@cognisphere-sh/cognisphere-harness 0.12.0 → 0.13.0

package/CHANGELOG.md

@@ -13,11 +13,66 @@ whose entries follow the form:
 
 The skill collects every section in `(current, target]`, proposes a diff against
 the harness directory, and applies it after user approval. See
-[`docs/distribution-and-deployment.md`](docs/distribution-and-deployment.md) §9.
+[CLI upgrades](docs/low-level/cli.md#upgrades).
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/) and this
 project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.13.0]
+
+### Breaking changes
+
+- **Published to npmjs.org; no install token.** `@cognisphere-sh/*` packages
+  now come from the public npm registry instead of GitHub Packages. Delete the
+  `@cognisphere-sh:registry=https://npm.pkg.github.com` line from the home's
+  `.npmrc` (delete the file if nothing else is in it), or installs keep asking
+  GitHub Packages, which has no 0.13.0. `COGNISPHERE_NPM_TOKEN` and the
+  `npm.pkg.github.com/:_authToken` line in `~/.npmrc` are no longer used and
+  can be removed. [affects: .npmrc]
+
+- **Each harness has its own Pi config folder.** The server sets
+  `PI_CODING_AGENT_DIR` to `harness/.secrets/pi/`, so Pi's `auth.json`,
+  `models.json` and `settings.json` no longer live in the run user's
+  `~/.pi/agent`. Subscription sign-ins (Claude Pro/Max, Codex, ChatGPT) must
+  be connected again once from the Models page; they are not copied, because
+  two copies of a rotating refresh token sign each other out. Hand-written
+  settings in `~/.pi/agent` no longer apply to the harness. Pi also starts
+  with `--no-approve`, so an agent folder's `.pi/` files are never loaded.
+  [affects: .secrets/pi/]
+
+### Changed
+
+- Deploy scripts no longer need a GitHub token: `setup-server.sh` and
+  `build.sh` drop the `read:packages` checks and the `~/.npmrc` token line,
+  `remote-bootstrap.sh` logs `gh` in only to clone the repo, the systemd units
+  drop `COGNISPHERE_NPM_TOKEN`, and `config.example` drops the key
+  (refreshed wholesale on upgrade).
+- `init` no longer writes a `.npmrc` into new homes.
+- **Pi upgraded to 0.99.2** (`@earendil-works/pi-ai` and
+  `@earendil-works/pi-coding-agent`, pinned exactly). The runner now spawns
+  the `pi` bundled with the harness package instead of a global `pi` on
+  `PATH`, so the binary always matches the pinned version. Requires Node
+  `>=22.19.0` (as Pi already did).
+- `bootstrap.sh` no longer installs a global `pi` or reads `PI_VERSION`.
+  Existing agents' copies still do; that step is now unused and can be
+  dropped when reseeding. [affects: agents/*/bootstrap/bootstrap.sh]
+- A batch now ends when Pi reports `agent_settled` instead of `agent_end`, so
+  Pi's own retries (up to 3, backoff capped at 60 s), context-overflow
+  recovery and late follow-ups run inside the same batch. Queue retries
+  still apply after that.
+- Delivery receipts are saved in the session file as `cognisphere.delivery`
+  custom entries (outside the model's context) and reported over RPC as
+  `entry_appended`. Inputs an extension `handled` are marked done.
+- `context-meta` extension: the per-call `Model:` / `ContextUsage:` lines now
+  reach the model. They were dropped because the last message before each
+  call is the extension's own checkpoint, which the hook skipped. Reseed the
+  base extension. [affects: agents/*/extensions/context-meta.ts]
+- Models page: Sign in with ChatGPT on the OpenAI provider; OpenAI Codex is
+  now labelled "(legacy)"; curated model lists refreshed to models that exist
+  in Pi 0.99.2 (Claude Opus/Sonnet 5.5, GPT-6.x, Gemini 3.x, Grok 4.7, …).
+- `home-template/docs/base-harness/README.md`: bootstrap no longer pins `pi`;
+  new sign-in providers (refreshed wholesale on upgrade).
+
 ## [0.12.0]
 
 ### Breaking changes
@@ -46,8 +101,8 @@ project adheres to [Semantic Versioning](https://semver.org/).
 
 ### Changed
 
-- `docs/api.md` §1/§3, `docs/server.md` §3 and
-  `docs/distribution-and-deployment.md` document the app bearer,
+- `docs/low-level/api.md` §1/§3, `docs/low-level/agents.md#persistent-layout` and
+  `docs/low-level/cli.md` document the app bearer,
   `.secrets/app-secret`, and the new `app/.env.local` keys. The upgrade
   skill now refreshes `app/auth-routes/` and drift-checks the home's copies.
 
@@ -94,7 +149,7 @@ project adheres to [Semantic Versioning](https://semver.org/).
   60 s ack timeout then failed the batch repeatedly. `PiRpcClient` now
   suspends pending frame timeouts on `compaction_start` and re-arms them on
   `compaction_end`, and logs both at info with `reason` and
-  `tokensBefore` / `estimatedTokensAfter` (`docs/server.md` §4.7).
+  `tokensBefore` / `estimatedTokensAfter` (`docs/low-level/core.md#execution-and-example`).
 
 ## [0.11.0]
 
@@ -382,7 +437,7 @@ project adheres to [Semantic Versioning](https://semver.org/).
   procedure moved into a plugin-owned skill: `plugin-gws.md` 204 → 50 lines,
   `plugin-telegram.md` 75 → 48. A fragment costs every turn of every thread; a
   skill costs one description line until an agent needs it.
-- `docs/server.md`, `docs/base-harness/skills.md` and the `create-plugin` skill
+- `docs/low-level/agents.md`, `docs/base-harness/skills.md` and the `create-plugin` skill
   (v1.3.0) document the 50-line budget and what belongs in a fragment
   (identity, event shape, always-on rules) versus a skill. Both scaffold trees
   are refreshed wholesale by the upgrade skill.
@@ -450,9 +505,9 @@ project adheres to [Semantic Versioning](https://semver.org/).
 - **`create-skill` 1.2.0**, **`publish-harness` 1.1.0** — descriptions gained
   situational triggers; `publish-harness` also covers the new-plugin case of
   the shipped-artifact rule and deploy-time wiring notes.
-- Docs: `docs/api.md` §10 (artifact routes + header contract),
-  `docs/server.md` (plugin list, plugin-shipped skills),
-  `docs/distribution-and-deployment.md` §5 (deploy-time wiring),
+- Docs: `docs/low-level/api.md` §10 (artifact routes + header contract),
+  `docs/low-level/plugins.md` (plugin list, plugin-shipped skills),
+  `docs/low-level/cli.md#server-deployment` (deploy-time wiring),
   `docs/base-harness/README.md`, `app/README.md`.
 
 ### Breaking changes
@@ -548,7 +603,7 @@ project adheres to [Semantic Versioning](https://semver.org/).
   the situation/task/result summary.
 - Base-agent seeds updated to match: new `knowledge/index.md` and
   `knowledge/memory.md`, refreshed `workspace/index.md`.
-- Docs updated: `docs/server.md` §3 on-disk tree and the shipped
+- Docs updated: `docs/low-level/agents.md#persistent-layout` on-disk tree and the shipped
   `docs/base-harness/README.md` agent-anatomy list.
 
 ### Breaking changes
@@ -764,7 +819,7 @@ invisible to the agent. Per agent dir:
   Models page until an entry is added.
 - **System-prompt file ownership is now an explicit contract**, taught in
   the base prompt (new "System prompts" section) and documented in
-  `docs/server.md` §3 and the shipped `docs/base-harness/README.md`:
+  `docs/low-level/agents.md#persistent-layout` and the shipped `docs/base-harness/README.md`:
   `0-*` files are harness-owned (replaced by the seed on upgrade;
   `0.1-agent-directory.md` excepted), `plugin-<id>.md` is plugin-owned
   (reseeded on every agent start — edits are clobbered), and `1-agent.md`
@@ -1945,7 +2000,7 @@ sync to adopt the feature; old copies keep working untouched.)*
   in the monorepo, the Vite dev server (HMR) together (`--port`/`--web-port`/
   `--no-web`); `serve` takes `--port` and `--headless` (mount no web UI —
   backend-only deploy, via `COGNISPHERE_HEADLESS`). See
-  [`docs/distribution-and-deployment.md`](docs/distribution-and-deployment.md) §10.
+  [CLI reference](docs/low-level/cli.md#cli).
 - **Publishable package.** `@cognisphere-sh/cognisphere-harness` ships a `bin`, a
   `files` allowlist, `publishConfig` (GitHub Packages), and a `prepack` step that
   bundles the built web UI (`dist-web/`) and the root `CHANGELOG.md` into the

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CogniSphere contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist-web/assets/{file-editor-CQSmlsy_.js → file-editor-CqGYKmT3.js}

@@ -1,4 +1,4 @@
-import{j as h}from"./radix-DHW5y7jr.js";import{r as G}from"./react-BIlrhC09.js";import{c as mt,L as kO,E as y,a as BO,C as ie,s as F,t as l,b as M,i as ft,d as ht,e as St,f as yO,g as QO,h as La,j as uO,k as $O,l as J,m as ne,n as T,o as se,p as q,q as U,r as gt,N as le,I as oe,P as Aa,u as xO,v as I,T as Ma,w as Pt,x as L,y as Xt,z as Ia,A as Na,B as Ba,D as Da,F as rO,G as Fa,H as Ja,J as Ha,K as Ka,M as Or,O as Ze,Q as er,R as tr,S as ar,U as rr,V as ir,W as nr,X as sr,Y as lr,Z as or,_ as Te,$ as Qr,a0 as ke,a1 as dr,a2 as cr,a3 as pr,a4 as ur,a5 as $r,a6 as ye,a7 as xe,a8 as mr,a9 as fr,aa as hr,ab as Sr}from"./index-1Hg12QW0.js";import"./markdown-sumxz7Eq.js";/**
+import{j as h}from"./radix-DHW5y7jr.js";import{r as G}from"./react-BIlrhC09.js";import{c as mt,L as kO,E as y,a as BO,C as ie,s as F,t as l,b as M,i as ft,d as ht,e as St,f as yO,g as QO,h as La,j as uO,k as $O,l as J,m as ne,n as T,o as se,p as q,q as U,r as gt,N as le,I as oe,P as Aa,u as xO,v as I,T as Ma,w as Pt,x as L,y as Xt,z as Ia,A as Na,B as Ba,D as Da,F as rO,G as Fa,H as Ja,J as Ha,K as Ka,M as Or,O as Ze,Q as er,R as tr,S as ar,U as rr,V as ir,W as nr,X as sr,Y as lr,Z as or,_ as Te,$ as Qr,a0 as ke,a1 as dr,a2 as cr,a3 as pr,a4 as ur,a5 as $r,a6 as ye,a7 as xe,a8 as mr,a9 as fr,aa as hr,ab as Sr}from"./index-CDE-jsH8.js";import"./markdown-sumxz7Eq.js";/**
  * @license lucide-react v0.468.0 - ISC
  *
  * This source code is licensed under the ISC license.