pi-harness-runtime 1.1.375 → 1.1.376

package/README.md

@@ -905,76 +905,105 @@ footer updates immediately and the data persists in `mirror.json`.
 - [ ] Production stress testing
 - [ ] RFC-0101: Autonomous Operations Runtime (background execution, task inbox, lease protocol)
 
-## Telegram 2-Way Communication
+## Unified Webhook Server (Telegram + LINE)
 
-Enable interactive Yes/No buttons in Telegram notifications for human approval.
+Single server handles both Telegram and LINE webhooks on one domain.
 
-> **Self-Hosting Required**: Telegram webhooks require your own server with HTTPS.
-> This is NOT a hosted service. You must **clone this repository** and deploy your own webhook server.
+> **Self-Hosting Required**: Webhooks require your own server with HTTPS.
+> This is NOT a hosted service. Deploy your own webhook server.
 
-### Architecture (Per-User Setup)
+### Architecture
 
 ```
-USER A (you):
 ┌─────────────────────────────────────────────────────┐
-│ Local Machine: ~/.pi-harness-runtime/                 │
-│   └── polls GET /api/pending-commands every 60s      │
-│   └── injects "resume" via steer on approval        │
+│ Your Domain: webhook.your-domain.com                  │
+│   ├── /telegram → Telegram webhook                  │
+│   ├── /line     → LINE webhook                    │
+│   └── /health   → Health check                   │
 └─────────────────────────────────────────────────────┘
-                    ↕ (HTTPS polling)
+                    ↕
 ┌─────────────────────────────────────────────────────┐
-│ YOUR SERVER (e.g., your-vps.com)                    │
-│   ├── Telegram webhook (telegram.your-domain.com)  │
-│   ├── pi-harness API (GET /api/pending-commands)   │
-│   └── Callback processor                            │
+│ Unified Webhook Server (port 8443)                  │
+│   ├── Telegram callbacks (approve/reject)           │
+│   ├── LINE postbacks (approve/reject)              │
+│   └── Text messages → agent                       │
 └─────────────────────────────────────────────────────┘
                     ↕
 ┌─────────────────────────────────────────────────────┐
-│ Telegram Bot                                         │
-│   └── Sends messages with Yes/No buttons           │
+│ Local Machine: ~/.pi-harness-runtime/               │
+│   └── Callback queue → injects to pi               │
 └─────────────────────────────────────────────────────┘
 ```
 
-**Each user needs their own server with:**
-1. Telegram bot token + chat ID
-2. Public HTTPS URL (for webhook)
-3. Running webhook server + callback processor
-
 ### Setup
 
 1. **Create Telegram Bot**
    ```bash
    # DM @BotFather → /newbot → get token
-   # DM @userinfobot → get your chat ID
    echo "YOUR_BOT_TOKEN" > ~/.pi-harness-runtime/keys/telegram-bot-token.txt
-   echo "YOUR_CHAT_ID" > ~/.pi-harness-runtime/keys/telegram-chat-id.txt
    ```
 
-2. **Start Webhook Server**
+2. **Configure LINE** (if using LINE)
    ```bash
-   TELEGRAM_BOT_TOKEN="xxx" \
-   TELEGRAM_WEBHOOK_SECRET="$(openssl rand -hex 16)" \
-   TELEGRAM_WEBHOOK_URL="https://yourdomain.com/api/telegram/webhook" \
-   bun run scripts/telegram-webhook-server.ts
+   echo "YOUR_ACCESS_TOKEN" > ~/.pi-harness-runtime/keys/line-access-token.txt
+   echo "YOUR_CHANNEL_SECRET" > ~/.pi-harness-runtime/keys/line-channel-secret.txt
    ```
 
-3. **Start Callback Processor**
+3. **User Authorization**
    ```bash
-   bun run scripts/telegram-callback-processor.ts
+   echo "123456789" > ~/.pi-harness-runtime/keys/telegram-allowed-users.txt
    ```
 
-4. **Send Approval Requests**
-   ```typescript
-   import { NotificationCenter } from "@pi-harness/notification";
+4. **Start Unified Webhook Server**
+   ```bash
+   bun run scripts/unified-webhook-server.ts
+   ```
 
-   // Send with Yes/No buttons
-   await center.notifyWithApproval("HumanReviewNeeded", {
-     jobId: "job-123",
-     requirement: "Review code before deployment",
-   });
+5. **Set Webhook URLs**
+   - Telegram: `https://webhook.your-domain.com/telegram`
+   - LINE: `https://webhook.your-domain.com/line`
+
+6. **Systemd Service (auto-restart on reboot)**
+   ```ini
+   [Unit]
+   Description=Unified Webhook Server (Telegram + LINE)
+   After=network.target
+
+   [Service]
+   Type=simple
+   User=frappe
+   ExecStart=/home/frappe/.bun/bin/bun run /home/frappe/unified-webhook-server.ts
+   Restart=always
+   RestartSec=5
+
+   [Install]
+   WantedBy=multi-user.target
    ```
 
-See [docs/Telegram-2-Way-Setup.md](docs/Telegram-2-Way-Setup.md) for full guide.
+### NGINX Configuration
+
+```nginx
+server {
+    server_name webhook.your-domain.com;
+    listen 443 ssl;
+    ssl_certificate /etc/letsencrypt/live/webhook.your-domain.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/webhook.your-domain.com/privkey.pem;
+
+    location /telegram {
+        proxy_pass http://127.0.0.1:8443/telegram;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    location /line {
+        proxy_pass http://127.0.0.1:8443/line;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+}
+```
 
 ### User Authorization
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-harness-runtime",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.",
   "type": "module",
   "scripts": {
@@ -108,6 +108,7 @@
     "deepagents": "^1.10.5",
     "langchain": "^1.5.10",
     "pi-mcp-adapter": "3.3.0",
+    "ws": "^8.22.0",
     "zod": "^4.5.4"
   }
 }

package/packages/a2a-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/a2a-adapter",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "Google Agent-to-Agent (A2A) protocol adapter for pi-harness",
   "main": "dist/index.js",

package/packages/agent-policy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/agent-policy",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Agent policy runtime for pi-harness - enforces mandatory rule delivery and mutation gating",
   "type": "module",
   "main": "./dist/index.js",

package/packages/architecture-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/architecture-generator",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Generate ADR and Mermaid diagrams from project analysis",
   "type": "module",
   "main": "./dist/index.js",

package/packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/auth",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "pi-harness-runtime — auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/autonomous-refactor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-refactor",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "Autonomous refactoring engine",
   "main": "dist/index.js",

package/packages/autonomous-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-runtime",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Autonomous Operations Runtime — task inbox, lease management, and worker lifecycle (RFC-0101)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cache-strategy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cache-strategy",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "Smart caching with TTL and invalidation strategies (RFC-0022)",
   "main": "dist/index.js",

package/packages/capability-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/capability-registry",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Capability Registry for pi-harness-runtime — tracks model capabilities and enables capability-based routing",
   "type": "module",
   "main": "./dist/index.js",

package/packages/checkpoint/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/checkpoint",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Enhanced checkpoint system with incremental snapshots, diff-based storage, and recovery strategies",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cli-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cli-plugin-sdk",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "CLI Plugin SDK for pi-harness — install, list, remove, update, invoke plugins",
   "main": "dist/index.js",

package/packages/clipboard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/clipboard-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard-plugin",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/code-generation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-generation",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Code generation pipeline for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/code-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-review",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Automated code review engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/codex-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/codex-adapter",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "OpenAI Codex provider adapter for pi-harness",
   "main": "dist/index.js",

package/packages/codex-watcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/codex-watcher",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Watches Codex CLI sessions and emits visible messages for PING-PONG monitoring",
   "type": "module",
   "main": "./dist/src/index.js",

package/packages/config-capture/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/config-capture",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Auto-capture API-fetched configuration values to AGENTS.md",
   "type": "module",
   "main": "src/index.ts",

package/packages/connection-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/connection-runtime",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "Connection management with jittered exponential backoff for pi-harness",
   "main": "./dist/index.js",

package/packages/context-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/context-compiler",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Bounded context selection engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/context-discovery/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/context-discovery",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/context-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/context-manager",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Context Window Manager — prevents model context overflow via compaction and resume prompts (RFC-0010)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/contracts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/contracts",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "RPC schema definitions for pi-harness runtime",
   "main": "./dist/index.js",

package/packages/cookie-sanitizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cookie-sanitizer",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "pi-harness-runtime — cookie sanitizer (provider-quota cookie file normaliser)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cost-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cost-optimizer",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Cost Optimizer for pi-harness-runtime — budget tracking, forecasting, and model selection optimization",
   "type": "module",
   "main": "./dist/index.js",

package/packages/dependency-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/dependency-analyzer",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/django-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/django-plugin",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Django framework analysis — models, management commands, settings",
   "type": "module",
   "main": "./dist/index.js",

package/packages/doc-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/doc-generator",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Auto-Doc Generator — generate documentation from source code (RFC-0014)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/durable-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/durable-review",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "SQLite-backed durable reviewer using @earendil-works/pi-durable",
   "type": "module",
   "main": "src/index.ts",

package/packages/e2e-tester/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/e2e-tester",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "WebMCP-powered E2E testing for pi-harness - natural language test scenarios",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/evaluation-engine",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Evaluation engine for pi-harness runtime (RFC-0057)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/evaluation-runner",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "Framework-agnostic evaluation framework for AI outputs (RFC-0020)",
   "main": "dist/index.js",

package/packages/event-bus/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/event-bus",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/event-sink/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/event-sink",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "Atomic event sourcing with SQLite transactions for pi-harness",
   "main": "./dist/index.js",

package/packages/event-store/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/event-store",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/experience-replay/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/experience-replay",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Experience replay for debugging and reproducibility (RFC-0059)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/feedback-collector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/feedback-collector",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "Collect and aggregate human/automated feedback (RFC-0021)",
   "main": "dist/index.js",

package/packages/file-copy-helper/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/file-copy-helper",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Injects cp/sudo cp rule when user asks to mimic/copy files",
   "type": "module",
   "main": "dist/index.js",

package/packages/framework-detector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-detector",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Framework detection system for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/framework-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-plugin-sdk",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Framework plugin SDK for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/frappe-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/frappe-plugin",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Frappe/ERPNext framework analysis — DocTypes, hooks, bench sites, site config",
   "type": "module",
   "main": "./dist/index.js",

package/packages/generic-web-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/generic-web-plugin",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Generic web framework analysis — REST/GraphQL endpoints, OpenAPI, auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/health-monitor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/health-monitor",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "Health monitoring and auto-healing",
   "main": "dist/index.js",

package/packages/intent-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/intent-analyzer",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/jev-judge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/jev-judge",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Jev Judge - Structured decision model for agent routing, E2E testing, and automated decisions",
   "type": "module",
   "main": "./dist/index.js",

package/packages/knowledge-graph/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/knowledge-graph",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Knowledge Graph extraction and provenance linking for SKILL.md files",
   "type": "module",
   "main": "./dist/index.js",

package/packages/knowledge-retrieval/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/knowledge-retrieval",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Knowledge retrieval via TencentDB-Agent-Memory MCP (RFC-0105)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/laravel-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/laravel-plugin",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Laravel framework analysis — artisan commands, Eloquent models, Blade",
   "type": "module",
   "main": "./dist/index.js",

package/packages/learning-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/learning-engine",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Learning engine for extracting lessons from runtime execution (RFC-0058)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/mcp-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/mcp-adapter",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "type": "module",
   "description": "MCP server adapter for pi-harness — exposes harness capabilities as MCP tools/resources/prompts (RFC-0068)",
   "main": "dist/index.js",

package/packages/memory-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/memory-engine",
-  "version": "1.1.375",
+  "version": "1.1.376",
   "description": "Memory engine with OKF integration for durable knowledge management (RFC-0060)",
   "type": "module",
   "main": "./dist/index.js",