@hilbras/omninode 2.0.0-alpha.19 → 2.0.0-alpha.20

package/README.md

@@ -5,7 +5,7 @@
 [![npm downloads](https://img.shields.io/npm/dm/@hilbras/omninode)](https://www.npmjs.com/package/@hilbras/omninode)
 [![Node.js support](https://img.shields.io/node/v/@hilbras/omninode)](https://www.npmjs.com/package/@hilbras/omninode)
 [![License: MIT](https://img.shields.io/github/license/Hilbras/OmniNode)](LICENSE)
-[![v2 progress](https://img.shields.io/badge/v2-19%20%2F%2024%20phases-8A2BE2)](docs/ROADMAP_V2.md)
+[![v2 progress](https://img.shields.io/badge/v2-20%20%2F%2024%20phases-8A2BE2)](docs/ROADMAP_V2.md)
 
 **OmniNode** is a provider-agnostic multi-AI orchestration platform. It coordinates
 CLI-based AI agents, AI providers, persistent memory, roles, reports and planning
@@ -36,7 +36,7 @@ release — is in progress**, shipping as tagged prereleases (`v2.0.0-alpha.N`).
 | End-to-end workflow in one command | `omninode run <pipeline> "<objective>"` |
 | Audit log, security model, examples, Docker runtime | [`src/audit/`](src/audit), [docs/SECURITY.md](docs/SECURITY.md) |
 
-### v2.0.0 progress (19 of 24 phases)
+### v2.0.0 progress (20 of 24 phases)
 
 | # | Phase | Outcome |
 | --- | --- | --- |
@@ -59,7 +59,8 @@ release — is in progress**, shipping as tagged prereleases (`v2.0.0-alpha.N`).
 | 17 | Testing expansion | explicit failure matrix + regression tests |
 | 18 | Documentation overhaul | complete document set, rewritten README |
 | 19 | API & package quality | curated public surface with CI guards, boundary validation, verified package contents |
-| 20–24 | Performance · developer experience · CI/CD · migration tooling · final hardening | next: performance |
+| 20 | Performance & resources | bounded reports/context/audit log, concurrency limits, released handles |
+| 21–24 | Developer experience · CI/CD · migration tooling · final hardening | next: developer experience |
 
 The roadmap is [docs/ROADMAP_V2.md](docs/ROADMAP_V2.md); the completed v1 plan is
 [docs/DEVELOPMENT_PLAN.md](docs/DEVELOPMENT_PLAN.md).

package/dist/cli/index.js

@@ -23,7 +23,7 @@ import { realpathSync } from "fs";
 import { Command } from "commander";
 
 // src/version.ts
-var OMNINODE_VERSION = "2.0.0-alpha.19";
+var OMNINODE_VERSION = "2.0.0-alpha.20";
 
 // src/cli/exit-codes.ts
 var EXIT = {
@@ -1183,6 +1183,9 @@ var ProcessAgent = class {
         clearTimeout(timer);
         this.running.delete(input.taskId);
         GLOBAL_RUNNING.delete(child);
+        child.stdin?.destroy();
+        child.stdout?.destroy();
+        child.stderr?.destroy();
         finish();
       };
       const collect = (into, chunk) => {
@@ -2627,18 +2630,31 @@ function sleep(ms) {
 }
 
 // src/audit/index.ts
-import { appendFile, mkdir as mkdir2, readFile as readFile2 } from "fs/promises";
+import { appendFile, mkdir as mkdir2, readFile as readFile2, rename as rename2, stat as stat2 } from "fs/promises";
 import { dirname as dirname2 } from "path";
+var DEFAULT_AUDIT_MAX_BYTES = 5 * 1024 * 1024;
 var FileAuditLog = class {
   filePath;
+  maxBytes;
   log;
-  constructor(directory = `${process.cwd()}/.omninode`, log = logger) {
+  constructor(directory = `${process.cwd()}/.omninode`, log = logger, maxBytes = DEFAULT_AUDIT_MAX_BYTES) {
     this.filePath = `${directory}/audit.jsonl`;
+    this.maxBytes = maxBytes;
     this.log = log.child({ component: "audit" });
   }
+  /** Rotates the log once it passes the size budget, keeping one backup. */
+  async rotateIfNeeded() {
+    try {
+      const stats = await stat2(this.filePath);
+      if (stats.size <= this.maxBytes) return;
+      await rename2(this.filePath, `${this.filePath}.1`);
+    } catch {
+    }
+  }
   async record(event) {
     try {
       await mkdir2(dirname2(this.filePath), { recursive: true });
+      await this.rotateIfNeeded();
       await appendFile(this.filePath, `${JSON.stringify(event)}
 `, "utf8");
     } catch (error) {
@@ -3018,6 +3034,7 @@ var SEVERITY_RANK = {
   high: 3,
   critical: 4
 };
+var MAX_COMBINED_FINDINGS = 200;
 function aggregateReports(reports, options = {}) {
   const threshold = options.similarityThreshold ?? 0.7;
   const findingGroups = [];
@@ -3036,6 +3053,10 @@ function aggregateReports(reports, options = {}) {
   const agreements = findingGroups.filter(
     (group) => group.sources.length > 1 && group.severity !== void 0 && new Set(Object.values(group.severityBySource ?? {})).size === 1
   );
+  const maxFindings = options.maxFindings ?? MAX_COMBINED_FINDINGS;
+  const orderedFindings = findingGroups.sort((a, b) => rank(b) - rank(a));
+  const retainedFindings = orderedFindings.slice(0, maxFindings);
+  const droppedFindings = orderedFindings.length - retainedFindings.length;
   const disputed = conflicts.length;
   const summary = `${reports.length} report(s) from ${sources.length > 0 ? sources.join(", ") : "no agents"}: ${findingGroups.length} unique finding group(s) (${totalRawFindings} raw), ${agreements.length} agreement(s), ${disputed} conflict(s), ${recommendationGroups.length} recommendation group(s).`;
   return {
@@ -3045,7 +3066,7 @@ function aggregateReports(reports, options = {}) {
     ...options.pipelineRunId !== void 0 ? { pipelineRunId: options.pipelineRunId } : {},
     taskIds: options.taskIds ?? [],
     summary,
-    findings: findingGroups.sort((a, b) => rank(b) - rank(a)),
+    findings: retainedFindings,
     agreements,
     conflicts,
     recommendations: recommendationGroups,
@@ -3058,7 +3079,8 @@ function aggregateReports(reports, options = {}) {
       rawFindings: totalRawFindings,
       findingGroups: findingGroups.length,
       agreements: agreements.length,
-      conflicts: conflicts.length
+      conflicts: conflicts.length,
+      findingsTruncated: droppedFindings
     }
   };
 }
@@ -3796,6 +3818,13 @@ function describe(error) {
 }
 
 // src/pipelines/engine.ts
+var DEFAULT_MAX_PARALLEL_STEPS = 8;
+var MAX_COMBINED_CONTEXT_CHARS = 2e4;
+function budgetContext(context, maxChars = MAX_COMBINED_CONTEXT_CHARS) {
+  if (context.length <= maxChars) return context;
+  const marker = "\n[earlier context trimmed]\n";
+  return marker + context.slice(context.length - (maxChars - marker.length));
+}
 var PipelineEngine = class {
   constructor(options) {
     this.options = options;
@@ -3991,24 +4020,35 @@ var PipelineEngine = class {
       if (ready.length === 0) {
         throw new PipelineError("PIPELINE_FAILED", `Pipeline "${def.id}" scheduling stalled.`);
       }
-      const settled = await Promise.all(
-        ready.map(async (step) => {
-          if (!this.shouldRun(step, deps.get(step.id) ?? [], outcomes)) {
-            return { status: "skipped", summary: "", taskIds: [], reports: [] };
-          }
-          const ctx = {
-            objective,
-            ...role ? { role } : {},
-            combinedContext: contextParts.join("\n\n"),
-            reports: [...allReports],
-            pipelineRunId: run2.id,
-            runId: run2.id,
-            pipelineDefId: def.id,
-            taskId: run2.id
-          };
-          return this.executeStep(step, ctx);
-        })
-      );
+      const settled = [];
+      const limit = Math.max(1, this.options.maxParallelSteps ?? DEFAULT_MAX_PARALLEL_STEPS);
+      for (let offset = 0; offset < ready.length; offset += limit) {
+        const batch = ready.slice(offset, offset + limit);
+        settled.push(
+          ...await Promise.all(
+            batch.map(async (step) => {
+              if (!this.shouldRun(step, deps.get(step.id) ?? [], outcomes)) {
+                return { status: "skipped", summary: "", taskIds: [], reports: [] };
+              }
+              const ctx = {
+                maxContextChars: this.options.maxContextChars,
+                objective,
+                ...role ? { role } : {},
+                combinedContext: budgetContext(
+                  contextParts.join("\n\n"),
+                  this.options.maxContextChars ?? MAX_COMBINED_CONTEXT_CHARS
+                ),
+                reports: [...allReports],
+                pipelineRunId: run2.id,
+                runId: run2.id,
+                pipelineDefId: def.id,
+                taskId: run2.id
+              };
+              return this.executeStep(step, ctx);
+            })
+          )
+        );
+      }
       ready.forEach((step, index) => {
         const outcome = settled[index];
         outcomes.set(step.id, outcome);
@@ -4233,7 +4273,9 @@ ${contribution}`);
     };
   }
   async runPlan(step, ctx) {
-    const aggregated = ctx.reports.length > 0 ? aggregateReports(ctx.reports) : void 0;
+    const aggregated = ctx.reports.length > 0 ? aggregateReports(ctx.reports, {
+      ...step.constraints !== void 0 && step.constraints.length > 0 ? { maxFindings: MAX_COMBINED_FINDINGS } : {}
+    }) : void 0;
     const request = {
       objective: ctx.objective,
       reports: ctx.reports,