principles-disciple 1.73.0 → 1.74.0

package/INSTALL.md

@@ -236,9 +236,7 @@ After installation, enable the PLAN whitelist feature:
 }
 ```
 
-2. Ensure `docs/PLAN.md` has `STATUS: READY`
-
-3. Restart your agent session
+2. Restart your agent session
 
 Now even Stage 1 agents can edit files when a READY plan exists!
 

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "principles-disciple",
   "name": "Principles Disciple",
   "description": "Evolutionary programming agent framework with strategic guardrails and reflection loops.",
-  "version": "1.73.0",
+  "version": "1.74.0",
   "activation": {
     "onCapabilities": [
       "hook"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "principles-disciple",
-  "version": "1.73.0",
+  "version": "1.74.0",
   "description": "Native OpenClaw plugin for Principles Disciple",
   "type": "module",
   "main": "./dist/bundle.js",

package/src/core/event-log.ts

@@ -28,7 +28,6 @@ import type {
   RuleHostAutoCorrectProposedEventData,
   RuleHostAutoCorrectAppliedEventData,
   RuntimeV2PromptActivationsInjectedEventData,
-  RuntimeV2ConfirmFirstGateEventData,
 } from '../types/event-types.js';
 import { createEmptyDailyStats } from '../types/event-types.js';
 import { atomicWriteFileSync } from '../utils/io.js';
@@ -210,14 +209,6 @@ export class EventLog {
     this.record('runtime_v2_prompt_activations_injected', 'injected', data.sessionId, data);
   }
 
-  recordConfirmFirstGateBlocked(data: RuntimeV2ConfirmFirstGateEventData): void {
-    this.record('runtime_v2_confirm_first_gate_blocked', 'blocked', data.sessionId, data);
-  }
-
-  recordConfirmFirstGateApproved(data: RuntimeV2ConfirmFirstGateEventData): void {
-    this.record('runtime_v2_confirm_first_gate_approved', 'approved', data.sessionId, data);
-  }
-
   private record(
     type: EventType, 
     category: EventCategory, 

package/src/core/migration.ts

@@ -19,7 +19,6 @@ export function migrateDirectoryStructure(api: OpenClawPluginApi, workspaceDir:
             { legacy: path.join(legacyDocsDir, 'PRINCIPLES.md'), newKey: 'PRINCIPLES' },
             { legacy: path.join(legacyDocsDir, 'THINKING_OS.md'), newKey: 'THINKING_OS' },
             { legacy: path.join(legacyDocsDir, 'DECISION_POLICY.json'), newKey: 'DECISION_POLICY' },
-            { legacy: path.join(legacyDocsDir, 'PLAN.md'), newKey: 'PLAN' },
             { legacy: path.join(legacyDocsDir, 'evolution_queue.json'), newKey: 'EVOLUTION_QUEUE' },
             { legacy: path.join(legacyDocsDir, '.pain_flag'), newKey: 'PAIN_FLAG' },
             { legacy: path.join(legacyDocsDir, 'SYSTEM_CAPABILITIES.json'), newKey: 'SYSTEM_CAPABILITIES' },

package/src/core/path-resolver.ts

@@ -306,7 +306,6 @@ export class PathResolver {
             'THINKING_OS': workspacePath.join(workspace, '.principles', 'THINKING_OS.md'),
             'DECISION_POLICY': workspacePath.join(workspace, '.principles', 'DECISION_POLICY.json'),
             'MODELS_DIR': workspacePath.join(workspace, '.principles', 'models'),
-            'PLAN': workspacePath.join(workspace, 'PLAN.md'),
             'AGENT_SCORECARD': workspacePath.join(state, 'AGENT_SCORECARD.json'),
             'PAIN_FLAG': workspacePath.join(state, '.pain_flag'),
             'EVOLUTION_QUEUE': workspacePath.join(state, 'evolution_queue.json'),

package/src/core/paths.ts

@@ -68,7 +68,6 @@ export const PD_FILES = {
     NOCTURNAL_EXPORTS_DIR: PD_DIRS.NOCTURNAL_EXPORTS,
     IMPL_CODE_DIR: PD_DIRS.IMPL_CODE_DIR,
 
-    PLAN: 'PLAN.md',
     MEMORY_MD: 'MEMORY.md',
     HEARTBEAT: 'HEARTBEAT.md',
 

package/src/hooks/gate-block-helper.ts

@@ -149,34 +149,39 @@ export function recordGateBlockAndReturn(
     }
   }
 
-  // 6. Return consistent block result with operator guidance
+  // 6. Return consistent block result with contextual operator guidance
+  const blockMessage = buildContextualBlockMessage({ filePath, reason });
+
   return {
     block: true,
-    blockReason: `[Principles Disciple] Security Gate Blocked this action.
+    blockReason: blockMessage,
+  };
+}
+
+/**
+ * Build contextual block message based on block source.
+ * - rule-host: principle-based guidance
+ * - default/gate: generic security gate message
+ */
+function buildContextualBlockMessage({
+  filePath,
+  reason,
+}: {
+  filePath: string;
+  reason: string;
+}): string {
+  // rule-host or generic gate blocks
+  return `[Principles Disciple] Security Gate Blocked this action.
 File: ${filePath}
 Reason: ${reason}
 
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 📋 How to unblock this operation:
 
-1. Use the plan-script skill to create a PLAN.md:
-   → Invoke: skill:plan-script
-
-2. Fill in the plan with:
-   - Target Files: ${filePath}
-   - Steps: What you want to do (be specific)
-   - Metrics: How to verify success
-   - Active Mental Models: Select 2 relevant models from .principles/THINKING_OS.md
-   - Rollback: How to restore if it fails
-
-3. After completing the plan, set STATUS: READY in PLAN.md
-
-4. Retry the operation
-
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-This is a mandatory security gate. The operation was blocked because the modification exceeds the allowed threshold for your current evolution tier.
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━`,
-  };
+This action was blocked by a Rule Host principle.
+If the blocked path is correct and safe, explain the reasoning to the owner
+and ask for explicit confirmation to proceed.
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━`;
 }
 
 /**

package/src/hooks/gate.ts

@@ -9,9 +9,7 @@
  * 2. Rule Host: Dynamic principle-based evaluation (sole gate)
  */
 
-import * as fs from 'fs';
-import * as path from 'path';
-import { normalizePath, planStatus } from '../utils/io.js';
+import { normalizePath } from '../utils/io.js';
 import { WorkspaceContext } from '../core/workspace-context.js';
 import { recordGateBlockAndReturn } from './gate-block-helper.js';
 import { RuleHost } from '../core/rule-host.js';
@@ -19,7 +17,6 @@ import type { RuleHostInput } from '@principles/core/runtime-v2';
 import { validateCorrectionProposal, validateProposedPathBounds } from '@principles/core/runtime-v2';
 import type { PluginHookBeforeToolCallEvent, PluginHookToolContext, PluginHookBeforeToolCallResult, PluginLogger } from '../openclaw-sdk.js';
 import { AGENT_TOOLS, BASH_TOOLS_SET, WRITE_TOOLS } from '../constants/tools.js';
-import { evaluateConfirmFirstGateSync } from '../core/confirm-first-gate.js';
 import { getSession, hasRecentThinking } from '../core/session-tracker.js';
 import { getEvolutionEngine } from '../core/evolution-engine.js';
 import { EventLogService } from '../core/event-log.js';
@@ -42,42 +39,6 @@ export function handleBeforeToolCall(
 
   const wctx = WorkspaceContext.fromHookContext(ctx);
 
-  // 1.5. Confirm-First Gate — runs BEFORE filePath resolution to catch apply_patch/no-path cases
-  try {
-    const cfResult = evaluateConfirmFirstGateSync(
-      ctx.sessionId,
-      event.toolName,
-      event.params,
-    );
-
-    if (cfResult.action === 'block') {
-      const eventLog = EventLogService.get(wctx.stateDir, logger as PluginLogger | undefined);
-      eventLog.recordConfirmFirstGateBlocked({
-        sessionId: ctx.sessionId ?? 'unknown',
-        workspaceDir: ctx.workspaceDir,
-        toolName: event.toolName,
-        reason: cfResult.reason ?? 'confirm_first_required',
-        principleId: cfResult.principleId ?? 'unknown',
-        nextAction: cfResult.nextAction ?? '',
-      });
-
-      // Use safe placeholder when filePath is unavailable (e.g., apply_patch with no path)
-      const safePath = (event.params?.file_path || event.params?.path || event.params?.file || event.params?.target)
-        ?? `<tool:${event.toolName}>`;
-
-      return recordGateBlockAndReturn(wctx, {
-        filePath: typeof safePath === 'string' ? safePath : `<tool:${event.toolName}>`,
-        reason: cfResult.reason ?? 'confirm_first_required',
-        toolName: event.toolName,
-        sessionId: ctx.sessionId,
-        blockSource: 'confirm-first-gate',
-      }, logger);
-    }
-  } catch (cfErr) {
-    // ERR-002: fail loud — log but do not crash the gate
-    logger?.warn?.(`[PD:ConfirmFirst] Gate evaluation failed (non-blocking): ${String(cfErr)}`);
-  }
-
   // 2. Resolve the target file path
   let filePath = event.params?.file_path || event.params?.path || event.params?.file || event.params?.target;
 
@@ -94,6 +55,12 @@ export function handleBeforeToolCall(
     }
   }
 
+  // Write tools without a file path must still go through RuleHost evaluation.
+  // Use a synthetic path so RuleHost can evaluate and potentially block.
+  if (!filePath && isWriteTool) {
+    filePath = `<tool:${event.toolName}>`;
+  }
+
   if (typeof filePath !== 'string') return;
 
   const relPath = normalizePath(filePath, ctx.workspaceDir);
@@ -109,8 +76,12 @@ export function handleBeforeToolCall(
       },
       workspace: {
         isRiskPath: false, // Rule Host determines risk dynamically
-        planStatus: _getPlanStatus(ctx.workspaceDir),
-        hasPlanFile: _hasPlanFile(ctx.workspaceDir),
+        // DEPRECATED (PRI-286): planStatus/hasPlanFile are legacy compatibility fields.
+        // Live PD no longer reads or manages PLAN.md state. These fields must not be
+        // used for new MVP behavior. Future "plan-first" enforcement must come from
+        // owner-approved RuleHost/code_tool_hook activation, not built-in state.
+        planStatus: 'NONE' as const,
+        hasPlanFile: false,
       },
       session: {
         sessionId: ctx.sessionId,
@@ -377,25 +348,6 @@ function _extractParamsSummary(params: Record<string, unknown>): Record<string,
   return summary;
 }
 
-function _getPlanStatus(workspaceDir: string): 'NONE' | 'DRAFT' | 'READY' | 'UNKNOWN' {
-  try {
-    const status = planStatus(workspaceDir);
-    if (status === 'READY') return 'READY';
-    if (status === 'DRAFT') return 'DRAFT';
-    if (status === '') return 'NONE';
-    return 'UNKNOWN';
-  } catch {
-    return 'UNKNOWN';
-  }
-}
-
-function _hasPlanFile(workspaceDir: string): boolean {
-  try {
-    return fs.existsSync(path.join(workspaceDir, 'PLAN.md'));
-  } catch {
-    return false;
-  }
-}
 
 function _getCurrentGfi(sessionId?: string): number {
   if (!sessionId) return 0;

package/src/hooks/prompt.ts

@@ -8,11 +8,10 @@ import { WorkspaceContext } from '../core/workspace-context.js';
 import type { ContextInjectionConfig} from '../types.js';
 import { defaultContextConfig } from '../types.js';
 import { classifyTask, type RoutingInput } from '../core/local-worker-routing.js';
-import { detectApprovalMarker, setConfirmFirstApproval, setConfirmFirstDirective, hydrateFromStore, pruneStoreStaleRows, setConfirmFirstStore, resetConfirmFirst } from '../core/confirm-first-gate.js';
 import { extractSummary, getHistoryVersions, parseWorkingMemorySection, workingMemoryToInjection, autoCompressFocus, safeReadCurrentFocus } from '../core/focus-history.js';
 import { PathResolver } from '../core/path-resolver.js';
 import { selectPrinciplesForInjection, DEFAULT_PRINCIPLE_BUDGET } from '../core/principle-injection.js';
-import { getCachedMaskedPrincipleSet, WorkflowFunnelLoader, PiAiRuntimeAdapter, EmpathyObserver, AgentScheduler, SqliteConfirmFirstStateStore, SqliteConnection } from '@principles/core/runtime-v2';
+import { getCachedMaskedPrincipleSet, WorkflowFunnelLoader, PiAiRuntimeAdapter, EmpathyObserver, AgentScheduler } from '@principles/core/runtime-v2';
 import { truncateInjectionToBudget } from '@principles/core/prompt-builder';
 import { PromptActivationReader, RUNTIME_V2_PRINCIPLE_BUDGET } from '../core/runtime-v2-prompt-activation-reader.js';
 import {
@@ -77,7 +76,6 @@ function cachedReadFile(filePath: string): string {
 // Module-level empathy state — shared across calls to avoid per-turn I/O
 let _empathyTurnCounter = 0;
 let _empathyKeywordCache: { store: ReturnType<typeof loadKeywordStore>; lang: string } | null = null;
-let _confirmFirstHydrationCounter = 0;
 
 /**
  * Model configuration with primary model and optional fallback models
@@ -265,19 +263,6 @@ export function getDiagnosticianModel(api: PromptHookApi | null, logger?: Plugin
  */
 
 
-function ensureConfirmFirstStore(workspaceDir: string): void {
-  if (!_confirmFirstStoreInitialized) {
-    try {
-      const connection = new SqliteConnection({ workspaceDir, readonly: false });
-      setConfirmFirstStore(new SqliteConfirmFirstStateStore(connection));
-      _confirmFirstStoreInitialized = true;
-    } catch (err) {
-      console.warn(`[PD:ConfirmFirst] Failed to initialize store: ${String(err)}`);
-    }
-  }
-}
-let _confirmFirstStoreInitialized = false;
-
 export async function handleBeforePromptBuild(
   event: PluginHookBeforePromptBuildEvent,
   ctx: PluginHookAgentContext & { api?: PromptHookApi }
@@ -297,18 +282,6 @@ export async function handleBeforePromptBuild(
     wctx.trajectory?.recordSession?.({ sessionId });
   }
 
-  if (sessionId) {
-    ensureConfirmFirstStore(workspaceDir);
-    hydrateFromStore(sessionId);
-    _confirmFirstHydrationCounter++;
-    if (_confirmFirstHydrationCounter % 100 === 0) {
-      const pruned = pruneStoreStaleRows();
-      if (pruned > 0) {
-        logger?.info?.(`[PD:ConfirmFirst] Pruned ${pruned} stale rows from confirm_first_state`);
-      }
-    }
-  }
-
   if (sessionId && trigger === 'user' && Array.isArray(event.messages) && event.messages.length > 0) {
     const latestUserIndex = [...event.messages]
       .map((message, index) => ({ message, index }))
@@ -318,25 +291,6 @@ export async function handleBeforePromptBuild(
     if (latestUserIndex) {
       const userText = getTextContent(latestUserIndex.message);
 
-      // ── Confirm-first approval detection ──
-      // If user sends approval language, mark session as approved for confirm-first gate
-      if (sessionId && detectApprovalMarker(userText)) {
-        setConfirmFirstApproval(sessionId);
-        // P2: Emit approval telemetry for observability (ERR-002)
-        try {
-          wctx.eventLog.recordConfirmFirstGateApproved({
-            sessionId,
-            workspaceDir: wctx.workspaceDir,
-            toolName: '(approval)',
-            reason: 'user_approval_detected',
-            principleId: 'confirm-first',
-            nextAction: 'mutating tools now permitted',
-          });
-        } catch (logErr) {
-          logger?.warn?.(`[PD:ConfirmFirst] Failed to emit approval event: ${String(logErr)}`);
-        }
-      }
-
       // Use CorrectionCueLearner for detection — supports learned keywords, not just hardcoded list
       let correctionCue: string | null = null;
       try {
@@ -990,22 +944,8 @@ ${heartbeatChecklist}
     } catch (logErr) {
       logger?.warn?.(`[PD:RuntimeV2] Failed to emit activation observability event: ${String(logErr)}`);
     }
-
-    // ── Set confirm-first directive state for gate enforcement ──
-    if (sessionId) {
-      const cfPrinciple = dedupedV2.find(
-        (p) =>
-          p.principleId === 'princ-mvp-acceptance-confirm-first' ||
-          (p.text.toLowerCase().includes('confirm requirements') &&
-           p.text.toLowerCase().includes('owner approval')),
-      );
-      setConfirmFirstDirective(sessionId, !!cfPrinciple, cfPrinciple?.principleId);
-    }
   } catch (e) {
     logger?.warn?.(`[PD:RuntimeV2] Failed to read Runtime V2 prompt activations: ${String(e)}`);
-    if (sessionId) {
-      resetConfirmFirst(sessionId);
-    }
   }
 
   // Build appendSystemContext with recency effect

package/src/types/event-types.ts

@@ -23,7 +23,6 @@ export type {
   RuleHostAutoCorrectProposedEventData,
   RuleHostAutoCorrectAppliedEventData,
   RuntimeV2PromptActivationsInjectedEventData,
-  RuntimeV2ConfirmFirstGateEventData,
   ToolCallStats,
   ErrorStats,
   PainStats,

package/src/utils/io.ts

@@ -1,6 +1,5 @@
 import * as path from 'path';
 import * as fs from 'fs';
-import { resolvePdPath } from '../core/paths.js';
 
 /**
  * Atomic file write — write to temp then rename to prevent partial writes on crash.
@@ -148,27 +147,6 @@ export function serializeKvLines(data: Record<string, any>): string {
   return lines.join('\n');
 }
 
-export function planStatus(projectDir: string): string {
-  const planPath = resolvePdPath(projectDir, 'PLAN');
-  try {
-    if (!fs.existsSync(planPath)) return '';
-    const content = fs.readFileSync(planPath, 'utf8');
-    const lines = content.split('\n');
-    for (const line of lines) {
-      if (line.startsWith('STATUS:')) {
-        const parts = line.split(':');
-        if (parts.length > 1) {
-           return parts[1].trim().split(/\s+/)[0] || '';
-        }
-      }
-    }
-  /* eslint-disable @typescript-eslint/no-unused-vars -- Reason: Error is intentionally ignored for graceful degradation */
-  } catch (_e) {
-    // Ignore read errors
-  }
-  return '';
-}
-
 /**
  * Normalize command arguments from PluginCommandContext.args.
  * Handles string | string[] | undefined union by joining arrays with spaces.

package/templates/langs/en/core/AGENTS.md

@@ -17,7 +17,6 @@ As Principles Disciple, you must distinguish between two physical spaces:
 Make decisions based on relative paths in the **Project Battlefield**:
 
 - **Strategic Focus**: `./memory/STRATEGY.md`
-- **Physical Plan**: `./PLAN.md`
 - **Pain Signal**: Runtime V2 `PainSignalBridge` (`pd pain record` for manual trigger; `.state/.pain_flag` is legacy compatibility only)
 - **System Capabilities**: `./.state/SYSTEM_CAPABILITIES.json`
 
@@ -166,12 +165,13 @@ On platforms that support reactions (Discord, Slack), use emoji reactions natura
 You default to architect mode.
 
 - **L1 (Direct Execution)**: Single-file tweaks, doc maintenance → do it directly
-- **L2 (Delegation Protocol)**: Major changes → **MUST** update `./PLAN.md` and use `pd_spawn_agent` tool
+- **L2 (Delegation Protocol)**: Major changes → recommended to describe the plan and get owner confirmation before executing
 
-### State Machine Gating
+### Planning Guidance
 
-- **Single source of truth**: `./PLAN.md`
-- **Physical interception**: Plugin activated. If `PLAN.md` is not `READY` and you attempt to modify risk paths, calls will be blocked
+- For complex tasks, consider drafting a plan document and getting owner approval before making large changes
+- This is a behavioral suggestion, not a built-in gate — PD does not enforce plan-before-action by default
+- If an owner-approved RuleHost rule enforces planning behavior, that rule takes effect automatically
 - **Prevent pollution**: Never write execution details back to strategic documents
 
 ---

package/templates/langs/en/principles/THINKING_OS.md

@@ -39,8 +39,9 @@ LLMs are highly sensitive to XML tags; this structure is designed to boost instr
   <!-- 执行与物理限制 (Execution & Physical Constraints) -->
   <directive id="T-05" name="PHYSICAL_DEFENSE_AND_ORCHESTRATION">
     <trigger>When asked to perform a major refactoring, multi-file change (>2 files), or an architectural shift.</trigger>
-    <must>Limit your blast radius. You MUST draft a `PLAN.md` (status: READY). After any code change, you MUST run canary tests (e.g., `npm test`, linters) to verify integrity.</must>
-    <forbidden>Executing large-scale unstructured changes directly without a plan, or skipping post-modification validation.</forbidden>
+    <should>For complex changes, describe your plan and get owner confirmation before executing.</should>
+    <must>Limit your blast radius. After any code change, you MUST run canary tests (e.g., `npm test`, linters) to verify integrity.</must>
+    <forbidden>Executing large-scale unstructured changes directly, or skipping post-modification validation.</forbidden>
   </directive>
 
   <directive id="T-06" name="OCCAMS_RAZOR_MVC">

package/templates/langs/en/skills/ai-sprint-orchestration/runtime/.gitignore

@@ -1,2 +1,2 @@
-*
-!.gitignore
+*
+!.gitignore

package/templates/langs/en/skills/evolve-task/SKILL.md

@@ -51,7 +51,7 @@ Output:
 
 ## Step 6: Delegate Planner (Movie Script Plan)
 - Planner outputs Plan (steps/commands/metrics/rollback).
-- Write plan to PLAN.md (STATUS line must exist).
+- Write plan to a planning document for owner review.
 - **Task Sync**: 
   - If `CLAUDE_CODE_TASK_LIST_ID` is set, you must convert the Plan's core steps to Native Tasks (via natural language command "Add task..." or related tools).
   - If not set and in interactive mode, prompt user: "Recommend running `export CLAUDE_CODE_TASK_LIST_ID=task-$(date +%s)` to enable persistent task tracking."
@@ -59,7 +59,7 @@ Output:
 - **Performance Evaluation**: After task completion, write to `.state/.verdict.json`. Format follows `@.principles/schemas/agent_verdict_schema.json`.
 
 ## Step 7: Delegate Implementer (Execution)
-- Implementer can only execute according to PLAN. Any deviation must first update PLAN.
+- Implementer executes according to the plan from Step 6. Any deviation must first be approved by updating the plan.
 - **Performance Evaluation**: After task completion, write to `.state/.verdict.json` based on verification results. Format follows `@.principles/schemas/agent_verdict_schema.json`.
 
 ## Step 8: Delegate Reviewer (Review)

package/templates/langs/en/skills/pd-mentor/SKILL.md

@@ -185,7 +185,7 @@ For complex scenarios, combine multiple skills:
 
 | Scenario | Combined Flow |
 |----------|---------------|
-| Major refactor | `/pd-evolve` → `plan-script` → `deductive-audit` → execute |
+| Major refactor | `/pd-evolve` → `deductive-audit` → execute |
 | System optimization | `/pd-status` → `evolve-system` → `root-cause` |
 | Project review | `/pd-daily` → `/pd-okr` → `reflection-log` |
 
@@ -196,7 +196,6 @@ These skills are usually called automatically by the system, but advanced users
 - `triage` - Issue triage
 - `root-cause` - Root cause analysis
 - `deductive-audit` - Deductive audit
-- `plan-script` - Plan orchestration
 - `reflection` - Metacognitive reflection
 - `reflection-log` - Reflection logging
 

package/templates/langs/zh/core/AGENTS.md

@@ -17,7 +17,6 @@
 基于**项目战场**中的相对路径进行决策：
 
 - **项目最高战略**: `./memory/STRATEGY.md`
-- **项目物理计划**: `./PLAN.md`
 - **痛觉反射信号**: Runtime V2 `PainSignalBridge`（手动触发使用 `pd pain record`；`.state/.pain_flag` 仅为 legacy compatibility）
 - **系统能力快照**: `./.state/SYSTEM_CAPABILITIES.json`
 
@@ -158,12 +157,13 @@
 你默认处于架构师模式。
 
 - **L1 (直接执行)**：单文件微调、文档维护 → 直接操作
-- **L2 (委派协议)**：重大变更 → **必须**更新 `./PLAN.md` 并使用 `pd_spawn_agent` 工具委派任务
+- **L2 (委派协议)**：重大变更 → 建议先描述计划并获得 owner 确认后再执行
 
-### 状态机门禁 (State Machine Gating)
+### 计划引导 (Planning Guidance)
 
-- **唯一事实源**：`./PLAN.md`
-- **物理拦截**：插件已激活。若 `PLAN.md` 非 `READY` 且尝试修改风险路径，调用将被阻断
+- 对复杂任务，建议先起草计划文档并获得 owner 批准后再做大幅修改
+- 这是行为建议，不是内置门禁 — PD 默认不强制"先计划后执行"
+- 若 owner 批准的 RuleHost 规则强制了计划行为，该规则会自动生效
 - **防止污染**：禁止将执行层细节写回战略文档
 
 ---

package/templates/langs/zh/principles/THINKING_OS.md

@@ -39,8 +39,9 @@
   <!-- 执行与物理限制 (Execution & Physical Constraints) -->
   <directive id="T-05" name="PHYSICAL_DEFENSE_AND_ORCHESTRATION">
     <trigger>当被要求执行大型重构、多文件修改（>2 个文件）或架构变更时。</trigger>
-    <must>限制爆炸半径。你必须起草一个 `PLAN.md`（状态：READY）。在修改任何代码后，必须运行金丝雀测试（例如 `npm test`、linters）以验证完整性。</must>
-    <forbidden>在没有计划的情况下直接执行大规模非结构化变更，或跳过修改后的验证环节。</forbidden>
+    <should>对复杂变更，先描述计划并获得 owner 确认后再执行。</should>
+    <must>限制爆炸半径。在修改任何代码后，必须运行金丝雀测试（例如 `npm test`、linters）以验证完整性。</must>
+    <forbidden>直接执行大规模非结构化变更，或跳过修改后的验证环节。</forbidden>
   </directive>
 
   <directive id="T-06" name="OCCAMS_RAZOR_MVC">

package/templates/langs/zh/skills/ai-sprint-orchestration/runtime/.gitignore

@@ -1,2 +1,2 @@
-*
-!.gitignore
+*
+!.gitignore

package/templates/langs/zh/skills/evolve-task/SKILL.md

@@ -51,7 +51,7 @@ disable-model-invocation: true
 
 ## Step 6: 委派 Planner（电影剧本计划）
 - Planner 输出 Plan（步骤/命令/指标/回滚）。
-- 将计划写入 PLAN.md（STATUS 行必须存在）。
+- 将计划写入计划文档供 owner 审阅。
 - **任务同步 (Task Sync)**: 
   - 如果 `CLAUDE_CODE_TASK_LIST_ID` 已设置，你必须将上述 Plan 的核心步骤直接转化为 Native Tasks（通过自然语言指令"Add task..."或相关工具）。
   - 如果未设置且为交互模式，提示用户："建议运行 `export CLAUDE_CODE_TASK_LIST_ID=task-$(date +%s)` 以启用持久化任务追踪。"
@@ -59,7 +59,7 @@ disable-model-invocation: true
 - **绩效评估**: 任务完成后，写入 `.state/.verdict.json`。格式遵循 `@.principles/schemas/agent_verdict_schema.json`。
 
 ## Step 7: 委派 Implementer（执行）
-- Implementer 只能按 PLAN 执行。任何偏离必须先更新 PLAN。
+- Implementer 按照 Step 6 的计划执行。任何偏离必须先更新计划并获得确认。
 - **绩效评估**: 任务完成后，根据验证结果写入 `.state/.verdict.json`。格式遵循 `@.principles/schemas/agent_verdict_schema.json`。
 
 ## Step 8: 委派 Reviewer（审查）

package/templates/langs/zh/skills/pd-mentor/SKILL.md

@@ -185,7 +185,7 @@ disable-model-invocation: true
 
 | 场景 | 组合流程 |
 |------|----------|
-| 大型重构 | `/pd-evolve` → `plan-script` → `deductive-audit` → 执行 |
+| 大型重构 | `/pd-evolve` → `deductive-audit` → 执行 |
 | 系统优化 | `/pd-status` → `evolve-system` → `root-cause` |
 | 项目复盘 | `/pd-daily` → `/pd-okr` → `reflection-log` |
 
@@ -196,7 +196,6 @@ disable-model-invocation: true
 - `triage` - 问题分诊
 - `root-cause` - 根因分析
 - `deductive-audit` - 演绎审计
-- `plan-script` - 计划编排
 - `reflection` - 元认知反思
 - `reflection-log` - 反思落盘
 

package/tests/core/migration.test.ts

@@ -18,25 +18,25 @@ describe('Directory Structure Migration', () => {
         vi.clearAllMocks();
     });
 
-    it('should move non-security files from docs/ to new locations', () => {
-        const legacyPlan = path.join(workspaceDir, 'docs', 'PLAN.md');
-        const newPlan = '/mock/workspace/PLAN.md';
+    it('should move THINKING_OS.md from docs/ to .principles/', () => {
+        const legacyThinkingOs = path.join(workspaceDir, 'docs', 'THINKING_OS.md');
+        const newThinkingOs = '/mock/workspace/.principles/THINKING_OS.md';
 
         vi.mocked(fs.existsSync).mockImplementation((p) => {
             const pathStr = p.toString();
             if (pathStr === path.join(workspaceDir, 'docs')) return true;
-            if (pathStr === legacyPlan) return true;
+            if (pathStr === legacyThinkingOs) return true;
             // Destination directories don't exist yet
             if (pathStr === path.join(workspaceDir, '.principles')) return false;
             // Destination files don't exist yet
-            if (pathStr === newPlan) return false;
+            if (pathStr === newThinkingOs) return false;
             return false;
         });
 
         migrateDirectoryStructure(mockApi, workspaceDir);
 
-        // Verify it moved PLAN.md to root
-        expect(fs.renameSync).toHaveBeenCalledWith(legacyPlan, newPlan);
+        // Verify it moved THINKING_OS.md to .principles/
+        expect(fs.renameSync).toHaveBeenCalledWith(legacyThinkingOs, newThinkingOs);
 
         expect(mockLogger.info).toHaveBeenCalledWith(expect.stringContaining('Successfully migrated'));
     });

package/tests/core/path-resolver.test.ts

@@ -20,7 +20,7 @@ describe('PathResolver', () => {
         const { PathResolver } = await import('../../src/core/path-resolver.js');
         const resolver = new PathResolver({ workspaceDir: '/test/workspace' });
         
-        const requiredKeys = ['PROFILE', 'PLAN', 'AGENT_SCORECARD', 'PAIN_FLAG', 'EVOLUTION_QUEUE', 'THINKING_OS', 'THINKING_OS_USAGE', 'THINKING_OS_CANDIDATES'];
+        const requiredKeys = ['PROFILE', 'AGENT_SCORECARD', 'PAIN_FLAG', 'EVOLUTION_QUEUE', 'THINKING_OS', 'THINKING_OS_USAGE', 'THINKING_OS_CANDIDATES'];
         
         for (const key of requiredKeys) {
             expect(() => resolver.resolve(key)).not.toThrow();