pi-harness-runtime 1.1.445 → 1.1.446

package/packages/laravel-plugin/src/analyzer.ts

@@ -1,323 +0,0 @@
-/**
- * Laravel Analyzer (RFC-0065)
- *
- * Deep analysis of Laravel workspaces via filesystem inspection.
- */
-
-import { existsSync } from "node:fs";
-import { readdir, readFile } from "node:fs/promises";
-import { join } from "node:path";
-import type { LaravelAnalysis } from "./types.js";
-
-// --- Detection ---------------------------------------------------------------
-
-function isLaravelWorkspace(root: string): boolean {
-	if (existsSync(join(root, "artisan"))) return true;
-	if (existsSync(join(root, "bootstrap", "app.php"))) return true;
-	if (existsSync(join(root, "composer.json"))) {
-		// Defer to async version; use basic file presence check as proxy
-		return (
-			existsSync(join(root, "app", "Http", "Controllers")) ||
-			existsSync(join(root, "app", "Models")) ||
-			existsSync(join(root, "app", "Console", "Commands")) ||
-			existsSync(join(root, "database", "migrations")) ||
-			existsSync(join(root, "bootstrap", "app.php"))
-		);
-	}
-	return false;
-}
-
-// --- Version ----------------------------------------------------------------
-
-async function detectVersion(root: string): Promise<string | undefined> {
-	const composerPath = join(root, "composer.json");
-	if (!existsSync(composerPath)) return undefined;
-
-	try {
-		const composer = JSON.parse(await readFile(composerPath, "utf-8"));
-		const requires = {
-			...(composer.require ?? {}),
-			...(composer["require-dev"] ?? {}),
-		};
-		const laravel = requires["laravel/framework"];
-		if (laravel) {
-			return laravel.replace(/[\^~>=<]/, "");
-		}
-		// Also check for laravel/installer pattern
-		const pkg = composer.name;
-		if (pkg && pkg.toLowerCase().includes("laravel")) {
-			return composer.version ?? undefined;
-		}
-		return undefined;
-	} catch {
-		return undefined;
-	}
-}
-
-// --- Packages ----------------------------------------------------------------
-
-async function detectPackages(root: string): Promise<string[]> {
-	const composerPath = join(root, "composer.json");
-	if (!existsSync(composerPath)) return [];
-
-	try {
-		const composer = JSON.parse(await readFile(composerPath, "utf-8"));
-		const deps = {
-			...(composer.require ?? {}),
-			...(composer["require-dev"] ?? {}),
-		};
-		return Object.keys(deps);
-	} catch {
-		return [];
-	}
-}
-
-// --- Auth Detection --------------------------------------------------------
-
-async function detectAuth(root: string): Promise<string | undefined> {
-	const packages = await detectPackages(root);
-
-	if (packages.includes("laravel/sanctum")) return "sanctum";
-	if (packages.includes("laravel/passport")) return "passport";
-	if (packages.includes("laravel/spark-aurelius")) return "spark";
-	if (packages.includes("tymon/jwt-auth")) return "jwt";
-
-	// Check config files
-	for (const authFile of [
-		join(root, "config", "auth.php"),
-		join(root, "config", "sanctum.php"),
-	]) {
-		if (existsSync(authFile)) {
-			try {
-				const content = await readFile(authFile, "utf-8");
-				if (content.includes("Sanctum") || content.includes("sanctum")) {
-					return "sanctum";
-				}
-			} catch {
-				/* ignore */
-			}
-		}
-	}
-	return undefined;
-}
-
-// --- Controllers -----------------------------------------------------------
-
-async function findControllers(root: string): Promise<string[]> {
-	const controllerDirs = [
-		join(root, "app", "Http", "Controllers"),
-		join(root, "app", "Controllers"),
-	];
-	const controllers: string[] = [];
-
-	for (const dir of controllerDirs) {
-		if (!existsSync(dir)) continue;
-		try {
-			const entries = await readdir(dir, { withFileTypes: true });
-			for (const entry of entries) {
-				if (entry.name.startsWith(".") || entry.name === "Controller.php")
-					continue;
-				if (
-					entry.name.endsWith("Controller.php") ||
-					entry.name.endsWith("Controller.ts")
-				) {
-					controllers.push(entry.name.replace(/\.(php|ts)$/, ""));
-				} else if (entry.isDirectory()) {
-					// Nested controller directory
-					const subEntries = await readdir(join(dir, entry.name));
-					for (const sub of subEntries) {
-						if (
-							sub.endsWith("Controller.php") ||
-							sub.endsWith("Controller.ts")
-						) {
-							controllers.push(
-								`${entry.name}/${sub.replace(/\.(php|ts)$/, "")}`,
-							);
-						}
-					}
-				}
-			}
-		} catch {
-			/* ignore */
-		}
-	}
-
-	return controllers;
-}
-
-// --- Models ----------------------------------------------------------------
-
-async function findModels(root: string): Promise<string[]> {
-	const modelDirs = [join(root, "app", "Models"), join(root, "app", "Models")];
-	const models: string[] = [];
-
-	for (const dir of modelDirs) {
-		if (!existsSync(dir)) continue;
-		try {
-			const entries = await readdir(dir);
-			for (const entry of entries) {
-				if (entry.startsWith(".") || entry === "User.php") continue;
-				if (entry.endsWith(".php")) {
-					models.push(entry.replace(/\.php$/, ""));
-				}
-			}
-		} catch {
-			/* ignore */
-		}
-	}
-
-	return models;
-}
-
-// --- Blade Views -----------------------------------------------------------
-
-async function findViews(root: string): Promise<string[]> {
-	const viewDirs = [join(root, "resources", "views"), join(root, "views")];
-	const views: string[] = [];
-
-	for (const dir of viewDirs) {
-		if (!existsSync(dir)) continue;
-		try {
-			const entries = await readdir(dir, { withFileTypes: true });
-			for (const entry of entries) {
-				if (entry.name.startsWith(".")) continue;
-				const fullPath = join(dir, entry.name);
-				if (entry.isDirectory()) {
-					const subEntries = await readdir(fullPath);
-					for (const sub of subEntries) {
-						if (sub.endsWith(".blade.php")) {
-							views.push(`${entry.name}/${sub}`);
-						}
-					}
-				} else if (entry.name.endsWith(".blade.php")) {
-					views.push(entry.name);
-				}
-			}
-		} catch {
-			/* ignore */
-		}
-	}
-
-	return views;
-}
-
-// --- Artisan Commands ------------------------------------------------------
-
-async function findCommands(root: string): Promise<string[]> {
-	const commandDirs = [
-		join(root, "app", "Console", "Commands"),
-		join(root, "app", "Commands"),
-	];
-	const commands: string[] = [];
-
-	for (const dir of commandDirs) {
-		if (!existsSync(dir)) continue;
-		try {
-			const entries = await readdir(dir);
-			for (const entry of entries) {
-				if (entry.startsWith(".") || !entry.endsWith(".php")) continue;
-				commands.push(entry.replace(/\.php$/, ""));
-			}
-		} catch {
-			/* ignore */
-		}
-	}
-
-	return commands;
-}
-
-// --- Migrations Count -----------------------------------------------------
-
-async function countMigrations(root: string): Promise<number> {
-	const migrationDirs = [
-		join(root, "database", "migrations"),
-		join(root, "migrations"),
-	];
-	let count = 0;
-
-	for (const dir of migrationDirs) {
-		if (!existsSync(dir)) continue;
-		try {
-			const entries = await readdir(dir);
-			count += entries.filter(
-				(e) => !e.startsWith(".") && e.endsWith(".php"),
-			).length;
-		} catch {
-			/* ignore */
-		}
-	}
-
-	return count;
-}
-
-// --- Env Variables --------------------------------------------------------
-
-async function findEnvVars(root: string): Promise<string[]> {
-	const envFiles = [join(root, ".env.example"), join(root, ".env")];
-	const vars: string[] = [];
-	const seen = new Set<string>();
-
-	for (const envPath of envFiles) {
-		if (!existsSync(envPath)) continue;
-		try {
-			const content = await readFile(envPath, "utf-8");
-			for (const line of content.split("\n")) {
-				const trimmed = line.trim();
-				if (trimmed && !trimmed.startsWith("#") && trimmed.includes("=")) {
-					const key = trimmed.split("=")[0].trim();
-					if (key && !seen.has(key)) {
-						seen.add(key);
-						vars.push(key);
-					}
-				}
-			}
-		} catch {
-			/* ignore */
-		}
-	}
-
-	return vars;
-}
-
-// --- Main Analyzer ---------------------------------------------------------
-
-export async function analyzeLaravel(
-	root: string,
-): Promise<LaravelAnalysis | null> {
-	if (!isLaravelWorkspace(root)) return null;
-
-	const [version, packages, authType] = await Promise.all([
-		detectVersion(root),
-		detectPackages(root),
-		detectAuth(root),
-	]);
-
-	const [controllers, models, views, commands, migrations, envVars] =
-		await Promise.all([
-			findControllers(root),
-			findModels(root),
-			findViews(root),
-			findCommands(root),
-			countMigrations(root),
-			findEnvVars(root),
-		]);
-
-	return {
-		framework: {
-			id: "laravel",
-			name: "Laravel",
-			category: "fullstack",
-			description: "The PHP Framework for Web Artisans",
-			tags: ["php", "fullstack", "eloquent"],
-		},
-		version,
-		controllers,
-		models,
-		views,
-		commands,
-		migrations,
-		authType,
-		envVars,
-		packages,
-	};
-}

package/packages/laravel-plugin/src/index.ts

@@ -1,40 +0,0 @@
-/**
- * Laravel Plugin — Main Entry (RFC-0065)
- */
-
-import type { FrameworkExtension } from "../../framework-plugin-sdk/src/types.js";
-import { analyzeLaravel } from "./analyzer.js";
-
-export type { LaravelAnalysis } from "./types.js";
-
-export async function analyzeLaravelWorkspace(
-	root: string,
-): Promise<import("./types.js").LaravelAnalysis | null> {
-	return analyzeLaravel(root);
-}
-
-export function createLaravelPlugin(): FrameworkExtension {
-	return {
-		capability: "framework",
-		name: "Laravel Framework Plugin",
-		detector: {
-			detect: async (root: unknown): Promise<unknown> => {
-				const r = root as string;
-				const { existsSync } = await import("node:fs");
-				return (
-					existsSync(`${r}/artisan`) ||
-					(existsSync(`${r}/composer.json`) &&
-						(existsSync(`${r}/app/Http/Controllers`) ||
-							existsSync(`${r}/bootstrap/app.php`)))
-				);
-			},
-			signals: [
-				{ type: "file", pattern: "artisan", weight: 0.7 },
-				{ type: "file", pattern: "composer.json", weight: 0.3 },
-				{ type: "directory", pattern: "app/Http/Controllers", weight: 0.5 },
-				{ type: "directory", pattern: "bootstrap/app.php", weight: 0.4 },
-			],
-		},
-		config: {},
-	};
-}

package/packages/laravel-plugin/src/types.ts

@@ -1,24 +0,0 @@
-/**
- * Laravel Plugin — Types (RFC-0065)
- */
-
-export interface LaravelAnalysis {
-	framework: FrameworkInfo;
-	version?: string;
-	controllers: string[];
-	models: string[];
-	views: string[];
-	commands: string[];
-	migrations: number;
-	authType?: string;
-	envVars: string[];
-	packages: string[];
-}
-
-export interface FrameworkInfo {
-	id: string;
-	name: string;
-	category: string;
-	description: string;
-	tags: string[];
-}

package/packages/logging/README.md

@@ -1,105 +0,0 @@
-# @pi-harness/logging
-
-Centralized structured application logging for pi-harness.
-
-```text
-client: producer -> classify -> redact -> sample -> buffer -> webhook -> local spool
-server: POST /api/logs -> authenticate -> validate -> durable outbox -> 202
-                                                        |
-                                                        v
-                                              worker -> R2 -> done
-```
-
-- **Classification**: an event allowlist decides what may leave the machine. Prompts,
-  responses, command output and the catch-all `harness.log` mirror stay local.
-- **Redaction**: credential-looking keys, bearer tokens, JWTs and long token runs are
-  replaced; strings are truncated and structures are depth limited.
-- **Sampling**: minimum level, a deterministic sample rate for `debug` records and a
-  per source+event rate limit. Errors are never sampled away.
-- **Buffering**: bounded in-memory buffer; when it is full the least severe record is
-  dropped and the drop is counted.
-- **Delivery**: transports are a FALLBACK chain by default (the first success wins,
-  the rest are skipped - never a broadcast). `PI_LOG_DELIVERY=fanout` switches to
-  BROADCAST: every transport receives every batch, each transport tracks its own
-  success (`getTransportStatus()`), and the batch is spooled only when *every*
-  transport failed. If all of them fail the batch is spooled to disk as NDJSON and
-  retried on the next flush.
-- **Durability**: the server only answers `202` after the batch is written to its
-  durable outbox. A background worker uploads it to R2 with a bounded backoff.
-
-## Usage
-
-```ts
-import { centralInfo, centralWarn, initCentralLogging } from "./packages/logging/dist/index.js";
-
-initCentralLogging();                       // reads the environment and the key files
-centralInfo("harness.service-diagnostics", "service.check", "service is up", { durationMs: 3 });
-```
-
-The event name decides whether the record may be shipped: use an allowlisted shape
-(`service.*`, `session.*`, `validation.*`, `harness.service-diagnostics.*`,
-`harness.planner.decision`, `harness.glm-quota.quota`) or a `warn`/`error` level.
-
-## Transports
-
-| Transport | Purpose |
-|-----------|---------|
-| `createWebhookTransport` | HTTP POST to the unified webhook server (`/api/logs`) - the client ingress point |
-| `createR2Transport` | Cloudflare R2 (S3 API), gzipped NDJSON under a date prefix - normally used by the server, not by clients |
-| `LogSpool` | Local NDJSON fallback, rotated by size, with retention |
-
-## Server side
-
-```ts
-import {
-  LogCredentialStore,
-  LogIndexStore,
-  LogIngestService,
-  LogOutbox,
-  LogOutboxWorker,
-  createLogHttpHandler,
-} from "./packages/logging/dist/index.js";
-
-const credentials = LogCredentialStore.load();
-const outbox = new LogOutbox({ dir: `${home}/.pi-harness-runtime/logs/outbox` });
-const index = new LogIndexStore({ dir: `${home}/.pi-harness-runtime/logs/index` });
-const service = new LogIngestService({ credentials, outbox, index });
-const handler = createLogHttpHandler({ service, outbox, index });
-```
-
-The credential store decides whether the endpoint exists: without a credential every
-write is refused (`503`). The tenant comes from the credential, never from the body.
-
-### Incidents
-
-A log record is a moment, an incident is a recurring problem. The server derives the
-incidents from the records it accepts:
-
-- **Versioned**: every incident carries `schemaVersion: 1`; the Qdrant collection is
-  `log_incidents_v1`, so a schema change means a new collection.
-- **Stable fingerprint**: the same failure produces the same fingerprint even when the
-  message carries a changing timestamp, id, path or number.
-- **Server derived tenant**: the `tenant_id` comes from the ingest credential, never
-  from the request body, and it is the filter of every query.
-- **Durable**: the source of truth is plain NDJSON
-  (`~/.pi-harness-runtime/logs/incidents/<tenant>/incidents-<day>.ndjson`); Qdrant
-  holds the searchable view.
-
-```ts
-import { IncidentStore, IncidentQdrantWriter } from "./packages/logging/dist/index.js";
-
-const incidents = new IncidentStore({ dir: `${home}/.pi-harness-runtime/logs/incidents` });
-const service = new LogIngestService({ credentials, outbox, index, incidents });
-// POST /api/logs/incidents - tenant scoped, bounded
-```
-
-| Route | Method | Purpose |
-|-------|--------|---------|
-| `/api/logs` | POST | Accept a batch. `202` only after the durable write. |
-| `/api/logs/query` | POST | Read-only, tenant scoped metadata query. |
-| `/api/logs/incidents` | POST | Read-only, tenant scoped incident query. |
-| `/api/logs/health` | GET | Queue depth, oldest pending age, failure count. |
-
-## Configuration
-
-See the "Centralized Application Logging" section in the repository `AGENTS.md`.

package/packages/mcp-adapter/README.md

@@ -1,47 +0,0 @@
-# @pi/mcp-adapter
-
-MCP (Model Context Protocol) server adapter for pi-harness. Exposes harness capabilities as MCP tools, resources, and prompts over STDIO transport.
-
-## Protocol
-
-- **Transport**: STDIO (JSON-RPC 2.0 over stdin/stdout)
-- **Protocol Version**: 2024-11-05
-- **Spec**: <https://modelcontextprotocol.io>
-
-## Tools
-
-| Tool | Description |
-|------|-------------|
-| `analyze_workspace` | Analyze a codebase for framework detection |
-| `search_memory` | Search harness persistent memory |
-| `list_skills` | List all registered skills |
-| `invoke_skill` | Invoke a named skill |
-
-## Usage
-
-```typescript
-import { createMCPServer } from "@pi/mcp-adapter";
-
-await createMCPServer({ name: "pi-harness", version: "0.9.4" });
-```
-
-Start as a subprocess:
-
-```bash
-node dist/index.js
-# or via npx
-npx @pi/mcp-adapter
-```
-
-## MCP Client Example (Claude Desktop)
-
-```json
-{
-  "mcpServers": {
-    "pi-harness": {
-      "command": "node",
-      "args": ["/path/to/node_modules/@pi/mcp-adapter/dist/index.js"]
-    }
-  }
-}
-```

package/packages/mcp-adapter/dist/index.d.ts

@@ -1,8 +0,0 @@
-/**
- * MCP Adapter — Main Entry (RFC-0068)
- */
-export { createMCPServer } from "./server.js";
-export type { MCPRequest, MCPResponse, MCPError, MCPServerOptions, ServerCapabilities, InitializeResult, MCPTool, MCPToolCall, MCPResource, MCPPrompt, ToolCallResult, } from "./types.js";
-export { HARNESS_TOOLS } from "./tools.js";
-export { handleToolCall } from "./tools.js";
-//# sourceMappingURL=index.d.ts.map

package/packages/mcp-adapter/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EACX,UAAU,EACV,WAAW,EACX,QAAQ,EACR,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,OAAO,EACP,WAAW,EACX,WAAW,EACX,SAAS,EACT,cAAc,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/packages/mcp-adapter/dist/index.js

@@ -1,7 +0,0 @@
-/**
- * MCP Adapter — Main Entry (RFC-0068)
- */
-export { createMCPServer } from "./server.js";
-export { HARNESS_TOOLS } from "./tools.js";
-export { handleToolCall } from "./tools.js";
-//# sourceMappingURL=index.js.map

package/packages/mcp-adapter/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAc9C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/packages/mcp-adapter/dist/server.d.ts

@@ -1,9 +0,0 @@
-/**
- * MCP Adapter — STDIO Server (RFC-0068)
- *
- * Implements MCP Protocol 2024-11-05 over STDIO.
- * Reads JSON-RPC requests from stdin, writes responses to stdout.
- */
-import type { MCPServerOptions } from "./types.js";
-export declare function createMCPServer(options?: MCPServerOptions): Promise<void>;
-//# sourceMappingURL=server.d.ts.map

package/packages/mcp-adapter/dist/server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAGX,gBAAgB,EAKhB,MAAM,YAAY,CAAC;AAOpB,wBAAsB,eAAe,CACpC,OAAO,GAAE,gBAAqB,GAC5B,OAAO,CAAC,IAAI,CAAC,CA2Df"}