@cyanautomation/kaseki-agent 1.17.0 → 1.18.0

package/README.md

@@ -1287,6 +1287,7 @@ API controllers may send either the direct fields (`changedFilesAllowlist`, `val
 | `KASEKI_REPO_MEMORY_MODE` | `off` | Opt-in repository prompt memory: `off` disables it; `summary` appends a compact prior-context summary when fresh |
 | `KASEKI_REPO_MEMORY_TTL_DAYS` | `30` | Maximum age for a repository memory summary before it is ignored |
 | `KASEKI_REPO_MEMORY_MAX_BYTES` | `8000` | Maximum bytes to read/write for the repository memory prompt section |
+| `KASEKI_REPO_MEMORY_ROOT` | `/cache/repo-memory` | Directory root for repository memory summaries |
 
 ### Docker and Images
 
@@ -1415,7 +1416,7 @@ Set `KASEKI_GIT_CACHE_MODE=off` to disable Git mirror caching. Clone duration pl
 
 ### Repository Memory Cache
 
-Repository memory is disabled by default. Set `KASEKI_REPO_MEMORY_MODE=summary` to opt in to a compact prompt-context cache for the target repository and ref. Kaseki stores this summary at `/cache/repo-memory/<repo-key>/summary.md`, where `<repo-key>` is derived from the repository URL and default ref. Before invoking the agent, Kaseki appends a clearly labeled “Prior repository context” section only when the summary exists, is within `KASEKI_REPO_MEMORY_TTL_DAYS`, and is no larger than `KASEKI_REPO_MEMORY_MAX_BYTES`.
+Repository memory is disabled by default. Set `KASEKI_REPO_MEMORY_MODE=summary` to opt in to a compact prompt-context cache for the target repository and ref. Kaseki stores this summary at `${KASEKI_REPO_MEMORY_ROOT}/<repo-key>/summary.md`, where `KASEKI_REPO_MEMORY_ROOT` defaults to `/cache/repo-memory` and `<repo-key>` is derived from the repository URL and default ref. Before invoking the agent, Kaseki appends a clearly labeled “Prior repository context” section only when the summary exists, is within `KASEKI_REPO_MEMORY_TTL_DAYS`, and is no larger than `KASEKI_REPO_MEMORY_MAX_BYTES`.
 
 After a successful run, or an inspect-mode run where the agent completed and the secret scan passed, Kaseki rewrites the summary from bounded, sanitized artifacts: `result-summary.md`, `analysis.md`, `changed-files.txt`, and validation timing/status outcomes. The summary records the repo URL, default ref, commit SHA, and timestamp so stale context is visible to the next agent. Kaseki does not blindly persist raw logs or user prompts, and lines resembling secrets, credentials, API keys, tokens, or prompt text are filtered out before writing memory.
 

package/kaseki-agent.sh

@@ -14,6 +14,7 @@ KASEKI_VALIDATION_COMMANDS="${KASEKI_VALIDATION_COMMANDS-npm run check;npm run t
 KASEKI_SKIP_MISSING_NPM_SCRIPTS="${KASEKI_SKIP_MISSING_NPM_SCRIPTS:-1}"
 KASEKI_DEBUG_RAW_EVENTS="${KASEKI_DEBUG_RAW_EVENTS:-0}"
 KASEKI_STREAM_PROGRESS="${KASEKI_STREAM_PROGRESS:-1}"
+KASEKI_RESULTS_DIR="${KASEKI_RESULTS_DIR:-/results}"
 KASEKI_VALIDATE_AFTER_AGENT_FAILURE="${KASEKI_VALIDATE_AFTER_AGENT_FAILURE:-0}"
 KASEKI_TASK_MODE="${KASEKI_TASK_MODE:-patch}"
 KASEKI_ALLOW_EMPTY_DIFF="${KASEKI_ALLOW_EMPTY_DIFF:-0}"
@@ -23,6 +24,7 @@ KASEKI_MAX_DIFF_BYTES="${KASEKI_MAX_DIFF_BYTES:-200000}"
 KASEKI_REPO_MEMORY_MODE="${KASEKI_REPO_MEMORY_MODE:-off}"
 KASEKI_REPO_MEMORY_TTL_DAYS="${KASEKI_REPO_MEMORY_TTL_DAYS:-30}"
 KASEKI_REPO_MEMORY_MAX_BYTES="${KASEKI_REPO_MEMORY_MAX_BYTES:-8000}"
+KASEKI_REPO_MEMORY_ROOT="${KASEKI_REPO_MEMORY_ROOT:-/cache/repo-memory}"
 TASK_PROMPT="${TASK_PROMPT:-Make normalizeRole treat a non-string Name fallback safely when FriendlyName is empty or missing. It should fall back to \"Unnamed Role\" instead of preserving arbitrary truthy non-string values. Add or update exactly one compact table-driven Vitest case in tests/parser.validation.ts, with a neutral static test title and no per-case assertion messages or explanatory comments. Do not add broad repeated test blocks. Do not print, inspect, or expose environment variables, secrets, credentials, or API keys. Keep changes limited to the source and test files needed for this fix.}"
 KASEKI_AGENT_GUARDRAILS="${KASEKI_AGENT_GUARDRAILS:-1}"
 KASEKI_RESTORE_DISALLOWED_CHANGES="${KASEKI_RESTORE_DISALLOWED_CHANGES:-1}"
@@ -1171,7 +1173,7 @@ init_repo_memory_paths() {
     return 0
   fi
   REPO_MEMORY_KEY="$(compute_repo_memory_key)"
-  REPO_MEMORY_DIR="/cache/repo-memory/$REPO_MEMORY_KEY"
+  REPO_MEMORY_DIR="$KASEKI_REPO_MEMORY_ROOT/$REPO_MEMORY_KEY"
   REPO_MEMORY_FILE="$REPO_MEMORY_DIR/summary.md"
   REPO_MEMORY_STATUS="enabled"
 }
@@ -1222,10 +1224,10 @@ write_repo_memory_summary() {
   local updated_at
   REPO_MEMORY_COMMIT_SHA="$(git -C /workspace/repo rev-parse HEAD 2>/dev/null || printf 'unknown')"
   updated_at="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-  node - "$KASEKI_REPO_MEMORY_MAX_BYTES" "$REPO_MEMORY_FILE" "$REPO_URL" "$GIT_REF" "$REPO_MEMORY_COMMIT_SHA" "$updated_at" "$KASEKI_TASK_MODE" "$STATUS" "$PI_EXIT" "$VALIDATION_EXIT" "$QUALITY_EXIT" "$SECRET_SCAN_EXIT" <<'NODE' || {
+  node - "$KASEKI_REPO_MEMORY_MAX_BYTES" "$REPO_MEMORY_FILE" "$KASEKI_RESULTS_DIR" "$REPO_URL" "$GIT_REF" "$REPO_MEMORY_COMMIT_SHA" "$updated_at" "$KASEKI_TASK_MODE" "$STATUS" "$PI_EXIT" "$VALIDATION_EXIT" "$QUALITY_EXIT" "$SECRET_SCAN_EXIT" <<'NODE' || {
 const fs = require('fs');
 const path = require('path');
-const [maxBytesArg, outputFile, repoUrl, gitRef, commitSha, timestamp, taskMode, status, piExit, validationExit, qualityExit, secretScanExit] = process.argv.slice(2);
+const [maxBytesArg, outputFile, resultsDir, repoUrl, gitRef, commitSha, timestamp, taskMode, status, piExit, validationExit, qualityExit, secretScanExit] = process.argv.slice(2);
 const maxBytes = Math.max(1024, Number(maxBytesArg) || 8000);
 
 function readFile(file, maxChars = 12000) {
@@ -1255,7 +1257,7 @@ function compactLines(text, limit = 16) {
 }
 
 function changedFiles() {
-  return sanitize(readFile('/results/changed-files.txt', 4000))
+  return sanitize(readFile(path.join(resultsDir, 'changed-files.txt'), 4000))
     .split(/\r?\n/)
     .map((line) => line.trim())
     .filter(Boolean)
@@ -1263,7 +1265,7 @@ function changedFiles() {
 }
 
 function validationOutcomes() {
-  const rows = sanitize(readFile('/results/validation-timings.tsv', 8000))
+  const rows = sanitize(readFile(path.join(resultsDir, 'validation-timings.tsv'), 8000))
     .split(/\r?\n/)
     .map((line) => line.split('\t'))
     .filter((parts) => parts.length >= 2 && parts[0]);
@@ -1271,8 +1273,8 @@ function validationOutcomes() {
   return rows.slice(0, 20).map(([command, exitCode, duration]) => `${command}: exit ${exitCode}${duration ? `, ${duration}s` : ''}`);
 }
 
-const resultLines = compactLines(readFile('/results/result-summary.md'));
-const analysisLines = compactLines(readFile('/results/analysis.md'), 10);
+const resultLines = compactLines(readFile(path.join(resultsDir, 'result-summary.md')));
+const analysisLines = compactLines(readFile(path.join(resultsDir, 'analysis.md')), 10);
 const files = changedFiles();
 const validations = validationOutcomes();
 
@@ -2032,7 +2034,7 @@ else
   unset agent_prompt
   PI_DURATION_SECONDS=$(($(date +%s) - PI_START_EPOCH))
   unset OPENROUTER_API_KEY openrouter_api_key openrouter_api_key_source
-  set -e
+  set +e
   record_stage_timing "pi coding agent" "$PI_EXIT" "$PI_DURATION_SECONDS" "timeout_seconds=$KASEKI_AGENT_TIMEOUT_SECONDS"
 
   if [ "$KASEKI_DEBUG_RAW_EVENTS" = "1" ]; then
@@ -2074,7 +2076,7 @@ else
     set +e
     kaseki-pi-event-filter "$RAW_EVENTS" /results/pi-events.jsonl /results/pi-summary.json
     FILTER_EXIT=$?
-    set -e
+    set +e
   fi
   if [ "$FILTER_EXIT" -ne 0 ]; then
     printf 'pi-event-filter failed with exit %s; raw events preserved as fallback artifact\n' "$FILTER_EXIT" | tee -a /results/quality.log
@@ -2298,7 +2300,7 @@ else
     if [ -n "$VALIDATION_FAILED_COMMAND_DETAIL" ]; then
       printf 'Validation failed: %s\n' "$VALIDATION_FAILED_COMMAND_DETAIL" | tee -a /results/validation.log
     fi
-    set -e
+    set +e
   fi
   record_stage_timing "validation" "$VALIDATION_EXIT" "$(($(date +%s) - stage_start))" ""
 fi
@@ -2342,12 +2344,25 @@ emit_progress "secret scan" "finished with exit $SECRET_SCAN_EXIT"
 
 build_github_skip_reasons() {
   GITHUB_SKIP_REASONS=()
-  [ "$GITHUB_APP_ENABLED" != "1" ] && GITHUB_SKIP_REASONS+=("github_app_disabled")
-  [ "$PI_EXIT" -ne 0 ] && GITHUB_SKIP_REASONS+=("agent_failed")
-  [ "$VALIDATION_EXIT" -ne 0 ] && GITHUB_SKIP_REASONS+=("validation_failed")
-  [ "$QUALITY_EXIT" -ne 0 ] && GITHUB_SKIP_REASONS+=("quality_failed")
-  [ "$SECRET_SCAN_EXIT" -ne 0 ] && GITHUB_SKIP_REASONS+=("secret_scan_failed")
-  [ "$DIFF_NONEMPTY" != "true" ] && GITHUB_SKIP_REASONS+=("empty_diff")
+  if [ "$GITHUB_APP_ENABLED" != "1" ]; then
+    GITHUB_SKIP_REASONS+=("github_app_disabled")
+  fi
+  if [ "$PI_EXIT" -ne 0 ]; then
+    GITHUB_SKIP_REASONS+=("agent_failed")
+  fi
+  if [ "$VALIDATION_EXIT" -ne 0 ]; then
+    GITHUB_SKIP_REASONS+=("validation_failed")
+  fi
+  if [ "$QUALITY_EXIT" -ne 0 ]; then
+    GITHUB_SKIP_REASONS+=("quality_failed")
+  fi
+  if [ "$SECRET_SCAN_EXIT" -ne 0 ]; then
+    GITHUB_SKIP_REASONS+=("secret_scan_failed")
+  fi
+  if [ "$DIFF_NONEMPTY" != "true" ]; then
+    GITHUB_SKIP_REASONS+=("empty_diff")
+  fi
+  return 0
 }
 
 printf '\n==> github operations\n'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyanautomation/kaseki-agent",
-  "version": "1.17.0",
+  "version": "1.18.0",
   "description": "Ephemeral coding-agent runner: orchestrates Pi CLI via Docker for automated code modifications with validation",
   "type": "module",
   "license": "MIT",