@hilbras/omninode 2.0.0-alpha.12 → 2.0.0-alpha.14

package/dist/cli/providers-OYXBAQTX.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import {
+  OPENAI_COMPATIBLE_TYPES,
+  OmniHilbrasProvider,
+  OpenAICompatibleProvider,
+  authHeaders,
+  createProvider,
+  extractMessage,
+  isNetworkError,
+  isRetryable,
+  isTimeoutError,
+  kindFromStatus,
+  parseRetryAfter,
+  providerHttpError,
+  providerTransportError,
+  requestJson,
+  resolveApiKey
+} from "./chunk-6Z6O63SS.js";
+export {
+  OPENAI_COMPATIBLE_TYPES,
+  OmniHilbrasProvider,
+  OpenAICompatibleProvider,
+  authHeaders,
+  createProvider,
+  extractMessage,
+  isNetworkError,
+  isRetryable,
+  isTimeoutError,
+  kindFromStatus,
+  parseRetryAfter,
+  providerHttpError,
+  providerTransportError,
+  requestJson,
+  resolveApiKey
+};
+//# sourceMappingURL=providers-OYXBAQTX.js.map

package/dist/cli/providers-OYXBAQTX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.d.ts

@@ -517,6 +517,8 @@ interface TaskResult {
 interface Task {
     id: string;
     project?: string;
+    /** Pipeline run that owns this task, when created by a pipeline. */
+    pipelineId?: string;
     objective: string;
     /** Role id from the role system. */
     role?: string;
@@ -850,7 +852,7 @@ interface IChatProvider extends IProvider {
 }
 
 /** Typed error hierarchy shared across the whole codebase (§4.1 — error model). */
-type OmniNodeErrorCode = "CONFIG_NOT_FOUND" | "CONFIG_INVALID" | "PROVIDER_NOT_FOUND" | "PROVIDER_UNAVAILABLE" | "PROVIDER_AUTH_FAILED" | "MODEL_NOT_FOUND" | "AGENT_NOT_FOUND" | "AGENT_FAILED" | "AGENT_TIMEOUT" | "TASK_INVALID" | "TASK_NOT_FOUND" | "TASK_FAILED" | "PIPELINE_NOT_FOUND" | "PIPELINE_INVALID" | "PIPELINE_FAILED" | "PLANNER_FAILED" | "PLAN_INVALID" | "PROTOCOL_VIOLATION" | "MEMORY_UNAVAILABLE" | "REPORT_NOT_FOUND" | "NOT_IMPLEMENTED" | "CLI_USAGE" | "INTERNAL";
+type OmniNodeErrorCode = "CONFIG_NOT_FOUND" | "CONFIG_INVALID" | "PROVIDER_NOT_FOUND" | "PROVIDER_UNAVAILABLE" | "PROVIDER_AUTH_FAILED" | "MODEL_NOT_FOUND" | "AGENT_NOT_FOUND" | "AGENT_FAILED" | "AGENT_TIMEOUT" | "TASK_INVALID" | "TASK_NOT_FOUND" | "TASK_FAILED" | "PIPELINE_NOT_FOUND" | "PIPELINE_INVALID" | "PIPELINE_FAILED" | "PLANNER_FAILED" | "PLAN_INVALID" | "TASK_NOT_FOUND" | "PROVIDER_NOT_FOUND" | "PROTOCOL_VIOLATION" | "MEMORY_UNAVAILABLE" | "REPORT_NOT_FOUND" | "NOT_IMPLEMENTED" | "CLI_USAGE" | "INTERNAL";
 interface OmniNodeErrorOptions {
     cause?: unknown;
     details?: Record<string, unknown>;
@@ -899,14 +901,18 @@ declare class ConsoleLogSink implements LogSink {
     constructor(stream?: WritableLike);
     write(_level: LogLevel, line: string): void;
 }
+type LogFormat = "text" | "json";
 interface LoggerOptions {
     level?: LogLevel;
     sink?: LogSink;
+    /** "text" (default) or machine-readable "json" lines (roadmap §18). */
+    format?: LogFormat;
     /** Structured fields attached to every line, e.g. { component: "config" }. */
     context?: Record<string, unknown>;
 }
 declare class Logger {
-    private readonly level;
+    level: LogLevel;
+    format: LogFormat;
     private readonly sink;
     private readonly context;
     constructor(options?: LoggerOptions);
@@ -919,6 +925,11 @@ declare class Logger {
 }
 /** Default application logger. Writes to stderr so stdout stays clean for CLI output. */
 declare const logger: Logger;
+/** Applies configuration (level/format) to the default logger — used by the CLI. */
+declare function configureLogger(options: {
+    level?: LogLevel;
+    format?: LogFormat;
+}): void;
 
 /**
  * Configuration schema. The project file (omninode.yaml) uses snake_case keys
@@ -1836,10 +1847,13 @@ declare const appConfigSchema: z.ZodObject<{
     }>;
     logging: z.ZodOptional<z.ZodObject<{
         level: z.ZodEnum<["debug", "info", "warn", "error"]>;
+        format: z.ZodOptional<z.ZodEnum<["text", "json"]>>;
     }, "strict", z.ZodTypeAny, {
         level: "info" | "error" | "debug" | "warn";
+        format?: "text" | "json" | undefined;
     }, {
         level: "info" | "error" | "debug" | "warn";
+        format?: "text" | "json" | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
     project: {
@@ -1912,6 +1926,7 @@ declare const appConfigSchema: z.ZodObject<{
     };
     logging?: {
         level: "info" | "error" | "debug" | "warn";
+        format?: "text" | "json" | undefined;
     } | undefined;
 }, {
     project: {
@@ -1984,6 +1999,7 @@ declare const appConfigSchema: z.ZodObject<{
     };
     logging?: {
         level: "info" | "error" | "debug" | "warn";
+        format?: "text" | "json" | undefined;
     } | undefined;
 }>;
 type ProviderConfigYaml = z.infer<typeof providerConfigSchema>;
@@ -1995,6 +2011,26 @@ type PlannerConfigYaml = z.infer<typeof plannerConfigSchema>;
 type ProjectConfigYaml = z.infer<typeof projectConfigSchema>;
 type AppConfigYaml = z.infer<typeof appConfigSchema>;
 
+/**
+ * Inline secret detection (roadmap §17, Secrets).
+ *
+ * OmniNode configuration must never contain literal credentials — only
+ * environment-variable *references*. This scanner runs before the config is
+ * parsed and reports anything that looks like an inline secret, so the file
+ * is rejected before it can be committed or persisted.
+ */
+interface SecretFinding {
+    /** 1-based line number in the source. */
+    line: number;
+    /** The offending key, e.g. `api_key`. */
+    key: string;
+    /** Redacted excerpt — never echoes the value. */
+    excerpt: string;
+}
+declare function scanForInlineSecrets(source: string): SecretFinding[];
+/** Formats findings as an actionable configuration error message. */
+declare function describeSecretFindings(file: string, findings: SecretFinding[]): string;
+
 interface AppConfig {
     project: {
         name: string;
@@ -2058,9 +2094,46 @@ interface HttpResponse {
 }
 declare function requestJson(url: string, options?: HttpRequestOptions): Promise<HttpResponse>;
 
+type AuditAction = "task.created" | "task.queued" | "task.running" | "task.completed" | "task.failed" | "task.cancelled" | "task.retry" | "pipeline.run.started" | "pipeline.run.finished" | "pipeline.run.failed" | "pipeline.run.cancelled" | "plan.generated" | "agent.started" | "agent.completed" | "provider.error" | "memory.context.gathered" | "memory.outcome.recorded";
+/**
+ * Every event carries correlation ids so a failed execution can be traced
+ * across task → execution → pipeline run → agent → provider (roadmap §18).
+ */
+interface AuditEvent {
+    at: string;
+    action: AuditAction;
+    project?: string;
+    /** Primary subject: task id, pipeline run id, plan id… */
+    id?: string;
+    taskId?: string;
+    pipelineId?: string;
+    executionId?: string;
+    agentId?: string;
+    providerId?: string;
+    actor?: string;
+    detail?: Record<string, unknown>;
+}
+interface AuditSink {
+    record(event: AuditEvent): Promise<void>;
+}
+/** Append-only JSONL sink. Failures are logged, never propagated. */
+declare class FileAuditLog implements AuditSink {
+    private readonly filePath;
+    private readonly log;
+    constructor(directory?: string, log?: Logger);
+    record(event: AuditEvent): Promise<void>;
+    /** Recent events, oldest first; used by the CLI. */
+    recent(limit?: number): Promise<AuditEvent[]>;
+}
+
 /** Provider types served by the OpenAI-compatible adapter. */
 declare const OPENAI_COMPATIBLE_TYPES: readonly ProviderType[];
-declare function createProvider(config: ProviderConfig): IChatProvider;
+interface CreateProviderOptions {
+    /** Correlates provider errors in the audit log (§18). */
+    audit?: AuditSink;
+    env?: Record<string, string | undefined>;
+}
+declare function createProvider(config: ProviderConfig, options?: CreateProviderOptions): IChatProvider;
 
 /**
  * Provider error normalization (roadmap §10).
@@ -2105,7 +2178,8 @@ declare class OpenAICompatibleProvider implements IChatProvider {
     /** Discovered models, so getModel() answers without another round-trip. */
     private discovered?;
     private readonly env;
-    constructor(config: ProviderConfig, log?: Logger, env?: Record<string, string | undefined>);
+    private readonly audit?;
+    constructor(config: ProviderConfig, log?: Logger, env?: Record<string, string | undefined>, audit?: AuditSink);
     /** Provider-level request timeout (roadmap §6.6/§11) with the shared default. */
     private get requestTimeoutMs();
     /** Authenticate + discover (roadmap §10, Model Discovery). */
@@ -2119,6 +2193,8 @@ declare class OpenAICompatibleProvider implements IChatProvider {
     private toModelInfo;
     /** Streaming where the gateway supports it (§11). */
     stream(request: ChatRequest, onChunk: (chunk: ChatStreamChunk) => void): Promise<ChatResponse>;
+    /** Provider errors are part of the audit trail (§14 correlation, §18 observability). */
+    private recordProviderError;
     healthCheck(): Promise<ProviderStatus>;
     chat(request: ChatRequest): Promise<ChatResponse>;
 }
@@ -2419,13 +2495,21 @@ interface JsonFileStoreOptions {
     fileName: string;
     /** Schema version to write (defaults to the current version). */
     schemaVersion?: number;
+    /** Power-loss durability: "rename" (default) or "fsync" (slower). */
+    durability?: Durability;
     /** Called when a persisted file is corrupt (after quarantine). */
     onCorrupt?: (path: string, error: unknown) => void;
     /** Disable file moves (used by dry runs / tests that inspect in place). */
     quarantine?: boolean;
 }
-/** Durably writes a file: temp → fsync → rename → directory fsync. */
-declare function writeFileAtomic(target: string, contents: string): Promise<void>;
+type Durability = "rename" | "fsync";
+/**
+ * Writes a file atomically: temp → rename. The rename guarantees readers
+ * never observe a torn file. With `durability: "fsync"` the data and the
+ * directory entry are also flushed, which additionally survives power loss —
+ * at a significant per-write cost, so it is opt-in.
+ */
+declare function writeFileAtomic(target: string, contents: string, durability?: Durability): Promise<void>;
 /** Reads and classifies a persisted document without modifying it. */
 declare function inspectDocument(path: string): Promise<DocumentState>;
 /** Reads a document, migrating v1 shapes and quarantining corruption. */
@@ -2433,6 +2517,7 @@ declare function readDocument<T>(path: string, onCorrupt?: (path: string, error:
 declare class JsonFileStore<T> {
     private readonly filePath;
     private readonly schemaVersion;
+    private readonly durability;
     private readonly onCorrupt?;
     private readonly quarantine;
     private readonly log;
@@ -2470,28 +2555,6 @@ declare class FileTaskStore extends JsonFileStore<Task> implements TaskStore {
     list(filter?: TaskStoreFilter): Promise<Task[]>;
 }
 
-type AuditAction = "task.created" | "task.queued" | "task.running" | "task.completed" | "task.failed" | "task.cancelled" | "task.retry" | "pipeline.run.started" | "pipeline.run.finished" | "plan.generated" | "memory.context.gathered" | "memory.outcome.recorded";
-interface AuditEvent {
-    at: string;
-    action: AuditAction;
-    project?: string;
-    id?: string;
-    actor?: string;
-    detail?: Record<string, unknown>;
-}
-interface AuditSink {
-    record(event: AuditEvent): Promise<void>;
-}
-/** Append-only JSONL sink. Failures are logged, never propagated. */
-declare class FileAuditLog implements AuditSink {
-    private readonly filePath;
-    private readonly log;
-    constructor(directory?: string, log?: Logger);
-    record(event: AuditEvent): Promise<void>;
-    /** Recent events, oldest first; used by the CLI. */
-    recent(limit?: number): Promise<AuditEvent[]>;
-}
-
 /**
  * Local file-based memory provider: the default implementation so persistent
  * memory works out of the box, locally (§25), with no external service.
@@ -2613,6 +2676,7 @@ declare function defaultMetadata(name: string, options?: {
 interface CreateTaskInput {
     objective: string;
     project?: string;
+    pipelineId?: string;
     role?: string;
     agent?: string;
     context?: TaskContext;
@@ -2704,6 +2768,8 @@ interface CombinedMeta {
     pipelineRunId?: string;
     taskIds?: string[];
 }
+/** Serialized size budget for a single report (roadmap §17 — output limits). */
+declare const MAX_REPORT_BYTES: number;
 interface CollectionDiagnostics {
     collected: number;
     accepted: number;
@@ -3040,7 +3106,12 @@ declare class PipelineEngine implements IPipelineExecutor {
     private getChat;
 }
 /** Default chat function: resolves "provider:model" against the configured providers. */
-declare function createDefaultChatFn(providers: AppConfig["project"]["providers"]): ChatFn;
+interface DefaultChatOptions {
+    /** Correlates provider errors in the audit log (§18). */
+    audit?: AuditSink;
+    env?: Record<string, string | undefined>;
+}
+declare function createDefaultChatFn(providers: AppConfig["project"]["providers"], options?: DefaultChatOptions): ChatFn;
 
 declare function buildPipelineEngine(config: AppConfig, log?: Logger): PipelineEngine;
 
@@ -3080,6 +3151,6 @@ declare function migrateProjectStores(directory?: string, options?: {
     checkOnly?: boolean;
 }): Promise<MigrationReport[]>;
 
-declare const OMNINODE_VERSION = "2.0.0-alpha.12";
+declare const OMNINODE_VERSION = "2.0.0-alpha.14";
 
-export { AgentAdapterRegistry, type AgentConfig, type AgentConfigYaml, type AgentDescriptor, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregateOptions, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type AppConfigYaml, type ArtifactKind, type ArtifactPayload, type AskedQuestion, type AuditAction, type AuditEvent, type AuditSink, type AuditSink as AuditStore, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatStreamChunk, type ChatUsage, type CollectionDiagnostics, type CombinedMeta, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, type ConflictPosition, ConsoleLogSink, type CreateTaskInput, type CwdValidation, DEFAULT_MAX_OUTPUT_BYTES, type DecodeResult, type DiscoveryResult, type DocumentState, type EnvPolicy, type EnvelopeMeta, type Evidence, type EvidenceInput, type EvidenceKind, type ExecutionRecord, type ExtractionMeta, FileAuditLog, FilePipelineRunStore, FilePlanStore, FileReportStore, FileTaskStore, type Finding, type FindingOrigin, type FindingSeverity, type FindingSource, type HelloResult, HeuristicPlanner, type HttpRequestOptions, type HttpResponse, type IAgent, type IAgentAdapter, type IChatProvider, type IMemoryProvider, type IPipelineExecutor, type IPlanner, type IProvider, type JsonDocument, JsonFileStore, type JsonFileStoreOptions, type LoadConfigOptions, LocalMemoryProvider, type LogLevel, type LogSink, Logger, type LoggerOptions, MAX_CONTEXT_CHARS, MAX_MESSAGE_BYTES, type MemoryCategory, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryProviderMetadata, type MemoryQuery, type MemoryScope, MemoryService, type MemoryServiceOptions, LocalMemoryProvider as MemoryStore, type MemoryTaskContext, type MessageEnvelope, type MigrationReport, type Modality, type ModelCapabilities, type ModelFilter, type ModelInfo, ModelPlanner, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, type OmniHilbrasConnectionResult, OmniHilbrasProvider, OmniNodeError, type OmniNodeErrorCode, type OmniNodeErrorOptions, OpenAICompatibleProvider, PROTOCOL_V2, type PipelineConfigYaml, type PipelineDefinition, PipelineEngine, type PipelineEngineOptions, PipelineError, type PipelineRun, type PipelineRunAttempt, type PipelineRunFilter, type PipelineRunOptions, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepConfigYaml, type PipelineStepKind, type PipelineStepRun, type PipelineRunStore as PipelineStore, type Plan, type PlanFilter, type PlanJsonResult, type PlanRequest, type PlanStep, type PlanStore, type PlanValidationIssue, type PlanValidationResult, type PlannerConfigYaml, PlannerError, ProcessAgent, ProcessAgentAdapter, type Project, type ProjectConfigYaml, ProjectStores, type ProtocolAgentToNodeType, ProtocolDecoder, type ProtocolEnvelope, ProtocolError, type ProtocolMessageType, type ProtocolNodeToAgentType, ProtocolSession, type ProtocolViolation, type ProtocolViolationCode, type ProviderAuthentication, type ProviderCapability, type ProviderConfig, type ProviderConfigYaml, ProviderError, type ProviderErrorKind, type ProviderHealth, type ProviderStatus, type ProviderType, type QuestionPayload, type QuestionResponder, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportArtifact, type ReportConflict, type ReportFilter, type ReportPayload, ReportService, type ReportStore, type ReportValidationIssue, type ReportValidationResult, type RoleConfigYaml, type RoleDefinition, RoleRegistry, type RunPipelineOptions, SCHEMA_VERSION, STORE_FILES, SUPPORTED_PROTOCOL_VERSIONS, type SessionIds, TERMINAL_TASK_STATUSES, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskPayload, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, type WritableLike, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, buildAgentRegistry, buildChildEnv, buildHello, buildHelloAck, buildPipelineEngine, buildPlanner, buildPlannerContext, buildRoleRegistry, composeTaskText, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, decodeMessage, decodeStream, defaultMetadata, defaultProjectConfigYaml, defaultSearch, describeExit, detectConflicts, encodeMessage, envelope, expandEnvRefs, extractMessage, extractReportFromText, findConfigFile, inspectDocument, isNetworkError, isOmniNodeError, isRetryable, isSupportedProtocol, isTimeoutError, keywords, killTree, kindFromStatus, loadConfig, logger, migrateProjectStores, newMessageId, normalizeEvidence, normalizeFinding, parseHello, parsePlanJson, parseRetryAfter, pipelineConfigSchema, pipelineStepConfigSchema, planJsonSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, providerHttpError, providerTransportError, readDocument, registryKey, requestJson, requireCompletion, resolveApiKey, resolveEnvPolicy, roleConfigSchema, sanitizeChunk, similar, validateEnvelope, validatePlan, validateReport, validateWorkingDirectory, writeFileAtomic };
+export { AgentAdapterRegistry, type AgentConfig, type AgentConfigYaml, type AgentDescriptor, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregateOptions, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type AppConfigYaml, type ArtifactKind, type ArtifactPayload, type AskedQuestion, type AuditAction, type AuditEvent, type AuditSink, type AuditSink as AuditStore, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatStreamChunk, type ChatUsage, type CollectionDiagnostics, type CombinedMeta, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, type ConflictPosition, ConsoleLogSink, type CreateTaskInput, type CwdValidation, DEFAULT_MAX_OUTPUT_BYTES, type DecodeResult, type DefaultChatOptions, type DiscoveryResult, type DocumentState, type Durability, type EnvPolicy, type EnvelopeMeta, type Evidence, type EvidenceInput, type EvidenceKind, type ExecutionRecord, type ExtractionMeta, FileAuditLog, FilePipelineRunStore, FilePlanStore, FileReportStore, FileTaskStore, type Finding, type FindingOrigin, type FindingSeverity, type FindingSource, type HelloResult, HeuristicPlanner, type HttpRequestOptions, type HttpResponse, type IAgent, type IAgentAdapter, type IChatProvider, type IMemoryProvider, type IPipelineExecutor, type IPlanner, type IProvider, type JsonDocument, JsonFileStore, type JsonFileStoreOptions, type LoadConfigOptions, LocalMemoryProvider, type LogFormat, type LogLevel, type LogSink, Logger, type LoggerOptions, MAX_CONTEXT_CHARS, MAX_MESSAGE_BYTES, MAX_REPORT_BYTES, type MemoryCategory, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryProviderMetadata, type MemoryQuery, type MemoryScope, MemoryService, type MemoryServiceOptions, LocalMemoryProvider as MemoryStore, type MemoryTaskContext, type MessageEnvelope, type MigrationReport, type Modality, type ModelCapabilities, type ModelFilter, type ModelInfo, ModelPlanner, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, type OmniHilbrasConnectionResult, OmniHilbrasProvider, OmniNodeError, type OmniNodeErrorCode, type OmniNodeErrorOptions, OpenAICompatibleProvider, PROTOCOL_V2, type PipelineConfigYaml, type PipelineDefinition, PipelineEngine, type PipelineEngineOptions, PipelineError, type PipelineRun, type PipelineRunAttempt, type PipelineRunFilter, type PipelineRunOptions, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepConfigYaml, type PipelineStepKind, type PipelineStepRun, type PipelineRunStore as PipelineStore, type Plan, type PlanFilter, type PlanJsonResult, type PlanRequest, type PlanStep, type PlanStore, type PlanValidationIssue, type PlanValidationResult, type PlannerConfigYaml, PlannerError, ProcessAgent, ProcessAgentAdapter, type Project, type ProjectConfigYaml, ProjectStores, type ProtocolAgentToNodeType, ProtocolDecoder, type ProtocolEnvelope, ProtocolError, type ProtocolMessageType, type ProtocolNodeToAgentType, ProtocolSession, type ProtocolViolation, type ProtocolViolationCode, type ProviderAuthentication, type ProviderCapability, type ProviderConfig, type ProviderConfigYaml, ProviderError, type ProviderErrorKind, type ProviderHealth, type ProviderStatus, type ProviderType, type QuestionPayload, type QuestionResponder, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportArtifact, type ReportConflict, type ReportFilter, type ReportPayload, ReportService, type ReportStore, type ReportValidationIssue, type ReportValidationResult, type RoleConfigYaml, type RoleDefinition, RoleRegistry, type RunPipelineOptions, SCHEMA_VERSION, STORE_FILES, SUPPORTED_PROTOCOL_VERSIONS, type SecretFinding, type SessionIds, TERMINAL_TASK_STATUSES, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskPayload, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, type WritableLike, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, buildAgentRegistry, buildChildEnv, buildHello, buildHelloAck, buildPipelineEngine, buildPlanner, buildPlannerContext, buildRoleRegistry, composeTaskText, configureLogger, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, decodeMessage, decodeStream, defaultMetadata, defaultProjectConfigYaml, defaultSearch, describeExit, describeSecretFindings, detectConflicts, encodeMessage, envelope, expandEnvRefs, extractMessage, extractReportFromText, findConfigFile, inspectDocument, isNetworkError, isOmniNodeError, isRetryable, isSupportedProtocol, isTimeoutError, keywords, killTree, kindFromStatus, loadConfig, logger, migrateProjectStores, newMessageId, normalizeEvidence, normalizeFinding, parseHello, parsePlanJson, parseRetryAfter, pipelineConfigSchema, pipelineStepConfigSchema, planJsonSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, providerHttpError, providerTransportError, readDocument, registryKey, requestJson, requireCompletion, resolveApiKey, resolveEnvPolicy, roleConfigSchema, sanitizeChunk, scanForInlineSecrets, similar, validateEnvelope, validatePlan, validateReport, validateWorkingDirectory, writeFileAtomic };