kifaru 1.0.168 → 1.0.170

package/kifaru-pi.js

@@ -16476,7 +16476,7 @@ var init_installation = __esm(async () => {
         });
     }
     Installation.upgrade = upgrade;
-    Installation.VERSION = "1.0.168";
+    Installation.VERSION = "1.0.170";
     Installation.CHANNEL = typeof KIFARU_CHANNEL === "string" ? KIFARU_CHANNEL : "local";
     Installation.USER_AGENT = `kifaru/${Installation.CHANNEL}/${Installation.VERSION}`;
     async function latest() {
@@ -127710,6 +127710,63 @@ ${await capturePythonPrompt(ctx.cwd)}`
   };
 }
 
+// src/tui-logger.ts
+import fs14 from "fs";
+import os10 from "os";
+import path21 from "path";
+function kifaruDataDir() {
+  if (process.env.KIFARU_XDG_DATA_HOME)
+    return process.env.KIFARU_XDG_DATA_HOME;
+  if (os10.platform() === "win32") {
+    return path21.join(process.env.LOCALAPPDATA || path21.join(os10.homedir(), "AppData", "Local"), "kifaru", "data");
+  }
+  return path21.join(process.env.XDG_DATA_HOME || path21.join(os10.homedir(), ".local", "share"), "kifaru");
+}
+function resolveLogFilePath() {
+  if (process.env.KIFARU_LOG_FILE)
+    return path21.resolve(process.env.KIFARU_LOG_FILE);
+  return path21.join(kifaruDataDir(), "log", "dev.log");
+}
+var initialized = false;
+var activeLogPath = "";
+function ensureLogDir() {
+  if (!initialized) {
+    activeLogPath = resolveLogFilePath();
+    try {
+      fs14.mkdirSync(path21.dirname(activeLogPath), { recursive: true });
+    } catch {}
+    initialized = true;
+  }
+  return activeLogPath;
+}
+function writeLog(level, category, message2, extra) {
+  try {
+    const file3 = ensureLogDir();
+    const ts = new Date().toISOString();
+    const extraStr = extra !== undefined ? ` ${typeof extra === "object" ? JSON.stringify(extra) : String(extra)}` : "";
+    const line = `${ts} [${level}] [${category}] ${message2}${extraStr}
+`;
+    fs14.appendFileSync(file3, line, "utf8");
+  } catch {}
+}
+var tuiLog = {
+  get filePath() {
+    return ensureLogDir();
+  },
+  debug(category, message2, extra) {
+    writeLog("DEBUG", category, message2, extra);
+  },
+  info(category, message2, extra) {
+    writeLog("INFO", category, message2, extra);
+  },
+  warn(category, message2, extra) {
+    writeLog("WARN", category, message2, extra);
+  },
+  error(category, message2, extra) {
+    writeLog("ERROR", category, message2, extra);
+  }
+};
+
 // src/pi-platform-client.ts
 function trimSlash(value) {
   return value.replace(/\/+$/, "");
@@ -127738,10 +127795,15 @@ function createPiPlatformClient(options2 = {}) {
   const env2 = options2.env ?? process.env;
   const fetchImpl = options2.fetchImpl ?? fetch;
   const config4 = resolveConfig(env2);
-  if (!config4)
+  if (!config4) {
+    tuiLog.info("platform", "Platform ingestion disabled: KIFARU_PLATFORM_INTERNAL_TOKEN is not set. Runs and findings will remain host-local.");
     return disabledClient;
-  async function request(path21, method, body) {
-    const response = await fetchImpl(`${config4.baseURL}/api/v1/${path21}`, {
+  }
+  tuiLog.info("platform", `Platform ingestion enabled -> ${config4.baseURL}`);
+  async function request(path22, method, body) {
+    const url3 = `${config4.baseURL}/api/v1/${path22}`;
+    tuiLog.debug("platform:http", `-> ${method} ${url3}`);
+    const response = await fetchImpl(url3, {
       method,
       headers: {
         Authorization: `Bearer ${config4.token}`,
@@ -127750,9 +127812,11 @@ function createPiPlatformClient(options2 = {}) {
       signal: AbortSignal.timeout(1e4),
       ...body === undefined ? {} : { body: JSON.stringify(body) }
     });
+    tuiLog.debug("platform:http", `<- ${response.status} ${method} ${url3}`);
     if (!response.ok) {
       const detail = await response.text().catch(() => "");
       const code = response.status === 404 && /was not found/i.test(detail) ? "KIFARU_RUN_MISSING" : `KIFARU_HTTP_${response.status}`;
+      tuiLog.error("platform:http", `Request failed (${response.status}): ${detail || response.statusText}`);
       throw Object.assign(new Error(`Kifaru platform request failed (${response.status}): ${detail || response.statusText}`), { code });
     }
     return response;
@@ -127765,6 +127829,7 @@ function createPiPlatformClient(options2 = {}) {
       const result = await response.json();
       if (!result.result?.recorded)
         throw Object.assign(new Error("Platform operation was not linked to a run"), { code: "KIFARU_RUN_UNLINKED" });
+      tuiLog.debug("platform:operation", `Recorded operation ${input.toolCallID} (${input.tool}) -> ${input.status}`);
     },
     async createRun(input) {
       const response = await request("runs", "POST", {
@@ -127777,17 +127842,23 @@ function createPiPlatformClient(options2 = {}) {
         ...input.idempotencyKey ? { idempotencyKey: input.idempotencyKey } : {}
       });
       const parsed = await response.json();
-      return parsed.run?.id ?? null;
+      const runID = parsed.run?.id ?? null;
+      tuiLog.info("platform:run", `Created platform run: ${runID}`, { title: input.title, target: input.targetID });
+      return runID;
     },
     async ingestFindings(runID, findings) {
       if (findings.length === 0)
         return { created: 0, updated: 0 };
       const response = await request(`runs/${encodeURIComponent(runID)}/findings`, "POST", { findings });
       const parsed = await response.json();
-      return { created: parsed.result?.created ?? 0, updated: parsed.result?.updated ?? 0 };
+      const created = parsed.result?.created ?? 0;
+      const updated = parsed.result?.updated ?? 0;
+      tuiLog.info("platform:finding", `Ingested ${findings.length} finding(s) into run ${runID} (created=${created}, updated=${updated})`);
+      return { created, updated };
     },
     async transitionRun(runID, status, details = {}) {
       await request(`runs/${encodeURIComponent(runID)}/status`, "POST", { status, ...details });
+      tuiLog.info("platform:run", `Transitioned run ${runID} to ${status}`, details);
     }
   };
 }
@@ -132179,6 +132250,7 @@ ${p2.statutoryObligations.map((o2) => `\u2022 ${o2}`).join(`
         remediation: p2.remediation?.slice(0, 20000)
       };
       if (!client.enabled) {
+        tuiLog.warn("report_finding", `Finding recorded locally ONLY (Platform ingestion disabled): "${finding.title}"`);
         return {
           content: [
             {
@@ -132195,6 +132267,7 @@ ${p2.statutoryObligations.map((o2) => `\u2022 ${o2}`).join(`
       }
       try {
         const result = await withPiPlatformRun(client, ctx, () => client.ingestFindings(ctx.runID, [finding]));
+        tuiLog.info("report_finding", `Finding recorded to platform: [${finding.severity.toUpperCase()}] "${finding.title}" -> run ${ctx.runID}`, { file: finding.file, category, cvssScore: finding.cvssScore });
         ctx.findingCount += 1;
         if (!ctx.worstSeverity || SEVERITY_RANK[finding.severity] > SEVERITY_RANK[ctx.worstSeverity]) {
           ctx.worstSeverity = finding.severity;
@@ -132247,7 +132320,7 @@ function createReportFindingExtension(deps2) {
 
 // src/pi-dossier-sync.ts
 import { readFile } from "fs/promises";
-import path21 from "path";
+import path22 from "path";
 var severityWords = [
   [/critical|account takeover|authentication bypass|sql injection|arbitrary query/i, "critical"],
   [/high|privilege escalation|ssrf|credential|idor|authorization|sensitive/i, "high"],
@@ -132307,7 +132380,7 @@ async function syncPiDossier(client, context3, cwd, read = readFile) {
     return { ...NOTHING, skipped: "unparseable-target" };
   let raw;
   try {
-    raw = await read(path21.join(cwd, ".kifaru", "dossiers", `${name21}.json`), "utf8");
+    raw = await read(path22.join(cwd, ".kifaru", "dossiers", `${name21}.json`), "utf8");
   } catch (error92) {
     if (error92.code === "ENOENT")
       return { ...NOTHING, skipped: "no-dossier-file" };
@@ -132367,6 +132440,7 @@ function createKifaruExtension(state2, cwd, deps2) {
       pi.on("session_start", (_event, ctx) => updateStatus(ctx));
       const toolStarts = new Map;
       pi.on("agent_start", async (_event, ctx) => {
+        tuiLog.info("agent", `Agent turn starting: workflow=${state2.agentKey}, target=${state2.target}`);
         try {
           await ensurePiPlatformRun(deps2.client, deps2.runContext);
         } catch (error92) {
@@ -132381,6 +132455,7 @@ function createKifaruExtension(state2, cwd, deps2) {
         const startedAt = start?.startedAt ?? Date.now();
         const args = start?.args;
         toolStarts.delete(event.toolCallId);
+        tuiLog.info("agent:tool", `Tool call finished: ${event.toolName} (status: ${event.isError ? "error" : "ok"}, duration: ${Date.now() - startedAt}ms)`);
         if (!deps2.client.enabled || !deps2.client.recordOperation)
           return;
         let outputPreview;
@@ -132413,6 +132488,7 @@ function createKifaruExtension(state2, cwd, deps2) {
         }
       });
       pi.on("agent_settled", async () => {
+        tuiLog.info("agent", `Agent turn settled: findings=${deps2.runContext.findingCount}, worstSeverity=${deps2.runContext.worstSeverity ?? "none"}`);
         if (!deps2.client.enabled)
           return;
         await completePiPlatformRun(deps2.client, deps2.runContext, {
@@ -132581,14 +132657,14 @@ async function runKifaruTui(options2) {
 }
 
 // src/session-client.ts
-import fs14 from "fs/promises";
-import os10 from "os";
-import path22 from "path";
+import fs15 from "fs/promises";
+import os11 from "os";
+import path23 from "path";
 function sessionFile() {
   if (process.env.KIFARU_SESSION_FILE)
     return process.env.KIFARU_SESSION_FILE;
-  const xdg = process.env.XDG_DATA_HOME || path22.join(os10.homedir(), ".local", "share");
-  return path22.join(xdg, "kifaru", "data", "auth", "session.json");
+  const xdg = process.env.XDG_DATA_HOME || path23.join(os11.homedir(), ".local", "share");
+  return path23.join(xdg, "kifaru", "data", "auth", "session.json");
 }
 async function resolveGatewayOrigin(explicitOrigin) {
   if (explicitOrigin && explicitOrigin.trim()) {
@@ -132610,7 +132686,7 @@ async function resolveGatewayOrigin(explicitOrigin) {
   return "https://kifaru.bastco.org";
 }
 async function readSession() {
-  const raw = await fs14.readFile(sessionFile(), "utf8").catch(() => null);
+  const raw = await fs15.readFile(sessionFile(), "utf8").catch(() => null);
   if (!raw)
     return null;
   try {
@@ -132631,10 +132707,10 @@ async function readSession() {
 }
 async function writeSession(session) {
   const file3 = sessionFile();
-  await fs14.mkdir(path22.dirname(file3), { recursive: true });
+  await fs15.mkdir(path23.dirname(file3), { recursive: true });
   const tmp = `${file3}.tmp`;
-  await fs14.writeFile(tmp, JSON.stringify(session, null, 2), "utf8");
-  await fs14.rename(tmp, file3);
+  await fs15.writeFile(tmp, JSON.stringify(session, null, 2), "utf8");
+  await fs15.rename(tmp, file3);
 }
 function mask(token) {
   return token.length > 12 ? `${token.slice(0, 6)}\u2026${token.slice(-4)}` : "\u2026";
@@ -132752,8 +132828,8 @@ async function executeSessionLogout() {
         signal: AbortSignal.timeout(3000)
       }).catch(() => null);
     } catch {}
-    await fs14.rm(sessionFile(), { force: true }).catch(() => null);
-    await fs14.rm(`${sessionFile()}.tmp`, { force: true }).catch(() => null);
+    await fs15.rm(sessionFile(), { force: true }).catch(() => null);
+    await fs15.rm(`${sessionFile()}.tmp`, { force: true }).catch(() => null);
   }
   return { ok: true, text: "\u2713 Successfully logged out. Session removed." };
 }
@@ -132781,7 +132857,7 @@ Interactive TUI Commands:
 async function handleCli() {
   const args = process.argv.slice(2);
   if (args.includes("--version") || args.includes("-v")) {
-    console.log("1.0.168");
+    console.log("1.0.170");
     process.exit(0);
   }
   if (args.includes("--help") || args.includes("-h")) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "kifaru",
-  "version": "1.0.168",
-  "gitHead": "2210a459d81a3b908dc188d2336831f0eaa4a6a6",
+  "version": "1.0.170",
+  "gitHead": "4afa42479180899946162c56cf0badb9ff08b05c",
   "description": "Kifaru security agent on the Pi runtime",
   "type": "module",
   "license": "MIT",