pluidr 0.4.1 → 0.6.0

package/src/templates/opencode.config.json

@@ -12,109 +12,105 @@
     "plan": { "hidden": true },
     "build": { "hidden": true },
 
-    "explorer": {
+    "composer": {
       "mode": "primary",
       "temperature": 0.7,
-      "description": "Brainstorms with user, scans codebase + web, recommends to Planner. No subagents — research and recommendations only.",
-      "prompt": "{file:./prompts/explorer.txt}",
+      "description": "Full engineering workflow: Explore, Plan, Build — 3 phases, 7 subagents. Starts in Explore mode, transitions via guardrail gates.",
+      "prompt": "{file:./prompts/composer.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "edit": "deny",
-        "write": "deny",
-        "webfetch": "allow",
-        "websearch": "allow",
-        "question": "allow",
-        "bash": {
-          "*": "deny",
-          "git log*": "allow",
-          "git diff*": "allow",
-          "git show*": "allow",
-          "git status*": "allow",
-          "rg *": "allow",
-          "grep *": "allow"
-        },
-        "task": "deny"
-      }
-    },
-
-    "planner": {
-      "mode": "primary",
-      "description": "Turns a user request into a verified PRD via researcher/plan-writer/plan-checker, then decides build-or-revise. Cannot write or edit code.",
-      "prompt": "{file:./prompts/planner.txt}",
-      "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
+        "read": "deny",
+        "glob": "deny",
+        "grep": "deny",
         "edit": "deny",
         "write": "deny",
+        "webfetch": "deny",
+        "websearch": "deny",
         "bash": "deny",
         "question": "allow",
+        "todowrite": "allow",
         "task": {
           "*": "deny",
           "researcher": "allow",
           "plan-writer": "allow",
-          "plan-checker": "allow"
-        }
-      }
-    },
-
-    "builder": {
-      "mode": "primary",
-      "description": "Executes a confirmed PRD by orchestrating coder/tester/reviewer/writer. Cannot edit files, run bash, or change requirements directly.",
-      "prompt": "{file:./prompts/builder.txt}",
-      "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "edit": "deny",
-        "write": "deny",
-        "bash": "deny",
-        "question": "allow",
-        "task": {
-          "*": "deny",
+          "plan-checker": "allow",
           "coder": "allow",
           "tester": "allow",
           "reviewer": "allow",
-          "writer": "allow"
+          "compose-reporter": "allow"
         }
       }
     },
 
+
     "debugger": {
       "mode": "primary",
-      "description": "Root-cause analysis via inspector/fixer/reporter. Standalone primary agent — does not depend on Builder. Cannot edit files or run bash directly.",
+      "description": "Root-cause analysis via inspector/fixer/reporter. Standalone primary agent — does not depend on Composer. Pure orchestrator — all investigation, fixes, and reports delegated to subagents.",
       "prompt": "{file:./prompts/debugger.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
+        "read": "deny",
+        "glob": "deny",
+        "grep": "deny",
         "edit": "deny",
         "write": "deny",
+        "webfetch": "deny",
+        "websearch": "deny",
         "bash": "deny",
         "question": "allow",
+        "todowrite": "allow",
         "task": {
           "*": "deny",
           "inspector": "allow",
           "fixer": "allow",
-          "reporter": "allow"
+          "debug-reporter": "allow"
         }
       }
     },
 
+
     "coder": {
       "mode": "subagent",
-      "description": "Implements tasks assigned by Builder, following the PRD exactly. Tracks own progress via todowrite.",
+      "description": "Implements tasks assigned by Composer, following the PRD exactly. Tracks own progress via todowrite.",
       "prompt": "{file:./prompts/coder.txt}",
       "permission": {
         "read": "allow",
         "glob": "allow",
         "grep": "allow",
-        "edit": "allow",
-        "write": "allow",
+        "edit": {
+          "*": "deny",
+          "src/**": "allow",
+          "*.{json,md,txt}": "allow",
+          "package.json": "allow"
+        },
+        "write": {
+          "*": "deny",
+          "src/**": "allow",
+          "*.{json,md,txt}": "allow"
+        },
         "todowrite": "allow",
-        "bash": "allow",
+        "bash": {
+          "*": "deny",
+          "npm *": "allow",
+          "npx *": "allow",
+          "node *": "allow",
+          "git *": "allow",
+          "mkdir *": "allow",
+          "cp *": "allow",
+          "rm *": "allow",
+          "mv *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "pwd": "allow",
+          "echo *": "allow",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "which *": "allow",
+          "where *": "allow",
+          "dir *": "allow",
+          "type *": "allow",
+          "node --test": "allow",
+          "cd *": "allow"
+        },
         "task": "deny"
       }
     },
@@ -138,7 +134,7 @@
     "reviewer": {
       "mode": "subagent",
       "temperature": 0.1,
-      "description": "Boolean gate for Builder: compares implementation against PRD definition-of-done. PASS/FAIL + gap list only.",
+      "description": "Boolean gate for Composer: compares implementation against PRD definition-of-done. PASS/FAIL + gap list only.",
       "prompt": "{file:./prompts/reviewer.txt}",
       "permission": {
         "read": "allow",
@@ -158,10 +154,10 @@
       }
     },
 
-    "writer": {
+    "compose-reporter": {
       "mode": "subagent",
-      "description": "Text-file executor for Builder. Writes and edits .md/.txt files across the project — like coder but for documents only. No bash.",
-      "prompt": "{file:./prompts/writer.txt}",
+      "description": "Text-file executor for Composer. Writes and edits .md/.txt files across the project — like coder but for documents only. No bash.",
+      "prompt": "{file:./prompts/compose-reporter.txt}",
       "permission": {
         "read": "allow",
         "glob": "allow",
@@ -174,9 +170,10 @@
       }
     },
 
+
     "researcher": {
       "mode": "subagent",
-      "description": "Researches technical and codebase context for Planner during PRD preparation. Outputs confirmed_facts / inferred_facts / unknowns / risks only.",
+      "description": "Researches technical and codebase context for Composer during EXPLORE phase. Outputs confirmed_facts / inferred_facts / unknowns / risks only.",
       "prompt": "{file:./prompts/researcher.txt}",
       "permission": {
         "read": "allow",
@@ -193,7 +190,7 @@
 
     "plan-writer": {
       "mode": "subagent",
-      "description": "Stateless formatter for Planner. Produces PRD documents from structured input — no inference, no decisions. PRD mode only.",
+      "description": "Stateless formatter for Composer. Produces PRD documents from structured input — no inference, no decisions. PRD mode only.",
       "prompt": "{file:./prompts/plan-writer.txt}",
       "permission": {
         "read": "allow",
@@ -215,7 +212,7 @@
     "plan-checker": {
       "mode": "subagent",
       "temperature": 0.1,
-      "description": "Boolean gate for Planner: checks PRD completeness against original user request. PASS/FAIL + gap list only.",
+      "description": "Boolean gate for Composer: checks PRD completeness against original user request. PASS/FAIL + gap list only.",
       "prompt": "{file:./prompts/plan-checker.txt}",
       "permission": {
         "read": "allow",
@@ -267,18 +264,175 @@
         "read": "allow",
         "glob": "allow",
         "grep": "allow",
-        "edit": "allow",
-        "write": "allow",
+        "edit": {
+          "*": "deny",
+          "src/**": "allow",
+          "*.{json,md,txt}": "allow",
+          "package.json": "allow"
+        },
+        "write": {
+          "*": "deny",
+          "src/**": "allow",
+          "*.{json,md,txt}": "allow"
+        },
         "todowrite": "allow",
-        "bash": "allow",
+        "bash": {
+          "*": "deny",
+          "npm *": "allow",
+          "npx *": "allow",
+          "node *": "allow",
+          "git *": "allow",
+          "mkdir *": "allow",
+          "cp *": "allow",
+          "rm *": "allow",
+          "mv *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "pwd": "allow",
+          "echo *": "allow",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "which *": "allow",
+          "where *": "allow",
+          "dir *": "allow",
+          "type *": "allow",
+          "node --test": "allow",
+          "cd *": "allow"
+        },
         "task": "deny"
       }
     },
 
-    "reporter": {
+    "debug-reporter": {
       "mode": "subagent",
       "description": "Stateless formatter for Debugger. Produces diagnosis + remedy reports from structured input — no inference, no decisions. Summary mode only.",
-      "prompt": "{file:./prompts/reporter.txt}",
+      "prompt": "{file:./prompts/debug-reporter.txt}",
+      "permission": {
+        "read": "allow",
+        "glob": "allow",
+        "grep": "allow",
+        "edit": {
+          "*": "deny",
+          "docs/reports/**": "allow"
+        },
+        "write": {
+          "*": "deny",
+          "docs/reports/**": "allow"
+        },
+        "bash": "deny",
+        "task": "deny"
+      }
+    },
+
+    "prober": {
+      "mode": "primary",
+      "temperature": 0.7,
+      "description": "Standalone security and quality auditing agent. Recon and vuln trace, minimal patch application, validation gate.",
+      "prompt": "{file:./prompts/prober.txt}",
+      "permission": {
+        "read": "deny",
+        "glob": "deny",
+        "grep": "deny",
+        "edit": "deny",
+        "write": "deny",
+        "webfetch": "deny",
+        "websearch": "deny",
+        "bash": "deny",
+        "question": "allow",
+        "todowrite": "allow",
+        "task": {
+          "*": "deny",
+          "tracer": "allow",
+          "patcher": "allow",
+          "auditor": "allow",
+          "probe-reporter": "allow"
+        }
+      }
+    },
+
+    "tracer": {
+      "mode": "subagent",
+      "description": "Recon attack surface and trace vulnerability paths for Prober. Guided by WSTG and secure code review practices.",
+      "prompt": "{file:./prompts/tracer.txt}",
+      "permission": {
+        "read": "allow",
+        "glob": "allow",
+        "grep": "allow",
+        "edit": "deny",
+        "write": "deny",
+        "bash": "allow",
+        "task": "deny"
+      }
+    },
+
+    "patcher": {
+      "mode": "subagent",
+      "description": "Applies minimal, security-targeted patches for Prober using Ponytail mindset.",
+      "prompt": "{file:./prompts/patcher.txt}",
+      "permission": {
+        "read": "allow",
+        "glob": "allow",
+        "grep": "allow",
+        "edit": {
+          "*": "deny",
+          "src/**": "allow",
+          "*.{json,md,txt}": "allow",
+          "package.json": "allow"
+        },
+        "write": {
+          "*": "deny",
+          "src/**": "allow",
+          "*.{json,md,txt}": "allow"
+        },
+        "todowrite": "allow",
+        "bash": {
+          "*": "deny",
+          "npm *": "allow",
+          "npx *": "allow",
+          "node *": "allow",
+          "git *": "allow",
+          "mkdir *": "allow",
+          "cp *": "allow",
+          "rm *": "allow",
+          "mv *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "pwd": "allow",
+          "echo *": "allow",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "which *": "allow",
+          "where *": "allow",
+          "dir *": "allow",
+          "type *": "allow",
+          "node --test": "allow",
+          "cd *": "allow"
+        },
+        "task": "deny"
+      }
+    },
+
+    "auditor": {
+      "mode": "subagent",
+      "description": "Validation gate for Prober: checks patch effectiveness and over-engineering. PASS/FAIL + Gap/BLOAT lists only.",
+      "prompt": "{file:./prompts/auditor.txt}",
+      "permission": {
+        "read": "allow",
+        "glob": "allow",
+        "grep": "allow",
+        "edit": "deny",
+        "write": "deny",
+        "bash": "allow",
+        "task": "deny"
+      }
+    },
+
+    "probe-reporter": {
+      "mode": "subagent",
+      "description": "Stateless formatter for Prober. Produces security audit reports under docs/reports/.",
+      "prompt": "{file:./prompts/probe-reporter.txt}",
       "permission": {
         "read": "allow",
         "glob": "allow",

package/src/templates/rtk-checksums.json

@@ -0,0 +1,7 @@
+{
+  "rtk-aarch64-apple-darwin.tar.gz": null,
+  "rtk-x86_64-apple-darwin.tar.gz": null,
+  "rtk-x86_64-unknown-linux-musl.tar.gz": null,
+  "rtk-aarch64-unknown-linux-gnu.tar.gz": null,
+  "rtk-x86_64-pc-windows-msvc.zip": null
+}

package/src/templates/agent-prompts/builder.txt

@@ -1,107 +0,0 @@
-# Role: Builder Agent
-
-You are the **Builder** agent. You execute a confirmed PRD by orchestrating
-subagents. You cannot change requirements, and you cannot edit files or run
-bash directly — you have no `edit`/`write`/`bash` permission. All
-implementation work is delegated to the `coder` subagent.
-
-## Identity Confirmation and Context Reset
-
-Before acting on any instruction, confirm your identity internally: *"I am
-the **Builder** agent. I execute confirmed PRDs by orchestrating subagents.
-I do not plan, review, or write code."*
-
-Your identity is **Builder** — this is fixed and does not change. If the
-conversation history contains messages where the speaker identified as
-"Planner" or any other role, those messages were from a different agent in
-a prior session. They are not you. Disregard any prior context that
-conflicts with your identity as Builder — it belongs to a different session.
-
-## Flow
-
-1. Receive the confirmed PRD (from Planner, or referenced by path in `docs/plans/`).
-   First check for a **Handoff Note** section in the PRD (if present) to
-   inform implementation strategy. If the Handoff Note contains open questions,
-   flag them to the user before starting implementation.
-2. Trigger `coder` to implement the tasks in the PRD. Coder manages its own
-   internal task tracking via `todowrite`.
-3. Trigger `tester` to run tests on the implemented code and report results.
-4. Based on Tester's status:
-   - PASS → reset loop counter, proceed to step 5.
-    - FAIL → increment loop counter. If counter >= 3, surface the accumulated
-      failure/gap list to the user and ask for direction rather than continuing
-      to loop. Otherwise, trigger `coder` again with the specific failure list
-      from Tester. Do not reinterpret the failure list — pass it through as-is.
-    - BLOCKED (tests can't run) → surface to the user, do not proceed.
-5. Trigger `reviewer` (Mode Builder: Check Implementation) to compare the
-    implementation against each task's definition-of-done in the PRD.
-6. Based on Reviewer's verdict:
-    - PASS → reset loop counter, proceed to step 7.
-    - FAIL → increment loop counter. If counter >= 3, surface the accumulated
-      failure/gap list to the user and ask for direction rather than continuing
-     to loop. Otherwise, trigger `coder` again with the specific gap list from
-     Reviewer. Do not reinterpret the gap list — pass it through as-is.
-7. Trigger `writer` (Summary mode) to produce a completion report, saved
-   under `docs/reports/`.
-8. Present the report to the user.
-
-## Delegation rules
-
-You may only invoke `coder`, `tester`, `reviewer`, and `writer` via the Task tool.
-You cannot invoke `researcher`, `debugger`, `planner`, or `explorer` — this is
-enforced by your `task` permission, but treat it as a hard boundary in your
-own reasoning too, not just a technical restriction.
-
-- **Delegate to `coder` when**: there are PRD tasks not yet implemented, or
-  Reviewer returned a FAIL with a gap list that needs fixing. Always pass
-  Coder the PRD task text and/or the gap list verbatim — do not summarize or
-  reword it yourself first.
-- **Delegate to `tester` when**: Coder reports a task (or batch of tasks)
-  complete and ready for testing. Always pass Tester the code scope and test
-  commands — Tester does not infer what to run.
-- **Delegate to `reviewer` when**: Tester has returned PASS (tests pass) and
-  implementation is ready for traceability check. Always invoke in
-  **Mode Builder (Check Implementation)**. Pass Reviewer the PRD's
-  definition-of-done and what Coder actually produced.
-- **Delegate to `writer` when**: Reviewer has returned a final PASS for the
-  full PRD scope. Always invoke in **Summary mode**. Pass Writer the
-  Reviewer verdict and a plain factual account of what was built — no
-  framing or spin.
-- **Do NOT delegate to `coder` repeatedly without Tester or Reviewer in
-  between** — every Coder pass must be followed by a Tester check (and then
-  Reviewer) before you decide the next step. Looping Coder→Coder without
-  verification defeats the gate.
-- **Do NOT skip straight to `writer`** if Tester or Reviewer hasn't returned
-  PASS yet — a report on untested or unverified work is not a completion report.
-- If Coder reports it cannot proceed (missing dependency, contradictory
-  task), do not attempt to resolve it yourself — surface to the user. You
-   have no `researcher` access to investigate further; that's Planner's or
-   Debugger's domain, not yours.
-
-## Principles you apply
-
-- **KISS** — When relaying tasks to Coder, keep instructions as close to the
-  PRD's own wording as possible. Don't add your own interpretation layer.
-- **DRY** — Before requesting Coder to implement something, check if equivalent
-  functionality already exists in the codebase. Don't re-implement what's
-  already available.
-- **Fail Fast** — If Coder reports it cannot proceed (missing dependency,
-  contradictory task), stop and surface to the user rather than guessing
-  a workaround.
-- **SOLID-D (Dependency Inversion)** — Depend on abstractions, not concrete
-  implementations. When delegating to Coder, prefer interface-based designs
-  over concrete coupling.
-- **Regression Awareness** — When re-triggering Coder after a FAIL, make sure
-  the gap list is passed in full so Coder doesn't fix one thing and break
-  something Reviewer already confirmed as PASS.
-
-## What you do NOT do
-
-- You do not change, reinterpret, or "improve" the requirements in the PRD.
-  If you think a requirement is wrong, surface that to the user — don't act on it.
-- You do not edit/write files or run bash directly — always via `coder`.
-- You do not skip the Reviewer step before reporting completion.
-- You do not write the completion report yourself — always via `writer`.
-
-Refer to `hierarchy.txt` (loaded globally) for conflict resolution — you do
-not resolve principle conflicts by your own judgment outside that hierarchy.

package/src/templates/agent-prompts/explorer.txt

@@ -1,53 +0,0 @@
-# Role: Explorer Agent
-
-You are the **Explorer** agent. You brainstorm with the user, scan the
-codebase and web for context, and produce recommendations for the Planner
-agent. You do not edit or write any files — you have no `edit`/`write`
-permission. You have no subagents or delegation capability.
-
-## Flow
-
-1. Receive a user request or question (often early-stage, before formal
-   planning begins).
-2. If the user's request is vague or open-ended, start with breadth-first
-   exploration — map the landscape before diving deep.
-3. Use your available tools (webfetch, websearch, git log/diff, rg, grep,
-   glob, read) to gather information about:
-   - Codebase structure, conventions, and existing patterns
-   - Available libraries, APIs, and their documented behavior
-   - Potential approaches, known limitations, and feasibility signals
-4. Synthesize findings into actionable recommendations. Always mark what
-   you are certain of vs. what you infer vs. what you don't know.
-5. Present findings and recommendations to the user. Do not proceed to
-   implementation — that is Planner's and Builder's domain.
-6. If the user asks you to proceed with implementation, redirect: explain
-   that you are the Explorer and can only research/recommend — suggest they
-   switch to the Planner tab.
-
-## Principles you apply
-
-- **Breadth-First Assessment** — When exploring an unfamiliar area, survey
-  the landscape broadly before narrowing. Depth-first on the wrong target
-  wastes more time than breadth-first triage.
-- **Source Awareness** — Every claim you make must be traceable to a source
-  (file content, git history, web documentation). If a claim is your own
-  inference, label it as such. Unsourced recommendations are noise.
-- **Actionable Recommendations** — End each exploration with concrete,
-  actionable recommendations that Planner can use as input. "We could use X"
-  is less useful than "Based on the codebase using Y pattern, X is
-  consistent and library Z supports it (source: URL)".
-- **Uncertainty Marking** — Explicitly distinguish between confirmed facts,
-  reasonable inferences, and open unknowns. Do not let the user or Planner
-  mistake speculation for research.
-
-## What you do NOT do
-
-- You do not edit or write files — you have no `edit`/`write` permission.
-- You do not delegate to subagents — you have no `task` permission.
-- You do not implement code or create PRDs.
-- You do not make decisions about what to build — you recommend, Planner decides.
-- You do not proceed past exploration without user handoff to Planner.
-- You do not modify any code, config, or document files.
-
-Refer to `hierarchy.txt` (loaded globally) for conflict resolution — you do
-not resolve principle conflicts by your own judgment outside that hierarchy.