chati-dev 4.5.12 → 4.5.14

package/src/config/framework-adapter.js

@@ -1,23 +1,11 @@
 /**
- * @fileoverview Framework file adapter for multi-CLI support.
+ * @fileoverview Native harness overlays over a provider-neutral framework.
  *
- * Transforms Claude Code-specific framework files (orchestrator, agents,
- * constitution, context) into provider-native versions at install time.
- * Each LLM reads instructions written for it — zero runtime translation.
- *
- * Constitution Article XIX — framework files are pre-adapted per provider.
+ * Shared framework documents contain only Chati invariants and routing
+ * contracts. Provider overlays add mechanics that genuinely belong to a
+ * harness. They never translate another provider's instructions.
  */
 
-import { PROVIDER_MODEL_MAPS } from '../installer/templates.js';
-
-// ---------------------------------------------------------------------------
-// Adaptable Files
-// ---------------------------------------------------------------------------
-
-/**
- * Set of framework file paths (relative to chati.dev/) that need
- * provider-specific adaptation when the selected provider is not Claude.
- */
 export const ADAPTABLE_FILES = new Set([
   'constitution.md',
   'orchestrator/chati.md',
@@ -36,193 +24,73 @@ export const ADAPTABLE_FILES = new Set([
   'agents/deploy/devops.md',
   'context/governance.md',
   'context/root.md',
+  'domains/agents/orchestrator.yaml',
+  'tasks/orchestrator-escalate.md',
+  'tasks/orchestrator-route.md',
+  'tasks/orchestrator-status.md',
+  'tasks/qa-planning-risk-matrix.md',
+  'tasks/qa-planning-test-strategy.md',
 ]);
 
-// ---------------------------------------------------------------------------
-// Provider Metadata
-// ---------------------------------------------------------------------------
-
-const PROVIDER_META = {
-  claude: {
-    cliName: 'Claude Code',
-    contextFile: 'CLAUDE.md',
-    localFile: 'CLAUDE.local.md',
-  },
-  gemini: {
-    cliName: 'Gemini CLI',
-    contextFile: 'GEMINI.md',
-    localFile: '.gemini/session-lock.md',
-  },
-  codex: {
-    cliName: 'Codex CLI',
-    contextFile: 'AGENTS.md',
-    localFile: 'AGENTS.override.md',
-  },
-  grok: {
-    cliName: 'Grok CLI',
-    contextFile: 'AGENTS.md',
-    localFile: '.grok/session-lock.md',
-  },
-};
-
-// ---------------------------------------------------------------------------
-// Replacement Configuration Builder
-// ---------------------------------------------------------------------------
-
-/**
- * Build the complete replacement config for a given provider.
- * Returns { strings, patterns } where:
- * - strings: ordered [search, replace] pairs for replaceAll
- * - patterns: { pattern, replacement } objects for regex replace
- *
- * Ordering: most-specific strings first to prevent partial matches.
- */
-function buildReplacementConfig(provider) {
-  const meta = PROVIDER_META[provider];
-  const modelMap = PROVIDER_MODEL_MAPS[provider];
-
-  if (!meta || !modelMap) {
-    throw new Error(`Unknown provider: ${provider}`);
-  }
-
-  const { cliName, contextFile, localFile } = meta;
-  const { deep, light, minimal } = modelMap;
-
-  // --- String replacements (ordered, most specific first) ---
-  const strings = [
-    // File references (most specific first)
-    ['CLAUDE.local.md', localFile],
-    ['CLAUDE.md', contextFile],
-    ['.claude/rules/chati/', 'chati.dev/context/'],
-
-    // Provider name (most specific first)
-    ['Claude Code processes', `${cliName} processes`],
-    ['Claude Code CLI', cliName],
-    ['Claude Code', cliName],
-
-    // Behavioral
-    ['NEVER act as generic Claude', 'NEVER act as generic AI assistant'],
-
-    // /model commands (specific model names)
-    ['/model opus', `/model ${deep}`],
-    ['/model sonnet', `/model ${light}`],
-    ['/model haiku', `/model ${minimal}`],
-  ];
-
-  // --- Regex patterns for model names in structured contexts ---
-  const patterns = [
-    // Identity section: **Model**: opus | ...
-    { pattern: /(\*\*Model\*\*:\s*)opus/g, replacement: `$1${deep}` },
-    { pattern: /(\*\*Model\*\*:\s*)sonnet/g, replacement: `$1${light}` },
-    { pattern: /(\*\*Model\*\*:\s*)haiku/g, replacement: `$1${minimal}` },
-
-    // YAML-like blocks: default: sonnet, upgrade_to: opus, etc.
-    { pattern: /(default:\s*)opus/g, replacement: `$1${deep}` },
-    { pattern: /(default:\s*)sonnet/g, replacement: `$1${light}` },
-    { pattern: /(default:\s*)haiku/g, replacement: `$1${minimal}` },
-    { pattern: /(upgrade_to:\s*)opus/g, replacement: `$1${deep}` },
-    { pattern: /(upgrade_to:\s*)sonnet/g, replacement: `$1${light}` },
-    { pattern: /(downgrade_to:\s*)haiku/g, replacement: `$1${minimal}` },
-    { pattern: /(downgrade_to:\s*)sonnet/g, replacement: `$1${light}` },
-    { pattern: /(recommended:\s*)opus/g, replacement: `$1${deep}` },
-    { pattern: /(recommended:\s*)sonnet/g, replacement: `$1${light}` },
-    { pattern: /(actual:\s*)opus/g, replacement: `$1${deep}` },
-    { pattern: /(actual:\s*)sonnet/g, replacement: `$1${light}` },
-    { pattern: /(model:\s*)opus/g, replacement: `$1${deep}` },
-    { pattern: /(model:\s*)sonnet/g, replacement: `$1${light}` },
-
-    // Table cells: | opus | or | sonnet | or | haiku |
-    { pattern: /(\|\s*)opus(\s*\|)/g, replacement: `$1${deep}$2` },
-    { pattern: /(\|\s*)sonnet(\s*\|)/g, replacement: `$1${light}$2` },
-    { pattern: /(\|\s*)haiku(\s*\|)/g, replacement: `$1${minimal}$2` },
-
-    // Upgrade/downgrade conditions in prose: "sonnet if ...", "opus if ..."
-    // Negative lookbehind prevents double-prefix when deep model contains a tier name (e.g. claude-sonnet)
-    { pattern: /(?<!-)opus if /g, replacement: `${deep} if ` },
-    { pattern: /(?<!-)sonnet if /g, replacement: `${light} if ` },
-    { pattern: /(?<!-)haiku if /g, replacement: `${minimal} if ` },
-
-    // Constitution/governance model tier definitions
-    { pattern: /\*\*opus\*\*:/g, replacement: `**${deep}**:` },
-    { pattern: /\*\*sonnet\*\*:/g, replacement: `**${light}**:` },
-    { pattern: /\*\*haiku\*\*:/g, replacement: `**${minimal}**:` },
-    { pattern: /opus \(deep reasoning\)/g, replacement: `${deep} (deep reasoning)` },
-    { pattern: /sonnet \(structured\)/g, replacement: `${light} (structured)` },
-    { pattern: /haiku \(lightweight\)/g, replacement: `${minimal} (lightweight)` },
-
-    // Provider field in agent Identity: claude (default) with optional conditional
-    { pattern: /- \*\*Provider\*\*: claude \(default\)(?:\s*\|[^\n]*)?/g,
-      replacement: `- **Provider**: ${provider} (default)` },
-
-    // Provider in table rows: | claude (default) | or | claude (default) | gemini (...) |
-    { pattern: /(\|\s*)claude \(default\)(?:\s*\|[^|\n]*)?\s*(\|)/g,
-      replacement: `$1${provider} (default) $2` },
-
-    // "claude" as primary provider in prose
-    { pattern: /primary provider \(claude\)/g, replacement: `primary provider (${provider})` },
-    { pattern: /fallback_provider: claude/g, replacement: `fallback_provider: ${provider}` },
-    { pattern: /fall back to the primary provider \(claude\)/g,
-      replacement: `fall back to the primary provider (${provider})` },
-    { pattern: /primary provider: claude/g, replacement: `primary provider: ${provider}` },
-
-    // /chati providers display: swap PRIMARY designation
-    // Note: "Claude Code CLI" may already be replaced by string replacements, so match any trailing text
-    { pattern: /claude\s+PRIMARY\s+Enabled\s+.+/g,
-      replacement: `${provider}    PRIMARY   Enabled   ${cliName}` },
-
-    // CLAUDE.md Update sections in agents
-    { pattern: /### CLAUDE\.md Update/g, replacement: `### ${contextFile} Update` },
-    { pattern: /### CLAUDE\.md Final Update/g, replacement: `### ${contextFile} Final Update` },
-    { pattern: /Update CLAUDE\.md/g, replacement: `Update ${contextFile}` },
-  ];
-
-  // Codex CLI uses $chati for skill invocation, not /chati.
-  // Lookbehind prevents replacing /chati in file paths (e.g., orchestrator/chati.md).
-  if (provider === 'codex') {
-    patterns.push({
-      pattern: /(?<![/\w])\/chati/g,
-      replacement: '$$chati',
-    });
-  }
-
-  return { strings, patterns };
+export const HARNESS_PROFILES = Object.freeze({
+  claude: Object.freeze({ contextFile: 'CLAUDE.md', sessionLockFile: 'CLAUDE.local.md', invocation: '/chati' }),
+  gemini: Object.freeze({ contextFile: 'GEMINI.md', sessionLockFile: '.gemini/session-lock.md', invocation: '/chati' }),
+  codex: Object.freeze({ contextFile: 'AGENTS.md', sessionLockFile: 'AGENTS.override.md', invocation: '$chati' }),
+  grok: Object.freeze({ contextFile: 'AGENTS.md', sessionLockFile: '.grok/session-lock.md', invocation: '/chati' }),
+});
+
+export function stripLegacyBuildSurface(content) {
+  return content.replace(
+    /<!-- CHATI_LEGACY_BUILD_START -->[\s\S]*?<!-- CHATI_LEGACY_BUILD_END -->\s*/g,
+    'For installations without `.chati/v2/installation.json`, use the separately bundled legacy compatibility runtime.\n\n',
+  );
 }
 
-// ---------------------------------------------------------------------------
-// Main Adapter Function
-// ---------------------------------------------------------------------------
+const CODEX_CREDENTIAL_BOUNDARY = `
+## Codex external provider credential boundary
+
+Commands returned in any \`spawn_command\`, \`parallel_spawn_command\` or
+\`parallel_spawn_commands\` start another provider CLI. Codex MUST execute each
+command through its native local execution path so the child CLI can access its
+existing local credentials:
+
+- If the active Codex host requires approval to leave a restricted workspace
+  sandbox, request the narrow native approval it exposes for the exact command.
+- Do not invent approval fields or tool parameters that this Codex host does not
+  expose.
+- Explain that Chati needs the selected provider CLI to use its existing local
+  authentication.
+- Keep the project working directory and router-provided command unchanged.
+
+Never test a routed provider command inside the workspace sandbox first. A
+\`PROVIDER_NOT_READY\` or \`PROVIDER_NOT_AUTHENTICATED\` result obtained there is
+inconclusive because the sandbox can hide OS credentials. If a sandboxed attempt
+already failed, rerun it once through Codex's native approved local execution
+path. Only a failure from that attempt may be reported as an authentication
+failure.
+Do not repeat the same sandboxed command and do not offer to skip a required
+v2 pipeline stage.
+`;
+
+function renderNativeInvocation(content, invocation) {
+  if (invocation === '/chati') return content;
+  return content.replace(/(?<![./\w])\/chati(?![-/\w])/g, invocation);
+}
 
-/**
- * Adapt a single framework file for the target provider.
- *
- * @param {string} content - Original file content (Claude Code version)
- * @param {string} filePath - Relative path within chati.dev/ (e.g. 'orchestrator/chati.md')
- * @param {string} provider - Target provider: 'gemini', 'codex'
- * @returns {string} Adapted content for the target provider
- */
 export function adaptFrameworkFile(content, filePath, provider) {
   if (!content) return content;
+  if (!HARNESS_PROFILES[provider]) throw new Error(`Unknown provider: ${provider}`);
 
-  let result = content;
+  let result = renderNativeInvocation(content, HARNESS_PROFILES[provider].invocation);
   if (filePath === 'orchestrator/chati.md') {
-    result = result.replace(
-      /<!-- CHATI_LEGACY_BUILD_START -->[\s\S]*?<!-- CHATI_LEGACY_BUILD_END -->\s*/g,
-      'For installations without `.chati/v2/installation.json`, use the separately bundled legacy compatibility runtime.\n\n',
-    );
-  }
-
-  if (provider === 'claude') return result;
-
-  const config = buildReplacementConfig(provider);
-
-  // 1. Apply ordered string replacements (most specific first)
-  for (const [search, replace] of config.strings) {
-    result = result.replaceAll(search, replace);
+    result = stripLegacyBuildSurface(result);
   }
 
-  // 2. Apply regex patterns (model names + structured contexts)
-  for (const { pattern, replacement } of config.patterns) {
-    result = result.replace(pattern, replacement);
+  if (provider === 'codex' && filePath === 'orchestrator/chati.md') {
+    const routedAction = '## Action: Routed Interactive Agent';
+    result = result.includes(routedAction)
+      ? result.replace(routedAction, `${CODEX_CREDENTIAL_BOUNDARY}\n${routedAction}`)
+      : `${result.trimEnd()}\n\n${CODEX_CREDENTIAL_BOUNDARY.trimStart()}`;
   }
 
   return result;

package/src/context/bracket-tracker.js

@@ -38,11 +38,11 @@ const MEMORY_LEVELS = {
 /**
  * Calculate bracket from remaining context percentage.
  * @param {number} remainingPercent - 0 to 100
- * @param {string} [provider='claude'] - Provider name for context window scaling
+ * @param {string|null} [provider=null] - Provider name for context window scaling
  * @param {string} [model] - Model tier (opus, sonnet, haiku) for precise context limits
- * @returns {{ bracket: string, activeLayers: string[], tokenBudget: number, budgetRatio: number, memoryLevel: string, handoffRequired: boolean, provider: string }}
+ * @returns {{ bracket: string, activeLayers: string[], tokenBudget: number, budgetRatio: number, memoryLevel: string, handoffRequired: boolean, provider: string|null }}
  */
-export function calculateBracket(remainingPercent, provider = 'claude', model) {
+export function calculateBracket(remainingPercent, provider = null, model) {
   const pct = Math.max(0, Math.min(100, remainingPercent));
 
   let name = 'CRITICAL';

package/src/context/engine.js

@@ -49,7 +49,7 @@ export function runPrism(input) {
   const layers = [];
 
   // 1. Calculate bracket (provider-aware for proportional budgets)
-  const bracket = calculateBracket(input.remainingPercent, input.provider || 'claude');
+  const bracket = calculateBracket(input.remainingPercent, input.provider || null);
 
   // 2. Build context for layer processors
   const ctx = {