agentplane 0.6.0 → 0.6.2

package/README.md

@@ -1,3 +1,7 @@
+<p align="center">
+  <img src="https://raw.githubusercontent.com/basilisk-labs/agentplane/main/docs/assets/readme-headers/agentplane-cli.svg" alt="AgentPlane CLI package header" style="width:100%;max-width:100%;"/>
+</p>
+
 # AgentPlane CLI
 
 **Git-native infrastructure for traceable AI work.**
@@ -12,7 +16,7 @@ Use any coding agent. Keep the review trail in your repository.
 [![Downloads](https://img.shields.io/npm/dm/agentplane.svg)](https://www.npmjs.com/package/agentplane)
 [![GitHub stars](https://img.shields.io/github/stars/basilisk-labs/agentplane?style=flat)](https://github.com/basilisk-labs/agentplane/stargazers)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://github.com/basilisk-labs/agentplane/blob/main/LICENSE)
-[![Node.js 20+](https://img.shields.io/badge/Node.js-20%2B-3c873a.svg)](https://agentplane.org/docs/user/prerequisites)
+[![Node.js 24+](https://img.shields.io/badge/Node.js-24%2B-3c873a.svg)](https://agentplane.org/docs/user/prerequisites)
 
 [![SLSA v1 provenance](https://img.shields.io/badge/SLSA-v1-success)](https://registry.npmjs.org/-/npm/v1/attestations/agentplane@latest)
 [![Trusted publisher](https://img.shields.io/badge/npm-trusted%20publisher-blue)](https://docs.npmjs.com/generating-provenance-statements)
@@ -33,7 +37,7 @@ npx agentplane init
 npx agentplane quickstart
 ```
 
-Requirements: Node.js 20+, Git, and a local terminal.
+Requirements: Node.js 24+, Git, and a local terminal.
 
 Experimental agent shorthand:
 

package/assets/AGENTS.md

@@ -172,6 +172,7 @@ Routing constraints:
 - MUST stage/commit only intentional changes for the active task scope.
 - MUST stop and request re-approval when scope, risk, or verification criteria materially drift.
 - MUST NOT let ORCHESTRATOR perform owner-scoped implementation or verification once a task owner is known, unless the approved plan explicitly makes ORCHESTRATOR the owner.
+- MUST treat user-authenticated GitHub actions as user-attributed publication and route post-merge fixes through a new task or explicit `post-merge-` branch or `followup` slug token.
 
 Role boundaries: ORCHESTRATOR = preflight + plan + approvals; PLANNER = executable task graph creation/update; INTEGRATOR = base integration/finish in `branch_pr`.
 

package/assets/agents/CURATOR.json

@@ -21,8 +21,8 @@
   },
   "workflow": {
     "goal": "Goal: assimilate approved raw sources into readable wiki memory, durable sourced derived knowledge, and reusable incident advice without treating search indexes, raw harvest scaffolds, or caches as truth.",
-    "success.criteria": "Success criteria: selected source files and policies are read; existing wiki/facts/graph/capabilities/incidents are searched before new artifacts are written; every factual wiki/derived/incident claim has source_refs or an explicit no-source reason; contradictions and open questions are recorded; changed paths stay inside allowed_outputs and outside forbidden_outputs; context verify-task, context doctor, graph validation, incident validation, and ACR checks are run or concrete skips are recorded.",
-    "constraints": "Constraints: mutate knowledge only through the active AgentPlane task; never edit context/raw by default; never write .agentplane/context/service; do not silently delete or merge facts/entities/edges/incidents; do not copy private raw content into README, ACR, reports, wiki, or incident advice unless policy permits redacted output; propose capabilities only when frontmatter allows it; let deterministic code validate registry shape, dedupe, required tags, and allowed commands.",
+    "success.criteria": "Success criteria: selected source files and policies are read; existing wiki/facts/graph/capabilities/incidents are searched before new artifacts are written; every factual wiki/derived/incident claim has source_refs or an explicit no-source reason; useful wiki cross-links are added where existing target pages or glossary anchors improve navigation; contradictions and open questions are recorded; changed paths stay inside allowed_outputs and outside forbidden_outputs; context verify-task, context doctor, graph validation, incident validation, and ACR checks are run or concrete skips are recorded.",
+    "constraints": "Constraints: mutate knowledge only through the active AgentPlane task; never edit context/raw by default; never write .agentplane/context/service; preserve the chosen wiki hierarchy unless new evidence makes it misleading; keep glossary entries as a thin index over wiki pages and graph entities, not as competing truth; do not silently delete or merge facts/entities/edges/incidents; do not copy private raw content into README, ACR, reports, wiki, or incident advice unless policy permits redacted output; propose capabilities only when frontmatter allows it; let deterministic code validate registry shape, dedupe, required tags, and allowed commands.",
     "stop.rules": "Stop rules: stop on missing source refs, unclear redaction policy, forbidden output requirements, stale or unresolvable source refs, capability or incident promotion beyond local proposal, or verification failures that would make the knowledge layer unreviewable.",
     "output": "Output: sources read, wiki pages changed, facts/entities/edges/provenance rows changed, incident advice matches/promotions when any, capability proposals when any, verification commands with results, residual contradictions/open questions, and rollback notes."
   }

package/assets/policy/framework.dev.md

@@ -0,0 +1,20 @@
+<!-- ap:fragment id="policy.framework_dev.body.framework.dev" slot="body" mutability="replaceable" -->
+
+# Framework Development Policy
+
+Use this module only inside the AgentPlane framework checkout.
+
+This module is intentionally excluded from normal initialized repositories and must load only when
+the prompt-module compiler context has `repo_type=framework`.
+
+<!-- /ap:fragment -->
+<!-- ap:fragment id="policy.framework_dev.hard_constraint.framework.scope" slot="hard_constraint" mutability="append_only" -->
+
+## Framework Scope
+
+- MUST treat `packages/agentplane/bin/agentplane.js` as the canonical direct repo-local CLI entrypoint.
+- MUST keep framework-only commands unavailable outside framework checkouts, not merely hidden from normal help.
+- MUST run `bun run framework:dev:bootstrap` after changes to watched runtime, CLI, prompt, or built asset surfaces before relying on repo-local runtime parity.
+- MUST NOT require installed user repositories to depend on framework helper scripts.
+
+<!-- /ap:fragment -->

package/assets/policy/workflow.branch_pr.md

@@ -53,6 +53,11 @@ agentplane integrate <task-id> --branch task/<task-id>/<slug> --run-verify
 agentplane finish <task-id> --author INTEGRATOR --body "Verified: ..." --result "..." --commit <git-rev> --close-commit
 ```
 
+Default branch names are `task/<task-id>/<slug>` for implementation branches and
+`task-close/<task-id>/<sha12>` for close-tail branches. Repositories MAY override only the prefixes
+through `branch.task_prefix` and `branch.task_close_prefix`; task id, slug, and sha positions remain
+fixed.
+
 <!-- /ap:fragment -->
 <!-- ap:fragment id="policy.workflow.branch_pr.hard_constraint.constraints" slot="hard_constraint" mutability="append_only" -->
 
@@ -73,6 +78,14 @@ agentplane finish <task-id> --author INTEGRATOR --body "Verified: ..." --result
   after the first green rollup), then merge it through GitHub. If auto-merge remains blocked
   after stable green checks, the agent MUST continue with the permitted GitHub merge route
   available to its credentials instead of stopping at enabled auto-merge.
+- Claude Code and other agents that inherit the user's GitHub session MUST treat `gh pr merge`,
+  GitHub UI merge, and auto-merge enablement as user-attributed publication. Before using those
+  actions, verify the integration queue/handoff route, stable hosted checks, and explicit approval
+  for the merge lane; record the GitHub PR number and merge commit in task artifacts after merge.
+- If a task is already `DONE` and needs a post-merge fix, create a new task unless the follow-up
+  branch slug explicitly starts with `post-merge-` or uses `followup` as a separate slug token
+  bounded by the start, end, or hyphens; generic slugs under an already closed task id are treated
+  as conflicting closure attempts.
 - `integrate` defaults to the `merge` strategy so task branch commits stay in base history. Use `--merge-strategy squash` only when intentionally compacting branch history.
 - When several task PRs are ready together, use the integration queue so only one branch owns the merge lane; agents waiting behind `claimed` or `handoff` entries SHOULD use bounded polling (`--wait --poll-interval-ms 30000 --timeout-ms 600000`) instead of retrying ad hoc; stale branch heads move to rework instead of blocking later queued work.
 - `task start-ready` MAY surface targeted incident advice for analogous scope/tags; follow it before widening scope.

package/dist/.build-manifest.json

@@ -2,7 +2,7 @@
   "schema_version": 1,
   "manifest_kind": "package",
   "package_name": "agentplane",
-  "package_version": "0.6.0",
-  "git_head": "5210d5e80d61908e7e3100383fc7a6a65fb697e5",
-  "watched_runtime_snapshot_hash": "cea114f499ac1d9c6b7a1878e323d6ec16d60042a7a3342d0ae446efb5b26299"
+  "package_version": "0.6.2",
+  "git_head": "38d20e02646371b587820adb328039c615323f47",
+  "watched_runtime_snapshot_hash": "d9122cf6ac941123139d675eac929456b8e4caf0ce3e811bc69af6ea9905ec2a"
 }