pi-harness-runtime 1.1.402 → 1.1.404

package/packages/jev-judge/dist/question-risk.js

@@ -55,15 +55,18 @@ function matchPatterns(text, patterns, signals) {
  *
  * The rules:
  *
- * - A question that asks for permission for a concrete action ("approval",
- *   "explicit") needs the explicit authorization of a human. Jev never
- *   approves it on its own.
+ * - A question of kind "explicit" asks for an explicit human authorization.
+ *   Jev never approves it on its own.
+ * - A question of kind "approval" is the agent proposing work. It stays
+ *   auto-approvable as long as nothing in it is risky - that is the whole
+ *   point of the timeout: routine, reversible work continues when the user
+ *   is away.
  * - A question that names a destructive action is destructive, and its
  *   reversibility cannot be proven - so it waits.
+ * - A question that reaches the outside world or touches a secret needs a
+ *   human as well.
  * - A question with an unknown kind or an empty text is uncertain, and an
  *   uncertain case waits for the human.
- * - Only a routine question without a destructive or external signal is
- *   harmless enough for an autonomous decision.
  */
 export function classifyQuestionRisk(input) {
     const text = (input.text ?? "").toLowerCase();
@@ -72,8 +75,10 @@ export function classifyQuestionRisk(input) {
     const destructive = matchPatterns(text, DESTRUCTIVE_PATTERNS, signals);
     const external = matchPatterns(text, EXTERNAL_PATTERNS, signals);
     const sensitive = matchPatterns(text, SENSITIVE_PATTERNS, signals);
-    // The agent asked for permission for a concrete action.
-    let requiresExplicitAuthorization = kind === "approval" || kind === "explicit";
+    // Only an explicitly demanded authorization blocks the autonomous
+    // decision. An "approval" question is the agent proposing work: it
+    // stays auto-approvable unless the wording names a risky action.
+    let requiresExplicitAuthorization = kind === "explicit";
     // A destructive action never gets an autonomous approval.
     if (destructive) {
         requiresExplicitAuthorization = true;

package/packages/jev-judge/dist/question-risk.js.map

@@ -1 +1 @@
-{"version":3,"file":"question-risk.js","sourceRoot":"","sources":["../src/question-risk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAoCH;;GAEG;AACH,MAAM,oBAAoB,GAAkB;IAC3C,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4DAA4D,EAAE;IACzF,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,6BAA6B,EAAE;IACzD,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gCAAgC,EAAE;IAC7D,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,0EAA0E,EAAE;IAC3G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,4DAA4D,EAAE;IAC9F,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,uFAAuF,EAAE;IAC3H,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACpE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE;CAC/C,CAAC;AAEF;;GAEG;AACH,MAAM,iBAAiB,GAAkB;IACxC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,4BAA4B,EAAE;IAC7D,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE;IAChE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sCAAsC,EAAE;IACvE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iHAAiH,EAAE;IACrJ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;CAC9F,CAAC;AAEF;;GAEG;AACH,MAAM,kBAAkB,GAAkB;IACzC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,qDAAqD,EAAE;CACvF,CAAC;AAEF,SAAS,aAAa,CACrB,IAAY,EACZ,QAAuB,EACvB,OAAiB;IAEjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CACnC,KAAwB;IAExB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAEnE,wDAAwD;IACxD,IAAI,6BAA6B,GAChC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,UAAU,CAAC;IAE5C,0DAA0D;IAC1D,IAAI,WAAW,EAAE,CAAC;QACjB,6BAA6B,GAAG,IAAI,CAAC;IACtC,CAAC;IAED,uEAAuE;IACvE,iBAAiB;IACjB,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC3B,6BAA6B,GAAG,IAAI,CAAC;IACtC,CAAC;IAED,6DAA6D;IAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3B,6BAA6B,GAAG,IAAI,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IAED,OAAO;QACN,6BAA6B;QAC7B,WAAW;QACX,mDAAmD;QACnD,UAAU,EAAE,CAAC,WAAW;QACxB,QAAQ;QACR,OAAO;KACP,CAAC;AACH,CAAC"}
+{"version":3,"file":"question-risk.js","sourceRoot":"","sources":["../src/question-risk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAoCH;;GAEG;AACH,MAAM,oBAAoB,GAAkB;IAC3C,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4DAA4D,EAAE;IACzF,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,6BAA6B,EAAE;IACzD,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gCAAgC,EAAE;IAC7D,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,0EAA0E,EAAE;IAC3G,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,4DAA4D,EAAE;IAC9F,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,uFAAuF,EAAE;IAC3H,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACpE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE;CAC/C,CAAC;AAEF;;GAEG;AACH,MAAM,iBAAiB,GAAkB;IACxC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,4BAA4B,EAAE;IAC7D,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE;IAChE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,sCAAsC,EAAE;IACvE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iHAAiH,EAAE;IACrJ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,kEAAkE,EAAE;CAC9F,CAAC;AAEF;;GAEG;AACH,MAAM,kBAAkB,GAAkB;IACzC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,qDAAqD,EAAE;CACvF,CAAC;AAEF,SAAS,aAAa,CACrB,IAAY,EACZ,QAAuB,EACvB,OAAiB;IAEjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,oBAAoB,CACnC,KAAwB;IAExB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAEnE,kEAAkE;IAClE,mEAAmE;IACnE,iEAAiE;IACjE,IAAI,6BAA6B,GAAG,IAAI,KAAK,UAAU,CAAC;IAExD,0DAA0D;IAC1D,IAAI,WAAW,EAAE,CAAC;QACjB,6BAA6B,GAAG,IAAI,CAAC;IACtC,CAAC;IAED,uEAAuE;IACvE,iBAAiB;IACjB,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC3B,6BAA6B,GAAG,IAAI,CAAC;IACtC,CAAC;IAED,6DAA6D;IAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3B,6BAA6B,GAAG,IAAI,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IAED,OAAO;QACN,6BAA6B;QAC7B,WAAW;QACX,mDAAmD;QACnD,UAAU,EAAE,CAAC,WAAW;QACxB,QAAQ;QACR,OAAO;KACP,CAAC;AACH,CAAC"}

package/packages/jev-judge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/jev-judge",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Jev Judge - Structured decision model for agent routing, E2E testing, and automated decisions",
   "type": "module",
   "main": "./dist/index.js",

package/packages/jev-judge/src/auto-continue.ts

@@ -118,10 +118,17 @@ export interface DecisionPolicyResult {
 export interface DecisionPolicyOptions {
   /** The confidence an autonomous approval needs. */
   confidenceThreshold?: number;
+  /** The confidence a cautious approval needs (lower than the approval threshold). */
+  cautionThreshold?: number;
   /** The confidence of the proposed outcome. */
   confidence?: number;
 }
 
+/** The confidence an autonomous approval needs by default. */
+export const DEFAULT_PROCEED_THRESHOLD = 0.7;
+/** The confidence a cautious approval needs by default. */
+export const DEFAULT_CAUTION_THRESHOLD = 0.5;
+
 /**
  * Is the value a known outcome?
  *
@@ -226,7 +233,13 @@ export function applyDecisionPolicy(
       };
     }
 
-    const threshold = options?.confidenceThreshold ?? 0.7;
+    // The threshold belongs to the outcome: a cautious approval needs the
+    // caution threshold, the higher approval threshold is reserved for a
+    // full approval. The configured caution range must really proceed.
+    const threshold =
+      proposed === "proceed_with_caution"
+        ? (options?.cautionThreshold ?? DEFAULT_CAUTION_THRESHOLD)
+        : (options?.confidenceThreshold ?? DEFAULT_PROCEED_THRESHOLD);
     const confidence = options?.confidence;
     if (typeof confidence === "number" && confidence < threshold) {
       return {
@@ -307,8 +320,8 @@ export interface AutoContinueConfig extends JevJudgeConfig {
  * Default configuration
  */
 const DEFAULT_CONFIG = {
-  proceedThreshold: 0.7,
-  cautionThreshold: 0.5,
+  proceedThreshold: DEFAULT_PROCEED_THRESHOLD,
+  cautionThreshold: DEFAULT_CAUTION_THRESHOLD,
   maxWaitMinutes: 30,
   fallbackAction: "wait" as const,
 };
@@ -435,6 +448,7 @@ export class AutoContinueJudge {
   ): AutoContinueDecision {
     const policy = applyDecisionPolicy(decision.outcome, taskState.context, {
       confidenceThreshold: this.config.proceedThreshold,
+      cautionThreshold: this.config.cautionThreshold,
       confidence: decision.probability,
     });
 

package/packages/jev-judge/src/question-risk.ts

@@ -98,15 +98,18 @@ function matchPatterns(
  *
  * The rules:
  *
- * - A question that asks for permission for a concrete action ("approval",
- *   "explicit") needs the explicit authorization of a human. Jev never
- *   approves it on its own.
+ * - A question of kind "explicit" asks for an explicit human authorization.
+ *   Jev never approves it on its own.
+ * - A question of kind "approval" is the agent proposing work. It stays
+ *   auto-approvable as long as nothing in it is risky - that is the whole
+ *   point of the timeout: routine, reversible work continues when the user
+ *   is away.
  * - A question that names a destructive action is destructive, and its
  *   reversibility cannot be proven - so it waits.
+ * - A question that reaches the outside world or touches a secret needs a
+ *   human as well.
  * - A question with an unknown kind or an empty text is uncertain, and an
  *   uncertain case waits for the human.
- * - Only a routine question without a destructive or external signal is
- *   harmless enough for an autonomous decision.
  */
 export function classifyQuestionRisk(
 	input: QuestionRiskInput,
@@ -119,9 +122,10 @@ export function classifyQuestionRisk(
 	const external = matchPatterns(text, EXTERNAL_PATTERNS, signals);
 	const sensitive = matchPatterns(text, SENSITIVE_PATTERNS, signals);
 
-	// The agent asked for permission for a concrete action.
-	let requiresExplicitAuthorization =
-		kind === "approval" || kind === "explicit";
+	// Only an explicitly demanded authorization blocks the autonomous
+	// decision. An "approval" question is the agent proposing work: it
+	// stays auto-approvable unless the wording names a risky action.
+	let requiresExplicitAuthorization = kind === "explicit";
 
 	// A destructive action never gets an autonomous approval.
 	if (destructive) {

package/packages/jev-judge/tests/auto-continue-context.test.ts

@@ -13,6 +13,8 @@ import {
 	buildDecisionState,
 	createTaskState,
 	isEligibleForDecision,
+	DEFAULT_CAUTION_THRESHOLD,
+	DEFAULT_PROCEED_THRESHOLD,
 	MAX_LISTED_TASKS,
 	MAX_QUESTION_CHARS,
 	type DecisionContext,
@@ -138,6 +140,28 @@ describe("decision policy", () => {
 		expect(result.appliedRule).toBe("clarification-never-approved");
 	});
 
+	it("approves a benign approval question so the timeout can work", () => {
+		// The timeout exists for routine, reversible work: an agent that
+		// proposes work is not a hard authorization block.
+		const result = applyDecisionPolicy(
+			"approve",
+			context({
+				question: {
+					requestId: "q-1",
+					text: "Want me to implement the toggle buttons now?",
+					kind: "approval",
+					requiresExplicitAuthorization: false,
+					destructive: false,
+					reversible: true,
+				},
+			}),
+			{ confidence: 0.9 },
+		);
+
+		expect(result.outcome).toBe("approve");
+		expect(result.appliedRule).toBeUndefined();
+	});
+
 	it("never approves an action that needs an explicit authorization", () => {
 		const result = applyDecisionPolicy(
 			"approve",
@@ -204,6 +228,41 @@ describe("decision policy", () => {
 		expect(result.appliedRule).toBe("confidence-below-threshold");
 	});
 
+	it("keeps the configured caution range out of the approval threshold", () => {
+		// A cautious approval needs the caution threshold, not the higher
+		// approval threshold: the configured range must really proceed.
+		const result = applyDecisionPolicy("proceed_with_caution", context(), {
+			confidence: 0.6,
+			confidenceThreshold: DEFAULT_PROCEED_THRESHOLD,
+			cautionThreshold: DEFAULT_CAUTION_THRESHOLD,
+		});
+
+		expect(result.outcome).toBe("proceed_with_caution");
+		expect(result.appliedRule).toBeUndefined();
+	});
+
+	it("waits for a cautious approval below the caution threshold", () => {
+		const result = applyDecisionPolicy("proceed_with_caution", context(), {
+			confidence: 0.4,
+			confidenceThreshold: DEFAULT_PROCEED_THRESHOLD,
+			cautionThreshold: DEFAULT_CAUTION_THRESHOLD,
+		});
+
+		expect(result.outcome).toBe("wait");
+		expect(result.appliedRule).toBe("confidence-below-threshold");
+	});
+
+	it("keeps the approval threshold for a full approval", () => {
+		const result = applyDecisionPolicy("approve", context(), {
+			confidence: 0.6,
+			confidenceThreshold: DEFAULT_PROCEED_THRESHOLD,
+			cautionThreshold: DEFAULT_CAUTION_THRESHOLD,
+		});
+
+		expect(result.outcome).toBe("wait");
+		expect(result.appliedRule).toBe("confidence-below-threshold");
+	});
+
 	it("approves a low risk approval with a high confidence", () => {
 		const result = applyDecisionPolicy("approve", context(), {
 			confidence: 0.9,

package/packages/jev-judge/tests/question-risk.test.ts

@@ -25,14 +25,17 @@ describe("classifyQuestionRisk", () => {
 	});
 
 	describe("a question that asks for permission", () => {
-		it("needs an explicit authorization for an approval question", () => {
+		it("keeps a benign approval question auto-approvable", () => {
 			const risk = classifyQuestionRisk({
 				kind: "approval",
 				text: "Want me to implement the toggle buttons now?",
 			});
 
-			expect(risk.requiresExplicitAuthorization).toBe(true);
+			// The timeout exists for routine, reversible work: the agent
+			// proposing work is not a hard authorization block.
+			expect(risk.requiresExplicitAuthorization).toBe(false);
 			expect(risk.destructive).toBe(false);
+			expect(risk.reversible).toBe(true);
 		});
 
 		it("needs an explicit authorization for an explicit question", () => {
@@ -43,6 +46,16 @@ describe("classifyQuestionRisk", () => {
 
 			expect(risk.requiresExplicitAuthorization).toBe(true);
 		});
+
+		it("needs an explicit authorization for a risky approval question", () => {
+			const risk = classifyQuestionRisk({
+				kind: "approval",
+				text: "Want me to remove the old config file now?",
+			});
+
+			expect(risk.requiresExplicitAuthorization).toBe(true);
+			expect(risk.destructive).toBe(true);
+		});
 	});
 
 	describe("a destructive action", () => {

package/packages/knowledge-graph/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/knowledge-graph",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Knowledge Graph extraction and provenance linking for SKILL.md files",
   "type": "module",
   "main": "./dist/index.js",

package/packages/knowledge-retrieval/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/knowledge-retrieval",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Knowledge retrieval via TencentDB-Agent-Memory MCP (RFC-0105)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/laravel-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/laravel-plugin",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Laravel framework analysis — artisan commands, Eloquent models, Blade",
   "type": "module",
   "main": "./dist/index.js",

package/packages/learning-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/learning-engine",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Learning engine for extracting lessons from runtime execution (RFC-0058)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/logging/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/logging",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "description": "Centralized structured application logging with buffered Cloudflare R2 and webhook transports",
   "main": "./dist/index.js",

package/packages/mcp-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/mcp-adapter",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "description": "MCP server adapter for pi-harness — exposes harness capabilities as MCP tools/resources/prompts (RFC-0068)",
   "main": "dist/index.js",

package/packages/memory-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/memory-engine",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Memory engine with OKF integration for durable knowledge management (RFC-0060)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/milestone-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/milestone-manager",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Track milestones and alerts when items are at risk",
   "type": "module",
   "main": "./dist/index.js",

package/packages/model-registry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/model-registry",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Model Registry for pi-harness-runtime — centralized model metadata with pricing",
   "type": "module",
   "main": "./dist/index.js",

package/packages/nextjs-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/nextjs-plugin",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Next.js framework detection and analysis for pi-harness-runtime (RFC-0062)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/notification/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/notification",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "pi-harness-runtime — notification",
   "type": "module",
   "main": "./dist/index.js",

package/packages/observability/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/observability",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Comprehensive observability system with structured logging, tracing, metrics, and alerting",
   "type": "module",
   "main": "./dist/index.js",

package/packages/okf-indexer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/okf-indexer",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "OKF document indexer for SKILL.md files (RFC-0106)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/paperclip-integration/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/paperclip-integration",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Paperclip API integration: poll agent inbox, route tasks to pi.dev, Telegram alerts",
   "type": "module",
   "main": "./dist/index.js",

package/packages/performance-optimizer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/performance-optimizer",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Performance optimization analyzer for pi-harness runtime (RFC-0056)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/permission-mode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/permission-mode",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "description": "Runtime permission modes for pi-harness - Supervised/Auto/Full-access",
   "main": "./dist/index.js",

package/packages/privilege-broker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/privilege-broker",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Privilege Broker — capability registry and command executor for autonomous runtime (RFC-0101 §7)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/project-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/project-analyzer",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Project analysis system for pi-harness-runtime - detects frameworks, rules, and project structure",
   "type": "module",
   "main": "./dist/index.js",

package/packages/project-bootstrap/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/project-bootstrap",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Project scaffolding from typed ProjectSpec",
   "type": "module",
   "main": "./dist/index.js",

package/packages/projection-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/projection-engine",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/prompt-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/prompt-compiler",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Deterministic prompt compiler for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/prompt-versioning/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/prompt-versioning",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "description": "Version control for prompts with rollback support (RFC-0019)",
   "main": "dist/index.js",

package/packages/provider-adapter-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/provider-adapter-sdk",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "SDK for building, testing, and registering AI provider adapters",
   "type": "module",
   "main": "./dist/index.js",

package/packages/provider-router/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/provider-router",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Enhanced Provider Router for pi-harness-runtime — intelligent routing with capabilities, costs, and quotas",
   "type": "module",
   "main": "./dist/provider-router.js",

package/packages/provider-selector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/provider-selector",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Multi-Provider Selector — route requests by cost, quality, and latency (RFC-0012)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/providers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/providers",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "pi-harness-runtime — providers",
   "type": "module",
   "main": "./dist/index.js",

package/packages/qdrant-skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/qdrant-skills",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Qdrant vector search integration for Hermes-style skill system",
   "type": "module",
   "main": "./dist/index.js",

package/packages/quota-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/quota-manager",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "pi-harness-runtime — quota-manager",
   "type": "module",
   "main": "./dist/index.js",

package/packages/rate-limiter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/rate-limiter",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "description": "Rate limiting with token bucket algorithm (RFC-0023)",
   "main": "dist/index.js",

package/packages/react-vite-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/react-vite-plugin",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "React/Vite framework analysis — components, config, TypeScript setup",
   "type": "module",
   "main": "./dist/index.js",

package/packages/relay/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/relay",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "description": "Cloud relay for remote access - T3 Connect style for pi-harness",
   "main": "./dist/index.js",

package/packages/release-manager/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/release-manager",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "description": "Release management for pi-harness",
   "main": "dist/index.js",

package/packages/requirement-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/requirement-compiler",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Compiles raw requirements into validated CompiledRequirement with ambiguity detection and risk tagging",
   "type": "module",
   "main": "./dist/index.js",

package/packages/runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/runtime",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "pi-harness-runtime — runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/scheduler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/scheduler",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "pi-harness-runtime — scheduler",
   "type": "module",
   "main": "./dist/index.js",

package/packages/scheduler-adapter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/scheduler-adapter",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Scheduler Adapter — cron, systemd, launchd, internal adapters for autonomous runtime (RFC-0101 §6)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/session/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/session",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "description": "Session management system for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/session-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/session-api",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/session-export/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/session-export",
-  "version": "1.1.402",
+  "version": "1.1.404",
   "type": "module",
   "main": "src/index.ts",
   "exports": {