hankweave 0.6.2 → 0.7.2

package/dist/shims/pi/package.json

@@ -32,7 +32,7 @@
     "self-test": "node index.js --self-test"
   },
   "dependencies": {
-    "@mariozechner/pi-coding-agent": "^0.57.1",
+    "@earendil-works/pi-coding-agent": "^0.79.1",
     "@shims/common": "file:./common"
   },
   "devDependencies": {
@@ -47,7 +47,7 @@
     "hankweave"
   ],
   "engines": {
-    "node": ">=20.0.0",
+    "node": ">=22.19.0",
     "bun": ">=1.1.0"
   }
 }

package/dist/types/types.d.ts

@@ -176,6 +176,17 @@ export interface TokenUsage {
     /** Tokens read from existing cache */
     cacheReadTokens: number;
 }
+/**
+ * Classification of a failed shim self-test, used to route actionable guidance.
+ *
+ * - `launch`: the harness failed to start (spawn/module-load crash, version
+ *   preflight failure). NOT an auth/config problem.
+ * - `auth`: the harness ran but credentials/API keys are missing or invalid.
+ * - `binary-missing`: the underlying agent binary was not found.
+ * - `check`: the harness ran a check and it failed for some other reason.
+ * - `unknown`: could not be classified.
+ */
+export type SelfTestFailureCategory = "launch" | "auth" | "binary-missing" | "check" | "unknown";
 /**
  * Individual check result from a shim's self-test.
  * Each check verifies a specific aspect of the environment setup.

package/dist/utils.d.ts

@@ -38,6 +38,28 @@ export declare function buildFileTree(projectPath: string, pattern: string): Pro
  * Replaces single quotes with '\'' and wraps in single quotes.
  */
 export declare function escapeShellArg(arg: string): string;
+/**
+ * Decide whether an environment variable's value should be masked based on its
+ * NAME. Secrets are conventionally named with markers like SECRET/TOKEN/KEY/
+ * PASSWORD, while readable config (URLs, public keys, hosts) is not.
+ *
+ * Default is to show the value; we only mask names that look secret. The
+ * `PUBLIC`/`PUBLISHABLE` markers explicitly override the generic `KEY` rule, so
+ * e.g. `LANGFUSE_PUBLIC_KEY` is shown but `LANGFUSE_SECRET_KEY` is masked.
+ */
+export declare function isSensitiveEnvKey(key: string): boolean;
+/**
+ * Mask an environment-variable value for display in validation output.
+ *
+ * Reveals only the last 4 characters of sufficiently long values (enough to
+ * sanity-check which secret is loaded) and fully masks short ones.
+ */
+export declare function maskSecretValue(value: string): string;
+/**
+ * Format an env var for the validation listing: secret-named values are masked,
+ * everything else is shown verbatim.
+ */
+export declare function formatEnvVarForDisplay(key: string, value: string): string;
 /**
  * Supported JavaScript runtimes.
  */
@@ -154,8 +176,63 @@ export interface StartupInfo {
  * Render the execution info section after the startup banner.
  */
 export declare function renderStartupInfo(info: StartupInfo): void;
+/**
+ * Minimum Node.js version required to run the pi shim on PATH.
+ *
+ * The pi shim bundles @earendil-works/pi-coding-agent (→ undici), which needs a
+ * modern Node. Keep this in sync with shims/pi/package.json engines.node and the
+ * root package.json engines.node.
+ */
+export declare const MIN_PI_NODE = "22.19.0";
+/**
+ * Thrown when the PATH `node` required by the pi shim is missing or too old.
+ *
+ * Carries the resolved node path/version (when known) so callers can classify
+ * the failure as a launch failure and surface actionable diagnostics rather
+ * than a generic "check your API keys" message.
+ */
+export declare class PiRuntimeError extends Error {
+    readonly diagnostics?: {
+        nodePath?: string;
+        nodeVersion?: string;
+    } | undefined;
+    constructor(message: string, diagnostics?: {
+        nodePath?: string;
+        nodeVersion?: string;
+    } | undefined);
+}
+/** Parse a semver-ish string ("v22.19.0", "22.19.0-nightly") to [major, minor, patch]. */
+export declare function parseNodeVersion(version: string): [number, number, number] | null;
+/** Compare two parsed versions: -1 if a < b, 0 if equal, 1 if a > b. */
+export declare function compareVersions(a: [number, number, number], b: [number, number, number]): number;
+/**
+ * Pure core of the pi Node preflight, separated from process spawning for
+ * testability. Returns a PiRuntimeError to throw, or `null` when the runtime is
+ * acceptable.
+ *
+ * - node not on PATH → missing-node error.
+ * - `node --version` unparseable → `null` (fail open; a parse quirk shouldn't
+ *   block a possibly-fine runtime).
+ * - parsed version < MIN_PI_NODE → too-old error carrying path/version.
+ */
+export declare function checkPiNodeRuntime(located: {
+    found: boolean;
+    path?: string;
+}, rawVersion: string): PiRuntimeError | null;
+/**
+ * Verify that the `node` on PATH satisfies the pi shim's minimum version.
+ *
+ * The pi shim is always spawned via `["node", scriptPath]`, so we must check the
+ * PATH `node` (the binary that will actually run pi) — NOT `process.version`,
+ * since the current runtime is usually Bun. Uses node:child_process spawnSync so
+ * it works under both Bun and plain Node (Bun.spawnSync is absent under Node).
+ *
+ * Hard-fails (throws PiRuntimeError) when node is missing or too old.
+ */
+export declare function assertPiNodeRuntime(): void;
 /**
  * Get the appropriate command array to run a script in the current runtime.
+ *
  * This ensures shims and other scripts are executed with the correct runtime.
  *
  * For compiled executables, we check if 'bun' is available on PATH and use it

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hankweave",
-  "version": "0.6.2",
+  "version": "0.7.2",
   "description": "Orchestration runtime for antibrittle agentic workflows",
   "author": {
     "name": "Southbridge AI",
@@ -36,7 +36,7 @@
     "schemas"
   ],
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.19.0"
   },
   "scripts": {
     "generate-schemas": "bun scripts/generate-schemas.ts",
@@ -53,7 +53,7 @@
     "test": "bun tests/utils/check-test-ready.ts && bun test tests/unit tests/integration tests/e2e/happy-path-e2e.test.ts tests/e2e/rollback-improved-1-e2e.test.ts && bun tests/unit/cleanup-after-tests.ts",
     "test:long": "LONG_TESTS=true bun test tests/long-running",
     "test:unit": "bun tests/unit/cleanup-after-tests.ts && bun test tests/unit && bun tests/unit/cleanup-after-tests.ts",
-    "test:integration": "bun tests/integration",
+    "test:integration": "bun test tests/integration",
     "test:e2e:check": "bun tests/utils/check-test-ready.ts",
     "test:e2e:init": "bun scripts/e2e/init.ts normal",
     "test:e2e:init:npx": "bun scripts/e2e/init.ts npx",
@@ -90,9 +90,9 @@
     "@ai-sdk/google": "^2.0.7",
     "@ai-sdk/groq": "^2.0.11",
     "@ai-sdk/openai": "^2.0.18",
-    "@anthropic-ai/claude-agent-sdk": "^0.1.70",
+    "@anthropic-ai/claude-agent-sdk": "0.3.170",
     "@clack/prompts": "^1.0.0",
-    "@openai/codex-sdk": "0.104.0",
+    "@openai/codex-sdk": "0.139.0",
     "ai": "^5.0.15",
     "crossws": "^0.4.1",
     "eta": "^3.5.0",