@yeaft/webchat-agent 1.0.430 → 1.0.431

package/local-runtime/version.json

@@ -1 +1 @@
-{"version":"1.0.430"}
+{"version":"1.0.431"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yeaft/webchat-agent",
-  "version": "1.0.430",
+  "version": "1.0.431",
   "description": "Remote worker agent for Yeaft Web Code Agent — connects the native Yeaft engine, CLI providers, and workbench tools",
   "main": "index.js",
   "type": "module",

package/yeaft/work-center/assignment.js

@@ -7,6 +7,28 @@ function policyError(message) {
   return error;
 }
 
+function diagnosticValue(value) {
+  return String(value ?? '')
+    .replace(/[^a-zA-Z0-9._:-]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .slice(0, 128) || 'none';
+}
+
+function assignmentError(message, {
+  policy, stageType, candidates = [], excluded = [], fallback = 'not-attempted',
+}) {
+  const context = [
+    `mode=${diagnosticValue(policy.mode)}`,
+    `capability=${diagnosticValue(policy.capability || stageType)}`,
+    `fallback=${diagnosticValue(fallback)}`,
+    `candidates=${candidates.length
+      ? candidates.map(vp => diagnosticValue(vp?.id || vp)).sort().join(',')
+      : 'none'}`,
+    `excluded=${excluded.size ? [...excluded].map(diagnosticValue).sort().join(',') : 'none'}`,
+  ].join('; ');
+  return policyError(`${message} (${context})`);
+}
+
 const CAPABILITY_TERMS = Object.freeze({
   triage: ['triage', 'requirement', 'flow', 'product', 'strategy', 'cross-domain', 'analysis'],
   implement: ['implement', 'engineer', 'developer', 'engineering', 'systems', 'code', 'execution'],
@@ -60,23 +82,46 @@ function priorVpIdsForSeparation(policy, priorRuns) {
 export function selectWorkItemVp({ policy: rawPolicy, stageType, vps, priorRuns = [] }) {
   const policy = normalizeAssignmentPolicy(rawPolicy, stageType);
   const all = Array.isArray(vps) ? vps.filter(vp => vp?.id) : [];
-  if (all.length === 0) throw policyError('Work Center has no available VPs');
-  const byId = new Map(all.map(vp => [vp.id, vp]));
   const excluded = priorVpIdsForSeparation(policy, priorRuns);
+  if (all.length === 0) {
+    throw assignmentError('Work Center has no available VPs', {
+      policy, stageType, candidates: [], excluded,
+    });
+  }
+  const byId = new Map(all.map(vp => [vp.id, vp]));
 
   if (policy.mode === 'fixed') {
     const fixed = byId.get(policy.fixedVpId);
-    if (!fixed) throw policyError(`Fixed Work Center VP is unavailable: ${policy.fixedVpId}`);
-    if (excluded.has(fixed.id)) throw policyError(`Work Center separation policy excludes VP: ${fixed.id}`);
+    if (!fixed) {
+      throw assignmentError(`Fixed Work Center VP is unavailable: ${diagnosticValue(policy.fixedVpId)}`, {
+        policy, stageType, candidates: [policy.fixedVpId], excluded,
+      });
+    }
+    if (excluded.has(fixed.id)) {
+      throw assignmentError(`Work Center separation policy excludes VP: ${diagnosticValue(fixed.id)}`, {
+        policy, stageType, candidates: [fixed], excluded,
+      });
+    }
     return { vp: fixed, reason: `fixed:${fixed.id}`, policy };
   }
 
+  const configuredCandidates = ['pool', 'planned'].includes(policy.mode)
+    ? policy.candidateVpIds
+    : all;
   const pool = ['pool', 'planned'].includes(policy.mode)
     ? policy.candidateVpIds.map(id => byId.get(id)).filter(Boolean)
     : all;
-  if (pool.length === 0) throw policyError('No configured Work Center VP candidates are available');
+  if (pool.length === 0) {
+    throw assignmentError('No configured Work Center VP candidates are available', {
+      policy, stageType, candidates: configuredCandidates, excluded,
+    });
+  }
   const eligible = pool.filter(vp => !excluded.has(vp.id));
-  if (eligible.length === 0) throw policyError('No Work Center VP satisfies the stage separation policy');
+  if (eligible.length === 0) {
+    throw assignmentError('No Work Center VP satisfies the stage separation policy', {
+      policy, stageType, candidates: pool, excluded,
+    });
+  }
   if (policy.mode === 'planned') {
     return {
       vp: eligible[0],
@@ -99,7 +144,11 @@ export function selectWorkItemVp({ policy: rawPolicy, stageType, vps, priorRuns
         policy,
       };
     }
-    throw policyError(`No Work Center VP matches capability: ${policy.capability || stageType}`);
+    return {
+      vp: fallback[0].vp,
+      reason: `${policy.mode}:${policy.capability || stageType}:fallback=${stageType}:eligible-id:score=0`,
+      policy,
+    };
   }
   return {
     vp: ranked[0].vp,

package/yeaft/work-center/failure-diagnostic.js

@@ -0,0 +1,28 @@
+import { sanitizeDiagnosticText } from './debug-projection.js';
+
+const MAX_FAILURE_INSPECTION_LENGTH = 16_000;
+const MAX_MODEL_FAILURE_DIAGNOSTIC_BYTES = 2_000;
+const SAFE_FAILURE_FALLBACK = 'The Action failed. Sensitive details were omitted.';
+const PROVIDER_TOKEN_PATTERN = /\b(?:sk-(?:proj-)?[A-Za-z0-9_-]{12,}|github_pat_[A-Za-z0-9_]{12,}|gh[pousr]_[A-Za-z0-9_]{12,}|xox[baprs]-[A-Za-z0-9-]{12,}|AKIA[A-Z0-9]{12,})\b/i;
+const HIGH_ENTROPY_SECRET_PATTERN = /\b(?=[A-Za-z0-9_./+=-]{32,}\b)(?=[A-Za-z0-9_./+=-]*[A-Za-z])(?=[A-Za-z0-9_./+=-]*\d)[A-Za-z0-9_./+=-]+\b/;
+const LOCAL_PATH_ASSIGNMENT_PATTERN = /\b(?:path|cwd|file|filename|directory)\s*[:=]\s*(?:\/(?!\/)|[A-Za-z]:\\|\\\\)/i;
+const POSIX_ABSOLUTE_PATH_PATTERN = /(?:^|[\s("'`])\/(?!\/)[^\r\n]*/m;
+const WINDOWS_ABSOLUTE_PATH_PATTERN = /(?:^|[\s("'`])(?:[A-Za-z]:\\|\\\\)[^\r\n]*/m;
+
+function containsUnsafeFailureText(value) {
+  return PROVIDER_TOKEN_PATTERN.test(value)
+    || HIGH_ENTROPY_SECRET_PATTERN.test(value)
+    || LOCAL_PATH_ASSIGNMENT_PATTERN.test(value)
+    || POSIX_ABSOLUTE_PATH_PATTERN.test(value)
+    || WINDOWS_ABSOLUTE_PATH_PATTERN.test(value);
+}
+
+/** Project a persisted Run error into bounded, model-safe Action context. */
+export function sanitizeModelFailureDiagnostic(value) {
+  const raw = typeof value === 'string'
+    ? value.trim().slice(0, MAX_FAILURE_INSPECTION_LENGTH)
+    : '';
+  if (!raw) return null;
+  if (containsUnsafeFailureText(raw)) return SAFE_FAILURE_FALLBACK;
+  return sanitizeDiagnosticText(raw, MAX_MODEL_FAILURE_DIAGNOSTIC_BYTES) || null;
+}

package/yeaft/work-center/mainline-projection.js

@@ -8,6 +8,7 @@ import {
 } from './action-identity.js';
 import { sessionMessageQuotePrompt } from '../session-message-quote.js';
 import { normalizeSessionContextSnapshot } from './session-context.js';
+import { sanitizeModelFailureDiagnostic } from './failure-diagnostic.js';
 
 export const MAINLINE_CONTEXT_HARD_LIMIT_BYTES = 64 * 1024;
 export const MAINLINE_CONTEXT_TARGET_MIN_BYTES = 16 * 1024;
@@ -314,6 +315,7 @@ export function buildMainlineProjection(detail) {
       outputs: normalizeOutputs(run.outputs),
       reviewDecision: run.reviewDecision || null,
       waitingReason: run.waitingReason || null,
+      error: sanitizeModelFailureDiagnostic(run.error),
       endedAt: run.endedAt || null,
     };
   }