@lazyingart/agintiflow 0.20.228 → 0.20.229

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.228",
+  "version": "0.20.229",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/scripts/smoke-coding-tools.js

@@ -32,7 +32,11 @@ import {
 import { createPlan } from "../src/model-client.js";
 import { selectModelRoute } from "../src/model-routing.js";
 import { listParallelScouts, runParallelScouts, shouldRunParallelScouts } from "../src/parallel-scouts.js";
-import { buildFailedCommandAdvice, buildPermissionAdvice } from "../src/permission-advice.js";
+import {
+  buildFailedCommandAdvice,
+  buildPermissionAdvice,
+  isOptionalGeneratedPreviewCleanup,
+} from "../src/permission-advice.js";
 import { runJsonSpecialist } from "../src/json-specialist.js";
 import { SessionStore } from "../src/session-store.js";
 import { getTaskProfile } from "../src/task-profiles.js";
@@ -1203,6 +1207,38 @@ try {
     destructiveAdvice.destructiveApprovalCommand.includes("--allow-destructive"),
     "destructive advice did not provide an explicit approval command"
   );
+  const optionalPreviewCleanupArgs = {
+    command:
+      "rm -f build/verification/page-1.png build/verification/page-2.png; git status --short",
+  };
+  assert(
+    isOptionalGeneratedPreviewCleanup("run_command", optionalPreviewCleanupArgs),
+    "bounded generated verification-preview cleanup was not recognized"
+  );
+  const optionalPreviewCleanupAdvice = buildPermissionAdvice({
+    toolName: "run_command",
+    args: optionalPreviewCleanupArgs,
+    guard: {
+      category: "destructive",
+      reason: "Destructive shell commands require Allow destructive actions.",
+    },
+    config: dockerWorkspacePolicy,
+    state: { sessionId: "coding-optional-preview-cleanup-smoke" },
+  });
+  assert(
+    optionalPreviewCleanupAdvice.autoRecover === true,
+    "optional generated-preview cleanup should retain evidence and recover without pausing"
+  );
+  assert(
+    /leave the ignored preview files in place/i.test(optionalPreviewCleanupAdvice.instruction),
+    "optional generated-preview cleanup advice did not tell the agent to retain evidence"
+  );
+  assert(
+    !isOptionalGeneratedPreviewCleanup("run_command", {
+      command: "rm -f output/final-report.pdf",
+    }),
+    "a requested final artifact was misclassified as optional preview cleanup"
+  );
   const failedNetworkAdvice = buildFailedCommandAdvice({
     args: { command: "git clone https://github.com/lazyingart/AgInTiFlow.git" },
     commandPolicy: clonePolicy,

package/scripts/smoke-scs-evidence-visibility.js

@@ -270,8 +270,8 @@ const wordDocumentContract = deriveScsTaskContract({
 });
 assert.deepEqual(
   wordDocumentContract.requiredEvidence.map((item) => item.category).sort(),
-  ["artifact", "command", "file"],
-  "Word document production must require written files, validation, and durable artifacts"
+  ["artifact", "command", "file", "visual"],
+  "Word document production must require written files, validation, durable artifacts, and visual evidence"
 );
 
 const groundingRoot = fs.mkdtempSync(path.join(os.tmpdir(), "aginti-source-grounding-"));

package/src/permission-advice.js

@@ -23,6 +23,50 @@ const DOCKER_WORKSPACE_PATH_FAILURE_PATTERNS = [
   /cannot statx? ['"][^'"]+['"]:\s+No such file or directory/i,
 ];
 
+function unquoteShellToken(value = "") {
+  const text = String(value || "").trim();
+  if (
+    text.length >= 2 &&
+    ((text.startsWith("'") && text.endsWith("'")) ||
+      (text.startsWith('"') && text.endsWith('"')))
+  ) {
+    return text.slice(1, -1);
+  }
+  return text;
+}
+
+function isGeneratedVerificationPreviewPath(value = "") {
+  const target = unquoteShellToken(value).replace(/\\/g, "/");
+  if (
+    !target ||
+    target.startsWith("/") ||
+    target.includes("..") ||
+    /[*?\[\]{}$`]/.test(target)
+  ) {
+    return false;
+  }
+  return (
+    /^(?:build|artifacts)\/verification\/[A-Za-z0-9._/-]+\.(?:png|jpe?g|webp)$/i.test(target) ||
+    /^output\/preview[-_][A-Za-z0-9._-]+\.(?:png|jpe?g|webp)$/i.test(target)
+  );
+}
+
+export function isOptionalGeneratedPreviewCleanup(toolName = "", args = {}) {
+  if (toolName !== "run_command") return false;
+  const firstSegment = String(args.command || args.text || "")
+    .trim()
+    .split(/(?:&&|;|\n)/, 1)[0]
+    .trim();
+  const match = firstSegment.match(/^rm\s+-f\s+(.+)$/);
+  if (!match) return false;
+  const targets = match[1].trim().split(/\s+/).filter(Boolean);
+  return (
+    targets.length > 0 &&
+    targets.length <= 20 &&
+    targets.every((target) => isGeneratedVerificationPreviewPath(target))
+  );
+}
+
 function quoteShell(value = "") {
   const text = String(value || "");
   return `'${text.replace(/'/g, `'\\''`)}'`;
@@ -214,6 +258,21 @@ function adviceForCategory(category = "", { toolName = "", args = {}, config = {
   }
 
   if (category === "destructive") {
+    if (isOptionalGeneratedPreviewCleanup(toolName, args)) {
+      return {
+        ...base,
+        autoRecover: true,
+        summary:
+          "Optional generated-preview cleanup was blocked safely; the verification evidence can remain ignored and the task should continue.",
+        instruction:
+          "Do not retry, rename, or seek approval for this cleanup. Leave the ignored preview files in place, run any remaining read-only checks in a separate call, and finish the requested task when its substantive evidence passes.",
+        options: [
+          "Retain the generated previews as private verification evidence.",
+          "Run source hashes, artifact checks, and git status separately without a delete command.",
+          "Continue to a real content or layout repair if validation still reports a defect.",
+        ],
+      };
+    }
     return {
       ...base,
       summary:

package/src/scs-evidence.js

@@ -259,7 +259,7 @@ const PROFILE_REQUIREMENTS = {
   design: ["artifact", "visual"],
   image: ["artifact", "visual"],
   slides: ["artifact"],
-  word: ["file", "command", "artifact"],
+  word: ["file", "command", "artifact", "visual"],
   data: ["file", "command", "artifact"],
   qa: ["command"],
   review: ["command"],

package/src/task-profiles.js

@@ -276,7 +276,7 @@ export const TASK_PROFILES = {
     id: "word",
     label: "Word documents",
     prompt:
-      "Bias toward Word/docx/document workflows while still using writing, conversion, LaTeX, or scripts when useful. Preserve source material byte-for-byte and synthesize a reader-facing document from the current corrected facts instead of concatenating notes, logs, schemas, task IDs, private paths, or delivery instructions. Prefer mature editable-document tooling already available in the workspace, such as python-docx, pandoc, or LibreOffice, over hand-written OOXML; when direct OOXML is genuinely necessary, validate its package parts and openability. Keep one maintainable source of truth and a reproducible project-local build command. Verify the DOCX is structurally editable, render or convert it for visual inspection, compile the PDF, inspect every rendered page, and run pdftotext or an equivalent extraction check that rejects replacement characters and unexpected control glyphs. Resolve stale-versus-current facts explicitly, use clear descriptive filenames, exclude caches and generated debris from commits, inspect git status/diff before committing, and report success only after the editable source, reader-facing content, visual layout, searchable text, and requested artifacts all pass.",
+      "Bias toward Word/docx/document workflows while still using writing, conversion, LaTeX, or scripts when useful. Preserve source material byte-for-byte and synthesize a reader-facing document from the authoritative current facts instead of concatenating notes, logs, schemas, task IDs, private paths, or delivery instructions. Reconcile conflicting or superseded source facts before drafting; publish only the current state unless history is explicitly requested or necessary to explain a live decision. Prefer mature editable-document tooling already available in the workspace, such as python-docx, pandoc, or LibreOffice, over hand-written OOXML; when direct OOXML is genuinely necessary, validate its package parts and openability. Keep one maintainable source of truth and a reproducible project-local build command. Verify the DOCX is structurally editable, compile the PDF, run pdftotext or an equivalent extraction check that rejects replacement characters and unexpected control glyphs, and render every PDF page to a separate image under an ignored build/verification directory. Inspect every rendered page individually and repair orphaned headings, near-empty spill pages, awkward table or paragraph breaks, overlaps, clipping, excessive whitespace, weak hierarchy, and inconsistent number formatting before finishing. Retain ignored verification renders as evidence; optional cleanup must never block completion. Use clear descriptive filenames, exclude caches and generated debris from commits, inspect git status/diff before committing, and report success only after the editable source, reader-facing current-state content, visual layout, searchable text, and requested artifacts all pass.",
     tools: ["files", "shell", "canvas", "sandbox"],
   },
   latex: {