@oneie/claude 0.6.0 → 0.7.0

package/rules/documentation.md

@@ -8,6 +8,25 @@ Apply to all TODOs and `/do` workflows.
 
 Within a build cycle this still maps to three phases: **W2** declares which docs this cycle touches (the spec already exists; W2 lists the deltas), **W3** edits docs alongside code in the same wave, **W4** verifies consistency *and truth* against the shipped behaviour. The difference from before: the full doc set is not seeded-then-refined — it is written for real up front, and the cycle keeps it in sync and proves it true.
 
+## Promises grow with delivery (always update the promise with what shipped)
+
+**When you ship a feature that extends an already-kept promise — a new view, capability, or surface under the same banner — you MUST append it to that promise as a new `deliverable:` with its own `accept:` check, and extend the `proof:` `&&`-join to include that check.** This is not optional polish; it is what keeps the promise a record the system can depend on. A promise that silently omits shipped work is a promise that lies about the delivery, and the router that sells the next signal to the proven path is reading a stale contract.
+
+The covenant's freeze (clause 4, `text/promises.md`) permits this because it is a **monotonic ratchet** — the same "can't regress" DNA `/do` runs on:
+
+- **Allowed (do it every time):** append a deliverable whose `accept:` is **already green**, and add that exact `accept:` string to `proof:`. The join stays exit-0; the record only rises. No new `terms_hash` needed — nothing that was promised changed.
+- **Forbidden (needs a *new* promise):** anything that would make the existing proof go **red** — weakening a check, removing a line, reversing a decision, or a broken `assumes:`. That's a regression, not growth.
+
+Checklist when extending a kept promise `text/<slug>.md`:
+
+1. Add the `- item:` + `accept:` row under `deliverables:` (group fulfilled follow-ons under a dated comment).
+2. Append the identical `accept:` body to `proof:` (the schedule ⊆ proof law — `do-promise-lint.sh` enforces verbatim inclusion).
+3. Add any new `world:` entries (a new view → `views:`, a new workflow step → `workflow:`).
+4. Add the human-readable row to the deliverables table in the prose, and reconcile any now-stale status claim (e.g. an "X is still red / not shipped" line for the thing you just shipped).
+5. Run `bash .claude/scripts/do-promise-lint.sh <slug>` — it must report `schedule ⊆ proof, contract well-formed` **and** every `assumes:` green. Fix any stale `assumes:` path while you're there (a moved file makes the whole contract un-signable).
+
+The same discipline applies to the propagate matrix below: the promise is the first row every close reconciles, before its derived docs.
+
 **Format:** any ASCII diagram written into a doc follows `text/CLAUDE.md § ASCII diagrams` — max ~60 chars wide, vertical flow over multi-column tables. A diagram that's fine in a wide terminal wraps into garbage in the narrow panels these docs actually get read in.
 
 ---
@@ -106,79 +125,12 @@ These six docs are the **source of truth** and must stay in sync with code:
 | **one-ontology.md** | 6 dimensions, actor/group/thing/path/signal/hypothesis | Type system changes |
 | **routing.md** | L1-L7 loops, signal flow, priority formula | Loop/routing changes |
 | **lifecycle.md** | Agent journey stages, revenue flow | Lifecycle/economic changes |
-| **rubrics.md** | Code rubric (security/stability/simplicity/integration/speed) + agent rubric (fit/form/truth/taste) | Rubric changes or new dimensions |
+| **rubrics.md** | Code rubric (the design target — eight dims) + agent rubric (fit/form/truth/taste). Live weights are data at `.claude/scripts/rubric-weights.json`; the gap between the two is `text/rubric-migration-plan.md` | Rubric changes or new dimensions |
 
 **Feature-specific docs** (rich-messages.md, webhooks.md, etc.) are updated per feature. Always link back to the six core docs.
 
 ---
 
-## The Workflow Integration
-
-### Hook: Pre-W2 — Load Source Docs
-
-When a TODO is created, auto-load relevant source docs:
-
-```
-/do {name}-todo.md
-├─ [Hook] Load: dictionary.md, DSL.md, rubrics.md
-├─ [W1] Recon code (reads files)
-├─ [W2] Decide code + **document changes needed in docs**
-│       (explicit list: what terms change, what loops change, what's new)
-├─ [W3] Edit code (spawns Sonnet agents)
-│       + [Hook] Suggest: "Also edit X doc for {Y change}"
-└─ [W4] Verify code + **verify docs match** (cross-check task)
-```
-
-### Hook: Post-W4 — Validate Doc Consistency
-
-After W4 completes, auto-run consistency checks:
-
-```bash
-# Terminology consistency
-grep -r "old-term" text/ | flag if > 0 (not on deadname list)
-
-# Cross-references
-markdown-link-check text/*.md
-
-# Metaphor alignment (if touching signal/path semantics)
-grep -l "signal\|strength\|resistance" src/changed-files.txt | xargs -I {} \
-  check if metaphors.md still applies
-
-# Rubric scoring (if W4 added dimensions)
-grep "rubric\|dimension" src/changed-files.txt | flag for rubrics.md review
-```
-
----
-
-## Example: rich-messages-todo (Retrospective)
-
-**What should have happened (W2):**
-
-```markdown
-### Documentation Updates (W2)
-
-**New docs:**
-- None (extends existing types)
-
-**Docs modified:**
-- `text/dictionary.md` — add "Rich Messages" section, explain `data.rich` convention
-- `text/rich-messages.md` — add PaymentMetadata type, Payment flow section
-- `text/template-todo.md` — add "Documentation Updates (W2 + W4)" section
-
-**Schema changes:**
-- `nanoclaw/src/types.ts` — RichMessage.thread, RichMessage.payment added (Cycle 1 & 3)
-- `migrations/0010_payment_columns.sql` — new D1 columns for payment tracking
-```
-
-**What actually happened:**
-
-- ✅ Docs updated (rich-messages.md, dictionary.md, template-todo.md) — **AFTER W4**
-- ⚠️ Should have been planned in W2, preventing surprises in W3
-
-**Lesson:** Next TODO follows: document in W2, edit in W3, verify in W4. No surprises.
-
----
-
 ## Rules for `/do` (The Command)
 
 When running `/do {name}-todo.md`, the workflow enforces:
@@ -186,7 +138,7 @@ When running `/do {name}-todo.md`, the workflow enforces:
 1. **W2 must explicitly call out doc changes** — no surprise doc edits in W3
 2. **W3 spawns edit agents for both code AND docs** — parallel edits
 3. **W4 includes doc consistency check** — not just code tests
-4. **The code rubric (security/stability/simplicity/integration/speed) applies to docs too** — simplicity means fewer words; stability means no broken links; security means no sensitive data exposed; integration means every doc is linked from its family and lies about nothing shipped; speed means lean docs = fewer tokens to read
+4. **The code rubric applies to docs too**, reading each axis for prose — simplicity means fewer words; stability means no broken links and accurate references; security means no sensitive data exposed; integration means every doc is linked from its family and lies about nothing shipped; speed means lean docs = fewer tokens to read. (Axis names and weights: `.claude/scripts/rubric-weights.json`. Note the doc reading of *stability* — links and references — is not the code reading — error handling and closed loops; same name, two criteria, which is exactly why the eight-dim migration splits it.)
 
 ---
 
@@ -200,6 +152,8 @@ When running `/do {name}-todo.md`, the workflow enforces:
 
 | Trigger (detected from W3 diff) | Target doc | Edit |
 |---|---|---|
+| feature extends an already-kept promise | that `text/<slug>.md` promise | **first row, always** — append the fulfilled deliverable + its green `accept:`, extend `proof:`, add `world:` entries, then `do-promise-lint.sh <slug>` must pass (see § Promises grow with delivery) |
+| slug has `text/<slug>-agents.md` (a verification walk exists) | `.claude/scripts/do-walk.sh <slug> --agents` | run it — must exit 0; a promise extension that added a deliverable but no matching walk stop is an incomplete close, append the stop to both `-humans.md` and `-agents.md` before the cycle closes |
 | any change | source-of-truth doc(s) from plan frontmatter | always — even if only touch-verified |
 | 6-dim, L1-L8, or locked-rule change | root `CLAUDE.md` | edit the relevant section |
 | directory contract change (new component family, new pattern) | nearest `CLAUDE.md` (e.g., `one.ie/web/src/components/CLAUDE.md`) | append / edit section |
@@ -212,7 +166,12 @@ Anchor mismatch → log to `text/improvements.md` for manual W2 next cycle (no h
 **Learnings entry** (append to `text/learnings.md` on each close):
 
 ```
-- YYYY-MM-DD · cycle N · wave N|gate · {one sentence} · rubric=0.NN · source=w1|w2|w3|w4|cycle
+- YYYY-MM-DD · cycle N · wave N|gate · {one sentence} · rubric=0.NN [sec.NN simp.NN struct.NN speed.NN integ.NN reuse.NN test.NN ux.NN] · source=w1|w2|w3|w4|cycle
+
+The `[...]` eight-field vector is self-labeling and appended, never replacing the
+composite — see `text/rubrics.md` § Code Rubric for the eight dimensions and the
+per-field scoring rules. A close with no per-dimension breakdown to hand may omit
+the vector (old form still parses; counts toward the composite trend only).
 ```
 
 W4 code rubric applies to docs too: security (no sensitive data), stability (no broken links, accurate references), simplicity (fewer words, no bloat), speed (lean = fewer tokens to read).
@@ -222,7 +181,7 @@ W4 code rubric applies to docs too: security (no sensitive data), stability (no
 W4 must pass four bash checks before the rubric runs. Detail in `.claude/commands/do.md` W4 section. Summary:
 
 1. **stale-name check** — every old identifier in W3's rename list has 0 hits in `**/*.md`
-2. **broken-link check** — `markdown-link-check` on every touched doc returns 0 broken
+2. **broken-link check** — `markdown-link-check` on every touched doc returns 0 broken. **It is not installed** (`command -v markdown-link-check` → nothing), so this check cannot pass today. Report it `n/a`, never `ok` — an absent tool is an unrun check, not a green one. Install it or replace it with a resolve-every-relative-link grep; do not let it silently vanish.
 3. **contract-staleness check** — every dir whose code was touched has `CLAUDE.md` mtime ≥ newest code mtime
 4. **shipped-status check** — the just-built slug's own `text/<slug>-plan.md` / `-docs.md` must not still claim the feature is unbuilt:
    ```bash

package/rules/engine.md

@@ -120,7 +120,14 @@ world.restore(snapshot)     // rehydrate
 ```
 
 Over HTTP the same verbs are `SubstrateClient` methods (`packages/sdk/src/client.ts`).
-`harden` is exposed via `signal("learning:know")`.
+
+`harden` is the one verb with **no general wire**. `learning:know` is in no
+registry (`grep -c "learning:" packages/sdk/src/receivers.ts` → 0) and has no
+resolver; `client.know()` is `@deprecated` and returns `{}`. The only shipped
+harden receiver is **`chat:harden`** (`one.ie/web/src/lib/resolvers/entity.ts:566`),
+which crystallises a resolved chat thread into a dim-6 learning and requires an
+`entityId` — so it does not cover free-standing claims. Do not write
+`signal("learning:know")` into new code or docs; it fails silently.
 
 **Promise paths.** `promise:<slug>→proof` is a first-class weighted path
 family. At close, `.claude/scripts/do-promise-settle.sh` re-runs the

package/rules/ui.md

@@ -35,8 +35,12 @@ Receiver naming: `ui:<surface>:<action>` where surface is the component or page
 | `settings` | close, save, reset | `ui:settings:close`, `ui:settings:save` |
 | `memory` | reveal, forget, expand | `ui:memory:reveal`, `ui:memory:forget` |
 | `demo` | run, reset, next | `ui:demo:run`, `ui:demo:reset` |
+| `in:space` / `in:view` | the inbox axes — select, open | `ui:in:space:select`, `ui:in:view:open` |
+| `switcher` | group switching | `ui:switcher:open`, `ui:switcher:select` |
+| `members` | add, remove, delegate | `ui:members:add`, `ui:members:delegate` |
 
-Format: `ui:<surface>:<action>` — all lowercase, colon-delimited.
+Format: `ui:<surface>:<action>` — all lowercase, colon-delimited. A surface may
+nest (`in:space`), but the action is always the last segment.
 
 ---
 

package/scripts/browser-check.mjs

@@ -1,122 +1,63 @@
 #!/usr/bin/env node
 /**
- * browser-check.mjs — Playwright browser diagnostic tool.
+ * browser-check.mjs — DEPRECATED SHIM. Kept so existing callers keep working.
  *
- * Usage:
- *   node .claude/scripts/browser-check.mjs [url] [--send "message"] [--screenshot] [--network]
+ * The engine is now `.claude/scripts/chrome.mjs` (chrome-headless-shell via
+ * Playwright). This file maps the old flag set onto it and renames the report
+ * fields back to the shape `do-prove.sh` and `/browser` already parse.
  *
- * Requires: playwright in /tmp/node_modules (installed once, persists across sessions)
- * Install:  cd /tmp && npm install playwright && npx playwright install chromium
+ * New work calls chrome.mjs directly — it has steps, network, eval, selectors,
+ * cookies and headers this shim does not expose.
  *
- * What it checks:
- *   - Page load (status, title, console errors)
- *   - Chat rail text before/after sending a message (--send)
- *   - API request/response monitoring (--network)
- *   - Screenshot saved to /tmp/browser-check.png (--screenshot)
- *   - JS errors, React hydration errors
+ * Old usage (unchanged):
+ *   node .claude/scripts/browser-check.mjs [url] [--send "msg"] [--screenshot] [--network]
+ *
+ * Old prerequisite (`npm install playwright` into /tmp) is GONE. chrome.mjs
+ * finds Playwright wherever this tree installed it, including from a linked
+ * worktree. The /tmp copy had already evaporated, which silently degraded every
+ * browser PROVE to a curl fallback.
  */
 
-import pkg from '/tmp/node_modules/playwright/index.js'
-const { chromium } = pkg
-import { writeFileSync } from 'fs'
+import { spawnSync } from 'node:child_process'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
 
+const HERE = dirname(fileURLToPath(import.meta.url))
 const args = process.argv.slice(2)
-const urlArg = args.find(a => a.startsWith('http')) ?? 'http://localhost:4321'
+
+const url = args.find((a) => a.startsWith('http')) ?? 'http://localhost:4321'
 const sendMsg = args.find((_, i) => args[i - 1] === '--send') ?? null
 const doScreenshot = args.includes('--screenshot')
 const doNetwork = args.includes('--network')
 
-const browser = await chromium.launch({ headless: true })
-const page = await browser.newPage()
-
-// Capture console output
-const consoleLogs = []
-const jsErrors = []
-page.on('console', m => consoleLogs.push({ type: m.type(), text: m.text() }))
-page.on('pageerror', e => jsErrors.push(String(e)))
-
-// Network monitoring
-const apiRequests = []
-const apiResponses = []
-if (doNetwork) {
-  page.on('request', req => {
-    if (req.url().includes('/api/')) {
-      apiRequests.push({ method: req.method(), url: req.url().split('?')[0] })
-    }
-  })
-}
-
-// Patch fetch to capture chat API body + stream
-await page.addInitScript(() => {
-  const orig = window.fetch
-  window.__chatCapture = []
-  window.fetch = async (...args) => {
-    const url = args[0]?.toString() || ''
-    if (url.includes('/api/chat') && !url.includes('warmup') && !url.includes('tts')) {
-      const method = args[1]?.method || 'GET'
-      const body = typeof args[1]?.body === 'string' ? args[1].body : ''
-      if (method === 'POST') {
-        window.__chatCapture.push({ type: 'request', body: body.substring(0, 200) })
-        const resp = await orig(...args)
-        const clone = resp.clone()
-        const reader = clone.body?.getReader()
-        if (reader) {
-          let chunks = ''
-          while (true) {
-            const { done, value } = await reader.read()
-            if (done) break
-            chunks += new TextDecoder().decode(value)
-          }
-          window.__chatCapture.push({ type: 'stream', status: resp.status, body: chunks.substring(0, 800) })
-        }
-        return resp
-      }
-    }
-    return orig(...args)
-  }
-})
+const argv = [join(HERE, 'chrome.mjs'), url]
+if (sendMsg) argv.push('--send', sendMsg)
+if (doScreenshot) argv.push('--screenshot', '/tmp/browser-check.png')
+if (doNetwork) argv.push('--network')
 
-// Load page
-const res = await page.goto(urlArg, { waitUntil: 'load', timeout: 15000 }).catch(e => ({ status: () => 0, error: e.message }))
-const httpStatus = typeof res?.status === 'function' ? res.status() : 0
-await page.waitForTimeout(2500)
-
-const title = await page.title().catch(() => '(no title)')
-const chatRailBefore = await page.evaluate(() => document.querySelector('.chat-rail')?.innerText?.substring(0, 200) || null)
-
-// Send message if requested
-let chatRailAfter = null
-if (sendMsg) {
-  const ta = await page.$('textarea')
-  if (ta) {
-    await ta.fill(sendMsg)
-    await ta.press('Enter')
-    await page.waitForTimeout(12000)
-    chatRailAfter = await page.evaluate(() => document.querySelector('.chat-rail')?.innerText?.substring(0, 400) || null)
-  }
+const run = spawnSync(process.execPath, argv, { encoding: 'utf8', maxBuffer: 32 * 1024 * 1024 })
+if (run.status !== 0) {
+  process.stderr.write(run.stderr || 'chrome.mjs failed\n')
+  process.exit(run.status ?? 1)
 }
 
-// Screenshot
-if (doScreenshot) {
-  await page.screenshot({ path: '/tmp/browser-check.png', fullPage: false })
+let r
+try {
+  r = JSON.parse(run.stdout)
+} catch {
+  process.stdout.write(run.stdout)
+  process.exit(0)
 }
 
-const chatCapture = await page.evaluate(() => window.__chatCapture || [])
-
-await browser.close()
-
-// Report
-const report = {
-  url: urlArg,
-  httpStatus,
-  title,
-  jsErrors,
-  consoleErrors: consoleLogs.filter(l => l.type === 'error').map(l => l.text),
-  chatRailBefore,
-  chatRailAfter: sendMsg ? chatRailAfter : undefined,
-  chatCapture: sendMsg ? chatCapture : undefined,
-  apiRequests: doNetwork ? apiRequests : undefined,
+console.log(JSON.stringify({
+  url: r.url,
+  httpStatus: r.httpStatus,
+  title: r.title ?? '(no title)',
+  jsErrors: r.jsErrors,
+  consoleErrors: r.consoleErrors,
+  chatRailBefore: r.chatRailBefore ?? null,
+  chatRailAfter: sendMsg ? (r.chatRailAfter ?? null) : undefined,
+  chatCapture: sendMsg ? (r.chatCapture ?? []) : undefined,
+  apiRequests: doNetwork ? (r.network ?? []).map((n) => ({ method: n.method, url: n.url })) : undefined,
   screenshot: doScreenshot ? '/tmp/browser-check.png' : undefined,
-}
-
-console.log(JSON.stringify(report, null, 2))
+}, null, 2))

package/scripts/cc-events-proof.sh

@@ -56,8 +56,6 @@ if ! _is_one_web "$API_URL"; then
     kill "$SELF_STARTED_PID" 2>/dev/null
     exit 2
   fi
-  # do-tasks-bridge.py (wire 3, invoked below) reads this same env var independently —
-  # without exporting it here it would still default to the wrong :4321.
   export ONE_API_URL="$API_URL"
 fi
 
@@ -124,18 +122,21 @@ if [ "$neg_ok" = "true" ]; then
 fi
 echo "[cc-events-proof] wire1 negative control ok — wrong key correctly rejected ($neg_resp)"
 
-# ── wire 3 — the tasks bridge sends ──────────────────────────────────────────
-send_out="$(python3 "$ROOT/.claude/scripts/do-tasks-bridge.py" --send 2>/dev/null)"
-send_count="$(printf '%s' "$send_out" | jq 'length' 2>/dev/null || echo 0)"
-send_matched_total="$(printf '%s' "$send_out" | jq '[.[] | .result.matched // 0] | add // 0' 2>/dev/null)"
-if [ "${send_count:-0}" -eq 0 ]; then
-  echo "[cc-events-proof] wire3 tasks skipped — local build queue is empty (not a failure)"
-  wire3_ok=skip
-elif [ "${send_matched_total:-0}" -ge 1 ]; then
-  echo "[cc-events-proof] wire3 tasks ok — $send_count sent, matched_total=$send_matched_total"
+# ── wire 3 — tasks:announce direct (shared-atom wire, text/tasks-do-plan.md C1/C8:
+# tasks:create already fires tasks:announce in-process, so this proof calls the same
+# receiver the create path calls instead of going through the deleted reconciler
+# script) ───────────────────────────────────────────────────────────────────
+tasks_payload="$(jq -nc --arg tid "task:${PROOF_SLUG}-$$" '{taskId:$tid,tags:["cc","session"],board:"marketplace"}')"
+tasks_resp="$(curl -sS --max-time 5 -X POST "$API_URL/api/ask/tasks:announce" \
+  -H 'Content-Type: application/json' --config "$AUTHCFG" \
+  -H 'Cookie: signed_out=1' -d "{\"data\":$tasks_payload}")"
+tasks_ok="$(printf '%s' "$tasks_resp" | jq -r '.result.ok // false' 2>/dev/null)"
+tasks_matched="$(printf '%s' "$tasks_resp" | jq -r '.result.matched // 0' 2>/dev/null)"
+echo "[cc-events-proof] wire3 tasks:announce ok=$tasks_ok matched=$tasks_matched"
+if [ "$tasks_ok" = "true" ] && [ "${tasks_matched:-0}" -ge 1 ]; then
   wire3_ok=true
 else
-  echo "[cc-events-proof] wire3 tasks FAIL — $send_count sent, matched_total=$send_matched_total"
+  echo "[cc-events-proof] wire3 tasks FAIL — $tasks_resp"
   wire3_ok=false
 fi