fix: add error handling for repair endpoint SafetyFilter

playground/api/app.py

@@ -359,29 +359,43 @@ async def repair(request: Request, file: UploadFile) -> dict[str, Any]:
     issues = run_all_detectors(df, schema=None)
 
     # Propose fixes (heuristic-only, no LLM unless advanced + keyed)
-    with tempfile.TemporaryDirectory() as tmpdir:
-        cache_dir = Path(tmpdir) / "cache"
-        cache_dir.mkdir()
-
-        fixes = propose_fixes(
-            issues,
-            df,
-            schema=None,
-            cache_dir=cache_dir,
-            allow_llm=False,
-            model="gemini-2.0-flash",
-        )
-
-        # Run safety filter on each proposed fix
-        safety = SafetyFilter()
-        context = SafetyContext()
-        accepted_fixes: list[ProposedFix] = []
-        for fix in fixes:
-            result = safety.evaluate(fix, schema=None, context=context)
-            if result.verdict == SafetyVerdict.ALLOW:
-                accepted_fixes.append(fix)
+    try:
+        with tempfile.TemporaryDirectory() as tmpdir:
+            cache_dir = Path(tmpdir) / "cache"
+            cache_dir.mkdir()
+
+            fixes = propose_fixes(
+                issues,
+                df,
+                schema=None,
+                cache_dir=cache_dir,
+                allow_llm=False,
+                model="gemini-2.0-flash",
+            )
 
-        # Generate ephemeral transaction ID
-        txn_id = generate_txn_id()
+            # Run safety filter on each proposed fix
+            try:
+                safety = SafetyFilter()
+                context = SafetyContext()
+                accepted_fixes: list[ProposedFix] = []
+                for fix in fixes:
+                    result = safety.evaluate(fix, schema=None, context=context)
+                    if result.verdict == SafetyVerdict.ALLOW:
+                        accepted_fixes.append(fix)
+            except Exception:
+                # Constitution file may not be at the expected path in Docker;
+                # gracefully skip safety filter and return all fixes.
+                logger.warning("SafetyFilter init failed; returning unfiltered fixes", exc_info=True)
+                accepted_fixes = list(fixes)
+
+            # Generate ephemeral transaction ID
+            txn_id = generate_txn_id()
+
+        return _fixes_to_response(accepted_fixes, txn_id, source_sha256)
+    except Exception:
+        logger.exception("Repair endpoint failed")
+        raise HTTPException(
+            status_code=500,
+            detail={"error": "repair_failed", "message": "An internal error occurred during repair."},
+        )
 
-    return _fixes_to_response(accepted_fixes, txn_id, source_sha256)