pi-harness-runtime 0.10.7 → 0.10.11

package/packages/a2a-adapter/src/protocol.ts

@@ -1,46 +0,0 @@
-/**
- * A2A Adapter — Protocol Constants (RFC-0069)
- */
-
-export const A2A_PROTOCOL_VERSION = "1.0.0";
-export const A2A_CONTENT_TYPE = "application/json";
-
-export const HTTP_METHODS = {
-	GET: "GET",
-	POST: "POST",
-} as const;
-
-export const WELL_KNOWN_AGENT_PATH = "/.well-known/agent.json";
-
-// Status codes
-export const STATUS = {
-	SUBMITTED: "submitted",
-	WORKING: "working",
-	COMPLETED: "completed",
-	CANCELED: "canceled",
-	FAILED: "failed",
-} as const;
-
-// Error codes
-export const ERROR_CODES = {
-	INVALID_REQUEST: -32600,
-	METHOD_NOT_FOUND: -32601,
-	INVALID_PARAMS: -32602,
-	INTERNAL_ERROR: -32603,
-	TASK_NOT_FOUND: 40401,
-	TASK_STATE: 40402,
-} as const;
-
-/**
- * Serialize task as SSE event
- */
-export function formatSSETaskEvent(event: string, data: unknown): string {
-	return `event: ${event}\ndata: ${JSON.stringify(data)}\n\n`;
-}
-
-/**
- * Parse agent card from well-known URL
- */
-export function wellKnownAgentUrl(baseUrl: string): string {
-	return `${baseUrl.replace(/\/$/, "")}${WELL_KNOWN_AGENT_PATH}`;
-}

package/packages/a2a-adapter/src/transport.ts

@@ -1,142 +0,0 @@
-/**
- * A2A Adapter — HTTP Transport (RFC-0069)
- */
-
-import { wellKnownAgentUrl } from "./protocol.js";
-import type { AgentCard, A2AClientConfig, TaskHandle } from "./types.js";
-
-/**
- * HTTP client for A2A protocol
- */
-export class A2ATransport {
-	private baseUrl: string;
-	private config: A2AClientConfig;
-
-	constructor(baseUrl: string, config: A2AClientConfig = {}) {
-		this.baseUrl = baseUrl.replace(/\/$/, "");
-		this.config = config;
-	}
-
-	private async request<T>(
-		method: string,
-		path: string,
-		body?: unknown,
-	): Promise<T> {
-		const url = `${this.baseUrl}${path}`;
-		const headers: Record<string, string> = {
-			"Content-Type": "application/json",
-			Accept: "application/json",
-			...this.config.headers,
-		};
-
-		const response = await fetch(url, {
-			method,
-			headers,
-			body: body ? JSON.stringify(body) : undefined,
-			signal: AbortSignal.timeout(this.config.timeout ?? 30000),
-		} as RequestInit);
-
-		if (!response.ok) {
-			throw new Error(
-				`A2A HTTP error: ${response.status} ${response.statusText}`,
-			);
-		}
-
-		return response.json() as Promise<T>;
-	}
-
-	/**
-	 * Fetch agent card from well-known endpoint
-	 */
-	async getAgentCard(): Promise<AgentCard> {
-		return this.request<AgentCard>("GET", "/.well-known/agent.json");
-	}
-
-	/**
-	 * Send a task message to an agent
-	 */
-	async sendTask(params: {
-		taskId?: string;
-		sessionId?: string;
-		message: { role: string; content: string };
-	}): Promise<TaskHandle> {
-		return this.request<TaskHandle>("POST", "/a2a/tasks/send", {
-			jsonrpc: "2.0",
-			method: "tasks/send",
-			params,
-		});
-	}
-
-	/**
-	 * Send task with streaming subscription
-	 */
-	async sendTaskSubscribe(params: {
-		taskId?: string;
-		sessionId?: string;
-		message: { role: string; content: string };
-	}): Promise<TaskHandle> {
-		return this.request<TaskHandle>("POST", "/a2a/tasks/sendSubscribe", {
-			jsonrpc: "2.0",
-			method: "tasks/sendSubscribe",
-			params,
-		});
-	}
-
-	/**
-	 * Get task status
-	 */
-	async getTask(taskId: string): Promise<unknown> {
-		return this.request("GET", `/a2a/tasks/${taskId}`);
-	}
-
-	/**
-	 * Cancel a task
-	 */
-	async cancelTask(
-		taskId: string,
-	): Promise<{ taskId: string; status: string }> {
-		return this.request("POST", `/a2a/tasks/${taskId}/cancel`);
-	}
-
-	/**
-	 * SSE stream for task updates
-	 */
-	async *streamTaskUpdates(taskId: string): AsyncGenerator<unknown> {
-		const url = `${this.baseUrl}/a2a/tasks/${taskId}/stream`;
-		const response = await fetch(url, {
-			headers: {
-				Accept: "text/event-stream",
-				...this.config.headers,
-			},
-			signal: AbortSignal.timeout(this.config.timeout ?? 60000),
-		} as RequestInit);
-
-		if (!response.ok || !response.body) {
-			throw new Error(`Stream error: ${response.status}`);
-		}
-
-		const reader = response.body.getReader();
-		const decoder = new TextDecoder();
-		let buffer = "";
-
-		try {
-			while (true) {
-				const { done, value } = await reader.read();
-				if (done) break;
-
-				buffer += decoder.decode(value, { stream: true });
-				const lines = buffer.split("\n");
-				buffer = lines.pop() ?? "";
-
-				for (const line of lines) {
-					if (line.startsWith("data: ")) {
-						const data = JSON.parse(line.slice(6));
-						yield data;
-					}
-				}
-			}
-		} finally {
-			reader.releaseLock();
-		}
-	}
-}

package/packages/a2a-adapter/src/types.ts

@@ -1,117 +0,0 @@
-/**
- * A2A Adapter — Types (RFC-0069)
- */
-
-// --- Agent Card -------------------------------------------------------------
-
-export interface AgentCard {
-	name: string;
-	description: string;
-	url: string;
-	version: string;
-	capabilities: AgentCapabilities;
-	skills: Skill[];
-	authentication?: Authentication;
-	defaultInputModes?: string[];
-	defaultOutputModes?: string[];
-}
-
-export interface AgentCapabilities {
-	streaming?: boolean;
-	pushNotifications?: boolean;
-	stateTransitionHistory?: boolean;
-}
-
-export interface Skill {
-	id: string;
-	name: string;
-	description: string;
-	tags?: string[];
-	inputModes?: string[];
-	outputModes?: string[];
-}
-
-export interface Authentication {
-	schemes: string[];
-	credentials?: string;
-}
-
-// --- Task -----------------------------------------------------------------
-
-export type TaskStatus =
-	| "submitted"
-	| "working"
-	| "completed"
-	| "canceled"
-	| "failed";
-
-export interface Task {
-	id: string;
-	sessionId?: string;
-	status: TaskStatus;
-	artifacts?: Artifact[];
-	kind: "message" | "search" | "task";
-}
-
-export interface TaskStatusUpdateEvent {
-	taskId: string;
-	status: TaskStatus;
-	message?: TaskMessage;
-	final?: boolean;
-}
-
-export interface TaskMessage {
-	role: "agent" | "user";
-	content: string;
-}
-
-export interface Artifact {
-	name?: string;
-	description?: string;
-	parts: Array<{ type: "text"; text: string }>;
-}
-
-// --- A2A Requests / Responses ---------------------------------------------
-
-export type A2ARequest =
-	| {
-			method: "tasks/send";
-			params: { taskId?: string; sessionId?: string; message: TaskMessage };
-	  }
-	| {
-			method: "tasks/sendSubscribe";
-			params: { taskId?: string; sessionId?: string; message: TaskMessage };
-	  }
-	| { method: "tasks/get"; params: { taskId: string } }
-	| { method: "tasks/cancel"; params: { taskId: string } }
-	| { method: "agents/info"; params: { agentId?: string } }
-	| { method: "agents/list"; params?: { filter?: Record<string, string> } };
-
-export interface A2AResponse {
-	result?: unknown;
-	error?: { code: number; message: string };
-}
-
-// --- A2A Client ---------------------------------------------------------
-
-export interface A2AClientConfig {
-	timeout?: number;
-	headers?: Record<string, string>;
-}
-
-export interface TaskHandle {
-	taskId: string;
-	status: TaskStatus;
-}
-
-// --- A2A Agent -----------------------------------------------------------
-
-export interface A2AAgentConfig {
-	name: string;
-	description: string;
-	url: string;
-	version: string;
-	skills?: Skill[];
-	capabilities?: Partial<AgentCapabilities>;
-	port?: number;
-}

package/packages/a2a-adapter/test/a2a.test.ts

@@ -1,151 +0,0 @@
-/**
- * A2A Adapter Tests (RFC-0069)
- */
-
-import { describe, it, expect } from "bun:test";
-import {
-	createAgentCard,
-	routeTask,
-	getTask,
-	cancelTask,
-	taskStatusUpdateSSE,
-} from "../src/agent.js";
-import { A2AClient } from "../src/client.js";
-import { A2ATransport } from "../src/transport.js";
-import {
-	A2A_PROTOCOL_VERSION,
-	WELL_KNOWN_AGENT_PATH,
-} from "../src/protocol.js";
-import type { TaskMessage } from "../src/types.js";
-
-describe("A2A Protocol Constants", () => {
-	it("exports protocol version", () => {
-		expect(A2A_PROTOCOL_VERSION).toBe("1.0.0");
-	});
-
-	it("exports well-known agent path", () => {
-		expect(WELL_KNOWN_AGENT_PATH).toBe("/.well-known/agent.json");
-	});
-});
-
-describe("AgentCard", () => {
-	it("creates agent card with defaults", () => {
-		const card = createAgentCard({
-			name: "pi-harness",
-			description: "AI coding harness",
-			url: "http://localhost:3000",
-			version: "0.9.4",
-		});
-		expect(card.name).toBe("pi-harness");
-		expect(card.capabilities.streaming).toBe(true);
-		expect(card.skills.length).toBeGreaterThan(0);
-		expect(card.skills[0].id).toBe("code-analysis");
-	});
-
-	it("creates agent card with custom skills", () => {
-		const card = createAgentCard({
-			name: "test-agent",
-			description: "Test",
-			url: "http://localhost:3001",
-			version: "1.0.0",
-			skills: [
-				{
-					id: "custom",
-					name: "Custom",
-					description: "Custom skill",
-					tags: ["test"],
-				},
-			],
-		});
-		expect(card.skills).toHaveLength(1);
-		expect(card.skills[0].id).toBe("custom");
-	});
-
-	it("merges custom capabilities", () => {
-		const card = createAgentCard({
-			name: "test",
-			description: "Test",
-			url: "http://localhost:3002",
-			version: "1.0.0",
-			capabilities: { pushNotifications: true },
-		});
-		expect(card.capabilities.streaming).toBe(true);
-		expect(card.capabilities.pushNotifications).toBe(true);
-	});
-});
-
-describe("Task Routing", () => {
-	it("routes a task message", async () => {
-		const message: TaskMessage = { role: "user", content: "Analyze this code" };
-		const task = await routeTask(message);
-		expect(task.id).toMatch(/^task-/);
-		expect(task.status).toBe("completed");
-		expect(task.artifacts).toHaveLength(1);
-		expect(task.artifacts![0].parts[0].text).toContain("Analyze this code");
-	});
-
-	it("stores and retrieves task", async () => {
-		const message: TaskMessage = { role: "user", content: "Test" };
-		const task = await routeTask(message);
-		const retrieved = getTask(task.id);
-		expect(retrieved).not.toBeNull();
-		expect(retrieved!.id).toBe(task.id);
-	});
-
-	it("returns null for unknown task", () => {
-		expect(getTask("nonexistent-task")).toBeNull();
-	});
-
-	it("cancels a task", async () => {
-		const message: TaskMessage = { role: "user", content: "Cancel test" };
-		const task = await routeTask(message);
-		expect(task.status).toBe("completed");
-		const result = cancelTask(task.id);
-		expect(result).toBe(true);
-		expect(getTask(task.id)!.status).toBe("canceled");
-	});
-
-	it("returns false when canceling unknown task", () => {
-		expect(cancelTask("nonexistent")).toBe(false);
-	});
-
-	it("generates SSE status update", async () => {
-		const message: TaskMessage = { role: "user", content: "SSE test" };
-		const task = await routeTask(message);
-		const sse = taskStatusUpdateSSE(task.id);
-		expect(sse).toContain("task_status_update");
-		expect(sse).toContain(task.id);
-		expect(sse).toContain("completed");
-		expect(sse).toContain("final");
-	});
-});
-
-describe("A2AClient", () => {
-	it("creates client with URL", () => {
-		const client = new A2AClient("http://localhost:3000");
-		expect(client).toBeDefined();
-	});
-
-	it("sendTask throws on unreachable server", async () => {
-		const client = new A2AClient("http://localhost:9999");
-		await expect(client.sendTask("test")).rejects.toThrow();
-	});
-
-	it("findAgents returns empty array", async () => {
-		const client = new A2AClient("http://localhost:3000");
-		const results = await client.findAgents({ skill: "test" });
-		expect(results).toEqual([]);
-	});
-});
-
-describe("A2ATransport", () => {
-	it("creates transport with config", () => {
-		const t = new A2ATransport("http://localhost:3000", { timeout: 5000 });
-		expect(t).toBeDefined();
-	});
-
-	it("getAgentCard throws on invalid URL", async () => {
-		const t = new A2ATransport("http://localhost:9999", { timeout: 2000 });
-		await expect(t.getAgentCard()).rejects.toThrow();
-	});
-});

package/packages/a2a-adapter/tsconfig.json

@@ -1,5 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": { "outDir": "./dist", "rootDir": "./src" },
-  "include": ["src/**/*"]
-}

package/packages/auth/README.md

@@ -1,60 +0,0 @@
-# Auth Package
-
-Safe browser authentication for pi-harness-runtime.
-
-## Purpose
-
-Provides a secure way to authenticate with provider websites (like MiniMax) using a Playwright-managed browser profile. The human owns the authentication - the agent never sees credentials.
-
-## Security Rules
-
-- Human logs in manually in the browser
-- No username, password, raw cookies, or session tokens stored
-- Only a safe status file is written
-- Agent can only check if authentication succeeded
-
-## Files
-
-- `src/minimax-browser-auth.ts` - Main auth module
-- `src/run-minimax-auth.ts` - CLI runner
-
-## Usage
-
-```bash
-# Authenticate (opens browser for manual login)
-bun packages/auth/src/run-minimax-auth.ts auth
-
-# Check authentication status
-bun packages/auth/src/run-minimax-auth.ts check
-```
-
-## Storage
-
-- **Browser profile**: `~/.pi-harness-runtime/browser-profiles/minimax/`
-- **Status file**: `~/.pi-harness-runtime/auth/minimax-auth-status.json`
-
-## Status File Format
-
-```json
-{
-  "provider": "minimax",
-  "authenticated": true,
-  "checked_at": "2026-07-04T08:00:00.000Z",
-  "page_url": "https://platform.minimax.io/console/usage",
-  "detected_text_sample": "Usage Plan Credits Reset"
-}
-```
-
-## What is NOT stored
-
-- Passwords
-- Raw cookies
-- Session tokens
-- LocalStorage values
-- API keys
-
-## Limitations
-
-- Requires a display (headed browser mode)
-- Works on Mac/Linux with display
-- Cannot run in truly headless environments without Xvfb

package/packages/auth/dist/minimax-browser-auth.d.ts

@@ -1,89 +0,0 @@
-/**
- * minimax-browser-auth.ts
- *
- * MiniMax browser authentication using a real Chrome profile.
- *
- * SECURITY RULES:
- * - Human owns authentication. Agent never receives credentials.
- * - No username, password, raw cookies, or session tokens stored.
- * - Real Chrome owns the login flow via a persistent profile.
- * - Profile is stored at ~/.pi-harness-runtime/browser-profiles/minimax/
- */
-export interface MinimaxAuthStatus {
-    provider: "minimax";
-    authenticated: boolean;
-    checked_at: string;
-    page_url: string;
-    detected_text_sample: string | null;
-    profile_path: string;
-    usage_lines?: string[];
-    error_message?: string;
-}
-export interface MinimaxBrowserAuthConfig {
-    profilePath?: string;
-    statusPath?: string;
-    targetUrl?: string;
-    chromeExecutablePath?: string;
-    authTimeoutMs?: number;
-    headless?: boolean;
-    cdpPort?: number;
-    /** Suppress console output for background/runtime-driven scrapes. */
-    quiet?: boolean;
-    /** Override live session detection — used by tests to bypass real daemon. */
-    forceNoLiveSession?: boolean;
-}
-export declare function getRuntimeDir(): string;
-export declare function getProfileDir(): string;
-export declare function getStatusPath(): string;
-export interface MinimaxLiveBrowserSession {
-    profile_path: string;
-    target_url: string;
-    chrome_path: string;
-    debugging_port: number;
-    pid: number;
-    started_at: string;
-}
-export declare function getLiveSessionPath(): string;
-export declare function saveAuthStatus(status: MinimaxAuthStatus, config?: MinimaxBrowserAuthConfig): void;
-export declare function loadLiveBrowserSession(liveSessionPath?: string): MinimaxLiveBrowserSession | null;
-export declare function detectUsagePage(bodyText: string): {
-    detected: boolean;
-    sample: string | null;
-};
-/**
- * Manual authentication flow: launches real Chrome so Google login works,
- * waits for user to sign in, then confirms at the TTY.
- */
-export declare function authenticateWithPersistentBrowser(config?: MinimaxBrowserAuthConfig): Promise<MinimaxAuthStatus>;
-/**
- * Extract usage-relevant lines from page body text.
- * Splits on newlines AND HTML tag boundaries, then filters for keywords.
- */
-export declare function extractUsageLines(bodyText: string): string[];
-/**
- * Scrape usage data by attaching to a live browser session (via Node CDP).
- * Writes attach script to a temp .js file to avoid shell escaping issues.
- */
-export declare function scrapeViaLiveBrowserSession(config?: MinimaxBrowserAuthConfig): Promise<MinimaxAuthStatus>;
-/**
- * Start a persistent browser daemon (keep-open mode).
- * Launches real Chrome with --remote-debugging-port and saves session.
- */
-export declare function startPersistentBrowserDaemon(config?: MinimaxBrowserAuthConfig): Promise<MinimaxLiveBrowserSession>;
-/**
- * Stop the persistent browser daemon.
- */
-export declare function stopPersistentBrowserDaemon(_config?: MinimaxBrowserAuthConfig): Promise<boolean>;
-/**
- * Get active live browser session info.
- */
-export declare function getActiveLiveBrowserSession(): MinimaxLiveBrowserSession | null;
-/**
- * Scrape usage data. Tries live session first, falls back to headless Playwright.
- */
-export declare function scrapeWithExistingProfile(config?: MinimaxBrowserAuthConfig): Promise<MinimaxAuthStatus>;
-/**
- * Check auth status.
- */
-export declare function checkAuthStatus(config?: MinimaxBrowserAuthConfig): Promise<MinimaxAuthStatus>;
-//# sourceMappingURL=minimax-browser-auth.d.ts.map

package/packages/auth/dist/minimax-browser-auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"minimax-browser-auth.d.ts","sourceRoot":"","sources":["../src/minimax-browser-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAsBH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,EAAE,SAAS,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6EAA6E;IAC7E,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAiBD,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,MAAM,WAAW,yBAAyB;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAWD,wBAAgB,cAAc,CAC7B,MAAM,EAAE,iBAAiB,EACzB,MAAM,CAAC,EAAE,wBAAwB,GAC/B,IAAI,CAIN;AA2BD,wBAAgB,sBAAsB,CACrC,eAAe,CAAC,EAAE,MAAM,GACtB,yBAAyB,GAAG,IAAI,CAUlC;AASD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG;IAClD,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CASA;AAgND;;;GAGG;AACH,wBAAsB,iCAAiC,CACtD,MAAM,GAAE,wBAA6B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAqK5B;AA+CD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC5D;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAChD,MAAM,GAAE,wBAA6B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAwI5B;AAED;;;GAGG;AACH,wBAAsB,4BAA4B,CACjD,MAAM,GAAE,wBAA6B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CA0CpC;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAChD,OAAO,GAAE,wBAA6B,GACpC,OAAO,CAAC,OAAO,CAAC,CA+ClB;AAED;;GAEG;AACH,wBAAgB,2BAA2B,IAAI,yBAAyB,GAAG,IAAI,CAE9E;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC9C,MAAM,GAAE,wBAA6B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAuJ5B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACpC,MAAM,GAAE,wBAA6B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAoD5B"}