monomind 1.16.6 → 1.16.8

package/packages/@monomind/cli/.claude/skills/mastermind/approval-detail.md

@@ -0,0 +1,259 @@
+---
+name: mastermind-approval-detail
+description: Mastermind approval-detail — deep inspection and action on a single approval request. View approval metadata, payload, comments, linked issues, and perform approve/reject/revision/resubmit actions. Mirrors ApprovalDetail.tsx.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Approval Detail
+
+This skill is invoked by `mastermind:approval-detail` or directly via `/mastermind:approval-detail`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `org_name`: org the approval belongs to (required)
+- `approval_id`: approval id or short prefix (required)
+- `action`: show | comments | linked-issues | comment | approve | reject | request-revision | resubmit
+- `comment_body`: comment text (for comment action)
+- `caller`: command | master
+
+---
+
+## Approval Statuses
+
+| Status | Meaning |
+|--------|---------|
+| `pending` | Awaiting review — actionable |
+| `approved` | Approved and resolved |
+| `rejected` | Rejected and resolved |
+| `revision_requested` | Agent asked to revise — still actionable |
+| `resubmitted` | Agent resubmitted after revision |
+
+---
+
+## Approval Types
+
+| Type | Description |
+|------|-------------|
+| `budget_override_required` | Agent needs to exceed budget cap |
+| `agent_hire` | Agent is requesting to hire another agent |
+| `tool_grant` | Agent requests a new tool permission |
+| `action_confirm` | Agent requests confirmation before a destructive action |
+| `custom` | Plugin-defined approval type |
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Approval
+
+```bash
+orgFile=".monomind/orgs/${org_name}.json"
+[ ! -f "$orgFile" ] && { echo "ERROR: Org '${org_name}' not found."; exit 1; }
+
+approvalsFile=".monomind/orgs/${org_name}-approvals.json"
+[ ! -f "$approvalsFile" ] && { echo "ERROR: No approvals file for org '${org_name}'."; exit 1; }
+
+# Find approval by full id or prefix
+approvalDef=$(jq -r --arg id "$approval_id" \
+  '(.approvals // [])[] | select(.id == $id or (.id | startswith($id)))' \
+  "$approvalsFile" | head -1)
+[ -z "$approvalDef" ] && { echo "ERROR: Approval '${approval_id}' not found."; exit 1; }
+
+approvalId=$(echo "$approvalDef" | jq -r '.id')
+commentsFile=".monomind/orgs/${org_name}-approval-comments.jsonl"
+```
+
+---
+
+## Step 2 — Execute Action
+
+### show (default)
+
+```bash
+echo "APPROVAL — ${approvalId}"
+echo "────────────────────────────────────────────────────────"
+
+echo "$approvalDef" | jq -r '
+  "  ID:         \(.id)",
+  "  Type:       \(.type // "unknown")",
+  "  Status:     \(.status // "pending")",
+  "  Agent:      \(.agentId // "(unknown)")",
+  "  Created:    \(.createdAt // "-")",
+  "  Resolved:   \(.resolvedAt // "-")"
+'
+
+echo ""
+echo "PAYLOAD"
+echo "────────────────────────────────────────────────────────"
+echo "$approvalDef" | jq -r '.payload // {}' | jq .
+
+status=$(echo "$approvalDef" | jq -r '.status // "pending"')
+if [ "$status" = "pending" ] || [ "$status" = "revision_requested" ]; then
+  echo ""
+  echo "ACTIONS AVAILABLE"
+  echo "  approve:          --action approve"
+  echo "  reject:           --action reject"
+  echo "  request revision: --action request-revision"
+  echo "  add comment:      --action comment --comment-body 'your notes'"
+fi
+```
+
+### comments
+
+```bash
+echo "COMMENTS — ${approvalId}"
+echo "────────────────────────────────────────────────────────"
+
+if [ ! -f "$commentsFile" ]; then
+  echo "  No comments."
+else
+  count=$(grep -c "\"approvalId\":\"${approvalId}\"" "$commentsFile" 2>/dev/null || echo 0)
+  echo "  Total: $count"
+  echo ""
+  grep "\"approvalId\":\"${approvalId}\"" "$commentsFile" 2>/dev/null | while IFS= read -r line; do
+    author=$(echo "$line" | jq -r '.authorType // "user"')
+    body=$(echo "$line" | jq -r '.body // ""')
+    ts=$(echo "$line" | jq -r '.createdAt // "-"')
+    echo "  [$ts] ($author)"
+    echo "  $body"
+    echo ""
+  done
+fi
+```
+
+### linked-issues
+
+```bash
+issuesFile=".monomind/orgs/${org_name}-issues.json"
+echo "LINKED ISSUES — ${approvalId}"
+echo "────────────────────────────────────────────────────────"
+printf "%-24s %-12s %s\n" "ID" "STATUS" "TITLE"
+echo "────────────────────────────────────────────────────────"
+
+linkedIds=$(echo "$approvalDef" | jq -r '(.linkedIssueIds // [])[]')
+if [ -z "$linkedIds" ]; then
+  echo "  No linked issues."
+else
+  if [ -f "$issuesFile" ]; then
+    echo "$linkedIds" | while read -r iid; do
+      row=$(jq -r --arg id "$iid" '(.issues // [])[] | select(.id == $id) | [.id, (.status // "open"), (.title // "(no title)")] | @tsv' "$issuesFile")
+      [ -n "$row" ] && echo "$row" | while IFS=$'\t' read -r id st title; do
+        printf "%-24s %-12s %s\n" "$id" "$st" "$title"
+      done || printf "%-24s %-12s %s\n" "$iid" "(unknown)" "(not found)"
+    done
+  fi
+fi
+```
+
+### comment
+
+```bash
+[ -z "$comment_body" ] && { echo "ERROR: --comment-body required."; exit 1; }
+
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+entry=$(jq -n \
+  --arg aid "$approvalId" \
+  --arg org "$org_name" \
+  --arg body "$comment_body" \
+  --arg ts "$ts" \
+  '{"approvalId":$aid,"org":$org,"authorType":"operator","body":$body,"createdAt":$ts}')
+
+echo "$entry" >> "$commentsFile"
+
+echo "Comment added to approval ${approvalId}."
+echo "  Body: $comment_body"
+echo "  At:   $ts"
+```
+
+### approve
+
+```bash
+status=$(echo "$approvalDef" | jq -r '.status // "pending"')
+if [ "$status" != "pending" ] && [ "$status" != "revision_requested" ]; then
+  echo "ERROR: Approval is in status '$status' — cannot approve."
+  exit 1
+fi
+
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approvalId" --arg ts "$ts" \
+  '.approvals = [(.approvals // [])[] | if .id == $id then
+     .status = "approved" | .resolvedAt = $ts | .resolvedBy = "operator"
+   else . end]' \
+  "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+echo "Approval '${approvalId}' APPROVED."
+echo "  Resolved at: $ts"
+echo "  Agent will be notified to proceed."
+```
+
+### reject
+
+```bash
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approvalId" --arg ts "$ts" \
+  '.approvals = [(.approvals // [])[] | if .id == $id then
+     .status = "rejected" | .resolvedAt = $ts | .resolvedBy = "operator"
+   else . end]' \
+  "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+echo "Approval '${approvalId}' REJECTED."
+echo "  Resolved at: $ts"
+```
+
+### request-revision
+
+```bash
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approvalId" --arg ts "$ts" \
+  '.approvals = [(.approvals // [])[] | if .id == $id then
+     .status = "revision_requested" | .revisionRequestedAt = $ts
+   else . end]' \
+  "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+echo "Revision requested for approval '${approvalId}'."
+echo "  Agent will be notified to revise and resubmit."
+```
+
+### resubmit
+
+```bash
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approvalId" --arg ts "$ts" \
+  '.approvals = [(.approvals // [])[] | if .id == $id then
+     .status = "pending" | .resubmittedAt = $ts
+   else . end]' \
+  "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+echo "Approval '${approvalId}' resubmitted (status reset to pending)."
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org: <org_name>
+approval_id: <approval_id>
+approval_status: <status>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.

package/packages/@monomind/cli/.claude/skills/mastermind/approve.md

@@ -0,0 +1,188 @@
+---
+name: mastermind-approve
+description: Mastermind approve — review and action pending approval requests from agents in a running org. Agents can request human approval before proceeding with sensitive actions.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Approve
+
+This skill is invoked by `mastermind:approve` or directly via `/mastermind:approve`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block
+- `org_name`: org to check approvals for
+- `action`: list | approve | reject | inspect
+- `approval_id`: id of the specific approval request (for approve/reject/inspect)
+- `reason`: optional reason for rejection
+- `caller`: command | master
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Approvals
+
+Approvals are stored in `.monomind/orgs/<org_name>-approvals.json`:
+
+```bash
+orgFile=".monomind/orgs/${org_name}.json"
+approvalsFile=".monomind/orgs/${org_name}-approvals.json"
+[ ! -f "$approvalsFile" ] && echo '{"approvals":[]}' > "$approvalsFile"
+```
+
+---
+
+## Step 2 — Execute Action
+
+### list (default)
+
+Show pending approval requests from agents:
+
+```bash
+jq -r '
+  (.approvals // []) | map(select(.status == "pending")) |
+  if length == 0 then "No pending approvals." else
+    .[] | "[\(.id)] \(.agent_id): \(.title)\n  Action: \(.action)\n  Risk: \(.risk_level // "low")\n  Requested: \(.requested_at)"
+  end
+' "$approvalsFile"
+```
+
+Render as:
+```
+PENDING APPROVALS — org: <org_name>
+──────────────────────────────────────────────────
+[req-001] content-writer: Publish to external blog
+  Action: POST to https://blog.example.com/api/posts
+  Risk:   medium
+  Requested: 2 min ago
+
+[req-002] marketer: Send email campaign
+  Action: Send to 1,200 subscribers
+  Risk:   high  ← requires explicit approval
+  Requested: 5 min ago
+──────────────────────────────────────────────────
+2 pending  |  Type "approve <id>" or "reject <id> <reason>"
+```
+
+### inspect
+
+Show full details of a single approval request:
+
+```bash
+jq --arg id "$approval_id" '(.approvals // [])[] | select(.id == $id)' "$approvalsFile"
+```
+
+Print the agent's requested action, context, and any supporting evidence they provided.
+
+### approve
+
+Update approval status and notify the waiting agent via memory:
+
+```bash
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approval_id" \
+   '.approvals = [(.approvals // [])[] | if .id == $id then .status = "approved" | .resolved_at = (now|todate) | .resolved_by = "human" else . end]' \
+   "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+# Notify the agent via memory so it can proceed
+approval=$(jq --arg id "$approval_id" '(.approvals // [])[] | select(.id == $id)' "$approvalsFile")
+agent_id=$(echo "$approval" | jq -r '.agent_id')
+memNs="org:${org_name}"
+npx monomind@latest memory store \
+  --key "approval:${approval_id}" \
+  --namespace "$memNs" \
+  --value '{"status":"approved","approval_id":"'"$approval_id"'","ts":"'"$(date -u +%Y-%m-%dT%H:%M:%SZ)"'"}'
+
+echo "Approved request $approval_id — agent $agent_id may proceed."
+```
+
+Emit `org:approval:approved` event to dashboard.
+
+### reject
+
+```bash
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approval_id" --arg reason "${reason:-No reason given}" \
+   '.approvals = [(.approvals // [])[] | if .id == $id then .status = "rejected" | .resolved_at = (now|todate) | .resolved_by = "human" | .rejection_reason = $reason else . end]' \
+   "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+approval=$(jq --arg id "$approval_id" '(.approvals // [])[] | select(.id == $id)' "$approvalsFile")
+agent_id=$(echo "$approval" | jq -r '.agent_id')
+memNs="org:${org_name}"
+npx monomind@latest memory store \
+  --key "approval:${approval_id}" \
+  --namespace "$memNs" \
+  --value '{"status":"rejected","approval_id":"'"$approval_id"'","reason":"'"${reason:-No reason given}"'","ts":"'"$(date -u +%Y-%m-%dT%H:%M:%SZ)"'"}'
+
+echo "Rejected request $approval_id. Agent $agent_id has been notified."
+```
+
+Emit `org:approval:rejected` event.
+
+---
+
+## How Agents Request Approval
+
+Agents that need human approval before a sensitive action should:
+
+1. Write to the approvals file:
+```bash
+approvalsFile=".monomind/orgs/${orgName}-approvals.json"
+[ ! -f "$approvalsFile" ] && echo '{"approvals":[]}' > "$approvalsFile"
+approval_id="req-$(date +%s)-$$-$RANDOM"
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approval_id" \
+   --arg agent "$role_id" \
+   --arg title "$action_title" \
+   --arg action "$action_description" \
+   --arg risk "medium" \
+   '.approvals += [{"id":$id,"agent_id":$agent,"title":$title,"action":$action,"risk_level":$risk,"status":"pending","requested_at":(now|todate)}]' \
+   "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+```
+
+2. Emit `org:approval:requested` event to dashboard (so the human is notified).
+
+3. Poll for the approval decision — check the approvals file first (authoritative, updated by both the dashboard UI and `/mastermind:approve`), then fall back to memory:
+```bash
+approvalsFile=".monomind/orgs/${orgName}-approvals.json"
+while true; do
+  # Check file first — dashboard approve/reject button only updates the file (not memory)
+  file_status=$(jq --arg id "$approval_id" '(.approvals // [])[] | select(.id == $id) | .status // ""' "$approvalsFile" 2>/dev/null || echo "")
+  if [ -z "$file_status" ] || [ "$file_status" = '"pending"' ] || [ "$file_status" = "pending" ]; then
+    mem_status=$(npx monomind@latest memory get --key "approval:${approval_id}" --namespace "${memNs}" 2>/dev/null | jq -r '.status // ""' 2>/dev/null)
+    [ -n "$mem_status" ] && [ "$mem_status" != "pending" ] && file_status="$mem_status"
+  fi
+  # Strip quotes from jq output
+  file_status=$(echo "$file_status" | tr -d '"')
+  [ "$file_status" = "approved" ] && break
+  [ "$file_status" = "rejected" ] && { echo "Action rejected by governance policy — skip this action"; exit 1; }
+  sleep 30
+done
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org: <org_name>
+approval_id: <approval_id if applicable>
+pending_count: <N>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.