pi-harness-runtime 1.1.392 → 1.1.394

package/harness/console-guard.ts

@@ -0,0 +1,73 @@
+/**
+ * Console guard - keep a TUI's terminal clean.
+ *
+ * A TUI owns the terminal: a stray `console.log` from a library lands in the
+ * prompt input field ("[RelayClient] Connected ..."). While the TUI runs, the
+ * harness redirects the console into its log file.
+ *
+ * The guard is deliberately dumb: it never writes to the terminal and a
+ * failing sink can never break the caller.
+ */
+
+export type ConsoleLevel = "log" | "info" | "warn" | "error" | "debug";
+
+export interface ConsoleGuardOptions {
+	/** Receives every console call. Exceptions are swallowed. */
+	sink: (level: ConsoleLevel, message: string) => void;
+}
+
+const LEVELS: ConsoleLevel[] = ["log", "info", "warn", "error", "debug"];
+
+/** Flatten the console arguments into a single line. */
+export function formatConsoleArgs(args: unknown[]): string {
+	return args
+		.map((arg) => {
+			if (typeof arg === "string") return arg;
+			// The stack matters: pi's fatal path prints the error object.
+			if (arg instanceof Error) return arg.stack ?? arg.message;
+			try {
+				const json = JSON.stringify(arg);
+				return json === undefined ? String(arg) : json;
+			} catch {
+				return String(arg);
+			}
+		})
+		.join(" ");
+}
+
+/**
+ * Replace the console methods with a sink.
+ *
+ * @returns a restore function that puts the original console back.
+ */
+export function installConsoleGuard(options: ConsoleGuardOptions): () => void {
+	// SAFETY: the console methods are own, writable properties of the global
+	// console object; TypeScript cannot express that index signature.
+	const target = globalThis.console as unknown as Record<string, unknown>;
+	const originals = new Map<string, unknown>();
+
+	for (const level of LEVELS) {
+		originals.set(level, target[level]);
+		target[level] = (...args: unknown[]): void => {
+			try {
+				options.sink(level, formatConsoleArgs(args));
+			} catch {
+				// A failing sink must never break the caller.
+			}
+		};
+	}
+
+	return () => {
+		for (const level of LEVELS) {
+			// The presence test must not depend on the value: a level that was
+			// absent before must be removed again.
+			if (!originals.has(level)) continue;
+			const original = originals.get(level);
+			if (original === undefined) {
+				delete target[level];
+			} else {
+				target[level] = original;
+			}
+		}
+	};
+}

package/index.ts

@@ -30,6 +30,7 @@ import {
 import { renderDetailLines } from "./harness/startup-lines.ts";
 import { describeInboundAccess, getAllowedUserIds } from "./harness/telegram-auth.ts";
 import { buildTelegramCallbackUpdate, buildTelegramMessageUpdate } from "./harness/telegram-update.ts";
+import { installConsoleGuard } from "./harness/console-guard.ts";
 import {
 	jevMissingKeyReport,
 	lineConfigurationReport,
@@ -345,6 +346,7 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 			if (ctx.hasUI && ctx.ui) {
 				_setAutoContinueStatus = ctx.ui.setStatus.bind(ctx.ui, "harness-auto-continue");
 			}
+
 		});
 
 		// Clear status and cancel background work on session shutdown
@@ -2044,6 +2046,14 @@ async function initRelayStream(): Promise<void> {
 					]);
 				}
 			},
+		},
+		{
+			// A TUI owns the terminal: the relay diagnostics belong in the log
+			// file. A console write would land in the prompt input field
+			// ("[RelayClient] Connected ...").
+			log: (message) => logToFile("[RelayStream]", `log: ${message}`),
+			warn: (message) => logToFile("[RelayStream]", `warn: ${message}`),
+			error: (message) => logToFile("[RelayStream]", `error: ${message}`),
 		}
 	);
 
@@ -2055,6 +2065,50 @@ async function initRelayStream(): Promise<void> {
 	}
 }
 
+/**
+ * Console guard - the TUI owns the terminal.
+ *
+ * A library that writes to the console puts its text into the prompt input
+ * field ("[RelayClient] Connected ..."). In TUI mode every console call goes
+ * to the harness log instead. An error is also surfaced as a harness message,
+ * so a crash is never invisible.
+ */
+function initConsoleGuard(pi: ExtensionAPI): void {
+	let restore: (() => void) | null = null;
+	// A reload emits session_start BEFORE the previous session_shutdown:
+	// the guard must stay installed for the new session. The console is only
+	// given back when every started session has been shut down.
+	let starts = 0;
+	let shutdowns = 0;
+	const recentErrors = new Map<string, number>();
+
+	pi.on("session_start", (_event, ctx) => {
+		starts++;
+		if (ctx.mode !== "tui" || restore) return;
+		restore = installConsoleGuard({
+			sink: (level, message) => {
+				logToFile("[Console]", `${level}: ${message}`);
+				if (level !== "error") return;
+				// One message per 30s: a crash must be visible, a loop must not flood.
+				const now = Date.now();
+				if (now - (recentErrors.get(message) ?? 0) < 30_000) return;
+				recentErrors.set(message, now);
+				const text = message.length > 200 ? `${message.slice(0, 200)}...` : message;
+				addHarnessMessage("Console", text, "err");
+			},
+		});
+		logToFile("[Console]", "Console redirected to the log file (TUI mode)");
+	});
+
+	pi.on("session_shutdown", () => {
+		shutdowns++;
+		// Only the last session may take the console back.
+		if (!restore || shutdowns < starts) return;
+		restore();
+		restore = null;
+	});
+}
+
 // --- honcho-memory: Honcho MCP for peer/user memory via https://mcp.honcho.dev ------
 // Registers Honcho MCP server and implements automatic memory lifecycle:
 // - Ingest sanitized messages on completed turns
@@ -2765,7 +2819,7 @@ function processCompletionFile(filePath: string, pi: ExtensionAPI): void {
 // --- Debug logging (file only, no console override) ---------------
 // Logs written to file only. Real console output preserved for pi's TUI.
 import { homedir } from "node:os";
-import { existsSync, mkdirSync, readFileSync, readdirSync, symlinkSync, appendFileSync, realpathSync, statSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, readdirSync, symlinkSync, appendFileSync, realpathSync, statSync, chmodSync, openSync, closeSync, renameSync } from "node:fs";
 import { truncateToWidth } from "@earendil-works/pi-tui";
 import { join, dirname } from "node:path";
 
@@ -2775,6 +2829,11 @@ const HARNESS_ROOT_DIR = join(homedir(), ".pi-harness-runtime");
 /** Startup messages collected during init — shown on session_start via ctx.ui.notify */
 const startupMessages: string[] = [];
 const HARNESS_LOG_FILE = "/tmp/pi-harness.log";
+// The log can contain urls and session ids: owner only, no rotation while it
+// is small, and a bounded size so a chatty dependency cannot fill the disk.
+const HARNESS_LOG_MAX_BYTES = 5 * 1024 * 1024;
+let harnessLogFileSecured = false;
+let harnessLogWrites = 0;
 
 /** Log a harness message to file (not stderr - bypasses Pi's cursor tracking) */
 function logToFile(...parts: string[]): void {
@@ -2782,6 +2841,44 @@ function logToFile(...parts: string[]): void {
 	// A timestamp makes the log usable for latency measurements.
 	const stamp = new Date().toISOString();
 	try {
+		if (!harnessLogFileSecured) {
+			try {
+				// Create the file with the owner-only mode BEFORE the first
+				// write: there must be no world-readable window.
+				const fd = openSync(HARNESS_LOG_FILE, "a", 0o600);
+				closeSync(fd);
+				chmodSync(HARNESS_LOG_FILE, 0o600);
+				// Only a successful attempt stops the retries.
+				harnessLogFileSecured = true;
+			} catch {
+				// Ignore permission errors (e.g. a mounted /tmp) and retry
+				// on the next write.
+			}
+		}
+
+		// Keep the log bounded: rotate it when it grew too large.
+		harnessLogWrites++;
+		if (harnessLogWrites % 200 === 0) {
+			try {
+				if (statSync(HARNESS_LOG_FILE).size > HARNESS_LOG_MAX_BYTES) {
+					renameSync(HARNESS_LOG_FILE, `${HARNESS_LOG_FILE}.1`);
+					chmodSync(`${HARNESS_LOG_FILE}.1`, 0o600);
+					// Secure the fresh file right away: the write that
+					// follows must not land in a 0644 file.
+					try {
+						const fd = openSync(HARNESS_LOG_FILE, "a", 0o600);
+						closeSync(fd);
+						chmodSync(HARNESS_LOG_FILE, 0o600);
+						harnessLogFileSecured = true;
+					} catch {
+						harnessLogFileSecured = false;
+					}
+				}
+			} catch {
+				// Ignore rotation errors
+			}
+		}
+
 		appendFileSync(HARNESS_LOG_FILE, `[${stamp}] ${msg}\n`);
 	} catch {
 		// Ignore file write errors
@@ -3294,6 +3391,11 @@ export default async function (pi: ExtensionAPI) {
 	// Telegram is not configured at all - that is the fresh-install case.
 	reportRelayConfiguration();
 
+	// --- console-guard: keep the TUI prompt input field clean ----
+	// A library that writes to the console would put its text into the
+	// prompt input field. The guard sends it to the harness log instead.
+	initConsoleGuard(pi);
+
 	// --- line-voice-queue: Watch for LINE voice commands ----
 	void initLineVoiceQueue(pi);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-harness-runtime",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.",
   "type": "module",
   "scripts": {

package/packages/a2a-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/a2a-adapter",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "Google Agent-to-Agent (A2A) protocol adapter for pi-harness",
   "main": "dist/index.js",

package/packages/agent-policy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/agent-policy",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Agent policy runtime for pi-harness - enforces mandatory rule delivery and mutation gating",
   "type": "module",
   "main": "./dist/index.js",

package/packages/architecture-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/architecture-generator",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Generate ADR and Mermaid diagrams from project analysis",
   "type": "module",
   "main": "./dist/index.js",

package/packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/auth",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "pi-harness-runtime — auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/autonomous-refactor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-refactor",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "Autonomous refactoring engine",
   "main": "dist/index.js",

package/packages/autonomous-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-runtime",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Autonomous Operations Runtime — task inbox, lease management, and worker lifecycle (RFC-0101)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cache-strategy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cache-strategy",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "Smart caching with TTL and invalidation strategies (RFC-0022)",
   "main": "dist/index.js",

package/packages/capability-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/capability-registry",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Capability Registry for pi-harness-runtime — tracks model capabilities and enables capability-based routing",
   "type": "module",
   "main": "./dist/index.js",

package/packages/checkpoint/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/checkpoint",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Enhanced checkpoint system with incremental snapshots, diff-based storage, and recovery strategies",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cli-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cli-plugin-sdk",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "CLI Plugin SDK for pi-harness — install, list, remove, update, invoke plugins",
   "main": "dist/index.js",

package/packages/clipboard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/clipboard-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard-plugin",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/code-generation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-generation",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Code generation pipeline for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/code-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-review",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Automated code review engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/codex-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/codex-adapter",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "OpenAI Codex provider adapter for pi-harness",
   "main": "dist/index.js",

package/packages/codex-watcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/codex-watcher",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Watches Codex CLI sessions and emits visible messages for PING-PONG monitoring",
   "type": "module",
   "main": "./dist/src/index.js",

package/packages/config-capture/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/config-capture",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Auto-capture API-fetched configuration values to AGENTS.md",
   "type": "module",
   "main": "src/index.ts",

package/packages/connection-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/connection-runtime",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "Connection management with jittered exponential backoff for pi-harness",
   "main": "./dist/index.js",

package/packages/context-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/context-compiler",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Bounded context selection engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/context-discovery/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/context-discovery",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/context-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/context-manager",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Context Window Manager — prevents model context overflow via compaction and resume prompts (RFC-0010)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/contracts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/contracts",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "RPC schema definitions for pi-harness runtime",
   "main": "./dist/index.js",

package/packages/cookie-sanitizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cookie-sanitizer",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "pi-harness-runtime — cookie sanitizer (provider-quota cookie file normaliser)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cost-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cost-optimizer",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Cost Optimizer for pi-harness-runtime — budget tracking, forecasting, and model selection optimization",
   "type": "module",
   "main": "./dist/index.js",

package/packages/dependency-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/dependency-analyzer",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/django-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/django-plugin",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Django framework analysis — models, management commands, settings",
   "type": "module",
   "main": "./dist/index.js",

package/packages/doc-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/doc-generator",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Auto-Doc Generator — generate documentation from source code (RFC-0014)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/durable-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/durable-review",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "SQLite-backed durable reviewer using @earendil-works/pi-durable",
   "type": "module",
   "main": "src/index.ts",

package/packages/e2e-tester/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/e2e-tester",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "WebMCP-powered E2E testing for pi-harness - natural language test scenarios",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/evaluation-engine",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Evaluation engine for pi-harness runtime (RFC-0057)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/evaluation-runner",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "Framework-agnostic evaluation framework for AI outputs (RFC-0020)",
   "main": "dist/index.js",

package/packages/event-bus/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/event-bus",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/event-sink/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/event-sink",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "Atomic event sourcing with SQLite transactions for pi-harness",
   "main": "./dist/index.js",

package/packages/event-store/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/event-store",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/experience-replay/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/experience-replay",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Experience replay for debugging and reproducibility (RFC-0059)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/feedback-collector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/feedback-collector",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "Collect and aggregate human/automated feedback (RFC-0021)",
   "main": "dist/index.js",

package/packages/file-copy-helper/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/file-copy-helper",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Injects cp/sudo cp rule when user asks to mimic/copy files",
   "type": "module",
   "main": "dist/index.js",

package/packages/framework-detector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-detector",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Framework detection system for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/framework-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-plugin-sdk",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Framework plugin SDK for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/frappe-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/frappe-plugin",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Frappe/ERPNext framework analysis — DocTypes, hooks, bench sites, site config",
   "type": "module",
   "main": "./dist/index.js",

package/packages/generic-web-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/generic-web-plugin",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "description": "Generic web framework analysis — REST/GraphQL endpoints, OpenAPI, auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/health-monitor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/health-monitor",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "description": "Health monitoring and auto-healing",
   "main": "dist/index.js",

package/packages/intent-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/intent-analyzer",
-  "version": "1.1.392",
+  "version": "1.1.394",
   "type": "module",
   "main": "src/index.ts",
   "exports": {