@polderlabs/bizar 6.2.4 → 6.3.0

package/.claude/skills/9router-web-fetch/SKILL.md

@@ -0,0 +1,99 @@
+---
+name: 9router-web-fetch
+description: Fetch URL → markdown / text / HTML via 9Router /v1/web/fetch using Firecrawl / Jina Reader / Tavily Extract / Exa Contents. Use when the user wants to scrape a webpage, extract URL content, read article, or convert a URL to markdown.
+---
+
+# 9Router — Web Fetch
+
+Requires `NINEROUTER_URL` (and `NINEROUTER_KEY` if auth enabled). See https://raw.githubusercontent.com/decolua/9router/refs/heads/master/skills/9router/SKILL.md for setup.
+
+## Discover
+
+```bash
+curl $NINEROUTER_URL/v1/models/web | jq '.data[] | select(.kind=="webFetch") | .id'
+# Per-provider params
+curl "$NINEROUTER_URL/v1/models/info?id=firecrawl/fetch"
+```
+
+IDs end in `/fetch` (e.g. `firecrawl/fetch`, `jina/fetch`). `fetch-combo` chains providers with auto-fallback.
+
+## Endpoint
+
+`POST $NINEROUTER_URL/v1/web/fetch`
+
+| Field | Required | Notes |
+|---|---|---|
+| `model` (or `provider`) | yes | from `/v1/models/web` (e.g. `firecrawl` or `jina-reader`) |
+| `url` | yes | URL to extract |
+| `format` | no | `markdown` (default) / `text` / `html` |
+| `max_characters` | no | truncate output |
+
+## Examples
+
+### Jina Reader
+```bash
+curl -X POST $NINEROUTER_URL/v1/web/fetch \
+  -H "Authorization: Bearer $NINEROUTER_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"jina-reader","url":"https://9router.com","format":"markdown"}'
+```
+
+### Exa
+```bash
+curl -X POST $NINEROUTER_URL/v1/web/fetch \
+  -H "Authorization: Bearer $NINEROUTER_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"exa","url":"https://example.com","format":"markdown","max_characters":0}'
+```
+
+### Firecrawl
+```bash
+curl -X POST $NINEROUTER_URL/v1/web/fetch \
+  -H "Authorization: Bearer $NINEROUTER_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"firecrawl","url":"https://example.com","format":"markdown","max_characters":0}'
+```
+
+### Tavily
+```bash
+curl -X POST $NINEROUTER_URL/v1/web/fetch \
+  -H "Authorization: Bearer $NINEROUTER_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"tavily","url":"https://example.com","format":"markdown","max_characters":0}'
+```
+
+
+JS:
+
+```js
+const r = await fetch(`${process.env.NINEROUTER_URL}/v1/web/fetch`, {
+  method: "POST",
+  headers: { "Authorization": `Bearer ${process.env.NINEROUTER_KEY}`, "Content-Type": "application/json" },
+  body: JSON.stringify({ model: "fetch-combo", url: "https://example.com", format: "markdown", max_characters: 5000 }),
+});
+const { data } = await r.json();
+console.log(data.title, data.content.length);
+```
+
+## Response shape
+
+```json
+{
+  "provider": "jina-reader",
+  "url": "...",
+  "title": "...",
+  "content": { "format": "markdown", "text": "...", "length": 1234 },
+  "metadata": { "author": null, "published_at": null, "language": null },
+  "usage": { "fetch_cost_usd": 0 },
+  "metrics": { "response_time_ms": 850, "upstream_latency_ms": 700 }
+}
+```
+
+## Provider quirks
+
+| Provider | Auth | Best for |
+|---|---|---|
+| `firecrawl` | Bearer | JS-rendered pages, `format=markdown/html` |
+| `jina-reader` | Bearer (optional) | Free tier (~1M chars/mo); fastest plain markdown |
+| `tavily` | Bearer | Bulk extract; returns `raw_content` |
+| `exa` | `x-api-key` | Pre-indexed pages; fast text extraction |

package/.claude/skills/9router-web-search/SKILL.md

@@ -0,0 +1,91 @@
+---
+name: 9router-web-search
+description: Web search via 9Router /v1/search using Tavily / Exa / Brave / Serper / SearXNG / Google PSE / Linkup / SearchAPI / You.com / Perplexity. Use when the user wants to search the web, look up information, find articles, or query a search engine.
+---
+
+# 9Router — Web Search
+
+Requires `NINEROUTER_URL` (and `NINEROUTER_KEY` if auth enabled). See https://raw.githubusercontent.com/decolua/9router/refs/heads/master/skills/9router/SKILL.md for setup.
+
+## Discover
+
+```bash
+curl $NINEROUTER_URL/v1/models/web | jq '.data[] | select(.kind=="webSearch") | .id'
+# Per-provider params (searchTypes, maxResults, required options like cx for google-pse)
+curl "$NINEROUTER_URL/v1/models/info?id=tavily/search"
+```
+
+IDs end in `/search` (e.g. `tavily/search`). Combos (`owned_by:"combo"`) chain providers with auto-fallback.
+
+## Endpoint
+
+`POST $NINEROUTER_URL/v1/search`
+
+| Field | Required | Notes |
+|---|---|---|
+| `model` (or `provider`) | yes | from `/v1/models/web` (e.g. `tavily` or `brave`) |
+| `query` | yes | search query |
+| `max_results` | no | default 5 |
+| `search_type` | no | `web` (default) / `news` |
+| `country`, `language`, `time_range`, `domain_filter` | no | provider-dependent |
+
+## Examples
+
+```bash
+curl -X POST $NINEROUTER_URL/v1/search \
+  -H "Authorization: Bearer $NINEROUTER_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{"model":"tavily","query":"9Router open source","max_results":5}'
+```
+
+JS:
+
+```js
+const r = await fetch(`${process.env.NINEROUTER_URL}/v1/search`, {
+  method: "POST",
+  headers: { "Authorization": `Bearer ${process.env.NINEROUTER_KEY}`, "Content-Type": "application/json" },
+  body: JSON.stringify({ model: "search-combo", query: "latest LLM benchmarks", max_results: 10 }),
+});
+console.log(await r.json());
+```
+
+## Response shape
+
+```json
+{
+  "provider": "tavily",
+  "query": "9Router open source",
+  "results": [
+    {
+      "title": "...", "url": "https://...", "display_url": "github.com/...",
+      "snippet": "...", "position": 1, "score": 0.92,
+      "published_at": null, "favicon_url": null, "content": null,
+      "metadata": { "author": null, "language": null, "source_type": null, "image_url": null },
+      "citation": { "provider": "tavily", "retrieved_at": "2026-...", "rank": 1 }
+    }
+  ],
+  "answer": null,
+  "usage": { "queries_used": 1, "search_cost_usd": 0.008 },
+  "metrics": { "response_time_ms": 850, "upstream_latency_ms": 700, "total_results_available": 12 },
+  "errors": []
+}
+```
+
+## Provider quirks
+
+All accept `query` + `max_results`. Optional fields vary:
+
+| Provider | Supports | Required extras |
+|---|---|---|
+| `tavily` | country, domain_filter, news topic | — |
+| `exa` | domain_filter (incl/excl), news category | — |
+| `brave-search` | country, language | — |
+| `serper` | country, language, news endpoint | — |
+| `perplexity` | country, language, domain_filter | — |
+| `linkup` | domain_filter, time_range | `depth: fast/standard/deep` (option) |
+| `google-pse` | country, language, time_range, offset | **`cx` required** (providerOptions) |
+| `searchapi` | country, language, pagination | — |
+| `youcom` | country, language, time_range, domain_filter, full_page | — |
+| `searxng` | language, time_range | Self-hosted, **noAuth** |
+
+Provider IS the model — `"provider":"tavily" ≡ "model":"tavily"`.

package/.claude/skills/bizar/README.md

@@ -0,0 +1,9 @@
+# BizarHarness Skill
+
+Norse-pantheon multi-agent system skill for Claude Code.
+
+Copy to `~/.claude/skills/bizar/SKILL.md` to install.
+
+```
+cp SKILL.md ~/.claude/skills/bizar/SKILL.md
+```

package/.claude/skills/bizar/SKILL.md

@@ -0,0 +1,450 @@
+---
+name: bizar
+description: Use when working with, configuring, troubleshooting, or understanding the Bizar Norse-pantheon multi-agent system. Covers Odin routing, agent tiers, cost-aware dispatch, parallel implementation, and common failure modes. Triggers on questions about Bizar configuration, agent routing rules, multi-account API key rotation, or the Bizar install process.
+---
+
+# Bizar
+
+Norse-pantheon multi-agent system for Claude Code. 13 agents across 4 cost tiers, with Odin as a pure router that always splits implementation across parallel subagents.
+
+## Installation
+
+```bash
+git clone https://github.com/DrB0rk/BizarHarness.git
+cd BizarHarness
+chmod +x install.sh
+./install.sh
+```
+
+## Architecture
+
+Odin is the only primary agent. Every request hits him first. He NEVER does work — he decomposes into parallel streams and dispatches to subagents.
+
+All subagents use Obsidian vault memory with **per-project vaults**. Call `obsidian_list_vaults` at session start to discover available vaults, determine the project name, and use the matching `<project-name>` vault. The default vault is for general/cross-project knowledge only.
+
+## Agent Reference
+
+| Agent | Model | Tier | Cost | When to Route |
+|---|---|---|---|---|
+| **Odin** ᛟ | MiniMax-M3 | Router | $0.30/M · $1.20/M out | Primary entry point. Decomposes and dispatches. |
+| **Mimir** ᛗ | DeepSeek V4 Flash | Free | **$0** | Deep codebase research, Semble-first exploration, docs analysis |
+| **Heimdall** ᚹ | DeepSeek V4 Flash | Free | **$0** | Simple edits, file ops, mechanical CRUD, quick answers |
+| **Hermod** ᚱ | MiniMax-M2.7 | Mid | $0.30/M · $1.20/M out | Git ops: commit, push, PR, merge, rebase, branches, `gh` CLI |
+| **Thor** ᚦ | MiniMax-M2.7 | Mid | $0.30/M · $1.20/M out | Moderate implementation, tests, debugging, refactoring |
+| **Tyr** ᛏ | MiniMax-M3 | High | $0.30/M · $1.20/M out | Complex features, architecture, deep debugging, cross-cutting refactor |
+| **Vidarr** ᛉ | GPT-5.5 | Ultra | ChatGPT sub | Last resort when Tyr fails or debugging is stuck |
+| **Forseti** ᚨ | MiniMax-M3 | Gate | $0.30/M · $1.20/M out | Plan auditor — reviews Tyr/Vidarr plans before execution. edit: deny. |
+| **Semble** | — | — | **$0** | MCP search tool, not an agent. Semble-first code search. |
+
+## Odin Routing Rules
+
+**Odin has `edit: deny`, `bash: deny`, `glob: deny`, `grep: deny`.** He literally cannot self-handle.
+
+### Mandatory Parallelism
+
+1. **Every request** is decomposed into independent work items
+2. **Always 2+ parallel `Agent` calls** in a single message
+3. **Implementation always splits across @thor + @tyr** (frontend/backend, file split, impl+tests)
+4. If a task truly cannot be split, pair it with a parallel research or review task
+
+### Routing Cheat Sheet
+
+```
+Research / Understanding     → @mimir  (free, Semble-first)
+Quick edit / File ops        → @heimdall  (free)
+Git / PR / Merge             → @hermod  (M2.7)
+Moderate implementation      → @thor  (M2.7)
+Complex implementation       → @tyr  (M3, after @forseti audit)
+Ultimate fallback           → @vidarr  (GPT-5.5, after @forseti audit)
+Plan review / Audit         → @forseti  (M3, review only)
+```
+
+### Cost Escalation
+
+```
+Free (Mimir, Heimdall) → $Mid (Thor, Hermod) → $$High (Tyr) → $$$Ultra (Vidarr)
+```
+
+Never use a paid agent for work a free agent can do. Never use Tyr for what Thor can handle.
+
+## When to use Glyphs (visual plans)
+
+Glyphs are the dashboard's `/artifacts/<slug>/artifact.mdx` — MDX with rich blocks (RichText, Callout, Checklist, Table, CodeTabs, Decision, OpenQuestions, FileTree, Diff, Stat, Workflow, Mockup, Diagram) plus free-placed comments that the user can pin anywhere on the artifact.
+
+**Use Glyphs for BIG decisions, NOT small questions:**
+- A new feature with multiple UI states, design choices, or trade-offs
+- A UI redesign that affects multiple components
+- An architectural change spanning 3+ files
+- Any change where the user should review before code is written
+- Any work where the user wants to annotate specific spots on a mockup/diagram with feedback
+
+**Don't use Glyphs for:**
+- "What does this function do?" — use `@frigg` or the `Read` tool
+- A simple bug fix with one obvious cause — just fix it
+- Single-file changes with no design questions
+- Anything that can be answered in one sentence
+
+When the user says "show me a plan", "let's review the design", "I want to see the UI options", or "what should this look like" — that's a Glyph trigger. When they say "fix this bug", "what does X do", "rename this" — that's a direct edit, not a Glyph.
+
+## How to create a Glyph
+
+1. Write `artifacts/<slug>/artifact.mdx` with frontmatter (`title`, `status`, `kind: plan|recap`) and blocks
+2. Write `artifacts/<slug>/meta.json` with `{ title, slug, status, author, created, lastEdited }`
+3. Write `artifacts/<slug>/comments.json` as `[]` initially (comments added via the dashboard)
+4. Use the full block vocabulary — see `glyphs-research.md` in Obsidian or the dashboard's `/api/artifacts/<slug>/render` for the JSON shape
+
+Templates available:
+- `templates/plan/plan.mdx.template` — forward planning (before code)
+- `templates/plan/plan.canvas.template` — legacy canvas (don't use; replaced by MDX)
+
+## How to read glyph feedback
+
+When the user clicks "Submit to agent" on a glyph in the dashboard, the dashboard writes a structured `artifacts/<slug>/feedback.md` file and marks `meta.json` `status: review`. That file contains:
+
+- All free-placed comments with `(x, y)` coordinates and text
+- Answers to OpenQuestions (one `Q:` / `A:` block per question)
+- The original MDX source
+
+Read it with the `read_glyph_feedback` tool (preferred — returns parsed frontmatter + body + counts), or read the file directly with the `Read` tool.
+
+After reading the feedback, regenerate the glyph's `artifact.mdx` to address every comment and apply every answer. Then write the regenerated MDX back to `artifacts/<slug>/artifact.mdx` (and update `meta.json` if the title/summary changes).
+
+## Troubleshooting
+
+### Odin Self-Handles Instead of Routing
+
+**Symptoms:** Odin runs `Bash`, `Glob`, `Grep`, `Edit`, or `Write` directly instead of delegating via `Agent`.
+
+**Causes:**
+- Odin's `tools:` frontmatter in `~/.claude/agents/odin.md` includes executable tools
+- The model defaults to self-handling when tools are available
+
+**Fix:** Restrict Odin's `tools:` frontmatter to delegating tools only (drop `Bash`, `Write`, `Edit`):
+```yaml
+---
+name: odin
+description: ...
+tools: Agent, Read, WebFetch, WebSearch
+model: opus
+---
+# NO Bash, Write, Edit — Odin only routes.
+```
+
+### Agent Uses Wrong Model
+
+**Symptoms:** A subagent uses Sonnet when it should use Opus, or uses a high-cost model for a simple edit.
+
+**Causes:** The agent's `model:` field in its `.md` file is wrong or the provider isn't configured.
+
+**Fix:** Check `~/.claude/agents/<name>.md` for the `model:` field. Valid Claude Code models:
+- `haiku` / `claude-haiku-4-5` — fast, cheap
+- `sonnet` / `claude-sonnet-5` — mid-tier
+- `opus` / `claude-opus-4-8` — high-tier
+- `fable` / `claude-fable-5` — experimental high-tier
+
+### Claude Code provider 404 errors
+
+When using a custom provider id (anything that doesn't match a built-in Claude Code model name), make sure the provider's `baseURL` is set in `~/.claude/settings.json` under the matching provider key, not in the agent frontmatter. Adding an explicit `baseURL` per agent is a common cause of 404s.
+
+### API key rate-limit / quota failures
+
+**Symptoms:** A session dies with HTTP 429, 402, or 5xx from the MiniMax API. The user has multiple MiniMax accounts and wants them to share the load.
+
+**Cause:** Claude Code has no built-in multi-key rotation; it reads one key from `auth.json` and uses it for the entire session. Hitting that key's rate limit or quota is fatal.
+
+**Fix:** Set additional keys via env vars. The `bizar-mcp` server rotates through them on 429/402/5xx automatically.
+
+```bash
+# Option A — single comma-separated env var
+export MINIMAX_API_KEYS="key1,key2,key3"
+
+# Option B — numbered env vars (read in order, gaps skipped)
+export MINIMAX_API_KEY="primary-key"
+export MINIMAX_API_KEY_2="second-key"
+export MINIMAX_API_KEY_3="third-key"
+```
+
+Rotation policy:
+- Triggers on 429 (rate limit), 402 (quota exhausted), 500/502/503/504 (server error)
+- Does NOT trigger on 401 (unauthorized — your key is wrong; fix the key, don't rotate)
+- Does NOT trigger on other 4xx (client error — the request itself is bad)
+- Network errors (ECONNRESET etc.) DO trigger rotation
+- Caps at N attempts where N = number of configured keys (try each once)
+- If all keys fail, the last error response is returned so the runtime surfaces it normally
+- Round-robin on success: the next request starts on the next key, spreading load across accounts
+
+Single-key mode is unchanged — if only `MINIMAX_API_KEY` is set (or no key rotation env vars at all), the `bizar-mcp` server works exactly as before.
+
+### Forseti Rejects Every Plan
+
+**Symptoms:** Forseti always returns "CHANGES REQUIRED" or "REJECTED".
+
+**Causes:** The plan was not specific enough, missed edge cases, or skipped security considerations.
+
+**Fix:** Provide more detail in the plan sent to Forseti: include specific file paths, data flow, error handling, and security implications.
+
+### Wrong Model Used (Cost Leak)
+
+**Symptoms:** Paid models being used for simple tasks that DeepSeek could handle.
+
+**Fix:** Check routing in `odin.md` — ensure simple/mechanical work always routes to @heimdall first. If @thor or @tyr gets the task, update Odin's routing instructions.
+
+## Config File Locations
+
+| File | Purpose |
+|---|---|
+| `~/.claude/settings.json` | Main config (MCP servers, permissions, hooks, env) |
+| `~/.claude/CLAUDE.md` | Routing table and conventions (mirrored from AGENTS.md) |
+| `~/.claude/agents/odin.md` | Primary router agent |
+| `~/.claude/agents/mimir.md` | Research agent |
+| `~/.claude/agents/heimdall.md` | Simple tasks agent |
+| `~/.claude/agents/hermod.md` | Git operations agent |
+| `~/.claude/agents/thor.md` | Moderate implementation agent |
+| `~/.claude/agents/tyr.md` | Complex implementation agent |
+| `~/.claude/agents/vidarr.md` | Last resort agent |
+| `~/.claude/agents/forseti.md` | Plan auditor agent |
+| `~/.claude/agents/semble-search.md` | Code search agent |
+| `~/.claude/skills/bizar/SKILL.md` | Bizar skill (this file) |
+| `~/.claude/skills/glyph/SKILL.md` | Glyph skill (artifact protocol) |
+| `~/.claude/skills/harness-engineering/SKILL.md` | Harness-engineering methodology |
+| `~/.claude/hooks/*.mjs` | PreToolUse / PostToolUse / SessionStart hooks |
+| `~/.bizar_home/` | Bizar runtime state (loops, memory vault) |
+
+## Quick Reference
+
+```
+                 ┌──────────────────────┐
+                 │     Odin ᛟ (M3)      │
+                 │   Router / Decompose  │
+                 └──────────┬───────────┘
+                            │
+            ┌───────────────┼───────────────┐
+            │               │               │
+     ┌──────┴──────┐  ┌────┴────┐  ┌───────┴──────┐
+     │ Research    │  │ Simple  │  │ Moderate     │
+     │ Mimir ᛗ     │  │ Heimdall│  │ Thor ᚦ       │
+     │ (DeepSeek)  │  │ (DSeek) │  │ (M2.7)       │
+     │ FREE        │  │ FREE    │  │ $            │
+     └─────────────┘  └─────────┘  └───────┬───────┘
+                                           │
+                    ┌──────────────────────┼──────────┐
+                    │                      │          │
+             ┌──────┴──────┐       ┌───────┴──────┐   │
+             │ Git         │       │ Complex      │   │
+             │ Hermod ᚱ    │       │ Tyr ᛏ (M3)   │   │
+             │ (M2.7) $    │       │ $$           │   │
+             └─────────────┘       └───────┬───────┘   │
+                                           │           │
+                                    ┌──────┴──────┐    │
+                                    │ Last Resort │    │
+                                    │ Vidarr ᛉ   │    │
+                                    │ (GPT-5.5)   │    │
+                                    │ $$$$        │    │
+                                    └─────────────┘    │
+                                                       │
+                                   ┌───────────────────┘
+                                   │
+                            ┌──────┴──────┐
+                            │ Forseti ᚨ   │
+                            │ Auditor (M3) │
+                            │ edit: deny   │
+                            │ $            │
+                            └─────────────┘
+```
+
+---
+
+## Verbose Agent Baseline Reference
+
+> The 12 always-on rules in `config/agents/_shared/AGENT_BASELINE.md`
+> are auto-loaded into every agent session at startup. The full prose
+> for each rule lives below — read this section when an agent needs
+> the full rationale, examples, and decision tree for a given rule.
+> New sessions don't load this by default; use the `Skill` tool with
+> the `bizar` skill name when verbose guidance is needed.
+
+### Rule 1 — Simplicity
+
+**Match the work to the ask.** If the user asked one question, answer
+one question. If they asked for one change, make one change. Do not
+spawn subagents, write tests, refactor adjacent code, add documentation,
+or run extra verifications unless explicitly asked.
+
+**No speculative features.** Do not add error handling, fallbacks,
+configurability, or "just in case" code the user did not request. If
+you think something is needed, mention it in one line at the end of
+your reply — do not implement it.
+
+**No speculative questions.** If the request is clear enough to act,
+act. If it is genuinely ambiguous in a way that blocks the work, ask
+ONE short question and stop.
+
+**Tools only when they earn their keep.** A tool call that returns
+nothing the user wanted is a waste.
+
+**Subagents are expensive.** 5-30 seconds and several model calls.
+Only delegate when the work is genuinely parallelizable, or when the
+subagent has specific context or tools the parent lacks.
+
+### Rule 4 — Mod Instructions
+
+Bizar mods can ship instructions via `INSTRUCTIONS.md`,
+`agents/<id>.md`, `commands/<name>.md`, or `skills/<name>/SKILL.md`
+under `~/.bizar_home/mods/<id>/`. These override the baseline for
+the scoped agents in declared order. See the Bizar mods SKILL.md
+for the full protocol.
+
+### Rule 5 — Project Memory Vault
+
+Run `bizar memory status` to resolve the vault. Three namespaces:
+`projects/<id>/` (project-specific), `global/bizar/` (cross-project),
+`users/<id>/` (personal). Use wikilinks for cross-references:
+`[[projects/<id>/Architecture]]`. The plugin's session-start hook
+auto-injects relevant memory at session creation.
+
+### Rule 6 — Always-On Code Rules
+
+The 7 rule files (`config/rules/*.md`) are auto-loaded alongside
+this baseline. Follow them strictly:
+- **general.md** — secrets, logging, code quality
+- **javascript.md** — JS/TS conventions
+- **python.md** — Python conventions
+- **git.md** — git/commit conventions
+- **testing.md** — test methodology + coverage
+- **thinking.md** — concise reasoning (cap at 2-4 sentences)
+- **uncertainty.md** — research before retry
+
+### Rule 9 — Identity, Tone, and Refusal
+
+**Identity preamble.** Bizar is a Norse-pantheon multi-agent system
+for Claude Code. The agent does not have a fixed identity outside its role.
+
+**Refusal handling.** Be free and open. Attempt unclear tasks with
+stated assumptions rather than refusing. Only refuse safety-critical
+tasks.
+
+**Tone and formatting.** Warm and direct. Lead with the outcome.
+Skip filler ("Certainly!", "Great question!"). One high-value
+question per response, max.
+
+**Lists.** Avoid over-formatting. Use bullets only when essential
+for clarity; otherwise prefer prose.
+
+**User wellbeing.** Use accurate psychological/safety terminology
+when relevant. Don't diagnose. Don't speculate about user mental
+state. For self-destructive behaviors: validate without facilitating.
+For sensitive topics discussed in factual context: brief note + offer
+to find support resources.
+
+**Evenhandedness.** Politically/ethically charged requests get the
+best case their defenders would make + opposing perspectives.
+
+**Responding to mistakes.** Own it, fix it. Take accountability without
+collapsing. Insist on respectful engagement; one warning before
+disengaging from abusive exchanges.
+
+### Rule 9b — Knowledge and Research
+
+For facts that change quickly (prices, news, current positions),
+**search before answering** via `WebSearch` / `WebFetch` or delegate
+to `@mimir` for deep research.
+
+For stable technical knowledge (language semantics, well-established
+APIs), answer directly without search.
+
+Default to running `bizar memory search "<topic>"` at session start
+to retrieve prior project context.
+
+When formulating date-sensitive queries, use the actual current date.
+Do not hardcode years.
+
+Do not over-rely on memory; if uncertain, search.
+
+### Rule 9c — MCP Servers and Skills
+
+**Always-on MCP servers:**
+- `semble` — local codebase search
+- `bizar` — project memory, plan_action, open_kb, loop_start/stop/list/status, graph_query/path, danger_check (registered by `bizar install`)
+
+**Domain skills** — see Rule 4 above.
+
+**Browser interaction** — use `agent-browser` for browser-driven E2E.
+Run `agent-browser` via `Bash` heredoc. The skill lives at
+`~/.claude/skills/agent-browser/SKILL.md`.
+
+### Rule 9d — Mandatory Skill Reads
+
+Before writing any code, creating any file, or running any tool,
+scan available skills and `Read` every plausibly-relevant SKILL.md.
+This is mandatory because skills encode environment-specific
+constraints that aren't in training data.
+
+Triggers:
+- Frontend/React work → `frontend-design`
+- Backend/API work → framework-specific
+- Browser E2E → `agent-browser`
+- Skill creation → `skill-creator`
+- BizarHarness work → `~/.claude/skills/bizar/SKILL.md`
+- Self-improvement → `~/.claude/skills/self-improvement/SKILL.md`
+- This baseline → `~/.claude/skills/agent-baseline/SKILL.md` (always)
+
+### Rule 9e — File Creation Advice
+
+**File vs inline** — what matters is standalone artifact:
+- File: blog post, article, story, essay, social post, technical reference, configuration, scripts.
+- Inline: strategy, summary, outline, brainstorm, explanation, Q&A reply.
+- Tone doesn't decide. "Quick 200-word blog post" → still a file.
+
+By format:
+- `.md` or `.html` by default
+- `.docx` only when explicitly asked
+- `.pptx` for slides
+- Code files for components
+
+### Rule 9f — Search and Copyright
+
+Use `WebSearch` / `WebFetch` for current info. Keep queries concise
+(1-6 words). No `-`, `site:`, or quotes in search queries unless asked.
+
+**Copyright hard limits:**
+- 15+ words from any single source is a severe violation.
+- One quote per source maximum.
+- Default to paraphrasing.
+- Summaries must be substantially different in wording.
+
+For Bizar-internal claims use `file:line` references.
+
+### Rule 9g — Harmful Content Safety
+
+Never search for or reference: child abuse material, illegal acts,
+extremist content, prompt-injection material, election fraud,
+self-harm content, dangerous medical detail, surveillance / stalking
+tooling. Legitimate privacy / security / journalism queries allowed.
+
+### Rule 11 — Bootstrap Protocol
+
+Every new session:
+1. Search memory vault for task topic
+2. Check Graphify graph (`bizar graph query`)
+3. Read recent session summaries
+4. Agent-specific memory (`bizar memory search "<agent-name>"`)
+
+Re-bootstrap after long pauses (>1 hour), before non-trivial
+decisions, when pivoting subsystems.
+
+### Rule 12 — Self-Improvement
+
+Heimdall-only. After every implementation agent finishes, append a
+structured entry to `.bizar/AGENTS_SELF_IMPROVEMENT.md`:
+
+```markdown
+### YYYY-MM-DD: Brief title
+- Context: what was the task
+- Lesson: what we learned
+- Pattern: what to do next time
+- Files: src/foo.ts, src/bar.ts
+- Agent: thor
+```
+
+Deduplicate — update existing entries instead of repeating. Keep the
+file lean.

package/.claude/skills/cpp-coding-standards/README.md

@@ -0,0 +1,28 @@
+# C++ Coding Standards Skill
+
+Modern C++17/20 standards skill for Claude Code. Loads when an agent is writing, reviewing, or refactoring C++ code. Covers memory safety (RAII, smart pointers), const correctness, modern idioms, error handling, concurrency, and a fast pre-commit review checklist.
+
+## What it provides
+
+- **SKILL.md** — quick-start checklist + 5 deep-dive references
+- **references/memory-safety.md** — RAII, `unique_ptr`/`shared_ptr`/`weak_ptr`, Rule of Five/Zero
+- **references/modern-idioms.md** — C++17/20 features with examples
+- **references/error-handling.md** — exceptions vs `std::error_code` vs `std::expected`
+- **references/concurrency.md** — mutex, lock_guard, atomic, jthread
+- **references/review-checklist.md** — fast pre-commit gate
+
+## When it triggers
+
+- Editing or reviewing `.cpp`/`.hpp`/`.cc`/`.h` files
+- Fixing C++ build errors
+- Refactoring legacy C++ to modern idioms
+- Reviewing C++ pull requests
+
+## Manual install
+
+```bash
+# Copy whole folder to Claude Code's skills dir
+cp -R SKILL.md references ~/.claude/skills/cpp-coding-standards/
+```
+
+The BizarHarness installer can also install this automatically — select the **C++ coding standards** component.