omnius 1.0.514 → 1.0.515

package/dist/index.js

@@ -576538,7 +576538,13 @@ function violatesDirective(directive, input, cwd4) {
         return false;
       return true;
     case "run_verification":
-      return input.toolName !== "shell";
+      if (input.toolName === "shell")
+        return false;
+      if (isEvidenceGatheringTool(input.toolName) || input.isReadLike)
+        return false;
+      if (isEditTool(input.toolName))
+        return false;
+      return true;
     case "report_blocked":
     case "report_incomplete":
       return !isReportTool(input.toolName);
@@ -582003,6 +582009,19 @@ function malformedToolArgsMessage(toolName, raw) {
 function looksLikeShellFileWrite(command) {
   return /\bcat\s+[^|;&\n]*>\s*[^&|;\n]+/.test(command) || /\b(?:tee|dd)\b[\s\S]*(?:\bof=|>\s*[^&|;\n]+)/.test(command) || /\b(?:echo|printf)\b[\s\S]*>\s*[^&|;\n]+/.test(command) || /\bpython(?:3)?\b[\s\S]*(?:write_text|open\([^)]*["']w["'])/.test(command) || /<<\s*['"]?\w+['"]?[\s\S]*>\s*[^&|;\n]+/.test(command);
 }
+function normalizeShellCommandForFingerprint(command) {
+  let c10 = command.trim().replace(/\s+/g, " ");
+  let prev = "";
+  while (prev !== c10) {
+    prev = c10;
+    c10 = c10.replace(/^echo\s+(?:"[^"]*"|'[^']*')\s*(?:&&|;)\s*/i, "");
+  }
+  c10 = c10.replace(/\s*(?:;|&&)\s*echo\s+(?:"[^"]*\$\?[^"]*"|'[^']*\$\?[^']*'|\S*\$\?\S*)\s*$/i, "");
+  c10 = c10.replace(/\s*\|\s*(?:head|tail)\s+(?:-n\s*)?-?\d+\s*$/i, "");
+  c10 = c10.replace(/\s*\|\s*(?:head|tail)\s+-c\s*\d+\s*$/i, "");
+  c10 = c10.replace(/\s*2>&1\s*$/, "");
+  return c10.trim();
+}
 function normalizeProviderToolMessage(msg, model) {
   const rawContent2 = typeof msg.content === "string" ? msg.content : "";
   const profile = resolveModelProfile(model);
@@ -582940,9 +582959,13 @@ var init_agenticRunner = __esm({
       // of the same completion gate and terminate as incomplete_verification after a
       // small threshold so the run stops without falsely marking completion.
       // Reset whenever a completion is allowed.
+      // `total` (REG-74) counts EVERY hold this run regardless of gate/summary key —
+      // rotating gate codes or paraphrased summaries reset `count` but never
+      // `total`, so the hard-escape below cannot be starved by variation.
       _completionHoldState = {
         count: 0,
-        lastKey: ""
+        lastKey: "",
+        total: 0
       };
       _completionIncompleteVerification = null;
       /**
@@ -586128,7 +586151,7 @@ ${shellLines.join("\n")}` : "Commands run: none"
         }
         if (!verdict)
           return { proceed: true };
-        if (verdict.resolved || verdict.confidence < 0.5) {
+        if (verdict.resolved || verdict.confidence < 0.65) {
           this._resolutionGateRejections = 0;
           return { proceed: true };
         }
@@ -588980,6 +589003,11 @@ ${blob}
       }
       _buildToolFingerprint(name10, args) {
         const canonical = this.lookupRegisteredTool(name10)?.name ?? name10;
+        if (canonical === "shell" && typeof args?.["command"] === "string") {
+          const normalized = normalizeShellCommandForFingerprint(args["command"]);
+          const rest = this._buildExactArgsKey({ ...args, command: normalized });
+          return `${canonical}:${rest}`;
+        }
         return `${canonical}:${this._buildExactArgsKey(args)}`;
       }
       // ── REG-71: region-aware read dedup ────────────────────────────────────────
@@ -590743,14 +590771,41 @@ TASK: ${scrubbedTask}` : scrubbedTask;
           const raw = Number(process.env["OMNIUS_COMPLETION_HOLD_MAX"]);
           return Number.isFinite(raw) && raw >= 1 ? Math.floor(raw) : 3;
         })();
+        const completionHoldHardMax = (() => {
+          const raw = Number(process.env["OMNIUS_COMPLETION_HOLD_HARD_MAX"]);
+          if (Number.isFinite(raw) && raw >= 1)
+            return Math.floor(raw);
+          return completionHoldEscapeMax * 2;
+        })();
         const holdTaskCompleteGates = (args, turn) => {
+          if (this._completionHoldState.total >= completionHoldHardMax) {
+            const caveat = [
+              `[UNVERIFIED — completion accepted after ${this._completionHoldState.total} gate holds]`,
+              lastCompletionGateReason ? `Last unresolved gate: ${lastCompletionGateReason.slice(0, 300)}` : ""
+            ].filter(Boolean).join("\n");
+            this._completionCaveat = this._completionCaveat ? `${this._completionCaveat}
+${caveat}` : caveat;
+            this.emit({
+              type: "status",
+              content: `Completion hold hard-escape: allowing task_complete after ${this._completionHoldState.total} total holds (caveat recorded)`,
+              turn,
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
+            this._completionHoldState.count = 0;
+            this._completionHoldState.lastKey = "";
+            this._completionHoldState.total = 0;
+            lastCompletionGateCode = "";
+            return false;
+          }
           const held = holdUnresolvedVerificationTaskComplete(turn) || holdNoProgressTaskComplete(args, turn) || holdProvenanceTaskComplete(args, turn);
           if (!held) {
             this._completionHoldState.count = 0;
             this._completionHoldState.lastKey = "";
+            this._completionHoldState.total = 0;
             lastCompletionGateCode = "";
             return false;
           }
+          this._completionHoldState.total += 1;
           this._focusSupervisor?.markCompletionBlocked({
             turn,
             reason: lastCompletionGateReason || "completion requested before required evidence was present",
@@ -596243,9 +596298,20 @@ Your most recent tool calls SUCCEEDED. If the task is complete, call task_comple
               });
               break;
             }
-            const codeBlockMatch = content.match(/```(?:bash|sh|shell|zsh)?\s*\n([\s\S]*?)```/);
-            if (codeBlockMatch && codeBlockMatch[1]?.trim()) {
-              const shellCommands = codeBlockMatch[1].trim().split("\n").filter((l2) => l2.trim() && !l2.trim().startsWith("#")).join(" && ");
+            const codeBlockMatch = content.match(/```(?:bash|sh|shell|zsh)\s*\n([\s\S]*?)```/);
+            const codeBlockLines = codeBlockMatch?.[1] ? codeBlockMatch[1].trim().split("\n").filter((l2) => l2.trim() && !l2.trim().startsWith("#")) : [];
+            const everyLineLooksExecutable = codeBlockLines.length > 0 && codeBlockLines.every((l2) => {
+              const t2 = l2.trim();
+              if (/^\d+[:.]/.test(t2))
+                return false;
+              if (/^(\/\/|\/\*|\*|→|▶|✔|✖|[│├└╭╰|])/.test(t2))
+                return false;
+              if (/^[<>{}[\]]/.test(t2))
+                return false;
+              return /^[A-Za-z_./~"'$(]/.test(t2);
+            });
+            if (codeBlockMatch && everyLineLooksExecutable) {
+              const shellCommands = codeBlockLines.join(" && ");
               if (shellCommands.length > 0 && shellCommands.length < 2e3) {
                 if (looksLikeShellFileWrite(shellCommands)) {
                   messages2.push({

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "omnius",
-  "version": "1.0.514",
+  "version": "1.0.515",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omnius",
-      "version": "1.0.514",
+      "version": "1.0.515",
       "bundleDependencies": [
         "image-to-ascii"
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnius",
-  "version": "1.0.514",
+  "version": "1.0.515",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",