@oni.bot/core 0.6.2 → 0.8.0

package/SECURITY.md

@@ -0,0 +1,71 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 0.7.x   | :white_check_mark: |
+| < 0.7   | :x:                |
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in `@oni.bot/core`, please report it responsibly:
+
+1. **Do not** open a public GitHub issue
+2. Email **security@oni.bot** with:
+   - Description of the vulnerability
+   - Steps to reproduce
+   - Potential impact
+   - Suggested fix (if any)
+3. You will receive acknowledgment within **48 hours**
+4. A fix will be released within **7 days** for critical issues
+
+## Security Considerations
+
+### Tool Execution
+
+`@oni.bot/core` provides a tool execution framework. The framework itself does not execute arbitrary code, but user-defined node functions and tools can. Users are responsible for:
+
+- Validating tool inputs before execution
+- Using the built-in `Permissions` guardrail to restrict tool access
+- Implementing appropriate sandboxing for untrusted tool code
+
+### Model API Keys
+
+API keys for model providers (OpenAI, Anthropic, etc.) should be:
+
+- Stored in environment variables, not in code
+- Never logged or included in error messages
+- Rotated regularly
+
+### Budget Enforcement
+
+The `BudgetTracker` guardrail provides cost limits but should not be the sole control:
+
+- Set conservative budget limits
+- Monitor usage through the telemetry/audit system
+- Implement server-side rate limiting for production deployments
+
+### Checkpoint Data
+
+Checkpoint data may contain sensitive state. When using persistent checkpointers:
+
+- Use encrypted storage for SQLite/PostgreSQL backends
+- Implement TTL-based cleanup for old checkpoints
+- Restrict access to checkpoint storage
+
+### Content Filtering
+
+The guardrails module provides content filters (PII, topic). These are best-effort:
+
+- Do not rely solely on built-in filters for compliance
+- Layer additional filtering for sensitive domains (healthcare, finance)
+- Audit filter effectiveness regularly
+
+## Dependencies
+
+`@oni.bot/core` ships with **zero runtime dependencies**. Optional peer dependencies:
+
+- `better-sqlite3` — for SQLite checkpointing (optional)
+
+This minimizes supply chain attack surface.

package/dist/checkpointers/sqlite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../src/checkpointers/sqlite.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAQzF,qBAAa,kBAAkB,CAAC,CAAC,CAAE,YAAW,eAAe,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAvC,OAAO;WAEM,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IA2BhE,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAOvD,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAYxC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IA6BjF,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAK7E,KAAK,IAAI,IAAI;IAEb,OAAO,CAAC,WAAW;CAYpB"}
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../src/checkpointers/sqlite.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAQzF,qBAAa,kBAAkB,CAAC,CAAC,CAAE,YAAW,eAAe,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAvC,OAAO;WAEM,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IA4BhE,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAOvD,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IA6BjF,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAK7E,KAAK,IAAI,IAAI;IAEb,OAAO,CAAC,WAAW;CAapB"}

package/dist/checkpointers/sqlite.js

@@ -22,19 +22,20 @@ export class SqliteCheckpointer {
         }
         const db = new DB(dbPath);
         db.exec("PRAGMA journal_mode=WAL; PRAGMA synchronous=NORMAL;");
-        db.exec(`
-      CREATE TABLE IF NOT EXISTS oni_checkpoints (
-        thread_id     TEXT    NOT NULL,
-        step          INTEGER NOT NULL,
-        agent_id      TEXT,
-        state         TEXT    NOT NULL,
-        next_nodes    TEXT    NOT NULL,
-        pending_sends TEXT    NOT NULL DEFAULT '[]',
-        metadata      TEXT    DEFAULT NULL,
-        timestamp     INTEGER NOT NULL,
-        PRIMARY KEY (thread_id, step)
-      );
-      CREATE INDEX IF NOT EXISTS idx_thread ON oni_checkpoints (thread_id);
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS oni_checkpoints (
+        thread_id     TEXT    NOT NULL,
+        step          INTEGER NOT NULL,
+        agent_id      TEXT,
+        state         TEXT    NOT NULL,
+        next_nodes    TEXT    NOT NULL,
+        pending_sends  TEXT    NOT NULL DEFAULT '[]',
+        metadata       TEXT    DEFAULT NULL,
+        pending_writes TEXT    DEFAULT NULL,
+        timestamp      INTEGER NOT NULL,
+        PRIMARY KEY (thread_id, step)
+      );
+      CREATE INDEX IF NOT EXISTS idx_thread ON oni_checkpoints (thread_id);
     `);
         return new SqliteCheckpointer(db);
     }
@@ -45,11 +46,11 @@ export class SqliteCheckpointer {
         return row ? this.deserialize(row) : null;
     }
     async put(cp) {
-        this.db.prepare(`
-      INSERT OR REPLACE INTO oni_checkpoints
-        (thread_id, step, agent_id, state, next_nodes, pending_sends, metadata, timestamp)
-      VALUES (?,?,?,?,?,?,?,?)
-    `).run(cp.threadId, cp.step, cp.agentId ?? null, JSON.stringify(cp.state), JSON.stringify(cp.nextNodes), JSON.stringify(cp.pendingSends ?? []), cp.metadata ? JSON.stringify(cp.metadata) : null, cp.timestamp);
+        this.db.prepare(`
+      INSERT OR REPLACE INTO oni_checkpoints
+        (thread_id, step, agent_id, state, next_nodes, pending_sends, metadata, pending_writes, timestamp)
+      VALUES (?,?,?,?,?,?,?,?,?)
+    `).run(cp.threadId, cp.step, cp.agentId ?? null, JSON.stringify(cp.state), JSON.stringify(cp.nextNodes), JSON.stringify(cp.pendingSends ?? []), cp.metadata ? JSON.stringify(cp.metadata) : null, cp.pendingWrites ? JSON.stringify(cp.pendingWrites) : null, cp.timestamp);
     }
     async list(threadId, opts) {
         let sql = "SELECT * FROM oni_checkpoints WHERE thread_id=?";
@@ -91,6 +92,7 @@ export class SqliteCheckpointer {
             nextNodes: JSON.parse(row["next_nodes"]),
             pendingSends: JSON.parse(row["pending_sends"]),
             metadata: row["metadata"] ? JSON.parse(row["metadata"]) : undefined,
+            pendingWrites: row["pending_writes"] ? JSON.parse(row["pending_writes"]) : undefined,
             timestamp: row["timestamp"],
         };
     }

package/dist/checkpointers/sqlite.js.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../src/checkpointers/sqlite.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,sCAAsC;AACtC,+DAA+D;AAC/D,uDAAuD;AACvD,EAAE;AACF,+BAA+B;AAC/B,yCAAyC;AACzC,+DAA+D;AAU/D,MAAM,OAAO,kBAAkB;IACQ;IAArC,YAAqC,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAI,MAAc;QACnC,IAAI,EAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAA0B,CAAC,CAAC;YACrD,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1B,EAAE,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QAC/D,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;KAaP,CAAC,CAAC;QACH,OAAO,IAAI,kBAAkB,CAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,4EAA4E,CAAC;aACrF,GAAG,CAAC,QAAQ,CAAwC,CAAC;QACxD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAoB;QAC5B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAIf,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,EAC5C,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EACtD,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,EACrC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAChD,EAAE,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAA4B;QACvD,IAAI,GAAG,GAAG,iDAAiD,CAAC;QAC5D,MAAM,MAAM,GAAc,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,GAAG,IAAI,eAAe,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,GAAG,IAAI,oBAAoB,CAAC;QAE5B,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,IAAI,UAAU,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,KAAK,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAA+B;aAC3E,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACvB,IAAI,CAAC,CAAC,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAC9B,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,IAAY;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAwC,CAAC;QACrJ,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,KAAW,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE1B,WAAW,CAAC,GAA4B;QAC9C,OAAO;YACL,QAAQ,EAAM,GAAG,CAAC,WAAW,CAAW;YACxC,IAAI,EAAU,GAAG,CAAC,MAAM,CAAW;YACnC,OAAO,EAAQ,GAAG,CAAC,UAAU,CAAmB,IAAI,SAAS;YAC7D,KAAK,EAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAW,CAAM;YACrD,SAAS,EAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAW,CAAa;YACjE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAW,CAAO;YAC9D,QAAQ,EAAM,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,SAAS,EAAK,GAAG,CAAC,WAAW,CAAW;SACzC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../src/checkpointers/sqlite.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,sCAAsC;AACtC,+DAA+D;AAC/D,uDAAuD;AACvD,EAAE;AACF,+BAA+B;AAC/B,yCAAyC;AACzC,+DAA+D;AAU/D,MAAM,OAAO,kBAAkB;IACQ;IAArC,YAAqC,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAI,MAAc;QACnC,IAAI,EAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAA0B,CAAC,CAAC;YACrD,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1B,EAAE,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QAC/D,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;KAcP,CAAC,CAAC;QACH,OAAO,IAAI,kBAAkB,CAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,4EAA4E,CAAC;aACrF,GAAG,CAAC,QAAQ,CAAwC,CAAC;QACxD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAoB;QAC5B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAIf,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,EAC5C,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EACtD,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,EACrC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAChD,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAC1D,EAAE,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAA4B;QACvD,IAAI,GAAG,GAAG,iDAAiD,CAAC;QAC5D,MAAM,MAAM,GAAc,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,GAAG,IAAI,eAAe,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,GAAG,IAAI,oBAAoB,CAAC;QAE5B,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,IAAI,UAAU,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,KAAK,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAA+B;aAC3E,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACvB,IAAI,CAAC,CAAC,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAC9B,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,IAAY;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAwC,CAAC;QACrJ,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,KAAW,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE1B,WAAW,CAAC,GAA4B;QAC9C,OAAO;YACL,QAAQ,EAAO,GAAG,CAAC,WAAW,CAAW;YACzC,IAAI,EAAW,GAAG,CAAC,MAAM,CAAW;YACpC,OAAO,EAAS,GAAG,CAAC,UAAU,CAAmB,IAAI,SAAS;YAC9D,KAAK,EAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAW,CAAM;YACtD,SAAS,EAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAW,CAAa;YAClE,YAAY,EAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAW,CAA2D;YACnH,QAAQ,EAAO,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YAClF,aAAa,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAW,CAA+D,CAAC,CAAC,CAAC,SAAS;YAC5J,SAAS,EAAM,GAAG,CAAC,WAAW,CAAW;SAC1C,CAAC;IACJ,CAAC;CACF"}

package/dist/circuit-breaker.d.ts

@@ -0,0 +1,20 @@
+export type CircuitState = "closed" | "open" | "half_open";
+export interface CircuitBreakerConfig {
+    threshold: number;
+    resetAfter: number;
+    fallback?: (...args: unknown[]) => unknown;
+}
+export declare class CircuitBreaker {
+    private readonly config;
+    private _state;
+    private consecutiveFailures;
+    private lastFailureTime;
+    private readonly nodeName;
+    constructor(config: CircuitBreakerConfig, nodeName?: string);
+    get state(): CircuitState;
+    execute<T>(fn: () => Promise<T>): Promise<T>;
+    private onSuccess;
+    private onFailure;
+    reset(): void;
+}
+//# sourceMappingURL=circuit-breaker.d.ts.map

package/dist/circuit-breaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-breaker.d.ts","sourceRoot":"","sources":["../src/circuit-breaker.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;CAC5C;AAED,qBAAa,cAAc;IAMb,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEL,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM;IAI5E,IAAI,KAAK,IAAI,YAAY,CAKxB;IAEK,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAgBlD,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,SAAS;IAUjB,KAAK,IAAI,IAAI;CAKd"}

package/dist/circuit-breaker.js

@@ -0,0 +1,58 @@
+// ============================================================
+// @oni.bot/core — Circuit Breaker
+// ============================================================
+import { CircuitBreakerOpenError } from "./errors.js";
+export class CircuitBreaker {
+    config;
+    _state = "closed";
+    consecutiveFailures = 0;
+    lastFailureTime = 0;
+    nodeName;
+    constructor(config, nodeName) {
+        this.config = config;
+        this.nodeName = nodeName ?? "unknown";
+    }
+    get state() {
+        if (this._state === "open" && Date.now() - this.lastFailureTime >= this.config.resetAfter) {
+            this._state = "half_open";
+        }
+        return this._state;
+    }
+    async execute(fn) {
+        const currentState = this.state;
+        if (currentState === "open") {
+            if (this.config.fallback)
+                return this.config.fallback();
+            throw new CircuitBreakerOpenError(this.nodeName, this.config.resetAfter);
+        }
+        try {
+            const result = await fn();
+            this.onSuccess();
+            return result;
+        }
+        catch (err) {
+            this.onFailure();
+            throw err;
+        }
+    }
+    onSuccess() {
+        this.consecutiveFailures = 0;
+        this._state = "closed";
+    }
+    onFailure() {
+        this.consecutiveFailures++;
+        this.lastFailureTime = Date.now();
+        if (this._state === "half_open") {
+            this._state = "open";
+        }
+        else if (this.consecutiveFailures >= this.config.threshold) {
+            this._state = "open";
+        }
+    }
+    reset() {
+        this._state = "closed";
+        this.consecutiveFailures = 0;
+        this.lastFailureTime = 0;
+    }
+}
+//# sourceMappingURL=circuit-breaker.js.map

package/dist/circuit-breaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-breaker.js","sourceRoot":"","sources":["../src/circuit-breaker.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,kCAAkC;AAClC,+DAA+D;AAE/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAUtD,MAAM,OAAO,cAAc;IAMI;IALrB,MAAM,GAAiB,QAAQ,CAAC;IAChC,mBAAmB,GAAG,CAAC,CAAC;IACxB,eAAe,GAAG,CAAC,CAAC;IACX,QAAQ,CAAS;IAElC,YAA6B,MAA4B,EAAE,QAAiB;QAA/C,WAAM,GAAN,MAAM,CAAsB;QACvD,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,SAAS,CAAC;IACxC,CAAC;IAED,IAAI,KAAK;QACP,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1F,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,EAAoB;QACnC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC;QAChC,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAO,CAAC;YAC7D,MAAM,IAAI,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;IACzB,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,CAAC;aAAM,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/cli/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":""}

package/dist/cli/index.js

@@ -0,0 +1,32 @@
+#!/usr/bin/env node
+// ============================================================
+// @oni.bot/core CLI — entry point
+// ============================================================
+import { initProject } from "./init.js";
+import { resolve, basename } from "node:path";
+const args = process.argv.slice(2);
+const command = args[0];
+if (command === "init" && args[1]) {
+    const name = basename(args[1]);
+    const targetDir = resolve(process.cwd(), args[1]);
+    console.log(`\n  Creating ONI project: ${name}\n`);
+    await initProject(name, targetDir);
+    console.log(`  Done! Next steps:\n`);
+    console.log(`    cd ${name}`);
+    console.log(`    npm install`);
+    console.log(`    npx tsx src/index.ts\n`);
+    console.log(`  Documentation: https://github.com/oni-bot/core\n`);
+}
+else {
+    console.log(`
+  Usage: oni init <project-name>
+
+  Commands:
+    init <name>    Create a new ONI project
+
+  Examples:
+    oni init my-swarm
+    oni init research-team
+`);
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,+DAA+D;AAC/D,kCAAkC;AAClC,+DAA+D;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAExB,IAAI,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAElD,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAC;IAEnD,MAAM,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEnC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;AACpE,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,GAAG,CAAC;;;;;;;;;CASb,CAAC,CAAC;AACH,CAAC"}

package/dist/cli/init.d.ts

@@ -0,0 +1,2 @@
+export declare function initProject(name: string, targetDir: string): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/cli/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAQA,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhF"}

package/dist/cli/init.js

@@ -0,0 +1,17 @@
+// ============================================================
+// @oni.bot/core CLI — init command
+// ============================================================
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { templates } from "./templates.js";
+export async function initProject(name, targetDir) {
+    await mkdir(targetDir, { recursive: true });
+    await mkdir(join(targetDir, "src"), { recursive: true });
+    // Write files
+    await writeFile(join(targetDir, "package.json"), templates.packageJson(name));
+    await writeFile(join(targetDir, "tsconfig.json"), templates.tsconfig());
+    await writeFile(join(targetDir, "src", "index.ts"), templates.entrypoint());
+    await writeFile(join(targetDir, "src", "agent.test.ts"), templates.test());
+    await writeFile(join(targetDir, ".gitignore"), templates.gitignore());
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,mCAAmC;AACnC,+DAA+D;AAE/D,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,SAAiB;IAC/D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzD,cAAc;IACd,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5E,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/cli/templates.d.ts

@@ -0,0 +1,8 @@
+export declare const templates: {
+    packageJson(name: string): string;
+    tsconfig(): string;
+    entrypoint(): string;
+    test(): string;
+    gitignore(): string;
+};
+//# sourceMappingURL=templates.d.ts.map

package/dist/cli/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../src/cli/templates.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,SAAS;sBACF,MAAM,GAAG,MAAM;gBAwBrB,MAAM;kBAiBJ,MAAM;YA8CZ,MAAM;iBAuBD,MAAM;CAOpB,CAAC"}

package/dist/cli/templates.js

@@ -0,0 +1,119 @@
+// ============================================================
+// @oni.bot/core CLI — Project templates
+// ============================================================
+export const templates = {
+    packageJson(name) {
+        const pkg = {
+            name,
+            version: "0.1.0",
+            type: "module",
+            scripts: {
+                dev: "tsx watch src/index.ts",
+                build: "tsc",
+                start: "node dist/index.js",
+                test: "vitest run",
+            },
+            dependencies: {
+                "@oni.bot/core": "^0.7.0",
+            },
+            devDependencies: {
+                tsx: "^4.0.0",
+                typescript: "^5.4.0",
+                vitest: "^4.0.0",
+                "@types/node": "^20.0.0",
+            },
+        };
+        return JSON.stringify(pkg, null, 2) + "\n";
+    },
+    tsconfig() {
+        const config = {
+            compilerOptions: {
+                target: "ES2022",
+                module: "NodeNext",
+                moduleResolution: "NodeNext",
+                outDir: "./dist",
+                rootDir: "./src",
+                declaration: true,
+                strict: true,
+                skipLibCheck: true,
+            },
+            include: ["src/**/*"],
+        };
+        return JSON.stringify(config, null, 2) + "\n";
+    },
+    entrypoint() {
+        return `import { StateGraph, START, END, lastValue, appendList } from "@oni.bot/core";
+import { MemoryCheckpointer } from "@oni.bot/core";
+import type { Message } from "@oni.bot/core";
+
+// Define your state
+type AgentState = {
+  messages: Message[];
+  result: string;
+};
+
+// Build the graph
+const graph = new StateGraph<AgentState>({
+  channels: {
+    messages: appendList<Message>(),
+    result: lastValue(() => ""),
+  },
+});
+
+// Add nodes
+graph.addNode("process", async (state) => {
+  const lastMessage = state.messages[state.messages.length - 1];
+  return {
+    result: \`Processed: \${lastMessage?.content ?? "no input"}\`,
+  };
+});
+
+// Wire edges
+graph.addEdge(START, "process");
+graph.addEdge("process", END);
+
+// Compile with checkpointing
+const app = graph.compile({
+  checkpointer: new MemoryCheckpointer(),
+});
+
+// Run it
+const result = await app.invoke(
+  { messages: [{ id: "1", role: "user", content: "Hello, ONI!" }] },
+  { threadId: "demo-1" },
+);
+
+console.log("Result:", result.result);
+`;
+    },
+    test() {
+        return `import { describe, it, expect } from "vitest";
+import { StateGraph, START, END, lastValue } from "@oni.bot/core";
+import { createTestHarness } from "@oni.bot/core/testing";
+
+describe("my agent", () => {
+  it("processes input", async () => {
+    type S = { value: string };
+    const graph = new StateGraph<S>({
+      channels: { value: lastValue(() => "") },
+    });
+    graph.addNode("echo", async (s) => ({ value: s.value + "!" }));
+    graph.addEdge(START, "echo");
+    graph.addEdge("echo", END);
+
+    const harness = createTestHarness(graph);
+    const result = await harness.invoke({ value: "test" });
+    expect(result.value).toBe("test!");
+  });
+});
+`;
+    },
+    gitignore() {
+        return `node_modules/
+dist/
+*.js.map
+.env
+`;
+    },
+};
+//# sourceMappingURL=templates.js.map

package/dist/cli/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/cli/templates.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,wCAAwC;AACxC,+DAA+D;AAE/D,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,WAAW,CAAC,IAAY;QACtB,MAAM,GAAG,GAAG;YACV,IAAI;YACJ,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE;gBACP,GAAG,EAAE,wBAAwB;gBAC7B,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,oBAAoB;gBAC3B,IAAI,EAAE,YAAY;aACnB;YACD,YAAY,EAAE;gBACZ,eAAe,EAAE,QAAQ;aAC1B;YACD,eAAe,EAAE;gBACf,GAAG,EAAE,QAAQ;gBACb,UAAU,EAAE,QAAQ;gBACpB,MAAM,EAAE,QAAQ;gBAChB,aAAa,EAAE,SAAS;aACzB;SACF,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7C,CAAC;IAED,QAAQ;QACN,MAAM,MAAM,GAAG;YACb,eAAe,EAAE;gBACf,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,UAAU;gBAClB,gBAAgB,EAAE,UAAU;gBAC5B,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,IAAI;gBACZ,YAAY,EAAE,IAAI;aACnB;YACD,OAAO,EAAE,CAAC,UAAU,CAAC;SACtB,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAChD,CAAC;IAED,UAAU;QACR,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CV,CAAC;IACA,CAAC;IAED,IAAI;QACF,OAAO;;;;;;;;;;;;;;;;;;;CAmBV,CAAC;IACA,CAAC;IAED,SAAS;QACP,OAAO;;;;CAIV,CAAC;IACA,CAAC;CACF,CAAC"}

package/dist/dlq.d.ts

@@ -0,0 +1,17 @@
+export interface DeadLetter {
+    id: string;
+    node: string;
+    input: Record<string, unknown>;
+    error: Error;
+    attempts: number;
+    timestamp: number;
+}
+export declare class DeadLetterQueue {
+    private letters;
+    record(threadId: string, node: string, input: Record<string, unknown>, error: Error, attempts: number): DeadLetter;
+    getAll(threadId: string): DeadLetter[];
+    remove(threadId: string, dlId: string): boolean;
+    clear(threadId: string): void;
+    size(): number;
+}
+//# sourceMappingURL=dlq.d.ts.map

package/dist/dlq.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dlq.d.ts","sourceRoot":"","sources":["../src/dlq.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAmC;IAElD,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU;IAWlH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE;IAItC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAS/C,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI7B,IAAI,IAAI,MAAM;CAKf"}

package/dist/dlq.js

@@ -0,0 +1,41 @@
+// ============================================================
+// @oni.bot/core — Dead Letter Queue
+// ============================================================
+let _nextId = 1;
+export class DeadLetterQueue {
+    letters = new Map();
+    record(threadId, node, input, error, attempts) {
+        const dl = {
+            id: `dlq-${_nextId++}`,
+            node, input, error, attempts,
+            timestamp: Date.now(),
+        };
+        if (!this.letters.has(threadId))
+            this.letters.set(threadId, []);
+        this.letters.get(threadId).push(dl);
+        return dl;
+    }
+    getAll(threadId) {
+        return this.letters.get(threadId) ?? [];
+    }
+    remove(threadId, dlId) {
+        const list = this.letters.get(threadId);
+        if (!list)
+            return false;
+        const idx = list.findIndex((dl) => dl.id === dlId);
+        if (idx === -1)
+            return false;
+        list.splice(idx, 1);
+        return true;
+    }
+    clear(threadId) {
+        this.letters.delete(threadId);
+    }
+    size() {
+        let total = 0;
+        for (const list of this.letters.values())
+            total += list.length;
+        return total;
+    }
+}
+//# sourceMappingURL=dlq.js.map

package/dist/dlq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dlq.js","sourceRoot":"","sources":["../src/dlq.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,oCAAoC;AACpC,+DAA+D;AAE/D,IAAI,OAAO,GAAG,CAAC,CAAC;AAWhB,MAAM,OAAO,eAAe;IAClB,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAElD,MAAM,CAAC,QAAgB,EAAE,IAAY,EAAE,KAA8B,EAAE,KAAY,EAAE,QAAgB;QACnG,MAAM,EAAE,GAAe;YACrB,EAAE,EAAE,OAAO,OAAO,EAAE,EAAE;YACtB,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ;YAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,QAAgB,EAAE,IAAY;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAgB;QACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,IAAI;QACF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/errors.d.ts

@@ -1,5 +1,19 @@
+export type ErrorCategory = "GRAPH" | "NODE" | "EDGE" | "CHECKPOINT" | "STREAM" | "HITL" | "SWARM" | "MODEL" | "STORE" | "CONFIG";
+export interface ONIErrorOptions {
+    code: string;
+    category: ErrorCategory;
+    recoverable: boolean;
+    suggestion?: string;
+    context?: Record<string, unknown>;
+}
 export declare class ONIError extends Error {
-    constructor(message: string);
+    readonly code: string;
+    readonly category: ErrorCategory;
+    readonly recoverable: boolean;
+    readonly suggestion: string;
+    readonly context: Record<string, unknown>;
+    constructor(message: string, opts?: ONIErrorOptions);
+    toJSON(): Record<string, unknown>;
 }
 export declare class InvalidSkeletonError extends ONIError {
     constructor(msg: string);
@@ -16,6 +30,27 @@ export declare class EdgeConflictError extends ONIError {
 export declare class NodeExecutionError extends ONIError {
     constructor(node: string, cause: Error);
 }
+export declare class NodeTimeoutError extends ONIError {
+    constructor(node: string, timeoutMs: number);
+}
+export declare class CircuitBreakerOpenError extends ONIError {
+    constructor(node: string, resetAfterMs: number);
+}
+export declare class SwarmDeadlockError extends ONIError {
+    constructor(agents: string[]);
+}
+export declare class ModelRateLimitError extends ONIError {
+    constructor(provider: string, retryAfterMs?: number);
+}
+export declare class ModelContextLengthError extends ONIError {
+    constructor(provider: string, maxTokens: number);
+}
+export declare class CheckpointCorruptError extends ONIError {
+    constructor(threadId: string, detail: string);
+}
+export declare class StoreKeyNotFoundError extends ONIError {
+    constructor(namespace: string[], key: string);
+}
 /** Thrown at interrupt checkpoints — caught externally to pause/resume */
 export declare class ONIInterrupt {
     readonly node: string;

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAIA,qBAAa,QAAS,SAAQ,KAAK;gBACrB,OAAO,EAAE,MAAM;CAC5B;AACD,qBAAa,oBAAqB,SAAQ,QAAQ;gBACpC,GAAG,EAAE,MAAM;CACxB;AACD,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,KAAK,EAAE,MAAM;CAI1B;AACD,qBAAa,iBAAkB,SAAQ,QAAQ;gBACjC,IAAI,EAAE,MAAM;CACzB;AACD,qBAAa,iBAAkB,SAAQ,QAAQ;gBACjC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;CACrC;AACD,qBAAa,kBAAmB,SAAQ,QAAQ;gBAClC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;CAKvC;AAED,0EAA0E;AAC1E,qBAAa,YAAY;aAGL,IAAI,EAAI,MAAM;aACd,MAAM,EAAE,QAAQ,GAAG,OAAO;aAC1B,KAAK,EAAG,OAAO;IAJjC,QAAQ,CAAC,cAAc,QAAQ;gBAEb,IAAI,EAAI,MAAM,EACd,MAAM,EAAE,QAAQ,GAAG,OAAO,EAC1B,KAAK,EAAG,OAAO;CAElC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,MAAM,GACN,MAAM,GACN,YAAY,GACZ,QAAQ,GACR,MAAM,GACN,OAAO,GACP,OAAO,GACP,OAAO,GACP,QAAQ,CAAC;AAEb,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAID,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE9B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,eAAe;IAUnD,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAYlC;AAID,qBAAa,oBAAqB,SAAQ,QAAQ;gBACpC,GAAG,EAAE,MAAM;CAUxB;AAED,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,KAAK,EAAE,MAAM;CAa1B;AAED,qBAAa,iBAAkB,SAAQ,QAAQ;gBACjC,IAAI,EAAE,MAAM;CAUzB;AAED,qBAAa,iBAAkB,SAAQ,QAAQ;gBACjC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;CAUrC;AAED,qBAAa,kBAAmB,SAAQ,QAAQ;gBAClC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;CAWvC;AAID,qBAAa,gBAAiB,SAAQ,QAAQ;gBAChC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAU5C;AAED,qBAAa,uBAAwB,SAAQ,QAAQ;gBACvC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;CAa/C;AAED,qBAAa,kBAAmB,SAAQ,QAAQ;gBAClC,MAAM,EAAE,MAAM,EAAE;CAa7B;AAED,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM;CAapD;AAED,qBAAa,uBAAwB,SAAQ,QAAQ;gBACvC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAahD;AAED,qBAAa,sBAAuB,SAAQ,QAAQ;gBACtC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAU7C;AAED,qBAAa,qBAAsB,SAAQ,QAAQ;gBACrC,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM;CAW7C;AAID,0EAA0E;AAC1E,qBAAa,YAAY;aAGL,IAAI,EAAI,MAAM;aACd,MAAM,EAAE,QAAQ,GAAG,OAAO;aAC1B,KAAK,EAAG,OAAO;IAJjC,QAAQ,CAAC,cAAc,QAAQ;gBAEb,IAAI,EAAI,MAAM,EACd,MAAM,EAAE,QAAQ,GAAG,OAAO,EAC1B,KAAK,EAAG,OAAO;CAElC"}