smithers-orchestrator 0.20.4 → 0.22.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "smithers-orchestrator",
-  "version": "0.20.4",
-  "description": "Public Smithers facade and workflow authoring convenience package",
+  "version": "0.22.0",
+  "description": "Public Smithers facade for durable coding-agent workflows and Gateway operation",
   "type": "module",
   "sideEffects": false,
   "exports": {
@@ -25,6 +25,16 @@
       "import": "./src/gateway-react.js",
       "default": "./src/gateway-react.js"
     },
+    "./sandbox": {
+      "types": "./src/sandbox.d.ts",
+      "import": "./src/sandbox.js",
+      "default": "./src/sandbox.js"
+    },
+    "./control-plane": {
+      "types": "./src/control-plane.d.ts",
+      "import": "./src/control-plane.js",
+      "default": "./src/control-plane.js"
+    },
     "./*": {
       "types": "./src/index.d.ts",
       "import": "./src/*.js",
@@ -51,26 +61,27 @@
     "incur": "^0.4.1",
     "react": "^19.2.5",
     "zod": "^4.3.6",
-    "@smithers-orchestrator/cli": "0.20.4",
-    "@smithers-orchestrator/components": "0.20.4",
-    "@smithers-orchestrator/engine": "0.20.4",
-    "@smithers-orchestrator/db": "0.20.4",
-    "@smithers-orchestrator/errors": "0.20.4",
-    "@smithers-orchestrator/gateway-client": "0.20.4",
-    "@smithers-orchestrator/memory": "0.20.4",
-    "@smithers-orchestrator/agents": "0.20.4",
-    "@smithers-orchestrator/observability": "0.20.4",
-    "@smithers-orchestrator/openapi": "0.20.4",
-    "@smithers-orchestrator/sandbox": "0.20.4",
-    "@smithers-orchestrator/react-reconciler": "0.20.4",
-    "@smithers-orchestrator/gateway-react": "0.20.4",
-    "@smithers-orchestrator/scorers": "0.20.4",
-    "@smithers-orchestrator/scheduler": "0.20.4",
-    "@smithers-orchestrator/time-travel": "0.20.4",
-    "@smithers-orchestrator/server": "0.20.4",
-    "@smithers-orchestrator/vcs": "0.20.4",
-    "@smithers-orchestrator/graph": "0.20.4",
-    "@smithers-orchestrator/driver": "0.20.4"
+    "@smithers-orchestrator/agents": "0.22.0",
+    "@smithers-orchestrator/cli": "0.22.0",
+    "@smithers-orchestrator/components": "0.22.0",
+    "@smithers-orchestrator/control-plane": "0.22.0",
+    "@smithers-orchestrator/driver": "0.22.0",
+    "@smithers-orchestrator/engine": "0.22.0",
+    "@smithers-orchestrator/gateway-client": "0.22.0",
+    "@smithers-orchestrator/errors": "0.22.0",
+    "@smithers-orchestrator/gateway-react": "0.22.0",
+    "@smithers-orchestrator/graph": "0.22.0",
+    "@smithers-orchestrator/db": "0.22.0",
+    "@smithers-orchestrator/memory": "0.22.0",
+    "@smithers-orchestrator/observability": "0.22.0",
+    "@smithers-orchestrator/openapi": "0.22.0",
+    "@smithers-orchestrator/react-reconciler": "0.22.0",
+    "@smithers-orchestrator/sandbox": "0.22.0",
+    "@smithers-orchestrator/scorers": "0.22.0",
+    "@smithers-orchestrator/scheduler": "0.22.0",
+    "@smithers-orchestrator/server": "0.22.0",
+    "@smithers-orchestrator/time-travel": "0.22.0",
+    "@smithers-orchestrator/vcs": "0.22.0"
   },
   "devDependencies": {
     "@types/bun": "latest",

package/src/control-plane.d.ts

@@ -0,0 +1 @@
+export * from "@smithers-orchestrator/control-plane";

package/src/control-plane.js

@@ -0,0 +1 @@
+export * from "@smithers-orchestrator/control-plane";

package/src/create.js

@@ -249,8 +249,9 @@ export function createSmithers(schemas, opts) {
             sqlite.close();
         }
         catch { }
+        process.removeListener("exit", closeDb);
     };
-    process.on("exit", closeDb);
+    process.once("exit", closeDb);
     // 3. Auto-create tables, and ALTER any existing tables to add columns the
     // current schema introduced (CREATE TABLE IF NOT EXISTS would silently
     // skip the columns and a later upsert would fail with "no column named X").

package/src/examples-entry.js

@@ -20,7 +20,7 @@
 /** @typedef {import("@smithers-orchestrator/components").WaitForEventProps} WaitForEventProps */
 // @smithers-type-exports-end
 
-export { Approval, approvalDecisionSchema, Workflow, Task, Sequence, Parallel, MergeQueue, Branch, Loop, Ralph, Worktree, } from "@smithers-orchestrator/components";
+export { Approval, approvalDecisionSchema, Workflow, Task, Sequence, Parallel, MergeQueue, Branch, Loop, Ralph, Worktree, Sandbox, } from "@smithers-orchestrator/components";
 export { Timer } from "@smithers-orchestrator/components";
 export { ClaudeCodeAgent } from "@smithers-orchestrator/agents/ClaudeCodeAgent";
 export { KimiAgent } from "@smithers-orchestrator/agents/KimiAgent";

package/src/external/create-external-smithers.js

@@ -127,8 +127,9 @@ export function createExternalSmithers(config) {
             sqlite.close();
         }
         catch { }
+        process.removeListener("exit", closeDb);
     };
-    process.on("exit", closeDb);
+    process.once("exit", closeDb);
     const inputTable = sqliteTable("input", {
         runId: text("run_id").primaryKey(),
         payload: text("payload", { mode: "json" }).$type(),

package/src/index.d.ts

@@ -56,7 +56,7 @@ import { WorkflowProps } from '@smithers-orchestrator/components/components/Work
 import * as _smithers_server_gateway from '@smithers-orchestrator/server/gateway';
 export { Gateway } from '@smithers-orchestrator/server/gateway';
 import * as _smithers_agents from '@smithers-orchestrator/agents';
-export { AmpAgent, AnthropicAgent, ClaudeCodeAgent, CodexAgent, ForgeAgent, GeminiAgent, KimiAgent, OpenAIAgent, OpenCodeAgent, PiAgent } from '@smithers-orchestrator/agents';
+export { AmpAgent, AnthropicAgent, AntigravityAgent, ClaudeCodeAgent, CodexAgent, ForgeAgent, GeminiAgent, HermesAgent, KimiAgent, OpenAIAgent, OpenCodeAgent, PiAgent } from '@smithers-orchestrator/agents';
 import * as _smithers_scorers from '@smithers-orchestrator/scorers';
 export { aggregateScores, createScorer, faithfulnessScorer, latencyScorer, llmJudge, relevancyScorer, runScorersAsync, runScorersBatch, schemaAdherenceScorer, smithersScorers, toxicityScorer } from '@smithers-orchestrator/scorers';
 import * as _smithers_agents_capability_registry from '@smithers-orchestrator/agents/capability-registry';
@@ -331,6 +331,7 @@ type MemoryStore = _smithers_memory.MemoryStore;
 type MemoryThread = _smithers_memory.MemoryThread;
 type MessageHistoryConfig = _smithers_memory.MessageHistoryConfig;
 type OpenAIAgentOptions<CALL_OPTIONS = never, TOOLS = ai.ToolSet> = _smithers_agents.OpenAIAgentOptions<CALL_OPTIONS, TOOLS>;
+type HermesAgentOptions<CALL_OPTIONS = never, TOOLS = ai.ToolSet> = _smithers_agents.HermesAgentOptions<CALL_OPTIONS, TOOLS>;
 type OpenCodeAgentOptions = _smithers_agents.OpenCodeAgentOptions;
 type OpenApiAuth = _smithers_openapi.OpenApiAuth;
 type OpenApiSpec = _smithers_openapi.OpenApiSpec;
@@ -407,4 +408,4 @@ type XmlElement = _smithers_graph_XmlNode.XmlElement;
 type XmlNode = _smithers_graph_XmlNode.XmlNode;
 type XmlText = _smithers_graph_XmlNode.XmlText;
 
-export { type AgentCapabilityRegistry, type AgentLike, type AgentToolDescriptor, type AggregateOptions, type AggregateScore, type AnthropicAgentOptions, type ApprovalAutoApprove, type ApprovalDecision, type ApprovalMode, type ApprovalOption, type ApprovalProps, type ApprovalRanking, type ApprovalRequest, type ApprovalSelection, type ColumnDef, type ConnectRequest, type ContinueAsNewProps, type CreateScorerConfig, type CreateSmithersApi, type DepsSpec, type EventFrame, type ExternalSmithersConfig, type GatewayAuthConfig, type GatewayDefaults, type GatewayOptions, type GatewayTokenGrant, type GraphSnapshot, type HelloResponse, type HostContainer, type HostNodeJson, type InferDeps, type InferOutputEntry, type InferRow, type JjRevertResult, type KanbanProps, type KnownSmithersErrorCode, type LlmJudgeConfig, type MemoryFact, type MemoryLayerConfig, type MemoryMessage, type MemoryNamespace, type MemoryNamespaceKind, type MemoryProcessor, type MemoryProcessorConfig, type MemoryServiceApi, type MemoryStore, type MemoryThread, type MessageHistoryConfig, type OpenAIAgentOptions, type OpenApiAuth, type OpenApiSpec, type OpenApiToolsOptions, type OpenCodeAgentOptions, type OutputAccessor, type OutputKey, type OutputTarget, type PiAgentOptions, type PiExtensionUiRequest, type PiExtensionUiResponse, type PollerProps, type RequestFrame, type ResolvedSmithersObservabilityOptions, type ResponseFrame, type RevertOptions, type RevertResult, type RunJjOptions, type RunJjResult, type RunOptions, type RunResult, type RunStatus, type SagaProps, type SagaStepDef, type SagaStepProps, type SamplingConfig, type SandboxProps, type SandboxRuntime, type SandboxVolumeMount, type SandboxWorkspaceSpec, type SchemaRegistryEntry, type ScoreResult, type ScoreRow, type Scorer, type ScorerBinding, type ScorerContext, type ScorerFn, type ScorerInput, type ScorersMap, type SemanticRecallConfig, type SerializedCtx, type ServeOptions, type ServerOptions, type SignalProps, type SmithersAlertLabels, type SmithersAlertPolicy, type SmithersAlertPolicyDefaults, type SmithersAlertPolicyRule, type SmithersAlertReaction, type SmithersAlertReactionKind, type SmithersAlertReactionRef, type SmithersAlertSeverity, type SmithersCtx, type SmithersError, type SmithersErrorCode, type SmithersEvent, type SmithersLogFormat, type SmithersObservabilityOptions, type SmithersObservabilityService, type SmithersWorkflow, type SmithersWorkflowOptions, type TaskDescriptor, type TaskMemoryConfig, type TaskProps, type TimeTravelOptions, type TimeTravelResult, type TimerProps, type TryCatchFinallyProps, type WaitForEventProps, type WorkingMemoryConfig, type WorkspaceAddOptions, type WorkspaceInfo, type WorkspaceResult, type XmlElement, type XmlNode, type XmlText, bash, createExternalSmithers, createSmithers, defineTool, edit, getDefinedToolMetadata, grep, mdxPlugin, read, tools, write };
+export { type AgentCapabilityRegistry, type AgentLike, type AgentToolDescriptor, type AggregateOptions, type AggregateScore, type AnthropicAgentOptions, type ApprovalAutoApprove, type ApprovalDecision, type ApprovalMode, type ApprovalOption, type ApprovalProps, type ApprovalRanking, type ApprovalRequest, type ApprovalSelection, type ColumnDef, type ConnectRequest, type ContinueAsNewProps, type CreateScorerConfig, type CreateSmithersApi, type DepsSpec, type EventFrame, type ExternalSmithersConfig, type GatewayAuthConfig, type GatewayDefaults, type GatewayOptions, type GatewayTokenGrant, type GraphSnapshot, type HelloResponse, type HermesAgentOptions, type HostContainer, type HostNodeJson, type InferDeps, type InferOutputEntry, type InferRow, type JjRevertResult, type KanbanProps, type KnownSmithersErrorCode, type LlmJudgeConfig, type MemoryFact, type MemoryLayerConfig, type MemoryMessage, type MemoryNamespace, type MemoryNamespaceKind, type MemoryProcessor, type MemoryProcessorConfig, type MemoryServiceApi, type MemoryStore, type MemoryThread, type MessageHistoryConfig, type OpenAIAgentOptions, type OpenApiAuth, type OpenApiSpec, type OpenApiToolsOptions, type OpenCodeAgentOptions, type OutputAccessor, type OutputKey, type OutputTarget, type PiAgentOptions, type PiExtensionUiRequest, type PiExtensionUiResponse, type PollerProps, type RequestFrame, type ResolvedSmithersObservabilityOptions, type ResponseFrame, type RevertOptions, type RevertResult, type RunJjOptions, type RunJjResult, type RunOptions, type RunResult, type RunStatus, type SagaProps, type SagaStepDef, type SagaStepProps, type SamplingConfig, type SandboxProps, type SandboxRuntime, type SandboxVolumeMount, type SandboxWorkspaceSpec, type SchemaRegistryEntry, type ScoreResult, type ScoreRow, type Scorer, type ScorerBinding, type ScorerContext, type ScorerFn, type ScorerInput, type ScorersMap, type SemanticRecallConfig, type SerializedCtx, type ServeOptions, type ServerOptions, type SignalProps, type SmithersAlertLabels, type SmithersAlertPolicy, type SmithersAlertPolicyDefaults, type SmithersAlertPolicyRule, type SmithersAlertReaction, type SmithersAlertReactionKind, type SmithersAlertReactionRef, type SmithersAlertSeverity, type SmithersCtx, type SmithersError, type SmithersErrorCode, type SmithersEvent, type SmithersLogFormat, type SmithersObservabilityOptions, type SmithersObservabilityService, type SmithersWorkflow, type SmithersWorkflowOptions, type TaskDescriptor, type TaskMemoryConfig, type TaskProps, type TimeTravelOptions, type TimeTravelResult, type TimerProps, type TryCatchFinallyProps, type WaitForEventProps, type WorkingMemoryConfig, type WorkspaceAddOptions, type WorkspaceInfo, type WorkspaceResult, type XmlElement, type XmlNode, type XmlText, bash, createExternalSmithers, createSmithers, defineTool, edit, getDefinedToolMetadata, grep, mdxPlugin, read, tools, write };

package/src/index.js

@@ -68,6 +68,11 @@
  * @template [TOOLS=import("ai").ToolSet]
  * @typedef {import("@smithers-orchestrator/agents").OpenAIAgentOptions<CALL_OPTIONS, TOOLS>} OpenAIAgentOptions
  */
+/**
+ * @template [CALL_OPTIONS=never]
+ * @template [TOOLS=import("ai").ToolSet]
+ * @typedef {import("@smithers-orchestrator/agents").HermesAgentOptions<CALL_OPTIONS, TOOLS>} HermesAgentOptions
+ */
 /** @typedef {import("@smithers-orchestrator/openapi").OpenApiAuth} OpenApiAuth */
 /** @typedef {import("@smithers-orchestrator/openapi").OpenApiSpec} OpenApiSpec */
 /** @typedef {import("@smithers-orchestrator/openapi").OpenApiToolsOptions} OpenApiToolsOptions */
@@ -166,7 +171,7 @@ export { knownSmithersErrorCodes } from "@smithers-orchestrator/errors/knownSmit
 // Components
 export { Approval, ApprovalGate, Aspects, Branch, CheckSuite, ClassifyAndRoute, ContentPipeline, ContinueAsNew, Debate, DecisionTable, DriftDetector, EscalationChain, GatherAndSynthesize, HumanTask, Kanban, Loop, MergeQueue, Optimizer, Panel, Parallel, Poller, Ralph, ReviewLoop, Runbook, Saga, Sandbox, ScanFixVerify, Sequence, Signal, Subflow, SuperSmithers, Supervisor, Task, Timer, TryCatchFinally, WaitForEvent, Workflow, Worktree, approvalDecisionSchema, approvalRankingSchema, approvalSelectionSchema, continueAsNew, } from "@smithers-orchestrator/components";
 // Agents
-export { AnthropicAgent, OpenAIAgent, AmpAgent, ClaudeCodeAgent, CodexAgent, GeminiAgent, PiAgent, KimiAgent, ForgeAgent, OpenCodeAgent, } from "@smithers-orchestrator/agents";
+export { AnthropicAgent, OpenAIAgent, HermesAgent, AmpAgent, AntigravityAgent, ClaudeCodeAgent, CodexAgent, GeminiAgent, PiAgent, KimiAgent, ForgeAgent, OpenCodeAgent, } from "@smithers-orchestrator/agents";
 // VCS
 export { runJj, getJjPointer, revertToJjPointer, isJjRepo, workspaceAdd, workspaceList, workspaceClose, } from "@smithers-orchestrator/vcs/jj";
 // Core API

package/src/sandbox.d.ts

@@ -0,0 +1 @@
+export * from "@smithers-orchestrator/sandbox";

package/src/sandbox.js

@@ -0,0 +1 @@
+export * from "@smithers-orchestrator/sandbox";

package/src/tools/bash.js

@@ -100,29 +100,36 @@ function validateBashInvocation(cmd, args, opts, ctx) {
   }
 }
 
+function tokenExecutableName(token) {
+  const stripped = token.split(/[/\\]/).pop() ?? token;
+  return stripped;
+}
+
 function assertNetworkAllowed(cmd, args, allowNetwork) {
   if (allowNetwork) {
     return;
   }
-  const hay = [cmd, ...(args ?? [])].join(" ");
-  const networkCommands = [
-    "curl",
-    "wget",
-    "http://",
-    "https://",
-    "npm",
-    "bun",
-    "pip",
-  ];
-  if (networkCommands.some((fragment) => hay.includes(fragment))) {
+  const tokens = [cmd, ...(args ?? [])].flatMap((part) =>
+    String(part).split(/\s+/).filter(Boolean),
+  );
+  const executables = new Set(tokens.map(tokenExecutableName));
+  const networkExecutables = ["curl", "wget", "npm", "bun", "pip"];
+  const hasNetworkExecutable = networkExecutables.some((name) =>
+    executables.has(name),
+  );
+  const urlSchemes = ["http://", "https://"];
+  const hasUrlToken = tokens.some((token) =>
+    urlSchemes.some((scheme) => token.startsWith(scheme)),
+  );
+  if (hasNetworkExecutable || hasUrlToken) {
     throw new SmithersError(
       "TOOL_NETWORK_DISABLED",
       "Network access is disabled for bash tool",
     );
   }
-  if (hay.includes("git")) {
-    const gitRemoteOps = ["push", "pull", "fetch", "clone", "remote"];
-    if (gitRemoteOps.some((op) => hay.includes(op))) {
+  if (executables.has("git")) {
+    const gitRemoteOps = new Set(["push", "pull", "fetch", "clone", "remote"]);
+    if (tokens.some((token) => gitRemoteOps.has(token))) {
       throw new SmithersError(
         "TOOL_GIT_REMOTE_DISABLED",
         "Git remote operations are disabled for bash tool",

package/src/tools/utils.js

@@ -27,12 +27,25 @@ export function sha256Hex(value) {
   return createHash("sha256").update(value).digest("hex");
 }
 
+function utf8BoundaryLength(buf, byteLength) {
+  let end = Math.min(byteLength, buf.length);
+  if (end >= buf.length) {
+    return buf.length;
+  }
+  // If the cut lands on a continuation byte, back up to the lead byte of the
+  // partial sequence so we never decode an incomplete codepoint.
+  while (end > 0 && (buf[end] & 0xc0) === 0x80) {
+    end -= 1;
+  }
+  return end;
+}
+
 export function truncateToBytes(text, maxBytes) {
   const buf = Buffer.from(text, "utf8");
   if (buf.length <= maxBytes) {
     return text;
   }
-  return buf.subarray(0, maxBytes).toString("utf8");
+  return buf.subarray(0, utf8BoundaryLength(buf, maxBytes)).toString("utf8");
 }
 
 export async function resolveToolPath(rootDir, inputPath) {
@@ -72,8 +85,11 @@ function appendLimited(chunks, state, chunk, maxBytes) {
     state.storedBytes += buffer.length;
     return;
   }
-  chunks.push(buffer.subarray(0, remaining));
-  state.storedBytes += remaining;
+  const accepted = utf8BoundaryLength(buffer, remaining);
+  if (accepted > 0) {
+    chunks.push(buffer.subarray(0, accepted));
+    state.storedBytes += accepted;
+  }
   state.truncated = true;
 }
 
@@ -91,7 +107,12 @@ export function captureProcess(
   return new Promise((resolve, reject) => {
     const stdoutChunks = [];
     const stderrChunks = [];
-    const state = {
+    const stdoutState = {
+      storedBytes: 0,
+      totalBytes: 0,
+      truncated: false,
+    };
+    const stderrState = {
       storedBytes: 0,
       totalBytes: 0,
       truncated: false,
@@ -149,10 +170,10 @@ export function captureProcess(
     }
 
     child.stdout.on("data", (chunk) => {
-      appendLimited(stdoutChunks, state, chunk, maxOutputBytes);
+      appendLimited(stdoutChunks, stdoutState, chunk, maxOutputBytes);
     });
     child.stderr.on("data", (chunk) => {
-      appendLimited(stderrChunks, state, chunk, maxOutputBytes);
+      appendLimited(stderrChunks, stderrState, chunk, maxOutputBytes);
     });
     child.on("error", (error) => {
       finish(() =>
@@ -167,7 +188,7 @@ export function captureProcess(
     });
     child.on("close", (exitCode, signal) => {
       finish(() => {
-        resolve({ exitCode: exitCode ?? (signal ? 1 : 0), signal, stdout: Buffer.concat(stdoutChunks).toString("utf8"), stderr: Buffer.concat(stderrChunks).toString("utf8"), truncated: state.truncated, totalBytes: state.totalBytes });
+        resolve({ exitCode: exitCode ?? (signal ? 1 : 0), signal, stdout: Buffer.concat(stdoutChunks).toString("utf8"), stderr: Buffer.concat(stderrChunks).toString("utf8"), truncated: stdoutState.truncated || stderrState.truncated, totalBytes: stdoutState.totalBytes + stderrState.totalBytes });
       });
     });
   });