chati-dev 4.0.1 → 4.0.2

package/src/orchestrator/pipeline-manager.js

@@ -15,6 +15,37 @@ import { getCurrentVersion } from '../upgrade/checker.js';
  */
 export const PIPELINE_PHASES = ['discover', 'plan', 'build', 'deploy'];
 
+/**
+ * Emit telemetry events for pipeline completion and flush to backend.
+ *
+ * @param {object} state - Pipeline state
+ */
+function emitPipelineComplete(state) {
+  const pipelineType = state.isQuickFlow ? 'quick-flow' : state.isStandardFlow ? 'standard' : 'full';
+  const totalDuration = Date.now() - new Date(state.startedAt).getTime();
+  telemetryTrack('pipeline_completed', {
+    pipelineType,
+    totalDuration,
+    agentsRun: state.completedAgents.length,
+    finalStatus: 'completed',
+    deviationCount: (state.modeTransitions || []).length,
+  });
+  telemetryTrack('session_completed', {
+    sessionId: state.sessionId || 'unknown',
+    pipelineType,
+    mode: state.phase === 'deploy' ? 'deploy' : 'build',
+    finalStage: state.phase,
+    duration: totalDuration,
+    agentCount: state.completedAgents.length,
+    success: true,
+  });
+  const flushedEvents = telemetryFlush();
+  if (flushedEvents.length > 0) {
+    const tConfig = getTelemetryConfig(state.targetDir || process.cwd());
+    sendEvents(flushedEvents, { ...tConfig, version: state.chatiVersion || 'unknown' });
+  }
+}
+
 /**
  * Agent status values.
  */
@@ -294,29 +325,7 @@ export function advancePipeline(pipelineState, completedAgent, results = {}) {
 
       // Pipeline complete
       newState.completedAt = new Date().toISOString();
-      const pipelineType1 = newState.isQuickFlow ? 'quick-flow' : newState.isStandardFlow ? 'standard' : 'full';
-      const totalDuration1 = Date.now() - new Date(newState.startedAt).getTime();
-      telemetryTrack('pipeline_completed', {
-        pipelineType: pipelineType1,
-        totalDuration: totalDuration1,
-        agentsRun: newState.completedAgents.length,
-        finalStatus: 'completed',
-        deviationCount: (newState.modeTransitions || []).length,
-      });
-      telemetryTrack('session_completed', {
-        sessionId: newState.sessionId || 'unknown',
-        pipelineType: pipelineType1,
-        mode: newState.phase === 'deploy' ? 'deploy' : 'build',
-        finalStage: newState.phase,
-        duration: totalDuration1,
-        agentCount: newState.completedAgents.length,
-        success: true,
-      });
-      const flushedEvents = telemetryFlush();
-      if (flushedEvents.length > 0) {
-        const tConfig = getTelemetryConfig(newState.targetDir || process.cwd());
-        sendEvents(flushedEvents, { ...tConfig, version: newState.chatiVersion || 'unknown' });
-      }
+      emitPipelineComplete(newState);
       return {
         state: newState,
         nextAction: 'complete',
@@ -366,29 +375,7 @@ export function advancePipeline(pipelineState, completedAgent, results = {}) {
 
     // Pipeline complete
     newState.completedAt = new Date().toISOString();
-    const pipelineType2 = newState.isQuickFlow ? 'quick-flow' : newState.isStandardFlow ? 'standard' : 'full';
-    const totalDuration2 = Date.now() - new Date(newState.startedAt).getTime();
-    telemetryTrack('pipeline_completed', {
-      pipelineType: pipelineType2,
-      totalDuration: totalDuration2,
-      agentsRun: newState.completedAgents.length,
-      finalStatus: 'completed',
-      deviationCount: (newState.modeTransitions || []).length,
-    });
-    telemetryTrack('session_completed', {
-      sessionId: newState.sessionId || 'unknown',
-      pipelineType: pipelineType2,
-      mode: newState.phase === 'deploy' ? 'deploy' : 'build',
-      finalStage: newState.phase,
-      duration: totalDuration2,
-      agentCount: newState.completedAgents.length,
-      success: true,
-    });
-    const flushedEvents2 = telemetryFlush();
-    if (flushedEvents2.length > 0) {
-      const tConfig2 = getTelemetryConfig(newState.targetDir || process.cwd());
-      sendEvents(flushedEvents2, { ...tConfig2, version: newState.chatiVersion || 'unknown' });
-    }
+    emitPipelineComplete(newState);
     return {
       state: newState,
       nextAction: 'complete',

package/src/quality/metrics-collector.js

@@ -199,14 +199,12 @@ export function calculateTrend(metrics) {
   let sumY = 0;
   let sumXY = 0;
   let sumX2 = 0;
-  let sumY2 = 0;
 
   for (let i = 0; i < n; i++) {
     sumX += i;
     sumY += values[i];
     sumXY += i * values[i];
     sumX2 += i * i;
-    sumY2 += values[i] * values[i];
   }
 
   const slope = (n * sumXY - sumX * sumY) / (n * sumX2 - sumX * sumX);

package/src/telemetry/config.js

@@ -26,8 +26,8 @@ export function getTelemetryConfig(targetDir) {
   const defaults = {
     enabled: true,
     anonymousId: null,
-    endpoint: 'https://chati-telemetry.vercel.app/api/events',
-    apiKey: '10b0b54ba4f392fa46379ba778062ab0af5ca61e79609a7dce4aadd660104b56',
+    endpoint: process.env.CHATI_TELEMETRY_ENDPOINT || 'https://chati-telemetry.vercel.app/api/events',
+    apiKey: process.env.CHATI_TELEMETRY_KEY || '10b0b54ba4f392fa46379ba778062ab0af5ca61e79609a7dce4aadd660104b56',
   };
 
   if (!existsSync(configPath)) return defaults;

package/src/telemetry/schema.js

@@ -25,7 +25,7 @@ export const TELEMETRY_EVENTS = [
 // Property Schemas (allowed fields per event type)
 // ---------------------------------------------------------------------------
 
-const EVENT_PROPERTIES = {
+export const EVENT_PROPERTIES = {
   installation_completed: [
     'providers', 'editors', 'projectType', 'language',
     'primaryProvider', 'installDuration',

package/src/terminal/isolation.js

@@ -1,3 +1,5 @@
+import { posix } from 'path';
+
 /**
  * @fileoverview Write scope isolation for multi-terminal execution.
  *
@@ -96,7 +98,14 @@ export function isPathAllowed(agent, filePath) {
     return false;
   }
 
-  const normalised = filePath.replace(/\\/g, '/');
+  // Normalize backslashes and resolve traversal sequences (../)
+  const normalised = posix.normalize(filePath.replace(/\\/g, '/'));
+
+  // Reject paths that escape the project root
+  if (normalised.startsWith('../') || normalised.startsWith('/')) {
+    return false;
+  }
+
   return scope.some(prefix => normalised === prefix || normalised.startsWith(prefix));
 }
 

package/src/terminal/prompt-builder.js

@@ -17,6 +17,7 @@ import { resolveOverlayPath } from '../installer/provider-overlay.js';
 import { resolveProviderForAgent } from './cli-registry.js';
 import { buildCompactGotchasSummary } from '../memory/gotchas-injector.js';
 import { estimateTokens } from './cost-tracker.js';
+import { PROVIDER_LIMITS as PROVIDER_TOKEN_LIMITS } from '../utils/provider-limits.js';
 
 // Import AGENT_MODELS from model-governance (safe — named export,
 // does not trigger main() which is guarded by fileURLToPath check).
@@ -186,12 +187,15 @@ export function buildAgentPrompt(config) {
   // 8. Session context (uses resolved model/provider)
   sections.push(buildSessionSection(config, { model, provider: resolvedProvider }));
 
-  // 9. Output format instructions (handoff template — includes provider/model for audit)
+  // 9. Anti-laziness reinforcement (proven remediation techniques)
+  sections.push(buildAntiLazinessSection(config.agent));
+
+  // 10. Output format instructions (handoff template — includes provider/model for audit)
   sections.push(buildOutputInstructions({ provider: resolvedProvider, model }));
 
   const prompt = sections.join('\n\n---\n\n');
 
-  // 10. Prompt size guard — validate before returning
+  // 11. Prompt size guard — validate before returning
   const sizeCheck = validatePromptSize(prompt, resolvedProvider);
 
   return {
@@ -362,17 +366,81 @@ function buildSessionSection(config, resolvedModelInfo = {}) {
 }
 
 // ---------------------------------------------------------------------------
-// Prompt Size Guard
+// Anti-Laziness Reinforcement
 // ---------------------------------------------------------------------------
 
 /**
- * Provider-specific token limits for prompt size validation.
+ * Agents whose output is code or artifacts benefit most from anti-laziness.
+ * Planning/discovery agents get a lighter version.
  */
-const PROVIDER_TOKEN_LIMITS = {
-  claude: 200_000,
-  gemini: 1_000_000,
-  codex: 128_000,
-};
+const CODE_PRODUCING_AGENTS = new Set(['dev', 'architect', 'ux', 'devops']);
+
+/**
+ * Build anti-laziness reinforcement section.
+ *
+ * Injects proven remediation techniques into every spawned agent prompt.
+ * Techniques sourced from empirical research (Microsoft Research, LazyBench):
+ * - Stakes framing (+10% performance)
+ * - Step-by-step structure (+34% -> 80% accuracy)
+ * - Completeness enforcement (+45% output quality)
+ *
+ * @param {string} agent - Agent name
+ * @returns {string} Formatted anti-laziness section
+ */
+export function buildAntiLazinessSection(agent) {
+  const isCodeAgent = CODE_PRODUCING_AGENTS.has(agent);
+
+  const lines = [
+    '<!-- ANTI-LAZINESS REINFORCEMENT -->',
+    '## Output Quality Requirements',
+    '',
+    'This is production-critical work for a real project. Every artifact you produce will be consumed by downstream agents and must be complete and accurate.',
+    '',
+    '### Completeness Rules',
+    '1. Before starting, count all deliverables. Lock that count.',
+    '2. Produce EVERY deliverable completely. No shortcuts, no placeholders.',
+    '3. After finishing, cross-check: output count MUST match initial scope.',
+    '',
+  ];
+
+  if (isCodeAgent) {
+    lines.push(
+      '### Code Output Rules',
+      '- NEVER use placeholder comments: `// ...`, `// rest of code`, `// TODO`, `// implement here`',
+      '- NEVER output skeleton/stub code when full implementation is expected',
+      '- NEVER describe what code should do instead of writing it',
+      '- NEVER compress or skip sections when approaching output limits',
+      '',
+    );
+  }
+
+  if (agent === 'ux') {
+    lines.push(
+      '### Design Anti-Bias Rules',
+      '- NEVER default to centered single-column layouts — vary layout structure across sections',
+      '- NEVER use oversaturated primary colors (HSL saturation > 80%) without brand justification',
+      '- NEVER use only one sans-serif font (Inter, Roboto) — evaluate serif and display alternatives',
+      '- NEVER show only happy-path states — every component needs empty, loading, error, and disabled states',
+      '- NEVER use lorem ipsum, "John Doe", or generic placeholder content',
+      '- NEVER animate width/height/top/left — use transform and opacity only',
+      '',
+    );
+  }
+
+  lines.push(
+    '### When Approaching Output Limits',
+    '- Do NOT compress remaining sections',
+    '- Do NOT skip to conclusion',
+    '- Write at full quality to a clean breakpoint',
+    '- Signal clearly: `[PAUSED at deliverable X of Y. Continuing in next iteration.]`',
+  );
+
+  return lines.join('\n');
+}
+
+// ---------------------------------------------------------------------------
+// Prompt Size Guard
+// ---------------------------------------------------------------------------
 
 /**
  * Validate prompt size against provider-specific limits.

package/src/utils/brackets.js

@@ -0,0 +1,29 @@
+/**
+ * @fileoverview Canonical bracket definitions for context window management.
+ *
+ * Single source of truth for bracket thresholds, layer configurations,
+ * and budget ratios. Consumers import from here to avoid duplication.
+ *
+ * Progressive Reinforcement Model (v4.0):
+ *   As context depletes, budget INCREASES (model needs MORE reinforcement).
+ *   Budget expressed as ratio of provider's total context window.
+ */
+
+/**
+ * Bracket definitions as an object (keyed by name).
+ * @type {Record<string, {min: number, max: number, layers: string[], budgetRatio: number}>}
+ */
+export const BRACKETS = {
+  FRESH:    { min: 60, max: 100, layers: ['L0', 'L1', 'L2', 'L3', 'L4', 'L5'], budgetRatio: 0.015 },
+  MODERATE: { min: 40, max: 60,  layers: ['L0', 'L1', 'L2', 'L3', 'L5'],       budgetRatio: 0.025 },
+  DEPLETED: { min: 25, max: 40,  layers: ['L0', 'L1', 'L2'],                   budgetRatio: 0.040 },
+  CRITICAL: { min: 0,  max: 25,  layers: ['L0', 'L1'],                         budgetRatio: 0.050 },
+};
+
+/**
+ * Bracket definitions as an ordered array (for iteration/lookup by range).
+ * @type {Array<{name: string, min: number, max: number, layers: string[], budgetRatio: number}>}
+ */
+export const BRACKETS_LIST = Object.entries(BRACKETS).map(
+  ([name, data]) => ({ name, ...data }),
+);

package/src/utils/event-bus.js

@@ -7,7 +7,7 @@
 
 /**
  * @deprecated Not currently imported by any production module.
- * Retained for potential future integration. Remove if still unused by v4.0.
+ * Retained for potential future integration. Review for removal or integration by v5.0.
  */
 
 import { EventEmitter } from 'node:events';

package/src/utils/provider-limits.js

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Canonical provider context window limits.
+ *
+ * Single source of truth for provider token limits used by
+ * bracket-tracker, context-status, and prompt-builder.
+ */
+
+/** Provider context window limits (tokens). */
+export const PROVIDER_LIMITS = {
+  claude: 200_000,
+  gemini: 1_000_000,
+  codex: 128_000,
+};