openplanr 2.2641.1 → 2.2641.2

package/lib/host-packages/cursor/openplanr/.openplanr-content.json

@@ -12,11 +12,11 @@
     },
     {
       "path": "manifest.json",
-      "digest": "sha256:dfbaa939fdf6cb8d17633e494f0f15131d1b170d4f5245778025378dd948b7ba"
+      "digest": "sha256:91af96f4bfd4d7c892d90ae531e9c00d3c00e48f4f8eb270ca172cb22ce41609"
     },
     {
       "path": "rules/planr-artifact.mdc",
-      "digest": "sha256:c4994566f9c062b2f8f5b830c269e92f290e15749e61d703ab0eb4aa94ea8053"
+      "digest": "sha256:8c5ef7c58d1823569eac5dd0f0cb17a0f9c4b79455b25b18e402c4fa40f5815b"
     },
     {
       "path": "rules/planr-artifact/references/company-review.md",
@@ -28,7 +28,7 @@
     },
     {
       "path": "rules/planr-artifact/references/diagram-sharing.md",
-      "digest": "sha256:b0cdad978a5ce2a8be27f072361e40cba10eac64d1bed8f224545dd5810c87ea"
+      "digest": "sha256:84c9ba89680dcbacc4f1ad8b871980e7e6ed73fae8d086c0d148c8ce84510f84"
     },
     {
       "path": "rules/planr-browser-qa.mdc",
@@ -40,7 +40,7 @@
     },
     {
       "path": "rules/planr-ceo-review/references/operate-advisor-contract.md",
-      "digest": "sha256:467c4437430f656d37827c9035b7e3dec324735e1c7ac080776141a2e305e534"
+      "digest": "sha256:3153403563d422f395add6a2afd6d249737b8807e4ab31db5b830d82d7814fc5"
     },
     {
       "path": "rules/planr-ceo-review/scripts/validate-note.mjs",
@@ -48,7 +48,7 @@
     },
     {
       "path": "rules/planr-chair-review.mdc",
-      "digest": "sha256:dd7a350d3661b61100996ae2da3395691625fbcb818a67876ab0fcd839fa2b57"
+      "digest": "sha256:520b773b2186b805222ddb05df380eeba875b42e27c68b559096cc84f2951022"
     },
     {
       "path": "rules/planr-chair-review/scripts/validate-note.mjs",
@@ -56,7 +56,7 @@
     },
     {
       "path": "rules/planr-challenger-review.mdc",
-      "digest": "sha256:8b43d08c75dc63821bf4b71a33e42dbd7df38990acc7497635acf57c57fd2e85"
+      "digest": "sha256:3de0431436c1530451210ab59e613c88eefc8ce4cb72cb9b6052b55fcb18ef3c"
     },
     {
       "path": "rules/planr-challenger-review/scripts/validate-note.mjs",
@@ -68,7 +68,7 @@
     },
     {
       "path": "rules/planr-cmo-review/references/operate-advisor-contract.md",
-      "digest": "sha256:467c4437430f656d37827c9035b7e3dec324735e1c7ac080776141a2e305e534"
+      "digest": "sha256:3153403563d422f395add6a2afd6d249737b8807e4ab31db5b830d82d7814fc5"
     },
     {
       "path": "rules/planr-cmo-review/scripts/validate-note.mjs",
@@ -80,7 +80,7 @@
     },
     {
       "path": "rules/planr-coo-review/references/operate-advisor-contract.md",
-      "digest": "sha256:467c4437430f656d37827c9035b7e3dec324735e1c7ac080776141a2e305e534"
+      "digest": "sha256:3153403563d422f395add6a2afd6d249737b8807e4ab31db5b830d82d7814fc5"
     },
     {
       "path": "rules/planr-coo-review/scripts/validate-note.mjs",
@@ -92,7 +92,7 @@
     },
     {
       "path": "rules/planr-cpo-review/references/operate-advisor-contract.md",
-      "digest": "sha256:467c4437430f656d37827c9035b7e3dec324735e1c7ac080776141a2e305e534"
+      "digest": "sha256:3153403563d422f395add6a2afd6d249737b8807e4ab31db5b830d82d7814fc5"
     },
     {
       "path": "rules/planr-cpo-review/scripts/validate-note.mjs",
@@ -104,7 +104,7 @@
     },
     {
       "path": "rules/planr-cto-review/references/operate-advisor-contract.md",
-      "digest": "sha256:467c4437430f656d37827c9035b7e3dec324735e1c7ac080776141a2e305e534"
+      "digest": "sha256:3153403563d422f395add6a2afd6d249737b8807e4ab31db5b830d82d7814fc5"
     },
     {
       "path": "rules/planr-cto-review/scripts/validate-note.mjs",
@@ -116,7 +116,7 @@
     },
     {
       "path": "rules/planr-delegate.mdc",
-      "digest": "sha256:43643a5cd724ef6eb18f6c38ff7ce9ec6931010f6fcfac857366312cdb027e5a"
+      "digest": "sha256:5a76e244433fad6ba51b4cb79154e7da4590962ff2199bd5e8d7e3fe35e0ac3d"
     },
     {
       "path": "rules/planr-delegate/references/adapter-protocol.md",
@@ -124,7 +124,7 @@
     },
     {
       "path": "rules/planr-delegate/references/capsule-contract.md",
-      "digest": "sha256:12e0f01caa24a22f7c03ae1174d221b259a2fd4763539963db6c8654d63d8b28"
+      "digest": "sha256:9bd80db920018a43cecc02f4996d65d5eb54a121fce6caa3c9198cb0ca01bf6a"
     },
     {
       "path": "rules/planr-delegate/references/integration-review.md",
@@ -132,7 +132,7 @@
     },
     {
       "path": "rules/planr-delegate/references/operator-guide.md",
-      "digest": "sha256:026655594840b990ba5c840e58056bfc5be35d719d0b7b6f2c5a629d8eda044d"
+      "digest": "sha256:436c12e8ff06e67a529df1aaeb736407d85a63c636260f4a193f458c94fd2ec4"
     },
     {
       "path": "rules/planr-delegate/references/run-handoff.md",
@@ -148,7 +148,7 @@
     },
     {
       "path": "rules/planr-delegate/scripts/adapters/claude.mjs",
-      "digest": "sha256:7f864c25d0d50c6e31d23be4ccbd6f9edb2a601b529a3652abdde28b4c7c6066"
+      "digest": "sha256:98dae19b18c18b372edc77985a889303e595b0fc4556f1f42dcfd69d5f037acc"
     },
     {
       "path": "rules/planr-delegate/scripts/adapters/codex.mjs",
@@ -164,15 +164,19 @@
     },
     {
       "path": "rules/planr-delegate/scripts/adapters/native.mjs",
-      "digest": "sha256:cf4af84cdfcc05d906a51878dfd82e5a0b5e4acd6644bf93ebf708a6dd2f0130"
+      "digest": "sha256:ff2a8c9365264c4065b8be742ba98ba7b5c8269779c66f217140e9fbf6609727"
     },
     {
       "path": "rules/planr-delegate/scripts/backend-diagnostics.mjs",
-      "digest": "sha256:74b327c6de0e581e2b238ea1e7d5f8ddaa15a7091f717b9a4c66192e60e9ef9c"
+      "digest": "sha256:989c307c6a42c19f799b17bbe7067211b5d9435a6ebabd2609d15d312d3d2715"
     },
     {
       "path": "rules/planr-delegate/scripts/context.mjs",
-      "digest": "sha256:a611af4a3542a5cd1c928b2a3a07a80f51598482a3beb5aede3e66ee3a13fb3f"
+      "digest": "sha256:632a59c12d8fc4b6b738279cbee5f8d001e76d9ef379fc065f62031647462d42"
+    },
+    {
+      "path": "rules/planr-delegate/scripts/credentials.mjs",
+      "digest": "sha256:a7b55c9598a8a5301c4e0ff79f3471a587a5f26686c9a7d97fe662ee0babb49d"
     },
     {
       "path": "rules/planr-delegate/scripts/custody.mjs",
@@ -200,7 +204,7 @@
     },
     {
       "path": "rules/planr-delegate/scripts/presentation.mjs",
-      "digest": "sha256:a3aca29d53b365c16dee25df7094f79c93425690b694ef5c2af9586becd60a03"
+      "digest": "sha256:32ca0c561e99bb02dc8f88e0823a0b826a24cd61404b165fe306bbbce9ee99b9"
     },
     {
       "path": "rules/planr-delegate/scripts/profiles.mjs",
@@ -208,7 +212,7 @@
     },
     {
       "path": "rules/planr-delegate/scripts/run-contract.mjs",
-      "digest": "sha256:9118f4701e0e61ab186cba4da2cb97804310c6c314d96066ee9457e35f526252"
+      "digest": "sha256:f87f0bd16249266ef6f044a37db608d852a5d893628de26ab9844dc92df57c46"
     },
     {
       "path": "rules/planr-delegate/scripts/run-execution.mjs",
@@ -224,11 +228,11 @@
     },
     {
       "path": "rules/planr-delegate/scripts/run-preparation.mjs",
-      "digest": "sha256:59a0207b35590c00c7e9906fa9fded89c85b8e8ed28431d07741f874c10e1176"
+      "digest": "sha256:dbc03621c77946ad77e97db84d826714d2fe75eccd15963756791b1439b46589"
     },
     {
       "path": "rules/planr-delegate/scripts/run-record.mjs",
-      "digest": "sha256:73eb79f4a2da7d1016356cc7098f36388934a66f4d14e0d8007349d624bb2abf"
+      "digest": "sha256:cbceec29880e4af92fc2dbd692edd10dcd6cb24ab87108b3a492f94797d93473"
     },
     {
       "path": "rules/planr-delegate/scripts/runner.mjs",
@@ -420,7 +424,7 @@
     },
     {
       "path": "rules/planr-diagram/references/diagram-sharing.md",
-      "digest": "sha256:b0cdad978a5ce2a8be27f072361e40cba10eac64d1bed8f224545dd5810c87ea"
+      "digest": "sha256:84c9ba89680dcbacc4f1ad8b871980e7e6ed73fae8d086c0d148c8ce84510f84"
     },
     {
       "path": "rules/planr-doctor.mdc",
@@ -444,7 +448,7 @@
     },
     {
       "path": "rules/planr-operate.mdc",
-      "digest": "sha256:c3c99a3ce9a3b308fc0d27a3a8505864facb52281c19eaf385846b5600ed0f0f"
+      "digest": "sha256:f20cabd0fb42523f1bea8bb9ba21d5982994f345e9a5baf5f033229cc2cbca03"
     },
     {
       "path": "rules/planr-operate/scripts/validate-note.mjs",
@@ -456,7 +460,7 @@
     },
     {
       "path": "rules/planr-plan.mdc",
-      "digest": "sha256:41a1f39eab8d8c4f99de25628a1ed5f1cb42ceae39dacbe4893c6500202b6083"
+      "digest": "sha256:fc5cca02f9aa4b1b799381b7fba4fbbd98ccf3f0ed86704a4bec4c72d2970201"
     },
     {
       "path": "rules/planr-plan/references/artifact-contract.md",
@@ -540,7 +544,7 @@
     },
     {
       "path": "rules/planr-sprint.mdc",
-      "digest": "sha256:5029217d0dbf976655ee0a4536a56890fba9ea85e07a5882d755042f23388f5f"
+      "digest": "sha256:d7678d43e82e90cbfdb7089e637a0a0b5059d4bf5619693808571a6c2a566835"
     },
     {
       "path": "rules/planr-sprint/references/refinement-contract.md",
@@ -550,17 +554,29 @@
       "path": "rules/planr-sprint/references/sprint-formats.md",
       "digest": "sha256:547bda354869f1aef26398e77e956f43116305f8dcc0d827dd5fb061ec98504a"
     },
+    {
+      "path": "rules/planr-sprint/references/tracker-connections.md",
+      "digest": "sha256:5f7d7126ca0db062c2b14c8ac35ca9758e44433329da610d7e75ad83b9417707"
+    },
     {
       "path": "rules/planr-sprint/schemas/refinement.schema.json",
       "digest": "sha256:31494ba4a83f9b7b3aeffc8423135404026ba07c02106be3ba99d6fc75852b12"
     },
     {
       "path": "rules/planr-status.mdc",
-      "digest": "sha256:9a48e72084ab46add12026141ce7cb960ddb1460705558e79c9bf70d51db5108"
+      "digest": "sha256:efc0ae769f57611c39cf4307d721273106a5bc22ca3dcc1e6e07ec9f19e2d508"
+    },
+    {
+      "path": "rules/planr-status/references/tracker-connections.md",
+      "digest": "sha256:5f7d7126ca0db062c2b14c8ac35ca9758e44433329da610d7e75ad83b9417707"
     },
     {
       "path": "rules/planr-sync.mdc",
-      "digest": "sha256:b53cfbdbff695cd0cfba6028308febbbda1980aba79e6d6cbdc91c82e08e963b"
+      "digest": "sha256:e2e300f5b378a7593c3ed5d133c253d7d3b2a17ad0349133f94a8ba18c4d20b9"
+    },
+    {
+      "path": "rules/planr-sync/references/tracker-connections.md",
+      "digest": "sha256:5f7d7126ca0db062c2b14c8ac35ca9758e44433329da610d7e75ad83b9417707"
     },
     {
       "path": "rules/planr-sync/scripts/names.mjs",
@@ -568,7 +584,7 @@
     },
     {
       "path": "rules/planr-sync/scripts/sync.mjs",
-      "digest": "sha256:37c7caaea892e296aa9329a52f75144355555120d6254e8dd8019d1366907376"
+      "digest": "sha256:7ef90127444f270dc30d119c88a41c898fe7e0b82b1d72d95b1bffc9393a1492"
     },
     {
       "path": "runtime/design/scripts/design-artifact-shell.mjs",
@@ -620,7 +636,7 @@
     },
     {
       "path": "runtime/design/scripts/design-review.mjs",
-      "digest": "sha256:3085283fb94cc2df9bd2630ba9bc0704523efdfda2e0dddb20c1dc5025941140"
+      "digest": "sha256:943d2fc37557f50df80ee00036e3ca844b022b7db373158578a2b3d72373b7a0"
     },
     {
       "path": "runtime/design/scripts/design-runtime-home.mjs",
@@ -636,7 +652,7 @@
     },
     {
       "path": "runtime/design/scripts/design-share.mjs",
-      "digest": "sha256:aaf6ff42d68340a27ded2afff52c65a88e524aa66dc06ec52190fb0b94edec29"
+      "digest": "sha256:76a313211315e67b1fc9a216ce5b4ae415f472a34216a059fdbb4c9870ae9db7"
     },
     {
       "path": "runtime/design/scripts/design-shared-artifact-support-dependencies-design-support-protocol-contracts-3d9b1a86.mjs",
@@ -708,7 +724,7 @@
     },
     {
       "path": "runtime/design/scripts/runtime/packages/design/package.json",
-      "digest": "sha256:4aff80438f5003c8ee683bb690d2499d3212631741c3cd4d5d519253603b12af"
+      "digest": "sha256:b3d397b4bb27c37799f143ee6a83c7000f3d1a38aba3e321778ed6cc8916d702"
     },
     {
       "path": "runtime/design/scripts/runtime/packages/design/templates/studio/enhancements.css",
@@ -724,7 +740,7 @@
     },
     {
       "path": "runtime/design/scripts/runtime/packages/design/templates/studio/share.js",
-      "digest": "sha256:3be9bf9b8810a1eed5b22f05af33721e6a50d2a814d3d4309d1592b386f80c4f"
+      "digest": "sha256:b388471dccec997c49ce9638ff9a312037d311d63cbe980dceeb9c3c02ca037b"
     },
     {
       "path": "runtime/design/scripts/runtime/packages/design/templates/studio/studio.css",
@@ -804,7 +820,7 @@
     },
     {
       "path": "runtime/design/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:ee9f53eadd37089605b4b94c927f3743334cbf147e295eb563aa84fb9b3134af"
+      "digest": "sha256:037b4f8f4fd2f1db03d5106ec974e250502d1a4ce39a018e668ab7e07d93de43"
     },
     {
       "path": "runtime/design/scripts/runtime/packages/protocol/registries/artifact-theme.json",
@@ -916,7 +932,7 @@
     },
     {
       "path": "runtime/plan/scripts/design.mjs",
-      "digest": "sha256:0a56528539c52e60bef50970bbfb8ccd761d66668ace739bd72b4c95e13cbe4a"
+      "digest": "sha256:d56e399ebb6a522e1b3a1aa82548334fd9137fc6573edfa2989d0dc5d3e3e4ab"
     },
     {
       "path": "runtime/plan/scripts/runtime/notices/THIRD_PARTY_NOTICES.txt",
@@ -924,12 +940,12 @@
     },
     {
       "path": "runtime/plan/scripts/runtime/packages/protocol/package.json",
-      "digest": "sha256:ee9f53eadd37089605b4b94c927f3743334cbf147e295eb563aa84fb9b3134af"
+      "digest": "sha256:037b4f8f4fd2f1db03d5106ec974e250502d1a4ce39a018e668ab7e07d93de43"
     },
     {
       "path": "runtime/plan/scripts/runtime/packages/protocol/schemas/v1.1.0/artifact-review.schema.json",
       "digest": "sha256:b4db7b75b694c2aef2a37be2128e4635302f3473e09236aa1f37a33dcf3590b4"
     }
   ],
-  "contentDigest": "sha256:b178a48f0973780cf2dd0bba6de066aa098aa709b03ad3f9fdbf8ddf37f0f605"
+  "contentDigest": "sha256:4c78d40a2139af7d2f90e73b16712070822c1ba9e08cdd0d18bf01daab75f421"
 }

package/lib/host-packages/cursor/openplanr/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "openplanr",
-  "version": "2.2641.1",
+  "version": "2.2641.2",
   "ruleCount": 28,
   "rules": [
     "rules/planr-artifact.mdc",

package/lib/host-packages/cursor/openplanr/rules/planr-artifact/references/diagram-sharing.md

@@ -13,7 +13,7 @@ review. Preview the exact diagram title, source revision, elements, connections,
 destination and retention before creating it. Use `--yes` only when the user has
 already authorized that publication. The stable URL and generated access token
 are separate; copy the token through the local studio's **Share diagram** dialog,
-never into a URL, prompt, ordinary output or repository file. Owner credentials
+never into a URL, prompt, ordinary output or repository file. Owner keys
 are saved privately outside the project. The review remains available until the
 owner revokes or deletes it and works while the local studio is stopped.
 

package/lib/host-packages/cursor/openplanr/rules/planr-artifact.mdc

@@ -29,7 +29,7 @@ relaunch the active coding agent from inside this skill.
    preserve existing guidance and never invent requirements. Render and inspect
    the updated context before sharing. For a design document this creates a permanent encrypted
    design review with a stable URL and a separately entered generated access
-   token. Owner credentials save privately outside the project; copy the reviewer
+   token. Owner keys save privately outside the project; copy the reviewer
    token through the studio's Share dialog, never put it in a URL or ordinary
    command output. Publish an explicitly requested update with
    `openplanr artifact publish <design-document.json>`; synchronize reviewer feedback
@@ -66,7 +66,7 @@ separate permissions and storage from encrypted token shares.
 
 Lead with what was opened, shared, imported or exported and the confirmed revision
 or session. Link the actual review URL or exported file; never print capability
-tokens or private owner credentials. Distinguish successful service operations
+tokens or private owner keys. Distinguish successful service operations
 from preparation and browser verification from validation alone. For partial or
 blocked work, name the remaining step and exact retry or recovery action, retaining
 the useful local result. Keep detailed diagnostics in their existing records;

package/lib/host-packages/cursor/openplanr/rules/planr-ceo-review/references/operate-advisor-contract.md

@@ -1,8 +1,8 @@
 # Shared Operate advisor contract
 
-This contract supplies the common context method and output shape for the five executive advisor
-skills. The invoking skill supplies the lens, review questions, useful sources, and decision
-standard. Follow both.
+This contract supplies the common context method and output shape for the executive advisor
+skills (CEO, CTO, CPO, CMO, and COO). The invoking skill supplies the lens, review questions,
+useful sources, and decision standard. Follow both.
 
 ## Outcome
 
@@ -21,7 +21,28 @@ not the whole context boundary. Inspect relevant original repository and Git sou
 drawing conclusions. If an input is unavailable, report the exact problem and continue when the
 remaining context still supports a useful note.
 
-Write the review only to `<output-path>`.
+Write the review only to `<output-path>`. Writes follow the host's normal permission rules; this
+skill pre-approves nothing.
+
+### Running without `planr-operate`
+
+When no `<output-path>` was supplied, this lens creates the cycle itself, in the layout
+`planr-operate` uses, under the repository root:
+
+```text
+.planr/operate/<YYYY-MM-DD>-<subject-slug>/
+  cycle.md          the request wording, the effective scope, and a one-lens roster
+  brief.md          compact orientation for this lens only, including what was searched for and not found
+  <lens>.md         this note: ceo.md, cto.md, cpo.md, cmo.md, or coo.md
+  board-report.md   an unsynthesized lens summary
+```
+
+Take the subject, window, and requested decision from the request. Use the first unused directory
+name; append `-02`, `-03`, and so on when the base name exists. In `board-report.md`, use the
+`planr-operate` report sections, mark this lens `reported` and every other lens `omitted by scope`
+under Review coverage, and write `No decision-ready proposal was established.` and
+`No proposed actions.` unless this note states a directly supported proposal. Write nothing outside
+that cycle directory. The dashboard lists a cycle only when `board-report.md` exists.
 
 ## Grounding
 

package/lib/host-packages/cursor/openplanr/rules/planr-chair-review.mdc

@@ -16,7 +16,12 @@ and its decision impact; continue when the remaining notes still support useful
 selected roster from the scope or brief and label an intentionally unselected lens `omitted by
 scope`; do not turn that omission into an issue or decision-changing gap.
 
-Write only `<output-path>`.
+Write only `<output-path>`. Writes follow the host's normal permission rules; this skill
+pre-approves nothing.
+
+Invoked without `<cycle-dir>`, offer the most recent cycle under `.planr/operate/` that holds
+advisor notes and use its `chair.md` as the output path. When there is none, say so and point to
+`planr-operate`; never create an empty cycle.
 
 ## Synthesis standard
 

package/lib/host-packages/cursor/openplanr/rules/planr-challenger-review.mdc

@@ -16,7 +16,12 @@ Use `<cycle-dir>`, `<brief-path>`, `<output-path>`, and `<scope>`. Inspect the a
 is `omitted by scope`, not unavailable, and creates no gap by itself. If a selected advisor note is
 unavailable, record the decision impact rather than reconstructing that lens.
 
-Write only `<output-path>`.
+Write only `<output-path>`. Writes follow the host's normal permission rules; this skill
+pre-approves nothing.
+
+Invoked without `<cycle-dir>`, offer the most recent cycle under `.planr/operate/` that holds
+advisor notes and use its `challenger.md` as the output path. When there is none, say so and point
+to `planr-operate`; never create an empty cycle.
 
 ## Material exceptions
 

package/lib/host-packages/cursor/openplanr/rules/planr-cmo-review/references/operate-advisor-contract.md

@@ -1,8 +1,8 @@
 # Shared Operate advisor contract
 
-This contract supplies the common context method and output shape for the five executive advisor
-skills. The invoking skill supplies the lens, review questions, useful sources, and decision
-standard. Follow both.
+This contract supplies the common context method and output shape for the executive advisor
+skills (CEO, CTO, CPO, CMO, and COO). The invoking skill supplies the lens, review questions,
+useful sources, and decision standard. Follow both.
 
 ## Outcome
 
@@ -21,7 +21,28 @@ not the whole context boundary. Inspect relevant original repository and Git sou
 drawing conclusions. If an input is unavailable, report the exact problem and continue when the
 remaining context still supports a useful note.
 
-Write the review only to `<output-path>`.
+Write the review only to `<output-path>`. Writes follow the host's normal permission rules; this
+skill pre-approves nothing.
+
+### Running without `planr-operate`
+
+When no `<output-path>` was supplied, this lens creates the cycle itself, in the layout
+`planr-operate` uses, under the repository root:
+
+```text
+.planr/operate/<YYYY-MM-DD>-<subject-slug>/
+  cycle.md          the request wording, the effective scope, and a one-lens roster
+  brief.md          compact orientation for this lens only, including what was searched for and not found
+  <lens>.md         this note: ceo.md, cto.md, cpo.md, cmo.md, or coo.md
+  board-report.md   an unsynthesized lens summary
+```
+
+Take the subject, window, and requested decision from the request. Use the first unused directory
+name; append `-02`, `-03`, and so on when the base name exists. In `board-report.md`, use the
+`planr-operate` report sections, mark this lens `reported` and every other lens `omitted by scope`
+under Review coverage, and write `No decision-ready proposal was established.` and
+`No proposed actions.` unless this note states a directly supported proposal. Write nothing outside
+that cycle directory. The dashboard lists a cycle only when `board-report.md` exists.
 
 ## Grounding
 

package/lib/host-packages/cursor/openplanr/rules/planr-coo-review/references/operate-advisor-contract.md

@@ -1,8 +1,8 @@
 # Shared Operate advisor contract
 
-This contract supplies the common context method and output shape for the five executive advisor
-skills. The invoking skill supplies the lens, review questions, useful sources, and decision
-standard. Follow both.
+This contract supplies the common context method and output shape for the executive advisor
+skills (CEO, CTO, CPO, CMO, and COO). The invoking skill supplies the lens, review questions,
+useful sources, and decision standard. Follow both.
 
 ## Outcome
 
@@ -21,7 +21,28 @@ not the whole context boundary. Inspect relevant original repository and Git sou
 drawing conclusions. If an input is unavailable, report the exact problem and continue when the
 remaining context still supports a useful note.
 
-Write the review only to `<output-path>`.
+Write the review only to `<output-path>`. Writes follow the host's normal permission rules; this
+skill pre-approves nothing.
+
+### Running without `planr-operate`
+
+When no `<output-path>` was supplied, this lens creates the cycle itself, in the layout
+`planr-operate` uses, under the repository root:
+
+```text
+.planr/operate/<YYYY-MM-DD>-<subject-slug>/
+  cycle.md          the request wording, the effective scope, and a one-lens roster
+  brief.md          compact orientation for this lens only, including what was searched for and not found
+  <lens>.md         this note: ceo.md, cto.md, cpo.md, cmo.md, or coo.md
+  board-report.md   an unsynthesized lens summary
+```
+
+Take the subject, window, and requested decision from the request. Use the first unused directory
+name; append `-02`, `-03`, and so on when the base name exists. In `board-report.md`, use the
+`planr-operate` report sections, mark this lens `reported` and every other lens `omitted by scope`
+under Review coverage, and write `No decision-ready proposal was established.` and
+`No proposed actions.` unless this note states a directly supported proposal. Write nothing outside
+that cycle directory. The dashboard lists a cycle only when `board-report.md` exists.
 
 ## Grounding
 

package/lib/host-packages/cursor/openplanr/rules/planr-cpo-review/references/operate-advisor-contract.md

@@ -1,8 +1,8 @@
 # Shared Operate advisor contract
 
-This contract supplies the common context method and output shape for the five executive advisor
-skills. The invoking skill supplies the lens, review questions, useful sources, and decision
-standard. Follow both.
+This contract supplies the common context method and output shape for the executive advisor
+skills (CEO, CTO, CPO, CMO, and COO). The invoking skill supplies the lens, review questions,
+useful sources, and decision standard. Follow both.
 
 ## Outcome
 
@@ -21,7 +21,28 @@ not the whole context boundary. Inspect relevant original repository and Git sou
 drawing conclusions. If an input is unavailable, report the exact problem and continue when the
 remaining context still supports a useful note.
 
-Write the review only to `<output-path>`.
+Write the review only to `<output-path>`. Writes follow the host's normal permission rules; this
+skill pre-approves nothing.
+
+### Running without `planr-operate`
+
+When no `<output-path>` was supplied, this lens creates the cycle itself, in the layout
+`planr-operate` uses, under the repository root:
+
+```text
+.planr/operate/<YYYY-MM-DD>-<subject-slug>/
+  cycle.md          the request wording, the effective scope, and a one-lens roster
+  brief.md          compact orientation for this lens only, including what was searched for and not found
+  <lens>.md         this note: ceo.md, cto.md, cpo.md, cmo.md, or coo.md
+  board-report.md   an unsynthesized lens summary
+```
+
+Take the subject, window, and requested decision from the request. Use the first unused directory
+name; append `-02`, `-03`, and so on when the base name exists. In `board-report.md`, use the
+`planr-operate` report sections, mark this lens `reported` and every other lens `omitted by scope`
+under Review coverage, and write `No decision-ready proposal was established.` and
+`No proposed actions.` unless this note states a directly supported proposal. Write nothing outside
+that cycle directory. The dashboard lists a cycle only when `board-report.md` exists.
 
 ## Grounding
 

package/lib/host-packages/cursor/openplanr/rules/planr-cto-review/references/operate-advisor-contract.md

@@ -1,8 +1,8 @@
 # Shared Operate advisor contract
 
-This contract supplies the common context method and output shape for the five executive advisor
-skills. The invoking skill supplies the lens, review questions, useful sources, and decision
-standard. Follow both.
+This contract supplies the common context method and output shape for the executive advisor
+skills (CEO, CTO, CPO, CMO, and COO). The invoking skill supplies the lens, review questions,
+useful sources, and decision standard. Follow both.
 
 ## Outcome
 
@@ -21,7 +21,28 @@ not the whole context boundary. Inspect relevant original repository and Git sou
 drawing conclusions. If an input is unavailable, report the exact problem and continue when the
 remaining context still supports a useful note.
 
-Write the review only to `<output-path>`.
+Write the review only to `<output-path>`. Writes follow the host's normal permission rules; this
+skill pre-approves nothing.
+
+### Running without `planr-operate`
+
+When no `<output-path>` was supplied, this lens creates the cycle itself, in the layout
+`planr-operate` uses, under the repository root:
+
+```text
+.planr/operate/<YYYY-MM-DD>-<subject-slug>/
+  cycle.md          the request wording, the effective scope, and a one-lens roster
+  brief.md          compact orientation for this lens only, including what was searched for and not found
+  <lens>.md         this note: ceo.md, cto.md, cpo.md, cmo.md, or coo.md
+  board-report.md   an unsynthesized lens summary
+```
+
+Take the subject, window, and requested decision from the request. Use the first unused directory
+name; append `-02`, `-03`, and so on when the base name exists. In `board-report.md`, use the
+`planr-operate` report sections, mark this lens `reported` and every other lens `omitted by scope`
+under Review coverage, and write `No decision-ready proposal was established.` and
+`No proposed actions.` unless this note states a directly supported proposal. Write nothing outside
+that cycle directory. The dashboard lists a cycle only when `board-report.md` exists.
 
 ## Grounding
 

package/lib/host-packages/cursor/openplanr/rules/planr-delegate/references/capsule-contract.md

@@ -39,7 +39,22 @@ The JSON object has `kind: "openplanr-delegation-context-capsule"`, `schemaVersi
 
 The capsule file is created exclusively in a fresh private directory with directory mode `0700` and file mode `0600`. The source checkout is never a valid output location, even through a symlink. The orchestrator owns retention and cleanup. It should not log the capsule, source bytes, environment values, or full prompts.
 
-Known secret paths and literal credential values are rejected when required, or recorded as excluded when optional. Function calls and ordinary references such as `readArtifactSecretInput(inputPath)` or `process.env.GITHUB_TOKEN` are source code, not credential values. Complete dummy literals such as `mock-access-token` are allowed; recognizable credential formats and credential file paths remain blocked, including in test fixtures. A source named by the user or task requirements is required and cannot be downgraded to an optional omission after a guard failure. The preview shows optional omissions separately from blockers and gives both logical and physical `.planr` locations when planning is linked to another checkout. Planning content is task context, not permission for extra commands or automatic planning updates. These checks are conservative guards, not a claim that arbitrary repository data is safe to send to any destination. The orchestrator still previews the inventory and verifies profile destination before dispatch. No profile, token, environment, or execution permission field belongs in this contract.
+Known secret paths and credential values are rejected when required, or recorded as excluded when optional:
+
+- Recognizable credential formats, private keys and credential file paths are always rejected, including in tests and inside placeholder text.
+- A credential-named key such as `apiKey`, `client_secret` or `PASSWORD` assigned a literal of 16 or more characters is a possible credential unless the literal is a placeholder: `example-…`, `placeholder-…`, `your-…`, `change-me…`, `replace-me…`, or a lowercase marker (`test`, `mock`, `fake`, `dummy`, `fixture`, `synthetic`, `never-return`) followed by words and short numbers that include `secret`, `key`, `token`, `password` or `credential`, singular or plural.
+- An unquoted value is a literal in configuration files (`.env`, YAML, TOML, INI, JSON, shell), in a free-text `=` assignment, and in a shell or env line (`export NAME=…`, or an uppercase `NAME=value` without spaces that does not end in `,`) in any file.
+- Elsewhere, an identifier such as `TIssueToken;` is a reference only when it ends in `,` or `;`, and a member path such as `config!.apiKey` only in a code file or when it ends in `,` or `;`. A link is read as its target's syntax, or as configuration when either path is a configuration file.
+- Environment lookups, function calls and template interpolation are source code. Any other value counts as a possible credential.
+
+Findings and resolutions:
+
+- A blocked source or request lists masked findings in `details.findings` with the exact `contentDigest`. Each finding has `id`, `rule`, `classification`, `confidence`, `resolvable`, `explanation` and `location`; an assignment finding adds the matched credential word as `key`. No finding carries the value.
+- The prepare preview shows the findings and digest of an optional omission. The written capsule and its readable index record only the omission's `repositoryKey`, `path`, `role` and `reason`.
+- After the user confirms that a resolvable finding is not a credential, pass `credentialResolutions: [{ id, contentDigest }]` to `prepare`. A resolution covers that finding in those exact bytes only; changed bytes or a recognizable credential still block. Findings in corrections, answers and results are not resolvable.
+- Applied resolutions are recorded in the private capsule and its preview as `credentialResolutions`, never in the repository or worktree. No switch disables these checks.
+
+A source named by the user or task requirements is required and cannot be downgraded to an optional omission after a guard failure. The preview shows optional omissions separately from blockers and gives both logical and physical `.planr` locations when planning is linked to another checkout. Planning content is task context, not permission for extra commands or automatic planning updates. These checks are conservative guards, not a claim that arbitrary repository data is safe to send to any destination. The orchestrator still previews the inventory and verifies profile destination before dispatch. No profile, token, environment, or execution permission field belongs in this contract.
 
 `CapsuleError.code` is stable for callers. `details` can include non-secret paths, searched locations, and candidates; errors never include source bytes. Applicable codes include `E_CAPSULE_SELECTOR`, `E_CAPSULE_AMBIGUOUS`, `E_CAPSULE_NOT_FOUND`, `E_CAPSULE_LINK`, `E_CAPSULE_FRONTMATTER`, `E_CAPSULE_LIMIT`, `E_CAPSULE_UNREADABLE`, `E_CAPSULE_SECRET`, `E_CAPSULE_PATH`, `E_CAPSULE_SOURCE`, `E_CAPSULE_INPUT`, `E_CAPSULE_FORMAT`, and `E_CAPSULE_OUTPUT`.
 

package/lib/host-packages/cursor/openplanr/rules/planr-delegate/references/operator-guide.md

@@ -100,11 +100,13 @@ for a new native v2 run; retained runs still use their original pinned helper an
 policy. Saving over a legacy native profile is refused; use a new optional name.
 Experimental generic adapters retain their versioned enrollment/protocol.
 
-Local server/model/authentication probes are diagnostic and send no task content.
-They use bounded, authenticated read-only model metadata requests; model load
-state is reported only when the backend exposes it. They never load a model or
-submit a completion automatically. An unsupported metadata endpoint remains
-unverified rather than proof that native execution cannot work.
+Local server/model probes are diagnostic and send no task content and no
+credentials. They use bounded read-only model metadata requests; model load
+state is reported only when the backend exposes it. A server that requires
+sign-in is reported as not checked; the delegated CLI still signs in with its own
+configuration. Probes never load a model or submit a completion automatically. An
+unsupported metadata endpoint remains unverified rather than proof that native
+execution cannot work.
 Template failures require fixing the backend itself. OpenPlanr does not rewrite
 messages/templates, load models automatically or silently change providers.
 When changing a local model, use the exact model ID advertised by that backend;