4 commits

Author	SHA1	Message	Date
Light1YT	f12c03588d	fix(llm): close §19 redaction regex gaps for bare phone / CAPS name / bare SNILS (#1207) ... `_PHONE_RE` требовал префикс +7/8 + хотя бы один разделитель → copy-paste форма «79221234567»/«89221234567» (самая частая) уходила в OpenAI как есть. `_FULLNAME_RE` требовал строчные после первой буквы → стандарт ЕГРН/паспортных выписок «ИВАНОВ ИВАН ИВАНОВИЧ» не матчил. СНИЛС без разделителей не покрывался вообще (`_SNILS_RE` ждёт формат «NNN-NNN-NNN NN»). Для chat-пути scrub — единственный барьер перед OpenAI (SafePayload.text без allowlist'а), при llm_enabled=True PII покидает РФ (нарушение §19/152-ФЗ). Patch: - _PHONE_BARE_RE: (?<!\d)[78]\d{10}(?!\d) — 11-значные с префиксом 7/8. - _SNILS_BARE_RE: (?<!\d)\d{11}(?!\d) — любые 11-значные без разделителей. - _FULLNAME_RE: альтернатива в каждом слове — Titlecase | CAPS-2+. - Конфликт phone-bare vs SNILS-bare разрешён порядком в _PII_PATTERNS: phone раньше SNILS (7/8-префикс семантически точнее). - INN (ровно 10/12) с SNILS-bare не пересекается по длине. 8 новых юнит-тестов покрывают все три дыры + конфликт-резолюцию. 24/24 redaction тестов + 55/55 LLM-suite зелёные. Closes #1207	2026-06-13 09:56:58 +05:00
Light1YT	645b3c14a3	fix(chat): clean квартирография rendering in chat_system prompt (v2, #957) ... Live chat rendered the recommended unit-mix as a garbled rank-hyphen-type list ("2-1-к", "3-2-к" = "rank 2: 1-к"). Add rule 6 to chat_system@v2: list квартирография/segments by clean TYPE (студия / 1-к / 2-к / 3-к / 80+ м²) + share %, no ordinal-number-hyphen-type concatenation. Bumped prompt version 1->2 (versioned-prompt convention). Test locks v2 + the rule. Refs #957	2026-06-09 15:07:14 +05:00
Light1YT	fceaaf9a2c	feat(chat): LLM tool-loop + §19 redaction wiring for #957 (Step 2+3) ... Add the LLM prose-composition path for the parcel-forecast chat, layered over the deterministic Step-1 fallback which stays the safety net. - chat/tools.py: 5 read-only section tools (exec_summary, product_recommendation, forecast, risks, scenarios) — pure slices of the loaded report dict, no DB/ recompute, graceful on missing sections. market_now (raw analyze blob) and meta are deliberately NOT exposed -> highest-PII data cannot reach the LLM. - chat/safe_payload.py: the §19 gate — single place that builds the outbound SafePayload from a section-aggregate allowlist; honors is_confidential hard-block. - chat/orchestrator.py: manual tool-call loop with call-cap/termination, real grounded_in provenance; any LLMResult.ok=False (disabled/timeout/rate_limited/ redaction_refused/call_cap/provider_error/empty) degrades to the deterministic answer. - llm/prompts.py: versioned chat_system@v1 — answer only from sections, never fabricate numbers, advisory tone, decline out-of-scope. - api/v1/chat.py: branch on settings.llm_enabled; sync complete bridged via run_in_threadpool. Default-off -> deterministic path, no provider built. - Tests: fake provider only (no network), planted-secret redaction-boundary + per-reason fallback + call-cap + numbers-from-report coverage. Refs #957	2026-06-08 17:45:01 +05:00
Light1YT	4af7ba5a40	feat(llm): foundational LLM infra package with §19 redaction + deterministic fallback (#960) ... Optional external-OpenAI layer over the deterministic forecasting engine. Gated by llm_enabled (default False) so prod makes no network calls until deliberately enabled. Allowlist-first SafePayload contract + is_confidential hard-block + RU-PII regex scrub (mandatory on the external path). Abstract LLMProvider seam (is_external) for a future RU-hosted provider. Sync httpx core (Celery-friendly); tool/function-calling pass-through; timeout + bounded 429/5xx retry + per-request call cap, all degrading to fallback. Raw httpx (no openai SDK -> no pyproject/lock drift). 47 tests, ruff + mypy clean. Refs #960	2026-06-08 15:44:16 +05:00