agent-devkit 0.1.6 → 0.2.0

package/runtime/cli/aikit/workflows.py

@@ -0,0 +1,115 @@
+"""Installable workflow MVP for Agent DevKit."""
+
+from __future__ import annotations
+
+from typing import Any
+
+from cli.aikit.tasks import create_task
+
+
+WORKFLOW_SCHEMA_VERSION = "agent-devkit.workflows/v1"
+
+
+BUILTIN_WORKFLOWS: dict[str, dict[str, Any]] = {
+    "daily-pr-review": {
+        "id": "daily-pr-review",
+        "title": "Daily PR review",
+        "description": "Create a local scheduled prompt to review pending pull requests.",
+        "schedule": {"type": "cron", "cron": "0 9 * * 1-5"},
+        "task": {
+            "title": "Daily PR review",
+            "prompt": "Revise as PRs que aguardam minha revisao hoje.",
+            "action": {"type": "prompt", "prompt": "Revise as PRs que aguardam minha revisao hoje.", "external_writes": False},
+            "permissions": {"mode": "report-only"},
+            "notifications": [{"type": "desktop", "events": ["task.completed", "task.blocked"]}],
+        },
+        "write_policy": "local_config_write",
+    }
+}
+
+
+def workflow_list() -> dict[str, Any]:
+    return {
+        "kind": "workflows",
+        "schema_version": WORKFLOW_SCHEMA_VERSION,
+        "status": "ok",
+        "items": [public_workflow(item) for item in BUILTIN_WORKFLOWS.values()],
+    }
+
+
+def workflow_show(workflow_id: str) -> dict[str, Any]:
+    workflow = require_workflow(workflow_id)
+    return {"kind": "workflow", "schema_version": WORKFLOW_SCHEMA_VERSION, "status": "ok", "workflow": public_workflow(workflow)}
+
+
+def workflow_install(workflow_id: str, *, dry_run: bool = True, yes: bool = False) -> dict[str, Any]:
+    workflow = require_workflow(workflow_id)
+    mode = "dry-run" if dry_run or not yes else "apply"
+    task = workflow["task"]
+    plan = {
+        "task": {
+            "id": workflow["id"],
+            "title": task["title"],
+            "schedule": workflow["schedule"],
+            "permissions": task["permissions"],
+            "notifications": task["notifications"],
+        },
+        "writes": ["local task registry"],
+        "stores_secret": False,
+    }
+    if mode == "dry-run":
+        return {
+            "kind": "workflow-install",
+            "schema_version": WORKFLOW_SCHEMA_VERSION,
+            "status": "planned",
+            "mode": "dry-run",
+            "workflow": public_workflow(workflow),
+            "plan": plan,
+        }
+    created = create_task(
+        task_id=workflow["id"],
+        title=task["title"],
+        prompt=task["prompt"],
+        schedule=workflow["schedule"],
+        action=task["action"],
+        permissions=task["permissions"],
+        notifications=task["notifications"],
+    )
+    return {
+        "kind": "workflow-install",
+        "schema_version": WORKFLOW_SCHEMA_VERSION,
+        "status": "installed",
+        "mode": "apply",
+        "workflow": public_workflow(workflow),
+        "task": created.get("task"),
+    }
+
+
+def workflow_run(workflow_id: str, *, dry_run: bool = True) -> dict[str, Any]:
+    workflow = require_workflow(workflow_id)
+    return {
+        "kind": "workflow-run",
+        "schema_version": WORKFLOW_SCHEMA_VERSION,
+        "status": "planned" if dry_run else "blocked",
+        "dry_run": dry_run,
+        "workflow": public_workflow(workflow),
+        "message": "Workflow MVP runs through installed tasks; use workflow install first.",
+    }
+
+
+def require_workflow(workflow_id: str) -> dict[str, Any]:
+    workflow = BUILTIN_WORKFLOWS.get(workflow_id or "")
+    if not workflow:
+        raise ValueError(f"workflow not found: {workflow_id}")
+    return workflow
+
+
+def public_workflow(workflow: dict[str, Any]) -> dict[str, Any]:
+    return {
+        "id": workflow["id"],
+        "title": workflow["title"],
+        "description": workflow["description"],
+        "schedule": workflow["schedule"],
+        "write_policy": workflow["write_policy"],
+        "stores_secret": False,
+    }

package/runtime/cli/aikit/write_policy.py

@@ -0,0 +1,108 @@
+"""Canonical write policy vocabulary used by the Agent DevKit runtime."""
+
+from __future__ import annotations
+
+from typing import Any
+
+
+CANONICAL_WRITE_POLICIES = {
+    "read_only",
+    "dry_run",
+    "output_only",
+    "local_write",
+    "local_config_write",
+    "confirm",
+    "blocked_by_default",
+    "delegated",
+}
+
+LEGACY_WRITE_POLICY_ALIASES = {
+    "read-only": "read_only",
+    "delegated_read_only": "read_only",
+    "ask_before_write": "confirm",
+    "ask_before_creating_output_directory": "output_only",
+    "generated_artifacts_only": "output_only",
+    "create_new_version": "local_write",
+    "template_version_write": "local_write",
+    "local-write": "local_write",
+    "local-config-write": "local_config_write",
+}
+
+AUTONOMOUS_SAFE_WRITE_POLICIES = {"read_only", "dry_run"}
+CONFIRMATION_WRITE_POLICIES = {"confirm", "local_write", "local_config_write"}
+BLOCKED_WRITE_POLICIES = {"blocked_by_default"}
+
+
+def canonical_write_policies() -> set[str]:
+    return set(CANONICAL_WRITE_POLICIES)
+
+
+def legacy_write_policy_aliases() -> dict[str, str]:
+    return dict(LEGACY_WRITE_POLICY_ALIASES)
+
+
+def normalize_write_policy(value: Any, *, default: str = "read_only") -> str:
+    raw = str(value or "").strip()
+    if not raw:
+        raw = default
+    return LEGACY_WRITE_POLICY_ALIASES.get(raw, raw)
+
+
+def is_known_write_policy(value: Any) -> bool:
+    raw = str(value or "").strip()
+    if not raw:
+        return False
+    return raw in CANONICAL_WRITE_POLICIES or raw in LEGACY_WRITE_POLICY_ALIASES
+
+
+def is_autonomous_safe_write_policy(value: Any) -> bool:
+    return normalize_write_policy(value) in AUTONOMOUS_SAFE_WRITE_POLICIES
+
+
+def requires_runtime_confirmation(value: Any) -> bool:
+    return normalize_write_policy(value) in CONFIRMATION_WRITE_POLICIES
+
+
+def is_blocked_by_default(value: Any) -> bool:
+    return normalize_write_policy(value) in BLOCKED_WRITE_POLICIES
+
+
+def write_policy_metadata(value: Any, *, default: str = "read_only") -> dict[str, Any]:
+    raw = str(value or "").strip() or default
+    canonical = normalize_write_policy(raw, default=default)
+    return {
+        "raw": raw,
+        "canonical": canonical,
+        "known": is_known_write_policy(raw),
+        "legacy": raw in LEGACY_WRITE_POLICY_ALIASES,
+        "autonomous_safe": canonical in AUTONOMOUS_SAFE_WRITE_POLICIES,
+        "requires_confirmation": canonical in CONFIRMATION_WRITE_POLICIES,
+        "blocked_by_default": canonical in BLOCKED_WRITE_POLICIES,
+    }
+
+
+def coerce_write_policy_metadata(value: Any, *, default: str = "read_only") -> dict[str, Any]:
+    if not isinstance(value, dict):
+        return write_policy_metadata(value, default=default)
+
+    canonical_hint = str(value.get("canonical") or "").strip()
+    raw = str(value.get("raw") or "").strip() or canonical_hint or default
+    canonical = canonical_hint or normalize_write_policy(raw, default=default)
+    return {
+        "raw": raw,
+        "canonical": canonical,
+        "known": canonical in CANONICAL_WRITE_POLICIES or is_known_write_policy(raw),
+        "legacy": raw in LEGACY_WRITE_POLICY_ALIASES,
+        "autonomous_safe": canonical in AUTONOMOUS_SAFE_WRITE_POLICIES,
+        "requires_confirmation": canonical in CONFIRMATION_WRITE_POLICIES,
+        "blocked_by_default": canonical in BLOCKED_WRITE_POLICIES,
+    }
+
+
+def write_policy_public_fields(value: Any, *, default: str = "read_only") -> dict[str, Any]:
+    metadata = coerce_write_policy_metadata(value, default=default)
+    return {
+        "write_policy": metadata["canonical"],
+        "write_policy_raw": metadata["raw"],
+        "write_policy_metadata": metadata,
+    }

package/runtime/plugins/claude-code-ai-devkit/README.md

@@ -6,6 +6,11 @@ DevKit.
 O plugin fornece um router skill, comandos de orientacao e scripts que delegam
 para `agent`.
 
+Ele tambem inclui subagentes Claude Code em `agents/` para isolar contexto de
+exploracao, banco, PR, suporte e revisao final. Esses subagentes continuam
+usando o Agent DevKit como fonte da verdade: preferem MCP quando disponivel e,
+como fallback atual, chamam `scripts/run-capability.py`.
+
 ## Comandos
 
 ```bash
@@ -14,6 +19,18 @@ python3 scripts/doctor.py --json
 python3 scripts/run-capability.py --json elasticsearch-log-analyzer search-log-events --source app --from 2026-06-27T00:00:00Z --to 2026-06-27T01:00:00Z
 ```
 
+## Subagentes
+
+- `agent-devkit-repo-explorer`
+- `agent-devkit-db-analyst`
+- `agent-devkit-pr-reviewer`
+- `agent-devkit-support-triage`
+- `agent-devkit-execution-reviewer`
+
+Eles sao opcionais e conservadores. Nao devem executar escrita externa sem
+confirmacao, nao devem ignorar `write_policy` e nao devem duplicar a logica dos
+agentes em `agents/`.
+
 A instalacao recomendada pelo runtime e:
 
 ```bash

package/runtime/plugins/claude-code-ai-devkit/agents/README.md

@@ -1,5 +1,32 @@
 # Claude Code Agents
 
 Este plugin usa o runtime central do Agent DevKit como fonte da verdade. Agentes
-nativos do host podem ser adicionados depois, mas nao devem duplicar logica de
-`agents/`.
+nativos do host devem ser pequenos, focados e conservadores. Eles nao duplicam
+logica de `agents/`; apenas orientam o Claude Code a chamar o Agent DevKit por
+MCP quando disponivel ou pelo script local `run-capability.py`.
+
+## Subagentes incluidos
+
+- `agent-devkit-repo-explorer`: explora repositorios e inventario de agentes.
+- `agent-devkit-db-analyst`: analisa perguntas de banco usando capabilities
+  read-only.
+- `agent-devkit-pr-reviewer`: revisa Pull Requests por contrato do
+  `github-pr-reviewer`.
+- `agent-devkit-support-triage`: faz triagem N1/N2 sem assumir escrita externa.
+- `agent-devkit-execution-reviewer`: revisa plano/resultado antes da resposta
+  final.
+
+## Guardrails
+
+- Use o MCP `mcp__agent-devkit__capability_run` se ele existir na sessao.
+- Se MCP nao existir, use apenas `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json ...`.
+- Nao use shell arbitrario para resolver uma tarefa coberta por capability.
+- Preserve `write_policy`, `providers`, `fallback_applied`, `risks` e
+  `next_steps` na resposta.
+- Retorne resumo com evidencias; nao despeje logs completos.
+- Reporte `blocked` quando a tarefa exigir permissao, provider ou escrita
+  externa nao autorizada.
+
+Observacao: em subagentes fornecidos por plugin, Claude Code ignora frontmatter
+como `permissionMode` e `mcpServers`. Por isso estes templates restringem
+ferramentas com `tools` e reforcam permissoes no prompt do subagente.

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-db-analyst.md

@@ -0,0 +1,44 @@
+---
+name: agent-devkit-db-analyst
+description: Use para investigar perguntas de banco com Agent DevKit read-only, SQL Server, Postgres ou Supabase, retornando evidencias e bloqueios.
+tools: Read, Glob, Grep, Bash
+model: sonnet
+---
+
+Voce e um subagente Claude Code para analise de banco via Agent DevKit.
+
+Escopo permitido:
+
+- `sqlserver-data-analyzer`
+- `postgres-data-analyzer`
+- `supabase-project-analyst`
+
+Regras:
+
+- Execute apenas capabilities `read_only` ou `dry_run`.
+- Prefira MCP `mcp__agent-devkit__capability_run` quando disponivel.
+- Se MCP nao existir, use apenas
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json <agent> <capability> ...`.
+- Nao execute cliente SQL direto, migration, update, delete, insert ou DDL.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Se a pergunta exigir escrita, retorne `blocked` e indique a confirmacao ou o
+  agente de change operator apropriado.
+- Resuma amostras e evidencias; nao despeje tabelas grandes.
+- Preserve `providers.missing`, `fallback_applied`, `risks` e `next_steps` dos
+  payloads do Agent DevKit.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|blocked|partial",
+  "agent_used": "...",
+  "capability_used": "...",
+  "summary": "...",
+  "evidence": [],
+  "risks": [],
+  "blocked_reason": null,
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-execution-reviewer.md

@@ -0,0 +1,38 @@
+---
+name: agent-devkit-execution-reviewer
+description: Use para revisar plano, resultado ou resposta final com execution-reviewer antes de concluir uma tarefa Agent DevKit.
+tools: Read, Glob, Grep, Bash
+model: sonnet
+---
+
+Voce e um subagente Claude Code de revisao final para Agent DevKit.
+
+Escopo preferencial:
+
+- `execution-reviewer/review-plan`
+- `execution-reviewer/review-agent-result`
+- `execution-reviewer/review-final-output`
+
+Regras:
+
+- Prefira MCP `mcp__agent-devkit__capability_run` quando disponivel.
+- Se MCP nao existir, use apenas
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json execution-reviewer <capability> ...`.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Nao altere arquivos e nao execute a correcao diretamente.
+- Verifique coerencia, policy, riscos, provider missing, testes e lacunas.
+- Preserve achados de bloqueio e indique a menor correcao necessaria.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|needs-fix|blocked",
+  "approved": false,
+  "findings": [],
+  "policy_risks": [],
+  "test_gaps": [],
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-pr-reviewer.md

@@ -0,0 +1,42 @@
+---
+name: agent-devkit-pr-reviewer
+description: Use para revisar Pull Requests via Agent DevKit em modo report-only, sem comentar, aprovar ou solicitar mudancas automaticamente.
+tools: Read, Glob, Grep, Bash
+model: sonnet
+---
+
+Voce e um subagente Claude Code para review de PR usando Agent DevKit.
+
+Escopo preferencial:
+
+- `github-pr-reviewer/list-review-requests`
+- `github-pr-reviewer/inspect-pr`
+- `github-pr-reviewer/review-pr-diff`
+
+Regras:
+
+- Modo padrao e report-only.
+- Nunca aprove, comente ou solicite mudancas sem permissao explicita e policy
+  correspondente.
+- Prefira MCP `mcp__agent-devkit__capability_run` quando disponivel.
+- Se MCP nao existir, use apenas
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json github-pr-reviewer <capability> ...`.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Preserve `permission`, `requires_permission`, `providers`, `risks`,
+  `fallback_applied` e `next_steps`.
+- Foque em bugs, regressao, seguranca, contrato e testes faltantes.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|blocked|partial",
+  "pr": "...",
+  "findings": [],
+  "tests_or_gaps": [],
+  "requires_permission": false,
+  "blocked_reason": null,
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-repo-explorer.md

@@ -0,0 +1,40 @@
+---
+name: agent-devkit-repo-explorer
+description: Use para explorar estrutura de repositorio, agentes, capabilities e contexto antes de planejar trabalho com Agent DevKit.
+tools: Read, Glob, Grep, Bash
+model: haiku
+---
+
+Voce e um subagente Claude Code de exploracao read-only para Agent DevKit.
+
+Objetivo: levantar contexto pequeno e acionavel sem poluir a conversa principal.
+
+Regras:
+
+- Prefira `mcp__agent-devkit__capability_run` quando a ferramenta MCP do Agent
+  DevKit estiver disponivel.
+- Se MCP nao estiver disponivel, use apenas comandos seguros do runtime:
+  `agent agents --json`, `agent capabilities <agent> --json`,
+  `agent inspect <agent> <capability> --json` ou
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json ...`.
+- Use `Read`, `Glob` e `Grep` para localizar arquivos relevantes.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Nao edite arquivos, nao rode formatadores e nao execute comandos externos de
+  instalacao.
+- Nao exponha segredos. Se encontrar valores sensiveis, redija.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|blocked|partial",
+  "scope": "...",
+  "findings": [],
+  "recommended_agent": "...",
+  "recommended_capability": "...",
+  "evidence": [],
+  "blocked_reason": null,
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-support-triage.md

@@ -0,0 +1,43 @@
+---
+name: agent-devkit-support-triage
+description: Use para triagem N1/N2 de incidentes usando Agent DevKit, preservando providers, fallbacks, evidencias e bloqueios.
+tools: Read, Glob, Grep, Bash
+model: sonnet
+---
+
+Voce e um subagente Claude Code para triagem de suporte via Agent DevKit.
+
+Escopo preferencial:
+
+- `n1-support-agent`
+- `n2-support-agent`
+- `azure-devops-orchestrator`
+- `topdesk-orchestrator`
+- analisadores de logs e bancos read-only
+
+Regras:
+
+- Prefira MCP `mcp__agent-devkit__capability_run` quando disponivel.
+- Se MCP nao existir, use apenas
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json ...`.
+- Nao mova cards, comente, atualize TOPdesk ou execute escrita externa sem
+  confirmacao explicita.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Preserve `providers.missing`, `fallback_applied`, `risks` e `next_steps`.
+- Resuma logs e dados sensiveis; nao copie payloads grandes para a resposta.
+- Se faltar provider, retorne `blocked` ou `partial` com a configuracao minima.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|blocked|partial",
+  "incident": "...",
+  "summary": "...",
+  "evidence": [],
+  "hypotheses": [],
+  "blocked_reason": null,
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "claude-code-ai-devkit",
   "name": "AI DevKit",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Thin Claude Code adapter for routing software support, infrastructure, data, and development tasks through the local AI DevKit runtime.",
   "runtime": {
     "command": "agent",

package/runtime/plugins/claude-code-ai-devkit/skills/ai-devkit-router/SKILL.md

@@ -13,6 +13,22 @@ specification.
 Prefer `agent run` for deterministic execution. Use `agent` only when the
 terminal runtime must route free-form language without host LLM support.
 
+Use the plugin subagents in `plugins/claude-code-ai-devkit/agents/` when the
+task benefits from isolated context:
+
+- `agent-devkit-repo-explorer` for repository exploration and agent/capability
+  inventory.
+- `agent-devkit-db-analyst` for SQL Server, Postgres, or Supabase read-only
+  analysis.
+- `agent-devkit-pr-reviewer` for GitHub PR review in report-only mode.
+- `agent-devkit-support-triage` for N1/N2 support triage.
+- `agent-devkit-execution-reviewer` for final plan/result review.
+
+Subagents must prefer Agent DevKit MCP tools when available. If MCP is not
+available, they must call the thin plugin runtime script instead of duplicating
+domain logic. They must preserve `write_policy`, `providers`, `risks`,
+`fallback_applied`, and `next_steps` in their summaries.
+
 If a provider is missing, ask for the minimum provider reference with
 `agent provider configure`. If the user ignores the request, preserve the
 runtime fallback result from `requires.providers`.

package/runtime/plugins/claude-skill-ai-devkit/ai-devkit/SKILL.md

@@ -26,3 +26,4 @@ queries, runbooks, and manual steps without pretending local execution happened.
 - For support workflows, read `references/sustentacao.md`.
 - For infrastructure workflows, read `references/infra.md`.
 - For development/specification workflows, read `references/desenvolvimento.md`.
+- For Claude Code subagent patterns, read `references/subagents.md`.

package/runtime/plugins/claude-skill-ai-devkit/ai-devkit/references/subagents.md

@@ -0,0 +1,21 @@
+# Subagentes Claude
+
+Subagentes sao um recurso do Claude Code. Este skill de Claude Desktop/Claude.ai
+permanece `skill-only` e nao tenta criar subagentes dinamicos.
+
+Quando o usuario estiver em Claude Code, use os templates do plugin
+`claude-code-ai-devkit/agents/`:
+
+- `agent-devkit-repo-explorer`
+- `agent-devkit-db-analyst`
+- `agent-devkit-pr-reviewer`
+- `agent-devkit-support-triage`
+- `agent-devkit-execution-reviewer`
+
+Regras:
+
+- Agent DevKit continua sendo a fonte da verdade.
+- Prefira MCP do Agent DevKit quando existir.
+- Sem MCP, use `scripts/run-capability.py --json`.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos.
+- Nao conceda escrita externa por padrao.

package/runtime/plugins/claude-skill-ai-devkit/plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "claude-skill-ai-devkit",
   "name": "AI DevKit Claude Skill",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Skill bundle for Claude Desktop and Claude.ai to route support, infrastructure, data, documentation, and development work through AI DevKit practices.",
   "runtime": {
     "command": "agent",

package/runtime/providers/azure-devops.yaml

@@ -23,6 +23,15 @@ detection:
   env_any:
     - AZURE_DEVOPS_ORG
     - AZURE_DEVOPS_PAT
+wizard:
+  suggested_config:
+    project: prompt.project
+    AZURE_DEVOPS_PROJECT: prompt.project
+  field_suggestions:
+    AZURE_DEVOPS_PROJECT: prompt.project
+  questions:
+    AZURE_DEVOPS_ORG: Qual e a organizacao do Azure DevOps?
+    AZURE_DEVOPS_PROJECT: Qual e o nome do projeto no Azure DevOps?
 capabilities:
   read:
     - azure-devops-orchestrator/list-cards

package/runtime/providers/github.yaml

@@ -32,10 +32,14 @@ fallbacks:
   - manual_steps
 capabilities:
   read:
+    - github-pr-reviewer/list-review-requests
+    - github-pr-reviewer/inspect-pr
+    - github-pr-reviewer/review-pr-diff
     - pr.list-review-requests
     - pr.inspect
     - pr.review-report
   write:
+    - github-pr-reviewer/create-review-automation
     - pr.comment
     - pr.approve
     - pr.request-changes

package/runtime/providers/local-notification.yaml

@@ -1,8 +1,8 @@
 id: local-notification
 name: Local Notification
 kind: local-runtime
-status: draft
-description: Local notification provider for terminal notifications.
+status: active
+description: Local notifications for task completion and operational alerts.
 auth_methods: []
 config_fields: []
 health_check:
@@ -15,5 +15,8 @@ fallbacks:
 capabilities:
   read: []
   write:
+    - notification.desktop
     - notification.terminal
+    - notification.stdout
+    - notification.audit
 write: true

package/runtime/providers/local-scheduler.yaml

@@ -8,7 +8,7 @@ config_fields: []
 health_check:
   command: agent scheduler run-once --dry-run
 risk:
-  default: local-write
+  default: local_write
   writes: true
 fallbacks:
   - dry_run