@hilbras/omninode 0.10.0 → 1.0.0

package/README.md

@@ -18,9 +18,26 @@ existing intelligence; it does not try to become another model.
 
 ## Status
 
-**v0.10.0 — Phase 9: End-to-End Workflow** (see [docs/DEVELOPMENT_PLAN.md](docs/DEVELOPMENT_PLAN.md)
-for the full plan and roadmap). The full loop from §28 works in one command:
-`User → project context → memory → research agents → reports → aggregation → planner → plan → execution → result`.
+**v1.0.0 — Phases 10 + 11: Production Release.** The plan is complete: the
+full loop from §28 runs in one command —
+`User → project context → memory → research agents → reports → aggregation →
+planner → plan → execution → result` — with audit logging, error recovery and
+production hardening (see [docs/DEVELOPMENT_PLAN.md](docs/DEVELOPMENT_PLAN.md)
+for the plan and [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) for the design).
+
+### What's in v1.0
+
+| Capability | Where |
+| --- | --- |
+| Provider abstraction, custom providers, model discovery | `src/providers/`, `src/registry/` |
+| OmniHilbras integration (optional) | `src/providers/omnihilbras/` |
+| CLI agents (stdin/arg/protocol), agent registry | `src/agents/` |
+| Roles, projects, tasks (lifecycle + retry) | `src/roles/`, `src/tasks/` |
+| Pipelines (DAG, parallel, retries, conditions) | `src/pipelines/` |
+| Multi-AI research + report aggregation | `src/reports/` |
+| Planner layer (model + heuristic) | `src/planner/` |
+| Remembera / local memory | `src/memory/` |
+| CLI, configuration, security foundations, docs | `src/cli/`, `src/config/`, `docs/` |
 
 What exists today:
 
@@ -251,18 +268,27 @@ Phases 0–11 are laid out in [docs/DEVELOPMENT_PLAN.md](docs/DEVELOPMENT_PLAN.m
 | v0.3.0 | OmniHilbras Integration (optional, like every provider) |
 | v0.4.0 | Agent System |
 | v0.5.0 | Roles & Tasks |
-| v0.7.0 | Multi-AI Reports |
+| v0.6.0 | Pipeline Engine |
 | v0.7.0 | Multi-AI Reports |
 | v0.8.0 | Remembera / Memory |
-| v0.8.0 | Remembera / Memory |
 | v0.9.0 | Planner |
-| **v0.10.0** | **End-to-End Workflow (current)** |
-| v1.0.0 | Production Release |
+| v0.10.0 | End-to-End Workflow (current) |
+| **v1.0.0** | **Production Release — Phases 10 + 11 (current, final)** |
 
 Core architectural rule: OmniNode must run successfully with **zero Hilbras
 dependencies**. OmniHilbras and Remembera make it more powerful, but neither is
 required for the core engine.
 
+## Documentation
+
+- [Development plan](docs/DEVELOPMENT_PLAN.md) — the full 12-phase roadmap
+- [Architecture](docs/ARCHITECTURE.md) — module map, workflow, local state
+- [Security model](docs/SECURITY.md) — secrets, process execution, env isolation, audit log
+- [Example project](examples/demo/) — a runnable end-to-end demo (`./demo.sh`)
+
+Prefer a container? `docker build -t omninode .` then
+`docker run --rm -v "$PWD:/work" -w /work omninode run my-pipeline "audit the repo"`.
+
 ## Install
 
 ```bash

package/dist/cli/index.js

@@ -6,7 +6,7 @@ import { realpathSync } from "fs";
 import { Command } from "commander";
 
 // src/version.ts
-var OMNINODE_VERSION = "0.10.0";
+var OMNINODE_VERSION = "1.0.0";
 
 // src/errors/index.ts
 var OmniNodeError = class extends Error {
@@ -87,6 +87,7 @@ var agentConfigSchema = z.object({
   env: z.record(z.string()).optional(),
   input_mode: z.enum(["stdin", "arg", "protocol"]).default("stdin"),
   timeout_ms: z.number().int().positive().optional(),
+  inherit_env: z.boolean().optional(),
   metadata: z.record(z.unknown()).optional()
 }).strict();
 var roleConfigSchema = z.object({
@@ -260,6 +261,7 @@ function toAgentConfig(raw) {
     env: raw.env,
     inputMode: raw.input_mode,
     timeoutMs: raw.timeout_ms,
+    inheritEnv: raw.inherit_env,
     metadata: raw.metadata
   };
 }
@@ -897,6 +899,17 @@ function registerModelsCommand(program) {
 import { spawn } from "child_process";
 var DEFAULT_TIMEOUT_MS2 = 6e5;
 var KILL_GRACE_MS = 5e3;
+function buildChildEnv(config) {
+  const configured = config.env ?? {};
+  if (config.inheritEnv !== false) {
+    return { ...process.env, ...configured };
+  }
+  return {
+    PATH: process.env.PATH ?? "",
+    HOME: process.env.HOME ?? "",
+    ...configured
+  };
+}
 function composeTaskText(input) {
   const sections = [`# Objective
 ${input.objective}`];
@@ -963,7 +976,7 @@ var ProcessAgent = class {
         [...this.config.args ?? [], ...mode === "arg" ? [composeTaskText(input)] : []],
         {
           cwd: this.config.cwd,
-          env: { ...process.env, ...this.config.env },
+          env: buildChildEnv(this.config),
           stdio: ["pipe", "pipe", "pipe"]
         }
       );
@@ -1400,6 +1413,7 @@ var TaskEngine = class {
     };
     await this.options.store.save(task);
     this.log.info(`Created task ${task.id}.`);
+    await this.audit("task.created", task.id, { objective: task.objective, project: task.project });
     return task;
   }
   async queue(id) {
@@ -1491,6 +1505,7 @@ var TaskEngine = class {
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
     await this.options.store.save(reset);
+    await this.audit("task.retry", id, { from: task.status });
     this.log.info(`Task ${id} reset for retry.`);
     return reset;
   }
@@ -1519,16 +1534,68 @@ var TaskEngine = class {
       ...extra.result !== void 0 ? { result: { ...task.result, ...extra.result } } : {}
     };
     await this.options.store.save(updated);
+    await this.audit(`task.${to === "queued" ? "queued" : to}`, updated.id, {
+      from: task.status
+    });
     return updated;
   }
+  async audit(action, id, detail) {
+    await this.options.audit?.record({
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      action,
+      id,
+      ...detail !== void 0 ? { detail } : {}
+    });
+  }
 };
 function generateTaskId() {
   return `task-${Date.now().toString(36)}-${randomBytes(3).toString("hex")}`;
 }
 
-// src/memory/local.ts
-import { mkdir as mkdir2, readFile as readFile2, rename as rename2, writeFile as writeFile2 } from "fs/promises";
+// src/audit/index.ts
+import { appendFile, mkdir as mkdir2 } from "fs/promises";
 import { dirname as dirname2 } from "path";
+var FileAuditLog = class {
+  filePath;
+  log;
+  constructor(directory = `${process.cwd()}/.omninode`, log = logger) {
+    this.filePath = `${directory}/audit.jsonl`;
+    this.log = log.child({ component: "audit" });
+  }
+  async record(event) {
+    try {
+      await mkdir2(dirname2(this.filePath), { recursive: true });
+      await appendFile(this.filePath, `${JSON.stringify(event)}
+`, "utf8");
+    } catch (error) {
+      this.log.warn(
+        `Audit write failed: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+  }
+  /** Recent events, oldest first; used by the CLI. */
+  async recent(limit = 20) {
+    const { readFile: readFile6 } = await import("fs/promises");
+    let raw;
+    try {
+      raw = await readFile6(this.filePath, "utf8");
+    } catch {
+      return [];
+    }
+    const events = raw.split("\n").filter((line) => line.length > 0).map((line) => {
+      try {
+        return JSON.parse(line);
+      } catch {
+        return void 0;
+      }
+    }).filter((event) => event !== void 0);
+    return events.slice(-limit);
+  }
+};
+
+// src/memory/local.ts
+import { mkdir as mkdir3, readFile as readFile2, rename as rename2, writeFile as writeFile2 } from "fs/promises";
+import { dirname as dirname3 } from "path";
 var STOPWORDS = /* @__PURE__ */ new Set([
   "the",
   "and",
@@ -1641,7 +1708,7 @@ var LocalMemoryProvider = class {
   }
   async saveAll(entries) {
     const tmp = `${this.filePath}.tmp`;
-    await mkdir2(dirname2(this.filePath), { recursive: true });
+    await mkdir3(dirname3(this.filePath), { recursive: true });
     await writeFile2(tmp, `${JSON.stringify(entries, null, 2)}
 `, "utf8");
     await rename2(tmp, this.filePath);
@@ -1848,6 +1915,7 @@ function createTaskEngine(config, log = logger, directory) {
     roles,
     store: new FileTaskStore(directory),
     ...config.project.memory !== void 0 ? { memory: new MemoryService(createMemoryProvider(config.project.memory), log) } : {},
+    audit: new FileAuditLog(),
     log
   });
 }
@@ -2160,8 +2228,8 @@ var ReportService = class {
 };
 
 // src/reports/store.ts
-import { mkdir as mkdir3, readFile as readFile3, rename as rename3, writeFile as writeFile3 } from "fs/promises";
-import { dirname as dirname3 } from "path";
+import { mkdir as mkdir4, readFile as readFile3, rename as rename3, writeFile as writeFile3 } from "fs/promises";
+import { dirname as dirname4 } from "path";
 var FileReportStore = class {
   filePath;
   queue = Promise.resolve();
@@ -2234,7 +2302,7 @@ var FileReportStore = class {
   }
   async write(entries) {
     const tmp = `${this.filePath}.tmp`;
-    await mkdir3(dirname3(this.filePath), { recursive: true });
+    await mkdir4(dirname4(this.filePath), { recursive: true });
     await writeFile3(tmp, `${JSON.stringify(entries, null, 2)}
 `, "utf8");
     await rename3(tmp, this.filePath);
@@ -2676,6 +2744,12 @@ var PipelineEngine = class {
     };
     await this.options.store.save(run2);
     this.log.info(`Running pipeline ${def.id} as ${run2.id}.`);
+    await this.options.audit?.record({
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      action: "pipeline.run.started",
+      id: run2.id,
+      detail: { pipeline: def.id, objective }
+    });
     const deps = this.effectiveDependencies(def);
     const outcomes = /* @__PURE__ */ new Map();
     const pending = new Set(def.steps.map((s) => s.id));
@@ -2766,6 +2840,12 @@ ${contribution}`);
     };
     await this.options.store.save(finished);
     this.log.info(`Pipeline ${def.id} finished: ${finalStatus}.`);
+    await this.options.audit?.record({
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      action: "pipeline.run.finished",
+      id: run2.id,
+      detail: { pipeline: def.id, status: finalStatus }
+    });
     return finished;
   }
   async get(runId) {
@@ -2910,6 +2990,12 @@ ${contribution}`);
       };
     }
     await this.options.plans?.save(plan);
+    await this.options.audit?.record({
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      action: "plan.generated",
+      id: plan.id,
+      detail: { generatedBy: plan.generatedBy, steps: plan.steps.length }
+    });
     return {
       status: "completed",
       summary: plan.summary,
@@ -2967,8 +3053,8 @@ function createDefaultChatFn(providers) {
 }
 
 // src/pipelines/store.ts
-import { mkdir as mkdir4, readFile as readFile4, rename as rename4, writeFile as writeFile4 } from "fs/promises";
-import { dirname as dirname4 } from "path";
+import { mkdir as mkdir5, readFile as readFile4, rename as rename4, writeFile as writeFile4 } from "fs/promises";
+import { dirname as dirname5 } from "path";
 var FilePipelineRunStore = class {
   filePath;
   queue = Promise.resolve();
@@ -3015,7 +3101,7 @@ var FilePipelineRunStore = class {
   }
   async write(runs) {
     const tmp = `${this.filePath}.tmp`;
-    await mkdir4(dirname4(this.filePath), { recursive: true });
+    await mkdir5(dirname5(this.filePath), { recursive: true });
     await writeFile4(tmp, `${JSON.stringify(runs, null, 2)}
 `, "utf8");
     await rename4(tmp, this.filePath);
@@ -3023,8 +3109,8 @@ var FilePipelineRunStore = class {
 };
 
 // src/planner/store.ts
-import { mkdir as mkdir5, readFile as readFile5, rename as rename5, writeFile as writeFile5 } from "fs/promises";
-import { dirname as dirname5 } from "path";
+import { mkdir as mkdir6, readFile as readFile5, rename as rename5, writeFile as writeFile5 } from "fs/promises";
+import { dirname as dirname6 } from "path";
 var FilePlanStore = class {
   filePath;
   queue = Promise.resolve();
@@ -3071,7 +3157,7 @@ var FilePlanStore = class {
   }
   async write(plans) {
     const tmp = `${this.filePath}.tmp`;
-    await mkdir5(dirname5(this.filePath), { recursive: true });
+    await mkdir6(dirname6(this.filePath), { recursive: true });
     await writeFile5(tmp, `${JSON.stringify(plans, null, 2)}
 `, "utf8");
     await rename5(tmp, this.filePath);
@@ -3109,6 +3195,7 @@ function buildPipelineEngine(config, log = logger) {
     roles,
     store: new FileTaskStore(),
     ...config.project.memory !== void 0 ? { memory: new MemoryService(createMemoryProvider(config.project.memory), log) } : {},
+    audit: new FileAuditLog(),
     log
   });
   return new PipelineEngine({
@@ -3121,6 +3208,7 @@ function buildPipelineEngine(config, log = logger) {
     ...config.project.planner !== void 0 ? { planner: buildPlanner(config.project.planner, chat, log) } : {},
     plans: new FilePlanStore(),
     reports: new ReportService(new FileReportStore(), log),
+    audit: new FileAuditLog(),
     log
   });
 }
@@ -3344,6 +3432,14 @@ function registerPlanCommands(program) {
 }
 
 // src/cli/commands/status.ts
+function groupBy(items, key) {
+  const counts = {};
+  for (const item of items) {
+    const k = key(item);
+    counts[k] = (counts[k] ?? 0) + 1;
+  }
+  return counts;
+}
 function countBy(items, key) {
   const counts = /* @__PURE__ */ new Map();
   for (const item of items) {
@@ -3354,41 +3450,77 @@ function countBy(items, key) {
   return `${items.length} (${[...counts.entries()].map(([k, v]) => `${k} ${v}`).join(", ")})`;
 }
 function registerStatusCommand(program) {
-  program.command("status").description("Show the project's OmniNode state overview (config, tasks, runs, reports, plans, memory).").action(async () => {
+  program.command("status").description("Show the project's OmniNode state overview (config, tasks, runs, reports, plans, memory).").option("--json", "Emit machine-readable JSON (for scripts and CI).").action(async (options) => {
     const config = loadConfig();
-    console.log(`OmniNode v${OMNINODE_VERSION} \u2014 project "${config.project.name}"`);
-    console.log(
-      `providers: ${config.project.providers.length > 0 ? config.project.providers.map((p) => p.name).join(", ") : "none"}`
-    );
-    console.log(
-      `agents:    ${config.project.agents.length > 0 ? config.project.agents.map((a) => a.name).join(", ") : "none"}`
-    );
-    console.log(
-      `roles:     ${config.project.roles.length > 0 ? config.project.roles.map((r) => r.id).join(", ") : "none"}`
-    );
-    console.log(
-      `pipelines: ${config.project.pipelines.length > 0 ? config.project.pipelines.map((p) => p.id).join(", ") : "none"}`
-    );
     const tasks = await new FileTaskStore().list();
-    console.log(`tasks:     ${countBy(tasks, (t) => t.status)}`);
     const runs = await new FilePipelineRunStore().list();
-    console.log(`runs:      ${countBy(runs, (r) => r.status)}`);
     const reportStore = new FileReportStore();
     const reports = await reportStore.listReports();
     const combined = await reportStore.listCombined();
-    console.log(`reports:   ${reports.length} raw, ${combined.length} combined`);
     const plans = await new FilePlanStore().list();
-    console.log(`plans:     ${plans.length}`);
+    let memory;
     if (config.project.memory !== void 0) {
-      const memory = new MemoryService(createMemoryProvider(config.project.memory));
-      const entries = await memory.providerRef.query({ limit: 1e4 });
-      console.log(`memory:    ${memory.providerName}, ${entries.length} entr(ies)`);
+      const service2 = new MemoryService(createMemoryProvider(config.project.memory));
+      memory = {
+        provider: service2.providerName,
+        entries: (await service2.providerRef.query({ limit: 1e4 })).length
+      };
+    }
+    if (options.json) {
+      console.log(
+        JSON.stringify(
+          {
+            version: OMNINODE_VERSION,
+            project: config.project.name,
+            providers: config.project.providers.map((p) => p.name),
+            agents: config.project.agents.map((a) => a.name),
+            roles: config.project.roles.map((r) => r.id),
+            pipelines: config.project.pipelines.map((p) => p.id),
+            tasks: { total: tasks.length, byStatus: groupBy(tasks, (t) => t.status) },
+            runs: { total: runs.length, byStatus: groupBy(runs, (r) => r.status) },
+            reports: { raw: reports.length, combined: combined.length },
+            plans: plans.length,
+            ...memory !== void 0 ? { memory } : {}
+          },
+          null,
+          2
+        )
+      );
+      return;
+    }
+    console.log(`OmniNode v${OMNINODE_VERSION} \u2014 project "${config.project.name}"`);
+    console.log(`providers: ${config.project.providers.map((p) => p.name).join(", ") || "none"}`);
+    console.log(`agents:    ${config.project.agents.map((a) => a.name).join(", ") || "none"}`);
+    console.log(`roles:     ${config.project.roles.map((r) => r.id).join(", ") || "none"}`);
+    console.log(`pipelines: ${config.project.pipelines.map((p) => p.id).join(", ") || "none"}`);
+    console.log(`tasks:     ${countBy(tasks, (t) => t.status)}`);
+    console.log(`runs:      ${countBy(runs, (r) => r.status)}`);
+    console.log(`reports:   ${reports.length} raw, ${combined.length} combined`);
+    console.log(`plans:     ${plans.length}`);
+    if (memory) {
+      console.log(`memory:    ${memory.provider}, ${memory.entries} entr(ies)`);
     } else {
       console.log("memory:    not configured (local provider available \u2014 add a `memory:` section)");
     }
   });
 }
 
+// src/cli/commands/audit.ts
+function registerAuditCommand(program) {
+  program.command("audit").description("Show the recent audit log \u2014 task and pipeline lifecycle events (\xA724).").option("-n, --limit <count>", "Number of events to show (default 20).", (value) => Number(value), 20).action(async (options) => {
+    const events = await new FileAuditLog().recent(options.limit);
+    if (events.length === 0) {
+      console.log("No audit events recorded yet.");
+      return;
+    }
+    for (const event of events) {
+      const id = event.id ? ` ${event.id}` : "";
+      const detail = event.detail && Object.keys(event.detail).length > 0 ? ` ${JSON.stringify(event.detail)}` : "";
+      console.log(`${event.at}  ${event.action}${id}${detail}`);
+    }
+  });
+}
+
 // src/cli/index.ts
 function createProgram() {
   const program = new Command();
@@ -3407,6 +3539,7 @@ function createProgram() {
   registerMemoryCommands(program);
   registerPlanCommands(program);
   registerStatusCommand(program);
+  registerAuditCommand(program);
   registerRunAlias(program);
   return program;
 }