baselineos 0.2.0-beta.1

package/package.json

@@ -0,0 +1,157 @@
+{
+  "name": "baselineos",
+  "version": "0.2.0-beta.1",
+  "description": "Agentic Governance Engine — Autonomous AI task execution with self-supervision",
+  "keywords": [
+    "ai",
+    "agents",
+    "autonomous",
+    "governance",
+    "orchestration",
+    "mcp",
+    "rag",
+    "llm"
+  ],
+  "homepage": "https://baselineos.dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/baselineos/baselineos.git"
+  },
+  "license": "Apache-2.0",
+  "author": "BaselineOS <hello@baselineos.dev>",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "baseline": "./dist/cli/bin.js"
+  },
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./orchestrator": {
+      "import": "./dist/core/orchestrator.js",
+      "types": "./dist/core/orchestrator.d.ts"
+    },
+    "./memory": {
+      "import": "./dist/core/memory.js",
+      "types": "./dist/core/memory.d.ts"
+    },
+    "./cache": {
+      "import": "./dist/core/cache.js",
+      "types": "./dist/core/cache.d.ts"
+    },
+    "./indexer": {
+      "import": "./dist/core/indexer.js",
+      "types": "./dist/core/indexer.d.ts"
+    },
+    "./mcp": {
+      "import": "./dist/mcp/server.js",
+      "types": "./dist/mcp/server.d.ts"
+    },
+    "./engine": {
+      "import": "./dist/core/execution-engine.js",
+      "types": "./dist/core/execution-engine.d.ts"
+    },
+    "./rag": {
+      "import": "./dist/core/rag-engine.js",
+      "types": "./dist/core/rag-engine.d.ts"
+    },
+    "./bus": {
+      "import": "./dist/core/agent-bus.js",
+      "types": "./dist/core/agent-bus.d.ts"
+    },
+    "./opa": {
+      "import": "./dist/core/opa-policy-gate.js",
+      "types": "./dist/core/opa-policy-gate.d.ts"
+    },
+    "./telemetry": {
+      "import": "./dist/core/telemetry.js",
+      "types": "./dist/core/telemetry.d.ts"
+    },
+    "./pii": {
+      "import": "./dist/core/pii-detector.js",
+      "types": "./dist/core/pii-detector.d.ts"
+    },
+    "./llm-tracer": {
+      "import": "./dist/core/llm-tracer.js",
+      "types": "./dist/core/llm-tracer.d.ts"
+    },
+    "./queue": {
+      "import": "./dist/core/task-queue.js",
+      "types": "./dist/core/task-queue.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "templates",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.30.0",
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.213.0",
+    "@opentelemetry/instrumentation-express": "^0.61.0",
+    "@opentelemetry/instrumentation-http": "^0.213.0",
+    "@opentelemetry/resources": "^2.6.0",
+    "@opentelemetry/sdk-node": "^0.213.0",
+    "@opentelemetry/semantic-conventions": "^1.40.0",
+    "@temporalio/activity": "^1.15.0",
+    "@temporalio/client": "^1.15.0",
+    "@temporalio/worker": "^1.15.0",
+    "@temporalio/workflow": "^1.15.0",
+    "better-sqlite3": "^11.0.0",
+    "bullmq": "^5.71.1",
+    "chalk": "^5.3.0",
+    "chromadb": "^3.4.0",
+    "commander": "^12.0.0",
+    "cosmiconfig": "^9.0.0",
+    "eventemitter3": "^5.0.0",
+    "express": "^4.18.0",
+    "glob": "^10.0.0",
+    "gray-matter": "^4.0.3",
+    "inquirer": "^9.0.0",
+    "langfuse": "^3.38.6",
+    "lru-cache": "^10.0.0",
+    "minisearch": "^7.2.0",
+    "ora": "^8.0.0",
+    "ws": "^8.16.0",
+    "zod": "^3.23.0",
+    "@baselineos/autonomy": "0.1.0",
+    "@baselineos/experience": "0.1.0",
+    "@baselineos/frame": "0.1.0",
+    "@baselineos/govern": "1.0.0",
+    "@baselineos/lang": "0.1.0",
+    "@baselineos/persona": "0.1.0",
+    "@baselineos/protocol-core": "1.0.0",
+    "@baselineos/studio": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.0",
+    "@types/express": "^4.17.0",
+    "@types/inquirer": "^9.0.0",
+    "@types/node": "^22.0.0",
+    "@types/ws": "^8.5.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist",
+    "eval": "node --experimental-vm-modules dist/__evals__/runner.js"
+  }
+}

package/templates/README.md

@@ -0,0 +1,7 @@
+# BaselineOS Templates
+
+Template assets used by the `baselineos` package (config/bootstrap scaffolds).
+
+## Contract
+- Templates are product-facing defaults.
+- Keep placeholders explicit and documented in package docs.

package/templates/baseline.config.ts

@@ -0,0 +1,207 @@
+/**
+ * BaselineOS Configuration Template
+ * 
+ * This file is generated by `baseline init`.
+ * Edit it to customize your BaselineOS setup.
+ */
+
+import type { BaselineConfig } from 'baselineos';
+
+const config: BaselineConfig = {
+  /**
+   * Project name (optional, used for display)
+   */
+  name: 'my-project',
+
+  /**
+   * Paths to index for knowledge retrieval.
+   * BaselineOS indexes markdown, code, and config files from these paths.
+   */
+  knowledge: [
+    './docs',
+    './specs',
+    './knowledge',
+  ],
+
+  /**
+   * Orchestrator configuration.
+   * Controls autonomous task execution behavior.
+   */
+  orchestrator: {
+    /**
+     * Tasks above this complexity require human approval.
+     * Options: 'trivial' | 'simple' | 'moderate' | 'complex' | 'epic'
+     * 
+     * - trivial: Quick fixes, typos
+     * - simple: Single-file changes
+     * - moderate: Multi-file, single feature
+     * - complex: Multi-feature, architectural
+     * - epic: Major initiatives (always requires human)
+     */
+    maxAutonomousComplexity: 'complex',
+
+    /**
+     * Require self-verification at every step.
+     * Agent verifies its own work before proceeding.
+     */
+    selfVerificationRequired: true,
+
+    /**
+     * Confidence threshold below which supervisor review is triggered.
+     * 0.7 = Review if less than 70% confident.
+     */
+    supervisorReviewThreshold: 0.7,
+
+    /**
+     * Percentage of tasks to send through quality review (spot-check).
+     * 0.1 = 10% of tasks randomly selected for quality audit.
+     */
+    qualityReviewSampleRate: 0.1,
+
+    /**
+     * Default trust score for new agents (0-100).
+     */
+    defaultTrustScore: 70,
+
+    /**
+     * Maximum retry attempts per task before escalating.
+     */
+    defaultMaxAttempts: 3,
+  },
+
+  /**
+   * LLM configuration.
+   */
+  llm: {
+    provider: 'anthropic',
+    model: 'claude-sonnet-4-20250514',
+    // apiKey: process.env.ANTHROPIC_API_KEY,
+    maxTokens: 8000,
+  },
+
+  /**
+   * Cache configuration.
+   */
+  cache: {
+    ttl: 86400000, // 24 hours
+    maxSize: 10000,
+    similarityThreshold: 0.85,
+  },
+
+  /**
+   * RAG configuration (optional).
+   * Controls hybrid retrieval (BM25 + ChromaDB vector search).
+   */
+  rag: {
+    /** ChromaDB host — start with: docker compose -f docker/docker-compose.chromadb.yml up -d */
+    chromaHost: 'localhost',
+    chromaPort: 8000,
+    /** OpenAI API key for embeddings — omit to use BM25-only mode */
+    // openaiApiKey: process.env.OPENAI_API_KEY,
+    chunkSize: 1500,
+    chunkOverlap: 200,
+    maxChunksPerCollection: 1000,
+
+    /** ABAC role profiles — different roles see different RAG results */
+    roles: {
+      developer: {
+        collections: ['codebase', 'protocols', 'decisions', 'domain'],
+        sensitivity: 'internal',
+        repos: [],
+        scopes: ['engineering'],
+      },
+      'compliance-officer': {
+        collections: ['compliance', 'protocols', 'decisions', 'domain'],
+        sensitivity: 'restricted',
+        repos: [],
+        scopes: ['compliance', 'audit'],
+      },
+      public: {
+        collections: ['domain', 'protocols'],
+        sensitivity: 'public',
+        repos: [],
+        scopes: [],
+      },
+    },
+  },
+
+  /**
+   * Custom agents (optional).
+   * Add domain-specific executor agents with specialized capabilities.
+   */
+  agents: [
+    // Example: Backend specialist
+    // {
+    //   id: 'backend-expert',
+    //   name: 'Backend Developer',
+    //   role: 'executor',
+    //   capabilities: ['typescript', 'nodejs', 'postgresql', 'redis'],
+    //   domains: ['api', 'database', 'backend'],
+    // },
+    
+    // Example: Frontend specialist
+    // {
+    //   id: 'frontend-expert',
+    //   name: 'Frontend Developer',
+    //   role: 'executor',
+    //   capabilities: ['react', 'typescript', 'css', 'accessibility'],
+    //   domains: ['ui', 'frontend', 'components'],
+    // },
+  ],
+
+  /**
+   * Governance rules (optional).
+   * Control what actions require approval and what resources are restricted.
+   */
+  governance: {
+    /**
+     * Actions that always require human approval.
+     * Examples: 'deploy', 'delete-database', 'modify-permissions'
+     */
+    requireApproval: [],
+
+    /**
+     * Resources that agents cannot access.
+     * Examples: 'production-database', 'billing-api'
+     */
+    restricted: [],
+
+    /**
+     * Audit level: 'none' | 'basic' | 'full'
+     * - none: No audit logging
+     * - basic: Log task starts/completions
+     * - full: Log all agent actions
+     */
+    auditLevel: 'basic',
+
+    /**
+     * Governance pillar validators.
+     * Each pillar can be independently enabled and configured.
+     * All 7 pillars are enabled by default.
+     */
+    validators: {
+      /** Policy enforcement — evaluate and enforce governance policies at execution time */
+      policy: { enabled: true, enforcement: 'warn' },
+
+      /** Risk assessment — evaluate complexity/impact before task execution */
+      risk: { enabled: true, blockOnCritical: true },
+
+      /** Compliance checks — validate against regulatory standards */
+      compliance: { enabled: true, standards: ['ISO-27001'] },
+
+      /** Approval workflows — require human sign-off for high-impact actions */
+      approval: { enabled: true, requiredApprovers: [] },
+
+      /** Permission gating — ABAC-based resource access control */
+      permission: { enabled: true },
+
+      /** Cost tracking — monitor and enforce token/resource budgets */
+      cost: { enabled: true },
+
+      /** Evidence production — generate exportable governance bundles */
+      evidence: { enabled: true, autoExport: false, exportPath: '.baseline/evidence' },
+    },
+  },
+};
+
+export default config;