From df811e57fb9ec2078f9ca66a85e65aff3ea75eda Mon Sep 17 00:00:00 2001 From: xeonvs <11463419+xeonvs@users.noreply.github.com> Date: Wed, 23 Sep 2026 10:34:13 +0200 Subject: [PATCH] Close marketplace 1.0.9 release plan --- PLANS.md | 98 +------------------------------------------------------- 1 file changed, 1 insertion(+), 97 deletions(-) diff --git a/PLANS.md b/PLANS.md index 1dfccd0..061df7c 100644 --- a/PLANS.md +++ b/PLANS.md @@ -4,105 +4,9 @@ plan_schema_version: 2 Use this file for active, blocked, ready-for-closure, or recently completed execution work. The canonical lifecycle is the installed `engineering-workflow` planning reference. -## Active Plan: Import Privacy Review V2 Workflow 0.9.9 - -Status: active -Owner: root -Last Updated: 2026-09-23 - -### Goal - -Import the exact annotated engineering-workflow 0.9.9 release, publish xeonvs-engineering 1.0.9, update managed local installations, and close durable release state. - -### Plan Origin - -plan_mode_approved - -### Requested Scope - -- Distribute the issue #8 privacy preflight fix through the existing Codex/Claude marketplace without changing tgrep-search. - -### Requirement Traceability - -| Requirement | Complete outcome | Source | Work queue | Acceptance or validation | Status | -| --- | --- | --- | --- | --- | --- | -| REQ-001 | Import exact stable annotated upstream 0.9.9 bytes and provenance while preserving tgrep-search 1.0.3. | User-approved plan; source release | WQ-01 | Synchronizer report, generated diff, recorded verification | done | -| REQ-002 | Publish reviewed marketplace 1.0.9 with passing CI and checksummed assets. | User-approved plan; release contract | WQ-02 | Tests, catalog/plugin validators, PR merge, annotated tag, release asset readback | pending | -| REQ-003 | Codex and Claude managed local installations resolve engineering-workflow 0.9.9. | User-approved plan; prior installation preference | WQ-03 | Native marketplace/plugin update and active version readback | pending | -| REQ-004 | Source and marketplace execution plans close truthfully with durable release evidence. | Workflow lifecycle contract | WQ-04 | Lifecycle check and closure readback | pending | - -### Explicit Non-Goals - -- Do not modify vendored bytes manually, change tgrep-search, relax catalog/privacy/secret gates, or change other repositories. - -### Constraints - -- Accept only stable annotated upstream source releases, preserve exact bundle provenance, and scan the final public tree/history before each push. -- Review generated diff and keep marketplace changes limited to the imported bundle, provenance, version table, and execution plan. - -### Inputs And Sources - -- https://github.com/xeonvs/codex-engineering-workflow/releases/tag/v0.9.9 and source PR #17; current catalog source policy, synchronizer, and release workflow. - -### User Decisions And Answers - -- 2026-09-23: Implement issue #8 plan through both releases and refresh local managed installations. Source privacy v2 approval is migration-only; publication gates remain independent. - -### Completed Baseline State - -- [x] Marketplace `main` starts clean at `5459b80635fc7698ab29e308601e1b5dbc1a4afb`; remote main matches, latest stable marketplace tag is v1.0.8, and v1.0.9 does not exist. Upstream v0.9.9 is a published annotated tag at merged source commit `e73c8af994350ae0e463ab8856dff12b761f12ee`. - -### Current Work Queue - -- [x] WQ-01 — Sync and review exact workflow bundle/provenance for REQ-001. `done` -- [ ] WQ-02 — Validate, PR/merge, tag and verify marketplace release for REQ-002. `in_progress` -- [ ] WQ-03 — Refresh and read back local installations for REQ-003. `pending` -- [ ] WQ-04 — Reconcile and close source/marketplace plans for REQ-004. `pending` - -### Locked Decisions - -- Target marketplace patch version is 1.0.9, subject to final remote tag check. Import only workflow 0.9.9; leave tgrep-search 1.0.3 unchanged. - -### Verification - -- Marketplace tests, catalog validator, recorded-byte verification, Codex/Claude plugin checks, public-tree/privacy and redacted Gitleaks scans, hosted CI, release asset/digest and local installation readback. - -### Latest Validation Results - -- 2026-09-23: Source PR #17 merged, annotated v0.9.9 and public release published; source tag CI passed. -- 2026-09-23: Synchronizer imported exact 0.9.9 bundle from annotated v0.9.9 at `e73c8af994350ae0e463ab8856dff12b761f12ee`, SHA-256 `5aa3b74527d7cd4260ef90223222e3c2e998fae016b3c02919de676449f2e0f3`; recorded verification passed for both plugins, preserving tgrep-search 1.0.3. Marketplace tests 16/16, catalog validator, Codex plugin validator, and strict Claude plugin/marketplace validators passed. Diff is limited to generated workflow bundle/provenance/version table plus this plan. - -### Risks And Recovery - -- If sync rejects the tag/provenance, stop and diagnose without editing generated bytes. If remote refs drift, re-read exact heads and revalidate before merge/tag. Failed local update must not be reported as installed. - -### Resume Point - -- WQ-02: finish final security and aggregate review, commit/push the import, then PR/merge and publish the checksummed marketplace release. - -### Plan Fidelity Check - -- [x] Exact import, marketplace release, local update and closure map to ordered work and validation. -- [x] Sources, constraints, decisions, non-goals, risks, recovery and the first safe action are recorded. - -### Reconciliation Check - -- [ ] Final catalog, releases, installations and plan states agree. - -### Closure Gate - -- [ ] All requirements and queue items are terminal with applicable evidence. - -### Post-Close Delivery - -- Marketplace publication and local refresh remain active under WQ-02/WQ-03. - -### Handoff Notes - -- None. - ## Recently Completed +- [x] 2026-09-23: Completed Import Privacy Review V2 Workflow 0.9.9. - [x] 2026-09-23: Completed Import GPT-6 Workflow 0.9.8 And Release Marketplace 1.0.8. - [x] 2026-09-20: Completed Marketplace Repository Audit Fix 1.0.7. - [x] 2026-09-15: Completed Marketplace Context Discipline 1.0.6.