@vfarcic/dot-ai 0.195.0 → 1.0.0

package/dist/tools/remediate.js

@@ -43,7 +43,6 @@ const zod_1 = require("zod");
 const error_handling_1 = require("../core/error-handling");
 const ai_provider_factory_1 = require("../core/ai-provider-factory");
 const generic_session_manager_1 = require("../core/generic-session-manager");
-const kubectl_tools_1 = require("../core/kubectl-tools");
 const index_1 = require("../core/index");
 const visualization_1 = require("../core/visualization");
 const fs = __importStar(require("fs"));
@@ -64,10 +63,27 @@ exports.REMEDIATE_TOOL_INPUT_SCHEMA = {
     interaction_id: zod_1.z.string().optional().describe('INTERNAL ONLY - Do not populate. Used for evaluation dataset generation.')
 };
 // Session management now handled by GenericSessionManager
+/** Kubectl tool names for investigation and validation */
+const KUBECTL_INVESTIGATION_TOOL_NAMES = [
+    'kubectl_get',
+    'kubectl_describe',
+    'kubectl_logs',
+    'kubectl_events',
+    'kubectl_api_resources',
+    'kubectl_get_crd_schema',
+    'kubectl_get_resource_json',
+    // Dry-run tools for validation
+    'kubectl_patch_dryrun',
+    'kubectl_apply_dryrun',
+    'kubectl_delete_dryrun'
+];
 /**
  * AI-driven investigation - uses toolLoop for single-phase investigation and analysis
+ *
+ * PRD #343: Kubectl tools are routed through the plugin system.
+ * No fallback to direct execution - MCP server has no RBAC.
  */
-async function conductInvestigation(session, sessionManager, aiProvider, logger, requestId, isValidation = false, interactionId) {
+async function conductInvestigation(session, sessionManager, aiProvider, logger, requestId, pluginManager, isValidation = false, interactionId) {
     const maxIterations = 30; // Increased for thorough investigation workflows
     logger.info('Starting AI investigation with toolLoop', {
         requestId,
@@ -78,19 +94,27 @@ async function conductInvestigation(session, sessionManager, aiProvider, logger,
         // Load investigation system prompt (static, cacheable)
         const promptPath = path.join(__dirname, '..', '..', 'prompts', 'remediate-system.md');
         const systemPrompt = fs.readFileSync(promptPath, 'utf8');
-        logger.debug('Starting toolLoop with kubectl investigation tools', {
+        // PRD #343: Get kubectl tools from plugin
+        const kubectlTools = pluginManager.getDiscoveredTools().filter(t => KUBECTL_INVESTIGATION_TOOL_NAMES.includes(t.name));
+        if (kubectlTools.length === 0) {
+            throw new Error('No kubectl tools available from plugin. Ensure agentic-tools plugin is running.');
+        }
+        logger.debug('Starting toolLoop with kubectl investigation tools from plugin', {
             requestId,
             sessionId: session.sessionId,
-            toolCount: kubectl_tools_1.KUBECTL_INVESTIGATION_TOOLS.length
+            toolCount: kubectlTools.length,
+            tools: kubectlTools.map(t => t.name)
         });
+        // PRD #343: Create tool executor that routes through plugin
+        const toolExecutor = pluginManager.createToolExecutor();
         // Use toolLoop for AI-driven investigation with kubectl tools
         // System prompt is static (cached), issue description is dynamic (userMessage)
         const operationName = isValidation ? 'remediate-validation' : 'remediate-investigation';
         const result = await aiProvider.toolLoop({
             systemPrompt: systemPrompt,
             userMessage: `Investigate this Kubernetes issue: ${session.data.issue}`,
-            tools: kubectl_tools_1.KUBECTL_INVESTIGATION_TOOLS,
-            toolExecutor: kubectl_tools_1.executeKubectlTools,
+            tools: kubectlTools,
+            toolExecutor: toolExecutor,
             maxIterations: maxIterations,
             operation: operationName,
             evaluationContext: {
@@ -270,7 +294,7 @@ function parseAIFinalAnalysis(aiResponse) {
 /**
  * Execute user choice from previous session
  */
-async function executeUserChoice(sessionManager, sessionId, choice, logger, requestId, currentInteractionId) {
+async function executeUserChoice(sessionManager, sessionId, choice, logger, requestId, pluginManager, currentInteractionId) {
     try {
         // Load previous session
         const session = sessionManager.getSession(sessionId);
@@ -289,7 +313,7 @@ async function executeUserChoice(sessionManager, sessionId, choice, logger, requ
         // Handle different choices
         switch (choice) {
             case 1: // Execute automatically via MCP
-                return await executeRemediationCommands(session, sessionManager, logger, requestId, currentInteractionId);
+                return await executeRemediationCommands(session, sessionManager, logger, requestId, pluginManager, currentInteractionId);
             case 2: { // Execute via agent
                 // Use validation intent directly from final analysis
                 const validationIntent = session.data.finalAnalysis.validationIntent || 'Check the status of the affected resources to verify the issue has been resolved';
@@ -331,7 +355,7 @@ async function executeUserChoice(sessionManager, sessionId, choice, logger, requ
 /**
  * Execute remediation commands via kubectl
  */
-async function executeRemediationCommands(session, sessionManager, logger, requestId, currentInteractionId) {
+async function executeRemediationCommands(session, sessionManager, logger, requestId, pluginManager, currentInteractionId) {
     const results = [];
     const finalAnalysis = session.data.finalAnalysis;
     let overallSuccess = true;
@@ -351,15 +375,38 @@ async function executeRemediationCommands(session, sessionManager, logger, reque
                 actionId,
                 command: action.command
             });
-            // Execute the command using shell
+            // PRD #343: Execute the command via plugin's shell_exec tool
             // Clean up escape sequences that some AI models incorrectly add to JSON parameters
             let fullCommand = action.command || '';
             fullCommand = fullCommand.replace(/\\"/g, '"');
-            const { exec } = require('child_process');
-            const { promisify } = require('util');
-            const execAsync = promisify(exec);
-            const { stdout } = await execAsync(fullCommand);
-            const output = stdout;
+            const response = await pluginManager.invokeTool('shell_exec', { command: fullCommand });
+            if (!response.success) {
+                throw new Error(response.error?.message || 'Command execution failed');
+            }
+            // Check for nested error - plugin wraps command errors in { success: false, error: "..." }
+            if (typeof response.result === 'object' && response.result !== null) {
+                const result = response.result;
+                if (result.success === false) {
+                    throw new Error(result.error || result.message || 'Command execution failed');
+                }
+            }
+            // Extract only the data field - never pass JSON wrapper
+            let output;
+            if (typeof response.result === 'object' && response.result !== null) {
+                const result = response.result;
+                if (result.data !== undefined) {
+                    output = String(result.data);
+                }
+                else if (typeof result === 'string') {
+                    output = result;
+                }
+                else {
+                    throw new Error('Plugin returned unexpected response format - missing data field');
+                }
+            }
+            else {
+                output = String(response.result || '');
+            }
             results.push({
                 action: `${actionId}: ${action.description}`,
                 success: true,
@@ -429,7 +476,7 @@ IMPORTANT: You MUST respond with the final JSON analysis format as specified in
                 interaction_id: currentInteractionId || session.data.interaction_id // Use current interaction_id for validation
             };
             // Recursive call to main function for validation
-            const validationResponse = await handleRemediateTool(validationInput);
+            const validationResponse = await handleRemediateTool(validationInput, pluginManager);
             const validationData = JSON.parse(validationResponse.content[0].text);
             // If validation discovered new issues, enhance with execution context
             if (validationData.status === 'awaiting_user_approval') {
@@ -567,8 +614,10 @@ IMPORTANT: You MUST respond with the final JSON analysis format as specified in
 }
 /**
  * Main tool handler for remediate tool
+ *
+ * PRD #343: pluginManager is required - all kubectl operations go through plugin.
  */
-async function handleRemediateTool(args) {
+async function handleRemediateTool(args, pluginManager) {
     const requestId = `remediate_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
     const logger = new error_handling_1.ConsoleLogger('RemediateTool');
     try {
@@ -584,7 +633,7 @@ async function handleRemediateTool(args) {
                 choice: validatedInput.executeChoice,
                 sessionId: validatedInput.sessionId
             });
-            return await executeUserChoice(sessionManager, validatedInput.sessionId, validatedInput.executeChoice, logger, requestId, validatedInput.interaction_id);
+            return await executeUserChoice(sessionManager, validatedInput.sessionId, validatedInput.executeChoice, logger, requestId, pluginManager, validatedInput.interaction_id);
         }
         // Validate that we have an issue for new investigations
         if (!validatedInput.issue) {
@@ -604,7 +653,7 @@ async function handleRemediateTool(args) {
         const aiProvider = (0, ai_provider_factory_1.createAIProvider)();
         // Conduct AI-driven investigation (detect if this is post-execution validation)
         const isValidation = validatedInput.executedCommands && validatedInput.executedCommands.length > 0;
-        const finalAnalysis = await conductInvestigation(session, sessionManager, aiProvider, logger, requestId, isValidation, validatedInput.interaction_id);
+        const finalAnalysis = await conductInvestigation(session, sessionManager, aiProvider, logger, requestId, pluginManager, isValidation, validatedInput.interaction_id);
         logger.info('Remediation analysis completed', {
             requestId,
             sessionId: session.sessionId,
@@ -675,7 +724,7 @@ async function handleRemediateTool(args) {
             // Update session object with final analysis for execution
             session.data.finalAnalysis = finalAnalysis;
             // Execute commands and return the complete result (includes post-execution validation)
-            return await executeRemediationCommands(session, sessionManager, logger, requestId, validatedInput.interaction_id);
+            return await executeRemediationCommands(session, sessionManager, logger, requestId, pluginManager, validatedInput.interaction_id);
         }
         // Generate visualization URL for analysis response
         const visualizationUrl = (0, visualization_1.getVisualizationUrl)(session.sessionId);

package/dist/tools/version.d.ts

@@ -3,10 +3,13 @@
  *
  * Provides comprehensive system status including version information,
  * Vector DB connection status, and embedding service capabilities
+ *
+ * PRD #343: Kubernetes interactions migrated to plugin system
  */
 import { z } from 'zod';
 import { Logger } from '../core/error-handling';
 import { BaseVisualizationData } from '../core/visualization';
+import { PluginManager } from '../core/plugin-manager';
 export declare const VERSION_TOOL_NAME = "version";
 export declare const VERSION_TOOL_DESCRIPTION = "Get comprehensive system health and diagnostics";
 export declare const VERSION_TOOL_INPUT_SCHEMA: {
@@ -96,6 +99,15 @@ export interface SystemStatus {
         serviceName: string;
         initialized: boolean;
     };
+    plugins?: {
+        pluginCount: number;
+        toolCount: number;
+        plugins: Array<{
+            name: string;
+            version: string;
+            toolCount: number;
+        }>;
+    };
 }
 export interface VersionSessionData extends BaseVisualizationData {
     toolName: 'version';
@@ -112,10 +124,6 @@ export interface VersionSessionData extends BaseVisualizationData {
     timestamp: string;
     status: 'success' | 'error';
 }
-/**
- * Test Kyverno installation and readiness for policy generation using shared client
- */
-export declare function getKyvernoStatus(): Promise<SystemStatus['kyverno']>;
 /**
  * Get version information from package.json
  */
@@ -124,8 +132,15 @@ export declare function getVersionInfo(): VersionInfo;
  * Get OpenTelemetry tracing status
  */
 export declare function getTracingStatus(): SystemStatus['tracing'];
+/**
+ * Get Kyverno status via plugin (PRD #343)
+ * Uses kubectl_get_resource_json plugin tool for Kyverno resource checks
+ */
+export declare function getKyvernoStatusViaPlugin(pluginManager: PluginManager): Promise<SystemStatus['kyverno']>;
 /**
  * Handle version tool request with comprehensive system diagnostics
+ *
+ * PRD #343: When pluginManager is provided, uses plugin system for all K8s interactions
  */
-export declare function handleVersionTool(args: any, logger: Logger, requestId: string): Promise<any>;
+export declare function handleVersionTool(args: any, logger: Logger, requestId: string, pluginManager?: PluginManager): Promise<any>;
 //# sourceMappingURL=version.d.ts.map

package/dist/tools/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/tools/version.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAShD,OAAO,EAAuB,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAC3C,eAAO,MAAM,wBAAwB,oDAAoD,CAAC;AAC1F,eAAO,MAAM,yBAAyB;;CAErC,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE;QACR,SAAS,EAAE,OAAO,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,EAAE;YACX,QAAQ,EAAE;gBACR,MAAM,EAAE,OAAO,CAAC;gBAChB,cAAc,CAAC,EAAE,MAAM,CAAC;gBACxB,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF,QAAQ,EAAE;gBACR,MAAM,EAAE,OAAO,CAAC;gBAChB,cAAc,CAAC,EAAE,MAAM,CAAC;gBACxB,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF,YAAY,EAAE;gBACZ,MAAM,EAAE,OAAO,CAAC;gBAChB,cAAc,CAAC,EAAE,MAAM,CAAC;gBACxB,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF,SAAS,EAAE;gBACT,MAAM,EAAE,OAAO,CAAC;gBAChB,cAAc,CAAC,EAAE,MAAM,CAAC;gBACxB,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;SACH,CAAC;KACH,CAAC;IACF,SAAS,EAAE;QACT,SAAS,EAAE,OAAO,CAAC;QACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,UAAU,EAAE;QACV,SAAS,EAAE,OAAO,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,UAAU,EAAE;QACV,SAAS,EAAE,OAAO,CAAC;QACnB,WAAW,CAAC,EAAE;YACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;QACF,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,YAAY,EAAE;QACZ,WAAW,EAAE,OAAO,CAAC;QACrB,eAAe,EAAE,OAAO,CAAC;QACzB,oBAAoB,EAAE,OAAO,CAAC;QAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,OAAO,EAAE;QACP,SAAS,EAAE,OAAO,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,qBAAqB,EAAE,OAAO,CAAC;QAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;CACH;AAGD,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAC/D,QAAQ,EAAE,SAAS,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE;QACP,OAAO,EAAE,SAAS,GAAG,UAAU,CAAC;QAChC,aAAa,EAAE,MAAM,CAAC;QACtB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,gBAAgB,EAAE,MAAM,CAAC;QACzB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,uBAAuB,EAAE,MAAM,CAAC;QAChC,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;CAC7B;AAiSD;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAoIzE;AAiJD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAqB5C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAAC,SAAS,CAAC,CAW1D;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,GAAG,EACT,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,GAAG,CAAC,CAwHd"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/tools/version.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAOhD,OAAO,EAAuB,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAC3C,eAAO,MAAM,wBAAwB,oDAAoD,CAAC;AAC1F,eAAO,MAAM,yBAAyB;;CAErC,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE;QACR,SAAS,EAAE,OAAO,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,EAAE;YACX,QAAQ,EAAE;gBACR,MAAM,EAAE,OAAO,CAAC;gBAChB,cAAc,CAAC,EAAE,MAAM,CAAC;gBACxB,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF,QAAQ,EAAE;gBACR,MAAM,EAAE,OAAO,CAAC;gBAChB,cAAc,CAAC,EAAE,MAAM,CAAC;gBACxB,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF,YAAY,EAAE;gBACZ,MAAM,EAAE,OAAO,CAAC;gBAChB,cAAc,CAAC,EAAE,MAAM,CAAC;gBACxB,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF,SAAS,EAAE;gBACT,MAAM,EAAE,OAAO,CAAC;gBAChB,cAAc,CAAC,EAAE,MAAM,CAAC;gBACxB,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;SACH,CAAC;KACH,CAAC;IACF,SAAS,EAAE;QACT,SAAS,EAAE,OAAO,CAAC;QACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,UAAU,EAAE;QACV,SAAS,EAAE,OAAO,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,UAAU,EAAE;QACV,SAAS,EAAE,OAAO,CAAC;QACnB,WAAW,CAAC,EAAE;YACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;QACF,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,YAAY,EAAE;QACZ,WAAW,EAAE,OAAO,CAAC;QACrB,eAAe,EAAE,OAAO,CAAC;QACzB,oBAAoB,EAAE,OAAO,CAAC;QAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,OAAO,EAAE;QACP,SAAS,EAAE,OAAO,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,qBAAqB,EAAE,OAAO,CAAC;QAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACtE,CAAC;CACH;AAGD,MAAM,WAAW,kBAAmB,SAAQ,qBAAqB;IAC/D,QAAQ,EAAE,SAAS,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE;QACP,OAAO,EAAE,SAAS,GAAG,UAAU,CAAC;QAChC,aAAa,EAAE,MAAM,CAAC;QACtB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,gBAAgB,EAAE,MAAM,CAAC;QACzB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,uBAAuB,EAAE,MAAM,CAAC;QAChC,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;CAC7B;AAmYD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAqB5C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAAC,SAAS,CAAC,CAW1D;AAqDD;;;GAGG;AACH,wBAAsB,yBAAyB,CAAC,aAAa,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CA0G9G;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,GAAG,EACT,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAC5B,OAAO,CAAC,GAAG,CAAC,CAoId"}

package/dist/tools/version.js

@@ -4,6 +4,8 @@
  *
  * Provides comprehensive system status including version information,
  * Vector DB connection status, and embedding service capabilities
+ *
+ * PRD #343: Kubernetes interactions migrated to plugin system
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
@@ -40,19 +42,16 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION_TOOL_INPUT_SCHEMA = exports.VERSION_TOOL_DESCRIPTION = exports.VERSION_TOOL_NAME = void 0;
-exports.getKyvernoStatus = getKyvernoStatus;
 exports.getVersionInfo = getVersionInfo;
 exports.getTracingStatus = getTracingStatus;
+exports.getKyvernoStatusViaPlugin = getKyvernoStatusViaPlugin;
 exports.handleVersionTool = handleVersionTool;
 const fs_1 = require("fs");
 const path_1 = require("path");
 const zod_1 = require("zod");
-const k8s = __importStar(require("@kubernetes/client-node"));
 const constants_1 = require("../core/constants");
 const index_1 = require("../core/index");
 const resource_vector_service_1 = require("../core/resource-vector-service");
-const discovery_1 = require("../core/discovery");
-const kubernetes_utils_1 = require("../core/kubernetes-utils");
 const tracing_1 = require("../core/tracing");
 const config_1 = require("../core/tracing/config");
 const generic_session_manager_1 = require("../core/generic-session-manager");
@@ -310,158 +309,6 @@ async function getCapabilityStatus() {
         };
     }
 }
-/**
- * Test Kyverno installation and readiness for policy generation using shared client
- */
-async function getKyvernoStatus() {
-    try {
-        // Create discovery instance and establish connection
-        const discovery = new discovery_1.KubernetesDiscovery({});
-        await discovery.connect();
-        // First test if we can connect to Kubernetes at all
-        const testResult = await discovery.testConnection();
-        if (!testResult.connected) {
-            return {
-                installed: false,
-                policyGenerationReady: false,
-                error: 'Cannot detect Kyverno - Kubernetes cluster is not accessible'
-            };
-        }
-        // Check if Kyverno CRDs are installed using the original approach
-        const crdOutput = await discovery.executeKubectl(['get', 'crd', '--no-headers']);
-        const kyvernoCRDs = crdOutput.split('\n').filter(line => line.includes('kyverno.io') && (line.includes('clusterpolicies') ||
-            line.includes('policies') ||
-            line.includes('policyreports')));
-        if (kyvernoCRDs.length === 0) {
-            return {
-                installed: false,
-                policyGenerationReady: false,
-                reason: 'Kyverno CRDs not found in cluster - Kyverno is not installed'
-            };
-        }
-        // Check if Kyverno deployment is ready using the client
-        let deploymentReady = false;
-        let webhookReady = false;
-        let version;
-        try {
-            // Get client and check deployment status
-            const client = discovery.getClient();
-            const appsV1Api = (0, tracing_1.createTracedK8sClient)(client.makeApiClient(k8s.AppsV1Api), 'AppsV1Api');
-            const deploymentResponse = await appsV1Api.listNamespacedDeployment({
-                namespace: 'kyverno'
-            });
-            const kyvernoDeployments = deploymentResponse.items.filter((deployment) => deployment.metadata?.name?.startsWith('kyverno-'));
-            if (kyvernoDeployments.length > 0) {
-                // Check if all Kyverno deployments are ready
-                deploymentReady = kyvernoDeployments.every((deployment) => {
-                    const readyReplicas = deployment.status?.readyReplicas || 0;
-                    const replicas = deployment.status?.replicas || 0;
-                    return readyReplicas > 0 && readyReplicas === replicas;
-                });
-                // Try to get version from image tag of the first deployment (usually admission controller)
-                const firstDeployment = kyvernoDeployments[0];
-                const container = firstDeployment.spec?.template.spec?.containers?.[0];
-                if (container?.image) {
-                    const imageMatch = container.image.match(/:v?([0-9]+\.[0-9]+\.[0-9]+)/);
-                    if (imageMatch) {
-                        version = imageMatch[1];
-                    }
-                }
-            }
-        }
-        catch (error) {
-            // Kyverno might be in a different namespace or not exist
-            deploymentReady = false;
-        }
-        // Check admission controller webhook
-        try {
-            const client = discovery.getClient();
-            const admissionApi = (0, tracing_1.createTracedK8sClient)(client.makeApiClient(k8s.AdmissionregistrationV1Api), 'AdmissionregistrationV1Api');
-            const webhookResponse = await admissionApi.listValidatingWebhookConfiguration();
-            webhookReady = webhookResponse.items.some((webhook) => webhook.metadata?.name?.includes('kyverno'));
-        }
-        catch (error) {
-            webhookReady = false;
-        }
-        // Determine if policy generation is ready
-        const policyGenerationReady = deploymentReady && webhookReady;
-        if (!policyGenerationReady) {
-            let reason = 'Kyverno is partially installed but not fully operational';
-            if (!deploymentReady && !webhookReady) {
-                reason = 'Kyverno deployment and admission webhook are not ready';
-            }
-            else if (!deploymentReady) {
-                reason = 'Kyverno deployment is not ready';
-            }
-            else if (!webhookReady) {
-                reason = 'Kyverno admission webhook is not ready';
-            }
-            return {
-                installed: true,
-                version,
-                webhookReady,
-                policyGenerationReady,
-                reason
-            };
-        }
-        return {
-            installed: true,
-            version,
-            webhookReady: true,
-            policyGenerationReady: true
-        };
-    }
-    catch (error) {
-        const errorMessage = error instanceof Error ? error.message : String(error);
-        return {
-            installed: false,
-            policyGenerationReady: false,
-            error: `Kyverno detection failed: ${errorMessage}`
-        };
-    }
-}
-/**
- * Test Kubernetes cluster connectivity using shared client
- */
-async function getKubernetesStatus() {
-    try {
-        // Create discovery instance and establish connection
-        const discovery = new discovery_1.KubernetesDiscovery({});
-        await discovery.connect();
-        // Get connection info using the shared approach
-        const connectionInfo = discovery.getConnectionInfo();
-        const testResult = await discovery.testConnection();
-        if (testResult.connected) {
-            return {
-                connected: true,
-                clusterInfo: {
-                    endpoint: connectionInfo.server,
-                    version: testResult.version,
-                    context: connectionInfo.context
-                },
-                kubeconfig: connectionInfo.kubeconfig
-            };
-        }
-        else {
-            return {
-                connected: false,
-                kubeconfig: connectionInfo.kubeconfig,
-                error: testResult.error,
-                errorType: testResult.errorType
-            };
-        }
-    }
-    catch (error) {
-        const errorMessage = error instanceof Error ? error.message : String(error);
-        const classified = kubernetes_utils_1.ErrorClassifier.classifyError(error);
-        return {
-            connected: false,
-            kubeconfig: process.env.KUBECONFIG || '~/.kube/config',
-            error: errorMessage,
-            errorType: classified.type
-        };
-    }
-}
 /**
  * Test AI provider connectivity
  */
@@ -592,28 +439,188 @@ function getTracingStatus() {
         initialized: tracer.isEnabled()
     };
 }
+/**
+ * Get Kubernetes status via plugin (PRD #343)
+ * Uses kubectl_version plugin tool for K8s version information
+ */
+async function getKubernetesStatusViaPlugin(pluginManager) {
+    try {
+        const response = await pluginManager.invokeTool('kubectl_version', {});
+        if (!response.success) {
+            return {
+                connected: false,
+                kubeconfig: 'in-cluster',
+                error: response.error?.message || 'Failed to get Kubernetes version via plugin',
+                errorType: response.error?.code
+            };
+        }
+        // Check for nested error - plugin wraps kubectl errors in { success: false, error: "..." }
+        const result = response.result;
+        if (result.success === false) {
+            return {
+                connected: false,
+                kubeconfig: 'in-cluster',
+                error: result.error || result.message || 'kubectl version failed',
+                errorType: 'KUBECTL_ERROR'
+            };
+        }
+        // Parse the kubectl version JSON output
+        const versionData = JSON.parse(result.data || '{}');
+        return {
+            connected: true,
+            clusterInfo: {
+                version: versionData.serverVersion?.gitVersion,
+                endpoint: undefined, // Not available from kubectl version
+                context: 'in-cluster'
+            },
+            kubeconfig: 'in-cluster'
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        return {
+            connected: false,
+            kubeconfig: 'in-cluster',
+            error: errorMessage,
+            errorType: 'PLUGIN_ERROR'
+        };
+    }
+}
+/**
+ * Get Kyverno status via plugin (PRD #343)
+ * Uses kubectl_get_resource_json plugin tool for Kyverno resource checks
+ */
+async function getKyvernoStatusViaPlugin(pluginManager) {
+    try {
+        // Check if Kyverno CRD exists (clusterpolicies.kyverno.io)
+        const crdResponse = await pluginManager.invokeTool('kubectl_get_resource_json', {
+            resource: 'crd/clusterpolicies.kyverno.io'
+        });
+        // Check both outer success and nested result.success
+        if (!crdResponse.success) {
+            // CRD doesn't exist - Kyverno not installed
+            return {
+                installed: false,
+                policyGenerationReady: false,
+                reason: 'Kyverno CRDs not found in cluster - Kyverno is not installed'
+            };
+        }
+        const crdResult = crdResponse.result;
+        if (crdResult?.success === false) {
+            // CRD doesn't exist - Kyverno not installed
+            return {
+                installed: false,
+                policyGenerationReady: false,
+                reason: 'Kyverno CRDs not found in cluster - Kyverno is not installed'
+            };
+        }
+        // Kyverno CRDs exist, check deployment status
+        let deploymentReady = false;
+        let version;
+        // Try to get kyverno-admission-controller deployment
+        const deploymentResponse = await pluginManager.invokeTool('kubectl_get_resource_json', {
+            resource: 'deployment/kyverno-admission-controller',
+            namespace: 'kyverno'
+        });
+        if (deploymentResponse.success) {
+            const result = deploymentResponse.result;
+            // Check for nested error
+            if (result.success !== false) {
+                const deployment = JSON.parse(result.data || '{}');
+                const readyReplicas = deployment.status?.readyReplicas || 0;
+                const replicas = deployment.status?.replicas || 0;
+                deploymentReady = readyReplicas > 0 && readyReplicas === replicas;
+                // Extract version from image tag
+                const container = deployment.spec?.template?.spec?.containers?.[0];
+                if (container?.image) {
+                    const imageMatch = container.image.match(/:v?([0-9]+\.[0-9]+\.[0-9]+)/);
+                    if (imageMatch) {
+                        version = imageMatch[1];
+                    }
+                }
+            }
+        }
+        // Check webhook configuration
+        let webhookReady = false;
+        const webhookResponse = await pluginManager.invokeTool('kubectl_get_resource_json', {
+            resource: 'validatingwebhookconfiguration/kyverno-resource-validating-webhook-cfg'
+        });
+        // Check both outer success and nested result.success
+        if (webhookResponse.success) {
+            const webhookResult = webhookResponse.result;
+            if (webhookResult?.success !== false) {
+                webhookReady = true;
+            }
+        }
+        const policyGenerationReady = deploymentReady && webhookReady;
+        if (!policyGenerationReady) {
+            let reason = 'Kyverno is partially installed but not fully operational';
+            if (!deploymentReady && !webhookReady) {
+                reason = 'Kyverno deployment and admission webhook are not ready';
+            }
+            else if (!deploymentReady) {
+                reason = 'Kyverno deployment is not ready';
+            }
+            else if (!webhookReady) {
+                reason = 'Kyverno admission webhook is not ready';
+            }
+            return {
+                installed: true,
+                version,
+                webhookReady,
+                policyGenerationReady,
+                reason
+            };
+        }
+        return {
+            installed: true,
+            version,
+            webhookReady: true,
+            policyGenerationReady: true
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        return {
+            installed: false,
+            policyGenerationReady: false,
+            error: `Kyverno detection via plugin failed: ${errorMessage}`
+        };
+    }
+}
 /**
  * Handle version tool request with comprehensive system diagnostics
+ *
+ * PRD #343: When pluginManager is provided, uses plugin system for all K8s interactions
  */
-async function handleVersionTool(args, logger, requestId) {
+async function handleVersionTool(args, logger, requestId, pluginManager) {
     try {
         // Extract interaction_id for evaluation dataset generation
         const interaction_id = args.interaction_id ? exports.VERSION_TOOL_INPUT_SCHEMA.interaction_id.parse(args.interaction_id) : undefined;
         logger.info('Processing version tool request with system diagnostics', { requestId });
         // Get version info
         const version = getVersionInfo();
+        // PRD #343: K8s interactions go through plugins only
+        // If plugins not available, K8s/Kyverno status reports as unavailable
+        const hasK8sPlugins = pluginManager?.isPluginTool('kubectl_version') ?? false;
         // Run all diagnostics in parallel for better performance
-        logger.info('Running system diagnostics...', { requestId });
+        logger.info('Running system diagnostics...', { requestId, hasK8sPlugins });
         const [vectorDBStatus, embeddingStatus, aiProviderStatus, kubernetesStatus, capabilityStatus, kyvernoStatus] = await Promise.all([
             getVectorDBStatus(),
             getEmbeddingStatus(),
             getAIProviderStatus(interaction_id),
-            getKubernetesStatus(),
+            hasK8sPlugins
+                ? getKubernetesStatusViaPlugin(pluginManager)
+                : Promise.resolve({ connected: false, kubeconfig: 'unknown', error: 'Kubernetes plugins not available' }),
             getCapabilityStatus(),
-            getKyvernoStatus()
+            hasK8sPlugins
+                ? getKyvernoStatusViaPlugin(pluginManager)
+                : Promise.resolve({ installed: false, policyGenerationReady: false, error: 'Kubernetes plugins not available' })
         ]);
         // Get tracing status synchronously (no async operations)
         const tracingStatus = getTracingStatus();
+        // PRD #343: Add plugin stats when pluginManager is available
+        const pluginStats = pluginManager?.getStats();
         const systemStatus = {
             version,
             vectorDB: vectorDBStatus,
@@ -622,7 +629,8 @@ async function handleVersionTool(args, logger, requestId) {
             kubernetes: kubernetesStatus,
             capabilities: capabilityStatus,
             kyverno: kyvernoStatus,
-            tracing: tracingStatus
+            tracing: tracingStatus,
+            plugins: pluginStats
         };
         // Log summary of system health
         logger.info('System diagnostics completed', {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vfarcic/dot-ai",
-  "version": "0.195.0",
+  "version": "1.0.0",
   "description": "AI-powered development productivity platform that enhances software development workflows through intelligent automation and AI-driven assistance",
   "mcpName": "io.github.vfarcic/dot-ai",
   "main": "dist/index.js",