planr 1.4.0 → 1.5.1

package/presets/bindings/cursor-openai.toml

@@ -1,49 +0,0 @@
-schema_version = 1
-id = "cursor-openai"
-version = "1.0.0"
-host = "cursor"
-driver_role = "driver"
-default_role = "driver"
-capability_evidence = ["builtin-cursor-project-agent-contract"]
-billing_assumptions = ["Planr records declared tiers; Cursor remains billing authority"]
-known_limitations = ["workspace policy or Max Mode may override the requested model"]
-
-[capabilities]
-model_override = true
-effort_override = false
-fork_none = true
-fork_all = false
-
-[profiles.driver]
-profile = "cursor-openai-driver"
-client = "cursor"
-model = "gpt-5.5"
-cost_tier = "premium"
-
-[profiles.worker]
-profile = "cursor-openai-worker"
-client = "cursor"
-model = "gpt-5.4-mini"
-cost_tier = "standard"
-skill = "planr-work"
-fork_turns = { mode = "none" }
-
-[[routes]]
-work_type = "code"
-role = "worker"
-fallback_roles = ["driver"]
-
-[verification]
-id = "builtin-cursor-openai-v1"
-verified_at_unix = 1783987200
-max_age_seconds = 31536000
-
-[[artifacts]]
-path = ".cursor/agents/planr-preset-worker.md"
-kind = "cursor_agent"
-content = '''---
-name: planr-preset-worker
-model: gpt-5.4-mini
----
-Use the planr-work skill and preserve Planr evidence.
-'''

package/presets/bindings/mixed-host.toml

@@ -1,64 +0,0 @@
-schema_version = 1
-id = "mixed-host"
-version = "1.0.0"
-host = "mixed-host"
-driver_role = "driver"
-default_role = "driver"
-capability_evidence = ["builtin-explicit-cross-client-contract"]
-billing_assumptions = ["Each host remains authoritative for its own billing and availability"]
-known_limitations = ["effective model evidence must be collected independently from each host"]
-
-[capabilities]
-model_override = true
-effort_override = true
-fork_none = true
-fork_all = false
-
-[profiles.driver]
-profile = "mixed-cursor-driver"
-client = "cursor"
-model = "fable-5"
-cost_tier = "premium"
-
-[profiles.worker]
-profile = "mixed-codex-worker"
-client = "codex"
-model = "gpt-5.4-mini"
-effort = "high"
-cost_tier = "standard"
-skill = "planr-work"
-fork_turns = { mode = "none" }
-
-[[routes]]
-work_type = "code"
-role = "worker"
-fallback_roles = ["driver"]
-
-[verification]
-id = "builtin-mixed-host-v1"
-verified_at_unix = 1783987200
-max_age_seconds = 31536000
-
-[[artifacts]]
-path = ".cursor/agents/planr-preset-driver.md"
-kind = "cursor_agent"
-content = '''---
-name: planr-preset-driver
-model: fable-5
----
-Drive the Planr map and keep final verdict ownership.
-'''
-
-[[artifacts]]
-path = ".codex/agents/planr-preset-worker.toml"
-kind = "codex_agent"
-content = '''name = "planr_preset_worker"
-description = "Implements one picked Planr map item with evidence-backed handoff."
-model = "gpt-5.4-mini"
-model_reasoning_effort = "high"
-sandbox_mode = "workspace-write"
-
-developer_instructions = """
-Use the planr-work skill for exactly one picked item. Preserve the task scope, record changed files and real verification commands, request review, and stop.
-"""
-'''

package/presets/policies/balanced.toml

@@ -1,50 +0,0 @@
-schema_version = 1
-id = "balanced"
-version = "1.0.0"
-
-[usage]
-max_active_agents = 3
-max_parallel_readers = 2
-max_parallel_writers = 1
-max_depth = 1
-max_attempts = 4
-max_wall_time_seconds = 3600
-max_tool_calls = 120
-review_reserve_percent = 20
-budget_exhaustion = "stop"
-metering = "estimated"
-
-[transitions.retry]
-max_same_route_retries = 1
-
-[transitions.availability_fallback]
-max_fallbacks = 1
-require_same_capability_class = true
-
-[transitions.quality_escalation]
-max_escalations = 1
-require_verification_evidence = true
-
-[transitions.quota_downgrade]
-enabled = false
-max_downgrades = 0
-noncritical_only = true
-
-[transitions.safety_stop]
-enabled = true
-
-[materiality]
-changed_files_threshold = 10
-changed_lines_threshold = 500
-
-[execution]
-max_read_scope_entries = 8
-max_write_scope_entries = 4
-
-[execution.roles.worker]
-tools = ["cargo", "git", "rg"]
-
-[execution.roles.worker.filesystem]
-read_roots = ["src", "tests", "docs"]
-write_roots = ["src", "tests", "docs"]
-allow_overwrite = false

package/presets/policies/low-usage.toml

@@ -1,50 +0,0 @@
-schema_version = 1
-id = "low-usage"
-version = "1.0.0"
-
-[usage]
-max_active_agents = 2
-max_parallel_readers = 1
-max_parallel_writers = 1
-max_depth = 1
-max_attempts = 3
-max_wall_time_seconds = 1800
-max_tool_calls = 60
-review_reserve_percent = 25
-budget_exhaustion = "downgrade_noncritical"
-metering = "estimated"
-
-[transitions.retry]
-max_same_route_retries = 0
-
-[transitions.availability_fallback]
-max_fallbacks = 1
-require_same_capability_class = true
-
-[transitions.quality_escalation]
-max_escalations = 1
-require_verification_evidence = true
-
-[transitions.quota_downgrade]
-enabled = true
-max_downgrades = 1
-noncritical_only = true
-
-[transitions.safety_stop]
-enabled = true
-
-[materiality]
-changed_files_threshold = 6
-changed_lines_threshold = 250
-
-[execution]
-max_read_scope_entries = 6
-max_write_scope_entries = 3
-
-[execution.roles.worker]
-tools = ["cargo", "git", "rg"]
-
-[execution.roles.worker.filesystem]
-read_roots = ["src", "tests", "docs"]
-write_roots = ["src", "tests", "docs"]
-allow_overwrite = false

package/presets/policies/max-quality.toml

@@ -1,50 +0,0 @@
-schema_version = 1
-id = "max-quality"
-version = "1.0.0"
-
-[usage]
-max_active_agents = 4
-max_parallel_readers = 3
-max_parallel_writers = 1
-max_depth = 1
-max_attempts = 5
-max_wall_time_seconds = 7200
-max_tool_calls = 240
-review_reserve_percent = 40
-budget_exhaustion = "stop"
-metering = "estimated"
-
-[transitions.retry]
-max_same_route_retries = 1
-
-[transitions.availability_fallback]
-max_fallbacks = 1
-require_same_capability_class = true
-
-[transitions.quality_escalation]
-max_escalations = 2
-require_verification_evidence = true
-
-[transitions.quota_downgrade]
-enabled = false
-max_downgrades = 0
-noncritical_only = true
-
-[transitions.safety_stop]
-enabled = true
-
-[materiality]
-changed_files_threshold = 5
-changed_lines_threshold = 200
-
-[execution]
-max_read_scope_entries = 12
-max_write_scope_entries = 6
-
-[execution.roles.worker]
-tools = ["cargo", "git", "rg"]
-
-[execution.roles.worker.filesystem]
-read_roots = ["src", "tests", "docs"]
-write_roots = ["src", "tests", "docs"]
-allow_overwrite = false

package/presets/policies/read-only-audit.toml

@@ -1,50 +0,0 @@
-schema_version = 1
-id = "read-only-audit"
-version = "1.0.0"
-
-[usage]
-max_active_agents = 3
-max_parallel_readers = 3
-max_parallel_writers = 0
-max_depth = 1
-max_attempts = 2
-max_wall_time_seconds = 1800
-max_tool_calls = 80
-review_reserve_percent = 20
-budget_exhaustion = "stop"
-metering = "estimated"
-
-[transitions.retry]
-max_same_route_retries = 0
-
-[transitions.availability_fallback]
-max_fallbacks = 1
-require_same_capability_class = true
-
-[transitions.quality_escalation]
-max_escalations = 0
-require_verification_evidence = true
-
-[transitions.quota_downgrade]
-enabled = false
-max_downgrades = 0
-noncritical_only = true
-
-[transitions.safety_stop]
-enabled = true
-
-[materiality]
-changed_files_threshold = 1
-changed_lines_threshold = 1
-
-[execution]
-max_read_scope_entries = 12
-max_write_scope_entries = 1
-
-[execution.roles.worker]
-tools = ["git", "rg"]
-
-[execution.roles.worker.filesystem]
-read_roots = ["src", "tests", "docs"]
-write_roots = []
-allow_overwrite = false

package/website/README.md

@@ -1,79 +0,0 @@
-# Planr Preset Catalog
-
-This directory is a dependency-free static website. Production catalog data is never authored by hand: `build-catalog.mjs` invokes Planr's canonical registry verifier, requires a trusted maintainer signature and safe policy/binding preview, binds status to the evaluation report, and writes `data/catalog.json`.
-
-The committed catalog is generated from the included `registry/manifest.toml`, canonical `registry/verification.json`, and separately pinned public maintainer trust store. Its private release and telemetry signing keys are intentionally not committed. If verification expires, is deprecated, or no longer earns recommendation, the generated catalog preserves the visible lifecycle state instead of inventing or retaining a recommendation.
-
-```sh
-node website/build-catalog.mjs \
-  --planr-bin ./target/release/planr \
-  --manifest website/registry/manifest.toml \
-  --content-root . \
-  --trust-store website/registry/trusted-maintainers.toml \
-  --entry balanced-codex=codex \
-  --at-unix 1783987200 \
-  --output website/data/catalog.json
-
-npm run site:test
-npm run site:serve
-```
-
-## Cloudflare test deployment
-
-Cloudflare infrastructure is owned by the repository-root `alchemy.run.ts`. The
-deployment publishes a clean `dist/website` containing only runtime assets; tests,
-fixtures, registry inputs, trust stores, and build tooling are never uploaded.
-
-Install the pinned development dependency and authenticate Cloudflare using an existing
-Alchemy/Cloudflare profile, Wrangler login, or a least-privilege API token. Set the
-account id from `.env.example` in the process environment when account inference would
-be ambiguous. Planr never runs login/configure commands and never changes user-level
-configuration. This static stack has no secret bindings, so it deliberately requires no
-`ALCHEMY_PASSWORD` or repository-local secret file.
-
-The published Planr CLI retains its declared Node.js 18+ compatibility. Repository
-dependency installation and the separate Cloudflare deployment toolchain require Node.js
-22+ because the pinned pnpm/Alchemy lockfile contains current tooling with that minimum.
-Select Node 22 or newer before invoking pnpm. On an unknown machine, this pnpm-free
-preflight is safe to run first even with Node 18 or 20:
-
-```sh
-node scripts/check-alchemy-runtime.mjs
-```
-
-The authoritative deployment launcher performs the same check before it starts pnpm or
-Alchemy, so older runtimes receive Planr's error instead of a Corepack or dependency crash.
-
-```sh
-pnpm install
-pnpm site:check
-node scripts/cloudflare-test.mjs deploy
-```
-
-After Node 22+ is active, `pnpm deploy:test` is an equivalent convenience alias.
-
-The committed `pnpm-workspace.yaml` is a repository-only dependency security policy:
-it allows the `esbuild` and `workerd` install scripts required by Alchemy and explicitly
-keeps the unused transitive `sharp` build disabled. It does not modify global pnpm state.
-
-`deploy:test` always targets the isolated Alchemy stage `test`. It creates a standalone
-Cloudflare Worker website and prints its Cloudflare-assigned `workers.dev` URL. The
-initial deployment deliberately configures no custom domain, DNS route, backend resource,
-or adoption of an existing Worker.
-
-Removing that test website is an explicit, separate operation:
-
-```sh
-node scripts/cloudflare-test.mjs destroy
-```
-
-After Node 22+ is active, `pnpm destroy:test` is an equivalent convenience alias.
-
-Never add private registry or telemetry signing keys to the deployment environment. The
-site deploy consumes only the already verified public `website/data/catalog.json`.
-
-Release operators must regenerate the evaluation report through `planr agents preset evaluate` with an independently pinned telemetry collector, update the manifest artifact digest, and sign the registry entry with the corresponding offline maintainer key before rebuilding this file. The public `registry/report.md` summarizes that evidence; the machine report and signature remain the verification source of truth.
-
-The report-wide `reproducible_evidence` flag summarizes the entire candidate matrix. Registry publication independently requires the selected candidate's complete reproducible evidence, passing thresholds, verified route receipts, and matching entry in `report.recommended`; candidates that fail those gates are not published as recommendations.
-
-The localhost-only `?fixture=recommended` query remains available for isolated UI regression checks. It is visibly labeled, ignored on non-local hosts, and never substitutes for live verification of the production `data/catalog.json` path.

package/website/_headers

@@ -1,7 +0,0 @@
-/*
-  Cache-Control: public, max-age=0, must-revalidate
-  Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'
-  Permissions-Policy: camera=(), geolocation=(), microphone=(), payment=(), usb=()
-  Referrer-Policy: no-referrer
-  X-Content-Type-Options: nosniff
-  X-Frame-Options: DENY

package/website/alchemy-runtime.test.mjs

@@ -1,21 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-import {
-  assertAlchemyRuntime,
-  MINIMUM_ALCHEMY_NODE_MAJOR,
-} from "../scripts/check-alchemy-runtime.mjs";
-
-test("accepts the minimum supported Alchemy deployment runtime", () => {
-  assert.equal(assertAlchemyRuntime("22.0.0"), MINIMUM_ALCHEMY_NODE_MAJOR);
-});
-
-test("rejects Node runtimes supported by the Planr CLI but not by Alchemy", () => {
-  assert.throws(
-    () => assertAlchemyRuntime("18.16.1"),
-    /Cloudflare deployment requires Node\.js 22 or newer; current runtime is 18\.16\.1/,
-  );
-  assert.throws(
-    () => assertAlchemyRuntime("20.19.5"),
-    /Cloudflare deployment requires Node\.js 22 or newer/,
-  );
-});

package/website/app.mjs

@@ -1,216 +0,0 @@
-import { formatBasisPoints, previewCommand, statusLabel, visibleCompositions } from "./catalog-model.mjs";
-
-const nodes = {
-  selectA: document.querySelector("#composition-a"),
-  selectB: document.querySelector("#composition-b"),
-  cardA: document.querySelector("#comparison-a"),
-  cardB: document.querySelector("#comparison-b"),
-  comparison: document.querySelector("#comparison"),
-  empty: document.querySelector("#empty-state"),
-  emptyMessage: document.querySelector("#empty-message"),
-  filter: document.querySelector("#recommended-only"),
-  published: document.querySelector("#stat-published"),
-  recommended: document.querySelector("#stat-recommended"),
-  trust: document.querySelector("#stat-trust"),
-  generated: document.querySelector("#generated-at"),
-  copyStatus: document.querySelector("#copy-status"),
-  fixtureBanner: document.querySelector("#fixture-banner"),
-};
-
-function catalogLocation() {
-  const local = ["127.0.0.1", "localhost"].includes(location.hostname);
-  const fixture = new URLSearchParams(location.search).get("fixture");
-  if (local && fixture === "recommended") {
-    nodes.fixtureBanner.hidden = false;
-    return "./test-fixtures/recommended.json";
-  }
-  return "./data/catalog.json";
-}
-
-function text(parent, element, value, className) {
-  const node = document.createElement(element);
-  if (className) node.className = className;
-  node.textContent = value;
-  parent.append(node);
-  return node;
-}
-
-function formatDate(unix) {
-  if (!Number.isFinite(unix)) return "Not published";
-  return new Intl.DateTimeFormat("en", { dateStyle: "medium", timeZone: "UTC" }).format(new Date(unix * 1000));
-}
-
-function formatNumber(value) {
-  return Number.isFinite(Number(value)) ? new Intl.NumberFormat("en").format(Number(value)) : "—";
-}
-
-function optionLabel(entry) {
-  return `${entry.policy.id} + ${entry.binding.id} · ${statusLabel(entry.status)}`;
-}
-
-function fillSelect(select, entries, preferredIndex) {
-  const previous = select.value;
-  select.replaceChildren();
-  for (const entry of entries) {
-    const option = document.createElement("option");
-    option.value = entry.id;
-    option.textContent = optionLabel(entry);
-    select.append(option);
-  }
-  select.value = entries.some((entry) => entry.id === previous) ? previous : entries[Math.min(preferredIndex, entries.length - 1)]?.id ?? "";
-}
-
-function metric(parent, label, value) {
-  const wrapper = document.createElement("div");
-  wrapper.className = "metric";
-  text(wrapper, "span", label);
-  text(wrapper, "strong", value);
-  parent.append(wrapper);
-}
-
-function section(parent, title) {
-  const wrapper = document.createElement("section");
-  wrapper.className = "card-section";
-  text(wrapper, "h4", title);
-  parent.append(wrapper);
-  return wrapper;
-}
-
-function definitionRow(list, termValue, detailValue) {
-  const row = document.createElement("div");
-  text(row, "dt", termValue);
-  text(row, "dd", detailValue);
-  list.append(row);
-}
-
-function renderCard(card, entry) {
-  card.replaceChildren();
-  if (!entry) return;
-  card.dataset.compositionId = entry.id;
-
-  const top = document.createElement("div");
-  top.className = "card-top";
-  const title = document.createElement("div");
-  text(title, "span", `${entry.binding.id} · ${entry.binding.host}`, "binding-name");
-  text(title, "h3", entry.policy.id);
-  const badge = text(top, "span", statusLabel(entry.status), `badge status-${entry.status}`);
-  badge.setAttribute("aria-label", `Status: ${statusLabel(entry.status)}`);
-  top.prepend(title);
-  card.append(top);
-  text(card, "p", `Policy ${entry.policy.version} · Binding ${entry.binding.version} · Entry ${entry.entryVersion}`, "meta-line");
-
-  const metrics = document.createElement("div");
-  metrics.className = "metric-grid";
-  metric(metrics, "Active agents", formatNumber(entry.policy.usage.max_active_agents));
-  metric(metrics, "Parallel writers", formatNumber(entry.policy.usage.max_parallel_writers));
-  metric(metrics, "Max depth", formatNumber(entry.policy.usage.max_depth));
-  metric(metrics, "Metering", entry.policy.usage.metering ?? "unavailable");
-  card.append(metrics);
-
-  const compatibility = section(card, "Compatibility");
-  const compatibilityList = document.createElement("dl");
-  compatibilityList.className = "compatibility-list";
-  definitionRow(
-    compatibilityList,
-    "Supported hosts",
-    entry.compatibility.hosts?.length ? entry.compatibility.hosts.join(", ") : "No compatible host declared",
-  );
-  definitionRow(
-    compatibilityList,
-    "Planr versions",
-    `${entry.compatibility.minPlanrVersion ?? "Any"} through ${entry.compatibility.maxPlanrVersion ?? "latest"}`,
-  );
-  definitionRow(
-    compatibilityList,
-    "Lifecycle",
-    entry.replacement
-      ? `${statusLabel(entry.status)}; replace with ${entry.replacement}`
-      : statusLabel(entry.status),
-  );
-  compatibility.append(compatibilityList);
-
-  const enforcement = section(card, "Enforcement matrix");
-  const list = document.createElement("dl");
-  list.className = "enforcement-list";
-  for (const item of entry.enforcement) {
-    const row = document.createElement("div");
-    const term = text(row, "dt", item.dimension);
-    text(term, "span", item.state.replaceAll("_", " "), "state");
-    text(row, "dd", item.detail);
-    list.append(row);
-  }
-  enforcement.append(list);
-
-  const evidence = section(card, "Evaluation & provenance");
-  text(evidence, "p", `${entry.evaluation.suiteId} ${entry.evaluation.suiteVersion} · evaluated ${formatDate(entry.evaluation.evaluatedAtUnix)} · review ${formatDate(entry.evaluation.reviewAtUnix)}`, "meta-line");
-  text(evidence, "p", `Quality ${formatBasisPoints(entry.evaluation.metrics?.average_quality_score_bps)} · runs ${formatNumber(entry.evaluation.metrics?.runs)} · oracle passes ${formatNumber(entry.evaluation.metrics?.oracle_passes)}`, "meta-line");
-  text(evidence, "p", `Manifest ${entry.registry.manifestSha256}`, "hash");
-  text(evidence, "p", `Signer ${entry.registry.signer} · signature verified · trusted maintainer`, "meta-line");
-
-  const commandSection = section(card, "Preview safely");
-  const commandBlock = document.createElement("div");
-  commandBlock.className = "command-block";
-  const command = previewCommand(entry.policy.id, entry.binding.id);
-  text(commandBlock, "code", command);
-  const button = text(commandBlock, "button", "Copy preview command", "copy-button");
-  button.type = "button";
-  button.dataset.command = command;
-  commandSection.append(commandBlock);
-}
-
-function wireCopy() {
-  document.addEventListener("click", async (event) => {
-    const button = event.target.closest("button[data-command]");
-    if (!button) return;
-    try {
-      await navigator.clipboard.writeText(button.dataset.command);
-      button.textContent = "Copied";
-      nodes.copyStatus.textContent = `Copied preview command for ${button.closest(".preset-card").dataset.compositionId}`;
-      setTimeout(() => { button.textContent = "Copy preview command"; }, 1400);
-    } catch {
-      nodes.copyStatus.textContent = "Clipboard access was unavailable; select the command text to copy it manually.";
-    }
-  });
-}
-
-function render(catalog) {
-  const entries = visibleCompositions(catalog, nodes.filter.checked);
-  nodes.published.textContent = formatNumber(catalog.compositions.length);
-  nodes.recommended.textContent = formatNumber(catalog.compositions.filter((entry) => entry.recommended).length);
-  nodes.trust.textContent = catalog.source?.state === "verified_registry_projection" ? "Signed registry" : "Publication gated";
-  nodes.generated.textContent = Number.isFinite(catalog.generatedAtUnix)
-    ? `Projection generated ${formatDate(catalog.generatedAtUnix)} · ${catalog.source.trust}`
-    : "No signed registry projection published.";
-  fillSelect(nodes.selectA, entries, 0);
-  fillSelect(nodes.selectB, entries, 1);
-  const empty = entries.length === 0;
-  nodes.empty.hidden = !empty;
-  nodes.comparison.hidden = empty;
-  if (empty) {
-    nodes.emptyMessage.textContent = catalog.source?.message ?? (nodes.filter.checked ? "No published composition currently carries an evaluation-backed recommendation." : "No trusted compositions are published.");
-    return;
-  }
-  const find = (id) => entries.find((entry) => entry.id === id);
-  renderCard(nodes.cardA, find(nodes.selectA.value));
-  renderCard(nodes.cardB, find(nodes.selectB.value));
-}
-
-async function start() {
-  wireCopy();
-  const response = await fetch(catalogLocation(), { cache: "no-store" });
-  if (!response.ok) throw new Error(`catalog request failed with HTTP ${response.status}`);
-  const catalog = await response.json();
-  if (catalog.schemaVersion !== 1 || !Array.isArray(catalog.compositions)) throw new Error("unsupported catalog data");
-  const update = () => render(catalog);
-  nodes.filter.addEventListener("change", update);
-  nodes.selectA.addEventListener("change", update);
-  nodes.selectB.addEventListener("change", update);
-  update();
-}
-
-start().catch((error) => {
-  nodes.empty.hidden = false;
-  nodes.comparison.hidden = true;
-  nodes.emptyMessage.textContent = `Catalog unavailable: ${error.message}`;
-  nodes.trust.textContent = "Unavailable";
-});