@lazyingart/agintiflow 0.20.248 → 0.20.249

package/docs/supervision-campaign-ledger.md

@@ -330,3 +330,52 @@ event sequence, a project handoff with exact status and verification commands,
 and no lingering job tmux session. No source patch or npm release was needed;
 this run validates the published package's general long-job, resume, context,
 deduplication, and cleanup contracts without task-specific routing.
+
+### Host-managed response roles and permission integrity
+
+`permission-resilient-synthesis-030` traced a real LabCanvas career-report
+failure to the integration boundary rather than weakening AgInTiFlow's
+permission guard. LabCanvas invoked the host-managed report under the role
+`career_research`, while its response-only classifier recognized only the older
+`career_daily` alias. The model was consequently offered file tools in a safe,
+read-only run; when it tried to save its already synthesized report,
+AgInTiFlow correctly persisted a `permission_required` pause.
+
+LabCanvas now classifies the full `career-research-*` and
+`daily-organizer-*` role families as host-managed response turns. Those turns
+use AgInTi's `chatops` profile with shell, file, and auxiliary tools disabled;
+the host owns persistence, compilation, quality validation, and delivery.
+General worker roles retain their existing writable Docker contract, and safe
+mode still blocks genuine unapproved writes.
+
+A fresh installed `0.20.248` DeepSeek run completed the imperfect synthesis
+prompt in one model turn. Independent event inspection found zero tool calls,
+zero permission events, one normal `session.finished`, a complete 1,893-byte
+answer, and no task artifact mutation. This was an AgenticApp integration fix;
+no AgInTiFlow runtime or npm release change was required.
+
+### Reader-facing report quality and local editorial routing
+
+`research-pdf-quality-034` exercised a normal scheduled-research packet through
+the AgInTi-backed LabCanvas worker. DeepSeek revised an existing local report
+into a 17,557-byte Chinese scientific review with nine traceable sources,
+source-level methods/results/limitations, cross-source synthesis and tensions,
+explicit evidence boundaries, actionable experiments, and references. The
+first host compile exposed a nearly empty final page, and the prior agent repair
+claimed success without changing the source.
+
+LabCanvas now treats the PDF as a different deliverable from the concise chat
+brief. It audits every configured content dimension, keeps orchestration
+provenance out of the reader document, extracts text per page, renders private
+page previews, rejects orphan pages, retries one conservative compact layout,
+rebuilds stale sibling PDFs, and can deterministically adopt a corrected
+host-built PDF during stored-result repair. The accepted four-page PDF has
+embedded CJK fonts, page body counts `1584, 1988, 1416, 2058`, and no visual or
+layout issues. Stored replay covered every task item with no model rerun or
+external write.
+
+The scenario also exposed two general AgInTi routing false positives. Explicit
+local report paths and existing-document revision language now count as local
+workspace intent, so surrounding research policy does not force a new deep
+research route. The phrase `page-safe` no longer creates a browser-evidence
+requirement. Focused routing/evidence smokes and the full npm suite pass.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.248",
+  "version": "0.20.249",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/scripts/smoke-progressive-tool-selection.js

@@ -1647,6 +1647,22 @@ assert(
   "surrounding policy prose incorrectly forced a scoped artifact task into deep research"
 );
 
+const scopedExistingReportEditPrompt = `Generic research worker policy.
+AGINTI_EVIDENCE_SCOPE_JSON: {"mode":"task","request":"Revise the exact existing research report at output/wechat_worker/task/report.md. Preserve the evidence, write the revised Markdown under this task's artifact directory, and use page-safe tables. The host owns PDF compilation."}
+Surrounding routine text mentions literature review, evidence review, research report, and web sources.`;
+const scopedExistingReportEditTools = selectProgressiveTools(allTools, {
+  config: { provider: "deepseek", progressiveTools: true },
+  goal: scopedExistingReportEditPrompt,
+  profile: "auto",
+  messages: [{ role: "user", content: scopedExistingReportEditPrompt }],
+});
+assert(names(scopedExistingReportEditTools).includes("read_file"), "scoped existing-report edit omitted read_file");
+assert(names(scopedExistingReportEditTools).includes("write_file"), "scoped existing-report edit omitted write_file");
+assert(
+  !(names(scopedExistingReportEditTools).length === 2 && names(scopedExistingReportEditTools)[0] === "deep_research"),
+  "scoped existing-report edit was incorrectly forced into deep_research"
+);
+
 const scopedDeepResearchPrompt = `Generic workspace policy.
 AGINTI_EVIDENCE_SCOPE_JSON: {"mode":"task","request":"Write a deep research evidence review comparing three primary papers."}`;
 const scopedDeepResearchTools = selectProgressiveTools(allTools, {

package/scripts/smoke-scs-evidence-visibility.js

@@ -36,6 +36,26 @@ function fakeStudentClient(json) {
   };
 }
 
+const pageSafeReportContract = deriveScsTaskContract({
+  goal: [
+    "AGINTI_EVIDENCE_SCOPE_JSON: {\"mode\":\"task\",\"request\":\"Revise the exact existing research report at output/wechat_worker/task/report.md, write a complete Markdown report, and use page-safe tables. The host owns PDF compilation.\"}",
+    "Surrounding browser and research policy text is not part of the exact request.",
+  ].join("\n"),
+  taskProfile: "auto",
+});
+assert(
+  pageSafeReportContract.requiredEvidence.some((item) => item.category === "file"),
+  "a scoped existing-report edit did not require file evidence"
+);
+assert(
+  pageSafeReportContract.requiredEvidence.some((item) => item.category === "artifact"),
+  "a scoped existing-report edit did not require artifact evidence"
+);
+assert(
+  !pageSafeReportContract.requiredEvidence.some((item) => item.category === "browser"),
+  "the editorial phrase page-safe incorrectly required browser evidence"
+);
+
 const noEvidenceProgress = {
   role: "student",
   decision: "reject_phase",

package/src/research-routing.js

@@ -89,6 +89,8 @@ export function hasLocalResearchWorkspaceIntent(goal = "", messages = []) {
   const text = `${scopedChatopsEvidenceGoal(goal)}\n${recent}`;
   return (
     /\b(?:this|current|existing|project|workspace|local)\s+(?:folder|directory|repo(?:sitory)?|files?|notes?|sources?|artifacts?)\b/i.test(text) ||
+    /(?:^|[\s`'"(])(?:~\/|\.{1,2}\/|\/)?(?:[^\s`'"()\/]+\/)+[^\s`'"()\/]+\.(?:bib|csv|docx?|json|md|pdf|tex|txt|ya?ml)\b/i.test(text) ||
+    /\b(?:edit|revise|rewrite|proofread|correct|polish|read|inspect|update)\b[^.\n;]{0,160}\b(?:exact|existing|current|saved|local)\b[^.\n;]{0,80}\b(?:document|file|manuscript|markdown|notes?|report|source)\b/i.test(text) ||
     /\b(?:task|project|source|research|evidence|notes?|manifest|readme)[-_A-Za-z0-9]*\.(?:md|json|ya?ml|txt|csv|bib|tex)\b/i.test(text) ||
     /\b(?:inspect|read|reconcile|correct|rewrite|update)\b.{0,120}\b(?:workspace|folder|directory|repo(?:sitory)?|local files?|project notes?|existing notes?)\b/i.test(text) ||
     /\b(?:git\s+)?commit\b/i.test(text)

package/src/scs-evidence.js

@@ -793,7 +793,17 @@ function inferRequirementCategories(goal = "", taskProfile = "", acceptanceCrite
   if (textHas(mandatoryEvidenceText, /\b(artifact|canvas|pdf|image|video|screenshot|cover|plot|chart|figure|docx|archive|copy to|export|generated|generate|draft)\b/) || /输出|产物|图片|视频|截图|封面|生成/.test(mandatoryEvidenceText)) {
     categories.add("artifact");
   }
-  if (textHas(mandatoryEvidenceText, /\b(browser|chrome|chromium|cdp|devtools|playwright|selenium|web[- ]?ui|website|page|tab|composer|click|type|upload|attach|submit|form)\b/) || /浏览器|网页|页面|上传|提交|附件|资产库/.test(mandatoryEvidenceText)) {
+  if (
+    textHas(
+      mandatoryEvidenceText,
+      /\b(browser|chrome|chromium|cdp|devtools|playwright|selenium|web[- ]?(?:ui|page)|website|tab|composer|click|type|upload|attach|submit|form)\b/
+    ) ||
+    textHas(
+      mandatoryEvidenceText,
+      /\b(?:browse|navigate|open|refresh|visit)\b[^.\n;]{0,60}\b(?:page|site)\b|\b(?:page|site)\b[^.\n;]{0,60}\b(?:click|open|submit|upload)\b/
+    ) ||
+    /浏览器|网页|页面|上传|提交|附件|资产库/.test(mandatoryEvidenceText)
+  ) {
     categories.add("browser");
   }
   if (textHas(mandatoryEvidenceText, /\b(screenshot|visible|visual|see|inspect image|open image|read_image|thumbnail)\b/) || /截图|可见|缩略图/.test(mandatoryEvidenceText)) {