pi-harness-runtime 1.1.424 → 1.1.426

package/AGENTS.md

@@ -311,7 +311,7 @@ ssh user@host "kill old; sleep 2; uvicorn ... &"
 # CORRECT - SSH exits fast, process continues on server
 ssh -o BatchMode=yes user@host \
   "kill -9 917094 970065 2>/dev/null; sleep 1; \
-   cd /home/frappe/amos-saas/backend/services/api && \
+   cd ~/amos-saas/backend/services/api && \
    nohup .venv/bin/uvicorn amos_api.main:app --host 0.0.0.0 --port 8100 \
    > /tmp/uvicorn.log 2>&1 & \
    echo 'UVICORN_STARTED'"

package/README.md

@@ -37,7 +37,7 @@ pi install npm:@juicesharp/rpiv-todo  # Task tracking with bd sync
 
 The `pi-subagents` extension enables delegation assessment and parallel task execution for large refactoring work (10+ files, 50+ call sites).
 
-The `reverse-engineer-anything` skill (via `rea-agents`) enables reverse engineering of binaries, packages, firmware, and browser targets. Skills are not shipped with this package: they are loaded from your own skill store (`~/.pi-harness-runtime/skills`) and from your own Qdrant collection.
+The `reverse-engineer-anything` skill (via `rea-agents`) enables reverse engineering of binaries, packages, firmware, and browser targets. The package ships one skill of its own, `skills/harness-runtime/`, which tells your agent what the harness is. Every other skill is loaded from your own skill store (`~/.pi-harness-runtime/skills`) and from your own Qdrant collection.
 
 Requires Pi v0.37.3+.
 
@@ -1113,7 +1113,7 @@ Single server handles both Telegram and LINE webhooks on one domain.
    [Service]
    Type=simple
    User=frappe
-   ExecStart=/home/frappe/.bun/bin/bun run /home/frappe/unified-webhook-server.ts
+   ExecStart=~/.bun/bin/bun run ~/unified-webhook-server.ts
    Restart=always
    RestartSec=5
 

package/harness/e2e/api-key-resolver.ts

@@ -9,14 +9,15 @@
  * Then copies to ~/.pi-harness-runtime/keys/ for easy access.
  */
 
+import { homedir as osHomedir } from "node:os";
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
 import { join, dirname } from "node:path";
 
 /** pi.dev auth file location */
-const PI_AUTH_FILE = join(process.env.HOME || "/home/frappe", ".pi", "agent", "auth.json");
+const PI_AUTH_FILE = join(process.env.HOME || osHomedir(), ".pi", "agent", "auth.json");
 
 /** Our keys directory */
-const KEYS_DIR = join(process.env.HOME || "/home/frappe", ".pi-harness-runtime", "keys");
+const KEYS_DIR = join(process.env.HOME || osHomedir(), ".pi-harness-runtime", "keys");
 
 /** Key file mappings */
 const KEY_MAPPINGS: Record<string, string> = {

package/harness/notification-center.ts

@@ -5,6 +5,7 @@
  * Users can configure which channels to use and toggle them via inline buttons.
  */
 
+import { homedir as osHomedir } from "node:os";
 import * as https from "https";
 
 export interface NotificationConfig {
@@ -34,7 +35,7 @@ export interface NotificationButtons {
   style?: "primary" | "secondary" | "danger";
 }
 
-const DEFAULT_CONFIG_FILE = `${process.env.HOME || "/home/frappe"}/.pi-harness-runtime/notification-config.json`;
+const DEFAULT_CONFIG_FILE = `${process.env.HOME || osHomedir()}/.pi-harness-runtime/notification-config.json`;
 
 /**
  * Load notification configuration

package/harness/skills-plan/2026-07-12-herdr-moo-skills-adaptation-plan.md

@@ -13,14 +13,15 @@ Study Herdr's reusable `SKILL.md` distribution model and adapt the idea to `pi-h
 
 ### Local source of truth to protect
 
-- Live skills: `/home/frappe/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
+- Live skills: `~/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
 
 ### Current runtime state
 
-- `pi-harness-runtime` ships **no** bundled skills:
-  - the package has no `pi.skills` field and no `skills/` directory
-  - skill payloads live in the user's own Qdrant collection and in the
-    installation-local skill store, never in the published package
+- `pi-harness-runtime` ships exactly one skill of its own:
+  - `package.json` -> `pi.skills = ["./skills"]`
+  - `skills/harness-runtime/SKILL.md` - the skill of the package itself
+  - every other skill payload lives in the user's own Qdrant collection and
+    in the installation-local skill store, never in the published package
 - `packages/skills` is the runtime implementation: it discovers, sanitizes,
   embeds and queries skills.
 - The scanner still reads the `skills/` and `.agents/skills/` directories of
@@ -34,7 +35,7 @@ Study Herdr's reusable `SKILL.md` distribution model and adapt the idea to `pi-h
 
 The directory:
 
-`/home/frappe/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
+`~/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
 
 is continuously updated and acts as the operational knowledge base.
 
@@ -84,7 +85,7 @@ Use a **three-tier model**.
 
 Location:
 
-- `/home/frappe/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
+- `~/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
 
 Role:
 
@@ -195,7 +196,7 @@ Success criteria:
 
 Once a sanitized skill exists inside `pi-harness-runtime/skills/<name>/SKILL.md`:
 
-- expose it through the skill runtime (Qdrant + the local store), not through a bundled `pi.skills` directory
+- expose it through the existing `pi.skills` package field
 - document Herdr-style installation ergonomics for the public subset
 
 This gives the benefit of Herdr's distribution model without risking raw private content leakage.

package/harness/skills-plan/2026-07-12-minimax-prompt-step1-sync.md

@@ -6,7 +6,7 @@ Use this prompt with Minimax to implement the first safe slice of the MooCoding
 
 You are coding inside this repo:
 
-- `/home/frappe/pi-harness-runtime`
+- `~/pi-harness-runtime`
 
 Read these planning notes first:
 
@@ -33,7 +33,7 @@ Do **not** implement sanitize or export in this task.
 
 The live private source of truth is:
 
-- `/home/frappe/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
+- `~/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
 
 This source changes often and may contain private or unsanitized content.
 
@@ -68,7 +68,7 @@ Suggested initial shape:
 ```json
 {
   "version": 1,
-  "sourceRoot": "/home/frappe/frappe-bench/.claude-plugins/moocoding-skills/skills",
+  "sourceRoot": "~/frappe-bench/.claude-plugins/moocoding-skills/skills",
   "skills": []
 }
 ```

package/harness/skills-plan/2026-07-12-public-skill-export-and-sync-design.md

@@ -10,7 +10,7 @@ This document turns the high-level Herdr adaptation plan into a concrete design
 
 This design assumes the live private skill corpus remains here:
 
-- `/home/frappe/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
+- `~/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
 
 That location remains the editable operational knowledge base.
 
@@ -60,7 +60,7 @@ Every public skill should have traceable provenance:
 Outside repo package boundary:
 
 ```text
-/home/frappe/frappe-bench/.claude-plugins/moocoding-skills/skills/
+~/frappe-bench/.claude-plugins/moocoding-skills/skills/
   <skill-name>/
     SKILL.md
 ```
@@ -202,7 +202,7 @@ Example:
 
 ```json
 {
-  "sourceRoot": "/home/frappe/frappe-bench/.claude-plugins/moocoding-skills/skills",
+  "sourceRoot": "~/frappe-bench/.claude-plugins/moocoding-skills/skills",
   "skills": [
     {
       "sourceName": "bench-commands",
@@ -485,7 +485,7 @@ Document operator workflow
 This design does **not** recommend:
 
 - syncing the whole private corpus into public package directories
-- publishing directly from `/home/frappe/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
+- publishing directly from `~/frappe-bench/.claude-plugins/moocoding-skills/skills/*`
 - replacing the live MooCoding source with `pi-harness-runtime/skills/*`
 - auto-approving sanitized output without human review
 

package/harness/ssh-detach-interceptor.test.ts

@@ -148,14 +148,14 @@ describe("detectSsh", () => {
 });
 
 describe("isForegroundDaemonSsh", () => {
-	// The exact command that caused the 1911.9s hang (2026-09-14)
+	// A synthetic stand-in for the foreground SSH command that used to hang
 	const HANG_CMD =
-		"echo 'manlucha' | ssh -tt frappe@100.101.238.114 \"cd /home/frappe/amos-saas/backend/services/worker && AMOS_API_URL=https://api.ezsysbot.com AMOS_WORKER_API_KEY=test /home/frappe/amos-saas/backend/.venv/bin/python -m amos_worker --video 2>&1 | head -10\"";
+		"echo 'synthetic-test-password' | ssh -tt worker@worker.example.com \"cd /srv/app/backend/services/worker && AMOS_API_URL=https://api.example.com AMOS_WORKER_API_KEY=test /srv/app/backend/.venv/bin/python -m amos_worker --video 2>&1 | head -10\"";
 
 	const risky: Array<[string, string]> = [
 		[
 			HANG_CMD,
-			"foreground ssh -tt running amos_worker poller (real 1911.9s hang)",
+			"foreground ssh -tt running amos_worker poller",
 		],
 		[
 			'ssh host "uvicorn main:app --host 0.0.0.0 --port 8100"',

package/harness/ssh-hang-recovery.test.ts

@@ -0,0 +1,86 @@
+/**
+ * SSH Hang Recovery — tests for the shell-safety helpers.
+ *
+ * The host, the user and the command all reach a shell. A value that is
+ * quoted cannot end the quote, and a value that does not look like a host
+ * is rejected before it is ever passed on.
+ */
+import { describe, it } from "node:test";
+import assert from "node:assert";
+import { shellQuote, assertSafeSshTarget } from "./ssh-hang-recovery.js";
+
+describe("shellQuote", () => {
+	it("wraps a plain value in single quotes", () => {
+		assert.strictEqual(shellQuote("pm2 status"), "'pm2 status'");
+	});
+
+	it("neutralizes a value that would close the quote", () => {
+		// The classic breakout: ' ; rm -rf / ; '
+		const payload = "'; rm -rf / ; '";
+		const quoted = shellQuote(payload);
+		// Every ' of the payload is closed, escaped and reopened, so the
+		// payload can never leave the quoted string.
+		assert.strictEqual(quoted, "''\\''; rm -rf / ; '\\'''");
+		// The quoted form has an even number of quotes: it parses as one
+		// literal string, whatever the payload was.
+		assert.strictEqual((quoted.match(/'/g) || []).length % 2, 0);
+	});
+
+	it("neutralizes a command substitution", () => {
+		const quoted = shellQuote("$(whoami)");
+		assert.strictEqual(quoted, "'$(whoami)'");
+	});
+
+	it("neutralizes a backtick substitution", () => {
+		const quoted = shellQuote("`id`");
+		assert.strictEqual(quoted, "'`id`'");
+	});
+
+	it("keeps a newline inside the quotes", () => {
+		const quoted = shellQuote("a\nb");
+		assert.strictEqual(quoted, "'a\nb'");
+	});
+});
+
+describe("assertSafeSshTarget", () => {
+	it("accepts a DNS name", () => {
+		assert.doesNotThrow(() => assertSafeSshTarget("example.com", "deploy"));
+	});
+
+	it("accepts an IPv4 address", () => {
+		assert.doesNotThrow(() => assertSafeSshTarget("203.0.113.10", "deploy"));
+	});
+
+	it("accepts a bracketed IPv6 address", () => {
+		assert.doesNotThrow(() => assertSafeSshTarget("[2001:db8::1]", "deploy"));
+	});
+
+	it("rejects a host that carries a command", () => {
+		assert.throws(
+			() => assertSafeSshTarget("example.com; rm -rf /", "deploy"),
+			/invalid ssh host/,
+		);
+	});
+
+	it("rejects a host that carries a substitution", () => {
+		assert.throws(
+			() => assertSafeSshTarget("$(whoami).example.com", "deploy"),
+			/invalid ssh host/,
+		);
+	});
+
+	it("rejects a host with a space", () => {
+		assert.throws(() => assertSafeSshTarget("a b", "deploy"), /invalid ssh host/);
+	});
+
+	it("rejects a user that carries a command", () => {
+		assert.throws(
+			() => assertSafeSshTarget("example.com", "root; rm -rf /"),
+			/invalid ssh user/,
+		);
+	});
+
+	it("rejects a user with a shell metacharacter", () => {
+		assert.throws(() => assertSafeSshTarget("example.com", "a$b"), /invalid ssh user/);
+	});
+});

package/harness/ssh-hang-recovery.ts

@@ -11,8 +11,8 @@
  *     → Still failing? → Escalate to human with diagnostic
  */
 
-import { execSync, exec } from "child_process";
-import { setTimeout as setAsyncTimeout, clearTimeout } from "timers";
+import { execSync, exec } from "node:child_process";
+import { setTimeout as setAsyncTimeout, clearTimeout } from "node:timers";
 
 export interface SSHConfig {
 	host: string;
@@ -33,11 +33,42 @@ export interface SSHResult {
 }
 
 const DEFAULT_TIMEOUT = 120_000; // 2 minutes
-const HANG_THRESHOLD_MS = 60_000; // 1 minute = likely hang
 
 /**
- * Sanitize input for shell commands - prevent command injection
+ * A host is either a DNS name, an IPv4 address or a bracketed IPv6 address.
+ * Anything else never reaches the shell.
  */
+const SAFE_HOST = /^(?:[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?|\[[0-9A-Fa-f:.]+\])$/;
+
+/** A login name on the remote machine. */
+const SAFE_USER = /^[A-Za-z0-9._-]+$/;
+
+/**
+ * Shell-quote a value for a POSIX shell.
+ *
+ * Every value that reaches the shell goes through here: a value that is
+ * wrapped in single quotes cannot end the quote and cannot start a new
+ * command, whatever it contains.
+ */
+export function shellQuote(value: string): string {
+	return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+
+/**
+ * Reject a host or user that is not a plain identifier.
+ *
+ * The host and the user are interpolated into a command line, so they are
+ * validated instead of quoted: a value that does not look like a host is
+ * never a host, and passing it on would only help an attacker.
+ */
+export function assertSafeSshTarget(host: string, user: string): void {
+	if (!SAFE_HOST.test(host)) {
+		throw new Error(`Refusing to use an invalid ssh host: ${JSON.stringify(host)}`);
+	}
+	if (!SAFE_USER.test(user)) {
+		throw new Error(`Refusing to use an invalid ssh user: ${JSON.stringify(user)}`);
+	}
+}
 
 /**
  * Execute SSH command with automatic hang recovery
@@ -54,7 +85,9 @@ export async function sshWithRecovery(
 		strictHostKeyChecking = false,
 	} = config;
 
-	const sshBase = `ssh -o BatchMode=yes -o ConnectTimeout=30 -o StrictHostKeyChecking=${strictHostKeyChecking ? "yes" : "no"} ${user}@${host}`;
+	assertSafeSshTarget(host, user);
+
+	const sshBase = `ssh -o BatchMode=yes -o ConnectTimeout=30 -o StrictHostKeyChecking=${strictHostKeyChecking ? "yes" : "no"} ${shellQuote(user)}@${shellQuote(host)}`;
 
 	let retries = 0;
 	let hungProcessesKilled = false;
@@ -65,7 +98,7 @@ export async function sshWithRecovery(
 		try {
 			// Execute with timeout
 			const result = await execAsync(
-				`${sshBase} '${command.replace(/'/g, "'\\''")}'`,
+				`${sshBase} ${shellQuote(command)}`,
 				timeout,
 			);
 
@@ -129,17 +162,17 @@ export async function sshWithRecovery(
 async function killStuckProcesses(host: string, user: string): Promise<void> {
 	const killCommands = [
 		// Kill stuck SSH sessions
-		`pkill -f "ssh.*${host}" || true`,
+		`pkill -f ${shellQuote(`ssh.*${host}`)} || true`,
 		// Kill stuck PM2 commands
-		`pkill -f "pm2.*amos-saas" || true`,
+		`pkill -f ${shellQuote("pm2.*")} || true`,
 		// Kill stuck sudo commands
-		`pkill -f "sudo.*pm2" || true`,
+		`pkill -f ${shellQuote("sudo.*pm2")} || true`,
 	];
 
 	for (const cmd of killCommands) {
 		try {
 			execSync(
-				`ssh -o BatchMode=yes -o ConnectTimeout=10 ${user}@${host} '${cmd}'`,
+				`ssh -o BatchMode=yes -o ConnectTimeout=10 ${shellQuote(user)}@${shellQuote(host)} ${shellQuote(cmd)}`,
 				{ timeout: 10_000, encoding: "utf-8" },
 			);
 		} catch {
@@ -154,7 +187,7 @@ async function killStuckProcesses(host: string, user: string): Promise<void> {
 function killLocalSSHProcesses(host: string): void {
 	try {
 		// Kill any local SSH processes connecting to this host
-		execSync(`pkill -f "ssh.*${host}" || true`, { timeout: 5000 });
+		execSync(`pkill -f ${shellQuote(`ssh.*${host}`)} || true`, { timeout: 5000 });
 	} catch {
 		// Ignore
 	}
@@ -168,8 +201,9 @@ export async function pingServer(
 	user: string = "frappe",
 ): Promise<boolean> {
 	try {
+		assertSafeSshTarget(host, user);
 		execSync(
-			`ssh -o BatchMode=yes -o ConnectTimeout=5 ${user}@${host} 'echo ok'`,
+			`ssh -o BatchMode=yes -o ConnectTimeout=5 ${shellQuote(user)}@${shellQuote(host)} ${shellQuote("echo ok")}`,
 			{ timeout: 10_000 },
 		);
 		return true;
@@ -186,7 +220,7 @@ export async function getPM2Status(
 	pm2Path?: string,
 ): Promise<SSHResult> {
 	const pm2Cmd = pm2Path || "pm2";
-	const command = `PM2_HOME=/home/frappe/.pm2 ${pm2Cmd} status`;
+	const command = `PM2_HOME=~/.pm2 ${pm2Cmd} status`;
 
 	return sshWithRecovery(
 		{
@@ -205,7 +239,7 @@ export async function pm2Restart(
 	host: string,
 	app: string,
 ): Promise<SSHResult> {
-	const command = `PM2_HOME=/home/frappe/.pm2 pm2 restart ${app}`;
+	const command = `PM2_HOME=~/.pm2 pm2 restart ${app}`;
 
 	return sshWithRecovery(
 		{

package/index.ts

@@ -672,8 +672,8 @@ async function initAutoContinue(pi: ExtensionAPI): Promise<void> {
 	addHarnessMessage("Jev", "initializing", "wait");
 	try {
 		// Check if Jev API key is available (env var or keys file)
-		const homedir = process.env.HOME || process.env.USERPROFILE || "/home/frappe";
-		const keysDir = `${homedir}/.pi-harness-runtime/keys`;
+		const home = process.env.HOME || process.env.USERPROFILE || homedir();
+		const keysDir = `${home}/.pi-harness-runtime/keys`;
 		const { existsSync, mkdirSync } = await import("fs");
 
 		// Auto-create directory if doesn't exist
@@ -1997,7 +1997,7 @@ async function initTelegram(pi: ExtensionAPI): Promise<void> {
 		const NotificationCenter = notifModule.NotificationCenter;
 		const createConversationBridge = notifModule.createConversationBridge;
 		const { readFileSync, existsSync } = await import("node:fs");
-		const home = process.env.HOME || process.env.USERPROFILE || "/home/frappe";
+		const home = process.env.HOME || process.env.USERPROFILE || homedir();
 		const keysDir = `${home}/.pi-harness-runtime/keys`;
 
 		const botTokenPath = `${keysDir}/telegram-bot-token.txt`;
@@ -2859,7 +2859,7 @@ async function initHoncho(pi: ExtensionAPI): Promise<void> {
 
 	// Check for API key
 	const { readFileSync, existsSync } = await import("node:fs");
-	const home = process.env.HOME || process.env.USERPROFILE || "/home/frappe";
+	const home = process.env.HOME || process.env.USERPROFILE || homedir();
 	const keyPath = `${home}/.pi-harness-runtime/keys/honcho-api-key.txt`;
 
 	if (!existsSync(keyPath)) {
@@ -2930,7 +2930,7 @@ function initLangChain(pi: {
 	const { dirname } = require("node:path");
 	const readline = require("node:readline");
 
-	const home = process.env.HOME || process.env.USERPROFILE || "/home/frappe";
+	const home = process.env.HOME || process.env.USERPROFILE || homedir();
 	const keysDir = `${home}/.pi-harness-runtime/keys`;
 	const modelsStorePath = `${home}/.pi/agent/models-store.json`;
 	const roleConfigPath = `${keysDir}/langchain-role.json`;
@@ -3973,8 +3973,8 @@ function isOutputLimitResumePromptMessage(message: {
 //   → pi-harness polls GET /api/pending-commands
 //   → pi-harness injects "resume" via steer
 function initJobPipeWatcher(pi: ExtensionAPI): void {
-	const homedir = process.env.HOME || process.env.USERPROFILE || "/home/frappe";
-	const keysDir = join(homedir, ".pi-harness-runtime", "keys");
+	const home = process.env.HOME || process.env.USERPROFILE || homedir();
+	const keysDir = join(home, ".pi-harness-runtime", "keys");
 
 	// Get webhook server URL and API key from config
 	const getWebhookConfig = () => {
@@ -4101,8 +4101,8 @@ function initJobPipeWatcher(pi: ExtensionAPI): void {
 //   → pi-harness polls this file
 //   → pi-harness injects prompt via steer
 function initLineVoiceQueue(pi: ExtensionAPI): void {
-	const homedir = process.env.HOME || process.env.USERPROFILE || "/home/frappe";
-	const queueFile = join(homedir, ".pi-harness-runtime", "line-voice-queue.jsonl");
+	const home = process.env.HOME || process.env.USERPROFILE || homedir();
+	const queueFile = join(home, ".pi-harness-runtime", "line-voice-queue.jsonl");
 
 	const processLineVoiceQueue = async () => {
 		try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-harness-runtime",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "[BETA] Codex-style /usage status + autonomous coding harness for pi. Not production ready — expect breaking changes.",
   "type": "module",
   "scripts": {
@@ -41,6 +41,7 @@
     "prompts/**/*",
     "scripts/**/*",
     "plugins/**/*",
+    "skills/harness-runtime/**/*",
     "package.json",
     "README.md",
     "AGENTS.md",
@@ -74,6 +75,9 @@
     ],
     "prompts": [
       "./prompts"
+    ],
+    "skills": [
+      "./skills"
     ]
   },
   "peerDependencies": {

package/packages/a2a-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/a2a-adapter",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "type": "module",
   "description": "Google Agent-to-Agent (A2A) protocol adapter for pi-harness",
   "main": "dist/index.js",

package/packages/agent-policy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/agent-policy",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "Agent policy runtime for pi-harness - enforces mandatory rule delivery and mutation gating",
   "type": "module",
   "main": "./dist/index.js",

package/packages/architecture-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/architecture-generator",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "Generate ADR and Mermaid diagrams from project analysis",
   "type": "module",
   "main": "./dist/index.js",

package/packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/auth",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "pi-harness-runtime — auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/autonomous-refactor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-refactor",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "type": "module",
   "description": "Autonomous refactoring engine",
   "main": "dist/index.js",

package/packages/autonomous-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/autonomous-runtime",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "Autonomous Operations Runtime — task inbox, lease management, and worker lifecycle (RFC-0101)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cache-strategy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cache-strategy",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "type": "module",
   "description": "Smart caching with TTL and invalidation strategies (RFC-0022)",
   "main": "dist/index.js",

package/packages/capability-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/capability-registry",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "Capability Registry for pi-harness-runtime — tracks model capabilities and enables capability-based routing",
   "type": "module",
   "main": "./dist/index.js",

package/packages/checkpoint/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/checkpoint",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "Enhanced checkpoint system with incremental snapshots, diff-based storage, and recovery strategies",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cli-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/cli-plugin-sdk",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "type": "module",
   "description": "CLI Plugin SDK for pi-harness — install, list, remove, update, invoke plugins",
   "main": "dist/index.js",

package/packages/clipboard/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/clipboard-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/clipboard-plugin",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/code-generation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-generation",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "Code generation pipeline for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/code-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/code-review",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "Automated code review engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/codex-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/codex-adapter",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "type": "module",
   "description": "OpenAI Codex provider adapter for pi-harness",
   "main": "dist/index.js",

package/packages/codex-watcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/codex-watcher",
-  "version": "1.1.424",
+  "version": "1.1.426",
   "description": "Watches Codex CLI sessions and emits visible messages for PING-PONG monitoring",
   "type": "module",
   "main": "./dist/src/index.js",