titan-agent 5.4.1 → 5.5.5

package/README.md

@@ -258,7 +258,7 @@ Start in supervised mode. Review what it does. Don't give it access to systems y
 
 ## 📊 The Numbers
 
-- **Version:** 5.3.0 "Spacewalk: CI Gate + Parity"
+- **Version:** 5.4.3 "Spacewalk: Widget Canvas + Sandbox Hardening"
 - **Tests:** 500+ deterministic tests (unit + mock trajectory + parity), pass in under 5 s — plus 11 live-eval suites and a CI merge gate at 80 % per suite
 - **Widget templates:** 109 production templates + 19 system widgets = 128 runtime entries across 26 categories
 - **Skills:** 143 loaded

package/dist/agent/agent.js

@@ -140,7 +140,7 @@ function ensureSpawnAgentRegistered() {
       const template = SUB_AGENT_TEMPLATES[baseTemplateName] || {};
       const agentName = args.name || configAgent?.name || template.name || "SubAgent";
       const task = args.task;
-      let appliedFields = [];
+      const appliedFields = [];
       if (configAgent) {
         if (configAgent.maxRounds !== 15) appliedFields.push(`maxRounds=${configAgent.maxRounds}`);
         if (configAgent.maxTokens !== 4e3) appliedFields.push(`maxTokens=${configAgent.maxTokens}`);
@@ -843,7 +843,8 @@ async function processMessage(message, channel = "cli", userId = "default", over
     }
   }
   let preRoutedContext = "";
-  if (channel !== "deliberation" && /\b(?:weather|forecast|temperature)\b/i.test(message)) {
+  const isWidgetRequest = /\b(?:create|add|make|build|spawn|generate)\b.{0,40}\b(?:widget|panel|dashboard)\b/i.test(message);
+  if (channel !== "deliberation" && !isWidgetRequest && /\b(?:weather|forecast|temperature)\b/i.test(message)) {
     const segments = message.split(/\b(?:and|also|&)\b|,/i).filter((s) => /\b(?:weather|forecast|temperature|\d{5})\b/i.test(s) || /[A-Z][a-z]+/.test(s));
     const locations = [];
     for (const seg of segments.length > 0 ? segments : [message]) {
@@ -982,8 +983,11 @@ Continue executing this task NOW using the appropriate tools. Do NOT re-explain,
       systemPrompt += "\n\n\u26A0\uFE0F SAFETY OVERRIDE: The user message contains a potentially destructive or privileged command. You MUST refuse to execute it. Respond with a polite refusal explaining why. Do NOT use any tools for this request.";
     }
     if (!dangerous && /\b(write|save|create|generate|output|produce|make)\b.{0,60}\b(file|doc|report|md|txt|json|csv|log|notes?|summary|readme)\b/i.test(message)) {
-      systemPrompt += "\n\nWhen the user asks you to write or create a file, you MUST use write_file or edit_file to save it. Do NOT just type the content in your reply \u2014 the user expects an actual file on disk.";
-      taskEnforcementActive = true;
+      const isWidgetReq2 = /\b(?:create|add|make|build|spawn|generate)\b.{0,40}\b(?:widget|panel|dashboard)\b/i.test(message);
+      if (!isWidgetReq2) {
+        systemPrompt += "\n\nWhen the user asks you to write or create a file, you MUST use write_file or edit_file to save it. Do NOT just type the content in your reply \u2014 the user expects an actual file on disk.";
+        taskEnforcementActive = true;
+      }
     }
     if (!dangerous && /\b(read|show|display|view|open|cat|get)\b.{0,60}\b(file|content|text|readme|md|txt|json|csv|log|code|source)\b/i.test(message) && !/\b(?:write|save|create|edit|modify)\b/i.test(message)) {
       systemPrompt += "\n\nWhen the user asks you to read or show a file, you MUST use read_file to fetch its contents. Do NOT use shell or other tools \u2014 read_file is the correct tool for viewing file contents.";
@@ -1027,7 +1031,7 @@ _____widget
 Do NOT just describe it \u2014 actually create the widget on the canvas.`;
       taskEnforcementActive = true;
     }
-    if (/\b(?:create|add|make|build|spawn|generate|get|fetch|find|search|show|display|give me|want|need)\b.{0,60}\b(?:widget|panel|canvas|gallery|clock|timer|chart|graph|map|calendar|todo|list|counter|dashboard)\b/i.test(message) && !taskEnforcementActive) {
+    if (/\b(?:create|add|make|build|spawn|generate|get|fetch|find|search|show|display|give me|want|need)\b.{0,60}\b(?:widget|panel|canvas|gallery|clock|timer|chart|graph|map|calendar|todo|list|counter|dashboard)\b/i.test(message)) {
       systemPrompt += `
 
 The user wants a widget on the canvas. You CAN create it yourself \u2014 you do NOT need the user to share files or an existing project. Your job is to BUILD the widget, not ask for files.
@@ -1038,7 +1042,7 @@ MANDATORY steps:
 3. Emit the returned source through the _____react gate.
 4. If no template matches, write the React component yourself and emit it through _____react.
 
-Do NOT describe the widget, do NOT ask the user for files, do NOT say "I don't see an existing canvas" \u2014 just CREATE it.`;
+CRITICAL: Widgets are NOT files. Do NOT use write_file, edit_file, or any file tools. Widget code is rendered directly on the canvas via the _____react gate. Do NOT describe the widget, do NOT save it to a file, do NOT say "I don't see an existing canvas" \u2014 just CREATE it with the gate.`;
       taskEnforcementActive = true;
     }
     if (channel === "deliberation" && !taskEnforcementActive) {