---
title: openplanr 1.22.0
description: "Published 2026-08-03. Operate durable orchestration (SPEC-005): per-role durability, honest state, and a one-invocation review gate."
url: https://openplanr.dev/docs/changelog/1.22.0
updated: 2026-08-03
related:
  - https://openplanr.dev/docs/changelog/1.24.0.md
  - https://openplanr.dev/docs/changelog/1.23.0.md
  - https://openplanr.dev/docs/changelog/1.21.2.md
---

# openplanr 1.22.0

Published 2026-08-03.

[Release on GitHub](https://github.com/openplanr/OpenPlanr/releases/tag/v1.22.0)

## Minor Changes

Operate durable orchestration (SPEC-005): per-role durability, honest state, and a
  one-invocation review gate. Bundled pipeline dependency pinned to
  `planr-pipeline@0.39.0`. Every claim below is backed by a named passing test;
  coordinated sibling releases still in flight under this same version are described
  as landing with the release, never as a phase this repository has already verified.

**The field fix that matters most: the advisor fan-out no longer deadlocks on a
hung lens.** The pre-driver fan-out awaited every advisor together, so one lens
stalling left the whole `Promise.all` unresolved while completed analyses sat
unrecorded and the shared lease expired underneath them. Dispatch now runs through
a deterministic lifecycle driver with bounded per-role retry, a per-attempt
timeout, and an automatic lease heartbeat that renews independently of any role
recording. A stalled non-required lens is resolved `not_evaluated` with a governed
gap while its siblings record and the cycle reaches Chair. Proven by
`tests/integration/operate-lifecycle-chair-wiring.test.ts` ("terminates a stalled
lens not_evaluated while siblings record, renews the lease, and reaches Chair") and
`tests/unit/operate-lifecycle-driver.test.ts` ("resolves a role past its retry
budget to not_evaluated with a governed gap without blocking siblings" and "renews
the lease as the window approaches without any role completing").

**Immediate per-role commit and an engine-managed heartbeat lease.** Each advisor
result is validated, recorded, persisted, and reflected in cycle progress the
moment it returns, and survives a sibling stalling; recording never waits on the
batch. Proven by the lifecycle-driver state-machine and heartbeat suites in
`tests/unit/operate-lifecycle-driver.test.ts`.

**Partial validated progress and honest status/report.** Every recorded lens is
inspectable before Chair finalizes, and a mid-cycle report renders recorded lenses
with their real analysis plus the exact recovery action for pending roles — an
active advising cycle is never described as quiet. Proven by
`tests/integration/operate-partial-report.test.ts` ("renders recorded lenses with
their real analysis and the exact recovery action for pending roles").

**Chair works with partial valid boards.** Chair consolidates the recorded,
verified board and surfaces an absent lens as an explicit gap; it never invents a
missing lens's conclusions, and it stays closed while a structurally-required role
is only `not_evaluated`. Proven by `tests/unit/operate-lifecycle-driver.test.ts`
("holds the Chair closed while a structurally-required role is only
not_evaluated") and the chair-wiring happy-path test above ("records a five-lens
board and reaches Chair with no fabricated gap on the happy path").

**Owned scratch storage with a `doctor --fix` cleanup.** Operate scratch lives
under an OpenPlanr-owned, project-and-machine-keyed path recorded in an ownership
manifest, cleaned automatically after record/finalize, detected by `doctor` when
abandoned, and removed by the FR7-named `openplanr doctor --fix` — which acts only on
scratch a valid ownership manifest confirms is ours, never on an unrelated file
under the scratch tree. Proven by `tests/unit/operate-doctor-staleness.test.ts`
("warns on abandoned owned scratch and removes only it, leaving other
machine-local caches") and `tests/unit/operate-doctor-fix-wiring.test.ts`
("removes abandoned OpenPlanr-owned scratch and leaves an unrelated file
untouched").

**Completion discipline.** Completion requires on-disk verification of every
phase-F artifact and flips to incomplete when any is removed or abandoned owned
scratch remains. Proven by `tests/unit/operate-completion.test.ts` ("reports
complete only with every phase-F artifact, and flips when any is removed").

**Legacy operating-profile migration.** `openplanr operate profiles migrate
inspect|apply` detects a legacy profile, previews and converts the supported
subset, writes an exact pre-migration backup, and is idempotent — the CLI never
suggests a profile it will reject. Proven by
`tests/unit/operate-profile-migration.test.ts` ("writes an exact pre-migration
backup and rewrites the profile to the supported subset" and "is idempotent: a
second apply reports already-applied and makes no further change").

**Bundled pipeline pin.** The packed CLI carries
`optionalDependencies.planr-pipeline = 0.39.0`, asserted by
`tests/e2e/operate-packed-install.test.ts` and
`tests/e2e/operate-guided-packed-install.test.ts`.

Coordinated, not yet released with this changeset: `@openplanr/skills@1.24.0`
(thin workflow regeneration) and the marketplace ledger and real-runtime canary
land only after `planr-pipeline@0.39.0` and this `openplanr` version publish.