)
+                return undefined;
+            return {
+                message: {
+                    customType: "kubbisec-memory-inject",
+                    content: block,
+                    display: false,
+                },
+            };
+        }
+        catch {
+            return undefined;
+        }
+    });
+    api.on("turn_end", async (event, ctx) => {
+        if (!isMemoryEnabled())
+            return;
+        if (!lastUserPrompt || lastUserPrompt.length < 20)
+            return;
+        const scope = resolveMemoryScope();
+        if (!scope)
+            return;
+        const turn = event;
+        if (turn.message.role !== "assistant")
+            return;
+        const assistantText = extractTextContent(turn.message.content);
+        const candidates = extractRememberCandidates(lastUserPrompt, assistantText);
+        for (const candidate of candidates) {
+            await addChatMemoryTurn(scope, candidate);
+        }
+        if (ctx.hasUI && candidates.length > 0) {
+            ctx.ui.setStatus("kubbisec-memory", `memory · ${candidates.length}`);
+        }
+    });
+    api.on("agent_end", async (event) => {
+        if (!isMemoryEnabled())
+            return;
+        const scope = resolveMemoryScope();
+        if (!scope)
+            return;
+        const agentEnd = event;
+        const userText = lastUserMessage(agentEnd.messages);
+        const assistantMsg = [...agentEnd.messages].reverse().find((m) => m.role === "assistant");
+        const assistantText = assistantMsg ? extractTextContent(assistantMsg.content) : "";
+        if (!userText || userText.length < 20)
+            return;
+        const candidates = extractRememberCandidates(userText, assistantText);
+        for (const candidate of candidates) {
+            await addChatMemoryTurn(scope, candidate);
+        }
+    });
+}
+//# sourceMappingURL=kubbisec-memory.extension.js.map

package/bundled/extensions/kubbisec-memory.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-memory.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-memory.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,GAEjB,MAAM,uBAAuB,CAAC;AA+B/B,SAAS,kBAAkB;IACzB,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAC9F,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAC1D,OAAO;QACL,cAAc;QACd,MAAM;QACN,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAA4C,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;SACxG,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;SAC1E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;SAChC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,QAAmC;IAC1D,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,GAAG,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,GAAiB;IACtD,IAAI,cAAc,GAAG,EAAE,CAAC;IAExB,GAAG,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC3C,IAAI,CAAC,eAAe,EAAE;YAAE,OAAO,SAAS,CAAC;QAEzC,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,MAAM,EAAE,MAAM,EAAE,GAAG,KAA8B,CAAC;QAClD,cAAc,GAAG,MAAM,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAClC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClC,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC9D,CAAC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAE7B,OAAO;gBACL,OAAO,EAAE;oBACP,UAAU,EAAE,wBAAwB;oBACpC,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,KAAK;iBACf;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,eAAe,EAAE;YAAE,OAAO;QAC/B,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO;QAE1D,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,IAAI,GAAG,KAAqB,CAAC;QACnC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO;QAE9C,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,yBAAyB,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;QAE5E,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,YAAY,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,CAAC,eAAe,EAAE;YAAE,OAAO;QAE/B,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,QAAQ,GAAG,KAAsB,CAAC;QACxC,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAC1F,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO;QAE9C,MAAM,UAAU,GAAG,yBAAyB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACtE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-naus-local.extension.d.ts

@@ -0,0 +1,17 @@
+type ExtensionApi = {
+    registerTool: (def: {
+        name: string;
+        label: string;
+        description: string;
+        parameters: unknown;
+        execute: (toolCallId: string, params: Record<string, unknown>, signal: AbortSignal) => Promise<{
+            content: Array<{
+                type: "text";
+                text: string;
+            }>;
+        }>;
+    }) => void;
+};
+export default function kubbisecNausLocal(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-naus-local.extension.d.ts.map

package/bundled/extensions/kubbisec-naus-local.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-naus-local.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-naus-local.extension.ts"],"names":[],"mappings":"AAcA,KAAK,YAAY,GAAG;IAClB,YAAY,EAAE,CAAC,GAAG,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,CACP,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC;YAAE,OAAO,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC,CAAA;SAAE,CAAC,CAAC;KAClE,KAAK,IAAI,CAAC;CACZ,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAsHjE"}

package/bundled/extensions/kubbisec-naus-local.extension.js

@@ -0,0 +1,125 @@
+/**
+ * Local `naus` CLI tools — only when KUBBISEC_CHAT_EXTENDED_CONTEXT=1
+ */
+import { Type } from "@earendil-works/pi-ai";
+import { denyExtendedContextMessage, execCapture, extendedContextEnabled, formatExecResult, NAUS_LOCAL_RUN_TIMEOUT_MS, resolvePathInWorkspace, resolveWorkspace, } from "./cli-local-shared.js";
+export default function kubbisecNausLocal(api) {
+    api.registerTool({
+        name: "naus_local_status",
+        label: "Naus CLI status",
+        description: "Checks if `naus` is on PATH and shows help excerpt (requires kubbisec chat --extended-context).",
+        parameters: Type.Object({}),
+        async execute() {
+            if (!extendedContextEnabled())
+                return denyExtendedContextMessage();
+            const cwd = resolveWorkspace();
+            const parts = [`workspace: ${cwd}`];
+            try {
+                const which = await execCapture("which", ["naus"], cwd);
+                parts.push(formatExecResult("which", ["naus"], cwd, which));
+                const help = await execCapture("naus", ["--help"], cwd);
+                parts.push(formatExecResult("naus", ["--help"], cwd, help));
+            }
+            catch {
+                parts.push("naus: not installed or not on PATH (npm install -g @kubbisec/naus)");
+            }
+            return { content: [{ type: "text", text: parts.join("\n\n") }] };
+        },
+    });
+    api.registerTool({
+        name: "naus_local_validate",
+        label: "Naus validate file",
+        description: "Runs `naus validate <path>` in the workspace (extended context).",
+        parameters: Type.Object({
+            path: Type.String({ description: "Pipeline YAML path relative to workspace" }),
+        }),
+        async execute(_id, params) {
+            if (!extendedContextEnabled())
+                return denyExtendedContextMessage();
+            const cwd = resolveWorkspace();
+            const filePath = resolvePathInWorkspace(String(params.path), cwd);
+            try {
+                const result = await execCapture("naus", ["validate", filePath], cwd);
+                return {
+                    content: [{ type: "text", text: formatExecResult("naus", ["validate", filePath], cwd, result) }],
+                };
+            }
+            catch (err) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: err instanceof Error ? err.message : String(err),
+                        },
+                    ],
+                };
+            }
+        },
+    });
+    api.registerTool({
+        name: "naus_local_plan",
+        label: "Naus plan pipeline",
+        description: "Runs `naus plan <path>` (optional mermaid format) in the workspace.",
+        parameters: Type.Object({
+            path: Type.String({ description: "Pipeline YAML path relative to workspace" }),
+            format: Type.Optional(Type.Union([Type.Literal("text"), Type.Literal("mermaid")], {
+                description: "Output format (default text)",
+            })),
+        }),
+        async execute(_id, params) {
+            if (!extendedContextEnabled())
+                return denyExtendedContextMessage();
+            const cwd = resolveWorkspace();
+            const filePath = resolvePathInWorkspace(String(params.path), cwd);
+            const fmt = params.format === "mermaid" ? "mermaid" : "text";
+            const args = ["plan", filePath, "--format", fmt];
+            try {
+                const result = await execCapture("naus", args, cwd);
+                return {
+                    content: [{ type: "text", text: formatExecResult("naus", args, cwd, result) }],
+                };
+            }
+            catch (err) {
+                return {
+                    content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }],
+                };
+            }
+        },
+    });
+    api.registerTool({
+        name: "naus_local_run",
+        label: "Naus run pipeline locally",
+        description: "Runs `naus run <path>` on this machine (up to 15 min). Prefer cloud `trigger_run` for KubbiSec CI.",
+        parameters: Type.Object({
+            path: Type.String({ description: "Pipeline YAML path relative to workspace" }),
+        }),
+        async execute(_id, params, signal) {
+            if (!extendedContextEnabled())
+                return denyExtendedContextMessage();
+            const cwd = resolveWorkspace();
+            const filePath = resolvePathInWorkspace(String(params.path), cwd);
+            const args = ["run", filePath];
+            try {
+                const result = await execCapture("naus", args, cwd, {
+                    signal,
+                    timeoutMs: NAUS_LOCAL_RUN_TIMEOUT_MS,
+                });
+                const note = "\n\nNote: for KubbiSec-hosted CI use API tool trigger_run after set_pipeline_yaml.";
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: formatExecResult("naus", args, cwd, result) + note,
+                        },
+                    ],
+                };
+            }
+            catch (err) {
+                return {
+                    content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }],
+                };
+            }
+        },
+    });
+}
+//# sourceMappingURL=kubbisec-naus-local.extension.js.map

package/bundled/extensions/kubbisec-naus-local.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-naus-local.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-naus-local.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EACL,0BAA0B,EAC1B,WAAW,EACX,sBAAsB,EACtB,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAgB/B,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,GAAiB;IACzD,GAAG,CAAC,YAAY,CAAC;QACf,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,iGAAiG;QACnG,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,OAAO;YACX,IAAI,CAAC,sBAAsB,EAAE;gBAAE,OAAO,0BAA0B,EAAE,CAAC;YACnE,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAa,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;gBACxD,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;gBACxD,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACnE,CAAC;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,YAAY,CAAC;QACf,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,kEAAkE;QAC/E,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;SAC/E,CAAC;QACF,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM;YACvB,IAAI,CAAC,sBAAsB,EAAE;gBAAE,OAAO,0BAA0B,EAAE,CAAC;YACnE,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAClE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;gBACtE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;iBACjG,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;yBACvD;qBACF;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,YAAY,CAAC;QACf,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,qEAAqE;QAClF,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;YAC9E,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE;gBAC1D,WAAW,EAAE,8BAA8B;aAC5C,CAAC,CACH;SACF,CAAC;QACF,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM;YACvB,IAAI,CAAC,sBAAsB,EAAE;gBAAE,OAAO,0BAA0B,EAAE,CAAC;YACnE,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7D,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACpD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;iBAC/E,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;iBACpF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,YAAY,CAAC;QACf,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,oGAAoG;QACtG,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;SAC/E,CAAC;QACF,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM;YAC/B,IAAI,CAAC,sBAAsB,EAAE;gBAAE,OAAO,0BAA0B,EAAE,CAAC;YACnE,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE;oBAClD,MAAM;oBACN,SAAS,EAAE,yBAAyB;iBACrC,CAAC,CAAC;gBACH,MAAM,IAAI,GACR,oFAAoF,CAAC;gBACvF,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI;yBACzD;qBACF;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;iBACpF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-platform-tools.extension.d.ts

@@ -0,0 +1,27 @@
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: ExtensionContext) => void | Promise<void>) => void;
+    registerTool: (def: {
+        name: string;
+        label: string;
+        description: string;
+        parameters: unknown;
+        execute: (toolCallId: string, params: Record<string, unknown>, signal: AbortSignal, onUpdate: unknown, ctx: ExtensionContext) => Promise<{
+            content: Array<{
+                type: "text";
+                text: string;
+            }>;
+            details?: unknown;
+        }>;
+    }) => void;
+};
+type ExtensionContext = {
+    ui?: {
+        notify: (message: string, level: string) => void;
+        setStatus: (key: string, text: string | undefined) => void;
+    };
+};
+export declare function extractVulnerabilityIdFromParams(params: Record<string, unknown>): string | undefined;
+export declare function catalogParametersSchema(parameters: Record<string, unknown>): unknown;
+export default function kubbisecPlatformTools(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-platform-tools.extension.d.ts.map

package/bundled/extensions/kubbisec-platform-tools.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-platform-tools.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-platform-tools.extension.ts"],"names":[],"mappings":"AAiBA,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACtG,YAAY,EAAE,CAAC,GAAG,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,CACP,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,OAAO,EACjB,GAAG,EAAE,gBAAgB,KAClB,OAAO,CAAC;YAAE,OAAO,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KACrF,KAAK,IAAI,CAAC;CACZ,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,EAAE,CAAC,EAAE;QACH,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QACjD,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;KAC5D,CAAC;CACH,CAAC;AA8BF,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAMpB;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAKpF;AA4BD,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAwFrE"}

package/bundled/extensions/kubbisec-platform-tools.extension.js

@@ -0,0 +1,144 @@
+/**
+ * Registers KubbiSec DevSecOps assistant tools from the API catalog (session_start).
+ */
+import * as fs from "node:fs";
+import { getKubbisecConfigPath } from "@kubbisec/home";
+import { Type } from "@earendil-works/pi-ai";
+const MAX_TOOL_RESULT_CHARS = 24_000;
+function resolveApiBaseUrl() {
+    const raw = process.env.KUBBISEC_API_URL?.trim() ||
+        process.env.KUBBISEC_AI_API_URL?.trim() ||
+        process.env.ASPM_API_URL?.trim();
+    return raw?.replace(/\/$/, "");
+}
+function resolveApiKey() {
+    return (process.env.KUBBISEC_API_KEY?.trim() ||
+        process.env.KUBBISEC_JOB_TOKEN?.trim() ||
+        process.env.OPENAI_API_KEY?.trim());
+}
+function readDefaultProjectId() {
+    const fromEnv = process.env.KUBBISEC_CONTEXT_PROJECT_ID?.trim();
+    if (fromEnv)
+        return fromEnv;
+    try {
+        const raw = fs.readFileSync(getKubbisecConfigPath(), "utf8");
+        const parsed = JSON.parse(raw);
+        return parsed.defaultProject?.trim() || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function extractVulnerabilityIdFromParams(params) {
+    const id = (typeof params.vulnerabilityId === "string" ? params.vulnerabilityId.trim() : "") ||
+        (typeof params.vulnerability_id === "string" ? params.vulnerability_id.trim() : "") ||
+        "";
+    return id || undefined;
+}
+export function catalogParametersSchema(parameters) {
+    if (parameters && typeof parameters === "object" && Object.keys(parameters).length > 0) {
+        return parameters;
+    }
+    return Type.Object({});
+}
+function truncateToolText(text) {
+    if (text.length <= MAX_TOOL_RESULT_CHARS)
+        return text;
+    return `${text.slice(0, MAX_TOOL_RESULT_CHARS)}\n\n…[truncated ${text.length - MAX_TOOL_RESULT_CHARS} chars]`;
+}
+function catalogHeaders(apiKey) {
+    const headers = {
+        "x-api-key": apiKey,
+        "Content-Type": "application/json",
+    };
+    const orgId = process.env.KUBBISEC_ORG_ID?.trim();
+    if (orgId)
+        headers["x-organization-id"] = orgId;
+    return headers;
+}
+async function fetchCatalog(baseUrl, apiKey) {
+    const res = await fetch(`${baseUrl}/v1/ai/assistant/tools/catalog`, {
+        headers: catalogHeaders(apiKey),
+    });
+    if (!res.ok) {
+        throw new Error(`catalog HTTP ${res.status}`);
+    }
+    const body = (await res.json());
+    return (body.tools ?? []).filter((t) => t.available);
+}
+export default function kubbisecPlatformTools(api) {
+    let activeVulnerabilityId;
+    function buildToolContext() {
+        const projectId = readDefaultProjectId();
+        const ctx = projectId ? { projectId, mode: "draft" } : {};
+        if (process.env.KUBBISEC_CHAT_EXTENDED_CONTEXT === "1") {
+            ctx.allowExtendedLocalContext = true;
+            const ws = process.env.KUBBISEC_LOCAL_WORKSPACE?.trim() ||
+                process.env.KUBBISEC_AI_WORKSPACE?.trim();
+            if (ws)
+                ctx.localWorkspacePath = ws;
+        }
+        if (activeVulnerabilityId) {
+            ctx.vulnerabilityId = activeVulnerabilityId;
+            ctx.finding = { vulnerabilityId: activeVulnerabilityId };
+        }
+        return ctx;
+    }
+    async function executeRemoteTool(baseUrl, apiKey, name, args) {
+        const remembered = extractVulnerabilityIdFromParams(args);
+        if (remembered)
+            activeVulnerabilityId = remembered;
+        const res = await fetch(`${baseUrl}/v1/ai/assistant/tools/execute`, {
+            method: "POST",
+            headers: catalogHeaders(apiKey),
+            body: JSON.stringify({
+                name,
+                arguments: args,
+                context: buildToolContext(),
+            }),
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => "");
+            throw new Error(`execute HTTP ${res.status}: ${text.slice(0, 200)}`);
+        }
+        return (await res.json());
+    }
+    api.on("session_start", async (_event, ctx) => {
+        activeVulnerabilityId = undefined;
+        const baseUrl = resolveApiBaseUrl();
+        const apiKey = resolveApiKey();
+        if (!baseUrl || !apiKey) {
+            ctx.ui?.setStatus("kubbisec-tools", "tools skipped");
+            ctx.ui?.notify("KubbiSec platform tools skipped (set KUBBISEC_API_URL + KUBBISEC_API_KEY)", "warning");
+            return;
+        }
+        let tools;
+        try {
+            tools = await fetchCatalog(baseUrl, apiKey);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            ctx.ui?.setStatus("kubbisec-tools", "tools unavailable");
+            ctx.ui?.notify(`Could not load KubbiSec tool catalog: ${message}`, "warning");
+            return;
+        }
+        for (const tool of tools) {
+            api.registerTool({
+                name: tool.name,
+                label: tool.name,
+                description: tool.description,
+                parameters: catalogParametersSchema(tool.parameters),
+                async execute(_toolCallId, params) {
+                    const remote = await executeRemoteTool(baseUrl, apiKey, tool.name, params);
+                    const text = truncateToolText(JSON.stringify(remote.result, null, 2));
+                    return {
+                        content: [{ type: "text", text }],
+                        details: { ok: remote.ok, name: tool.name },
+                    };
+                },
+            });
+        }
+        ctx.ui?.setStatus("kubbisec-tools", `${tools.length} tools`);
+    });
+}
+//# sourceMappingURL=kubbisec-platform-tools.extension.js.map

package/bundled/extensions/kubbisec-platform-tools.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-platform-tools.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-platform-tools.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAiCrC,SAAS,iBAAiB;IACxB,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE;QACpC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IACnC,OAAO,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE;QACpC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,qBAAqB,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgC,CAAC;QAC9D,OAAO,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,MAA+B;IAE/B,MAAM,EAAE,GACN,CAAC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,CAAC,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,EAAE,CAAC;IACL,OAAO,EAAE,IAAI,SAAS,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAmC;IACzE,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,MAAM,IAAI,qBAAqB;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,IAAI,CAAC,MAAM,GAAG,qBAAqB,SAAS,CAAC;AAChH,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,OAAO,GAA2B;QACtC,WAAW,EAAE,MAAM;QACnB,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,KAAK;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc;IACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,gCAAgC,EAAE;QAClE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAiB;IAC7D,IAAI,qBAAyC,CAAC;IAE9C,SAAS,gBAAgB;QACvB,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;QACzC,MAAM,GAAG,GAA4B,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,GAAG,EAAE,CAAC;YACvD,GAAG,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACrC,MAAM,EAAE,GACN,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE;gBAC5C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;YAC5C,IAAI,EAAE;gBAAE,GAAG,CAAC,kBAAkB,GAAG,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,qBAAqB,EAAE,CAAC;YAC1B,GAAG,CAAC,eAAe,GAAG,qBAAqB,CAAC;YAC5C,GAAG,CAAC,OAAO,GAAG,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,UAAU,iBAAiB,CAC9B,OAAe,EACf,MAAc,EACd,IAAY,EACZ,IAA6B;QAE7B,MAAM,UAAU,GAAG,gCAAgC,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,UAAU;YAAE,qBAAqB,GAAG,UAAU,CAAC;QAEnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,gCAAgC,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI;gBACJ,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,gBAAgB,EAAE;aAC5B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqC,CAAC;IAChE,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,qBAAqB,GAAG,SAAS,CAAC;QAElC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;YACrD,GAAG,CAAC,EAAE,EAAE,MAAM,CACZ,2EAA2E,EAC3E,SAAS,CACV,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;YACzD,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,yCAAyC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,YAAY,CAAC;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,IAAI;gBAChB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC;gBACpD,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM;oBAC/B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAC3E,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;oBACtE,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;wBACjC,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;qBAC5C,CAAC;gBACJ,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAED,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,gBAAgB,EAAE,GAAG,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-runtime-status.extension.d.ts

@@ -0,0 +1,13 @@
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: ExtensionContext) => void | Promise<void>) => void;
+};
+type ExtensionContext = {
+    hasUI: boolean;
+    cwd: string;
+    ui: {
+        setStatus: (key: string, text: string | undefined) => void;
+    };
+};
+export default function kubbisecRuntimeStatus(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-runtime-status.extension.d.ts.map

package/bundled/extensions/kubbisec-runtime-status.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-runtime-status.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-runtime-status.extension.ts"],"names":[],"mappings":"AAQA,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;CACvG,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE;QACF,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;KAC5D,CAAC;CACH,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAarE"}

package/bundled/extensions/kubbisec-runtime-status.extension.js

@@ -0,0 +1,18 @@
+/**
+ * Footer status for loaded context file (AGENTS.md / CLAUDE.md) — not shown in chat startup listing.
+ */
+import { findAgentsContextFile, formatKubbisecContextStatus, } from "../config/resolve-agents-context-file.js";
+export default function kubbisecRuntimeStatus(api) {
+    api.on("session_start", async (_event, ctx) => {
+        if (!ctx.hasUI)
+            return;
+        const agentsFile = findAgentsContextFile(ctx.cwd);
+        if (!agentsFile) {
+            ctx.ui.setStatus("kubbisec-ctx", undefined);
+            return;
+        }
+        const home = process.env.HOME || process.env.USERPROFILE;
+        ctx.ui.setStatus("kubbisec-ctx", formatKubbisecContextStatus(agentsFile, home));
+    });
+}
+//# sourceMappingURL=kubbisec-runtime-status.extension.js.map

package/bundled/extensions/kubbisec-runtime-status.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-runtime-status.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-runtime-status.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0CAA0C,CAAC;AAclD,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAiB;IAC7D,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QAEvB,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACzD,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC"}