@vfarcic/dot-ai 1.10.1 → 1.11.0

package/dist/core/error-handling.js

@@ -109,7 +109,7 @@ class ConsoleLogger {
         const timestamp = new Date().toISOString();
         const baseMessage = `[${timestamp}] ${level.toUpperCase()} [${this.component}] ${message}`;
         if (data) {
-            return `${baseMessage} ${JSON.stringify(data, null, 2)}`;
+            return `${baseMessage} ${JSON.stringify(data)}`;
         }
         return baseMessage;
     }

package/dist/core/git-utils.d.ts

@@ -23,6 +23,11 @@ export declare function scrubCredentials(message: string): string;
 export declare function getAuthenticatedUrl(repoUrl: string, token: string): string;
 export declare function getAuthToken(authConfig: GitAuthConfig): Promise<string>;
 export declare function getGitAuthConfigFromEnv(): GitAuthConfig;
+/**
+ * Sanitize a relative path to prevent directory traversal.
+ * Rejects absolute paths and paths that escape the base directory.
+ */
+export declare function sanitizeRelativePath(relativePath: string): string;
 export interface CloneOptions {
     branch?: string;
     depth?: number;

package/dist/core/git-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git-utils.d.ts","sourceRoot":"","sources":["../../src/core/git-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AASD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAK1E;AA2ED,wBAAsB,YAAY,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAc7E;AAED,wBAAgB,uBAAuB,IAAI,aAAa,CAyBvD;AAeD,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,YAAY,GAClB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA6BhD;AAID,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B5E;AAID,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/C,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,UAAU,CAAC,CAyErB"}
+{"version":3,"file":"git-utils.d.ts","sourceRoot":"","sources":["../../src/core/git-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AASD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAK1E;AA2ED,wBAAsB,YAAY,CAAC,UAAU,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAc7E;AAED,wBAAgB,uBAAuB,IAAI,aAAa,CAyBvD;AAeD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CASjE;AAID,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,YAAY,GAClB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA6BhD;AAID,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B5E;AAID,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EAC/C,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,UAAU,CAAC,CAyErB"}

package/dist/core/git-utils.js

@@ -53,6 +53,7 @@ exports.scrubCredentials = scrubCredentials;
 exports.getAuthenticatedUrl = getAuthenticatedUrl;
 exports.getAuthToken = getAuthToken;
 exports.getGitAuthConfigFromEnv = getGitAuthConfigFromEnv;
+exports.sanitizeRelativePath = sanitizeRelativePath;
 exports.cloneRepo = cloneRepo;
 exports.pullRepo = pullRepo;
 exports.pushRepo = pushRepo;
@@ -161,6 +162,21 @@ function gitOptions(baseDir) {
         timeout: { block: GIT_TIMEOUT_MS },
     };
 }
+// ─── Path safety ───
+/**
+ * Sanitize a relative path to prevent directory traversal.
+ * Rejects absolute paths and paths that escape the base directory.
+ */
+function sanitizeRelativePath(relativePath) {
+    if (relativePath.startsWith('/')) {
+        throw new Error('Relative path cannot be absolute');
+    }
+    const normalized = path.posix.normalize(relativePath);
+    if (normalized.startsWith('..') || path.posix.isAbsolute(normalized)) {
+        throw new Error('Relative path cannot escape target directory');
+    }
+    return normalized;
+}
 async function cloneRepo(repoUrl, targetDir, opts) {
     const authConfig = getGitAuthConfigFromEnv();
     let cloneUrl;

package/dist/core/internal-tools.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Internal Agentic-Loop Tools (PRD #407)
+ *
+ * Tools that run locally in the MCP server, available to the AI
+ * during investigation loops alongside plugin tools. NOT exposed
+ * to client agents — only the AI inside toolLoop() calls these.
+ *
+ * Tools:
+ * - git_clone: Clone a Git repo
+ * - fs_list: List files at a path
+ * - fs_read: Read a file at a path
+ *
+ * All filesystem operations are scoped to ./tmp/gitops-clones/
+ * to prevent path traversal attacks.
+ */
+import type { AITool, ToolExecutor } from './ai-provider.interface.js';
+/**
+ * Validate that a relative path is safe and resolve it within the clones directory.
+ * Uses sanitizeRelativePath for traversal checks, then resolves to absolute.
+ * Exported for testing.
+ */
+export declare function validatePathWithinClones(inputPath: string): string;
+export declare function getInternalTools(): AITool[];
+/**
+ * Create a ToolExecutor that handles internal agentic-loop tools.
+ * Designed to be passed as the fallbackExecutor to pluginManager.createToolExecutor().
+ */
+export declare function createInternalToolExecutor(sessionId: string): ToolExecutor;
+/**
+ * Remove session clone directories older than the TTL.
+ * Called at the start of each new remediate investigation.
+ * Non-blocking: runs cleanup in the background without delaying investigation.
+ */
+export declare function cleanupOldClones(maxAgeMs?: number): void;
+//# sourceMappingURL=internal-tools.d.ts.map

package/dist/core/internal-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-tools.d.ts","sourceRoot":"","sources":["../../src/core/internal-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAcvE;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAUlE;AAkBD,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAgD3C;AAmHD;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAoB1E;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,GAAE,MAAuB,GAAG,IAAI,CAoBxE"}

package/dist/core/internal-tools.js

@@ -0,0 +1,286 @@
+"use strict";
+/**
+ * Internal Agentic-Loop Tools (PRD #407)
+ *
+ * Tools that run locally in the MCP server, available to the AI
+ * during investigation loops alongside plugin tools. NOT exposed
+ * to client agents — only the AI inside toolLoop() calls these.
+ *
+ * Tools:
+ * - git_clone: Clone a Git repo
+ * - fs_list: List files at a path
+ * - fs_read: Read a file at a path
+ *
+ * All filesystem operations are scoped to ./tmp/gitops-clones/
+ * to prevent path traversal attacks.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePathWithinClones = validatePathWithinClones;
+exports.getInternalTools = getInternalTools;
+exports.createInternalToolExecutor = createInternalToolExecutor;
+exports.cleanupOldClones = cleanupOldClones;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const git_utils_js_1 = require("./git-utils.js");
+const solution_utils_js_1 = require("./solution-utils.js");
+const CLONES_SUBDIR = 'gitops-clones';
+const MAX_FILE_SIZE = 100 * 1024; // 100KB
+const DEFAULT_TTL_MS = 60 * 60 * 1000; // 1 hour
+// ─── Path security ───
+function getClonesDir() {
+    return path.resolve(process.cwd(), 'tmp', CLONES_SUBDIR);
+}
+/**
+ * Validate that a relative path is safe and resolve it within the clones directory.
+ * Uses sanitizeRelativePath for traversal checks, then resolves to absolute.
+ * Exported for testing.
+ */
+function validatePathWithinClones(inputPath) {
+    // Decode URL-encoded characters (e.g., %2e%2e/ for ../) before validation
+    let decoded;
+    try {
+        decoded = decodeURIComponent(inputPath);
+    }
+    catch {
+        decoded = inputPath;
+    }
+    const sanitized = (0, git_utils_js_1.sanitizeRelativePath)(decoded);
+    return path.resolve(getClonesDir(), sanitized);
+}
+// ─── Repo name sanitization ───
+function repoUrlToDirectoryName(repoUrl) {
+    try {
+        const url = new URL(repoUrl);
+        const repoPath = url.pathname
+            .replace(/^\//, '')
+            .replace(/\.git$/, '');
+        return (0, solution_utils_js_1.sanitizeIntentForLabel)(repoPath);
+    }
+    catch {
+        return (0, solution_utils_js_1.sanitizeIntentForLabel)(repoUrl.slice(0, 63));
+    }
+}
+// ─── Tool definitions ───
+function getInternalTools() {
+    return [
+        {
+            name: 'git_clone',
+            description: 'Clone a Git repository. Returns a relative path to the cloned repo.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    repoUrl: {
+                        type: 'string',
+                        description: 'Repository URL (HTTPS)',
+                    },
+                },
+                required: ['repoUrl'],
+            },
+        },
+        {
+            name: 'fs_list',
+            description: 'List files and directories at a relative path within the working directory.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    path: {
+                        type: 'string',
+                        description: 'Relative path to list',
+                    },
+                },
+                required: ['path'],
+            },
+        },
+        {
+            name: 'fs_read',
+            description: 'Read file contents at a relative path within the working directory.',
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    path: {
+                        type: 'string',
+                        description: 'Relative path to file',
+                    },
+                },
+                required: ['path'],
+            },
+        },
+    ];
+}
+// ─── Handlers ───
+async function handleGitClone(args, sessionId) {
+    const repoUrl = args.repoUrl;
+    if (!repoUrl) {
+        return 'Error: repoUrl is required';
+    }
+    const repoName = repoUrlToDirectoryName(repoUrl);
+    const relativePath = path.join(sessionId, repoName);
+    const targetDir = path.join(getClonesDir(), relativePath);
+    if (fs.existsSync(targetDir)) {
+        return { localPath: relativePath, message: 'Repository already cloned' };
+    }
+    const parentDir = path.dirname(targetDir);
+    if (!fs.existsSync(parentDir)) {
+        fs.mkdirSync(parentDir, { recursive: true });
+    }
+    try {
+        const result = await (0, git_utils_js_1.cloneRepo)(repoUrl, targetDir, { depth: 1 });
+        return { localPath: relativePath, branch: result.branch };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return `Error cloning repository: ${(0, git_utils_js_1.scrubCredentials)(message)}`;
+    }
+}
+function handleFsList(args) {
+    const inputPath = args.path;
+    if (!inputPath) {
+        return 'Error: path is required';
+    }
+    let resolved;
+    try {
+        resolved = validatePathWithinClones(inputPath);
+    }
+    catch (err) {
+        return `Error: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    if (!fs.existsSync(resolved)) {
+        return `Error: path does not exist: ${inputPath}`;
+    }
+    const stat = fs.statSync(resolved);
+    if (!stat.isDirectory()) {
+        return `Error: path is not a directory: ${inputPath}`;
+    }
+    const entries = fs.readdirSync(resolved, { withFileTypes: true });
+    return entries.map((entry) => ({
+        name: entry.name,
+        type: entry.isDirectory() ? 'directory' : 'file',
+    }));
+}
+function handleFsRead(args) {
+    const inputPath = args.path;
+    if (!inputPath) {
+        return 'Error: path is required';
+    }
+    let resolved;
+    try {
+        resolved = validatePathWithinClones(inputPath);
+    }
+    catch (err) {
+        return `Error: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    if (!fs.existsSync(resolved)) {
+        return `Error: file does not exist: ${inputPath}`;
+    }
+    const stat = fs.statSync(resolved);
+    if (stat.isDirectory()) {
+        return `Error: path is a directory, not a file: ${inputPath}`;
+    }
+    // Binary detection: check first 8KB for null bytes
+    const detectBuffer = Buffer.alloc(Math.min(8192, stat.size));
+    const fd = fs.openSync(resolved, 'r');
+    try {
+        fs.readSync(fd, detectBuffer, 0, detectBuffer.length, 0);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    if (detectBuffer.includes(0)) {
+        return 'Binary file, cannot display';
+    }
+    if (stat.size > MAX_FILE_SIZE) {
+        const buffer = Buffer.alloc(MAX_FILE_SIZE);
+        const fd = fs.openSync(resolved, 'r');
+        try {
+            const bytesRead = fs.readSync(fd, buffer, 0, MAX_FILE_SIZE, 0);
+            const content = buffer.toString('utf-8', 0, bytesRead);
+            return `${content}\n\n[Truncated: file exceeds ${MAX_FILE_SIZE / 1024}KB limit]`;
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    }
+    return fs.readFileSync(resolved, 'utf-8');
+}
+// ─── Combined executor ───
+/**
+ * Create a ToolExecutor that handles internal agentic-loop tools.
+ * Designed to be passed as the fallbackExecutor to pluginManager.createToolExecutor().
+ */
+function createInternalToolExecutor(sessionId) {
+    const handlers = {
+        git_clone: (args) => handleGitClone(args, sessionId),
+        fs_list: handleFsList,
+        fs_read: handleFsRead,
+    };
+    return async (toolName, input) => {
+        const handler = handlers[toolName];
+        if (!handler) {
+            return `Error: unknown internal tool: ${toolName}`;
+        }
+        if (typeof input !== 'object' || input === null || Array.isArray(input)) {
+            return 'Error: tool input must be an object';
+        }
+        return handler(input);
+    };
+}
+// ─── TTL cleanup ───
+/**
+ * Remove session clone directories older than the TTL.
+ * Called at the start of each new remediate investigation.
+ * Non-blocking: runs cleanup in the background without delaying investigation.
+ */
+function cleanupOldClones(maxAgeMs = DEFAULT_TTL_MS) {
+    const clonesDir = getClonesDir();
+    fs.promises.access(clonesDir).then(async () => {
+        const now = Date.now();
+        const entries = await fs.promises.readdir(clonesDir);
+        for (const entry of entries) {
+            const entryPath = path.join(clonesDir, entry);
+            try {
+                const stat = await fs.promises.stat(entryPath);
+                if (stat.isDirectory() && now - stat.mtimeMs > maxAgeMs) {
+                    await fs.promises.rm(entryPath, { recursive: true, force: true });
+                }
+            }
+            catch {
+                // Ignore errors during cleanup (e.g., concurrent deletion)
+            }
+        }
+    }).catch(() => {
+        // Directory doesn't exist yet, nothing to clean
+    });
+}

package/dist/interfaces/mcp.js

@@ -403,7 +403,7 @@ class MCPServer {
                     // Handle CORS for browser-based clients
                     res.setHeader('Access-Control-Allow-Origin', '*');
                     res.setHeader('Access-Control-Allow-Methods', 'GET, POST, DELETE, OPTIONS');
-                    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, X-Session-Id, Authorization');
+                    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, X-Session-Id, Authorization, X-Dot-AI-Authorization');
                     if (req.method === 'OPTIONS') {
                         res.writeHead(204);
                         res.end();

package/dist/interfaces/oauth/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/interfaces/oauth/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,UAAU,CAyFhE;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/interfaces/oauth/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,UAAU,CA4FhE;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}

package/dist/interfaces/oauth/middleware.js

@@ -32,8 +32,10 @@ function checkBearerAuth(req) {
             message: 'Authentication is not configured. Set DOT_AI_AUTH_TOKEN in your deployment.',
         };
     }
-    // Extract Authorization header
-    const rawAuthHeader = req.headers['authorization'];
+    // Extract Authorization header, with X-Dot-AI-Authorization as fallback.
+    // The fallback supports Kubernetes API server proxy scenarios where the
+    // standard Authorization header is overwritten with a K8s bearer token.
+    const rawAuthHeader = req.headers['x-dot-ai-authorization'] || req.headers['authorization'];
     if (!rawAuthHeader) {
         return {
             authorized: false,

package/dist/tools/push-to-git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"push-to-git.d.ts","sourceRoot":"","sources":["../../src/tools/push-to-git.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,EAAE,KAAK,EAA0B,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAShD,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAC/C,eAAO,MAAM,0BAA0B,0HACkF,CAAC;AAE1H,eAAO,MAAM,2BAA2B;;;;;;;;;CAwBvC,CAAC;AAEF,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAaD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,cAAc,CAAC,EAAE,qBAAqB,CAAC,YAAY,CAAC,GACnD,OAAO,CAAC;IAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC,CAiUxD"}
+{"version":3,"file":"push-to-git.d.ts","sourceRoot":"","sources":["../../src/tools/push-to-git.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,EAAE,KAAK,EAA0B,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAUhD,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAC/C,eAAO,MAAM,0BAA0B,0HACkF,CAAC;AAE1H,eAAO,MAAM,2BAA2B;;;;;;;;;CAwBvC,CAAC;AAEF,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAGD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,cAAc,CAAC,EAAE,qBAAqB,CAAC,YAAY,CAAC,GACnD,OAAO,CAAC;IAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC,CAiUxD"}

package/dist/tools/push-to-git.js

@@ -76,16 +76,6 @@ exports.PUSHTOGIT_TOOL_INPUT_SCHEMA = {
         .optional()
         .describe('INTERNAL ONLY - Do not populate. Used for evaluation dataset generation.'),
 };
-function sanitizeRelativePath(relativePath) {
-    if (relativePath.startsWith('/')) {
-        throw new Error('Relative path cannot be absolute');
-    }
-    const normalized = path.posix.normalize(relativePath);
-    if (normalized.startsWith('..') || path.posix.isAbsolute(normalized)) {
-        throw new Error('Relative path cannot escape target directory');
-    }
-    return normalized;
-}
 async function handlePushToGitTool(args, dotAI, logger, requestId, sessionManager) {
     return await error_handling_1.ErrorHandler.withErrorHandling(async () => {
         logger.info('Handling pushToGit request', {
@@ -204,7 +194,7 @@ async function handlePushToGitTool(args, dotAI, logger, requestId, sessionManage
             const manifestFiles = solution.generatedManifests.files;
             if (manifestFiles && manifestFiles.length > 0) {
                 for (const file of manifestFiles) {
-                    const sanitizedPath = sanitizeRelativePath(file.relativePath);
+                    const sanitizedPath = (0, git_utils_1.sanitizeRelativePath)(file.relativePath);
                     files.push({
                         path: path.posix.join(targetPath, sanitizedPath),
                         content: file.content,

package/dist/tools/remediate.d.ts

@@ -52,6 +52,15 @@ export interface RemediationAction {
     command?: string;
     risk: 'low' | 'medium' | 'high';
     rationale: string;
+    gitSource?: {
+        repoURL: string;
+        branch: string;
+        files: Array<{
+            path: string;
+            content: string;
+            description: string;
+        }>;
+    };
 }
 export interface ExecutionResult {
     action: string;

package/dist/tools/remediate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remediate.d.ts","sourceRoot":"","sources":["../../src/tools/remediate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,OAAO,EAEL,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AAsB/B,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAC/C,eAAO,MAAM,0BAA0B,yfACgd,CAAC;AAGxf,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;CAsDvC,CAAC;AAGF,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IACjE,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,MAAM,EACF,eAAe,GACf,mBAAmB,GACnB,QAAQ,GACR,uBAAuB,GACvB,sBAAsB,GACtB,WAAW,CAAC;IAChB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;CACtC;AAGD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,oBAAoB,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,wBAAwB,GAAG,oBAAoB,CAAC;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACjC,CAAC;IAEF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;CAC/B;AAID;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AA4ND;;GAEG;AACH,UAAU,uBAAuB;IAC/B,WAAW,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACjC,CAAC;IACF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,GACjB,uBAAuB,CAyHzB;AAqcD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,qBAAqB,CAAC,CA8QhC"}
+{"version":3,"file":"remediate.d.ts","sourceRoot":"","sources":["../../src/tools/remediate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,OAAO,EAEL,qBAAqB,EACtB,MAAM,uBAAuB,CAAC;AA2B/B,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAC/C,eAAO,MAAM,0BAA0B,yfACgd,CAAC;AAGxf,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;CAsDvC,CAAC;AAGF,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IACjE,QAAQ,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,MAAM,EACF,eAAe,GACf,mBAAmB,GACnB,QAAQ,GACR,uBAAuB,GACvB,sBAAsB,GACtB,WAAW,CAAC;IAChB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;CACtC;AAGD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,oBAAoB,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,KAAK,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,wBAAwB,GAAG,oBAAoB,CAAC;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACjC,CAAC;IAEF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;CAC/B;AAID;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAmOD;;GAEG;AACH,UAAU,uBAAuB;IAC/B,WAAW,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACjC,CAAC;IACF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,GACjB,uBAAuB,CAyHzB;AA0dD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,qBAAqB,CAAC,CA8QhC"}

package/dist/tools/remediate.js

@@ -50,6 +50,7 @@ const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const request_context_1 = require("../interfaces/request-context");
 const rbac_1 = require("../core/rbac");
+const internal_tools_1 = require("../core/internal-tools");
 // PRD #143 Milestone 1: Hybrid approach - AI can use kubectl_api_resources tool OR continue with JSON dataRequests
 // Tool metadata for direct MCP registration
 exports.REMEDIATE_TOOL_NAME = 'remediate';
@@ -146,15 +147,20 @@ async function conductInvestigation(session, sessionManager, aiProvider, logger,
         if (kubectlTools.length === 0) {
             throw new Error('No kubectl tools available from plugin. Ensure agentic-tools plugin is running.');
         }
-        logger.debug('Starting toolLoop with kubectl investigation tools from plugin', {
+        // PRD #407: Combine plugin tools (allowlisted) with internal tools (git_clone, fs_list, fs_read)
+        const investigationTools = [...kubectlTools, ...(0, internal_tools_1.getInternalTools)()];
+        logger.debug('Starting toolLoop with investigation tools', {
             requestId,
             sessionId: session.sessionId,
-            toolCount: kubectlTools.length,
-            tools: kubectlTools.map(t => t.name),
+            toolCount: investigationTools.length,
+            tools: investigationTools.map(t => t.name),
         });
-        // PRD #343: Create tool executor that routes through plugin
-        const toolExecutor = pluginManager.createToolExecutor();
-        // Use toolLoop for AI-driven investigation with kubectl tools
+        // PRD #407: Clean up old clone directories (non-blocking)
+        (0, internal_tools_1.cleanupOldClones)();
+        // PRD #407: Combined executor routes plugin tools to plugin, internal tools to local handlers
+        const internalExecutor = (0, internal_tools_1.createInternalToolExecutor)(session.sessionId);
+        const toolExecutor = pluginManager.createToolExecutor(internalExecutor);
+        // Use toolLoop for AI-driven investigation with all investigation tools
         // System prompt is static (cached), issue description is dynamic (userMessage)
         const operationName = isValidation
             ? 'remediate-validation'
@@ -162,7 +168,7 @@ async function conductInvestigation(session, sessionManager, aiProvider, logger,
         const result = await aiProvider.toolLoop({
             systemPrompt: systemPrompt,
             userMessage: `Investigate this Kubernetes issue: ${session.data.issue}`,
-            tools: kubectlTools,
+            tools: investigationTools,
             toolExecutor: toolExecutor,
             maxIterations: maxIterations,
             operation: operationName,
@@ -436,6 +442,7 @@ async function executeRemediationCommands(session, sessionManager, logger, reque
     const results = [];
     const finalAnalysis = session.data.finalAnalysis;
     let overallSuccess = true;
+    let executedCommandCount = 0;
     logger.info('Starting remediation command execution', {
         requestId,
         sessionId: session.sessionId,
@@ -446,6 +453,23 @@ async function executeRemediationCommands(session, sessionManager, logger, reque
         const action = finalAnalysis.remediation.actions[i];
         const actionId = `action_${i + 1}`;
         try {
+            // PRD #407: Skip gitSource actions — these are Git-based remediation
+            // instructions for GitOps-managed resources, not executable commands
+            if (action.gitSource && !action.command) {
+                logger.info('Skipping gitSource remediation action (not executable)', {
+                    requestId,
+                    sessionId: session.sessionId,
+                    actionId,
+                    repoURL: action.gitSource.repoURL,
+                });
+                results.push({
+                    action: `${actionId}: ${action.description} (skipped: Git-based)`,
+                    success: false,
+                    output: 'Git-based remediation — apply changes in the source repository',
+                    timestamp: new Date(),
+                });
+                continue;
+            }
             logger.info('Executing remediation action', {
                 requestId,
                 sessionId: session.sessionId,
@@ -486,6 +510,7 @@ async function executeRemediationCommands(session, sessionManager, logger, reque
             else {
                 output = String(response.result || '');
             }
+            executedCommandCount++;
             results.push({
                 action: `${actionId}: ${action.description}`,
                 success: true,
@@ -515,9 +540,9 @@ async function executeRemediationCommands(session, sessionManager, logger, reque
             });
         }
     }
-    // Run automatic post-execution validation if all commands succeeded
+    // Run automatic post-execution validation if commands were executed and all succeeded
     let validationResult = null;
-    if (overallSuccess && finalAnalysis.validationIntent) {
+    if (overallSuccess && executedCommandCount > 0 && finalAnalysis.validationIntent) {
         const validationIntent = finalAnalysis.validationIntent;
         try {
             // In automatic mode, wait for Kubernetes to apply changes before validating

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vfarcic/dot-ai",
-  "version": "1.10.1",
+  "version": "1.11.0",
   "description": "AI-powered development productivity platform that enhances software development workflows through intelligent automation and AI-driven assistance",
   "mcpName": "io.github.vfarcic/dot-ai",
   "main": "dist/index.js",

package/prompts/operate-system.md

@@ -43,11 +43,11 @@ You help users perform Day 2 operations on Kubernetes applications through natur
 
 **Validation workflow**:
 1. Design your operational solution
-2. Generate kubectl commands
+2. Generate the exact kubectl commands you intend to propose
 3. Run dry-run validation for each command
-4. If validation fails, analyze the error and fix your command
+4. If validation fails, analyze the error, fix the command, and re-validate
 5. Retry validation until all commands pass
-6. Only then complete analysis with the validated commands
+6. Copy the validated commands verbatim into your final JSON response — the commands array **MUST be identical** to what passed dry-run. If you modify a command after validation (even slightly), you MUST re-validate it.
 
 **Multiple iterations are expected**: You may need several dry-run attempts to get manifests correct (schema issues, field names, API versions). This is normal and expected.
 

package/prompts/remediate-system.md

@@ -59,9 +59,20 @@ Once investigation is complete, respond with ONLY this JSON format:
     "actions": [
       {
         "description": "Specific action to take",
-        "command": "command to execute (kubectl, helm, etc.)",
+        "command": "command to execute (kubectl, helm, etc.) — omit if gitSource is provided",
         "risk": "low|medium|high",
-        "rationale": "Why this action addresses the issue"
+        "rationale": "Why this action addresses the issue",
+        "gitSource": {
+          "repoURL": "source repository URL — only when resource is GitOps-managed",
+          "branch": "branch name",
+          "files": [
+            {
+              "path": "path relative to repo root",
+              "content": "full corrected file content",
+              "description": "what was changed and why"
+            }
+          ]
+        }
       }
     ],
     "risk": "low|medium|high"
@@ -88,6 +99,17 @@ Once investigation is complete, respond with ONLY this JSON format:
 - All components healthy
 - Set `actions: []` and explain why no issue found
 
+## GitOps Awareness
+
+After identifying the problematic resource, check whether it is managed by a GitOps controller (e.g., Argo CD, Flux).
+
+**When GitOps management is detected**:
+- Clone the source repo, navigate and read the manifests to find the file(s) that need changing
+- Include `gitSource` in your remediation actions with the repo URL, branch, and full corrected file contents for each file that needs modification
+
+**When GitOps management is NOT detected**:
+- Proceed with standard kubectl-based remediation
+
 ### Remediation Action Guidelines
 
 **Structure your solution efficiently**:
@@ -146,6 +168,44 @@ Once investigation is complete, respond with ONLY this JSON format:
 }
 ```
 
+## Example Response - GitOps-Managed Resource
+
+```json
+{
+  "issueStatus": "active",
+  "rootCause": "Deployment 'api-server' has invalid image tag 'v2.broken' causing CrashLoopBackOff",
+  "confidence": 0.95,
+  "factors": [
+    "Pod is in CrashLoopBackOff with ImagePullBackOff events",
+    "Image tag 'v2.broken' does not exist in registry",
+    "Resource is managed by Argo CD Application 'api-server'"
+  ],
+  "remediation": {
+    "summary": "Update image tag in Git source to valid version",
+    "actions": [
+      {
+        "description": "Fix image tag in deployment manifest",
+        "risk": "low",
+        "rationale": "Changing image tag to latest stable version resolves the ImagePullBackOff. Argo CD will sync the change automatically.",
+        "gitSource": {
+          "repoURL": "https://github.com/org/infra-repo.git",
+          "branch": "main",
+          "files": [
+            {
+              "path": "apps/production/deployment.yaml",
+              "content": "apiVersion: apps/v1\nkind: Deployment\nmetadata:\n  name: api-server\nspec:\n  template:\n    spec:\n      containers:\n      - name: api-server\n        image: org/api-server:v2.1.0\n",
+              "description": "Changed image tag from 'v2.broken' to 'v2.1.0'"
+            }
+          ]
+        }
+      }
+    ],
+    "risk": "low"
+  },
+  "validationIntent": "Wait for Argo CD to sync, then verify pods are running with the correct image"
+}
+```
+
 ## Example Response - No Issue Found
 
 ```json