pi-harness-runtime 1.1.398 → 1.1.403

package/index.ts

@@ -59,7 +59,7 @@ import {
 } from "./packages/quota-manager/src/tui-usage-monitor.ts";
 import { QuotaManager } from "./packages/quota-manager/src/quota-manager.ts";
 import { buildFooterStatusValue } from "./footer-status.ts";
-import { registerGithubLoginCommand } from "./packages/clipboard/src/github-login.js";
+import { registerGithubLoginCommand } from "./packages/clipboard/dist/src/github-login.js";
 import {
 	MAX_PROACTIVE_COMPACT_FAILURES,
 	OUTPUT_LIMIT_RESUME_PROMPT,
@@ -74,9 +74,9 @@ import {
 import { aggregateWindows } from "./windows.ts";
 
 // Relay client for streaming callbacks (t3code-style two-way communication)
-import { RelayClient } from "./packages/relay/src/client.js";
+import { RelayClient } from "./packages/relay/dist/client.js";
 import type { CallbackPayload } from "./packages/relay/src/types.js";
-import { describeRelayEndpoint, resolveRelayEndpoint } from "./packages/relay/src/relay-endpoint.js";
+import { describeRelayEndpoint, resolveRelayEndpoint } from "./packages/relay/dist/relay-endpoint.js";
 import { renderStatus } from "./renderer.ts";
 import {
 	JobStateMachine,
@@ -237,6 +237,65 @@ const sharedState = {
 	workspaceEnvMessage: null as string | null,
 };
 
+/**
+ * Apply an approval decision from a channel to the pending question.
+ *
+ * Telegram and LINE share this one resolver: the canonical request ID
+ * decides, the channel only records where the answer came from. A stale,
+ * duplicated or unauthorized click resolves nothing and leaves the running
+ * wait untouched.
+ */
+function applyChannelApproval(
+	action: string,
+	requestId: string,
+	channel: "telegram" | "line",
+): boolean {
+	const controller = sharedState.pqController;
+	if (!controller?.applyApproval) {
+		logToFile("[Approval]", "No pending question controller - click ignored");
+		return false;
+	}
+
+	const result = controller.applyApproval(action, requestId, channel);
+	if (!result?.applied) {
+		logToFile(
+			"[Approval]",
+			`Stale or duplicate ${channel} click for ${requestId}: ${result?.reason ?? "ignored"}`,
+		);
+		return false;
+	}
+
+	logToFile("[Approval]", `${channel} decision '${action}' applied to ${requestId}`);
+
+	// The question is answered, so the wait is over. The wait state is only
+	// cleared after a successful resolution.
+	sharedState.waitingForUserSince = null;
+	sharedState.updateAutoContinueStatus?.("IDLE");
+
+	if (result.resolution === "yes") {
+		(sharedState.todoContinuationController as any)?.resume?.();
+	} else {
+		(sharedState.todoContinuationController as any)?.explicitPause?.();
+	}
+
+	return true;
+}
+
+/**
+ * Does the shared wait state still belong to the captured request?
+ *
+ * A newer question can become active while Jev is evaluating the captured
+ * one. Clearing the shared wait state then would stop the Jev checks of
+ * the new question, so the state is only cleared when it still belongs to
+ * the captured request.
+ */
+function waitBelongsToRequest(requestId: string | undefined): boolean {
+	if (!requestId) return true;
+	const active = sharedState.pqController?.getCurrentQuestion?.()?.requestId;
+	if (!active) return true;
+	return active === requestId;
+}
+
 async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 	addHarnessMessage("Jev", "initializing", "wait");
 	try {
@@ -253,7 +312,7 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 		// Resolve the provider chain. Every credential stays bound to its own
 		// provider: a TypeSafe key is never sent to OpenRouter and an OpenRouter
 		// key is never sent to the TypeSafe API.
-		const { resolveJevProviders } = await import("./packages/jev-judge/dist/index.js");
+		const { resolveJevProviders, classifyQuestionRisk } = await import("./packages/jev-judge/dist/index.js");
 		const jevProviders = resolveJevProviders({ keysDir });
 
 		// Create pending question controller - works independently of Jev
@@ -394,6 +453,13 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 		// Set up pending question callback to dispatch answers to Pi
 		pqController.onUserAnswer((question, answer) => {
 			logToFile("[PendingQuestion]", `User answered: ${answer} for question ${question.requestId}`);
+			// The question is answered, so the wait is over. The wait state
+			// is cleared here, after a successful resolution: a stale click
+			// must never clear a valid pending wait.
+			waitingForUserSince = null;
+			sharedState.waitingForUserSince = null;
+			_lastNotifiedQuestion = "";
+			updateAutoContinueStatus("IDLE");
 			// Dispatch answer to Pi
 			const message = answer === "yes" ? "yes" : "not yet";
 			pi.sendUserMessage(message, { deliverAs: "steer" });
@@ -429,11 +495,26 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 				}
 				
 				// Create question in controller
+				const questionKind = result.kind || "approval";
+				// The risk facts of the proposed action are derived from the
+				// question itself and recorded with the request: the
+				// autonomous decision is only as safe as these facts.
+				const riskFacts = classifyQuestionRisk({
+					kind: questionKind,
+					text: result.questionText,
+				});
 				const question = pqController.createQuestion({
 					text: result.questionText,
 					sessionId: _sessionId,
 					workspacePath: _piSessionCwd || "/",
-					kind: result.kind || "approval",
+					kind: questionKind,
+					risk: {
+						requiresExplicitAuthorization: riskFacts.requiresExplicitAuthorization,
+						destructive: riskFacts.destructive,
+						reversible: riskFacts.reversible,
+						external: riskFacts.external,
+						signals: riskFacts.signals,
+					},
 				});
 				
 				logToFile("[PendingQuestion]", `Question created: ${question.requestId} - ${result.questionText?.slice(0, 50)}`);
@@ -457,10 +538,14 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 					: "No active tasks";
 				const contextInfo = `Waiting: ${waitMinutes}m | ${taskInfo}`;
 
-				// Emit WaitingForUserInput to Telegram with Yes/No buttons
-				// Uses question.requestId for callback matching
+				// Emit WaitingForUserInput to Telegram and LINE with the same
+				// Yes/No actions. The canonical request ID is the correlation
+				// key of the callback: a prefixed jobId would never match the
+				// pending question and every click would be reported stale.
 				_nc?.notifyWithApproval("WaitingForUserInput", {
-					jobId: `waiting-user-${questionJobId}`,
+					jobId: questionJobId,
+					questionId: questionJobId,
+					questionKind: question.kind,
 					requirement: result.questionText,
 				}, {
 					approveLabel: "Continue",
@@ -609,6 +694,7 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 		// Periodic check for auto-continue decision
 		const AUTO_CONTINUE_INTERVAL_MS = 60 * 1000; // Check every 1 minute
 		const MIN_WAIT_MINUTES = 5; // Minimum wait before auto-continue
+		const MAX_WAIT_MINUTES = 30; // After this the work pauses instead of waiting
 
 		const checkAndAutoContinue = async () => {
 			// Prevent overlap if inference is already in progress
@@ -629,7 +715,8 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 				: "";
 
 			const waitMinutes = (Date.now() - waitingForUserSince.getTime()) / 60000;
-			if (waitMinutes < MIN_WAIT_MINUTES) return;
+			// The judge is only asked once the question waited long enough.
+			if (!mod.isEligibleForDecision?.(waitMinutes, MIN_WAIT_MINUTES)) return;
 
 			// Update status to checking
 			updateAutoContinueStatus("CHECKING", questionHash);
@@ -681,11 +768,64 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 					return;
 				}
 
+				// The question Jev has to decide about. Without it Jev only
+				// sees progress, not what the agent asked permission to do.
+				const pendingQuestion = sharedState.pqController?.getCurrentQuestion?.();
+				// The risk facts of the proposed action. They are recorded
+				// with the question; a question without them is classified
+				// again, so the safeguards never run on missing facts.
+				const riskFacts = pendingQuestion
+					? pendingQuestion.requiresExplicitAuthorization !== undefined
+						? {
+								requiresExplicitAuthorization:
+									pendingQuestion.requiresExplicitAuthorization,
+								destructive: pendingQuestion.destructive ?? false,
+								reversible: pendingQuestion.reversible ?? true,
+								external: pendingQuestion.external ?? false,
+							}
+						: classifyQuestionRisk({
+								kind: pendingQuestion.kind,
+								text: pendingQuestion.questionText,
+							})
+					: undefined;
+				const questionContext = pendingQuestion
+					? {
+						requestId: pendingQuestion.requestId,
+						text: pendingQuestion.questionText,
+						kind: pendingQuestion.kind,
+						requiresExplicitAuthorization: riskFacts?.requiresExplicitAuthorization,
+						destructive: riskFacts?.destructive,
+						external: riskFacts?.external,
+						reversible: riskFacts?.reversible,
+					}
+					: undefined;
+
+				const decisionContext = {
+					question: questionContext,
+					currentTask: taskContext.remaining[0],
+					completionRatio:
+						taskContext.total > 0
+							? taskContext.completed.length / taskContext.total
+							: 0,
+					totalTasks: taskContext.total,
+					completedTasks: taskContext.completed.length,
+					blockers: [] as string[],
+					nextTasks: taskContext.remaining.slice(0, 5),
+					validationStatus:
+						pendingFinalTier.length > 0
+							? `${pendingFinalTier.length} final tier(s) pending`
+							: "no pending final tier",
+					waitedMinutes: Math.round(waitMinutes),
+					deadlineMinutes: MAX_WAIT_MINUTES,
+					lastUserActivity: lastUserMessage || undefined,
+				};
+
 				const taskState = mod.createTaskState(
 					taskContext.completed,
 					taskContext.remaining,
 					lastUserMessage || undefined,
 					new Date(Date.now() - waitMinutes * 60000),
+					decisionContext,
 				);
 
 				const decision = await judge.decide(taskState);
@@ -716,22 +856,115 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 						}
 					}
 
-				if (decision.action === "proceed" || decision.action === "proceed_with_caution") {
+				// The typed outcome of the decision. The action is the
+				// fallback for a judge that does not know the outcome yet.
+				let outcome = decision.outcome;
+				if (!outcome) {
+					if (decision.action === "proceed") outcome = "approve";
+					else if (decision.action === "proceed_with_caution") outcome = "proceed_with_caution";
+					else if (decision.action === "reject") outcome = "reject";
+					else outcome = "wait";
+				}
+
+				if (outcome === "wait") {
+					// A wait decision is bounded: after the deadline the work
+					// pauses instead of waiting for a user who is not there.
+					// The question stays open: it is not closed with a Jev
+					// decision, so the next check can still decide about it.
+					logToFile(
+						"[auto-continue]",
+						`Jev decided to wait (${Math.round(waitMinutes)}m waited, deadline ${MAX_WAIT_MINUTES}m)`,
+					);
+					if (waitMinutes >= MAX_WAIT_MINUTES) {
+						logToFile("[auto-continue]", "Decision deadline reached - pausing the work");
+						(sharedState.todoContinuationController as any)?.explicitPause?.();
+						// The deadline belongs to the captured question: a newer
+						// question keeps its own wait state.
+						if (waitBelongsToRequest(questionContext?.requestId)) {
+							waitingForUserSince = null;
+							sharedState.waitingForUserSince = null;
+							updateAutoContinueStatus("IDLE");
+						}
+					}
+				} else {
+					// Close the question with the Jev decision. The buttons of
+					// that request ID become stale and no synthetic user
+					// answer is injected: nobody clicked anything.
+					//
+					// A failed close means the request is no longer pending: a
+					// human answered while Jev was still evaluating. The
+					// human answer wins, so the stale decision is discarded
+					// and no continuation steer is sent.
+					const closed = questionContext?.requestId
+						? sharedState.pqController?.resolveByJev?.(
+								questionContext.requestId,
+								outcome,
+								decision.reasoning,
+							) === true
+						: false;
+					const application = mod.decideOutcomeApplication(outcome, closed);
+
+					if (application === "discard") {
+						logToFile(
+							"[auto-continue]",
+							"Question is no longer pending - discarding the stale Jev decision",
+						);
+						_inferenceInProgress = false;
+						// The wait state belongs to the captured question: a
+						// newer question keeps its own wait.
+						if (waitBelongsToRequest(questionContext?.requestId)) {
+							waitingForUserSince = null;
+							sharedState.waitingForUserSince = null;
+							_lastNotifiedQuestion = "";
+							updateAutoContinueStatus("IDLE");
+						} else {
+							logToFile(
+								"[auto-continue]",
+								"A newer question is active - keeping its wait state",
+							);
+						}
+						return;
+					}
+
+					if (application === "pause") {
+						// Jev refused the proposed action. The question is
+						// closed and the work pauses: no continuation steer
+						// is sent, so the agent waits for a human.
+						logToFile(
+							"[auto-continue]",
+							`Question ${questionContext?.requestId} closed by Jev (reject) - pausing the work`,
+						);
+						(sharedState.todoContinuationController as any)?.explicitPause?.();
+						if (waitBelongsToRequest(questionContext?.requestId)) {
+							waitingForUserSince = null;
+							sharedState.waitingForUserSince = null;
+							_lastNotifiedQuestion = "";
+							updateAutoContinueStatus("IDLE");
+						}
+						return;
+					}
+
+					logToFile(
+						"[auto-continue]",
+						`Question ${questionContext?.requestId} closed by Jev (${outcome})`,
+					);
+
 					// Update status to continuing
 					updateAutoContinueStatus("CONTINUING", questionHash);
 
 					// Send steer message to continue
 					pi.sendUserMessage(
-						decision.action === "proceed"
+						outcome === "approve"
 							? "User is unavailable. Based on task progress and low risk, proceeding autonomously.\n" +
-								  `Decision: ${decision.reasoning}\n` +
-								  "Continue with remaining tasks."
+							  `Decision: ${decision.reasoning}\n` +
+							  "Continue with remaining tasks."
 							: "User is unavailable. Proceeding with caution - will log each significant step.\n" +
-								  `Risk level: ${decision.riskLevel}\n` +
-								  "Continue with remaining tasks, reporting progress.",
+							  `Risk level: ${decision.riskLevel}\n` +
+							  "Continue with remaining tasks, reporting progress.",
 						{ deliverAs: "steer" },
 					);
 					waitingForUserSince = null;
+					sharedState.waitingForUserSince = null;
 					_lastNotifiedQuestion = "";
 
 					// Clear status after short delay
@@ -1151,7 +1384,7 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 // Lazy import - only loads when packages/todo-bd-sync exists
 async function initTodoBdSync(pi: ExtensionAPI): Promise<void> {
 	try {
-		const mod = await import("./packages/todo-bd-sync/src/extension.js");
+		const mod = await import("./packages/todo-bd-sync/dist/extension.js");
 		mod.registerTodoBdSync(pi);
 	} catch {
 		// todo-bd-sync not available
@@ -1162,7 +1395,7 @@ async function initTodoBdSync(pi: ExtensionAPI): Promise<void> {
 // Lazy import - only loads when packages/config-capture exists
 async function initConfigCapture(pi: ExtensionAPI): Promise<void> {
 	try {
-		const mod = await import("./packages/config-capture/src/index.js");
+		const mod = await import("./packages/config-capture/dist/index.js");
 		mod.registerConfigCapture(pi, { debug: false });
 	} catch {
 		// config-capture not available
@@ -1174,11 +1407,11 @@ async function initConfigCapture(pi: ExtensionAPI): Promise<void> {
 async function initQdrant(): Promise<void> {
 	addHarnessMessage("Qdrant", "checking configuration", "wait");
 	try {
-		const { getQdrantConfig } = await import("./packages/skills/src/loader.js");
+		const { getQdrantConfig } = await import("./packages/skills/dist/loader.js");
 		const cfg = getQdrantConfig();
 		if (cfg) {
 			// Check if OpenAI embedding key is available
-			const { getOpenAIApiKey } = await import("./packages/qdrant-skills/src/embedder.js");
+			const { getOpenAIApiKey } = await import("./packages/qdrant-skills/dist/embedder.js");
 			const embeddingKey = getOpenAIApiKey();
 			if (embeddingKey) {
 				logStartup("[pi-harness] Qdrant vector search ready");
@@ -1550,41 +1783,21 @@ async function initTelegram(pi: ExtensionAPI): Promise<void> {
 
 			switch (parsed.action) {
 				case CallbackActions.APPROVE: {
-					// User clicked Continue - clear waiting state and resume continuation
+					// The user clicked Continue. The request ID in the
+					// callback data is the canonical one, so the click
+					// resolves exactly this question.
 					logToFile("[TelegramCallback] Approved - user clicked Continue, resuming work");
-					sharedState.waitingForUserSince = null;
-					sharedState.updateAutoContinueStatus?.("IDLE");
-					// Resolve pending question with yes, validating request ID (first-answer-wins)
-					const approved = sharedState.pqController?.resolve({
-						resolution: "yes",
-						by: "user",
-						requestId: parsed.targetId,
-					});
-					if (!approved) {
-						logToFile("[TelegramCallback] WARNING: APPROVE button ignored - stale or mismatched request ID");
+					if (!applyChannelApproval(parsed.action, parsed.targetId, "telegram")) {
 						await acknowledge("Stale button - no pending question to approve");
-						break;
 					}
-					// Also resume continuation controller
-					(sharedState.todoContinuationController as any)?.resume?.();
 					break;
 				}
 				case CallbackActions.REJECT: {
-					// User clicked Not yet - just dismiss, don't resume
+					// The user clicked Not yet - dismiss and pause.
 					logToFile("[TelegramCallback] Rejected - user clicked Not yet, pausing");
-					// Resolve pending question with no, validating request ID (first-answer-wins)
-					const rejected = sharedState.pqController?.resolve({
-						resolution: "no",
-						by: "user",
-						requestId: parsed.targetId,
-					});
-					if (!rejected) {
-						logToFile("[TelegramCallback] WARNING: REJECT button ignored - stale or mismatched request ID");
+					if (!applyChannelApproval(parsed.action, parsed.targetId, "telegram")) {
 						await acknowledge("Stale button - no pending question to reject");
-						break;
 					}
-					// Explicitly pause the continuation
-					(sharedState.todoContinuationController as any)?.explicitPause?.();
 					break;
 				}
 				default:
@@ -2052,6 +2265,12 @@ async function initRelayStream(): Promise<void> {
 						: `Callback: ${callback.action} ${callback.targetId}`,
 				);
 
+				// A LINE postback is the same decision as a Telegram button
+				// click: one resolver, the same canonical request ID.
+				if (callback.type === "line_callback") {
+					applyChannelApproval(callback.action, callback.targetId, "line");
+				}
+
 				// Forward Telegram callbacks to the adapter
 				if (callback.type === "telegram_callback" && _relayTelegramAdapter) {
 					// The mapping is a pure function (harness/telegram-update.ts) so
@@ -2499,7 +2718,7 @@ function initMoocodingSyncHint(): void {
 // Lazy import - only loads when packages/write-review exists
 async function initWriteReview(pi: ExtensionAPI): Promise<void> {
 	try {
-		const mod = await import("./packages/write-review/src/index.js");
+		const mod = await import("./packages/write-review/dist/index.js");
 		mod.injectWriterInstructions(pi);
 	} catch {
 		// write-review not available
@@ -2512,7 +2731,7 @@ async function initFileCopyHelper(_pi: ExtensionAPI): Promise<void> {
 	// DISABLED: File copy helper appends large suffix to every prompt
 	// but agent doesn't read it properly. Re-enable when fixed.
 	// try {
-	// 	const mod = await import("./packages/file-copy-helper/src/extension.js");
+	// 	const mod = await import("./packages/file-copy-helper/dist/extension.js");
 	// 	mod.registerFileCopyHelper(_pi);
 	// } catch {
 		// file-copy-helper not available
@@ -2528,8 +2747,8 @@ async function initFileCopyHelper(_pi: ExtensionAPI): Promise<void> {
 // - harness_rules tool for rule retrieval and acknowledgement
 async function initAgentPolicy(pi: ExtensionAPI): Promise<void> {
 	try {
-		const { registerAgentPolicy } = await import("./packages/agent-policy/src/extension.js");
-		const { resetPolicyStore } = await import("./packages/agent-policy/src/policy-store.js");
+		const { registerAgentPolicy } = await import("./packages/agent-policy/dist/extension.js");
+		const { resetPolicyStore } = await import("./packages/agent-policy/dist/policy-store.js");
 		resetPolicyStore(); // Auto-reset so new sessions don't need re-acknowledgment
 		registerAgentPolicy(pi, {
 			harnessRulesPath: new URL("./AGENTS.md", import.meta.url),
@@ -2557,7 +2776,7 @@ async function initAgentPolicy(pi: ExtensionAPI): Promise<void> {
 // Loads curated notes at session start for Hermes-style memory
 async function initMemory(pi: ExtensionAPI): Promise<void> {
 	try {
-		const { getGlobalMemoryStore } = await import("./packages/trajectory/src/memory-store.js");
+		const { getGlobalMemoryStore } = await import("./packages/trajectory/dist/src/memory-store.js");
 		const memoryStore = getGlobalMemoryStore();
 
 		logToFile("[memory]", "Memory store initialized");
@@ -2790,7 +3009,7 @@ async function initHermesSkills(pi: ExtensionAPI): Promise<void> {
 	try {
 		// Dynamically import to avoid circular deps
 		const { initSkills } =
-			await import("./packages/skills/src/index.js");
+			await import("./packages/skills/dist/index.js");
 
 		// Scan skills from default locations
 		const result = initSkills();
@@ -2799,7 +3018,7 @@ async function initHermesSkills(pi: ExtensionAPI): Promise<void> {
 
 		// Register /skill commands
 		try {
-			const { initSkillCommands } = await import("./packages/skills/src/skill-commands.js");
+			const { initSkillCommands } = await import("./packages/skills/dist/skill-commands.js");
 			initSkillCommands(pi);
 			logStartup("[pi-harness] Registered skill commands");
 
@@ -4357,7 +4576,7 @@ Run \`bd ready\` to see current bd issues.
 			}
 			if (mode !== "tui") return;
 			const { createHarnessFooter } = await import(
-				"./packages/tui/src/harness-footer.js"
+				"./packages/tui/dist/harness-footer.js"
 			);
 			ctx.ui.setFooter((tui, theme, footerData) =>
 				createHarnessFooter(tui, theme, footerData, {
@@ -5262,7 +5481,7 @@ Run \`bd ready\` to see current bd issues.
 				ctx.ui.setHeader(undefined);
 				ctx.ui.notify("Built-in Pi header restored.", "info");
 			} else if (mode === "harness" || mode === "" || mode === "") {
-				const { createHarnessHeader } = await import("./packages/tui/src/harness-header.js");
+				const { createHarnessHeader } = await import("./packages/tui/dist/harness-header.js");
 				ctx.ui.setHeader((tui, theme) =>
 					createHarnessHeader(tui, theme, {
 						version: HARNESS_VERSION,
@@ -5610,7 +5829,9 @@ Run \`bd ready\` to see current bd issues.
 			pi.sendUserMessage(content, { deliverAs });
 			await nc("ResumeScheduled", {
 				requirement: "Session auto-resume",
-				reason,
+				// A resume trigger is not a failure. It renders as
+				// "Trigger: Context compacted", never as "Error: ...".
+				trigger: reason,
 			});
 		} catch (error) {
 			logToFile(

package/mirror.ts

@@ -30,7 +30,7 @@
  * Models live here: `~/.pi/usage-status/mirror.json`.
  */
 
-import { getMirrorPath, readJson, writeJson } from "./cli.ts";
+import { getMirrorPath, readJson, writeJson } from "./cli.js";
 
 /**
  * Canonical lowercase provider ids — mirrors the KNOWN_AI_PROVIDERS from

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-harness-runtime",
-  "version": "1.1.398",
+  "version": "1.1.403",
   "description": "[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.",
   "type": "module",
   "scripts": {
@@ -18,8 +18,10 @@
     "auth:minimax:scrape": "bun packages/auth/src/run-minimax-auth.ts scrape",
     "skills:sync": "bun scripts/skills-sync.ts",
     "skills:sync:check": "bun scripts/skills-sync.ts --check-only",
-    "build": "for pkg in packages/*/; do [ -f \"${pkg}tsconfig.json\" ] && [ \"$pkg\" != \"packages/provider-router/\" ] && node_modules/.bin/tsc -p \"${pkg}tsconfig.json\" --skipLibCheck > /dev/null 2>&1 || true; done",
-    "prepublishOnly": "bun run build",
+    "build": "bun scripts/build-packages.ts",
+    "build:verify": "bun scripts/verify-package-contents.ts",
+    "build:verify:pack": "bun scripts/verify-package-contents.ts --pack",
+    "prepublishOnly": "bun run build && bun run build:verify:pack",
     "test:harness": "node scripts/run-langchain-tests.mjs",
     "test:packages": "bun test packages/",
     "test:e2e": "PI_HARNESS_E2E=1 bun test e2e/",

package/packages/a2a-adapter/dist/discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEtF;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,mBAAmB;IACnB,YAAY,EAAE,iBAAiB,CAAC;IAChC,iCAAiC;IACjC,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,qBAAqB;IACrB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,eAAe;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG,cAAc,CAE9E;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,IAAI,CAAY;IAExB,YAAY,MAAM,EAAE,kBAAkB,EASrC;IAED,YAAY,IAAI,SAAS,CAExB;CACF;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAgC;IAE9C,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAE9B;IAED,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE7B;IAED,IAAI,IAAI,SAAS,EAAE,CAElB;IAED,IAAI,CAAC,QAAQ,EAAE,mBAAmB,GAAG,SAAS,EAAE,CAK/C;CACF;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAQ1E;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAQ7E"}
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEtF;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,mBAAmB;IACnB,YAAY,EAAE,iBAAiB,CAAC;IAChC,iCAAiC;IACjC,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,qBAAqB;IACrB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,eAAe;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,GAAG,cAAc,CAE9E;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,IAAI,CAAY;IAExB,YAAY,MAAM,EAAE,kBAAkB,EASrC;IAED,YAAY,IAAI,SAAS,CAExB;CACF;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAgC;IAE9C,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAE9B;IAED,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE7B;IAED,IAAI,IAAI,SAAS,EAAE,CAElB;IAED,IAAI,CAAC,QAAQ,EAAE,mBAAmB,GAAG,SAAS,EAAE,CAK/C;CACF;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAQ1E;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAQ7E"}

package/packages/a2a-adapter/dist/discovery.js

@@ -3,7 +3,6 @@
  *
  * Advertises agent capabilities and handles agent registry.
  */
-import { fetch } from "undici";
 import { createAgentCard } from "./agent.js";
 /**
  * Start a local A2A discovery agent

package/packages/a2a-adapter/dist/discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAqB7C;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,IAAI,CAAY;IAExB,YAAY,MAA0B;QACpC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;YAC1B,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,eAAe;YAC7D,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,OAAO;YAChB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE9C,QAAQ,CAAC,IAAe;QACtB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,QAA6B;QAChC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAClC,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,yBAAyB,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,QAAQ,CAAC,IAAI,EAAwB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAkB;IACrD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAA6B,EAAE;QACpD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CACH,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAkB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAqB7C;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,IAAI,CAAY;IAExB,YAAY,MAA0B;QACpC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;YAC1B,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,eAAe;YAC7D,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,OAAO;YAChB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE9C,QAAQ,CAAC,IAAe;QACtB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,QAA6B;QAChC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAClC,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,yBAAyB,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,QAAQ,CAAC,IAAI,EAAwB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAkB;IACrD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAA6B,EAAE;QACpD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CACH,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAkB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC3D,CAAC"}

package/packages/a2a-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/a2a-adapter",
-  "version": "1.1.398",
+  "version": "1.1.403",
   "type": "module",
   "description": "Google Agent-to-Agent (A2A) protocol adapter for pi-harness",
   "main": "dist/index.js",

package/packages/a2a-adapter/src/discovery.ts

@@ -4,7 +4,6 @@
  * Advertises agent capabilities and handles agent registry.
  */
 
-import { fetch } from "undici";
 import type { AgentSearchCriteria } from "./client.js";
 import { createAgentCard } from "./agent.js";
 import type { AgentCard, AgentCapabilities, Skill, Authentication } from "./types.js";

package/packages/agent-policy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/agent-policy",
-  "version": "1.1.398",
+  "version": "1.1.403",
   "description": "Agent policy runtime for pi-harness - enforces mandatory rule delivery and mutation gating",
   "type": "module",
   "main": "./dist/index.js",

package/packages/architecture-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/architecture-generator",
-  "version": "1.1.398",
+  "version": "1.1.403",
   "description": "Generate ADR and Mermaid diagrams from project analysis",
   "type": "module",
   "main": "./dist/index.js",

package/packages/auth/dist/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Public entry point of the browser authentication app.
+ *
+ * The barrel exists so that the published `pi-harness-runtime` package can
+ * import the built file (`dist/index.js`) instead of a source path that only
+ * exists on a developer machine.
+ */
+export * from "./minimax-browser-auth.js";
+//# sourceMappingURL=index.d.ts.map

package/packages/auth/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,2BAA2B,CAAC"}

package/packages/auth/dist/index.js

@@ -0,0 +1,9 @@
+/**
+ * Public entry point of the browser authentication app.
+ *
+ * The barrel exists so that the published `pi-harness-runtime` package can
+ * import the built file (`dist/index.js`) instead of a source path that only
+ * exists on a developer machine.
+ */
+export * from "./minimax-browser-auth.js";
+//# sourceMappingURL=index.js.map

package/packages/auth/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,2BAA2B,CAAC"}