pi-harness-runtime 1.1.427 → 1.1.428

package/packages/projection-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/projection-engine",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/prompt-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/prompt-compiler",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Deterministic prompt compiler for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/prompt-versioning/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/prompt-versioning",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "description": "Version control for prompts with rollback support (RFC-0019)",
   "main": "dist/index.js",

package/packages/provider-adapter-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/provider-adapter-sdk",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "SDK for building, testing, and registering AI provider adapters",
   "type": "module",
   "main": "./dist/index.js",

package/packages/provider-router/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/provider-router",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Enhanced Provider Router for pi-harness-runtime — intelligent routing with capabilities, costs, and quotas",
   "type": "module",
   "main": "./dist/provider-router.js",

package/packages/provider-selector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/provider-selector",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Multi-Provider Selector — route requests by cost, quality, and latency (RFC-0012)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/providers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/providers",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — providers",
   "type": "module",
   "main": "./dist/index.js",

package/packages/qdrant-skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/qdrant-skills",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Qdrant vector search integration for Hermes-style skill system",
   "type": "module",
   "main": "./dist/index.js",

package/packages/quota-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/quota-manager",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — quota-manager",
   "type": "module",
   "main": "./dist/index.js",

package/packages/rate-limiter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/rate-limiter",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "description": "Rate limiting with token bucket algorithm (RFC-0023)",
   "main": "dist/index.js",

package/packages/react-vite-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/react-vite-plugin",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "React/Vite framework analysis — components, config, TypeScript setup",
   "type": "module",
   "main": "./dist/index.js",

package/packages/relay/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/relay",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "description": "Cloud relay for remote access - T3 Connect style for pi-harness",
   "main": "./dist/index.js",

package/packages/release-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/release-manager",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "description": "Release management for pi-harness",
   "main": "dist/index.js",

package/packages/requirement-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/requirement-compiler",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Compiles raw requirements into validated CompiledRequirement with ambiguity detection and risk tagging",
   "type": "module",
   "main": "./dist/index.js",

package/packages/runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/runtime",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/scheduler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/scheduler",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — scheduler",
   "type": "module",
   "main": "./dist/index.js",

package/packages/scheduler-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/scheduler-adapter",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Scheduler Adapter — cron, systemd, launchd, internal adapters for autonomous runtime (RFC-0101 §6)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/session/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/session",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Session management system for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/session-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/session-api",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/session-export/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/session-export",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/shared-context/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/shared-context",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — shared-context",
   "type": "module",
   "main": "./dist/index.js",

package/packages/skill-mcp-client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/skill-mcp-client",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "MCP client for Skills SaaS backend",
   "type": "module",
   "main": "./dist/index.js",

package/packages/skill-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/skill-registry",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Skill Registry for pi-harness-runtime — dynamic skill discovery and invocation",
   "type": "module",
   "main": "./dist/index.js",

package/packages/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/skills",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "File-based skill system with pi.dev compatibility and Hermes self-improvement",
   "type": "module",
   "main": "src/index.ts",

package/packages/sprint-planner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/sprint-planner",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "description": "Sprint planning engine for pi-harness",
   "main": "dist/index.js",

package/packages/subscription-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/subscription-engine",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/task-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/task-compiler",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Task Compiler for pi-harness-runtime — produces deterministic task DAG from CompiledRequirement",
   "type": "module",
   "main": "./dist/index.js",

package/packages/tencentdb-memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/tencentdb-memory",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "TencentDB Agent Memory client - sync skills to centralized knowledge base",
   "type": "module",
   "main": "src/index.ts",

package/packages/tencentdb-sync/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/tencentdb-sync",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Sync SKILL.md skills to TencentDB-Agent-Memory server (RFC-0105/0106)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/test-data-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/test-data-generator",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Test data generation for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/test-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/test-generator",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Auto-Test Generator — generate unit and E2E tests from source code (RFC-0013)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/todo-bd-sync/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/todo-bd-sync",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Two-way sync between rpiv-todo overlay and bd issue tracker",
   "type": "module",
   "main": "src/index.ts",

package/packages/token-estimation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/token-estimation",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — token-estimation",
   "type": "module",
   "main": "./dist/index.js",

package/packages/token-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/token-optimizer",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Token Budget Optimizer — maximize prompt value within token limits (RFC-0011)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/tooling-preference/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/tooling-preference",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — JS/TS tooling preference (Biome vs ESLint/Prettier) proposal",
   "type": "module",
   "main": "./dist/index.js",

package/packages/trajectory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/trajectory",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Trajectory capture for the write-review loop — persists cycle records for learning",
   "type": "module",
   "main": "./dist/src/index.js",

package/packages/tui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/tui",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — tui",
   "type": "module",
   "main": "./dist/index.js",

package/packages/two-phase-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/two-phase-review",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — two-phase implementation and review workflow (queue review signals, gate the phase, scope the diff)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/types",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Shared TypeScript types for pi-harness-runtime packages",
   "type": "module",
   "main": "./dist/index.js",

package/packages/voice-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/voice-api",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "description": "Voice-to-text API using Whisper for Telegram and LINE integration",
   "main": "./dist/index.js",

package/packages/webmcp-tester/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/webmcp-tester",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "WebMCP-powered E2E testing for pi-harness - natural language test scenarios",
   "type": "module",
   "main": "./dist/index.js",

package/packages/wiki/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/wiki",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "LLM Wiki integration for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/workflow-events/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/workflow-events",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/workspace-scanner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/workspace-scanner",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/worktree/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/worktree",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "pi-harness-runtime — worktree",
   "type": "module",
   "main": "./dist/index.js",

package/packages/write-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/write-review",
-  "version": "1.1.427",
+  "version": "1.1.428",
   "description": "Two-agent write-review loop with blackboard coordination",
   "type": "module",
   "main": "src/index.ts",

package/scripts/lib/runtime-imports.ts

@@ -0,0 +1,199 @@
+/**
+ * Resolve the relative imports of a published file.
+ *
+ * The published package is a single app: every internal package lives in
+ * `packages/<name>/` and the runtime reaches it through relative paths. A
+ * relative import that does not resolve is a broken module graph, and a
+ * consumer finds out when the import runs - long after the release.
+ *
+ * The check that used to guard this only followed specifiers that contained
+ * "packages/", so an import inside a package (`./locks.js`) was never
+ * looked at, and the compiled output was never scanned at all. That gap
+ * let a package whose entry point could not be imported ship.
+ *
+ * The rules:
+ *
+ *   1. A TYPE-only import is erased at runtime, so it does not need a
+ *      runtime target. It is skipped.
+ *   2. Comments are removed before the scan, so a commented-out import is
+ *      not a broken import.
+ *   3. A relative import resolves when the target file exists:
+ *        - the specifier as written (`./x.js` -> `x.js`),
+ *        - the TypeScript source of a `.js` specifier (`./x.js` -> `x.ts`),
+ *          because the compiler and the Bun runtime map it, or
+ *        - a directory entry point (`./x` -> `x/index.js`).
+ *   4. A compiled file (`.js`) must reach a file that is PUBLISHED. A
+ *      TypeScript source (`.ts`) is resolved at compile time, so it may
+ *      reach a source file in the repository.
+ */
+
+import { existsSync, statSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+
+/** The quoting state of the comment scanner. */
+type Quote = "" | '"' | "'" | "`";
+
+/**
+ * Remove the comments from a source file.
+ *
+ * A string or a template literal may contain something that looks like a
+ * comment, so the scanner tracks the quoting state instead of using a
+ * regular expression.
+ */
+export function stripComments(source: string): string {
+	let out = "";
+	let i = 0;
+	let quote: Quote = "";
+
+	while (i < source.length) {
+		const char = source[i];
+		const next = source[i + 1];
+
+		if (quote) {
+			out += char;
+			if (char === "\\") {
+				// An escaped character cannot end the literal.
+				out += next ?? "";
+				i += 2;
+				continue;
+			}
+			if (char === quote) quote = "";
+			i += 1;
+			continue;
+		}
+
+		if (char === '"' || char === "'" || char === "`") {
+			quote = char;
+			out += char;
+			i += 1;
+			continue;
+		}
+
+		if (char === "/" && next === "/") {
+			// A line comment runs to the end of the line.
+			while (i < source.length && source[i] !== "\n") i += 1;
+			continue;
+		}
+
+		if (char === "/" && next === "*") {
+			// A block comment runs to its closing marker.
+			const end = source.indexOf("*/", i + 2);
+			if (end === -1) {
+				i = source.length;
+				break;
+			}
+			// Keep the newlines, so a line number stays meaningful.
+			for (let k = i; k < end; k += 1) {
+				if (source[k] === "\n") out += "\n";
+			}
+			i = end + 2;
+			continue;
+		}
+
+		out += char;
+		i += 1;
+	}
+
+	return out;
+}
+
+/**
+ * Every RELATIVE value import of a source file.
+ *
+ * A type-only import is skipped: `import type { X } from "..."` is erased
+ * by the compiler and never reaches the runtime.
+ */
+export function extractRelativeValueImports(source: string): string[] {
+	const code = stripComments(source);
+	const specifiers: string[] = [];
+
+	const patterns: RegExp[] = [
+		// import ... from "..." / export ... from "..."
+		/(?:^|[\n;])[ \t]*(import|export)\s+(type\s+)?[^;\n]*?from\s*["']([^"']+)["']/g,
+		// import "..." (side effect)
+		/(?:^|[\n;])[ \t]*import\s*["']([^"']+)["']/g,
+		// import("...") (dynamic)
+		/import\s*\(\s*["']([^"']+)["']\s*\)/g,
+	];
+
+	for (const pattern of patterns) {
+		for (const match of code.matchAll(pattern)) {
+			// `type` marks an import that the compiler erases.
+			if (match[2] && match[2].trim() === "type") continue;
+			const specifier = match[3] ?? match[1];
+			if (!specifier) continue;
+			if (!specifier.startsWith(".")) continue;
+			specifiers.push(specifier);
+		}
+	}
+
+	return [...new Set(specifiers)];
+}
+
+/**
+ * The files a relative specifier may point at.
+ *
+ * The candidates are absolute paths, most specific first.
+ */
+export function importTargetCandidates(
+	importer: string,
+	specifier: string,
+): string[] {
+	const base = resolve(dirname(importer), specifier);
+	const candidates = [base];
+	if (base.endsWith(".js")) candidates.push(`${base.slice(0, -3)}.ts`);
+	candidates.push(`${base}.js`, `${base}.ts`);
+	candidates.push(`${base}/index.js`, `${base}/index.ts`);
+	return [...new Set(candidates)];
+}
+
+/** The result of resolving one relative import. */
+export interface ResolvedImport {
+	ok: boolean;
+	/** The file the import points at, when one was found. */
+	target?: string;
+	/** Why the import does not resolve. */
+	reason?: string;
+}
+
+/** The options of {@link resolveRelativeImport}. */
+export interface ResolveOptions {
+	/** Absolute path of the importing file. */
+	importer: string;
+	/** The relative specifier. */
+	specifier: string;
+	/** Existence test, overridable for a test. */
+	exists?: (path: string) => boolean;
+	/** Publication test, overridable for a test. */
+	isPublished?: (path: string) => boolean;
+}
+
+/**
+ * Resolve one relative import.
+ */
+export function resolveRelativeImport({
+	importer,
+	specifier,
+	exists = existsSync,
+	isPublished = () => true,
+}: ResolveOptions): ResolvedImport {
+	const candidates = importTargetCandidates(importer, specifier);
+	const found = candidates.find((candidate) => {
+		try {
+			return exists(candidate) && statSync(candidate).isFile();
+		} catch {
+			return false;
+		}
+	});
+	if (!found) {
+		return { ok: false, reason: "the target does not exist" };
+	}
+	// A compiled file has to reach a published file: a consumer never sees
+	// the repository. A TypeScript source is resolved by the compiler, so it
+	// may point at a source file in the repository.
+	const isCompiled = /\.(js|mjs|cjs)$/.test(importer);
+	if (isCompiled && !isPublished(found)) {
+		return { ok: false, target: found, reason: "the target is not published" };
+	}
+	return { ok: true, target: found };
+}