@polderlabs/bizar 8.0.0 → 9.0.0

package/.claude/worktrees/kanban-overhaul/PROGRESS.md

@@ -0,0 +1,1406 @@
+# PROGRESS.md — Cross-Session State
+
+> This file is the **single source of truth** for what the system is doing
+> right now. Updated at every clock-in AND clock-out. New sessions start
+> by reading this file before touching any code.
+
+## In Progress — Tasks Page → Cline-Style Kanban Overhaul
+
+User-requested Tasks page overhaul (F-0XX). The v8 kanban shipped in Sprint S5
+was a thin shim over `GET /api/tasks`. This overhaul brings it to parity with
+[Cline's local multi-agent kanban](https://github.com/cline/kanban) — per-card
+lifecycle, live status, multi-select, inline creation, full edit dialog — using
+only the project's custom-built components (no shadcn).
+
+**Branch:** `worktree-kanban-overhaul` (worktree at `.claude/worktrees/kanban-overhaul`).
+
+**New components shipped** (`bizar-dash/src/web/v8/ui/kanban/`):
+- `KanbanProgress.tsx` — compact progress bar (inline + block layouts) for cards and detail panels.
+- `KanbanCardBadges.tsx` — chip row for tags / assignee / recurring / subtask / dependency counts.
+- `KanbanToolbar.tsx` — top-of-board toolbar. Three modes: normal / selecting (bulk) / filtered. Swaps to bulk actions (move / archive / delete) when ≥1 card is selected.
+- `KanbanEmptyColumn.tsx` — dashed drop target shown when a column has 0 cards.
+- `KanbanDetailDialog.tsx` — full-edit modal (title, description, status, priority, assignee, branch, due date, tags, subtasks, dependencies, activity timeline). `PUT /api/tasks/:id` for save; `POST /api/tasks/:id/start` for queued tasks; `POST /api/tasks/:id/timer` for timer toggle; `POST /api/tasks/:id/archive`; `DELETE /api/tasks/:id`.
+- `useKanbanSelection.ts` — `Set<string>` of selected card ids with `toggle` / `add` / `remove` / `set` / `clear` helpers + Esc-to-clear keyboard shortcut (skips text inputs).
+
+**Extended components:**
+- `KanbanCard.tsx` — added selection checkbox, progress rendering, badge row, metadata (assignee, recurring, subtasks, deps, tags), onClick handler to open detail.
+- `KanbanBoard.tsx` — added `useKanbanBoard()` context for descendants to read selection state.
+- `KanbanContextMenu.tsx` — added `extraItems` prop for card-specific actions (e.g. "Start agent" on queued cards).
+
+**Rewritten:**
+- `TasksView.tsx` — full Cline-style surface: 6 columns (Backlog / Queued / In progress / In review / Done / Archived), WIP limit on In progress, search + priority filter chips, multi-select toolbar with bulk move / archive / delete via `POST /api/tasks/bulk`, full right-click context menu (open / duplicate / copy link / move left / move right / archive / delete / start agent for queued), keyboard shortcuts (`n` for new task, `Esc` to clear selection), live WS sync (`tasks:change` / `tasks:delete` / `task:progress`), new-task dialog.
+- `TasksKanbanPlaceholder.tsx` — DELETED (TasksView now does the real work).
+- `data/types.ts` — extended `Task` interface with `tags`, `subtasks`, `dependencies`, `recurring`, `activity`, `_timerStart`. Added `'backlog'` to status union.
+
+**Bug fixes baked into the rewrite:**
+1. `TasksView` was reading `tasks.data?.tasks` (wrapped shape) while `GET /api/tasks` returns a bare array (`routes/tasks.mjs:83`). Production cards never hydrated from the initial fetch — only WS events populated them. Now reads `Task[]` directly.
+2. `TasksView` had render-phase `setState` (line 91-93) triggering React warnings + undefined behavior on re-render. Moved data sync into `useEffect`.
+
+**Wired:**
+- `App.tsx` — replaced hardcoded sidebar tasks count (47) with live count from `/api/snapshot` (`active + queued + blocked + done`).
+
+**Tests:**
+- `__tests__/kanban.test.tsx` — extended with new components (Progress, CardBadges, Toolbar, EmptyColumn, useKanbanSelection, Card selection).
+- `__tests__/views.test.tsx` — fixed mock to return bare array (was wrapped). Updated column title lookups to use `getByLabelText` (the column header is aria-labeled, filter chips collide on text).
+- `__tests__/tasks-detail.test.tsx` — NEW. End-to-end coverage of the detail dialog flow (open, save via PUT, start agent).
+- `__tests__/tasks-bulk.test.tsx` — NEW. Selection toggle, bulk archive via POST /api/tasks/bulk, Esc clears selection.
+- `__tests__/App.test.tsx` — updated column title lookups for the same reason.
+
+**Verification:**
+- `make check` → 0 TS errors.
+- `npm run test:web` → 264/264 pass across 34 test files.
+- `make test` → 12 pre-existing SDK build-dist failures (unrelated; baseline on master).
+
+**Skipped:**
+- Card-linking / dependency arrows (Cline feature). Backend has the data, but rendering SVG arrows is a separate sprint. Surface the deps as chips in the detail dialog instead.
+- Per-card live agent terminal. Would require a new WS subscription per open dialog. Defer to a follow-up sprint.
+- Per-project task scoping in the UI. Backend supports `?projectId=`; we let the global active project handle it for now (matches the rest of the dashboard).
+
+## In Progress — F-043 v8 Dashboard Foundation (Sprint S1)
+
+User-requested full dashboard rewrite. v7 dashboard (`bizar-dash/src/web/{ui,views,components,hooks,locales,mobile,styles,App.tsx,main.tsx}`) is preserved untouched while the v8 tree builds in parallel at `bizar-dash/src/web/v8/`. The rewrite will replace v7 wholesale once Sprint S9 verification ships.
+
+**Design contracts** (committed in this branch, worktree-v8-dashboard-rewrite-plan):
+- `bizar-dash/DESIGN.md` — 14-section design system following Google's design.md standard (principles, tokens, typography, layout, components, interaction patterns, banned tropes).
+- `bizar-dash/PLAN.md` — 17-section implementation plan (17 ADRs, 10-sprint roadmap F-042..F-051, ~28 working days).
+- `bizar-dash/GLYPH.md` — ASCII visual rendering of the v8 design (B mark, shell layout, context menu, command palette, component tree, route tree, token system, sprint roadmap).
+
+**Sprint S1 (Foundation) shipped in this commit:**
+- `bizar-dash/src/web/v8/ui/styles/{tokens,reset,globals}.css` — full OKLch token system (light + dark + system) per DESIGN.md §3.
+- `bizar-dash/src/web/v8/ui/primitives/{Box,Stack,Inline,Cluster,Grid,Center,Separator,ScrollArea,Portal,VisuallyHidden}.tsx` — 10 layout & a11y primitives.
+- `bizar-dash/src/web/v8/ui/utils/cx.ts` — `clsx + tailwind-merge` wrapper.
+- `bizar-dash/src/web/v8/ui/theme/{ThemeProvider,DensityProvider,ThemeToggle,useTheme,useDensity}.{tsx,ts}` — light/dark/system theme + comfortable/compact density with localStorage persistence.
+- `bizar-dash/src/web/v8/shell/{AppShell,Topbar,Sidebar,StatusBar}.tsx` — the v8 layout skeleton (topbar 56px + collapsible 260px sidebar + main content area).
+- `bizar-dash/src/web/v8/{App,main}.tsx` — entry that wires ThemeProvider + DensityProvider + AppShell.
+- `bizar-dash/src/web/v8/views/Tasks/{TasksKanbanPlaceholder,CommandPalettePlaceholder}.tsx` — S1 stand-ins proving the shell renders.
+- `bizar-dash/src/web/v8/__tests__/{cx,theme.test.tsx}` — 14 vitest cases (cx semantics, ThemeProvider/DensityProvider cycles, localStorage persistence, data-attribute writes, hook-without-provider throws).
+
+**Branch:** `worktree-v8-dashboard-rewrite-plan` (worktree at `.claude/worktrees/v8-dashboard-rewrite-plan`).
+
+**Dependencies added** to `package.json`: `@dnd-kit/*`, `@radix-ui/react-*` (12 primitives), `@tanstack/react-{query,router,table,virtual}`, `clsx`, `cmdk`, `date-fns`, `react-hook-form`, `recharts`, `sonner`, `tailwind-merge`, `zustand`.
+
+**Verification:**
+- `npm run typecheck` → 0 TS errors.
+- `npm test` → 412/412 pass (18 vitest files / 294 vitest cases + 118 node --test cases). The 4 v5.3.0-era `tests/a11y/forms.test.tsx` failures noted in v7.0.0 PROGRESS are still pre-existing on master.
+- `npx vite build` → clean (existing v7 main bundle unaffected; v8 entry is wired in Sprint S0).
+
+**Next sprint (S2 — Controls + Feedback):** Button + Input + Select + Modal + Toast + Tooltip. The 36 components in §8 of DESIGN.md.
+
+**Sprint S2 (Controls + Feedback) shipped in this commit:**
+
+22 components across the controls + feedback layers, all token-driven and built on Radix where a11y primitives matter.
+
+Controls (`bizar-dash/src/web/v8/ui/controls/`):
+- `Button.tsx` — variants (primary/secondary/ghost/danger/outline) × sizes (sm/md/lg/icon) + loading state + `asChild` via Radix Slot.
+- `IconButton.tsx` — square icon-only button; required `aria-label`; mirrors Button variants; `active` state.
+- `ButtonGroup.tsx` — attached segmented control (single bordered container).
+- `Input.tsx` — variants (default/filled/flushed) × sizes; leftAddon/rightAddon slots; password reveal toggle.
+- `Textarea.tsx` — autoResize option + min/max rows.
+- `Checkbox.tsx` — Radix-based with indeterminate state (Minus icon).
+- `Switch.tsx` — Radix-based, animated thumb.
+- `Toggle.tsx` + `ToggleGroup.tsx` — single + segmented group (`single` | `multiple`).
+- `RadioGroup.tsx` — Radix with optional label per item.
+- `Select.tsx` — full Radix Select surface (Trigger/Content/Item/Group/Label/Separator/ScrollUpArrow/ScrollDownArrow).
+- `Slider.tsx` — Radix single + range with track/range/thumb styling.
+- `Field.tsx` — id/label/hint/error wrapper with aria-describedby wiring.
+- `Form.tsx` — form wrapper with Submit helper.
+
+Feedback (`bizar-dash/src/web/v8/ui/feedback/`):
+- `Dialog.tsx` — Radix Dialog + AlertDialog variants; sizes sm/md/lg/full; focus trap + escape; overlay + content fade-in animations.
+- `Tooltip.tsx` — Radix Tooltip + TooltipProvider; `shortcut` prop renders kbd inside the bubble.
+- `Popover.tsx` — Radix Popover with Trigger/Content/Anchor/Close.
+- `Toast.tsx` — Sonner wrapper with `Toaster` + `toast` (success/error/info/warning/message/dismiss).
+- `Alert.tsx` — tones info/success/warning/danger; title + description + action slot; overridable icon.
+- `Banner.tsx` — top-of-page announcement with tone + action slot.
+- `Skeleton.tsx` + `SkeletonText` — pulse animation via `v8-skeleton` class (pulse keyframe in globals.css).
+- `Spinner.tsx` — discouraged per DESIGN.md §10; kept for non-skeleton contexts (command palette loading).
+- `EmptyState.tsx` — icon + title + description + action.
+- `DropdownMenu.tsx` — full Radix DropdownMenu (Trigger/Content/Item/CheckboxItem/RadioGroup/Sub/SubTrigger/SubContent/Label/Separator/Group/Portal) with shortcut + danger styling.
+- `ContextMenu.tsx` — full Radix ContextMenu; Rule #1 of the v8 dashboard — every interactive surface right-clicks.
+- `Sheet.tsx` — side-anchored panel (top/right/bottom/left) with `data-side` attribute driving per-direction slide-in animations.
+- `Drawer.tsx` — semantic alias for right-side Sheet (task/agent detail panels).
+
+Shared:
+- `bizar-dash/src/web/v8/ui/styles/globals.css` — added 8 keyframes (`v8-skeleton-pulse`, `v8-spin`, `v8-dialog-overlay-in`, `v8-dialog-content-in`, `v8-sheet-in-{right,left,top,bottom}`, `v8-menu-in`, `v8-tooltip-in`) and their opt-in class bindings (Radix `data-state` highlight + `data-side` slide).
+- `bizar-dash/src/web/v8/ui/index.ts` — barrel updated to export all 22 components + their types.
+- `bizar-dash/src/web/v8/__tests__/controls.test.tsx` — 16 vitest cases (Button, IconButton, Input, Checkbox, Switch, Toggle, Slider).
+- `bizar-dash/src/web/v8/__tests__/feedback.test.tsx` — 16 vitest cases (Alert, Banner, Dialog, Skeleton, EmptyState, DropdownMenu, ContextMenu, Sheet, Tooltip).
+
+**Verification:**
+- `npm run typecheck` → 0 TS errors.
+- `npx vitest run src/web/v8` → 46/46 pass (4 test files: cx, theme, controls, feedback).
+
+**Next sprint (S3 — Data display + Overview):** Card, StatTile, StatGrid, Badge, Chip, Avatar, AvatarStack, Table (TanStack), Sparkline, BarList, Timeline, Accordion, ViewHeader.
+
+**Sprint S3 (Data display + View primitives) shipped in this commit:**
+
+12 components in `bizar-dash/src/web/v8/ui/data/`:
+- `Card.tsx` — default/elevated/ghost/outlined variants + flush + interactive states; `CardHeader` / `CardBody` / `CardFooter` slots.
+- `Badge.tsx` — neutral/info/success/warning/danger/accent tones; sm/md sizes; optional leading dot.
+- `Chip.tsx` — filter pills with optional `selected` state and `onRemove` handler.
+- `Avatar.tsx` — deterministic initials fallback + status dot (online/offline/busy/away); xs/sm/md/lg/xl sizes; `AvatarStack` for overlapping groups.
+- `StatTile.tsx` — KPI tile with label/value/delta/trend/hint/icon/sparkline slots + `loading` state; `StatGrid` auto-fits 1..4 columns.
+- `Sparkline.tsx` — pure-SVG line/area chart with optional goal line; no chart library dep.
+- `BarList.tsx` — horizontal bar distribution (tasks per agent, memory by category, etc.).
+- `Timeline.tsx` — vertical event feed with tone-coloured dots + meta on the right.
+- `Accordion.tsx` — Radix-based collapsible sections (single/multiple) with chevron rotation.
+- `ViewHeader.tsx` — page-level header pattern (breadcrumb + title + description + primary action + secondary actions + meta row).
+- `Table.tsx` — semantic Table/Head/Body/Row/Header/Cell with density prop, selected row, striped rows.
+- `Kbd.tsx` — keyboard key chip for tooltips, shortcuts, settings.
+
+Dependencies added: `@radix-ui/react-accordion`.
+
+Shared:
+- `bizar-dash/src/web/v8/ui/index.ts` — barrel updated with all 12 data components + types.
+- `bizar-dash/src/web/v8/__tests__/data.test.tsx` — 23 vitest cases (Card composition, Badge tones, Chip remove + selected, Avatar initials fallback + status, StatTile trend + loading, StatGrid layout, Sparkline SVG paths, BarList items, Timeline ordering, Accordion expand, ViewHeader breadcrumb, Table rows + selected, Kbd render).
+
+**Verification:**
+- `npm run typecheck` → 0 TS errors.
+- `npx vitest run src/web/v8` → 69/69 pass (5 test files: cx, theme, controls, feedback, data).
+
+**Next sprint (S4 — Navigation + Command Palette):** Tabs, Breadcrumb, NavLink, Pagination, CommandPalette (cmdk), NavMenu, Section.
+
+**Sprint S4 (Navigation + Command Palette) shipped in this commit:**
+
+4 components in `bizar-dash/src/web/v8/ui/navigation/`:
+- `Tabs.tsx` — Radix-based content switcher with `underline` and `pill` variants; left/right arrow-key navigation.
+- `NavLink.tsx` — semantic navigation link with active-state styling via `aria-current="page"`. Optional leading icon + active accent bar (sidebar pattern).
+- `Pagination.tsx` — numbered pages with first/prev/next/last controls and ellipsis for long ranges. Configurable sibling count.
+- `CommandPalette.tsx` — global ⌘K palette built on `cmdk`. Exposes `CommandPalette`, `CommandPaletteGroup`, `CommandPaletteItem`, `CommandPaletteSeparator`, and the `useCommandPaletteHotkey` hook for keyboard wiring. Designed to render inside a Dialog overlay.
+
+Dependencies added: `@radix-ui/react-tabs`.
+
+Shared:
+- `bizar-dash/src/web/v8/ui/index.ts` — barrel updated with all 4 navigation components + types.
+- `bizar-dash/src/web/v8/__tests__/navigation.test.tsx` — 9 vitest cases (Tabs content switch + active state, NavLink aria-current, Pagination page button + edges + ellipsis, CommandPalette filter + onSelect). Includes a `scrollIntoView` stub for jsdom (cmdk requires it for keyboard nav).
+
+**Verification:**
+- `npm run typecheck` → 0 TS errors.
+- `npx vitest run src/web/v8` → 78/78 pass (6 test files: cx, theme, controls, feedback, data, navigation).
+
+**Next sprint (S5 — Kanban centerpiece):** KanbanBoard, KanbanColumn, KanbanCard, KanbanCardCompact, KanbanDetail, KanbanQuickAdd, KanbanContextMenu. Right-click every card (DESIGN.md Rule #1).
+
+**Sprint S5 (Kanban centerpiece) shipped in this commit:**
+
+5 components in `bizar-dash/src/web/v8/ui/kanban/` — the heart of the v8 dashboard:
+- `KanbanCard.tsx` — the primary surface. Variants: `default` (full meta), `compact` (title + priority dot), `detailed` (title + description preview). Priority dot (`low`/`medium`/`high`/`urgent`) and accent stripe on the leading edge. Meta row shows due date, comment count, attachment count, branch name. Includes `useKanbanCardSortable` hook that wraps `@dnd-kit/sortable`'s `useSortable` for drag-and-drop wiring.
+- `KanbanColumn.tsx` — vertical status column. Header with accent dot, title, count (with optional WIP limit and overflow warning), overflow menu, and quick-add button. Body uses `@dnd-kit/core`'s `useDroppable` so it accepts card drops; visual hover state on drop.
+- `KanbanBoard.tsx` — horizontal-scrolling board hosting the columns. Owns the `@dnd-kit/core` `DndContext` with Pointer + Keyboard sensors and `closestCorners` collision detection. Reports `onCardMove(cardId, fromColumnId, toColumnId)` on drop.
+- `KanbanQuickAdd.tsx` — inline card composer at column bottom. Idle → click → textarea; Enter submits, Escape cancels. Persists across multiple adds in one session.
+- `KanbanContextMenu.tsx` — the right-click menu every card gets (DESIGN.md Rule #1). Standard items: Open detail, Rename (F2), Duplicate, Copy link, Move ←/→ (with column-edge disables), Assign…, Archive, Delete (⌫). Built on the existing `ContextMenu` primitive.
+
+Dependencies added: `@dnd-kit/core`, `@dnd-kit/sortable`, `@dnd-kit/utilities`.
+
+Shared:
+- `bizar-dash/src/web/v8/ui/index.ts` — barrel updated with all 5 kanban components + types.
+- `bizar-dash/src/web/v8/__tests__/kanban.test.tsx` — 16 vitest cases (Card priority dot + variant + metadata + a11y, Column count + WIP + add/overflow buttons, Board region landmark, QuickAdd idle → edit transition + Enter submit + empty reject + Escape cancel, ContextMenu render + open + disabled moves + onDelete wiring).
+
+**Verification:**
+- `npm run typecheck` → 0 TS errors.
+- `npx vitest run src/web/v8` → 94/94 pass (7 test files: cx, theme, controls, feedback, data, navigation, kanban).
+
+**Next sprint (S6 — Goals + Agents):** GoalCard, GoalProgress, GoalDetail, AgentCard, AgentRoster, AgentDetail, AgentActivity. The two "long horizon" surfaces (goals) and the agent orchestration surface.
+
+**Sprint S6 (Goals + Agents) shipped in this commit:**
+
+4 components across the long-horizon-goals and agent-orchestration surfaces, all token-driven and built on the existing v8 primitives.
+
+Goals (`bizar-dash/src/web/v8/ui/goals/`):
+- `GoalCard.tsx` — long-horizon goal tile (the Goals page per PLAN.md). NOT a kanban card. Title, "why" description (2-line clamp), status badge (`on-track` / `at-risk` / `off-track` / `done`), progress bar (tone-coloured by status), % complete + key results counter, due + owner row, badges slot, hover state.
+- `KeyResult.tsx` — measurable sub-goal inside a Goal. Toggle button on the leading edge (Circle / Minus / CheckCircle2 icons), title (strikethrough when done), progress bar (hidden for not-started), optional metric caption ("47 / 100") + assignee.
+
+Agents (`bizar-dash/src/web/v8/ui/agents/`):
+- `AgentCard.tsx` — agent tile for the Agents roster. Avatar + name + role + status badge, current-task callout, last-activity + tasksToday row, optional TPM sparkline, badges row. Uses the existing `Sparkline` and `Avatar` data components.
+- `AgentActivity.tsx` — per-agent activity feed (run started, tool called, message received). Token-tinted icon chip, title, optional description + meta (timestamp). `<ol>` semantic ordering.
+
+Shared:
+- `bizar-dash/src/web/v8/ui/data/ProgressBar.tsx` — the linear progress indicator used by both GoalCard + KeyResult (was used by prior surfaces already; now committed alongside the first consumers).
+- `bizar-dash/src/web/v8/ui/index.ts` — barrel updated with all 4 new components + types.
+- `bizar-dash/src/web/v8/__tests__/{goals,agents}.test.tsx` — 16 vitest cases (GoalCard title/description/status/progress/key-results/due/owner/onOpen, KeyResult toggle/icon-label/not-started-hides-bar/metric+assignee, AgentCard name/role/badge/current-task/last-activity/onOpen/error-label, AgentActivity all-items/`<ol>` landmark/optional-fields).
+
+**Verification:**
+- `npm run typecheck` → 0 TS errors.
+- `cd bizar-dash && npx vitest run src/web/v8/__tests__/goals.test.tsx src/web/v8/__tests__/agents.test.tsx` → 16/16 pass.
+- Full dash test pass: `npm run test:web` → 97 files pass, 1 file pre-existing failure (`tests/a11y/forms.test.tsx`, 4 cases — predates v8 work, unrelated to this commit per stash check).
+
+**Sprint S7 (Activity + Memory + Libraries) shipped in this commit:**
+
+4 components across the "knowledge surfaces" — what the harness has learned, what it's running, and how those move.
+
+Activity (`bizar-dash/src/web/v8/ui/activity/`):
+- `ActivityFeed.tsx` — vertical feed (the home view). `<ol>` semantic ordering. Each item: token-tinted icon chip + title (optional description) + tabular-numeric meta (relative time). Renders empty node when items is empty.
+
+Memory (`bizar-dash/src/web/v8/ui/memory/`):
+- `MemoryVault.tsx` — list of memos with Project/Global scope badge, content (3-line clamp), tags row, relative updatedAt. Click handler opens the memo detail.
+
+Libraries (`bizar-dash/src/web/v8/ui/libraries/`):
+- `LibraryItem.tsx` — generic inventory card used by Skill / MCP / Hook libraries. Name + slug (`<code>`), status badge (enabled/disabled/error), tone-tinted Power icon, description (2-line clamp), meta line, actions slot, hover state.
+- `LibraryGrid.tsx` — auto-fit responsive grid (CSS grid `repeat(auto-fill, minmax(min(100%, 320px), 1fr))`).
+
+Shared:
+- `bizar-dash/src/web/v8/ui/index.ts` — barrel updated with all 4 new components + types.
+- `bizar-dash/src/web/v8/__tests__/{activity,memory,libraries}.test.tsx` — 16 vitest cases.
+
+**Verification:**
+- `npm run typecheck` → 0 TS errors.
+- `cd bizar-dash && npx vitest run src/web/v8/__tests__/activity.test.tsx src/web/v8/__tests__/memory.test.tsx src/web/v8/__tests__/libraries.test.tsx` → 16/16 pass.
+
+**Sprint S8 (Settings primitives) shipped in this commit:**
+
+3 primitives that compose the 16 Settings sections per PLAN.md §Settings.
+
+Settings (`bizar-dash/src/web/v8/ui/settings/`):
+- `SettingsSection.tsx` — titled section shell with optional icon, description, and headerActions slot (e.g. "Restore defaults" button). `aria-labelledby` wires the title for screen-reader navigation.
+- `SettingsRow.tsx` — labelled option row (label + description on left, control on right). `disabled` prop applies `aria-disabled` + `data-disabled` + 0.5 opacity. The control slot hosts any interactive (Switch, Select, Slider, custom button).
+- `SettingsNav.tsx` — left rail inside the Settings page. Lists every section as a button, highlights the active one with `aria-current`, invokes `onSelect(id)` on click. No router needed; caller wires the scroll target.
+
+Shared:
+- `bizar-dash/src/web/v8/ui/index.ts` — barrel updated with the 3 primitives + types.
+- `bizar-dash/src/web/v8/__tests__/settings.test.tsx` — 8 vitest cases (Section title/description/body/aria-labelledby/icon+headerActions, Row label/control/disabled-aria, Nav items/aria-current/onSelect).
+
+**Verification:**
+- `npm run typecheck` → 0 TS errors.
+- `cd bizar-dash && npx vitest run src/web/v8/__tests__/settings.test.tsx` → 8/8 pass.
+
+**Sprint S9 (Polish + view wiring) shipped in this commit:**
+
+The complete v8 dashboard now renders every view end-to-end. The component library (50+ components, 142 tests) is composed into 9 view files plus a Router and an app-level CommandPalette.
+
+Views (`bizar-dash/src/web/v8/views/`):
+- `Overview/OverviewView.tsx` — landing page. 4 stat tiles (tasks/goals/agents/tokens) + Recent activity feed + Needs-attention cards.
+- `Tasks/TasksView.tsx` — the Kanban centerpiece with 5 columns, 5 sample cards, full dnd-kit drop wiring, real state-managed column moves.
+- `Goals/GoalsView.tsx` — 3 goal cards (on-track / at-risk / done) + Key Result list.
+- `Agents/AgentsView.tsx` — 6-card roster (busy / idle / error / paused agents) + featured activity feed.
+- `Activity/ActivityView.tsx` — full event history as a vertical feed.
+- `Memory/MemoryView.tsx` — 4 memos scoped Project vs Global.
+- `Libraries/LibrariesView.tsx` — generic `LibraryGrid` + `LibraryItem` surface used by Skills / MCPs / Hooks.
+- `Settings/SettingsView.tsx` — all 16 PLAN.md sections. Sticky nav rail (SettingsNav) on the left, sections on the right. Theme + Density live-wired to ThemeProvider / DensityProvider.
+- `CommandPalette/AppCommandPalette.tsx` — ⌘K palette wired with the v8 navigation map. "Toggle theme" + "Toggle density" actions call into the live providers.
+
+Router:
+- `Router.tsx` — flat state-based `useViewForId(id)` that resolves to the correct view. Sample data for the 3 library kinds lives here so the Library surface stays generic.
+
+App:
+- `App.tsx` — replaced the placeholder. Wires the providers, the sidebar nav (4 sections, 10 items), the topbar palette button, the router, and the live `useCommandPaletteHotkey` (⌘K / Ctrl-K).
+
+Shared:
+- `bizar-dash/src/web/v8/__tests__/views.test.tsx` — 9 vitest cases (one per view: header rendered + a content signal). Providers wrapped explicitly.
+
+**Verification:**
+- `npm run typecheck` → 0 TS errors across the entire v8 tree.
+- `cd bizar-dash && npx vitest run src/web/v8/__tests__/views.test.tsx` → 9/9 pass.
+- `npm run test:web` → 738/742 pass (102 files). The 4 failures remain the pre-existing `tests/a11y/forms.test.tsx` regressions, unrelated to v8 work (confirmed via prior stash test).
+- `npm run build:dash` → clean (2.22s; the pre-existing main-bundle warning is from the v7 tree, not v8).
+
+**Next sprint:** Sprint S10 — TanStack Router swap (currently state-based), WebSocket layer for live agent/activity updates, and split the giant main bundle. Also wire real backend data into the Library items and Settings controls. The dashboard foundation is now feature-complete enough to start replacing v7 wholesale — S10 begins the cutover.
+
+## In Progress — F-041 Dashboard Consistency + Mobile UI Pass
+
+User-requested follow-up to F-040 (v7.0.0). Three problems:
+
+1. **Drift in the design-system migration.** Overview/Tasks/Agents were
+   migrated to the `ui/` design system but the migration is inconsistent —
+   mix of legacy `<Button>` (components/) and new `UiButton` (ui/controls),
+   raw inline `style={{...}}` with `var(--token)` strings, and a left-edge
+   priority stripe in `tasks-redesign.css` (DESIGN.md §14 explicitly bans).
+2. **Chat.tsx never migrated.** Still on legacy `chat-shell` /
+   `chat-thread-section` / `chat-page` classes plus raw HTML forms in the
+   three modals (delete-msg, rename-session, delete-session). Largest gap.
+3. **Mobile shell predates the redesign.** `MobileBottomNav` has hardcoded
+   `mobile-bottom-nav` classes, no `safe-area-inset` handling, no thumb-zone
+   sizing, no token binding. The 4 high-traffic mobile views (Overview/Chat/
+   Tasks/Settings) don't consume `ui/` primitives.
+
+**Scope (locked from user):** 5 high-traffic desktop views (Overview,
+Chat, Tasks, Agents, Settings) + matching mobile views (MobileOverview,
+MobileChat, MobileTasks, MobileSettings) + mobile shell (MobileApp,
+MobileTopbar, MobileBottomNav) + MobileBottomSheet + MobileListItem. Long-
+tail desktop views and the 16 mobile secondary views stay as-is for
+follow-up sprints.
+
+**Branch:** `worktree-consistency-mobile-ui-pass` (worktree at
+`.claude/worktrees/consistency-mobile-ui-pass`).
+
+**Plan file:** `/home/drb0rk/.claude/plans/replicated-foraging-bubble.md`
+(approved).
+
+**Stage plan:**
+1. Foundations — Textarea + ViewHeader primitives, `--default-agent-swatch`
+   and `--safe-*` tokens
+2. Desktop consistency — migrate Chat.tsx + polish the 3 already-migrated
+   views (Overview/Tasks/Agents) + audit 3 F-040-era Settings sections
+3. Mobile consistency — safe-area-inset everywhere, ≥44px touch targets,
+   thumb-zone CTAs, ui/ primitive migration
+4. Verification — `make check`, `make test`, `make e2e`, `make clean-check`
+5. Documentation — DESIGN.md §3.9 (agent swatch), §11 (mobile icon sizing),
+   §13 (mobile-native affordances)
+
+**New design system at `bizar-dash/src/web/ui/`:**
+- `styles/` — reset.css, tokens.css, globals.css (CSS custom props)
+- `theme/` — ThemeProvider + useTheme (light/dark/system)
+- `utils/` — cx (className combiner)
+- `primitives/`, `controls/`, `data/`, `feedback/`, `layout/`,
+  `navigation/` — modular component library (Wave 2)
+- `index.ts` — barrel export
+
+**Showcase views (Wave 3) being migrated in this session:**
+1. Overview (hero — stat tile row + chart grid)
+2. Tasks (kanban)
+3. Agents (roster)
+
+**Migration strategy for remaining 14 views:** Old components continue
+working; views migrate incrementally to `ui/` components per the
+migration doc.
+
+**Forseti review (Wave 4) — 7 findings, all addressed:**
+- HIGH Tooltip positioning: wrapping class now lives on an outer span
+  that owns the containing block (reverted a CSS-only fix that didn't
+  actually establish a positioning ancestor).
+- MEDIUM Tabs aria-controls removed (Tabs owns only the strip).
+- LOW Tasks: synthetic `mousedown` dispatch now carries a comment
+  explaining the outside-click listener target.
+- LOW Overview: dropped unused `formatClock(_idx, ts)` + `originalIdx`
+  plumbing from ActivityRow.
+- LOW StatTile: forwards `data-testid` (extends HTMLAttributes).
+- 2 MEDIUM (test coverage gaps in Dialog focus trap + Tooltip 4-side
+  coverage) deferred — tests beyond F-040 scope.
+
+**Test gate after fixes:** 79/80 files pass, 555/559 tests pass
+(four pre-existing baseline failures in `tests/a11y/forms.test.tsx`
+unchanged — confirmed via `git log` as v5.3.0-era; not F-040).
+
+### F-041 outcome (this session)
+
+F-041 was scoped to (a) clean up design-system drift in the 5 high-traffic
+desktop views, and (b) bring the mobile shell + 4 matching mobile views up
+to the same standard with proper mobile-native affordances.
+
+### F-043 outcome (v7.0.4 dashboard consistency)
+
+User screenshot showed four visible defects after v7.0.3 install fix:
+(1) theme drift between legacy chrome tokens (`--bg` / `--accent-3`) and
+design-system tokens (`--surface-*` / `--accent`); (2) sidebar section
+dividers invisible, group labels dim; (3) SettingsNav using a custom
+styling parallel to main sidebar; (4) Memory page on legacy `.view-*`
+shell with mismatched surface tone; (5) BarChart bars barely visible in
+dark mode.
+
+**Fix shipped (single source of truth = tokens.css):**
+- `bizar-dash/src/web/styles/main.css` — legacy tokens now alias to
+  design-system tokens (`--bg: var(--surface-0)`, `--bg-elev: var(--surface-1)`,
+  `--accent: #3ecf8e` (literal to avoid circular var() resolve), etc.).
+  `.app` background + `.sidebar` + `.sidebar-tab-active` +
+  `.sidebar-section-divider` / `.sidebar-section-label` rewritten to
+  consume surface tokens.
+- `bizar-dash/src/web/components/Topbar.tsx` — localStorage-backed theme
+  toggle hoisted from `Overview.tsx`. `data-theme` persists across reloads.
+- `bizar-dash/src/web/components/SettingsNav.tsx` —
+  `.settings-nav-root` / `.settings-nav-divider` / `.settings-nav-group-label`
+  removed in favour of `.sidebar-section-divider` + `.sidebar-section-label`.
+  One chrome, two consumers.
+- `bizar-dash/src/web/views/Memory.tsx` — migrated from legacy
+  `.view view-memory memory-tab` shell to `<Box>` + `<ViewHeader>` + `<Grid>`
+  + `<Stack>` ui/primitives. Sub-panels keep their own shell until a
+  follow-up sprint per-component migrates them.
+- `bizar-dash/src/web/styles/memory.css` — `.memory-source-button`
+  re-styled to mirror `.sidebar-tab` exactly (same padding, radius,
+  colours, transitions).
+- `bizar-dash/src/web/ui/data/data.css` — `.bd-bar-chart__track` height
+  8 → 10px + `border: 1px solid var(--border-subtle)` so empty rows are
+  visible. `.bd-bar-chart__bar` gains `box-shadow: inset 0 -1px 0
+  rgba(0,0,0,0.18)` for definition.
+
+**Test gate:** typecheck clean. cli 109/109, sdk 294/294, ui 595/599.
+The 4 a11y failures (`tests/a11y/forms.test.tsx`) are pre-existing on
+master — confirmed by `git diff master -- bizar-dash/tests/a11y/forms.test.tsx`
+returning empty.
+
+**Branch:** `fix/dashboard-theme-sidebar-memory` → PR → merge → npm
+publish v7.0.4.
+
+**Foundations added (Stage 1):**
+- `src/web/ui/controls/Textarea.tsx` — new primitive. Forwarded ref,
+  `inputSize` variant, optional `error` + `hint`. Tokens-only styling.
+  Export added to `controls/index.ts`.
+- `src/web/ui/layout/ViewHeader.tsx` — new primitive. Composes
+  `eyebrow` + `<h1>` title + subtitle + actions row. Tokens-only.
+  Export added to `layout/index.ts`.
+- `src/web/styles/tokens.css` — added `--default-agent-swatch:
+  var(--accent)` and `--safe-top/bottom/left/right:
+  env(safe-area-inset-*, 0px)`.
+- `tests/ui/controls/Textarea.test.tsx` (7 cases) +
+  `tests/ui/layout/ViewHeader.test.tsx` (6 cases).
+
+**Desktop polish (Stage 2):**
+- `Overview.tsx` — raw `<textarea>` (~18 lines inline style) replaced
+  with `<Textarea ref={...} />`.
+- `Tasks.tsx` — removed the left-edge priority stripe CSS +
+  `tasks-wave3__row--priority-*` classes (DESIGN.md §14 anti-pattern);
+  the existing `<Badge>` + `<StatusDot>` already encode the same
+  priority state. Added `@media (max-width: 1099px)` block to
+  `tasks-redesign.css` so the 5-column kanban collapses to a single
+  vertical stack with section headers below 1100px, plus
+  `overflow-x: hidden` guard below 768px.
+- `Agents.tsx` — extracted the literal hex `#8b5cf6` (the only literal
+  color in the codebase) to a `DEFAULT_AGENT_SWATCH_HEX` constant with
+  a comment explaining why HTML `<input type="color">` can't consume
+  the CSS variable directly (requires CSS Color Module Level 3 hex).
+- `Chat.tsx` — **deferred to dedicated sprint**; the full 3-modal +
+  3-column migration was scoped out per the original plan after
+  measuring the size.
+- `Settings.tsx` — **deferred to dedicated sprint**; long-tail
+  sections beyond the F-040-era theme/layout/general are out of scope
+  per the original plan.
+
+**Mobile polish (Stage 3):**
+- 6 files swapped `import { cn } from '../lib/utils'` →
+  `import { cx } from '../ui/utils/cx'`. The mobile shell was using
+  the legacy `cn` helper while the rest of the dashboard uses the
+  design-system `cx`. Files: `MobileBottomNav`, `MobileEval`,
+  `MobileMemory`, `MobileTasks`, `MobileSettings`,
+  `components/MobileListItem`. `MobileTopbar` and `MobileBottomSheet`
+  had no `cn` usage.
+- `mobile.css` — added a soft `--accent-soft` background pulse behind
+  the active tab icon (DESIGN.md §9.1). The pulse sits behind the icon
+  via `svg > svg` selector so the full tap target stays intact.
+- `MobileApp.tsx` — added a small `MobileViewBoundary` (React
+  `Component<…, {error: Error | null}>`) wrapping `<main>` so a render
+  error in any child view falls back to a friendly "Reload" prompt
+  with the chrome (topbar + back button) still intact instead of a
+  blank white screen. CSS rule `.mobile-view-error` matches.
+
+**Safe-area / touch targets:** Already wired by mobile.css prior to
+this session (`env(safe-area-inset-*)` on the app shell and bottom
+nav, `--mobile-tap-target: 44px` enforced on `.mobile-nav-btn`). No
+additional changes needed.
+
+**Verification (L09 layers):**
+- L1 compile (`make check`): 0 TS errors.
+- L2 unit (`make test`): 294/294 SDK tests pass; web suite unchanged.
+- L3 e2e (`make e2e`): 13/13 checks pass.
+- 5-dim clean state (`make clean-check`): 5/5 dimensions green.
+- 0 debug artifacts introduced (`console.log` / `debugger` / `.only()`).
+
+**Commit:** the WIP=1 rule ships everything as one logical commit
+covering foundations + desktop + mobile + docs. The commit message
+will be WHY-focused: design-system consistency across desktop and
+mobile plus mobile-native affordances (safe-area + 44px touch +
+error boundary + active-state pulse).
+
+**Note on `impeccable`:** the user-requested UI audit tool is not
+installed in this project. Substituted with the closest available
+audit surface: the `visual-plan` command, the `baldr` agent, and
+`make clean-check` for the runtime contract. This is called out
+explicitly because it's a known scope substitution, not a silent
+drift away from the original ask.
+
+## Current State
+
+- **Last commit:** F-041 dashboard consistency + mobile UI pass
+  (worktree branch `worktree-consistency-mobile-ui-pass`, ready for
+  review as a draft PR)
+- **Released:** v7.0.0 — F-040 dashboard redesign shipped
+  (39/39 VCR = 1.000, typecheck 0 errors, SDK tests 294/294, web
+  tests 582/586 [4 pre-existing v5.3.0-era failures in
+  `tests/a11y/forms.test.tsx`], CLI tests 109/109, build clean)
+- **Branch:** master (v7.0.0 tagged); F-041 lands via draft PR
+- **Phase:** F-041 ready to ship — desktop + mobile consistency
+  polish on top of v7.0.0; Chat.tsx and Settings long-tail deferred
+  per original plan
+
+## What landed in v7.0.0
+
+Cleared v6.4.0 port cycle (5 features passing, VCR 36/36 = 1.000).
+v6.5.0 launched 2026-07-12 with 3 candidates dispatched in parallel
+per user direction (same model as v6.4.0 — WIP=1 honored within each
+agent's L09 verification chain, but the 3 features ship concurrently):
+
+| F-id | Feature | Source | Port target |
+|---|---|---|---|
+| **F-037** (passing, this commit) | v6.3.0 migration gap cleanup — rewrite stale `plugins/bizar/` docs that describe the deleted Cline tree; record the final-status entry in `docs/migration-guide.md` | in-repo tech debt (not ruflo) | deletions + grep verifications + stale docs cleanup |
+| **F-038** (passing, committed `8733d62`) | Cross-installation agent federation skeleton — HMAC+nonce envelopes, PII pipeline, TrustEvaluator, PolicyEngine, AuditService, FederationBudget | ruflo `v3/@claude-flow/plugin-agent-federation/src/plugin.ts` | `packages/sdk/src/federation/*.ts` (8 new files) |
+| **F-039** (passing, committed `ae24842`) | Hive-mind Byzantine consensus (thin port) — 3-of-5 majority for review/decision steps; PBFT pre-prepare/prepare/commit/reply phases | ruflo `v3/@claude-flow/swarm/src/consensus/byzantine.ts` | `packages/sdk/src/consensus/*.ts` (4 new files) + `consensus_propose` MCP tool |
+
+### What landed in v6.5.0
+
+- **F-037 — Migration gap cleanup.** All 5 F-037 target files were
+  already deleted/migrated by the v6.3.0 cycle (clineruntime.ts →
+  mcp/server.ts, cline.json.template → settings.json+mcp.json,
+  cli/commands/validate.mjs already Claude-Code-native, the 22
+  Cline `createTool` files were migrated into `BIZAR_TOOLS`).
+  F-037 cleaned up what remained: **rewrote** the stale
+  `plugins/bizar/{ARCHITECTURE,CONSTRAINTS,README}.md` so they
+  describe the post-migration shim state (the previous versions
+  still described the deleted Cline-era file tree and quoted
+  `createTool from @cline/sdk` mandates), **deleted**
+  `plugins/bizar/scripts/check-forbidden-imports.sh` (its src/
+  no longer exists), **slimmed** `plugins/bizar/tsconfig.json`
+  include globs (no more `src/**/*.ts` + `tests/**/*.ts`), and
+  **appended** the F-037 entry to `docs/migration-guide.md` with
+  both the L09 verification matrix and a categorized accounting of
+  the residual `cline` hits in `cli/` (all intentional back-compat
+  — Cline-as-provider model strings, the `~/.config/cline/`
+  install path helpers, and migration docstrings). Also fixed
+  two pre-existing F-038 TS errors the F-037 work surfaced via
+  the SDK tsconfig's stricter `noUnusedLocals`:
+  `federation/trust.ts` unused `now` parameter → `_now` prefix,
+  and `federation/index.ts` dropped 3 redundant re-imports
+  (`envelopeAgeMs`, `AuditDecision`, `AuditEntry`).
+
+  L09 verification: `make check` 0 errors • `make test` 294/294 •
+  `make e2e` 13/13 ("plugin shim does not import @cline/*" + "SDK
+  TypeScript compiles cleanly" both green) • `make clean-check`
+  5/5 • narrow gap-grep over the 4 target paths returns **0 hits**.
+
+### F-038 — Federation Skeleton (commit `8733d62`)
+
+8 new federation modules under `packages/sdk/src/federation/`:
+`envelope.ts` (17-kind `FederationMessageType` + canonical signable
+payload), `hmac.ts` (HMAC-SHA-256 + `crypto.timingSafeEqual` + UUID
+nonces), `pii.ts` (4 compliance modes + 11 PII categories with
+two-phase collect-then-apply), `trust.ts` (per-peer scoring with
+sliding-window fail tracking), `policy.ts` (maxHops/action allowlist/
+peer blocklist), `audit.ts` (NDJSON to
+`.harness/federation-audit.log` with 10MB rotation), `budget.ts`
+(reserved→committed→released state machine with JSON persistence),
+and `index.ts` orchestrator (`createFederation()` with
+sign/receive/status). Plus `federation_status` MCP tool wired into
+`BIZAR_TOOLS` (lands when the F-039 commit picks up mcp/server.ts).
+
+### F-039 — Hive-mind Byzantine Consensus (passing)
+
+In-memory PBFT-style 3-of-5 majority for Bizar review/decision steps,
+thin-ported from ruflo's
+`v3/@claude-flow/swarm/src/consensus/byzantine.ts` + the
+`QueenCoordinator` proposer-election pattern. No transport — peers
+are passed in the constructor; the orchestrator drives `onPrepare` /
+`castVote` to tally votes. Replay protection keys on payload digest
+(view-scoped, so view-changes can re-propose the same payload).
+
+- `packages/sdk/src/consensus/types.ts` — `Phase = 'pre-prepare' |
+  'prepare' | 'commit' | 'reply'`, `Vote`, `Proposal`,
+  `ProposalSnapshot`, `ConsensusStatus`, and result shapes.
+- `packages/sdk/src/consensus/byzantine.ts` — `ByzantineConsensus`
+  class. `propose()` (replay-protected), `castVote()` (idempotent,
+  quorum auto-commit, proposer self-fault detection),
+  `onPrepare(proposalId, vote)` (transport-friendly entry point),
+  `commit()` (force-commit admin override), `viewChange()` (rotates
+  proposer via `QueenCoordinator.advance()` + increments
+  `viewNumber`).
+- `packages/sdk/src/consensus/queen.ts` — `QueenCoordinator` with
+  round-robin weighted by per-peer skip count. `recordFault(peer)`
+  adds `maxFaults` skip-tokens; `advance()` walks one step at a
+  time, decrementing any peer's skip counter it lands on.
+  Deterministic via optional `proposerSeed`.
+- `packages/sdk/src/consensus/index.ts` — `createConsensus(opts)`
+  facade returning a `ConsensusHandle`, plus `getSharedConsensus()`
+  singleton (defaults to the 5-agent Norse roster
+  `odin / frigg / vor / mimir / heimdall` with `bizar-f039-default`
+  seed).
+- `packages/sdk/src/mcp/server.ts` — `consensus_propose` MCP tool
+  (22nd in `BIZAR_TOOLS`); takes `payload: string` (JSON-encoded),
+  optional `vote` / `agentId` / `quorum` overrides, returns
+  `{ proposalId, status, phase, approvals, rejections, ... }`.
+- `packages/sdk/tests/consensus.test.ts` — **33 vitest cases**
+  covering: 5-agent 3-of-5 commit, exact-3 + abstain commit,
+  2-yes-3-no rejection, late-vote no-op, proposer self-fault +
+  view-change, explicit view-change + re-propose, 2-2-1 tie,
+  replay protection, payload-digest view-scoped expiry, view-count
+  semantics, validation throws, QueenCoordinator round-robin +
+  fault-skip semantics, deterministic seed, singleton lifecycle,
+  `PHASE_ORDER` + `DEFAULT_*` constants.
+- `/tmp/f039-consensus-roundtrip.mjs` — L3 e2e (plain `node`,
+  imports built `dist/`). 4 scenarios, **29 assertions**:
+  happy-path 3-of-5 commit, 2-2-1 split + view-change + re-propose,
+  replay protection, proposer self-fault.
+
+**Verification (L09 layers):**
+- L1 compile (`bunx tsc --noEmit`): 0 TS errors (used `noUnusedLocals`
+  + `noUnusedParameters` discipline; new getters
+  `getLocalAgentId` / `getMaxFaults` / `getHistoryLimit` keep
+  `strict` happy).
+- L2 unit (`vitest run tests/consensus.test.ts`): 33/33 PASS.
+- L3 e2e (`node /tmp/f039-consensus-roundtrip.mjs`): 29/29 PASS.
+
+**Constraints honoured:** 0 new npm deps (only `node:crypto` +
+`Map` + `Set`); backward-compatible — adds 1 new MCP tool without
+breaking the existing 21; deterministic quorum math (no randomness
+in vote tally); proposer election takes an optional seed for test
+pinned-heads. VCR pushed to **38/38 = 1.000** after F-039 + F-038.
+
+- **Tests:** 101/101 vitest pass across 8 new test files (envelope
+  10 + hmac 22 + pii 12 + trust 9 + policy 11 + audit 10 + budget
+  16 + orchestrator 11). Full SDK suite 294/294.
+- **E2E:** `/tmp/f038-federation-roundtrip.mjs` — 34/34 PASS
+  (sign + PII redact + receive + tamper reject + nonce replay
+  reject + budget reserve/commit/release + audit log + status).
+- **Hard constraints:** `crypto.timingSafeEqual` for HMAC compare,
+  `crypto.randomUUID()` for 128-bit nonces, no new top-level npm
+  deps, backward-compatible with v6.4.0.
+- **`make check`:** 0 TS errors. **`make vcr`:** 37/38 = 0.974
+  (F-039 still in flight per parallel-sprint order).
+
+## What landed in v6.4.0 — Ruflo Port Cycle
+
+5 features ported from ruflo via CodeGraph-driven mapping of the
+ruflo codebase (`/home/drb0rk/Projects/BizarHarness/ruflo`).
+Source maps: `/tmp/ruflo-port-analysis/0[1-4]-*.md`.
+
+### F-032 — Swarm Coordination (commit `92c6e6a`)
+
+`BizarAgentRegistry` + `SwarmTopologyRegistry` + 4 MCP tools
+(`agent_spawn`, `agent_list`, `agent_terminate`, `swarm_init`).
+21 MCP tools total (13 v6.3.0 core + 4 F-032 + 4 F-033).
+
+- **Tests:** 72/72 vitest — `agent-registry.test.ts` (28) +
+  `swarm-topology.test.ts` (23) + `mcp-tools.test.ts` (15)
+- **Agent ids:** `crypto.randomUUID()` → `agent-<uuid>`; 9-entry
+  `AGENT_TYPES` allowlist enforced (`coder`/`tester`/`reviewer`/
+  `system-architect`/`planner`/`researcher`/`performance-engineer`/
+  `security-auditor`/`memory-specialist`)
+- **Persistence:** opt-in via `{ persistPath }` → `.harness/agents.json`
+  + `.harness/topology.json` (gitignored)
+- **Topologies:** 5 (`hierarchical`/`mesh`/`adaptive`/`collective`/
+  `hierarchical-mesh`); default = `hierarchical-mesh`,
+  `maxAgents ∈ [1, 1000]`, default `15`
+
+### F-033 — Self-Learning (commit `1a2ade2`)
+
+ADR-174 distillation + 3-tier adaptive model router + Tier-1
+codemod intent + 8-agent Q-learning router.
+
+- **Tests:** 142/142 vitest (50 router + 13 orchestrator + 18
+  distillation + 61 sibling F-032)
+- **REST:** `POST /api/distill`, `GET /api/distill/patterns`,
+  `GET /api/distill/status` mounted in `api.mjs`
+- **Runtime:** `.bizar/distilled-patterns.json` (ADR-174 format);
+  singletons `modelRouter` + `agentRouter` with `saveTo/loadFrom`
+- **Schema:** `cli/memory-constants.mjs` extended with `pattern`
+  type + `VALID_PROVENANCE_TIERS` enum (`oracle:test-exec |
+  proxy:structural | judge:fable`)
+- **Surfaced tags:** `[CODEMOD_AVAILABLE]` (orchestrator's first),
+  then `[TASK_MODEL_RECOMMENDATION]` — both in `surfacedTags[]`
+  for prompt-side injection
+
+### F-034 — Background Workers (commits `533d81b` + `702631d`)
+
+Trigger-pattern dispatcher wired to Claude Code's `UserPromptSubmit`.
+12 workers: `testgaps`, `audit`, `deepdive`, `refactor`, `document`,
+`optimize`, `ultralearn`, `consolidate`, `predict`, `map`, `preload`,
+`benchmark`. Each carries `weight`, `skill`, `agent`, `description`.
+
+- `config/trigger-patterns.json` (new) — JSON map of 12 triggers
+- `cli/worker-dispatcher.mjs` (new, 256 LOC) — pure JS, no deps
+- `.claude/hooks/worker-suggest.mjs` (new, 110 LOC) — UserPromptSubmit
+  hook; always exits 0 (informational only)
+- `cli/worker-dispatcher.test.mjs` (new) — 18 `node:test` cases
+
+### F-035 — MetaHarness (commit `9ae48f8`)
+
+Atomic cost gate (better-sqlite3 + WAL + BEGIN IMMEDIATE) + 3-tier
+routing transparency panel + GitHub claim protocol.
+
+- `cli/cost-gate.mjs` (501 LOC) — ADR-164.1 §5.3 late-commit warning
+- `cli/commands/cost.mjs` — `bizar cost {register,status,reserve,
+  commit,release,sweep,list}`
+- `cli/feature-list-bridge.mjs` (400 LOC) — 7 `CLAIM_STATUSES`
+  + 4 `STEAL_REASONS` per ADR-016; atomic tmp+rename writes
+- `cli/commands/claim.mjs` — `bizar claim {claim,release,
+  handoff,steal,status,list,transition}`
+- `bizar-dash/src/web/components/agents/RoutingDecisions.tsx`
+  — tier badges CODEMOD(green)/TIER1(blue)/TIER2(yellow)/TIER3(red)
+- **Tests:** 43/43 node --test + 5/5 vitest + 160/160 SDK bun
+- **End-to-end CLI smoke:** `bizar cost register titan 50` →
+  `reserve --by tyr --amount 1.50` → `commit <txId> --amount 1.20`
+  → `status titan` ($48.80 remaining); `bizar claim F-035
+  --who odin` → `status F-035` (active by odin)
+
+### F-036 — Goal Planner UI (commit `6b96d2e`)
+
+GOAP A* from plain-English goal + 6 dashboard panels
+(GoalInput, PlanVisualization, CommunicationLog, RealTimeEventLog,
+DependencyGraph, QualityGates) wired to the existing `Ws()`
+singleton.
+
+- `bizar-dash/src/web/lib/goapPlanner.ts` — clause split →
+  verb map → A* over effect/precondition closure
+- `bizar-dash/src/server/routes/goal-planner.mjs` —
+  `POST /api/goal-planner/plan`
+- `bizar-dash/tests/setup.ts` — `ResizeObserver` + `matchMedia`
+  jsdom stubs
+- 22/22 F-036 tests + 320/324 full dashboard suite (4 pre-existing
+  `a11y/forms.test.tsx` import failures, confirmed via `git stash`
+  baseline)
+- **Constraints honoured:** no new deps (existing `@xyflow/react` +
+  `lucide-react`), no Tailwind, single `Ws()` subscription
+- **`feature_list.json` mutated only via canonical
+  `make verify-feature` gate**
+
+### v6.4.0 release consolidation — Makefile, e2e, JSDoc
+
+- `scripts/bh-full-e2e.mjs` — tool-list updated to match the new
+  SDK surface (21 tools: 13 v6.3.0 + 4 F-032 + 4 F-033); old
+  `bizar_*` prefix + `bizar_sandbox_*` / `bizar_glyph_*` /
+  `bizar_plan_comment_*` were v6.3.0 migration drift
+- `Makefile` — `make e2e` target fixed (pointed at non-existent
+  `scripts/e2e.sh`); `make test` target expanded to include
+  F-035's `cli/__tests__/{cost-gate,feature-list-bridge}.test.mjs`
+- `packages/sdk/src/mcp/server.ts:26` — JSDoc example replaced
+  `console.log(msg)` (false positive in `make clean-check` regex)
+  with `handleAgentMessage(msg)`
+- `package.json` — bumped 6.3.0 → 6.4.0 (MINOR: 5 new features,
+  backward-compatible)
+
+### v6.4.0 final gate
+
+- `make check` ✓ (0 TS errors)
+- `make test` ✓ (269/269: 160 SDK + 109 CLI)
+- `make e2e` ✓ (13/13 checks, 21 tools verified)
+- `make clean-check` ✓ (5/5 dimensions, 0 debug artifacts)
+- `make vcr` ✓ (**36/36 = 1.000**)
+
+Total v6.4.0 LOC: ~7,200 insertions across 32+ new files.
++8 MCP tools (13 → 21), +1 REST surface (`/api/goal-planner/plan`),
++2 CLI surfaces (`bizar cost` + `bizar claim`), +12 background
+workers, +1 dashboard page (Goals tab).
+
+Full analysis: `/tmp/ruflo-port-analysis/00-SYNTHESIS.md` (and
+`0[1-4]-*.md` for the per-area maps).
+
+**Sprint order constraint:** F-033 should land after F-032
+because the router benefits from the agent registry. The other
+three (F-034, F-035, F-036) are independent of each other and of
+F-032.
+
+### F-032 — Swarm Coordination (passing, committed `92c6e6a`)
+
+`BizarAgentRegistry` + `SwarmTopologyRegistry` + 4 MCP tools
+(`agent_spawn`, `agent_list`, `agent_terminate`, `swarm_init`)
+written and exported. `BIZAR_TOOLS` count = 17 (13 + 4 F-032).
+
+- **Tests:** 72/72 vitest pass — `agent-registry.test.ts` (28) +
+  `swarm-topology.test.ts` (23) + `mcp-tools.test.ts` (15). **TS:** 0
+  errors via `make check`.
+- **Agent ids:** `crypto.randomUUID()` → `agent-<uuid>` (122-bit random
+  payload, no retry loop). Agent types gated by 9-entry `AGENT_TYPES`
+  allowlist (`coder` / `tester` / `reviewer` / `system-architect` /
+  `planner` / `researcher` / `performance-engineer` / `security-auditor`
+  / `memory-specialist`); `agent_spawn` rejects anything else with a
+  structured MCP error.
+- **Persistence:** opt-in via `{ persistPath }`. Singleton writes to
+  `.harness/agents.json` + `.harness/topology.json` (gitignored). On
+  reload, the new registry reconstructs from the snapshot so a Claude
+  Code session restart doesn't drop the population.
+- **Topologies:** 5 topologies (`hierarchical` / `mesh` / `adaptive` /
+  `collective` / `hierarchical-mesh`); default = `hierarchical-mesh`,
+  `maxAgents` clamped to `[1, 1000]`, default `15`. The `default` swarm
+  is lazy-seeded on the first `initSwarm` call.
+- **`layers[]`:** `[compile, unit, e2e]` set in feature_list.json;
+  `state="passing"`, `commit="92c6e6a"`, VCR pushed to 36/36 = 1.000.
+
+### F-033 — Self-Learning (passing, committed `1a2ade2`)
+
+ADR-174 distillation pipeline + adaptive model router + Tier-1
+codemod intent + 8-agent Q-learning router. Committed as `1a2ade2`.
+
+- **Tests:** 142/142 vitest pass across 9 files (50 router + 13
+  orchestrator + 18 distillation + 61 sibling F-032 work).
+- **L3 roundtrip:** `/tmp/f033-roundtrip.mjs` writes 3 notes (one with
+  `test-exec` tag) → distiller → 3 patterns, 1 promoted
+  (`pat_1wi5axn`, `provenance_tier: oracle:test-exec`, `promoted: true`).
+- **3 new MCP tools:** `model_route`, `agent_route`, `memory_distill`,
+  plus orchestrator tool wired via `hooksRouteTool`.
+- **TS files:** `packages/sdk/src/router/{codemod-intent, model-router,
+  q-learning-router, memory-distillation, index}.ts` (orchestrator).
+- **JS files:** `bizar-dash/src/server/{memory-distillation,
+  memory-consolidator, routes/distill}.mjs`.
+- **REST surface:** `POST /api/distill`, `GET /api/distill/patterns`,
+  `GET /api/distill/status` mounted in `api.mjs`.
+- **Runtime output:** `.bizar/distilled-patterns.json` (ADR-174 format).
+- **Schema:** `cli/memory-constants.mjs` extended with `pattern` type +
+  `VALID_PROVENANCE_TIERS` enum (`oracle:test-exec | proxy:structural
+  | judge:fable`).
+- **Bandit singletons:** `modelRouter` and `agentRouter` are module-
+  level singletons (priors accumulate across tool calls within one
+  MCP server instance — matches ruflo ADR-026 bandit-persistence).
+- **Persistence:** `modelRouter` + `agentRouter` both expose
+  `saveTo()` / `loadFrom()` JSON-state round-trip.
+
+## What landed in v6.4.0 (so far)
+
+### F-034 — Background Workers (commits 533d81b + 702631d)
+
+Trigger-pattern dispatcher wired to Claude Code's `UserPromptSubmit`
+event. Every prompt auto-suggests relevant Bizar skills/agents.
+
+- `config/trigger-patterns.json` (new) — 12 workers with regex-driven
+  triggers: `testgaps`, `audit`, `deepdive`, `refactor`, `document`,
+  `optimize`, `ultralearn`, `consolidate`, `predict`, `map`, `preload`,
+  `benchmark`. Each carries `weight`, `skill`, `agent`, `description`.
+- `cli/worker-dispatcher.mjs` (new, 256 lines) — pure JS, no deps.
+  Exports `dispatch()`, `listWorkers()`, `loadPatterns()`, `resetCache()`.
+  Cached regex compilation, weight-ranked output, defensively handles
+  missing/malformed config.
+- `.claude/hooks/worker-suggest.mjs` (new, 110 lines) — UserPromptSubmit
+  hook. Reads stdin, calls `dispatch()`, emits
+  `hookSpecificOutput.additionalContext` on stdout, stderr log for
+  operator visibility, always exits 0 (informational only).
+- `.claude/settings.json` — UserPromptSubmit entry appended as a sibling
+  command (preserves existing `userpromptsubmit-tag.mjs`).
+- `cli/worker-dispatcher.test.mjs` (new, 204 lines) — 18 `node:test`
+  cases: 5 canonical dry-run prompts + 8 edge cases + `listWorkers`
+  completeness + 4 `loadPatterns`/cache lifecycle + missing/malformed
+  config tolerance.
+- `Makefile` + `package.json` — test pipeline picks up the new suite.
+
+**Verification (L09 layers):**
+- L1 compile (`node --check`): PASS
+- L2 unit (`node --test cli/worker-dispatcher.test.mjs`): 18/18 PASS
+- L3 e2e (`./scripts/test-in-container.sh`): FAILS at typecheck stage
+  due to **pre-existing F-035 WIP** in `cli/commands/cost.mjs`
+  (cost-gate port) — unrelated to F-034. F-034 introduces zero TS
+  source and lands cleanly on v6.3.0.
+
+## What landed in v6.3.0
+
+Complete migration from Cline to Claude Code. Plugin layer, agent
+definitions, hook scripts, and mistake-limit machinery all rewired
+to ride on Claude Code's Agent SDK + MCP + skill/agent/hook system.
+
+- **Plugin layer → Claude Code MCP server.** The Bizar plugin now
+  ships as a Claude Code MCP server (`@anthropic-ai/claude-agent-sdk`)
+  exposing the same tool surface that previously came through the
+  Cline plugin host.
+- **Cline's `AgentPlugin` → Claude Code skills + agents + hooks.**
+  All 14 agent files in `config/agents/` are now Claude Code agent
+  definitions; `config/skills/` and `config/hooks/` are loaded by
+  Claude Code's skill loader and hook system respectively.
+- **Cline's `beforeTool` / `afterTool` → Claude Code's `PreToolUse` /
+  `PostToolUse`.** The five hook scripts (`PreToolUse`, `PostToolUse`,
+  `TaskStart`, `TaskResume`, `UserPromptSubmit`) are installed to
+  Claude Code's canonical hook locations.
+- **Cline's `ClineCore` → Claude Code `Agent SDK`
+  (`@anthropic-ai/claude-agent-sdk`).** The plugin's `clineruntime.ts`
+  is now an Agent SDK wrapper; session config is driven by Claude
+  Code's runtime.
+- **Cline's `createTool` from `@cline/sdk` → Claude Code MCP tool
+  registration via `@anthropic-ai/claude-agent-sdk`.** All 19+ tools
+  are registered through the SDK's MCP tool API.
+- **Mistake-limit floor (default 10) now uses Claude Code's
+  `onConsecutiveMistakeLimitReached` callback** instead of Cline's
+  session-config field. Field renamed to `claudeAgentMaxConsecutiveMistakes`.
+
+## What landed in v6.2.5
+
+Deep-dive session: critical skill-lock bug, new CubeSandbox
+integration, walkinglabs principles applied, container-based testing.
+
+## What landed in v6.2.4
+
+Fixes the silent v6.0.0 mistake-limit regression AND gives every
+Bizar agent the exact schemas for Claude Code's tools so they stop making
+the mistakes in the first place.
+
+### Patches
+
+1. **`plugins/bizar/src/clineruntime.ts:buildExecution`** — plugin
+   defaultMaxConsecutiveMistakes is now a FLOOR (Math.max) instead
+   of a default that gets overridden by the CLI's --retries flag.
+2. **`plugins/bizar/src/options.ts`** — bumped plugin default from
+   6 → 10.
+3. **`config/agents/_shared/AGENT_BASELINE.md`** — added "Tool
+   Mistakes — Don't Kill the Session" section + removed stale
+   "translated from Claude Fable 5" sentence (Claude-Code-only since
+   v6.3.0 (was Cline-only in v6.1.0–v6.2.5)).
+4. **`config/agents/_shared/CLINE_TOOLS.md`** (new) — schemas for
+   `read_file`, `editor`, `ask_question`, `use_subagents`, etc.
+   Highlights the #1 mistake: `ask_question` with `options: null`.
+5. **All 14 agent files** — description frontmatter now references
+   `CLINE_TOOLS.md`. The `agent-browser.md` agent (the only one
+   that didn't reference the baseline) now does too.
+6. **`cli/commands/validate.mjs`** — new `mistake-limit-floor`
+   check (lenient warn).
+7. **`scripts/check-agents.mjs`** (new) — CI check that all 14
+   agents reference the shared docs.
+8. **`scripts/bh-full-e2e.mjs`** — runs check-agents.mjs as part
+   of e2e.
+
+### User-reported trigger
+
+> "all writes hang after the first failure, 'Tool execution was
+> interrupted before a result was produced'." — Claude Code's log:
+> `max consecutive mistakes reached (3) in yolo mode`. The model
+> had tried 4 different approaches to edit a Dockerfile (editor,
+> python heredoc, single-line python, sed) and all failed.
+
+The fix is two-pronged:
+- **Runtime:** the plugin's higher mistake limit (10) always wins
+  via the Math.max floor.
+- **Agent training:** every agent now has the exact tool schemas in
+  their context, so they make fewer mistakes in the first place.
+
+## What landed in v6.2.3
+
+Full Claude Code CLI integration per the official Claude Code docs (https://docs.claude.com/claude-code):
+- [cli/cli-reference](https://docs.claude.com/claude-code/cli/cli-reference)
+- [cli/agent-teams](https://docs.claude.com/claude-code/cli/agent-teams)
+- [features/subagents](https://docs.claude.com/claude-code/features/subagents)
+- [cli/samples](https://docs.claude.com/claude-code/cli/samples/)
+
+### Patches
+
+1. **`plugins/bizar/src/clineruntime.ts:163`** — flipped
+   `enableSpawnAgent: false` → `true`. Silent v6.0.0 regression
+   that blocked Claude Code's Agent tool (subagent dispatch). Without
+   this, Odin could not delegate to subagents.
+2. **`cli/commands/setup-provider.mjs`** — wrote to the wrong file
+   (v6.2.2 was `~/.claude/settings.json`, fixed to
+   `~/.claude/settings.json` which is what Claude Code CLI
+   + kanban mode actually read). Now also auto-migrates any legacy
+   `openai-compatible` providerId to `litellm`.
+3. **`cli/commands/cline-cmd.mjs`** (new) — pass-through wrappers:
+   - `bizar config` → `claude config`
+   - `bizar history` → `claude history`
+   - `bizar hub` → `claude hub`
+   - `bizar hook` → `claude hook`
+   - `bizar team <name> "mission"` → use the Agent tool (note Claude Code has agent teams via Agent tool `team_name`)
+   - `bizar subagent <agent> "task"` → research subagent
+4. **`cli/commands/rca.mjs`** (new) — `bizar rca <github-issue-url>`
+   adapted from the official Claude Code Agent SDK GitHub Issue RCA sample.
+5. **`cli/commands/validate.mjs`** — new `cline-settings-provider`
+   check that warns about fake/legacy providerIds in
+   `~/.claude/settings.json`.
+6. **`scripts/bh-full-e2e.mjs`** — added 3 new e2e checks
+   (subagent plumbing, cline-cmd wrappers, rca sample).
+
+## What landed in v6.2.2
+
+Per operator request: the installer used to add a `provider.9router`
+block to `~/.claude/settings.json` on every install. That's now removed —
+the user picks their own provider. New `bizar setup-provider` CLI
+command (and matching `/setup-provider` Claude Code slash command) make it
+easy to add a provider with the live catalog from
+`http://localhost:20128/v1/models`.
+
+### Patches
+
+1. **`config/cline.json.template`** — removed the `provider` block
+   entirely (9router + minimax). Template is now provider-free.
+2. **`cli/provision.mjs:patchClineJson`** — stopped auto-adding
+   `provider.9router` and `provider.minimax`. Still backfills the
+   Bizar scaffolding (plugin entry, default_agent, $schema,
+   instructions, permission, snapshot) but NOT provider config.
+3. **`cli/commands/setup-provider.mjs`** (new) — `bizar setup-provider`
+   subcommand. Writes a `provider` block with `baseUrl` + `apiKey` +
+   live model catalog. Flags: `--list`, `--remove`, `--gateway`,
+   `--key`, `--provider`.
+4. **`config/commands/setup-provider.md`** (new) — the matching
+   `/setup-provider` Claude Code slash command.
+5. **`cli/commands/validate.mjs`** — `provider-config` is now
+   ALWAYS lenient (informational, never fails). New behavior
+   reports whatever providers the user has configured.
+6. **Agent `model:` fields** — updated to use the live gateway
+   prefix `minimaxcustom/MiniMax-M3` (was stale `minimax/MiniMax-M3`).
+   Same for `model` and `small_model` in claude settings.json template.
+7. **Post-install hint** — when no provider is configured, the
+   installer prints a clear setup hint pointing at `bizar setup-provider`.
+
+## What landed in v6.2.1
+
+Fixes the "I see skills but no hooks" user report. v6.0.0 shipped
+"hooks" as markdown behavioral files in `~/.claude/hooks/` which Claude Code
+silently ignored. v6.2.1 replaces them with five real Claude Code-native
+executable hook scripts.
+
+### Patches
+
+1. **`config/hooks/{PreToolUse,PostToolUse,TaskStart,TaskResume,UserPromptSubmit}`** (new) —
+   five real executable hook scripts with shebang lines:
+   - `PreToolUse` blocks writes to `.env`/`secrets/`/`node_modules`/
+     lockfiles; warns on `console.log`/`debugger`/`.only()` in `src/`
+   - `PostToolUse` logs tool latency to `~/.config/bizar/hook-logs/`
+   - `TaskStart` primes the AI with project context
+   - `TaskResume` reminds the AI to re-read state + check git log
+   - `UserPromptSubmit` tags the prompt for routing
+2. **`cli/provision.mjs:syncConfigExtras`** — installs hooks to BOTH
+   `~/.claude/hooks/` AND `~/Documents/Claude/Hooks/` (Claude Code's default
+   global hooks location), with `chmod +x`.
+3. **`cli/commands/validate.mjs`** — `hooks-installed` now verifies
+   shebang + executable bit (not just file presence). New
+   `hooks-canonical-location` check confirms
+   `~/Documents/Claude/Hooks/` is populated.
+4. **`scripts/bh-full-e2e.mjs`** — new check verifies
+   `config/hooks/` has all 5 Claude Code-native hook scripts with shebangs.
+5. **Removed** the obsolete `config/hooks/{pre-tool-use,post-tool-use,README}.md`
+   (markdown behavioral files that Claude Code never read).
+
+## What landed in v6.2.0
+
+Made Bizar's Claude Code integration end-to-end flawless: every plugin
+artifact, slash command, agent file, skill, rule, hook, and provider
+config now lands in the user's `~/.claude/` on every install. New
+`bizar validate` + `/validate` Claude Code command, plus `/team` and
+`/test` slash commands. The `make e2e` infrastructure is restored.
+
+### Patches
+
+1. **`plugins/bizar/src/clineruntime.ts:164`** — flipped
+   `enableAgentTeams: false` → `true`. The `bizar_spawn_team` tool
+   requires agent-teams to be enabled in Claude Code's session config;
+   without this, `/team` and the team coordinator were silently
+   unavailable.
+
+2. **`config/cline.json.template`** — added three new slash command
+   entries to the `command:` block:
+   - `team` (routes to `odin`, template `commands-bizar/team.md`) —
+     spawns a Claude Code agent team (Odin + Thor + Tyr + Mimir + Hermod +
+     Forseti) for parallel multi-agent missions.
+   - `test` (routes to `thor`, template `commands-bizar/test.md`) —
+     thin wrapper around `bizar test-gate`, auto-detects the
+     project's test runner.
+   - `validate` (routes to `heimdall`, template
+     `commands-bizar/validate.md`) — runs the full 21-point
+     `bizar validate` check battery.
+
+3. **`config/commands/team.md`** (new) — comprehensive guide for
+   the `/team` command. Default team composition, decomposition
+   rules, the pre-dispatch checklist, the sibling-awareness block,
+   and three worked example missions (refactor, multi-feature
+   build, bug hunt).
+
+4. **`config/commands/test.md`** (new) — documents the `/test`
+   slash command and its relationship to `bizar test-gate`.
+
+5. **`config/commands/validate.md`** (new) — documents the
+   `/validate` slash command and its 21 checks.
+
+6. **`cli/commands/validate.mjs`** (new) — the `bizar validate`
+   subcommand. 21-point health check that confirms:
+   - claude CLI reachable + version
+   - claude settings.json parses + plugin entry + path resolves
+   - plugin runtime deps (zod, @anthropic-ai/claude-agent-sdk) wired
+   - plugin index.ts + enableAgentTeams plumbing (regression check)
+   - all 14 agent files installed + Claude Code .yaml format
+   - all 13 slash commands (incl. /team, /test, /validate)
+   - all skills / rules / hooks mirrored to ~/.claude/
+   - provider.9router (preferred) or provider.minimax (legacy)
+   - 9Router gateway reachable (lenient unless --strict)
+   - default_agent + instructions[] in claude settings.json
+
+   Flags: `--json` for machine output, `--strict` to fail on
+   lenient checks, `--only <name>` to run a single check.
+
+7. **`cli/commands/validate.test.mjs`** (new) — 15 unit tests
+   covering: JSON output shape, missing-team/test/validate command
+   detection, missing-agent detection, claude settings.json absence,
+   enableAgentTeams regression, provider-config missing,
+   9router-only / minimax-only configurations, --strict mode,
+   --only filter, unknown --only name.
+
+8. **`cli/provision.mjs:patchClineJson()`** — refactored to be
+   more robust. On every install/update it now patches the
+   following on the user's claude settings.json (additive, idempotent):
+   - `plugin` entry (the critical one — Bizar plugin won't load
+     without it)
+   - `provider.9router` (the v6.0.1+ preferred gateway)
+   - `provider.minimax` (legacy fallback)
+   - `default_agent` (set to "odin" if missing)
+   - `$schema` (https://docs.claude.com/claude-code/config.json)
+   - `instructions` (point at the bundled tools reference)
+   - `permission` ("allow")
+   - `snapshot` (false)
+   The previous version only added the plugin entry on first
+   install; subsequent updates didn't backfill the other fields.
+
+9. **`scripts/bh-full-e2e.mjs`** (new) — the 15-check end-to-end
+   verifier. Lives at `scripts/bh-full-e2e.mjs` (not `/tmp/` —
+   that was a pre-existing infra gap that blocked `make e2e` and
+   clean-check dimension #5 since v5.6.0). Checks:
+   - plugin entry resolves
+   - enableAgentTeams: true in clineruntime.ts
+   - claude settings.json.template completeness
+   - config/commands/ has team/test/validate
+   - config/agents/ has all 14 agents
+   - config/skills/ has 8+ skills
+   - config/rules/ has 7 always-on rules
+   - plugin index.ts is well-formed
+   - plugin source has 19+ tool files
+   - plugin has 4+ hooks
+   - claude CLI reachable
+   - ClineRuntime class is importable
+   - bizar validate command + tests present
+   - package.json valid
+   - TypeScript compiles cleanly
+
+10. **`Makefile` + `scripts/clean-state-check.sh`** — point at
+    `scripts/bh-full-e2e.mjs` instead of the missing
+    `/tmp/bh-full-e2e.mjs`. `make e2e` and clean-check #5 now work.
+
+11. **`package.json` `test` script** — added
+    `cli/install.test.mjs`, `cli/provision.test.mjs`,
+    `cli/commands/validate.test.mjs` to the npm test pipeline.
+    Previously these only ran via `make test` (which also picks
+    them up); now they're explicit so CI catches any regression.
+
+12. **`.claude/instructions/bizar-tools.md`** — removed the
+    lingering "opencode" references that survived the v6.1.0
+    Cline-only rewrite. Now correctly says "Claude Code" and references
+    `headroom wrap claude` / `~/.claude/skills/`.
+
+### Tests
+
+- `plugins/bizar/tests/clineruntime-config.test.ts` — 3 new cases
+  pinning `enableAgentTeams: true` so the v6.0.0-era "false" can't
+  silently regress.
+- `cli/commands/validate.test.mjs` — 15 cases (new file).
+- `scripts/bh-full-e2e.mjs` — 15 e2e checks (new file).
+
+### Migration
+
+Operators on a v6.1.0 install should run `bizar update` to pull
+the new command files (team.md, test.md, validate.md) and the
+patched clineruntime.ts (enableAgentTeams: true). The update is
+backwards-compatible and idempotent.
+
+## What landed in v6.0.1
+
+Diagnosed root cause of "Claude Code keeps stopping" (Claude Code aborting sessions
+after 3 consecutive tool-validation failures — bundled CLI default).
+
+### Patches
+1. **`plugins/bizar/src/clineruntime.ts`** (now wraps Claude Code Agent SDK) — `startSession` now passes through
+   the `execution` block (`maxConsecutiveMistakes`, `reminderAfterIterations`,
+   `reminderText`, `loopDetection`) and wires an `onConsecutiveMistakeLimitReached`
+   callback by default. Runtime constructor accepts `defaultMaxConsecutiveMistakes`
+   and `defaultOnConsecutiveMistakeLimitReached` so every session inherits them
+   unless the caller overrides.
+
+2. **`plugins/bizar/src/mistake-recovery.ts`** (new) — pure helper that
+   builds the recovery callback. Recoverable mistakes
+   (`invalid_tool_call`, `tool_execution_failed`) return
+   `{action:"continue", guidance:"..."}` so the session keeps running with a
+   guidance message; infra failures (`api_error`) return `{action:"stop"}`.
+
+3. **`plugins/bizar/src/tool-discipline.ts`** (new) — system-prompt directive
+   appended by `beforeModel`. Tells the model to populate all required schema
+   fields, prefer built-in tools over bash (`read_file`, `editor`, `search`,
+   `apply_patch`, `list_files`, `web_fetch`), keep `run_commands` small (≈600
+   char ceiling, no `for`/`xargs`/`sed -i`/`heredoc`), and switch tools after
+   two identical failures.
+
+4. **`plugins/bizar/src/options.ts`** — adds `claudeAgentMaxConsecutiveMistakes` field (renamed from `clineruntimeMaxConsecutiveMistakes` in v6.3.0)
+   normalized option (default 6, range [3, 20], env `BIZAR_MAX_CONSECUTIVE_MISTAKES`).
+
+5. **`plugins/bizar/index.ts`** — wires the recovery callback into the
+   runtime; `beforeModel` injects the tool-discipline directive idempotently.
+
+6. **`cli/provision.mjs:syncConfigExtras`** — now also copies `config/rules/*.md`
+   into `${CLAUDE_DIR}/rules/`. Pre-existing gap: `bizar install` / `bizar update`
+   were silently skipping the always-on rules in `~/.claude/rules/`.
+
+7. **`config/cline.json.template`** — adds `claudeAgentMaxConsecutiveMistakes: 6` (renamed from `clineruntimeMaxConsecutiveMistakes` in v6.3.0)
+   to the Bizar plugin metadata block so a fresh `bizar install` writes the
+   new field automatically.
+
+### Tests
+- `plugins/bizar/tests/mistake-recovery.test.ts` (10 cases)
+- `plugins/bizar/tests/tool-discipline.test.ts` (9 cases)
+- `plugins/bizar/tests/clineruntime-config.test.ts` (6 cases)
+- `plugins/bizar/tests/options.test.ts` — 7 new cases for the field
+- `cli/provision.test.mjs` — 2 new cases for rules sync
+
+### v6.0.1 hotfix #2: 9Router gateway
+All Bizar agents now route chat through 9Router at `http://localhost:20128/v1`
+(the user's existing 9Router instance with MiniMax keys + auto-fallback to
+free models on `kr/*` and `openrouter/*:free` IDs). Plus 8 capability
+skills for the full 9Router feature surface — chat, web-search, web-fetch,
+image, TTS, STT, embeddings — installed automatically by
+`syncConfigExtras` into `~/.claude/skills/9router*/SKILL.md`.
+
+| Patches |
+|---|
+| `config/skills/9router*/SKILL.md` (8 new) — full 9Router skill tree, including the entry point + chat / web-search / web-fetch / image / TTS / STT / embeddings. |
+| `config/cline.json.template` — added `provider.9router` block (`baseUrl: http://localhost:20128/v1`, `apiKey: ${NINEROUTER_KEY}`). Switched all 13 model-bearing agents + top-level `model` + `small_model` to `9router/<id>` strings. |
+| `cli/doctor.mjs` — added `9router-reachable` health check; `provider-config-sanity` now prefers `provider.9router` (falls back to legacy `provider.minimax`). |
+| `cli/doctor.mjs:check9routerReachable` — `GET ${NINEROUTER_URL}/api/health` with 4s timeout; lenient (warn, not fail) so offline work doesn't break. |
+
+Operators: re-run `bizar install` to push the new provider block to
+`~/.claude/settings.json`. `NINEROUTER_URL` env var overrides the default
+endpoint (handy when 9Router runs inside a container/tunnel).
+
+## Recent releases
+
+| Version             | Date       | Type   | Notes                                       |
+| ------------------- | ---------- | ------ | ------------------------------------------- |
+| **v7.0.4**          | 2026-07-12 | patch  | dashboard consistency: theme unification, sidebar sections, settings-nav share chrome, Memory page on ui/primitives, BarChart dark-mode visibility |
+| **v7.0.3**          | 2026-07-12 | patch  | install flow: build SDK + dashboard dist on fresh installs (PATH-resolved tsc, buildDash() step) |
+| **v7.0.2**          | 2026-07-11 | patch  | vite chunk fix (drop brittle manualChunks to break circular import) |
+| **v7.0.0**          | 2026-07-11 | major  | F-041 desktop consistency + mobile UI pass |
+| **v6.3.0**          | 2026-07-11 | major  | Claude Code migration (plugin → MCP, skills, hooks) |
+| **v6.1.0**          | 2026-07-09 | dev    | Cline-exclusive; superseded by v6.3.0 Claude Code migration |
+| **v6.0.2**          | 2026-07-09 | patch  | fix dashboard-presence check in legacy installer |
+| **v6.0.1**          | 2026-07-09 | dev    | Claude Code mistake-recovery + tool-discipline + rules-sync + 9router gateway |
+| **v6.0.0-beta.1**   | 2026-07-08 | BETA   | CURRENT_ISSUES sprint — Odin, /loop, slash commands, vault linking |
+| v5.6.0-beta.17      | 2026-07-07 | BETA   | general repo cleanup release                |
+| v5.6.0-beta.1       | 2026-07-07 | BETA   | OpenCode → Cline rewrite (4 phases)        |
+| v5.5.6              | 2026-07-07 | stable | new `/plow-through` slash command          |
+
+## In Progress
+
+_None._
+
+## Blockers
+
+- **`/tmp/bh-full-e2e.mjs` is missing globally.** Blocks `make e2e` and
+  clean-check dimension #5 (startup path). Pre-existing — exists in
+  `clean-state-check.sh` line 68 but no code path generates the file. Out
+  of scope for v6.0.1.
+
+## Recent sessions
+
+| Date       | Phase | Outcome                                                     |
+| ---------- | ----- | ----------------------------------------------------------- |
+| 2026-07-11 | 7     | v6.3.0 — Claude Code migration COMPLETE                     |
+| 2026-07-09 | 6     | v6.0.1 — Claude Code mistake-recovery + tool-discipline + rules-sync |
+| 2026-07-08 | 5     | CURRENT_ISSUES sprint COMPLETE — published v6.0.0-beta.1  |
+| 2026-07-07 | 3     | In-process ClineRuntime + agent teams + memory vault + E2E  |
+| 2026-07-07 | 2     | OpenCode → Cline rewrite (17 tools, 4 hooks)                |
+| 2026-07-07 | 1     | Mechanical OpenCode→Cline rename + @cline/sdk wiring        |
+
+## Verification commands (single source of truth)
+
+```sh
+make check       # typecheck + tests (full pipeline) — 746/746 pass
+make test        # unit tests only
+make e2e         # real plugin load + tool invocation — BLOCKED (script missing)
+make clean-check # 5-dimension exit verification — 4/5 pass (E2E blocked)
+make vcr         # feature_list VCR ratio — 25/25 = 1.000
+```
+
+## S10 — v8 dashboard live data (F-052, this session)
+
+User-requested: turn the v8 dashboard into a real-time orchestration
+center. Every view pulls live data from the dashboard backend. Agents
+view unifies Bizar + Claude Code background agents. Goals render
+from `.bizar/PROGRESS.md`.
+
+**Backend:**
+- `bizar-dash/src/server/progress-parser.mjs` — pure parser for
+  `.bizar/PROGRESS.md`. `parseProgress(text)` returns
+  `{goals, preamble, postamble}` with `{id, title, status, progress,
+  keyResults[], owner, due, section}`. `serializeProgress(parsed)`
+  inverse. Header format `## F-NNN — Title` or `## Bare Title`.
+- `bizar-dash/src/server/routes/goals.mjs` — full CRUD over
+  PROGRESS.md. GET/PATCH `/api/goals/:id/status`, POST `/api/goals`,
+  PATCH `/api/goals/:id`, KR add/toggle/remove. Atomic write via
+  tmp+rename. Falls back to `$HOME` when no project is active.
+- `bizar-dash/src/server/routes/agents-cc.mjs` — Claude Code
+  background agents via `claude agents --json --all`. 5s module cache
+  to avoid subprocess-per-render. Enrichment reads session JSONL for
+  last-message snippet/timestamp. Kill + send endpoints.
+- `bizar-dash/src/server/bg-poller.mjs` — `tickCCAgents()` with
+  SHA-1 digest diff. Emits `agents:change` only when the digest
+  actually moves (order-independent).
+
+**Frontend (v8):**
+- `bizar-dash/src/web/v8/data/{fetcher,types,useFetch,useWebSocket}.ts`
+  — module-singleton WS client with exponential reconnect, fetch
+  hook with AbortController + refetch(), TypeScript types matching
+  REST shapes.
+- All 8 v8 views rewritten to consume live data:
+  - **Overview** — `/api/snapshot` + `/api/activity?limit=10`,
+    live-tail `activity:new` via ring buffer.
+  - **Tasks** — `/api/tasks`, kanban columns mapped from server
+    statuses, DnD → `PATCH /api/tasks/:id/status`, optimistic update
+    + rollback on error, live sync via `tasks:change`.
+  - **Goals** — `/api/goals`, status Select per goal → PATCH,
+    focused goal drawer with KeyResults, live sync via
+    `goals:change`.
+  - **Agents** — unified Bizar + CC agents with source filter chip
+    (`all | bizar | claude-code`), live updates via `agents:change`
+    and `agent:status`.
+  - **Activity** — full event history with WS tail.
+  - **Memory** — `/api/memory` with Project/Global/All scope chips.
+  - **Libraries** — Skills / MCPs / Hooks now fetch live data
+    (`/api/skills?kind=…`); Router drops hardcoded arrays.
+  - **Settings** — live counts for Plugins / MCPs / Skills / Hooks
+    sections; toggles PATCH `/api/settings`.
+
+**Tests:**
+- Backend: `node --test` on `progress-parser.test.mjs` (8) +
+  `agents-cc.test.mjs` (4) + `bg-poller.test.mjs` (3) = **15/15
+  pass**.
+- Frontend: `npx vitest run src/web/v8` — 25 files, **195/195 pass**
+  (142 baseline + 53 new across data hooks + view rewrites). The
+  pre-existing `views.test.tsx` was rewritten to mock `fetch` and
+  assert structure against the new live-data shells.
+- New tests: `useFetch.test.ts` (5 cases), `useWebSocket.test.ts`
+  (5 cases via FakeSocket).
+
+**Constraints honoured:** 0 new top-level npm deps; CC background
+agents polled via `claude agents --json` (no API needed); PROGRESS.md
+round-trips through serialize/deserialize; WS layer mirrors the
+existing legacy `Ws()` singleton pattern.
+
+**Next sprint (S11):** Agent detail panel + control plane. Click any
+agent card → right-side Drawer with live detail, last-10 actions
+timeline, and `Send prompt` / `Restart` / `Kill` actions that map to
+the new `/api/cc-agents/:id/kill` + `/api/agents/:name/invoke`
+endpoints.
+
+## S11-S14 — Control plane, goal editor, palette + settings wiring
+
+User request: "control and configure everything in the dashboard".
+
+**S11 — Agent detail Drawer + control plane:**
+- `bizar-dash/src/web/v8/ui/agents/AgentDetail.tsx` — right-side Sheet
+  with avatar, current-task callout, prompt textarea, and three
+  action buttons:
+  - **Send** → POST `/api/cc-agents/:id/send` (CC source) or
+    `/api/agents/:name/invoke` (Bizar source)
+  - **Restart** → POST `/api/agents/:name/restart` (Bizar only;
+    CC gets a "spawn a fresh agent via palette" hint)
+  - **Copy id** → `navigator.clipboard.writeText(key)`
+- `AgentsView.tsx` — `onOpen` wires each card to `setOpenId(c.id)`;
+  `AgentDetail` mounts when `openId !== null`.
+- Backend endpoints already shipped in `routes/agents-cc.mjs`.
+
+**S12 — Goal editing drawer + create flow:**
+- `bizar-dash/src/web/v8/ui/goals/GoalDetail.tsx` — Sheet with
+  editable Title / Status / Owner / Due + inline KeyResult list
+  (toggle done, add via Enter, remove button). Each field PATCHes
+  `/api/goals/:id` on blur or change. KR toggles/deletes hit
+  `/api/goals/:id/key-results/:krId`.
+- `GoalsView.tsx` — card click opens Drawer (was inline section);
+  `+ New goal` button POSTs `/api/goals` then opens the new goal
+  for editing. Source-of-truth stays `.bizar/PROGRESS.md`.
+
+**S13 — Command palette control plane:**
+- `AppCommandPalette.tsx` — three new groups:
+  - **Agents** — Spawn Coder / Researcher / Planner / Reviewer →
+    POST `/api/agents`.
+  - **Tasks** — `New task…` (window.prompt → POST
+    `/api/tasks/submit`), `Go to tasks board` (existing nav).
+  - **Projects** — dynamically loaded from `/api/projects`; each
+    entry hits POST `/api/projects/:id/activate`.
+- Toast hook stub: `onToast` prop surfaces success/error.
+
+**S14 — Settings wiring pass:**
+- `useFetch` already wires live counts into the Plugins / MCPs /
+  Skills / Hooks sections (shipped in S10). The S14 pass
+  consolidates PATCH endpoints (`/api/settings` + per-section
+  hookups) and adds the `tests/control-plane.test.tsx` regression
+  suite covering AgentDetail + GoalDetail.
+
+**Tests added:**
+- `bizar-dash/src/web/v8/__tests__/control-plane.test.tsx` —
+  7 vitest cases covering AgentDetail (name/badge, task callout,
+  Send endpoint routing, button presence) and GoalDetail
+  (editable fields, KR list, PATCH on blur).
+
+**Verification (L1 proxy — typecheck):**
+- `tsc --noEmit` via Node API: 0 diagnostics, 0 failures.
+
+**Next sprint:** chat surface rewrite (deferred from earlier
+PLANs) + mobile dashboard v8 cutover (the user said "professional
+and data-driven"; chat is the last non-data surface).