agent-devkit 0.1.6 → 0.3.0

package/runtime/cli/aikit/write_policy.py

@@ -0,0 +1,108 @@
+"""Canonical write policy vocabulary used by the Agent DevKit runtime."""
+
+from __future__ import annotations
+
+from typing import Any
+
+
+CANONICAL_WRITE_POLICIES = {
+    "read_only",
+    "dry_run",
+    "output_only",
+    "local_write",
+    "local_config_write",
+    "confirm",
+    "blocked_by_default",
+    "delegated",
+}
+
+LEGACY_WRITE_POLICY_ALIASES = {
+    "read-only": "read_only",
+    "delegated_read_only": "read_only",
+    "ask_before_write": "confirm",
+    "ask_before_creating_output_directory": "output_only",
+    "generated_artifacts_only": "output_only",
+    "create_new_version": "local_write",
+    "template_version_write": "local_write",
+    "local-write": "local_write",
+    "local-config-write": "local_config_write",
+}
+
+AUTONOMOUS_SAFE_WRITE_POLICIES = {"read_only", "dry_run"}
+CONFIRMATION_WRITE_POLICIES = {"confirm", "local_write", "local_config_write"}
+BLOCKED_WRITE_POLICIES = {"blocked_by_default"}
+
+
+def canonical_write_policies() -> set[str]:
+    return set(CANONICAL_WRITE_POLICIES)
+
+
+def legacy_write_policy_aliases() -> dict[str, str]:
+    return dict(LEGACY_WRITE_POLICY_ALIASES)
+
+
+def normalize_write_policy(value: Any, *, default: str = "read_only") -> str:
+    raw = str(value or "").strip()
+    if not raw:
+        raw = default
+    return LEGACY_WRITE_POLICY_ALIASES.get(raw, raw)
+
+
+def is_known_write_policy(value: Any) -> bool:
+    raw = str(value or "").strip()
+    if not raw:
+        return False
+    return raw in CANONICAL_WRITE_POLICIES or raw in LEGACY_WRITE_POLICY_ALIASES
+
+
+def is_autonomous_safe_write_policy(value: Any) -> bool:
+    return normalize_write_policy(value) in AUTONOMOUS_SAFE_WRITE_POLICIES
+
+
+def requires_runtime_confirmation(value: Any) -> bool:
+    return normalize_write_policy(value) in CONFIRMATION_WRITE_POLICIES
+
+
+def is_blocked_by_default(value: Any) -> bool:
+    return normalize_write_policy(value) in BLOCKED_WRITE_POLICIES
+
+
+def write_policy_metadata(value: Any, *, default: str = "read_only") -> dict[str, Any]:
+    raw = str(value or "").strip() or default
+    canonical = normalize_write_policy(raw, default=default)
+    return {
+        "raw": raw,
+        "canonical": canonical,
+        "known": is_known_write_policy(raw),
+        "legacy": raw in LEGACY_WRITE_POLICY_ALIASES,
+        "autonomous_safe": canonical in AUTONOMOUS_SAFE_WRITE_POLICIES,
+        "requires_confirmation": canonical in CONFIRMATION_WRITE_POLICIES,
+        "blocked_by_default": canonical in BLOCKED_WRITE_POLICIES,
+    }
+
+
+def coerce_write_policy_metadata(value: Any, *, default: str = "read_only") -> dict[str, Any]:
+    if not isinstance(value, dict):
+        return write_policy_metadata(value, default=default)
+
+    canonical_hint = str(value.get("canonical") or "").strip()
+    raw = str(value.get("raw") or "").strip() or canonical_hint or default
+    canonical = canonical_hint or normalize_write_policy(raw, default=default)
+    return {
+        "raw": raw,
+        "canonical": canonical,
+        "known": canonical in CANONICAL_WRITE_POLICIES or is_known_write_policy(raw),
+        "legacy": raw in LEGACY_WRITE_POLICY_ALIASES,
+        "autonomous_safe": canonical in AUTONOMOUS_SAFE_WRITE_POLICIES,
+        "requires_confirmation": canonical in CONFIRMATION_WRITE_POLICIES,
+        "blocked_by_default": canonical in BLOCKED_WRITE_POLICIES,
+    }
+
+
+def write_policy_public_fields(value: Any, *, default: str = "read_only") -> dict[str, Any]:
+    metadata = coerce_write_policy_metadata(value, default=default)
+    return {
+        "write_policy": metadata["canonical"],
+        "write_policy_raw": metadata["raw"],
+        "write_policy_metadata": metadata,
+    }

package/runtime/plugins/claude-code-ai-devkit/README.md

@@ -6,6 +6,11 @@ DevKit.
 O plugin fornece um router skill, comandos de orientacao e scripts que delegam
 para `agent`.
 
+Ele tambem inclui subagentes Claude Code em `agents/` para isolar contexto de
+exploracao, banco, PR, suporte e revisao final. Esses subagentes continuam
+usando o Agent DevKit como fonte da verdade: preferem MCP quando disponivel e,
+como fallback atual, chamam `scripts/run-capability.py`.
+
 ## Comandos
 
 ```bash
@@ -14,6 +19,18 @@ python3 scripts/doctor.py --json
 python3 scripts/run-capability.py --json elasticsearch-log-analyzer search-log-events --source app --from 2026-06-27T00:00:00Z --to 2026-06-27T01:00:00Z
 ```
 
+## Subagentes
+
+- `agent-devkit-repo-explorer`
+- `agent-devkit-db-analyst`
+- `agent-devkit-pr-reviewer`
+- `agent-devkit-support-triage`
+- `agent-devkit-execution-reviewer`
+
+Eles sao opcionais e conservadores. Nao devem executar escrita externa sem
+confirmacao, nao devem ignorar `write_policy` e nao devem duplicar a logica dos
+agentes em `agents/`.
+
 A instalacao recomendada pelo runtime e:
 
 ```bash

package/runtime/plugins/claude-code-ai-devkit/agents/README.md

@@ -1,5 +1,32 @@
 # Claude Code Agents
 
 Este plugin usa o runtime central do Agent DevKit como fonte da verdade. Agentes
-nativos do host podem ser adicionados depois, mas nao devem duplicar logica de
-`agents/`.
+nativos do host devem ser pequenos, focados e conservadores. Eles nao duplicam
+logica de `agents/`; apenas orientam o Claude Code a chamar o Agent DevKit por
+MCP quando disponivel ou pelo script local `run-capability.py`.
+
+## Subagentes incluidos
+
+- `agent-devkit-repo-explorer`: explora repositorios e inventario de agentes.
+- `agent-devkit-db-analyst`: analisa perguntas de banco usando capabilities
+  read-only.
+- `agent-devkit-pr-reviewer`: revisa Pull Requests por contrato do
+  `github-pr-reviewer`.
+- `agent-devkit-support-triage`: faz triagem N1/N2 sem assumir escrita externa.
+- `agent-devkit-execution-reviewer`: revisa plano/resultado antes da resposta
+  final.
+
+## Guardrails
+
+- Use o MCP `mcp__agent-devkit__capability_run` se ele existir na sessao.
+- Se MCP nao existir, use apenas `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json ...`.
+- Nao use shell arbitrario para resolver uma tarefa coberta por capability.
+- Preserve `write_policy`, `providers`, `fallback_applied`, `risks` e
+  `next_steps` na resposta.
+- Retorne resumo com evidencias; nao despeje logs completos.
+- Reporte `blocked` quando a tarefa exigir permissao, provider ou escrita
+  externa nao autorizada.
+
+Observacao: em subagentes fornecidos por plugin, Claude Code ignora frontmatter
+como `permissionMode` e `mcpServers`. Por isso estes templates restringem
+ferramentas com `tools` e reforcam permissoes no prompt do subagente.

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-db-analyst.md

@@ -0,0 +1,44 @@
+---
+name: agent-devkit-db-analyst
+description: Use para investigar perguntas de banco com Agent DevKit read-only, SQL Server, Postgres ou Supabase, retornando evidencias e bloqueios.
+tools: Read, Glob, Grep, Bash
+model: sonnet
+---
+
+Voce e um subagente Claude Code para analise de banco via Agent DevKit.
+
+Escopo permitido:
+
+- `sqlserver-data-analyzer`
+- `postgres-data-analyzer`
+- `supabase-project-analyst`
+
+Regras:
+
+- Execute apenas capabilities `read_only` ou `dry_run`.
+- Prefira MCP `mcp__agent-devkit__capability_run` quando disponivel.
+- Se MCP nao existir, use apenas
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json <agent> <capability> ...`.
+- Nao execute cliente SQL direto, migration, update, delete, insert ou DDL.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Se a pergunta exigir escrita, retorne `blocked` e indique a confirmacao ou o
+  agente de change operator apropriado.
+- Resuma amostras e evidencias; nao despeje tabelas grandes.
+- Preserve `providers.missing`, `fallback_applied`, `risks` e `next_steps` dos
+  payloads do Agent DevKit.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|blocked|partial",
+  "agent_used": "...",
+  "capability_used": "...",
+  "summary": "...",
+  "evidence": [],
+  "risks": [],
+  "blocked_reason": null,
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-execution-reviewer.md

@@ -0,0 +1,38 @@
+---
+name: agent-devkit-execution-reviewer
+description: Use para revisar plano, resultado ou resposta final com execution-reviewer antes de concluir uma tarefa Agent DevKit.
+tools: Read, Glob, Grep, Bash
+model: sonnet
+---
+
+Voce e um subagente Claude Code de revisao final para Agent DevKit.
+
+Escopo preferencial:
+
+- `execution-reviewer/review-plan`
+- `execution-reviewer/review-agent-result`
+- `execution-reviewer/review-final-output`
+
+Regras:
+
+- Prefira MCP `mcp__agent-devkit__capability_run` quando disponivel.
+- Se MCP nao existir, use apenas
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json execution-reviewer <capability> ...`.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Nao altere arquivos e nao execute a correcao diretamente.
+- Verifique coerencia, policy, riscos, provider missing, testes e lacunas.
+- Preserve achados de bloqueio e indique a menor correcao necessaria.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|needs-fix|blocked",
+  "approved": false,
+  "findings": [],
+  "policy_risks": [],
+  "test_gaps": [],
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-pr-reviewer.md

@@ -0,0 +1,42 @@
+---
+name: agent-devkit-pr-reviewer
+description: Use para revisar Pull Requests via Agent DevKit em modo report-only, sem comentar, aprovar ou solicitar mudancas automaticamente.
+tools: Read, Glob, Grep, Bash
+model: sonnet
+---
+
+Voce e um subagente Claude Code para review de PR usando Agent DevKit.
+
+Escopo preferencial:
+
+- `github-pr-reviewer/list-review-requests`
+- `github-pr-reviewer/inspect-pr`
+- `github-pr-reviewer/review-pr-diff`
+
+Regras:
+
+- Modo padrao e report-only.
+- Nunca aprove, comente ou solicite mudancas sem permissao explicita e policy
+  correspondente.
+- Prefira MCP `mcp__agent-devkit__capability_run` quando disponivel.
+- Se MCP nao existir, use apenas
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json github-pr-reviewer <capability> ...`.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Preserve `permission`, `requires_permission`, `providers`, `risks`,
+  `fallback_applied` e `next_steps`.
+- Foque em bugs, regressao, seguranca, contrato e testes faltantes.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|blocked|partial",
+  "pr": "...",
+  "findings": [],
+  "tests_or_gaps": [],
+  "requires_permission": false,
+  "blocked_reason": null,
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-repo-explorer.md

@@ -0,0 +1,40 @@
+---
+name: agent-devkit-repo-explorer
+description: Use para explorar estrutura de repositorio, agentes, capabilities e contexto antes de planejar trabalho com Agent DevKit.
+tools: Read, Glob, Grep, Bash
+model: haiku
+---
+
+Voce e um subagente Claude Code de exploracao read-only para Agent DevKit.
+
+Objetivo: levantar contexto pequeno e acionavel sem poluir a conversa principal.
+
+Regras:
+
+- Prefira `mcp__agent-devkit__capability_run` quando a ferramenta MCP do Agent
+  DevKit estiver disponivel.
+- Se MCP nao estiver disponivel, use apenas comandos seguros do runtime:
+  `agent agents --json`, `agent capabilities <agent> --json`,
+  `agent inspect <agent> <capability> --json` ou
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json ...`.
+- Use `Read`, `Glob` e `Grep` para localizar arquivos relevantes.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Nao edite arquivos, nao rode formatadores e nao execute comandos externos de
+  instalacao.
+- Nao exponha segredos. Se encontrar valores sensiveis, redija.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|blocked|partial",
+  "scope": "...",
+  "findings": [],
+  "recommended_agent": "...",
+  "recommended_capability": "...",
+  "evidence": [],
+  "blocked_reason": null,
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/agents/agent-devkit-support-triage.md

@@ -0,0 +1,43 @@
+---
+name: agent-devkit-support-triage
+description: Use para triagem N1/N2 de incidentes usando Agent DevKit, preservando providers, fallbacks, evidencias e bloqueios.
+tools: Read, Glob, Grep, Bash
+model: sonnet
+---
+
+Voce e um subagente Claude Code para triagem de suporte via Agent DevKit.
+
+Escopo preferencial:
+
+- `n1-support-agent`
+- `n2-support-agent`
+- `azure-devops-orchestrator`
+- `topdesk-orchestrator`
+- analisadores de logs e bancos read-only
+
+Regras:
+
+- Prefira MCP `mcp__agent-devkit__capability_run` quando disponivel.
+- Se MCP nao existir, use apenas
+  `python3 plugins/claude-code-ai-devkit/scripts/run-capability.py --json ...`.
+- Nao mova cards, comente, atualize TOPdesk ou execute escrita externa sem
+  confirmacao explicita.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos nos
+  resumos.
+- Preserve `providers.missing`, `fallback_applied`, `risks` e `next_steps`.
+- Resuma logs e dados sensiveis; nao copie payloads grandes para a resposta.
+- Se faltar provider, retorne `blocked` ou `partial` com a configuracao minima.
+
+Formato de saida:
+
+```json
+{
+  "status": "ok|blocked|partial",
+  "incident": "...",
+  "summary": "...",
+  "evidence": [],
+  "hypotheses": [],
+  "blocked_reason": null,
+  "next_steps": []
+}
+```

package/runtime/plugins/claude-code-ai-devkit/plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "claude-code-ai-devkit",
   "name": "AI DevKit",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Thin Claude Code adapter for routing software support, infrastructure, data, and development tasks through the local AI DevKit runtime.",
   "runtime": {
     "command": "agent",

package/runtime/plugins/claude-code-ai-devkit/skills/ai-devkit-router/SKILL.md

@@ -13,6 +13,22 @@ specification.
 Prefer `agent run` for deterministic execution. Use `agent` only when the
 terminal runtime must route free-form language without host LLM support.
 
+Use the plugin subagents in `plugins/claude-code-ai-devkit/agents/` when the
+task benefits from isolated context:
+
+- `agent-devkit-repo-explorer` for repository exploration and agent/capability
+  inventory.
+- `agent-devkit-db-analyst` for SQL Server, Postgres, or Supabase read-only
+  analysis.
+- `agent-devkit-pr-reviewer` for GitHub PR review in report-only mode.
+- `agent-devkit-support-triage` for N1/N2 support triage.
+- `agent-devkit-execution-reviewer` for final plan/result review.
+
+Subagents must prefer Agent DevKit MCP tools when available. If MCP is not
+available, they must call the thin plugin runtime script instead of duplicating
+domain logic. They must preserve `write_policy`, `providers`, `risks`,
+`fallback_applied`, and `next_steps` in their summaries.
+
 If a provider is missing, ask for the minimum provider reference with
 `agent provider configure`. If the user ignores the request, preserve the
 runtime fallback result from `requires.providers`.

package/runtime/plugins/claude-skill-ai-devkit/ai-devkit/SKILL.md

@@ -26,3 +26,4 @@ queries, runbooks, and manual steps without pretending local execution happened.
 - For support workflows, read `references/sustentacao.md`.
 - For infrastructure workflows, read `references/infra.md`.
 - For development/specification workflows, read `references/desenvolvimento.md`.
+- For Claude Code subagent patterns, read `references/subagents.md`.

package/runtime/plugins/claude-skill-ai-devkit/ai-devkit/references/subagents.md

@@ -0,0 +1,21 @@
+# Subagentes Claude
+
+Subagentes sao um recurso do Claude Code. Este skill de Claude Desktop/Claude.ai
+permanece `skill-only` e nao tenta criar subagentes dinamicos.
+
+Quando o usuario estiver em Claude Code, use os templates do plugin
+`claude-code-ai-devkit/agents/`:
+
+- `agent-devkit-repo-explorer`
+- `agent-devkit-db-analyst`
+- `agent-devkit-pr-reviewer`
+- `agent-devkit-support-triage`
+- `agent-devkit-execution-reviewer`
+
+Regras:
+
+- Agent DevKit continua sendo a fonte da verdade.
+- Prefira MCP do Agent DevKit quando existir.
+- Sem MCP, use `scripts/run-capability.py --json`.
+- Preserve `write_policy`, providers, fallbacks, riscos e proximos passos.
+- Nao conceda escrita externa por padrao.

package/runtime/plugins/claude-skill-ai-devkit/plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "claude-skill-ai-devkit",
   "name": "AI DevKit Claude Skill",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Skill bundle for Claude Desktop and Claude.ai to route support, infrastructure, data, documentation, and development work through AI DevKit practices.",
   "runtime": {
     "command": "agent",

package/runtime/providers/azure-devops.yaml

@@ -23,6 +23,15 @@ detection:
   env_any:
     - AZURE_DEVOPS_ORG
     - AZURE_DEVOPS_PAT
+wizard:
+  suggested_config:
+    project: prompt.project
+    AZURE_DEVOPS_PROJECT: prompt.project
+  field_suggestions:
+    AZURE_DEVOPS_PROJECT: prompt.project
+  questions:
+    AZURE_DEVOPS_ORG: Qual e a organizacao do Azure DevOps?
+    AZURE_DEVOPS_PROJECT: Qual e o nome do projeto no Azure DevOps?
 capabilities:
   read:
     - azure-devops-orchestrator/list-cards

package/runtime/providers/github.yaml

@@ -32,10 +32,14 @@ fallbacks:
   - manual_steps
 capabilities:
   read:
+    - github-pr-reviewer/list-review-requests
+    - github-pr-reviewer/inspect-pr
+    - github-pr-reviewer/review-pr-diff
     - pr.list-review-requests
     - pr.inspect
     - pr.review-report
   write:
+    - github-pr-reviewer/create-review-automation
     - pr.comment
     - pr.approve
     - pr.request-changes

package/runtime/providers/knowledge-github.yaml

@@ -0,0 +1,40 @@
+id: knowledge-github
+name: Knowledge GitHub
+kind: knowledge-storage-provider
+status: draft
+description: Provider GitHub para versionar knowledge bases file-first em repositorios remotos.
+auth_methods:
+  - id: gh-auth
+    label: GitHub CLI auth
+    native: true
+    secret_fields: []
+  - id: token
+    label: GitHub token
+    secret_fields:
+      - GITHUB_TOKEN
+config_fields:
+  - name: GITHUB_TOKEN
+    required: false
+    secret: true
+  - name: GITHUB_REPOSITORY
+    required: false
+    secret: false
+  - name: AGENT_DEVKIT_KNOWLEDGE_LOCATION
+    required: false
+    secret: false
+capabilities:
+  read:
+    - knowledge-base.join
+    - knowledge.search
+  write:
+    - knowledge-base.create
+    - knowledge.snapshot.submit
+health_check:
+  command: gh auth status
+risk:
+  default: read
+  writes: true
+fallbacks:
+  - plan_only
+  - manual_steps
+  - blocked

package/runtime/providers/knowledge-google-drive.yaml

@@ -0,0 +1,32 @@
+id: knowledge-google-drive
+name: Knowledge Google Drive
+kind: knowledge-storage-provider
+status: draft
+description: Provider Google Drive para armazenar knowledge bases file-first em pastas compartilhadas.
+auth_methods:
+  - id: oauth
+    label: Google OAuth
+    native: true
+    secret_fields: []
+config_fields:
+  - name: GOOGLE_APPLICATION_CREDENTIALS
+    required: false
+    secret: true
+  - name: AGENT_DEVKIT_KNOWLEDGE_DRIVE_FOLDER_ID
+    required: false
+    secret: false
+capabilities:
+  read:
+    - knowledge-base.join
+    - knowledge.search
+  write:
+    - knowledge.snapshot.submit
+health_check:
+  command: agent provider doctor knowledge-google-drive
+risk:
+  default: read
+  writes: true
+fallbacks:
+  - plan_only
+  - manual_steps
+  - blocked

package/runtime/providers/knowledge-local.yaml

@@ -0,0 +1,26 @@
+id: knowledge-local
+name: Knowledge Local
+kind: knowledge-storage-provider
+status: active
+description: Storage file-first local para knowledge bases em diretorios Markdown, JSON e YAML.
+auth_methods: []
+config_fields:
+  - name: AGENT_DEVKIT_KNOWLEDGE_ROOT
+    required: false
+    secret: false
+capabilities:
+  read:
+    - knowledge.search
+    - knowledge-base.status
+  write:
+    - knowledge-base.create
+    - knowledge.snapshot.create
+    - knowledge.publish
+health_check:
+  command: agent knowledge doctor
+risk:
+  default: local
+  writes: true
+fallbacks:
+  - manual_steps
+  - plan_only

package/runtime/providers/knowledge-notion.yaml

@@ -0,0 +1,32 @@
+id: knowledge-notion
+name: Knowledge Notion
+kind: knowledge-storage-provider
+status: draft
+description: Provider Notion para espelhar knowledge base file-first em paginas ou databases autorizadas.
+auth_methods:
+  - id: notion-token
+    label: Notion integration token
+    secret_fields:
+      - NOTION_TOKEN
+config_fields:
+  - name: NOTION_TOKEN
+    required: false
+    secret: true
+  - name: AGENT_DEVKIT_KNOWLEDGE_NOTION_DATABASE_ID
+    required: false
+    secret: false
+capabilities:
+  read:
+    - knowledge-base.join
+    - knowledge.search
+  write:
+    - knowledge.snapshot.submit
+health_check:
+  command: agent provider doctor knowledge-notion
+risk:
+  default: read
+  writes: true
+fallbacks:
+  - plan_only
+  - manual_steps
+  - blocked

package/runtime/providers/knowledge-obsidian.yaml

@@ -0,0 +1,24 @@
+id: knowledge-obsidian
+name: Knowledge Obsidian
+kind: knowledge-storage-provider
+status: draft
+description: Provider Obsidian para usar um vault local ou sincronizado como storage file-first.
+auth_methods: []
+config_fields:
+  - name: AGENT_DEVKIT_KNOWLEDGE_OBSIDIAN_VAULT
+    required: false
+    secret: false
+capabilities:
+  read:
+    - knowledge-base.join
+    - knowledge.search
+  write:
+    - knowledge.snapshot.submit
+health_check:
+  command: agent provider doctor knowledge-obsidian
+risk:
+  default: local
+  writes: true
+fallbacks:
+  - plan_only
+  - manual_steps