@critiquedotsh/harness 0.1.8 → 0.1.10

package/README.md

@@ -77,6 +77,22 @@ Or skip the TTY and open a local browser UI (still the same author kernel in thi
 critique-code web
 ```
 
+Pair a phone to that same laptop process (Wi-Fi PIN, Slack/Telegram DM, or `--anywhere` with your own tunnel). The kernel never moves to Critique Cloud:
+
+```bash
+critique-code remote
+critique-code remote --slack --anywhere
+critique-code slack
+```
+
+Drive it from the website instead. Open [critique.sh/code](https://critique.sh/code), click **Connect this PC**, then paste the printed code on this machine:
+
+```bash
+critique-code connect K7M2-9QWX
+```
+
+The site is a remote, not a runner: prompts, approvals, and event output relay through critique.sh, but the kernel and every file write stay on this laptop. It needs `critique-code login` (a `crt_` key) so the laptop can claim the code outbound.
+
 Describe the change. Slash lines (`/review`, `/ship`, …) are never sent to the model.
 
 ## What a session does
@@ -99,6 +115,10 @@ Interactive TTY sessions keep **stdout quiet**. Pass `--json` for the session en
 critique-code
 critique-code chat [--intent <text>] [--models provider/model,...] [--cwd <dir>] [--store <dir>] [--voice] [--json]
 critique-code web [--port <n>] [--cwd <dir>] [--store <dir>] [--models ...]
+critique-code remote [--anywhere] [--site] [--slack] [--telegram] [--port <n>] [--cwd <dir>]
+critique-code connect [CODE] [--cwd <dir>]
+critique-code slack [--port <n>] [--cwd <dir>]
+critique-code telegram [--port <n>] [--cwd <dir>]
 critique-code login
 critique-code settings | keys | models
 critique-code review [--depth quick|standard|paranoid] [--focus general,security] [--models ...] [--base <ref>] [--intent <text>] [--cwd <dir>] [--store <dir>]
@@ -114,6 +134,9 @@ critique-code help
 | --- | --- |
 | `critique-code` / `chat` | Interactive author session |
 | `web` | Local browser UI on `127.0.0.1` (same author kernel; no TTY required) |
+| `remote` | Phone pairing to this laptop: LAN PIN, optional `--anywhere` tunnel. Not Critique Cloud. |
+| `connect [CODE]` | Register this PC on critique.sh/code. The website is a remote; the kernel stays here. |
+| `slack` / `telegram` | Outbound bots. DM the agent from those apps; the kernel stays in this process. |
 | `login` | Browser device approval; connect Critique Inference |
 | `settings` / `keys` / `models` | TUI for route, stored keys, and model ids |
 | `review` | Evidence harness (JSON on stdout) |
@@ -137,6 +160,8 @@ critique-code help
 | `--voice` | Start the author session in voice mode |
 | `--json` | Print the session envelope on stdout even on a TTY |
 | `--port <n>` | Loopback port for `critique-code web` (`0` = ephemeral) |
+| `--anywhere` | For `remote`: publish an outbound `cloudflared` or `ngrok` URL. Still this laptop. |
+| `--slack` / `--telegram` | Attach those portals to `web` / `remote` |
 | `-h` / `help` | Help |
 
 `critique-code review` is read-only. Use `critique-code repair <review-run-id>` for explicit repair. `--repair apply` on `review` is rejected.
@@ -149,6 +174,9 @@ Type `/` or `/help` for a selectable picker. **Lines that start with `/` never g
 | --- | --- |
 | `/` `/help` | Picker / help |
 | `/login` | Connect Critique Inference in the browser |
+| `/remote` | Pair a phone; this laptop stays the agent |
+| `/slack` | Attach Slack Socket Mode |
+| `/telegram` | Attach a Telegram bot |
 | `/voice` | Record one spoken prompt (Qwen3 ASR) |
 | `/voice on` | Keep listening after each reply |
 | `/voice off` | Return to the keyboard |
@@ -229,6 +257,24 @@ Also:
 - `CRITIQUE_INFERENCE_BASE_URL` — override `https://critique.sh/api/v1`
 - `CRITIQUE_SITE_URL` — site origin for device login (default derived from the inference URL)
 - `CRITIQUE_CODE_PI_DRIVER=off` — disable the live author kernel (sessions stay `kernel_required`)
+- `SLACK_BOT_TOKEN` + `SLACK_APP_TOKEN` — Slack Socket Mode (outbound). Optional `CRITIQUE_CODE_PORTAL_USERS`
+- `TELEGRAM_BOT_TOKEN` — Telegram long poll (outbound). Optional `CRITIQUE_CODE_PORTAL_CHATS`
+- `CRITIQUE_CODE_PORTAL_SECRET` — shared secret for `POST /api/portal/inbound` from other portals
+- `CRITIQUE_CODE_TUNNEL` — prefer `cloudflared` or `ngrok` for `--anywhere`
+
+## Remote phone and portals
+
+The agent is this process on this laptop. Phone, Slack, Telegram, and the website are remotes. They are not Critique Cloud.
+
+1. Leave the machine awake with the session running.
+2. Same Wi-Fi: `critique-code remote`, open the LAN URL on the phone, enter the PIN from the terminal.
+3. Anywhere: DM the Slack or Telegram bot (`critique-code slack` / `critique-code telegram` / `--slack`). Those open outbound sockets. No inbound port.
+4. Website: `critique-code connect CODE` after `critique-code login` claims the PC from [critique.sh/code](https://critique.sh/code). The site relays prompts and approvals; the kernel stays here.
+5. Optional `--anywhere` uses **your** `cloudflared` or `ngrok`. The tunnel is a pipe. Writes still happen in this working tree.
+
+Slack Socket Mode needs `SLACK_BOT_TOKEN` (`xoxb-`) and `SLACK_APP_TOKEN` (`xapp-`) with message events. Telegram needs `TELEGRAM_BOT_TOKEN`. Optional allowlists: `CRITIQUE_CODE_PORTAL_USERS`, `CRITIQUE_CODE_PORTAL_CHATS`.
+
+From an already-open TTY: `/remote`, `/slack`, `/telegram`.
 
 ## Files on disk
 
@@ -238,6 +284,7 @@ Nothing secret is written into the repository.
 | --- | --- |
 | `~/.critique/code/auth.json` | Stored API keys (mode `0600`) |
 | `~/.critique/code/settings.json` | Route and model selection |
+| `~/.critique/code/portals.json` | Slack / Telegram / webhook portal tokens (mode `0600`) |
 | Review/repair store | Outcomes and repair artifacts (`--store` or the default store root) |
 
 Project `REVIEW_GUIDELINES.md` is loaded as a review constraint. `AGENTS.md`, `CRITIQUE.md`, and `CLAUDE.md` can seed author instructions.