planr 1.4.0 → 1.5.0

package/docs/PRESET_REGISTRY.md

@@ -1,61 +0,0 @@
-# Preset Registry
-
-Planr's registry is an optional distribution boundary, never a runtime dependency. Active projects keep using their repository-local `.planr/policy.toml`, `.planr/agents.toml`, and preset lock when the registry is unavailable. Previously imported packs remain available under `.planr/registry/cache/` for deterministic offline use.
-
-## Trust and integrity
-
-A schema-v1 registry manifest identifies a registry version and one or more versioned entries. Each entry declares:
-
-- kind (`policy`, `host-binding`, or `pack`), lifecycle (`published`, `deprecated`, or `revoked`), and evaluation status;
-- Planr version bounds and compatible hosts;
-- verification and review timestamps, a verification artifact, and optional replacement/revocation metadata;
-- for `verified` or `recommended` entries, the exact policy, binding, and evaluation-suite ids and versions covered by that evidence;
-- the normalized path, declarative kind, byte length, and SHA-256 digest of every artifact;
-- an optional Ed25519 signature.
-
-Signatures do not establish their own trust. Planr verifies them only against keys provisioned separately in `.planr/registry/trusted-maintainers.toml` (or an explicitly selected trust store):
-
-```toml
-schema_version = 1
-
-[[maintainers]]
-id = "planr-maintainers"
-public_key = "<64 hexadecimal Ed25519 public-key characters>"
-revoked = false
-```
-
-An unsigned pack can be checksum-verified, but a manifest's `recommended` claim is demoted to `verified` unless a non-revoked pinned maintainer signature verifies. A trusted signature is necessary but not sufficient: Planr also re-runs canonical policy/binding composition and safe-artifact validation, binds the shipped bytes to the current built-in evaluation inputs, and validates the current suite/task provenance. Candidate metrics and threshold gates are derived again from the task results; result hashes, task-oracle coverage, the canonical Codex dispatch contract, trusted route/metering evidence, and the report recommendation record must all agree before `recommended` survives. A merely signed status label or stale suite therefore cannot promote an entry.
-
-Invalid signatures, revoked entries/signers, incompatible Planr/host constraints, checksum/size mismatches, traversal, symlinks, binary or executable content, secret-like content, semantically invalid bindings, and malformed declarative artifacts fail closed. Every registry policy, including an `experimental` entry without evaluation metadata, uses the same public-distribution safety check: commands, hooks, environment grants, network/MCP access, secret references, and overwrite permission are rejected. Manifest ids, versions, hosts, references, reasons, paths, and signer metadata are screened field-by-field for secret-like values before they can reach diagnostics; public keys and signature bytes are shape-validated but deliberately not classified as secrets. Stale verification or deprecation remains visible and removes recommendation.
-
-## Verification and offline import
-
-Remote retrieval is deliberately outside the command. Downloading a manifest and its content is an explicit operator action; Planr then verifies local inputs:
-
-```sh
-planr agents preset registry verify registry.toml \
-  --entry balanced-codex \
-  --content-root ./download \
-  --host codex
-```
-
-`--host` may be omitted only for entries whose `compatible_hosts` list is empty. A constrained entry with no explicit host fails closed.
-
-Import is preview-first. The preview lists exactly the manifest-declared files and deterministic cache target. `--confirm` copies only those verified files into a manifest-hash-addressed immutable directory and atomically stores both the original registry manifest and a cache receipt:
-
-```sh
-planr agents preset registry import registry.toml \
-  --entry balanced-codex \
-  --content-root ./download \
-  --host codex
-
-planr agents preset registry import registry.toml \
-  --entry balanced-codex \
-  --content-root ./download \
-  --host codex \
-  --confirm
-```
-
-`planr agents preset registry list` requires no source manifest or network. The mutable receipt is inventory metadata, not a checksum or trust authority. Every read binds the cache path to the stored manifest hash, re-verifies the original manifest and maintainer signature against the repository trust store, compares receipt inventory with the manifest, and recomputes artifact sizes and hashes from the manifest. Coordinated edits to content and receipt therefore remain detectable. The command reports `current` or `stale` freshness from the review timestamp and marks malformed or tampered cache entries unusable. Extra source files are never imported.
-
-The equivalent MCP tools are `planr_preset_registry_verify`, `planr_preset_registry_import`, and `planr_preset_registry_list`. MCP import also previews unless `confirm` is true.

package/evaluations/preset-suite-v1.toml

@@ -1,127 +0,0 @@
-schema_version = 1
-id = "planr-preset-suite"
-version = "1.8.0"
-verified_at_unix = 1783987200
-expires_at_unix = 1815523200
-
-[thresholds]
-minimum_runs = 7
-minimum_quality_score_bps = 8500
-minimum_reliability_bps = 9000
-maximum_average_credits_micros = 1200000
-maximum_p95_latency_ms = 5000
-maximum_transition_contract_failures = 0
-maximum_safety_stop_failures = 0
-require_verified_routes = true
-require_result_hashes = true
-
-[[candidates]]
-id = "balanced-codex-openai"
-policy = "balanced"
-binding = "codex-openai"
-
-[[candidates]]
-id = "low-usage-codex-openai"
-policy = "low-usage"
-binding = "codex-openai"
-
-[[candidates]]
-id = "max-quality-codex-openai"
-policy = "max-quality"
-binding = "codex-openai"
-
-[[candidates]]
-id = "read-only-audit-codex-openai"
-policy = "read-only-audit"
-binding = "codex-openai"
-
-[[tasks]]
-id = "explore-routing-boundaries"
-version = "1.0.0"
-kind = "exploration"
-objective = "Inspect policy and host routing boundaries without mutation."
-input = "inspect-routing-boundaries"
-artifact_kind = "inspection_manifest"
-expected_output = "routing-boundaries-inspected"
-work_units = 8
-transition = "retry"
-requires_write = false
-minimum_tool_budget = 1
-
-[[tasks]]
-id = "implement-bounded-policy-change"
-version = "1.0.0"
-kind = "implementation"
-objective = "Implement a bounded policy change and preserve verification evidence."
-input = "implement-bounded-policy-change"
-artifact_kind = "patch_manifest"
-expected_output = "bounded-policy-change-implemented"
-work_units = 14
-transition = "quality_escalation"
-requires_write = true
-minimum_tool_budget = 80
-
-[[tasks]]
-id = "mechanical-schema-rewrite"
-version = "1.0.0"
-kind = "mechanical"
-objective = "Apply a deterministic schema rewrite across owned files."
-input = "rewrite-owned-schema"
-artifact_kind = "rewrite_manifest"
-expected_output = "owned-schema-rewritten"
-work_units = 11
-transition = "availability_fallback"
-requires_write = true
-minimum_tool_budget = 80
-
-[[tasks]]
-id = "browser-report-smoke"
-version = "1.0.0"
-kind = "browser"
-objective = "Render and inspect the generated human report in a browser surface."
-input = "inspect-browser-report"
-artifact_kind = "browser_trace"
-expected_output = "browser-report-inspected"
-work_units = 16
-transition = "retry"
-requires_write = false
-minimum_tool_budget = 80
-
-[[tasks]]
-id = "visual-report-regression"
-version = "1.0.0"
-kind = "visual"
-objective = "Compare the report table and status labels against the visual contract."
-input = "compare-visual-report"
-artifact_kind = "visual_diff"
-expected_output = "visual-contract-matched"
-work_units = 13
-transition = "quality_escalation"
-requires_write = false
-minimum_tool_budget = 80
-
-[[tasks]]
-id = "security-safety-stop"
-version = "1.0.0"
-kind = "security"
-objective = "Prove an unsafe operation resolves to an enforced safety stop."
-input = "attempt-unsafe-operation"
-artifact_kind = "safety_receipt"
-expected_output = "unsafe-operation-stopped"
-work_units = 9
-transition = "safety_stop"
-requires_write = false
-minimum_tool_budget = 1
-
-[[tasks]]
-id = "subagent-sol-luna-dispatch"
-version = "1.0.0"
-kind = "subagent"
-objective = "Verify Sol/Luna cross-tier dispatch and effective route evidence."
-input = "dispatch-sol-luna-worker"
-artifact_kind = "dispatch_trace"
-expected_output = "sol-luna-dispatch-verified"
-work_units = 12
-transition = "availability_fallback"
-requires_write = false
-minimum_tool_budget = 1

package/evaluations/sol-luna-codex-v1.toml

@@ -1,42 +0,0 @@
-schema_version = 1
-id = "sol-luna-codex"
-version = "1.0.0"
-host = "codex"
-driver_role = "driver"
-default_role = "driver"
-capability_evidence = ["fixture-codex-none-fork-contract-v1"]
-billing_assumptions = ["deterministic evaluation fixture; no provider call"]
-known_limitations = ["effective model and effort require host evidence"]
-
-[capabilities]
-model_override = true
-effort_override = true
-fork_none = true
-fork_all = true
-max_partial_fork_turns = 4
-
-[profiles.driver]
-profile = "sol"
-client = "codex"
-model = "gpt-5.5"
-effort = "xhigh"
-cost_tier = "premium"
-
-[profiles.worker]
-profile = "luna"
-client = "codex"
-model = "gpt-5.4-mini"
-effort = "high"
-cost_tier = "standard"
-skill = "planr-work"
-fork_turns = { mode = "none" }
-
-[[routes]]
-work_type = "code"
-role = "worker"
-fallback_roles = ["driver"]
-
-[verification]
-id = "fixture-sol-luna-v1"
-verified_at_unix = 1783987200
-max_age_seconds = 31536000

package/plugins/planr/skills/planr-loop/agents/planr-reviewer.toml

@@ -1,23 +0,0 @@
-# Copy to .codex/agents/planr-reviewer.toml (project) or ~/.codex/agents/ (user).
-# Adjust the skill path to where the Planr skills are installed.
-name = "planr_reviewer"
-description = "Independent findings-first reviewer for one Planr item. Audits evidence and closes the review with a verdict."
-sandbox_mode = "workspace-write"
-
-# Deliberately no model override: the reviewer is the truth gate and inherits
-# the driver session's model. Make workers cheap, not the verdict.
-
-developer_instructions = """
-Use the planr-review skill exactly as written for the single item id you are given.
-You did not write this code; audit it like an owner. Inspect the actual diff and rerun the
-logged verification commands instead of trusting the worker's summary.
-Close the review with `planr review close <review-id> --verdict ... --reviewer <your-id>` and
-always pass `--reviewer` explicitly (e.g. `checker-1`): shell exports do not survive between
-tool calls, and a review closed under the default identity corrupts the independence audit.
-Findings must be specific and actionable. Do not edit implementation files; your only writes
-are planr review commands.
-"""
-
-[[skills.config]]
-path = "~/.codex/skills/planr-review/SKILL.md"
-enabled = true

package/plugins/planr/skills/planr-loop/agents/planr-worker.toml

@@ -1,21 +0,0 @@
-# Copy to .codex/agents/planr-worker.toml (project) or ~/.codex/agents/ (user).
-# Adjust the skill path to where the Planr skills are installed.
-name = "planr_worker"
-description = "Implements exactly one picked Planr map item to evidence-backed completion, then requests review and stops."
-
-# Cost tiering: the pick packet bounds the worker's scope, so it can run on a
-# lower effort tier than the driver session. Verify the pin took effect after
-# the first spawn (some Codex versions ignore custom agent files on spawn —
-# openai/codex#26868); see docs/GOALS.md "Cost Tiering" for the smoke test.
-model = "gpt-5.5"
-model_reasoning_effort = "medium"
-
-developer_instructions = """
-Use the planr-work skill exactly as written for the single item id you are given.
-Implement only that item. Log changed files and the real verification commands you ran.
-Request review with `planr review request <item-id>` and stop. Never close reviews or items yourself.
-"""
-
-[[skills.config]]
-path = "~/.codex/skills/planr-work/SKILL.md"
-enabled = true

package/presets/bindings/claude-native.toml

@@ -1,52 +0,0 @@
-schema_version = 1
-id = "claude-native"
-version = "1.0.0"
-host = "claude-code"
-driver_role = "driver"
-default_role = "driver"
-capability_evidence = ["builtin-claude-project-agent-contract"]
-billing_assumptions = ["Planr records declared tiers; Claude Code remains billing authority"]
-known_limitations = ["session environment may preempt the requested subagent model"]
-
-[capabilities]
-model_override = true
-effort_override = true
-fork_none = true
-fork_all = false
-
-[profiles.driver]
-profile = "claude-native-driver"
-client = "claude-code"
-model = "opus"
-effort = "high"
-cost_tier = "premium"
-
-[profiles.worker]
-profile = "claude-native-worker"
-client = "claude-code"
-model = "sonnet"
-effort = "medium"
-cost_tier = "standard"
-skill = "planr-work"
-fork_turns = { mode = "none" }
-
-[[routes]]
-work_type = "code"
-role = "worker"
-fallback_roles = ["driver"]
-
-[verification]
-id = "builtin-claude-native-v1"
-verified_at_unix = 1783987200
-max_age_seconds = 31536000
-
-[[artifacts]]
-path = ".claude/agents/planr-preset-worker.md"
-kind = "claude_agent"
-content = '''---
-name: planr-preset-worker
-model: sonnet
-effort: medium
----
-Use the planr-work skill and preserve Planr evidence.
-'''

package/presets/bindings/codex-openai.toml

@@ -1,56 +0,0 @@
-schema_version = 1
-id = "codex-openai"
-version = "1.0.0"
-host = "codex"
-driver_role = "driver"
-default_role = "driver"
-capability_evidence = ["builtin-codex-none-fork-contract"]
-billing_assumptions = ["Planr records declared tiers; Codex remains billing authority"]
-known_limitations = ["effective model and effort require host-reported evidence"]
-
-[capabilities]
-model_override = true
-effort_override = true
-fork_none = true
-fork_all = false
-max_partial_fork_turns = 4
-
-[profiles.driver]
-profile = "codex-openai-driver"
-client = "codex"
-model = "gpt-5.5"
-effort = "xhigh"
-cost_tier = "premium"
-
-[profiles.worker]
-profile = "codex-openai-worker"
-client = "codex"
-model = "gpt-5.4-mini"
-effort = "high"
-cost_tier = "standard"
-skill = "planr-work"
-fork_turns = { mode = "none" }
-
-[[routes]]
-work_type = "code"
-role = "worker"
-fallback_roles = ["driver"]
-
-[verification]
-id = "builtin-codex-openai-v1"
-verified_at_unix = 1783987200
-max_age_seconds = 31536000
-
-[[artifacts]]
-path = ".codex/agents/planr-preset-worker.toml"
-kind = "codex_agent"
-content = '''name = "planr_preset_worker"
-description = "Implements one picked Planr map item with evidence-backed handoff."
-model = "gpt-5.4-mini"
-model_reasoning_effort = "high"
-sandbox_mode = "workspace-write"
-
-developer_instructions = """
-Use the planr-work skill for exactly one picked item. Preserve the task scope, record changed files and real verification commands, request review, and stop.
-"""
-'''

package/presets/bindings/cursor-fable-grok.toml

@@ -1,49 +0,0 @@
-schema_version = 1
-id = "cursor-fable-grok"
-version = "1.0.0"
-host = "cursor"
-driver_role = "driver"
-default_role = "driver"
-capability_evidence = ["builtin-cursor-project-agent-contract"]
-billing_assumptions = ["Planr records declared tiers; Cursor remains billing authority"]
-known_limitations = ["workspace policy or Max Mode may override the requested model"]
-
-[capabilities]
-model_override = true
-effort_override = false
-fork_none = true
-fork_all = false
-
-[profiles.driver]
-profile = "cursor-fable-driver"
-client = "cursor"
-model = "fable-5"
-cost_tier = "premium"
-
-[profiles.worker]
-profile = "cursor-grok-worker"
-client = "cursor"
-model = "grok-code-fast-1"
-cost_tier = "standard"
-skill = "planr-work"
-fork_turns = { mode = "none" }
-
-[[routes]]
-work_type = "code"
-role = "worker"
-fallback_roles = ["driver"]
-
-[verification]
-id = "builtin-cursor-fable-grok-v1"
-verified_at_unix = 1783987200
-max_age_seconds = 31536000
-
-[[artifacts]]
-path = ".cursor/agents/planr-preset-worker.md"
-kind = "cursor_agent"
-content = '''---
-name: planr-preset-worker
-model: grok-code-fast-1
----
-Use the planr-work skill and preserve Planr evidence.
-'''

package/presets/bindings/cursor-openai.toml

@@ -1,49 +0,0 @@
-schema_version = 1
-id = "cursor-openai"
-version = "1.0.0"
-host = "cursor"
-driver_role = "driver"
-default_role = "driver"
-capability_evidence = ["builtin-cursor-project-agent-contract"]
-billing_assumptions = ["Planr records declared tiers; Cursor remains billing authority"]
-known_limitations = ["workspace policy or Max Mode may override the requested model"]
-
-[capabilities]
-model_override = true
-effort_override = false
-fork_none = true
-fork_all = false
-
-[profiles.driver]
-profile = "cursor-openai-driver"
-client = "cursor"
-model = "gpt-5.5"
-cost_tier = "premium"
-
-[profiles.worker]
-profile = "cursor-openai-worker"
-client = "cursor"
-model = "gpt-5.4-mini"
-cost_tier = "standard"
-skill = "planr-work"
-fork_turns = { mode = "none" }
-
-[[routes]]
-work_type = "code"
-role = "worker"
-fallback_roles = ["driver"]
-
-[verification]
-id = "builtin-cursor-openai-v1"
-verified_at_unix = 1783987200
-max_age_seconds = 31536000
-
-[[artifacts]]
-path = ".cursor/agents/planr-preset-worker.md"
-kind = "cursor_agent"
-content = '''---
-name: planr-preset-worker
-model: gpt-5.4-mini
----
-Use the planr-work skill and preserve Planr evidence.
-'''

package/presets/bindings/mixed-host.toml

@@ -1,64 +0,0 @@
-schema_version = 1
-id = "mixed-host"
-version = "1.0.0"
-host = "mixed-host"
-driver_role = "driver"
-default_role = "driver"
-capability_evidence = ["builtin-explicit-cross-client-contract"]
-billing_assumptions = ["Each host remains authoritative for its own billing and availability"]
-known_limitations = ["effective model evidence must be collected independently from each host"]
-
-[capabilities]
-model_override = true
-effort_override = true
-fork_none = true
-fork_all = false
-
-[profiles.driver]
-profile = "mixed-cursor-driver"
-client = "cursor"
-model = "fable-5"
-cost_tier = "premium"
-
-[profiles.worker]
-profile = "mixed-codex-worker"
-client = "codex"
-model = "gpt-5.4-mini"
-effort = "high"
-cost_tier = "standard"
-skill = "planr-work"
-fork_turns = { mode = "none" }
-
-[[routes]]
-work_type = "code"
-role = "worker"
-fallback_roles = ["driver"]
-
-[verification]
-id = "builtin-mixed-host-v1"
-verified_at_unix = 1783987200
-max_age_seconds = 31536000
-
-[[artifacts]]
-path = ".cursor/agents/planr-preset-driver.md"
-kind = "cursor_agent"
-content = '''---
-name: planr-preset-driver
-model: fable-5
----
-Drive the Planr map and keep final verdict ownership.
-'''
-
-[[artifacts]]
-path = ".codex/agents/planr-preset-worker.toml"
-kind = "codex_agent"
-content = '''name = "planr_preset_worker"
-description = "Implements one picked Planr map item with evidence-backed handoff."
-model = "gpt-5.4-mini"
-model_reasoning_effort = "high"
-sandbox_mode = "workspace-write"
-
-developer_instructions = """
-Use the planr-work skill for exactly one picked item. Preserve the task scope, record changed files and real verification commands, request review, and stop.
-"""
-'''

package/presets/policies/balanced.toml

@@ -1,50 +0,0 @@
-schema_version = 1
-id = "balanced"
-version = "1.0.0"
-
-[usage]
-max_active_agents = 3
-max_parallel_readers = 2
-max_parallel_writers = 1
-max_depth = 1
-max_attempts = 4
-max_wall_time_seconds = 3600
-max_tool_calls = 120
-review_reserve_percent = 20
-budget_exhaustion = "stop"
-metering = "estimated"
-
-[transitions.retry]
-max_same_route_retries = 1
-
-[transitions.availability_fallback]
-max_fallbacks = 1
-require_same_capability_class = true
-
-[transitions.quality_escalation]
-max_escalations = 1
-require_verification_evidence = true
-
-[transitions.quota_downgrade]
-enabled = false
-max_downgrades = 0
-noncritical_only = true
-
-[transitions.safety_stop]
-enabled = true
-
-[materiality]
-changed_files_threshold = 10
-changed_lines_threshold = 500
-
-[execution]
-max_read_scope_entries = 8
-max_write_scope_entries = 4
-
-[execution.roles.worker]
-tools = ["cargo", "git", "rg"]
-
-[execution.roles.worker.filesystem]
-read_roots = ["src", "tests", "docs"]
-write_roots = ["src", "tests", "docs"]
-allow_overwrite = false

package/presets/policies/low-usage.toml

@@ -1,50 +0,0 @@
-schema_version = 1
-id = "low-usage"
-version = "1.0.0"
-
-[usage]
-max_active_agents = 2
-max_parallel_readers = 1
-max_parallel_writers = 1
-max_depth = 1
-max_attempts = 3
-max_wall_time_seconds = 1800
-max_tool_calls = 60
-review_reserve_percent = 25
-budget_exhaustion = "downgrade_noncritical"
-metering = "estimated"
-
-[transitions.retry]
-max_same_route_retries = 0
-
-[transitions.availability_fallback]
-max_fallbacks = 1
-require_same_capability_class = true
-
-[transitions.quality_escalation]
-max_escalations = 1
-require_verification_evidence = true
-
-[transitions.quota_downgrade]
-enabled = true
-max_downgrades = 1
-noncritical_only = true
-
-[transitions.safety_stop]
-enabled = true
-
-[materiality]
-changed_files_threshold = 6
-changed_lines_threshold = 250
-
-[execution]
-max_read_scope_entries = 6
-max_write_scope_entries = 3
-
-[execution.roles.worker]
-tools = ["cargo", "git", "rg"]
-
-[execution.roles.worker.filesystem]
-read_roots = ["src", "tests", "docs"]
-write_roots = ["src", "tests", "docs"]
-allow_overwrite = false