Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/openplanr/planr-pipelineWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/openplanr/planr-pipeline/operate)<a href="https://agentmods.dev/commands/openplanr/planr-pipeline/operate"><img src="https://agentmods.dev/badge/commands/openplanr/planr-pipeline/operate.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00018 | $0.01331 |
| Opus 5 | $0.00009 | $0.00665 |
| Sonnet 5 | $0.00004 | $0.00266 |
| Haiku 4.5 | $0.00002 | $0.00133 |
Grade A, and why
operate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 84 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OpenPlanr Operate — Claude Code-native workflow
Run the full workflow for the user. They do not write an orchestration prompt or run lifecycle commands. A bare command invocation means run one complete cycle through the review gate.
- Run
planr operate inspect --json. - Bind the cycle to
claude-code; never invoke Codex or Cursor. - When context is absent or stale, execute the returned bootstrap harness and
follow
procedures/operate/bootstrap.md. Research the workspace before asking questions. Use AskUserQuestion for one compact review of genuine authority decisions. Never dump a questionnaire. - Preview and start one cycle, then follow only current
handoff.next[].argv. The slash command authorizes reversible local continuation throughreviewable,blocked, orfailedonly. - Dispatch the independent
operating-<role>agents with their v1.4 mandates andprocedures/operate/advisor.md, preferably in parallel. Record each advisor's exact result the instant it returns throughplanr operate harness record— one role at a time against the shared session, but never waiting on a sibling to return first; the handoff authorizes a record action for every pending role, so a stalled lens can never strand a completed one. Retries must replay identical bytes for the same role and idempotency key. If any role is still running as the lease window approaches, issueplanr operate harness heartbeatto renew the session before it expires. If a dispatched lens genuinely never returns — it exceeded its budget even after a heartbeat, or crashed — record it terminal withplanr operate harness abandon --role <role> --reason "<why>"so the board can consolidate without it. That lens is markednot_evaluatedwith your reason, its recorded siblings are untouched, and the Chair names it as an explicit gap it must not synthesize around. Never fabricate a result for a lens that did not return; abandon it honestly instead. - Dispatch Chair with
procedures/operate/chair.md, finalize, and present the report followingprocedures/operate/review.md. If the runtime itself stops before abandoning a stalled lens, an operator can reach a reviewable cycle without discarding it: once the session lease has lapsed,planr operate cycles abandon-role <cycleId> --reason "<why>" --yesmarks the still-unrecorded lensesnot_evaluatedand unblocks consolidation of the rest of the board. That--yesis the operator's explicit confirmation of a governed action; never infer it.
Agents inspect the project directly using current Claude Code session
permissions. Planr grants no permissions and sends no repository JSON body.
Return rich analysisMarkdown plus citation-bearing claims, actions, gaps,
and conflicts. Uncited opinion cannot create work.
Local research is automatic. Connected research requires a per-cycle preview and explicit consent. Classify context as observed, inferred, hypothesis, owner-confirmed, or unknown. If the user says “find it from the project,” keep researching; unknown context is a confidence/gap concern, not a blocker.
The binding remains runtime: claude-code, runtimeBinding: required, and
crossRuntimeFallback: false. Preserve all handoff binding values exactly.
Legacy adapter commands are compatibility-only; new flows use harness.
Qualified actions may create reversible proposed Quick Tasks, Specs, Epics, decisions, or agent artifacts. List them at review, but never approve or execute them. Stop before finding acceptance, route application, draft approval, PLAN, SHIP, deployment, publication, spending, customer contact, credential changes, or destructive work.
When the user requests a public read-only subcommand, perform only it. The dashboard is optional and never the sole report.
Completion is an explicit phase discipline, not a judgement call. A cycle
advances A (inspect/bootstrap) → B (cycle start and runtime binding) → C
(dispatch and incremental recording) → D (Chair consolidation) → E (report and
drafts materialization) → F (review gate and stop). It is done only when the
on-disk artifacts of each phase exist: the expected role records and their
Markdown, the Chair result, the final report, the actions file, the draft and
provenance results, a cycle state of reviewable, blocked, or failed, no
leftover scratch, a correct runtime binding, and no unauthorized effect. A cycle
that merely started, prepared, launched advisors, or left temporary result files
is not complete. planr operate review — the CLI, not this workflow — is
authoritative on whether a cycle has reached the review gate: when it reports an
earlier phase and the artifacts still missing, that is the truth of where the
cycle stands, and the cycle is not yet reviewable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 84 lines · 18 tokens per session scan A 91c89fdf752e
operate is a command published in the GitHub repository openplanr/planr-pipeline (2 stars, last pushed 1mo ago), licensed MIT. It adds 18 tokens to every session and 1,331 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
iteration-loop
Autonomous full iteration loop for cloud agents — Phase 1 (code-first auto direction lock + compass/plans + Review & Edit chain) through Phase 2–5 (execute → close → PR → merge-ready). Optional args: direction, scale (S|M|L|XL, default M). Not Done until Phase 5 exit checklist passes. Minimal human intervention; no…
iteration-drive
Drive the active iteration to completion — Phase 2 Autonomous Execute, Phase 3 iteration-close, Phase 4 Create PR, Phase 5 PR merge-ready loop (prefer babysit/-babysit; optional greploop when repo has it; else CI fallback) until mergeable. Not Done until Phase 5 exit checklist passes.
codebase-audit
Survey a codebase as a senior advisor and produce prioritized, self-contained improvement plans. Read-only on source code. Use standalone before iteration-start to discover what's worth doing, or independently to build a prioritized backlog.
document
Record a decision as an ADR or RFC, or document existing code as a spec, doc, guide, or rule; routes to the right document type.
init
First-time Archcore setup — detect the repo, compose the full first-day seed in one preview, create it on one confirm, and wire host configs.
cast
Run the Transmute pipeline — full build or specific stage.