baldart 4.95.0 → 4.97.0

package/CHANGELOG.md

@@ -5,6 +5,28 @@ All notable changes to BALDART will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.97.0] - 2026-07-02
+
+**Change Tiers — a real Light lane, so ordinary edits stop triggering the heavy machinery.** The root primitives forced plan mode on *any* non-trivial task, a `plan-auditor` + `doc-reviewer` review gate on *every* non-trivial plan, mandatory delegation to a domain agent, and (amplified by project overlays) a worktree + backlog card whenever more than a few files were touched — so even a small direct edit spun up the full orchestration. Root cause: there were only two tiers (Trivial vs everything-else-is-Heavy); no genuine middle lane.
+
+- **New `## Change Tiers` section in the `AGENTS.md` primitive** (cross-tool SSOT, read by Claude + Codex) defines **Trivial / Light / Heavy**, and the *tier* — not raw file count — decides whether the heavy machinery fires. Default is **Light; when in doubt → Light**.
+- **Light** (the new default for most work): any change that hits **no Heavy trigger**, even multi-file within one coherent area → implemented **directly on the current branch**, no plan mode, no plan-review, no worktree, no card.
+- **Heavy** (aggressive calibration): escalate ONLY for a new DB schema/migration, a new external dependency, a new API contract/route or domain entity, a wide/cross-module refactor, or work parallel to other sessions on shared files → full machinery.
+- The plan-review MUST, the delegation MUST, and the Git Workflow worktree rule in `AGENTS.md` are now scoped to **Heavy**; the `CLAUDE.md` primitive Plan Mode section likewise fires only for Heavy (Light/Trivial skip plan mode + review + mandatory delegation). Primitives bumped: `AGENTS.md` 1.5.0 → **1.6.0**, `CLAUDE.md` 1.2.0 → **1.3.0**.
+
+**MINOR** — behavior/posture change to shipped primitives, no install-layout change. **Codex parity: portable** — pure prose in the shared `AGENTS.md` skeleton; Codex reads the same tiers to decide agent-spawn / worktree / card. **Not a `baldart.config.yml` key** → the schema-change propagation rule does NOT apply. Consumers pick it up on `baldart update` (regenerated root primitives); project overlays may add project-specific Heavy triggers.
+
+## [4.96.0] - 2026-07-02
+
+**Protected branch decoupled from the integration trunk — `git.protected_branch`.** The root `AGENTS.md` primitive expressed the "NEVER push directly to X" MUST via `{{ git.trunk_branch }}`, conflating two distinct roles that in a two-branch gitflow are different branches: the *integration trunk* (worktree base + feature PR target in `/prd` + `/new`) and the *protected branch* (production/release line that must not receive direct pushes). A consumer with `trunk_branch: develop` therefore had its agents (Claude + Codex) refuse a direct `develop` push — even though `develop` was the integration branch they push to and `main` was the truly-protected line. `trunk_branch` could not simply be flipped to `main` because it also drives worktree creation (`update.js`), which must branch from `develop`.
+
+- **New optional config key `git.protected_branch`** — the branch the "never push directly" rule protects. **Defaults to `git.trunk_branch`** when omitted, so single-trunk repos are byte-unchanged; a two-branch gitflow sets it explicitly (e.g. `protected_branch: main` while `trunk_branch: develop` stays the worktree base + PR target).
+- **Primitive `AGENTS.md` skeleton → 1.5.0**: the push MUST now resolves `{{ git.protected_branch }}` and explicitly permits direct pushes to other branches (including the integration trunk when it differs) when the owner authorizes it.
+- **Slot resolution** (`src/utils/root-primitives.js`): `git.protected_branch` resolves to `git.protected_branch || git.trunk_branch || 'main'`.
+- **Schema-change propagation** (per the rule): template (`baldart.config.template.yml` — new commented key under `git:`), `configure` (new `detectProtectedBranch` probe + serialized `git.protected_branch` + `_probes`), `update` detector (already diffs all `git.*` keys → surfaces `git.protected_branch`; added a dedicated advisory), CHANGELOG. No doctor diagnostic needed (the update advisory + configure autodetect cover it).
+
+**MINOR** — new optional config key, back-compat default, no install-layout change. **Codex parity: portable** — pure slot resolution in the shared `AGENTS.md` skeleton (transpiled to `.codex/agents/*` unchanged; the generated `AGENTS.md` is the cross-tool SSOT read by both runtimes).
+
 ## [4.95.0] - 2026-07-02
 
 **`/prd` — applier economico + EARS+verify (i due interventi strutturali dal forensics della deep analysis).**

package/VERSION

@@ -1 +1 @@
-4.95.0
+4.97.0

package/framework/docs/ROOT-PRIMITIVES.md

@@ -44,6 +44,7 @@ key was introduced:
 | Commands table | `toolchain.commands.*` → `package.json` scripts (rows with no source are omitted) |
 | Repo map | non-empty `paths.*` + a derived source root |
 | `git.trunk_branch` | `git.trunk_branch` |
+| `git.protected_branch` | `git.protected_branch` → `git.trunk_branch` (default) — the "never push directly" branch; differs from the trunk only in a two-branch gitflow |
 | feature gates | `features.has_backlog` / `has_adrs` / `has_i18n` / `has_design_system` |
 
 ## Overlay

package/framework/templates/baldart.config.template.yml

@@ -416,6 +416,15 @@ git:
   # (falling back to asking the user). Default kept as "develop" for back-compat.
   trunk_branch: develop
 
+  # Protected branch — the branch that MUST NOT receive direct pushes (the
+  # production/release line). Skills resolve this key for the "never push
+  # directly to X" rule. DEFAULTS to `trunk_branch` when omitted, so single-trunk
+  # repos need not set it. Set it explicitly ONLY for a two-branch gitflow where
+  # the protected line differs from the integration trunk — e.g.
+  # `protected_branch: main` while `trunk_branch: develop` (features integrate
+  # into develop; main is reached only via a release/hotfix PR).
+  protected_branch: develop
+
   # How `/mw` lands the feature branch onto the trunk:
   #
   #   pr          (default) — push feature branch, open a PR via `gh pr create`,

package/framework/templates/primitives/AGENTS.CHANGELOG.md

@@ -4,6 +4,34 @@ Formato: [Keep a Changelog](https://keepachangelog.com/) · [SemVer](https://sem
 Questo è il changelog INTERNO dello skeleton spedito (`primitive_version`), separato dal
 file `AGENTS.md` generato nel consumer e indipendente dal `VERSION` del framework.
 
+## 1.6.0 — 2026-07-02
+
+- **Change Tiers — a real Light lane between Trivial and Heavy**: new `## Change Tiers`
+  section defines Trivial / Light / Heavy, and the tier (NOT raw file count) now decides
+  whether the heavy machinery fires. The plan-review MUST is scoped to **Heavy** plans (was
+  "any non-trivial plan → `plan-auditor` + `doc-reviewer`"); the delegation MUST is scoped to
+  **Heavy** implementation (Light changes MAY be implemented directly inline); the Git
+  Workflow worktree rule fires for **Heavy** work on a new branch (Light goes on the current
+  branch). Heavy triggers (aggressive calibration): new DB schema/migration, new external
+  dependency, new API contract/route or domain entity, wide/cross-module refactor, or work
+  parallel to other sessions on shared files. Default is **Light; when in doubt → Light**.
+  Removes the "everything is non-trivial → plan mode + review + delegate + worktree + card"
+  friction on ordinary edits. Cross-tool: pure prose in the shared skeleton — portable
+  (Claude + Codex; Codex reads the same tiers to decide agent-spawn / worktree / card).
+
+## 1.5.0 — 2026-07-02
+
+- **Protected branch decoupled from the integration trunk**: the "NEVER push directly"
+  MUST now resolves the new `{{ git.protected_branch }}` slot instead of
+  `{{ git.trunk_branch }}`, and explicitly permits direct pushes to other branches
+  (including the integration trunk when it differs) when the owner authorizes it.
+  `git.protected_branch` defaults to `git.trunk_branch`, so single-trunk repos are
+  byte-unchanged; a two-branch gitflow sets it (e.g. `protected_branch: main` while
+  `trunk_branch: develop` stays the worktree base + PR target). Fixes the case where a
+  consumer with `trunk_branch: develop` had its agents refuse a direct `develop` push
+  even though `develop` was the integration branch and `main` was the protected line.
+  Cross-tool: pure slot resolution in the shared skeleton — portable (Claude + Codex).
+
 ## 1.4.0 — 2026-07-02
 
 - **Analysis-profile vocabulary on the understand-before-implement MUST**: the

package/framework/templates/primitives/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- baldart-primitive: name=AGENTS primitive_version=1.4.0
+<!-- baldart-primitive: name=AGENTS primitive_version=1.6.0
      This is the SHIPPED SKELETON. The writer (src/utils/root-primitives.js) strips
      this banner, resolves every {{ slot }} / {{> partial }} / {{#flag}} from
      baldart.config.yml (+ package.json/README), merges .baldart/overlays/AGENTS.md,
@@ -33,16 +33,19 @@ mechanics — this file remains the single source of truth for the protocol.
   diff). Contract + per-profile scoping: `agents/analysis-profiles.md`. Only if NEITHER
   invocation mechanism exists, degrade explicitly to inline retrieval
   (code-graph → LSP → Grep) and SAY SO.
-- MUST have any non-trivial plan reviewed BEFORE presenting it for approval — run
-  `plan-auditor` + `doc-reviewer` (in parallel), incorporate their feedback, and note in the
-  plan that the review gate was honored. Present the ALREADY-reviewed plan, never a raw one.
-  (Claude Code enforces this inside plan mode, before `ExitPlanMode` — see `CLAUDE.md`.)
-- MUST delegate implementation to the domain agent — plan and delegate, do NOT write
-  substantial code inline: **code / logic / tests → `coder`**; **UI (components, pages,
+- MUST have any **Heavy** plan (see § Change Tiers) reviewed BEFORE presenting it for
+  approval — run `plan-auditor` + `doc-reviewer` (in parallel), incorporate their feedback,
+  and note in the plan that the review gate was honored. Present the ALREADY-reviewed plan,
+  never a raw one. (Claude Code enforces this inside plan mode, before `ExitPlanMode` — see
+  `CLAUDE.md`.) **Light** and **Trivial** changes need no plan and no review — implement them
+  directly.
+- MUST delegate **Heavy** implementation to the domain agent — plan and delegate, do NOT
+  write substantial code inline: **code / logic / tests → `coder`**; **UI (components, pages,
   styling, visual output) → `ui-expert`**. Same dual-tool invocation as `codebase-architect`
-  (Claude Code: Task tool `subagent_type`; Codex: custom agent by name). Every other agent
-  (code-reviewer, doc-reviewer, qa-sentinel, security-reviewer, …) routes via
-  `.claude/agents/REGISTRY.md`.
+  (Claude Code: Task tool `subagent_type`; Codex: custom agent by name). For a **Light**
+  change the orchestrator MAY implement directly inline (or still delegate at its discretion
+  — e.g. for volume). Every other agent (code-reviewer, doc-reviewer, qa-sentinel,
+  security-reviewer, …) routes via `.claude/agents/REGISTRY.md`.
 - MUST NOT silently substitute a different agent when an invocation returns empty / times
   out / is denied — STOP, report verbatim, and wait. Never auto-route to a generic agent.
 - MUST NOT work on files another agent has claimed; parallel work only on independent areas.
@@ -55,7 +58,9 @@ mechanics — this file remains the single source of truth for the protocol.
 - MUST use commit format `{{ git.commit_format }}`; small, traceable commits.
 - MUST NOT commit with failing lint/type checks. Full build only before opening a PR.
 - MUST pre-sync (`git fetch`, clean status, confirm branch, `--ff-only`) and NEVER push
-  directly to `{{ git.trunk_branch }}` — all changes reach it via PR.
+  directly to `{{ git.protected_branch }}` — the protected branch reaches its state only
+  via PR. Other branches (including the integration branch `{{ git.trunk_branch }}` when it
+  differs) MAY be pushed to directly when the owner authorizes it.
 - MUST get owner approval before force-push/reset or deleting an UNMERGED branch (create a
   `backup/<YYYYMMDD>-<reason>` tag first). Deleting an already-merged branch is routine.
 - MUST NOT hardcode secrets / tokens / API keys (env vars only), expose internal stack
@@ -89,14 +94,34 @@ mechanics — this file remains the single source of truth for the protocol.
   entries older than 7 days to `work-history.md`.
 {{/has_project_status}}
 
+## Change Tiers
+
+Every change is one of three tiers. The tier — NOT raw file count — decides whether the heavy
+machinery (plan mode, plan review, delegation, worktree, backlog card) applies. **When in
+doubt, treat it as Light** and escalate only when a Heavy trigger is actually present.
+
+- **Trivial** — a one-liner, typo, or obvious bug with a clear fix. Just do it.
+- **Light** — the default for most work. Any change that does **not** hit a Heavy trigger,
+  even if it spans several files within one coherent area. → Implement **directly on the
+  current branch**: no plan mode, no plan-review gate, no worktree, no backlog card. The
+  orchestrator may edit inline or delegate for volume. Docs stay in sync and the pre-commit
+  gates still run.
+- **Heavy** — escalate ONLY when the change: introduces a new DB schema / migration; adds a
+  new external dependency; adds a new API contract / route or a new domain entity; is a wide
+  or cross-module refactor; or runs in parallel with other agents/sessions on shared files.
+  → Full machinery: plan mode → reviewed plan (`plan-auditor` + `doc-reviewer`) → delegation
+  to the domain agent → a git **worktree** (`/nw`) → a backlog card (when the backlog feature
+  is on). Project overlays may add project-specific Heavy triggers.
+
 ## Git Workflow
 
 Branch naming: `{{ git.feature_prefix }}/<CARD-ID>-slug` (local), `codex/…` or `claude/…`
 (cloud agents), `hotfix/<ID>-slug` (production fixes). Branches are created by the
 orchestrator (`/nw`, `/new`) or the user — **never by the `coder` agent** (it implements on
-the branch it was spawned on). For a NEW branch, prefer a git **worktree** (`/nw`): the
-orchestrator MUST NOT run `git switch` / `checkout -b` / `branch` on the shared main
-checkout (other sessions share it). Stage explicit filenames only; never bundle unrelated changes.
+the branch it was spawned on). **Light** changes go directly on the current branch. **Heavy**
+work on a NEW branch uses a git **worktree** (`/nw`) — the orchestrator MUST NOT run
+`git switch` / `checkout -b` / `branch` on the shared main checkout (other sessions share it).
+Stage explicit filenames only; never bundle unrelated changes.
 
 ## Workflow Gates
 

package/framework/templates/primitives/CLAUDE.CHANGELOG.md

@@ -4,6 +4,13 @@ Formato: [Keep a Changelog](https://keepachangelog.com/) · [SemVer](https://sem
 Changelog INTERNO dello stub spedito (`primitive_version`), separato dal `CLAUDE.md`
 generato nel consumer e indipendente dal `VERSION` del framework.
 
+## 1.3.0 — 2026-07-02
+
+- Plan Mode scoped to **Heavy** changes (see `AGENTS.md` § Change Tiers): Light and Trivial
+  changes now explicitly skip plan mode, the plan-review gate, and mandatory delegation —
+  implemented directly. "When in doubt → Light." Removes the plan-mode-for-any-non-trivial-
+  task friction on ordinary edits. Mirrors the AGENTS.md primitive 1.6.0 Change Tiers.
+
 ## 1.2.0 — 2026-07-02
 
 - Plan Mode: the `codebase-architect` pre-plan invocation now passes the matching

package/framework/templates/primitives/CLAUDE.md

@@ -1,4 +1,4 @@
-<!-- baldart-primitive: name=CLAUDE primitive_version=1.2.0
+<!-- baldart-primitive: name=CLAUDE primitive_version=1.3.0
      SHIPPED SKELETON. The writer strips this banner, resolves {{ slot }}/{{#flag}} from
      baldart.config.yml, merges .baldart/overlays/CLAUDE.md, stamps a baldart-generated
      marker, and writes the result to the repo root.
@@ -14,8 +14,11 @@ SSOT, not restated here. Below are the **Claude-native mechanics only**.
 
 ## Plan Mode (Claude-native)
 
-- Enter plan mode (`EnterPlanMode`) for any non-trivial task before writing code.
-  Trivial = single-line fix / typo / obvious bug.
+Plan mode is for **Heavy** changes only (see `AGENTS.md` § Change Tiers). **Light** and
+**Trivial** changes skip plan mode, the plan-review gate, and mandatory delegation — implement
+them directly. When in doubt, treat it as Light. For a Heavy task:
+
+- Enter plan mode (`EnterPlanMode`) before writing code.
 - Invoke `codebase-architect` before writing the plan — never plan blind. Pass the
   matching `PROFILE=<feature|bug|impact|discovery|ui|baseline>` token (the profile
   vocabulary and routing live in `AGENTS.md` § Non-negotiables and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baldart",
-  "version": "4.95.0",
+  "version": "4.97.0",
   "description": "Claude Agent Framework - Reusable framework for coordinating AI agents and humans in software projects",
   "bin": {
     "baldart": "./bin/baldart.js"

package/src/commands/configure.js

@@ -102,6 +102,38 @@ function detectTrunkBranch(cwd = process.cwd()) {
   }
 }
 
+/**
+ * Autodetect the protected branch (git.protected_branch) — the branch that MUST
+ * NOT receive direct pushes (production/release line). In a two-branch gitflow
+ * this differs from the integration `trunk_branch`: features integrate into the
+ * trunk (worktree base + PR target), while a separate protected branch is only
+ * reached via release/hotfix PRs.
+ * Heuristic: if trunk is NOT already `main`/`master` and such a branch exists,
+ * that's the protected line; otherwise the protected branch IS the trunk
+ * (single-trunk repo — the back-compat default, since protected_branch defaults
+ * to trunk_branch when absent).
+ */
+function detectProtectedBranch(cwd = process.cwd(), trunk = 'develop') {
+  try {
+    const { execSync } = require('child_process');
+    const opts = { cwd, stdio: ['ignore', 'pipe', 'ignore'], timeout: 5000, encoding: 'utf8' };
+    const branches = (() => {
+      try { return execSync('git branch --format=%(refname:short)', opts).split('\n').map((s) => s.trim()); }
+      catch (_) { return []; }
+    })();
+    if (trunk !== 'main' && trunk !== 'master') {
+      for (const cand of ['main', 'master']) {
+        if (branches.includes(cand)) {
+          return { value: cand, reason: `two-branch gitflow: '${cand}' is the protected line (trunk is '${trunk}').` };
+        }
+      }
+    }
+    return { value: trunk, reason: `single-trunk repo — protected branch is the trunk ('${trunk}').` };
+  } catch (_) {
+    return { value: trunk, reason: `probe failed — protected branch defaults to trunk ('${trunk}').` };
+  }
+}
+
 /**
  * Autodetect whether this project develops in parallel git worktrees
  * (`git worktree list` shows linked worktrees beyond the main one). Used to
@@ -371,6 +403,7 @@ function detect(cwd = process.cwd()) {
     : '';
 
   const trunkBranchProbe = detectTrunkBranch(cwd);
+  const protectedBranchProbe = detectProtectedBranch(cwd, trunkBranchProbe.value);
   const mergeStrategyProbe = detectMergeStrategy(cwd, trunkBranchProbe.value);
   // Default schema_deploy_from_trunk_only ON when parallel worktrees are in use
   // (the topology prone to migration-history desync). Otherwise keep the
@@ -532,6 +565,7 @@ function detect(cwd = process.cwd()) {
       // Set to plain strings — the structured probe details (`protected`,
       // `reason`) are kept on a sibling key so mergePreserving stays type-safe.
       trunk_branch: trunkBranchProbe.value,
+      protected_branch: protectedBranchProbe.value,
       merge_strategy: mergeStrategyProbe.value,
     },
     _probes: {
@@ -539,6 +573,7 @@ function detect(cwd = process.cwd()) {
       // interactivePrompts to surface the autodetection reasoning.
       merge_strategy: mergeStrategyProbe,
       trunk_branch: trunkBranchProbe,
+      protected_branch: protectedBranchProbe,
     },
   };
 

package/src/commands/update.js

@@ -1551,6 +1551,12 @@ async function update(options = {}, unknownArgs = []) {
                     + 'Until it is set, those skills autodetect the trunk (origin/HEAD → develop/main/master) '
                     + 'and warn on each run; run `npx baldart configure` to persist it and make it deterministic.');
                 }
+                if (allMissing.includes('git.protected_branch')) {
+                  UI.warning('`git.protected_branch` is the branch the "never push directly" rule protects '
+                    + '(AGENTS.md). It DEFAULTS to `git.trunk_branch`, so single-trunk repos are unchanged; '
+                    + 'set it (e.g. `main`) only for a two-branch gitflow where the protected line differs from '
+                    + 'the integration trunk (e.g. trunk `develop`, protected `main`).');
+                }
               }
             }
           } catch (_) {

package/src/utils/root-primitives.js

@@ -159,6 +159,11 @@ function resolveSlots(cwd, cfg) {
     'stack.summary': stackSummary,
     'stack.node_suffix': nodeSuffix,
     'git.trunk_branch': git.trunk_branch || 'main',
+    // The branch that MUST NOT receive direct pushes (production/protected).
+    // Defaults to trunk_branch so single-trunk repos are unchanged; two-branch
+    // gitflows set it explicitly (e.g. protected_branch: main while
+    // trunk_branch: develop is the integration/PR target + worktree base).
+    'git.protected_branch': git.protected_branch || git.trunk_branch || 'main',
     'git.feature_prefix': 'feat', // STATIC BALDART convention
     'git.commit_format': '[FEAT-XXXX] description', // STATIC default (override via overlay)
     'i18n.registry': paths.i18n_registry || 'the i18n registry',