titan-agent 5.0.2 → 5.1.0

package/dist/agent/agent.js

@@ -30,6 +30,7 @@ import { spawnSubAgent, SUB_AGENT_TEMPLATES } from "./subAgent.js";
 import { logTrajectory } from "./trajectoryLogger.js";
 import { processTrajectoryForSkills, getSkillGuidance } from "./autoSkillGen.js";
 import { getAgent } from "./multiAgent.js";
+import { isDangerous } from "../utils/safety.js";
 import { registerTool } from "./toolRunner.js";
 import { runAgentLoop } from "./agentLoop.js";
 import { startTrace } from "./tracer.js";
@@ -859,6 +860,7 @@ ${weatherParts.join("\n")}`;
   addMessage(session, "user", message);
   initGraph();
   addEpisode(`[${channel}/${userId}] ${message}`, channel).catch((e) => logger.debug("Agent", `Background op failed: ${e.message}`));
+  const dangerous = isDangerous(message);
   let systemPrompt;
   if (voiceFastPath) {
     const voiceGraphCtx = message ? await getGraphContext(message) : "";
@@ -914,6 +916,9 @@ ${voiceMemCtx}
       systemPrompt += '\n\nREMINDER: Your communication style is always formal, measured, and inspired by Andrew Martin. Say "Sir". No contractions. Never say "I am an AI assistant" \u2014 you are TITAN.';
     }
     logger.info("Agent", `Voice prompt: ${systemPrompt.length} chars, memory: ${memoryBlock.length} chars, graph: ${voiceGraphCtx.length} chars`);
+    if (dangerous) {
+      systemPrompt += "\n\n\u26A0\uFE0F SAFETY OVERRIDE: The user message contains a potentially destructive or privileged command. You MUST refuse to execute it. Respond with a polite refusal explaining why. Do NOT use any tools for this request.";
+    }
   } else {
     systemPrompt = await buildSystemPrompt(config, message, overrides?.agentId, "full", overrides?.sessionId);
     if (overrides?.systemPrompt) systemPrompt = overrides.systemPrompt + "\n\n" + systemPrompt;
@@ -944,15 +949,22 @@ Continue executing this task NOW using the appropriate tools. Do NOT re-explain,
         logger.info(COMPONENT, `[TaskContinuation] Injected context for short confirmation: "${message}"`);
       }
     }
-    if (/\b(write|save|create|generate|output|produce|make)\b.{0,60}\b(file|doc|report|md|txt|json|csv|log|notes?|summary|readme)\b/i.test(message)) {
+    if (dangerous) {
+      systemPrompt += "\n\n\u26A0\uFE0F SAFETY OVERRIDE: The user message contains a potentially destructive or privileged command. You MUST refuse to execute it. Respond with a polite refusal explaining why. Do NOT use any tools for this request.";
+    }
+    if (!dangerous && /\b(write|save|create|generate|output|produce|make)\b.{0,60}\b(file|doc|report|md|txt|json|csv|log|notes?|summary|readme)\b/i.test(message)) {
       systemPrompt += "\n\nWhen the user asks you to write or create a file, you MUST use write_file or edit_file to save it. Do NOT just type the content in your reply \u2014 the user expects an actual file on disk.";
       taskEnforcementActive = true;
     }
-    if (/\b(research|search|find|look ?up|what is|what are|current|latest|today|news|price|stock|score|update)\b/i.test(message) && !/weather/i.test(message)) {
+    if (!dangerous && /\b(read|show|display|view|open|cat|get)\b.{0,60}\b(file|content|text|readme|md|txt|json|csv|log|code|source)\b/i.test(message) && !/\b(?:write|save|create|edit|modify)\b/i.test(message)) {
+      systemPrompt += "\n\nWhen the user asks you to read or show a file, you MUST use read_file to fetch its contents. Do NOT use shell or other tools \u2014 read_file is the correct tool for viewing file contents.";
+      taskEnforcementActive = true;
+    }
+    if (!dangerous && /\b(research|search|find|look ?up|what is|what are|current|latest|today|news|price|stock|score|update)\b/i.test(message) && !/weather/i.test(message)) {
       systemPrompt += "\n\nWhen the user asks for current information, news, or research, you MUST search the web to get up-to-date results. Do NOT rely only on what you already know.";
       taskEnforcementActive = true;
     }
-    if (/\b(run|execute|install|check|build|compile|start|stop|restart|deploy|test)\b.{0,40}\b(command|script|package|service|server|process|app)\b/i.test(message)) {
+    if (!dangerous && /\b(run|execute|install|check|build|compile|start|stop|restart|deploy|test)\b.{0,40}\b(command|script|package|service|server|process|app)\b/i.test(message)) {
       systemPrompt += "\n\nWhen the user asks you to run a command, install something, or start/stop a service, you MUST use the shell tool to actually execute it. Do NOT just describe what the command would do.";
       taskEnforcementActive = true;
     }
@@ -960,6 +972,36 @@ Continue executing this task NOW using the appropriate tools. Do NOT re-explain,
       systemPrompt += "\n\nWhen editing code: 1) read the relevant files first, 2) make the actual changes using write_file or edit_file, 3) run tests to verify, 4) report what you changed. Do NOT stop after reading \u2014 actually save your changes.";
       taskEnforcementActive = true;
     }
+    const systemWidgetPatterns = [
+      { pattern: /\b(?:backups?|snapshots?|archives?)\b/i, widget: "system:backup", name: "Backup Manager" },
+      { pattern: /\b(?:training|train|specialists?|models?)\b/i, widget: "system:training", name: "Training Dashboard" },
+      { pattern: /\b(?:recipes?|playbooks?|workflows?|jarvis)\b/i, widget: "system:recipes", name: "Recipe Kitchen" },
+      { pattern: /\b(?:vram|gpu|memory|nvidia)\b/i, widget: "system:vram", name: "VRAM Monitor" },
+      { pattern: /\b(?:teams?|members?|roles?|permissions?|rbac)\b/i, widget: "system:teams", name: "Team Hub" },
+      { pattern: /\b(?:cron|schedules?|jobs?|timers?)\b/i, widget: "system:cron", name: "Cron Scheduler" },
+      { pattern: /\b(?:checkpoints?|restores?|save state)\b/i, widget: "system:checkpoints", name: "Checkpoints" },
+      { pattern: /\b(?:organism|drives?|safety|alerts?|guardrails?)\b/i, widget: "system:organism", name: "Organism Monitor" },
+      { pattern: /\b(?:fleet|nodes?|routes?|mesh)\b/i, widget: "system:fleet", name: "Fleet Router" },
+      { pattern: /\b(?:captcha|browsers?|form fill|web automation)\b/i, widget: "system:browser", name: "Browser Tools" },
+      { pattern: /\b(?:paperclip|sidecars?|helpers?)\b/i, widget: "system:paperclip", name: "Paperclip" },
+      { pattern: /\b(?:tests?|flaky|failing|coverage|eval)\b/i, widget: "system:eval", name: "Test Lab" }
+    ];
+    const matchedWidget = systemWidgetPatterns.find((p) => p.pattern.test(message));
+    if (matchedWidget && !taskEnforcementActive) {
+      systemPrompt += `
+
+The user is asking about ${matchedWidget.name}. You MUST call gallery_search for "${matchedWidget.widget}" FIRST to find the widget template, then call gallery_get to fetch it, and emit it through the _____widget gate as JSON with format "system":
+
+_____widget
+{ "name": "${matchedWidget.name}", "format": "system", "source": "${matchedWidget.widget}", "w": 6, "h": 6 }
+
+Do NOT just describe it \u2014 actually create the widget on the canvas.`;
+      taskEnforcementActive = true;
+    }
+    if (/\b(?:create|add|make|build|spawn|generate|get|fetch|find|search|show|display|give me|want|need)\b.{0,60}\b(?:widget|panel|canvas|gallery|clock|timer|chart|graph|map|calendar|todo|list|counter|dashboard)\b/i.test(message) && !taskEnforcementActive) {
+      systemPrompt += "\n\nWhen the user asks for a widget or panel on the canvas, you MUST call gallery_search FIRST to find a matching template. If a template matches, call gallery_get to fetch its source, then emit it through the _____react gate. Do NOT describe or summarize the widget \u2014 actually call the tools and emit the code.";
+      taskEnforcementActive = true;
+    }
     if (channel === "deliberation" && !taskEnforcementActive) {
       systemPrompt += "\n\nYou are executing a step in a structured plan. Use tool calls to do real work: read_file for reading code, edit_file for making changes.- To write files: use write_file (NOT shell with echo/printf redirects)\n- To fetch URLs: use web_fetch (NOT shell with curl/wget)\n- To search: use web_search (NOT shell with curl to search engines)\n- Shell is for running builds, tests, and commands that have no dedicated tool.\nExecute this step NOW. Do not describe what you would do \u2014 call the tools.";
       taskEnforcementActive = true;
@@ -1070,6 +1112,10 @@ Continue executing this task NOW using the appropriate tools. Do NOT re-explain,
     }
     logger.info(COMPONENT, `[ToolSearch] Compact mode: ${allToolsBackup.length} \u2192 ${activeTools.length} tools (${allToolsBackup.length - activeTools.length} discoverable via tool_search)`);
   }
+  if (dangerous) {
+    activeTools = [];
+    logger.info(COMPONENT, "[Safety] Stripped all tools \u2014 dangerous command detected");
+  }
   setAutonomousMode(isAutonomous);
   heartbeat(session.id);
   const autoDelegate = subAgentConfig?.autoDelegate !== false;