@awak-app/simy-cli 0.5.68 → 0.5.70

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.5.68",
+  "version": "0.5.70",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {

package/src/agent.js

@@ -875,7 +875,7 @@ export async function startAgent({
       runReview: async (request, provider) => {
         const scope = await authorizeDesktopWork();
         const beforeDispatch = () => authorizeDesktopWork(scope);
-        return (dependencies.runSqmLocalReview || ((value, selected, options) => runStructuredProviderReview(selected, value, options)))(request, provider, { beforeDispatch });
+        return (dependencies.runSqmLocalReview || ((value, selected, options) => runStructuredProviderReview(selected, value, options)))(request, provider, { beforeDispatch, readOnlyAnalysis: true });
       },
       onChange: notifyDesktopStatusChange,
       getWorkspaceUrl: () => {

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.5.68";
+export const CLI_VERSION = "0.5.70";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function withCliContract(

package/src/sqm/review-worker.js

@@ -18,12 +18,13 @@ const DEFAULT_EXECUTION_TIMEOUT_MS = 240_000;
 export const SQM_CODEX_MODEL = "gpt-6.1-sol";
 
 export class SqmLocalReviewError extends Error {
-  constructor(message, { status = null, code = "sqm_local_review_error", stage = null, jobId = null, failureRecorded = false } = {}) {
+  constructor(message, { status = null, code = "sqm_local_review_error", stage = null, jobId = null, failureRecorded = false, validationFeedback = "" } = {}) {
     super(message);
     this.name = "SqmLocalReviewError";
     this.status = status;
     this.code = code;
     this.stage = stage; this.jobId = jobId; this.failureRecorded = failureRecorded;
+    this.validationFeedback = typeof validationFeedback === "string" ? validationFeedback.slice(0, 2000) : "";
   }
 }
 
@@ -71,6 +72,7 @@ export function createSqmLocalReviewApi({
           status: response.status,
           code: machineCode(payload?.code || payload?.detail?.code),
           stage: payload?.detail?.stage, jobId: payload?.detail?.job_id, failureRecorded: payload?.detail?.failure_recorded === true,
+          validationFeedback: payload?.detail?.validation_feedback,
         });
       }
       return payload;
@@ -124,6 +126,23 @@ export function createSqmLocalReviewWorker({
     lease_token: claim.lease_token,
   });
 
+  // Repair only a rejected model result, under the same live lease. Network,
+  // authorization, and persistence failures must not repeat provider execution.
+  const validatedReview = async (request, provider, code, submit, setStage) => {
+    let nextRequest = request;
+    for (let attempt = 0; ; attempt += 1) {
+      setStage(false);
+      const review = await runReview(nextRequest, provider);
+      setStage(true);
+      try {
+        return { review, response: await submit(review) };
+      } catch (error) {
+        if (attempt >= 1 || error.status !== 422 || error.code !== code || !error.validationFeedback) throw error;
+        nextRequest = { ...request, prompt: `${request.prompt}\n\nThe previous result failed validation. Return a corrected complete JSON object using only the supplied evidence. Fix these constraints:\n${error.validationFeedback}` };
+      }
+    }
+  };
+
   const processClaim = async (claim, provider, historyScope, workspaceUrl) => {
     activeJobId = claim.job_id;
     const priorIndex = history.findIndex(item => item.id === claim.job_id);
@@ -142,25 +161,21 @@ export function createSqmLocalReviewWorker({
     heartbeatTimer.unref?.();
     let stage = "analysis";
     try {
-      const analysis = await runReview(claim.request, provider);
-      stage = "advance";
-      const advanced = await api.request({
+      const { review: analysis, response: advanced } = await validatedReview(claim.request, provider, "invalid_sqm_analysis_output", analysis => api.request({
         action: "advance",
         ...leaseBody(claim, provider),
         analysis_output: analysis.output,
         executor_model: analysis.model,
-      });
+      }), submitting => { stage = submitting ? "advance" : "analysis"; });
       if (advanced.completed) { await updateTask(claim.job_id, "completed", historyScope); return advanced; }
       stage = "adjudication";
-      const adjudication = await runReview(advanced.request, provider);
-      stage = "complete";
-      const completed = await api.request({
+      const { response: completed } = await validatedReview(advanced.request, provider, "invalid_sqm_adjudication_output", adjudication => api.request({
         action: "complete",
         ...leaseBody(claim, provider),
         analysis_output: analysis.output,
         adjudication_output: adjudication.output,
         executor_model: adjudication.model || analysis.model,
-      });
+      }), submitting => { stage = submitting ? "complete" : "adjudication"; });
       await updateTask(claim.job_id, "completed", historyScope);
       return completed;
     } catch (error) {
@@ -253,7 +268,7 @@ export async function runStructuredProviderReview(
     executionTimeoutMs = DEFAULT_EXECUTION_TIMEOUT_MS,
     environment = process.env,
     signal,
-    readOnlyAnalysis = false,
+    readOnlyAnalysis = true,
     terminationGraceMs = 1_000,
     beforeDispatch = async () => {},
   } = {},
@@ -436,7 +451,7 @@ function spawnReview(command, args, prompt, { spawnImpl, executionTimeoutMs, lab
 function providerSignInRequired(message) {
   // Match explicit provider authentication failures only, never general 403s
   // (which can be permissions/quotas) or model-generated prose/tool output.
-  return typeof message === 'string' && /(?:not logged in|please (?:log|sign) in|invalid api key|authentication token (?:is )?(?:invalid|expired)|refresh token (?:has )?expired)/i.test(message.slice(0, 4000));
+  return typeof message === 'string' && /(?:\b401\s+Unauthorized\b|not logged in|please (?:log|sign) in|invalid api key|authentication token (?:is )?(?:invalid|expired)|refresh token (?:has )?expired)/i.test(message.slice(0, 4000));
 }
 
 function safeReviewEnvironment(environment, provider) {