omnius 1.0.341 → 1.0.342

package/dist/index.js

@@ -564747,6 +564747,111 @@ function recommendFanout(breadth) {
     return 3;
   return 1;
 }
+function deriveRegions(rootEntries, packagesEntries, opts = {}) {
+  const max = Math.max(2, opts.max ?? 8);
+  const keep = (e2) => e2.isDir && !e2.name.startsWith(".") && !REGION_IGNORE_RE.test(e2.name);
+  const pkgs = (packagesEntries ?? []).filter(keep).map((e2) => `packages/${e2.name}`);
+  if (pkgs.length >= 2)
+    return pkgs.slice(0, max);
+  const dirs = (rootEntries ?? []).filter(keep).map((e2) => e2.name);
+  return dirs.slice(0, max);
+}
+function buildExplorerPrompt(brief) {
+  return [
+    `You are a READ-ONLY exploration sub-agent. Objective: ${brief.objective}`,
+    `Your region (do NOT read outside it): ${brief.scope}`,
+    "Boundaries:",
+    ...brief.boundaries.map((b) => `- ${b}`),
+    "FIRST run grep_search across your region for keywords from the objective; open only the most promising hits with file_read. Read NARROW — never dump whole files.",
+    "Then call task_complete. In the summary, give one short line per genuinely-relevant file as `path — why it matters`.",
+    "Your summary MUST END with a single line in EXACTLY this format, listing ONLY files that truly match the objective:",
+    "  RELEVANT_FILES: <comma-separated repo-relative paths>",
+    "If your region has NOTHING pertinent, the final line must be exactly: RELEVANT_FILES: none",
+    "Do NOT list files you merely read to rule the region out — only real matches go in RELEVANT_FILES."
+  ].join("\n");
+}
+function extractPathFindings(text2) {
+  const findings = [];
+  const seen = /* @__PURE__ */ new Set();
+  const pathRe = /([A-Za-z0-9_.@/-]+\/[A-Za-z0-9_./-]+\.[A-Za-z]{1,6})(?:\s*[—:\-]+\s*(.*))?/;
+  for (const line of String(text2 || "").split(/\r?\n/)) {
+    const m2 = line.match(pathRe);
+    if (!m2 || !m2[1])
+      continue;
+    const path12 = m2[1].replace(/[)\]}.,;]+$/, "");
+    if (seen.has(path12))
+      continue;
+    seen.add(path12);
+    findings.push({ path: path12, whyRelevant: (m2[2] ?? "").trim().slice(0, 200) });
+  }
+  return findings;
+}
+function parseExplorerDigest(region, rawText) {
+  const text2 = String(rawText || "");
+  const reasonByPath = new Map(extractPathFindings(text2).map((f2) => [f2.path, f2.whyRelevant]));
+  const relMatches = [...text2.matchAll(/RELEVANT_FILES?\s*:\s*(.+)/gi)];
+  if (relMatches.length > 0) {
+    const value2 = (relMatches[relMatches.length - 1][1] ?? "").trim();
+    if (/^(none|n\/a|-|nil|empty)\b/i.test(value2)) {
+      return { region, relevant: false, findings: [], summary: "" };
+    }
+    const paths = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const tok of value2.split(/[,|]/)) {
+      const m2 = tok.match(PATH_LIKE_RE);
+      if (!m2)
+        continue;
+      const p2 = m2[0];
+      if (!seen.has(p2)) {
+        seen.add(p2);
+        paths.push(p2);
+      }
+    }
+    if (paths.length > 0) {
+      return compressFindings({
+        region,
+        relevant: true,
+        findings: paths.map((p2) => ({ path: p2, whyRelevant: reasonByPath.get(p2) ?? "" })),
+        summary: ""
+      });
+    }
+    return { region, relevant: false, findings: [], summary: "" };
+  }
+  const jsonMatch = text2.match(/\{[\s\S]*\}/);
+  if (jsonMatch) {
+    try {
+      const obj = JSON.parse(jsonMatch[0]);
+      if (obj && typeof obj === "object") {
+        const explicitlyIrrelevant = obj["relevant"] === false;
+        const rawFindings = Array.isArray(obj["findings"]) ? obj["findings"] : [];
+        const findings = rawFindings.map((f2) => {
+          const o2 = f2 ?? {};
+          const why = o2["whyRelevant"] ?? o2["why_relevant"] ?? o2["why"] ?? "";
+          const snip = o2["snippet"];
+          return {
+            path: String(o2["path"] ?? ""),
+            whyRelevant: String(why),
+            ...snip ? { snippet: String(snip) } : {}
+          };
+        }).filter((f2) => f2.path);
+        if (explicitlyIrrelevant || findings.length > 0) {
+          return compressFindings({
+            region,
+            relevant: !explicitlyIrrelevant && findings.length > 0,
+            findings,
+            summary: typeof obj["summary"] === "string" ? obj["summary"] : ""
+          });
+        }
+      }
+    } catch {
+    }
+  }
+  if (NEGATIVE_SIGNAL_RE.test(text2)) {
+    return { region, relevant: false, findings: [], summary: "" };
+  }
+  const scraped = extractPathFindings(text2);
+  return compressFindings({ region, relevant: scraped.length > 0, findings: scraped, summary: "" });
+}
 function buildExplorerBriefs(objectivePrefix, regions) {
   const outputSchema = "Return JSON: { relevant: boolean, findings: [{ path, why_relevant, snippet? }], summary }. Return relevant=false with empty findings if your region has nothing pertinent (do NOT pad).";
   return regions.map((region) => ({
@@ -564792,14 +564897,11 @@ function fanoutDirective(taskText) {
   const n2 = recommendFanout(classifyBreadth(sig));
   if (n2 < 2)
     return null;
-  const schema = buildExplorerBriefs("x", ["x"])[0].outputSchema;
   return [
     "[Exploration strategy — fan out]",
-    `This task is broad, read-heavy discovery. Prefer FANNING OUT over reading serially: split the search surface into ${n2} NON-OVERLAPPING regions (directories/subsystems) and spawn ${n2} parallel READ-ONLY \`sub_agent\` explorers — one per region.`,
-    `Give each explorer: a one-line objective, its single region, and this exact return schema — ${schema}`,
-    "Explorers are READ-ONLY (no edit/write/mutating commands). Each returns a DISTILLED digest (paths + why-relevant + key snippets), and returns relevant=false / empty when its region has nothing pertinent — do NOT pad.",
-    "Then YOU merge the digests: drop the empty regions, dedupe paths, and work from the merged digest — keep your own context small by reasoning over the distilled findings, never raw file dumps.",
-    "Only fan out when the surface genuinely spans multiple regions; for a single-file or narrow change, just do it directly."
+    "This task is broad, read-heavy discovery across multiple components. Do NOT grep the whole repo serially into your own context — that floods you with raw output and is slow.",
+    "Instead make ONE call to `fanout_explore` with a clear `objective` (what you need to find). It splits the codebase into non-overlapping regions, runs parallel READ-ONLY explorer sub-agents that each return a DISTILLED digest, merges them, and hands you back a compact map of relevant paths — keeping your own context small.",
+    "After fanout_explore returns, work from the merged digest: open only the paths it flagged. Fall back to direct grep_search/file_read only for a single-file or narrow follow-up."
   ].join("\n");
 }
 function mergeDigests(digests) {
@@ -564818,11 +564920,14 @@ function mergeDigests(digests) {
   const synthesis = relevant.length ? `${relevant.length} region(s) yielded ${paths.length} relevant path(s); ${emptyRegions.length} region(s) empty.` : `No relevant findings across ${digests.length} region(s).`;
   return { digests: relevant, paths, emptyRegions, synthesis };
 }
-var EXPLORE_INTENT_RE;
+var EXPLORE_INTENT_RE, REGION_IGNORE_RE, PATH_LIKE_RE, NEGATIVE_SIGNAL_RE;
 var init_exploration_fanout = __esm({
   "packages/orchestrator/dist/exploration-fanout.js"() {
     "use strict";
     EXPLORE_INTENT_RE = /\b(explore|discover|find|locate|search|where\b|which file|map (out )?the|survey|audit|trace|understand the|gather|investigate|look (through|across)|grep|scan the (code|repo))\b/i;
+    REGION_IGNORE_RE = /^(node_modules|dist|build|coverage|out|tmp|temp|\.git|\.next|\.turbo|\.cache|\.omnius|\.aiwg|\.vscode|\.idea|target|vendor)$/i;
+    PATH_LIKE_RE = /[A-Za-z0-9_.@/-]+\/[A-Za-z0-9_./-]+\.[A-Za-z]{1,6}/;
+    NEGATIVE_SIGNAL_RE = /findings?\s*:?\s*\**\s*none\b|\bnone\s+found\b|\bno\s+(relevant\s+)?(matches|results|findings|auth\w*|bearer|token)\b|\bnot\s+handled\b|\bnothing\s+(pertinent|relevant|found)\b|no[^.\n]{0,40}\b(was|were)\s+found\b/i;
   }
 });
 
@@ -590482,6 +590587,7 @@ __export(dist_exports3, {
   buildDecompositionDirective: () => buildDecompositionDirective,
   buildDecompositionTodos: () => buildDecompositionTodos,
   buildExplorerBriefs: () => buildExplorerBriefs,
+  buildExplorerPrompt: () => buildExplorerPrompt,
   buildForkPrompt: () => buildForkPrompt,
   buildLessonQuery: () => buildLessonQuery,
   buildMetaCritiquePrompt: () => buildMetaCritiquePrompt,
@@ -590520,6 +590626,7 @@ __export(dist_exports3, {
   decomposeSpec: () => decomposeSpec,
   deleteAgentTaskSidecar: () => deleteAgentTaskSidecar,
   deriveClaimsFromProposedText: () => deriveClaimsFromProposedText,
+  deriveRegions: () => deriveRegions,
   detectExitCodeMisread: () => detectExitCodeMisread,
   detectExplorationIntent: () => detectExplorationIntent,
   detectPressure: () => detectPressure,
@@ -590532,6 +590639,7 @@ __export(dist_exports3, {
   extractConstraint: () => extractConstraint,
   extractLessons: () => extractLessons,
   extractMidTaskSteeringInput: () => extractMidTaskSteeringInput,
+  extractPathFindings: () => extractPathFindings,
   extractTaskCompleteSummary: () => extractTaskCompleteSummary,
   fanoutDirective: () => fanoutDirective,
   findDuplicateGroups: () => findDuplicateGroups,
@@ -590591,6 +590699,7 @@ __export(dist_exports3, {
   noteAfterTask: () => noteAfterTask,
   parseContextReferences: () => parseContextReferences,
   parseCritique: () => parseCritique,
+  parseExplorerDigest: () => parseExplorerDigest,
   parseMetaCritique: () => parseMetaCritique,
   parsePlan: () => parsePlan,
   parseTextToolCalls: () => parseTextToolCalls,
@@ -610902,6 +611011,28 @@ var init_status_bar = __esm({
       _brailleSpinner = new BrailleSpinner();
       /** Slow refresh timer for monitoring bar when braille spinner is off */
       _monitorTimer = null;
+      /**
+       * Header inference indicator — a small braille glyph that cycles next to the
+       * "Omnius v{version}" identity segment (left of the menu buttons) WHENEVER the
+       * agent is inferencing, so the user can see it's working in the background and
+       * not stalled — including during prompt-processing / cold-load before any
+       * tokens stream. Self-driven on its own timer so it animates even when no
+       * tokens are flowing yet.
+       */
+      static HEADER_SPINNER_FRAMES = [
+        "⠋",
+        "⠙",
+        "⠹",
+        "⠸",
+        "⠼",
+        "⠴",
+        "⠦",
+        "⠧",
+        "⠇",
+        "⠏"
+      ];
+      _headerSpinnerFrame = 0;
+      _headerSpinnerTimer = null;
       /** Current dynamic footer height: box top + input rows + box bottom + optional metrics. */
       _currentFooterHeight = 4;
       // box-top(1) + input(1) + box-bottom(1) + metrics(1)
@@ -611006,6 +611137,14 @@ var init_status_bar = __esm({
             last2.width += 2;
           }
         }
+        if (this._processing) {
+          const glyph = _StatusBar.HEADER_SPINNER_FRAMES[this._headerSpinnerFrame] ?? "";
+          const last2 = parts[parts.length - 1];
+          if (last2 && glyph) {
+            last2.text += `${glyph} `;
+            last2.width += 2;
+          }
+        }
         return parts;
       }
       buildHeaderIdentityRender() {
@@ -611517,10 +611656,35 @@ var init_status_bar = __esm({
             clearInterval(this._monitorTimer);
             this._monitorTimer = null;
           }
+          this._startHeaderSpinner();
         } else {
+          this._stopHeaderSpinner();
           this.ensureMonitorTimer();
         }
       }
+      /**
+       * Start cycling the header inference glyph. Ticks on its own ~110 ms timer
+       * and repaints the header panels so the braille frame advances even while the
+       * model is still processing the prompt (no token stream yet). Idempotent.
+       */
+      _startHeaderSpinner() {
+        if (this._headerSpinnerTimer) return;
+        this._headerSpinnerFrame = 0;
+        if (this.active) this.refreshHeaderPanels();
+        this._headerSpinnerTimer = setInterval(() => {
+          this._headerSpinnerFrame = (this._headerSpinnerFrame + 1) % _StatusBar.HEADER_SPINNER_FRAMES.length;
+          if (this.active) this.refreshHeaderPanels();
+        }, 110);
+        this._headerSpinnerTimer.unref?.();
+      }
+      /** Stop the header inference glyph and repaint once so it disappears cleanly. */
+      _stopHeaderSpinner() {
+        if (this._headerSpinnerTimer) {
+          clearInterval(this._headerSpinnerTimer);
+          this._headerSpinnerTimer = null;
+        }
+        if (this.active) this.refreshHeaderPanels();
+      }
       /**
        * Ensure the monitoring timer is running when the registry has entries
        * and the braille spinner is not active. Refreshes the buffer line
@@ -612081,6 +612245,10 @@ var init_status_bar = __esm({
           this._brailleSpinner.stop();
           this._processing = false;
         }
+        if (this._headerSpinnerTimer) {
+          clearInterval(this._headerSpinnerTimer);
+          this._headerSpinnerTimer = null;
+        }
         this.stopAllMetrics();
         this.termWrite(`\x1B[1;${termRows()}r`);
       }
@@ -710212,6 +710380,9 @@ function buildTools(repoRoot, config, contextWindowSize, modelTier2) {
     // MCP tools (dynamic — from connected MCP servers, WO-MCP-01)
     ..._mcpTools.map(adaptTool6),
     createSubAgentTool(config, repoRoot, contextWindowSize),
+    // Active exploration fan-out — one call spawns parallel read-only explorers
+    // and returns a merged digest (Workstream B).
+    createFanoutExploreTool(config, repoRoot, contextWindowSize),
     // Self-critique plan mode (WO-TP2)
     createPlanModeTool(config, repoRoot, contextWindowSize),
     createTaskCompleteTool(modelTier2, repoRoot)
@@ -710478,6 +710649,151 @@ Use task_status(task_id="${taskId}") or task_output(task_id="${taskId}") to chec
   };
   return tool;
 }
+function createFanoutExploreTool(config, repoRoot, ctxWindowSize) {
+  return {
+    name: "fanout_explore",
+    description: "Discover where something lives across a large/multi-package codebase by fanning out parallel READ-ONLY explorer sub-agents — one per region — and returning a single merged, distilled map of the relevant files. Use this ONCE for broad 'where/how is X handled across the codebase' questions instead of grepping the whole repo serially. For a single-file or narrow lookup, use grep_search/file_read directly instead.",
+    parameters: {
+      type: "object",
+      properties: {
+        objective: {
+          type: "string",
+          description: "What to find, e.g. 'where authentication is handled' or 'all places that read the media store path'."
+        },
+        regions: {
+          type: "array",
+          items: { type: "string" },
+          description: "Optional explicit regions (dirs/packages) to split across. If omitted, regions are derived from the repo (packages/* or top-level dirs)."
+        },
+        max_regions: {
+          type: "number",
+          description: "Cap on the number of parallel explorers (default 6)."
+        }
+      },
+      required: ["objective"]
+    },
+    async execute(args) {
+      const objective = String(
+        args["objective"] ?? args["task"] ?? args["query"] ?? ""
+      ).trim();
+      if (!objective) {
+        return { success: false, output: "", error: "objective is required" };
+      }
+      const maxRegions = typeof args["max_regions"] === "number" && args["max_regions"] > 0 ? Math.min(8, Math.floor(args["max_regions"])) : 6;
+      let regions = Array.isArray(args["regions"]) ? args["regions"].map((r2) => String(r2)).filter(Boolean) : [];
+      if (regions.length === 0) {
+        const listDir = (rel) => {
+          try {
+            return readdirSync57(join173(repoRoot, rel), { withFileTypes: true }).map(
+              (d2) => ({ name: d2.name, isDir: d2.isDirectory() })
+            );
+          } catch {
+            return [];
+          }
+        };
+        regions = deriveRegions(listDir("."), listDir("packages"), {
+          max: maxRegions
+        });
+      } else {
+        regions = regions.slice(0, maxRegions);
+      }
+      if (regions.length < 2) {
+        return {
+          success: false,
+          output: "",
+          error: "fanout_explore needs ≥2 regions to be worthwhile; for a narrow search use grep_search/file_read directly."
+        };
+      }
+      const briefs = buildExplorerBriefs(objective, regions);
+      const subTier = getModelTier(config.model);
+      const compaction = subTier === "small" ? 12e3 : subTier === "medium" ? 24e3 : 4e4;
+      const debug = process.env["OMNIUS_FANOUT_DEBUG"] === "1";
+      const rawReturns = [];
+      const digests = await Promise.all(
+        briefs.map(async (brief) => {
+          try {
+            const backend = new OllamaAgenticBackend(
+              config.backendUrl,
+              config.model,
+              config.apiKey
+            );
+            const runner = new AgenticRunner(backend, {
+              maxTurns: 10,
+              maxTokens: 4096,
+              temperature: 0,
+              requestTimeoutMs: config.timeoutMs,
+              taskTimeoutMs: config.timeoutMs * 2,
+              compactionThreshold: compaction,
+              contextWindowSize: ctxWindowSize ?? 0,
+              modelTier: subTier,
+              toolProfile: getRuntimeToolProfilePolicy(repoRoot)
+            });
+            const roTools = [
+              new FileReadTool(repoRoot),
+              new GrepSearchTool(repoRoot),
+              new GlobFindTool(repoRoot),
+              new ListDirectoryTool(repoRoot)
+            ].map(adaptTool6);
+            roTools.push(createTaskCompleteTool(subTier, repoRoot));
+            for (const t2 of roTools) runner.registerTool(t2);
+            const result = await runner.run(
+              buildExplorerPrompt(brief),
+              `Working directory: ${repoRoot}`
+            );
+            const raw = result.summary || "";
+            if (debug) rawReturns.push({ region: brief.scope, raw });
+            return parseExplorerDigest(brief.scope, raw);
+          } catch (err) {
+            if (debug)
+              rawReturns.push({
+                region: brief.scope,
+                raw: `[explorer error] ${err instanceof Error ? err.message : String(err)}`
+              });
+            return { region: brief.scope, relevant: false, findings: [], summary: "" };
+          }
+        })
+      );
+      if (debug) {
+        try {
+          writeFileSync87(
+            join173(repoRoot, ".omnius", "fanout-debug.json"),
+            JSON.stringify({ objective, regions, rawReturns, digests }, null, 2)
+          );
+        } catch {
+        }
+      }
+      const merged = mergeDigests(digests);
+      if (merged.paths.length === 0) {
+        return {
+          success: true,
+          output: `[fanout_explore] ${objective}
+${merged.synthesis}
+Explored regions: ${regions.join(", ")}
+No relevant files found — broaden the objective or search specific paths directly.`
+        };
+      }
+      const lines = [
+        `[fanout_explore] ${objective}`,
+        merged.synthesis,
+        "",
+        "Relevant files (deduped):",
+        ...merged.paths.map((p2) => `  - ${p2}`),
+        "",
+        "By region:"
+      ];
+      for (const d2 of merged.digests) {
+        lines.push(`## ${d2.region}${d2.summary ? ` — ${d2.summary}` : ""}`);
+        for (const f2 of d2.findings) {
+          lines.push(`  - ${f2.path} — ${f2.whyRelevant}`);
+        }
+      }
+      if (merged.emptyRegions.length > 0) {
+        lines.push("", `Empty regions (covered, nothing found): ${merged.emptyRegions.join(", ")}`);
+      }
+      return { success: true, output: lines.join("\n") };
+    }
+  };
+}
 function createPlanModeTool(config, repoRoot, ctxWindowSize) {
   return {
     name: "enter_plan_mode",

package/docs/reference/auth-map.md

@@ -0,0 +1,229 @@
+# Auth Map — Where Authentication/Authorization is Handled Across Omnius
+
+> Auto-generated from codebase scan. Covers all packages and apps.
+
+## Summary
+
+Omnius has **no centralized auth system** (no login, no JWT, no session cookies, no OAuth). Authentication is handled **peripherally** in three ways:
+
+1. **External provider auth** — API keys/tokens for remote inference providers (OpenAI, Anthropic, etc.)
+2. **Secret redaction** — preventing credential leaks in logs/tool output
+3. **Session-scoped permissions** — internal permission rules for sub-agent handoffs
+
+There is **zero auth on the REST daemon** (`apps/api`) — all routes are open.
+
+---
+
+## 1. apps/api (REST Daemon) — NO AUTH
+
+| File | Finding |
+|------|---------|
+| `apps/api/src/app.ts` | Helmet, CORS, compression, morgan. **No auth middleware, no API key check, no bearer validation.** |
+| `apps/api/src/routes/sessions.ts` | In-memory Map-based session store. **No auth on any route** (POST/GET/DELETE all accept unauthenticated requests). |
+| `apps/api/src/routes/health.ts` | Health check — no auth needed. |
+| `apps/api/src/middleware/error-handler.ts` | Error handling only. |
+
+**Verdict:** The REST daemon is completely open. Any caller can create sessions, send messages, list/delete sessions.
+
+---
+
+## 2. apps/worker (Background Worker) — NO AUTH
+
+| File | Finding |
+|------|---------|
+| `apps/worker/src/queue.ts` | Only references `sessionId: string` in queue job types. No auth logic. |
+
+**Verdict:** Worker processes tasks from the queue without auth checks. Trusts the API daemon to route correctly.
+
+---
+
+## 3. packages/cli — Provider Auth + Secret Redaction
+
+### 3a. Provider API Key Configuration
+
+| File | Line | Finding |
+|------|------|---------|
+| `packages/cli/src/config.ts` | 32 | `/** Optional Bearer token for authenticated vLLM deployments */` — config field for vLLM auth |
+| `packages/cli/src/config.ts` | 50 | Tool-calling session opt-in logic (not auth, but session-scoped) |
+
+### 3b. Secret Redaction (preventing credential leaks)
+
+| File | Finding |
+|------|---------|
+| `packages/cli/src/redact/secret-redactor.ts` | Comprehensive regex-based secret redactor. Detects and masks: |
+| | - Known API key prefixes: `sk-`, `sk-or-`, `gsk_`, `fw_`, `cpk_`, `csk-`, `nvapi-`, `xox[baprs]-`, `hf_`, `r8_`, `npm_`, `pypi-`, `gAAAA` |
+| | - Generic patterns: `api_key`, `token`, `secret`, `password`, `access_token`, `refresh_token`, `auth_token`, `bearer` |
+| | - Short tokens (<18 chars) → fully masked (`***`). Longer → partial (`sk-..yKey`) |
+
+### 3c. Session State
+
+| File | Finding |
+|------|---------|
+| `packages/cli/src/state/store.ts` | `closeSession(sessionId, endReason)` — session lifecycle management. Token counting (input/output/cache_read/cache_write/reasoning). No auth. |
+
+---
+
+## 4. packages/backend-vllm — Provider Auth (API Keys)
+
+### 4a. Provider Auth Configuration
+
+| File | Line | Provider | authRequired | keyPrefix |
+|------|------|----------|-------------|-----------|
+| `packages/backend-vllm/src/normalizeUrl.ts` | 81 | Anthropic | true | `sk-ant-` |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 85 | OpenAI | true | `sk-` |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 89 | Together AI | true | — |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 93 | Groq | true | `gsk_` |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 97 | OpenRouter | true | `sk-or-` |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 101 | Fireworks AI | true | `fw_` |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 105 | DeepInfra | true | — |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 109 | Mistral AI | true | — |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 113 | Chutes AI | true | `cpk_` |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 117 | Cerebras | true | `csk-` |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 121 | SambaNova | true | — |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 125 | NVIDIA NIM | true | `nvapi-` |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 129 | Hyperbolic | true | — |
+| `packages/backend-vllm/src/normalizeUrl.ts` | 134 | Ollama (local) | **false** | — |
+
+### 4b. Runtime Auth Headers
+
+| File | Line | Finding |
+|------|------|---------|
+| `packages/backend-vllm/src/VllmBackend.ts` | 217 | `private authHeaders(): Record<string, string>` — builds auth headers for vLLM requests |
+| `packages/backend-vllm/src/VllmBackend.ts` | 237 | Uses `authHeaders()` in fetch calls |
+
+**Verdict:** Provider auth is key-based (Bearer tokens). No OAuth flow. Keys are configured in CLI config and passed as headers.
+
+---
+
+## 5. packages/orchestrator — Session-Scoped Permissions
+
+### 5a. Permission Ruleset (sub-agent authorization)
+
+| File | Finding |
+|------|---------|
+| `packages/orchestrator/src/permissionRuleset.ts` | **The only authorization logic in the codebase.** Implements: |
+| | - Parent session deny rules (cascade to sub-agents) |
+| | - Parent agent deny rules |
+| | - External directory rules forwarded to sub-agent sessions |
+| | - "Forwarding pattern" — parent agent denies + parent session denies + external_directory rules cascade |
+
+### 5b. Session Metrics
+
+| File | Finding |
+|------|---------|
+| `packages/orchestrator/src/sessionMetrics.ts` | Tracks `sessionDurationMs`, token usage, context estimates. No auth. |
+
+### 5c. Adversarial Handoffs (test data only)
+
+| File | Finding |
+|------|---------|
+| `packages/orchestrator/src/adversarialHandoffs.ts` | Contains test scenarios referencing logout/session cleanup (lines 324-369). These are **test fixtures**, not production auth code. |
+
+---
+
+## 6. packages/execution — Session Key Reservation + Secret Detection
+
+### 6a. Model Broker (session key reservation)
+
+| File | Line | Finding |
+|------|------|---------|
+| `packages/execution/src/model-broker.ts` | 205-207 | `sessionKey?: string` — reserved per-chat session key for guaranteed slots |
+| `packages/execution/src/model-broker.ts` | 361-362 | `_reservedBySession: Map<string, string>` — reserved slots per sessionKey |
+| `packages/execution/src/model-broker.ts` | 1271-1277 | Reserved slot path: per-session, one outstanding slot per sessionKey |
+
+### 6b. Secret Detector (MCP)
+
+| File | Finding |
+|------|---------|
+| `packages/execution/src/mcp/secret-detector.ts` | `matchType: "auth-header"` — detects auth header prefixes in strings. Sensitive field name tracking. |
+
+---
+
+## 7. packages/indexer — Auth Domain Classification (metadata only)
+
+| File | Line | Finding |
+|------|------|---------|
+| `packages/indexer/src/fileSummarizer.ts` | 30 | `ownershipArea` field: "Logical ownership area (e.g. 'auth', 'api', 'db', 'frontend')" |
+| `packages/indexer/src/fileSummarizer.ts` | 54 | Path regex: `/\/(auth|authentication|login|session|jwt|oauth|passport)/` → classifies as "auth" domain |
+| `packages/indexer/src/fileSummarizer.ts` | 80 | Domain keyword `/auth/i` in file content |
+| `packages/indexer/src/fileSummarizer.ts` | 119 | `if (domain === "auth") return "high"` — auth domain files get high priority |
+
+**Verdict:** The indexer classifies files as "auth" domain for indexing priority, but this is metadata, not auth enforcement.
+
+---
+
+## 8. packages/memory — Session-Scoped Memory
+
+| File | Finding |
+|------|---------|
+| `packages/memory/src/selfModel.ts` | `DECAY_CLASSES: ["session", "daily", "procedural", "permanent"]` — session-scoped memory decay |
+| `packages/memory/src/toolOutcomes.ts` | `Reset (e.g., on session start before restoring from store)` |
+| `packages/memory/src/predictionStore.ts` | `tokenSimilarity()` — token-based string comparison (not auth tokens) |
+
+---
+
+## 9. packages/schemas — Session Schema
+
+| File | Finding |
+|------|---------|
+| `packages/schemas/src/messages.ts` | `sessionId: z.string().uuid()` — session ID schema |
+| `packages/schemas/src/index.ts` | `export { SessionSchema, type Session }` |
+| `packages/schemas/src/memory.ts` | `ownershipArea` field: "Logical ownership area (e.g. 'auth', 'api', 'db', 'frontend')" |
+
+---
+
+## 10. packages/retrieval — No Auth
+
+| File | Finding |
+|------|---------|
+| `packages/retrieval/src/semanticSearch.ts` | "auth" appears only as an example query term: `Example: "auth middleware +api -test ~service"` |
+| `packages/retrieval/src/snippetPacker.ts` | Token budget logic (not auth tokens) |
+
+---
+
+## 11. packages/prompts — No Auth
+
+No auth-related code found.
+
+---
+
+## Consolidated Auth Architecture
+
+```
+┌─────────────────────────────────────────────────────────────────┐
+│                     AUTH IN OMNIUS                              │
+│                                                                 │
+│  1. PROVIDER AUTH (API Keys)                                   │
+│     ├── CLI config → bearer tokens for remote providers        │
+│     ├── backend-vllm → authHeaders() for vLLM requests         │
+│     ├── 14 remote providers configured (all require API keys)  │
+│     └── Ollama (local) → no auth required                     │
+│                                                                 │
+│  2. SECRET REDACTION                                             │
+│     ├── CLI secret-redactor.ts — regex-based masking           │
+│     ├── MCP secret-detector.ts — auth header detection         │
+│     └── Covers: sk-, gsk_, hf_, npm_, pypi-, etc.            │
+│                                                                 │
+│  3. SESSION-SCOPED PERMISSIONS (internal)                       │
+│     ├── orchestrator/permissionRuleset.ts — deny cascade       │
+│     ├── execution/model-broker.ts — sessionKey slot reservation│
+│     └── memory/selfModel.ts — session-scoped decay             │
+│                                                                 │
+│  4. REST DAEMON — NO AUTH                                       │
+│     ├── apps/api — helmet + cors only                          │
+│     ├── sessionsRouter — in-memory, no auth                    │
+│     └── healthRouter — open                                    │
+│                                                                 │
+│  5. WORKER — NO AUTH                                            │
+│     └── Trusts API daemon for routing                          │
+└─────────────────────────────────────────────────────────────────┘
+```
+
+## Key Gaps
+
+1. **REST daemon has zero authentication** — anyone can create sessions, send messages, and read responses
+2. **No OAuth flows** — all provider auth is static API keys
+3. **No rate limiting** — no rate-limit middleware in the API
+4. **No CSRF protection** — CORS is enabled but no CSRF tokens
+5. **No session validation** — sessions are in-memory Map, no persistence or validation
+6. **No admin/auth endpoints** — no login, logout, or user management

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "omnius",
-  "version": "1.0.341",
+  "version": "1.0.342",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omnius",
-      "version": "1.0.341",
+      "version": "1.0.342",
       "bundleDependencies": [
         "image-to-ascii"
       ],
@@ -430,9 +430,9 @@
       }
     },
     "node_modules/@helia/utils/node_modules/cborg": {
-      "version": "5.1.3",
-      "resolved": "https://registry.npmjs.org/cborg/-/cborg-5.1.3.tgz",
-      "integrity": "sha512-DddFYcafyPlnoF33ezbrh3jXT8QnuTQiy/LEL4xoMVH60WIBQbLwb2npNquSM0WouEMvl5xTJ1Y8iECaMdh3gg==",
+      "version": "5.1.4",
+      "resolved": "https://registry.npmjs.org/cborg/-/cborg-5.1.4.tgz",
+      "integrity": "sha512-EDoD59RBV51H5ar6i29ut7AyOJi0BUIEhtbnJJac3qYcMG74Db6eVce/dIh+Wh6tVwBi7cRWDXmdms+fKPQvcQ==",
       "license": "Apache-2.0",
       "bin": {
         "cborg": "lib/bin.js"
@@ -461,9 +461,9 @@
       }
     },
     "node_modules/@ipld/dag-cbor/node_modules/cborg": {
-      "version": "5.1.3",
-      "resolved": "https://registry.npmjs.org/cborg/-/cborg-5.1.3.tgz",
-      "integrity": "sha512-DddFYcafyPlnoF33ezbrh3jXT8QnuTQiy/LEL4xoMVH60WIBQbLwb2npNquSM0WouEMvl5xTJ1Y8iECaMdh3gg==",
+      "version": "5.1.4",
+      "resolved": "https://registry.npmjs.org/cborg/-/cborg-5.1.4.tgz",
+      "integrity": "sha512-EDoD59RBV51H5ar6i29ut7AyOJi0BUIEhtbnJJac3qYcMG74Db6eVce/dIh+Wh6tVwBi7cRWDXmdms+fKPQvcQ==",
       "license": "Apache-2.0",
       "bin": {
         "cborg": "lib/bin.js"
@@ -480,9 +480,9 @@
       }
     },
     "node_modules/@ipld/dag-json/node_modules/cborg": {
-      "version": "5.1.3",
-      "resolved": "https://registry.npmjs.org/cborg/-/cborg-5.1.3.tgz",
-      "integrity": "sha512-DddFYcafyPlnoF33ezbrh3jXT8QnuTQiy/LEL4xoMVH60WIBQbLwb2npNquSM0WouEMvl5xTJ1Y8iECaMdh3gg==",
+      "version": "5.1.4",
+      "resolved": "https://registry.npmjs.org/cborg/-/cborg-5.1.4.tgz",
+      "integrity": "sha512-EDoD59RBV51H5ar6i29ut7AyOJi0BUIEhtbnJJac3qYcMG74Db6eVce/dIh+Wh6tVwBi7cRWDXmdms+fKPQvcQ==",
       "license": "Apache-2.0",
       "bin": {
         "cborg": "lib/bin.js"
@@ -502,9 +502,9 @@
       }
     },
     "node_modules/@ipld/dag-pb/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/@ipshipyard/libp2p-auto-tls": {
@@ -741,9 +741,9 @@
       }
     },
     "node_modules/@libp2p/http-utils/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/@libp2p/http-utils/node_modules/uint8arraylist": {
@@ -783,9 +783,9 @@
       }
     },
     "node_modules/@libp2p/http-websocket/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/@libp2p/http-websocket/node_modules/uint8arraylist": {
@@ -1021,9 +1021,9 @@
       }
     },
     "node_modules/@libp2p/peer-record/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/@libp2p/peer-record/node_modules/protons-runtime": {
@@ -1131,9 +1131,9 @@
       }
     },
     "node_modules/@libp2p/record/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/@libp2p/record/node_modules/protons-runtime": {
@@ -1368,9 +1368,9 @@
       }
     },
     "node_modules/@libp2p/webrtc/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/@libp2p/webrtc/node_modules/node-datachannel": {
@@ -1495,9 +1495,9 @@
       }
     },
     "node_modules/@multiformats/dns": {
-      "version": "1.0.13",
-      "resolved": "https://registry.npmjs.org/@multiformats/dns/-/dns-1.0.13.tgz",
-      "integrity": "sha512-yr4bxtA3MbvJ+2461kYIYMsiiZj/FIqKI64hE4SdvWJUdWF9EtZLar38juf20Sf5tguXKFUruluswAO6JsjS2w==",
+      "version": "1.0.14",
+      "resolved": "https://registry.npmjs.org/@multiformats/dns/-/dns-1.0.14.tgz",
+      "integrity": "sha512-5h8q+baKBsV4nW7rCREbJBpGNP8Lcn443illiZs5eWNBd+fXCt+mRGGIL7UNF7y8HD8mtciIYKJwCMbJBvsZMA==",
       "license": "Apache-2.0 OR MIT",
       "dependencies": {
         "@dnsquery/dns-packet": "^6.1.1",
@@ -1505,7 +1505,22 @@
         "hashlru": "^2.3.0",
         "p-queue": "^9.0.0",
         "progress-events": "^1.0.0",
-        "uint8arrays": "^5.0.2"
+        "uint8arrays": "^6.1.1"
+      }
+    },
+    "node_modules/@multiformats/dns/node_modules/multiformats": {
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
+      "license": "Apache-2.0 OR MIT"
+    },
+    "node_modules/@multiformats/dns/node_modules/uint8arrays": {
+      "version": "6.1.1",
+      "resolved": "https://registry.npmjs.org/uint8arrays/-/uint8arrays-6.1.1.tgz",
+      "integrity": "sha512-iz7JN0XCSZYA111lhFG2Ui9EhFvTNekqSRHw3lvMHq+dzwWy1OQftxFQREEh4rffU0oSoXdQHsk2TiHKVm4fsA==",
+      "license": "Apache-2.0 OR MIT",
+      "dependencies": {
+        "multiformats": "^14.0.0"
       }
     },
     "node_modules/@multiformats/multiaddr": {
@@ -1539,9 +1554,9 @@
       }
     },
     "node_modules/@multiformats/multiaddr/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/@multiformats/multiaddr/node_modules/uint8-varint": {
@@ -1586,9 +1601,9 @@
       }
     },
     "node_modules/@multiformats/murmur3/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/@multiformats/uri-to-multiaddr": {
@@ -3858,9 +3873,9 @@
       }
     },
     "node_modules/hamt-sharding/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/hamt-sharding/node_modules/uint8arrays": {
@@ -4232,9 +4247,9 @@
       }
     },
     "node_modules/ipns/node_modules/cborg": {
-      "version": "5.1.3",
-      "resolved": "https://registry.npmjs.org/cborg/-/cborg-5.1.3.tgz",
-      "integrity": "sha512-DddFYcafyPlnoF33ezbrh3jXT8QnuTQiy/LEL4xoMVH60WIBQbLwb2npNquSM0WouEMvl5xTJ1Y8iECaMdh3gg==",
+      "version": "5.1.4",
+      "resolved": "https://registry.npmjs.org/cborg/-/cborg-5.1.4.tgz",
+      "integrity": "sha512-EDoD59RBV51H5ar6i29ut7AyOJi0BUIEhtbnJJac3qYcMG74Db6eVce/dIh+Wh6tVwBi7cRWDXmdms+fKPQvcQ==",
       "license": "Apache-2.0",
       "bin": {
         "cborg": "lib/bin.js"
@@ -4624,9 +4639,9 @@
       }
     },
     "node_modules/it-protobuf-stream/node_modules/multiformats": {
-      "version": "14.0.0",
-      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.0.tgz",
-      "integrity": "sha512-iWK1RrAS58p2NDfeZFuSUSv3ZPewTIhsGbh/5NgeGGJwJmRljLxGtjRR3nkn+loG3zl+IrfR/W1590QnrSK+Gg==",
+      "version": "14.0.2",
+      "resolved": "https://registry.npmjs.org/multiformats/-/multiformats-14.0.2.tgz",
+      "integrity": "sha512-sF7F3gBKCyehzIhDwVuTRf79TZ8qWRz5NXwWYBX+4a+n22KcFqqcDYJvZr7tySrI0MhuTBXVOlo3qMTiAHC78g==",
       "license": "Apache-2.0 OR MIT"
     },
     "node_modules/it-protobuf-stream/node_modules/uint8arraylist": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnius",
-  "version": "1.0.341",
+  "version": "1.0.342",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",