pi-harness-runtime 1.1.335 → 1.1.337

package/packages/framework-detector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-detector",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Framework detection system for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/framework-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-plugin-sdk",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Framework plugin SDK for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/frappe-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/frappe-plugin",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Frappe/ERPNext framework analysis — DocTypes, hooks, bench sites, site config",
   "type": "module",
   "main": "./dist/index.js",

package/packages/generic-web-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/generic-web-plugin",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Generic web framework analysis — REST/GraphQL endpoints, OpenAPI, auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/health-monitor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/health-monitor",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "type": "module",
   "description": "Health monitoring and auto-healing",
   "main": "dist/index.js",

package/packages/intent-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/intent-analyzer",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/jev-judge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/jev-judge",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Jev Judge - Structured decision model for agent routing, E2E testing, and automated decisions",
   "type": "module",
   "main": "./dist/index.js",

package/packages/knowledge-graph/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/knowledge-graph",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Knowledge Graph extraction and provenance linking for SKILL.md files",
   "type": "module",
   "main": "./dist/index.js",

package/packages/knowledge-retrieval/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/knowledge-retrieval",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Knowledge retrieval via TencentDB-Agent-Memory MCP (RFC-0105)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/laravel-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/laravel-plugin",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Laravel framework analysis — artisan commands, Eloquent models, Blade",
   "type": "module",
   "main": "./dist/index.js",

package/packages/learning-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/learning-engine",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Learning engine for extracting lessons from runtime execution (RFC-0058)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/mcp-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/mcp-adapter",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "type": "module",
   "description": "MCP server adapter for pi-harness — exposes harness capabilities as MCP tools/resources/prompts (RFC-0068)",
   "main": "dist/index.js",

package/packages/memory-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/memory-engine",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Memory engine with OKF integration for durable knowledge management (RFC-0060)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/milestone-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/milestone-manager",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Track milestones and alerts when items are at risk",
   "type": "module",
   "main": "./dist/index.js",

package/packages/model-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/model-registry",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Model Registry for pi-harness-runtime — centralized model metadata with pricing",
   "type": "module",
   "main": "./dist/index.js",

package/packages/nextjs-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/nextjs-plugin",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Next.js framework detection and analysis for pi-harness-runtime (RFC-0062)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/notification/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/notification",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "pi-harness-runtime — notification",
   "type": "module",
   "main": "./dist/index.js",

package/packages/observability/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/observability",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Comprehensive observability system with structured logging, tracing, metrics, and alerting",
   "type": "module",
   "main": "./dist/index.js",

package/packages/okf-indexer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/okf-indexer",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "OKF document indexer for SKILL.md files (RFC-0106)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/paperclip-integration/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/paperclip-integration",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Paperclip API integration: poll agent inbox, route tasks to pi.dev, Telegram alerts",
   "type": "module",
   "main": "./dist/index.js",

package/packages/performance-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/performance-optimizer",
-  "version": "1.1.335",
+  "version": "1.1.337",
   "description": "Performance optimization analyzer for pi-harness runtime (RFC-0056)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/permission-mode/dist/checker.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Permission Checker
+ *
+ * Checks if an action requires approval based on current permission mode.
+ */
+import type { PermissionMode } from './mode.js';
+/**
+ * Action that can be checked for permission
+ */
+export interface Action {
+    /** Tool or command name */
+    tool: string;
+    /** File path if applicable */
+    file?: string;
+    /** Command string if applicable */
+    command?: string;
+    /** Additional context */
+    context?: Record<string, unknown>;
+}
+/**
+ * Permission check result
+ */
+export interface PermissionCheck {
+    /** Whether approval is required */
+    requiresApproval: boolean;
+    /** Reason for approval requirement */
+    reason?: string;
+    /** Tool that triggered the check */
+    tool: string;
+}
+/**
+ * Permission Checker
+ */
+export declare class PermissionChecker {
+    private mode;
+    private auditLog;
+    constructor(mode: PermissionMode);
+    /**
+     * Update the current permission mode
+     */
+    setMode(mode: PermissionMode): void;
+    /**
+     * Get current permission mode
+     */
+    getMode(): PermissionMode;
+    /**
+     * Check if an action requires approval
+     */
+    check(action: Action): PermissionCheck;
+    /**
+     * Check multiple actions
+     */
+    checkMany(actions: Action[]): PermissionCheck[];
+    /**
+     * Get audit log
+     */
+    getAuditLog(): Array<{
+        action: Action;
+        result: PermissionCheck;
+        timestamp: string;
+    }>;
+    /**
+     * Clear audit log
+     */
+    clearAuditLog(): void;
+}

package/packages/permission-mode/dist/checker.js

@@ -0,0 +1,64 @@
+/**
+ * Permission Checker
+ *
+ * Checks if an action requires approval based on current permission mode.
+ */
+import { requiresApproval } from './mode.js';
+/**
+ * Permission Checker
+ */
+export class PermissionChecker {
+    mode;
+    auditLog = [];
+    constructor(mode) {
+        this.mode = mode;
+    }
+    /**
+     * Update the current permission mode
+     */
+    setMode(mode) {
+        this.mode = mode;
+    }
+    /**
+     * Get current permission mode
+     */
+    getMode() {
+        return { ...this.mode };
+    }
+    /**
+     * Check if an action requires approval
+     */
+    check(action) {
+        const needsApproval = requiresApproval(this.mode, action.tool);
+        const result = {
+            requiresApproval: needsApproval,
+            tool: action.tool,
+            reason: needsApproval ? `Tool "${action.tool}" requires approval in ${this.mode.type} mode` : undefined,
+        };
+        // Audit log
+        this.auditLog.push({
+            action,
+            result,
+            timestamp: new Date().toISOString(),
+        });
+        return result;
+    }
+    /**
+     * Check multiple actions
+     */
+    checkMany(actions) {
+        return actions.map(action => this.check(action));
+    }
+    /**
+     * Get audit log
+     */
+    getAuditLog() {
+        return [...this.auditLog];
+    }
+    /**
+     * Clear audit log
+     */
+    clearAuditLog() {
+        this.auditLog = [];
+    }
+}

package/packages/permission-mode/dist/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Permission Mode - Runtime approval system
+ *
+ * Inspired by T3Code's permission modes:
+ * - Supervised: Requests approval for commands/edits
+ * - Auto-accept edits: Approves edits, questions still need approval
+ * - Auto: Uses automatic review for routine actions
+ * - Full access: No approval needed
+ */
+export { PermissionMode, type PermissionModeType } from './mode.js';
+export { PermissionChecker } from './checker.js';
+export { ApprovalManager } from './manager.js';

package/packages/permission-mode/dist/index.js

@@ -0,0 +1,11 @@
+/**
+ * Permission Mode - Runtime approval system
+ *
+ * Inspired by T3Code's permission modes:
+ * - Supervised: Requests approval for commands/edits
+ * - Auto-accept edits: Approves edits, questions still need approval
+ * - Auto: Uses automatic review for routine actions
+ * - Full access: No approval needed
+ */
+export { PermissionChecker } from './checker.js';
+export { ApprovalManager } from './manager.js';

package/packages/permission-mode/dist/manager.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Approval Manager
+ *
+ * Manages the approval workflow for pending actions.
+ */
+/**
+ * Approval request interface
+ */
+export interface ApprovalRequest {
+    type: string;
+    workspaceId: string;
+    sessionId: string;
+    description: string;
+    tool?: string;
+    command?: string;
+    file?: string;
+    reason?: string;
+    expiresIn?: number;
+}
+/**
+ * Approval response interface
+ */
+export interface ApprovalResponse {
+    id: string;
+    approved: boolean;
+    reason?: string;
+}
+/**
+ * Pending approval entry
+ */
+export interface PendingApproval {
+    id: string;
+    request: ApprovalRequest;
+    status: 'pending' | 'approved' | 'rejected' | 'expired';
+    createdAt: Date;
+    expiresAt?: Date;
+    respondedAt?: Date;
+}
+/**
+ * Approval manager options
+ */
+export interface ApprovalManagerOptions {
+    defaultTimeout?: number;
+    onApprovalRequest?: (approval: PendingApproval) => void;
+    onApprovalGranted?: (approval: PendingApproval) => void;
+    onApprovalRejected?: (approval: PendingApproval) => void;
+    onApprovalExpired?: (approval: PendingApproval) => void;
+}
+/**
+ * Approval Manager
+ */
+export declare class ApprovalManager {
+    private pending;
+    private options;
+    constructor(options?: ApprovalManagerOptions);
+    requestApproval(request: ApprovalRequest): PendingApproval;
+    respond(response: ApprovalResponse): PendingApproval | null;
+    getPending(): PendingApproval[];
+    get(id: string): PendingApproval | undefined;
+    hasPending(): boolean;
+    countPending(): number;
+    cancel(id: string): boolean;
+    private checkExpiration;
+    private generateId;
+}

package/packages/permission-mode/dist/manager.js

@@ -0,0 +1,91 @@
+/**
+ * Approval Manager
+ *
+ * Manages the approval workflow for pending actions.
+ */
+/**
+ * Approval Manager
+ */
+export class ApprovalManager {
+    pending = new Map();
+    options;
+    constructor(options = {}) {
+        this.options = {
+            defaultTimeout: options.defaultTimeout ?? 300,
+            onApprovalRequest: options.onApprovalRequest ?? (() => { }),
+            onApprovalGranted: options.onApprovalGranted ?? (() => { }),
+            onApprovalRejected: options.onApprovalRejected ?? (() => { }),
+            onApprovalExpired: options.onApprovalExpired ?? (() => { }),
+        };
+    }
+    requestApproval(request) {
+        const id = this.generateId();
+        const createdAt = new Date();
+        const timeoutSeconds = request.expiresIn ?? this.options.defaultTimeout;
+        const expiresAt = new Date(createdAt.getTime() + timeoutSeconds * 1000);
+        const approval = { id, request, status: 'pending', createdAt, expiresAt };
+        this.pending.set(id, approval);
+        this.options.onApprovalRequest(approval);
+        if (timeoutSeconds > 0) {
+            // SAFETY: globalThis always has setTimeout in JS runtimes (browsers, Node.js)
+            const global = globalThis;
+            global.setTimeout(() => this.checkExpiration(id), timeoutSeconds * 1000);
+        }
+        return approval;
+    }
+    respond(response) {
+        const approval = this.pending.get(response.id);
+        if (!approval)
+            return null;
+        approval.status = response.approved ? 'approved' : 'rejected';
+        approval.respondedAt = new Date();
+        if (response.approved) {
+            this.options.onApprovalGranted(approval);
+        }
+        else {
+            this.options.onApprovalRejected(approval);
+        }
+        // Remove from pending after a short delay
+        // SAFETY: globalThis always has setTimeout in JS runtimes
+        const global = globalThis;
+        global.setTimeout(() => this.pending.delete(response.id), 1000);
+        return approval;
+    }
+    getPending() {
+        return Array.from(this.pending.values()).filter(a => a.status === 'pending');
+    }
+    get(id) {
+        return this.pending.get(id);
+    }
+    hasPending() {
+        return this.getPending().length > 0;
+    }
+    countPending() {
+        return this.getPending().length;
+    }
+    cancel(id) {
+        const approval = this.pending.get(id);
+        if (approval && approval.status === 'pending') {
+            approval.status = 'rejected';
+            approval.respondedAt = new Date();
+            this.options.onApprovalRejected(approval);
+            return true;
+        }
+        return false;
+    }
+    checkExpiration(id) {
+        const approval = this.pending.get(id);
+        if (approval && approval.status === 'pending') {
+            const now = new Date();
+            if (approval.expiresAt && now >= approval.expiresAt) {
+                approval.status = 'expired';
+                approval.respondedAt = now;
+                this.pending.delete(id);
+                this.options.onApprovalExpired(approval);
+            }
+        }
+    }
+    generateId() {
+        return `approval-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
+    }
+}

package/packages/permission-mode/dist/mode.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Permission Mode Types
+ */
+/**
+ * Permission mode types - inspired by T3Code
+ */
+export type PermissionModeType = 'supervised' | 'auto-accept-edits' | 'auto' | 'full-access';
+/**
+ * Permission mode configuration
+ */
+export interface PermissionMode {
+    type: PermissionModeType;
+    /** Project override for this mode */
+    projectOverride?: string;
+    /** Auto-accept certain tools without approval */
+    autoAcceptTools?: string[];
+    /** Block certain tools regardless of mode */
+    blockedTools?: string[];
+}
+/**
+ * Default permission modes
+ */
+export declare const DEFAULT_PERMISSION_MODES: Record<PermissionModeType, PermissionMode>;
+/**
+ * Get default mode for new sessions
+ */
+export declare function getDefaultMode(): PermissionMode;
+/**
+ * Check if mode requires approval for tool
+ */
+export declare function requiresApproval(mode: PermissionMode, tool: string): boolean;

package/packages/permission-mode/dist/mode.js

@@ -0,0 +1,47 @@
+/**
+ * Permission Mode Types
+ */
+/**
+ * Default permission modes
+ */
+export const DEFAULT_PERMISSION_MODES = {
+    supervised: {
+        type: 'supervised',
+    },
+    'auto-accept-edits': {
+        type: 'auto-accept-edits',
+        autoAcceptTools: ['write', 'edit', 'create'],
+    },
+    auto: {
+        type: 'auto',
+        autoAcceptTools: ['read', 'search', 'list'],
+    },
+    'full-access': {
+        type: 'full-access',
+    },
+};
+/**
+ * Get default mode for new sessions
+ */
+export function getDefaultMode() {
+    return { ...DEFAULT_PERMISSION_MODES['full-access'] };
+}
+/**
+ * Check if mode requires approval for tool
+ */
+export function requiresApproval(mode, tool) {
+    if (mode.blockedTools?.includes(tool)) {
+        return true;
+    }
+    switch (mode.type) {
+        case 'full-access':
+            return false;
+        case 'auto-accept-edits':
+            return !mode.autoAcceptTools?.includes(tool);
+        case 'auto':
+            return !mode.autoAcceptTools?.includes(tool);
+        case 'supervised':
+        default:
+            return true;
+    }
+}

package/packages/permission-mode/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@pi-harness/permission-mode",
+  "version": "1.1.337",
+  "type": "module",
+  "description": "Runtime permission modes for pi-harness - Supervised/Auto/Full-access",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "bun test"
+  },
+  "dependencies": {
+    "@pi-harness/contracts": "workspace:*"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.2"
+  }
+}