zora-agent 0.9.4 → 0.9.6

package/dist/utils/logger.d.ts

@@ -1,43 +1,40 @@
 /**
- * Logger — Structured JSON logging with file rotation.
+ * Logger — Structured logging with pino.
  *
- * Remediation R23: Replace scattered console.* calls with structured logging.
- *   - JSON-formatted log entries with timestamp, level, message, metadata
- *   - File rotation by size (default 10MB, keep 5 rotated files)
- *   - Configurable log level
+ * OPS-05 / LOG-01: Replace ad-hoc console.log with structured pino logger.
+ *   - JSON output in production, pretty-print in development
+ *   - Child loggers with module context
+ *   - Log levels configurable via config.toml log_level
+ *   - File transport via pino (optional)
  */
-export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+import pino from 'pino';
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'fatal';
 export interface LoggerOptions {
     level?: LogLevel;
-    logDir?: string;
-    logFile?: string;
-    maxFileSize?: number;
-    maxFiles?: number;
-    enableConsole?: boolean;
-    enableFile?: boolean;
+    /** Module name for child logger context */
+    module?: string;
+    /** Enable pretty printing (auto-detected from NODE_ENV if unset) */
+    pretty?: boolean;
 }
-export interface LogEntry {
-    timestamp: string;
-    level: LogLevel;
-    message: string;
-    meta?: Record<string, unknown>;
-}
-export declare class Logger {
-    private readonly _level;
-    private readonly _logFilePath;
-    private readonly _maxFileSize;
-    private readonly _maxFiles;
-    private readonly _enableConsole;
-    private readonly _enableFile;
-    constructor(options?: LoggerOptions);
-    debug(message: string, meta?: Record<string, unknown>): void;
-    info(message: string, meta?: Record<string, unknown>): void;
-    warn(message: string, meta?: Record<string, unknown>): void;
-    error(message: string, meta?: Record<string, unknown>): void;
-    private _log;
-    private _writeToFile;
-    private _rotate;
-}
-export declare function getLogger(options?: LoggerOptions): Logger;
-export declare function setDefaultLogger(logger: Logger): void;
+/**
+ * Initialize the root logger. Call once at startup with the config log_level.
+ * Subsequent calls are no-ops unless force=true.
+ */
+export declare function initLogger(options?: LoggerOptions, force?: boolean): pino.Logger;
+/**
+ * Get a child logger for a specific module.
+ * If the root logger hasn't been initialized, initializes with defaults.
+ */
+export declare function getLogger(module?: string): pino.Logger;
+/**
+ * Factory: create a child logger scoped to a module name.
+ * Alias for getLogger(moduleName).
+ */
+export declare const createLogger: typeof getLogger;
+/** Default root logger instance. */
+export declare const logger: pino.Logger<never, boolean>;
+/**
+ * Reset the root logger (for testing).
+ */
+export declare function resetLogger(): void;
 //# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAS3D,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;gBAE1B,OAAO,GAAE,aAAkB;IAkBvC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI5D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI3D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI3D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI5D,OAAO,CAAC,IAAI;IA8BZ,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,OAAO;CA2BhB;AAKD,wBAAgB,SAAS,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAKzD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAErD"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAErE,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAaD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,aAAkB,EAAE,KAAK,UAAQ,GAAG,IAAI,CAAC,MAAM,CAyBlF;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAMtD;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,kBAAY,CAAC;AAEtC,oCAAoC;AACpC,eAAO,MAAM,MAAM,6BAAc,CAAC;AAElC;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAElC"}

package/dist/utils/logger.js

@@ -1,139 +1,69 @@
 /**
- * Logger — Structured JSON logging with file rotation.
+ * Logger — Structured logging with pino.
  *
- * Remediation R23: Replace scattered console.* calls with structured logging.
- *   - JSON-formatted log entries with timestamp, level, message, metadata
- *   - File rotation by size (default 10MB, keep 5 rotated files)
- *   - Configurable log level
+ * OPS-05 / LOG-01: Replace ad-hoc console.log with structured pino logger.
+ *   - JSON output in production, pretty-print in development
+ *   - Child loggers with module context
+ *   - Log levels configurable via config.toml log_level
+ *   - File transport via pino (optional)
  */
-import fs from 'node:fs';
-import path from 'node:path';
-import os from 'node:os';
-const LOG_LEVELS = {
-    debug: 0,
-    info: 1,
-    warn: 2,
-    error: 3,
-};
-export class Logger {
-    _level;
-    _logFilePath;
-    _maxFileSize;
-    _maxFiles;
-    _enableConsole;
-    _enableFile;
-    constructor(options = {}) {
-        this._level = LOG_LEVELS[options.level ?? 'info'];
-        const logDir = options.logDir ?? path.join(os.homedir(), '.zora', 'logs');
-        this._logFilePath = options.logFile ?? path.join(logDir, 'zora.log');
-        this._maxFileSize = options.maxFileSize ?? 10 * 1024 * 1024; // 10MB
-        this._maxFiles = options.maxFiles ?? 5;
-        this._enableConsole = options.enableConsole ?? true;
-        this._enableFile = options.enableFile ?? true;
-        if (this._enableFile) {
-            try {
-                fs.mkdirSync(path.dirname(this._logFilePath), { recursive: true, mode: 0o700 });
-            }
-            catch {
-                // Directory may already exist
-            }
-        }
-    }
-    debug(message, meta) {
-        this._log('debug', message, meta);
-    }
-    info(message, meta) {
-        this._log('info', message, meta);
-    }
-    warn(message, meta) {
-        this._log('warn', message, meta);
-    }
-    error(message, meta) {
-        this._log('error', message, meta);
-    }
-    _log(level, message, meta) {
-        if (LOG_LEVELS[level] < this._level)
-            return;
-        const entry = {
-            timestamp: new Date().toISOString(),
-            level,
-            message,
-            ...(meta && Object.keys(meta).length > 0 ? { meta } : {}),
-        };
-        const line = JSON.stringify(entry);
-        if (this._enableConsole) {
-            switch (level) {
-                case 'error':
-                    console.error(line);
-                    break;
-                case 'warn':
-                    console.warn(line);
-                    break;
-                default:
-                    console.log(line);
-            }
-        }
-        if (this._enableFile) {
-            this._writeToFile(line);
-        }
-    }
-    _writeToFile(line) {
-        try {
-            // Check if rotation is needed
-            try {
-                const stats = fs.statSync(this._logFilePath);
-                if (stats.size >= this._maxFileSize) {
-                    this._rotate();
-                }
-            }
-            catch {
-                // File doesn't exist yet, no rotation needed
-            }
-            fs.appendFileSync(this._logFilePath, line + '\n', { mode: 0o600 });
-        }
-        catch (err) {
-            // If we can't write to the log file, fall back to stderr
-            console.error(`[Logger] Failed to write to log file: ${err instanceof Error ? err.message : String(err)}`);
-        }
-    }
-    _rotate() {
-        try {
-            // Remove oldest rotated file
-            const oldest = `${this._logFilePath}.${this._maxFiles}`;
-            try {
-                fs.unlinkSync(oldest);
-            }
-            catch {
-                // File may not exist
-            }
-            // Shift existing rotated files
-            for (let i = this._maxFiles - 1; i >= 1; i--) {
-                const from = `${this._logFilePath}.${i}`;
-                const to = `${this._logFilePath}.${i + 1}`;
-                try {
-                    fs.renameSync(from, to);
-                }
-                catch {
-                    // File may not exist
-                }
-            }
-            // Rotate current file
-            fs.renameSync(this._logFilePath, `${this._logFilePath}.1`);
-        }
-        catch (err) {
-            console.error(`[Logger] Failed to rotate log files: ${err instanceof Error ? err.message : String(err)}`);
+import pino from 'pino';
+// Detect if we should pretty-print: dev mode or TTY
+function shouldPrettyPrint() {
+    return (process.env.NODE_ENV !== 'production' &&
+        process.env.ZORA_LOG_FORMAT !== 'json' &&
+        (process.stdout.isTTY === true || process.env.ZORA_LOG_PRETTY === '1'));
+}
+let _rootLogger = null;
+/**
+ * Initialize the root logger. Call once at startup with the config log_level.
+ * Subsequent calls are no-ops unless force=true.
+ */
+export function initLogger(options = {}, force = false) {
+    if (_rootLogger && !force)
+        return _rootLogger;
+    const level = options.level ?? process.env.ZORA_LOG_LEVEL ?? 'info';
+    const pretty = options.pretty ?? shouldPrettyPrint();
+    const transport = pretty
+        ? {
+            target: 'pino-pretty',
+            options: {
+                colorize: true,
+                translateTime: 'SYS:HH:MM:ss.l',
+                ignore: 'pid,hostname',
+            },
         }
-    }
+        : undefined;
+    _rootLogger = pino({
+        level,
+        ...(transport ? { transport } : {}),
+        base: { name: 'zora' },
+        timestamp: pino.stdTimeFunctions.isoTime,
+    });
+    return _rootLogger;
 }
-// Default global logger instance
-let _defaultLogger = null;
-export function getLogger(options) {
-    if (!_defaultLogger) {
-        _defaultLogger = new Logger(options);
+/**
+ * Get a child logger for a specific module.
+ * If the root logger hasn't been initialized, initializes with defaults.
+ */
+export function getLogger(module) {
+    const root = _rootLogger ?? initLogger();
+    if (module) {
+        return root.child({ module });
     }
-    return _defaultLogger;
+    return root;
 }
-export function setDefaultLogger(logger) {
-    _defaultLogger = logger;
+/**
+ * Factory: create a child logger scoped to a module name.
+ * Alias for getLogger(moduleName).
+ */
+export const createLogger = getLogger;
+/** Default root logger instance. */
+export const logger = getLogger();
+/**
+ * Reset the root logger (for testing).
+ */
+export function resetLogger() {
+    _rootLogger = null;
 }
 //# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAIzB,MAAM,UAAU,GAA6B;IAC3C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAmBF,MAAM,OAAO,MAAM;IACA,MAAM,CAAS;IACf,YAAY,CAAS;IACrB,YAAY,CAAS;IACrB,SAAS,CAAS;IAClB,cAAc,CAAU;IACxB,WAAW,CAAU;IAEtC,YAAY,UAAyB,EAAE;QACrC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;QACpE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QAE9C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClF,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAEO,IAAI,CAAC,KAAe,EAAE,OAAe,EAAE,IAA8B;QAC3E,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM;YAAE,OAAO;QAE5C,MAAM,KAAK,GAAa;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO;YACP,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEnC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,OAAO;oBACV,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACpB,MAAM;gBACR,KAAK,MAAM;oBACT,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnB,MAAM;gBACR;oBACE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,IAAI,CAAC;YACH,8BAA8B;YAC9B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC7C,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;YAED,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yDAAyD;YACzD,OAAO,CAAC,KAAK,CAAC,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,6BAA6B;YAC7B,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACxD,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;YAED,+BAA+B;YAC/B,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;gBACzC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACH,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;YAED,sBAAsB;YACtB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;CACF;AAED,iCAAiC;AACjC,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,MAAM,UAAU,SAAS,CAAC,OAAuB;IAC/C,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,cAAc,GAAG,MAAM,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AAYxB,oDAAoD;AACpD,SAAS,iBAAiB;IACxB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QACrC,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,MAAM;QACtC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC,CACvE,CAAC;AACJ,CAAC;AAED,IAAI,WAAW,GAAuB,IAAI,CAAC;AAE3C;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,UAAyB,EAAE,EAAE,KAAK,GAAG,KAAK;IACnE,IAAI,WAAW,IAAI,CAAC,KAAK;QAAE,OAAO,WAAW,CAAC;IAE9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAK,OAAO,CAAC,GAAG,CAAC,cAA2B,IAAI,MAAM,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAErD,MAAM,SAAS,GAAG,MAAM;QACtB,CAAC,CAAC;YACE,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,gBAAgB;gBAC/B,MAAM,EAAE,cAAc;aACvB;SACF;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,WAAW,GAAG,IAAI,CAAC;QACjB,KAAK;QACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACtB,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;KACzC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,MAAe;IACvC,MAAM,IAAI,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC;IACzC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAC;AAEtC,oCAAoC;AACpC,MAAM,CAAC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;AAElC;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC"}

package/dist/utils/validate-job-id.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Validates that a jobId is safe for use in file paths.
+ * Only allows alphanumeric characters, hyphens, and underscores.
+ */
+export declare function validateJobId(jobId: string): void;
+//# sourceMappingURL=validate-job-id.d.ts.map

package/dist/utils/validate-job-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-job-id.d.ts","sourceRoot":"","sources":["../../src/utils/validate-job-id.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIjD"}

package/dist/utils/validate-job-id.js

@@ -0,0 +1,10 @@
+/**
+ * Validates that a jobId is safe for use in file paths.
+ * Only allows alphanumeric characters, hyphens, and underscores.
+ */
+export function validateJobId(jobId) {
+    if (!/^[a-zA-Z0-9_-]+$/.test(jobId)) {
+        throw new Error(`Invalid jobId: must contain only alphanumeric characters, hyphens, and underscores`);
+    }
+}
+//# sourceMappingURL=validate-job-id.js.map

package/dist/utils/validate-job-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-job-id.js","sourceRoot":"","sources":["../../src/utils/validate-job-id.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACxG,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zora-agent",
-  "version": "0.9.4",
+  "version": "0.9.6",
   "description": "Long-running autonomous personal AI agent — multi-provider, capability-routed, memory-enriched",
   "type": "module",
   "main": "dist/index.js",
@@ -15,7 +15,10 @@
     "examples"
   ],
   "scripts": {
-    "build": "tsc",
+    "build": "tsc && npm run build:frontend",
+    "build:backend": "tsc",
+    "build:frontend": "cd src/dashboard/frontend && (test -d node_modules || npm ci --ignore-scripts) && npm run build && mkdir -p ../../../dist/dashboard/frontend && cp -r dist ../../../dist/dashboard/frontend/",
+    "install:frontend": "cd src/dashboard/frontend && npm install --ignore-scripts",
     "dev": "tsx src/index.ts",
     "test": "npm run test:unit && npm run test:browser",
     "test:unit": "vitest run",
@@ -48,8 +51,11 @@
     "@clack/prompts": "^1.0.1",
     "commander": "^14.0.3",
     "express": "^4.21.2",
+    "minisearch": "^7.2.0",
     "node-cron": "^4.2.1",
-    "smol-toml": "^1.3.1"
+    "pino": "^10.3.1",
+    "smol-toml": "^1.3.1",
+    "zod": "^4.3.6"
   },
   "peerDependencies": {
     "node-telegram-bot-api": "^0.67.0"
@@ -65,7 +71,10 @@
     "@types/node": "^22.19.11",
     "@types/node-cron": "^3.0.11",
     "@types/node-telegram-bot-api": "^0.64.13",
+    "@types/pino": "^7.0.4",
+    "pino-pretty": "^13.1.3",
     "playwright": "^1.58.2",
+    "supertest": "^7.2.2",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0",
     "vitest": "^3.0.0"