patchwork-os 1.2.0-beta.2.canary.709 → 1.2.0-beta.2.canary.711

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchwork-os",
-  "version": "1.2.0-beta.2.canary.709",
+  "version": "1.2.0-beta.2.canary.711",
   "description": "Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.",
   "type": "module",
   "main": "dist/index.js",

package/templates/recipes/ambient-journal.yaml

@@ -1,5 +1,12 @@
 name: ambient-journal
 description: Append a timestamped line to your daily journal whenever a git commit lands.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.append
+
 trigger:
   type: git_hook
   # The key is `event`, not `on` (#1464-family). The parser requires

package/templates/recipes/approval-queue-ui-test.yaml

@@ -46,6 +46,13 @@ description: |
       no need to find a real session.
     - Use the "Low (0)" filter to hit the empty-state branch deterministically
       (without rejecting cards mid-test).
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: manual
   vars:

package/templates/recipes/ctx-loop-test.yaml

@@ -9,6 +9,13 @@ description: |
   so the agent subprocess has MCP access. Running via `patchwork recipe run`
   (local yamlRunner) will fail at Step 1 — the local claude -p subprocess has
   no bridge MCP context. Trigger from the dashboard Recipes page instead.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: manual
 steps:

package/templates/recipes/daily-status.yaml

@@ -1,5 +1,12 @@
 name: daily-status
 description: Every morning at 08:00, summarize yesterday's commits + today's calendar hints from local files.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: cron
   at: "0 8 * * *"

package/templates/recipes/fix-errors-on-save.yaml

@@ -8,6 +8,13 @@ description: |
   Requires: bridge running with --driver subprocess so the agent subprocess has
   MCP access to getBufferContent, goToDefinition, getHover, getDiagnostics, editText.
 
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.append
+
 trigger:
   type: on_file_save
   glob: "**/*.{ts,tsx}"

package/templates/recipes/gmail-health-check.yaml

@@ -1,5 +1,12 @@
 name: gmail-health-check
 description: Verify Gmail connector is working and report inbox stats.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: manual
 steps:

package/templates/recipes/inbox-triage.yaml

@@ -1,5 +1,12 @@
 name: inbox-triage
 description: Fetch unread emails from last 24h and write a prioritised triage summary.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: cron
   at: "0 8 * * 1-5"

package/templates/recipes/incident-to-pr.yaml

@@ -46,6 +46,13 @@ description: |
         path: /hooks/incident-to-pr
     and reference {{payload.title}} / {{payload.body}} in place of the vars.
 
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - slack.post_message
+
 trigger:
   type: manual
   vars:

package/templates/recipes/lint-on-save.yaml

@@ -1,5 +1,12 @@
 name: lint-on-save
 description: On every save of a .ts/.tsx file, surface new diagnostics to the inbox.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.append
+
 trigger:
   type: on_file_save
   glob: "**/*.{ts,tsx}"

package/templates/recipes/morning-brief-slack.yaml

@@ -1,5 +1,13 @@
 name: morning-brief-slack
 description: Daily morning brief combining calendar, GitHub PRs, and Linear issues — posted to Slack.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+  - slack.post_message
+
 trigger:
   type: cron
   at: "0 8 * * 1-5"

package/templates/recipes/morning-brief.yaml

@@ -1,5 +1,12 @@
 name: morning-brief
 description: Daily morning brief combining unread emails, calendar, recent git activity, and open GitHub issues.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: cron
   at: "0 8 * * 1-5"

package/templates/recipes/outcome-ingester.yaml

@@ -18,6 +18,13 @@
 apiVersion: patchwork.sh/v1
 name: outcome-ingester
 description: Poll GitHub for Test Guardian issues and record outcome dispositions to the trust-replay store.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - outcomes.classify_issues
+
 trigger:
   type: cron
   at: "0 */6 * * *"

package/templates/recipes/project-health-check.yaml

@@ -2,6 +2,13 @@
 apiVersion: patchwork.sh/v1
 name: project-health-check
 description: Fetch git activity, open issues, and diagnostics in parallel, then write a health summary.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: manual
 maxConcurrency: 4

package/templates/recipes/sentry-to-linear.yaml

@@ -15,6 +15,13 @@ description: |
 #     path: /hooks/sentry-to-linear
 #   Then POST from a Sentry alert rule to https://<bridge-url>/hooks/sentry-to-linear
 
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: manual
   vars:

package/templates/recipes/stale-branches.yaml

@@ -1,5 +1,12 @@
 name: stale-branches
 description: Weekly sweep — list local branches with no commits in 30+ days.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: cron
   at: "0 9 * * MON"

package/templates/recipes/watch-failing-tests.yaml

@@ -1,5 +1,12 @@
 name: watch-failing-tests
 description: When tests fail, drop a one-paragraph explanation into the inbox.
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.append
+
 trigger:
   type: on_test_run
   filter: failure

package/templates/recipes/webhook/apple-watch-health-log.yaml

@@ -42,6 +42,14 @@ description: |
       -H 'Content-Type: application/json' \
       -d '{"sleep_hours":7.4,"sleep_quality":"restful","move_percent":112,"move_calories":645,"exercise_percent":150,"exercise_min":45,"stand_percent":100,"notes":"Closed all three rings."}'
 
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.append
+  - http.post
+
 trigger:
   type: webhook
   path: /apple-watch-health

package/templates/recipes/webhook/capture-thought.yaml

@@ -13,6 +13,13 @@ description: |
       -H 'Content-Type: application/json' \
       -d '{"text":"the auth refresh path needs a circuit breaker"}'
 
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.append
+
 trigger:
   type: webhook
   path: /capture-thought

package/templates/recipes/webhook/customer-escalation.yaml

@@ -20,6 +20,13 @@ description: |
       -H 'Content-Type: application/json' \
       -d '{"customer_email":"jane@bigco.com","ticket_url":"https://app.intercom.com/conversations/9876","summary":"Says checkout has been broken for 3 days"}'
 
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - slack.post_message
+
 trigger:
   type: webhook
   path: /customer-escalation

package/templates/recipes/webhook/incident-intake.yaml

@@ -23,6 +23,13 @@ description: |
       -H 'Content-Type: application/json' \
       -d '{"title":"checkout p99 over 2s","severity":"high","source":"datadog","url":"https://app.datadoghq.com/monitor/123"}'
 
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - slack.post_message
+
 trigger:
   type: webhook
   path: /incident-intake

package/templates/recipes/webhook/meeting-prep.yaml

@@ -14,6 +14,13 @@ description: |
       -H 'Content-Type: application/json' \
       -d '{"attendees":["alex@example.com","sam@example.com"],"topic":"Q3 planning"}'
 
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: webhook
   path: /meeting-prep

package/templates/recipes/webhook/morning-brief.yaml

@@ -15,6 +15,13 @@ description: |
   Example request:
     curl -X POST http://localhost:3101/hooks/morning-brief
 
+# Writes this recipe performs, acknowledged up front. Enforced only when
+# PATCHWORK_FLAG_ENFORCE_ALLOWWRITES is set, which is off by default — but a
+# template that omits it breaks at its write step the moment an operator turns
+# that hardening flag on, which is a reasonable thing for them to do.
+allowWrites:
+  - file.write
+
 trigger:
   type: webhook
   path: /morning-brief