@polderlabs/bizar 10.23.5 → 10.23.7

package/AGENTS.md

@@ -59,11 +59,13 @@ actions with `permissionDecision: "ask"`; that escalation list is the
 authoritative floor, not a starting point.
 
 Native dynamic workflows under `config/workflows/` and `~/.claude/workflows/`
-are the primary dispatch mechanism for shaped work (research / implement /
-debug / review). Small, deterministic, repository-local tasks go directly to
-one isolated worker: inspect, make the smallest change, and run the smallest
-proving check. Do not add research, planning, review, or duplicate workers to
-such tasks. For work that needs 3+ long-lived workers with bounded cross-talk,
+are the required dispatch mechanism for every primary request except an
+unmistakably tiny single-target copy/style/format edit with no behavior or test
+change. Mike may execute that narrow exception directly. All other work enters
+the matching research / implement / debug / review workflow and uses at least
+one explicitly modeled editing subagent with call-level worktree isolation.
+Do not add unnecessary phases or duplicate workers. For work that needs 3+
+long-lived workers with bounded cross-talk,
 Mike invokes a workflow that fans out as a native agent team; the team is
 host-side state under `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1`, and per
 Anthropic's docs `team_name` is deprecated and ignored. When two or more
@@ -132,10 +134,15 @@ guess-and-try remains prohibited.
 The autonomy and approval policy above governs this execution model. The project defaults to `acceptEdits`; eligible operators may opt into Claude Code Auto mode.
 
 Every non-empty primary request enters Bizar through `office-manager` (`@mike`).
-Mike handles small, deterministic repository-local changes directly and uses
-the smallest proving check. It delegates when worktree isolation, specialist
-expertise, or real parallelism materially helps. A Bizar custom agent already
-executing its assigned role does not recursively dispatch itself.
+The installer sets Claude Code's global `agent` setting to Mike's frontmatter
+name (`mike`),
+and a session-scoped routing guard requires a successful native Workflow before
+substantive primary-session mutation. Read-only inspection remains available.
+Mike directly executes only the tiny edit exception above. Every other request
+must invoke a native Bizar workflow before mutation; the workflow dispatches
+worktree-isolated subagents while Mike owns integration and final verification.
+A Bizar custom agent already executing its assigned role does not recursively
+dispatch itself.
 
 Every shipped agent has `WebSearch` access. Before proposing, explaining,
 troubleshooting, or implementing behavior from an external API, library,
@@ -145,8 +152,8 @@ relevant page. Guess-and-try integration work is prohibited. When official
 documentation is unavailable or ambiguous, inspect authoritative source code
 and report the evidence gap.
 
-For shaped requests, `office-manager` uses only the phases that reduce a known
-risk; direct tasks skip this pipeline:
+For workflow-routed requests, `office-manager` uses only the phases that reduce
+a known risk; only the tiny edit exception skips this pipeline:
 
 1. Research: `greg` (`research-analyst.md`) plus an implementation-context specialist.
 2. Plan: `planner` drafts; `qa-reviewer` challenges assumptions and test shape.

package/cli/commands/claude-cmd.mjs

@@ -56,7 +56,7 @@ export async function runClaudeTeam(args = []) {
     console.error(chalk.red(`  ✗ Missing ${router}; run bizar install`));
     return 1;
   }
-  return spawnClaude(['-p', '--name', name, '--agent', 'office-manager', mission, ...rest]);
+  return spawnClaude(['-p', '--name', name, '--agent', 'mike', mission, ...rest]);
 }
 
 export async function runClaudeSubagent(args = []) {
@@ -80,7 +80,9 @@ export async function runClaudeRun(args = []) {
     console.log('  Usage: bizar run [--bg] <prompt>');
     return 2;
   }
-  return spawnClaude(background ? ['--bg', '-p', prompt] : ['-p', prompt]);
+  return spawnClaude(background
+    ? ['--bg', '-p', '--agent', 'mike', prompt]
+    : ['-p', '--agent', 'mike', prompt]);
 }
 
 export async function run(name, args, isHelpRequest) {

package/cli/commands/hook.mjs

@@ -19,6 +19,7 @@ const PRETOOL_SAFETY_LEAVES = new Set([
   'pretooluse-editwrite', 'path-ownership-guard',
   'pretooluse-bash', 'git-workflow-guard',
   'agent-model-guard',
+  'workflow-route-guard',
 ]);
 
 export const HOOK_PROGRAMS = Object.freeze({
@@ -47,6 +48,7 @@ export const HOOK_PROGRAMS = Object.freeze({
   'team-lifecycle': 'team-lifecycle.mjs',
   'verify-deliverables': 'verify-deliverables.mjs',
   'worker-suggest': 'worker-suggest.mjs',
+  'workflow-route-guard': 'workflow-route-guard.mjs',
   'worktree-archive': 'worktree-archive.mjs',
   'worktree-bootstrap': 'worktree-bootstrap.mjs',
 });
@@ -55,6 +57,7 @@ export const EVENT_CHAINS = Object.freeze({
   'user-prompt-submit': Object.freeze([
     'control-inbox',
     'keyword-router',
+    'workflow-route-guard',
     'worker-suggest',
     'thinking-route',
     'telemetry',
@@ -230,16 +233,17 @@ export function selectEventChain(eventKey, input = '') {
 
   if (eventKey === 'pre-tool-use') {
     if (/^(Write|Edit|MultiEdit)$/.test(toolName)) {
-      return ['pretooluse-editwrite', 'path-ownership-guard'];
+      return ['workflow-route-guard', 'pretooluse-editwrite', 'path-ownership-guard'];
     }
     if (toolName === 'Bash') {
-      return ['pretooluse-bash', 'git-workflow-guard'];
+      return ['workflow-route-guard', 'pretooluse-bash', 'git-workflow-guard'];
     }
-    if (toolName === 'Agent') return ['agent-model-guard'];
+    if (toolName === 'Agent') return ['workflow-route-guard', 'agent-model-guard'];
     return [];
   }
 
   if (eventKey === 'post-tool-use') {
+    if (toolName === 'Workflow') return ['workflow-route-guard'];
     if (/^(Write|Edit|MultiEdit)$/.test(toolName)) return ['posttooluse-editwrite'];
     if (toolName === 'Bash') return [];
     return [];