agentplane 0.6.1 → 0.6.3

package/assets/AGENTS.md

@@ -19,7 +19,6 @@ Detailed procedures live in canonical modules from `## CANONICAL DOCS`.
 ## PROJECT
 
 - Repository type: user project initialized with `agentplane`.
-- Gateway role: keep this file compact and deterministic; move scenario-specific details to policy modules.
 - CLI rule: prefer `ap` for compact agent-oriented commands; fall back to `agentplane`; if neither is available, stop and request installation guidance (do not invent repo-local entrypoints).
 - Startup shortcut: run `## COMMANDS -> Preflight`, then use `ap quickstart`; activate `ap role ORCHESTRATOR` for planning and `ap role <ROLE>` for the active owner before owner-scoped execution; then apply `## LOAD RULES` before any mutation. The guarded route is determined by `workflow.mode` in `.agentplane/WORKFLOW.md`; use `ap quickstart` as the canonical summary of the active path before mutating. In `branch_pr`, start from `ap work start ... --worktree`; in `direct`, stay in the current checkout and use the task lifecycle route.
 
@@ -85,6 +84,7 @@ git commit -m "Implement <task>"
 ap task verify-show <task-id>
 ap pr open <task-id> --branch task/<task-id>/<slug> --author <ROLE>
 ap verify <task-id> --ok|--rework --by <ROLE> --note "..."
+ap verify <task-id> --ok|--rework --by EVALUATOR --note "..." # verify --by EVALUATOR
 ap integrate <task-id> --branch task/<task-id>/<slug> --run-verify
 ap finish <task-id> --author INTEGRATOR --body "Verified: ..." --result "..." --commit <git-rev> --close-commit
 ```
@@ -145,7 +145,8 @@ Condition: task includes mutation (file edits, task-state changes, commits, merg
 5. IF task modifies implementation code paths THEN LOAD `@.agentplane/policy/dod.code.md`.
 6. IF task modifies docs/policy-only paths (`AGENTS.md`, docs, `.agentplane/policy/**`) THEN LOAD `@.agentplane/policy/dod.docs.md`.
 7. IF task modifies policy files (`AGENTS.md` or `.agentplane/policy/**`) THEN LOAD `@.agentplane/policy/governance.md`.
-8. IF task modifies `.agentplane/policy/incidents.md` THEN LOAD `@.agentplane/policy/incidents.md`.
+8. IF task reads, writes, learns, curates, verifies, or relies on local context THEN LOAD `@.agentplane/policy/context.must.md`.
+9. IF task modifies `.agentplane/policy/incidents.md` THEN LOAD `@.agentplane/policy/incidents.md`.
 
 Routing constraints:
 
@@ -172,6 +173,7 @@ Routing constraints:
 - MUST stage/commit only intentional changes for the active task scope.
 - MUST stop and request re-approval when scope, risk, or verification criteria materially drift.
 - MUST NOT let ORCHESTRATOR perform owner-scoped implementation or verification once a task owner is known, unless the approved plan explicitly makes ORCHESTRATOR the owner.
+- MUST treat user-authenticated GitHub actions as user-attributed publication and route post-merge fixes through a new task or explicit `post-merge-` branch or `followup` slug token.
 
 Role boundaries: ORCHESTRATOR = preflight + plan + approvals; PLANNER = executable task graph creation/update; INTEGRATOR = base integration/finish in `branch_pr`.
 
@@ -218,14 +220,13 @@ Detailed DoD rules are in `.agentplane/policy/dod.core.md`, `.agentplane/policy/
 - DOC `.agentplane/policy/workflow.release.md`
 - DOC `.agentplane/policy/workflow.upgrade.md`
 - DOC `.agentplane/policy/security.must.md`
+- DOC `.agentplane/policy/context.must.md`
 - DOC `.agentplane/policy/dod.core.md`
 - DOC `.agentplane/policy/dod.code.md`
 - DOC `.agentplane/policy/dod.docs.md`
 - DOC `.agentplane/policy/governance.md`
 - DOC `.agentplane/policy/incidents.md`
 
----
-
 <!-- /ap:fragment -->
 <!-- ap:fragment id="gateway.agents.example.reference.examples" slot="example" mutability="replaceable" -->
 

package/assets/policy/context.must.md

@@ -0,0 +1,67 @@
+<!-- ap:fragment id="policy.context.must.body.context.must" slot="body" mutability="replaceable" -->
+
+# Context MUST Rules
+
+Use this module when a task reads, writes, learns, curates, verifies, or relies on AgentPlane local context.
+
+Local context means `context/wiki/**`, `context/facts/**`, `context/graph/**`, `context/capabilities/**`, `context/raw/**`, and `.agentplane/context/**`.
+
+<!-- /ap:fragment -->
+<!-- ap:fragment id="policy.context.must.hard_constraint.source.first" slot="hard_constraint" mutability="append_only" -->
+
+## Source-first contract
+
+- MUST search existing context before creating new wiki pages, facts, graph entities, capabilities, or aliases.
+- MUST prefer updating an existing canonical page/entity over creating duplicates.
+- MUST keep raw source material, synthesized wiki prose, structured facts/graph rows, and capability notes distinct.
+- MUST mark facts, decisions, risks, workflows, and definitions with source refs or an explicit no-source reason.
+- MUST preserve conflicts and open questions instead of flattening contradictory sources into one unsourced claim.
+
+<!-- /ap:fragment -->
+<!-- ap:fragment id="policy.context.must.commands.command.contract" slot="commands" mutability="replaceable" -->
+
+## Command contract
+
+```bash
+ap context search "<query>"
+ap context show <ref>
+ap context learn changes
+ap context learn files <path> [--run]
+ap context wiki lint <path>
+ap context wiki explain <path>
+ap context wiki link <path>
+ap context wiki index context/wiki
+ap context check
+ap context doctor
+ap context verify-task <task-id>
+```
+
+- Use `search` for discovery and `show` for exact source readback.
+- Use `learn` to create context assimilation tasks instead of ad hoc memory writes.
+- Use wiki lint/explain/link/index when adding or changing wiki pages.
+- Run `verify-task` before closing tasks that create or rely on context artifacts.
+
+<!-- /ap:fragment -->
+<!-- ap:fragment id="policy.context.must.hard_constraint.write.boundaries" slot="hard_constraint" mutability="append_only" -->
+
+## Write boundaries
+
+- MUST NOT manually edit `.agentplane/context/derived/**`; rebuild projections through context commands.
+- MUST NOT write private raw content into public wiki pages, task summaries, ACRs, reports, or incident advice.
+- MUST NOT treat `context/raw/private/**` as publishable context.
+- MUST NOT create glossary-only truth; glossary entries are aliases/navigation over wiki pages and graph entities.
+- SHOULD use proposal-before-promotion for harvested or inferred context when provenance, staleness, or conflicts are not clean.
+
+<!-- /ap:fragment -->
+<!-- ap:fragment id="policy.context.must.check.dod" slot="check" mutability="append_only" -->
+
+## Context DoD
+
+Context work is done only when:
+
+1. Existing context was searched or a concrete skip reason was recorded.
+2. New or changed factual claims have source refs or explicit no-source reasons.
+3. Wiki links/indexes were refreshed when pages were added, moved, or materially renamed.
+4. Derived projection checks were run or skipped with reason and risk.
+5. `ap context verify-task <task-id>` passed for task-bound context work.
+<!-- /ap:fragment -->

package/assets/policy/framework.dev.md

@@ -0,0 +1,20 @@
+<!-- ap:fragment id="policy.framework_dev.body.framework.dev" slot="body" mutability="replaceable" -->
+
+# Framework Development Policy
+
+Use this module only inside the AgentPlane framework checkout.
+
+This module is intentionally excluded from normal initialized repositories and must load only when
+the prompt-module compiler context has `repo_type=framework`.
+
+<!-- /ap:fragment -->
+<!-- ap:fragment id="policy.framework_dev.hard_constraint.framework.scope" slot="hard_constraint" mutability="append_only" -->
+
+## Framework Scope
+
+- MUST treat `packages/agentplane/bin/agentplane.js` as the canonical direct repo-local CLI entrypoint.
+- MUST keep framework-only commands unavailable outside framework checkouts, not merely hidden from normal help.
+- MUST run `bun run framework:dev:bootstrap` after changes to watched runtime, CLI, prompt, or built asset surfaces before relying on repo-local runtime parity.
+- MUST NOT require installed user repositories to depend on framework helper scripts.
+
+<!-- /ap:fragment -->

package/assets/policy/workflow.branch_pr.md

@@ -53,6 +53,11 @@ agentplane integrate <task-id> --branch task/<task-id>/<slug> --run-verify
 agentplane finish <task-id> --author INTEGRATOR --body "Verified: ..." --result "..." --commit <git-rev> --close-commit
 ```
 
+Default branch names are `task/<task-id>/<slug>` for implementation branches and
+`task-close/<task-id>/<sha12>` for close-tail branches. Repositories MAY override only the prefixes
+through `branch.task_prefix` and `branch.task_close_prefix`; task id, slug, and sha positions remain
+fixed.
+
 <!-- /ap:fragment -->
 <!-- ap:fragment id="policy.workflow.branch_pr.hard_constraint.constraints" slot="hard_constraint" mutability="append_only" -->
 
@@ -73,6 +78,14 @@ agentplane finish <task-id> --author INTEGRATOR --body "Verified: ..." --result
   after the first green rollup), then merge it through GitHub. If auto-merge remains blocked
   after stable green checks, the agent MUST continue with the permitted GitHub merge route
   available to its credentials instead of stopping at enabled auto-merge.
+- Claude Code and other agents that inherit the user's GitHub session MUST treat `gh pr merge`,
+  GitHub UI merge, and auto-merge enablement as user-attributed publication. Before using those
+  actions, verify the integration queue/handoff route, stable hosted checks, and explicit approval
+  for the merge lane; record the GitHub PR number and merge commit in task artifacts after merge.
+- If a task is already `DONE` and needs a post-merge fix, create a new task unless the follow-up
+  branch slug explicitly starts with `post-merge-` or uses `followup` as a separate slug token
+  bounded by the start, end, or hyphens; generic slugs under an already closed task id are treated
+  as conflicting closure attempts.
 - `integrate` defaults to the `merge` strategy so task branch commits stay in base history. Use `--merge-strategy squash` only when intentionally compacting branch history.
 - When several task PRs are ready together, use the integration queue so only one branch owns the merge lane; agents waiting behind `claimed` or `handoff` entries SHOULD use bounded polling (`--wait --poll-interval-ms 30000 --timeout-ms 600000`) instead of retrying ad hoc; stale branch heads move to rework instead of blocking later queued work.
 - `task start-ready` MAY surface targeted incident advice for analogous scope/tags; follow it before widening scope.

package/dist/.build-manifest.json

@@ -2,7 +2,7 @@
   "schema_version": 1,
   "manifest_kind": "package",
   "package_name": "agentplane",
-  "package_version": "0.6.1",
-  "git_head": "03acb7398ddfef745f284a32090ede8e45df99be",
-  "watched_runtime_snapshot_hash": "d2e990c9cc895be015699b09250b8cde95ddd334c71fbdc9fc283c7375fe26e6"
+  "package_version": "0.6.3",
+  "git_head": "2a1e5c63023996dd79e8b16c0b2c7e7472930a24",
+  "watched_runtime_snapshot_hash": "72dfe5aa78b3f08c313ec6b43c7c000ff08d5615db9e7e0d77835f9102afa091"
 }