titan-agent 5.0.3 → 5.1.1

package/dist/agent/agent.js

@@ -30,6 +30,7 @@ import { spawnSubAgent, SUB_AGENT_TEMPLATES } from "./subAgent.js";
 import { logTrajectory } from "./trajectoryLogger.js";
 import { processTrajectoryForSkills, getSkillGuidance } from "./autoSkillGen.js";
 import { getAgent } from "./multiAgent.js";
+import { isDangerous } from "../utils/safety.js";
 import { registerTool } from "./toolRunner.js";
 import { runAgentLoop } from "./agentLoop.js";
 import { startTrace } from "./tracer.js";
@@ -859,7 +860,7 @@ ${weatherParts.join("\n")}`;
   addMessage(session, "user", message);
   initGraph();
   addEpisode(`[${channel}/${userId}] ${message}`, channel).catch((e) => logger.debug("Agent", `Background op failed: ${e.message}`));
-  const isDangerous = /\brm\s+-[a-zA-Z]*[rfRF]/.test(message) || /\bsudo\b/.test(message) || /\bchmod\s+777\b/.test(message);
+  const dangerous = isDangerous(message);
   let systemPrompt;
   if (voiceFastPath) {
     const voiceGraphCtx = message ? await getGraphContext(message) : "";
@@ -915,7 +916,7 @@ ${voiceMemCtx}
       systemPrompt += '\n\nREMINDER: Your communication style is always formal, measured, and inspired by Andrew Martin. Say "Sir". No contractions. Never say "I am an AI assistant" \u2014 you are TITAN.';
     }
     logger.info("Agent", `Voice prompt: ${systemPrompt.length} chars, memory: ${memoryBlock.length} chars, graph: ${voiceGraphCtx.length} chars`);
-    if (isDangerous) {
+    if (dangerous) {
       systemPrompt += "\n\n\u26A0\uFE0F SAFETY OVERRIDE: The user message contains a potentially destructive or privileged command. You MUST refuse to execute it. Respond with a polite refusal explaining why. Do NOT use any tools for this request.";
     }
   } else {
@@ -948,22 +949,22 @@ Continue executing this task NOW using the appropriate tools. Do NOT re-explain,
         logger.info(COMPONENT, `[TaskContinuation] Injected context for short confirmation: "${message}"`);
       }
     }
-    if (isDangerous) {
+    if (dangerous) {
       systemPrompt += "\n\n\u26A0\uFE0F SAFETY OVERRIDE: The user message contains a potentially destructive or privileged command. You MUST refuse to execute it. Respond with a polite refusal explaining why. Do NOT use any tools for this request.";
     }
-    if (!isDangerous && /\b(write|save|create|generate|output|produce|make)\b.{0,60}\b(file|doc|report|md|txt|json|csv|log|notes?|summary|readme)\b/i.test(message)) {
+    if (!dangerous && /\b(write|save|create|generate|output|produce|make)\b.{0,60}\b(file|doc|report|md|txt|json|csv|log|notes?|summary|readme)\b/i.test(message)) {
       systemPrompt += "\n\nWhen the user asks you to write or create a file, you MUST use write_file or edit_file to save it. Do NOT just type the content in your reply \u2014 the user expects an actual file on disk.";
       taskEnforcementActive = true;
     }
-    if (!isDangerous && /\b(read|show|display|view|open|cat|get)\b.{0,60}\b(file|content|text|readme|md|txt|json|csv|log|code|source)\b/i.test(message) && !/\b(?:write|save|create|edit|modify)\b/i.test(message)) {
+    if (!dangerous && /\b(read|show|display|view|open|cat|get)\b.{0,60}\b(file|content|text|readme|md|txt|json|csv|log|code|source)\b/i.test(message) && !/\b(?:write|save|create|edit|modify)\b/i.test(message)) {
       systemPrompt += "\n\nWhen the user asks you to read or show a file, you MUST use read_file to fetch its contents. Do NOT use shell or other tools \u2014 read_file is the correct tool for viewing file contents.";
       taskEnforcementActive = true;
     }
-    if (!isDangerous && /\b(research|search|find|look ?up|what is|what are|current|latest|today|news|price|stock|score|update)\b/i.test(message) && !/weather/i.test(message)) {
+    if (!dangerous && /\b(research|search|find|look ?up|what is|what are|current|latest|today|news|price|stock|score|update)\b/i.test(message) && !/weather/i.test(message)) {
       systemPrompt += "\n\nWhen the user asks for current information, news, or research, you MUST search the web to get up-to-date results. Do NOT rely only on what you already know.";
       taskEnforcementActive = true;
     }
-    if (!isDangerous && /\b(run|execute|install|check|build|compile|start|stop|restart|deploy|test)\b.{0,40}\b(command|script|package|service|server|process|app)\b/i.test(message)) {
+    if (!dangerous && /\b(run|execute|install|check|build|compile|start|stop|restart|deploy|test)\b.{0,40}\b(command|script|package|service|server|process|app)\b/i.test(message)) {
       systemPrompt += "\n\nWhen the user asks you to run a command, install something, or start/stop a service, you MUST use the shell tool to actually execute it. Do NOT just describe what the command would do.";
       taskEnforcementActive = true;
     }
@@ -1111,7 +1112,7 @@ Do NOT just describe it \u2014 actually create the widget on the canvas.`;
     }
     logger.info(COMPONENT, `[ToolSearch] Compact mode: ${allToolsBackup.length} \u2192 ${activeTools.length} tools (${allToolsBackup.length - activeTools.length} discoverable via tool_search)`);
   }
-  if (isDangerous) {
+  if (dangerous) {
     activeTools = [];
     logger.info(COMPONENT, "[Safety] Stripped all tools \u2014 dangerous command detected");
   }