Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
98 changes: 1 addition & 97 deletions PLANS.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,105 +4,9 @@ plan_schema_version: 2

Use this file for active, blocked, ready-for-closure, or recently completed execution work. The canonical lifecycle is the installed `engineering-workflow` planning reference.

## Active Plan: Import Privacy Review V2 Workflow 0.9.9

Status: active
Owner: root
Last Updated: 2026-09-23

### Goal

Import the exact annotated engineering-workflow 0.9.9 release, publish xeonvs-engineering 1.0.9, update managed local installations, and close durable release state.

### Plan Origin

plan_mode_approved

### Requested Scope

- Distribute the issue #8 privacy preflight fix through the existing Codex/Claude marketplace without changing tgrep-search.

### Requirement Traceability

| Requirement | Complete outcome | Source | Work queue | Acceptance or validation | Status |
| --- | --- | --- | --- | --- | --- |
| REQ-001 | Import exact stable annotated upstream 0.9.9 bytes and provenance while preserving tgrep-search 1.0.3. | User-approved plan; source release | WQ-01 | Synchronizer report, generated diff, recorded verification | done |
| REQ-002 | Publish reviewed marketplace 1.0.9 with passing CI and checksummed assets. | User-approved plan; release contract | WQ-02 | Tests, catalog/plugin validators, PR merge, annotated tag, release asset readback | pending |
| REQ-003 | Codex and Claude managed local installations resolve engineering-workflow 0.9.9. | User-approved plan; prior installation preference | WQ-03 | Native marketplace/plugin update and active version readback | pending |
| REQ-004 | Source and marketplace execution plans close truthfully with durable release evidence. | Workflow lifecycle contract | WQ-04 | Lifecycle check and closure readback | pending |

### Explicit Non-Goals

- Do not modify vendored bytes manually, change tgrep-search, relax catalog/privacy/secret gates, or change other repositories.

### Constraints

- Accept only stable annotated upstream source releases, preserve exact bundle provenance, and scan the final public tree/history before each push.
- Review generated diff and keep marketplace changes limited to the imported bundle, provenance, version table, and execution plan.

### Inputs And Sources

- https://github.com/xeonvs/codex-engineering-workflow/releases/tag/v0.9.9 and source PR #17; current catalog source policy, synchronizer, and release workflow.

### User Decisions And Answers

- 2026-09-23: Implement issue #8 plan through both releases and refresh local managed installations. Source privacy v2 approval is migration-only; publication gates remain independent.

### Completed Baseline State

- [x] Marketplace `main` starts clean at `5459b80635fc7698ab29e308601e1b5dbc1a4afb`; remote main matches, latest stable marketplace tag is v1.0.8, and v1.0.9 does not exist. Upstream v0.9.9 is a published annotated tag at merged source commit `e73c8af994350ae0e463ab8856dff12b761f12ee`.

### Current Work Queue

- [x] WQ-01 — Sync and review exact workflow bundle/provenance for REQ-001. `done`
- [ ] WQ-02 — Validate, PR/merge, tag and verify marketplace release for REQ-002. `in_progress`
- [ ] WQ-03 — Refresh and read back local installations for REQ-003. `pending`
- [ ] WQ-04 — Reconcile and close source/marketplace plans for REQ-004. `pending`

### Locked Decisions

- Target marketplace patch version is 1.0.9, subject to final remote tag check. Import only workflow 0.9.9; leave tgrep-search 1.0.3 unchanged.

### Verification

- Marketplace tests, catalog validator, recorded-byte verification, Codex/Claude plugin checks, public-tree/privacy and redacted Gitleaks scans, hosted CI, release asset/digest and local installation readback.

### Latest Validation Results

- 2026-09-23: Source PR #17 merged, annotated v0.9.9 and public release published; source tag CI passed.
- 2026-09-23: Synchronizer imported exact 0.9.9 bundle from annotated v0.9.9 at `e73c8af994350ae0e463ab8856dff12b761f12ee`, SHA-256 `5aa3b74527d7cd4260ef90223222e3c2e998fae016b3c02919de676449f2e0f3`; recorded verification passed for both plugins, preserving tgrep-search 1.0.3. Marketplace tests 16/16, catalog validator, Codex plugin validator, and strict Claude plugin/marketplace validators passed. Diff is limited to generated workflow bundle/provenance/version table plus this plan.

### Risks And Recovery

- If sync rejects the tag/provenance, stop and diagnose without editing generated bytes. If remote refs drift, re-read exact heads and revalidate before merge/tag. Failed local update must not be reported as installed.

### Resume Point

- WQ-02: finish final security and aggregate review, commit/push the import, then PR/merge and publish the checksummed marketplace release.

### Plan Fidelity Check

- [x] Exact import, marketplace release, local update and closure map to ordered work and validation.
- [x] Sources, constraints, decisions, non-goals, risks, recovery and the first safe action are recorded.

### Reconciliation Check

- [ ] Final catalog, releases, installations and plan states agree.

### Closure Gate

- [ ] All requirements and queue items are terminal with applicable evidence.

### Post-Close Delivery

- Marketplace publication and local refresh remain active under WQ-02/WQ-03.

### Handoff Notes

- None.

## Recently Completed

- [x] 2026-09-23: Completed Import Privacy Review V2 Workflow 0.9.9.
- [x] 2026-09-23: Completed Import GPT-6 Workflow 0.9.8 And Release Marketplace 1.0.8.
- [x] 2026-09-20: Completed Marketplace Repository Audit Fix 1.0.7.
- [x] 2026-09-15: Completed Marketplace Context Discipline 1.0.6.
Expand Down
Loading