@hilbras/omninode 2.0.0-alpha.8 → 2.0.0-alpha.9

package/dist/index.d.ts

@@ -4,27 +4,72 @@ import { ChildProcess } from 'node:child_process';
 /** Structured report format so reports can be processed programmatically (§16). */
 type Confidence = "low" | "medium" | "high";
 type FindingSeverity = "info" | "low" | "medium" | "high" | "critical";
+/** Typed evidence (roadmap §13, Evidence). Plain strings remain accepted
+ *  and normalize to `observation` evidence. */
+type EvidenceKind = "file" | "line" | "url" | "command" | "observation" | "artifact";
+interface Evidence {
+    kind: EvidenceKind;
+    /** Path, URL, command or logical reference. */
+    ref?: string;
+    /** Line number for file/line evidence. */
+    line?: number;
+    /** Verbatim excerpt backing the finding. */
+    excerpt?: string;
+    /** Agent that produced the evidence. */
+    agent?: string;
+}
+type EvidenceInput = string | Evidence;
+/** Artifact produced alongside a report (§13). */
+interface ReportArtifact {
+    kind: "file" | "patch" | "log" | "screenshot" | "document" | "data";
+    ref: string;
+    description?: string;
+    mediaType?: string;
+    bytes?: number;
+}
+/** Where a finding came from, when known. */
+interface FindingOrigin {
+    agent?: string;
+    reportId?: string;
+    pipelineRunId?: string;
+}
 interface Finding {
     id: string;
     title: string;
+    /** v1 field, kept for compatibility; `description` is the v2 field. */
     detail: string;
+    /** Full description of the finding (§13, Findings). */
+    description?: string;
     severity?: FindingSeverity;
-    evidence?: string[];
+    confidence?: Confidence;
+    evidence?: EvidenceInput[];
     /** File path or conceptual location the finding refers to. */
     location?: string;
     tags?: string[];
+    /** Provenance of the finding, when known (§13). */
+    source?: FindingOrigin;
+    /** The concrete fix this finding implies. */
+    recommendation?: string;
 }
 interface Report {
     id: string;
     taskId: string;
     /** Agent name from the agent registry. */
     agent: string;
+    /** v2 spelling of `agent` for machine consumers (§13). */
+    agentId?: string;
+    /** Pipeline run that produced this report, when applicable. */
+    pipelineRunId?: string;
     /** Model id used, if known. */
     model?: string;
     summary: string;
     findings: Finding[];
     recommendations: string[];
     confidence?: Confidence;
+    /** Report-level evidence backing the summary. */
+    evidence?: EvidenceInput[];
+    /** Artifacts produced with the report (§13, Artifacts). */
+    artifacts?: ReportArtifact[];
     createdAt: string;
     metadata?: Record<string, unknown>;
 }
@@ -42,7 +87,9 @@ interface AggregatedFinding {
     occurrences: number;
     /** Highest severity seen across merged duplicates. */
     severity?: FindingSeverity;
-    evidence: string[];
+    confidence?: Confidence;
+    /** Typed evidence, normalized from strings when reports were ingested. */
+    evidence: Evidence[];
 }
 interface AggregatedRecommendation {
     text: string;
@@ -898,9 +945,9 @@ declare const agentConfigSchema: z.ZodObject<{
     name: string;
     type: "native" | "process" | "cli";
     input_mode: "protocol" | "stdin" | "arg";
+    command?: string | undefined;
     metadata?: Record<string, unknown> | undefined;
     timeout_ms?: number | undefined;
-    command?: string | undefined;
     args?: string[] | undefined;
     cwd?: string | undefined;
     env?: Record<string, string> | undefined;
@@ -912,10 +959,10 @@ declare const agentConfigSchema: z.ZodObject<{
     allow_external_cwd?: boolean | undefined;
 }, {
     name: string;
+    command?: string | undefined;
     metadata?: Record<string, unknown> | undefined;
     type?: "native" | "process" | "cli" | undefined;
     timeout_ms?: number | undefined;
-    command?: string | undefined;
     args?: string[] | undefined;
     cwd?: string | undefined;
     env?: Record<string, string> | undefined;
@@ -1111,9 +1158,9 @@ declare const projectConfigSchema: z.ZodObject<{
         name: string;
         type: "native" | "process" | "cli";
         input_mode: "protocol" | "stdin" | "arg";
+        command?: string | undefined;
         metadata?: Record<string, unknown> | undefined;
         timeout_ms?: number | undefined;
-        command?: string | undefined;
         args?: string[] | undefined;
         cwd?: string | undefined;
         env?: Record<string, string> | undefined;
@@ -1125,10 +1172,10 @@ declare const projectConfigSchema: z.ZodObject<{
         allow_external_cwd?: boolean | undefined;
     }, {
         name: string;
+        command?: string | undefined;
         metadata?: Record<string, unknown> | undefined;
         type?: "native" | "process" | "cli" | undefined;
         timeout_ms?: number | undefined;
-        command?: string | undefined;
         args?: string[] | undefined;
         cwd?: string | undefined;
         env?: Record<string, string> | undefined;
@@ -1268,9 +1315,9 @@ declare const projectConfigSchema: z.ZodObject<{
         name: string;
         type: "native" | "process" | "cli";
         input_mode: "protocol" | "stdin" | "arg";
+        command?: string | undefined;
         metadata?: Record<string, unknown> | undefined;
         timeout_ms?: number | undefined;
-        command?: string | undefined;
         args?: string[] | undefined;
         cwd?: string | undefined;
         env?: Record<string, string> | undefined;
@@ -1332,10 +1379,10 @@ declare const projectConfigSchema: z.ZodObject<{
     name: string;
     agents?: {
         name: string;
+        command?: string | undefined;
         metadata?: Record<string, unknown> | undefined;
         type?: "native" | "process" | "cli" | undefined;
         timeout_ms?: number | undefined;
-        command?: string | undefined;
         args?: string[] | undefined;
         cwd?: string | undefined;
         env?: Record<string, string> | undefined;
@@ -1447,9 +1494,9 @@ declare const appConfigSchema: z.ZodObject<{
             name: string;
             type: "native" | "process" | "cli";
             input_mode: "protocol" | "stdin" | "arg";
+            command?: string | undefined;
             metadata?: Record<string, unknown> | undefined;
             timeout_ms?: number | undefined;
-            command?: string | undefined;
             args?: string[] | undefined;
             cwd?: string | undefined;
             env?: Record<string, string> | undefined;
@@ -1461,10 +1508,10 @@ declare const appConfigSchema: z.ZodObject<{
             allow_external_cwd?: boolean | undefined;
         }, {
             name: string;
+            command?: string | undefined;
             metadata?: Record<string, unknown> | undefined;
             type?: "native" | "process" | "cli" | undefined;
             timeout_ms?: number | undefined;
-            command?: string | undefined;
             args?: string[] | undefined;
             cwd?: string | undefined;
             env?: Record<string, string> | undefined;
@@ -1604,9 +1651,9 @@ declare const appConfigSchema: z.ZodObject<{
             name: string;
             type: "native" | "process" | "cli";
             input_mode: "protocol" | "stdin" | "arg";
+            command?: string | undefined;
             metadata?: Record<string, unknown> | undefined;
             timeout_ms?: number | undefined;
-            command?: string | undefined;
             args?: string[] | undefined;
             cwd?: string | undefined;
             env?: Record<string, string> | undefined;
@@ -1668,10 +1715,10 @@ declare const appConfigSchema: z.ZodObject<{
         name: string;
         agents?: {
             name: string;
+            command?: string | undefined;
             metadata?: Record<string, unknown> | undefined;
             type?: "native" | "process" | "cli" | undefined;
             timeout_ms?: number | undefined;
-            command?: string | undefined;
             args?: string[] | undefined;
             cwd?: string | undefined;
             env?: Record<string, string> | undefined;
@@ -1745,9 +1792,9 @@ declare const appConfigSchema: z.ZodObject<{
             name: string;
             type: "native" | "process" | "cli";
             input_mode: "protocol" | "stdin" | "arg";
+            command?: string | undefined;
             metadata?: Record<string, unknown> | undefined;
             timeout_ms?: number | undefined;
-            command?: string | undefined;
             args?: string[] | undefined;
             cwd?: string | undefined;
             env?: Record<string, string> | undefined;
@@ -1814,10 +1861,10 @@ declare const appConfigSchema: z.ZodObject<{
         name: string;
         agents?: {
             name: string;
+            command?: string | undefined;
             metadata?: Record<string, unknown> | undefined;
             type?: "native" | "process" | "cli" | undefined;
             timeout_ms?: number | undefined;
-            command?: string | undefined;
             args?: string[] | undefined;
             cwd?: string | undefined;
             env?: Record<string, string> | undefined;
@@ -2571,12 +2618,24 @@ interface CombinedMeta {
     pipelineRunId?: string;
     taskIds?: string[];
 }
+interface CollectionDiagnostics {
+    collected: number;
+    accepted: number;
+    rejected: Array<{
+        key: string;
+        reason: string;
+        issues: string[];
+    }>;
+}
 declare class ReportService {
     private readonly store;
     private readonly log;
+    /** Rejected reports from the last collection (§13 — malformed never enters aggregation). */
+    lastDiagnostics: CollectionDiagnostics;
     constructor(store: ReportStore, log?: Logger);
     get storeRef(): ReportStore;
-    /** Normalizes finished tasks into reports (§17 — normalizer). */
+    /** Normalizes finished tasks into reports (§17 — normalizer), validating each
+     *  one so malformed reports never reach aggregation (§13). */
     collectFromTasks(tasks: Task[]): Promise<Report[]>;
     saveReports(reports: Report[]): Promise<void>;
     generateCombined(reports: Report[], meta?: CombinedMeta): Promise<CombinedReport | undefined>;
@@ -2606,6 +2665,24 @@ interface AggregateOptions {
 declare function aggregateReports(reports: Report[], options?: AggregateOptions): CombinedReport;
 declare function similar(a: string, b: string, threshold: number): boolean;
 
+interface ReportValidationIssue {
+    path: string;
+    message: string;
+}
+type ReportValidationResult = {
+    valid: true;
+    report: Report;
+} | {
+    valid: false;
+    issues: ReportValidationIssue[];
+    reason: string;
+};
+/** Validates (and normalizes) a report; malformed reports are rejected. */
+declare function validateReport(value: unknown): ReportValidationResult;
+/** Normalizes evidence entries (strings or objects) to typed evidence. */
+declare function normalizeEvidence(input: EvidenceInput[] | undefined): Evidence[] | undefined;
+declare function normalizeFinding(finding: Finding): Finding;
+
 /** Planner interface and request contract (§18). The planner is replaceable. */
 
 interface PlanRequest {
@@ -2793,6 +2870,6 @@ declare class ProjectStores {
     constructor(directory?: string);
 }
 
-declare const OMNINODE_VERSION = "2.0.0-alpha.8";
+declare const OMNINODE_VERSION = "2.0.0-alpha.9";
 
-export { AgentAdapterRegistry, type AgentConfig, type AgentConfigYaml, type AgentDescriptor, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregateOptions, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type AppConfigYaml, type ArtifactKind, type ArtifactPayload, type AskedQuestion, type AuditAction, type AuditEvent, type AuditSink, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatStreamChunk, type ChatUsage, type CombinedMeta, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, ConsoleLogSink, type CreateTaskInput, type CwdValidation, DEFAULT_MAX_OUTPUT_BYTES, type DecodeResult, type DiscoveryResult, type EnvPolicy, type EnvelopeMeta, type ExecutionRecord, type ExtractionMeta, FileAuditLog, FilePipelineRunStore, FilePlanStore, FileReportStore, FileTaskStore, type Finding, type FindingSeverity, type FindingSource, type HelloResult, HeuristicPlanner, type HttpRequestOptions, type HttpResponse, type IAgent, type IAgentAdapter, type IChatProvider, type IMemoryProvider, type IPipelineExecutor, type IPlanner, type IProvider, type JsonDocument, JsonFileStore, type JsonFileStoreOptions, type LoadConfigOptions, LocalMemoryProvider, type LogLevel, type LogSink, Logger, type LoggerOptions, MAX_CONTEXT_CHARS, MAX_MESSAGE_BYTES, type MemoryCategory, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryProviderMetadata, type MemoryQuery, type MemoryScope, MemoryService, type MemoryServiceOptions, type MemoryTaskContext, type MessageEnvelope, type Modality, type ModelCapabilities, type ModelFilter, type ModelInfo, ModelPlanner, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, type OmniHilbrasConnectionResult, OmniHilbrasProvider, OmniNodeError, type OmniNodeErrorCode, type OmniNodeErrorOptions, OpenAICompatibleProvider, PROTOCOL_V2, type PipelineConfigYaml, type PipelineDefinition, PipelineEngine, type PipelineEngineOptions, PipelineError, type PipelineRun, type PipelineRunAttempt, type PipelineRunFilter, type PipelineRunOptions, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepConfigYaml, type PipelineStepKind, type PipelineStepRun, type Plan, type PlanFilter, type PlanRequest, type PlanStep, type PlanStore, type PlannerConfigYaml, PlannerError, ProcessAgent, ProcessAgentAdapter, type Project, type ProjectConfigYaml, ProjectStores, type ProtocolAgentToNodeType, ProtocolDecoder, type ProtocolEnvelope, ProtocolError, type ProtocolMessageType, type ProtocolNodeToAgentType, ProtocolSession, type ProtocolViolation, type ProtocolViolationCode, type ProviderAuthentication, type ProviderCapability, type ProviderConfig, type ProviderConfigYaml, ProviderError, type ProviderErrorKind, type ProviderHealth, type ProviderStatus, type ProviderType, type QuestionPayload, type QuestionResponder, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportFilter, type ReportPayload, ReportService, type ReportStore, type RoleConfigYaml, type RoleDefinition, RoleRegistry, type RunPipelineOptions, SUPPORTED_PROTOCOL_VERSIONS, type SessionIds, TERMINAL_TASK_STATUSES, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskPayload, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, type WritableLike, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, buildAgentRegistry, buildChildEnv, buildHello, buildHelloAck, buildPipelineEngine, buildPlanner, buildPlannerContext, buildRoleRegistry, composeTaskText, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, decodeMessage, decodeStream, defaultMetadata, defaultProjectConfigYaml, defaultSearch, describeExit, encodeMessage, envelope, expandEnvRefs, extractMessage, extractReportFromText, findConfigFile, isNetworkError, isOmniNodeError, isRetryable, isSupportedProtocol, isTimeoutError, keywords, killTree, kindFromStatus, loadConfig, logger, newMessageId, parseHello, parsePlanJson, parseRetryAfter, pipelineConfigSchema, pipelineStepConfigSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, providerHttpError, providerTransportError, registryKey, requestJson, requireCompletion, resolveApiKey, resolveEnvPolicy, roleConfigSchema, sanitizeChunk, similar, validateEnvelope, validateWorkingDirectory };
+export { AgentAdapterRegistry, type AgentConfig, type AgentConfigYaml, type AgentDescriptor, AgentError, type AgentInfo, type AgentInputMode, type AgentIntegrationType, AgentRegistry, type AgentStatus, type AgentTaskInput, type AgentTaskOutput, type AgentToNodeMessage, type AggregateOptions, type AggregatedFinding, type AggregatedRecommendation, type AppConfig, type AppConfigYaml, type ArtifactKind, type ArtifactPayload, type AskedQuestion, type AuditAction, type AuditEvent, type AuditSink, type ChatFn, type ChatMessage, type ChatRequest, type ChatResponse, type ChatRole, type ChatStreamChunk, type ChatUsage, type CollectionDiagnostics, type CombinedMeta, type CombinedReport, type CombinedReportFilter, type Confidence, ConfigError, ConsoleLogSink, type CreateTaskInput, type CwdValidation, DEFAULT_MAX_OUTPUT_BYTES, type DecodeResult, type DiscoveryResult, type EnvPolicy, type EnvelopeMeta, type Evidence, type EvidenceInput, type EvidenceKind, type ExecutionRecord, type ExtractionMeta, FileAuditLog, FilePipelineRunStore, FilePlanStore, FileReportStore, FileTaskStore, type Finding, type FindingOrigin, type FindingSeverity, type FindingSource, type HelloResult, HeuristicPlanner, type HttpRequestOptions, type HttpResponse, type IAgent, type IAgentAdapter, type IChatProvider, type IMemoryProvider, type IPipelineExecutor, type IPlanner, type IProvider, type JsonDocument, JsonFileStore, type JsonFileStoreOptions, type LoadConfigOptions, LocalMemoryProvider, type LogLevel, type LogSink, Logger, type LoggerOptions, MAX_CONTEXT_CHARS, MAX_MESSAGE_BYTES, type MemoryCategory, type MemoryContextQuery, type MemoryEntry, MemoryError, type MemoryProviderConfig, type MemoryProviderMetadata, type MemoryQuery, type MemoryScope, MemoryService, type MemoryServiceOptions, type MemoryTaskContext, type MessageEnvelope, type Modality, type ModelCapabilities, type ModelFilter, type ModelInfo, ModelPlanner, ModelRegistry, type ModelStatus, type NodeToAgentMessage, OMNINODE_VERSION, OPENAI_COMPATIBLE_TYPES, type OmniHilbrasConnectionResult, OmniHilbrasProvider, OmniNodeError, type OmniNodeErrorCode, type OmniNodeErrorOptions, OpenAICompatibleProvider, PROTOCOL_V2, type PipelineConfigYaml, type PipelineDefinition, PipelineEngine, type PipelineEngineOptions, PipelineError, type PipelineRun, type PipelineRunAttempt, type PipelineRunFilter, type PipelineRunOptions, type PipelineRunStatus, type PipelineRunStore, type PipelineStep, type PipelineStepCondition, type PipelineStepConfigYaml, type PipelineStepKind, type PipelineStepRun, type Plan, type PlanFilter, type PlanRequest, type PlanStep, type PlanStore, type PlannerConfigYaml, PlannerError, ProcessAgent, ProcessAgentAdapter, type Project, type ProjectConfigYaml, ProjectStores, type ProtocolAgentToNodeType, ProtocolDecoder, type ProtocolEnvelope, ProtocolError, type ProtocolMessageType, type ProtocolNodeToAgentType, ProtocolSession, type ProtocolViolation, type ProtocolViolationCode, type ProviderAuthentication, type ProviderCapability, type ProviderConfig, type ProviderConfigYaml, ProviderError, type ProviderErrorKind, type ProviderHealth, type ProviderStatus, type ProviderType, type QuestionPayload, type QuestionResponder, type RememberaConfig, RememberaMemoryProvider, type Report, type ReportArtifact, type ReportFilter, type ReportPayload, ReportService, type ReportStore, type ReportValidationIssue, type ReportValidationResult, type RoleConfigYaml, type RoleDefinition, RoleRegistry, type RunPipelineOptions, SUPPORTED_PROTOCOL_VERSIONS, type SessionIds, TERMINAL_TASK_STATUSES, type Task, type TaskContext, TaskEngine, type TaskEngineOptions, TaskError, type TaskPayload, type TaskResult, type TaskStatus, type TaskStore, type TaskStoreFilter, type WritableLike, agentConfigSchema, aggregateReports, appConfigSchema, authHeaders, buildAgentRegistry, buildChildEnv, buildHello, buildHelloAck, buildPipelineEngine, buildPlanner, buildPlannerContext, buildRoleRegistry, composeTaskText, createAgent, createDefaultChatFn, createMemoryProvider, createProvider, createTaskEngine, decodeMessage, decodeStream, defaultMetadata, defaultProjectConfigYaml, defaultSearch, describeExit, encodeMessage, envelope, expandEnvRefs, extractMessage, extractReportFromText, findConfigFile, isNetworkError, isOmniNodeError, isRetryable, isSupportedProtocol, isTimeoutError, keywords, killTree, kindFromStatus, loadConfig, logger, newMessageId, normalizeEvidence, normalizeFinding, parseHello, parsePlanJson, parseRetryAfter, pipelineConfigSchema, pipelineStepConfigSchema, plannerConfigSchema, projectConfigSchema, providerConfigSchema, providerHttpError, providerTransportError, registryKey, requestJson, requireCompletion, resolveApiKey, resolveEnvPolicy, roleConfigSchema, sanitizeChunk, similar, validateEnvelope, validateReport, validateWorkingDirectory };

package/dist/index.js

@@ -3401,6 +3401,91 @@ function buildPlanner(plannerConfig, chat, log = logger) {
 
 // src/reports/aggregate.ts
 import { randomBytes as randomBytes5 } from "crypto";
+
+// src/reports/schema.ts
+import { z as z3 } from "zod";
+var evidenceSchema = z3.union([
+  z3.string().transform((excerpt) => ({ kind: "observation", excerpt })),
+  z3.object({
+    kind: z3.enum(["file", "line", "url", "command", "observation", "artifact"]),
+    ref: z3.string().optional(),
+    line: z3.number().int().optional(),
+    excerpt: z3.string().optional(),
+    agent: z3.string().optional()
+  })
+]);
+var findingSchema = z3.object({
+  id: z3.string().min(1),
+  title: z3.string().min(1),
+  detail: z3.string().default(""),
+  description: z3.string().optional(),
+  severity: z3.enum(["info", "low", "medium", "high", "critical"]).optional(),
+  confidence: z3.enum(["low", "medium", "high"]).optional(),
+  evidence: z3.array(evidenceSchema).optional(),
+  location: z3.string().optional(),
+  tags: z3.array(z3.string()).optional(),
+  source: z3.object({ agent: z3.string().optional(), reportId: z3.string().optional(), pipelineRunId: z3.string().optional() }).optional(),
+  recommendation: z3.string().optional()
+});
+var artifactSchema = z3.object({
+  kind: z3.enum(["file", "patch", "log", "screenshot", "document", "data"]),
+  ref: z3.string().min(1),
+  description: z3.string().optional(),
+  mediaType: z3.string().optional(),
+  bytes: z3.number().int().optional()
+});
+var reportSchema = z3.object({
+  id: z3.string().min(1),
+  taskId: z3.string().min(1),
+  agent: z3.string().min(1),
+  agentId: z3.string().optional(),
+  pipelineRunId: z3.string().optional(),
+  model: z3.string().optional(),
+  summary: z3.string(),
+  findings: z3.array(findingSchema),
+  recommendations: z3.array(z3.string()),
+  confidence: z3.enum(["low", "medium", "high"]).optional(),
+  evidence: z3.array(evidenceSchema).optional(),
+  artifacts: z3.array(artifactSchema).optional(),
+  createdAt: z3.string().min(1),
+  metadata: z3.record(z3.unknown()).optional()
+});
+function validateReport(value) {
+  const parsed = reportSchema.safeParse(value);
+  if (!parsed.success) {
+    const issues = parsed.error.issues.map((issue) => ({
+      path: issue.path.join(".") || "(root)",
+      message: issue.message
+    }));
+    return {
+      valid: false,
+      issues,
+      reason: `report failed schema validation (${issues.length} issue(s))`
+    };
+  }
+  const report = parsed.data;
+  report.findings = report.findings.map((finding) => ({
+    ...finding,
+    description: finding.description ?? finding.detail,
+    ...finding.source === void 0 ? { source: { agent: report.agent, reportId: report.id, ...report.pipelineRunId !== void 0 ? { pipelineRunId: report.pipelineRunId } : {} } } : {}
+  }));
+  return { valid: true, report };
+}
+function normalizeEvidence(input) {
+  if (input === void 0) return void 0;
+  return input.map(
+    (item) => typeof item === "string" ? { kind: "observation", excerpt: item } : item
+  );
+}
+function normalizeFinding(finding) {
+  return {
+    ...finding,
+    description: finding.description ?? finding.detail,
+    evidence: normalizeEvidence(finding.evidence)
+  };
+}
+
+// src/reports/aggregate.ts
 var SEVERITY_RANK2 = {
   info: 0,
   low: 1,
@@ -3447,7 +3532,7 @@ function mergeFinding(groups, finding, report, threshold) {
     group.occurrences += 1;
     group.details.push(finding.detail);
     group.sources.push(source);
-    group.evidence.push(...finding.evidence ?? []);
+    group.evidence.push(...normalizeEvidence(finding.evidence) ?? []);
     if (finding.severity && (!group.severity || SEVERITY_RANK2[finding.severity] > SEVERITY_RANK2[group.severity])) {
       group.severity = finding.severity;
     }
@@ -3459,7 +3544,7 @@ function mergeFinding(groups, finding, report, threshold) {
     sources: [source],
     occurrences: 1,
     ...finding.severity ? { severity: finding.severity } : {},
-    evidence: [...finding.evidence ?? []]
+    evidence: [...normalizeEvidence(finding.evidence) ?? []]
   });
 }
 function mergeRecommendation(groups, text, report, threshold) {
@@ -3541,6 +3626,7 @@ function extractReportFromText(raw, meta) {
     id: `${meta.taskId}-f-${index + 1}`,
     title: truncate3(text, 120),
     detail: text,
+    description: text,
     severity: guessSeverity(text)
   }));
   return {
@@ -3551,7 +3637,8 @@ function extractReportFromText(raw, meta) {
     summary,
     findings,
     recommendations: recommendationTexts.map((t) => truncate3(t, 200)),
-    metadata: evidenceTexts.length > 0 ? { evidence: evidenceTexts } : void 0,
+    ...evidenceTexts.length > 0 ? { evidence: evidenceTexts.map((excerpt) => ({ kind: "observation", excerpt })) } : {},
+    metadata: evidenceTexts.length > 0 ? { evidenceCount: evidenceTexts.length } : void 0,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
@@ -3567,27 +3654,46 @@ var ReportService = class {
   }
   store;
   log;
+  /** Rejected reports from the last collection (§13 — malformed never enters aggregation). */
+  lastDiagnostics = { collected: 0, accepted: 0, rejected: [] };
   get storeRef() {
     return this.store;
   }
-  /** Normalizes finished tasks into reports (§17 — normalizer). */
+  /** Normalizes finished tasks into reports (§17 — normalizer), validating each
+   *  one so malformed reports never reach aggregation (§13). */
   async collectFromTasks(tasks) {
-    const reports = [];
+    const candidates = [];
     for (const task of tasks) {
       const structured = task.result?.reports ?? [];
       if (structured.length > 0) {
-        reports.push(...structured);
+        candidates.push(...structured);
         continue;
       }
       const text = task.result?.rawOutput ?? task.result?.summary ?? "";
       if (text.trim().length === 0) continue;
-      reports.push(
+      candidates.push(
         extractReportFromText(text, {
           taskId: task.id,
           agent: task.agent ?? "unknown"
         })
       );
     }
+    const reports = [];
+    const rejected = [];
+    for (const candidate of candidates) {
+      const result = validateReport(candidate);
+      if (result.valid) {
+        reports.push(result.report);
+      } else {
+        rejected.push({
+          key: candidate?.id ?? "(unknown)",
+          reason: result.reason,
+          issues: result.issues.map((issue) => `${issue.path}: ${issue.message}`)
+        });
+        this.log.warn(`Rejected malformed report: ${result.reason}`);
+      }
+    }
+    this.lastDiagnostics = { collected: candidates.length, accepted: reports.length, rejected };
     return reports;
   }
   async saveReports(reports) {
@@ -3697,7 +3803,7 @@ var ProjectStores = class {
 };
 
 // src/version.ts
-var OMNINODE_VERSION = "2.0.0-alpha.8";
+var OMNINODE_VERSION = "2.0.0-alpha.9";
 export {
   AgentAdapterRegistry,
   AgentError,
@@ -3784,6 +3890,8 @@ export {
   loadConfig,
   logger,
   newMessageId,
+  normalizeEvidence,
+  normalizeFinding,
   parseHello,
   parsePlanJson,
   parseRetryAfter,
@@ -3803,6 +3911,7 @@ export {
   sanitizeChunk,
   similar,
   validateEnvelope,
+  validateReport,
   validateWorkingDirectory
 };
 //# sourceMappingURL=index.js.map