@lazyingart/agintiflow 0.20.11 → 0.20.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.11",
+  "version": "0.20.13",
   "type": "module",
   "description": "AgInTiFlow is a web-first coding agent and CLI with DeepSeek routing, sandboxed tools, model providers, canvas artifacts, and optional wrappers.",
   "license": "Apache-2.0",

package/public/app.js

@@ -1441,8 +1441,15 @@ function isMarkdownBlockStart(line, nextLine = "") {
   );
 }
 
+function unwrapRenderableMarkdownFence(value = "") {
+  const raw = String(value || "");
+  const trimmed = raw.trim();
+  const match = trimmed.match(/^```(?:markdown|md)\s*\n([\s\S]*?)\n```\s*$/i);
+  return match ? match[1] : raw;
+}
+
 function renderMarkdown(value) {
-  const lines = String(value || "").replace(/\r\n?/g, "\n").split("\n");
+  const lines = unwrapRenderableMarkdownFence(value).replace(/\r\n?/g, "\n").split("\n");
   const html = [];
   let paragraph = [];
   let listType = "";

package/scripts/smoke-cli-chat.js

@@ -81,6 +81,25 @@ try {
   if ((renderedMarkdown.match(/Present/g) || []).length !== 1) {
     throw new Error("terminal markdown renderer duplicated table rows");
   }
+  const renderedMarkdownFence = stripMarkdown(
+    [
+      "```markdown",
+      "# Saved Story",
+      "",
+      "| File | Status |",
+      "| --- | --- |",
+      "| `story-ja.md` | **saved** |",
+      "```",
+    ].join("\n")
+  );
+  if (
+    renderedMarkdownFence.includes("code markdown") ||
+    renderedMarkdownFence.includes("| --- |") ||
+    !renderedMarkdownFence.includes("Saved Story") ||
+    !renderedMarkdownFence.includes("story-ja.md")
+  ) {
+    throw new Error("terminal markdown renderer did not unwrap full markdown fences");
+  }
   const renderedDiff = stripMarkdown(
     [
       "Diff:",
@@ -291,6 +310,7 @@ try {
         projectRoot: tempRoot,
         checks: [
           "markdown-render",
+          "markdown-fence-render",
           "markdown-table-no-duplicate",
           "patch-diff-render",
           "workspace-patch-event-render",

package/scripts/smoke-model-roles.js

@@ -9,7 +9,7 @@ import {
   modelsForProviderGroup,
   selectModelRoute,
 } from "../src/model-routing.js";
-import { parseTextToolCalls, usesTextToolProtocol } from "../src/model-client.js";
+import { normalizeTextToolCallResponse, parseTextToolCalls, usesTextToolProtocol } from "../src/model-client.js";
 import { modelRoleChoices } from "../src/interactive-cli.js";
 
 const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
@@ -161,6 +161,33 @@ const multipleRequestedToolCalls = parseTextToolCalls(
 );
 assert(multipleRequestedToolCalls.length === 2, "Requested tools parser did not detect multiple function-call texts");
 assert(multipleRequestedToolCalls[1].function.name === "inspect_project", "Requested tools parser returned wrong second requested tool");
+const malformedRequestedToolResponse = normalizeTextToolCallResponse({
+  choices: [
+    {
+      message: {
+        role: "assistant",
+        content: 'Requested tools: write_file({"path":"story.md","content":"unfinished',
+      },
+    },
+  ],
+});
+const malformedMessage = malformedRequestedToolResponse.choices[0].message;
+assert(malformedMessage.tool_calls?.[0]?.function?.name === "wait", "malformed requested tool text should trigger a safe retry tool");
+assert(!malformedMessage.content.includes("write_file("), "malformed requested tool text should not be surfaced as assistant content");
+const cleanedMalformedSuffix = normalizeTextToolCallResponse({
+  choices: [
+    {
+      message: {
+        role: "assistant",
+        content: 'Here is a normal answer. Requested tools: write_file({"path":"story.md","content":"unfinished',
+      },
+    },
+  ],
+});
+assert(
+  cleanedMalformedSuffix.choices[0].message.content === "Here is a normal answer.",
+  "malformed tool suffix should be stripped from otherwise usable assistant content"
+);
 assert(usesTextToolProtocol({ provider: "venice", model: "gemma-4-uncensored" }), "Venice Gemma should use text tool protocol");
 assert(usesTextToolProtocol({ provider: "venice", model: "e2ee-venice-uncensored-24b-p" }), "Venice 1.1 should use text tool protocol");
 assert(usesTextToolProtocol({ provider: "venice", model: "venice-uncensored" }), "Venice legacy 1.1 should use text tool protocol");
@@ -192,6 +219,7 @@ console.log(
         "shared-model-selectors",
         "venice-text-tool-parser",
         "requested-tools-parser",
+        "malformed-text-tool-retry",
         "cli-models-command",
         "venice-shortcut",
       ],

package/src/agent-runner.js

@@ -313,7 +313,7 @@ async function createInitialState(config, sessionId) {
             ? "Host tmux tools are available for long-running terminals: list sessions, capture panes, send safe keys/text, and start detached sessions. Prefer these tools for monitoring long installs/tests/dev servers without blocking; capture before sending input and never send secrets or sudo passwords. Do not start or install tmux inside Docker run_command containers because those containers are short-lived."
             : "",
           config.allowFileTools
-            ? `Workspace file tools are available in ${config.commandCwd}: inspect_project, list_files, read_file, search_files, write_file, apply_patch, open_workspace_file, and preview_workspace. For large or unfamiliar repositories, call inspect_project first, then search/read AGINTI.md/AGENTS.md/README/manifests as relevant before editing. apply_patch supports exact single-file replacements plus Codex-style/unified multi-file patches; prefer it for source edits after reading/searching the relevant context. Always use workspace-relative paths such as plot_fx.svg or docs/report.tex, never absolute host paths. Secret paths, .git internals, node_modules writes, and huge files are blocked. For generated local websites/pages, use open_workspace_file or preview_workspace instead of starting a localhost server inside Docker.`
+            ? `Workspace file tools are available in ${config.commandCwd}: inspect_project, list_files, read_file, search_files, write_file, apply_patch, open_workspace_file, and preview_workspace. For large or unfamiliar repositories, call inspect_project first, then search/read AGINTI.md/AGENTS.md/README/manifests as relevant before editing. apply_patch supports exact single-file replacements plus Codex-style/unified multi-file patches; prefer it for source edits after reading/searching the relevant context. Always use workspace-relative paths such as plot_fx.svg or docs/report.tex, never absolute host paths. For newly generated standalone prose/docs/stories/assets, choose a descriptive non-conflicting filename from the topic/language and use mode=create; do not overwrite existing files unless the user explicitly asked to update/replace/overwrite that file. Secret paths, .git internals, node_modules writes, and huge files are blocked. For generated local websites/pages, use open_workspace_file or preview_workspace instead of starting a localhost server inside Docker.`
             : "No workspace file tools are available.",
           config.allowWrapperTools
             ? `External coding-agent wrappers are available as advisory tools only. Use the selected wrapper only: ${normalizeWrapperName(config.preferredWrapper)}. Wrapper status: ${wrapperStatusText()}.`
@@ -362,7 +362,7 @@ async function createInitialState(config, sessionId) {
               : `Shell working directory: ${config.commandCwd}`
             : "",
           config.allowFileTools
-            ? `Workspace file tools enabled in: ${config.commandCwd}. Use inspect_project first for large/unfamiliar codebases. Read AGINTI.md/AGENTS.md/README/manifests when relevant. Use workspace-relative paths. Use apply_patch for code edits; it accepts exact replacements or Codex-style/unified multi-file patches. Local preview tools available: open_workspace_file and preview_workspace.`
+            ? `Workspace file tools enabled in: ${config.commandCwd}. Use inspect_project first for large/unfamiliar codebases. Read AGINTI.md/AGENTS.md/README/manifests when relevant. Use workspace-relative paths. Use apply_patch for code edits; it accepts exact replacements or Codex-style/unified multi-file patches. For newly generated standalone content, choose descriptive non-conflicting filenames and use mode=create unless the user explicitly asked to overwrite/update. Local preview tools available: open_workspace_file and preview_workspace.`
             : "",
           projectInstructions.exists ? "AGINTI.md project instructions are loaded into system context for this run." : "AGINTI.md is not present unless you create it.",
           config.allowWrapperTools
@@ -500,7 +500,7 @@ async function applyContinuationPrompt(state, config, observers) {
           : `Shell working directory: ${config.commandCwd}. Host platform: ${platformLabel(platform)}. Use OS-compatible commands; prefer WSL/Docker for bash-heavy workflows on Windows.`
         : "",
       config.allowFileTools
-        ? `Workspace file tools enabled in: ${config.commandCwd}. Use inspect_project first for large or unfamiliar codebases, then search/read exact files before editing. Read AGINTI.md/AGENTS.md/README/manifests when relevant. Use workspace-relative paths. Use apply_patch for code edits; it accepts exact replacements or Codex-style/unified multi-file patches. For generated local files/sites, use open_workspace_file or preview_workspace.`
+        ? `Workspace file tools enabled in: ${config.commandCwd}. Use inspect_project first for large or unfamiliar codebases, then search/read exact files before editing. Read AGINTI.md/AGENTS.md/README/manifests when relevant. Use workspace-relative paths. Use apply_patch for code edits; it accepts exact replacements or Codex-style/unified multi-file patches. For generated local files/sites, choose descriptive non-conflicting filenames, use mode=create unless the user explicitly asked to overwrite/update, and use open_workspace_file or preview_workspace.`
         : "",
       config.allowWrapperTools
         ? `Agent wrappers: selected=${normalizeWrapperName(config.preferredWrapper)}; ${wrapperStatusText()}`
@@ -601,6 +601,29 @@ function sanitizeToolArgs(toolName, args) {
   return safeArgs;
 }
 
+function goalClearlyAllowsOverwrite(goal = "") {
+  const text = String(goal || "").toLowerCase();
+  return (
+    /\b(overwrite|replace|update|modify|edit|revise|rewrite|fix|patch|change|append|refresh|regenerate|remember|instruction|instructions|memory|preference|preferences|prefer)\b/i.test(text) ||
+    /覆盖|覆寫|替换|替換|更新|修改|修复|修復|编辑|編輯|改写|改寫|追加|记住|記住|指令|说明|說明|偏好|上書き|置換|修正|編集/.test(text)
+  );
+}
+
+async function implicitOverwriteBlock(toolName, args, config, state) {
+  if (toolName !== "write_file" || args.mode !== "overwrite") return null;
+  if (goalClearlyAllowsOverwrite(state?.goal || config.goal || "")) return null;
+  const target = resolveWorkspacePath(config, args.path || args.file || "");
+  const exists = await fs
+    .stat(target.absolutePath)
+    .then((stat) => stat.isFile())
+    .catch(() => false);
+  if (!exists) return null;
+  return {
+    reason: `Refusing to overwrite existing ${target.relativePath} without an explicit update/replace request. Choose a descriptive new filename or ask the user before replacing it.`,
+    category: "workspace-overwrite",
+  };
+}
+
 function sanitizeToolResult(result) {
   const safeResult = redactValue(result);
   if (typeof safeResult.content === "string") {
@@ -709,7 +732,7 @@ async function captureSyntheticSnapshot(store, step, config) {
         ? "Host tmux tools available: tmux_list_sessions, tmux_capture_pane, tmux_send_keys, tmux_start_session. Use them for long-running jobs and agent terminals; capture before sending input. Docker run_command containers are ephemeral, so tmux there will not persist."
         : "",
       config.allowFileTools
-        ? `Workspace file tools available in: ${config.commandCwd}. Use inspect_project first for large or unfamiliar codebases, then search/read exact files before editing. Use workspace-relative paths. Use apply_patch for code edits; it supports exact single-file replacement and multi-file Codex-style/unified patches.`
+        ? `Workspace file tools available in: ${config.commandCwd}. Use inspect_project first for large or unfamiliar codebases, then search/read exact files before editing. Use workspace-relative paths. Use apply_patch for code edits; it supports exact single-file replacement and multi-file Codex-style/unified patches. For new standalone generated content, pick a descriptive non-conflicting filename and avoid overwriting unless explicitly requested.`
         : "Workspace file tools disabled.",
       config.allowWrapperTools
         ? `Agent wrappers available: selected=${normalizeWrapperName(config.preferredWrapper)}; ${wrapperStatusText()}`
@@ -805,6 +828,30 @@ async function executeTool(browserState, toolCall, snapshot, config, store, obse
     };
   }
 
+  const overwriteBlock = await implicitOverwriteBlock(toolCall.function.name, args, config, state);
+  if (overwriteBlock) {
+    await store.appendEvent("tool.blocked", {
+      toolName: toolCall.function.name,
+      args: safeArgs,
+      reason: overwriteBlock.reason,
+      category: overwriteBlock.category,
+    });
+    observers.event("tool.blocked", {
+      toolName: toolCall.function.name,
+      args: safeArgs,
+      reason: overwriteBlock.reason,
+      category: overwriteBlock.category,
+    });
+    return {
+      ok: false,
+      blocked: true,
+      reason: overwriteBlock.reason,
+      category: overwriteBlock.category,
+      toolName: toolCall.function.name,
+      args: safeArgs,
+    };
+  }
+
   await store.appendEvent("tool.started", {
     toolName: toolCall.function.name,
     args: safeArgs,

package/src/interactive-cli.js

@@ -241,7 +241,8 @@ function wrapTextLine(value = "", width = 72) {
 }
 
 export function stripMarkdown(text) {
-  const lines = String(text || "").split(/\r?\n/);
+  const unwrapped = unwrapRenderableMarkdownFence(text);
+  const lines = String(unwrapped || "").split(/\r?\n/);
   let inFence = false;
   let diffContext = 0;
   const rendered = [];
@@ -304,6 +305,13 @@ export function stripMarkdown(text) {
   return rendered.join("\n").replace(/\n{3,}/g, "\n\n").trimEnd();
 }
 
+function unwrapRenderableMarkdownFence(text = "") {
+  const raw = String(text || "");
+  const trimmed = raw.trim();
+  const match = trimmed.match(/^```(?:markdown|md)\s*\n([\s\S]*?)\n```\s*$/i);
+  return match ? match[1] : raw;
+}
+
 function renderPatchLine(line = "", { active = false } = {}) {
   const value = String(line || "");
   if (/^diff --git\s+/.test(value)) return color(value, ansi.bold, ansi.cyan);

package/src/model-client.js

@@ -107,6 +107,7 @@ function textToolProtocolPrompt(tools = []) {
     'A strict id form is also accepted: [TOOL_CALLS]tool_name[ARGS]call_short_id[ARGS]{"arg":"value"}',
     'A JSON block form is accepted too: TOOL_CALLS: ```json [{"name":"tool_name","arguments":{"arg":"value"}}] ```',
     "Return only one or more TOOL_CALLS blocks when calling tools; do not wrap them in markdown.",
+    "Keep tool-call JSON valid and complete. For long write_file content, prefer a concise complete file or smaller follow-up edits over emitting huge/truncated JSON.",
     "If no tool is needed, answer normally.",
     "Available text tools:",
     ...toolLines,
@@ -140,7 +141,7 @@ function messagesWithTextToolProtocol(config, messages, tools) {
 
 export function parseTextToolCalls(content = "") {
   const text = String(content || "");
-  if (!text.includes("[TOOL_CALLS]") && !/TOOL_CALLS\s*:/i.test(text) && !/Requested tools?\s*:/i.test(text)) return [];
+  if (!hasTextToolCallMarker(text)) return [];
 
   const calls = [];
   for (const call of parseRequestedToolCalls(text)) calls.push(call);
@@ -196,6 +197,11 @@ export function parseTextToolCalls(content = "") {
   return calls;
 }
 
+function hasTextToolCallMarker(content = "") {
+  const text = String(content || "");
+  return text.includes("[TOOL_CALLS]") || /TOOL_CALLS\s*:/i.test(text) || /Requested tools?\s*:/i.test(text);
+}
+
 function findMatchingParen(text = "", openIndex = 0) {
   let depth = 0;
   let quote = "";
@@ -269,14 +275,30 @@ function textBeforeToolCallMarker(content = "") {
     .trim();
 }
 
-function normalizeTextToolCallResponse(response) {
+export function normalizeTextToolCallResponse(response) {
   const message = response?.choices?.[0]?.message;
   if (!message || Array.isArray(message.tool_calls) && message.tool_calls.length > 0) return response;
 
   const calls = parseTextToolCalls(message.content || "");
   if (calls.length === 0) {
     const cleanedContent = textBeforeToolCallMarker(message.content || "");
-    if (!cleanedContent || cleanedContent === message.content) return response;
+    if (!hasTextToolCallMarker(message.content || "")) return response;
+    if (cleanedContent) {
+      return {
+        ...response,
+        choices: response.choices.map((choice, index) =>
+          index === 0
+            ? {
+                ...choice,
+                message: {
+                  ...message,
+                  content: cleanedContent,
+                },
+              }
+            : choice
+        ),
+      };
+    }
     return {
       ...response,
       choices: response.choices.map((choice, index) =>
@@ -285,7 +307,18 @@ function normalizeTextToolCallResponse(response) {
               ...choice,
               message: {
                 ...message,
-                content: cleanedContent,
+                content:
+                  "The previous text tool request was malformed or truncated and was not executed. Retry with one valid tool call using the configured tool interface. For long files, write a complete concise file or split the work into smaller valid edits; do not show raw tool-call JSON to the user.",
+                tool_calls: [
+                  {
+                    id: "text-tool-retry-1",
+                    type: "function",
+                    function: {
+                      name: "wait",
+                      arguments: JSON.stringify({ ms: 1 }),
+                    },
+                  },
+                ],
               },
             }
           : choice
@@ -480,7 +513,7 @@ export async function createPlan(client, config, state) {
             ? "Host tmux tools are enabled for long-running sessions. Plan to use tmux_start_session for durable jobs, tmux_capture_pane to monitor, tmux_send_keys to interact after capture, and tmux_list_sessions to discover existing sessions. Do not install or run tmux inside Docker run_command containers; those containers are short-lived and cannot preserve tmux servers."
             : "",
           config.allowFileTools
-            ? `Workspace file tools are enabled in ${config.commandCwd}: inspect_project, list_files, read_file, search_files, write_file, apply_patch, open_workspace_file, preview_workspace. For large or unfamiliar repos, plan to call inspect_project first, then search/read AGINTI.md/AGENTS.md/README/manifests and exact files. apply_patch supports exact single-file replacements and Codex-style/unified multi-file patches; prefer it for edits after reading relevant context. Keep all paths workspace-relative, for example plot_fx.svg or docs/report.tex, and avoid secrets. For generated local HTML/SVG/PDF/static sites, plan to use open_workspace_file or preview_workspace rather than starting a localhost server inside Docker.`
+            ? `Workspace file tools are enabled in ${config.commandCwd}: inspect_project, list_files, read_file, search_files, write_file, apply_patch, open_workspace_file, preview_workspace. For large or unfamiliar repos, plan to call inspect_project first, then search/read AGINTI.md/AGENTS.md/README/manifests and exact files. apply_patch supports exact single-file replacements and Codex-style/unified multi-file patches; prefer it for edits after reading relevant context. Keep all paths workspace-relative, for example plot_fx.svg or docs/report.tex, and avoid secrets. For newly generated standalone prose/docs/stories/assets, choose a descriptive non-conflicting filename from the topic/language instead of generic names like story.txt or output.txt; do not overwrite existing files unless the user explicitly asked to update/replace/overwrite that file. For generated local HTML/SVG/PDF/static sites, plan to use open_workspace_file or preview_workspace rather than starting a localhost server inside Docker.`
             : "",
           projectInstructions?.exists
             ? `Project instructions: AGINTI.md is loaded from ${projectInstructions.path}${projectInstructions.truncated ? " (truncated)" : ""}. Follow it and update it with file tools when the user asks to remember or change project instructions.`
@@ -504,6 +537,7 @@ export async function createPlan(client, config, state) {
           engineeringGuidance,
           "A canvas/artifacts tunnel is available through send_to_canvas. Use it when an output should be highlighted visually, such as screenshots, image files, important markdown, diffs, or generated artifact paths. It is optional for ordinary text answers.",
           "Work like a practical coding agent: inspect when useful, edit with file tools, run safe checks when they add confidence, and keep outputs inside the workspace.",
+          "When saving new standalone content, think of a specific filename from the request and use mode=create. If that name already exists and the user did not ask to replace it, choose a safe variant such as topic-language-v2.md instead of overwriting.",
           "For large apps, websites, LaTeX documents, Python/C/shell projects, or system tasks, plan a coherent minimal implementation, then use tools to create files, run checks, and publish artifacts.",
           "For LaTeX/PDF work, first check whether latexmk or pdflatex already exists in the active host/Docker environment; compile with the existing toolchain before installing packages or rebuilding Docker.",
           "For web search or current information tasks, plan to use browser tools or safe shell network tools when allowed, then preserve useful source notes if the output depends on them.",
@@ -886,7 +920,7 @@ export async function requestNextStep(client, config, messages) {
         function: {
           name: "write_file",
           description:
-            "Create or overwrite a small UTF-8 workspace file. Use mode=create for new files and mode=overwrite only after reading/understanding the existing file. Secret paths, .git, node_modules writes, and outside-workspace paths are blocked. The runtime records before/after hashes and a compact diff.",
+            "Create or overwrite a small UTF-8 workspace file. Use mode=create with a descriptive non-conflicting filename for newly generated standalone content. Use mode=overwrite only when the user explicitly asks to replace/update that file, or after reading the file and the task is clearly to modify it. Secret paths, .git, node_modules writes, and outside-workspace paths are blocked. The runtime records before/after hashes and a compact diff.",
           parameters: {
             type: "object",
             properties: {