""" inference.py — SafeCodeAgent =================================== MANDATORY - Before submitting, ensure the following variables are defined in your environment configuration: API_BASE_URL The API endpoint for the LLM. MODEL_NAME The model identifier to use for inference. HF_TOKEN Your Hugging Face / API key. ENV_URL The environment server URL (default: http://localhost:8000) - Defaults are set only for API_BASE_URL and MODEL_NAME: API_BASE_URL = os.getenv("API_BASE_URL", "https://router.huggingface.co/v1") MODEL_NAME = os.getenv("MODEL_NAME", "meta-llama/Meta-Llama-3.1-8B-Instruct") - The inference script must be named `inference.py` and placed in the root directory of the project - Participants must use OpenAI Client for all LLM calls using above variables STDOUT FORMAT - The script must emit exactly three line types to stdout, in this order: [START] task= env= model= [STEP] step= action= reward=<0.00> done= error= [END] success= steps= score= rewards= """ import asyncio import json import os import re import time from typing import Any, List, Optional from dotenv import load_dotenv from openai import OpenAI from client import SafeCodeAction, SafeCodeEnv load_dotenv() # ── Configuration ───────────────────────────────────────────── API_KEY = os.getenv("GROQ_API_KEY") or os.getenv("API_KEY") API_BASE_URL = os.getenv("API_BASE_URL", "https://api.groq.com/openai/v1") MODEL_NAME = os.getenv("MODEL_NAME", "openai/gpt-oss-20b") ENV_URL = os.getenv("ENV_URL", "http://localhost:8000") BENCHMARK = "safe_code_env" NUM_EPISODES = int(os.getenv("NUM_EPISODES", "4")) MAX_STEPS = int(os.getenv("MAX_AGENT_STEPS", "10")) TEMPERATURE = 0.1 MAX_TOKENS = 1500 TASK_FOCUS_FILES = { "task_1": ["src/api/health.py", "tests/test_health_api.py"], "task_2": ["src/repos/users_repo.py", "tests/test_users_repo.py"], "task_3": ["src/services/config_service.py", "tests/test_config_service.py"], "task_4": ["src/security/command_guard.py", "tests/test_command_guard.py"], } SYSTEM_PROMPT = """You are a security-conscious Python engineer fixing bugs in a codebase. You will receive the content of a broken file and the tests it must pass. Return the COMPLETE fixed Python file. Nothing else. RULES: - Return only raw Python code — no markdown, no explanation, no triple backticks - Keep all imports and function signatures intact - Only change what is needed to fix the bug - Never use hardcoded secrets, eval(), exec(), os.system(), or rm -rf - Never use DROP TABLE, DELETE FROM, or TRUNCATE - For secrets: use os.environ.get() and load_dotenv() - For SQL: use parameterized queries with ? placeholders""" # ── Logging ─────────────────────────────────────────────────── def log_start(task: str, env: str, model: str) -> None: print(f"[START] task={task} env={env} model={model}", flush=True) def log_step(step: int, action: str, reward: float, done: bool, error: Optional[str]) -> None: error_val = error if error else "null" print( f"[STEP] step={step} action={action} reward={reward:.2f} done={str(done).lower()} error={error_val}", flush=True, ) def log_end(success: bool, steps: int, score: float, rewards: List[float]) -> None: rewards_str = ",".join(f"{r:.2f}" for r in rewards) print( f"[END] success={str(success).lower()} steps={steps} score={score:.3f} rewards={rewards_str}", flush=True, ) # ── LLM call ────────────────────────────────────────────────── def get_fixed_code(client: OpenAI, broken_file: str, broken_content: str, test_content: str, task_description: str) -> str: user_message = f"""TASK: {task_description} BROKEN FILE ({broken_file}): {broken_content} TESTS THAT MUST PASS: {test_content} Return the complete fixed Python file only. No explanation. No markdown.""" max_retries = 4 retry_delay = 3 for attempt in range(max_retries): try: response = client.chat.completions.create( model=MODEL_NAME, messages=[ {"role": "system", "content": SYSTEM_PROMPT}, {"role": "user", "content": user_message}, ], max_tokens=MAX_TOKENS, temperature=TEMPERATURE, ) content = (response.choices[0].message.content or "").strip() # Strip markdown fences if model adds them if content.startswith("```"): lines = content.split("\n") lines = [l for l in lines if not l.strip().startswith("```")] content = "\n".join(lines).strip() return content except Exception as exc: if attempt == max_retries - 1: print(f"[DEBUG] LLM failed after {max_retries} attempts: {exc}", flush=True) return "" print(f"[DEBUG] LLM attempt {attempt + 1} failed: {exc}. Retrying in {retry_delay}s...", flush=True) time.sleep(retry_delay) retry_delay *= 2 return "" # ── Episode runner ───────────────────────────────────────────── async def run_episode(env, client: OpenAI, episode_idx: int) -> float: rewards: List[float] = [] steps_taken = 0 score = 0.0 success = False task_id = "unknown" try: # ── Reset — receive broken file + test file directly ── result = await env.reset() obs = result.observation task_id = obs.task_id log_start(task=task_id, env=BENCHMARK, model=MODEL_NAME) # ── Read broken file and test file ──────────────────── # New env sends broken_content and test_content directly. # Fall back to reading files if old env format. broken_file = getattr(obs, "broken_file", TASK_FOCUS_FILES.get(task_id, [""])[0]) broken_content = getattr(obs, "broken_content", "") test_content = getattr(obs, "test_content", "") # If new fields not present, read files manually (old env fallback) if not broken_content and broken_file: focus = TASK_FOCUS_FILES.get(task_id, []) read_result = await env.step(SafeCodeAction( action_type="read_files", paths=focus[:2], path=".", action_intent="Read broken file and tests to understand what needs fixing.", )) steps_taken += 1 read_obs = read_result.observation rewards.append(read_obs.reward) log_step( step=steps_taken, action=f"read_files({','.join(focus[:2])})", reward=read_obs.reward, done=read_obs.done, error=read_obs.error if read_obs.error else None, ) broken_content = read_obs.output test_content = "" # ── Single LLM call to get the fix ──────────────────── fixed_code = get_fixed_code( client, broken_file=broken_file, broken_content=broken_content, test_content=test_content, task_description=obs.task_description, ) if not fixed_code: log_step(steps_taken + 1, "submit_fix(failed)", 0.0, True, "LLM returned empty response") return 0.0 # ── Submit fix ──────────────────────────────────────── steps_taken += 1 action = SafeCodeAction( action_type="write_file", path=broken_file, content=fixed_code, action_intent=f"Write fixed {broken_file} with all bugs resolved.", ) result = await env.step(action) obs = result.observation rewards.append(obs.reward) log_step( step=steps_taken, action=f"write_file({broken_file})", reward=obs.reward, done=obs.done, error=obs.error if obs.error and not obs.success else None, ) # ── Run tests ───────────────────────────────────────── if not obs.done: steps_taken += 1 test_result = await env.step(SafeCodeAction( action_type="run_command", command="pytest -q", action_intent="Run tests to verify the fix is correct and all tests pass.", )) obs = test_result.observation rewards.append(obs.reward) log_step( step=steps_taken, action="run_command(pytest -q)", reward=obs.reward, done=obs.done, error=obs.error if obs.error and not obs.success else None, ) # ── Submit ──────────────────────────────────────────── if not obs.done: steps_taken += 1 submit_result = await env.step(SafeCodeAction( action_type="submit", action_intent="Submit the fixed code after all tests pass.", )) obs = submit_result.observation rewards.append(obs.reward) log_step( step=steps_taken, action="submit()", reward=obs.reward, done=obs.done, error=obs.error if obs.error and not obs.success else None, ) score = rewards[-1] if rewards else 0.0 success = score >= 0.75 except Exception as exc: print(f"[DEBUG] Episode {episode_idx} failed: {exc}", flush=True) finally: log_end(success=success, steps=steps_taken, score=score, rewards=rewards) return score # ── Main ────────────────────────────────────────────────────── async def main() -> None: if not API_KEY: print("[ERROR] No API key found. Set HF_TOKEN in your .env file.", flush=True) return client = OpenAI(base_url=API_BASE_URL, api_key=API_KEY) async with SafeCodeEnv(base_url=ENV_URL) as env: for episode_idx in range(NUM_EPISODES): await run_episode(env, client, episode_idx) time.sleep(1) if __name__ == "__main__": asyncio.run(main())