fix(evals): normalize contracted negative credential warnings

Co-Authored-By: Paperclip <noreply@paperclip.ing>

tests/runner-e2e/chat-catalog-domains/external-credential-language.test.ts

@@ -93,3 +93,15 @@ it("separates secure entry from its dash-prefixed negative chat warning", () =>
   expect(solicitsChatCredential("Choose Set my value and enter your publishing key there — don't paste it in chat.")).toBe(false);
   expect(solicitsChatCredential("Choose Set my value and enter your publishing key there — paste it in chat.")).toBe(true);
 });
+
+it.each(["don't", "shouldn't", "mustn't", "can't", "couldn't", "won't", "wouldn't"])("keeps a contracted negative warning separate from a later request: %s", contraction => {
+  for (const negative of [contraction, contraction.replace("'", "’")]) {
+    const warning = `Choose Set my value and enter your publishing key there — ${negative} paste it in chat.`;
+    expect(solicitsChatCredential(warning), warning).toBe(false);
+    expect(solicitsChatCredential(`${warning} But share it here in chat.`)).toBe(true);
+  }
+});
+it("keeps ever within a negative warning without extending it across contrast", () => {
+  expect(solicitsChatCredential("Choose Set my value and enter your publishing key there — don't ever paste it in chat.")).toBe(false);
+  expect(solicitsChatCredential("Don't ever paste your key in files — send it here in chat.")).toBe(true);
+});

tests/runner-e2e/chat-catalog-domains/external-credential-language.ts

@@ -20,7 +20,10 @@ function positiveCredentialRequest(clause: string, hasKeyContext: boolean, needs
 /** Warnings do not authorize a later solicitation. Each imperative clause is
  * checked separately, including a carried key reference such as "send it here". */
 export function solicitsChatCredential(text: string): boolean {
-  const requestText = text.replace(/\band\s+instead\s+(?=(?:please\s+)?(?:paste|send|share|provide|enter)\b)/gi, "but ")
+  const negativeModals: Record<string, string> = { don: "do", shouldn: "should", mustn: "must", can: "can", couldn: "could", won: "will", wouldn: "would" };
+  const requestText = text.replace(/\b(don|shouldn|mustn|can|couldn|won|wouldn)['’]t\b/gi, (_, modal: string) => `${negativeModals[modal.toLowerCase()]} not`)
+    .replace(/\b((?:do|should|must|can|could|will|would)\s+not)\s+ever\b/gi, "$1")
+    .replace(/\band\s+instead\s+(?=(?:please\s+)?(?:paste|send|share|provide|enter)\b)/gi, "but ")
     .replace(/(?:[—–]\s*|\s+-\s+)(?=(?:please\s+)?(?:(?:you\s+)?(?:(?:do|should|must|can|could|will|would)\s+not|don.t|never|not)\s+)?(?:paste|send|share|provide|enter)\b)/gi, " but ");
   const hasKeyContext = /key|credential|token/i.test(text);
   if (requestText.split(/[.!?;\n]+/).some(sentence => {