pi-harness-runtime 1.1.394 → 1.1.396

package/packages/prompt-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/prompt-compiler",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Deterministic prompt compiler for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/prompt-versioning/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/prompt-versioning",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "description": "Version control for prompts with rollback support (RFC-0019)",
   "main": "dist/index.js",

package/packages/provider-adapter-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/provider-adapter-sdk",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "SDK for building, testing, and registering AI provider adapters",
   "type": "module",
   "main": "./dist/index.js",

package/packages/provider-router/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/provider-router",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Enhanced Provider Router for pi-harness-runtime — intelligent routing with capabilities, costs, and quotas",
   "type": "module",
   "main": "./dist/provider-router.js",

package/packages/provider-selector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/provider-selector",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Multi-Provider Selector — route requests by cost, quality, and latency (RFC-0012)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/providers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/providers",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "pi-harness-runtime — providers",
   "type": "module",
   "main": "./dist/index.js",

package/packages/qdrant-skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/qdrant-skills",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Qdrant vector search integration for Hermes-style skill system",
   "type": "module",
   "main": "./dist/index.js",

package/packages/quota-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/quota-manager",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "pi-harness-runtime — quota-manager",
   "type": "module",
   "main": "./dist/index.js",

package/packages/rate-limiter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/rate-limiter",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "description": "Rate limiting with token bucket algorithm (RFC-0023)",
   "main": "dist/index.js",

package/packages/react-vite-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/react-vite-plugin",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "React/Vite framework analysis — components, config, TypeScript setup",
   "type": "module",
   "main": "./dist/index.js",

package/packages/relay/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/relay",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "description": "Cloud relay for remote access - T3 Connect style for pi-harness",
   "main": "./dist/index.js",

package/packages/release-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/release-manager",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "description": "Release management for pi-harness",
   "main": "dist/index.js",

package/packages/requirement-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/requirement-compiler",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Compiles raw requirements into validated CompiledRequirement with ambiguity detection and risk tagging",
   "type": "module",
   "main": "./dist/index.js",

package/packages/runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/runtime",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "pi-harness-runtime — runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/scheduler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/scheduler",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "pi-harness-runtime — scheduler",
   "type": "module",
   "main": "./dist/index.js",

package/packages/scheduler-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/scheduler-adapter",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Scheduler Adapter — cron, systemd, launchd, internal adapters for autonomous runtime (RFC-0101 §6)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/session/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/session",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Session management system for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/session-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/session-api",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/session-export/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/session-export",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/shared-context/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/shared-context",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "pi-harness-runtime — shared-context",
   "type": "module",
   "main": "./dist/index.js",

package/packages/skill-mcp-client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/skill-mcp-client",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "MCP client for Skills SaaS backend",
   "type": "module",
   "main": "./dist/index.js",

package/packages/skill-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/skill-registry",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Skill Registry for pi-harness-runtime — dynamic skill discovery and invocation",
   "type": "module",
   "main": "./dist/index.js",

package/packages/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/skills",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "File-based skill system with pi.dev compatibility and Hermes self-improvement",
   "type": "module",
   "main": "src/index.ts",

package/packages/sprint-planner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/sprint-planner",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "description": "Sprint planning engine for pi-harness",
   "main": "dist/index.js",

package/packages/subscription-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/subscription-engine",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/task-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/task-compiler",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Task Compiler for pi-harness-runtime — produces deterministic task DAG from CompiledRequirement",
   "type": "module",
   "main": "./dist/index.js",

package/packages/telegram/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/telegram",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "pi-harness-runtime — Telegram inbound/outbound",
   "type": "module",
   "main": "./src/index.js",

package/packages/tencentdb-memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/tencentdb-memory",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "TencentDB Agent Memory client - sync skills to centralized knowledge base",
   "type": "module",
   "main": "src/index.ts",

package/packages/tencentdb-sync/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/tencentdb-sync",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Sync SKILL.md skills to TencentDB-Agent-Memory server (RFC-0105/0106)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/test-data-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/test-data-generator",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Test data generation for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/test-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/test-generator",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Auto-Test Generator — generate unit and E2E tests from source code (RFC-0013)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/todo-bd-sync/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/todo-bd-sync",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Two-way sync between rpiv-todo overlay and bd issue tracker",
   "type": "module",
   "main": "src/index.ts",

package/packages/token-estimation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/token-estimation",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "pi-harness-runtime — token-estimation",
   "type": "module",
   "main": "./dist/index.js",

package/packages/token-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/token-optimizer",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Token Budget Optimizer — maximize prompt value within token limits (RFC-0011)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/trajectory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/trajectory",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Trajectory capture for the write-review loop — persists cycle records for learning",
   "type": "module",
   "main": "./dist/src/index.js",

package/packages/tui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/tui",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "pi-harness-runtime — tui",
   "type": "module",
   "main": "./dist/index.js",

package/packages/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/types",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Shared TypeScript types for pi-harness-runtime packages",
   "type": "module",
   "main": "./src/index.js",

package/packages/voice-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/voice-api",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "description": "Voice-to-text API using Whisper for Telegram and LINE integration",
   "main": "./dist/index.js",

package/packages/webmcp-tester/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/webmcp-tester",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "WebMCP-powered E2E testing for pi-harness - natural language test scenarios",
   "type": "module",
   "main": "./dist/index.js",

package/packages/wiki/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/wiki",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "LLM Wiki integration for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/workflow-events/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/workflow-events",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/workspace-scanner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/workspace-scanner",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/worktree/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/worktree",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "pi-harness-runtime — worktree",
   "type": "module",
   "main": "./dist/index.js",

package/packages/write-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/write-review",
-  "version": "1.1.394",
+  "version": "1.1.396",
   "description": "Two-agent write-review loop with blackboard coordination",
   "type": "module",
   "main": "src/index.ts",

package/scripts/unified-webhook-server.ts

@@ -29,6 +29,10 @@ import type { RelayServerOptions } from "../packages/relay/src/server";
 // One implementation of the Telegram allow-list (env var, key file, legacy
 // chat id) - the harness and this server must agree on who may write in.
 import { getAllowedUserIds, isAuthorizedTelegramSender } from "../harness/telegram-auth";
+// Centralized application logs: the harness ships redacted batches to
+// /api/logs, the server persists them and relays them to Cloudflare R2.
+import { redactValue } from "../packages/logging/src/redact";
+import { loadR2Config, R2Client } from "./r2-storage";
 
 // --- Configuration ---
 interface Config {
@@ -72,6 +76,11 @@ const JOB_COMMANDS_FILE = join(process.env.HOME || homedir() || "/tmp", ".pi-har
 // --- Callback Queue (fallback when no relay client is connected) ---
 const CALLBACK_QUEUE_FILE = join(process.env.HOME || homedir() || "/tmp", ".pi-harness-runtime", "callback-queue.jsonl");
 
+// --- Log ingest (centralized application logs) ---
+const LOG_INGEST_DIR = join(process.env.HOME || homedir() || "/tmp", ".pi-harness-runtime", "logs", "inbound");
+/** Largest accepted ingest body (2 MB). A batch is NDJSON, so this is generous. */
+const LOG_INGEST_MAX_BYTES = 2 * 1024 * 1024;
+
 /**
  * Persist a callback to disk when no WebSocket client is connected.
  * Without this, a click that lands while the relay client is offline is lost.
@@ -86,6 +95,96 @@ function queueCallback(payload: CallbackPayload): void {
   }
 }
 
+/**
+ * Persist an inbound log batch and relay it to Cloudflare R2.
+ *
+ * The harness already redacts what it sends; the server re-redacts it
+ * (defence in depth) and writes NDJSON next to the other harness logs. The
+ * R2 relay is best effort: a failed upload never fails the request, because
+ * the batch is already on disk.
+ */
+async function handleLogIngest(req: IncomingMessage, res: ServerResponse): Promise<void> {
+  const ingestToken = process.env.LOG_INGEST_TOKEN;
+  if (ingestToken) {
+    const auth = req.headers.authorization;
+    if (auth !== `Bearer ${ingestToken}`) {
+      res.writeHead(403, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "forbidden" }));
+      return;
+    }
+  }
+
+  const chunks: Buffer[] = [];
+  let size = 0;
+  for await (const chunk of req) {
+    size += (chunk as Buffer).length;
+    if (size > LOG_INGEST_MAX_BYTES) {
+      res.writeHead(413, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "payload too large" }));
+      return;
+    }
+    chunks.push(chunk as Buffer);
+  }
+
+  let payload: { batchId?: string; records?: unknown[] };
+  try {
+    payload = JSON.parse(Buffer.concat(chunks).toString());
+  } catch {
+    res.writeHead(400, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ error: "invalid json" }));
+    return;
+  }
+
+  const incoming = Array.isArray(payload.records) ? payload.records : [];
+  const records = incoming.map((record) => sanitizeLogRecord(record));
+
+  // Persist locally first - the R2 relay is best effort.
+  try {
+    if (!existsSync(LOG_INGEST_DIR)) mkdirSync(LOG_INGEST_DIR, { recursive: true });
+    const day = new Date().toISOString().slice(0, 10);
+    const file = join(LOG_INGEST_DIR, `logs-${day}.ndjson`);
+    appendFileSync(file, records.map((record) => JSON.stringify(record)).join("\n") + "\n");
+  } catch (err) {
+    console.error("[LogIngest] Failed to persist batch:", err);
+  }
+
+  let relayed = false;
+  try {
+    const r2Config = loadR2Config();
+    if (r2Config) {
+      const client = new R2Client(r2Config);
+      const now = new Date();
+      const stamp = `${now.getUTCFullYear()}/${String(now.getUTCMonth() + 1).padStart(2, "0")}/${String(now.getUTCDate()).padStart(2, "0")}`;
+      await client.upload({
+        key: `logs/inbound/${stamp}/${payload.batchId ?? Date.now()}.ndjson`,
+        body: records.map((record) => JSON.stringify(record)).join("\n") + "\n",
+        contentType: "application/x-ndjson",
+      });
+      relayed = true;
+    }
+  } catch (err) {
+    console.error("[LogIngest] Failed to relay batch to R2:", err);
+  }
+
+  res.writeHead(202, { "Content-Type": "application/json" });
+  res.end(JSON.stringify({ accepted: records.length, relayed }));
+}
+
+/** Re-redact one inbound record. Unknown shapes are kept as a redacted value. */
+function sanitizeLogRecord(record: unknown): Record<string, unknown> {
+  if (!record || typeof record !== "object") {
+    return { value: redactValue(record) };
+  }
+  const safe: Record<string, unknown> = { ...(record as Record<string, unknown>) };
+  if (typeof safe.message === "string") {
+    safe.message = redactValue(safe.message);
+  }
+  if (safe.fields && typeof safe.fields === "object") {
+    safe.fields = redactValue(safe.fields);
+  }
+  return safe;
+}
+
 interface JobCommand {
   command: string;
   jobId: string;
@@ -550,6 +649,9 @@ async function main() {
         acknowledgeCommands();
         res.writeHead(200, { "Content-Type": "application/json" });
         res.end(JSON.stringify({ success: true }));
+      } else if (url.pathname === "/api/logs" && req.method === "POST") {
+        // Centralized application logs from the harness
+        await handleLogIngest(req, res);
       } else if (url.pathname === "/health") {
         // Keep the plain-text contract that external monitors check for "OK".
         res.writeHead(200, { "Content-Type": "text/plain" });