feat: make Plan mode enforceable and recovery-safe - #100

Merged

Jay1 merged 73 commits into

mainfrom

feature/wave2-plan-mode-firewall

Jul 29, 2026

Commits on Jul 17, 2026

feat(server): define plan capability policy
Jay1
committed
ed2037a
feat(contracts): expose enforceable plan support
Jay1
committed
3a6a0c3
fix(orchestration): reject stale plan implementation
Jay1
committed
af28db3
fix(server): guard claude tools in plan mode
Jay1
committed
37bafb2
fix(orchestration): revalidate queued plan revision
Jay1
committed
7260c25
fix(server): isolate opencode plan permissions
Jay1
committed
cbef376
fix(server): enforce codex plan sandbox
Jay1
committed
44f2a48
feat(server): report enforceable plan providers
Jay1
committed
ed8d312
fix(web): scope proposed plans to current turn
Jay1
committed
60663ab
feat(web): snapshot plan implementation handoff
Jay1
committed
906db41
fix(web): preserve queued plan identity
Jay1
committed
3693a12

Commits on Jul 18, 2026

fix(web): implement exact plan revision
Jay1
committed
7017b62
feat(web): expose safe plan availability
Jay1
committed
4b073cb
fix(orchestration): reject unenforced plan dispatch
Jay1
committed
0de24fe

Commits on Jul 19, 2026

fix(server): retain plan callback authority
Jay1
committed
a30b744
fix(plan): close remaining dispatch paths
Jay1
committed
e35a3f4
fix(plan): preserve replay authority
Jay1
committed
78234ec

Commits on Jul 20, 2026

fix(server): order provider lifecycle events
Jay1
committed
ee862e7
fix(server): reconcile terminal event races
Jay1
committed
37b0953

Commits on Jul 21, 2026

fix(server): preserve queued plan liveness
Jay1
committed
eb5036a
fix(server): isolate plan lifecycle side effects
Jay1
committed
b4c063c
fix(server): keep plan edits workspace-safe
Jay1
committed
61129e7
fix(plan): close app-owned mutation paths
Jay1
committed
9277cb1
fix(plan): guard slash and lifecycle authority
Jay1
committed
52bb73f
fix(plan): bind latest plan and turn authority
Jay1
committed
623fe09
fix(server): retain canonical latest turn
Jay1
committed
346769d
fix(server): replay canonical thread summaries
Jay1
committed
312a0a2
fix(plan): preserve runtime plan authority
Jay1
committed
64d2bf8

Commits on Jul 25, 2026

fix(plan): harden lifecycle and rollback authority
Jay1
committed
76f1007

Commits on Jul 26, 2026

Merge branch 'main' into feature/wave2-plan-mode-firewall
Jay1
committed
f72b679
fix(server): reconcile Wave2 migration lineage
Jay1
committed
d19725a
fix(server): validate partial Wave2 migration stages
Jay1
committed
97d8cad
fix(server): isolate migration 032 tests
Jay1
committed
e45832c
feat(opencode): define managed isolation profiles
Jay1
committed
522b310
feat(opencode): attest managed isolation runtime
Jay1
committed
0636a5a
fix(opencode): bind isolation to running process
Jay1
committed
91207d1
fix(opencode): fail closed on identity read errors
Jay1
committed
60c0953
fix(opencode): install canonical runtime archives
Jay1
committed
be06ca0
feat(opencode): expose verified Plan capability
Jay1
committed
c5af911
fix(opencode): revalidate Plan before dispatch
Jay1
committed
219413f
fix(opencode): harden managed runtime installation
Jay1
committed
96b90ff
fix(opencode): bind managed Plan session resumes
Jay1
committed
25f5984
feat(opencode): expose managed Plan verification
Jay1
committed
cc462e2
fix(plan): scope capability to OpenCode profile
Jay1
committed
ccf2732
feat(settings): add OpenCode Plan isolation profile
Jay1
committed
1989659
test(plan): capture profile states across breakpoints
Jay1
committed
9d03dd1
fix(plan): bind isolation verification lifecycle
Jay1
committed
5d2807f
fix(opencode): preserve default runtime during verification
Jay1
committed
5b452b8
fix(settings): invalidate discovery after credential changes
Jay1
committed
6a92703
test(plan): stabilize profile denial evidence
Jay1
committed
a21a7f0
test(plan): anchor denial evidence timeline
Jay1
committed
83b9e33
test(plan): stabilize denial evidence raster
Jay1
committed
4944e8e
test(plan): capture faithful browser evidence
Jay1
committed
584f3a4
fix(server): make candidate promotion interruption-safe
Jay1
committed
38b4456
fix(server): make candidate authority rollback atomic
Jay1
committed
bd137ed
test(plan): serialize browser evidence raster
Jay1
committed
9b38a20
test(plan): disable gpu for evidence raster
Jay1
committed
6e120ca
docs(adr): record plan mode authority
Jay1
committed
8e6fedd

Commits on Jul 28, 2026

fix(server): attest managed verification candidates
Jay1
committed
94a960f
fix(server): reject opencode bootstrap side effects
Jay1
committed
b56ca76
fix(server): contain opencode isolation probe residue
Jay1
committed
54a6c3f
fix(server): isolate opencode process environment
Jay1
committed
0e4d0a5
fix(server): scope provider sessions to project cwd
Jay1
committed
6f0a9ed
fix(server): isolate kilo plan sessions
Jay1
committed
a4bd97b
fix(server): recover queued plan turns after restart
Jay1
committed
b51d52b
fix(server): reconcile authoritative assistant snapshots
Jay1
committed
7643f77
fix(web): clarify plan mode interface states
Jay1
committed
bc66c03
test(server): stabilize isolation identity fixture
Jay1
committed
19ae8a3
fix(web): prevent mobile header focus clipping
Jay1
committed
af3fbc1
fix(web): keep plan footer actions accessible
Jay1
committed
335acf0
test(server): await running isolation image
Jay1
committed
3002e88

Commits on Jul 29, 2026

docs: add upstream UX roadmaps
Jay1
committed
91f4938
test(web): make interface clock assertion timezone-safe
Jay1
committed
4afb13b