@hilbras/omninode 2.0.0-alpha.14 → 2.0.0-alpha.15

package/dist/cli/index.js

@@ -23,7 +23,49 @@ import { realpathSync } from "fs";
 import { Command } from "commander";
 
 // src/version.ts
-var OMNINODE_VERSION = "2.0.0-alpha.14";
+var OMNINODE_VERSION = "2.0.0-alpha.15";
+
+// src/cli/exit-codes.ts
+var EXIT = {
+  success: 0,
+  general: 1,
+  invalidInput: 2,
+  config: 3,
+  provider: 4,
+  agent: 5,
+  timeout: 6,
+  cancelled: 7,
+  notFound: 8,
+  notImplemented: 9
+};
+function exitCodeFor(error) {
+  if (!isOmniNodeError(error)) return EXIT.general;
+  const code = error.code;
+  if (code === "NOT_IMPLEMENTED") return EXIT.notImplemented;
+  if (code === "AGENT_TIMEOUT") return EXIT.timeout;
+  if (code.startsWith("CONFIG_")) return EXIT.config;
+  if (code.startsWith("PROVIDER_") || code === "MODEL_NOT_FOUND") return EXIT.provider;
+  if (code.startsWith("AGENT_")) return EXIT.agent;
+  if (code.endsWith("_NOT_FOUND")) return EXIT.notFound;
+  if (code.endsWith("_INVALID") || code === "CLI_USAGE" || code === "PROTOCOL_VIOLATION") {
+    return EXIT.invalidInput;
+  }
+  return EXIT.general;
+}
+function exitCodeForStatus(status) {
+  switch (status) {
+    case "completed":
+      return EXIT.success;
+    case "cancelled":
+      return EXIT.cancelled;
+    case "timed_out":
+      return EXIT.timeout;
+    case "failed":
+      return EXIT.general;
+    default:
+      return EXIT.success;
+  }
+}
 
 // src/config/schema.ts
 import { z } from "zod";
@@ -357,6 +399,10 @@ function registerProjectCommands(program) {
   project.command("init").description("Alias of `omninode init`.").option("-f, --force", "Overwrite an existing omninode.yaml.").option("-n, --name <name>", "Project name to write into the configuration.", "My Project").action(async (options) => runInit(options));
 }
 
+// src/cli/commands/providers.ts
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { parseDocument as parseDocument2 } from "yaml";
+
 // src/registry/index.ts
 function registryKey(provider, id) {
   return `${provider}:${id}`;
@@ -409,12 +455,6 @@ var ModelRegistry = class {
 // src/cli/commands/shared.ts
 import { readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 import { parseDocument } from "yaml";
-function notImplemented(command, when) {
-  return new OmniNodeError(
-    "NOT_IMPLEMENTED",
-    `${command} is planned for ${when}. Edit omninode.yaml directly for now.`
-  );
-}
 function truncate(text, max) {
   return text.length > max ? `${text.slice(0, max - 1)}\u2026` : text;
 }
@@ -1977,9 +2017,13 @@ function registerProviderInspect(providerGroup) {
 // src/cli/commands/providers.ts
 function registerProviderCommands(program) {
   const provider = program.command("provider").description("Manage AI providers configured in omninode.yaml.");
-  provider.command("list").description("List configured providers.").action(async () => {
+  provider.command("list").description("List configured providers.").option("--json", "Emit providers as JSON.").action(async (options) => {
     const config = loadConfig();
     const providers = config.project.providers;
+    if (options.json) {
+      console.log(JSON.stringify(providers, null, 2));
+      return;
+    }
     if (providers.length === 0) {
       console.log(
         "No providers configured. Add one with `omninode provider add` or edit omninode.yaml."
@@ -2008,8 +2052,8 @@ function registerProviderCommands(program) {
     "--connect",
     "Run the full provider connect flow (authenticate, fetch, validate, register) where the adapter supports it."
   ).action(async (name, options) => testProvider(name, options));
-  provider.command("remove <name>").description("Remove a provider (planned for Phase 1 follow-up).").action(() => {
-    throw notImplemented("omninode provider remove", "a Phase 1 follow-up");
+  provider.command("remove <name>").description("Remove a provider from omninode.yaml.").action((name) => {
+    removeProvider(name);
   });
   registerProviderInspect(provider);
 }
@@ -2046,6 +2090,26 @@ async function addProvider(options) {
     console.log(`Run \`omninode provider test ${newProvider.name}\` to verify connectivity.`);
   }
 }
+function removeProvider(name) {
+  const configPath = findConfigFile();
+  if (!configPath) {
+    throw new OmniNodeError("CONFIG_NOT_FOUND", "No omninode.yaml found.");
+  }
+  const config = loadConfig();
+  if (!config.project.providers.some((p) => p.name === name)) {
+    throw new ProviderError("PROVIDER_NOT_FOUND", `No provider "${name}" is configured.`);
+  }
+  const doc = parseDocument2(readFileSync3(configPath, "utf8"));
+  const current = doc.getIn(["project", "providers"]);
+  const remaining = (current === void 0 || current === null ? [] : doc.get("project")?.providers ?? []).filter((entry2) => entry2?.name !== name);
+  doc.setIn(["project", "providers"], remaining);
+  const validated = appConfigSchema.safeParse(doc.toJS());
+  if (!validated.success) {
+    throw new OmniNodeError("CONFIG_INVALID", "Removing this provider would produce an invalid configuration.");
+  }
+  writeFileSync3(configPath, doc.toString(), "utf8");
+  console.log(`Removed provider "${name}" from ${configPath}.`);
+}
 async function testProvider(name, options = {}) {
   const config = loadConfig();
   const providerConfig = config.project.providers.find((p) => p.name === name);
@@ -2081,169 +2145,6 @@ function printProviderStatus(status) {
   if (status.message) console.log(`  detail:    ${status.message}`);
 }
 
-// src/cli/commands/models.ts
-var CAPABILITIES = [
-  "chat",
-  "coding",
-  "tools",
-  "vision",
-  "embeddings"
-];
-function registerModelsCommand(program) {
-  program.command("models").description("Discover and list models from configured providers (model registry, \xA78).").argument("[provider]", "Only discover from this provider.").option("-c, --capability <capability>", `Filter by capability: ${CAPABILITIES.join(", ")}.`).action(async (providerName, options) => {
-    const capability = options.capability;
-    if (capability !== void 0 && !CAPABILITIES.includes(capability)) {
-      throw new OmniNodeError(
-        "CLI_USAGE",
-        `Unknown capability "${options.capability}". Valid capabilities: ${CAPABILITIES.join(", ")}.`
-      );
-    }
-    const config = loadConfig();
-    const selected = config.project.providers.filter(
-      (p) => providerName ? p.name === providerName : true
-    );
-    if (selected.length === 0) {
-      throw new OmniNodeError(
-        "PROVIDER_NOT_FOUND",
-        providerName ? `Provider "${providerName}" is not configured.` : "No providers configured. Add one with `omninode provider add`."
-      );
-    }
-    const registry = new ModelRegistry();
-    for (const providerConfig of selected) {
-      try {
-        const provider = createProvider(providerConfig);
-        const discovered = await registry.discoverFrom(provider);
-        console.log(`${providerConfig.name}: ${discovered.length} model(s)`);
-      } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        console.log(`${providerConfig.name}: discovery failed \u2014 ${message}`);
-      }
-    }
-    const models = registry.list({
-      ...providerName !== void 0 ? { provider: providerName } : {},
-      ...capability !== void 0 ? { capability } : {}
-    });
-    if (models.length === 0) {
-      console.log("No models found.");
-      return;
-    }
-    console.log("");
-    for (const model of models) {
-      console.log(`${model.provider}:${model.id}`);
-    }
-  });
-}
-
-// src/cli/commands/agents.ts
-var collectArgs = (value, previous) => [...previous, value];
-function registerAgentCommands(program) {
-  const agent = program.command("agent").description("Manage CLI agents registered with OmniNode.");
-  agent.command("list").description("List configured agents.").action(async () => {
-    const config = loadConfig();
-    const agents = config.project.agents;
-    if (agents.length === 0) {
-      console.log("No agents configured. Add one with `omninode agent add` or edit omninode.yaml.");
-      return;
-    }
-    for (const agent2 of agents) {
-      const command = agent2.command ?? "(no command)";
-      console.log(
-        `${agent2.name}  integration=${agent2.integration}  command=${command}  input=${agent2.inputMode ?? "stdin"}`
-      );
-    }
-  });
-  agent.command("add").description(
-    "Register a CLI agent in omninode.yaml. Agents run as child processes (stdin/stdout); native adapters come in a later phase."
-  ).requiredOption("--name <name>", "Unique agent name.").requiredOption("--command <command>", "Executable command, e.g. opencode").option("--arg <value>", "Additional command argument (repeatable).", collectArgs, []).option("--cwd <dir>", "Working directory for the agent process.").option(
-    "--input-mode <mode>",
-    "How the task is delivered: stdin (prompt on stdin), arg (prompt as last argument) or protocol (\xA721 JSON-lines task protocol).",
-    "stdin"
-  ).option("--env-policy <policy>", "Environment policy: inherit, allowlist, denylist or explicit.").option("--allow-env <name>", "Variable to forward under the allowlist policy (repeatable).", collectArgs).option("--deny-env <name>", "Variable to remove under the denylist policy (repeatable).", collectArgs).option("--max-output-bytes <n>", "Per-stream output budget in bytes (default 5 MiB).", (value) => Number(value)).option("--allow-external-cwd", "Allow a working directory outside the project root.").option(
-    "--timeout-ms <ms>",
-    "Per-task timeout in milliseconds.",
-    (value) => Number(value)
-  ).action(async (options) => addAgent(options));
-  agent.command("test <name>").description("Verify the OmniNode \u2194 agent connection by sending a trivial task.").action(async (name) => testAgent(name));
-  registerAgentInspect(agent);
-}
-async function addAgent(options) {
-  const candidate = agentConfigSchema.safeParse({
-    name: options.name,
-    type: "cli",
-    command: options.command,
-    ...options.arg !== void 0 && options.arg.length > 0 ? { args: options.arg } : {},
-    ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
-    input_mode: options.inputMode,
-    ...options.timeoutMs !== void 0 ? { timeout_ms: options.timeoutMs } : {},
-    ...options.envPolicy !== void 0 ? { env_policy: options.envPolicy } : {},
-    ...options.allowEnv !== void 0 && options.allowEnv.length > 0 ? { env_allowlist: options.allowEnv } : {},
-    ...options.denyEnv !== void 0 && options.denyEnv.length > 0 ? { env_denylist: options.denyEnv } : {},
-    ...options.maxOutputBytes !== void 0 ? { max_output_bytes: options.maxOutputBytes } : {},
-    ...options.allowExternalCwd !== void 0 ? { allow_external_cwd: options.allowExternalCwd } : {}
-  });
-  if (!candidate.success) {
-    const issues = candidate.error.issues.map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`).join("; ");
-    throw new OmniNodeError("CLI_USAGE", `Invalid agent options: ${issues}`);
-  }
-  const newAgent = candidate.data;
-  const existing = loadConfig();
-  if (existing.project.agents.some((a) => a.name === newAgent.name)) {
-    throw new OmniNodeError(
-      "CLI_USAGE",
-      `Agent "${newAgent.name}" already exists in omninode.yaml. Remove it first or pick another name.`
-    );
-  }
-  const configPath = appendToConfigList("agents", newAgent);
-  console.log(`Added agent "${newAgent.name}" (${newAgent.type}, input=${newAgent.input_mode}) to ${configPath}.`);
-  console.log(`Run \`omninode agent test ${newAgent.name}\` to verify the connection.`);
-}
-async function testAgent(name) {
-  const config = loadConfig();
-  const agentConfig = config.project.agents.find((a) => a.name === name);
-  if (!agentConfig) {
-    const available = config.project.agents.map((a) => a.name).join(", ") || "(none)";
-    throw new AgentError(
-      "AGENT_NOT_FOUND",
-      `Agent "${name}" is not configured. Configured agents: ${available}.`
-    );
-  }
-  const agent = createAgent(agentConfig);
-  console.log(
-    `Testing agent "${name}" (${agent.info.integration}, input=${agentConfig.inputMode ?? "stdin"}) \u2014 sending a trivial task.`
-  );
-  const result = await agent.run({
-    taskId: `test-${Date.now()}`,
-    objective: "Reply with the single word: OK"
-  });
-  console.log(`  status: ${result.status}`);
-  if (result.exitCode !== void 0) console.log(`  exit:   ${result.exitCode}`);
-  if (result.summary) console.log(`  output: ${result.summary}`);
-  if (result.rawOutput && result.rawOutput !== result.summary) {
-    console.log(`  raw:    ${result.rawOutput.slice(0, 200).replace(/\n/g, " ")}`);
-  }
-  if (result.error) console.log(`  error:  ${result.error}`);
-  if (result.status !== "completed") process.exitCode = 1;
-}
-
-// src/cli/commands/roles.ts
-function registerRoleCommands(program) {
-  const role = program.command("role").description("Inspect roles defined in omninode.yaml.");
-  role.command("list").description("List configured roles.").action(async () => {
-    const config = loadConfig();
-    const roles = config.project.roles;
-    if (roles.length === 0) {
-      console.log("No roles configured. Add one under `project.roles` in omninode.yaml.");
-      return;
-    }
-    for (const role2 of roles) {
-      console.log(`${role2.id}  ${role2.name}`);
-      for (const responsibility of role2.responsibilities) {
-        console.log(`  - ${responsibility}`);
-      }
-    }
-  });
-}
-
 // src/tasks/engine.ts
 import { randomBytes } from "crypto";
 var ALLOWED_TRANSITIONS = {
@@ -2587,6 +2488,139 @@ function createTaskEngine(config, log = logger, directory) {
   });
 }
 
+// src/cli/commands/agents.ts
+var collectArgs = (value, previous) => [...previous, value];
+function registerAgentCommands(program) {
+  const agent = program.command("agent").description("Manage CLI agents registered with OmniNode.");
+  agent.command("list").description("List configured agents.").option("--json", "Emit agents as JSON.").action(async (options) => {
+    const config = loadConfig();
+    const agents = config.project.agents;
+    if (options.json) {
+      console.log(JSON.stringify(config.project.agents, null, 2));
+      return;
+    }
+    if (agents.length === 0) {
+      console.log("No agents configured. Add one with `omninode agent add` or edit omninode.yaml.");
+      return;
+    }
+    for (const agent2 of agents) {
+      const command = agent2.command ?? "(no command)";
+      console.log(
+        `${agent2.name}  integration=${agent2.integration}  command=${command}  input=${agent2.inputMode ?? "stdin"}`
+      );
+    }
+  });
+  agent.command("add").description(
+    "Register a CLI agent in omninode.yaml. Agents run as child processes (stdin/stdout); native adapters come in a later phase."
+  ).requiredOption("--name <name>", "Unique agent name.").requiredOption("--command <command>", "Executable command, e.g. opencode").option("--arg <value>", "Additional command argument (repeatable).", collectArgs, []).option("--cwd <dir>", "Working directory for the agent process.").option(
+    "--input-mode <mode>",
+    "How the task is delivered: stdin (prompt on stdin), arg (prompt as last argument) or protocol (\xA721 JSON-lines task protocol).",
+    "stdin"
+  ).option("--env-policy <policy>", "Environment policy: inherit, allowlist, denylist or explicit.").option("--allow-env <name>", "Variable to forward under the allowlist policy (repeatable).", collectArgs).option("--deny-env <name>", "Variable to remove under the denylist policy (repeatable).", collectArgs).option("--max-output-bytes <n>", "Per-stream output budget in bytes (default 5 MiB).", (value) => Number(value)).option("--allow-external-cwd", "Allow a working directory outside the project root.").option(
+    "--timeout-ms <ms>",
+    "Per-task timeout in milliseconds.",
+    (value) => Number(value)
+  ).action(async (options) => addAgent(options));
+  agent.command("run <name> <objective>").description("Run a single task through this agent immediately.").action(async (name, objective) => {
+    const config = loadConfig();
+    const agentConfig = config.project.agents.find((a) => a.name === name);
+    if (!agentConfig) {
+      throw new AgentError("AGENT_NOT_FOUND", `No agent "${name}" is configured.`);
+    }
+    const engine = createTaskEngine(config);
+    const task = await engine.create({ objective, agent: name, project: config.project.name });
+    const finished = await engine.run(task.id);
+    console.log(`  id:      ${finished.id}`);
+    console.log(`  status:  ${finished.status}`);
+    if (finished.result?.summary) console.log(`  summary: ${finished.result.summary}`);
+    if (finished.result?.error) console.log(`  error:   ${finished.result.error}`);
+    process.exitCode = exitCodeForStatus(finished.status);
+  });
+  agent.command("test <name>").description("Verify the OmniNode \u2194 agent connection by sending a trivial task.").action(async (name) => testAgent(name));
+  registerAgentInspect(agent);
+}
+async function addAgent(options) {
+  const candidate = agentConfigSchema.safeParse({
+    name: options.name,
+    type: "cli",
+    command: options.command,
+    ...options.arg !== void 0 && options.arg.length > 0 ? { args: options.arg } : {},
+    ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
+    input_mode: options.inputMode,
+    ...options.timeoutMs !== void 0 ? { timeout_ms: options.timeoutMs } : {},
+    ...options.envPolicy !== void 0 ? { env_policy: options.envPolicy } : {},
+    ...options.allowEnv !== void 0 && options.allowEnv.length > 0 ? { env_allowlist: options.allowEnv } : {},
+    ...options.denyEnv !== void 0 && options.denyEnv.length > 0 ? { env_denylist: options.denyEnv } : {},
+    ...options.maxOutputBytes !== void 0 ? { max_output_bytes: options.maxOutputBytes } : {},
+    ...options.allowExternalCwd !== void 0 ? { allow_external_cwd: options.allowExternalCwd } : {}
+  });
+  if (!candidate.success) {
+    const issues = candidate.error.issues.map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`).join("; ");
+    throw new OmniNodeError("CLI_USAGE", `Invalid agent options: ${issues}`);
+  }
+  const newAgent = candidate.data;
+  const existing = loadConfig();
+  if (existing.project.agents.some((a) => a.name === newAgent.name)) {
+    throw new OmniNodeError(
+      "CLI_USAGE",
+      `Agent "${newAgent.name}" already exists in omninode.yaml. Remove it first or pick another name.`
+    );
+  }
+  const configPath = appendToConfigList("agents", newAgent);
+  console.log(`Added agent "${newAgent.name}" (${newAgent.type}, input=${newAgent.input_mode}) to ${configPath}.`);
+  console.log(`Run \`omninode agent test ${newAgent.name}\` to verify the connection.`);
+}
+async function testAgent(name) {
+  const config = loadConfig();
+  const agentConfig = config.project.agents.find((a) => a.name === name);
+  if (!agentConfig) {
+    const available = config.project.agents.map((a) => a.name).join(", ") || "(none)";
+    throw new AgentError(
+      "AGENT_NOT_FOUND",
+      `Agent "${name}" is not configured. Configured agents: ${available}.`
+    );
+  }
+  const agent = createAgent(agentConfig);
+  console.log(
+    `Testing agent "${name}" (${agent.info.integration}, input=${agentConfig.inputMode ?? "stdin"}) \u2014 sending a trivial task.`
+  );
+  const result = await agent.run({
+    taskId: `test-${Date.now()}`,
+    objective: "Reply with the single word: OK"
+  });
+  console.log(`  status: ${result.status}`);
+  if (result.exitCode !== void 0) console.log(`  exit:   ${result.exitCode}`);
+  if (result.summary) console.log(`  output: ${result.summary}`);
+  if (result.rawOutput && result.rawOutput !== result.summary) {
+    console.log(`  raw:    ${result.rawOutput.slice(0, 200).replace(/\n/g, " ")}`);
+  }
+  if (result.error) console.log(`  error:  ${result.error}`);
+  if (result.status !== "completed") process.exitCode = 1;
+}
+
+// src/cli/commands/roles.ts
+function registerRoleCommands(program) {
+  const role = program.command("role").description("Inspect roles defined in omninode.yaml.");
+  role.command("list").description("List configured roles.").option("--json", "Emit roles as JSON.").action(async (options) => {
+    const config = loadConfig();
+    const roles = config.project.roles;
+    if (options.json) {
+      console.log(JSON.stringify(config.project.roles, null, 2));
+      return;
+    }
+    if (roles.length === 0) {
+      console.log("No roles configured. Add one under `project.roles` in omninode.yaml.");
+      return;
+    }
+    for (const role2 of roles) {
+      console.log(`${role2.id}  ${role2.name}`);
+      for (const responsibility of role2.responsibilities) {
+        console.log(`  - ${responsibility}`);
+      }
+    }
+  });
+}
+
 // src/cli/commands/tasks.ts
 var collectFiles = (value, previous) => [...previous, value];
 function registerTaskCommands(program) {
@@ -2614,7 +2648,7 @@ function registerTaskCommands(program) {
     console.log(`Running task ${taskId}...`);
     const finished = await engine.run(taskId);
     printOutcome(finished);
-    if (finished.status !== "completed") process.exitCode = 1;
+    process.exitCode = exitCodeForStatus(finished.status);
   });
   task.command("status <task-id>").description("Show task details and current status.").action(async (taskId) => {
     const config = loadConfig();
@@ -2628,12 +2662,16 @@ function registerTaskCommands(program) {
     }
     printOutcome(found, { verbose: true });
   });
-  task.command("list").description("List tasks in the project's task store.").option("-s, --status <status>", "Filter by status (created, queued, running, completed, failed, cancelled).").action(async (options) => {
+  task.command("list").description("List tasks in the project's task store.").option("-s, --status <status>", "Filter by status (created, queued, running, completed, failed, cancelled).").option("--json", "Emit tasks as JSON.").action(async (options) => {
     const config = loadConfig();
     const engine = createTaskEngine(config);
     const tasks = await engine.list(
       options.status !== void 0 ? { status: options.status } : {}
     );
+    if (options.json) {
+      console.log(JSON.stringify(tasks, null, 2));
+      return;
+    }
     if (tasks.length === 0) {
       console.log("No tasks found. Create one with `omninode task create`.");
       return;
@@ -2657,7 +2695,7 @@ function registerTaskCommands(program) {
     console.log(`Running task ${reset.id}...`);
     const finished = await engine.run(reset.id);
     printOutcome(finished);
-    if (finished.status !== "completed") process.exitCode = 1;
+    process.exitCode = exitCodeForStatus(finished.status);
   });
   registerTaskInspect(task);
 }
@@ -3128,12 +3166,16 @@ function service() {
 }
 function registerReportCommands(program) {
   const report = program.command("report").description("Inspect AI reports collected from tasks and pipelines (\xA716\u2013\xA717).");
-  report.command("list").description("List stored reports.").option("--task <taskId>", "Only reports for this task.").option("--agent <name>", "Only reports from this agent.").action(async (options) => {
+  report.command("list").description("List stored reports.").option("--task <taskId>", "Only reports for this task.").option("--agent <name>", "Only reports from this agent.").option("--json", "Emit reports as JSON.").action(async (options) => {
     const svc = service();
     const reports = await svc.storeRef.listReports({
       ...options.task !== void 0 ? { taskId: options.task } : {},
       ...options.agent !== void 0 ? { agent: options.agent } : {}
     });
+    if (options.json) {
+      console.log(JSON.stringify(reports, null, 2));
+      return;
+    }
     if (reports.length === 0) {
       console.log("No reports stored yet. Run a pipeline to collect some.");
       return;
@@ -3142,11 +3184,15 @@ function registerReportCommands(program) {
       console.log(`${r.id}  ${r.agent.padEnd(10)} ${truncate(r.summary, 60)}`);
     }
   });
-  report.command("combined").description("List combined reports (aggregated intelligence, \xA717).").option("--run <pipelineRunId>", "Only combined reports for this pipeline run.").action(async (options) => {
+  report.command("combined").description("List combined reports (aggregated intelligence, \xA717).").option("--run <pipelineRunId>", "Only combined reports for this pipeline run.").option("--json", "Emit combined reports as JSON.").action(async (options) => {
     const svc = service();
     const combined = await svc.storeRef.listCombined({
       ...options.run !== void 0 ? { pipelineRunId: options.run } : {}
     });
+    if (options.json) {
+      console.log(JSON.stringify(combined, null, 2));
+      return;
+    }
     if (combined.length === 0) {
       console.log("No combined reports stored yet. Run a pipeline to generate one.");
       return;
@@ -3226,6 +3272,10 @@ function registerReportCommands(program) {
   });
 }
 
+// src/cli/commands/pipelines.ts
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { parseDocument as parseDocument3 } from "yaml";
+
 // src/pipelines/engine.ts
 import { randomBytes as randomBytes5 } from "crypto";
 
@@ -4177,9 +4227,13 @@ function buildPipelineEngine(config, log = logger) {
 // src/cli/commands/pipelines.ts
 function registerPipelineCommands(program) {
   const pipeline = program.command("pipeline").description("Run multi-step AI pipelines defined in omninode.yaml (\xA714).");
-  pipeline.command("list").description("List configured pipelines.").action(async () => {
+  pipeline.command("list").description("List configured pipelines.").option("--json", "Emit pipelines as JSON.").action(async (options) => {
     const config = loadConfig();
     const pipelines = config.project.pipelines;
+    if (options.json) {
+      console.log(JSON.stringify(config.project.pipelines, null, 2));
+      return;
+    }
     if (pipelines.length === 0) {
       console.log("No pipelines configured. Add one under `project.pipelines` in omninode.yaml.");
       return;
@@ -4220,6 +4274,9 @@ function registerPipelineCommands(program) {
     console.log(`Cancellation requested for run ${runId}.`);
     console.log("A run executing in another process stops at its next check point.");
   });
+  pipeline.command("create <id>").description("Create a pipeline from a YAML/JSON file and append it to omninode.yaml.").requiredOption("--from <file>", "File containing { objective?, steps: [...] } (YAML or JSON).").action(async (id, options) => {
+    await createPipelineFromFile(id, options.from);
+  });
   pipeline.command("validate <id>").description("Validate a pipeline definition before running it (\xA79.5).").action(async (id) => {
     const config = loadConfig();
     const def = findPipeline(config, id);
@@ -4303,11 +4360,45 @@ async function runPipelineAction(id, objective) {
     console.log(`  result: ${finished.resultSummary}`);
   }
   console.log(`Pipeline ${finished.status}. Run id: ${finished.id}`);
-  if (finished.status !== "completed") process.exitCode = 1;
+  process.exitCode = exitCodeForStatus(finished.status);
 }
 function registerRunAlias(program) {
   program.command("run <id> [objective]").description("Alias of `omninode pipeline run` \u2014 execute a configured pipeline end to end.").action(async (id, objective) => runPipelineAction(id, objective));
 }
+async function createPipelineFromFile(id, file) {
+  const configPath = findConfigFile();
+  if (!configPath) {
+    throw new OmniNodeError("CONFIG_NOT_FOUND", "No omninode.yaml found. Run `omninode init` first.");
+  }
+  let definition;
+  try {
+    definition = parseDocument3(readFileSync4(file, "utf8")).toJS();
+  } catch (error) {
+    throw new PipelineError("PIPELINE_INVALID", `Could not read pipeline definition from ${file}.`, {
+      cause: error
+    });
+  }
+  const candidate = pipelineConfigSchema.safeParse({ id, ...definition });
+  if (!candidate.success) {
+    const issues = candidate.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ");
+    throw new PipelineError("PIPELINE_INVALID", `Invalid pipeline definition: ${issues}`);
+  }
+  const engine = buildPipelineEngine(loadConfig());
+  engine.validate({ id, ...candidate.data });
+  const doc = parseDocument3(readFileSync4(configPath, "utf8"));
+  if (doc.getIn(["project", "pipelines"]) === void 0) {
+    doc.setIn(["project", "pipelines"], [candidate.data]);
+  } else {
+    doc.addIn(["project", "pipelines"], candidate.data);
+  }
+  const validated = appConfigSchema.safeParse(doc.toJS());
+  if (!validated.success) {
+    throw new PipelineError("PIPELINE_INVALID", "Adding this pipeline would produce an invalid configuration.");
+  }
+  writeFileSync4(configPath, doc.toString(), "utf8");
+  console.log(`Created pipeline "${id}" (${candidate.data.steps.length} step(s)) in ${configPath}.`);
+  console.log(`Run it with: omninode pipeline run ${id} "<objective>"`);
+}
 function isInterrupted(run2) {
   return run2.status === "running" && run2.finishedAt === void 0;
 }
@@ -4341,7 +4432,7 @@ function registerMemoryCommands(program) {
       console.log(`  ${scope}: ${count}`);
     }
   });
-  memory.command("query <text>").description("Search memory for entries relevant to the text.").option("-s, --scope <scope>", "Restrict to a scope: project, task, role or knowledge.").option("-n, --limit <count>", "Maximum entries to return.", (value) => Number(value), 10).action(async (text, options) => {
+  memory.command("query <text>").description("Search memory for entries relevant to the text.").option("-s, --scope <scope>", "Restrict to a scope: project, task, role or knowledge.").option("-n, --limit <count>", "Maximum entries to return.", (value) => Number(value), 10).option("--json", "Emit entries as JSON.").action(async (text, options) => {
     const config = loadConfig();
     const svc = new MemoryService(createMemoryProvider(config.project.memory));
     const entries = await svc.providerRef.query({
@@ -4349,6 +4440,10 @@ function registerMemoryCommands(program) {
       ...options.scope !== void 0 ? { scope: options.scope } : {},
       limit: options.limit
     });
+    if (options.json) {
+      console.log(JSON.stringify(entries, null, 2));
+      return;
+    }
     if (entries.length === 0) {
       console.log("No relevant memory found.");
       return;
@@ -4379,11 +4474,15 @@ function registerMemoryCommands(program) {
 // src/cli/commands/plan.ts
 function registerPlanCommands(program) {
   const plan = program.command("plan").description("Inspect implementation plans produced by the planner layer (\xA718).");
-  plan.command("list").description("List stored plans.").option("--run <pipelineRunId>", "Only plans for this pipeline run.").action(async (options) => {
+  plan.command("list").description("List stored plans.").option("--run <pipelineRunId>", "Only plans for this pipeline run.").option("--json", "Emit plans as JSON.").action(async (options) => {
     const store = new FilePlanStore();
     const plans = await store.list({
       ...options.run !== void 0 ? { pipelineRunId: options.run } : {}
     });
+    if (options.json) {
+      console.log(JSON.stringify(plans, null, 2));
+      return;
+    }
     if (plans.length === 0) {
       console.log("No plans stored yet. Run a pipeline with a plan step to generate one.");
       return;
@@ -4650,6 +4749,122 @@ Trust model: agents execute with the permissions of the OS user running OmniNode
   });
 }
 
+// src/cli/commands/config.ts
+import { readFileSync as readFileSync5 } from "fs";
+function registerConfigCommands(program) {
+  const config = program.command("config").description("Inspect the project configuration (omninode.yaml).");
+  config.command("path").description("Print the path of the configuration file in use.").action(() => {
+    const path = findConfigFile();
+    console.log(path ?? "no omninode.yaml found");
+  });
+  config.command("show").description("Print the effective configuration (credential references only, never values).").option("--json", "Emit the configuration as JSON.").action((options) => {
+    const resolved = loadConfig();
+    const payload = {
+      project: resolved.project.name,
+      providers: resolved.project.providers.map((p) => ({
+        name: p.name,
+        type: p.type,
+        baseUrl: p.baseUrl,
+        apiKeyEnvVar: p.apiKeyEnvVar ?? null
+      })),
+      agents: resolved.project.agents.map((a) => ({ name: a.name, command: a.command ?? null, inputMode: a.inputMode })),
+      roles: resolved.project.roles.map((r) => r.id),
+      pipelines: resolved.project.pipelines.map((p) => p.id),
+      memory: resolved.project.memory ?? null,
+      logging: resolved.logging ?? null
+    };
+    if (options.json) {
+      console.log(JSON.stringify(payload, null, 2));
+      return;
+    }
+    console.log(`project:   ${payload.project}`);
+    console.log(`providers: ${payload.providers.map((p) => `${p.name} (${p.type}, key=${p.apiKeyEnvVar ? `$${p.apiKeyEnvVar}` : "none"})`).join(", ") || "none"}`);
+    console.log(`agents:    ${payload.agents.map((a) => a.name).join(", ") || "none"}`);
+    console.log(`roles:     ${payload.roles.join(", ") || "none"}`);
+    console.log(`pipelines: ${payload.pipelines.join(", ") || "none"}`);
+    console.log(`memory:    ${payload.memory ? `${payload.memory.provider}${payload.memory.required ? " (required)" : ""}` : "not configured"}`);
+  });
+  config.command("validate").description("Validate the configuration file, including the inline-secret scan.").action(() => {
+    const path = findConfigFile();
+    if (!path) throw new OmniNodeError("CONFIG_NOT_FOUND", "No omninode.yaml found.");
+    const findings = scanForInlineSecrets(readFileSync5(path, "utf8"));
+    if (findings.length > 0) {
+      throw new OmniNodeError(
+        "CONFIG_INVALID",
+        `${path} contains ${findings.length} inline secret(s) (line ${findings.map((f) => f.line).join(", ")}). Use environment-variable references.`
+      );
+    }
+    const resolved = loadConfig();
+    console.log(`${path} is valid \u2014 project "${resolved.project.name}" with ${resolved.project.providers.length} provider(s), ${resolved.project.agents.length} agent(s), ${resolved.project.pipelines.length} pipeline(s).`);
+  });
+}
+
+// src/cli/commands/models.ts
+var CAPABILITIES = [
+  "chat",
+  "coding",
+  "tools",
+  "vision",
+  "embeddings"
+];
+function registerModelsCommand(program) {
+  for (const name of ["models", "model"]) {
+    registerModelGroup(program, name);
+  }
+}
+function registerModelGroup(program, name) {
+  program.command(name).description("Discover and list models from configured providers (model registry, \xA78).").argument("[provider]", "Only discover from this provider.").option("-c, --capability <capability>", `Filter by capability: ${CAPABILITIES.join(", ")}.`).option("--json", "Emit the discovered models as JSON.").action(async (providerName, options) => {
+    const capability = options.capability;
+    if (capability !== void 0 && !CAPABILITIES.includes(capability)) {
+      throw new OmniNodeError(
+        "CLI_USAGE",
+        `Unknown capability "${options.capability}". Valid capabilities: ${CAPABILITIES.join(", ")}.`
+      );
+    }
+    const config = loadConfig();
+    const selected = config.project.providers.filter(
+      (p) => providerName ? p.name === providerName : true
+    );
+    if (selected.length === 0) {
+      if (options.json) {
+        console.log("[]");
+        return;
+      }
+      throw new OmniNodeError(
+        "PROVIDER_NOT_FOUND",
+        providerName ? `Provider "${providerName}" is not configured.` : "No providers configured. Add one with `omninode provider add`."
+      );
+    }
+    const registry = new ModelRegistry();
+    for (const providerConfig of selected) {
+      try {
+        const provider = createProvider(providerConfig);
+        const discovered = await registry.discoverFrom(provider);
+        console.log(`${providerConfig.name}: ${discovered.length} model(s)`);
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.log(`${providerConfig.name}: discovery failed \u2014 ${message}`);
+      }
+    }
+    const models = registry.list({
+      ...providerName !== void 0 ? { provider: providerName } : {},
+      ...capability !== void 0 ? { capability } : {}
+    });
+    if (options.json) {
+      console.log(JSON.stringify(models, null, 2));
+      return;
+    }
+    if (models.length === 0) {
+      console.log("No models found.");
+      return;
+    }
+    console.log("");
+    for (const model of models) {
+      console.log(`${model.provider}:${model.id}`);
+    }
+  });
+}
+
 // src/cli/index.ts
 function createProgram() {
   const program = new Command();
@@ -4671,6 +4886,7 @@ function createProgram() {
   registerAuditCommand(program);
   registerMigrateCommand(program);
   registerSecurityCommand(program);
+  registerConfigCommands(program);
   registerRunAlias(program);
   return program;
 }
@@ -4693,15 +4909,16 @@ async function run(argv) {
   }
 }
 function handleError(error) {
+  const code = exitCodeFor(error);
   if (isOmniNodeError(error)) {
     console.error(`error: [${error.code}] ${error.message}`);
     if (error.details !== void 0) {
       console.error(JSON.stringify(error.details, null, 2));
     }
-    process.exit(1);
+    process.exit(code);
   }
   console.error(error instanceof Error ? error.message : String(error));
-  process.exit(1);
+  process.exit(code);
 }
 var entry = process.argv[1] ? pathToFileURL(realpathSync(process.argv[1])).href : "";
 if (import.meta.url === entry) {