agentflow-core 0.6.3 → 0.8.0

package/dist/cli.cjs

@@ -93,7 +93,7 @@ var init_loader = __esm({
 });
 
 // src/cli.ts
-var import_path3 = require("path");
+var import_node_path7 = require("path");
 
 // src/live.ts
 var import_node_fs2 = require("fs");
@@ -191,7 +191,7 @@ function groupByTraceId(graphs) {
 }
 function stitchTrace(graphs) {
   if (graphs.length === 0) throw new Error("No graphs to stitch");
-  const traceId = graphs[0].traceId ?? "";
+  const traceId = graphs[0]?.traceId ?? "";
   const graphsBySpan = /* @__PURE__ */ new Map();
   const childMap = /* @__PURE__ */ new Map();
   let rootGraph = null;
@@ -268,7 +268,7 @@ function pidMatchesName(pid, name) {
 function readPidFile(path) {
   try {
     const pid = parseInt((0, import_node_fs.readFileSync)(path, "utf8").trim(), 10);
-    return isNaN(pid) ? null : pid;
+    return Number.isNaN(pid) ? null : pid;
   } catch {
     return null;
   }
@@ -312,11 +312,11 @@ function auditSystemd(config) {
       const [k, ...v] = line.split("=");
       if (k) props[k.trim()] = v.join("=").trim();
     }
-    const activeState = props["ActiveState"] ?? "unknown";
-    const subState = props["SubState"] ?? "unknown";
-    const mainPid = parseInt(props["MainPID"] ?? "0", 10);
-    const restarts = parseInt(props["NRestarts"] ?? "0", 10);
-    const result = props["Result"] ?? "unknown";
+    const activeState = props.ActiveState ?? "unknown";
+    const subState = props.SubState ?? "unknown";
+    const mainPid = parseInt(props.MainPID ?? "0", 10);
+    const restarts = parseInt(props.NRestarts ?? "0", 10);
+    const result = props.Result ?? "unknown";
     return {
       unit,
       activeState,
@@ -369,10 +369,10 @@ function readCmdline(pid) {
 }
 function getOsProcesses(processName) {
   try {
-    const raw = (0, import_node_child_process.execSync)(
-      `ps -eo pid,pcpu,pmem,etime,lstart,args --no-headers`,
-      { encoding: "utf8", timeout: 5e3 }
-    );
+    const raw = (0, import_node_child_process.execSync)(`ps -eo pid,pcpu,pmem,etime,lstart,args --no-headers`, {
+      encoding: "utf8",
+      timeout: 5e3
+    });
     const results = [];
     for (const line of raw.split("\n")) {
       if (!line.includes(processName)) continue;
@@ -380,7 +380,7 @@ function getOsProcesses(processName) {
       const trimmed = line.trim();
       const parts = trimmed.split(/\s+/);
       const pid = parseInt(parts[0] ?? "0", 10);
-      if (isNaN(pid) || pid <= 0) continue;
+      if (Number.isNaN(pid) || pid <= 0) continue;
       const cpu = parts[1] ?? "0";
       const mem = parts[2] ?? "0";
       const elapsed = parts[3] ?? "";
@@ -457,16 +457,45 @@ function auditProcesses(config) {
     }
   }
   if (systemd?.mainPid) knownPids.add(systemd.mainPid);
+  const childPids = /* @__PURE__ */ new Set();
+  for (const knownPid of knownPids) {
+    try {
+      const childrenRaw = (0, import_node_fs.readFileSync)(
+        `/proc/${knownPid}/task/${knownPid}/children`,
+        "utf8"
+      ).trim();
+      if (childrenRaw) {
+        for (const c of childrenRaw.split(/\s+/)) {
+          const cp = parseInt(c, 10);
+          if (!Number.isNaN(cp)) childPids.add(cp);
+        }
+      }
+    } catch {
+    }
+  }
+  for (const p of osProcesses) {
+    if (knownPids.has(p.pid)) continue;
+    try {
+      const statusContent = (0, import_node_fs.readFileSync)(`/proc/${p.pid}/status`, "utf8");
+      const ppidMatch = statusContent.match(/^PPid:\s+(\d+)/m);
+      if (ppidMatch) {
+        const ppid = parseInt(ppidMatch[1] ?? "0", 10);
+        if (knownPids.has(ppid)) childPids.add(p.pid);
+      }
+    } catch {
+    }
+  }
   const selfPid = process.pid;
   const selfPpid = process.ppid;
   const orphans = osProcesses.filter(
-    (p) => !knownPids.has(p.pid) && p.pid !== selfPid && p.pid !== selfPpid
+    (p) => !knownPids.has(p.pid) && !childPids.has(p.pid) && p.pid !== selfPid && p.pid !== selfPpid
   );
   const problems = [];
   if (pidFile?.stale) problems.push(`Stale PID file: ${pidFile.reason}`);
   if (systemd?.crashLooping) problems.push("Systemd unit is crash-looping (auto-restart)");
   if (systemd?.failed) problems.push("Systemd unit has failed");
-  if (systemd && systemd.restarts > 10) problems.push(`High systemd restart count: ${systemd.restarts}`);
+  if (systemd && systemd.restarts > 10)
+    problems.push(`High systemd restart count: ${systemd.restarts}`);
   if (pidFile?.pid && systemd?.mainPid && pidFile.pid !== systemd.mainPid) {
     problems.push(`PID mismatch: file says ${pidFile.pid}, systemd says ${systemd.mainPid}`);
   }
@@ -475,15 +504,24 @@ function auditProcesses(config) {
       if (w.stale) problems.push(`Worker "${w.name}" (pid ${w.pid}) declares running but is dead`);
     }
   }
-  if (orphans.length > 0) problems.push(`${orphans.length} orphan process(es) not tracked by PID file or workers registry`);
+  if (orphans.length > 0)
+    problems.push(
+      `${orphans.length} orphan process(es) not tracked by PID file or workers registry`
+    );
   return { pidFile, systemd, workers, osProcesses, orphans, problems };
 }
 function formatAuditReport(result) {
   const lines = [];
   lines.push("");
-  lines.push("\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557");
-  lines.push("\u2551            \u{1F50D}  P R O C E S S   A U D I T                      \u2551");
-  lines.push("\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D");
+  lines.push(
+    "\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557"
+  );
+  lines.push(
+    "\u2551            \u{1F50D}  P R O C E S S   A U D I T                      \u2551"
+  );
+  lines.push(
+    "\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D"
+  );
   if (result.pidFile) {
     const pf = result.pidFile;
     const icon = pf.pid && pf.alive && pf.matchesProcess ? "\u2705" : pf.stale ? "\u26A0\uFE0F " : "\u2139\uFE0F ";
@@ -501,25 +539,33 @@ function formatAuditReport(result) {
   }
   if (result.workers) {
     const w = result.workers;
-    lines.push(`
-  Workers (orchestrator pid ${w.orchestratorPid ?? "unknown"} ${w.orchestratorAlive ? "\u2705" : "\u274C"})`);
+    lines.push(
+      `
+  Workers (orchestrator pid ${w.orchestratorPid ?? "unknown"} ${w.orchestratorAlive ? "\u2705" : "\u274C"})`
+    );
     for (const worker of w.workers) {
       const icon = worker.declaredStatus === "running" && worker.alive ? "\u{1F7E2}" : worker.stale ? "\u{1F534} STALE" : "\u26AA";
-      lines.push(`  ${icon}  ${worker.name.padEnd(14)} pid=${String(worker.pid ?? "-").padEnd(8)} status=${worker.declaredStatus}`);
+      lines.push(
+        `  ${icon}  ${worker.name.padEnd(14)} pid=${String(worker.pid ?? "-").padEnd(8)} status=${worker.declaredStatus}`
+      );
     }
   }
   if (result.osProcesses.length > 0) {
     lines.push(`
   OS Processes (${result.osProcesses.length} total)`);
     for (const p of result.osProcesses) {
-      lines.push(`    PID ${String(p.pid).padEnd(8)} CPU=${p.cpu.padEnd(6)} MEM=${p.mem.padEnd(6)} Up=${p.elapsed.padEnd(10)} ${p.command.substring(0, 50)}`);
+      lines.push(
+        `    PID ${String(p.pid).padEnd(8)} CPU=${p.cpu.padEnd(6)} MEM=${p.mem.padEnd(6)} Up=${p.elapsed.padEnd(10)} ${p.command.substring(0, 50)}`
+      );
     }
   }
   if (result.orphans.length > 0) {
     lines.push(`
   \u26A0\uFE0F  ${result.orphans.length} ORPHAN PROCESS(ES):`);
     for (const p of result.orphans) {
-      lines.push(`     PID ${String(p.pid).padEnd(8)} CPU=${p.cpu.padEnd(6)} MEM=${p.mem.padEnd(6)} Up=${p.elapsed}`);
+      lines.push(
+        `     PID ${String(p.pid).padEnd(8)} CPU=${p.cpu.padEnd(6)} MEM=${p.mem.padEnd(6)} Up=${p.elapsed}`
+      );
       lines.push(`       Started: ${p.started}`);
       lines.push(`       Command: ${p.cmdline || p.command}`);
     }
@@ -564,7 +610,7 @@ function parseArgs(argv) {
     } else if (arg === "--refresh" || arg === "-r") {
       i++;
       const v = parseInt(args[i] ?? "", 10);
-      if (!isNaN(v) && v > 0) config.refreshMs = v * 1e3;
+      if (!Number.isNaN(v) && v > 0) config.refreshMs = v * 1e3;
       i++;
     } else if (arg === "--recursive" || arg === "-R") {
       config.recursive = true;
@@ -645,12 +691,22 @@ function scanFiles(dirs, recursive) {
         if (!stat.isFile()) continue;
         if (f.endsWith(".json")) {
           seen.add(fp);
-          const entry = { filename: f, path: fp, mtime: stat.mtime.getTime(), ext: ".json" };
+          const entry = {
+            filename: f,
+            path: fp,
+            mtime: stat.mtime.getTime(),
+            ext: ".json"
+          };
           results.push(entry);
           dirResults.push(entry);
         } else if (f.endsWith(".jsonl")) {
           seen.add(fp);
-          const entry = { filename: f, path: fp, mtime: stat.mtime.getTime(), ext: ".jsonl" };
+          const entry = {
+            filename: f,
+            path: fp,
+            mtime: stat.mtime.getTime(),
+            ext: ".jsonl"
+          };
           results.push(entry);
           dirResults.push(entry);
         }
@@ -712,7 +768,7 @@ function findTimestamp(obj) {
     if (typeof val === "number") return val > 1e12 ? val : val * 1e3;
     if (typeof val === "string") {
       const d = Date.parse(val);
-      if (!isNaN(d)) return d;
+      if (!Number.isNaN(d)) return d;
     }
   }
   return 0;
@@ -744,7 +800,7 @@ function extractDetail(obj) {
   }
   return parts.join(" | ") || "";
 }
-function tryLoadTrace(fp, raw) {
+function tryLoadTrace(_fp, raw) {
   if (typeof raw !== "object" || raw === null) return null;
   const obj = raw;
   if (!("nodes" in obj)) return null;
@@ -995,13 +1051,14 @@ function writeLine(lines, text) {
 }
 function flushLines(lines) {
   process.stdout.write("\x1B[H");
-  process.stdout.write(lines.join("\n") + "\n");
+  process.stdout.write(`${lines.join("\n")}
+`);
   process.stdout.write("\x1B[J");
 }
 var prevFileCount = 0;
 var newExecCount = 0;
 var sessionStart = Date.now();
-var firstRender = true;
+var liveRunning = false;
 var cachedAuditConfig = null;
 var cachedAuditResult = null;
 var lastAuditTime = 0;
@@ -1089,7 +1146,7 @@ function render(config) {
       const status = fail > 0 ? "error" : running > 0 ? "running" : ok > 0 ? "ok" : "unknown";
       groups.push({
         name: groupName,
-        source: records[0].source,
+        source: records[0]?.source ?? "trace",
         status,
         lastTs,
         detail: `${records.length} agents`,
@@ -1135,8 +1192,10 @@ function render(config) {
         cachedAuditResult = auditResult;
         lastAuditTime = now;
       } catch (err) {
-        process.stderr.write(`[agentflow] process audit error: ${err instanceof Error ? err.message : err}
-`);
+        process.stderr.write(
+          `[agentflow] process audit error: ${err instanceof Error ? err.message : err}
+`
+        );
       }
     }
   } else {
@@ -1193,14 +1252,10 @@ function render(config) {
     return new Date(ts).toLocaleTimeString();
   }
   function truncate(s, max) {
-    return s.length > max ? s.slice(0, max - 1) + "\u2026" : s;
+    return s.length > max ? `${s.slice(0, max - 1)}\u2026` : s;
   }
   const termWidth = process.stdout.columns || 120;
   const detailWidth = Math.max(20, termWidth - 60);
-  if (firstRender) {
-    process.stdout.write("\x1B[2J");
-    firstRender = false;
-  }
   const L = [];
   writeLine(L, `${C.bold}${C.cyan}\u2554${"\u2550".repeat(70)}\u2557${C.reset}`);
   writeLine(
@@ -1238,7 +1293,8 @@ function render(config) {
     if (ar.systemd) {
       const si = ar.systemd.activeState === "active" ? `${C.green}\u25CF${C.reset}` : ar.systemd.crashLooping ? `${C.yellow}\u25CF${C.reset}` : ar.systemd.failed ? `${C.red}\u25CF${C.reset}` : `${C.dim}\u25CB${C.reset}`;
       sysdLabel = `  ${C.bold}Systemd${C.reset} ${si} ${ar.systemd.activeState}`;
-      if (ar.systemd.restarts > 0) sysdLabel += ` ${C.dim}(${ar.systemd.restarts} restarts)${C.reset}`;
+      if (ar.systemd.restarts > 0)
+        sysdLabel += ` ${C.dim}(${ar.systemd.restarts} restarts)${C.reset}`;
     }
     let pidLabel = "";
     if (ar.pidFile?.pid) {
@@ -1247,7 +1303,10 @@ function render(config) {
     }
     writeLine(L, "");
     writeLine(L, `  ${C.bold}${C.under}Process Health${C.reset}`);
-    writeLine(L, `  ${healthIcon} ${healthLabel}${pidLabel}${sysdLabel}    ${C.bold}Procs${C.reset} ${C.dim}${ar.osProcesses.length}${C.reset}    ${ar.orphans.length > 0 ? `${C.red}Orphans ${ar.orphans.length}${C.reset}` : `${C.dim}Orphans 0${C.reset}`}`);
+    writeLine(
+      L,
+      `  ${healthIcon} ${healthLabel}${pidLabel}${sysdLabel}    ${C.bold}Procs${C.reset} ${C.dim}${ar.osProcesses.length}${C.reset}    ${ar.orphans.length > 0 ? `${C.red}Orphans ${ar.orphans.length}${C.reset}` : `${C.dim}Orphans 0${C.reset}`}`
+    );
     if (workerParts.length > 0) {
       writeLine(L, `  ${C.dim}Workers${C.reset}  ${workerParts.join("  ")}`);
     }
@@ -1259,7 +1318,10 @@ function render(config) {
     if (ar.orphans.length > 0) {
       for (const o of ar.orphans.slice(0, 5)) {
         const cmd = (o.cmdline || o.command).substring(0, detailWidth);
-        writeLine(L, `    ${C.red}?${C.reset} ${C.dim}pid=${o.pid} cpu=${o.cpu} mem=${o.mem} up=${o.elapsed}${C.reset}  ${C.dim}${cmd}${C.reset}`);
+        writeLine(
+          L,
+          `    ${C.red}?${C.reset} ${C.dim}pid=${o.pid} cpu=${o.cpu} mem=${o.mem} up=${o.elapsed}${C.reset}  ${C.dim}${cmd}${C.reset}`
+        );
       }
       if (ar.orphans.length > 5) {
         writeLine(L, `    ${C.dim}... +${ar.orphans.length - 5} more orphans${C.reset}`);
@@ -1333,7 +1395,7 @@ function render(config) {
       for (let i = 0; i < Math.min(tree.length, 6); i++) {
         const tg = tree[i];
         const depth = getDistDepth(dt, tg.spanId);
-        const indent = "     " + "\u2502  ".repeat(Math.max(0, depth - 1));
+        const indent = `     ${"\u2502  ".repeat(Math.max(0, depth - 1))}`;
         const isLast = i === tree.length - 1 || getDistDepth(dt, tree[i + 1]?.spanId) <= depth;
         const conn = depth === 0 ? "  " : isLast ? "\u2514\u2500 " : "\u251C\u2500 ";
         const gs = tg.status === "completed" ? `${C.green}\u2713${C.reset}` : tg.status === "failed" ? `${C.red}\u2717${C.reset}` : `${C.yellow}\u23F3${C.reset}`;
@@ -1354,7 +1416,7 @@ function render(config) {
       const t = new Date(r.lastActive).toLocaleTimeString();
       const agent = truncate(r.id, 26).padEnd(26);
       const age = Math.floor((Date.now() - r.lastActive) / 1e3);
-      const ageStr = age < 60 ? age + "s ago" : age < 3600 ? Math.floor(age / 60) + "m ago" : Math.floor(age / 3600) + "h ago";
+      const ageStr = age < 60 ? `${age}s ago` : age < 3600 ? `${Math.floor(age / 60)}m ago` : `${Math.floor(age / 3600)}h ago`;
       const det = truncate(r.detail, detailWidth);
       writeLine(
         L,
@@ -1395,6 +1457,9 @@ function startLive(argv) {
     console.warn(`Skipping non-existent: ${invalid.join(", ")}`);
   }
   config.dirs = valid;
+  process.stdout.write("\x1B[?1049h");
+  process.stdout.write("\x1B[?25l");
+  liveRunning = true;
   render(config);
   let debounce = null;
   for (const dir of config.dirs) {
@@ -1407,8 +1472,20 @@ function startLive(argv) {
     }
   }
   setInterval(() => render(config), config.refreshMs);
+  const cleanup = () => {
+    if (liveRunning) {
+      liveRunning = false;
+      process.stdout.write("\x1B[?25h");
+      process.stdout.write("\x1B[?1049l");
+    }
+  };
   process.on("SIGINT", () => {
-    console.log("\n" + C.dim + "Monitor stopped." + C.reset);
+    cleanup();
+    console.log(`${C.dim}Monitor stopped.${C.reset}`);
+    process.exit(0);
+  });
+  process.on("SIGTERM", () => {
+    cleanup();
     process.exit(0);
   });
 }
@@ -1419,7 +1496,7 @@ var import_node_fs3 = require("fs");
 var import_node_path3 = require("path");
 
 // src/graph-builder.ts
-var import_crypto = require("crypto");
+var import_node_crypto = require("crypto");
 function deepFreeze(obj) {
   if (obj === null || typeof obj !== "object") return obj;
   if (obj instanceof Map) {
@@ -1450,8 +1527,8 @@ function createGraphBuilder(config) {
   const generateId = config?.idGenerator ?? createCounterIdGenerator();
   const agentId = config?.agentId ?? "unknown";
   const trigger = config?.trigger ?? "manual";
-  const spanId = (0, import_crypto.randomUUID)();
-  const traceId = config?.traceId ?? (typeof process !== "undefined" ? process.env?.AGENTFLOW_TRACE_ID : void 0) ?? (0, import_crypto.randomUUID)();
+  const spanId = (0, import_node_crypto.randomUUID)();
+  const traceId = config?.traceId ?? (typeof process !== "undefined" ? process.env?.AGENTFLOW_TRACE_ID : void 0) ?? (0, import_node_crypto.randomUUID)();
   const parentSpanId = config?.parentSpanId ?? (typeof process !== "undefined" ? process.env?.AGENTFLOW_PARENT_SPAN_ID : void 0) ?? null;
   const graphId = generateId();
   const startTime = Date.now();
@@ -1671,7 +1748,7 @@ function agentIdFromFilename(filePath) {
   const cleaned = base.replace(/-state$/, "");
   return `alfred-${cleaned}`;
 }
-function deriveAgentId(command) {
+function deriveAgentId(_command) {
   return "orchestrator";
 }
 function fileTimestamp() {
@@ -1781,14 +1858,18 @@ async function runTraced(config) {
     const filename = `${graph.agentId}-${ts}.json`;
     const outPath = (0, import_node_path3.join)(resolvedTracesDir, filename);
     const resolvedOut = (0, import_node_path3.resolve)(outPath);
-    if (!resolvedOut.startsWith(resolvedTracesDir + "/") && resolvedOut !== resolvedTracesDir) {
-      throw new Error(`Path traversal detected: agentId "${graph.agentId}" escapes traces directory`);
+    if (!resolvedOut.startsWith(`${resolvedTracesDir}/`) && resolvedOut !== resolvedTracesDir) {
+      throw new Error(
+        `Path traversal detected: agentId "${graph.agentId}" escapes traces directory`
+      );
     }
     (0, import_node_fs3.writeFileSync)(outPath, JSON.stringify(graphToJson(graph), null, 2), "utf-8");
     tracePaths.push(outPath);
   }
   if (tracePaths.length > 0) {
-    console.log(`\u{1F50D} Run "agentflow trace show ${orchestratorGraph.id} --traces-dir ${resolvedTracesDir}" to inspect`);
+    console.log(
+      `\u{1F50D} Run "agentflow trace show ${orchestratorGraph.id} --traces-dir ${resolvedTracesDir}" to inspect`
+    );
   }
   return {
     exitCode,
@@ -1801,11 +1882,11 @@ async function runTraced(config) {
 }
 
 // src/trace-cli.ts
-var import_path2 = require("path");
+var import_node_path5 = require("path");
 
 // src/trace-store.ts
 var import_promises = require("fs/promises");
-var import_path = require("path");
+var import_node_path4 = require("path");
 init_loader();
 function createTraceStore(dir) {
   async function ensureDir() {
@@ -1823,7 +1904,7 @@ function createTraceStore(dir) {
     for (const file of files) {
       if (!file.endsWith(".json")) continue;
       try {
-        const content = await (0, import_promises.readFile)((0, import_path.join)(dir, file), "utf-8");
+        const content = await (0, import_promises.readFile)((0, import_node_path4.join)(dir, file), "utf-8");
         const graph = loadGraph(content);
         graphs.push(graph);
       } catch {
@@ -1835,10 +1916,10 @@ function createTraceStore(dir) {
     async save(graph) {
       await ensureDir();
       const json = graphToJson(graph);
-      const filePath = (0, import_path.join)(dir, `${graph.id}.json`);
-      const resolvedBase = (0, import_path.resolve)(dir);
-      const resolvedPath = (0, import_path.resolve)(filePath);
-      if (!resolvedPath.startsWith(resolvedBase + "/") && resolvedPath !== resolvedBase) {
+      const filePath = (0, import_node_path4.join)(dir, `${graph.id}.json`);
+      const resolvedBase = (0, import_node_path4.resolve)(dir);
+      const resolvedPath = (0, import_node_path4.resolve)(filePath);
+      if (!resolvedPath.startsWith(`${resolvedBase}/`) && resolvedPath !== resolvedBase) {
         throw new Error(`Path traversal detected: "${graph.id}" escapes base directory`);
       }
       await (0, import_promises.writeFile)(filePath, JSON.stringify(json, null, 2), "utf-8");
@@ -1846,7 +1927,7 @@ function createTraceStore(dir) {
     },
     async get(graphId) {
       await ensureDir();
-      const filePath = (0, import_path.join)(dir, `${graphId}.json`);
+      const filePath = (0, import_node_path4.join)(dir, `${graphId}.json`);
       try {
         const content = await (0, import_promises.readFile)(filePath, "utf-8");
         return loadGraph(content);
@@ -1968,7 +2049,8 @@ function toAsciiTree(graph) {
     const children = getChildren(graph, nodeId);
     const childPrefix = isRoot ? "" : prefix + (isLast ? "   " : "\u2502  ");
     for (let i = 0; i < children.length; i++) {
-      renderNode(children[i].id, childPrefix, i === children.length - 1, false);
+      const childId = children[i]?.id;
+      if (childId) renderNode(childId, childPrefix, i === children.length - 1, false);
     }
   }
   renderNode(graph.rootNodeId, "", true, true);
@@ -2042,9 +2124,9 @@ function toTimeline(graph) {
 function getTracesDir(argv) {
   const idx = argv.indexOf("--traces-dir");
   if (idx !== -1 && argv[idx + 1]) {
-    return (0, import_path2.resolve)(argv[idx + 1]);
+    return (0, import_node_path5.resolve)(argv[idx + 1]);
   }
-  return (0, import_path2.resolve)("./traces");
+  return (0, import_node_path5.resolve)("./traces");
 }
 function getFlag(argv, name) {
   const idx = argv.indexOf(name);
@@ -2230,7 +2312,7 @@ async function handleTrace(argv) {
 // src/watch.ts
 var import_node_fs5 = require("fs");
 var import_node_os = require("os");
-var import_node_path4 = require("path");
+var import_node_path6 = require("path");
 
 // src/watch-alerts.ts
 var import_node_child_process3 = require("child_process");
@@ -2356,10 +2438,10 @@ function parseDuration(input) {
   const match = input.match(/^(\d+(?:\.\d+)?)\s*(s|m|h|d)$/i);
   if (!match) {
     const n = parseInt(input, 10);
-    return isNaN(n) ? 0 : n * 1e3;
+    return Number.isNaN(n) ? 0 : n * 1e3;
   }
   const value = parseFloat(match[1]);
-  switch (match[2].toLowerCase()) {
+  switch (match[2]?.toLowerCase()) {
     case "s":
       return value * 1e3;
     case "m":
@@ -2386,7 +2468,7 @@ function loadWatchState(filePath) {
   }
 }
 function saveWatchState(filePath, state) {
-  const tmp = filePath + ".tmp";
+  const tmp = `${filePath}.tmp`;
   try {
     (0, import_node_fs4.writeFileSync)(tmp, JSON.stringify(state, null, 2), "utf8");
     (0, import_node_fs4.renameSync)(tmp, filePath);
@@ -2587,8 +2669,8 @@ function parseWatchArgs(argv) {
       i++;
       const val = args[i] ?? "";
       if (val === "telegram") {
-        const botToken = process.env["AGENTFLOW_TELEGRAM_BOT_TOKEN"] ?? "";
-        const chatId = process.env["AGENTFLOW_TELEGRAM_CHAT_ID"] ?? "";
+        const botToken = process.env.AGENTFLOW_TELEGRAM_BOT_TOKEN ?? "";
+        const chatId = process.env.AGENTFLOW_TELEGRAM_CHAT_ID ?? "";
         if (botToken && chatId) {
           notifyChannels.push({ type: "telegram", botToken, chatId });
         } else {
@@ -2605,7 +2687,7 @@ function parseWatchArgs(argv) {
     } else if (arg === "--poll") {
       i++;
       const v = parseInt(args[i] ?? "", 10);
-      if (!isNaN(v) && v > 0) pollIntervalMs = v * 1e3;
+      if (!Number.isNaN(v) && v > 0) pollIntervalMs = v * 1e3;
       i++;
     } else if (arg === "--cooldown") {
       i++;
@@ -2620,20 +2702,20 @@ function parseWatchArgs(argv) {
       recursive = true;
       i++;
     } else if (!arg.startsWith("-")) {
-      dirs.push((0, import_node_path4.resolve)(arg));
+      dirs.push((0, import_node_path6.resolve)(arg));
       i++;
     } else {
       i++;
     }
   }
-  if (dirs.length === 0) dirs.push((0, import_node_path4.resolve)("."));
+  if (dirs.length === 0) dirs.push((0, import_node_path6.resolve)("."));
   if (alertConditions.length === 0) {
     alertConditions.push({ type: "error" });
     alertConditions.push({ type: "recovery" });
   }
   notifyChannels.unshift({ type: "stdout" });
   if (!stateFilePath) {
-    stateFilePath = (0, import_node_path4.join)(dirs[0], ".agentflow-watch-state.json");
+    stateFilePath = (0, import_node_path6.join)(dirs[0], ".agentflow-watch-state.json");
   }
   return {
     dirs,
@@ -2641,7 +2723,7 @@ function parseWatchArgs(argv) {
     pollIntervalMs,
     alertConditions,
     notifyChannels,
-    stateFilePath: (0, import_node_path4.resolve)(stateFilePath),
+    stateFilePath: (0, import_node_path6.resolve)(stateFilePath),
     cooldownMs
   };
 }
@@ -2721,7 +2803,7 @@ agentflow watch started`);
   console.log(`  Poll:         ${config.pollIntervalMs / 1e3}s`);
   console.log(`  Alert on:     ${condLabels.join(", ")}`);
   console.log(
-    `  Notify:       stdout${channelLabels.length > 0 ? ", " + channelLabels.join(", ") : ""}`
+    `  Notify:       stdout${channelLabels.length > 0 ? `, ${channelLabels.join(", ")}` : ""}`
   );
   console.log(`  Cooldown:     ${Math.floor(config.cooldownMs / 6e4)}m`);
   console.log(`  State:        ${config.stateFilePath}`);
@@ -2925,11 +3007,11 @@ async function runCommand(argv) {
     if (result.tracePaths.length > 0) {
       console.log("\u{1F4DD} Traces saved:");
       const orchPath = result.tracePaths[0];
-      const orchName = (0, import_path3.basename)(orchPath, ".json").split("-")[0] ?? "orchestrator";
+      const orchName = (0, import_node_path7.basename)(orchPath, ".json").split("-")[0] ?? "orchestrator";
       console.log(`   ${orchName.padEnd(14)} \u2192 ${orchPath}`);
       for (let i = 1; i < result.tracePaths.length; i++) {
         const tPath = result.tracePaths[i];
-        const name = (0, import_path3.basename)(tPath, ".json").replace(/-\d{4}-.*$/, "");
+        const name = (0, import_node_path7.basename)(tPath, ".json").replace(/-\d{4}-.*$/, "");
         const isLast = i === result.tracePaths.length - 1;
         const prefix = isLast ? "\u2514\u2500" : "\u251C\u2500";
         console.log(`   ${prefix} ${name.padEnd(12)} \u2192 ${tPath} (state changed)`);
@@ -2978,7 +3060,7 @@ function parseAuditArgs(argv) {
       systemdUnit = null;
       i++;
     } else if (!arg.startsWith("-")) {
-      discoverDirs.push((0, import_path3.resolve)(arg));
+      discoverDirs.push((0, import_node_path7.resolve)(arg));
       i++;
     } else {
       i++;
@@ -2987,12 +3069,16 @@ function parseAuditArgs(argv) {
   if (!processName && !pidFile && !workersFile && discoverDirs.length > 0) {
     const discovered = discoverProcessConfig(discoverDirs);
     if (discovered) {
-      console.log(`Auto-discovered: process="${discovered.processName}"${discovered.pidFile ? ` pid-file=${discovered.pidFile}` : ""}${discovered.workersFile ? ` workers=${discovered.workersFile}` : ""}`);
+      console.log(
+        `Auto-discovered: process="${discovered.processName}"${discovered.pidFile ? ` pid-file=${discovered.pidFile}` : ""}${discovered.workersFile ? ` workers=${discovered.workersFile}` : ""}`
+      );
       return { ...discovered, systemdUnit };
     }
   }
   if (!processName) {
-    console.error("Error: --process <name> is required, or provide directories for auto-discovery.");
+    console.error(
+      "Error: --process <name> is required, or provide directories for auto-discovery."
+    );
     console.error("Examples:");
     console.error("  agentflow audit --process alfred --pid-file ./data/alfred.pid");
     console.error("  agentflow audit ./data    # auto-discovers *.pid and workers.json");

package/dist/cli.js

@@ -9,7 +9,7 @@ import {
   startWatch,
   toAsciiTree,
   toTimeline
-} from "./chunk-R5SNE2HB.js";
+} from "./chunk-6X5HU5LB.js";
 import "./chunk-DY7YHFIB.js";
 
 // src/cli.ts
@@ -414,12 +414,16 @@ function parseAuditArgs(argv) {
   if (!processName && !pidFile && !workersFile && discoverDirs.length > 0) {
     const discovered = discoverProcessConfig(discoverDirs);
     if (discovered) {
-      console.log(`Auto-discovered: process="${discovered.processName}"${discovered.pidFile ? ` pid-file=${discovered.pidFile}` : ""}${discovered.workersFile ? ` workers=${discovered.workersFile}` : ""}`);
+      console.log(
+        `Auto-discovered: process="${discovered.processName}"${discovered.pidFile ? ` pid-file=${discovered.pidFile}` : ""}${discovered.workersFile ? ` workers=${discovered.workersFile}` : ""}`
+      );
       return { ...discovered, systemdUnit };
     }
   }
   if (!processName) {
-    console.error("Error: --process <name> is required, or provide directories for auto-discovery.");
+    console.error(
+      "Error: --process <name> is required, or provide directories for auto-discovery."
+    );
     console.error("Examples:");
     console.error("  agentflow audit --process alfred --pid-file ./data/alfred.pid");
     console.error("  agentflow audit ./data    # auto-discovers *.pid and workers.json");