pi-harness-runtime 0.9.14 → 0.9.16

package/packages/context-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/context-compiler",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Bounded context selection engine for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/context-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/context-manager",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Context Window Manager — prevents model context overflow via compaction and resume prompts (RFC-0010)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cookie-sanitizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cookie-sanitizer",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "pi-harness-runtime — cookie sanitizer (provider-quota cookie file normaliser)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/cost-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cost-optimizer",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Cost Optimizer for pi-harness-runtime — budget tracking, forecasting, and model selection optimization",
   "type": "module",
   "main": "./dist/index.js",

package/packages/django-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/django-plugin",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Django framework analysis — models, management commands, settings",
   "type": "module",
   "main": "./dist/index.js",

package/packages/doc-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/doc-generator",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Auto-Doc Generator — generate documentation from source code (RFC-0014)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/evaluation-engine",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Evaluation engine for pi-harness runtime (RFC-0057)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/evaluation-runner",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "type": "module",
   "description": "Framework-agnostic evaluation framework for AI outputs (RFC-0020)",
   "main": "dist/index.js",

package/packages/experience-replay/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/experience-replay",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Experience replay for debugging and reproducibility (RFC-0059)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/feedback-collector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/feedback-collector",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "type": "module",
   "description": "Collect and aggregate human/automated feedback (RFC-0021)",
   "main": "dist/index.js",

package/packages/framework-detector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-detector",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Framework detection system for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/framework-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-plugin-sdk",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Framework plugin SDK for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/frappe-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/frappe-plugin",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Frappe/ERPNext framework analysis — DocTypes, hooks, bench sites, site config",
   "type": "module",
   "main": "./dist/index.js",

package/packages/generic-web-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/generic-web-plugin",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Generic web framework analysis — REST/GraphQL endpoints, OpenAPI, auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/health-monitor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/health-monitor",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "type": "module",
   "description": "Health monitoring and auto-healing",
   "main": "dist/index.js",

package/packages/laravel-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/laravel-plugin",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Laravel framework analysis — artisan commands, Eloquent models, Blade",
   "type": "module",
   "main": "./dist/index.js",

package/packages/learning-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/learning-engine",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Learning engine for extracting lessons from runtime execution (RFC-0058)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/mcp-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/mcp-adapter",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "type": "module",
   "description": "MCP server adapter for pi-harness — exposes harness capabilities as MCP tools/resources/prompts (RFC-0068)",
   "main": "dist/index.js",

package/packages/memory-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/memory-engine",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Memory engine with OKF integration for durable knowledge management (RFC-0060)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/model-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/model-registry",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Model Registry for pi-harness-runtime — centralized model metadata with pricing",
   "type": "module",
   "main": "./dist/index.js",

package/packages/nextjs-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/nextjs-plugin",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Next.js framework detection and analysis for pi-harness-runtime (RFC-0062)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/notification/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/notification",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "pi-harness-runtime — notification",
   "type": "module",
   "main": "./dist/index.js",

package/packages/observability/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/observability",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Comprehensive observability system with structured logging, tracing, metrics, and alerting",
   "type": "module",
   "main": "./dist/index.js",

package/packages/performance-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/performance-optimizer",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Performance optimization analyzer for pi-harness runtime (RFC-0056)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/privilege-broker/README.md

@@ -0,0 +1,45 @@
+# Privilege Broker — RFC-0101 §7
+
+Safe privilege escalation for autonomous tasks.
+
+## Package
+
+`@pi-harness/privilege-broker`
+
+## Capabilities
+
+| Capability | Description | Auto-approve? |
+|---|---|---|
+| `read_files` | Read any file | Yes |
+| `write_files` | Write to non-system paths | No |
+| `run_command` | Execute shell commands | No |
+| `sudo_command` | Execute with sudo | No |
+| `network_request` | HTTP/HTTPS requests | Yes |
+| `git_push` | Push to configured remotes | No |
+| `package_install` | Install npm packages | No |
+| `env_read` | Read environment variables | Yes |
+
+## Usage
+
+```ts
+import { PrivilegeBroker, ConsoleAuditLogger } from "@pi-harness/privilege-broker";
+
+const broker = new PrivilegeBroker({
+  audit: new ConsoleAuditLogger(),
+});
+
+// Check before running a command
+const result = await broker.check(
+  "run_command",
+  { command: "ls /tmp", cwd: "/tmp" },
+  async (msg) => confirm(msg),
+);
+
+if (result.approved) {
+  await broker.execute("run_command", { command: "ls /tmp" });
+}
+```
+
+## Status
+
+Phase 1 done. Approval classes and conditions implemented.

package/packages/privilege-broker/config/privileges.yaml.example

@@ -0,0 +1,172 @@
+# Privilege Registry — RFC-0101 §7
+#
+# Copy this file to `privileges.yaml` and review it before starting the worker.
+# The worker will reject unknown capabilities and refuse to start if this file
+# is missing or invalid.
+#
+# IMPORTANT: Only add entries that have been reviewed and approved by the operator.
+# The broker uses these argv templates literally — no shell interpolation.
+# Each argv element is passed directly to execve(2).
+
+version: "1.0"
+updatedAt: "2026-07-23T00:00:00Z"
+
+entries:
+  # ── Git ────────────────────────────────────────────────────────────────────
+
+  - name: "git.commit"
+    description: "Commit staged changes to a git repository"
+    argv:
+      - "git"
+      - "commit"
+      - "-m"
+      - "{message}"
+    envWhitelist:
+      - "GIT_AUTHOR_NAME"
+      - "GIT_AUTHOR_EMAIL"
+      - "GIT_COMMITTER_NAME"
+      - "GIT_COMMITTER_EMAIL"
+      - "GIT_DIR"
+    user: "frappe"
+    timeoutMs: 30_000
+    production: false # requires operator review before enabling
+
+  - name: "git.push"
+    description: "Push commits to a remote git repository"
+    argv:
+      - "git"
+      - "push"
+      - "--quiet"
+      - "origin"
+      - "{branch}"
+    envWhitelist:
+      - "GIT_DIR"
+      - "GIT_SSH_COMMAND"
+    user: "frappe"
+    timeoutMs: 60_000
+    production: false
+
+  - name: "git.pull"
+    description: "Pull changes from a remote git repository"
+    argv:
+      - "git"
+      - "pull"
+      - "--quiet"
+      - "origin"
+      - "{branch}"
+    envWhitelist:
+      - "GIT_DIR"
+      - "GIT_SSH_COMMAND"
+    user: "frappe"
+    timeoutMs: 120_000
+    production: false
+
+  # ── Bench commands ──────────────────────────────────────────────────────────
+
+  - name: "bench.build"
+    description: "Build a Frappe/ERPNext app via bench"
+    argv:
+      - "bench"
+      - "--site"
+      - "{site}"
+      - "build"
+      - "--app"
+      - "{app}"
+    envWhitelist:
+      - "FRAPPE_SITE"
+    user: "frappe"
+    timeoutMs: 300_000
+    production: false
+
+  - name: "bench.migrate"
+    description: "Run database migrations via bench"
+    argv:
+      - "bench"
+      - "--site"
+      - "{site}"
+      - "migrate"
+    envWhitelist:
+      - "FRAPPE_SITE"
+    user: "frappe"
+    timeoutMs: 600_000
+    production: false
+
+  - name: "bench.restart"
+    description: "Restart the Frappe/ERPNext web workers"
+    argv:
+      - "bench"
+      - "restart"
+    user: "frappe"
+    timeoutMs: 30_000
+    production: false
+
+  # ── System ─────────────────────────────────────────────────────────────────
+
+  - name: "system.restart"
+    description: "Restart the pi-harness runtime service via systemctl"
+    argv:
+      - "systemctl"
+      - "restart"
+      - "pi-harness-runtime"
+    user: "root"
+    timeoutMs: 60_000
+    production: false
+
+  - name: "system.logs"
+    description: "Read recent systemd journal logs for the pi-harness runtime"
+    argv:
+      - "journalctl"
+      - "--no-pager"
+      - "-n"
+      - "100"
+      - "-u"
+      - "pi-harness-runtime"
+    user: "frappe"
+    timeoutMs: 15_000
+    production: true
+
+  # ── OKF ───────────────────────────────────────────────────────────────────
+
+  - name: "okf.promote-pattern"
+    description: "Promote a task result as a reusable pattern in the OKF"
+    argv:
+      - "okf"
+      - "promote"
+      - "pattern"
+      - "--path"
+      - "{path}"
+      - "--hash"
+      - "{contentHash}"
+    user: "frappe"
+    timeoutMs: 30_000
+    production: false
+
+  - name: "okf.promote-lesson"
+    description: "Promote a classified failure as a lesson in the OKF"
+    argv:
+      - "okf"
+      - "promote"
+      - "lesson"
+      - "--path"
+      - "{path}"
+      - "--category"
+      - "{category}"
+    user: "frappe"
+    timeoutMs: 30_000
+    production: false
+
+  # ── Notify ────────────────────────────────────────────────────────────────
+
+  - name: "notify.send"
+    description: "Send a notification via the notification runtime (RFC-0022)"
+    argv:
+      - "notify-send"
+      - "--title"
+      - "{title}"
+      - "--body"
+      - "{body}"
+      - "--urgency"
+      - "{urgency}"
+    user: "frappe"
+    timeoutMs: 10_000
+    production: true

package/packages/privilege-broker/dist/approval.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Approval Class — RFC-0101 §8
+ *
+ * Replaces runtime-wide `require-approval` flag with per-capability policies.
+ * Human approves or denies on first use; decision is cached for subsequent uses
+ * within the same session.
+ */
+import type { ApprovalClass, CapabilityName } from "./types.js";
+/** Result of an approval check. */
+export type ApprovalResult = "granted" | "denied" | "error";
+/**
+ * Register an approval class by id.
+ * Must be called before any checkApproval() call.
+ */
+export declare function registerApprovalClass(cls: ApprovalClass): void;
+/**
+ * Check if a capability is approved for an actor.
+ * Asks the human via requestor() on first use; caches for the session.
+ */
+export declare function checkApproval(capability: CapabilityName, actor: string, requestor: (msg: string) => Promise<boolean>): Promise<ApprovalResult>;
+/** Clear the approval cache (e.g., at session start). */
+export declare function clearApprovalCache(): void;
+//# sourceMappingURL=approval.d.ts.map

package/packages/privilege-broker/dist/approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEhE,mCAAmC;AACnC,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;AAY5D;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAE9D;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAClC,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAC1C,OAAO,CAAC,cAAc,CAAC,CA0BzB;AAED,yDAAyD;AACzD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/packages/privilege-broker/dist/approval.js

@@ -0,0 +1,45 @@
+/** Cache of session-level approval decisions. */
+const approved = new Map();
+/** Map from class id → its policy. */
+const classes = new Map();
+function cacheKey(capability, actor) {
+    return `${actor}::${capability}`;
+}
+/**
+ * Register an approval class by id.
+ * Must be called before any checkApproval() call.
+ */
+export function registerApprovalClass(cls) {
+    classes.set(cls.id, cls);
+}
+/**
+ * Check if a capability is approved for an actor.
+ * Asks the human via requestor() on first use; caches for the session.
+ */
+export async function checkApproval(capability, actor, requestor) {
+    const key = cacheKey(capability, actor);
+    if (approved.has(key)) {
+        return approved.get(key);
+    }
+    // Find the approval class for this capability
+    const cls = classes.get(capability);
+    if (!cls) {
+        // No approval class registered — default deny
+        approved.set(key, "denied");
+        return "denied";
+    }
+    try {
+        const decision = await cls.prompt(capability, actor, `Allow capability "${capability}" for actor "${actor}"?`);
+        approved.set(key, decision);
+        return decision;
+    }
+    catch {
+        approved.set(key, "error");
+        return "error";
+    }
+}
+/** Clear the approval cache (e.g., at session start). */
+export function clearApprovalCache() {
+    approved.clear();
+}
+//# sourceMappingURL=approval.js.map

package/packages/privilege-broker/dist/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAYA,iDAAiD;AACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEnD,sCAAsC;AACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEjD,SAAS,QAAQ,CAAC,UAA0B,EAAE,KAAa;IAC1D,OAAO,GAAG,KAAK,KAAK,UAAU,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAkB;IACvD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,UAA0B,EAC1B,KAAa,EACb,SAA4C;IAE5C,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IAC3B,CAAC;IAED,8CAA8C;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,8CAA8C;QAC9C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5B,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAChC,UAAU,EACV,KAAK,EACL,qBAAqB,UAAU,gBAAgB,KAAK,IAAI,CACxD,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5B,OAAO,QAAQ,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACR,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IAChB,CAAC;AACF,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC"}

package/packages/privilege-broker/dist/audit.d.ts

@@ -0,0 +1,38 @@
+import type { AuditEntry, AuditLogger } from "./types.js";
+/** No-op logger — discards all events. */
+export declare class NoOpAuditLogger implements AuditLogger {
+    log(_entry: AuditEntry): void;
+}
+/** Console logger — writes human-readable lines to stdout/stderr. */
+export declare class ConsoleAuditLogger implements AuditLogger {
+    log(entry: AuditEntry): void;
+}
+/**
+ * JSON Lines file logger — appends one JSON object per event.
+ * Auto-creates parent directory. Auto-rotates when file exceeds maxSizeBytes.
+ */
+export declare class FileAuditLogger implements AuditLogger {
+    private readonly logPath;
+    private readonly maxSizeBytes;
+    private readonly maxRotations;
+    constructor(options?: {
+        logPath?: string;
+        maxSizeBytes?: number;
+        maxRotations?: number;
+    });
+    log(entry: AuditEntry): void;
+    private _ensureDir;
+    private _rotateIfNeeded;
+    /**
+     * Read recent audit entries.
+     * Returns newest entries last.
+     */
+    query(options?: {
+        workerId?: string;
+        taskId?: string;
+        capability?: string;
+        success?: boolean;
+        limit?: number;
+    }): AuditEntry[];
+}
+//# sourceMappingURL=audit.d.ts.map

package/packages/privilege-broker/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE1D,0CAA0C;AAC1C,qBAAa,eAAgB,YAAW,WAAW;IAClD,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAE5B;CACD;AAED,qEAAqE;AACrE,qBAAa,kBAAmB,YAAW,WAAW;IACrD,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAsB3B;CACD;AAED;;;GAGG;AACH,qBAAa,eAAgB,YAAW,WAAW;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IAEtC,YACC,OAAO,GAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACjB,EAQN;IAED,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAI3B;IAED,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,eAAe;IAqBvB;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,UAAU,EAAE,CAqBf;CACD"}