orquesta-cli 0.1.2

package/.eslintrc.json

@@ -0,0 +1,26 @@
+{
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2022,
+    "sourceType": "module",
+    "project": "./tsconfig.json"
+  },
+  "plugins": ["@typescript-eslint"],
+  "extends": [
+    "eslint:recommended",
+    "plugin:@typescript-eslint/recommended",
+    "plugin:@typescript-eslint/recommended-requiring-type-checking"
+  ],
+  "rules": {
+    "@typescript-eslint/explicit-function-return-type": "warn",
+    "@typescript-eslint/no-unused-vars": ["error", { "argsIgnorePattern": "^_" }],
+    "@typescript-eslint/no-explicit-any": "warn",
+    "@typescript-eslint/no-floating-promises": "error",
+    "no-console": "off"
+  },
+  "env": {
+    "node": true,
+    "es2022": true
+  },
+  "ignorePatterns": ["dist/", "node_modules/", "*.js"]
+}

package/.prettierrc.json

@@ -0,0 +1,10 @@
+{
+  "semi": true,
+  "trailingComma": "es5",
+  "singleQuote": true,
+  "printWidth": 100,
+  "tabWidth": 2,
+  "useTabs": false,
+  "arrowParens": "always",
+  "endOfLine": "lf"
+}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 HanSyngha
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,280 @@
+# orquesta-cli
+
+**AI-powered coding assistant with local LLM support** - the self-hosted alternative to Claude CLI.
+
+> Use your own LLM (vLLM, Ollama, LM Studio, Azure OpenAI, or any OpenAI-compatible API) as a full coding agent - no cloud dependency, no subscription costs.
+
+## ⚠️ Security Warning
+
+**IMPORTANT:** Orquesta CLI gives AI models the ability to execute commands on your system. Please read [SECURITY.md](./SECURITY.md) before use.
+
+**Quick Security Tips:**
+- ✅ Use only trusted LLM endpoints
+- ✅ Enable manual approval for production (`autoApprove: false`)
+- ✅ Run in isolated environments (Docker/VM)
+- ✅ Review commands before execution
+- ❌ Never expose sensitive credentials as environment variables
+
+---
+
+## Why orquesta-cli?
+
+**Freedom from cloud dependencies** - Run your own LLM infrastructure:
+
+| Feature | Claude CLI | orquesta-cli |
+|---------|-----------|--------------|
+| **LLM Provider** | Anthropic (cloud) | Any OpenAI-compatible endpoint |
+| **Hosting** | Subscription required | Self-hosted / on-premises |
+| **Options** | Claude only | vLLM, Ollama, LM Studio, Azure OpenAI, local models |
+| **Cost** | Per-token pricing | Your infrastructure |
+| **Privacy** | Data sent to Anthropic | Data stays local |
+| **Integration** | - | Works with orquesta-agent |
+
+---
+
+## Key Features
+
+| Benefit | Description |
+|---------|-------------|
+| **Zero Cloud Dependency** | Runs entirely on your local/on-prem LLM. Your code never leaves your network. |
+| **No API Cost** | Use open-source models (Llama, Qwen, DeepSeek, etc.) for free. |
+| **Any OpenAI-Compatible API** | Works with vLLM, Ollama, LM Studio, Azure OpenAI, Google Gemini, and more. |
+| **Autonomous Coding Agent** | Reads, searches, edits, and creates code files - not just chat. |
+| **Plan & Execute** | Breaks complex tasks into TODO steps and executes them sequentially. |
+| **Safe by Default** | Supervised mode requires your approval before any file modification. |
+| **Office Automation** | Control Excel, Word, PowerPoint directly via PowerShell/COM (Windows). |
+| **Browser Automation** | Chrome/Edge CDP control - navigate, click, screenshot, scrape data. |
+| **orquesta-agent Compatible** | Works seamlessly with orquesta-agent for remote execution |
+
+---
+
+## Installation
+
+```bash
+npm install -g orquesta-cli
+```
+
+Or run directly with npx:
+
+```bash
+npx orquesta-cli
+```
+
+---
+
+## Quick Start
+
+### Interactive Mode
+
+```bash
+orquesta
+```
+
+This launches the full interactive UI with plan & execute, file browser, session history, etc.
+
+### One-Shot Prompt Execution
+
+```bash
+orquesta -p "fix the bug in auth.ts"
+```
+
+This executes the prompt and exits - compatible with `orquesta-agent` for remote execution.
+
+---
+
+## Configuration
+
+```bash
+orquesta            # Setup wizard on first run
+/settings           # Settings menu while running
+```
+
+Any OpenAI-compatible API works:
+- **vLLM**: `http://localhost:8000/v1`
+- **Ollama**: `http://localhost:11434/v1`
+- **LM Studio**: `http://localhost:1234/v1`
+- **Azure OpenAI**: `https://YOUR_RESOURCE.openai.azure.com/openai/deployments/YOUR_DEPLOYMENT`
+- **Google Gemini**: Compatible with OpenAI SDK
+- **Any internal LLM server**
+
+Configuration is stored in `~/.orquesta-cli/config.json`.
+
+---
+
+## Usage with orquesta-agent
+
+orquesta-cli works seamlessly with [orquesta-agent](https://www.npmjs.com/package/orquesta-agent) for remote execution:
+
+```bash
+# On your server/VM
+npm install -g orquesta-cli
+
+# Configure your local LLM endpoint
+orquesta  # Follow setup wizard
+
+# Run orquesta-agent (it will use orquesta-cli instead of claude)
+npx orquesta-agent --token <your-token>
+```
+
+orquesta-agent will execute prompts using `orquesta-cli` with your local LLM.
+
+---
+
+## Commands & Features
+
+### Plan & Execute
+Automatically decomposes requests into TODO steps and executes them:
+
+```
+You: Add a logging system to the project
+
+TODO List                            1/3
+  [x] Create logger.ts
+  [ ] Add imports to existing code
+  [ ] Apply error handling
+```
+
+### Supervised Mode
+Every file modification requires your explicit approval:
+
+- **Tab** to toggle between Auto / Supervised mode
+- Only file modification tools need approval (read/search are always allowed)
+- Reject with feedback to guide the agent's next attempt
+
+### Slash Commands
+| Command | Description |
+|---------|-------------|
+| `/help` | Help |
+| `/clear` | Reset conversation |
+| `/compact` | Compress conversation |
+| `/load` | Load saved session |
+| `/model` | Switch model |
+| `/settings` | Settings menu |
+| `/usage` | Token usage |
+| `/docs` | Docs management |
+| `/tool` | Toggle optional tools (browser/office) |
+
+### Keyboard Shortcuts
+| Key | Action |
+|-----|--------|
+| `Ctrl+C` | Exit |
+| `ESC` | Interrupt current task |
+| `Tab` | Toggle Auto / Supervised |
+| `@` | File browser |
+| `/` | Command autocomplete |
+
+---
+
+## Command-Line Options
+
+```bash
+orquesta [options]
+
+Options:
+  -p, --print <prompt>           Execute a prompt and exit (non-interactive)
+  --dangerously-skip-permissions Skip all permission prompts (auto-approve)
+  --verbose                      Enable verbose logging
+  --debug                        Enable debug logging
+  --llm-log                      Log LLM requests/responses
+  --eval                         Evaluation mode (NDJSON event streaming)
+  -V, --version                  Output version number
+```
+
+---
+
+## Office Automation (60+ Tools)
+
+**Windows only** - Control Microsoft Office via PowerShell/COM:
+
+| App | Capabilities |
+|-----|-------------|
+| **Excel** | Read/write cells, create charts, formatting, conditional formatting, pivot tables, formulas |
+| **Word** | Write text, headers, tables, images, footnotes, find/replace, styles, TOC |
+| **PowerPoint** | Create slides, add text/images/shapes, apply themes, speaker notes |
+
+---
+
+## Browser Automation
+
+Chrome/Edge automation via Chrome DevTools Protocol:
+- Navigate pages, click elements, fill forms
+- Take screenshots, extract text
+- No external server required
+
+---
+
+## Session Management
+
+- Save and restore conversation history
+- Auto-context compression at 80% capacity
+- Resume work exactly where you left off
+
+---
+
+## Development
+
+```bash
+# Clone the repository
+git clone https://github.com/orquesta/orquesta.git
+cd orquesta/packages/orquesta-cli
+
+# Install dependencies
+npm install
+
+# Build
+npm run build
+
+# Run locally
+npm start
+# Or: node dist/cli.js
+```
+
+---
+
+## Requirements
+
+- Node.js v20+
+- npm v10+
+- Git
+- Windows (for Office/Browser automation via PowerShell)
+
+---
+
+## Comparison with Claude CLI
+
+Both tools are **AI-powered coding assistants** but differ in architecture:
+
+### Claude CLI (Official)
+- ✅ Direct Anthropic API access
+- ✅ Claude 4.5/4.6 models
+- ✅ Official support
+- ❌ Requires subscription
+- ❌ Cloud-only
+- ❌ Data sent to Anthropic
+
+### orquesta-cli
+- ✅ Self-hosted LLM support
+- ✅ Any OpenAI-compatible model
+- ✅ Full data privacy
+- ✅ No subscription needed (BYO compute)
+- ✅ Plan & Execute architecture
+- ✅ Office/Browser automation
+- ❌ Model quality depends on your LLM choice
+
+**Use Claude CLI if:** You want the best model quality and have a subscription.
+
+**Use orquesta-cli if:** You need data privacy, self-hosting, or want to use specific models (local, on-prem, etc.).
+
+---
+
+## License
+
+MIT
+
+---
+
+## Links
+
+- **Dashboard**: https://orquesta.live
+- **GitHub**: https://github.com/orquesta/orquesta
+- **npm**: https://www.npmjs.com/package/orquesta-cli

package/SECURITY.md

@@ -0,0 +1,290 @@
+# Security Considerations for Orquesta CLI
+
+## ⚠️ IMPORTANT: Understanding the Risks
+
+Orquesta CLI is a powerful AI coding assistant that can execute commands on your system. **By using this tool, you are giving an AI model the ability to:**
+
+- Execute arbitrary bash/PowerShell commands
+- Read and write files on your filesystem
+- Install packages and dependencies
+- Make network requests
+- Access your development environment
+
+**Please read this entire document before using Orquesta CLI in production environments.**
+
+---
+
+## 🔒 Security Model
+
+### Command Execution by Design
+
+Orquesta CLI **intentionally** allows the LLM to execute commands. This is a core feature, not a bug. However, this comes with risks:
+
+**What can go wrong:**
+- Accidental file deletion
+- Unintended system modifications
+- Resource exhaustion (CPU, memory, disk)
+- Network requests to unintended destinations
+- Credential exposure (if not properly configured)
+
+### Built-in Protections
+
+We've implemented several security measures:
+
+#### 1. Environment Variable Filtering
+```
+✅ Safe vars passed: PATH, HOME, TERM, SHELL
+❌ Blocked patterns: API_KEY, TOKEN, SECRET, PASSWORD
+⚙️ User configurable: safeEnvVars in config.json
+🎯 Explicit per-command: env parameter in tool calls
+```
+
+**How to configure:**
+```json
+// ~/.local-cli/config.json
+{
+  "safeEnvVars": ["DATABASE_URL", "MY_API_KEY"]
+}
+```
+
+#### 2. Dangerous Command Blocking
+```bash
+# Blocked patterns (can be bypassed - see limitations):
+rm -rf /
+sudo rm -rf
+format C:
+Remove-Item -Recurse -Force C:\
+Stop-Computer
+```
+
+**⚠️ LIMITATION:** Regex-based blocking can be bypassed with creative escaping. Do not rely on this as your only protection.
+
+#### 3. File Size Limits
+```
+Read operations: 100MB max
+Write operations: 50MB max
+```
+
+Prevents memory exhaustion from reading/writing massive files.
+
+#### 4. CWD Validation
+Working directory must exist and be a valid directory before command execution.
+
+---
+
+## 🛡️ Recommended Security Practices
+
+### 1. Use Trusted LLM Endpoints Only
+
+**Never use Orquesta CLI with untrusted LLM providers.** A malicious LLM could:
+- Execute destructive commands
+- Exfiltrate sensitive data
+- Install malware
+
+**Recommended:**
+- Self-hosted models (vLLM, Ollama)
+- Trusted cloud providers (Anthropic Claude, OpenAI)
+- Your organization's approved endpoints
+
+### 2. Run in Isolated Environments
+
+**Development/Testing:**
+```bash
+# Use Docker containers
+docker run -it --rm -v $(pwd):/workspace ubuntu bash
+cd /workspace
+npm install -g orquesta-cli
+orquesta
+```
+
+**Production:** Consider sandboxing technologies:
+- Docker/Podman containers
+- VMs with snapshot/restore
+- firejail, bubblewrap, or similar sandboxing tools
+
+### 3. Review Before Approval
+
+**Enable manual approval for destructive operations:**
+```json
+// config.json
+{
+  "settings": {
+    "autoApprove": false  // Recommended for production
+  }
+}
+```
+
+Always review commands before they execute, especially:
+- File deletions
+- System modifications
+- Package installations
+- Git operations (push, force-push, reset)
+
+### 4. Protect Sensitive Environment Variables
+
+**Don't export sensitive credentials to your shell:**
+```bash
+# ❌ BAD - Available to all processes
+export DATABASE_PASSWORD="secret123"
+
+# ✅ GOOD - Use .env files or secret managers
+# Only load when needed
+```
+
+**Use config-based allowlisting:**
+```json
+{
+  "safeEnvVars": ["NODE_ENV", "LOG_LEVEL"]
+  // Don't add sensitive vars here
+}
+```
+
+### 5. Regular Backups
+
+**Before using Orquesta CLI on important projects:**
+```bash
+# Git commit your work
+git add -A && git commit -m "Before orquesta session"
+
+# Or create a backup
+tar -czf backup-$(date +%Y%m%d).tar.gz .
+```
+
+### 6. Monitor File System Changes
+
+Use version control to track what the AI modifies:
+```bash
+# After session, review changes
+git diff
+git status
+```
+
+### 7. Network Isolation (Optional)
+
+For maximum security, run Orquesta CLI without internet access:
+```bash
+# Linux/macOS with network namespace isolation
+unshare --net orquesta
+
+# Or use firewall rules to restrict network access
+```
+
+---
+
+## 🚨 Known Limitations & Attack Vectors
+
+### 1. Command Filter Bypasses
+
+**The dangerous command filters can be bypassed:**
+```bash
+# Blocked: rm -rf /
+# Bypass examples:
+\rm -rf /              # Escaped command
+/bin/rm -rf /          # Full path
+bash -c "rm -rf /"     # Nested shell
+$(rm -rf /)            # Command substitution
+```
+
+**Mitigation:** Don't rely solely on filters. Use manual approval and sandboxing.
+
+### 2. Environment Variable Leakage
+
+Even with filtering, there are edge cases:
+- Environment variables set AFTER Orquesta CLI starts
+- Variables passed through other mechanisms (files, pipes)
+- Variables in command strings
+
+**Mitigation:** Review the `env` parameter in tool calls. Check logs.
+
+### 3. File Path Traversal
+
+While we validate CWD, symlinks and relative paths could potentially access files outside the working directory.
+
+**Mitigation:** Run in containers with limited filesystem access.
+
+### 4. Resource Exhaustion
+
+Despite file size limits, an LLM could:
+- Spawn many background processes
+- Create infinite loops
+- Fill disk with many small files
+
+**Mitigation:** Use system resource limits (ulimit, cgroups).
+
+### 5. Supply Chain Attacks
+
+If your LLM endpoint is compromised, the attacker gains full control.
+
+**Mitigation:** Self-host your LLM or use reputable providers only.
+
+---
+
+## 📊 Security Checklist
+
+Before using Orquesta CLI in production:
+
+- [ ] Review this entire security document
+- [ ] Use only trusted LLM endpoints
+- [ ] Enable manual approval (`autoApprove: false`)
+- [ ] Configure `safeEnvVars` carefully
+- [ ] Don't export sensitive credentials to shell
+- [ ] Run in isolated environment (Docker/VM)
+- [ ] Create backups before sessions
+- [ ] Use version control to track changes
+- [ ] Review all commands before execution
+- [ ] Monitor file system and network activity
+- [ ] Set up resource limits (ulimit, cgroups)
+- [ ] Have rollback plan ready
+
+---
+
+## 🆘 If Something Goes Wrong
+
+### Immediate Actions
+
+1. **Stop Orquesta CLI immediately:** Ctrl+C or kill the process
+2. **Review damage:**
+   ```bash
+   git status          # Check modified files
+   git diff            # See changes
+   ps aux | grep node  # Check running processes
+   ```
+3. **Rollback if needed:**
+   ```bash
+   git reset --hard HEAD  # Discard all changes (careful!)
+   git clean -fd          # Remove untracked files
+   ```
+
+### Recovery
+
+- Restore from backup
+- Review git history
+- Check for malicious network connections: `netstat -tuln`
+- Scan for malware if suspicious activity detected
+
+---
+
+## 📝 Reporting Security Issues
+
+**Found a security vulnerability?**
+
+Please report it responsibly:
+- **Email:** security@orquesta.live (if available)
+- **GitHub:** Create a private security advisory
+- **Do NOT** open public issues for security vulnerabilities
+
+---
+
+## 📚 Additional Resources
+
+- [OWASP Top 10](https://owasp.org/www-project-top-ten/)
+- [Docker Security Best Practices](https://docs.docker.com/engine/security/)
+- [Linux Sandboxing](https://wiki.archlinux.org/title/Security#Sandboxing_applications)
+
+---
+
+## ⚖️ Disclaimer
+
+**USE AT YOUR OWN RISK.** Orquesta CLI is provided "as is" without warranty of any kind. The developers are not responsible for any damage caused by using this tool.
+
+By using Orquesta CLI, you acknowledge that you understand the risks and accept full responsibility for any consequences.

package/dist/agents/base/base-agent.d.ts

@@ -0,0 +1,38 @@
+import { LLMClient } from '../../core/llm/llm-client.js';
+import { Message, ToolDefinition } from '../../types/index.js';
+export interface AgentContext {
+    workingDirectory?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface AgentResult {
+    success: boolean;
+    result?: string;
+    error?: string;
+    metadata?: {
+        iterations?: number;
+        toolCalls?: number;
+        duration?: number;
+    };
+}
+export interface AgentConfig {
+    maxIterations?: number;
+    temperature?: number;
+    maxTokens?: number;
+}
+export declare abstract class BaseAgent {
+    abstract readonly name: string;
+    abstract readonly description: string;
+    protected llmClient: LLMClient;
+    protected config: AgentConfig;
+    constructor(llmClient: LLMClient, config?: AgentConfig);
+    abstract execute(input: string, context?: AgentContext): Promise<AgentResult>;
+    protected abstract getTools(): ToolDefinition[];
+    protected abstract buildSystemPrompt(context?: AgentContext): string;
+    protected runToolLoop(messages: Message[], toolExecutor: (toolName: string, args: Record<string, unknown>) => Promise<string>): Promise<{
+        success: boolean;
+        result: string;
+        iterations: number;
+    }>;
+}
+export default BaseAgent;
+//# sourceMappingURL=base-agent.d.ts.map

package/dist/agents/base/base-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-agent.d.ts","sourceRoot":"","sources":["../../../src/agents/base/base-agent.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAM/D,MAAM,WAAW,YAAY;IAE3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAKD,MAAM,WAAW,WAAW;IAE1B,OAAO,EAAE,OAAO,CAAC;IAEjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,QAAQ,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAKD,MAAM,WAAW,WAAW;IAE1B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAKD,8BAAsB,SAAS;IAE7B,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAEtC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;IAC/B,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC;gBAElB,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW;IAYtD,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAK7E,SAAS,CAAC,QAAQ,CAAC,QAAQ,IAAI,cAAc,EAAE;IAK/C,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,MAAM;cAKpD,WAAW,CACzB,QAAQ,EAAE,OAAO,EAAE,EACnB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,GACjF,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CA+DrE;AAED,eAAe,SAAS,CAAC"}