@lazyingart/agintiflow 0.20.176 → 0.20.178

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.176",
+  "version": "0.20.178",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/scripts/smoke-coding-tools.js

@@ -1103,6 +1103,29 @@ try {
   );
   assert(safeEnvReferenceResult.ok, "write_file should allow safe env-var credential references in source code");
 
+  const safeTokenVariableSyntaxResult = await executeWorkspaceTool(
+    "write_file",
+    {
+      path: "scripts/safe-token-variable-syntax.py",
+      content: [
+        "def validate(tokens):",
+        "    for token in tokens:",
+        "        if not isinstance(token, dict) or \"t\" not in token:",
+        "            raise ValueError(\"token must contain t\")",
+        "        text = str(token.get(\"t\", \"\"))",
+        "        if token:",
+        "            print(text)",
+        "",
+      ].join("\n"),
+      mode: "create",
+    },
+    {
+      commandCwd: workspace,
+      allowFileTools: true,
+    }
+  );
+  assert(safeTokenVariableSyntaxResult.ok, "write_file should allow benign token variable syntax in source code");
+
   const redactedContentResult = await executeWorkspaceTool(
     "write_file",
     {

package/src/redaction.js

@@ -2,7 +2,7 @@ const SECRET_PATTERNS = [
   /\bsk-[A-Za-z0-9_-]{16,}\b/g,
   /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
   /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g,
-  /((?:api[_-]?key|token|secret|password|passwd|npm_token|_authToken|grsai|venice_api_key)\s*[:=]\s*)[^\s"'`]+/gi,
+  /((?:api[_-]?key|token|secret|password|passwd|npm_token|_authToken|grsai|venice_api_key)[^\S\r\n]*[:=][^\S\r\n]*)[^\s"'`]+/gi,
   /(\/\/registry\.npmjs\.org\/:_authToken=)[^\s"'`]+/gi,
   /(Authorization:\s*Bearer\s+)[^\s"'`]+/gi,
 ];

package/src/scs-evidence.js

@@ -90,16 +90,60 @@ function splitInlineTerms(text = "") {
   return String(text || "")
     .split(/[、,，;；]/)
     .map((item) => item.replace(/[。.!！?？:：]/g, "").trim())
-    .filter((item) => item.length >= 2 && item.length <= 40 && !/[\\/]/.test(item));
+    .filter((item) => item.length >= 2 && item.length <= 40 && !/[\\/"'“”‘’`]/.test(item));
+}
+
+function trimForbiddenTail(tail = "") {
+  let text = String(tail || "").trim();
+  if (!text) return "";
+  const stopPatterns = [
+    /(?:^|[，,、\s])(?:并|且)?(?:末尾|最后|最後|保存|存到|写入|寫入|输出|輸出|完成后|完成後|运行|执行|執行|用命令|检查|檢查|验证|驗證|确认|確認|保留)/,
+    /(?:^|[,\s])(?:and\s+)?(?:then|save|write|output|run|execute|check|verify|confirm|after)\b/i,
+  ];
+  const stops = stopPatterns.map((pattern) => text.search(pattern)).filter((index) => index >= 0);
+  if (stops.length) text = text.slice(0, Math.min(...stops)).trim();
+  return text.replace(/[，,、;；:\s]+$/g, "").trim();
+}
+
+function forbiddenTails(text = "") {
+  const tails = [];
+  const source = String(text || "");
+  const patterns = [
+    /(?:不要(?:写|寫)成|不得(?:写|寫)成|禁止(?:写|寫)成)\s*([^，,。；;\n]+)/g,
+    /(?:(?:不要|不得|禁止)(?:(?:写|寫)(?!成)|包含|提到)|(?:确认|確認)[^。；;\n]{0,40}?(?:没有|沒有))\s*([^。；;\n]+)/g,
+    /\b(?:do not|don't|dont|must not|never)\s+(?:write|include|mention|contain)\s+([^.\n;]+)/gi,
+  ];
+  for (const pattern of patterns) {
+    for (const match of source.matchAll(pattern)) {
+      const tail = trimForbiddenTail(match[1] || "");
+      if (tail) tails.push(tail);
+    }
+  }
+  return tails;
 }
 
 function inferExactOutputPaths(goal = "") {
   const paths = [];
   const lines = String(goal || "").split(/\n+/);
-  const pathPattern = /(?:^|[\s"'`：:])((?:~|\.{1,2}|[A-Za-z0-9_\-\u4e00-\u9fff])[\w./~\-\u4e00-\u9fff ]{0,220}\.(?:md|txt|json|ya?ml|html|css|js|ts|tsx|jsx|py|sh|csv|tex|svg|png|jpe?g|webp|mp4|mov|pdf|docx))(?:$|[\s"'`,，。；;])/gi;
+  const extensionPattern = "md|txt|json|ya?ml|html|css|js|ts|tsx|jsx|py|sh|csv|tex|svg|png|jpe?g|webp|mp4|mov|pdf|docx";
+  const quotedPathPattern = new RegExp("[\"'`]([^\"'`\\n]{1,220}\\.(?:" + extensionPattern + "))[\"'`]", "gi");
+  const pathPattern = new RegExp(
+    '(?:^|[\\s：:])((?:~|\\.{1,2}|/|[A-Za-z0-9_\\-\\u4e00-\\u9fff])[\\w./~\\-\\u4e00-\\u9fff]{0,220}\\.(?:' +
+      extensionPattern +
+      '))(?:$|[\\s"\'`,，。；;.!?！？])',
+    "gi"
+  );
   for (const line of lines) {
-    if (!/\b(save|saved|write|written|output|create|store)\b|保存|写入|寫入|输出|輸出|创建|建立/.test(line)) continue;
-    for (const match of line.matchAll(pathPattern)) {
+    if (!/\b(save|saved|write|written|output|create|store|update|modify|edit)\b|保存|写入|寫入|输出|輸出|创建|建立|更新|修改|编辑|編輯/i.test(line)) continue;
+    quotedPathPattern.lastIndex = 0;
+    for (const match of line.matchAll(quotedPathPattern)) {
+      const raw = String(match[1] || "").trim();
+      if (!raw) continue;
+      paths.push(raw);
+    }
+    const unquotedLine = line.replace(quotedPathPattern, (match) => " ".repeat(match.length));
+    pathPattern.lastIndex = 0;
+    for (const match of unquotedLine.matchAll(pathPattern)) {
       const raw = String(match[1] || "").trim();
       if (!raw) continue;
       paths.push(raw);
@@ -108,6 +152,13 @@ function inferExactOutputPaths(goal = "") {
   return uniqueLimited(paths, 8);
 }
 
+function stripForbiddenTextClauses(text = "") {
+  return String(text || "")
+    .replace(/(?:不要(?:写|寫)成|不得(?:写|寫)成|禁止(?:写|寫)成)\s*[^，,。；;\n]+/g, "")
+    .replace(/(?:(?:不要|不得|禁止)(?:(?:写|寫)(?!成)|包含|提到)|(?:确认|確認)[^。；;\n]{0,40}?(?:没有|沒有))\s*[^。；;\n]+/g, "")
+    .replace(/\b(?:do not|don't|dont|must not|never)\s+(?:write|include|mention|contain)\s+[^.\n;]+/gi, "");
+}
+
 function inferRequiredTextTerms(goal = "") {
   const terms = [];
   const lines = String(goal || "").split(/\n+/);
@@ -115,11 +166,12 @@ function inferRequiredTextTerms(goal = "") {
     const positiveSegment = String(line || "").split(
       /(?:并)?确认没有|(?:并)?確認沒有|没有|沒有|\b(?:does not contain|do not contain|not contain|not include|without)\b/i
     )[0];
+    const requiredSegment = stripForbiddenTextClauses(positiveSegment);
     if (
-      /\b(must|require|required|include|contain|contains|check|verify|grep|keyword|keywords)\b/i.test(line) ||
-      /必须|必須|要求|包含|检查|檢查|验证|驗證|关键词|關鍵詞|自检|自檢/.test(line)
+      /\b(must|require|required|include|contain|contains|check|verify|grep|keyword|keywords|preserve|keep|retain|appear)\b/i.test(line) ||
+      /必须|必須|要求|包含|保留|出现|出現|精确字符串|精確字符串|明确出现|明確出現|检查|檢查|验证|驗證|关键词|關鍵詞|自检|自檢/.test(line)
     ) {
-      terms.push(...quotedTerms(positiveSegment));
+      terms.push(...quotedTerms(requiredSegment));
     }
   }
   return uniqueLimited(terms, 24);
@@ -129,16 +181,7 @@ function inferForbiddenTextTerms(goal = "") {
   const terms = [];
   const lines = String(goal || "").split(/\n+/);
   for (const line of lines) {
-    const text = String(line || "");
-    if (
-      /\b(?:do not|don't|dont|must not|never)\s+(?:write|include|mention|contain)\b/i.test(text) ||
-      /不要(?:写|寫|包含|提到)|不得(?:写|寫|包含|提到)|禁止(?:写|寫|包含|提到)|(?:确认|確認)(?:没有|沒有)/.test(text)
-    ) {
-      const tail =
-        text.match(/(?:不要(?:写|寫|包含|提到)|不得(?:写|寫|包含|提到)|禁止(?:写|寫|包含|提到))(.+)/)?.[1] ||
-        text.match(/(?:确认|確認)(?:没有|沒有)(.+)/)?.[1] ||
-        text.match(/\b(?:do not|don't|dont|must not|never)\s+(?:write|include|mention|contain)\s+(.+)/i)?.[1] ||
-        "";
+    for (const tail of forbiddenTails(line)) {
       terms.push(...quotedTerms(tail));
       const unquotedTail = tail.replace(/“[^”]+”|"[^"\n]+"|'[^'\n]+'|`[^`\n]+`/g, "");
       terms.push(...splitInlineTerms(unquotedTail).filter((item) => !/^(and|or|the|a|an|other|其他|上一集道具)$/.test(item)));
@@ -341,6 +384,8 @@ function resolveContractPath(commandCwd = process.cwd(), rawPath = "") {
   const text = String(rawPath || "").trim();
   if (!text) return "";
   if (text.startsWith("~/")) return path.join(process.env.HOME || commandCwd, text.slice(2));
+  if (text === "/workspace") return path.resolve(commandCwd || process.cwd());
+  if (text.startsWith("/workspace/")) return path.resolve(commandCwd || process.cwd(), text.slice("/workspace/".length));
   if (path.isAbsolute(text)) return text;
   return path.resolve(commandCwd || process.cwd(), text);
 }