@noorm/marie-cli 0.1.17 → 0.1.25

package/dist/monolith/infrastructure/ai/core/MarieSanitizer.js

@@ -1,86 +1,326 @@
+import { getSanitizationMaxDepth, getSanitizationStringLimit, getSanitizationBreadthLimit, getSanitizationGlobalMaxSize, getSanitizationMaxEnumKeys, } from "../../config/ConfigService.js";
 /**
  * QUANTUM RESILIENCE: MarieSanitizer
  * Purges circular references, enforces depth and breadth limits, and truncates massive strings.
  * Ensures the telemetry stream never crashes the VS Code bridge.
  */
-export class MarieSanitizer {
-    static MAX_DEPTH = 10;
-    static STRING_LIMIT = 5000;
-    static BREADTH_LIMIT = 100;
-    static GLOBAL_MAX_SIZE = 512 * 1024; // 512KB total safety cap
-    /**
-     * Sanitizes an object for safe JSON serialization and bridge transport.
-     * @param obj The object to sanitize.
-     */
-    static sanitize(obj) {
-        const seen = new WeakSet();
-        let totalSize = 0;
-        const sanitizer = (val, depth) => {
-            if (totalSize > this.GLOBAL_MAX_SIZE)
-                return "[Global Size Limit Reached]";
-            if (depth > this.MAX_DEPTH)
-                return "[Max Depth Reached]";
-            if (val === null || val === undefined)
-                return val;
-            const type = typeof val;
-            if (type === "string") {
-                const effectiveLength = Math.min(val.length, this.STRING_LIMIT);
-                totalSize += effectiveLength;
-                if (val.length > this.STRING_LIMIT) {
-                    return val.substring(0, this.STRING_LIMIT) + "... [Truncated]";
-                }
-                return val;
-            }
-            if (type === "number") {
-                totalSize += 8;
-                return val;
+const getMAX_DEPTH = () => getSanitizationMaxDepth();
+const getSTRING_LIMIT = () => getSanitizationStringLimit();
+const getBREADTH_LIMIT = () => getSanitizationBreadthLimit();
+const getGLOBAL_MAX_SIZE = () => getSanitizationGlobalMaxSize();
+const getMAX_ENUM_KEYS = () => getSanitizationMaxEnumKeys();
+/**
+ * Safely gets a limited number of keys from an object to prevent 'Too many properties to enumerate'.
+ * Uses iterative for...in to avoid the overhead/crash of Object.keys() on massive objects/proxies.
+ */
+export function safeGetKeys(obj, limit) {
+    const keys = [];
+    if (obj === null || obj === undefined || typeof obj !== "object")
+        return keys;
+    try {
+        let count = 0;
+        for (const key in obj) {
+            // PHASE 24: Extra safety for hostile proxies
+            if (Object.prototype.hasOwnProperty.call(obj, key)) {
+                keys.push(key);
+                count++;
             }
-            if (type === "boolean") {
-                totalSize += 4;
-                return val;
+            if (count >= limit)
+                break;
+        }
+    }
+    catch (e) {
+        // Return whatever we managed to get before the crash
+    }
+    return keys;
+}
+/**
+ * Safely gets entries from an object with a limit.
+ */
+export function safeGetEntries(obj, limit) {
+    const entries = [];
+    const keys = safeGetKeys(obj, limit);
+    for (const key of keys) {
+        try {
+            entries.push([key, obj[key]]);
+        }
+        catch {
+            entries.push([key, "[Unreadable Property]"]);
+        }
+    }
+    return entries;
+}
+/**
+ * Safely gets values from an object with a limit.
+ */
+export function safeGetValues(obj, limit) {
+    const values = [];
+    const keys = safeGetKeys(obj, limit);
+    for (const key of keys) {
+        try {
+            values.push(obj[key]);
+        }
+        catch {
+            values.push("[Unreadable Property]");
+        }
+    }
+    return values;
+}
+/**
+ * Sanitizes an object for safe JSON serialization and bridge transport.
+ * @param obj The object to sanitize.
+ */
+export function sanitize(obj) {
+    const seen = new WeakSet();
+    let totalSize = 0;
+    const sanitizer = (val, depth) => {
+        if (totalSize > getGLOBAL_MAX_SIZE())
+            return "[Global Size Limit Reached]";
+        if (depth > getMAX_DEPTH())
+            return "[Max Depth Reached]";
+        if (val === null || val === undefined)
+            return val;
+        const type = typeof val;
+        if (type === "string") {
+            // PHASE 14: Secret Scanning & Redaction
+            const sanitizedString = scanAndRedact(val);
+            const effectiveLength = Math.min(sanitizedString.length, getSTRING_LIMIT());
+            totalSize += effectiveLength;
+            if (sanitizedString.length > getSTRING_LIMIT()) {
+                return (sanitizedString.substring(0, getSTRING_LIMIT()) + "... [Truncated]");
             }
-            if (type === "function")
-                return "[Function]";
-            if (type === "symbol")
-                return "[Symbol]";
-            if (type === "object") {
+            return sanitizedString;
+        }
+        if (type === "number") {
+            totalSize += 8;
+            return val;
+        }
+        if (type === "boolean") {
+            totalSize += 4;
+            return val;
+        }
+        if (type === "function")
+            return "[Function]";
+        if (type === "symbol")
+            return "[Symbol]";
+        if (type === "object") {
+            try {
                 if (seen.has(val))
                     return "[Circular Reference]";
                 seen.add(val);
-                if (Array.isArray(val)) {
+            }
+            catch (e) {
+                return "[Un-trackable Object]";
+            }
+            let isArr = false;
+            try {
+                isArr = Array.isArray(val);
+            }
+            catch (e) {
+                return "[Un-evaluable Array/Proxy]";
+            }
+            if (isArr) {
+                try {
+                    // Use safe slice for arrays too
+                    const arrayLimit = getBREADTH_LIMIT();
                     const arr = val
-                        .slice(0, this.BREADTH_LIMIT)
+                        .slice(0, arrayLimit)
                         .map((item) => sanitizer(item, depth + 1));
-                    if (val.length > this.BREADTH_LIMIT) {
-                        arr.push(`... [${val.length - this.BREADTH_LIMIT} items truncated]`);
+                    if (val.length > arrayLimit) {
+                        arr.push(`... [${val.length - arrayLimit} items truncated]`);
                     }
                     return arr;
                 }
-                const sanitized = {};
-                const keys = Object.keys(val);
-                const limitedKeys = keys.slice(0, this.BREADTH_LIMIT);
-                for (const key of limitedKeys) {
-                    if (key.startsWith("_") ||
-                        key === "extensionContext" ||
-                        key === "provider")
+                catch (e) {
+                    return "[Un-iterable Array/Proxy]";
+                }
+            }
+            const sanitizedObj = {};
+            // QUANTUM RESILIENCE: Use safeGetKeys with the enum limit to avoid V8 enumeration explosion
+            const keys = safeGetKeys(val, getMAX_ENUM_KEYS() + 1);
+            if (keys.length > getMAX_ENUM_KEYS()) {
+                sanitizedObj["_enumeration_halted"] =
+                    `Object has too many properties (truncated at ${getMAX_ENUM_KEYS()})`;
+            }
+            const limitedKeys = keys.slice(0, getBREADTH_LIMIT());
+            for (const key of limitedKeys) {
+                if (key.startsWith("_") ||
+                    key === "extensionContext" ||
+                    key === "provider" ||
+                    key === "marie" ||
+                    key === "runtime")
+                    continue;
+                try {
+                    // Extra safety for massive property access
+                    const propertyVal = val[key];
+                    if (typeof propertyVal === "function")
                         continue;
-                    try {
-                        totalSize += key.length;
-                        sanitized[key] = sanitizer(val[key], depth + 1);
-                    }
-                    catch {
-                        sanitized[key] = "[Unreadable]";
-                    }
+                    totalSize += key.length;
+                    sanitizedObj[key] = sanitizer(propertyVal, depth + 1);
                 }
-                if (keys.length > this.BREADTH_LIMIT) {
-                    sanitized["_truncated"] =
-                        `${keys.length - this.BREADTH_LIMIT} properties truncated`;
+                catch {
+                    sanitizedObj[key] = "[Unreadable Property]";
                 }
-                return sanitized;
             }
-            return String(val);
-        };
+            if (keys.length > getBREADTH_LIMIT() &&
+                !sanitizedObj["_enumeration_halted"]) {
+                sanitizedObj["_truncated"] =
+                    `${keys.length - getBREADTH_LIMIT()} properties truncated`;
+            }
+            return sanitizedObj;
+        }
+        return String(val);
+    };
+    try {
         return sanitizer(obj, 0);
     }
+    catch (e) {
+        return `[Sanitization Failed: ${String(e)}]`;
+    }
+}
+/**
+ * Safely stringifies an object by sanitizing it first.
+ */
+export function safeStringify(obj, space) {
+    try {
+        return JSON.stringify(sanitize(obj), null, space);
+    }
+    catch (e) {
+        return `[Stringify Failed: ${String(e)}]`;
+    }
+}
+/**
+ * Safely spreads an object into another by sanitizing it first.
+ * Prevents 'Too many properties to enumerate' during spread operations.
+ */
+export function safeSpread(obj) {
+    const sanitized = sanitize(obj);
+    return typeof sanitized === "object" && sanitized !== null ? sanitized : {};
+}
+/**
+ * PHASE 14: Sovereign Redaction Logic
+ * Redacts sensitive patterns like API keys, Bearer tokens, etc.
+ */
+function scanAndRedact(text) {
+    const patterns = [
+        /(api[\s_-]?key\s+(?:is\s+)?[:=\s]?\s*['"]?)[a-zA-Z0-9_\-]{20,}/gi, // API keys
+        /(auth[\s_-]?token\s+(?:is\s+)?[:=\s]?\s*['"]?)[a-zA-Z0-9_\-\.]{20,}/gi, // Auth tokens
+        /(Bearer\s+)[a-zA-Z0-9_\-\.]{20,}/gi, // Bearer tokens
+        /(password\s+(?:is\s+)?[:=\s]?\s*['"]?)[^'"]{4,}/gi, // Passwords (basic)
+    ];
+    let redacted = text;
+    for (const pattern of patterns) {
+        redacted = redacted.replace(pattern, "$1[REDACTED]");
+    }
+    return redacted;
+}
+/**
+ * PHASE 19: Skill Mutation Sanitization
+ * Strips known prompt injection sequences from evolved tool descriptions.
+ */
+export function sanitizeSkillDescription(desc) {
+    if (!desc)
+        return desc;
+    const injectionPatterns = [
+        /ignore\s+previous\s+instructions/gi,
+        /instead\s+of\s+the\s+original\s+plan/gi,
+        /you\s+must\s+now\s+perform/gi,
+        /system\s+override/gi,
+        /elevate\s+privileges/gi,
+    ];
+    let sanitized = desc;
+    for (const pattern of injectionPatterns) {
+        sanitized = sanitized.replace(pattern, "[SEC_BLOCKED]");
+    }
+    // Enforce string limit for descriptions
+    if (sanitized.length > getSTRING_LIMIT()) {
+        sanitized = sanitized.substring(0, getSTRING_LIMIT()) + "... [Truncated]";
+    }
+    return sanitized;
+}
+/**
+ * PHASE 23: Deep Argument Scanning
+ * Scans tool arguments for adversarial patterns (shell injection, prompt injection).
+ */
+export function scanToolArguments(name, input) {
+    const alerts = [];
+    // Use safeStringify to avoid enumeration errors
+    const inputStr = safeStringify(input);
+    // 1. Shell Injection Check (for run_command)
+    if (name === "run_command" || name === "run_shell") {
+        const cmd = (input && (input.CommandLine || input.command)) || "";
+        const shellInjectionPatterns = /[;&|`$\(\)]/g;
+        if (shellInjectionPatterns.test(cmd)) {
+            alerts.push(`Potential Shell Injection detected in command: "${cmd}"`);
+        }
+        const dangerousCmds = [
+            "sudo ",
+            "rm -rf ",
+            "kill -9 ",
+            "> /dev/",
+            "chmod 777",
+        ];
+        for (const dangerous of dangerousCmds) {
+            if (cmd.includes(dangerous)) {
+                alerts.push(`High-Entropy Command detected: "${dangerous.trim()}"`);
+            }
+        }
+    }
+    // 2. Prompt Injection Check (Global string scan)
+    const injectionPatterns = [
+        /ignore\s+previous\s+instructions/gi,
+        /instead\s+of\s+the\s+original\s+plan/gi,
+        /system\s+override/gi,
+        /elevate\s+privileges/gi,
+        /you\s+must\s+now\s+perform/gi,
+    ];
+    const scanString = (val) => {
+        if (typeof val === "string") {
+            for (const pattern of injectionPatterns) {
+                if (pattern.test(val)) {
+                    alerts.push(`Cognitive Drift: Prompt injection sequence detected in argument.`);
+                    break;
+                }
+            }
+        }
+        else if (typeof val === "object" && val !== null) {
+            try {
+                // Limited scanning for objects to avoid enumeration errors
+                const keys = safeGetKeys(val, 50);
+                for (const key of keys) {
+                    scanString(val[key]);
+                }
+            }
+            catch (e) {
+                // Ignore enumeration errors during scanning
+            }
+        }
+    };
+    scanString(input);
+    return Array.from(new Set(alerts));
+}
+/**
+ * Deeply investigations objects for hostile proxy traps.
+ * Returns true if the object appears to be a hostile proxy.
+ */
+export function isHostileProxy(obj) {
+    if (typeof obj !== "object" || obj === null)
+        return false;
+    // Attempt to check common proxy characteristics
+    try {
+        const start = performance.now();
+        // Hostile proxies might have slow getters
+        const keys = safeGetKeys(obj, 1);
+        if (keys.length > 0) {
+            const val = obj[keys[0]];
+        }
+        const end = performance.now();
+        if (end - start > 10)
+            return true; // Suspiciously slow property access
+    }
+    catch {
+        return true; // Throws on access
+    }
+    return false;
 }
 //# sourceMappingURL=MarieSanitizer.js.map

package/dist/monolith/infrastructure/ai/core/MarieSanitizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"MarieSanitizer.js","sourceRoot":"","sources":["../../../../../src/monolith/infrastructure/ai/core/MarieSanitizer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACjB,MAAM,CAAU,SAAS,GAAG,EAAE,CAAC;IAC/B,MAAM,CAAU,YAAY,GAAG,IAAI,CAAC;IACpC,MAAM,CAAU,aAAa,GAAG,GAAG,CAAC;IACpC,MAAM,CAAU,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,yBAAyB;IAE/E;;;OAGG;IACI,MAAM,CAAC,QAAQ,CAAC,GAAQ;QAC7B,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,MAAM,SAAS,GAAG,CAAC,GAAQ,EAAE,KAAa,EAAO,EAAE;YACjD,IAAI,SAAS,GAAG,IAAI,CAAC,eAAe;gBAClC,OAAO,6BAA6B,CAAC;YACvC,IAAI,KAAK,GAAG,IAAI,CAAC,SAAS;gBAAE,OAAO,qBAAqB,CAAC;YACzD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC;YAElD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC;YACxB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBAChE,SAAS,IAAI,eAAe,CAAC;gBAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,iBAAiB,CAAC;gBACjE,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,SAAS,IAAI,CAAC,CAAC;gBACf,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,SAAS,IAAI,CAAC,CAAC;gBACf,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,IAAI,KAAK,UAAU;gBAAE,OAAO,YAAY,CAAC;YAC7C,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,UAAU,CAAC;YAEzC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO,sBAAsB,CAAC;gBACjD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEd,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,GAAG,GAAG,GAAG;yBACZ,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC;yBAC5B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC7C,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnC,GAAW,CAAC,IAAI,CACf,QAAQ,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,mBAAmB,CAC3D,CAAC;oBACJ,CAAC;oBACD,OAAO,GAAG,CAAC;gBACb,CAAC;gBAED,MAAM,SAAS,GAAQ,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;gBAEtD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;oBAC9B,IACE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;wBACnB,GAAG,KAAK,kBAAkB;wBAC1B,GAAG,KAAK,UAAU;wBAElB,SAAS;oBACX,IAAI,CAAC;wBACH,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC;wBACxB,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAClD,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC;oBAClC,CAAC;gBACH,CAAC;gBAED,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;oBACrC,SAAS,CAAC,YAAY,CAAC;wBACrB,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,uBAAuB,CAAC;gBAC/D,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC,CAAC;QAEF,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC"}
+{"version":3,"file":"MarieSanitizer.js","sourceRoot":"","sources":["../../../../../src/monolith/infrastructure/ai/core/MarieSanitizer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,+BAA+B,CAAC;AAEvC;;;;GAIG;AAEH,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,uBAAuB,EAAE,CAAC;AACrD,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,0BAA0B,EAAE,CAAC;AAC3D,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,2BAA2B,EAAE,CAAC;AAC7D,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC,4BAA4B,EAAE,CAAC;AAChE,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,0BAA0B,EAAE,CAAC;AAE5D;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAQ,EAAE,KAAa;IACjD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE9E,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACtB,6CAA6C;YAC7C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACf,KAAK,EAAE,CAAC;YACV,CAAC;YACD,IAAI,KAAK,IAAI,KAAK;gBAAE,MAAM;QAC5B,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,qDAAqD;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAQ,EAAE,KAAa;IACpD,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAQ,EAAE,KAAa;IACnD,MAAM,MAAM,GAAU,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAQ;IAC/B,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,MAAM,SAAS,GAAG,CAAC,GAAQ,EAAE,KAAa,EAAO,EAAE;QACjD,IAAI,SAAS,GAAG,kBAAkB,EAAE;YAAE,OAAO,6BAA6B,CAAC;QAC3E,IAAI,KAAK,GAAG,YAAY,EAAE;YAAE,OAAO,qBAAqB,CAAC;QACzD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC;QAElD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC;QACxB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,wCAAwC;YACxC,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAE3C,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAC9B,eAAe,CAAC,MAAM,EACtB,eAAe,EAAE,CAClB,CAAC;YACF,SAAS,IAAI,eAAe,CAAC;YAC7B,IAAI,eAAe,CAAC,MAAM,GAAG,eAAe,EAAE,EAAE,CAAC;gBAC/C,OAAO,CACL,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,GAAG,iBAAiB,CACpE,CAAC;YACJ,CAAC;YACD,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,SAAS,IAAI,CAAC,CAAC;YACf,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,SAAS,IAAI,CAAC,CAAC;YACf,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,YAAY,CAAC;QAC7C,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC;QAEzC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO,sBAAsB,CAAC;gBACjD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,uBAAuB,CAAC;YACjC,CAAC;YAED,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,4BAA4B,CAAC;YACtC,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,gCAAgC;oBAChC,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;oBACtC,MAAM,GAAG,GAAG,GAAG;yBACZ,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;yBACpB,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;oBAClD,IAAI,GAAG,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;wBAC3B,GAAW,CAAC,IAAI,CACf,QAAQ,GAAG,CAAC,MAAM,GAAG,UAAU,mBAAmB,CACnD,CAAC;oBACJ,CAAC;oBACD,OAAO,GAAG,CAAC;gBACb,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,2BAA2B,CAAC;gBACrC,CAAC;YACH,CAAC;YAED,MAAM,YAAY,GAAQ,EAAE,CAAC;YAE7B,4FAA4F;YAC5F,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC;YAEtD,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE,EAAE,CAAC;gBACrC,YAAY,CAAC,qBAAqB,CAAC;oBACjC,gDAAgD,gBAAgB,EAAE,GAAG,CAAC;YAC1E,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAEtD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,IACE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBACnB,GAAG,KAAK,kBAAkB;oBAC1B,GAAG,KAAK,UAAU;oBAClB,GAAG,KAAK,OAAO;oBACf,GAAG,KAAK,SAAS;oBAEjB,SAAS;gBACX,IAAI,CAAC;oBACH,2CAA2C;oBAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,OAAO,WAAW,KAAK,UAAU;wBAAE,SAAS;oBAEhD,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC;oBACxB,YAAY,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACxD,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC;gBAC9C,CAAC;YACH,CAAC;YAED,IACE,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE;gBAChC,CAAC,YAAY,CAAC,qBAAqB,CAAC,EACpC,CAAC;gBACD,YAAY,CAAC,YAAY,CAAC;oBACxB,GAAG,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE,uBAAuB,CAAC;YAC/D,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,yBAAyB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAQ,EAAE,KAAuB;IAC7D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,sBAAsB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAQ;IACjC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG;QACf,kEAAkE,EAAE,WAAW;QAC/E,uEAAuE,EAAE,cAAc;QACvF,oCAAoC,EAAE,gBAAgB;QACtD,mDAAmD,EAAE,oBAAoB;KAC1E,CAAC;IAEF,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,iBAAiB,GAAG;QACxB,oCAAoC;QACpC,wCAAwC;QACxC,8BAA8B;QAC9B,qBAAqB;QACrB,wBAAwB;KACzB,CAAC;IAEF,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC1D,CAAC;IAED,wCAAwC;IACxC,IAAI,SAAS,CAAC,MAAM,GAAG,eAAe,EAAE,EAAE,CAAC;QACzC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,GAAG,iBAAiB,CAAC;IAC5E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAU;IACxD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,gDAAgD;IAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEtC,6CAA6C;IAC7C,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,sBAAsB,GAAG,cAAc,CAAC;QAC9C,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,mDAAmD,GAAG,GAAG,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,aAAa,GAAG;YACpB,OAAO;YACP,SAAS;YACT,UAAU;YACV,SAAS;YACT,WAAW;SACZ,CAAC;QACF,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;YACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,mCAAmC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,MAAM,iBAAiB,GAAG;QACxB,oCAAoC;QACpC,wCAAwC;QACxC,qBAAqB;QACrB,wBAAwB;QACxB,8BAA8B;KAC/B,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,GAAQ,EAAE,EAAE;QAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,CAAC,IAAI,CACT,kEAAkE,CACnE,CAAC;oBACF,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,2DAA2D;gBAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,4CAA4C;YAC9C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,UAAU,CAAC,KAAK,CAAC,CAAC;IAElB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAE1D,gDAAgD;IAChD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,0CAA0C;QAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,GAAG,GAAG,KAAK,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,oCAAoC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,mBAAmB;IAClC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/monolith/infrastructure/ai/core/MarieSemaphore.js

@@ -1,5 +1,8 @@
+import { ConfigService } from "../../config/ConfigService.js";
+import { NoormmeEngine } from "../../persistence/NoormmeEngine.js";
 /**
- * Simple async semaphore to limit global concurrency.
+ * Clean Fix Pattern: MarieSemaphore
+ * Async semaphore to limit global concurrency with timeout and abort support.
  */
 export class MarieSemaphore {
     maxConcurrency;
@@ -8,15 +11,55 @@ export class MarieSemaphore {
     constructor(maxConcurrency) {
         this.maxConcurrency = maxConcurrency;
     }
-    async acquire() {
+    async acquire(signal) {
+        if (signal?.aborted)
+            throw new Error("Semaphore acquisition aborted.");
         if (this.activeCount < this.maxConcurrency) {
             this.activeCount++;
             return;
         }
-        return new Promise((resolve) => {
-            this.queue.push(resolve);
+        const startWait = Date.now();
+        const timeout = ConfigService.getSemaphoreTimeoutMs();
+        return new Promise((resolve, reject) => {
+            let timeoutId;
+            const cleanup = () => {
+                clearTimeout(timeoutId);
+                signal?.removeEventListener("abort", onAbort);
+                const idx = this.queue.indexOf(wrappedResolve);
+                if (idx > -1)
+                    this.queue.splice(idx, 1);
+            };
+            const wrappedResolve = () => {
+                const waitDuration = Date.now() - startWait;
+                this.reportTelemetry(waitDuration, this.queue.length);
+                cleanup();
+                resolve();
+            };
+            const onAbort = () => {
+                cleanup();
+                reject(new Error("Semaphore acquisition aborted by signal."));
+            };
+            timeoutId = setTimeout(() => {
+                cleanup();
+                reject(new Error(`Extreme Stability: Semaphore Acquisition Timeout after ${timeout}ms`));
+            }, timeout);
+            signal?.addEventListener("abort", onAbort);
+            this.queue.push(wrappedResolve);
         });
     }
+    async reportTelemetry(waitMs, queueSize) {
+        if (waitMs < 100)
+            return; // Only report significant contention
+        try {
+            const db = await NoormmeEngine.getInstance();
+            await db.agent.cortex.metrics.recordMetric("semaphore_contention", waitMs, {
+                metadata: { queueSize, waitMs }
+            });
+        }
+        catch (e) {
+            // Background telemetry failure should not crash the turn
+        }
+    }
     release() {
         this.activeCount--;
         const next = this.queue.shift();

package/dist/monolith/infrastructure/ai/core/MarieSemaphore.js.map

@@ -1 +1 @@
-{"version":3,"file":"MarieSemaphore.js","sourceRoot":"","sources":["../../../../../src/monolith/infrastructure/ai/core/MarieSemaphore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,cAAc;IAIL;IAHZ,WAAW,GAAG,CAAC,CAAC;IAChB,KAAK,GAAmB,EAAE,CAAC;IAEnC,YAAoB,cAAsB;QAAtB,mBAAc,GAAd,cAAc,CAAQ;IAAG,CAAC;IAEvC,KAAK,CAAC,OAAO;QAClB,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,OAAO;QACZ,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"MarieSemaphore.js","sourceRoot":"","sources":["../../../../../src/monolith/infrastructure/ai/core/MarieSemaphore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAEnE;;;GAGG;AACH,MAAM,OAAO,cAAc;IAIL;IAHZ,WAAW,GAAG,CAAC,CAAC;IAChB,KAAK,GAAmB,EAAE,CAAC;IAEnC,YAAoB,cAAsB;QAAtB,mBAAc,GAAd,cAAc,CAAQ;IAAI,CAAC;IAExC,KAAK,CAAC,OAAO,CAAC,MAAoB;QACvC,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAEvE,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,aAAa,CAAC,qBAAqB,EAAE,CAAC;QAEtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,SAAyB,CAAC;YAE9B,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC/C,IAAI,GAAG,GAAG,CAAC,CAAC;oBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC,CAAC;YAEF,MAAM,cAAc,GAAG,GAAG,EAAE;gBAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC5C,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACtD,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC;YAEF,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,0DAA0D,OAAO,IAAI,CAAC,CAAC,CAAC;YAC3F,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,SAAiB;QAC7D,IAAI,MAAM,GAAG,GAAG;YAAE,OAAO,CAAC,qCAAqC;QAC/D,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,sBAAsB,EAAE,MAAM,EAAE;gBACzE,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,yDAAyD;QAC3D,CAAC;IACH,CAAC;IAEM,OAAO;QACZ,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;CACF"}

package/dist/monolith/infrastructure/ai/core/MarieSession.js

@@ -1,3 +1,4 @@
+import { MarieSanitizer } from "./MarieSanitizer.js";
 import { ConfigService } from "../../config/ConfigService.js";
 import { ContextManager } from "../context/ContextManager.js";
 import { SYSTEM_CONTINUATION_PROMPT, SYSTEM_PROMPT, } from "../../../../prompts.js";
@@ -22,10 +23,88 @@ export class MarieSession {
         this.providerFactory = providerFactory;
         this.promptProfile = promptProfile;
     }
-    resolveSystemPrompt() {
-        return this.promptProfile === "continuation"
+    async resolveSystemPrompt() {
+        const basePrompt = this.promptProfile === "continuation"
             ? SYSTEM_CONTINUATION_PROMPT
             : SYSTEM_PROMPT;
+        try {
+            const { NoormmeEngine } = await import("../../persistence/NoormmeEngine.js");
+            const db = await NoormmeEngine.getInstance();
+            // Query for the active or verifying persona
+            const result = await db.execute(`
+        SELECT * FROM agent_personas 
+        WHERE status = 'active' 
+        OR json_extract(metadata, '$.evolution_status') = 'verifying'
+        ORDER BY CASE WHEN json_extract(metadata, '$.evolution_status') = 'verifying' THEN 0 ELSE 1 END, updated_at DESC
+        LIMIT 1
+      `);
+            let activePersona = result.length > 0 ? result[0] : null;
+            if (!activePersona) {
+                activePersona = await db.agent.cortex.personas.getPersona("Marie-Base");
+            }
+            if (activePersona?.role) {
+                const isVerifying = activePersona.metadata && (typeof activePersona.metadata === 'string'
+                    ? JSON.parse(activePersona.metadata).evolution_status === 'verifying'
+                    : activePersona.metadata.evolution_status === 'verifying');
+                let prompt = `[${isVerifying ? 'VERIFYING' : 'EVOLVED'} PERSONA: ${activePersona.name}]\n${activePersona.role}\n\n${basePrompt}`;
+                // PHASE 6: Systemic Lesson Injection
+                try {
+                    const lessons = await db.agent.cortex.reasoner.synthesizeLessons();
+                    const lessonHeadings = Object.keys(lessons);
+                    if (lessonHeadings.length > 0) {
+                        const lessonSummary = lessonHeadings
+                            .slice(0, 3)
+                            .map(topic => `* ${topic.toUpperCase()}: ${lessons[topic][0]}`)
+                            .join("\n");
+                        prompt = `[SYSTEMIC BEST PRACTICES]\n${lessonSummary}\n\n${prompt}`;
+                    }
+                }
+                catch (e) {
+                    console.warn("[MarieSession] Failed to load systemic lessons", e);
+                }
+                return prompt;
+            }
+        }
+        catch (e) {
+            console.warn("[MarieSession] Failed to load persona or lessons", e);
+        }
+        return basePrompt;
+    }
+    async getEvolvedTools() {
+        const baseTools = this.toolRegistry.getTools();
+        // PHASE 19: Skill Mutation Gate
+        if (!ConfigService.isSkillMutationEnabled()) {
+            return baseTools;
+        }
+        try {
+            const { NoormmeEngine } = await import("../../persistence/NoormmeEngine.js");
+            const db = await NoormmeEngine.getInstance();
+            const capabilities = await db.agent.cortex.capabilities.getCapabilities();
+            // Create a map of evolved descriptions (Verified > Experimental)
+            const evolvedMap = new Map();
+            for (const cap of capabilities) {
+                if (cap.status === 'verified' || !evolvedMap.has(cap.name)) {
+                    if (cap.description)
+                        evolvedMap.set(cap.name, cap.description);
+                }
+            }
+            return baseTools.map(tool => {
+                const evolvedDesc = evolvedMap.get(tool.name);
+                if (evolvedDesc) {
+                    // PHASE 19: Mutation Sanitization
+                    const cleanDesc = MarieSanitizer.sanitizeSkillDescription(evolvedDesc);
+                    if (process.env.MARIE_DEBUG) {
+                        console.log(`[MarieSession] Injecting evolved description for tool: ${tool.name}`);
+                    }
+                    return { ...tool, description: cleanDesc };
+                }
+                return tool;
+            });
+        }
+        catch (e) {
+            console.warn("[MarieSession] Failed to fetch evolved tools", e);
+            return baseTools;
+        }
     }
     async *executeLoop(messages, signal, state) {
         // PHASE 6: Generator Disposal Grace - Snapshot messages before modification
@@ -45,8 +124,8 @@ export class MarieSession {
                 model: ConfigService.getModel(),
                 max_tokens: 8192,
                 messages: managedMessages,
-                system: this.resolveSystemPrompt(),
-                tools: this.toolRegistry.getTools(),
+                system: await this.resolveSystemPrompt(),
+                tools: await this.getEvolvedTools(),
             };
             const eventQueue = [];
             let resolver = null;
@@ -75,19 +154,20 @@ export class MarieSession {
                     attempts++;
                     const isRetryable = e.status === 429 ||
                         e.status >= 500 ||
-                        e.message?.includes("rate limit");
+                        e.message?.includes("rate limit") ||
+                        e.message?.includes("timeout") ||
+                        e.message?.includes("ECONNRESET");
                     if (isRetryable && attempts < maxAttempts && this.providerFactory) {
-                        const currentType = ConfigService.getAiProvider();
-                        const failoverType = currentType === "anthropic"
-                            ? "openrouter"
-                            : currentType === "openrouter"
-                                ? "cerebras"
-                                : "anthropic";
-                        console.warn(`[SpectralFailover] Attempt ${attempts} failed for ${currentType}. Switching to ${failoverType}.`);
+                        // Re-evaluating failover logic inside the catch block
+                        const currentProviderName = this.provider.constructor.name.replace("Provider", "").toLowerCase();
+                        const failoverPriority = ConfigService.getFailoverPriority();
+                        const nextIndex = (failoverPriority.indexOf(currentProviderName) + 1) % failoverPriority.length;
+                        const failoverType = failoverPriority[nextIndex];
+                        console.warn(`[SpectralFailover] Attempt ${attempts} failed for ${currentProviderName}. Failover to ${failoverType}...`);
                         this.tracker?.emitEvent({
                             type: "reasoning",
                             runId: this.tracker.getRun().runId,
-                            text: `🔄 SPECTRAL FAILOVER: ${currentType} is struggling. Switching to ${failoverType} mid-turn...`,
+                            text: `🔄 SPECTRAL FAILOVER: ${currentProviderName} is struggling. Switching to ${failoverType} (Attempt ${attempts}/${maxAttempts})...`,
                             elapsedMs: this.tracker.elapsedMs(),
                         });
                         this.provider = this.providerFactory(failoverType);
@@ -180,8 +260,8 @@ export class MarieSession {
             model: ConfigService.getModel(),
             max_tokens: 8192,
             messages: await ContextManager.manage(this.messages, this.provider, state),
-            system: this.resolveSystemPrompt(),
-            tools: this.toolRegistry.getTools(),
+            system: await this.resolveSystemPrompt(),
+            tools: await this.getEvolvedTools(),
         };
         const response = await this.provider.createMessageStream(params, () => { });
         let finalContent = response.content;