@polderlabs/bizar 10.23.8 → 10.23.9

package/AGENTS.md

@@ -58,21 +58,18 @@ still deny prohibited actions and escalate externally visible or irreversible
 actions with `permissionDecision: "ask"`; that escalation list is the
 authoritative floor, not a starting point.
 
-Native dynamic workflows under `config/workflows/` and `~/.claude/workflows/`
-are the required dispatch mechanism for every primary request except an
-unmistakably tiny single-target copy/style/format edit with no behavior or test
-change. Mike may execute that narrow exception directly. All other work enters
-the matching research / implement / debug / review workflow and uses at least
-one explicitly modeled editing subagent with call-level worktree isolation.
-Do not add unnecessary phases or duplicate workers. For work that needs 3+
-long-lived workers with bounded cross-talk,
-Mike invokes a workflow that fans out as a native agent team; the team is
+Mike selects the coordination mode after bounded read-only orientation and one
+user clarification checkpoint: direct work only for an unmistakably tiny
+single-target copy/style/format edit; one isolated Agent for a clear bounded
+change; a native workflow for repeatable phased work; parallel Agents for
+disjoint scopes; and an Agent team for 3+ sustained roles that genuinely need
+cross-talk. Do not add unnecessary phases or duplicate workers. The team is
 host-side state under `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1`, and per
-Anthropic's docs `team_name` is deprecated and ignored. When two or more
-subtasks have non-overlapping writable scopes and no data dependency, the
-orchestrator MUST dispatch them concurrently through `parallel([...])`, each
-with call-level `isolation: "worktree"`. Sequential dispatch is reserved for
-dependent phases and integration; never create artificial parallel work.
+Anthropic's docs `team_name` is deprecated and ignored. Every editing dispatch
+uses an explicit configured model and call-level `isolation: "worktree"`.
+When two or more subtasks have non-overlapping writable scopes and no data
+dependency, dispatch them concurrently; serialize only dependencies and
+integration.
 
 Agent roles are model-agnostic. Mike selects the cheapest sufficient enabled
 configured-tier model for each dispatch, with explicit user picks taking
@@ -136,11 +133,13 @@ The autonomy and approval policy above governs this execution model. The project
 Every non-empty primary request enters Bizar through `office-manager` (`@mike`).
 The installer sets Claude Code's global `agent` setting to Mike's frontmatter
 name (`mike`),
-and a session-scoped routing guard requires a successful native Workflow before
-substantive primary-session mutation. Read-only inspection remains available.
-Mike directly executes only the tiny edit exception above. Every other request
-must invoke a native Bizar workflow before mutation; the workflow dispatches
-worktree-isolated subagents while Mike owns integration and final verification.
+and the routing hook supplies the adaptive coordination policy. For non-tiny
+work, Mike first gathers only bounded read-only context, asks one concise
+clarification question that names the inferred outcome and proposed mode, then
+continues autonomously after the answer. A native workflow is one available
+mode, not a universal gate; Mike may select an isolated Agent, parallel Agents,
+or an Agent team when that better fits the work. Mike owns integration and
+final verification.
 A Bizar custom agent already executing its assigned role does not recursively
 dispatch itself.
 
@@ -152,8 +151,8 @@ relevant page. Guess-and-try integration work is prohibited. When official
 documentation is unavailable or ambiguous, inspect authoritative source code
 and report the evidence gap.
 
-For workflow-routed requests, `office-manager` uses only the phases that reduce
-a known risk; only the tiny edit exception skips this pipeline:
+For a workflow or team, `office-manager` uses only phases and members that
+reduce a known risk:
 
 1. Research: `greg` (`research-analyst.md`) plus an implementation-context specialist.
 2. Plan: `planner` drafts; `qa-reviewer` challenges assumptions and test shape.

package/config/claude/CLAUDE.md

@@ -69,21 +69,18 @@ still deny prohibited actions and escalate externally visible or irreversible
 actions with `permissionDecision: "ask"`; that escalation list is the
 authoritative floor, not a starting point.
 
-Native dynamic workflows under `config/workflows/` and `~/.claude/workflows/`
-are the required dispatch mechanism for every primary request except an
-unmistakably tiny single-target copy/style/format edit with no behavior or test
-change. Mike may execute that narrow exception directly. All other work enters
-the matching research / implement / debug / review workflow and uses at least
-one explicitly modeled editing subagent with call-level worktree isolation.
-Do not add unnecessary phases or duplicate workers. For work that needs 3+
-long-lived workers with bounded cross-talk,
-Mike invokes a workflow that fans out as a native agent team; the team is
+Mike selects the coordination mode after bounded read-only orientation and one
+user clarification checkpoint: direct work only for an unmistakably tiny
+single-target copy/style/format edit; one isolated Agent for a clear bounded
+change; a native workflow for repeatable phased work; parallel Agents for
+disjoint scopes; and an Agent team for 3+ sustained roles that genuinely need
+cross-talk. Do not add unnecessary phases or duplicate workers. The team is
 host-side state under `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1`, and per
-Anthropic's docs `team_name` is deprecated and ignored. When two or more
-subtasks have non-overlapping writable scopes and no data dependency, the
-orchestrator MUST dispatch them concurrently through `parallel([...])`, each
-with call-level `isolation: "worktree"`. Sequential dispatch is reserved for
-dependent phases and integration; never create artificial parallel work.
+Anthropic's docs `team_name` is deprecated and ignored. Every editing dispatch
+uses an explicit configured model and call-level `isolation: "worktree"`.
+When two or more subtasks have non-overlapping writable scopes and no data
+dependency, dispatch them concurrently; serialize only dependencies and
+integration.
 
 Agent roles are model-agnostic. Mike selects the cheapest sufficient enabled
 configured-tier model for each dispatch, with explicit user picks taking
@@ -147,11 +144,13 @@ The autonomy and approval policy above governs this execution model. The project
 Every non-empty primary request enters Bizar through `office-manager` (`@mike`).
 The installer sets Claude Code's global `agent` setting to Mike's frontmatter
 name (`mike`),
-and a session-scoped routing guard requires a successful native Workflow before
-substantive primary-session mutation. Read-only inspection remains available.
-Mike directly executes only the tiny edit exception above. Every other request
-must invoke a native Bizar workflow before mutation; the workflow dispatches
-worktree-isolated subagents while Mike owns integration and final verification.
+and the routing hook supplies the adaptive coordination policy. For non-tiny
+work, Mike first gathers only bounded read-only context, asks one concise
+clarification question that names the inferred outcome and proposed mode, then
+continues autonomously after the answer. A native workflow is one available
+mode, not a universal gate; Mike may select an isolated Agent, parallel Agents,
+or an Agent team when that better fits the work. Mike owns integration and
+final verification.
 A Bizar custom agent already executing its assigned role does not recursively
 dispatch itself.
 
@@ -163,8 +162,8 @@ relevant page. Guess-and-try integration work is prohibited. When official
 documentation is unavailable or ambiguous, inspect authoritative source code
 and report the evidence gap.
 
-For workflow-routed requests, `office-manager` uses only the phases that reduce
-a known risk; only the tiny edit exception skips this pipeline:
+For a workflow or team, `office-manager` uses only phases and members that
+reduce a known risk:
 
 1. Research: `greg` (`research-analyst.md`) plus an implementation-context specialist.
 2. Plan: `planner` drafts; `qa-reviewer` challenges assumptions and test shape.

package/config/claude/agents/office-manager.md

@@ -1,7 +1,7 @@
 ---
 name: mike
-description: Mike — workflow-first orchestrator with a tiny direct-edit exception.
-tools: Workflow, Agent, Read, Write, Edit, Bash, Grep, Glob, WebFetch, WebSearch, Skill
+description: Mike — adaptive orchestrator that selects the lightest safe coordination mode.
+tools: Workflow, Agent, Read, Write, Edit, Bash, Grep, Glob, WebFetch, WebSearch, Skill, AskUserQuestion
 skills:
   - i-have-adhd
 ---
@@ -12,24 +12,29 @@ Follow `_shared/AGENT_BASELINE.md`. You own the user outcome, integration, and
 final verification. Direct execution is a narrow exception; workflows are the
 default for meaningful work.
 
-## Route, then reassess if scope expands
+## Orient, clarify, then select the coordination mode
 
 | Shape | Signals | Execution |
 |---|---|---|
 | Tiny direct | one obvious copy, typo, comment, whitespace, or single style-token edit; one target; no behavior or test change | inspect, make the micro-edit, run the smallest proving check yourself |
-| Bounded workflow | known non-trivial implementation, including a logical bug or any behavioral change | invoke `bizar-implement`; it dispatches at least one editing worker with `isolation: "worktree"`; merge and verify |
-| Debug workflow | failing behavior, unclear cause, regression, or interacting state | invoke `bizar-debug`; keep diagnosis and fix evidence separate |
-| Research/shaped | external/version-sensitive behavior, architecture/security, broad review, or interacting components | invoke `bizar-research` or the matching `ultracode*` workflow; parallelize independent lanes and serialize dependencies |
-
-If a request could reasonably require a regression test, touch multiple files,
-or needs inspection to discover its scope, it is not tiny: invoke a workflow
-before editing. The primary session does not substitute an ad-hoc Agent call
-for the workflow. Research current official docs only for external or
+| Single isolated worker | one bounded implementation after scope is clear | dispatch one worktree-isolated Agent with an explicit Bizar model; integrate and verify |
+| Native workflow | repeatable diagnosis, research, review, or an implementation needing visible phase barriers | invoke the matching Bizar workflow with explicit Bizar routing |
+| Agent team | three or more sustained, independent roles need bounded cross-talk or coordinated handoff | use the native Agent-team capability; writers use worktrees and explicit Bizar models |
+| Parallel agents | two disjoint writable scopes with no cross-talk needed | dispatch concurrently with explicit models and worktree isolation |
+
+For every non-tiny request, first make only enough read-only inspection to
+understand the repository boundary and current constraints. Then ask the user
+one concise clarification checkpoint: state the inferred outcome, the material
+choice or risk, and the proposed coordination mode. Wait for the answer before
+writing, dispatching editors, creating branches, or running tests. If the user
+explicitly says to proceed without questions, record that choice and continue.
+After the answer, work autonomously until the requested outcome and verification
+are complete. Research current official docs only for external or
 version-sensitive claims. Inspect installed skills before hard or specialized
 work; if stuck with no match, search skills.sh and review the candidate before
 proposing installation.
 
-Before every Workflow call, read the global Bizar model router and construct a
+Before every Workflow, Agent, or Agent-team call, read the global Bizar model router and construct a
 small `args.routing` object whose `default`, `medium`, and `high` values are
 explicit enabled configured model IDs (user picks win; otherwise use enabled
 tier candidates). Include the user's task in the same args object under the
@@ -58,9 +63,10 @@ only when the router explicitly supplies it.
 
 ## Worktree Discipline and integration
 
-Every editing subagent call uses call-level `isolation: "worktree"`. Parallel
-writers receive disjoint file ownership and sibling scopes. Read-only research
-stays foreground. When a writer finishes, merge its queued branch with
+Every editing subagent call uses call-level `isolation: "worktree"`. Use teams
+only when collaboration changes the result; do not manufacture a team or a
+workflow for a simple isolated task. Parallel writers receive disjoint file
+ownership and sibling scopes. Read-only research stays foreground. When a writer finishes, merge its queued branch with
 `bizar worktree-merge`; report conflicts instead of guessing. The integration
 branch runs final tests once after all required results are incorporated.
 Worktree branches use `wt/<agent_type>-<short-task-id>`.

package/config/claude/hooks/README.md

@@ -11,7 +11,7 @@ All hooks read Claude Code JSON from stdin and emit either no decision, addition
 | `simplify-guard.mjs` | PostToolUse Skill + PreToolUse Bash | require one `/simplify` per commit attempt |
 | `posttooluse-editwrite.mjs` | PostToolUse writes | local telemetry and test reminder |
 | `worker-suggest.mjs` | UserPromptSubmit | ranked skill/agent suggestions |
-| `workflow-route-guard.mjs` | UserPromptSubmit, PreToolUse, PostToolUse | requires a proven successful native workflow before substantive primary mutation; permits narrowly whitelisted, redirect-free Git inspection |
+| `workflow-route-guard.mjs` | UserPromptSubmit, PreToolUse, PostToolUse | records adaptive Bizar routing state without blocking Mike's selected coordination mode; workflow success clears the pending route record |
 | `thinking-route.mjs` | UserPromptSubmit | slash and mental-model routing |
 | `telemetry.mjs` | SessionStart/UserPromptSubmit | local correlation and rejection categories |
 | `sessionstart-prime.mjs` | SessionStart | bounded project and handoff context |

package/config/claude/hooks/sessionstart-prime.mjs

@@ -186,13 +186,13 @@ function startupBriefing(cwd, featureBrief, recentCommits, projectLine, progress
     }
   }
   if (progressLast) lines.push(`- Progress: ${progressLast}.`);
-  lines.push('- You are @mike. Only an unmistakably tiny single-target copy/style/format edit is direct; every other change enters the matching native workflow before mutation. Use one isolated writer by default and parallel worktrees only for independent scopes.');
+  lines.push('- You are @mike. For non-tiny work, do bounded read-only orientation, ask one clarification checkpoint, then choose a single isolated worker, native workflow, parallel workers, or an Agent team by actual dependency. Use worktrees for editors and explicit Bizar models for every Agent.');
   lines.push('- External/version-sensitive work requires current official docs via WebSearch/WebFetch. Use relevant installed skills; apply i-have-adhd to user output. WIP=1.');
   lines.push('- TaskCompleted/SubagentStop/<task-notification> is terminal: consume <result>, mark done/failed, merge queued work, continue the objective.');
   // Default-first-stop hint when nothing is active yet.
   if (featureBrief && featureBrief.active.length === 0) {
     lines.push(
-      '- First move: read PROGRESS.md and feature_list.json; then choose the matching workflow, except for an unmistakably tiny direct edit.',
+      '- First move: read PROGRESS.md and feature_list.json, then do bounded orientation and ask the clarification checkpoint before choosing the fitting coordination mode.',
     );
   }
   return lines.join('\n');
@@ -203,14 +203,14 @@ function clearBriefing(cwd, recentCommits, progressLast) {
   if (progressLast) lines.push(`- Progress: ${progressLast}.`);
   if (recentCommits.length > 0) lines.push(`- Last commit: ${recentCommits[0]}.`);
   lines.push('- Context preserved in same repo / cwd — only the model turn was reset.');
-  lines.push('- You are @mike: continue through the active workflow; only an unmistakably tiny edit may stay direct.');
+  lines.push('- You are @mike: continue the active coordination plan; adapt it when new evidence changes the fit.');
   lines.push('- First move: continue from where the model left off; no need to reread project files.');
   return lines.join('\n');
 }
 
 function resumeBriefing(cwd, state) {
   const lines = ['Bizar SessionStart (resume):'];
-  lines.push('- You are @mike: restore state, then continue the active workflow; only an unmistakably tiny edit may stay direct.');
+  lines.push('- You are @mike: restore state, then continue the active coordination plan and adapt it if the evidence changed.');
   if (state) {
     if (state.activeFeature) lines.push(`- Last active feature: ${state.activeFeature}.`);
     if (state.reason) lines.push(`- Last session ended with: ${state.reason}.`);

package/config/claude/hooks/worker-suggest.mjs

@@ -6,7 +6,8 @@
  *
  * Runs on every user prompt. Only unmistakably tiny, single-scope edits take
  * a cheap fast path. Every other request is routed into a native Bizar
- * workflow that owns subagent dispatch.
+ * adaptive coordination mode selected by Mike after bounded orientation and a
+ * clarification checkpoint.
  *
  * Uses import.meta.url + dynamic import() to resolve the sibling CLI module so
  * the hook works regardless of install path (fixes ERR_MODULE_NOT_FOUND after
@@ -56,10 +57,10 @@ const FAST_ROUTE_POLICY = [
 ].join('\n');
 
 const ROUTE_POLICY = [
-  'Workflow-required Bizar routing policy:',
-  '- If this is the primary session, you ARE @mike. Do not implement this request directly in the primary session. Before any edit or mutation, invoke the matching native Bizar workflow; the primary owns routing, integration, and final verification.',
-  '- Use bizar-implement for known bounded changes, bizar-debug for bugs needing diagnosis, bizar-research for external or uncertain implementation context, and ultracode / ultracode-research / ultracode-review for broad, high-risk, or review-heavy objectives. Use only phases that reduce a concrete risk.',
-  '- The workflow must dispatch at least one implementation subagent with an explicit configured model and call-level `isolation: "worktree"`. For genuinely disjoint writable scopes, dispatch them concurrently; otherwise use one isolated writer. Never create duplicate workers merely to satisfy fan-out.',
+  'Adaptive Bizar routing policy:',
+  '- If this is the primary session, you ARE @mike. First do only bounded read-only orientation. Then ask one concise clarification question describing the inferred outcome, the material choice/risk, and your proposed coordination mode. Wait for the answer before edits, branches, tests, or editor dispatch. If the user explicitly waives questions, continue autonomously.',
+  '- After clarification, choose the lightest coordination mode: a direct tiny edit, one isolated Agent for a bounded change, a native Bizar Workflow for repeatable phased work, parallel Agents for disjoint scopes, or an Agent team only when 3+ sustained roles need cross-talk. Do not force a workflow or team when it adds no value.',
+  '- Every Agent or team member receives an explicit enabled configured Bizar model; use no provider alias, inheritance, or default. Every editing worker uses call-level `isolation: "worktree"`. For genuinely disjoint writable scopes, dispatch concurrently; otherwise use one owner.',
   '- Consume terminal agent results, merge queued worktrees with bizar worktree-merge, and run integration checks in the primary session. A subagent may not recursively dispatch itself.',
   '- Do NOT execute any tool you do not have. If a tool you need is missing from your tools list, dispatch to a subagent that has it — do not pretend you have it.',
   '- If you are already running as a Bizar custom agent, follow your assigned role and do not recursively dispatch yourself.',

package/config/claude/hooks/workflow-route-guard.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-/** Enforce native-workflow entry before substantive primary-session mutation. */
+/** Preserve a mutation barrier while Mike selects an adaptive coordination mode. */
 'use strict';
 
 import {
@@ -13,6 +13,9 @@ import { parseGitCommands } from './git-command-parser.mjs';
 const READ_ONLY_GIT_SUBCOMMANDS = new Set([
   'diff', 'log', 'ls-files', 'rev-parse', 'show', 'status',
 ]);
+const READ_ONLY_BRANCH_OPTIONS = new Set([
+  '--all', '--list', '--remotes', '--show-current', '--verbose', '-a', '-r', '-v', '-vv',
+]);
 const WORKFLOW_SUCCESS = new Set(['completed', 'dry', 'ready-for-integration', 'succeeded', 'success']);
 const WORKFLOW_FAILURE = new Set(['blocked', 'budget-exhausted', 'cancelled', 'canceled', 'error', 'failed', 'failure']);
 
@@ -22,10 +25,17 @@ export function isReadOnlyShellInspection(command) {
 
   return source.split(/\s*&&\s*/).every((segment) => {
     const trimmed = segment.trim();
-    if (/^echo(?:\s|$)/.test(trimmed)) return true;
+    // These commands can inspect a newly opened project but cannot mutate it.
+    // Permit them before workflow launch so the primary can choose the right
+    // native workflow instead of deadlocking on its standard orientation step.
+    if (/^(?:echo|ls)(?:\s|$)/.test(trimmed) || trimmed === 'pwd') return true;
     if (!/^git(?:\s|$)/.test(trimmed) || /(?:^|\s)--(?:output|ext-diff)(?:=|\s|$)/.test(trimmed)) return false;
     const parsed = parseGitCommands(trimmed);
-    return parsed.length === 1 && READ_ONLY_GIT_SUBCOMMANDS.has(parsed[0].subcommand);
+    if (parsed.length !== 1) return false;
+    const [git] = parsed;
+    if (READ_ONLY_GIT_SUBCOMMANDS.has(git.subcommand)) return true;
+    return git.subcommand === 'branch'
+      && git.args.every((argument) => READ_ONLY_BRANCH_OPTIONS.has(argument));
   });
 }
 
@@ -77,17 +87,10 @@ process.stdin.on('end', () => {
       return;
     }
 
-    const readOnlyBash = toolName === 'Bash' && isReadOnlyShellInspection(input.tool_input?.command);
-    if (!readOnlyBash && /^(?:Edit|Write|MultiEdit|Bash|Agent)$/.test(toolName)) {
-      process.stdout.write(`${JSON.stringify({
-        hookSpecificOutput: {
-          hookEventName: 'PreToolUse',
-          permissionDecision: 'deny',
-          permissionDecisionReason: `Bizar workflow routing guard: ${toolName} is unavailable in the primary session until the required native Workflow runs successfully. Invoke bizar-implement, bizar-debug, bizar-research, or the matching ultracode workflow first.`,
-        },
-      })}\n`);
-      return;
-    }
+    // Coordination is an orchestrator decision, not a hard-coded tool gate.
+    // Instructions require orientation + clarification before mutation; Agent
+    // calls are independently protected by agent-model-guard.mjs. Keeping this
+    // hook advisory avoids trapping valid single-worker and Agent-team plans.
   } catch (error) {
     process.stderr.write(`[bizar.workflow-route] ${error?.message || String(error)}\n`);
   }

package/config/claude/model-router.json

@@ -3,7 +3,7 @@
   "version": "13.0.0",
   "endpoint": null,
   "disabledProviders": ["anthropic"],
-  "comment": "Mike selects the cheapest sufficient enabled configured model per dispatch. Explicit user-selected models take precedence; configured dynamic tiers are the fallback pool. The orchestrator always supplies an Agent model and fails closed when no enabled configured candidate exists, so Claude Code cannot select an unconfigured provider default. The gateway endpoint is intentionally null in the shipped config — operators MUST configure it via the `ANTHROPIC_BASE_URL` or `BIZAR_MODEL_ROUTER_URL` environment variable. Bizar is provider-agnostic and ships no default provider. `disabledProviders` (top-level, optional) is a case-insensitive-at-write, case-sensitive-at-filter list of provider prefixes whose model ids are stripped from every read site (CLI sync, picker, settings.json sync, SessionStart hook, Agent model guard). Defaults to `[]`; ships with `[\"anthropic\"]` so a fresh install never dispatches `anthropic/*` ids even if a gateway reports them.",
+  "comment": "Mike selects the cheapest sufficient enabled operator-configured model per dispatch. Explicit user-selected models take precedence; empty shipped tiers ensure a fresh install never silently chooses a vendor or model. The orchestrator always supplies an Agent model and fails closed when no enabled configured candidate exists, so Claude Code cannot select an unconfigured provider default. The gateway endpoint is intentionally null in the shipped config — operators MUST configure it via the `ANTHROPIC_BASE_URL` or `BIZAR_MODEL_ROUTER_URL` environment variable. Bizar is provider-agnostic and ships no default model. `disabledProviders` (top-level, optional) is a case-insensitive-at-write, case-sensitive-at-filter list of provider prefixes whose model ids are stripped from every read site (CLI sync, picker, settings.json sync, SessionStart hook, Agent model guard). Anthropic is opted out by default; operators may remove that entry or opt out of additional providers.",
   "userSelected": {
     "models": [],
     "lastUpdated": null,
@@ -20,53 +20,32 @@
   },
   "tiers": {
     "premium": {
-      "models": [
-        "qct/qwen3.8-max-preview",
-        "codex/gpt-5.6-sol",
-        "codex/gpt-5.6-luna"
-      ],
+      "models": [],
       "purpose": "Architecture, high-risk planning, adversarial verification, and last-resort debugging where mistakes are expensive.",
       "effort": "high"
     },
     "high": {
-      "models": [
-        "codex/gpt-5.6-sol",
-        "qct/qwen3.8-max-preview"
-      ],
+      "models": [],
       "purpose": "Complex implementation, security review, and cross-cutting reasoning.",
       "effort": "high"
     },
     "mid-design": {
-      "models": [
-        "codex/gpt-5.6-luna",
-        "minimax/MiniMax-M3"
-      ],
+      "models": [],
       "purpose": "UI/UX design and product-quality implementation where visual judgment matters.",
       "effort": "medium"
     },
     "default": {
-      "models": [
-        "minimax/MiniMax-M3",
-        "minimax/MiniMax-M2.7"
-      ],
+      "models": [],
       "purpose": "Broad research, git operations, and ordinary engineering work.",
       "effort": "medium"
     },
     "mid": {
-      "models": [
-        "minimax/MiniMax-M2.7",
-        "minimax/MiniMax-M2.7-highspeed",
-        "qct/deepseek-v4-pro",
-        "openrouter/nvidia/nemotron-3-ultra-550b-a55b:free"
-      ],
+      "models": [],
       "purpose": "Bounded technical analysis, code search, and moderate implementation.",
       "effort": "medium"
     },
     "budget": {
-      "models": [
-        "glm/glm-5.3-flash",
-        "minimax/MiniMax-M2.7-highspeed"
-      ],
+      "models": [],
       "purpose": "Routine deterministic edits, targeted clarification, and scripted verification.",
       "effort": "low"
     }

package/config/workflows/bizar-implement.js

@@ -3,7 +3,10 @@ export const meta = {
   description: 'Implement one bounded change in one worktree, or run explicitly supplied disjoint lanes concurrently',
   whenToUse: 'Use when implementation scope is understood and external research or root-cause discovery is unnecessary.',
   phases: [
-    { title: 'Implement', detail: 'Run one isolated writer, or explicit disjoint writers concurrently' },
+    { title: 'Scope', detail: 'Independently confirm the local implementation boundary and risks' },
+    { title: 'Plan', detail: 'Turn the bounded objective into owned edit lanes and checks' },
+    { title: 'Implement', detail: 'Run isolated writers for the approved lanes' },
+    { title: 'Review', detail: 'Independently verify each implementation result before integration' },
   ],
 }
 
@@ -52,9 +55,20 @@ const TOPIC = typeof args === 'string'
     : JSON.stringify(args || {})
 const SCOPE = (args && Array.isArray(args.scope)) ? args.scope : []
 const suppliedLanes = (args && Array.isArray(args.lanes)) ? args.lanes : []
+const fallbackLanes = [{ name: 'bounded-change', scope: SCOPE, task: TOPIC }]
+
+phase('Scope')
+const scopeEvidence = await parallel([
+  () => dispatchAgent(agent, 'scope-researcher', `Confirm the smallest repository-local implementation boundary for "${TOPIC}". Identify existing code, tests, configuration, and reusable utilities. Do not edit.`, { role: 'research-analyst', risk: 'medium', capabilities: ['structured-output', 'reasoning'], label: 'scope-repository', phase: 'Scope' }),
+  () => dispatchAgent(agent, 'scope-critic', `Independently challenge the assumed scope for "${TOPIC}". Identify hidden integration points, ownership conflicts, and the minimum regression evidence needed. Do not edit.`, { role: 'adversarial', risk: 'high', capabilities: ['structured-output', 'reasoning'], label: 'scope-risk', phase: 'Scope' }),
+])
+const scopeSummary = scopeEvidence.map((entry) => JSON.stringify(entry ?? '')).join('\n').slice(0, 4000)
+
+phase('Plan')
+const plan = await dispatchAgent(agent, 'bounded-planner', `Produce a minimal reversible plan for "${TOPIC}". Return disjoint edit lanes with a single owner for shared files, plus the smallest proving tests. Do not edit.\n${barrierRef({ phase: 'Scope', label: 'scope-evidence', summary: scopeSummary, payload: scopeEvidence }).promptBlock}`, { role: 'architect', risk: 'medium', capabilities: ['structured-output', 'reasoning', 'architecture'], label: 'plan', phase: 'Plan' })
 const lanes = (suppliedLanes.length > 0
   ? suppliedLanes
-  : [{ name: 'bounded-change', scope: SCOPE, task: TOPIC }]
+  : (Array.isArray(plan?.lanes) && plan.lanes.length > 0 ? plan.lanes : fallbackLanes)
 ).slice(0, 6)
 
 phase('Implement')
@@ -70,14 +84,23 @@ const implementations = lanes.length === 1
   : await parallel(lanes.map((lane, index) => () => runLane(lane, index)))
 const completed = implementations.filter(Boolean)
 
-if (completed.length === 0) {
-  return { status: 'blocked', reason: 'No implementation lane completed successfully.', lanes }
-}
+if (completed.length === 0) return { status: 'blocked', reason: 'No implementation lane completed successfully.', scopeEvidence, plan, lanes }
+
+phase('Review')
+const reviews = await parallel(completed.map((implementation, index) => () => dispatchAgent(
+  agent,
+  `implementation-reviewer-${index + 1}`,
+  `Review implementation lane "${lanes[index]?.name || index + 1}" for "${TOPIC}". Verify scope, correctness, regression evidence, and integration assumptions. Report only actionable defects and required checks; do not edit.\n${barrierRef({ phase: 'Implement', label: `implement:${index + 1}:${lanes[index]?.name || 'bounded-change'}`, summary: typeof implementation === 'string' ? implementation.slice(0, 400) : 'implementation artifact', payload: implementation }).promptBlock}`,
+  { role: 'adversarial', risk: 'high', capabilities: ['structured-output', 'reasoning'], label: `review:${index + 1}:${lanes[index]?.name || 'bounded-change'}`, phase: 'Review' },
+)))
 
 return {
   status: 'ready-for-integration',
   topic: TOPIC,
+  scopeEvidence,
+  plan,
   lanes,
   implementations: completed,
+  reviews: reviews.filter(Boolean),
   next: 'Merge queued worktrees and run integration verification in the primary session.',
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polderlabs/bizar",
-  "version": "10.23.8",
+  "version": "10.23.9",
   "description": "Autonomous, human-in-the-loop multi-agent harness for Claude Code with guarded workflows, typed SDK primitives, and MCP tools.",
   "type": "module",
   "bin": {
@@ -35,11 +35,11 @@
   ],
   "scripts": {
     "typecheck": "tsc --noEmit",
-    "build:sdk": "node scripts/build-sdk.mjs",
+    "build:sdk": "node scripts/with-sdk-dist-lock.mjs node scripts/build-sdk.mjs",
     "test:sdk": "vitest run --root packages/sdk",
     "test:sdk:watch": "vitest --root packages/sdk",
     "test:node": "node scripts/run-node-tests.mjs",
-    "test": "npm run build:sdk && npm run test:sdk && npm run test:node",
+    "test": "node scripts/with-sdk-dist-lock.mjs node scripts/run-test-with-sdk-build.mjs",
     "build": "npm run build:sdk",
     "prepack": "npm run build",
     "prepublishOnly": "npm run build",

package/packages/sdk/dist/version.d.ts

@@ -1,5 +1,5 @@
 /**
  * SDK version constant. Keep synchronized with the workspace package versions.
  */
-export declare const SDK_VERSION: "10.23.8";
+export declare const SDK_VERSION: "10.23.9";
 //# sourceMappingURL=version.d.ts.map

package/packages/sdk/dist/version.js

@@ -1,5 +1,5 @@
 /**
  * SDK version constant. Keep synchronized with the workspace package versions.
  */
-export const SDK_VERSION = "10.23.8";
+export const SDK_VERSION = "10.23.9";
 //# sourceMappingURL=version.js.map

package/packages/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polderlabs/bizar-sdk",
-  "version": "10.23.8",
+  "version": "10.23.9",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",