@cogitator-ai/self-modifying 0.1.0 → 2.0.0

package/src/tool-generation/tool-sandbox.ts

@@ -1,8 +1,4 @@
-import type {
-  ToolSandboxConfig,
-  ToolSandboxResult,
-  GeneratedTool,
-} from '@cogitator-ai/types';
+import type { ToolSandboxConfig, ToolSandboxResult, GeneratedTool } from '@cogitator-ai/types';
 
 export const DEFAULT_SANDBOX_CONFIG: ToolSandboxConfig = {
   enabled: true,
@@ -43,10 +39,7 @@ export class ToolSandbox {
     this.config = { ...DEFAULT_SANDBOX_CONFIG, ...config };
   }
 
-  async execute(
-    tool: GeneratedTool,
-    params: unknown
-  ): Promise<ToolSandboxResult> {
+  async execute(tool: GeneratedTool, params: unknown): Promise<ToolSandboxResult> {
     const startTime = Date.now();
     this.logs.length = 0;
 
@@ -114,9 +107,7 @@ export class ToolSandbox {
       if (testCase.shouldThrow) {
         passed = !execResult.success;
       } else if (testCase.expectedOutput !== undefined) {
-        passed =
-          execResult.success &&
-          this.deepEqual(execResult.result, testCase.expectedOutput);
+        passed = execResult.success && this.deepEqual(execResult.result, testCase.expectedOutput);
       } else {
         passed = execResult.success;
       }
@@ -174,9 +165,7 @@ export class ToolSandbox {
 
     for (const pattern of forbidden) {
       if (pattern.test(code)) {
-        throw new Error(
-          `Security violation: forbidden pattern detected - ${pattern.source}`
-        );
+        throw new Error(`Security violation: forbidden pattern detected - ${pattern.source}`);
       }
     }
 
@@ -187,18 +176,16 @@ export class ToolSandbox {
   }
 
   private createContext(): SandboxContext {
-    const sandbox = this;
-
     return {
       console: {
         log: (...args: unknown[]) => {
-          sandbox.logs.push(`[LOG] ${args.map(String).join(' ')}`);
+          this.logs.push(`[LOG] ${args.map(String).join(' ')}`);
         },
         warn: (...args: unknown[]) => {
-          sandbox.logs.push(`[WARN] ${args.map(String).join(' ')}`);
+          this.logs.push(`[WARN] ${args.map(String).join(' ')}`);
         },
         error: (...args: unknown[]) => {
-          sandbox.logs.push(`[ERROR] ${args.map(String).join(' ')}`);
+          this.logs.push(`[ERROR] ${args.map(String).join(' ')}`);
         },
       },
       Math,
@@ -247,6 +234,7 @@ export class ToolSandbox {
       }, timeout);
 
       try {
+        // eslint-disable-next-line @typescript-eslint/no-implied-eval
         const factory = new Function(wrappedCode);
         const executor = factory();
 
@@ -255,13 +243,13 @@ export class ToolSandbox {
             clearTimeout(timer);
             resolve(result);
           })
-          .catch((error) => {
+          .catch((error: unknown) => {
             clearTimeout(timer);
-            reject(error);
+            reject(error instanceof Error ? error : new Error(String(error)));
           });
       } catch (error) {
         clearTimeout(timer);
-        reject(error);
+        reject(error instanceof Error ? error : new Error(String(error)));
       }
     });
   }
@@ -272,6 +260,7 @@ export class ToolSandbox {
     startTime: number
   ): Promise<ToolSandboxResult> {
     try {
+      // eslint-disable-next-line @typescript-eslint/no-implied-eval
       const factory = new Function(`
         "use strict";
         ${tool.implementation}

package/src/tool-generation/tool-validator.ts

@@ -56,9 +56,9 @@ const STATIC_VALIDATION_RULES: ValidationRule[] = [
     name: 'No prototype pollution',
     severity: 'error',
     check: (code) => {
-      if (/__proto__/.test(code)) return 'Uses __proto__';
+      if (code.includes('__proto__')) return 'Uses __proto__';
       if (/\.prototype\s*=/.test(code)) return 'Modifies prototype';
-      if (/Object\.setPrototypeOf/.test(code)) return 'Uses setPrototypeOf';
+      if (code.includes('Object.setPrototypeOf')) return 'Uses setPrototypeOf';
       return null;
     },
   },
@@ -67,10 +67,10 @@ const STATIC_VALIDATION_RULES: ValidationRule[] = [
     name: 'No obvious infinite loops',
     severity: 'warning',
     check: (code) => {
-      if (/while\s*\(\s*true\s*\)/.test(code) && !/break/.test(code)) {
+      if (/while\s*\(\s*true\s*\)/.test(code) && !code.includes('break')) {
         return 'Contains while(true) without break';
       }
-      if (/for\s*\(\s*;\s*;\s*\)/.test(code) && !/break/.test(code)) {
+      if (/for\s*\(\s*;\s*;\s*\)/.test(code) && !code.includes('break')) {
         return 'Contains for(;;) without break';
       }
       return null;
@@ -107,7 +107,7 @@ const STATIC_VALIDATION_RULES: ValidationRule[] = [
     name: 'No shell command execution',
     severity: 'error',
     check: (code) => {
-      if (/child_process/.test(code)) return 'Uses child_process';
+      if (code.includes('child_process')) return 'Uses child_process';
       if (/\bexec\s*\(/.test(code)) return 'Uses exec()';
       if (/\bspawn\s*\(/.test(code)) return 'Uses spawn()';
       if (/\bexecSync\s*\(/.test(code)) return 'Uses execSync()';
@@ -188,7 +188,10 @@ export class ToolValidator {
     if (sandboxResult.failed > 0) {
       const failedTests = sandboxResult.results.filter((r) => !r.passed);
       logicIssues.push(
-        ...failedTests.map((t) => `Test failed for input ${JSON.stringify(t.input)}: ${t.error || 'unexpected output'}`)
+        ...failedTests.map(
+          (t) =>
+            `Test failed for input ${JSON.stringify(t.input)}: ${t.error || 'unexpected output'}`
+        )
       );
     }
 
@@ -266,15 +269,18 @@ export class ToolValidator {
         }))
       );
 
-      const response = await this.callLLM([
-        {
-          role: 'system',
-          content: `You are a security auditor and code reviewer.
+      const response = await this.callLLM(
+        [
+          {
+            role: 'system',
+            content: `You are a security auditor and code reviewer.
 Analyze code for security vulnerabilities, logic errors, and edge cases.
 Be thorough but practical - focus on real issues.`,
-        },
-        { role: 'user', content: prompt },
-      ], 0.2);
+          },
+          { role: 'user', content: prompt },
+        ],
+        0.2
+      );
 
       return response ? parseValidationResponse(response.content) : null;
     } catch {
@@ -285,15 +291,13 @@ Be thorough but practical - focus on real issues.`,
   private generateBasicTestCases(
     tool: GeneratedTool
   ): Array<{ input: unknown; expectedOutput?: unknown; shouldThrow?: boolean }> {
-    const testCases: Array<{ input: unknown; expectedOutput?: unknown; shouldThrow?: boolean }> = [];
+    const testCases: Array<{ input: unknown; expectedOutput?: unknown; shouldThrow?: boolean }> =
+      [];
     const params = tool.parameters;
 
     if (params.type === 'object' && params.properties) {
       const validInput: Record<string, unknown> = {};
-      const properties = params.properties as Record<
-        string,
-        { type?: string; default?: unknown }
-      >;
+      const properties = params.properties as Record<string, { type?: string; default?: unknown }>;
 
       for (const [key, schema] of Object.entries(properties)) {
         validInput[key] = this.generateSampleValue(schema.type, schema.default);