web-agent-bridge 2.2.0 → 2.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.ar.md +7 -0
- package/README.md +7 -0
- package/package.json +12 -4
- package/public/commander-dashboard.html +243 -0
- package/public/css/premium.css +317 -317
- package/public/demo.html +259 -259
- package/public/index.html +644 -592
- package/public/llms.txt +1 -0
- package/public/mesh-dashboard.html +328 -0
- package/public/premium-dashboard.html +2487 -2487
- package/public/premium.html +791 -791
- package/public/script/wab.min.js +181 -6
- package/script/ai-agent-bridge.js +196 -0
- package/sdk/agent-mesh.js +449 -0
- package/sdk/commander.js +262 -0
- package/sdk/index.js +260 -259
- package/sdk/package.json +1 -1
- package/server/index.js +13 -1
- package/server/migrations/002_premium_features.sql +418 -418
- package/server/models/db.js +24 -5
- package/server/routes/admin-premium.js +671 -671
- package/server/routes/commander.js +316 -0
- package/server/routes/mesh.js +469 -0
- package/server/routes/premium-v2.js +686 -686
- package/server/routes/premium.js +724 -724
- package/server/services/agent-learning.js +575 -0
- package/server/services/agent-memory.js +625 -625
- package/server/services/agent-mesh.js +539 -0
- package/server/services/agent-symphony.js +711 -0
- package/server/services/commander.js +738 -0
- package/server/services/edge-compute.js +440 -0
- package/server/services/local-ai.js +389 -0
- package/server/services/plugins.js +747 -747
- package/server/services/self-healing.js +843 -843
- package/server/services/swarm.js +788 -788
- package/server/services/vision.js +871 -871
- package/public/admin/dashboard.html +0 -848
- package/public/admin/login.html +0 -84
- package/public/video/tutorial.mp4 +0 -0
|
@@ -0,0 +1,711 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Symphony Orchestrator — Multi-Agent Composition Engine
|
|
3
|
+
*
|
|
4
|
+
* Orchestrates complex workflows by composing multiple agent roles into
|
|
5
|
+
* coordinated multi-phase pipelines. Each role contributes specialized analysis,
|
|
6
|
+
* and the results are fused into a unified recommendation.
|
|
7
|
+
*
|
|
8
|
+
* Architecture:
|
|
9
|
+
* - 4 specialized role engines: Researcher, Analyst, Negotiator, Guardian
|
|
10
|
+
* - 6-phase pipeline: analyze → research → negotiate → guard → synthesize → decide
|
|
11
|
+
* - Templates define which phases execute and in what order
|
|
12
|
+
* - Cross-service integration: Analyst consults learning engine for preferences
|
|
13
|
+
* - All decisions are recorded back to the learning engine for future improvement
|
|
14
|
+
* - No data leaves the WAB instance — everything runs locally
|
|
15
|
+
*/
|
|
16
|
+
|
|
17
|
+
const crypto = require('crypto');
|
|
18
|
+
const { db } = require('../models/db');
|
|
19
|
+
|
|
20
|
+
// ─── Schema ──────────────────────────────────────────────────────────
|
|
21
|
+
|
|
22
|
+
// Drop legacy schema if columns are incompatible (v2.3.0 → v2.3.1 migration)
|
|
23
|
+
try {
|
|
24
|
+
const cols = db.prepare("PRAGMA table_info(symphony_compositions)").all().map(c => c.name);
|
|
25
|
+
if (cols.length > 0 && !cols.includes('template')) {
|
|
26
|
+
db.exec('DROP TABLE IF EXISTS symphony_compositions');
|
|
27
|
+
db.exec('DROP TABLE IF EXISTS symphony_phase_logs');
|
|
28
|
+
}
|
|
29
|
+
} catch (_) {}
|
|
30
|
+
|
|
31
|
+
db.exec(`
|
|
32
|
+
CREATE TABLE IF NOT EXISTS symphony_compositions (
|
|
33
|
+
id TEXT PRIMARY KEY,
|
|
34
|
+
site_id TEXT NOT NULL,
|
|
35
|
+
template TEXT NOT NULL,
|
|
36
|
+
input_data TEXT DEFAULT '{}',
|
|
37
|
+
status TEXT DEFAULT 'pending',
|
|
38
|
+
phases_completed TEXT DEFAULT '[]',
|
|
39
|
+
current_phase TEXT,
|
|
40
|
+
result TEXT,
|
|
41
|
+
error TEXT,
|
|
42
|
+
duration_ms INTEGER,
|
|
43
|
+
agent_count INTEGER DEFAULT 0,
|
|
44
|
+
created_at TEXT DEFAULT (datetime('now')),
|
|
45
|
+
completed_at TEXT
|
|
46
|
+
);
|
|
47
|
+
|
|
48
|
+
CREATE TABLE IF NOT EXISTS symphony_phase_logs (
|
|
49
|
+
id TEXT PRIMARY KEY,
|
|
50
|
+
composition_id TEXT NOT NULL,
|
|
51
|
+
phase TEXT NOT NULL,
|
|
52
|
+
role TEXT NOT NULL,
|
|
53
|
+
input TEXT DEFAULT '{}',
|
|
54
|
+
output TEXT DEFAULT '{}',
|
|
55
|
+
duration_ms INTEGER DEFAULT 0,
|
|
56
|
+
created_at TEXT DEFAULT (datetime('now'))
|
|
57
|
+
);
|
|
58
|
+
|
|
59
|
+
CREATE INDEX IF NOT EXISTS idx_sym_comp_site ON symphony_compositions(site_id);
|
|
60
|
+
CREATE INDEX IF NOT EXISTS idx_sym_comp_status ON symphony_compositions(status);
|
|
61
|
+
CREATE INDEX IF NOT EXISTS idx_sym_comp_template ON symphony_compositions(template);
|
|
62
|
+
CREATE INDEX IF NOT EXISTS idx_sym_phase_comp ON symphony_phase_logs(composition_id);
|
|
63
|
+
`);
|
|
64
|
+
|
|
65
|
+
// ─── Prepared Statements ─────────────────────────────────────────────
|
|
66
|
+
|
|
67
|
+
const stmts = {
|
|
68
|
+
insertComposition: db.prepare('INSERT INTO symphony_compositions (id, site_id, template, input_data, status, current_phase, agent_count) VALUES (?, ?, ?, ?, ?, ?, ?)'),
|
|
69
|
+
updateComposition: db.prepare("UPDATE symphony_compositions SET status = ?, phases_completed = ?, current_phase = ?, result = ?, error = ?, duration_ms = ?, completed_at = datetime('now') WHERE id = ?"),
|
|
70
|
+
updatePhase: db.prepare('UPDATE symphony_compositions SET current_phase = ?, phases_completed = ? WHERE id = ?'),
|
|
71
|
+
getComposition: db.prepare('SELECT * FROM symphony_compositions WHERE id = ?'),
|
|
72
|
+
getCompositions: db.prepare('SELECT * FROM symphony_compositions WHERE site_id = ? ORDER BY created_at DESC LIMIT ?'),
|
|
73
|
+
getRecentByTemplate: db.prepare('SELECT * FROM symphony_compositions WHERE site_id = ? AND template = ? ORDER BY created_at DESC LIMIT ?'),
|
|
74
|
+
|
|
75
|
+
insertPhaseLog: db.prepare('INSERT INTO symphony_phase_logs (id, composition_id, phase, role, input, output, duration_ms) VALUES (?, ?, ?, ?, ?, ?, ?)'),
|
|
76
|
+
getPhaseLogs: db.prepare('SELECT * FROM symphony_phase_logs WHERE composition_id = ? ORDER BY created_at ASC'),
|
|
77
|
+
|
|
78
|
+
getStats: db.prepare(`SELECT
|
|
79
|
+
COUNT(*) as total,
|
|
80
|
+
SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) as completed,
|
|
81
|
+
SUM(CASE WHEN status = 'failed' THEN 1 ELSE 0 END) as failed,
|
|
82
|
+
AVG(CASE WHEN duration_ms IS NOT NULL THEN duration_ms END) as avg_duration,
|
|
83
|
+
COUNT(DISTINCT template) as templates_used
|
|
84
|
+
FROM symphony_compositions WHERE site_id = ?`),
|
|
85
|
+
};
|
|
86
|
+
|
|
87
|
+
// ─── Templates ───────────────────────────────────────────────────────
|
|
88
|
+
|
|
89
|
+
const TEMPLATES = {
|
|
90
|
+
'product-purchase': {
|
|
91
|
+
name: 'Smart Product Purchase',
|
|
92
|
+
description: 'Full analysis pipeline for purchase decisions',
|
|
93
|
+
phases: ['analyze', 'research', 'negotiate', 'guard', 'synthesize'],
|
|
94
|
+
roles: ['analyst', 'researcher', 'negotiator', 'guardian'],
|
|
95
|
+
},
|
|
96
|
+
'content-discovery': {
|
|
97
|
+
name: 'Content Discovery',
|
|
98
|
+
description: 'Find and evaluate content across sources',
|
|
99
|
+
phases: ['research', 'analyze', 'synthesize'],
|
|
100
|
+
roles: ['researcher', 'analyst'],
|
|
101
|
+
},
|
|
102
|
+
'security-audit': {
|
|
103
|
+
name: 'Security Audit',
|
|
104
|
+
description: 'Comprehensive security and privacy evaluation',
|
|
105
|
+
phases: ['research', 'guard', 'analyze', 'synthesize'],
|
|
106
|
+
roles: ['researcher', 'guardian', 'analyst'],
|
|
107
|
+
},
|
|
108
|
+
'price-optimization': {
|
|
109
|
+
name: 'Price Optimization',
|
|
110
|
+
description: 'Find the best price through research and negotiation',
|
|
111
|
+
phases: ['research', 'negotiate', 'guard', 'synthesize'],
|
|
112
|
+
roles: ['researcher', 'negotiator', 'guardian'],
|
|
113
|
+
},
|
|
114
|
+
'comparison-analysis': {
|
|
115
|
+
name: 'Comparison Analysis',
|
|
116
|
+
description: 'Compare multiple options with weighted criteria',
|
|
117
|
+
phases: ['research', 'analyze', 'synthesize'],
|
|
118
|
+
roles: ['researcher', 'analyst'],
|
|
119
|
+
},
|
|
120
|
+
};
|
|
121
|
+
|
|
122
|
+
// ─── Role Engines ────────────────────────────────────────────────────
|
|
123
|
+
|
|
124
|
+
const ROLE_ENGINES = {
|
|
125
|
+
/**
|
|
126
|
+
* Researcher — gathers structured data from the schema and context.
|
|
127
|
+
*/
|
|
128
|
+
researcher: {
|
|
129
|
+
execute(schema, context, priorOutputs) {
|
|
130
|
+
const result = { sources: [], findings: [], dataQuality: 'unknown' };
|
|
131
|
+
|
|
132
|
+
// Collect available actions from schema
|
|
133
|
+
if (schema && schema.actions && Array.isArray(schema.actions)) {
|
|
134
|
+
for (const action of schema.actions) {
|
|
135
|
+
result.sources.push({
|
|
136
|
+
type: 'action',
|
|
137
|
+
name: action.name || action.id || 'unnamed',
|
|
138
|
+
available: true,
|
|
139
|
+
fields: Array.isArray(action.fields) ? action.fields.length : 0,
|
|
140
|
+
});
|
|
141
|
+
}
|
|
142
|
+
}
|
|
143
|
+
|
|
144
|
+
// Analyze context data
|
|
145
|
+
if (context.items && Array.isArray(context.items)) {
|
|
146
|
+
for (const item of context.items) {
|
|
147
|
+
const finding = { type: 'item', name: item.name || item.title || 'Unknown' };
|
|
148
|
+
if (item.price !== undefined) finding.price = item.price;
|
|
149
|
+
if (item.rating !== undefined) finding.rating = item.rating;
|
|
150
|
+
if (item.availability !== undefined) finding.availability = item.availability;
|
|
151
|
+
if (item.category) finding.category = item.category;
|
|
152
|
+
result.findings.push(finding);
|
|
153
|
+
}
|
|
154
|
+
}
|
|
155
|
+
|
|
156
|
+
// Pull context fields directly
|
|
157
|
+
if (context.url) result.researchedUrl = context.url;
|
|
158
|
+
if (context.query) result.researchQuery = context.query;
|
|
159
|
+
if (context.budget) result.budgetConstraint = context.budget;
|
|
160
|
+
|
|
161
|
+
// Factor in prior research if present
|
|
162
|
+
if (priorOutputs.research) {
|
|
163
|
+
result.priorResearch = priorOutputs.research.findings?.length || 0;
|
|
164
|
+
}
|
|
165
|
+
|
|
166
|
+
result.dataQuality = result.findings.length > 3 ? 'high' : result.findings.length > 0 ? 'medium' : 'low';
|
|
167
|
+
result.sourcesCount = result.sources.length;
|
|
168
|
+
result.findingsCount = result.findings.length;
|
|
169
|
+
|
|
170
|
+
return result;
|
|
171
|
+
},
|
|
172
|
+
},
|
|
173
|
+
|
|
174
|
+
/**
|
|
175
|
+
* Analyst — evaluates data using scoring criteria AND learned preferences.
|
|
176
|
+
*/
|
|
177
|
+
analyst: {
|
|
178
|
+
execute(schema, context, priorOutputs) {
|
|
179
|
+
const research = priorOutputs.research || {};
|
|
180
|
+
const findings = research.findings || context.items || [];
|
|
181
|
+
|
|
182
|
+
// Build criteria from context or defaults
|
|
183
|
+
const criteria = context.criteria || this._defaultCriteria(context);
|
|
184
|
+
|
|
185
|
+
// Load learned preferences if learning engine is available
|
|
186
|
+
let preferences = null;
|
|
187
|
+
try {
|
|
188
|
+
const learning = require('./agent-learning');
|
|
189
|
+
const siteId = context.siteId || context.site_id || 'default';
|
|
190
|
+
const agentId = context.agentId || 'symphony-analyst';
|
|
191
|
+
const domain = context.domain || 'purchase';
|
|
192
|
+
preferences = learning.getPreferences(siteId, agentId, domain);
|
|
193
|
+
} catch (_) {
|
|
194
|
+
// Learning engine not available — continue without preferences
|
|
195
|
+
}
|
|
196
|
+
|
|
197
|
+
// Score items
|
|
198
|
+
const scored = findings.map((item) => {
|
|
199
|
+
let score = 0;
|
|
200
|
+
let weights = 0;
|
|
201
|
+
const breakdown = {};
|
|
202
|
+
|
|
203
|
+
for (const [criterion, weight] of Object.entries(criteria)) {
|
|
204
|
+
let val = 0;
|
|
205
|
+
|
|
206
|
+
if (criterion === 'price' && item.price !== undefined) {
|
|
207
|
+
const budget = context.budget || 100;
|
|
208
|
+
val = Math.max(0, 1 - item.price / budget); // lower price = higher score
|
|
209
|
+
} else if (criterion === 'rating' && item.rating !== undefined) {
|
|
210
|
+
val = item.rating / 5; // normalize to [0,1]
|
|
211
|
+
} else if (criterion === 'availability' && item.availability !== undefined) {
|
|
212
|
+
val = item.availability ? 1 : 0;
|
|
213
|
+
} else if (criterion === 'quality' && item.quality !== undefined) {
|
|
214
|
+
val = Math.min(1, item.quality / 10);
|
|
215
|
+
} else if (criterion === 'popularity' && item.reviews !== undefined) {
|
|
216
|
+
val = Math.min(1, item.reviews / 1000); // 1000+ reviews = max
|
|
217
|
+
} else {
|
|
218
|
+
continue; // Skip criteria with no matching data
|
|
219
|
+
}
|
|
220
|
+
|
|
221
|
+
// Apply preference modifier: if user historically prefers this criterion, boost it
|
|
222
|
+
let prefModifier = 1;
|
|
223
|
+
if (preferences && preferences.profile) {
|
|
224
|
+
const prefEntry = preferences.profile[criterion] || preferences.profile[`category:${criterion}`];
|
|
225
|
+
if (prefEntry) {
|
|
226
|
+
prefModifier = prefEntry.direction === 'preferred' ? 1.2 : 0.8;
|
|
227
|
+
}
|
|
228
|
+
}
|
|
229
|
+
|
|
230
|
+
const adjustedWeight = weight * prefModifier;
|
|
231
|
+
breakdown[criterion] = { value: Math.round(val * 100) / 100, weight: adjustedWeight };
|
|
232
|
+
score += val * adjustedWeight;
|
|
233
|
+
weights += adjustedWeight;
|
|
234
|
+
}
|
|
235
|
+
|
|
236
|
+
return {
|
|
237
|
+
item: item.name || item.title || 'Unknown',
|
|
238
|
+
score: weights > 0 ? Math.round((score / weights) * 1000) / 1000 : 0,
|
|
239
|
+
breakdown,
|
|
240
|
+
raw: item,
|
|
241
|
+
};
|
|
242
|
+
});
|
|
243
|
+
|
|
244
|
+
scored.sort((a, b) => b.score - a.score);
|
|
245
|
+
|
|
246
|
+
return {
|
|
247
|
+
rankings: scored,
|
|
248
|
+
topPick: scored[0] || null,
|
|
249
|
+
criteriaUsed: criteria,
|
|
250
|
+
preferencesApplied: preferences !== null,
|
|
251
|
+
preferenceSummary: preferences
|
|
252
|
+
? { confidence: preferences.confidence, topActions: preferences.topActions }
|
|
253
|
+
: null,
|
|
254
|
+
itemsEvaluated: scored.length,
|
|
255
|
+
};
|
|
256
|
+
},
|
|
257
|
+
|
|
258
|
+
_defaultCriteria(context) {
|
|
259
|
+
const c = { price: 0.3, rating: 0.3 };
|
|
260
|
+
if (context.budget) c.price = 0.4;
|
|
261
|
+
c.availability = 0.2;
|
|
262
|
+
c.quality = 0.15;
|
|
263
|
+
c.popularity = 0.05;
|
|
264
|
+
return c;
|
|
265
|
+
},
|
|
266
|
+
},
|
|
267
|
+
|
|
268
|
+
/**
|
|
269
|
+
* Negotiator — identifies deals, calculates savings potential, suggests tactics.
|
|
270
|
+
*/
|
|
271
|
+
negotiator: {
|
|
272
|
+
execute(schema, context, priorOutputs) {
|
|
273
|
+
const analysis = priorOutputs.analyze || {};
|
|
274
|
+
const topPick = analysis.topPick || {};
|
|
275
|
+
const item = topPick.raw || context.items?.[0] || {};
|
|
276
|
+
const price = item.price || context.price || 0;
|
|
277
|
+
const budget = context.budget || price * 1.2;
|
|
278
|
+
|
|
279
|
+
// Calculate negotiation position
|
|
280
|
+
const marketData = this._estimateMarketData(price, context);
|
|
281
|
+
const savingsTarget = Math.round(price * 0.15); // Target 15% savings
|
|
282
|
+
|
|
283
|
+
const tactics = [];
|
|
284
|
+
|
|
285
|
+
// Bundle discount
|
|
286
|
+
if (context.items && context.items.length > 1) {
|
|
287
|
+
tactics.push({
|
|
288
|
+
tactic: 'bundle_discount',
|
|
289
|
+
description: 'Request bundle pricing for multiple items',
|
|
290
|
+
potentialSavings: Math.round(price * 0.1),
|
|
291
|
+
applicability: 'high',
|
|
292
|
+
});
|
|
293
|
+
}
|
|
294
|
+
|
|
295
|
+
// Timing-based discount
|
|
296
|
+
if (marketData.priceVolatility > 0.1) {
|
|
297
|
+
tactics.push({
|
|
298
|
+
tactic: 'price_timing',
|
|
299
|
+
description: 'Price shows volatility — waiting may yield lower price',
|
|
300
|
+
potentialSavings: Math.round(price * marketData.priceVolatility),
|
|
301
|
+
applicability: 'medium',
|
|
302
|
+
});
|
|
303
|
+
}
|
|
304
|
+
|
|
305
|
+
// Coupon/promo
|
|
306
|
+
if (schema && schema.actions) {
|
|
307
|
+
const hasPromo = schema.actions.some((a) =>
|
|
308
|
+
(a.name || '').toLowerCase().includes('coupon') ||
|
|
309
|
+
(a.name || '').toLowerCase().includes('promo') ||
|
|
310
|
+
(a.name || '').toLowerCase().includes('discount')
|
|
311
|
+
);
|
|
312
|
+
if (hasPromo) {
|
|
313
|
+
tactics.push({
|
|
314
|
+
tactic: 'promo_code',
|
|
315
|
+
description: 'Promotional actions detected in schema',
|
|
316
|
+
potentialSavings: Math.round(price * 0.2),
|
|
317
|
+
applicability: 'high',
|
|
318
|
+
});
|
|
319
|
+
}
|
|
320
|
+
}
|
|
321
|
+
|
|
322
|
+
// Loyalty / repeat customer
|
|
323
|
+
tactics.push({
|
|
324
|
+
tactic: 'loyalty_inquiry',
|
|
325
|
+
description: 'Check for loyalty program or returning customer discounts',
|
|
326
|
+
potentialSavings: Math.round(price * 0.05),
|
|
327
|
+
applicability: 'low',
|
|
328
|
+
});
|
|
329
|
+
|
|
330
|
+
// Compute position strength
|
|
331
|
+
const withinBudget = price <= budget;
|
|
332
|
+
const bestSavings = tactics.reduce((max, t) => Math.max(max, t.potentialSavings), 0);
|
|
333
|
+
|
|
334
|
+
return {
|
|
335
|
+
originalPrice: price,
|
|
336
|
+
targetPrice: price - savingsTarget,
|
|
337
|
+
budget,
|
|
338
|
+
withinBudget,
|
|
339
|
+
maxPotentialSavings: bestSavings,
|
|
340
|
+
tactics,
|
|
341
|
+
marketEstimate: marketData,
|
|
342
|
+
recommendation: withinBudget
|
|
343
|
+
? (bestSavings > price * 0.1 ? 'negotiate' : 'proceed')
|
|
344
|
+
: 'reconsider',
|
|
345
|
+
};
|
|
346
|
+
},
|
|
347
|
+
|
|
348
|
+
_estimateMarketData(price, context) {
|
|
349
|
+
// Estimate market position from available signals
|
|
350
|
+
const priceVolatility = context.priceHistory
|
|
351
|
+
? Math.min(1, context.priceHistory.stddev / price)
|
|
352
|
+
: 0.1;
|
|
353
|
+
const supplyLevel = context.availability === false ? 'low' : 'normal';
|
|
354
|
+
const demandSignal = context.reviews && context.reviews > 500 ? 'high' : 'moderate';
|
|
355
|
+
|
|
356
|
+
return {
|
|
357
|
+
estimatedFairValue: Math.round(price * 0.9),
|
|
358
|
+
priceVolatility: Math.round(priceVolatility * 100) / 100,
|
|
359
|
+
supplyLevel,
|
|
360
|
+
demandSignal,
|
|
361
|
+
};
|
|
362
|
+
},
|
|
363
|
+
},
|
|
364
|
+
|
|
365
|
+
/**
|
|
366
|
+
* Guardian — security, privacy, and trust evaluation.
|
|
367
|
+
*/
|
|
368
|
+
guardian: {
|
|
369
|
+
execute(schema, context, priorOutputs) {
|
|
370
|
+
const risks = [];
|
|
371
|
+
let riskScore = 0;
|
|
372
|
+
|
|
373
|
+
// Trust level assessment
|
|
374
|
+
const trustLevel = context.trustLevel || context.trust_level || 'unknown';
|
|
375
|
+
if (trustLevel === 'unknown' || trustLevel === 'emerging') {
|
|
376
|
+
risks.push({
|
|
377
|
+
category: 'trust',
|
|
378
|
+
severity: trustLevel === 'unknown' ? 'high' : 'medium',
|
|
379
|
+
description: `Site has ${trustLevel} trust level`,
|
|
380
|
+
mitigation: 'Verify site reputation before providing sensitive data',
|
|
381
|
+
});
|
|
382
|
+
riskScore += trustLevel === 'unknown' ? 30 : 15;
|
|
383
|
+
}
|
|
384
|
+
|
|
385
|
+
// Schema field sensitivity check
|
|
386
|
+
if (schema && schema.actions) {
|
|
387
|
+
for (const action of schema.actions) {
|
|
388
|
+
if (!Array.isArray(action.fields)) continue;
|
|
389
|
+
for (const field of action.fields) {
|
|
390
|
+
const name = (field.name || field.label || '').toLowerCase();
|
|
391
|
+
if (/password|credit.?card|cvv|ssn|social.?security/i.test(name)) {
|
|
392
|
+
risks.push({
|
|
393
|
+
category: 'data_sensitivity',
|
|
394
|
+
severity: 'high',
|
|
395
|
+
description: `Sensitive field detected: ${field.name || field.label}`,
|
|
396
|
+
mitigation: 'Ensure HTTPS and validate site certificate',
|
|
397
|
+
});
|
|
398
|
+
riskScore += 25;
|
|
399
|
+
} else if (/email|phone|address|zip|birth/i.test(name)) {
|
|
400
|
+
risks.push({
|
|
401
|
+
category: 'data_sensitivity',
|
|
402
|
+
severity: 'medium',
|
|
403
|
+
description: `PII field detected: ${field.name || field.label}`,
|
|
404
|
+
mitigation: 'Review privacy policy before sharing',
|
|
405
|
+
});
|
|
406
|
+
riskScore += 10;
|
|
407
|
+
}
|
|
408
|
+
}
|
|
409
|
+
}
|
|
410
|
+
}
|
|
411
|
+
|
|
412
|
+
// URL safety
|
|
413
|
+
if (context.url) {
|
|
414
|
+
const urlLower = context.url.toLowerCase();
|
|
415
|
+
if (!urlLower.startsWith('https://')) {
|
|
416
|
+
risks.push({
|
|
417
|
+
category: 'connection_security',
|
|
418
|
+
severity: 'high',
|
|
419
|
+
description: 'Connection is not encrypted (no HTTPS)',
|
|
420
|
+
mitigation: 'Avoid entering sensitive data on insecure connections',
|
|
421
|
+
});
|
|
422
|
+
riskScore += 30;
|
|
423
|
+
}
|
|
424
|
+
}
|
|
425
|
+
|
|
426
|
+
// Price anomaly check
|
|
427
|
+
if (priorOutputs.negotiate) {
|
|
428
|
+
const neg = priorOutputs.negotiate;
|
|
429
|
+
if (neg.originalPrice && neg.marketEstimate) {
|
|
430
|
+
const priceDelta = Math.abs(neg.originalPrice - neg.marketEstimate.estimatedFairValue) / neg.originalPrice;
|
|
431
|
+
if (priceDelta > 0.4) {
|
|
432
|
+
risks.push({
|
|
433
|
+
category: 'price_anomaly',
|
|
434
|
+
severity: 'medium',
|
|
435
|
+
description: `Price deviates ${Math.round(priceDelta * 100)}% from estimated fair value`,
|
|
436
|
+
mitigation: 'Cross-reference price with other sources',
|
|
437
|
+
});
|
|
438
|
+
riskScore += 15;
|
|
439
|
+
}
|
|
440
|
+
}
|
|
441
|
+
}
|
|
442
|
+
|
|
443
|
+
riskScore = Math.min(100, riskScore);
|
|
444
|
+
const verdict = riskScore > 50 ? 'block' : riskScore > 25 ? 'caution' : 'safe';
|
|
445
|
+
|
|
446
|
+
return {
|
|
447
|
+
riskScore,
|
|
448
|
+
verdict,
|
|
449
|
+
risks,
|
|
450
|
+
riskCount: risks.length,
|
|
451
|
+
trustLevel,
|
|
452
|
+
recommendation: verdict === 'block'
|
|
453
|
+
? 'Do not proceed — significant risks detected'
|
|
454
|
+
: verdict === 'caution'
|
|
455
|
+
? 'Proceed with caution — review risks'
|
|
456
|
+
: 'Safe to proceed',
|
|
457
|
+
};
|
|
458
|
+
},
|
|
459
|
+
},
|
|
460
|
+
};
|
|
461
|
+
|
|
462
|
+
// ─── Synthesis Engine ────────────────────────────────────────────────
|
|
463
|
+
|
|
464
|
+
function _synthesize(phaseOutputs, context) {
|
|
465
|
+
const synthesis = {
|
|
466
|
+
summary: {},
|
|
467
|
+
recommendation: 'proceed',
|
|
468
|
+
confidence: 0,
|
|
469
|
+
factors: [],
|
|
470
|
+
};
|
|
471
|
+
|
|
472
|
+
// Merge research
|
|
473
|
+
if (phaseOutputs.research) {
|
|
474
|
+
synthesis.summary.dataQuality = phaseOutputs.research.dataQuality;
|
|
475
|
+
synthesis.summary.sourcesFound = phaseOutputs.research.sourcesCount || 0;
|
|
476
|
+
synthesis.summary.findingsCount = phaseOutputs.research.findingsCount || 0;
|
|
477
|
+
}
|
|
478
|
+
|
|
479
|
+
// Merge analysis
|
|
480
|
+
if (phaseOutputs.analyze) {
|
|
481
|
+
const analysis = phaseOutputs.analyze;
|
|
482
|
+
synthesis.summary.topPick = analysis.topPick?.item || null;
|
|
483
|
+
synthesis.summary.topScore = analysis.topPick?.score || 0;
|
|
484
|
+
synthesis.summary.itemsEvaluated = analysis.itemsEvaluated || 0;
|
|
485
|
+
synthesis.summary.preferencesApplied = analysis.preferencesApplied || false;
|
|
486
|
+
synthesis.factors.push({
|
|
487
|
+
factor: 'analysis',
|
|
488
|
+
impact: analysis.topPick?.score > 0.7 ? 'positive' : 'neutral',
|
|
489
|
+
detail: `Top pick scored ${analysis.topPick?.score || 0}`,
|
|
490
|
+
});
|
|
491
|
+
}
|
|
492
|
+
|
|
493
|
+
// Merge negotiation
|
|
494
|
+
if (phaseOutputs.negotiate) {
|
|
495
|
+
const neg = phaseOutputs.negotiate;
|
|
496
|
+
synthesis.summary.originalPrice = neg.originalPrice;
|
|
497
|
+
synthesis.summary.targetPrice = neg.targetPrice;
|
|
498
|
+
synthesis.summary.maxSavings = neg.maxPotentialSavings;
|
|
499
|
+
synthesis.summary.withinBudget = neg.withinBudget;
|
|
500
|
+
synthesis.summary.tacticsAvailable = neg.tactics?.length || 0;
|
|
501
|
+
synthesis.factors.push({
|
|
502
|
+
factor: 'negotiation',
|
|
503
|
+
impact: neg.recommendation === 'negotiate' ? 'opportunity' : neg.recommendation === 'proceed' ? 'positive' : 'negative',
|
|
504
|
+
detail: `${neg.recommendation} — potential savings $${neg.maxPotentialSavings || 0}`,
|
|
505
|
+
});
|
|
506
|
+
}
|
|
507
|
+
|
|
508
|
+
// Merge guardian
|
|
509
|
+
if (phaseOutputs.guard) {
|
|
510
|
+
const guard = phaseOutputs.guard;
|
|
511
|
+
synthesis.summary.riskScore = guard.riskScore;
|
|
512
|
+
synthesis.summary.risks = guard.riskCount;
|
|
513
|
+
synthesis.summary.securityVerdict = guard.verdict;
|
|
514
|
+
synthesis.factors.push({
|
|
515
|
+
factor: 'security',
|
|
516
|
+
impact: guard.verdict === 'safe' ? 'positive' : guard.verdict === 'caution' ? 'neutral' : 'negative',
|
|
517
|
+
detail: `Risk score ${guard.riskScore}/100 — ${guard.verdict}`,
|
|
518
|
+
});
|
|
519
|
+
|
|
520
|
+
// Guardian can override recommendation
|
|
521
|
+
if (guard.verdict === 'block') {
|
|
522
|
+
synthesis.recommendation = 'block';
|
|
523
|
+
}
|
|
524
|
+
}
|
|
525
|
+
|
|
526
|
+
// Confidence: average of positive/neutral factor count ratio
|
|
527
|
+
const pos = synthesis.factors.filter((f) => f.impact === 'positive' || f.impact === 'opportunity').length;
|
|
528
|
+
synthesis.confidence = synthesis.factors.length > 0
|
|
529
|
+
? Math.round((pos / synthesis.factors.length) * 1000) / 1000
|
|
530
|
+
: 0.5;
|
|
531
|
+
|
|
532
|
+
if (synthesis.recommendation !== 'block') {
|
|
533
|
+
synthesis.recommendation = synthesis.confidence >= 0.5 ? 'proceed' : 'reconsider';
|
|
534
|
+
}
|
|
535
|
+
|
|
536
|
+
return synthesis;
|
|
537
|
+
}
|
|
538
|
+
|
|
539
|
+
// ─── Phase To Role Mapping ───────────────────────────────────────────
|
|
540
|
+
|
|
541
|
+
const PHASE_ROLE_MAP = {
|
|
542
|
+
analyze: 'analyst',
|
|
543
|
+
research: 'researcher',
|
|
544
|
+
negotiate: 'negotiator',
|
|
545
|
+
guard: 'guardian',
|
|
546
|
+
synthesize: null, // Handled by _synthesize
|
|
547
|
+
};
|
|
548
|
+
|
|
549
|
+
// ─── Orchestration ───────────────────────────────────────────────────
|
|
550
|
+
|
|
551
|
+
/**
|
|
552
|
+
* Execute a full symphony composition.
|
|
553
|
+
*
|
|
554
|
+
* @param {string} siteId - Site identifier
|
|
555
|
+
* @param {string} templateName - Template to use
|
|
556
|
+
* @param {object} inputData - User-provided context (cloned to prevent mutation)
|
|
557
|
+
* @param {object} [schema] - Site WAB schema
|
|
558
|
+
* @returns {{ compositionId, status, result, phaseLogs, durationMs }}
|
|
559
|
+
*/
|
|
560
|
+
function perform(siteId, templateName, inputData = {}, schema = null) {
|
|
561
|
+
const template = TEMPLATES[templateName];
|
|
562
|
+
if (!template) {
|
|
563
|
+
throw new Error(`Unknown template: ${templateName}. Available: ${Object.keys(TEMPLATES).join(', ')}`);
|
|
564
|
+
}
|
|
565
|
+
|
|
566
|
+
const compositionId = crypto.randomUUID();
|
|
567
|
+
const startTime = Date.now();
|
|
568
|
+
|
|
569
|
+
// Clone inputData to prevent mutation of caller's object
|
|
570
|
+
const context = JSON.parse(JSON.stringify(inputData));
|
|
571
|
+
context.siteId = siteId;
|
|
572
|
+
|
|
573
|
+
stmts.insertComposition.run(
|
|
574
|
+
compositionId, siteId, templateName,
|
|
575
|
+
JSON.stringify(context), 'running',
|
|
576
|
+
template.phases[0], template.roles.length
|
|
577
|
+
);
|
|
578
|
+
|
|
579
|
+
const phaseOutputs = {};
|
|
580
|
+
const phaseLogs = [];
|
|
581
|
+
const completedPhases = [];
|
|
582
|
+
|
|
583
|
+
try {
|
|
584
|
+
for (const phase of template.phases) {
|
|
585
|
+
const phaseStart = Date.now();
|
|
586
|
+
|
|
587
|
+
stmts.updatePhase.run(phase, JSON.stringify(completedPhases), compositionId);
|
|
588
|
+
|
|
589
|
+
let output;
|
|
590
|
+
if (phase === 'synthesize') {
|
|
591
|
+
output = _synthesize(phaseOutputs, context);
|
|
592
|
+
} else {
|
|
593
|
+
const roleName = PHASE_ROLE_MAP[phase];
|
|
594
|
+
const engine = ROLE_ENGINES[roleName];
|
|
595
|
+
if (!engine) {
|
|
596
|
+
output = { skipped: true, reason: `No engine for role: ${roleName}` };
|
|
597
|
+
} else {
|
|
598
|
+
output = engine.execute(schema, context, phaseOutputs);
|
|
599
|
+
}
|
|
600
|
+
}
|
|
601
|
+
|
|
602
|
+
phaseOutputs[phase] = output;
|
|
603
|
+
completedPhases.push(phase);
|
|
604
|
+
|
|
605
|
+
const phaseDuration = Date.now() - phaseStart;
|
|
606
|
+
const logId = crypto.randomUUID();
|
|
607
|
+
stmts.insertPhaseLog.run(
|
|
608
|
+
logId, compositionId, phase, PHASE_ROLE_MAP[phase] || 'orchestrator',
|
|
609
|
+
JSON.stringify(phase === 'synthesize' ? {} : context),
|
|
610
|
+
JSON.stringify(output), phaseDuration
|
|
611
|
+
);
|
|
612
|
+
phaseLogs.push({ phase, role: PHASE_ROLE_MAP[phase] || 'orchestrator', output, durationMs: phaseDuration });
|
|
613
|
+
}
|
|
614
|
+
|
|
615
|
+
const durationMs = Date.now() - startTime;
|
|
616
|
+
const finalResult = phaseOutputs.synthesize || phaseOutputs[completedPhases[completedPhases.length - 1]];
|
|
617
|
+
|
|
618
|
+
stmts.updateComposition.run(
|
|
619
|
+
'completed', JSON.stringify(completedPhases), null,
|
|
620
|
+
JSON.stringify(finalResult), null, durationMs, compositionId
|
|
621
|
+
);
|
|
622
|
+
|
|
623
|
+
// Record decision to learning engine for future improvements
|
|
624
|
+
_recordToLearning(siteId, templateName, context, finalResult);
|
|
625
|
+
|
|
626
|
+
return { compositionId, status: 'completed', result: finalResult, phaseLogs, durationMs };
|
|
627
|
+
|
|
628
|
+
} catch (err) {
|
|
629
|
+
const durationMs = Date.now() - startTime;
|
|
630
|
+
stmts.updateComposition.run(
|
|
631
|
+
'failed', JSON.stringify(completedPhases), null,
|
|
632
|
+
null, err.message, durationMs, compositionId
|
|
633
|
+
);
|
|
634
|
+
return { compositionId, status: 'failed', error: err.message, phaseLogs, durationMs };
|
|
635
|
+
}
|
|
636
|
+
}
|
|
637
|
+
|
|
638
|
+
/**
|
|
639
|
+
* Record composition result to the learning engine so future runs improve.
|
|
640
|
+
*/
|
|
641
|
+
function _recordToLearning(siteId, templateName, context, result) {
|
|
642
|
+
try {
|
|
643
|
+
const learning = require('./agent-learning');
|
|
644
|
+
const domain = context.domain || templateName;
|
|
645
|
+
const action = result?.recommendation || 'unknown';
|
|
646
|
+
|
|
647
|
+
learning.recordDecision(siteId, 'symphony', domain, action, {
|
|
648
|
+
template: templateName,
|
|
649
|
+
confidence: result?.confidence,
|
|
650
|
+
riskScore: result?.summary?.riskScore,
|
|
651
|
+
topScore: result?.summary?.topScore,
|
|
652
|
+
});
|
|
653
|
+
} catch (_) {
|
|
654
|
+
// Learning engine unavailable — silently continue
|
|
655
|
+
}
|
|
656
|
+
}
|
|
657
|
+
|
|
658
|
+
// ─── Query API ───────────────────────────────────────────────────────
|
|
659
|
+
|
|
660
|
+
function getComposition(id) {
|
|
661
|
+
const row = stmts.getComposition.get(id);
|
|
662
|
+
if (!row) return null;
|
|
663
|
+
return _deserializeComposition(row);
|
|
664
|
+
}
|
|
665
|
+
|
|
666
|
+
function getCompositions(siteId, limit = 20) {
|
|
667
|
+
return stmts.getCompositions.all(siteId, limit).map(_deserializeComposition);
|
|
668
|
+
}
|
|
669
|
+
|
|
670
|
+
function getCompositionsByTemplate(siteId, template, limit = 10) {
|
|
671
|
+
return stmts.getRecentByTemplate.all(siteId, template, limit).map(_deserializeComposition);
|
|
672
|
+
}
|
|
673
|
+
|
|
674
|
+
function getPhaseLogs(compositionId) {
|
|
675
|
+
const rows = stmts.getPhaseLogs.all(compositionId);
|
|
676
|
+
return rows.map((r) => ({
|
|
677
|
+
...r,
|
|
678
|
+
input: JSON.parse(r.input || '{}'),
|
|
679
|
+
output: JSON.parse(r.output || '{}'),
|
|
680
|
+
}));
|
|
681
|
+
}
|
|
682
|
+
|
|
683
|
+
function getTemplates() {
|
|
684
|
+
return TEMPLATES;
|
|
685
|
+
}
|
|
686
|
+
|
|
687
|
+
function getStats(siteId) {
|
|
688
|
+
const row = stmts.getStats.get(siteId);
|
|
689
|
+
return {
|
|
690
|
+
total: row.total || 0,
|
|
691
|
+
completed: row.completed || 0,
|
|
692
|
+
failed: row.failed || 0,
|
|
693
|
+
successRate: row.total > 0 ? Math.round(((row.completed || 0) / row.total) * 1000) / 1000 : 0,
|
|
694
|
+
avgDuration: row.avg_duration ? Math.round(row.avg_duration) : 0,
|
|
695
|
+
templatesUsed: row.templates_used || 0,
|
|
696
|
+
};
|
|
697
|
+
}
|
|
698
|
+
|
|
699
|
+
function _deserializeComposition(row) {
|
|
700
|
+
return {
|
|
701
|
+
...row,
|
|
702
|
+
input_data: JSON.parse(row.input_data || '{}'),
|
|
703
|
+
phases_completed: JSON.parse(row.phases_completed || '[]'),
|
|
704
|
+
result: row.result ? JSON.parse(row.result) : null,
|
|
705
|
+
};
|
|
706
|
+
}
|
|
707
|
+
|
|
708
|
+
module.exports = {
|
|
709
|
+
perform, getComposition, getCompositions, getCompositionsByTemplate,
|
|
710
|
+
getPhaseLogs, getTemplates, getStats,
|
|
711
|
+
};
|