pi-harness-runtime 1.1.398 → 1.1.403

package/AGENTS.md

@@ -646,6 +646,25 @@ Production detection ≠ deployment authorization
 ~/.pi-harness-runtime/workspace-env.sqlite
 ```
 
+## Single Published App
+
+**`pi-harness-runtime` is the only npm package a user installs.** Every internal app
+(logging, jev-judge, contracts, relay, skills, todo-bd-sync, ...) lives in
+`packages/<name>/`, is compiled into `packages/<name>/dist/` and ships inside that one
+tarball. A user never runs `npm install @pi-harness/<anything>`.
+
+- A runtime **value** import may only point at a built artifact
+  (`../packages/<name>/dist/...`). A `packages/<name>/src/<file>.js` specifier only
+  exists when somebody compiled a package in place and is never valid in shipped code.
+- A package manifest points at the built output (`main`/`exports` -> `./dist/...`).
+  The exception is the vendored `packages/telegram` app: it ships compiled JavaScript
+  upstream, so its entry point stays in `src/` and the files are committed.
+- Compiled JavaScript never lives next to a TypeScript source: Bun resolves the
+  literal `.js` file first, so a stale artifact silently shadows the current source.
+- `npm run build` (`scripts/build-packages.ts`) builds every package and fails when a
+  published entry point is missing. `npm run build:verify:pack` proves the npm
+  tarball contains every runtime import target. Both run in CI and before a publish.
+
 ## Centralized Application Logging
 
 All application logs can be shipped to the **unified webhook server** (ingest path),
@@ -653,13 +672,19 @@ which is the only component that writes to **Cloudflare R2** (durable archive).
 pipeline lives in `packages/logging` (`@pi-harness/logging`); the harness uses the
 process-wide singleton from it.
 
-**Client side** (first success wins, the rest are skipped - a fallback chain, never
-a broadcast):
+**Client side** (first success wins, the rest are skipped - a fallback chain by
+default, never a broadcast):
 
 ```text
 producer -> classify -> redact -> sample -> buffer -> webhook -> local spool (~/.pi-harness-runtime/logs/spool)
 ```
 
+`PI_LOG_DELIVERY=fanout` switches to **broadcast** semantics: every configured
+transport receives every batch, each transport tracks its own success, and the batch
+is spooled only when *every* transport failed. Fallback stays the default because it
+never stores the same batch twice; fanout is the explicit opt-in for "the archive and
+the live path must both have it".
+
 **Server side** (durable hand-off, then an independent upload):
 
 ```text
@@ -689,6 +714,7 @@ for a user who explicitly asked for more - it never widens the event allowlist.
 | Variable | Meaning | Default |
 |----------|---------|---------|
 | `PI_LOG_SINK` | `off` \| `auto` \| `r2` \| `webhook` \| `r2+webhook` | `auto` |
+| `PI_LOG_DELIVERY` | `fallback` (first transport wins) \| `fanout` (every transport gets the batch) | `fallback` |
 | `PI_LOG_LEVEL` | Minimum level that is shipped | `info` |
 | `PI_LOG_SAMPLE_RATE` | Share of `debug` records kept (0..1) | `0.1` |
 | `PI_LOG_RATE_LIMIT` | Max records per source+event per minute | `60` |
@@ -727,8 +753,24 @@ R2 credentials are read from the key files `r2-bucket-name.txt`, `r2-endpoint.tx
 |-------|--------|---------|
 | `/api/logs` | POST | Accept a batch. `202` only after the durable write, `503` when the endpoint is not configured or the queue is unavailable (the client keeps its spool). |
 | `/api/logs/query` | POST | Read-only, tenant-scoped metadata query (installation, session, time range, level, source, event). Bounded and paginated; never returns message text. |
+| `/api/logs/incidents` | POST | Read-only, tenant-scoped query of the derived incidents (severity, source, event, time range). Bounded. |
 | `/api/logs/health` | GET | Queue depth, oldest pending age, failure count, last error. |
 
+**Incidents** (server side, versioned):
+
+A log record is a moment, an incident is a recurring problem. The server derives
+the incidents from the records it accepts:
+
+- The schema is versioned (`schemaVersion: 1`). The collection is `log_incidents_v1`,
+  so a schema change means a new collection and a reader always knows the shape.
+- The `fingerprint` is stable: the same failure produces the same fingerprint even
+  when the message carries a changing timestamp, id, path or number.
+- The `tenant_id` is **server derived** from the ingest credential, never from the
+  request body, and it is the filter of every query.
+- The durable source of truth is plain NDJSON
+  (`~/.pi-harness-runtime/logs/incidents/<tenant>/incidents-<day>.ndjson`); Qdrant
+  holds the searchable view (`IncidentQdrantWriter`).
+
 **Ingest credentials** (server side):
 
 - The endpoint **fails closed**: without a credential every write is refused with `503`.

package/CHANGELOG.md

@@ -2,6 +2,34 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [1.1.189](https://github.com/ManotLuijiu/pi-harness-runtime/compare/v1.1.402...v1.1.189) (2026-10-24)
+
+
+### Bug Fixes
+
+* **jev:** keep routine approval questions auto-approvable ([31fb075](https://github.com/ManotLuijiu/pi-harness-runtime/commit/31fb075db4363791f6c9b6094d90ce2acbeff9c1))
+
+### [1.1.188](https://github.com/ManotLuijiu/pi-harness-runtime/compare/v1.1.401...v1.1.188) (2026-10-24)
+
+
+### Bug Fixes
+
+* **packaging:** restore the copy-plugins script of the install step ([bf838f1](https://github.com/ManotLuijiu/pi-harness-runtime/commit/bf838f12efcf43d90b9b1b64608b2f46831bc896))
+
+### [1.1.187](https://github.com/ManotLuijiu/pi-harness-runtime/compare/v1.1.400...v1.1.187) (2026-10-24)
+
+
+### Bug Fixes
+
+* **jev:** give the autonomous decision the facts it rests on ([7a2707c](https://github.com/ManotLuijiu/pi-harness-runtime/commit/7a2707ceccdd21b8deabb881989f4226177f7238))
+
+### [1.1.186](https://github.com/ManotLuijiu/pi-harness-runtime/compare/v1.1.399...v1.1.186) (2026-10-24)
+
+
+### Features
+
+* **notification:** multi-channel pending questions with a typed Jev decision ([cef012e](https://github.com/ManotLuijiu/pi-harness-runtime/commit/cef012e8ef88053979ec3a68e3285eeefc59c673))
+
 ### [1.1.140](https://github.com/ManotLuijiu/pi-harness-runtime/compare/v1.1.184...v1.1.140) (2026-10-10)
 
 

package/RULES.md

@@ -1,5 +1,33 @@
 # Development Rules
 
+## Single Published App (CRITICAL)
+
+**`pi-harness-runtime` is the ONLY npm package a user installs.** Every internal
+app (logging, jev-judge, contracts, relay, skills, todo-bd-sync, ...) ships
+INSIDE that one tarball - it is never published on its own and a user never
+runs `npm install @pi-harness/<anything>`.
+
+**Rules:**
+
+1. Every workspace lives in `packages/<name>/` and is compiled into
+   `packages/<name>/dist/`.
+2. A runtime **value** import may only point at a built artifact
+   (`../packages/<name>/dist/...`). A `packages/<name>/src/<file>.js` specifier
+   only exists when somebody compiled the package in place - it is never a
+   valid import in shipped code.
+3. The package manifest points at the built output (`main`/`exports` →
+   `./dist/...`). The single exception is the vendored `packages/telegram`
+   app: it ships compiled JavaScript upstream, so its entry point stays in
+   `src/` and the files are committed.
+4. Compiled JavaScript never lives next to a TypeScript source. Bun resolves
+   the literal `.js` file first, so a stale artifact silently shadows the
+   current source.
+5. `npm run build` (scripts/build-packages.ts) builds every package and fails
+   when a published entry point is missing. `npm run build:verify:pack`
+   proves the npm tarball contains every runtime import target.
+6. Both run in CI, so a release can never publish a tarball with a missing
+   internal app.
+
 ## Version Management
 
 ### NPM Publishing via GitHub Actions + OIDC

package/harness/agent-handoff.ts

@@ -8,9 +8,8 @@
 import type {
 	HandoffContext,
 	HandoffEvent,
-} from "../packages/types/src/runtime-types.ts";
-import { writeJson, readJson } from "../cli.ts";
-// @ts-expect-error - Bun has built-in Node.js types
+} from "../packages/types/dist/runtime-types.js";
+import { writeJson, readJson } from "../cli.js";
 import { join } from "node:path";
 
 export interface HandoffData {

package/harness/autonomous-review.ts

@@ -9,7 +9,7 @@ import {
 	ensureHerdrWorkspace,
 	publishReviewCompletedSimple,
 	publishReviewRequestedSimple,
-} from "../packages/event-bus/src/herdr-bus.js";
+} from "../packages/event-bus/dist/src/herdr-bus.js";
 
 const AGENT_ID = "review-agent";
 const REVIEW_TIMEOUT_MS = 5 * 60 * 1000;

package/harness/blackboard.ts

@@ -24,9 +24,8 @@ import type {
 	LockInfo,
 	RuntimeEvent,
 	TaskGraph,
-} from "../packages/types/src/runtime-types.ts";
-import { writeJson, readJson, appendJsonl, ensureUsageDir } from "../cli.ts";
-// @ts-expect-error - Bun has built-in Node.js types
+} from "../packages/types/dist/runtime-types.js";
+import { writeJson, readJson, appendJsonl, ensureUsageDir } from "../cli.js";
 import { join, dirname } from "node:path";
 
 export class SharedBlackboard {

package/harness/context-compact-orchestrator.ts

@@ -28,7 +28,7 @@ import type {
 import {
 	roughTokenCount,
 	roughMessagesTokens,
-} from "../packages/token-estimation/src/index.js";
+} from "../packages/token-estimation/dist/index.js";
 import {
 	ContextWindowManager,
 	microcompactToolResults,

package/harness/context-window-manager.ts

@@ -16,11 +16,11 @@ import type {
 	ContextWindowConfig,
 	ProviderMessage,
 	CompactableMessage,
-} from "../packages/types/src/runtime-types.ts";
+} from "../packages/types/dist/runtime-types.js";
 import {
 	roughTokenCount,
 	roughMessagesTokens,
-} from "../packages/token-estimation/src/index.ts";
+} from "../packages/token-estimation/dist/index.js";
 
 // --- Constants ----------------------------------------------------------------
 

package/harness/e2e/playwright-runner.ts

@@ -161,14 +161,16 @@ export class PlaywrightE2ERunner implements E2ERunner {
 
 	/**
 	 * Assert a condition
+	 *
+	 * The condition is a JavaScript expression that is evaluated INSIDE the
+	 * page. Playwright evaluates a string expression in the page context on
+	 * its own, so the runner never has to build a function from a string
+	 * (which would be dynamic code execution in this process).
 	 */
 	async assert(condition: string, message?: string): Promise<boolean> {
 		if (!this.page) throw new Error("Browser not started");
 
-		const result = await this.page.evaluate((cond: unknown) => {
-			// eslint-disable-next-line no-eval
-			return eval(String(cond)) as boolean; // eslint-disable-line
-		}, condition);
+		const result = await this.page.evaluate(condition);
 
 		if (!result && message) {
 			throw new Error(message);

package/harness/herdr-agents.ts

@@ -7,7 +7,7 @@ import {
 	createHerdrBus,
 	getHerdrWorkspacePaths,
 	ensureHerdrWorkspace,
-} from "../packages/event-bus/src/herdr-bus.js";
+} from "../packages/event-bus/dist/src/herdr-bus.js";
 
 // Suppress stack traces — only show error message to keep TUI clean
 const logError = (err: unknown) =>

package/harness/job-state-machine.ts

@@ -20,7 +20,7 @@ import type {
 	JobStatus,
 	RuntimeEvent,
 	RuntimeCheckpoint,
-} from "../packages/types/src/runtime-types.ts";
+} from "../packages/types/dist/runtime-types.js";
 
 export interface StateTransition {
 	from: JobStatus;

package/harness/langchain/daemon.ts

@@ -38,7 +38,7 @@ import {
 import { homedir } from "node:os";
 import { join } from "node:path";
 
-import { LeaseManager } from "../../packages/autonomous-runtime/src/lease.js";
+import { LeaseManager } from "../../packages/autonomous-runtime/dist/lease.js";
 import type { ApprovalClass } from "../../packages/autonomous-runtime/src/types.js";
 import {
 	type CodexSession,
@@ -56,12 +56,12 @@ import {
 	publishLoopFinished,
 	publishLoopStarted,
 	publishReviewCompleted,
-} from "../../packages/event-bus/src/herdr-bus.js";
+} from "../../packages/event-bus/dist/src/herdr-bus.js";
 import { NotificationCenter } from "../../packages/notification/dist/notification-center.js";
 import {
 	getApprovedPatternStore,
 	getTrajectoryStore,
-} from "../../packages/trajectory/src/index.js";
+} from "../../packages/trajectory/dist/src/index.js";
 import { createLoopCheckpointer } from "./checkpointer.js";
 import {
 	buildDryRunDeps,

package/harness/langchain/graph.ts

@@ -38,8 +38,8 @@ export function getJevProvider(): "minimax" | "gpt" {
 	return _currentProvider;
 }
 import { readFileSync } from "node:fs";
-import { WriteReviewBlackboard } from "../../packages/write-review/src/blackboard.js";
-import { getApprovedPatternStore } from "../../packages/trajectory/src/index.js";
+import { WriteReviewBlackboard } from "../../packages/write-review/dist/blackboard.js";
+import { getApprovedPatternStore } from "../../packages/trajectory/dist/src/index.js";
 import type { Verdict } from "../../packages/write-review/src/types.js";
 import type { LoopWidget } from "./widget.js";
 

package/harness/langchain/ping-pong-middleware.ts

@@ -1,13 +1,13 @@
 import { randomUUID, createHash } from "node:crypto";
 import { appendFileSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
-import { getHerdrWorkspace } from "../../packages/event-bus/src/herdr-bus.js";
+import { getHerdrWorkspace } from "../../packages/event-bus/dist/src/herdr-bus.js";
 import {
 	PingPongDecisionEngine,
 	scanCodebaseComplexity,
 	type PingPongDecisionOptions,
 	type PingPongDecisionResult,
-} from "../../packages/intent-analyzer/src/index.js";
+} from "../../packages/intent-analyzer/dist/src/index.js";
 
 export interface PingPongMiddlewareOptions extends PingPongDecisionOptions {
 	/** Shared directory watched by LoopDaemon. Defaults to /tmp/herdr-workspace. */

package/harness/loop-code-agent.ts

@@ -12,9 +12,9 @@ import { join } from "path";
 import {
 	createHerdrBus,
 	ensureHerdrWorkspace,
-} from "../packages/event-bus/src/herdr-bus.js";
+} from "../packages/event-bus/dist/src/herdr-bus.js";
 import { SharedBlackboard } from "./blackboard.js";
-import type { LoopNextAction, LoopAgentReport } from "./loop-types.js";
+import type { LoopNextAction } from "./loop-types.js";
 import type { BlackboardRecord } from "../packages/types/src/runtime-types.js";
 
 const AGENT_ID = "code-agent";
@@ -121,8 +121,10 @@ async function main(): Promise<void> {
 			agentId: AGENT_ID,
 			taskId: action.taskId,
 			status: "success",
-			files: result.files,
-		} satisfies LoopAgentReport);
+			summary: `wrote ${result.files.length} file(s)`,
+			filesChanged: result.files,
+			createdAt: new Date().toISOString(),
+		});
 		blackboard.updateAgentStatus(AGENT_ID, "idle");
 	}
 }

package/harness/loop-controller.ts

@@ -13,7 +13,7 @@ import {
 	ensureHerdrWorkspace,
 	publishLoopStarted,
 	type LoopConfig,
-} from "../packages/event-bus/src/index.js";
+} from "../packages/event-bus/dist/src/index.js";
 import { createBlackboard } from "./blackboard.js";
 import { buildLoopTaskGraph } from "./loop-types.js";
 import type { SharedBlackboard } from "./blackboard.js";

package/harness/loop-review-agent.ts

@@ -12,7 +12,7 @@ import { join } from "path";
 import {
 	ensureHerdrWorkspace,
 	parseVerdict,
-} from "../packages/event-bus/src/herdr-bus.js";
+} from "../packages/event-bus/dist/src/herdr-bus.js";
 import { SharedBlackboard } from "./blackboard.js";
 import type {
 	LoopNextAction,

package/harness/loop-types.ts

@@ -5,7 +5,7 @@
 import type {
 	TaskGraph,
 	TaskNode,
-} from "../packages/types/src/runtime-types.ts";
+} from "../packages/types/dist/runtime-types.js";
 
 export type LoopVerdict = "approved" | "changes_requested" | "blocked";
 export type LoopNodeType = "write" | "review" | "decide" | "report";

package/harness/master-planner.ts

@@ -5,7 +5,7 @@
  * Uses a planning LLM to decompose the requirement into tasks with dependencies.
  */
 
-import type { TaskGraph } from "../packages/types/src/runtime-types.ts";
+import type { TaskGraph } from "../packages/types/dist/runtime-types.js";
 import type { TaskGraphManager } from "./task-graph.ts";
 
 export interface PlanResult {

package/harness/project-detector/detector.ts

@@ -10,9 +10,8 @@ import type {
 	ProjectDetection,
 	SeedStrategy,
 	E2EStrategy,
-} from "../../packages/types/src/runtime-types.ts";
+} from "../packages/types/dist/runtime-types.js";
 import { readJson } from "../../cli.ts";
-// @ts-expect-error - Bun has built-in Node.js types
 import { join } from "node:path";
 
 export interface DetectionSignal {

package/harness/repair-engine.ts

@@ -9,11 +9,9 @@ import type {
 	FailureType,
 	AttemptedFix,
 	RetryPolicy,
-} from "../packages/types/src/runtime-types.ts";
-import { appendJsonl } from "../cli.ts";
-// @ts-expect-error - Bun has built-in Node.js types
+} from "../packages/types/dist/runtime-types.js";
+import { appendJsonl } from "../cli.js";
 import { join, dirname } from "node:path";
-// @ts-expect-error - Bun has built-in Node.js types
 import { mkdirSync } from "node:fs";
 
 const DEFAULT_RETRY_POLICY: RetryPolicy = {

package/harness/service-diagnostics.ts

@@ -13,7 +13,7 @@ import { homedir } from "node:os";
 import { centralError, centralInfo, centralWarn } from "../packages/logging/dist/index.js";
 
 export type ServiceLevel = "info" | "warn" | "error" | "debug";
-export type ServiceName = "jev" | "honcho" | "qdrant";
+export type ServiceName = "jev" | "honcho" | "qdrant" | "infisical";
 
 export interface ServiceEvent {
 	ts: string;

package/harness/skill-sync.ts

@@ -12,10 +12,10 @@ import type {
 	SkillInfo,
 	GetSkillResult,
 } from "../packages/skill-mcp-client/src/types.js";
-import { SkillAPIError } from "../packages/skill-mcp-client/src/errors.js";
+import { SkillAPIError } from "../packages/skill-mcp-client/dist/errors.js";
 
 type SkillMCPClient = InstanceType<
-	typeof import("../packages/skill-mcp-client/src/client.js").SkillMCPClient
+	typeof import("../packages/skill-mcp-client/dist/client.js").SkillMCPClient
 >;
 
 // Lazy import to avoid errors if package not built yet
@@ -31,7 +31,7 @@ async function getClient(): Promise<SkillMCPClient | null> {
 	}
 
 	try {
-		const mod = await import("../packages/skill-mcp-client/src/client.js");
+		const mod = await import("../packages/skill-mcp-client/dist/client.js");
 		const SkillMCPClientClass = mod.SkillMCPClient;
 		const serverUrl = await getSkillsSaasUrl();