@vornicx/origin 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 vornicx / Archic
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,238 @@
+# Origin
+
+**A system of context, memory & action.**
+
+Origin is a personal intelligence layer: it understands the work around you,
+remembers what matters, reasons from goals, and acts through **human-directed
+agents** — with every decision traceable. Reasoning and action run on a pluggable
+runtime: the built-in reference runner, or [Apollo](https://github.com/vornicx/apollo-agent).
+
+> Intelligence is incomplete until it can act.
+
+```ts
+import { Origin, ApolloAgent, humanDirected } from "@vornicx/origin";
+
+const origin = await Origin.open();
+
+const agent = new ApolloAgent({
+  memory: origin.memory,
+  tools: [calendar, mail, browser],
+  policy: humanDirected(),
+});
+
+await agent.run("Prepare my launch plan");
+```
+
+---
+
+## Install
+
+```bash
+npm install @vornicx/origin
+```
+
+Requires Node ≥ 22. Ships ESM + types. The only required runtime dependency is `zod`.
+**BYOK** — bring your own model key (OpenRouter, OpenAI, Anthropic, Google,
+Groq, Mistral); nothing is sent anywhere you don't configure.
+
+---
+
+## Principles
+
+|  | Principle | What it means |
+|--|-----------|----------------|
+| **Ⅰ** | First principles | Context, memory, reasoning, tools and control are designed as one system — not bolted together. |
+| **Ⅱ** | Human agency | Agents amplify judgment, never replace it by default. |
+| **Ⅲ** | Context as interface | The best intelligence understands the work around you before it acts. |
+| **Ⅳ** | Action matters | Intelligence is incomplete until it can help you do something meaningful — with you, not without you. |
+
+They're exported, too: `import { PRINCIPLES } from "@vornicx/origin"`.
+
+---
+
+## The cycle
+
+Every run is one turn of **understand → remember → reason → act → learn**:
+
+```
+context → recall → plan → (gate → act → trace)* → synthesize → verify → remember
+```
+
+- **Context** — scans the work around the goal (files, tools, intent).
+- **Memory (Atlas)** — recalls what's relevant; saves the mission afterward.
+- **Reasoning** — decomposes the goal into executable steps.
+- **Action** — every change passes the **policy gate** first (approve / deny / ask).
+- **Verification** — runs a success **contract** and issues a tamper-evident **certificate**.
+- **Observability** — every decision is recorded; replay any run.
+
+---
+
+## Tools
+
+A tool is anything the agent can call. Inputs are validated by the tool itself.
+
+```ts
+import { defineTool } from "@vornicx/origin";
+
+const calendar = defineTool({
+  name: "calendar",
+  description: "read the user's calendar",
+  run: (input) => readCalendar(input),
+});
+
+// Mutating tools are gated more strictly by policy:
+const sendMail = defineTool({
+  name: "send_mail",
+  description: "send an email",
+  mutating: true,
+  kind: "network",
+  run: (input) => smtp.send(input),
+});
+```
+
+---
+
+## Human agency (policy)
+
+Policies map to Apollo's execution modes and decide, per action, whether to
+**allow**, **deny**, or **ask** a human.
+
+```ts
+import { humanDirected, reviewOnly, autonomous, autoApprove } from "@vornicx/origin";
+
+humanDirected();                // default — read freely, ask before any change
+reviewOnly();                   // plan only, never act
+autonomous({ fullAuto: true }); // act without prompts (use deliberately)
+```
+
+The approval handler is yours to implement (CLI prompt by default):
+
+```ts
+const agent = new ApolloAgent({
+  memory: origin.memory,
+  tools: [sendMail],
+  policy: humanDirected(),
+  approver: async (req) => ({ approved: await askHuman(req.reason) }),
+});
+```
+
+Non-interactive? Use `autoApprove` / `denyAll`, or supply your own.
+
+---
+
+## Memory — Atlas
+
+Persistent across sessions, decisions and workflows. Recall is ranked by
+**relevance × importance × recency**, and shares Apollo's memory model
+(`note · chat · mission · fact · preference`, importance 1–5).
+
+```ts
+import { Memory, JsonStore } from "@vornicx/origin";
+
+const memory = new Memory({ store: new JsonStore({ file: ".origin/atlas.json" }) });
+
+await memory.remember({ content: "Launch is June 12.", kind: "fact", importance: 5 });
+const hits = await memory.recall("when is the launch?");
+```
+
+Stores: `InMemoryStore` (default), `JsonStore` (file), or `SupabaseStore`
+(cloud — see below). Bring your own by implementing `MemoryStore`.
+
+---
+
+## Verification — contracts & certificates
+
+Done is provable, not vibes. A contract verifies a goal via commands, HTTP
+checks, regex over output, and human criteria, producing a hashed certificate.
+
+```ts
+import { evaluateContract } from "@vornicx/origin";
+
+const cert = await evaluateContract({
+  commands: [{ cmd: "npm test" }],
+  http: [{ url: "http://localhost:3000/health", expectStatus: 200 }],
+  criteria: ["no console.log left behind"],
+});
+
+cert.ok;   // true if every check passed
+cert.hash; // sha256 fingerprint, stable across time
+```
+
+---
+
+## Observability
+
+```ts
+const result = await agent.run("Prepare my launch plan");
+
+const trace = await origin.observability.replay(result.traceId);
+console.log(trace.events.map((e) => e.kind).join(" → "));
+// mission_start → plan → approval → tool_call → verify → mission_end
+```
+
+Sinks: in-memory (default) or JSONL on disk. Sensitive values are redacted by a
+configurable redactor before anything is written.
+
+---
+
+## Apollo — the agent runtime
+
+Use the real [Apollo](https://github.com/vornicx/apollo-agent) CLI as Origin's
+reasoning runtime, and persist Atlas to the same Supabase cloud Apollo syncs to.
+
+```bash
+npm i -g @vornicx/apollo-agent && apollo setup
+```
+
+```ts
+import { Origin } from "@vornicx/origin";
+import { ApolloAgent, ApolloRuntime, SupabaseStore } from "@vornicx/origin/apollo";
+
+const origin = await Origin.open();
+
+const agent = new ApolloAgent({
+  memory: origin.memory,
+  policy: humanDirected(),
+  runtime: new ApolloRuntime(), // drives `apollo run …`
+});
+```
+
+```ts
+// Atlas in the cloud (run SUPABASE_ATLAS_DDL once in your project):
+const memory = new Memory({
+  store: new SupabaseStore({ url: process.env.SUPABASE_URL!, key: process.env.SUPABASE_KEY! }),
+});
+```
+
+---
+
+## Ecosystem
+
+One foundation. Multiple layers.
+
+| Layer | Name | This package |
+|-------|------|--------------|
+| Foundation | **Archic** | — |
+| Personal intelligence | **Origin** | `Origin` |
+| Agent runtime | **Apollo** | `ApolloAgent`, `ApolloRuntime` |
+| Memory layer | **Atlas** | `Memory`, `*Store` |
+| Integrations | **Nexus** | _planned_ |
+| — | **Forge** | _coming soon_ |
+
+---
+
+## Examples
+
+```bash
+npm run example:launch   # the snippet above, end to end
+npm run example:apollo   # drive the Apollo CLI as the runtime
+npm run example:memory   # Atlas: remember & recall
+```
+
+See [`examples/`](./examples).
+
+---
+
+## License
+
+MIT © [vornicx](https://github.com/vornicx) · [archic.es](https://archic.es)

package/dist/apollo/index.d.ts

@@ -0,0 +1,87 @@
+import { W as Runtime, c as ApolloMode, X as RuntimeContext, y as Plan, x as Observation, u as MemoryStore, s as MemoryRecord } from '../policy-KjPvxtus.js';
+export { a as ApolloAgent, b as ApolloAgentOptions, v as MissionResult, $ as Tool, a7 as autonomous, ad as defineTool, ag as humanDirected, an as reviewOnly } from '../policy-KjPvxtus.js';
+import 'zod';
+
+interface ApolloExecResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+type ApolloExec = (args: string[], opts: {
+    cwd?: string;
+    timeoutMs?: number;
+    input?: string;
+}) => Promise<ApolloExecResult>;
+interface ApolloRuntimeOptions {
+    /** CLI binary. Defaults to `apollo` (`apollo.cmd` on Windows). */
+    bin?: string;
+    /** Force an Apollo execution mode (`--mode`). Default: let Apollo choose by complexity. */
+    mode?: ApolloMode;
+    cwd?: string;
+    /** Per-invocation timeout. Default 120s. */
+    timeoutMs?: number;
+    /** Injectable process runner (tests). Defaults to spawning the CLI. */
+    exec?: ApolloExec;
+    /** Extra CLI args appended to every invocation. */
+    extraArgs?: string[];
+}
+/**
+ * Drives the real Apollo CLI (`@vornicx/apollo-agent`) as Origin's reasoning
+ * runtime. `plan()` asks Apollo to plan the goal (`apollo run <goal> --json
+ * --dry-run`); Origin then gates and executes the steps with *your* tools,
+ * keeping humans in control. If the CLI is missing or errors, planning degrades
+ * to a legible empty plan rather than throwing.
+ *
+ * Install Apollo first: `npm i -g @vornicx/apollo-agent && apollo setup`.
+ */
+declare class ApolloRuntime implements Runtime {
+    readonly name = "apollo";
+    private readonly bin;
+    private readonly mode?;
+    private readonly cwd?;
+    private readonly timeoutMs;
+    private readonly extraArgs;
+    private readonly exec;
+    constructor(options?: ApolloRuntimeOptions);
+    plan(ctx: RuntimeContext): Promise<Plan>;
+    synthesize(ctx: RuntimeContext, observations: Observation[]): Promise<string>;
+}
+
+interface SupabaseStoreOptions {
+    /** Supabase project URL, e.g. `https://abcd.supabase.co`. */
+    url: string;
+    /** Supabase API key (anon or service-role). */
+    key: string;
+    /** Table name. Default `atlas_memories`. */
+    table?: string;
+    /** Injectable fetch (tests). Defaults to global `fetch`. */
+    fetchImpl?: typeof fetch;
+}
+/** Run this once in your Supabase project to create the Atlas table. */
+declare const SUPABASE_ATLAS_DDL = "create table if not exists atlas_memories (\n  id uuid primary key,\n  data jsonb not null,\n  created_at timestamptz not null default now()\n);";
+/**
+ * Persists Atlas memory to Supabase via its REST (PostgREST) API — the same
+ * cloud Apollo syncs to. Each memory is stored as `{ id, data: <record> }`, so
+ * the schema is migration-proof. Pure `fetch`, no SDK dependency. Create the
+ * table once with {@link SUPABASE_ATLAS_DDL}.
+ *
+ * ```ts
+ * const memory = new Memory({
+ *   store: new SupabaseStore({ url: process.env.SUPABASE_URL!, key: process.env.SUPABASE_KEY! }),
+ * });
+ * ```
+ */
+declare class SupabaseStore implements MemoryStore {
+    private readonly base;
+    private readonly key;
+    private readonly fetchImpl;
+    constructor(options: SupabaseStoreOptions);
+    private req;
+    all(): Promise<MemoryRecord[]>;
+    get(id: string): Promise<MemoryRecord | null>;
+    put(record: MemoryRecord): Promise<void>;
+    delete(id: string): Promise<boolean>;
+    clear(): Promise<void>;
+}
+
+export { type ApolloExec, type ApolloExecResult, ApolloRuntime, type ApolloRuntimeOptions, SUPABASE_ATLAS_DDL, SupabaseStore, type SupabaseStoreOptions };

package/dist/apollo/index.js

@@ -0,0 +1,140 @@
+import { parsePlan } from '../chunk-77G3SI57.js';
+export { ApolloAgent, autonomous, defineTool, humanDirected, reviewOnly } from '../chunk-77G3SI57.js';
+import { spawn } from 'child_process';
+
+var ApolloRuntime = class {
+  name = "apollo";
+  bin;
+  mode;
+  cwd;
+  timeoutMs;
+  extraArgs;
+  exec;
+  constructor(options = {}) {
+    this.bin = options.bin ?? "apollo";
+    if (options.mode) this.mode = options.mode;
+    if (options.cwd) this.cwd = options.cwd;
+    this.timeoutMs = options.timeoutMs ?? 12e4;
+    this.extraArgs = options.extraArgs ?? [];
+    this.exec = options.exec ?? makeSpawnExec(this.bin);
+  }
+  async plan(ctx) {
+    const args = ["run", ctx.goal, "--json", "--dry-run"];
+    if (this.mode) args.push("--mode", this.mode);
+    args.push(...this.extraArgs);
+    const res = await this.exec(args, {
+      ...this.cwd ? { cwd: this.cwd } : {},
+      timeoutMs: this.timeoutMs
+    });
+    if (res.code !== 0) {
+      const detail = res.stderr.trim().slice(0, 200);
+      return { steps: [], rationale: `apollo exited ${res.code}${detail ? `: ${detail}` : ""}` };
+    }
+    return parsePlan(res.stdout, ctx.tools);
+  }
+  async synthesize(ctx, observations) {
+    const lines = observations.map(
+      (o) => `- ${o.stepId}: ${o.skipped ? "skipped" : o.ok ? "ok" : "failed"}${o.error ? ` (${o.error})` : ""}`
+    );
+    const body = lines.length ? `
+${lines.join("\n")}` : " (no steps)";
+    return `Apollo planned and Origin executed "${ctx.goal}".${body}`;
+  }
+};
+function makeSpawnExec(bin) {
+  const useShell = process.platform === "win32";
+  return (args, opts) => new Promise((resolve) => {
+    let child;
+    try {
+      child = useShell ? spawn([bin, ...args.map(quoteForShell)].join(" "), {
+        ...opts.cwd ? { cwd: opts.cwd } : {},
+        windowsHide: true,
+        shell: true
+      }) : spawn(bin, args, { ...opts.cwd ? { cwd: opts.cwd } : {}, windowsHide: true });
+    } catch (e) {
+      resolve({ code: 127, stdout: "", stderr: e instanceof Error ? e.message : String(e) });
+      return;
+    }
+    let stdout = "";
+    let stderr = "";
+    const timer = opts.timeoutMs ? setTimeout(() => child.kill(), opts.timeoutMs) : void 0;
+    child.stdout?.on("data", (d) => stdout += d.toString());
+    child.stderr?.on("data", (d) => stderr += d.toString());
+    if (opts.input) child.stdin?.end(opts.input);
+    child.on("error", (e) => {
+      if (timer) clearTimeout(timer);
+      resolve({ code: 127, stdout, stderr: stderr || e.message });
+    });
+    child.on("close", (code) => {
+      if (timer) clearTimeout(timer);
+      resolve({ code: code ?? 0, stdout, stderr });
+    });
+  });
+}
+function quoteForShell(arg) {
+  return /[\s"&|<>^()%]/.test(arg) ? `"${arg.replace(/"/g, '\\"')}"` : arg;
+}
+
+// src/apollo/supabase-store.ts
+var SUPABASE_ATLAS_DDL = `create table if not exists atlas_memories (
+  id uuid primary key,
+  data jsonb not null,
+  created_at timestamptz not null default now()
+);`;
+var SupabaseStore = class {
+  base;
+  key;
+  fetchImpl;
+  constructor(options) {
+    const table = options.table ?? "atlas_memories";
+    this.base = `${options.url.replace(/\/+$/, "")}/rest/v1/${table}`;
+    this.key = options.key;
+    this.fetchImpl = options.fetchImpl ?? fetch;
+  }
+  async req(method, query, init) {
+    const headers = {
+      apikey: this.key,
+      Authorization: `Bearer ${this.key}`,
+      "Content-Type": "application/json",
+      ...init?.prefer ? { Prefer: init.prefer } : {}
+    };
+    const res = await this.fetchImpl(`${this.base}${query}`, {
+      method,
+      headers,
+      ...init?.body !== void 0 ? { body: JSON.stringify(init.body) } : {}
+    });
+    if (!res.ok) {
+      const text = await res.text().catch(() => "");
+      throw new Error(`SupabaseStore ${method} ${query} -> ${res.status} ${res.statusText} ${text}`.trim());
+    }
+    return res;
+  }
+  async all() {
+    const res = await this.req("GET", "?select=id,data");
+    const rows = await res.json();
+    return rows.map((r) => r.data);
+  }
+  async get(id) {
+    const res = await this.req("GET", `?id=eq.${encodeURIComponent(id)}&select=id,data&limit=1`);
+    const rows = await res.json();
+    return rows[0]?.data ?? null;
+  }
+  async put(record) {
+    await this.req("POST", "", {
+      body: [{ id: record.id, data: record }],
+      prefer: "resolution=merge-duplicates,return=minimal"
+    });
+  }
+  async delete(id) {
+    const res = await this.req("DELETE", `?id=eq.${encodeURIComponent(id)}`, { prefer: "return=representation" });
+    const rows = await res.json();
+    return rows.length > 0;
+  }
+  async clear() {
+    await this.req("DELETE", "?id=not.is.null", { prefer: "return=minimal" });
+  }
+};
+
+export { ApolloRuntime, SUPABASE_ATLAS_DDL, SupabaseStore };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/apollo/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/apollo/apollo-runtime.ts","../../src/apollo/supabase-store.ts"],"names":[],"mappings":";;;;AAuCO,IAAM,gBAAN,MAAuC;AAAA,EACnC,IAAA,GAAO,QAAA;AAAA,EACC,GAAA;AAAA,EACA,IAAA;AAAA,EACA,GAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,IAAA;AAAA,EAEjB,WAAA,CAAY,OAAA,GAAgC,EAAC,EAAG;AAC9C,IAAA,IAAA,CAAK,GAAA,GAAM,QAAQ,GAAA,IAAO,QAAA;AAC1B,IAAA,IAAI,OAAA,CAAQ,IAAA,EAAM,IAAA,CAAK,IAAA,GAAO,OAAA,CAAQ,IAAA;AACtC,IAAA,IAAI,OAAA,CAAQ,GAAA,EAAK,IAAA,CAAK,GAAA,GAAM,OAAA,CAAQ,GAAA;AACpC,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,SAAA,IAAa,IAAA;AACtC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAA,CAAQ,SAAA,IAAa,EAAC;AACvC,IAAA,IAAA,CAAK,IAAA,GAAO,OAAA,CAAQ,IAAA,IAAQ,aAAA,CAAc,KAAK,GAAG,CAAA;AAAA,EACpD;AAAA,EAEA,MAAM,KAAK,GAAA,EAAoC;AAC7C,IAAA,MAAM,OAAO,CAAC,KAAA,EAAO,GAAA,CAAI,IAAA,EAAM,UAAU,WAAW,CAAA;AACpD,IAAA,IAAI,KAAK,IAAA,EAAM,IAAA,CAAK,IAAA,CAAK,QAAA,EAAU,KAAK,IAAI,CAAA;AAC5C,IAAA,IAAA,CAAK,IAAA,CAAK,GAAG,IAAA,CAAK,SAAS,CAAA;AAC3B,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM;AAAA,MAChC,GAAI,KAAK,GAAA,GAAM,EAAE,KAAK,IAAA,CAAK,GAAA,KAAQ,EAAC;AAAA,MACpC,WAAW,IAAA,CAAK;AAAA,KACjB,CAAA;AACD,IAAA,IAAI,GAAA,CAAI,SAAS,CAAA,EAAG;AAClB,MAAA,MAAM,SAAS,GAAA,CAAI,MAAA,CAAO,MAAK,CAAE,KAAA,CAAM,GAAG,GAAG,CAAA;AAC7C,MAAA,OAAO,EAAE,KAAA,EAAO,EAAC,EAAG,WAAW,CAAA,cAAA,EAAiB,GAAA,CAAI,IAAI,CAAA,EAAG,MAAA,GAAS,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,GAAK,EAAE,CAAA,CAAA,EAAG;AAAA,IAC3F;AACA,IAAA,OAAO,SAAA,CAAU,GAAA,CAAI,MAAA,EAAQ,GAAA,CAAI,KAAK,CAAA;AAAA,EACxC;AAAA,EAEA,MAAM,UAAA,CAAW,GAAA,EAAqB,YAAA,EAA8C;AAClF,IAAA,MAAM,QAAQ,YAAA,CAAa,GAAA;AAAA,MACzB,CAAC,MACC,CAAA,EAAA,EAAK,CAAA,CAAE,MAAM,CAAA,EAAA,EAAK,CAAA,CAAE,UAAU,SAAA,GAAY,CAAA,CAAE,KAAK,IAAA,GAAO,QAAQ,GAAG,CAAA,CAAE,KAAA,GAAQ,KAAK,CAAA,CAAE,KAAK,MAAM,EAAE,CAAA;AAAA,KACrG;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,GAAS;AAAA,EAAK,KAAA,CAAM,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GAAK,aAAA;AACtD,IAAA,OAAO,CAAA,oCAAA,EAAuC,GAAA,CAAI,IAAI,CAAA,EAAA,EAAK,IAAI,CAAA,CAAA;AAAA,EACjE;AACF;AAEA,SAAS,cAAc,GAAA,EAAyB;AAI9C,EAAA,MAAM,QAAA,GAAW,QAAQ,QAAA,KAAa,OAAA;AACtC,EAAA,OAAO,CAAC,IAAA,EAAM,IAAA,KACZ,IAAI,OAAA,CAA0B,CAAC,OAAA,KAAY;AACzC,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AAGF,MAAA,KAAA,GAAQ,QAAA,GACJ,KAAA,CAAM,CAAC,GAAA,EAAK,GAAG,IAAA,CAAK,GAAA,CAAI,aAAa,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA,EAAG;AAAA,QACjD,GAAI,KAAK,GAAA,GAAM,EAAE,KAAK,IAAA,CAAK,GAAA,KAAQ,EAAC;AAAA,QACpC,WAAA,EAAa,IAAA;AAAA,QACb,KAAA,EAAO;AAAA,OACR,CAAA,GACD,KAAA,CAAM,KAAK,IAAA,EAAM,EAAE,GAAI,IAAA,CAAK,GAAA,GAAM,EAAE,GAAA,EAAK,KAAK,GAAA,EAAI,GAAI,EAAC,EAAI,WAAA,EAAa,MAAM,CAAA;AAAA,IACpF,SAAS,CAAA,EAAG;AACV,MAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,GAAA,EAAK,MAAA,EAAQ,EAAA,EAAI,MAAA,EAAQ,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,GAAG,CAAA;AACrF,MAAA;AAAA,IACF;AACA,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,SAAA,GAAY,UAAA,CAAW,MAAM,MAAM,IAAA,EAAK,EAAG,IAAA,CAAK,SAAS,CAAA,GAAI,MAAA;AAChF,IAAA,KAAA,CAAM,MAAA,EAAQ,GAAG,MAAA,EAAQ,CAAC,MAAe,MAAA,IAAU,CAAA,CAAE,UAAW,CAAA;AAChE,IAAA,KAAA,CAAM,MAAA,EAAQ,GAAG,MAAA,EAAQ,CAAC,MAAe,MAAA,IAAU,CAAA,CAAE,UAAW,CAAA;AAChE,IAAA,IAAI,KAAK,KAAA,EAAO,KAAA,CAAM,KAAA,EAAO,GAAA,CAAI,KAAK,KAAK,CAAA;AAC3C,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,CAAA,KAAa;AAC9B,MAAA,IAAI,KAAA,eAAoB,KAAK,CAAA;AAC7B,MAAA,OAAA,CAAQ,EAAE,MAAM,GAAA,EAAK,MAAA,EAAQ,QAAQ,MAAA,IAAU,CAAA,CAAE,SAAS,CAAA;AAAA,IAC5D,CAAC,CAAA;AACD,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAwB;AACzC,MAAA,IAAI,KAAA,eAAoB,KAAK,CAAA;AAC7B,MAAA,OAAA,CAAQ,EAAE,IAAA,EAAM,IAAA,IAAQ,CAAA,EAAG,MAAA,EAAQ,QAAQ,CAAA;AAAA,IAC7C,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AACL;AAGA,SAAS,cAAc,GAAA,EAAqB;AAC1C,EAAA,OAAO,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAA,GAAI,CAAA,CAAA,EAAI,IAAI,OAAA,CAAQ,IAAA,EAAM,KAAK,CAAC,CAAA,CAAA,CAAA,GAAM,GAAA;AACvE;;;AC7GO,IAAM,kBAAA,GAAqB,CAAA;AAAA;AAAA;AAAA;AAAA,EAAA;AAuB3B,IAAM,gBAAN,MAA2C;AAAA,EAC/B,IAAA;AAAA,EACA,GAAA;AAAA,EACA,SAAA;AAAA,EAEjB,YAAY,OAAA,EAA+B;AACzC,IAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,gBAAA;AAC/B,IAAA,IAAA,CAAK,IAAA,GAAO,GAAG,OAAA,CAAQ,GAAA,CAAI,QAAQ,MAAA,EAAQ,EAAE,CAAC,CAAA,SAAA,EAAY,KAAK,CAAA,CAAA;AAC/D,IAAA,IAAA,CAAK,MAAM,OAAA,CAAQ,GAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,SAAA,IAAa,KAAA;AAAA,EACxC;AAAA,EAEA,MAAc,GAAA,CAAI,MAAA,EAAgB,KAAA,EAAe,IAAA,EAA+D;AAC9G,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,QAAQ,IAAA,CAAK,GAAA;AAAA,MACb,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,GAAG,CAAA,CAAA;AAAA,MACjC,cAAA,EAAgB,kBAAA;AAAA,MAChB,GAAI,MAAM,MAAA,GAAS,EAAE,QAAQ,IAAA,CAAK,MAAA,KAAW;AAAC,KAChD;AACA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CAAU,GAAG,IAAA,CAAK,IAAI,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI;AAAA,MACvD,MAAA;AAAA,MACA,OAAA;AAAA,MACA,GAAI,IAAA,EAAM,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,EAAE,GAAI;AAAC,KACvE,CAAA;AACD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,MAAM,CAAA,CAAA,EAAI,KAAK,CAAA,IAAA,EAAO,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,IAAI,UAAU,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,CAAG,MAAM,CAAA;AAAA,IACtG;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEA,MAAM,GAAA,GAA+B;AACnC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,iBAAiB,CAAA;AACnD,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAAA,EAC/B;AAAA,EAEA,MAAM,IAAI,EAAA,EAA0C;AAClD,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,OAAA,EAAU,kBAAA,CAAmB,EAAE,CAAC,CAAA,uBAAA,CAAyB,CAAA;AAC3F,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,OAAO,IAAA,CAAK,CAAC,CAAA,EAAG,IAAA,IAAQ,IAAA;AAAA,EAC1B;AAAA,EAEA,MAAM,IAAI,MAAA,EAAqC;AAC7C,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,EAAA,EAAI;AAAA,MACzB,IAAA,EAAM,CAAC,EAAE,EAAA,EAAI,OAAO,EAAA,EAAI,IAAA,EAAM,QAAQ,CAAA;AAAA,MACtC,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,OAAO,EAAA,EAA8B;AACzC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA,CAAI,QAAA,EAAU,CAAA,OAAA,EAAU,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA,EAAI,EAAE,MAAA,EAAQ,yBAAyB,CAAA;AAC5G,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,OAAO,KAAK,MAAA,GAAS,CAAA;AAAA,EACvB;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,MAAM,KAAK,GAAA,CAAI,QAAA,EAAU,mBAAmB,EAAE,MAAA,EAAQ,kBAAkB,CAAA;AAAA,EAC1E;AACF","file":"index.js","sourcesContent":["import { spawn } from \"node:child_process\";\nimport { parsePlan } from \"../agent/plan-parse\";\nimport type { Observation, Plan, Runtime, RuntimeContext } from \"../agent/runtime\";\nimport type { ApolloMode } from \"../policy/types\";\n\nexport interface ApolloExecResult {\n  code: number;\n  stdout: string;\n  stderr: string;\n}\n\nexport type ApolloExec = (\n  args: string[],\n  opts: { cwd?: string; timeoutMs?: number; input?: string },\n) => Promise<ApolloExecResult>;\n\nexport interface ApolloRuntimeOptions {\n  /** CLI binary. Defaults to `apollo` (`apollo.cmd` on Windows). */\n  bin?: string;\n  /** Force an Apollo execution mode (`--mode`). Default: let Apollo choose by complexity. */\n  mode?: ApolloMode;\n  cwd?: string;\n  /** Per-invocation timeout. Default 120s. */\n  timeoutMs?: number;\n  /** Injectable process runner (tests). Defaults to spawning the CLI. */\n  exec?: ApolloExec;\n  /** Extra CLI args appended to every invocation. */\n  extraArgs?: string[];\n}\n\n/**\n * Drives the real Apollo CLI (`@vornicx/apollo-agent`) as Origin's reasoning\n * runtime. `plan()` asks Apollo to plan the goal (`apollo run <goal> --json\n * --dry-run`); Origin then gates and executes the steps with *your* tools,\n * keeping humans in control. If the CLI is missing or errors, planning degrades\n * to a legible empty plan rather than throwing.\n *\n * Install Apollo first: `npm i -g @vornicx/apollo-agent && apollo setup`.\n */\nexport class ApolloRuntime implements Runtime {\n  readonly name = \"apollo\";\n  private readonly bin: string;\n  private readonly mode?: ApolloMode;\n  private readonly cwd?: string;\n  private readonly timeoutMs: number;\n  private readonly extraArgs: string[];\n  private readonly exec: ApolloExec;\n\n  constructor(options: ApolloRuntimeOptions = {}) {\n    this.bin = options.bin ?? \"apollo\";\n    if (options.mode) this.mode = options.mode;\n    if (options.cwd) this.cwd = options.cwd;\n    this.timeoutMs = options.timeoutMs ?? 120_000;\n    this.extraArgs = options.extraArgs ?? [];\n    this.exec = options.exec ?? makeSpawnExec(this.bin);\n  }\n\n  async plan(ctx: RuntimeContext): Promise<Plan> {\n    const args = [\"run\", ctx.goal, \"--json\", \"--dry-run\"];\n    if (this.mode) args.push(\"--mode\", this.mode);\n    args.push(...this.extraArgs);\n    const res = await this.exec(args, {\n      ...(this.cwd ? { cwd: this.cwd } : {}),\n      timeoutMs: this.timeoutMs,\n    });\n    if (res.code !== 0) {\n      const detail = res.stderr.trim().slice(0, 200);\n      return { steps: [], rationale: `apollo exited ${res.code}${detail ? `: ${detail}` : \"\"}` };\n    }\n    return parsePlan(res.stdout, ctx.tools);\n  }\n\n  async synthesize(ctx: RuntimeContext, observations: Observation[]): Promise<string> {\n    const lines = observations.map(\n      (o) =>\n        `- ${o.stepId}: ${o.skipped ? \"skipped\" : o.ok ? \"ok\" : \"failed\"}${o.error ? ` (${o.error})` : \"\"}`,\n    );\n    const body = lines.length ? `\\n${lines.join(\"\\n\")}` : \" (no steps)\";\n    return `Apollo planned and Origin executed \"${ctx.goal}\".${body}`;\n  }\n}\n\nfunction makeSpawnExec(bin: string): ApolloExec {\n  // On Windows the global `apollo` shim is a `.cmd`, which Node refuses to spawn\n  // without a shell (EINVAL, post CVE-2024-27980). Use a shell there and quote\n  // args; elsewhere spawn directly (no shell = no injection surface).\n  const useShell = process.platform === \"win32\";\n  return (args, opts) =>\n    new Promise<ApolloExecResult>((resolve) => {\n      let child: ReturnType<typeof spawn>;\n      try {\n        // With shell:true, pass one command string (not an args array) — both to\n        // control quoting and to avoid Node's DEP0190 warning.\n        child = useShell\n          ? spawn([bin, ...args.map(quoteForShell)].join(\" \"), {\n              ...(opts.cwd ? { cwd: opts.cwd } : {}),\n              windowsHide: true,\n              shell: true,\n            })\n          : spawn(bin, args, { ...(opts.cwd ? { cwd: opts.cwd } : {}), windowsHide: true });\n      } catch (e) {\n        resolve({ code: 127, stdout: \"\", stderr: e instanceof Error ? e.message : String(e) });\n        return;\n      }\n      let stdout = \"\";\n      let stderr = \"\";\n      const timer = opts.timeoutMs ? setTimeout(() => child.kill(), opts.timeoutMs) : undefined;\n      child.stdout?.on(\"data\", (d: Buffer) => (stdout += d.toString()));\n      child.stderr?.on(\"data\", (d: Buffer) => (stderr += d.toString()));\n      if (opts.input) child.stdin?.end(opts.input);\n      child.on(\"error\", (e: Error) => {\n        if (timer) clearTimeout(timer);\n        resolve({ code: 127, stdout, stderr: stderr || e.message });\n      });\n      child.on(\"close\", (code: number | null) => {\n        if (timer) clearTimeout(timer);\n        resolve({ code: code ?? 0, stdout, stderr });\n      });\n    });\n}\n\n/** Minimal cmd.exe-safe quoting for args passed through a shell. */\nfunction quoteForShell(arg: string): string {\n  return /[\\s\"&|<>^()%]/.test(arg) ? `\"${arg.replace(/\"/g, '\\\\\"')}\"` : arg;\n}\n","import type { MemoryStore } from \"../memory/store\";\nimport type { MemoryRecord } from \"../memory/types\";\n\nexport interface SupabaseStoreOptions {\n  /** Supabase project URL, e.g. `https://abcd.supabase.co`. */\n  url: string;\n  /** Supabase API key (anon or service-role). */\n  key: string;\n  /** Table name. Default `atlas_memories`. */\n  table?: string;\n  /** Injectable fetch (tests). Defaults to global `fetch`. */\n  fetchImpl?: typeof fetch;\n}\n\n/** Run this once in your Supabase project to create the Atlas table. */\nexport const SUPABASE_ATLAS_DDL = `create table if not exists atlas_memories (\n  id uuid primary key,\n  data jsonb not null,\n  created_at timestamptz not null default now()\n);`;\n\ninterface Row {\n  id: string;\n  data: MemoryRecord;\n}\n\n/**\n * Persists Atlas memory to Supabase via its REST (PostgREST) API — the same\n * cloud Apollo syncs to. Each memory is stored as `{ id, data: <record> }`, so\n * the schema is migration-proof. Pure `fetch`, no SDK dependency. Create the\n * table once with {@link SUPABASE_ATLAS_DDL}.\n *\n * ```ts\n * const memory = new Memory({\n *   store: new SupabaseStore({ url: process.env.SUPABASE_URL!, key: process.env.SUPABASE_KEY! }),\n * });\n * ```\n */\nexport class SupabaseStore implements MemoryStore {\n  private readonly base: string;\n  private readonly key: string;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(options: SupabaseStoreOptions) {\n    const table = options.table ?? \"atlas_memories\";\n    this.base = `${options.url.replace(/\\/+$/, \"\")}/rest/v1/${table}`;\n    this.key = options.key;\n    this.fetchImpl = options.fetchImpl ?? fetch;\n  }\n\n  private async req(method: string, query: string, init?: { body?: unknown; prefer?: string }): Promise<Response> {\n    const headers: Record<string, string> = {\n      apikey: this.key,\n      Authorization: `Bearer ${this.key}`,\n      \"Content-Type\": \"application/json\",\n      ...(init?.prefer ? { Prefer: init.prefer } : {}),\n    };\n    const res = await this.fetchImpl(`${this.base}${query}`, {\n      method,\n      headers,\n      ...(init?.body !== undefined ? { body: JSON.stringify(init.body) } : {}),\n    });\n    if (!res.ok) {\n      const text = await res.text().catch(() => \"\");\n      throw new Error(`SupabaseStore ${method} ${query} -> ${res.status} ${res.statusText} ${text}`.trim());\n    }\n    return res;\n  }\n\n  async all(): Promise<MemoryRecord[]> {\n    const res = await this.req(\"GET\", \"?select=id,data\");\n    const rows = (await res.json()) as Row[];\n    return rows.map((r) => r.data);\n  }\n\n  async get(id: string): Promise<MemoryRecord | null> {\n    const res = await this.req(\"GET\", `?id=eq.${encodeURIComponent(id)}&select=id,data&limit=1`);\n    const rows = (await res.json()) as Row[];\n    return rows[0]?.data ?? null;\n  }\n\n  async put(record: MemoryRecord): Promise<void> {\n    await this.req(\"POST\", \"\", {\n      body: [{ id: record.id, data: record }],\n      prefer: \"resolution=merge-duplicates,return=minimal\",\n    });\n  }\n\n  async delete(id: string): Promise<boolean> {\n    const res = await this.req(\"DELETE\", `?id=eq.${encodeURIComponent(id)}`, { prefer: \"return=representation\" });\n    const rows = (await res.json()) as Row[];\n    return rows.length > 0;\n  }\n\n  async clear(): Promise<void> {\n    await this.req(\"DELETE\", \"?id=not.is.null\", { prefer: \"return=minimal\" });\n  }\n}\n"]}