pi-harness-runtime 1.1.157 → 1.1.159
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/harness/infisical-config.ts +395 -0
- package/harness/infisical-setup.ts +270 -0
- package/harness/key-loader.ts +129 -29
- package/harness/secret-provider.ts +437 -0
- package/harness/secret-schema.ts +163 -0
- package/harness/varlock-worker.ts +379 -0
- package/index.ts +12 -3
- package/package.json +1 -1
- package/packages/a2a-adapter/package.json +1 -1
- package/packages/agent-policy/package.json +1 -1
- package/packages/architecture-generator/package.json +1 -1
- package/packages/auth/package.json +1 -1
- package/packages/autonomous-refactor/package.json +1 -1
- package/packages/autonomous-runtime/package.json +1 -1
- package/packages/cache-strategy/package.json +1 -1
- package/packages/capability-registry/package.json +1 -1
- package/packages/checkpoint/package.json +1 -1
- package/packages/cli-plugin-sdk/package.json +1 -1
- package/packages/clipboard/package.json +1 -1
- package/packages/clipboard-plugin/package.json +1 -1
- package/packages/code-generation/package.json +1 -1
- package/packages/code-review/package.json +1 -1
- package/packages/codex-adapter/package.json +1 -1
- package/packages/codex-watcher/package.json +1 -1
- package/packages/config-capture/package.json +1 -1
- package/packages/context-compiler/package.json +1 -1
- package/packages/context-discovery/package.json +1 -1
- package/packages/context-manager/package.json +1 -1
- package/packages/cookie-sanitizer/package.json +1 -1
- package/packages/cost-optimizer/package.json +1 -1
- package/packages/dependency-analyzer/package.json +1 -1
- package/packages/django-plugin/package.json +1 -1
- package/packages/doc-generator/package.json +1 -1
- package/packages/evaluation-engine/package.json +1 -1
- package/packages/evaluation-runner/package.json +1 -1
- package/packages/event-bus/package.json +1 -1
- package/packages/event-store/package.json +1 -1
- package/packages/experience-replay/package.json +1 -1
- package/packages/feedback-collector/package.json +1 -1
- package/packages/file-copy-helper/package.json +1 -1
- package/packages/framework-detector/package.json +1 -1
- package/packages/framework-plugin-sdk/package.json +1 -1
- package/packages/frappe-plugin/package.json +1 -1
- package/packages/generic-web-plugin/package.json +1 -1
- package/packages/health-monitor/package.json +1 -1
- package/packages/intent-analyzer/package.json +1 -1
- package/packages/jev-judge/package.json +1 -1
- package/packages/knowledge-graph/package.json +1 -1
- package/packages/knowledge-retrieval/package.json +1 -1
- package/packages/laravel-plugin/package.json +1 -1
- package/packages/learning-engine/package.json +1 -1
- package/packages/mcp-adapter/package.json +1 -1
- package/packages/memory-engine/package.json +1 -1
- package/packages/milestone-manager/package.json +1 -1
- package/packages/model-registry/package.json +1 -1
- package/packages/nextjs-plugin/package.json +1 -1
- package/packages/notification/package.json +1 -1
- package/packages/observability/package.json +1 -1
- package/packages/okf-indexer/package.json +1 -1
- package/packages/paperclip-integration/package.json +1 -1
- package/packages/performance-optimizer/package.json +1 -1
- package/packages/privilege-broker/package.json +1 -1
- package/packages/project-analyzer/package.json +1 -1
- package/packages/project-bootstrap/package.json +1 -1
- package/packages/projection-engine/package.json +1 -1
- package/packages/prompt-compiler/package.json +1 -1
- package/packages/prompt-versioning/package.json +1 -1
- package/packages/provider-adapter-sdk/package.json +1 -1
- package/packages/provider-router/package.json +1 -1
- package/packages/provider-selector/package.json +1 -1
- package/packages/providers/package.json +1 -1
- package/packages/qdrant-skills/package.json +1 -1
- package/packages/quota-manager/package.json +1 -1
- package/packages/rate-limiter/package.json +1 -1
- package/packages/react-vite-plugin/package.json +1 -1
- package/packages/release-manager/package.json +1 -1
- package/packages/requirement-compiler/package.json +1 -1
- package/packages/runtime/package.json +1 -1
- package/packages/scheduler/package.json +1 -1
- package/packages/scheduler-adapter/package.json +1 -1
- package/packages/session/package.json +1 -1
- package/packages/session-api/package.json +1 -1
- package/packages/session-export/package.json +1 -1
- package/packages/shared-context/package.json +1 -1
- package/packages/skill-mcp-client/package.json +1 -1
- package/packages/skill-registry/package.json +1 -1
- package/packages/skills/package.json +1 -1
- package/packages/sprint-planner/package.json +1 -1
- package/packages/subscription-engine/package.json +1 -1
- package/packages/task-compiler/package.json +1 -1
- package/packages/tencentdb-memory/package.json +1 -1
- package/packages/tencentdb-sync/package.json +1 -1
- package/packages/test-data-generator/package.json +1 -1
- package/packages/test-generator/package.json +1 -1
- package/packages/todo-bd-sync/package.json +1 -1
- package/packages/token-estimation/package.json +1 -1
- package/packages/token-optimizer/package.json +1 -1
- package/packages/trajectory/package.json +1 -1
- package/packages/tui/package.json +1 -1
- package/packages/types/package.json +1 -1
- package/packages/workflow-events/package.json +1 -1
- package/packages/workspace-scanner/package.json +1 -1
- package/packages/worktree/package.json +1 -1
- package/packages/write-review/package.json +1 -1
- package/scripts/telegram-webhook-server.ts +10 -5
|
@@ -200,11 +200,16 @@ function handleRequest(req: import("node:http").IncomingMessage, res: import("no
|
|
|
200
200
|
try {
|
|
201
201
|
// Read job commands from file
|
|
202
202
|
const jobCommands = readJobCommands();
|
|
203
|
-
//
|
|
204
|
-
|
|
203
|
+
// Restrict CORS to same origin or configured allowed origins
|
|
204
|
+
const allowedOrigins = process.env.ALLOWED_ORIGINS?.split(',') || [];
|
|
205
|
+
const origin = req.headers.origin;
|
|
206
|
+
const isAllowedOrigin = !origin || allowedOrigins.length === 0 || allowedOrigins.includes(origin);
|
|
207
|
+
const corsHeader = isAllowedOrigin ? (origin || '*') : '';
|
|
208
|
+
|
|
205
209
|
res.writeHead(200, {
|
|
206
210
|
"Content-Type": "application/json",
|
|
207
|
-
"Access-Control-Allow-Origin":
|
|
211
|
+
"Access-Control-Allow-Origin": corsHeader,
|
|
212
|
+
"Access-Control-Allow-Credentials": "true",
|
|
208
213
|
"Cache-Control": "no-cache",
|
|
209
214
|
});
|
|
210
215
|
res.end(JSON.stringify({ commands: jobCommands }));
|
|
@@ -361,8 +366,8 @@ async function main(): Promise<void> {
|
|
|
361
366
|
console.log("=".repeat(60));
|
|
362
367
|
console.log("Telegram Webhook Server — RFC-0022");
|
|
363
368
|
console.log("=".repeat(60));
|
|
364
|
-
console.log(`Bot token: ${BOT_TOKEN
|
|
365
|
-
console.log(`Webhook secret: ${WEBHOOK_SECRET
|
|
369
|
+
console.log(`Bot token: ${BOT_TOKEN ? '[REDACTED]' : 'MISSING'}`);
|
|
370
|
+
console.log(`Webhook secret: ${WEBHOOK_SECRET ? '[REDACTED]' : 'MISSING'}`);
|
|
366
371
|
console.log(`Callback queue: ${CALLBACK_QUEUE_FILE}`);
|
|
367
372
|
console.log(`Port: ${PORT}`);
|
|
368
373
|
console.log("=".repeat(60));
|