@kubbisec/ai-linux-x64 0.1.3 → 0.1.5

package/bundled/extensions/kubbisec-scope.extension.d.ts

@@ -0,0 +1,14 @@
+type ExtensionApi = {
+    on: (event: string, handler: (event: {
+        type?: string;
+        content?: string;
+    }, ctx: ExtensionContext) => void | Promise<void>) => void;
+};
+type ExtensionContext = {
+    ui?: {
+        notify: (message: string, level: string) => void;
+    };
+};
+export default function kubbisecScope(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-scope.extension.d.ts.map

package/bundled/extensions/kubbisec-scope.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-scope.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-scope.extension.ts"],"names":[],"mappings":"AAIA,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;CACnI,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,EAAE,CAAC,EAAE;QAAE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CAC3D,CAAC;AAIF,MAAM,CAAC,OAAO,UAAU,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAQ7D"}

package/bundled/extensions/kubbisec-scope.extension.js

@@ -0,0 +1,14 @@
+/** Soft guard: only nudge on clearly non-technical chit-chat; platform/NAUS questions use tools. */
+const OFF_TOPIC_HINT = "This looks like general chat. For KubbiSec product or pipeline help, ask about ASPM, NAUS, findings, or CI — tools can fetch real docs and data.";
+const OFF_TOPIC_PATTERNS = [/\bwrite (me )?a poem\b/i, /\btell (me )?a joke\b/i, /\bplay a game\b/i];
+export default function kubbisecScope(api) {
+    api.on("before_user_message", async (event, ctx) => {
+        const text = typeof event.content === "string" ? event.content.trim() : "";
+        if (!text || text.startsWith("/"))
+            return;
+        if (OFF_TOPIC_PATTERNS.some((p) => p.test(text)) && text.length < 80) {
+            ctx.ui?.notify(OFF_TOPIC_HINT, "info");
+        }
+    });
+}
+//# sourceMappingURL=kubbisec-scope.extension.js.map

package/bundled/extensions/kubbisec-scope.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-scope.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-scope.extension.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,MAAM,cAAc,GAClB,kJAAkJ,CAAC;AAUrJ,MAAM,kBAAkB,GAAG,CAAC,yBAAyB,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,CAAC;AAErG,MAAM,CAAC,OAAO,UAAU,aAAa,CAAC,GAAiB;IACrD,GAAG,CAAC,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1C,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-skill-mentions.extension.d.ts

@@ -0,0 +1,24 @@
+/**
+ * KubbiSec skills: invoke with `@skill <name>` (autocomplete) instead of `/skill:name` in the slash menu.
+ */
+import type { AutocompleteProvider } from "@earendil-works/pi-tui";
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: ExtensionContext) => void | Promise<void | InputEventResult>) => void;
+};
+type ExtensionContext = {
+    hasUI: boolean;
+    ui: {
+        addAutocompleteProvider: (factory: (current: AutocompleteProvider) => AutocompleteProvider) => void;
+    };
+};
+type InputEventResult = {
+    action: "continue";
+} | {
+    action: "transform";
+    text: string;
+} | {
+    action: "handled";
+};
+export default function kubbisecSkillMentions(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-skill-mentions.extension.d.ts.map

package/bundled/extensions/kubbisec-skill-mentions.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-skill-mentions.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-skill-mentions.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAUnE,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CACF,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,GAAG,gBAAgB,CAAC,KACxF,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE;QACF,uBAAuB,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,oBAAoB,KAAK,IAAI,CAAC;KACrG,CAAC;CACH,CAAC;AAMF,KAAK,gBAAgB,GACjB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAmC1B,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAsBrE"}

package/bundled/extensions/kubbisec-skill-mentions.extension.js

@@ -0,0 +1,54 @@
+import { listBundledKubbisecSkills } from "../skills/list-bundled-skills.js";
+import { applySkillMentionCompletion, extractSkillMentionPrefix, filterSkillSuggestions, parseSkillMentionPrefix, transformChatMentions, } from "../skills/chat-mentions.js";
+function wrapAutocompleteProvider(current, skills) {
+    return {
+        async getSuggestions(lines, cursorLine, cursorCol, options) {
+            const textBeforeCursor = (lines[cursorLine] ?? "").slice(0, cursorCol);
+            const atPrefix = extractSkillMentionPrefix(textBeforeCursor);
+            const skillMention = parseSkillMentionPrefix(atPrefix);
+            if (skillMention && atPrefix) {
+                const items = filterSkillSuggestions(skills, skillMention.query);
+                if (items.length === 0)
+                    return null;
+                return { items, prefix: atPrefix };
+            }
+            return current.getSuggestions(lines, cursorLine, cursorCol, options);
+        },
+        applyCompletion(lines, cursorLine, cursorCol, item, prefix) {
+            if (prefix.startsWith("@skill")) {
+                return applySkillMentionCompletion(lines, cursorLine, cursorCol, item, prefix);
+            }
+            return current.applyCompletion(lines, cursorLine, cursorCol, item, prefix);
+        },
+        shouldTriggerFileCompletion(lines, cursorLine, cursorCol) {
+            const textBeforeCursor = (lines[cursorLine] ?? "").slice(0, cursorCol);
+            const atPrefix = extractSkillMentionPrefix(textBeforeCursor);
+            if (parseSkillMentionPrefix(atPrefix)) {
+                return false;
+            }
+            return current.shouldTriggerFileCompletion?.(lines, cursorLine, cursorCol) ?? true;
+        },
+    };
+}
+export default function kubbisecSkillMentions(api) {
+    const skills = listBundledKubbisecSkills();
+    api.on("session_start", async (_event, ctx) => {
+        if (!ctx.hasUI)
+            return;
+        ctx.ui.addAutocompleteProvider((current) => wrapAutocompleteProvider(current, skills));
+    });
+    api.on("input", async (event, _ctx) => {
+        const input = event;
+        const text = typeof input.text === "string" ? input.text : "";
+        const hasMention = text.includes("@skill") || text.includes("@plan") || text.includes("@planejar");
+        if (!hasMention) {
+            return { action: "continue" };
+        }
+        const transformed = transformChatMentions(text);
+        if (transformed === text) {
+            return { action: "continue" };
+        }
+        return { action: "transform", text: transformed };
+    });
+}
+//# sourceMappingURL=kubbisec-skill-mentions.extension.js.map

package/bundled/extensions/kubbisec-skill-mentions.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-skill-mentions.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-skill-mentions.extension.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAyBpC,SAAS,wBAAwB,CAC/B,OAA6B,EAC7B,MAAoD;IAEpD,OAAO;QACL,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO;YACxD,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBACjE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACpC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrC,CAAC;YACD,OAAO,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;QACD,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM;YACxD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChC,OAAO,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7E,CAAC;QACD,2BAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS;YACtD,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;YAC7D,IAAI,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,OAAO,CAAC,2BAA2B,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC;QACrF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,GAAiB;IAC7D,MAAM,MAAM,GAAG,yBAAyB,EAAE,CAAC;IAE3C,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QACvB,GAAG,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,KAAmB,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,UAAU,GACd,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,MAAM,EAAE,UAAU,EAA6B,CAAC;QAC3D,CAAC;QACD,MAAM,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,UAAU,EAA6B,CAAC;QAC3D,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAA6B,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-skill-telemetry.extension.d.ts

@@ -0,0 +1,6 @@
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: unknown) => void | Promise<void>) => void;
+};
+export default function kubbisecSkillTelemetry(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-skill-telemetry.extension.d.ts.map

package/bundled/extensions/kubbisec-skill-telemetry.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-skill-telemetry.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-skill-telemetry.extension.ts"],"names":[],"mappings":"AAKA,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;CAC9F,CAAC;AAgEF,MAAM,CAAC,OAAO,UAAU,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAgCtE"}

package/bundled/extensions/kubbisec-skill-telemetry.extension.js

@@ -0,0 +1,85 @@
+/**
+ * KubbiSec trajectory telemetry — forwards Pi TUI events to parent adapter via JSONL file.
+ */
+import * as fs from "node:fs";
+function isOptOut() {
+    return process.env.KUBBISEC_TELEMETRY_OPT_OUT === "1";
+}
+function eventsPath() {
+    const sessionId = process.env.KUBBISEC_TELEMETRY_SESSION_ID?.trim();
+    const eventsFile = process.env.KUBBISEC_TELEMETRY_EVENTS_PATH?.trim();
+    if (!sessionId || !eventsFile)
+        return null;
+    return eventsFile;
+}
+function shouldEmit(surface) {
+    if (isOptOut())
+        return false;
+    if (surface === "chat" && process.env.KUBBISEC_TELEMETRY_CHAT !== "1") {
+        return process.env.KUBBISEC_SKILL_ROUTER === "1";
+    }
+    if (surface === "fix" && process.env.KUBBISEC_TELEMETRY_FIX !== "1")
+        return false;
+    return true;
+}
+function resolveSurface() {
+    return process.env.KUBBISEC_TELEMETRY_SURFACE === "fix" ? "fix" : "chat";
+}
+const SECRET_ARG_PATTERN = /KUBBISEC_API_KEY|GITHUB_TOKEN|password=/i;
+function scrubToolArgs(args) {
+    const raw = typeof args === "string" ? args : JSON.stringify(args ?? "");
+    if (SECRET_ARG_PATTERN.test(raw)) {
+        return "[REDACTED]";
+    }
+    return args;
+}
+function appendEvent(kind, payload) {
+    const file = eventsPath();
+    if (!file)
+        return;
+    const surface = resolveSurface();
+    if (!shouldEmit(surface))
+        return;
+    try {
+        const line = JSON.stringify({
+            ts: new Date().toISOString(),
+            kind,
+            payload,
+        });
+        fs.appendFileSync(file, `${line}\n`, { encoding: "utf8", mode: 0o600 });
+    }
+    catch {
+        /* swallow — telemetry must not block TUI */
+    }
+}
+export default function kubbisecSkillTelemetry(api) {
+    if (isOptOut() || !eventsPath()) {
+        return;
+    }
+    api.on("input", async (event) => {
+        const input = event;
+        const text = typeof input.text === "string" ? input.text : "";
+        if (!text.trim())
+            return;
+        appendEvent("user_message", { text: text.slice(0, 4096) });
+    });
+    api.on("tool_start", async (event) => {
+        const tool = event;
+        appendEvent("tool_call", {
+            name: tool.name ?? "unknown",
+            args: scrubToolArgs(tool.args),
+        });
+    });
+    api.on("tool_end", async (event) => {
+        const tool = event;
+        const output = typeof tool.output === "string" && tool.output.length > 2048
+            ? `${tool.output.slice(0, 2048)}…`
+            : tool.output;
+        appendEvent("tool_result", {
+            name: tool.name ?? "unknown",
+            exitCode: tool.exitCode ?? null,
+            output,
+        });
+    });
+}
+//# sourceMappingURL=kubbisec-skill-telemetry.extension.js.map

package/bundled/extensions/kubbisec-skill-telemetry.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-skill-telemetry.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-skill-telemetry.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAe9B,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;AACxD,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE,CAAC;IACtE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,OAAuB;IACzC,IAAI,QAAQ,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,EAAE,CAAC;QACtE,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAClF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3E,CAAC;AAED,MAAM,kBAAkB,GACtB,0CAA0C,CAAC;AAE7C,SAAS,aAAa,CAAC,IAAa;IAClC,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAgC;IACjE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,OAAO;SACR,CAAC,CAAC;QACH,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,sBAAsB,CAAC,GAAiB;IAC9D,IAAI,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAChC,OAAO;IACT,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,KAAmB,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QACzB,WAAW,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,KAAkB,CAAC;QAChC,WAAW,CAAC,WAAW,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,KAAkB,CAAC;QAChC,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI;YAC1D,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG;YAClC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAClB,WAAW,CAAC,aAAa,EAAE;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/extensions/kubbisec-ui.extension.d.ts

@@ -0,0 +1,6 @@
+/**
+ * KubbiSec AI shell: branded editor frame (cyan borders) and compact status in the input chrome.
+ */
+import { type ExtensionAPI } from "@earendil-works/pi-coding-agent";
+export default function kubbisecUi(pi: ExtensionAPI): void;
+//# sourceMappingURL=kubbisec-ui.extension.d.ts.map

package/bundled/extensions/kubbisec-ui.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-ui.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-ui.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAgB,KAAK,YAAY,EAAkD,MAAM,iCAAiC,CAAC;AAyClI,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAoGzD"}

package/bundled/extensions/kubbisec-ui.extension.js

@@ -0,0 +1,116 @@
+/**
+ * KubbiSec AI shell: branded editor frame (cyan borders) and compact status in the input chrome.
+ */
+import { CustomEditor } from "@earendil-works/pi-coding-agent";
+import { truncateToWidth, visibleWidth } from "@earendil-works/pi-tui";
+import { KUBBISEC_PRODUCT_NAME, KUBBISEC_RAIL_HINT } from "../copy/kubbisec-shell-copy.js";
+import { isClarifyAsking } from "../clarify/clarify-ui-state.js";
+import { renderLineWithMentionChips } from "../skills/chat-mention-render.js";
+const SPINNER_FRAMES = ["◆", "◇", "◆", "◇"];
+function fitBorder(left, right, width, border, fill = border) {
+    if (width <= 0)
+        return "";
+    if (width === 1)
+        return border("─");
+    let leftText = left;
+    let rightText = right;
+    const fixedWidth = 2;
+    const minimumGap = 3;
+    while (fixedWidth + visibleWidth(leftText) + visibleWidth(rightText) + minimumGap > width &&
+        visibleWidth(rightText) > 0) {
+        rightText = truncateToWidth(rightText, Math.max(0, visibleWidth(rightText) - 1), "");
+    }
+    while (fixedWidth + visibleWidth(leftText) + visibleWidth(rightText) + minimumGap > width &&
+        visibleWidth(leftText) > 0) {
+        leftText = truncateToWidth(leftText, Math.max(0, visibleWidth(leftText) - 1), "");
+    }
+    const gapWidth = Math.max(0, width - fixedWidth - visibleWidth(leftText) - visibleWidth(rightText));
+    return `${border("─")}${leftText}${fill("─".repeat(gapWidth))}${rightText}${border("─")}`;
+}
+export default function kubbisecUi(pi) {
+    let isWorking = false;
+    let spinnerIndex = 0;
+    let spinnerTimer;
+    let activeTui;
+    const stopSpinner = () => {
+        if (spinnerTimer) {
+            clearInterval(spinnerTimer);
+            spinnerTimer = undefined;
+        }
+    };
+    pi.on("agent_start", () => {
+        if (isClarifyAsking()) {
+            isWorking = false;
+            stopSpinner();
+            activeTui?.requestRender();
+            return;
+        }
+        isWorking = true;
+        stopSpinner();
+        spinnerTimer = setInterval(() => {
+            spinnerIndex = (spinnerIndex + 1) % SPINNER_FRAMES.length;
+            activeTui?.requestRender();
+        }, 120);
+        activeTui?.requestRender();
+    });
+    pi.on("agent_end", () => {
+        isWorking = false;
+        stopSpinner();
+        activeTui?.requestRender();
+    });
+    pi.on("session_shutdown", () => {
+        stopSpinner();
+        activeTui = undefined;
+    });
+    pi.on("session_start", (_event, ctx) => {
+        if (!ctx.hasUI)
+            return;
+        ctx.ui.setWorkingVisible(false);
+        ctx.ui.setHiddenThinkingLabel("reasoning");
+        ctx.ui.setWorkingIndicator({ frames: ["◆", "◇", "◆", "◇"], intervalMs: 120 });
+        class KubbisecBorderEditor extends CustomEditor {
+            constructor(tui, theme, keybindings) {
+                super(tui, theme, keybindings, { paddingX: 0 });
+                activeTui = tui;
+            }
+            render(width) {
+                const lines = super.render(width);
+                if (lines.length < 2)
+                    return lines;
+                const thm = ctx.ui.theme;
+                const clarifyActive = isClarifyAsking();
+                const topLeft = clarifyActive
+                    ? thm.fg("warning", " ◆ questionnaire ")
+                    : isWorking
+                        ? thm.fg("accent", ` ${SPINNER_FRAMES[spinnerIndex]} `)
+                        : thm.fg("dim", " kbs ");
+                const topRight = thm.fg("dim", " Assistant ");
+                const borderColor = (text) => thm.fg("borderAccent", text);
+                lines[0] = fitBorder(topLeft, topRight, width, borderColor, (s) => thm.fg("borderMuted", s));
+                for (let i = 1; i < lines.length - 1; i += 1) {
+                    lines[i] = renderLineWithMentionChips(lines[i] ?? "", thm);
+                }
+                lines[lines.length - 1] = fitBorder("", "", width, borderColor, (s) => thm.fg("borderMuted", s));
+                return lines;
+            }
+        }
+        ctx.ui.setEditorComponent((tui, theme, keybindings) => new KubbisecBorderEditor(tui, theme, keybindings));
+        ctx.ui.setWidget("kubbisec-rail", (tui, theme) => {
+            const unsub = () => { };
+            return {
+                dispose: unsub,
+                invalidate() { },
+                render(w) {
+                    const line = theme.fg("borderMuted", "─".repeat(Math.max(0, w)));
+                    const product = typeof theme.bold === "function"
+                        ? theme.bold(theme.fg("accent", KUBBISEC_PRODUCT_NAME))
+                        : theme.fg("accent", KUBBISEC_PRODUCT_NAME);
+                    const body = product + theme.fg("dim", ` · ${KUBBISEC_RAIL_HINT}`);
+                    const pad = Math.max(0, w - visibleWidth(body));
+                    return [truncateToWidth(line, w, ""), truncateToWidth(body + " ".repeat(pad), w, "")];
+                },
+            };
+        }, { placement: "aboveEditor" });
+    });
+}
+//# sourceMappingURL=kubbisec-ui.extension.js.map

package/bundled/extensions/kubbisec-ui.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-ui.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-ui.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,YAAY,EAAqE,MAAM,iCAAiC,CAAC;AAElI,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAE9E,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAE5C,SAAS,SAAS,CACjB,IAAY,EACZ,KAAa,EACb,KAAa,EACb,MAAgC,EAChC,OAAiC,MAAM;IAEvC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,UAAU,GAAG,CAAC,CAAC;IACrB,MAAM,UAAU,GAAG,CAAC,CAAC;IAErB,OACC,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,UAAU,GAAG,KAAK;QAClF,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,EAC1B,CAAC;QACF,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OACC,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,UAAU,GAAG,KAAK;QAClF,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EACzB,CAAC;QACF,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IACpG,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,EAAgB;IAClD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAwD,CAAC;IAC7D,IAAI,SAA0B,CAAC;IAE/B,MAAM,WAAW,GAAG,GAAG,EAAE;QACxB,IAAI,YAAY,EAAE,CAAC;YAClB,aAAa,CAAC,YAAY,CAAC,CAAC;YAC5B,YAAY,GAAG,SAAS,CAAC;QAC1B,CAAC;IACF,CAAC,CAAC;IAEF,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;QACzB,IAAI,eAAe,EAAE,EAAE,CAAC;YACvB,SAAS,GAAG,KAAK,CAAC;YAClB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,aAAa,EAAE,CAAC;YAC3B,OAAO;QACR,CAAC;QACD,SAAS,GAAG,IAAI,CAAC;QACjB,WAAW,EAAE,CAAC;QACd,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YAC/B,YAAY,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC;YAC1D,SAAS,EAAE,aAAa,EAAE,CAAC;QAC5B,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,SAAS,EAAE,aAAa,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;QACvB,SAAS,GAAG,KAAK,CAAC;QAClB,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,aAAa,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC9B,WAAW,EAAE,CAAC;QACd,SAAS,GAAG,SAAS,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO;QAEvB,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChC,GAAG,CAAC,EAAE,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAE9E,MAAM,oBAAqB,SAAQ,YAAY;YAC9C,YAAY,GAAQ,EAAE,KAAkB,EAAE,WAA+B;gBACxE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;gBAChD,SAAS,GAAG,GAAG,CAAC;YACjB,CAAC;YAED,MAAM,CAAC,KAAa;gBACnB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAEnC,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC;gBACzB,MAAM,aAAa,GAAG,eAAe,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,aAAa;oBAC5B,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC;oBACxC,CAAC,CAAC,SAAS;wBACV,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC;wBACvD,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;gBAC9C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBAEnE,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9C,KAAK,CAAC,CAAC,CAAC,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAqD,CAAC,CAAC;gBAC9G,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;gBACjG,OAAO,KAAK,CAAC;YACd,CAAC;SACD;QAED,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;QAE1G,GAAG,CAAC,EAAE,CAAC,SAAS,CACf,eAAe,EACf,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACd,MAAM,KAAK,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YACvB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,UAAU,KAAI,CAAC;gBACf,MAAM,CAAC,CAAS;oBACf,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjE,MAAM,OAAO,GACZ,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU;wBAC/B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;wBACvD,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;oBAC9C,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,kBAAkB,EAAE,CAAC,CAAC;oBACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;oBAChD,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,eAAe,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBACvF,CAAC;aAC0C,CAAC;QAC9C,CAAC,EACD,EAAE,SAAS,EAAE,aAAa,EAAE,CAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/bundled/extensions/kubbisec-workflow.extension.d.ts

@@ -0,0 +1,38 @@
+export type ChatWorkflowMode = "default" | "plan" | "review";
+export type SessionWorkflowState = {
+    mode: ChatWorkflowMode;
+    specApproved: boolean;
+    specPath?: string;
+};
+export declare function isMutationTool(toolName: string): boolean;
+export declare function detectModeFromPrompt(prompt: string, envMode?: string): ChatWorkflowMode;
+export declare function parseRuntimeSpecStatus(content: string): string | null;
+export declare function findApprovedSpec(cwd: string): {
+    approved: boolean;
+    specPath?: string;
+};
+export declare function resolveSpecApproval(cwd: string): {
+    approved: boolean;
+    specPath?: string;
+};
+export declare function shouldBlockMutationTool(state: SessionWorkflowState): boolean;
+export declare function userApprovedSpecKeyword(text: string): boolean;
+export declare function buildPlanModeContextMessage(): string;
+export declare function buildReviewModeContextMessage(): string;
+type ExtensionApi = {
+    on: (event: string, handler: (event: unknown, ctx: ExtensionContext) => void | Promise<unknown>) => void;
+};
+type ExtensionContext = {
+    hasUI: boolean;
+    cwd: string;
+    ui: {
+        notify: (message: string, level?: string) => void;
+        setStatus: (key: string, text: string | undefined) => void;
+        theme: {
+            fg: (role: string, text: string) => string;
+        };
+    };
+};
+export default function kubbisecWorkflow(api: ExtensionApi): void;
+export {};
+//# sourceMappingURL=kubbisec-workflow.extension.d.ts.map

package/bundled/extensions/kubbisec-workflow.extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-workflow.extension.d.ts","sourceRoot":"","sources":["../../src/extensions/kubbisec-workflow.extension.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE7D,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAcF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGxD;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,MAAM,GACf,gBAAgB,CAOlB;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKrE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAoBtF;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAEzF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAE5E;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAWpD;AAED,wBAAgB,6BAA6B,IAAI,MAAM,CAGtD;AAED,KAAK,YAAY,GAAG;IAClB,EAAE,EAAE,CACF,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KACxE,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE;QACF,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAClD,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;QAC3D,KAAK,EAAE;YAAE,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;SAAE,CAAC;KACvD,CAAC;CACH,CAAC;AAwBF,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CA+EhE"}

package/bundled/extensions/kubbisec-workflow.extension.js

@@ -0,0 +1,169 @@
+/**
+ * KubbiSec workflow: /mode:plan HARD-GATE, spec approval, and plan/review session modes.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+const MUTATION_TOOLS = new Set([
+    "edit",
+    "write",
+    "set_pipeline_yaml",
+    "bash",
+    "delete",
+    "patch",
+    "apply_patch",
+]);
+const READ_ONLY_TOOLS = new Set(["read", "grep", "find", "ls", "glob", "questionnaire"]);
+export function isMutationTool(toolName) {
+    if (READ_ONLY_TOOLS.has(toolName))
+        return false;
+    return MUTATION_TOOLS.has(toolName);
+}
+export function detectModeFromPrompt(prompt, envMode) {
+    const trimmed = prompt.trim();
+    if (trimmed.startsWith("/mode:plan"))
+        return "plan";
+    if (trimmed.startsWith("/mode:review"))
+        return "review";
+    const fromEnv = envMode?.trim().toLowerCase();
+    if (fromEnv === "plan" || fromEnv === "review")
+        return fromEnv;
+    return "default";
+}
+export function parseRuntimeSpecStatus(content) {
+    const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    if (!match?.[1])
+        return null;
+    const statusMatch = match[1].match(/^status:\s*(\S+)/m);
+    return statusMatch?.[1]?.trim() ?? null;
+}
+export function findApprovedSpec(cwd) {
+    const specsDir = path.join(cwd, ".kubbisec", "specs");
+    if (!fs.existsSync(specsDir)) {
+        return { approved: false };
+    }
+    for (const entry of fs.readdirSync(specsDir, { withFileTypes: true })) {
+        if (!entry.isFile() || !entry.name.endsWith(".md"))
+            continue;
+        const specPath = path.join(specsDir, entry.name);
+        try {
+            const content = fs.readFileSync(specPath, "utf8");
+            if (parseRuntimeSpecStatus(content) === "approved") {
+                return { approved: true, specPath };
+            }
+        }
+        catch {
+            /* skip unreadable spec */
+        }
+    }
+    return { approved: false };
+}
+export function resolveSpecApproval(cwd) {
+    return findApprovedSpec(cwd);
+}
+export function shouldBlockMutationTool(state) {
+    return state.mode === "plan" && !state.specApproved;
+}
+export function userApprovedSpecKeyword(text) {
+    return /\bapproved\b/i.test(text);
+}
+export function buildPlanModeContextMessage() {
+    return `[PLAN MODE ACTIVE]
+You are in KubbiSec plan mode. Follow the sec-brainstorm then sec-plan workflow.
+
+Restrictions until a runtime spec is approved:
+- Read-only discovery tools are allowed (read, grep, find, ls, questionnaire, catalog tools).
+- Do NOT use edit, write, set_pipeline_yaml, or other mutation tools until \`.kubbisec/specs/<slug>.md\` has \`status: approved\` in YAML frontmatter.
+- Create the spec under \`.kubbisec/specs/\` first; wait for explicit user approval (keyword "approved" or UI confirm).
+- After approval, write the paired plan under \`.kubbisec/plans/<slug>.md\`.
+
+Invoke @skill sec-brainstorm for discovery, then @skill sec-plan for the implementation plan.`;
+}
+export function buildReviewModeContextMessage() {
+    return `[REVIEW MODE ACTIVE]
+Prioritize @skill sec-review for code and security review. Read-only analysis unless the user explicitly requests fixes.`;
+}
+function updateWorkflowStatus(ctx, state) {
+    if (!ctx.hasUI)
+        return;
+    if (state.mode === "plan") {
+        const gate = state.specApproved ? " · spec ok" : " · gate";
+        ctx.ui.setStatus("kubbisec-workflow", ctx.ui.theme.fg("planAccent", `plan${gate}`));
+        return;
+    }
+    if (state.mode === "review") {
+        ctx.ui.setStatus("kubbisec-workflow", ctx.ui.theme.fg("accent", "review"));
+        return;
+    }
+    ctx.ui.setStatus("kubbisec-workflow", undefined);
+}
+export default function kubbisecWorkflow(api) {
+    const state = {
+        mode: "default",
+        specApproved: false,
+    };
+    const syncSpecApproval = (ctx) => {
+        const found = resolveSpecApproval(ctx.cwd);
+        state.specApproved = found.approved;
+        state.specPath = found.specPath;
+        updateWorkflowStatus(ctx, state);
+    };
+    api.on("session_start", async (_event, ctx) => {
+        const envMode = process.env.KUBBISEC_CHAT_MODE;
+        if (envMode === "plan" || envMode === "review") {
+            state.mode = envMode;
+        }
+        syncSpecApproval(ctx);
+        if (ctx.hasUI && state.mode === "plan") {
+            ctx.ui.notify("Plan mode: describe scope with @plan or @skill …", "info");
+        }
+    });
+    api.on("before_agent_start", async (event, ctx) => {
+        const { prompt } = event;
+        const detected = detectModeFromPrompt(prompt, process.env.KUBBISEC_CHAT_MODE);
+        if (detected !== "default") {
+            state.mode = detected;
+        }
+        if (userApprovedSpecKeyword(prompt)) {
+            syncSpecApproval(ctx);
+            if (!state.specApproved) {
+                state.specApproved = true;
+            }
+        }
+        else {
+            syncSpecApproval(ctx);
+        }
+        updateWorkflowStatus(ctx, state);
+        if (state.mode === "plan") {
+            return {
+                message: {
+                    customType: "kubbisec-plan-mode",
+                    content: buildPlanModeContextMessage(),
+                    display: false,
+                },
+            };
+        }
+        if (state.mode === "review") {
+            return {
+                message: {
+                    customType: "kubbisec-review-mode",
+                    content: buildReviewModeContextMessage(),
+                    display: false,
+                },
+            };
+        }
+        return undefined;
+    });
+    api.on("tool_call", async (event, ctx) => {
+        syncSpecApproval(ctx);
+        const { toolName } = event;
+        if (!shouldBlockMutationTool(state) || !isMutationTool(toolName)) {
+            return undefined;
+        }
+        return {
+            block: true,
+            reason: `Plan mode HARD-GATE: mutation tool "${toolName}" blocked until a runtime spec is approved.\n` +
+                `Create or update \`.kubbisec/specs/<slug>.md\` with \`status: approved\` in frontmatter, then confirm with "approved".`,
+        };
+    });
+}
+//# sourceMappingURL=kubbisec-workflow.extension.js.map

package/bundled/extensions/kubbisec-workflow.extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubbisec-workflow.extension.js","sourceRoot":"","sources":["../../src/extensions/kubbisec-workflow.extension.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAUlC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,OAAO;IACP,mBAAmB;IACnB,MAAM;IACN,QAAQ;IACR,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;AAEzF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,OAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,MAAM,CAAC;IACpD,IAAI,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxD,MAAM,OAAO,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACxD,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClD,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;gBACnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAA2B;IACjE,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO;;;;;;;;;8FASqF,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO;yHACgH,CAAC;AAC1H,CAAC;AA2BD,SAAS,oBAAoB,CAAC,GAAqB,EAAE,KAA2B;IAC9E,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO;IACvB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,mBAAmB,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,mBAAmB,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,gBAAgB,CAAC,GAAiB;IACxD,MAAM,KAAK,GAAyB;QAClC,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,KAAK;KACpB,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,GAAqB,EAAQ,EAAE;QACvD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC;QACpC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,GAAG,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC/C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;QACvB,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACvC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,kDAAkD,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,KAA8B,CAAC;QAClD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;QACxB,CAAC;QAED,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBACxB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;YAC5B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEjC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE;oBACP,UAAU,EAAE,oBAAoB;oBAChC,OAAO,EAAE,2BAA2B,EAAE;oBACtC,OAAO,EAAE,KAAK;iBACf;aACF,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE;oBACP,UAAU,EAAE,sBAAsB;oBAClC,OAAO,EAAE,6BAA6B,EAAE;oBACxC,OAAO,EAAE,KAAK;iBACf;aACF,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAsB,CAAC;QAC5C,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EACJ,uCAAuC,QAAQ,+CAA+C;gBAC9F,wHAAwH;SAC3H,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/bundled/gate-system.md

@@ -0,0 +1,27 @@
+# Gate system prompt (SkillOpt port — KubbiSec adaptation)
+
+<!-- origin: SkillOpt OSS gate template -->
+
+## Role
+
+Judge whether a candidate overlay improves the base skill given trajectory evidence.
+
+## Inputs
+
+- Skill: {{skillName}}
+- Base skill: {{baseSkill}}
+- Candidate overlay: {{overlay}}
+- Trajectory summary: {{trajectorySummary}}
+
+## Output
+
+Return JSON only:
+
+```json
+{ "accept": boolean, "reasons": string[] }
+```
+
+## Constraints
+
+- Reject overlays that weaken security guidance.
+- Reject edits that contradict HARD-GATE rules.