zora-agent 0.9.0

package/CHANGELOG.md

@@ -0,0 +1,145 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+## [0.9.0] — 2026-02-14
+
+First release candidate. All 12 release gate criteria verified against source code. Zora boots, runs tasks, fails over between providers, persists sessions, and shuts down cleanly.
+
+### Orchestration (all release-gate gaps closed)
+- Central `Orchestrator.boot()` initializes all subsystems in dependency order
+- `submitTask()` flows through: classify, route, execute, persist events, inject memory, handle failover
+- Automatic provider failover with depth-limited recursion (max 3 levels)
+- Persistent retry queue polled every 30s with configurable backoff
+- AuthMonitor scheduled checks every 5 minutes with pre-expiry warnings
+- HeartbeatSystem and RoutineManager started at boot
+- SteeringManager polled during execution for mid-task course corrections
+- SessionManager persists all events to JSONL per job
+
+### Error Handling (release-gate hardening)
+- AuditLogger propagates write failures instead of silently swallowing
+- GeminiProvider logs JSON parse failures with full context (first 200 chars + stack)
+- ExecutionLoop stream timeout protection (30-minute default, configurable)
+
+### CLI (fully functional daemon lifecycle)
+- `zora-agent start` — Spawns daemon via fork(), writes pidfile (mode 0600), auto-opens dashboard
+- `zora-agent stop` — SIGTERM with 5s grace period, SIGKILL fallback, pidfile cleanup
+- `zora-agent status` — Pidfile + kill(pid, 0) liveness check, stale pidfile detection
+- `zora-agent doctor` — Detects Node.js version, Claude CLI, Gemini CLI
+
+### Added
+- Granular model selection per provider type (claude-opus, claude-sonnet, claude-haiku)
+- `--max-cost-tier` CLI flag and routine config for cost-aware routing
+- Ollama provider for local models (Llama, Mistral) at zero cost
+- `RoutineManager.runRoutine()` for manual/test-triggered routines
+- Provider quota/usage tracking in dashboard
+- Docker multi-stage build with health checks
+- Dashboard SSE live feed, task submission, onboarding screen
+- 552 tests passing (49 unit, 3 integration, 1 benchmark), 0 type errors
+
+### Changed
+- RoutineManager routes through `Orchestrator.submitTask()` (gets routing, failover, memory, persistence)
+- Router cost filtering uses shared `COST_ORDER` constant
+
+### Fixed
+- OllamaProvider now implements `getUsage()` (was missing from LLMProvider interface)
+- Test expectations aligned to actual config default (`zora-agent` not `zora`)
+- Routine TOML validation fixed for `[task]` section parsing
+
+## [0.6.0] — 2026-02-13
+
+### Security Hardening (OWASP LLM Top 10 / Agentic Top 10)
+
+This release addresses critical security gaps identified in a comprehensive audit against OWASP LLM Top 10 (2025) and OWASP Agentic Top 10 (ASI-2026).
+
+**Action Budgets (LLM06/LLM10 — Excessive Agency / Unbounded Consumption)**
+- Per-session action limits (`max_actions_per_session`) prevent unbounded autonomous loops
+- Per-type limits (`max_actions_per_type`) cap shell commands, file writes, and destructive operations independently
+- Token budget enforcement caps total LLM token consumption per session
+- Configurable `on_exceed` behavior: `"block"` (hard stop) or `"flag"` (prompt for approval)
+- Budget tracking integrated into PolicyEngine with `recordAction()` and `recordTokenUsage()`
+- All four presets (locked/safe/balanced/power) include budget defaults
+
+**Dry-Run Preview Mode (ASI-02 — Tool Misuse)**
+- `[dry_run]` policy section enables preview-without-execute for write operations
+- Write tools (Write, Edit, destructive Bash) intercepted; read-only tools pass through
+- Smart command classification: `ls`, `cat`, `git status`, `git diff`, `pwd`, `echo` recognized as read-only
+- Dry-run interceptions logged to audit trail when `audit_dry_runs = true`
+- Configurable per-tool targeting via `tools` array (empty = all write tools)
+
+**Intent Capsules / Mandate Signing (ASI-01 — Agent Goal Hijack)**
+- New `IntentCapsuleManager` creates HMAC-SHA256 signed mandate bundles per task
+- SHA-256 mandate hashing with keyword extraction and category tagging
+- Per-action drift detection: category match, keyword overlap (>10% threshold), capsule expiry
+- Goal drift flagged for human review (not blocked outright to avoid false positives)
+- Per-session signing keys via `crypto.randomBytes(32)`
+- Timing-safe signature verification via `crypto.timingSafeEqual`
+
+**RAG/Tool-Output Injection Defense (LLM01 — Prompt Injection)**
+- 10 new RAG-specific injection patterns added to PromptDefense
+- Detects: `[IMPORTANT INSTRUCTION]`, `NOTE TO AI`, `HIDDEN INSTRUCTION`, embedded `<system>`/`<instruction>`/`<override>`/`<admin>` tags, delimiter attacks, role impersonation
+- New `sanitizeToolOutput()` function wraps suspicious tool outputs in `<untrusted_tool_output>` tags
+- Existing `sanitizeInput()` updated to include RAG patterns in scan
+
+**Infrastructure: Centralized Policy Loader**
+- Extracted duplicated TOML→ZoraPolicy parsing from `cli/index.ts` and `cli/daemon.ts` into `src/config/policy-loader.ts`
+- Single source of truth for all policy field defaults and backward compatibility
+- New optional `[budget]` and `[dry_run]` sections with safe defaults for missing fields
+
+### Added
+- Claude Agent SDK integration — ExecutionLoop wraps SDK `query()` with full message streaming
+- Claude provider with lazy SDK import, dependency injection, abort support, and cost tracking
+- Gemini CLI provider with subprocess management and stdout streaming
+- N-provider router with capability matching, cost-tier awareness, and ranking modes
+- Failover controller with HandoffBundle creation for mid-task provider transitions
+- Retry queue with quadratic backoff and disk persistence
+- Auth health monitor for provider credential tracking
+- Session manager with JSONL persistence and corruption tolerance
+- Policy engine with symlink detection, path canonicalization, and SDK tool interception
+- Audit logger with SHA-256 hash-chained append-only JSONL and chain verification
+- Secrets manager with AES-256-GCM encryption, PBKDF2 key derivation, and atomic writes
+- Integrity guardian with SHA-256 baselines and file quarantine
+- Leak detector with 9 pattern categories (API keys, JWTs, private keys, AWS credentials)
+- Prompt defense with 20+ injection patterns (direct + RAG) and tool output sanitization
+- Capability tokens with expiration enforcement and path/command validation
+- 3-tier hierarchical memory system (MEMORY.md, daily notes, structured items)
+- Salience scorer with exponential decay and Jaccard similarity
+- Structured memory with CRUD operations and atomic writes
+- Extraction pipeline with schema validation, retry logic, and deduplication
+- Category organizer with auto-categorization and relevance scoring
+- Team manager with filesystem-based coordination and config persistence
+- Mailbox with atomic write-then-rename message queue
+- Gemini bridge with subprocess orchestration and inbox polling
+- Bridge watchdog with heartbeat monitoring and exponential backoff restart
+- Agent loader with YAML frontmatter parsing for SDK agent definitions
+- Steering manager with job-specific message persistence and archiving
+- Flag manager with timeout auto-resolve and state transitions
+- Telegram gateway with long polling, user allowlist, and steering commands
+- Routine manager with TOML-defined tasks and node-cron scheduling
+- Heartbeat system with markdown task parsing and completion marking
+- Event trigger manager with fs.stat polling and glob pattern matching
+- Dashboard server on localhost:7070 with Express, steering API, and health endpoint
+- Auth middleware with timing-safe Bearer token comparison
+- Skill loader for dynamic ~/.claude/skills/ discovery
+- CLI with `ask`, `status`, `start`, `stop` commands plus memory, audit, edit, team, steer, and skill subcommands
+- MCP server configuration support in config loader
+- Comprehensive test suite (48 files, 500+ passing tests via Vitest + Playwright)
+- CI/CD with Claude Code review workflow
+
+### Known Limitations (0.6.0, resolved in 0.9.0)
+- ~~No main orchestrator wiring~~ — **Fixed in 0.9.0**: Orchestrator.boot() wires all components
+- ~~CLI start/stop are placeholder~~ — **Fixed in 0.9.0**: Full daemon lifecycle with pidfile management
+- ~~Dashboard /api/jobs returns empty~~ — **Fixed in 0.9.0**: Returns real session data
+- ~~Router/FailoverController/RetryQueue/AuthMonitor never invoked~~ — **Fixed in 0.9.0**: All invoked via Orchestrator
+- GeminiProvider tool parsing uses regex (still true, works but not formally verified)
+- ~~ExecutionLoop does not poll SteeringManager~~ — **Fixed in 0.9.0**: Polled during execution
+
+## [0.5.0] — 2026-02-10
+
+### Added
+- Initial project scaffolding with spec-first architecture
+- Tier 1 (Foundation) implementation complete
+- Tier 2 (Intelligence) implementation substantially complete
+- v0.5 specifications and onboarding documentation
+- TOML-based configuration system with deep merge and validation
+- TypeScript strict mode with comprehensive type definitions

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Rich Yaker
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,159 @@
+![Zora Header](specs/v5/assets/zora_lcars_header.png)
+
+# Zora
+
+**An autonomous AI agent that runs on your computer and gets work done.** Give it a task in plain English, and it uses Claude and Gemini to execute multi-step workflows while you focus on other things.
+
+---
+
+![Divider](specs/v5/assets/lcars_divider.svg)
+
+## Install
+
+```bash
+npm i -g zora-agent
+zora-agent init
+zora-agent ask "summarize files in ~/Projects"
+```
+
+That's it. Three commands from zero to productive.
+
+---
+
+![Divider](specs/v5/assets/lcars_divider.svg)
+
+## What It Can Do
+
+🚀 **Multi-Model with Automatic Failover** — Claude (Opus/Sonnet/Haiku), Gemini, and Ollama (local models). Pick the right model per task — Opus for hard problems, Haiku for cheap content, Ollama for zero-cost local work. Use `--max-cost-tier` to cap routing by cost budget. Failover is automatic.
+
+🛡️ **Policy-Enforced Autonomy** — Work freely within boundaries you define. The security engine enforces strict allow/deny rules for filesystem, shell, and network with action budgets, dry-run preview mode, and intent verification. [OWASP LLM Top 10 and Agentic Top 10 hardened](SECURITY.md).
+
+🧠 **Hierarchical Memory** — Zora remembers your preferences, past work, and project context across sessions. Long-term memory + daily rolling notes.
+
+🕹️ **Web Dashboard** — A local web interface for monitoring tasks, viewing provider status and quota usage, and injecting course-corrections into running workflows. Live metrics via SSE, auto-opens on `zora-agent start`.
+
+⏰ **Scheduled Routines** — Define recurring tasks in TOML that run automatically — daily reports, weekly cleanups, nightly code reviews. Supports `model_preference` and `max_cost_tier` per routine. Trigger manually with `RoutineManager.runRoutine()`.
+
+🔄 **Persistent Retry Queue** — Failed tasks are persisted to disk and retried with intelligent backoff. Resilient to transient errors.
+
+### Real Examples
+
+- **File organization** — `zora-agent ask "Sort ~/Downloads by project and archive older than 30 days"`
+- **Code review** — `zora-agent ask "Check all PRs in my repos and comment on style issues"`
+- **Email drafting** — `zora-agent ask "Draft replies to unread emails about the product launch"`
+- **Git management** — `zora-agent ask "Create feature branches from all open issues labeled 'sprint-12'"`
+- **Web research** — `zora-agent ask "Find and summarize the latest React 19 migration guides"`
+- **Multi-step workflows** — `zora-agent ask "Find all TODOs in my project, create a summary, and open a GitHub issue with it."`
+
+---
+
+![Divider](specs/v5/assets/lcars_divider.svg)
+
+## How Security Works
+
+Zora operates within strict boundaries you define. A policy file (`~/.zora/policy.toml`) specifies allowed filesystem paths, shell commands, and network access. The agent self-corrects when it hits policy limits — no data leaves your machine except API calls to Claude/Gemini. Every action is logged to a tamper-proof audit trail.
+
+**Security Hardening** — Audited against OWASP LLM Top 10 (2025) and OWASP Agentic Top 10 (ASI-2026):
+
+| Defense | What It Does |
+|---------|-------------|
+| **Action Budgets** | Per-session limits on tool invocations and token spend prevent unbounded loops |
+| **Dry-Run Mode** | Preview write operations without executing — test policies safely |
+| **Intent Capsules** | HMAC-SHA256 signed mandates detect goal hijacking from injected instructions |
+| **RAG Injection Defense** | 20+ patterns detect prompt injection in tool outputs and RAG documents |
+| **Hash-Chain Audit** | SHA-256 chained append-only log with tamper detection |
+| **AES-256-GCM Secrets** | Encrypted credential storage with PBKDF2 key derivation |
+
+See **[SECURITY.md](SECURITY.md)** for the full security guide and OWASP compliance matrix.
+
+---
+
+![Divider](specs/v5/assets/lcars_divider.svg)
+
+## Architecture
+
+```
+┌─────────────────────────────────────────────────┐
+│                ORCHESTRATOR CORE                │
+│  Router → Execution Loop → Failover Controller  │
+│         Retry Queue  │  Session Manager         │
+├─────────────────────────────────────────────────┤
+│             LLM PROVIDER REGISTRY               │
+│  Claude Opus/Sonnet/Haiku  │  Gemini  │  Ollama │
+│  Agent SDK (Native)   CLI (Sub)   REST (Local)  │
+├─────────────────────────────────────────────────┤
+│  Tools      │  Memory         │  Security       │
+│  Shell      │  MEMORY.md      │  Policy Engine  │
+│  Filesystem │  Daily Notes    │  Audit Log      │
+│  Web        │  Context Loader │  Restrictive FS │
+└─────────────────────────────────────────────────┘
+```
+
+---
+
+![Divider](specs/v5/assets/lcars_divider.svg)
+
+## Project Status
+
+Zora is in active development (v0.9.0). This table reflects what actually works today.
+
+| Component | Status |
+|-----------|--------|
+| Multi-model orchestration (Claude Opus/Sonnet/Haiku + Gemini + Ollama) | ✅ Working |
+| Automatic failover on quota/auth errors | ✅ Working |
+| Policy-based security engine (path + command enforcement) | ✅ Working |
+| Action budgets (per-session + per-type limits) | ✅ Working |
+| Dry-run preview mode (test without executing) | ✅ Working |
+| Intent capsules (HMAC-SHA256 goal drift detection) | ✅ Working |
+| RAG/tool-output injection defense (20+ patterns) | ✅ Working |
+| Policy-aware agent (checks permissions before acting) | ✅ Working |
+| SOUL.md personality loading | ✅ Working |
+| Hierarchical memory (long-term + daily notes) | ✅ Working |
+| Scheduled routines via cron | ✅ Working |
+| Web dashboard with live SSE feed, task submission, and onboarding | ✅ Working |
+| Provider quota/usage tracking in dashboard | ✅ Working |
+| Cost-aware routing via `--max-cost-tier` | ✅ Working |
+| Manual routine execution (`runRoutine()`) | ✅ Working |
+| Persistent retry queue with backoff | ✅ Working |
+| Docker containerization for integration testing | ✅ Working |
+| Interactive approval for flagged actions (`always_flag`) | 🚧 Config parsed, enforcement in progress |
+| Runtime permission expansion (grant access mid-task) | 🚧 Planned |
+| Cross-platform support (macOS, Linux, Windows) | 🚧 macOS tested, others in progress |
+
+---
+
+![Divider](specs/v5/assets/lcars_divider.svg)
+
+## Dashboard
+
+After starting the agent, the dashboard auto-opens at `http://localhost:7070`. Submit tasks, monitor live progress via SSE, view provider quota/usage, and send course-corrections to running jobs. First-time users see a guided onboarding screen with quick-start examples.
+
+New to Zora? Use our **[AI Setup Assistant](docs/AI_SETUP_ASSISTANT.md)** — paste the prompt into any AI chatbot (ChatGPT, Claude, Gemini) for a guided walkthrough of installation and configuration.
+
+---
+
+![Divider](specs/v5/assets/lcars_divider.svg)
+
+## Documentation
+
+| Document | Description |
+|----------|-------------|
+| **[QUICKSTART.md](QUICKSTART.md)** | Get up and running in 5 minutes |
+| **[USE_CASES.md](USE_CASES.md)** | Real-world examples and workflow patterns |
+| **[SECURITY.md](SECURITY.md)** | Policy configuration and audit logging |
+| **[ROUTINES_COOKBOOK.md](ROUTINES_COOKBOOK.md)** | Recipes for scheduled tasks |
+| **[SETUP_GUIDE.md](SETUP_GUIDE.md)** | Detailed installation and configuration |
+| **[docs/BEGINNERS_GUIDE.md](docs/BEGINNERS_GUIDE.md)** | In-depth usage guide |
+| **[docs/AI_SETUP_ASSISTANT.md](docs/AI_SETUP_ASSISTANT.md)** | Interactive AI-guided setup |
+
+## Contributing
+
+Contributions are welcome. Open an issue to discuss features or bugs before submitting a PR.
+
+## License
+
+MIT License - see [LICENSE](LICENSE) for details.
+
+---
+
+*Local first. Works for you.*

package/dist/cli/audit-commands.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Audit CLI Commands — view and verify the audit log.
+ *
+ * Spec §5.9 "CLI Interface" — audit subcommand.
+ */
+import type { Command } from 'commander';
+export declare function registerAuditCommands(program: Command, getAuditLogPath: () => string): void;
+//# sourceMappingURL=audit-commands.d.ts.map

package/dist/cli/audit-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-commands.d.ts","sourceRoot":"","sources":["../../src/cli/audit-commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBzC,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,EAChB,eAAe,EAAE,MAAM,MAAM,GAC5B,IAAI,CA6CN"}

package/dist/cli/audit-commands.js

@@ -0,0 +1,67 @@
+/**
+ * Audit CLI Commands — view and verify the audit log.
+ *
+ * Spec §5.9 "CLI Interface" — audit subcommand.
+ */
+import { AuditLogger } from '../security/audit-logger.js';
+function parseDuration(duration) {
+    const match = /^(\d+)(h|d|m)$/.exec(duration);
+    if (!match)
+        return 24 * 60 * 60 * 1000; // default 24h
+    const value = parseInt(match[1], 10);
+    const unit = match[2];
+    switch (unit) {
+        case 'm':
+            return value * 60 * 1000;
+        case 'h':
+            return value * 60 * 60 * 1000;
+        case 'd':
+            return value * 24 * 60 * 60 * 1000;
+        default:
+            return 24 * 60 * 60 * 1000;
+    }
+}
+export function registerAuditCommands(program, getAuditLogPath) {
+    program
+        .command('audit')
+        .description('View the audit log')
+        .option('--last <duration>', 'Time window (e.g., 24h, 7d)', '24h')
+        .option('--job <jobId>', 'Filter by job ID')
+        .option('--type <eventType>', 'Filter by event type')
+        .option('--verify', 'Verify hash chain integrity')
+        .action(async (opts) => {
+        const logger = new AuditLogger(getAuditLogPath());
+        if (opts.verify) {
+            const result = await logger.verifyChain();
+            if (result.valid) {
+                console.log(`Audit chain verified: ${result.entries} entries, all valid.`);
+            }
+            else {
+                console.error(`Audit chain BROKEN at entry ${result.brokenAt}: ${result.reason}`);
+                process.exitCode = 1;
+            }
+            return;
+        }
+        const durationMs = parseDuration(opts.last);
+        const startTime = new Date(Date.now() - durationMs).toISOString();
+        const filter = { startTime };
+        if (opts.job)
+            filter.jobId = opts.job;
+        if (opts.type)
+            filter.eventType = opts.type;
+        const entries = await logger.readEntries(filter);
+        if (entries.length === 0) {
+            console.log('No audit entries found for the given filters.');
+            return;
+        }
+        console.log(`${entries.length} audit entries:\n`);
+        for (const entry of entries) {
+            console.log(`  [${entry.entryId}] ${entry.eventType} — job=${entry.jobId} at ${entry.timestamp}`);
+            if (entry.toolName) {
+                console.log(`    tool: ${entry.toolName}`);
+            }
+            console.log();
+        }
+    });
+}
+//# sourceMappingURL=audit-commands.js.map

package/dist/cli/audit-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-commands.js","sourceRoot":"","sources":["../../src/cli/audit-commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAG1D,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,cAAc;IAEtD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACvB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,GAAG;YACN,OAAO,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC;QAC3B,KAAK,GAAG;YACN,OAAO,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAChC,KAAK,GAAG;YACN,OAAO,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACrC;YACE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAgB,EAChB,eAA6B;IAE7B,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,oBAAoB,CAAC;SACjC,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,EAAE,KAAK,CAAC;SACjE,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC;SAC3C,MAAM,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;SACpD,MAAM,CAAC,UAAU,EAAE,6BAA6B,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,IAAqE,EAAE,EAAE;QACtF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC,CAAC;QAElD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;YAC7E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,+BAA+B,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QAElE,MAAM,MAAM,GAAgB,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,GAAG;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,IAAgC,CAAC;QAExE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,UAAU,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAClG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/daemon.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+/**
+ * Zora Daemon — Background process that runs the Orchestrator and Dashboard.
+ *
+ * Launched by `zora-agent start` via child_process.fork().
+ * Handles SIGTERM/SIGINT for graceful shutdown.
+ */
+export {};
+//# sourceMappingURL=daemon.d.ts.map

package/dist/cli/daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../src/cli/daemon.ts"],"names":[],"mappings":";AACA;;;;;GAKG"}

package/dist/cli/daemon.js

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+/**
+ * Zora Daemon — Background process that runs the Orchestrator and Dashboard.
+ *
+ * Launched by `zora-agent start` via child_process.fork().
+ * Handles SIGTERM/SIGINT for graceful shutdown.
+ */
+import path from 'node:path';
+import os from 'node:os';
+import fs from 'node:fs';
+import { loadConfig } from '../config/loader.js';
+import { Orchestrator } from '../orchestrator/orchestrator.js';
+import { DashboardServer } from '../dashboard/server.js';
+import { ClaudeProvider } from '../providers/claude-provider.js';
+import { GeminiProvider } from '../providers/gemini-provider.js';
+import { OllamaProvider } from '../providers/ollama-provider.js';
+function createProviders(config) {
+    const providers = [];
+    for (const pConfig of config.providers) {
+        if (!pConfig.enabled)
+            continue;
+        switch (pConfig.type) {
+            case 'claude-sdk':
+                providers.push(new ClaudeProvider({ config: pConfig }));
+                break;
+            case 'gemini-cli':
+                providers.push(new GeminiProvider({ config: pConfig }));
+                break;
+            case 'ollama':
+                providers.push(new OllamaProvider({ config: pConfig }));
+                break;
+        }
+    }
+    return providers;
+}
+async function main() {
+    const configDir = path.join(os.homedir(), '.zora');
+    const configPath = path.join(configDir, 'config.toml');
+    const policyPath = path.join(configDir, 'policy.toml');
+    if (!fs.existsSync(configPath)) {
+        console.error('Config not found. Run `zora-agent init` first.');
+        process.exit(1);
+    }
+    const config = await loadConfig(configPath);
+    // Load policy from TOML using centralized loader
+    const { loadPolicy } = await import('../config/policy-loader.js');
+    let policy;
+    try {
+        policy = await loadPolicy(policyPath);
+    }
+    catch {
+        console.error('Policy not found at ~/.zora/policy.toml. Run `zora-agent init` first.');
+        process.exit(1);
+    }
+    const providers = createProviders(config);
+    const orchestrator = new Orchestrator({ config, policy, providers });
+    await orchestrator.boot();
+    // Start dashboard server
+    const dashboard = new DashboardServer({
+        providers,
+        sessionManager: orchestrator.sessionManager,
+        steeringManager: orchestrator.steeringManager,
+        authMonitor: orchestrator.authMonitor,
+        submitTask: async (prompt) => {
+            // Generate jobId immediately and kick off task in background (don't await)
+            const jobId = `job_${Date.now()}_${Math.random().toString(36).slice(2, 9)}`;
+            orchestrator.submitTask({ prompt, jobId, onEvent: (event) => {
+                    dashboard.broadcastEvent({ type: event.type, data: event.content });
+                } }).catch(err => {
+                console.error(`[Daemon] Task ${jobId} failed:`, err);
+                dashboard.broadcastEvent({ type: 'job_failed', data: { jobId, error: err instanceof Error ? err.message : String(err) } });
+            });
+            return jobId;
+        },
+        port: config.steering.dashboard_port ?? 7070,
+        host: process.env.ZORA_BIND_HOST,
+    });
+    await dashboard.start();
+    console.log('[Daemon] Zora daemon is running.');
+    // Graceful shutdown handler
+    const shutdown = async (signal) => {
+        console.log(`[Daemon] Received ${signal}, shutting down...`);
+        try {
+            await dashboard.stop();
+            await orchestrator.shutdown();
+        }
+        catch (err) {
+            console.error(`[Daemon] Error during shutdown:`, err instanceof Error ? err.message : String(err));
+        }
+        // Remove pidfile
+        const pidFile = path.join(configDir, 'state', 'daemon.pid');
+        try {
+            fs.unlinkSync(pidFile);
+        }
+        catch {
+            // Already removed
+        }
+        process.exit(0);
+    };
+    process.on('SIGTERM', () => { shutdown('SIGTERM').catch(err => { console.error('[Daemon] Shutdown error:', err); process.exit(1); }); });
+    process.on('SIGINT', () => { shutdown('SIGINT').catch(err => { console.error('[Daemon] Shutdown error:', err); process.exit(1); }); });
+}
+main().catch((err) => {
+    console.error('[Daemon] Fatal error:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=daemon.js.map

package/dist/cli/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../../src/cli/daemon.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE,SAAS,eAAe,CAAC,MAAkB;IACzC,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,SAAS;QAC/B,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,YAAY;gBACf,SAAS,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM;YACR,KAAK,YAAY;gBACf,SAAS,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM;YACR,KAAK,QAAQ;gBACX,SAAS,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAEvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAE5C,iDAAiD;IACjD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAClE,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;IAE1B,yBAAyB;IACzB,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,SAAS;QACT,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,eAAe,EAAE,YAAY,CAAC,eAAe;QAC7C,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,UAAU,EAAE,KAAK,EAAE,MAAc,EAAE,EAAE;YACnC,2EAA2E;YAC3E,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC5E,YAAY,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC1D,SAAS,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACf,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,UAAU,EAAE,GAAG,CAAC,CAAC;gBACrD,SAAS,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7H,CAAC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc,IAAI,IAAI;QAC5C,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;KACjC,CAAC,CAAC;IACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IAExB,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAEhD,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YACvB,MAAM,YAAY,CAAC,QAAQ,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrG,CAAC;QAED,iBAAiB;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzI,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzI,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cli/doctor.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Doctor Checks — detect available providers and tools.
+ *
+ * Reusable by `zora-agent init` and a future `zora-agent doctor` command.
+ */
+export interface DoctorResult {
+    node: {
+        found: boolean;
+        version: string;
+    };
+    claude: {
+        found: boolean;
+        path: string | null;
+    };
+    gemini: {
+        found: boolean;
+        path: string | null;
+    };
+}
+export declare function runDoctorChecks(): Promise<DoctorResult>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/cli/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,MAAM,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAChD,MAAM,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACjD;AAWD,wBAAsB,eAAe,IAAI,OAAO,CAAC,YAAY,CAAC,CAc7D"}

package/dist/cli/doctor.js

@@ -0,0 +1,31 @@
+/**
+ * Doctor Checks — detect available providers and tools.
+ *
+ * Reusable by `zora-agent init` and a future `zora-agent doctor` command.
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+async function whichCommand(cmd) {
+    try {
+        const { stdout } = await execFileAsync('which', [cmd]);
+        return stdout.trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function runDoctorChecks() {
+    const [claudePath, geminiPath] = await Promise.all([
+        whichCommand('claude'),
+        whichCommand('gemini'),
+    ]);
+    const nodeVersion = process.version; // e.g. "v20.11.0"
+    const nodeMajor = parseInt(nodeVersion.slice(1), 10);
+    return {
+        node: { found: nodeMajor >= 20, version: nodeVersion },
+        claude: { found: claudePath !== null, path: claudePath },
+        gemini: { found: geminiPath !== null, path: geminiPath },
+    };
+}
+//# sourceMappingURL=doctor.js.map

package/dist/cli/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAQ1C,KAAK,UAAU,YAAY,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,YAAY,CAAC,QAAQ,CAAC;QACtB,YAAY,CAAC,QAAQ,CAAC;KACvB,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,kBAAkB;IACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAErD,OAAO;QACL,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;QACtD,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,KAAK,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QACxD,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,KAAK,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;KACzD,CAAC;AACJ,CAAC"}

package/dist/cli/edit-commands.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Edit CLI Commands — open human-protected config files in $EDITOR.
+ *
+ * Spec §5.9 "CLI Interface" — config/policy/soul/memory edit subcommands.
+ */
+import type { Command } from 'commander';
+export declare function registerEditCommands(program: Command, configDir: string): void;
+//# sourceMappingURL=edit-commands.d.ts.map

package/dist/cli/edit-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit-commands.d.ts","sourceRoot":"","sources":["../../src/cli/edit-commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWzC,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,GAChB,IAAI,CAmCN"}