@hilbras/omninode 2.0.0-alpha.19 → 2.0.0-alpha.20

package/dist/index.d.ts

@@ -2161,11 +2161,16 @@ interface AuditEvent {
 interface AuditSink {
     record(event: AuditEvent): Promise<void>;
 }
+/** Default rotation threshold: the audit log is rotated past this size (§24). */
+declare const DEFAULT_AUDIT_MAX_BYTES: number;
 /** Append-only JSONL sink. Failures are logged, never propagated. */
 declare class FileAuditLog implements AuditSink {
     private readonly filePath;
+    private readonly maxBytes;
     private readonly log;
-    constructor(directory?: string, log?: Logger);
+    constructor(directory?: string, log?: Logger, maxBytes?: number);
+    /** Rotates the log once it passes the size budget, keeping one backup. */
+    private rotateIfNeeded;
     record(event: AuditEvent): Promise<void>;
     /** Recent events, oldest first; used by the CLI. */
     recent(limit?: number): Promise<AuditEvent[]>;
@@ -2740,12 +2745,16 @@ interface ExtractionMeta {
 }
 declare function extractReportFromText(raw: string, meta: ExtractionMeta): Report;
 
+/** Default cap on retained finding groups per combined report (§24, memory). */
+declare const MAX_COMBINED_FINDINGS = 200;
 interface AggregateOptions {
     objective?: string;
     pipelineRunId?: string;
     taskIds?: string[];
     /** Token-set Jaccard similarity above which findings are merged. */
     similarityThreshold?: number;
+    /** Cap on retained finding groups; excess is counted in metadata. */
+    maxFindings?: number;
 }
 declare function aggregateReports(reports: Report[], options?: AggregateOptions): CombinedReport;
 /**
@@ -2992,6 +3001,10 @@ interface PipelineEngineOptions {
     audit?: AuditSink;
     /** When present, finished runs have their reports collected, stored and combined (§16–§17). */
     reports?: ReportService;
+    /** Max steps executed concurrently within one wave (§24 execution-storm guard). */
+    maxParallelSteps?: number;
+    /** Combined-context budget in characters (§24 memory bound). */
+    maxContextChars?: number;
     log?: Logger;
 }
 interface RunPipelineOptions {
@@ -2999,6 +3012,12 @@ interface RunPipelineOptions {
     onStep?: (stepRun: PipelineStepRun) => void;
 }
 
+/** Default cap on steps running concurrently in one wave (§24). */
+declare const DEFAULT_MAX_PARALLEL_STEPS = 8;
+/** Default combined-context budget for downstream steps (§24). */
+declare const MAX_COMBINED_CONTEXT_CHARS = 20000;
+/** Keeps the most recent context within budget, marking what was dropped. */
+declare function budgetContext(context: string, maxChars?: number): string;
 declare class PipelineEngine implements IPipelineExecutor {
     private readonly options;
     private readonly log;
@@ -3179,6 +3198,6 @@ declare class ProtocolSession {
     sawV2: boolean;
 }
 
-declare const OMNINODE_VERSION = "2.0.0-alpha.19";
+declare const OMNINODE_VERSION = "2.0.0-alpha.20";
 
-export { AgentAdapterRegistry, type AgentConfig, type AgentDescriptor, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type ArtifactPayload, type AskedQuestion, type AuditAction, type AuditEvent, type AuditSink, type AuditSink as AuditStore, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatStreamChunk, type ChatUsage, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, type ConflictPosition, ConsoleLogSink, type CreateProviderOptions, type CreateTaskInput, type CwdValidation, DEFAULT_MAX_OUTPUT_BYTES, type DecodeResult, type DefaultChatOptions, type DocumentState, type Durability, type EnvPolicy, type EnvelopeMeta, type Evidence, type EvidenceInput, type EvidenceKind, type ExecutionRecord, FileAuditLog, FilePipelineRunStore, FilePlanStore, FileReportStore, FileTaskStore, type Finding, type FindingOrigin, type FindingSeverity, type FindingSource, type HelloResult, HeuristicPlanner, type IAgent, type IAgentAdapter, type IChatProvider, type IMemoryProvider, type IPipelineExecutor, type IPlanner, type IProvider, type JsonDocument, JsonFileStore, type JsonFileStoreOptions, type LoadConfigOptions, type LoadConfigResult, LocalMemoryProvider, type LogFormat, type LogLevel, type LogSink, Logger, type LoggerOptions, MAX_CONTEXT_CHARS, MAX_MESSAGE_BYTES, MAX_REPORT_BYTES, type MemoryCategory, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryProviderMetadata, type MemoryQuery, type MemoryScope, MemoryService, type MemoryServiceOptions, LocalMemoryProvider as MemoryStore, type MemoryTaskContext, type MessageEnvelope, type MigrationReport, type Modality, type ModelCapabilities, type ModelInfo, ModelPlanner, type ModelPlannerOptions, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, OmniHilbrasProvider, OmniNodeError, OpenAICompatibleProvider, PROTOCOL_V2, type PipelineDefinition, PipelineEngine, PipelineError, type PipelineRun, type PipelineRunAttempt, type PipelineRunFilter, type PipelineRunOptions, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepKind, type PipelineStepRun, type PipelineRunStore as PipelineStore, type Plan, type PlanFilter, type PlanRequest, type PlanStep, type PlanStore, type PlanValidationIssue, type PlanValidationResult, PlannerError, ProcessAgent, ProcessAgentAdapter, type Project, ProjectStores, type ProtocolAgentToNodeType, ProtocolDecoder, type ProtocolEnvelope, ProtocolError, type ProtocolMessageType, type ProtocolNodeToAgentType, ProtocolSession, type ProtocolViolation, type ProtocolViolationCode, type ProviderAuthentication, type ProviderCapability, type ProviderConfig, ProviderError, type ProviderHealth, type ProviderStatus, type ProviderType, type QuestionPayload, type QuestionResponder, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportArtifact, type ReportConflict, type ReportFilter, type ReportPayload, ReportService, type ReportStore, type RoleDefinition, RoleRegistry, type RunPipelineOptions, type RunTaskOptions, SCHEMA_VERSION, SUPPORTED_PROTOCOL_VERSIONS, type SessionIds, TERMINAL_TASK_STATUSES, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, buildAgentRegistry, buildChildEnv, buildHello, buildHelloAck, buildPipelineEngine, buildPlanner, buildPlannerContext, buildRoleRegistry, composeTaskText, configDiagnostics, configureLogger, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, decodeMessage, defaultAgentAdapters, defaultProjectConfigYaml, describeExit, describeSecretFindings, detectConflicts, encodeMessage, envelope, expandEnvRefs, extractMessage, extractReportFromText, findConfigFile, inspectDocument, isNetworkError, isOmniNodeError, isRetryable, isSupportedProtocol, isTimeoutError, killTree, kindFromStatus, loadConfig, loadConfigDetailed, logger, migrateProjectStores, newMessageId, normalizeEvidence, normalizeFinding, parseHello, parsePlanJson, parseRetryAfter, pipelineConfigSchema, pipelineStepConfigSchema, planJsonSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, providerHttpError, providerTransportError, readDocument, registryKey, requestJson, resolveApiKey, resolveEnvPolicy, roleConfigSchema, sanitizeChunk, scanForInlineSecrets, similar, validateEnvelope, validatePlan, validateReport, validateWorkingDirectory, writeFileAtomic };
+export { AgentAdapterRegistry, type AgentConfig, type AgentDescriptor, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type ArtifactPayload, type AskedQuestion, type AuditAction, type AuditEvent, type AuditSink, type AuditSink as AuditStore, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatStreamChunk, type ChatUsage, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, type ConflictPosition, ConsoleLogSink, type CreateProviderOptions, type CreateTaskInput, type CwdValidation, DEFAULT_AUDIT_MAX_BYTES, DEFAULT_MAX_OUTPUT_BYTES, DEFAULT_MAX_PARALLEL_STEPS, type DecodeResult, type DefaultChatOptions, type DocumentState, type Durability, type EnvPolicy, type EnvelopeMeta, type Evidence, type EvidenceInput, type EvidenceKind, type ExecutionRecord, FileAuditLog, FilePipelineRunStore, FilePlanStore, FileReportStore, FileTaskStore, type Finding, type FindingOrigin, type FindingSeverity, type FindingSource, type HelloResult, HeuristicPlanner, type IAgent, type IAgentAdapter, type IChatProvider, type IMemoryProvider, type IPipelineExecutor, type IPlanner, type IProvider, type JsonDocument, JsonFileStore, type JsonFileStoreOptions, type LoadConfigOptions, type LoadConfigResult, LocalMemoryProvider, type LogFormat, type LogLevel, type LogSink, Logger, type LoggerOptions, MAX_COMBINED_CONTEXT_CHARS, MAX_COMBINED_FINDINGS, MAX_CONTEXT_CHARS, MAX_MESSAGE_BYTES, MAX_REPORT_BYTES, type MemoryCategory, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryProviderMetadata, type MemoryQuery, type MemoryScope, MemoryService, type MemoryServiceOptions, LocalMemoryProvider as MemoryStore, type MemoryTaskContext, type MessageEnvelope, type MigrationReport, type Modality, type ModelCapabilities, type ModelInfo, ModelPlanner, type ModelPlannerOptions, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, OmniHilbrasProvider, OmniNodeError, OpenAICompatibleProvider, PROTOCOL_V2, type PipelineDefinition, PipelineEngine, PipelineError, type PipelineRun, type PipelineRunAttempt, type PipelineRunFilter, type PipelineRunOptions, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepKind, type PipelineStepRun, type PipelineRunStore as PipelineStore, type Plan, type PlanFilter, type PlanRequest, type PlanStep, type PlanStore, type PlanValidationIssue, type PlanValidationResult, PlannerError, ProcessAgent, ProcessAgentAdapter, type Project, ProjectStores, type ProtocolAgentToNodeType, ProtocolDecoder, type ProtocolEnvelope, ProtocolError, type ProtocolMessageType, type ProtocolNodeToAgentType, ProtocolSession, type ProtocolViolation, type ProtocolViolationCode, type ProviderAuthentication, type ProviderCapability, type ProviderConfig, ProviderError, type ProviderHealth, type ProviderStatus, type ProviderType, type QuestionPayload, type QuestionResponder, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportArtifact, type ReportConflict, type ReportFilter, type ReportPayload, ReportService, type ReportStore, type RoleDefinition, RoleRegistry, type RunPipelineOptions, type RunTaskOptions, SCHEMA_VERSION, SUPPORTED_PROTOCOL_VERSIONS, type SessionIds, TERMINAL_TASK_STATUSES, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, budgetContext, buildAgentRegistry, buildChildEnv, buildHello, buildHelloAck, buildPipelineEngine, buildPlanner, buildPlannerContext, buildRoleRegistry, composeTaskText, configDiagnostics, configureLogger, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, decodeMessage, defaultAgentAdapters, defaultProjectConfigYaml, describeExit, describeSecretFindings, detectConflicts, encodeMessage, envelope, expandEnvRefs, extractMessage, extractReportFromText, findConfigFile, inspectDocument, isNetworkError, isOmniNodeError, isRetryable, isSupportedProtocol, isTimeoutError, killTree, kindFromStatus, loadConfig, loadConfigDetailed, logger, migrateProjectStores, newMessageId, normalizeEvidence, normalizeFinding, parseHello, parsePlanJson, parseRetryAfter, pipelineConfigSchema, pipelineStepConfigSchema, planJsonSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, providerHttpError, providerTransportError, readDocument, registryKey, requestJson, resolveApiKey, resolveEnvPolicy, roleConfigSchema, sanitizeChunk, scanForInlineSecrets, similar, validateEnvelope, validatePlan, validateReport, validateWorkingDirectory, writeFileAtomic };

package/dist/index.js

@@ -1744,6 +1744,9 @@ var ProcessAgent = class {
         clearTimeout(timer);
         this.running.delete(input.taskId);
         GLOBAL_RUNNING.delete(child);
+        child.stdin?.destroy();
+        child.stdout?.destroy();
+        child.stderr?.destroy();
         finish();
       };
       const collect = (into, chunk) => {
@@ -2543,18 +2546,31 @@ function sleep(ms) {
 }
 
 // src/audit/index.ts
-import { appendFile, mkdir as mkdir2, readFile as readFile2 } from "fs/promises";
+import { appendFile, mkdir as mkdir2, readFile as readFile2, rename as rename2, stat as stat2 } from "fs/promises";
 import { dirname as dirname2 } from "path";
+var DEFAULT_AUDIT_MAX_BYTES = 5 * 1024 * 1024;
 var FileAuditLog = class {
   filePath;
+  maxBytes;
   log;
-  constructor(directory = `${process.cwd()}/.omninode`, log = logger) {
+  constructor(directory = `${process.cwd()}/.omninode`, log = logger, maxBytes = DEFAULT_AUDIT_MAX_BYTES) {
     this.filePath = `${directory}/audit.jsonl`;
+    this.maxBytes = maxBytes;
     this.log = log.child({ component: "audit" });
   }
+  /** Rotates the log once it passes the size budget, keeping one backup. */
+  async rotateIfNeeded() {
+    try {
+      const stats = await stat2(this.filePath);
+      if (stats.size <= this.maxBytes) return;
+      await rename2(this.filePath, `${this.filePath}.1`);
+    } catch {
+    }
+  }
   async record(event) {
     try {
       await mkdir2(dirname2(this.filePath), { recursive: true });
+      await this.rotateIfNeeded();
       await appendFile(this.filePath, `${JSON.stringify(event)}
 `, "utf8");
     } catch (error) {
@@ -3057,6 +3073,7 @@ var SEVERITY_RANK = {
   high: 3,
   critical: 4
 };
+var MAX_COMBINED_FINDINGS = 200;
 function aggregateReports(reports, options = {}) {
   const threshold = options.similarityThreshold ?? 0.7;
   const findingGroups = [];
@@ -3075,6 +3092,10 @@ function aggregateReports(reports, options = {}) {
   const agreements = findingGroups.filter(
     (group) => group.sources.length > 1 && group.severity !== void 0 && new Set(Object.values(group.severityBySource ?? {})).size === 1
   );
+  const maxFindings = options.maxFindings ?? MAX_COMBINED_FINDINGS;
+  const orderedFindings = findingGroups.sort((a, b) => rank(b) - rank(a));
+  const retainedFindings = orderedFindings.slice(0, maxFindings);
+  const droppedFindings = orderedFindings.length - retainedFindings.length;
   const disputed = conflicts.length;
   const summary = `${reports.length} report(s) from ${sources.length > 0 ? sources.join(", ") : "no agents"}: ${findingGroups.length} unique finding group(s) (${totalRawFindings} raw), ${agreements.length} agreement(s), ${disputed} conflict(s), ${recommendationGroups.length} recommendation group(s).`;
   return {
@@ -3084,7 +3105,7 @@ function aggregateReports(reports, options = {}) {
     ...options.pipelineRunId !== void 0 ? { pipelineRunId: options.pipelineRunId } : {},
     taskIds: options.taskIds ?? [],
     summary,
-    findings: findingGroups.sort((a, b) => rank(b) - rank(a)),
+    findings: retainedFindings,
     agreements,
     conflicts,
     recommendations: recommendationGroups,
@@ -3097,7 +3118,8 @@ function aggregateReports(reports, options = {}) {
       rawFindings: totalRawFindings,
       findingGroups: findingGroups.length,
       agreements: agreements.length,
-      conflicts: conflicts.length
+      conflicts: conflicts.length,
+      findingsTruncated: droppedFindings
     }
   };
 }
@@ -3530,6 +3552,13 @@ function describe(error) {
 }
 
 // src/pipelines/engine.ts
+var DEFAULT_MAX_PARALLEL_STEPS = 8;
+var MAX_COMBINED_CONTEXT_CHARS = 2e4;
+function budgetContext(context, maxChars = MAX_COMBINED_CONTEXT_CHARS) {
+  if (context.length <= maxChars) return context;
+  const marker = "\n[earlier context trimmed]\n";
+  return marker + context.slice(context.length - (maxChars - marker.length));
+}
 var PipelineEngine = class {
   constructor(options) {
     this.options = options;
@@ -3725,24 +3754,35 @@ var PipelineEngine = class {
       if (ready.length === 0) {
         throw new PipelineError("PIPELINE_FAILED", `Pipeline "${def.id}" scheduling stalled.`);
       }
-      const settled = await Promise.all(
-        ready.map(async (step) => {
-          if (!this.shouldRun(step, deps.get(step.id) ?? [], outcomes)) {
-            return { status: "skipped", summary: "", taskIds: [], reports: [] };
-          }
-          const ctx = {
-            objective,
-            ...role ? { role } : {},
-            combinedContext: contextParts.join("\n\n"),
-            reports: [...allReports],
-            pipelineRunId: run.id,
-            runId: run.id,
-            pipelineDefId: def.id,
-            taskId: run.id
-          };
-          return this.executeStep(step, ctx);
-        })
-      );
+      const settled = [];
+      const limit = Math.max(1, this.options.maxParallelSteps ?? DEFAULT_MAX_PARALLEL_STEPS);
+      for (let offset = 0; offset < ready.length; offset += limit) {
+        const batch = ready.slice(offset, offset + limit);
+        settled.push(
+          ...await Promise.all(
+            batch.map(async (step) => {
+              if (!this.shouldRun(step, deps.get(step.id) ?? [], outcomes)) {
+                return { status: "skipped", summary: "", taskIds: [], reports: [] };
+              }
+              const ctx = {
+                maxContextChars: this.options.maxContextChars,
+                objective,
+                ...role ? { role } : {},
+                combinedContext: budgetContext(
+                  contextParts.join("\n\n"),
+                  this.options.maxContextChars ?? MAX_COMBINED_CONTEXT_CHARS
+                ),
+                reports: [...allReports],
+                pipelineRunId: run.id,
+                runId: run.id,
+                pipelineDefId: def.id,
+                taskId: run.id
+              };
+              return this.executeStep(step, ctx);
+            })
+          )
+        );
+      }
       ready.forEach((step, index) => {
         const outcome = settled[index];
         outcomes.set(step.id, outcome);
@@ -3967,7 +4007,9 @@ ${contribution}`);
     };
   }
   async runPlan(step, ctx) {
-    const aggregated = ctx.reports.length > 0 ? aggregateReports(ctx.reports) : void 0;
+    const aggregated = ctx.reports.length > 0 ? aggregateReports(ctx.reports, {
+      ...step.constraints !== void 0 && step.constraints.length > 0 ? { maxFindings: MAX_COMBINED_FINDINGS } : {}
+    }) : void 0;
     const request = {
       objective: ctx.objective,
       reports: ctx.reports,
@@ -4430,14 +4472,16 @@ async function migrateProjectStores(directory = `${process.cwd()}/.omninode`, op
 }
 
 // src/version.ts
-var OMNINODE_VERSION = "2.0.0-alpha.19";
+var OMNINODE_VERSION = "2.0.0-alpha.20";
 export {
   AgentAdapterRegistry,
   AgentError,
   AgentRegistry,
   ConfigError,
   ConsoleLogSink,
+  DEFAULT_AUDIT_MAX_BYTES,
   DEFAULT_MAX_OUTPUT_BYTES,
+  DEFAULT_MAX_PARALLEL_STEPS,
   FileAuditLog,
   FilePipelineRunStore,
   FilePlanStore,
@@ -4447,6 +4491,8 @@ export {
   JsonFileStore,
   LocalMemoryProvider,
   Logger,
+  MAX_COMBINED_CONTEXT_CHARS,
+  MAX_COMBINED_FINDINGS,
   MAX_CONTEXT_CHARS,
   MAX_MESSAGE_BYTES,
   MAX_REPORT_BYTES,
@@ -4481,6 +4527,7 @@ export {
   aggregateReports,
   appConfigSchema,
   authHeaders,
+  budgetContext,
   buildAgentRegistry,
   buildChildEnv,
   buildHello,