pi-harness-runtime 0.10.7 → 0.10.12

package/packages/performance-optimizer/dist/types.d.ts

@@ -1,123 +0,0 @@
-/**
- * Performance Optimizer Types (RFC-0056)
- *
- * Interfaces for performance analysis and recommendations.
- */
-export interface RuntimeMetricSnapshot {
-    jobId: string;
-    timestamp: string;
-    /** Total tokens used */
-    totalTokens: number;
-    /** Tokens used in last request */
-    lastRequestTokens: number;
-    /** Average latency in milliseconds */
-    avgLatencyMs: number;
-    /** Number of retries */
-    retryCount: number;
-    /** Number of successful calls */
-    successCount: number;
-    /** Number of failed calls */
-    failureCount: number;
-    /** Current context size in tokens */
-    currentContextTokens: number;
-    /** Max context window */
-    contextWindow: number;
-    /** Provider-specific metrics */
-    providerMetrics: Record<string, ProviderMetric>;
-}
-export interface ProviderMetric {
-    providerId: string;
-    callCount: number;
-    successCount: number;
-    failureCount: number;
-    avgLatencyMs: number;
-    avgTokensPerCall: number;
-}
-export interface ProviderRuntimeState {
-    providerId: string;
-    state: "available" | "limited" | "exhausted" | "disabled" | "unknown";
-    remainingQuota?: number;
-    avgLatencyMs?: number;
-    lastError?: string;
-}
-export interface PerformancePolicy {
-    /** Minimum context usage to consider reduction */
-    minContextReductionPercent: number;
-    /** Maximum parallelism allowed */
-    maxParallelism: number;
-    /** Minimum improvement threshold for recommendations */
-    minImprovementPercent: number;
-    /** Whether to allow provider switching */
-    allowProviderSwitch: boolean;
-    /** Mandatory stages that cannot be skipped */
-    mandatoryStages: string[];
-}
-export interface TaskGraphSnapshot {
-    nodes: Array<{
-        id: string;
-        status: string;
-    }>;
-    edges: Array<{
-        from: string;
-        to: string;
-    }>;
-}
-export interface PerformanceOptimizationRequest {
-    jobId: string;
-    taskId?: string;
-    metrics: RuntimeMetricSnapshot;
-    providerStates: ProviderRuntimeState[];
-    taskGraph: TaskGraphSnapshot;
-    policy: PerformancePolicy;
-}
-export type PerformanceRecommendation = {
-    type: "reduce_context";
-    targetTokens: number;
-    reason: string;
-} | {
-    type: "change_provider";
-    provider: string;
-    reason: string;
-} | {
-    type: "increase_parallelism";
-    limit: number;
-    reason: string;
-} | {
-    type: "decrease_parallelism";
-    limit: number;
-    reason: string;
-} | {
-    type: "reuse_checkpoint";
-    checkpointId: string;
-    reason: string;
-} | {
-    type: "skip_redundant_step";
-    taskId: string;
-    reason: string;
-};
-export interface PerformanceOptimizationPlan {
-    jobId: string;
-    recommendations: PerformanceRecommendation[];
-    expectedImpact: {
-        tokenReductionPercent?: number;
-        latencyReductionPercent?: number;
-        retryReductionPercent?: number;
-    };
-    generatedAt: string;
-}
-export type PerformanceOptimizerEvent = {
-    type: "performance.analysis.started";
-    jobId: string;
-} | {
-    type: "performance.recommendation.created";
-    jobId: string;
-    recommendation: PerformanceRecommendation;
-} | {
-    type: "performance.analysis.completed";
-    jobId: string;
-} | {
-    type: "performance.analysis.failed";
-    jobId: string;
-    error: string;
-};
-//# sourceMappingURL=types.d.ts.map

package/packages/performance-optimizer/dist/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,qBAAqB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,yBAAyB;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,cAAc;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IACjC,kDAAkD;IAClD,0BAA0B,EAAE,MAAM,CAAC;IACnC,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,qBAAqB,EAAE,MAAM,CAAC;IAC9B,0CAA0C;IAC1C,mBAAmB,EAAE,OAAO,CAAC;IAC7B,8CAA8C;IAC9C,eAAe,EAAE,MAAM,EAAE,CAAC;CAC1B;AAID,MAAM,WAAW,iBAAiB;IACjC,KAAK,EAAE,KAAK,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,8BAA8B;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,cAAc,EAAE,oBAAoB,EAAE,CAAC;IACvC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,EAAE,iBAAiB,CAAC;CAC1B;AAID,MAAM,MAAM,yBAAyB,GAClC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,WAAW,2BAA2B;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,yBAAyB,EAAE,CAAC;IAC7C,cAAc,EAAE;QACf,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,MAAM,yBAAyB,GAClC;IAAE,IAAI,EAAE,8BAA8B,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvD;IACA,IAAI,EAAE,oCAAoC,CAAC;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,yBAAyB,CAAC;CACzC,GACD;IAAE,IAAI,EAAE,gCAAgC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,6BAA6B,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/packages/performance-optimizer/dist/types.js

@@ -1,7 +0,0 @@
-/**
- * Performance Optimizer Types (RFC-0056)
- *
- * Interfaces for performance analysis and recommendations.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/packages/performance-optimizer/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/packages/performance-optimizer/package.json

@@ -1,23 +0,0 @@
-{
-  "name": "@pi-harness/performance-optimizer",
-  "version": "0.10.7",
-  "description": "Performance optimization analyzer for pi-harness runtime (RFC-0056)",
-  "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "exports": {
-    ".": {
-      "import": "./dist/index.js",
-      "types": "./dist/index.d.ts"
-    }
-  },
-  "scripts": {
-    "build": "tsc",
-    "test": "node --experimental-vm-modules ../../node_modules/jest/bin/jest.js",
-    "lint": "eslint src --ext .ts"
-  },
-  "devDependencies": {
-    "@types/node": "^22.0.0",
-    "typescript": "^7.0.2"
-  }
-}

package/packages/performance-optimizer/test/optimizer.test.ts

@@ -1,267 +0,0 @@
-/**
- * Performance Optimizer Tests (RFC-0056)
- */
-
-import { describe, it, expect, beforeEach } from "@jest/globals";
-import {
-	type PerformanceOptimizer,
-	createPerformanceOptimizer,
-} from "../src/index.js";
-import type {
-	PerformanceOptimizationRequest,
-	PerformancePolicy,
-} from "../src/types.js";
-
-describe("PerformanceOptimizer", () => {
-	let optimizer: PerformanceOptimizer;
-	let defaultMetrics: PerformanceOptimizationRequest["metrics"];
-	let defaultProviders: PerformanceOptimizationRequest["providerStates"];
-
-	beforeEach(() => {
-		optimizer = createPerformanceOptimizer();
-		defaultMetrics = {
-			jobId: "test-job",
-			timestamp: new Date().toISOString(),
-			totalTokens: 50000,
-			lastRequestTokens: 5000,
-			avgLatencyMs: 5000,
-			retryCount: 2,
-			successCount: 10,
-			failureCount: 1,
-			currentContextTokens: 80000,
-			contextWindow: 100000,
-			providerMetrics: {
-				"provider-1": {
-					providerId: "provider-1",
-					callCount: 10,
-					successCount: 9,
-					failureCount: 1,
-					avgLatencyMs: 5000,
-					avgTokensPerCall: 5000,
-				},
-			},
-		};
-		defaultProviders = [
-			{
-				providerId: "provider-1",
-				state: "available",
-				remainingQuota: 100000,
-			},
-		];
-	});
-
-	describe("analyze", () => {
-		it("returns no recommendations when metrics are healthy", () => {
-			const metrics = {
-				...defaultMetrics,
-				currentContextTokens: 30000, // Low context usage
-				retryCount: 0,
-				avgLatencyMs: 2000,
-			};
-
-			const plan = optimizer.analyze({
-				jobId: "test-job",
-				metrics,
-				providerStates: defaultProviders,
-				taskGraph: { nodes: [], edges: [] },
-				policy: { mandatoryStages: [] } as PerformancePolicy,
-			});
-
-			expect(plan.jobId).toBe("test-job");
-			expect(plan.recommendations).toBeDefined();
-			expect(Array.isArray(plan.recommendations)).toBe(true);
-		});
-
-		it("recommends context reduction when context is high", () => {
-			const metrics = {
-				...defaultMetrics,
-				currentContextTokens: 90000, // 90% usage
-				contextWindow: 100000,
-			};
-
-			const plan = optimizer.analyze({
-				jobId: "test-job",
-				metrics,
-				providerStates: defaultProviders,
-				taskGraph: { nodes: [], edges: [] },
-				policy: { mandatoryStages: [] } as PerformancePolicy,
-			});
-
-			const reduceContext = plan.recommendations.find(
-				(r) => r.type === "reduce_context",
-			);
-			expect(reduceContext).toBeDefined();
-			if (reduceContext && reduceContext.type === "reduce_context") {
-				expect(reduceContext.targetTokens).toBeLessThan(90000);
-				expect(reduceContext.reason.length).toBeGreaterThan(0);
-			}
-		});
-
-		it("recommends provider change when failure rate is high", () => {
-			const metrics = {
-				...defaultMetrics,
-				providerMetrics: {
-					"provider-1": {
-						providerId: "provider-1",
-						callCount: 10,
-						successCount: 3,
-						failureCount: 7,
-						avgLatencyMs: 5000,
-						avgTokensPerCall: 5000,
-					},
-				},
-			};
-
-			const providers = [
-				{ providerId: "provider-1", state: "limited" as const },
-				{ providerId: "provider-2", state: "available" as const },
-			];
-
-			const plan = optimizer.analyze({
-				jobId: "test-job",
-				metrics,
-				providerStates: providers,
-				taskGraph: { nodes: [], edges: [] },
-				policy: {
-					mandatoryStages: [],
-					allowProviderSwitch: true,
-				} as PerformancePolicy,
-			});
-
-			const changeProvider = plan.recommendations.find(
-				(r) => r.type === "change_provider",
-			);
-			expect(changeProvider).toBeDefined();
-			if (changeProvider && changeProvider.type === "change_provider") {
-				expect(changeProvider.provider).toBe("provider-2");
-			}
-		});
-
-		it("does not switch providers when not allowed by policy", () => {
-			const metrics = {
-				...defaultMetrics,
-				providerMetrics: {
-					"provider-1": {
-						providerId: "provider-1",
-						callCount: 10,
-						successCount: 2,
-						failureCount: 8,
-						avgLatencyMs: 5000,
-						avgTokensPerCall: 5000,
-					},
-				},
-			};
-
-			const plan = optimizer.analyze({
-				jobId: "test-job",
-				metrics,
-				providerStates: defaultProviders,
-				taskGraph: { nodes: [], edges: [] },
-				policy: {
-					mandatoryStages: [],
-					allowProviderSwitch: false,
-				} as PerformancePolicy,
-			});
-
-			const changeProvider = plan.recommendations.find(
-				(r) => r.type === "change_provider",
-			);
-			expect(changeProvider).toBeUndefined();
-		});
-
-		it("produces deterministic recommendations for identical inputs", () => {
-			const request = {
-				jobId: "test-job",
-				metrics: defaultMetrics,
-				providerStates: defaultProviders,
-				taskGraph: { nodes: [], edges: [] },
-				policy: { mandatoryStages: [] } as PerformancePolicy,
-			};
-
-			const plan1 = optimizer.analyze(request);
-			const plan2 = optimizer.analyze(request);
-
-			expect(plan1.recommendations.length).toBe(plan2.recommendations.length);
-			for (let i = 0; i < plan1.recommendations.length; i++) {
-				expect(plan1.recommendations[i].type).toBe(
-					plan2.recommendations[i].type,
-				);
-			}
-		});
-
-		it("includes expected impact when recommendations are made", () => {
-			const metrics = {
-				...defaultMetrics,
-				currentContextTokens: 90000,
-			};
-
-			const plan = optimizer.analyze({
-				jobId: "test-job",
-				metrics,
-				providerStates: defaultProviders,
-				taskGraph: { nodes: [], edges: [] },
-				policy: { mandatoryStages: [] } as PerformancePolicy,
-			});
-
-			expect(plan.expectedImpact).toBeDefined();
-			if (plan.recommendations.length > 0) {
-				// Should have some impact estimate
-				expect(plan.generatedAt).toBeDefined();
-			}
-		});
-	});
-
-	describe("events", () => {
-		it("emits analysis started event", () => {
-			const events: any[] = [];
-			optimizer.onEvent((e) => events.push(e));
-
-			optimizer.analyze({
-				jobId: "test-job",
-				metrics: defaultMetrics,
-				providerStates: defaultProviders,
-				taskGraph: { nodes: [], edges: [] },
-				policy: { mandatoryStages: [] } as PerformancePolicy,
-			});
-
-			expect(
-				events.some((e) => e.type === "performance.analysis.started"),
-			).toBe(true);
-		});
-
-		it("emits analysis completed event", () => {
-			const events: any[] = [];
-			optimizer.onEvent((e) => events.push(e));
-
-			optimizer.analyze({
-				jobId: "test-job",
-				metrics: defaultMetrics,
-				providerStates: defaultProviders,
-				taskGraph: { nodes: [], edges: [] },
-				policy: { mandatoryStages: [] } as PerformancePolicy,
-			});
-
-			expect(
-				events.some((e) => e.type === "performance.analysis.completed"),
-			).toBe(true);
-		});
-
-		it("emits recommendation created events", () => {
-			const events: any[] = [];
-			optimizer.onEvent((e) => events.push(e));
-
-			optimizer.analyze({
-				jobId: "test-job",
-				metrics: { ...defaultMetrics, currentContextTokens: 95000 },
-				providerStates: defaultProviders,
-				taskGraph: { nodes: [], edges: [] },
-				policy: { mandatoryStages: [] } as PerformancePolicy,
-			});
-
-			const recommendationEvents = events.filter(
-				(e) => e.type === "performance.recommendation.created",
-			);
-			expect(recommendationEvents.length).toBeGreaterThan(0);
-		});
-	});
-});

package/packages/performance-optimizer/tsconfig.json

@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}

package/packages/privilege-broker/README.md

@@ -1,45 +0,0 @@
-# Privilege Broker — RFC-0101 §7
-
-Safe privilege escalation for autonomous tasks.
-
-## Package
-
-`@pi-harness/privilege-broker`
-
-## Capabilities
-
-| Capability | Description | Auto-approve? |
-|---|---|---|
-| `read_files` | Read any file | Yes |
-| `write_files` | Write to non-system paths | No |
-| `run_command` | Execute shell commands | No |
-| `sudo_command` | Execute with sudo | No |
-| `network_request` | HTTP/HTTPS requests | Yes |
-| `git_push` | Push to configured remotes | No |
-| `package_install` | Install npm packages | No |
-| `env_read` | Read environment variables | Yes |
-
-## Usage
-
-```ts
-import { PrivilegeBroker, ConsoleAuditLogger } from "@pi-harness/privilege-broker";
-
-const broker = new PrivilegeBroker({
-  audit: new ConsoleAuditLogger(),
-});
-
-// Check before running a command
-const result = await broker.check(
-  "run_command",
-  { command: "ls /tmp", cwd: "/tmp" },
-  async (msg) => confirm(msg),
-);
-
-if (result.approved) {
-  await broker.execute("run_command", { command: "ls /tmp" });
-}
-```
-
-## Status
-
-Phase 1 done. Approval classes and conditions implemented.

package/packages/privilege-broker/config/privileges.yaml.example

@@ -1,172 +0,0 @@
-# Privilege Registry — RFC-0101 §7
-#
-# Copy this file to `privileges.yaml` and review it before starting the worker.
-# The worker will reject unknown capabilities and refuse to start if this file
-# is missing or invalid.
-#
-# IMPORTANT: Only add entries that have been reviewed and approved by the operator.
-# The broker uses these argv templates literally — no shell interpolation.
-# Each argv element is passed directly to execve(2).
-
-version: "1.0"
-updatedAt: "2026-07-23T00:00:00Z"
-
-entries:
-  # ── Git ────────────────────────────────────────────────────────────────────
-
-  - name: "git.commit"
-    description: "Commit staged changes to a git repository"
-    argv:
-      - "git"
-      - "commit"
-      - "-m"
-      - "{message}"
-    envWhitelist:
-      - "GIT_AUTHOR_NAME"
-      - "GIT_AUTHOR_EMAIL"
-      - "GIT_COMMITTER_NAME"
-      - "GIT_COMMITTER_EMAIL"
-      - "GIT_DIR"
-    user: "frappe"
-    timeoutMs: 30_000
-    production: false # requires operator review before enabling
-
-  - name: "git.push"
-    description: "Push commits to a remote git repository"
-    argv:
-      - "git"
-      - "push"
-      - "--quiet"
-      - "origin"
-      - "{branch}"
-    envWhitelist:
-      - "GIT_DIR"
-      - "GIT_SSH_COMMAND"
-    user: "frappe"
-    timeoutMs: 60_000
-    production: false
-
-  - name: "git.pull"
-    description: "Pull changes from a remote git repository"
-    argv:
-      - "git"
-      - "pull"
-      - "--quiet"
-      - "origin"
-      - "{branch}"
-    envWhitelist:
-      - "GIT_DIR"
-      - "GIT_SSH_COMMAND"
-    user: "frappe"
-    timeoutMs: 120_000
-    production: false
-
-  # ── Bench commands ──────────────────────────────────────────────────────────
-
-  - name: "bench.build"
-    description: "Build a Frappe/ERPNext app via bench"
-    argv:
-      - "bench"
-      - "--site"
-      - "{site}"
-      - "build"
-      - "--app"
-      - "{app}"
-    envWhitelist:
-      - "FRAPPE_SITE"
-    user: "frappe"
-    timeoutMs: 300_000
-    production: false
-
-  - name: "bench.migrate"
-    description: "Run database migrations via bench"
-    argv:
-      - "bench"
-      - "--site"
-      - "{site}"
-      - "migrate"
-    envWhitelist:
-      - "FRAPPE_SITE"
-    user: "frappe"
-    timeoutMs: 600_000
-    production: false
-
-  - name: "bench.restart"
-    description: "Restart the Frappe/ERPNext web workers"
-    argv:
-      - "bench"
-      - "restart"
-    user: "frappe"
-    timeoutMs: 30_000
-    production: false
-
-  # ── System ─────────────────────────────────────────────────────────────────
-
-  - name: "system.restart"
-    description: "Restart the pi-harness runtime service via systemctl"
-    argv:
-      - "systemctl"
-      - "restart"
-      - "pi-harness-runtime"
-    user: "root"
-    timeoutMs: 60_000
-    production: false
-
-  - name: "system.logs"
-    description: "Read recent systemd journal logs for the pi-harness runtime"
-    argv:
-      - "journalctl"
-      - "--no-pager"
-      - "-n"
-      - "100"
-      - "-u"
-      - "pi-harness-runtime"
-    user: "frappe"
-    timeoutMs: 15_000
-    production: true
-
-  # ── OKF ───────────────────────────────────────────────────────────────────
-
-  - name: "okf.promote-pattern"
-    description: "Promote a task result as a reusable pattern in the OKF"
-    argv:
-      - "okf"
-      - "promote"
-      - "pattern"
-      - "--path"
-      - "{path}"
-      - "--hash"
-      - "{contentHash}"
-    user: "frappe"
-    timeoutMs: 30_000
-    production: false
-
-  - name: "okf.promote-lesson"
-    description: "Promote a classified failure as a lesson in the OKF"
-    argv:
-      - "okf"
-      - "promote"
-      - "lesson"
-      - "--path"
-      - "{path}"
-      - "--category"
-      - "{category}"
-    user: "frappe"
-    timeoutMs: 30_000
-    production: false
-
-  # ── Notify ────────────────────────────────────────────────────────────────
-
-  - name: "notify.send"
-    description: "Send a notification via the notification runtime (RFC-0022)"
-    argv:
-      - "notify-send"
-      - "--title"
-      - "{title}"
-      - "--body"
-      - "{body}"
-      - "--urgency"
-      - "{urgency}"
-    user: "frappe"
-    timeoutMs: 10_000
-    production: true

package/packages/privilege-broker/dist/approval.d.ts

@@ -1,23 +0,0 @@
-/**
- * Approval Class — RFC-0101 §8
- *
- * Replaces runtime-wide `require-approval` flag with per-capability policies.
- * Human approves or denies on first use; decision is cached for subsequent uses
- * within the same session.
- */
-import type { ApprovalClass, CapabilityName } from "./types.js";
-/** Result of an approval check. */
-export type ApprovalResult = "granted" | "denied" | "error";
-/**
- * Register an approval class by id.
- * Must be called before any checkApproval() call.
- */
-export declare function registerApprovalClass(cls: ApprovalClass): void;
-/**
- * Check if a capability is approved for an actor.
- * Asks the human via requestor() on first use; caches for the session.
- */
-export declare function checkApproval(capability: CapabilityName, actor: string, requestor: (msg: string) => Promise<boolean>): Promise<ApprovalResult>;
-/** Clear the approval cache (e.g., at session start). */
-export declare function clearApprovalCache(): void;
-//# sourceMappingURL=approval.d.ts.map

package/packages/privilege-broker/dist/approval.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEhE,mCAAmC;AACnC,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;AAY5D;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAE9D;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAClC,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAC1C,OAAO,CAAC,cAAc,CAAC,CA0BzB;AAED,yDAAyD;AACzD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}