chati-dev 4.3.1 → 4.4.1

package/src/autonomy/safety-net.js

@@ -1,370 +0,0 @@
-/**
- * @fileoverview Safety net for autonomous execution
- * Auto-pauses pipeline on dangerous conditions
- */
-
-/**
- * Safety conditions that trigger automatic pause.
- */
-export const SAFETY_TRIGGERS = {
-  CONSECUTIVE_FAILURES: 'consecutive_failures', // 3+ failures in a row
-  LOW_SCORE: 'low_score', // Score < 70%
-  CRITICAL_RISK: 'critical_risk', // Security/data risk detected
-  TIMEOUT: 'timeout', // Agent exceeded time limit
-  GOTCHA_SPIKE: 'gotcha_spike', // 5+ new gotchas in current session
-  EDIT_LOOP: 'edit_loop', // Same file edited 3+ times in current task (Article XX)
-};
-
-// Critical risk keywords
-const CRITICAL_RISK_KEYWORDS = [
-  'security',
-  'vulnerability',
-  'exploit',
-  'injection',
-  'authentication',
-  'authorization',
-  'data loss',
-  'data corruption',
-  'production',
-  'database drop',
-  'rm -rf',
-  'delete all',
-  'credential',
-  'password',
-  'secret',
-  'token',
-  'privilege escalation',
-  'RCE',
-  'XSS',
-  'CSRF',
-  'SQL injection',
-  'command injection',
-  'backdoor',
-];
-
-/**
- * Check all safety conditions against current state.
- * @param {object} state
- * @param {number} state.consecutiveFailures - Number of consecutive gate failures
- * @param {number} state.lastScore - Most recent gate score
- * @param {string[]} state.riskFlags - Active risk flags
- * @param {number} state.sessionGotchas - New gotchas this session
- * @param {number} [state.agentDurationMs] - Time current agent has been running
- * @param {number} [state.timeoutMs] - Maximum allowed duration
- * @returns {{ safe: boolean, triggers: object[], recommendation: string }}
- */
-export function checkSafety(state) {
-  const triggers = [];
-
-  // Check each trigger
-  Object.values(SAFETY_TRIGGERS).forEach(trigger => {
-    const result = evaluateTrigger(trigger, state);
-    if (result.triggered) {
-      triggers.push(result);
-    }
-  });
-
-  const safe = triggers.length === 0;
-  const recommendation = safe
-    ? 'All safety checks passed'
-    : getRecommendedAction(triggers).reason;
-
-  return {
-    safe,
-    triggers,
-    recommendation,
-  };
-}
-
-/**
- * Evaluate a single safety condition.
- * @param {string} trigger - SAFETY_TRIGGERS value
- * @param {object} state
- * @returns {{ triggered: boolean, severity: 'warning'|'critical', details: string }}
- */
-export function evaluateTrigger(trigger, state) {
-  switch (trigger) {
-    case SAFETY_TRIGGERS.CONSECUTIVE_FAILURES:
-      return evaluateConsecutiveFailures(state);
-
-    case SAFETY_TRIGGERS.LOW_SCORE:
-      return evaluateLowScore(state);
-
-    case SAFETY_TRIGGERS.CRITICAL_RISK:
-      return evaluateCriticalRisk(state);
-
-    case SAFETY_TRIGGERS.TIMEOUT:
-      return evaluateTimeout(state);
-
-    case SAFETY_TRIGGERS.GOTCHA_SPIKE:
-      return evaluateGotchaSpike(state);
-
-    case SAFETY_TRIGGERS.EDIT_LOOP:
-      return evaluateEditLoop(state);
-
-    default:
-      return {
-        triggered: false,
-        severity: 'warning',
-        details: 'Unknown trigger',
-      };
-  }
-}
-
-/**
- * Get recommended action when safety net triggers.
- * @param {object[]} triggers - Triggered safety conditions
- * @returns {{ action: 'pause'|'warn'|'abort', reason: string, resumable: boolean }}
- */
-export function getRecommendedAction(triggers) {
-  if (triggers.length === 0) {
-    return {
-      action: 'warn',
-      reason: 'No safety triggers detected',
-      resumable: true,
-    };
-  }
-
-  // Check for critical severity
-  const criticalTriggers = triggers.filter(t => t.severity === 'critical');
-
-  if (criticalTriggers.length >= 2) {
-    return {
-      action: 'abort',
-      reason: `Multiple critical safety conditions: ${criticalTriggers.map(t => t.details).join('; ')}`,
-      resumable: false,
-    };
-  }
-
-  if (criticalTriggers.length === 1) {
-    return {
-      action: 'pause',
-      reason: `Critical safety condition: ${criticalTriggers[0].details}`,
-      resumable: true,
-    };
-  }
-
-  // Only warnings
-  return {
-    action: 'warn',
-    reason: `Safety warnings: ${triggers.map(t => t.details).join('; ')}`,
-    resumable: true,
-  };
-}
-
-/**
- * Evaluate consecutive failures trigger.
- * @param {object} state
- * @returns {{ triggered: boolean, severity: string, details: string }}
- */
-function evaluateConsecutiveFailures(state) {
-  const threshold = 3;
-  const failures = state.consecutiveFailures || 0;
-
-  if (failures >= threshold) {
-    return {
-      triggered: true,
-      severity: 'critical',
-      details: `${failures} consecutive gate failures (threshold: ${threshold})`,
-    };
-  }
-
-  return {
-    triggered: false,
-    severity: 'warning',
-    details: 'No consecutive failures',
-  };
-}
-
-/**
- * Evaluate low score trigger.
- * @param {object} state
- * @returns {{ triggered: boolean, severity: string, details: string }}
- */
-function evaluateLowScore(state) {
-  const threshold = 70;
-  const score = state.lastScore;
-
-  if (typeof score !== 'number') {
-    return {
-      triggered: false,
-      severity: 'warning',
-      details: 'No score available',
-    };
-  }
-
-  if (score < threshold) {
-    return {
-      triggered: true,
-      severity: 'warning',
-      details: `Low quality score: ${score}% (threshold: ${threshold}%)`,
-    };
-  }
-
-  return {
-    triggered: false,
-    severity: 'warning',
-    details: 'Score within acceptable range',
-  };
-}
-
-/**
- * Evaluate critical risk trigger.
- * @param {object} state
- * @returns {{ triggered: boolean, severity: string, details: string }}
- */
-function evaluateCriticalRisk(state) {
-  const riskFlags = state.riskFlags || [];
-
-  // Check for critical risk keywords
-  const criticalFlags = riskFlags.filter(flag =>
-    CRITICAL_RISK_KEYWORDS.some(keyword =>
-      flag.toLowerCase().includes(keyword.toLowerCase())
-    )
-  );
-
-  if (criticalFlags.length > 0) {
-    return {
-      triggered: true,
-      severity: 'critical',
-      details: `Critical risks detected: ${criticalFlags.join(', ')}`,
-    };
-  }
-
-  return {
-    triggered: false,
-    severity: 'warning',
-    details: 'No critical risks detected',
-  };
-}
-
-/**
- * Evaluate timeout trigger.
- * @param {object} state
- * @returns {{ triggered: boolean, severity: string, details: string }}
- */
-function evaluateTimeout(state) {
-  const { agentDurationMs, timeoutMs } = state;
-
-  if (typeof agentDurationMs !== 'number' || typeof timeoutMs !== 'number') {
-    return {
-      triggered: false,
-      severity: 'warning',
-      details: 'No timeout configured',
-    };
-  }
-
-  if (agentDurationMs >= timeoutMs) {
-    const minutes = Math.round(agentDurationMs / 60000);
-    const maxMinutes = Math.round(timeoutMs / 60000);
-    return {
-      triggered: true,
-      severity: 'critical',
-      details: `Agent timeout: ${minutes}min (max: ${maxMinutes}min)`,
-    };
-  }
-
-  return {
-    triggered: false,
-    severity: 'warning',
-    details: 'Agent within time limits',
-  };
-}
-
-/**
- * Evaluate gotcha spike trigger.
- * @param {object} state
- * @returns {{ triggered: boolean, severity: string, details: string }}
- */
-function evaluateGotchaSpike(state) {
-  const threshold = 5;
-  const gotchas = state.sessionGotchas || 0;
-
-  if (gotchas >= threshold) {
-    return {
-      triggered: true,
-      severity: 'warning',
-      details: `High gotcha count: ${gotchas} (threshold: ${threshold})`,
-    };
-  }
-
-  return {
-    triggered: false,
-    severity: 'warning',
-    details: 'Gotcha count within limits',
-  };
-}
-
-/**
- * Article XX — Detect edit loops (same file edited 3+ times in current task).
- * state.fileEdits should be an object: { 'path/to/file.tsx': 3, ... }
- */
-function evaluateEditLoop(state) {
-  const threshold = 3;
-  const fileEdits = state.fileEdits || {};
-  const loopedFiles = Object.entries(fileEdits)
-    .filter(([, count]) => count >= threshold);
-
-  if (loopedFiles.length > 0) {
-    const details = loopedFiles
-      .map(([path, count]) => `${path} (${count} edits)`)
-      .join(', ');
-    return {
-      triggered: true,
-      severity: 'critical',
-      details: `Edit loop detected (Article XX): ${details}. Stop and diagnose root cause before continuing.`,
-    };
-  }
-
-  return {
-    triggered: false,
-    severity: 'warning',
-    details: 'No edit loops detected',
-  };
-}
-
-/**
- * Get critical risk keywords list.
- * @returns {string[]}
- */
-export function getCriticalRiskKeywords() {
-  return [...CRITICAL_RISK_KEYWORDS];
-}
-
-/**
- * Check if a risk flag contains critical keywords.
- * @param {string} flag
- * @returns {boolean}
- */
-export function isCriticalRisk(flag) {
-  return CRITICAL_RISK_KEYWORDS.some(keyword =>
-    flag.toLowerCase().includes(keyword.toLowerCase())
-  );
-}
-
-/**
- * Build safety report for user.
- * @param {object} state
- * @returns {{ status: string, message: string, triggers: object[] }}
- */
-export function buildSafetyReport(state) {
-  const result = checkSafety(state);
-
-  let status;
-  let message;
-
-  if (result.safe) {
-    status = 'safe';
-    message = 'All safety checks passed. Pipeline can continue.';
-  } else {
-    const action = getRecommendedAction(result.triggers);
-    status = (action.action === 'pause' || action.action === 'abort') ? 'unsafe' : 'warning';
-    message = action.reason;
-  }
-
-  return {
-    status,
-    message,
-    triggers: result.triggers,
-  };
-}

package/src/config/agent-customizer.js

@@ -1,231 +0,0 @@
-/**
- * @fileoverview Agent customization via per-project override files.
- *
- * Loads `.customize.yaml` files from `chati.dev/customize/<agent>.yaml`
- * and applies overrides to agent prompts.
- *
- * Constitution Article XVI — Model Governance.
- */
-
-import { existsSync, readFileSync } from 'fs';
-import { join } from 'path';
-import yaml from 'js-yaml';
-import { resolveFrameworkDir } from '../utils/framework-dir.js';
-
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-
-/**
- * Get the customize directory for a given project.
- * Supports both .chati.dev/ and chati.dev/ structures.
- * @param {string} projectDir
- * @returns {string} Relative path from project root
- */
-function getCustomizeDir(projectDir) {
-  return `${resolveFrameworkDir(projectDir)}/customize`;
-}
-
-/** Valid override fields that customizations can set. */
-export const VALID_OVERRIDE_FIELDS = [
-  'model',
-  'extra_context',
-  'skip_sections',
-  'add_sections',
-  'provider',
-  'timeout',
-  'max_iterations',
-];
-
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
-
-/**
- * @typedef {object} Customization
- * @property {boolean} found - Whether a customization file was found
- * @property {string} [model] - Override model name
- * @property {string} [extra_context] - Additional context to inject
- * @property {string[]} [skip_sections] - Sections to omit from prompt
- * @property {{ name: string, content: string }[]} [add_sections] - Sections to append
- * @property {string} [provider] - Override provider name
- * @property {number} [timeout] - Override timeout in ms
- * @property {number} [max_iterations] - Override max iterations
- */
-
-/**
- * Load customization for a specific agent.
- *
- * @param {string} projectDir - Project root directory
- * @param {string} agentName - Agent name (e.g., 'brief', 'dev')
- * @returns {{ found: boolean, overrides: Customization }}
- */
-export function loadCustomization(projectDir, agentName) {
-  if (!projectDir || !agentName) {
-    return { found: false, overrides: {} };
-  }
-
-  const customizePath = join(projectDir, getCustomizeDir(projectDir), `${agentName}.yaml`);
-
-  if (!existsSync(customizePath)) {
-    return { found: false, overrides: {} };
-  }
-
-  try {
-    const raw = readFileSync(customizePath, 'utf-8');
-    const parsed = yaml.load(raw);
-
-    if (!parsed || typeof parsed !== 'object') {
-      return { found: true, overrides: {} };
-    }
-
-    // Filter to valid override fields only
-    const overrides = {};
-    for (const field of VALID_OVERRIDE_FIELDS) {
-      if (parsed[field] !== undefined) {
-        overrides[field] = parsed[field];
-      }
-    }
-
-    return { found: true, overrides };
-  } catch { /* expected: content may be malformed */
-    return { found: false, overrides: {} };
-  }
-}
-
-/**
- * Apply customization overrides to an agent prompt.
- *
- * @param {string} agentPrompt - Original agent prompt
- * @param {Customization} customization - Customization overrides
- * @returns {string} Modified prompt
- */
-export function applyCustomization(agentPrompt, customization) {
-  if (!agentPrompt || !customization) {
-    return agentPrompt || '';
-  }
-
-  let prompt = agentPrompt;
-
-  // Skip sections
-  if (customization.skip_sections && Array.isArray(customization.skip_sections)) {
-    for (const sectionName of customization.skip_sections) {
-      // Match section heading + all content until the next heading of same or higher level, or end of text
-      // Two-pass approach: try lookahead for next heading, then fallback to end
-      const headingPattern = new RegExp(
-        `^(#{1,3})\\s+${escapeRegex(sectionName)}[^\\n]*\\n([\\s\\S]*?)(?=^#{1,3}\\s)`,
-        'gm'
-      );
-      let replaced = prompt.replace(headingPattern, '');
-      if (replaced === prompt) {
-        // Section is at the end — no next heading follows
-        const endPattern = new RegExp(
-          `^(#{1,3})\\s+${escapeRegex(sectionName)}[^\\n]*\\n[\\s\\S]*$`,
-          'gm'
-        );
-        replaced = prompt.replace(endPattern, '');
-      }
-      prompt = replaced;
-    }
-  }
-
-  // Add extra context at the end
-  if (customization.extra_context && typeof customization.extra_context === 'string') {
-    prompt += `\n\n---\n\n## Additional Context\n\n${customization.extra_context}\n`;
-  }
-
-  // Add new sections
-  if (customization.add_sections && Array.isArray(customization.add_sections)) {
-    for (const section of customization.add_sections) {
-      if (section.name && section.content) {
-        prompt += `\n\n## ${section.name}\n\n${section.content}\n`;
-      }
-    }
-  }
-
-  return prompt;
-}
-
-/**
- * Validate a customization object.
- *
- * @param {object} customization
- * @returns {{ valid: boolean, errors: string[] }}
- */
-export function validateCustomization(customization) {
-  const errors = [];
-
-  if (!customization || typeof customization !== 'object') {
-    errors.push('Customization must be a non-null object');
-    return { valid: false, errors };
-  }
-
-  // Check for unknown fields
-  for (const key of Object.keys(customization)) {
-    if (!VALID_OVERRIDE_FIELDS.includes(key)) {
-      errors.push(`Unknown override field: "${key}"`);
-    }
-  }
-
-  // Validate model
-  if (customization.model !== undefined && typeof customization.model !== 'string') {
-    errors.push('model must be a string');
-  }
-
-  // Validate extra_context
-  if (customization.extra_context !== undefined && typeof customization.extra_context !== 'string') {
-    errors.push('extra_context must be a string');
-  }
-
-  // Validate skip_sections
-  if (customization.skip_sections !== undefined) {
-    if (!Array.isArray(customization.skip_sections)) {
-      errors.push('skip_sections must be an array');
-    } else if (customization.skip_sections.some(s => typeof s !== 'string')) {
-      errors.push('skip_sections must contain only strings');
-    }
-  }
-
-  // Validate add_sections
-  if (customization.add_sections !== undefined) {
-    if (!Array.isArray(customization.add_sections)) {
-      errors.push('add_sections must be an array');
-    } else {
-      for (const section of customization.add_sections) {
-        if (!section.name || !section.content) {
-          errors.push('Each add_section must have name and content');
-        }
-      }
-    }
-  }
-
-  // Validate timeout
-  if (customization.timeout !== undefined) {
-    if (typeof customization.timeout !== 'number' || customization.timeout <= 0) {
-      errors.push('timeout must be a positive number');
-    }
-  }
-
-  // Validate max_iterations
-  if (customization.max_iterations !== undefined) {
-    if (typeof customization.max_iterations !== 'number' || customization.max_iterations <= 0) {
-      errors.push('max_iterations must be a positive number');
-    }
-  }
-
-  return { valid: errors.length === 0, errors };
-}
-
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-
-/**
- * Escape special regex characters in a string.
- *
- * @param {string} str
- * @returns {string}
- */
-function escapeRegex(str) {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}