@lazyingart/agintiflow 0.20.138 → 0.20.140

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.138",
+  "version": "0.20.140",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/scripts/smoke-coding-tools.js

@@ -1038,7 +1038,9 @@ try {
       content: [
         "import os",
         "from openai import OpenAI",
-        'api_key = os.environ.get("DEEPSEEK_API_KEY")',
+        "def load_api_key():",
+        '    return os.environ.get("DEEPSEEK_API_KEY")',
+        "api_key = load_api_key()",
         'client = OpenAI(api_key=api_key, base_url="https://api.deepseek.com")',
         "print(client)",
         "",

package/skills/bilingual-interlinear-book/SKILL.md

@@ -0,0 +1,45 @@
+---
+id: bilingual-interlinear-book
+label: Bilingual Interlinear Book Pipeline
+description: Build Chinese/Japanese or other paired-language pocket books with Markdown extraction, chunk manifests, ruby/pinyin JSON, grammar roles, monitoring, and LaTeX PDF outputs.
+triggers:
+  - interlinear
+  - bilingual book
+  - paired language
+  - furigana
+  - pinyin
+  - ruby
+  - xelatex
+  - pocket book
+  - grammar roles
+tools:
+  - read_file
+  - write_file
+  - run_command
+  - tmux_start_session
+  - tmux_capture_pane
+---
+# Bilingual Interlinear Book Pipeline
+
+Use this skill when the task asks for a paired-language book, ruby/furigana/pinyin, Chinese/Japanese interlinear layout, grammar-role color, or pocket-size LaTeX output.
+
+## Required Workflow
+
+1. Inspect repository instructions, existing scripts, book plans, and ignored paths before editing.
+2. Keep original PDFs/EPUBs in source folders and do not commit large source media unless the repository explicitly tracks them.
+3. Convert source books to durable Markdown first. Keep raw and cleaned Markdown separate when OCR or EPUB extraction is noisy.
+4. Split cleaned Markdown into stable paragraph- or chapter-scoped chunks with `manifest.json` and `chunks.jsonl`. Use source paragraph IDs that survive reruns.
+5. Write resumable per-chunk JSON artifacts. Never overwrite a valid reviewed chunk unless a validator or prompt version requires regeneration; move stale chunks out of the compile path.
+6. Generate or repair annotations with a provider worker loop, not a monolithic prompt. Each chunk should validate independently before promotion.
+7. Compile preview PDFs periodically and at the end. For paired-language books, compile both directions when renderers exist, plus color and blackwhite variants when color is supported.
+8. Run the writer and monitor in observable tmux sessions with status files, logs, retry/backoff for provider limits, and clear resume commands.
+
+## JSON Quality Gates
+
+Every promoted chunk must preserve source text exactly. Chinese Hanzi tokens are one character each with pinyin. Japanese kanji tokens are one character each with furigana. Nontrivial Japanese lines must use normal mixed kanji/kana, not kana-only placeholders.
+
+For grammar coloring, assign `g` using only: `subject`, `predicate`, `object`, `attributive`, `adverbial`, `complement`, `topic`, `function`. Color PDFs depend on these fields: every Chinese Hanzi token and every Japanese kanji token should carry `g`. Blackwhite builds should force all grammar colors to black through the renderer, not by deleting `g`.
+
+## Completion Evidence
+
+Report chunk totals, valid/reviewed count, failed or stale count, first missing chunk, latest PDF paths, and the exact resume command. Verify PDFs exist on disk and that generated TeX contains grammar color macros for color builds. Commit tracked scripts, templates, plans, and stable JSON checkpoints after meaningful edits.

package/src/workspace-tools.js

@@ -210,6 +210,8 @@ function secretContentPolicy(content) {
 function stripSafeCredentialReferences(content) {
   let text = String(content ?? "");
   const keyName = String.raw`(?:api[_-]?key|token|secret|password|passwd|npm_token|_authToken|grsai|venice_api_key)`;
+  const codeKeyName = String.raw`(?:api[_-]?key|apiKey|token|secret|password|passwd|npmToken|authToken|grsai|veniceApiKey|venice_api_key)`;
+  const codeExpression = String.raw`[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*|\([^"'\n]*\))?`;
   const envName = String.raw`[A-Z][A-Z0-9_]*(?:API[_-]?KEY|TOKEN|SECRET|PASSWORD|PASSWD|GRSAI|VENICE)[A-Z0-9_]*`;
 
   text = text.replace(
@@ -228,6 +230,10 @@ function stripSafeCredentialReferences(content) {
     new RegExp(String.raw`([,(]\s*)${keyName}\s*=\s*[A-Za-z_$][\w$]*(?=\s*[,)\n])`, "gi"),
     "$1safe_credential_ref=[VAR_REF]"
   );
+  text = text.replace(
+    new RegExp(String.raw`\b${codeKeyName}\s*=\s*${codeExpression}(?=\s*[,;)\n])`, "g"),
+    "safe_credential_ref=[EXPR_REF]"
+  );
   text = text.replace(
     new RegExp(String.raw`([,{]\s*)${keyName}\s*:\s*[A-Za-z_$][\w$]*(?=\s*[,}\n])`, "gi"),
     "$1safe_credential_ref=[VAR_REF]"