pluidr 0.6.0 → 0.7.0

package/README.md

@@ -10,13 +10,13 @@
 
 ## What is Pluidr?
 
-Pluidr installs a **17-agent pipeline** into OpenCode — structured around **3 primary agents**, each with their own exclusive subagents, scoped permissions, and enforced workflow rules. No shared subagents. No ad-hoc delegation.
+Pluidr installs **3 primary agents + 14 subagents** into OpenCode — each primary agent owns its exclusive subagents, scoped permissions, and enforced workflow rules. No shared subagents. No ad-hoc delegation.
 
-| Primary Agent | Purpose | Subagents |
-|---|---|---|
-| **Composer** | Feature work — Explore → Plan → Build | Researcher, Plan-Writer, Plan-Checker, Coder, Tester, Reviewer, Compose-Reporter |
-| **Debugger** | Bug investigation — Investigate → Fix → Report | Inspector, Fixer, Debug-Reporter |
-| **Prober** | Security audit — Trace → Patch → Audit | Tracer, Patcher, Auditor, Probe-Reporter |
+| Primary Agent | Model Tier | Purpose | Subagents |
+|---|---|---|---|
+| **Composer** | 🧠 Reasoning | Feature work — Explore → Plan → Build | Researcher, Plan-Writer, Plan-Checker, Coder, Tester, Reviewer, Compose-Reporter |
+| **Debugger** | 🧠 Reasoning | Bug investigation — Investigate → Fix → Report | Inspector, Fixer, Debug-Reporter |
+| **Prober** | 🧠 Reasoning | Security audit — Trace → Patch → Audit | Tracer, Patcher, Auditor, Probe-Reporter |
 
 ---
 
@@ -231,22 +231,22 @@ You trigger a security audit
 
 Each subagent belongs to exactly one primary agent and cannot be invoked by anyone else:
 
-| Primary | Phase | Subagent | Role |
-|---------|-------|----------|------|
-| Composer | EXPLORE | Researcher | Fact-finding: confirmed_facts / inferred_facts / unknowns / risks |
-| Composer | PLAN | Plan-Writer | **Formatter** — writes PRD to `docs/plans/`, missing input = TBD |
-| Composer | PLAN | Plan-Checker | **Gate** — PASS/FAIL + gap list only, no suggestions |
-| Composer | BUILD | Coder | Implements code from PRD |
-| Composer | BUILD | Tester | PASS/FAIL/BLOCKED + coverage gaps only |
-| Composer | BUILD | Reviewer | **Gate** — PASS/FAIL + gap list only, no suggestions |
-| Composer | BUILD | Compose-Reporter | **Formatter** — completion report to `docs/reports/` |
-| Debugger | DEBUG | Inspector | Brooks-Lint RCA (Iron Law + 6 decay risks + 4 review modes) |
-| Debugger | DEBUG | Fixer | Minimal, root-cause-targeted fix |
-| Debugger | DEBUG | Debug-Reporter | **Formatter** — Iron Law diagnosis report to `docs/reports/` |
-| Prober | TRACE | Tracer | WSTG recon + vuln path tracing, no remedies |
-| Prober | PATCH | Patcher | Minimal, security-targeted fix (Ponytail, max 10 lines) |
-| Prober | AUDIT | Auditor | **Gate** — PASS/FAIL + Gap List + BLOAT List only |
-| Prober | AUDIT | Probe-Reporter | **Formatter** — security audit report to `docs/reports/` |
+| Primary | Phase | Subagent | Model Tier | Role |
+|---------|-------|----------|------------|------|
+| Composer | EXPLORE | Researcher | 🧠 Reasoning | Fact-finding: confirmed_facts / inferred_facts / unknowns / risks |
+| Composer | PLAN | Plan-Writer | ⚡ Fast | **Formatter** — writes PRD to `docs/plans/`, missing input = TBD |
+| Composer | PLAN | Plan-Checker | 🧠 Reasoning | **Gate** — PASS/FAIL + gap list only, no suggestions |
+| Composer | BUILD | Coder | ⚡ Fast | Implements code from PRD |
+| Composer | BUILD | Tester | 🎯 Precision | PASS/FAIL/BLOCKED + coverage gaps only |
+| Composer | BUILD | Reviewer | 🎯 Precision | **Gate** — PASS/FAIL + gap list only, no suggestions |
+| Composer | BUILD | Compose-Reporter | ⚡ Fast | **Formatter** — completion report to `docs/reports/` |
+| Debugger | INVESTIGATE | Inspector | 🧠 Reasoning | Brooks-Lint RCA (Iron Law + 6 decay risks + 4 review modes) |
+| Debugger | FIX | Fixer | ⚡ Fast | Minimal, root-cause-targeted fix |
+| Debugger | REPORT | Debug-Reporter | ⚡ Fast | **Formatter** — Iron Law diagnosis report to `docs/reports/` |
+| Prober | TRACE | Tracer | 🎯 Precision | WSTG recon + vuln path tracing, no remedies |
+| Prober | PATCH | Patcher | ⚡ Fast | Minimal, security-targeted fix (Ponytail, max 10 lines) |
+| Prober | AUDIT | Auditor | 🎯 Precision | **Gate** — PASS/FAIL + Gap List + BLOAT List only |
+| Prober | AUDIT | Probe-Reporter | ⚡ Fast | **Formatter** — security audit report to `docs/reports/` |
 
 ---
 
@@ -301,9 +301,17 @@ npx pluidr init
 
 ## Usage
 
+### `pluidr`
+
+The everyday command. Runs three steps in sequence:
+
+1. **Update check** — compares local version against npm registry; prompts to `npm install -g pluidr` if a new version is available
+2. **Doctor check** — verifies installation health; prompts to repair with `pluidr init` if any checks fail
+3. **Launch** — spawns `opencode`
+
 ### `pluidr init`
 
-Prompts you to select models for two agent tiers (reasoning-heavy and fast), then:
+Prompts you to select models for three agent tiers (reasoning, precision, and fast), then:
 
 - Asks whether to install the pluidr-squeeze plugin (can decline)
 - Builds a complete `opencode.jsonc` config with the chosen models injected into the right agents
@@ -328,7 +336,7 @@ Exits with code `0` if all pass, `1` if any fail.
 
 ### `pluidr update`
 
-Re-runs the setup wizard. Warns if existing config is found and asks for confirmation before overwriting.
+Checks the npm registry for a newer version of pluidr and prompts to install it.
 
 ### `pluidr uninstall`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pluidr",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Opinionated Engineering Workflow for OpenCode — Explore, Plan, Build, Debug, and Security-Audit.",
   "keywords": [
     "opencode",

package/src/cli/commands/doctor.js

@@ -1,15 +1,12 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs"
-import { join, dirname } from "node:path"
-import { fileURLToPath } from "node:url"
-import { execFileSync } from "node:child_process"
+import { join } from "node:path"
 import { getConfigDir, getConfigPath, getPromptsDir } from "../../core/paths.js"
-import { findRtkPath } from "../../core/squeezeInstaller.js"
+import { findSqueezePath } from "../../core/squeezeInstaller.js"
 
-const __dirname = dirname(fileURLToPath(import.meta.url))
 const EXPECTED_PROMPT_COUNT = 18
 const PLUGIN_FILES = ["pluidr-flow.js", "pluidr-squeeze.js"]
 
-export async function runDoctor() {
+export function collectChecks() {
   const configDir = getConfigDir()
   const configPath = getConfigPath()
   const promptsDir = getPromptsDir()
@@ -54,16 +51,16 @@ export async function runDoctor() {
   }
   checks.push({ component: "package.json + plugin dep", pass: pkgValid })
 
-  // 5. RTK binary exists
-  let rtkFound = false
-  const rtkOnPath = findRtkPath()
-  if (rtkOnPath) {
-    rtkFound = true
+  // 5. Squeeze binary exists
+  let squeezeFound = false
+  const squeezeOnPath = findSqueezePath()
+  if (squeezeOnPath) {
+    squeezeFound = true
   } else {
-    const binName = process.platform === "win32" ? "rtk.exe" : "rtk"
-    rtkFound = existsSync(join(binDir, binName))
+    const binName = process.platform === "win32" ? "squeeze.exe" : "squeeze"
+    squeezeFound = existsSync(join(binDir, binName))
   }
-  checks.push({ component: "squeeze binary", pass: rtkFound })
+  checks.push({ component: "squeeze binary tested", pass: squeezeFound })
 
   // 6. Config is valid JSON/JSONC
   let configValid = false
@@ -79,8 +76,13 @@ export async function runDoctor() {
   }
   checks.push({ component: "config JSON validity", pass: configValid })
 
-  // Print summary table
+  return checks
+}
+
+export async function runDoctor() {
+  const checks = collectChecks()
   const allPass = checks.every((c) => c.pass)
+
   console.log("\nPluidr Doctor — Installation Health Check\n")
   for (const c of checks) {
     const icon = c.pass ? "\u2713" : "\u2717"

package/src/cli/commands/init.js

@@ -25,7 +25,7 @@ export async function runInit() {
     initialValue: true,
   })
 
-  const installSqueezePlugin = isCancel(squeezeAnswer) ? true : squeezeAnswer
+  const installSqueezePlugin = isCancel(squeezeAnswer) ? false : squeezeAnswer
 
   backupExistingConfig()
 

package/src/cli/commands/launch.js

@@ -0,0 +1,44 @@
+import { spawn } from "node:child_process"
+import { confirm, isCancel } from "@clack/prompts"
+import { checkAndPromptUpdate } from "../../core/versionCheck.js"
+import { version } from "../../core/version.js"
+import { collectChecks } from "./doctor.js"
+import { runInit } from "./init.js"
+
+export async function runLaunch() {
+  // 1. Update check
+  await checkAndPromptUpdate(version)
+
+  // 2. Doctor check
+  process.stdout.write("Running doctor...         ")
+  const checks = collectChecks()
+  const allPass = checks.every((c) => c.pass)
+
+  if (allPass) {
+    console.log("✓ All checks passed")
+  } else {
+    const failed = checks.filter((c) => !c.pass)
+    console.log(`✗ ${failed.length} check${failed.length > 1 ? "s" : ""} failed`)
+    for (const c of failed) {
+      const detail = c.detail ? ` (${c.detail})` : ""
+      console.log(`  ✗ ${c.component}${detail}`)
+    }
+
+    const answer = await confirm({ message: "Repair with pluidr init?", initialValue: true })
+    if (!isCancel(answer) && answer) {
+      await runInit()
+    }
+  }
+
+  // 3. Launch opencode
+  console.log("Launching opencode...")
+  const child = spawn("opencode", [], { stdio: "inherit" })
+  child.on("error", (err) => {
+    if (err.code === "ENOENT") {
+      console.error("Error: opencode not found on PATH. Install it from https://opencode.ai")
+    } else {
+      console.error(`Error launching opencode: ${err.message}`)
+    }
+    process.exit(1)
+  })
+}

package/src/cli/commands/uninstall.js

@@ -1,5 +1,5 @@
 import { existsSync, copyFileSync, rmSync, readdirSync } from "node:fs"
-import { join, dirname } from "node:path"
+import { join } from "node:path"
 import { getConfigDir, getConfigPath } from "../../core/paths.js"
 
 function findLatestBackup() {
@@ -27,11 +27,7 @@ export async function runUninstall() {
 
   // Restore latest backup
   const latestBackup = findLatestBackup()
-  if (latestBackup && existsSync(configPath)) {
-    copyFileSync(latestBackup, configPath)
-    summary.restored = latestBackup
-  } else if (latestBackup) {
-    // Config doesn't exist but backup does — restore anyway
+  if (latestBackup) {
     copyFileSync(latestBackup, configPath)
     summary.restored = latestBackup
   }

package/src/cli/commands/update.js

@@ -1,22 +1,6 @@
-import { existsSync } from "node:fs"
-import { confirm, isCancel } from "@clack/prompts"
-import { getConfigPath } from "../../core/paths.js"
-import { runInit } from "./init.js"
+import { checkAndPromptUpdate } from "../../core/versionCheck.js"
+import { version } from "../../core/version.js"
 
 export async function runUpdate() {
-  const configPath = getConfigPath()
-
-  if (existsSync(configPath)) {
-    const answer = await confirm({
-      message: "Existing Pluidr config found. Overwrite? (Y/n)",
-      initialValue: true,
-    })
-
-    if (isCancel(answer) || !answer) {
-      console.log("Update cancelled.")
-      return
-    }
-  }
-
-  await runInit()
+  await checkAndPromptUpdate(version)
 }

package/src/cli/index.js

@@ -5,30 +5,33 @@ import { runInit } from "./commands/init.js"
 import { runUninstall } from "./commands/uninstall.js"
 import { runUpdate } from "./commands/update.js"
 import { runDoctor } from "./commands/doctor.js"
+import { runLaunch } from "./commands/launch.js"
+import { version } from "../core/version.js"
 
-const __dirname = dirname(fileURLToPath(import.meta.url))
-const pkg = JSON.parse(readFileSync(resolve(__dirname, "../../package.json"), "utf-8"))
+const HELP = `Usage: pluidr [command]
 
-const HELP = `Usage: pluidr <command>
-
-Commands:
-  init          Set up OpenCode with Pluidr's 12-agent pipeline
-  uninstall     Remove Pluidr artifacts and restore previous config
-  update        Re-run setup (overwrites current config)
-  doctor        Verify installation health
-  --version, -v  Print version number
-  --help, -h     Show this help message`
+  pluidr              Check for updates, run doctor, launch opencode
+  pluidr init         Set up OpenCode with Pluidr's 17-agent pipeline
+  pluidr update       Check for pluidr updates
+  pluidr doctor       Verify installation health
+  pluidr uninstall    Remove Pluidr artifacts and restore previous config
+  --version, -v       Print version number
+  --help, -h          Show this help message`
 
 export function run(argv) {
   const cmd = argv[2]
 
+  if (!cmd) {
+    return runLaunch()
+  }
+
   if (cmd === "--help" || cmd === "-h") {
     console.log(HELP)
     return
   }
 
   if (cmd === "--version" || cmd === "-v") {
-    console.log(pkg.version)
+    console.log(version)
     return
   }
 
@@ -48,6 +51,7 @@ export function run(argv) {
     return runDoctor()
   }
 
+  console.error(`Unknown command: ${cmd}\n`)
   console.log(HELP)
   process.exit(1)
 }

package/src/cli/wizard/selectModelTier.js

@@ -1,8 +1,9 @@
 import { select, text, isCancel } from "@clack/prompts"
 
 const TIER_LABELS = {
-  reasoningHeavy: "Model for reasoning task",
-  fast: "Model for fast/cheap task",
+  reasoning: "Model for reasoning task (orchestrators + deep analysis)",
+  precision: "Model for precision task (quality gates + verification)",
+  fast: "Model for fast/cheap task (builders + formatters)",
 }
 
 export async function selectModelTier(modelDefaults) {

package/src/core/backup.js

@@ -20,7 +20,9 @@ function rotateBackups(configPath) {
       .filter((f) => f.startsWith(baseName + "."))
       .map((f) => join(dir, f))
       .sort()
-  } catch { /* dir doesn't exist yet */ }
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err
+  }
 
   while (backups.length >= MAX_BACKUPS) {
     const oldest = backups.shift()

package/src/core/configBuilder.test.js

@@ -12,15 +12,21 @@ describe("configBuilder", () => {
     const configJson = {
       agent: {
         composer: {},
+        reviewer: {},
         coder: {},
       },
     }
     const defaultsJson = {
-      reasoningHeavy: {
+      reasoning: {
         provider: "test",
         model: "big-model",
         agents: ["composer"],
       },
+      precision: {
+        provider: "test",
+        model: "mid-model",
+        agents: ["reviewer"],
+      },
       fast: {
         provider: "test",
         model: "small-model",
@@ -33,15 +39,55 @@ describe("configBuilder", () => {
 
     const result = buildConfig(
       {
-        reasoningHeavy: "test/big-model",
+        reasoning: "test/big-model",
+        precision: "test/mid-model",
         fast: "test/small-model",
       },
       tmpDir,
     )
 
     assert.strictEqual(result.agent.composer.model, "test/big-model")
+    assert.strictEqual(result.agent.reviewer.model, "test/mid-model")
     assert.strictEqual(result.agent.coder.model, "test/small-model")
 
     rmSync(tmpDir, { recursive: true })
   })
+
+  it("throws an error if a defaulted agent is missing from config template", () => {
+    const tmpDir = mkdtempSync(join(tmpdir(), "configbuilder-test-err-"))
+
+    const configJson = {
+      agent: {
+        // missing 'composer'
+        coder: {},
+      },
+    }
+    const defaultsJson = {
+      reasoning: {
+        provider: "test",
+        model: "big-model",
+        agents: ["composer"],
+      },
+      fast: {
+        provider: "test",
+        model: "small-model",
+        agents: ["coder"],
+      },
+    }
+
+    writeFileSync(join(tmpDir, "opencode.config.json"), JSON.stringify(configJson), "utf-8")
+    writeFileSync(join(tmpDir, "model-defaults.json"), JSON.stringify(defaultsJson), "utf-8")
+
+    assert.throws(() => {
+      buildConfig(
+        {
+          reasoning: "test/big-model",
+          fast: "test/small-model",
+        },
+        tmpDir,
+      )
+    }, /Template validation failed: agent\(s\) not found/)
+
+    rmSync(tmpDir, { recursive: true })
+  })
 })

package/src/core/squeezeInstaller.js

@@ -1,5 +1,5 @@
 import { execFileSync } from "node:child_process"
-import { chmodSync, mkdirSync, existsSync, writeFileSync, unlinkSync, readFileSync } from "node:fs"
+import { chmodSync, mkdirSync, existsSync, writeFileSync, unlinkSync, readFileSync, renameSync } from "node:fs"
 import { extname, join, resolve, dirname } from "node:path"
 import { fileURLToPath } from "node:url"
 import { createHash } from "node:crypto"
@@ -7,7 +7,10 @@ import { getConfigDir } from "./paths.js"
 
 const __dirname = dirname(fileURLToPath(import.meta.url))
 
-const BIN_NAME = process.platform === "win32" ? "rtk.exe" : "rtk"
+// Local binary name — friendlier than the upstream "rtk" name
+const BIN_NAME = process.platform === "win32" ? "squeeze.exe" : "squeeze"
+// Name of the binary inside the downloaded archive (upstream uses "rtk")
+const RTK_BIN_NAME = process.platform === "win32" ? "rtk.exe" : "rtk"
 export const ASSETS = {
   "darwin-arm64": "rtk-aarch64-apple-darwin.tar.gz",
   "darwin-x64": "rtk-x86_64-apple-darwin.tar.gz",
@@ -28,10 +31,10 @@ export function validatePath(path) {
   }
 }
 
-export function findRtkPath() {
+export function findSqueezePath() {
   try {
     const [cmd, ...args] =
-      process.platform === "win32" ? ["where", "rtk"] : ["which", "rtk"]
+      process.platform === "win32" ? ["where", "squeeze"] : ["which", "squeeze"]
     return execFileSync(cmd, args, { stdio: "pipe" })
       .toString()
       .trim()
@@ -85,13 +88,13 @@ function verifyChecksum(buffer, assetName) {
 }
 
 export async function installSqueeze() {
-  let rtkPath = findRtkPath()
+  let rtkPath = findSqueezePath()
 
   if (!rtkPath) {
     // Not on PATH — download it to the managed location
     const asset = platformAsset()
     if (!asset) {
-      console.warn("⚠ Squeeze: unsupported platform — install rtk manually")
+      console.warn("⚠ Squeeze: unsupported platform — squeeze binary unavailable")
       return
     }
 
@@ -127,14 +130,31 @@ export async function installSqueeze() {
 
       try { unlinkSync(archivePath) } catch {}
 
+      // Archive contains "rtk"/"rtk.exe" — rename to local BIN_NAME ("squeeze")
+      const extracted = join(binDir, RTK_BIN_NAME)
       rtkPath = join(binDir, BIN_NAME)
+      if (existsSync(extracted) && extracted !== rtkPath) {
+        renameSync(extracted, rtkPath)
+      }
 
       if (process.platform !== "win32" && existsSync(rtkPath)) {
         chmodSync(rtkPath, 0o755)
       }
-    } catch {
+
+      // Verify that the downloaded binary is executable and runs on this platform
+      try {
+        execFileSync(rtkPath, ["--help"], { stdio: "ignore" })
+      } catch (err) {
+        // If it throws because of execution format or permissions (e.g. ENOEXEC, EACCES, ENOENT)
+        if (err.code === "ENOEXEC" || err.code === "EACCES" || err.code === "ENOENT") {
+          try { unlinkSync(rtkPath) } catch {}
+          throw new Error(`Downloaded binary is not executable on this platform: ${err.message}`)
+        }
+        // If it ran but exited with non-zero (like returning exit code 1 for --help), that's fine, it means it is executable!
+      }
+    } catch (err) {
       try { unlinkSync(archivePath) } catch {}
-      console.warn("⚠ Squeeze: download failed after 3 attempts — install rtk manually")
+      console.warn(`⚠ Squeeze: installation failed (${err.message}) — squeeze plugin disabled`)
       return
     }
   }

package/src/core/squeezeInstaller.test.js

@@ -1,6 +1,6 @@
 import { describe, it } from "node:test"
 import assert from "node:assert"
-import { platformAsset, validatePath, findRtkPath, ASSETS } from "./squeezeInstaller.js"
+import { platformAsset, validatePath, findSqueezePath, ASSETS } from "./squeezeInstaller.js"
 
 describe("platformAsset", () => {
   it("returns a string or null for current platform", () => {
@@ -66,11 +66,9 @@ describe("validatePath", () => {
   })
 })
 
-describe("findRtkPath", () => {
-  it("returns null when rtk is not available on PATH", () => {
-    // This test is safe because if rtk IS on PATH, we still get a
-    // string back — but the test doesn't crash either way.
-    const result = findRtkPath()
+describe("findSqueezePath", () => {
+  it("returns null when squeeze is not available on PATH", () => {
+    const result = findSqueezePath()
     // Either null (not on PATH) or a non-empty string (found)
     assert.ok(result === null || typeof result === "string")
   })

package/src/core/version.js

@@ -0,0 +1,8 @@
+import { readFileSync } from "node:fs"
+import { resolve, dirname } from "node:path"
+import { fileURLToPath } from "node:url"
+
+const __dirname = dirname(fileURLToPath(import.meta.url))
+export const version = JSON.parse(
+  readFileSync(resolve(__dirname, "../../package.json"), "utf-8")
+).version

package/src/core/versionCheck.js

@@ -0,0 +1,35 @@
+import { execFileSync } from "node:child_process"
+import { confirm, isCancel } from "@clack/prompts"
+
+export function fetchLatestVersion() {
+  try {
+    return execFileSync("npm", ["view", "pluidr", "version"], { stdio: "pipe" })
+      .toString()
+      .trim()
+  } catch {
+    return null
+  }
+}
+
+export async function checkAndPromptUpdate(currentVersion) {
+  process.stdout.write("Checking for updates...   ")
+
+  const latest = fetchLatestVersion()
+  if (!latest) {
+    console.log("⚠ Could not reach npm registry — skipping")
+    return false
+  }
+
+  if (latest === currentVersion) {
+    console.log(`✓ Up to date (${currentVersion})`)
+    return false
+  }
+
+  console.log(`⚠ pluidr ${latest} available  (you have ${currentVersion})`)
+
+  const answer = await confirm({ message: "Update now?", initialValue: true })
+  if (isCancel(answer) || !answer) return false
+
+  execFileSync("npm", ["install", "-g", "pluidr"], { stdio: "inherit" })
+  return true
+}

package/src/core/versionCheck.test.js

@@ -0,0 +1,24 @@
+import { describe, it } from "node:test"
+import assert from "node:assert"
+import { execFileSync } from "node:child_process"
+import { fetchLatestVersion } from "./versionCheck.js"
+
+describe("fetchLatestVersion", () => {
+  it("returns a string or null", () => {
+    // Either reaches npm registry (string) or fails gracefully (null)
+    const result = fetchLatestVersion()
+    assert.ok(result === null || typeof result === "string")
+  })
+
+  it("returns null when npm command throws", () => {
+    // Verify the try/catch in fetchLatestVersion swallows errors
+    let caught = null
+    try {
+      execFileSync("npm", ["view", "__nonexistent_pkg_xyz_pluidr__", "version"], { stdio: "pipe" })
+    } catch (err) {
+      caught = err
+    }
+    // npm throws on unknown package — fetchLatestVersion handles this and returns null
+    assert.ok(caught instanceof Error, "npm should throw for unknown package")
+  })
+})

package/src/plugins/README.md

@@ -21,16 +21,16 @@ attribution, and one-line tool-invocation summaries, separated by
 ## `pluidr-squeeze.js` — command output filtering
 
 Implementation of the `PluidrSqueezePlugin`. Hooks into `tool.execute.before`
-to rewrite bash commands through the `rtk` binary. The binary filters,
-groups, truncates, and deduplicates command output — saving 60-90% of
-tokens across all agents.
+to rewrite bash commands through the local `squeeze` binary (built on the `rtk`
+engine). The binary filters, groups, truncates, and deduplicates command
+output — saving 60-90% of tokens across all agents.
 
-The plugin is a thin delegator: all rewrite logic lives in the `rtk` binary.
+The plugin is a thin delegator: all rewrite logic lives in the engine binary.
 It checks `PATH` first, then falls back to Pluidr's managed location at
-`~/.config/opencode/bin/rtk`. If the binary is not found, the plugin
+`~/.config/opencode/bin/squeeze`. If the binary is not found, the plugin
 gracefully disables itself with a warning.
 
-`pluidr init` downloads the `rtk` binary automatically during setup.
+`pluidr init` downloads the `squeeze` binary automatically during setup.
 
 ## Why `pluidr-flow` was extracted
 
@@ -61,8 +61,8 @@ agent in its pipeline, so the tool would have no caller — YAGNI.
 
 `pluidr init` copies both plugins into `~/.config/opencode/plugins/` and
 writes a `package.json` declaring `@opencode-ai/plugin: ^1.17.9` as a
-dependency. For `pluidr-squeeze`, it also downloads the `rtk` engine binary
-to `~/.config/opencode/bin/`. On OpenCode's first launch, the bundled Bun
-runtime detects the `package.json` and runs `bun install` automatically —
-no user action required. Once installed, both plugins are available to
-every agent that has the appropriate permissions.
+dependency. For `pluidr-squeeze`, it also downloads and extracts the `squeeze`
+engine binary to `~/.config/opencode/bin/`. On OpenCode's first launch, the
+bundled Bun runtime detects the `package.json` and runs `bun install`
+automatically — no user action required. Once installed, both plugins are
+available to every agent that has the appropriate permissions.

package/src/plugins/pluidr-squeeze.js

@@ -2,21 +2,42 @@ import { existsSync } from "node:fs"
 import { homedir } from "node:os"
 import { join } from "node:path"
 
-const BIN_NAME = process.platform === "win32" ? "rtk.exe" : "rtk"
+const BIN_NAME = process.platform === "win32" ? "squeeze.exe" : "squeeze"
 const SQUEEZE_BIN = join(homedir(), ".config", "opencode", "bin", BIN_NAME)
 
 function normalise(p) {
   return p.replace(/\\/g, "/")
 }
 
+// Quote a path if it contains spaces so the shell treats it as one token.
+export function shellQuote(p) {
+  return p.includes(" ") ? `"${p}"` : p
+}
+
+// Exported for testing. When binPath is the managed full path (not "squeeze"
+// on PATH), the binary may output "rtk <cmd>" or "squeeze <cmd>" depending on
+// how it resolves its own name. Replace the leading token with the actual
+// binPath (quoted if it contains spaces) so the shell can find it. When
+// squeeze is on PATH, normalise any "rtk" prefix to "squeeze".
+export function resolveRewritten(rewritten, binPath) {
+  const m = rewritten.match(/^(rtk|squeeze)(\s|$)/)
+  if (!m) return rewritten
+  if (binPath === "squeeze") {
+    // squeeze is on PATH — normalise any leading binary name to "squeeze"
+    return "squeeze" + rewritten.slice(m[1].length)
+  }
+  // managed path — replace leading binary name with (quoted) full path
+  return shellQuote(binPath) + rewritten.slice(m[1].length)
+}
+
 async function findBinary($) {
   try {
     if (process.platform === "win32") {
-      await $`where rtk`.quiet()
+      await $`where squeeze`.quiet()
     } else {
-      await $`which rtk`.quiet()
+      await $`which squeeze`.quiet()
     }
-    return "rtk"
+    return "squeeze"
   } catch {
     if (existsSync(SQUEEZE_BIN)) {
       return normalise(SQUEEZE_BIN)
@@ -28,7 +49,7 @@ async function findBinary($) {
 export const PluidrSqueezePlugin = async ({ $ }) => {
   const binPath = await findBinary($)
   if (!binPath) {
-    console.warn("[squeeze] rtk binary not found — plugin disabled")
+    console.warn("[squeeze] squeeze binary not found — plugin disabled")
     return {}
   }
 
@@ -46,7 +67,7 @@ export const PluidrSqueezePlugin = async ({ $ }) => {
         const result = await $`${binPath} rewrite ${command}`.quiet().nothrow()
         const rewritten = String(result.stdout).trim()
         if (rewritten && rewritten !== command) {
-          args.command = rewritten
+          args.command = resolveRewritten(rewritten, binPath)
         }
       } catch {
         // rewrite failed — pass through unchanged

package/src/templates/agent-prompts/composer.txt

@@ -142,17 +142,18 @@ only). That's it — you have no `read`, `glob`, `grep`, `webfetch`,
 **Guardrail Gate 1 — EXPLORE to PLAN or BUILD transition**:
 After you have gathered sufficient context and produced recommendations,
 you MUST internally assess whether the feature is simple enough to skip
-the PRD phase. This is YOUR judgment, not the user's.
+the PRD phase. 
 
-A feature is **simple** when ALL of these apply:
-- The approach is well-understood (no research unknowns)
-- Few files to change (1-3 files)
-- Low risk of regressions or side effects
-- Clear, unambiguous requirements
-- No complex dependencies or integration concerns
+**Bias heavily toward the PLAN phase.** Writing a PRD is the safest default. You must default to the PLAN (PRD) phase unless the feature is extremely simple.
 
-If ANY of these is uncertain or the feature touches multiple systems,
-it is **complex** — proceed to PLAN phase.
+A feature is **simple** ONLY when ALL of these apply:
+- It is an extremely trivial change (e.g., fixing a typo, updating a single configuration value, changing a single line of text).
+- It changes only 1 single file.
+- The approach is completely obvious and well-understood (no research unknowns).
+- Zero risk of regressions or side effects.
+- No new files or new tests are created.
+
+If the change involves writing new logic, adding new functions, creating a new file, or modifying multiple files, it is **complex** by definition — you MUST proceed to the PLAN phase. Do not offer a direct build shortcut.
 
 Based on your assessment:
 
@@ -395,6 +396,7 @@ elsewhere. Do not accept a report that is not in `docs/reports/`.
   already confirmed as PASS.
 - **Clarification** — If anything is ambiguous at any phase, ask the user
   using multiple-choice options (2-4 short choices per question).
+- **Front-End / UI Mockups** — If the user asks for a design, mockup, or anything related to the Front-End (FE), you must provide a detailed ASCII mockup of the UI structure in your output.
 
 ---
 

package/src/templates/agent-prompts/researcher.txt

@@ -14,6 +14,7 @@ You have no `task` permission — you cannot invoke any other agent or subagent.
 - **Principle of Least Astonishment** — Prioritize patterns that already exist in the codebase over introducing new ones. The most predictable solution is the one the codebase already uses.
 - **DRY** — Before researching a solution, check if a precedent already exists in the codebase. Do not research from scratch if prior art exists.
 - **Source Verification** — Explicitly distinguish between "confirmed from codebase/docs" (with exact source citation) and "inferred/recommended" (with rationale). Never blend the two.
+- **Front-End / UI Mockups** — If the research request or context involves UI components, mockups, or Front-End (FE) design elements, include a detailed ASCII mockup representing the visual layout in your output.
 
 ## Mandatory Output Schema
 

package/src/templates/model-defaults.json

@@ -1,14 +1,14 @@
 {
-  "reasoningHeavy": {
+  "reasoning": {
     "provider": "opencode",
     "model": "big-pickle",
     "agents": [
       "composer",
       "debugger",
+      "prober",
       "researcher",
       "plan-checker",
-      "inspector",
-      "prober"
+      "inspector"
     ],
 
     "recommended": [
@@ -23,20 +23,38 @@
       { "value": "openai/gpt-5.5", "label": "openai/gpt-5.5" }
     ]
   },
+  "precision": {
+    "provider": "opencode",
+    "model": "big-pickle",
+    "agents": [
+      "tester",
+      "reviewer",
+      "auditor",
+      "tracer"
+    ],
+
+    "recommended": [
+      {
+        "value": "opencode/big-pickle",
+        "label": "default (opencode/big-pickle)"
+      },
+      {
+        "value": "anthropic/claude-sonnet-4-5",
+        "label": "anthropic/claude-sonnet-4-5"
+      },
+      { "value": "openai/gpt-5.1", "label": "openai/gpt-5.1" }
+    ]
+  },
   "fast": {
     "provider": "opencode",
     "model": "deepseek-v4-flash-free",
     "agents": [
       "coder",
-      "tester",
-      "reviewer",
-      "compose-reporter",
       "fixer",
+      "patcher",
       "plan-writer",
+      "compose-reporter",
       "debug-reporter",
-      "tracer",
-      "patcher",
-      "auditor",
       "probe-reporter"
     ],
 

package/src/templates/opencode.config.json

@@ -6,6 +6,16 @@
       "*.env": "deny",
       "*.env.*": "deny",
       "secrets/**": "deny"
+    },
+    "edit": {
+      "*.env": "deny",
+      "*.env.*": "deny",
+      "secrets/**": "deny"
+    },
+    "write": {
+      "*.env": "deny",
+      "*.env.*": "deny",
+      "secrets/**": "deny"
     }
   },
   "agent": {
@@ -75,17 +85,8 @@
         "read": "allow",
         "glob": "allow",
         "grep": "allow",
-        "edit": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow",
-          "package.json": "allow"
-        },
-        "write": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow"
-        },
+        "edit": "allow",
+        "write": "allow",
         "todowrite": "allow",
         "bash": {
           "*": "deny",
@@ -99,17 +100,10 @@
           "mv *": "allow",
           "cat *": "allow",
           "ls *": "allow",
-          "pwd": "allow",
-          "echo *": "allow",
           "rg *": "allow",
           "grep *": "allow",
           "find *": "allow",
-          "which *": "allow",
-          "where *": "allow",
-          "dir *": "allow",
-          "type *": "allow",
-          "node --test": "allow",
-          "cd *": "allow"
+          "node --test": "allow"
         },
         "task": "deny"
       }
@@ -117,7 +111,7 @@
 
     "tester": {
       "mode": "subagent",
-      "description": "Runs tests on implemented code and reports results (PASS/FAIL/BLOCKED) with coverage gaps. Cannot fix code, redesign tests, or decide next steps.",
+      "description": "Runs tests on implemented code and reports results (PASS/FAIL/BLOCKED) with coverage gaps. Cannot fix code, install deps, or decide next steps.",
       "prompt": "{file:./prompts/tester.txt}",
       "permission": {
         "read": "allow",
@@ -126,7 +120,19 @@
         "edit": "deny",
         "write": "deny",
         "todowrite": "deny",
-        "bash": "allow",
+        "bash": {
+          "*": "deny",
+          "node --test": "allow",
+          "npm test": "allow",
+          "npx *": "allow",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "git diff*": "allow",
+          "git log*": "allow"
+        },
         "task": "deny"
       }
     },
@@ -156,14 +162,23 @@
 
     "compose-reporter": {
       "mode": "subagent",
-      "description": "Text-file executor for Composer. Writes and edits .md/.txt files across the project — like coder but for documents only. No bash.",
+      "description": "Text-file executor for Composer. Writes and edits .md/.txt files under docs/ — stateless formatter for documents only. No bash.",
       "prompt": "{file:./prompts/compose-reporter.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "edit": "allow",
-        "write": "allow",
+        "read": {
+          "*": "deny",
+          "docs/**": "allow"
+        },
+        "glob": "deny",
+        "grep": "deny",
+        "edit": {
+          "*": "deny",
+          "docs/**": "allow"
+        },
+        "write": {
+          "*": "deny",
+          "docs/**": "allow"
+        },
         "bash": "deny",
         "todowrite": "deny",
         "task": "deny"
@@ -181,7 +196,16 @@
         "grep": "allow",
         "edit": "deny",
         "write": "deny",
-        "bash": "deny",
+        "bash": {
+          "*": "deny",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "node --version": "allow",
+          "npm --version": "allow"
+        },
         "webfetch": "allow",
         "websearch": "allow",
         "task": "deny"
@@ -193,9 +217,12 @@
       "description": "Stateless formatter for Composer. Produces PRD documents from structured input — no inference, no decisions. PRD mode only.",
       "prompt": "{file:./prompts/plan-writer.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
+        "read": {
+          "*": "deny",
+          "docs/plans/**": "allow"
+        },
+        "glob": "deny",
+        "grep": "deny",
         "edit": {
           "*": "deny",
           "docs/plans/**": "allow"
@@ -264,41 +291,28 @@
         "read": "allow",
         "glob": "allow",
         "grep": "allow",
-        "edit": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow",
-          "package.json": "allow"
-        },
-        "write": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow"
-        },
+        "edit": "allow",
+        "write": "allow",
         "todowrite": "allow",
         "bash": {
           "*": "deny",
+          "node --test": "allow",
+          "npm test": "allow",
           "npm *": "allow",
           "npx *": "allow",
           "node *": "allow",
-          "git *": "allow",
+          "git diff*": "allow",
+          "git log*": "allow",
+          "git show*": "allow",
           "mkdir *": "allow",
           "cp *": "allow",
           "rm *": "allow",
           "mv *": "allow",
           "cat *": "allow",
           "ls *": "allow",
-          "pwd": "allow",
-          "echo *": "allow",
           "rg *": "allow",
           "grep *": "allow",
-          "find *": "allow",
-          "which *": "allow",
-          "where *": "allow",
-          "dir *": "allow",
-          "type *": "allow",
-          "node --test": "allow",
-          "cd *": "allow"
+          "find *": "allow"
         },
         "task": "deny"
       }
@@ -309,9 +323,12 @@
       "description": "Stateless formatter for Debugger. Produces diagnosis + remedy reports from structured input — no inference, no decisions. Summary mode only.",
       "prompt": "{file:./prompts/debug-reporter.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
+        "read": {
+          "*": "deny",
+          "docs/reports/**": "allow"
+        },
+        "glob": "deny",
+        "grep": "deny",
         "edit": {
           "*": "deny",
           "docs/reports/**": "allow"
@@ -361,7 +378,22 @@
         "grep": "allow",
         "edit": "deny",
         "write": "deny",
-        "bash": "allow",
+        "bash": {
+          "*": "deny",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "cat *": "allow",
+          "ls *": "allow",
+          "git log*": "allow",
+          "git diff*": "allow",
+          "git show*": "allow",
+          "git blame*": "allow",
+          "node --version": "allow",
+          "npm --version": "allow",
+          "which *": "allow",
+          "where *": "allow"
+        },
         "task": "deny"
       }
     },
@@ -374,18 +406,8 @@
         "read": "allow",
         "glob": "allow",
         "grep": "allow",
-        "edit": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow",
-          "package.json": "allow"
-        },
-        "write": {
-          "*": "deny",
-          "src/**": "allow",
-          "*.{json,md,txt}": "allow"
-        },
-        "todowrite": "allow",
+        "edit": "allow",
+        "write": "allow",
         "bash": {
           "*": "deny",
           "npm *": "allow",
@@ -398,17 +420,10 @@
           "mv *": "allow",
           "cat *": "allow",
           "ls *": "allow",
-          "pwd": "allow",
-          "echo *": "allow",
           "rg *": "allow",
           "grep *": "allow",
           "find *": "allow",
-          "which *": "allow",
-          "where *": "allow",
-          "dir *": "allow",
-          "type *": "allow",
-          "node --test": "allow",
-          "cd *": "allow"
+          "node --test": "allow"
         },
         "task": "deny"
       }
@@ -424,7 +439,17 @@
         "grep": "allow",
         "edit": "deny",
         "write": "deny",
-        "bash": "allow",
+        "bash": {
+          "*": "deny",
+          "rg *": "allow",
+          "grep *": "allow",
+          "find *": "allow",
+          "cat *": "allow",
+          "git diff*": "allow",
+          "git log*": "allow",
+          "node --test": "allow",
+          "npm test": "allow"
+        },
         "task": "deny"
       }
     },
@@ -434,9 +459,12 @@
       "description": "Stateless formatter for Prober. Produces security audit reports under docs/reports/.",
       "prompt": "{file:./prompts/probe-reporter.txt}",
       "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
+        "read": {
+          "*": "deny",
+          "docs/reports/**": "allow"
+        },
+        "glob": "deny",
+        "grep": "deny",
         "edit": {
           "*": "deny",
           "docs/reports/**": "allow"