@hilbras/omninode 2.0.0-alpha.3 → 2.0.0-alpha.4

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { ChildProcess } from 'node:child_process';
 
 /** Structured report format so reports can be processed programmatically (§16). */
 type Confidence = "low" | "medium" | "high";
@@ -191,8 +192,21 @@ interface AgentConfig {
     inputMode?: AgentInputMode;
     /** Per-task timeout in milliseconds; the process is killed when exceeded. */
     timeoutMs?: number;
-    /** When false, the agent process starts with a minimal environment (PATH + env). */
+    /**
+     * When false, the agent process starts with a minimal environment (PATH +
+     * env). Deprecated in v2 — prefer `envPolicy`.
+     */
     inheritEnv?: boolean;
+    /** Explicit environment policy (roadmap §8). */
+    envPolicy?: "inherit" | "allowlist" | "denylist" | "explicit";
+    /** Variables forwarded from the parent under the `allowlist` policy. */
+    envAllowlist?: string[];
+    /** Variables removed from the parent under the `denylist` policy. */
+    envDenylist?: string[];
+    /** Per-stream byte budget for agent stdout/stderr (default 5 MiB). */
+    maxOutputBytes?: number;
+    /** Allow a working directory outside the project root. */
+    allowExternalCwd?: boolean;
     /** Models (as "provider:model-id") this agent may use, if restricted. */
     allowedModels?: string[];
     metadata?: Record<string, unknown>;
@@ -745,6 +759,11 @@ declare const agentConfigSchema: z.ZodObject<{
     input_mode: z.ZodDefault<z.ZodEnum<["stdin", "arg", "protocol"]>>;
     timeout_ms: z.ZodOptional<z.ZodNumber>;
     inherit_env: z.ZodOptional<z.ZodBoolean>;
+    env_policy: z.ZodOptional<z.ZodEnum<["inherit", "allowlist", "denylist", "explicit"]>>;
+    env_allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    env_denylist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    max_output_bytes: z.ZodOptional<z.ZodNumber>;
+    allow_external_cwd: z.ZodOptional<z.ZodBoolean>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strict", z.ZodTypeAny, {
     name: string;
@@ -757,6 +776,11 @@ declare const agentConfigSchema: z.ZodObject<{
     env?: Record<string, string> | undefined;
     timeout_ms?: number | undefined;
     inherit_env?: boolean | undefined;
+    env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+    env_allowlist?: string[] | undefined;
+    env_denylist?: string[] | undefined;
+    max_output_bytes?: number | undefined;
+    allow_external_cwd?: boolean | undefined;
 }, {
     name: string;
     metadata?: Record<string, unknown> | undefined;
@@ -768,6 +792,11 @@ declare const agentConfigSchema: z.ZodObject<{
     input_mode?: "protocol" | "stdin" | "arg" | undefined;
     timeout_ms?: number | undefined;
     inherit_env?: boolean | undefined;
+    env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+    env_allowlist?: string[] | undefined;
+    env_denylist?: string[] | undefined;
+    max_output_bytes?: number | undefined;
+    allow_external_cwd?: boolean | undefined;
 }>;
 declare const roleConfigSchema: z.ZodObject<{
     id: z.ZodString;
@@ -940,6 +969,11 @@ declare const projectConfigSchema: z.ZodObject<{
         input_mode: z.ZodDefault<z.ZodEnum<["stdin", "arg", "protocol"]>>;
         timeout_ms: z.ZodOptional<z.ZodNumber>;
         inherit_env: z.ZodOptional<z.ZodBoolean>;
+        env_policy: z.ZodOptional<z.ZodEnum<["inherit", "allowlist", "denylist", "explicit"]>>;
+        env_allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        env_denylist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        max_output_bytes: z.ZodOptional<z.ZodNumber>;
+        allow_external_cwd: z.ZodOptional<z.ZodBoolean>;
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, "strict", z.ZodTypeAny, {
         name: string;
@@ -952,6 +986,11 @@ declare const projectConfigSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         timeout_ms?: number | undefined;
         inherit_env?: boolean | undefined;
+        env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+        env_allowlist?: string[] | undefined;
+        env_denylist?: string[] | undefined;
+        max_output_bytes?: number | undefined;
+        allow_external_cwd?: boolean | undefined;
     }, {
         name: string;
         metadata?: Record<string, unknown> | undefined;
@@ -963,6 +1002,11 @@ declare const projectConfigSchema: z.ZodObject<{
         input_mode?: "protocol" | "stdin" | "arg" | undefined;
         timeout_ms?: number | undefined;
         inherit_env?: boolean | undefined;
+        env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+        env_allowlist?: string[] | undefined;
+        env_denylist?: string[] | undefined;
+        max_output_bytes?: number | undefined;
+        allow_external_cwd?: boolean | undefined;
     }>, "many">>;
     roles: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -1095,6 +1139,11 @@ declare const projectConfigSchema: z.ZodObject<{
         env?: Record<string, string> | undefined;
         timeout_ms?: number | undefined;
         inherit_env?: boolean | undefined;
+        env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+        env_allowlist?: string[] | undefined;
+        env_denylist?: string[] | undefined;
+        max_output_bytes?: number | undefined;
+        allow_external_cwd?: boolean | undefined;
     }[];
     providers: {
         name: string;
@@ -1154,6 +1203,11 @@ declare const projectConfigSchema: z.ZodObject<{
         input_mode?: "protocol" | "stdin" | "arg" | undefined;
         timeout_ms?: number | undefined;
         inherit_env?: boolean | undefined;
+        env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+        env_allowlist?: string[] | undefined;
+        env_denylist?: string[] | undefined;
+        max_output_bytes?: number | undefined;
+        allow_external_cwd?: boolean | undefined;
     }[] | undefined;
     providers?: {
         name: string;
@@ -1240,6 +1294,11 @@ declare const appConfigSchema: z.ZodObject<{
             input_mode: z.ZodDefault<z.ZodEnum<["stdin", "arg", "protocol"]>>;
             timeout_ms: z.ZodOptional<z.ZodNumber>;
             inherit_env: z.ZodOptional<z.ZodBoolean>;
+            env_policy: z.ZodOptional<z.ZodEnum<["inherit", "allowlist", "denylist", "explicit"]>>;
+            env_allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            env_denylist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            max_output_bytes: z.ZodOptional<z.ZodNumber>;
+            allow_external_cwd: z.ZodOptional<z.ZodBoolean>;
             metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         }, "strict", z.ZodTypeAny, {
             name: string;
@@ -1252,6 +1311,11 @@ declare const appConfigSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             timeout_ms?: number | undefined;
             inherit_env?: boolean | undefined;
+            env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+            env_allowlist?: string[] | undefined;
+            env_denylist?: string[] | undefined;
+            max_output_bytes?: number | undefined;
+            allow_external_cwd?: boolean | undefined;
         }, {
             name: string;
             metadata?: Record<string, unknown> | undefined;
@@ -1263,6 +1327,11 @@ declare const appConfigSchema: z.ZodObject<{
             input_mode?: "protocol" | "stdin" | "arg" | undefined;
             timeout_ms?: number | undefined;
             inherit_env?: boolean | undefined;
+            env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+            env_allowlist?: string[] | undefined;
+            env_denylist?: string[] | undefined;
+            max_output_bytes?: number | undefined;
+            allow_external_cwd?: boolean | undefined;
         }>, "many">>;
         roles: z.ZodDefault<z.ZodArray<z.ZodObject<{
             id: z.ZodString;
@@ -1395,6 +1464,11 @@ declare const appConfigSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             timeout_ms?: number | undefined;
             inherit_env?: boolean | undefined;
+            env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+            env_allowlist?: string[] | undefined;
+            env_denylist?: string[] | undefined;
+            max_output_bytes?: number | undefined;
+            allow_external_cwd?: boolean | undefined;
         }[];
         providers: {
             name: string;
@@ -1454,6 +1528,11 @@ declare const appConfigSchema: z.ZodObject<{
             input_mode?: "protocol" | "stdin" | "arg" | undefined;
             timeout_ms?: number | undefined;
             inherit_env?: boolean | undefined;
+            env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+            env_allowlist?: string[] | undefined;
+            env_denylist?: string[] | undefined;
+            max_output_bytes?: number | undefined;
+            allow_external_cwd?: boolean | undefined;
         }[] | undefined;
         providers?: {
             name: string;
@@ -1522,6 +1601,11 @@ declare const appConfigSchema: z.ZodObject<{
             env?: Record<string, string> | undefined;
             timeout_ms?: number | undefined;
             inherit_env?: boolean | undefined;
+            env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+            env_allowlist?: string[] | undefined;
+            env_denylist?: string[] | undefined;
+            max_output_bytes?: number | undefined;
+            allow_external_cwd?: boolean | undefined;
         }[];
         providers: {
             name: string;
@@ -1586,6 +1670,11 @@ declare const appConfigSchema: z.ZodObject<{
             input_mode?: "protocol" | "stdin" | "arg" | undefined;
             timeout_ms?: number | undefined;
             inherit_env?: boolean | undefined;
+            env_policy?: "inherit" | "allowlist" | "denylist" | "explicit" | undefined;
+            env_allowlist?: string[] | undefined;
+            env_denylist?: string[] | undefined;
+            max_output_bytes?: number | undefined;
+            allow_external_cwd?: boolean | undefined;
         }[] | undefined;
         providers?: {
             name: string;
@@ -1767,12 +1856,21 @@ declare class OmniHilbrasProvider extends OpenAICompatibleProvider {
 }
 
 /**
- * Builds the child environment. By default the agent inherits the full
- * environment; with `inheritEnv: false` it receives only PATH plus the
- * explicitly configured variables — useful to avoid leaking OmniNode's
- * own secrets (e.g. provider API keys) into third-party agents.
+ * Process adapter (§9): runs CLI agents as child processes and communicates
+ * over stdin/stdout, managing the process lifecycle, working directory,
+ * environment, exit codes, logs and timeouts.
+ *
+ * Three input modes (§9, §21):
+ *  - "stdin":    the composed task text is written to the agent's stdin.
+ *  - "arg":      the composed task text is appended as the last command argument.
+ *  - "protocol": NodeToAgentMessage envelopes as JSON lines on stdin; the
+ *                agent answers with AgentToNodeMessage JSON lines (REPORT,
+ *                COMPLETION, ERROR, ...) whose structured payloads are parsed
+ *                into reports.
  */
-declare function buildChildEnv(config: AgentConfig): NodeJS.ProcessEnv;
+
+/** Per-stream byte budget before output is truncated and the agent killed. */
+declare const DEFAULT_MAX_OUTPUT_BYTES: number;
 declare function composeTaskText(input: AgentTaskInput): string;
 declare class ProcessAgent implements IAgent {
     readonly config: AgentConfig;
@@ -1785,6 +1883,63 @@ declare class ProcessAgent implements IAgent {
     cancel(taskId: string): Promise<void>;
     runningTaskIds(): string[];
 }
+/** Kills a child and, on POSIX, its whole process group (roadmap §8 tree cleanup). */
+declare function killTree(child: ChildProcess, signal: NodeJS.Signals): void;
+/** Human-readable exit reason, including signal terminations. */
+declare function describeExit(code: number | null, signal: NodeJS.Signals | null): string;
+/**
+ * Decodes a stdout/stderr chunk safely: invalid UTF-8 becomes replacement
+ * characters and NUL bytes are stripped, so binary noise cannot poison the
+ * protocol decoder or the terminal (roadmap §8, encoding hardening).
+ */
+declare function sanitizeChunk(chunk: Buffer): string;
+
+/**
+ * Agent environment policies (roadmap §8, Environment Isolation).
+ *
+ * Four explicit policies, so operators decide exactly what an agent can see:
+ *   - `inherit`   (default, backwards compatible): the full parent environment
+ *   - `allowlist`: only the allow-listed variables (+ PATH/HOME)
+ *   - `denylist`: the parent environment minus the deny-listed variables
+ *   - `explicit`: nothing from the parent; only PATH/HOME and `env`
+ *
+ * The v1 boolean `inherit_env: false` is still honored and maps to `explicit`.
+ */
+
+type EnvPolicy = "inherit" | "allowlist" | "denylist" | "explicit";
+declare function resolveEnvPolicy(config: Partial<AgentConfig>): EnvPolicy;
+declare function buildChildEnv(config: AgentConfig): NodeJS.ProcessEnv;
+
+interface CwdValidation {
+    /** Normalized absolute path. */
+    cwd: string;
+    /** True when the directory sits outside the project root (project boundary). */
+    outsideProject: boolean;
+}
+declare function validateWorkingDirectory(cwd: string | undefined, options?: {
+    projectRoot?: string;
+    allowExternal?: boolean;
+}): CwdValidation | undefined;
+
+interface IAgentAdapter {
+    /** Integration type this adapter serves, e.g. "native" or "process". */
+    readonly integration: string;
+    create(config: AgentConfig): IAgent;
+}
+declare class AgentAdapterRegistry {
+    private readonly adapters;
+    register(adapter: IAgentAdapter): void;
+    get(integration: string): IAgentAdapter | undefined;
+    list(): IAgentAdapter[];
+    create(config: AgentConfig): IAgent;
+}
+/** Process-level adapter — the built-in CLI integration. */
+declare class ProcessAgentAdapter implements IAgentAdapter {
+    private readonly factory;
+    readonly integration = "process";
+    constructor(factory: (config: AgentConfig) => IAgent);
+    create(config: AgentConfig): IAgent;
+}
 
 /** Agent registry (§10): the set of agents connected to OmniNode. */
 
@@ -1800,7 +1955,8 @@ declare class AgentRegistry {
  * "cli" agent configs are mapped to the process integration by the loader.
  */
 
-declare function createAgent(config: AgentConfig): IAgent;
+declare function createAgent(config: AgentConfig, adapters?: AgentAdapterRegistry): IAgent;
+
 /** Builds an agent registry from the project configuration, skipping agents that fail to construct. */
 declare function buildAgentRegistry(config: AppConfig, log?: Logger): AgentRegistry;
 
@@ -2353,6 +2509,6 @@ declare class ProjectStores {
     constructor(directory?: string);
 }
 
-declare const OMNINODE_VERSION = "2.0.0-alpha.3";
+declare const OMNINODE_VERSION = "2.0.0-alpha.4";
 
-export { type AgentConfig, type AgentConfigYaml, type AgentDescriptor, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregateOptions, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type AppConfigYaml, type ArtifactKind, type ArtifactPayload, type AskedQuestion, type AuditAction, type AuditEvent, type AuditSink, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatUsage, type CombinedMeta, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, ConsoleLogSink, type CreateTaskInput, type DecodeResult, type DiscoveryResult, type EnvelopeMeta, type ExecutionRecord, type ExtractionMeta, FileAuditLog, FilePipelineRunStore, FilePlanStore, FileReportStore, FileTaskStore, type Finding, type FindingSeverity, type FindingSource, type HelloResult, HeuristicPlanner, type HttpRequestOptions, type HttpResponse, type IAgent, type IChatProvider, type IMemoryProvider, type IPlanner, type IProvider, type JsonDocument, JsonFileStore, type JsonFileStoreOptions, type LoadConfigOptions, LocalMemoryProvider, type LogLevel, type LogSink, Logger, type LoggerOptions, MAX_MESSAGE_BYTES, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryQuery, type MemoryScope, MemoryService, type MessageEnvelope, type ModelCapabilities, type ModelFilter, type ModelInfo, ModelPlanner, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, type OmniHilbrasConnectionResult, OmniHilbrasProvider, OmniNodeError, type OmniNodeErrorCode, type OmniNodeErrorOptions, OpenAICompatibleProvider, PROTOCOL_V2, type PipelineConfigYaml, type PipelineDefinition, PipelineEngine, type PipelineEngineOptions, PipelineError, type PipelineRun, type PipelineRunFilter, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepConfigYaml, type PipelineStepKind, type PipelineStepRun, type Plan, type PlanFilter, type PlanRequest, type PlanStep, type PlanStore, type PlannerConfigYaml, PlannerError, ProcessAgent, type Project, type ProjectConfigYaml, ProjectStores, type ProtocolAgentToNodeType, ProtocolDecoder, type ProtocolEnvelope, ProtocolError, type ProtocolMessageType, type ProtocolNodeToAgentType, ProtocolSession, type ProtocolViolation, type ProtocolViolationCode, type ProviderConfig, type ProviderConfigYaml, ProviderError, type ProviderHealth, type ProviderStatus, type ProviderType, type QuestionPayload, type QuestionResponder, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportFilter, type ReportPayload, ReportService, type ReportStore, type RoleConfigYaml, type RoleDefinition, RoleRegistry, type RunPipelineOptions, SUPPORTED_PROTOCOL_VERSIONS, type SessionIds, TERMINAL_TASK_STATUSES, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskPayload, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, type WritableLike, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, buildAgentRegistry, buildChildEnv, buildHello, buildHelloAck, buildPipelineEngine, buildPlanner, buildPlannerContext, buildRoleRegistry, composeTaskText, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, decodeMessage, decodeStream, defaultProjectConfigYaml, encodeMessage, envelope, expandEnvRefs, extractReportFromText, findConfigFile, isOmniNodeError, isSupportedProtocol, keywords, loadConfig, logger, newMessageId, parseHello, parsePlanJson, pipelineConfigSchema, pipelineStepConfigSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, registryKey, requestJson, requireCompletion, resolveApiKey, roleConfigSchema, similar, validateEnvelope };
+export { AgentAdapterRegistry, type AgentConfig, type AgentConfigYaml, type AgentDescriptor, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregateOptions, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type AppConfigYaml, type ArtifactKind, type ArtifactPayload, type AskedQuestion, type AuditAction, type AuditEvent, type AuditSink, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatUsage, type CombinedMeta, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, ConsoleLogSink, type CreateTaskInput, type CwdValidation, DEFAULT_MAX_OUTPUT_BYTES, type DecodeResult, type DiscoveryResult, type EnvPolicy, type EnvelopeMeta, type ExecutionRecord, type ExtractionMeta, FileAuditLog, FilePipelineRunStore, FilePlanStore, FileReportStore, FileTaskStore, type Finding, type FindingSeverity, type FindingSource, type HelloResult, HeuristicPlanner, type HttpRequestOptions, type HttpResponse, type IAgent, type IAgentAdapter, type IChatProvider, type IMemoryProvider, type IPlanner, type IProvider, type JsonDocument, JsonFileStore, type JsonFileStoreOptions, type LoadConfigOptions, LocalMemoryProvider, type LogLevel, type LogSink, Logger, type LoggerOptions, MAX_MESSAGE_BYTES, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryQuery, type MemoryScope, MemoryService, type MessageEnvelope, type ModelCapabilities, type ModelFilter, type ModelInfo, ModelPlanner, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, type OmniHilbrasConnectionResult, OmniHilbrasProvider, OmniNodeError, type OmniNodeErrorCode, type OmniNodeErrorOptions, OpenAICompatibleProvider, PROTOCOL_V2, type PipelineConfigYaml, type PipelineDefinition, PipelineEngine, type PipelineEngineOptions, PipelineError, type PipelineRun, type PipelineRunFilter, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepConfigYaml, type PipelineStepKind, type PipelineStepRun, type Plan, type PlanFilter, type PlanRequest, type PlanStep, type PlanStore, type PlannerConfigYaml, PlannerError, ProcessAgent, ProcessAgentAdapter, type Project, type ProjectConfigYaml, ProjectStores, type ProtocolAgentToNodeType, ProtocolDecoder, type ProtocolEnvelope, ProtocolError, type ProtocolMessageType, type ProtocolNodeToAgentType, ProtocolSession, type ProtocolViolation, type ProtocolViolationCode, type ProviderConfig, type ProviderConfigYaml, ProviderError, type ProviderHealth, type ProviderStatus, type ProviderType, type QuestionPayload, type QuestionResponder, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportFilter, type ReportPayload, ReportService, type ReportStore, type RoleConfigYaml, type RoleDefinition, RoleRegistry, type RunPipelineOptions, SUPPORTED_PROTOCOL_VERSIONS, type SessionIds, TERMINAL_TASK_STATUSES, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskPayload, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, type WritableLike, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, buildAgentRegistry, buildChildEnv, buildHello, buildHelloAck, buildPipelineEngine, buildPlanner, buildPlannerContext, buildRoleRegistry, composeTaskText, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, decodeMessage, decodeStream, defaultProjectConfigYaml, describeExit, encodeMessage, envelope, expandEnvRefs, extractReportFromText, findConfigFile, isOmniNodeError, isSupportedProtocol, keywords, killTree, loadConfig, logger, newMessageId, parseHello, parsePlanJson, pipelineConfigSchema, pipelineStepConfigSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, registryKey, requestJson, requireCompletion, resolveApiKey, resolveEnvPolicy, roleConfigSchema, sanitizeChunk, similar, validateEnvelope, validateWorkingDirectory };