@hilbras/omninode 0.9.0 → 1.0.0

package/dist/index.d.ts

@@ -98,6 +98,8 @@ interface AgentConfig {
     inputMode?: AgentInputMode;
     /** Per-task timeout in milliseconds; the process is killed when exceeded. */
     timeoutMs?: number;
+    /** When false, the agent process starts with a minimal environment (PATH + env). */
+    inheritEnv?: boolean;
     /** Models (as "provider:model-id") this agent may use, if restricted. */
     allowedModels?: string[];
     metadata?: Record<string, unknown>;
@@ -298,6 +300,8 @@ interface PipelineStepRun {
 interface PipelineRun {
     id: string;
     pipelineId: string;
+    /** The objective this run is executing (persisted for retries). */
+    objective?: string;
     status: PipelineRunStatus;
     startedAt?: string;
     finishedAt?: string;
@@ -308,6 +312,8 @@ interface PipelineRun {
     combinedReportId?: string;
     /** Set when a plan step produced an implementation plan (§18). */
     planId?: string;
+    /** Outcome summary of the final executed step (§28 — Result). */
+    resultSummary?: string;
 }
 
 /** Plan types: the final implementation plan produced by the planner layer (§18). */
@@ -597,6 +603,7 @@ declare const agentConfigSchema: z.ZodObject<{
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     input_mode: z.ZodDefault<z.ZodEnum<["stdin", "arg", "protocol"]>>;
     timeout_ms: z.ZodOptional<z.ZodNumber>;
+    inherit_env: z.ZodOptional<z.ZodBoolean>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strict", z.ZodTypeAny, {
     name: string;
@@ -608,6 +615,7 @@ declare const agentConfigSchema: z.ZodObject<{
     cwd?: string | undefined;
     env?: Record<string, string> | undefined;
     timeout_ms?: number | undefined;
+    inherit_env?: boolean | undefined;
 }, {
     name: string;
     type?: "native" | "process" | "cli" | undefined;
@@ -618,6 +626,7 @@ declare const agentConfigSchema: z.ZodObject<{
     env?: Record<string, string> | undefined;
     input_mode?: "stdin" | "arg" | "protocol" | undefined;
     timeout_ms?: number | undefined;
+    inherit_env?: boolean | undefined;
 }>;
 declare const roleConfigSchema: z.ZodObject<{
     id: z.ZodString;
@@ -789,6 +798,7 @@ declare const projectConfigSchema: z.ZodObject<{
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         input_mode: z.ZodDefault<z.ZodEnum<["stdin", "arg", "protocol"]>>;
         timeout_ms: z.ZodOptional<z.ZodNumber>;
+        inherit_env: z.ZodOptional<z.ZodBoolean>;
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, "strict", z.ZodTypeAny, {
         name: string;
@@ -800,6 +810,7 @@ declare const projectConfigSchema: z.ZodObject<{
         cwd?: string | undefined;
         env?: Record<string, string> | undefined;
         timeout_ms?: number | undefined;
+        inherit_env?: boolean | undefined;
     }, {
         name: string;
         type?: "native" | "process" | "cli" | undefined;
@@ -810,6 +821,7 @@ declare const projectConfigSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         input_mode?: "stdin" | "arg" | "protocol" | undefined;
         timeout_ms?: number | undefined;
+        inherit_env?: boolean | undefined;
     }>, "many">>;
     roles: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -941,6 +953,7 @@ declare const projectConfigSchema: z.ZodObject<{
         cwd?: string | undefined;
         env?: Record<string, string> | undefined;
         timeout_ms?: number | undefined;
+        inherit_env?: boolean | undefined;
     }[];
     providers: {
         name: string;
@@ -999,6 +1012,7 @@ declare const projectConfigSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         input_mode?: "stdin" | "arg" | "protocol" | undefined;
         timeout_ms?: number | undefined;
+        inherit_env?: boolean | undefined;
     }[] | undefined;
     providers?: {
         name: string;
@@ -1084,6 +1098,7 @@ declare const appConfigSchema: z.ZodObject<{
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             input_mode: z.ZodDefault<z.ZodEnum<["stdin", "arg", "protocol"]>>;
             timeout_ms: z.ZodOptional<z.ZodNumber>;
+            inherit_env: z.ZodOptional<z.ZodBoolean>;
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         }, "strict", z.ZodTypeAny, {
             name: string;
@@ -1095,6 +1110,7 @@ declare const appConfigSchema: z.ZodObject<{
             cwd?: string | undefined;
             env?: Record<string, string> | undefined;
             timeout_ms?: number | undefined;
+            inherit_env?: boolean | undefined;
         }, {
             name: string;
             type?: "native" | "process" | "cli" | undefined;
@@ -1105,6 +1121,7 @@ declare const appConfigSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             input_mode?: "stdin" | "arg" | "protocol" | undefined;
             timeout_ms?: number | undefined;
+            inherit_env?: boolean | undefined;
         }>, "many">>;
         roles: z.ZodDefault<z.ZodArray<z.ZodObject<{
             id: z.ZodString;
@@ -1236,6 +1253,7 @@ declare const appConfigSchema: z.ZodObject<{
             cwd?: string | undefined;
             env?: Record<string, string> | undefined;
             timeout_ms?: number | undefined;
+            inherit_env?: boolean | undefined;
         }[];
         providers: {
             name: string;
@@ -1294,6 +1312,7 @@ declare const appConfigSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             input_mode?: "stdin" | "arg" | "protocol" | undefined;
             timeout_ms?: number | undefined;
+            inherit_env?: boolean | undefined;
         }[] | undefined;
         providers?: {
             name: string;
@@ -1361,6 +1380,7 @@ declare const appConfigSchema: z.ZodObject<{
             cwd?: string | undefined;
             env?: Record<string, string> | undefined;
             timeout_ms?: number | undefined;
+            inherit_env?: boolean | undefined;
         }[];
         providers: {
             name: string;
@@ -1424,6 +1444,7 @@ declare const appConfigSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             input_mode?: "stdin" | "arg" | "protocol" | undefined;
             timeout_ms?: number | undefined;
+            inherit_env?: boolean | undefined;
         }[] | undefined;
         providers?: {
             name: string;
@@ -1672,6 +1693,28 @@ declare class FileTaskStore implements TaskStore {
     private write;
 }
 
+type AuditAction = "task.created" | "task.queued" | "task.running" | "task.completed" | "task.failed" | "task.cancelled" | "task.retry" | "pipeline.run.started" | "pipeline.run.finished" | "plan.generated" | "memory.context.gathered" | "memory.outcome.recorded";
+interface AuditEvent {
+    at: string;
+    action: AuditAction;
+    project?: string;
+    id?: string;
+    actor?: string;
+    detail?: Record<string, unknown>;
+}
+interface AuditSink {
+    record(event: AuditEvent): Promise<void>;
+}
+/** Append-only JSONL sink. Failures are logged, never propagated. */
+declare class FileAuditLog implements AuditSink {
+    private readonly filePath;
+    private readonly log;
+    constructor(directory?: string, log?: Logger);
+    record(event: AuditEvent): Promise<void>;
+    /** Recent events, oldest first; used by the CLI. */
+    recent(limit?: number): Promise<AuditEvent[]>;
+}
+
 declare function keywords(text: string): Set<string>;
 declare class LocalMemoryProvider implements IMemoryProvider {
     readonly name = "local";
@@ -1746,6 +1789,8 @@ interface TaskEngineOptions {
     store: TaskStore;
     /** When present, tasks gather relevant memory before running and record outcomes after (§20). */
     memory?: MemoryService;
+    /** When present, task lifecycle transitions are appended to the audit log (§24). */
+    audit?: AuditSink;
     log?: Logger;
 }
 declare class TaskEngine {
@@ -1758,10 +1803,13 @@ declare class TaskEngine {
     /** Runs the task through its assigned agent and records the result. */
     run(id: string): Promise<Task>;
     cancel(id: string): Promise<Task>;
+    /** Error recovery (§27 Phase 9): reset a failed/cancelled task so it can run again. */
+    retry(id: string): Promise<Task>;
     get(id: string): Promise<Task | undefined>;
     list(filter?: TaskStoreFilter): Promise<Task[]>;
     private mustGet;
     private transition;
+    private audit;
 }
 
 /** Assembles a TaskEngine from the project configuration (local-first defaults). */
@@ -1904,6 +1952,8 @@ interface PipelineEngineOptions {
     planner?: IPlanner;
     /** When present, plans produced by plan steps are persisted. */
     plans?: PlanStore;
+    /** When present, pipeline lifecycle events are appended to the audit log (§24). */
+    audit?: AuditSink;
     /** When present, finished runs have their reports collected, stored and combined (§16–§17). */
     reports?: ReportService;
     log?: Logger;
@@ -1944,6 +1994,6 @@ declare function createDefaultChatFn(providers: AppConfig["project"]["providers"
 
 declare function buildPipelineEngine(config: AppConfig, log?: Logger): PipelineEngine;
 
-declare const OMNINODE_VERSION = "0.9.0";
+declare const OMNINODE_VERSION = "1.0.0";
 
-export { type AgentConfig, type AgentConfigYaml, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregateOptions, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type AppConfigYaml, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatUsage, type CombinedMeta, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, ConsoleLogSink, type CreateTaskInput, type DiscoveryResult, type EnvelopeMeta, type ExtractionMeta, FilePipelineRunStore, FileReportStore, FileTaskStore, type Finding, type FindingSeverity, type FindingSource, type HttpRequestOptions, type HttpResponse, type IAgent, type IChatProvider, type IMemoryProvider, type IProvider, type LoadConfigOptions, LocalMemoryProvider, type LogLevel, type LogSink, Logger, type LoggerOptions, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryQuery, type MemoryScope, MemoryService, type MessageEnvelope, type ModelCapabilities, type ModelFilter, type ModelInfo, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, type OmniHilbrasConnectionResult, OmniHilbrasProvider, OmniNodeError, type OmniNodeErrorCode, type OmniNodeErrorOptions, OpenAICompatibleProvider, type PipelineConfigYaml, type PipelineDefinition, PipelineEngine, type PipelineEngineOptions, PipelineError, type PipelineRun, type PipelineRunFilter, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepConfigYaml, type PipelineStepKind, type PipelineStepRun, type Plan, type PlanStep, type PlannerConfigYaml, PlannerError, ProcessAgent, type Project, type ProjectConfigYaml, ProtocolError, type ProviderConfig, type ProviderConfigYaml, ProviderError, type ProviderHealth, type ProviderStatus, type ProviderType, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportFilter, ReportService, type ReportStore, type RoleConfigYaml, type RoleDefinition, RoleRegistry, type RunPipelineOptions, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, type WritableLike, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, buildAgentRegistry, buildPipelineEngine, buildRoleRegistry, composeTaskText, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, defaultProjectConfigYaml, expandEnvRefs, extractReportFromText, findConfigFile, isOmniNodeError, keywords, loadConfig, logger, pipelineConfigSchema, pipelineStepConfigSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, registryKey, requestJson, resolveApiKey, roleConfigSchema, similar };
+export { type AgentConfig, type AgentConfigYaml, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregateOptions, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type AppConfigYaml, type AuditAction, type AuditEvent, type AuditSink, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatUsage, type CombinedMeta, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, ConsoleLogSink, type CreateTaskInput, type DiscoveryResult, type EnvelopeMeta, type ExtractionMeta, FileAuditLog, FilePipelineRunStore, FileReportStore, FileTaskStore, type Finding, type FindingSeverity, type FindingSource, type HttpRequestOptions, type HttpResponse, type IAgent, type IChatProvider, type IMemoryProvider, type IProvider, type LoadConfigOptions, LocalMemoryProvider, type LogLevel, type LogSink, Logger, type LoggerOptions, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryQuery, type MemoryScope, MemoryService, type MessageEnvelope, type ModelCapabilities, type ModelFilter, type ModelInfo, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, type OmniHilbrasConnectionResult, OmniHilbrasProvider, OmniNodeError, type OmniNodeErrorCode, type OmniNodeErrorOptions, OpenAICompatibleProvider, type PipelineConfigYaml, type PipelineDefinition, PipelineEngine, type PipelineEngineOptions, PipelineError, type PipelineRun, type PipelineRunFilter, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepConfigYaml, type PipelineStepKind, type PipelineStepRun, type Plan, type PlanStep, type PlannerConfigYaml, PlannerError, ProcessAgent, type Project, type ProjectConfigYaml, ProtocolError, type ProviderConfig, type ProviderConfigYaml, ProviderError, type ProviderHealth, type ProviderStatus, type ProviderType, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportFilter, ReportService, type ReportStore, type RoleConfigYaml, type RoleDefinition, RoleRegistry, type RunPipelineOptions, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, type WritableLike, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, buildAgentRegistry, buildPipelineEngine, buildRoleRegistry, composeTaskText, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, defaultProjectConfigYaml, expandEnvRefs, extractReportFromText, findConfigFile, isOmniNodeError, keywords, loadConfig, logger, pipelineConfigSchema, pipelineStepConfigSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, registryKey, requestJson, resolveApiKey, roleConfigSchema, similar };

package/dist/index.js

@@ -130,6 +130,7 @@ var agentConfigSchema = z.object({
   env: z.record(z.string()).optional(),
   input_mode: z.enum(["stdin", "arg", "protocol"]).default("stdin"),
   timeout_ms: z.number().int().positive().optional(),
+  inherit_env: z.boolean().optional(),
   metadata: z.record(z.unknown()).optional()
 }).strict();
 var roleConfigSchema = z.object({
@@ -303,6 +304,7 @@ function toAgentConfig(raw) {
     env: raw.env,
     inputMode: raw.input_mode,
     timeoutMs: raw.timeout_ms,
+    inheritEnv: raw.inherit_env,
     metadata: raw.metadata
   };
 }
@@ -664,6 +666,17 @@ var ModelRegistry = class {
 import { spawn } from "child_process";
 var DEFAULT_TIMEOUT_MS2 = 6e5;
 var KILL_GRACE_MS = 5e3;
+function buildChildEnv(config) {
+  const configured = config.env ?? {};
+  if (config.inheritEnv !== false) {
+    return { ...process.env, ...configured };
+  }
+  return {
+    PATH: process.env.PATH ?? "",
+    HOME: process.env.HOME ?? "",
+    ...configured
+  };
+}
 function composeTaskText(input) {
   const sections = [`# Objective
 ${input.objective}`];
@@ -730,7 +743,7 @@ var ProcessAgent = class {
         [...this.config.args ?? [], ...mode === "arg" ? [composeTaskText(input)] : []],
         {
           cwd: this.config.cwd,
-          env: { ...process.env, ...this.config.env },
+          env: buildChildEnv(this.config),
           stdio: ["pipe", "pipe", "pipe"]
         }
       );
@@ -1085,6 +1098,7 @@ var TaskEngine = class {
     };
     await this.options.store.save(task);
     this.log.info(`Created task ${task.id}.`);
+    await this.audit("task.created", task.id, { objective: task.objective, project: task.project });
     return task;
   }
   async queue(id) {
@@ -1160,6 +1174,26 @@ var TaskEngine = class {
     }
     return this.transition(task, "cancelled");
   }
+  /** Error recovery (§27 Phase 9): reset a failed/cancelled task so it can run again. */
+  async retry(id) {
+    const task = await this.mustGet(id);
+    if (task.status !== "failed" && task.status !== "cancelled") {
+      throw new TaskError(
+        "TASK_INVALID",
+        `Only failed or cancelled tasks can be retried \u2014 task ${id} is "${task.status}".`
+      );
+    }
+    const { result: _discarded, ...rest } = task;
+    const reset = {
+      ...rest,
+      status: "created",
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    await this.options.store.save(reset);
+    await this.audit("task.retry", id, { from: task.status });
+    this.log.info(`Task ${id} reset for retry.`);
+    return reset;
+  }
   async get(id) {
     return this.options.store.get(id);
   }
@@ -1185,16 +1219,68 @@ var TaskEngine = class {
       ...extra.result !== void 0 ? { result: { ...task.result, ...extra.result } } : {}
     };
     await this.options.store.save(updated);
+    await this.audit(`task.${to === "queued" ? "queued" : to}`, updated.id, {
+      from: task.status
+    });
     return updated;
   }
+  async audit(action, id, detail) {
+    await this.options.audit?.record({
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      action,
+      id,
+      ...detail !== void 0 ? { detail } : {}
+    });
+  }
 };
 function generateTaskId() {
   return `task-${Date.now().toString(36)}-${randomBytes(3).toString("hex")}`;
 }
 
-// src/memory/local.ts
-import { mkdir as mkdir2, readFile as readFile2, rename as rename2, writeFile as writeFile2 } from "fs/promises";
+// src/audit/index.ts
+import { appendFile, mkdir as mkdir2 } from "fs/promises";
 import { dirname as dirname2 } from "path";
+var FileAuditLog = class {
+  filePath;
+  log;
+  constructor(directory = `${process.cwd()}/.omninode`, log = logger) {
+    this.filePath = `${directory}/audit.jsonl`;
+    this.log = log.child({ component: "audit" });
+  }
+  async record(event) {
+    try {
+      await mkdir2(dirname2(this.filePath), { recursive: true });
+      await appendFile(this.filePath, `${JSON.stringify(event)}
+`, "utf8");
+    } catch (error) {
+      this.log.warn(
+        `Audit write failed: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+  }
+  /** Recent events, oldest first; used by the CLI. */
+  async recent(limit = 20) {
+    const { readFile: readFile6 } = await import("fs/promises");
+    let raw;
+    try {
+      raw = await readFile6(this.filePath, "utf8");
+    } catch {
+      return [];
+    }
+    const events = raw.split("\n").filter((line) => line.length > 0).map((line) => {
+      try {
+        return JSON.parse(line);
+      } catch {
+        return void 0;
+      }
+    }).filter((event) => event !== void 0);
+    return events.slice(-limit);
+  }
+};
+
+// src/memory/local.ts
+import { mkdir as mkdir3, readFile as readFile2, rename as rename2, writeFile as writeFile2 } from "fs/promises";
+import { dirname as dirname3 } from "path";
 var STOPWORDS = /* @__PURE__ */ new Set([
   "the",
   "and",
@@ -1307,7 +1393,7 @@ var LocalMemoryProvider = class {
   }
   async saveAll(entries) {
     const tmp = `${this.filePath}.tmp`;
-    await mkdir2(dirname2(this.filePath), { recursive: true });
+    await mkdir3(dirname3(this.filePath), { recursive: true });
     await writeFile2(tmp, `${JSON.stringify(entries, null, 2)}
 `, "utf8");
     await rename2(tmp, this.filePath);
@@ -1492,6 +1578,7 @@ function createTaskEngine(config, log = logger, directory) {
     roles,
     store: new FileTaskStore(directory),
     ...config.project.memory !== void 0 ? { memory: new MemoryService(createMemoryProvider(config.project.memory), log) } : {},
+    audit: new FileAuditLog(),
     log
   });
 }
@@ -1836,12 +1923,19 @@ var PipelineEngine = class {
     const run = {
       id: `run-${Date.now().toString(36)}-${randomBytes4(3).toString("hex")}`,
       pipelineId: def.id,
+      objective,
       status: "running",
       startedAt: now,
       stepRuns: []
     };
     await this.options.store.save(run);
     this.log.info(`Running pipeline ${def.id} as ${run.id}.`);
+    await this.options.audit?.record({
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      action: "pipeline.run.started",
+      id: run.id,
+      detail: { pipeline: def.id, objective }
+    });
     const deps = this.effectiveDependencies(def);
     const outcomes = /* @__PURE__ */ new Map();
     const pending = new Set(def.steps.map((s) => s.id));
@@ -1895,9 +1989,19 @@ ${contribution}`);
     const failed = [...outcomes.values()].some((o) => o.status === "failed");
     const finalStatus = failed ? "failed" : "completed";
     const planId = [...outcomes.values()].find((o) => o.planId !== void 0)?.planId;
+    let resultSummary;
+    for (let i = def.steps.length - 1; i >= 0; i -= 1) {
+      const step = def.steps[i];
+      const outcome = outcomes.get(step.id);
+      if (outcome?.status !== "completed" || outcome.taskIds.length === 0) continue;
+      const stepTasks = (await Promise.all(outcome.taskIds.map((id) => this.options.tasks.get(id)))).filter((task) => task !== void 0);
+      const summaries = stepTasks.map((task) => task.result?.summary).filter((summary) => summary !== void 0);
+      if (summaries.length > 0) resultSummary = summaries.join("\n");
+      break;
+    }
     let combinedReportId;
     if (this.options.reports) {
-      const taskIds = [...outcomes.values()].flatMap((o) => o.taskIds);
+      const taskIds = def.steps.filter((step) => step.kind === "research" || step.kind === "analyze").flatMap((step) => outcomes.get(step.id)?.taskIds ?? []);
       const tasks = (await Promise.all(taskIds.map((id) => this.options.tasks.get(id)))).filter((task) => task !== void 0);
       const collected = await this.options.reports.collectFromTasks(tasks);
       await this.options.reports.saveReports(collected);
@@ -1917,10 +2021,17 @@ ${contribution}`);
       finishedAt: (/* @__PURE__ */ new Date()).toISOString(),
       ...run.reports !== void 0 && run.reports.length > 0 ? { reports: run.reports } : {},
       ...combinedReportId !== void 0 ? { combinedReportId } : {},
-      ...planId !== void 0 ? { planId } : {}
+      ...planId !== void 0 ? { planId } : {},
+      ...resultSummary !== void 0 ? { resultSummary } : {}
     };
     await this.options.store.save(finished);
     this.log.info(`Pipeline ${def.id} finished: ${finalStatus}.`);
+    await this.options.audit?.record({
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      action: "pipeline.run.finished",
+      id: run.id,
+      detail: { pipeline: def.id, status: finalStatus }
+    });
     return finished;
   }
   async get(runId) {
@@ -2065,6 +2176,12 @@ ${contribution}`);
       };
     }
     await this.options.plans?.save(plan);
+    await this.options.audit?.record({
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      action: "plan.generated",
+      id: plan.id,
+      detail: { generatedBy: plan.generatedBy, steps: plan.steps.length }
+    });
     return {
       status: "completed",
       summary: plan.summary,
@@ -2122,8 +2239,8 @@ function createDefaultChatFn(providers) {
 }
 
 // src/pipelines/store.ts
-import { mkdir as mkdir3, readFile as readFile3, rename as rename3, writeFile as writeFile3 } from "fs/promises";
-import { dirname as dirname3 } from "path";
+import { mkdir as mkdir4, readFile as readFile3, rename as rename3, writeFile as writeFile3 } from "fs/promises";
+import { dirname as dirname4 } from "path";
 var FilePipelineRunStore = class {
   filePath;
   queue = Promise.resolve();
@@ -2170,7 +2287,7 @@ var FilePipelineRunStore = class {
   }
   async write(runs) {
     const tmp = `${this.filePath}.tmp`;
-    await mkdir3(dirname3(this.filePath), { recursive: true });
+    await mkdir4(dirname4(this.filePath), { recursive: true });
     await writeFile3(tmp, `${JSON.stringify(runs, null, 2)}
 `, "utf8");
     await rename3(tmp, this.filePath);
@@ -2178,8 +2295,8 @@ var FilePipelineRunStore = class {
 };
 
 // src/planner/store.ts
-import { mkdir as mkdir4, readFile as readFile4, rename as rename4, writeFile as writeFile4 } from "fs/promises";
-import { dirname as dirname4 } from "path";
+import { mkdir as mkdir5, readFile as readFile4, rename as rename4, writeFile as writeFile4 } from "fs/promises";
+import { dirname as dirname5 } from "path";
 var FilePlanStore = class {
   filePath;
   queue = Promise.resolve();
@@ -2226,7 +2343,7 @@ var FilePlanStore = class {
   }
   async write(plans) {
     const tmp = `${this.filePath}.tmp`;
-    await mkdir4(dirname4(this.filePath), { recursive: true });
+    await mkdir5(dirname5(this.filePath), { recursive: true });
     await writeFile4(tmp, `${JSON.stringify(plans, null, 2)}
 `, "utf8");
     await rename4(tmp, this.filePath);
@@ -2465,8 +2582,8 @@ var ReportService = class {
 };
 
 // src/reports/store.ts
-import { mkdir as mkdir5, readFile as readFile5, rename as rename5, writeFile as writeFile5 } from "fs/promises";
-import { dirname as dirname5 } from "path";
+import { mkdir as mkdir6, readFile as readFile5, rename as rename5, writeFile as writeFile5 } from "fs/promises";
+import { dirname as dirname6 } from "path";
 var FileReportStore = class {
   filePath;
   queue = Promise.resolve();
@@ -2539,7 +2656,7 @@ var FileReportStore = class {
   }
   async write(entries) {
     const tmp = `${this.filePath}.tmp`;
-    await mkdir5(dirname5(this.filePath), { recursive: true });
+    await mkdir6(dirname6(this.filePath), { recursive: true });
     await writeFile5(tmp, `${JSON.stringify(entries, null, 2)}
 `, "utf8");
     await rename5(tmp, this.filePath);
@@ -2556,6 +2673,7 @@ function buildPipelineEngine(config, log = logger) {
     roles,
     store: new FileTaskStore(),
     ...config.project.memory !== void 0 ? { memory: new MemoryService(createMemoryProvider(config.project.memory), log) } : {},
+    audit: new FileAuditLog(),
     log
   });
   return new PipelineEngine({
@@ -2568,17 +2686,19 @@ function buildPipelineEngine(config, log = logger) {
     ...config.project.planner !== void 0 ? { planner: buildPlanner(config.project.planner, chat, log) } : {},
     plans: new FilePlanStore(),
     reports: new ReportService(new FileReportStore(), log),
+    audit: new FileAuditLog(),
     log
   });
 }
 
 // src/version.ts
-var OMNINODE_VERSION = "0.9.0";
+var OMNINODE_VERSION = "1.0.0";
 export {
   AgentError,
   AgentRegistry,
   ConfigError,
   ConsoleLogSink,
+  FileAuditLog,
   FilePipelineRunStore,
   FileReportStore,
   FileTaskStore,