khal-os 1.260324.2

package/.env.example

@@ -0,0 +1,23 @@
+# Sentry (Error Tracking)
+SENTRY_DSN=
+NEXT_PUBLIC_SENTRY_DSN=
+SENTRY_ENVIRONMENT=development
+SENTRY_AUTH_TOKEN=
+
+# Auth
+OS_SECRET=
+WORKOS_API_KEY=
+WORKOS_CLIENT_ID=
+NEXT_PUBLIC_WORKOS_REDIRECT_URI=
+WORKOS_COOKIE_PASSWORD=
+WORKOS_WEBHOOK_SECRET=
+
+# Instance (single-tenant: fixed per deployment)
+KHAL_INSTANCE_ID=default
+NEXT_PUBLIC_KHAL_INSTANCE_ID=default
+
+# NATS
+NATS_URL=nats://localhost:4222
+
+# WebSocket Bridge
+WS_BRIDGE_PORT=4280

package/.genie/mailbox/cli-sent.jsonl

@@ -0,0 +1,3 @@
+{"id":"msg-04edd038-6b36-434e-9053-27107c9a7719","from":"cli","to":"ds1-wave2-engineer-1","body":"Execute Group 1 of wish \"genieos-one-theme\". Your full context is in the system prompt. Read the wish at /home/genie/.genie/worktrees/genie-os/ds1-wave2/.genie/wishes/genieos-one-theme/WISH.md if needed. Implement all deliverables, run validation, and report completion.\n\nWhen done:\n1. Run: genie done genieos-one-theme#1\n2. Run: genie send 'Group 1 complete. <summary>' --to team-lead","createdAt":"2026-03-24T03:05:34.879Z","read":false,"deliveredAt":null}
+{"id":"msg-c2b08ef2-b828-4f36-aeac-cf25d61d88df","from":"cli","to":"ds1-wave2-engineer-2","body":"Execute Group 2 of wish \"genieos-one-theme\". Your full context is in the system prompt. Read the wish at /home/genie/.genie/worktrees/genie-os/ds1-wave2/.genie/wishes/genieos-one-theme/WISH.md if needed. Implement all deliverables, run validation, and report completion.\n\nWhen done:\n1. Run: genie done genieos-one-theme#2\n2. Run: genie send 'Group 2 complete. <summary>' --to team-lead","createdAt":"2026-03-24T03:05:34.958Z","read":false,"deliveredAt":null}
+{"id":"msg-7ae7c3d3-9695-4771-8c7a-0d43d40b4364","from":"cli","to":"ds1-wave2-engineer-3","body":"Execute Group 3 of wish \"genieos-one-theme\". Your full context is in the system prompt. Read the wish at /home/genie/.genie/worktrees/genie-os/ds1-wave2/.genie/wishes/genieos-one-theme/WISH.md if needed. Implement all deliverables, run validation, and report completion.\n\nWhen done:\n1. Run: genie done genieos-one-theme#3\n2. Run: genie send 'Group 3 complete. <summary>' --to team-lead","createdAt":"2026-03-24T03:13:51.976Z","read":false,"deliveredAt":null}

package/.genie/mailbox/ds1-wave2-engineer-1.json

@@ -0,0 +1,15 @@
+{
+  "workerId": "ds1-wave2-engineer-1",
+  "messages": [
+    {
+      "id": "msg-04edd038-6b36-434e-9053-27107c9a7719",
+      "from": "cli",
+      "to": "ds1-wave2-engineer-1",
+      "body": "Execute Group 1 of wish \"genieos-one-theme\". Your full context is in the system prompt. Read the wish at /home/genie/.genie/worktrees/genie-os/ds1-wave2/.genie/wishes/genieos-one-theme/WISH.md if needed. Implement all deliverables, run validation, and report completion.\n\nWhen done:\n1. Run: genie done genieos-one-theme#1\n2. Run: genie send 'Group 1 complete. <summary>' --to team-lead",
+      "createdAt": "2026-03-24T03:05:34.879Z",
+      "read": false,
+      "deliveredAt": "2026-03-24T03:05:34.923Z"
+    }
+  ],
+  "lastUpdated": "2026-03-24T03:05:34.924Z"
+}

package/.genie/mailbox/ds1-wave2-engineer-2.json

@@ -0,0 +1,15 @@
+{
+  "workerId": "ds1-wave2-engineer-2",
+  "messages": [
+    {
+      "id": "msg-c2b08ef2-b828-4f36-aeac-cf25d61d88df",
+      "from": "cli",
+      "to": "ds1-wave2-engineer-2",
+      "body": "Execute Group 2 of wish \"genieos-one-theme\". Your full context is in the system prompt. Read the wish at /home/genie/.genie/worktrees/genie-os/ds1-wave2/.genie/wishes/genieos-one-theme/WISH.md if needed. Implement all deliverables, run validation, and report completion.\n\nWhen done:\n1. Run: genie done genieos-one-theme#2\n2. Run: genie send 'Group 2 complete. <summary>' --to team-lead",
+      "createdAt": "2026-03-24T03:05:34.958Z",
+      "read": false,
+      "deliveredAt": "2026-03-24T03:05:34.960Z"
+    }
+  ],
+  "lastUpdated": "2026-03-24T03:05:34.960Z"
+}

package/.genie/mailbox/ds1-wave2-engineer-3.json

@@ -0,0 +1,15 @@
+{
+  "workerId": "ds1-wave2-engineer-3",
+  "messages": [
+    {
+      "id": "msg-7ae7c3d3-9695-4771-8c7a-0d43d40b4364",
+      "from": "cli",
+      "to": "ds1-wave2-engineer-3",
+      "body": "Execute Group 3 of wish \"genieos-one-theme\". Your full context is in the system prompt. Read the wish at /home/genie/.genie/worktrees/genie-os/ds1-wave2/.genie/wishes/genieos-one-theme/WISH.md if needed. Implement all deliverables, run validation, and report completion.\n\nWhen done:\n1. Run: genie done genieos-one-theme#3\n2. Run: genie send 'Group 3 complete. <summary>' --to team-lead",
+      "createdAt": "2026-03-24T03:13:51.976Z",
+      "read": false,
+      "deliveredAt": "2026-03-24T03:13:52.020Z"
+    }
+  ],
+  "lastUpdated": "2026-03-24T03:13:52.020Z"
+}

package/.genie/state/os-observability.json

@@ -0,0 +1,39 @@
+{
+	"wish": "os-observability",
+	"groups": {
+		"1": {
+			"status": "done",
+			"assignee": "engineer",
+			"dependsOn": [],
+			"startedAt": "2026-03-20T20:27:19.012Z",
+			"completedAt": "2026-03-20T20:35:10.098Z"
+		},
+		"2": {
+			"status": "done",
+			"assignee": "engineer",
+			"dependsOn": [],
+			"startedAt": "2026-03-20T20:27:18.961Z",
+			"completedAt": "2026-03-20T20:38:16.419Z"
+		},
+		"3": {
+			"status": "in_progress",
+			"dependsOn": ["1", "2"],
+			"assignee": "engineer",
+			"startedAt": "2026-03-20T20:38:19.252Z"
+		},
+		"4": {
+			"status": "ready",
+			"dependsOn": ["2"]
+		},
+		"5": {
+			"status": "blocked",
+			"dependsOn": ["4"]
+		},
+		"6": {
+			"status": "blocked",
+			"dependsOn": ["3"]
+		}
+	},
+	"createdAt": "2026-03-20T20:27:18.955Z",
+	"updatedAt": "2026-03-20T20:38:19.252Z"
+}

package/.genie/state/tmux-control-mode-terminal.json

@@ -0,0 +1,28 @@
+{
+	"wish": "tmux-control-mode-terminal",
+	"groups": {
+		"1": {
+			"status": "done",
+			"assignee": "engineer",
+			"dependsOn": [],
+			"startedAt": "2026-03-19T20:59:01.515Z",
+			"completedAt": "2026-03-19T21:06:10.282Z"
+		},
+		"2": {
+			"status": "done",
+			"assignee": "engineer",
+			"dependsOn": ["1"],
+			"startedAt": "2026-03-19T21:06:31.718Z",
+			"completedAt": "2026-03-19T21:09:19.797Z"
+		},
+		"3": {
+			"status": "done",
+			"assignee": "engineer",
+			"dependsOn": ["2"],
+			"startedAt": "2026-03-19T21:09:31.903Z",
+			"completedAt": "2026-03-19T21:12:26.511Z"
+		}
+	},
+	"createdAt": "2026-03-19T20:59:01.511Z",
+	"updatedAt": "2026-03-19T21:12:26.512Z"
+}

package/.genie/wishes/genieos-one-theme/WISH.md

@@ -0,0 +1,417 @@
+# Wish: ONE Theme — Kill Concepts, Build Perfect
+
+| Field | Value |
+|-------|-------|
+| **Status** | DRAFT |
+| **Slug** | `genieos-one-theme` |
+| **Date** | 2026-03-23 |
+| **Design** | [DESIGN.md](../../.genie/brainstorms/genieos-design-system-v2/DESIGN.md) |
+| **Repo** | `namastexlabs/genie-os` (branch from `dev`) |
+
+## Summary
+Replace 8 competing theme concepts (3109-line globals.css) with ONE perfect theme structured as a `src/theme/` directory. Delete all concept-switching infrastructure. macOS-level: one look, dark + light modes, that's it. The designer's khal-landing mockups ARE the spec for dark mode.
+
+## Scope
+
+### IN
+- **Create `src/theme/` directory** with 10 semantic CSS files (surfaces, typography, controls, window, taskbar, status, terminal, animations, menus, index)
+- **Delete all `[data-concept=]` CSS blocks** from globals.css (~2800 lines removed)
+- **Delete concept infrastructure:** `concept-registry.ts`, `use-concept.ts`, `ThemeConcept` type, `setConcept`, `data-concept` attribute
+- **Delete concept-specific components:** `OmniGlassStack.tsx`, `OmniDock.tsx`, `OmniDockItem.tsx`
+- **Simplify WindowFrame.tsx** — one control style (glass), remove concept branching
+- **Simplify Taskbar.tsx** — one layout (bottom bar), remove concept branching
+- **Simplify theme-store.ts** — mode only (light/dark/system), no concept
+- **Simplify Settings Appearance** — dark/light/system toggle only, no theme picker grid
+- **Update layout.tsx** — remove `data-concept` attribute
+- **Fix all 17 files** that reference the concept system
+- **Production build** must compile and deploy cleanly
+- **Both auth fixes** (middleware HeadlessChrome + permission mapping) committed in same branch
+
+### OUT
+- New components (separate wish)
+- App platform / genie.yaml (separate wish)
+- Design system documentation app (after theme)
+- Light mode perfection (ship dark mode as designed, light mode best-effort — iterate later)
+
+## Decisions
+
+| Decision | Rationale |
+|----------|-----------|
+| Structured directory (10 files) not single file | Each domain independently reviewable. Designer's mockups map to files. Scales to hundreds of tokens. |
+| Glass controls as THE only style | macOS doesn't let you pick window control styles. One style, perfected. |
+| Bottom bar taskbar only (no floating dock) | One layout. OmniDock was a concept-specific experiment. |
+| Keep `--khal-*` variable names | All components already use them. Renaming touches 50+ files for zero user benefit. |
+| Dark mode from mockup palette, light mode derived | 16 mockup screens define dark mode exactly. No light-mode mockups exist. Derive and iterate. |
+| Commit auth fixes in same branch | middleware.ts and use-auth.ts are already modified on prod. Clean them up and commit with the theme work. |
+
+## Success Criteria
+
+- [ ] `src/theme/` directory exists with all 10 CSS files
+- [ ] `src/app/globals.css` is < 100 lines (imports + radii + base only)
+- [ ] Zero `[data-concept=` selectors in entire codebase
+- [ ] Zero imports of `concept-registry` or `use-concept` in codebase
+- [ ] `OmniGlassStack.tsx`, `OmniDock.tsx`, `OmniDockItem.tsx` deleted
+- [ ] `theme-store.ts` has no `concept` field — only `mode`
+- [ ] Settings Appearance shows dark/light/system toggle only
+- [ ] `layout.tsx` has no `data-concept` attribute
+- [ ] WindowFrame.tsx has one control style (glass), no branching
+- [ ] Taskbar.tsx has one layout (bar), no concept checks
+- [ ] All 5 apps render correctly in dark mode (matching designer's mockup palette)
+- [ ] All 5 apps render correctly in light mode (coherent, readable)
+- [ ] Terminal ANSI colors correct in both modes
+- [ ] `bun next build` exits 0 (production build works)
+- [ ] `bun biome check .` passes (or no new errors)
+- [ ] Deployed at alpha.khal.namastex.io and rendering correctly
+
+## Execution Strategy
+
+### Wave 1 (parallel — foundation)
+| Group | Agent | Description |
+|-------|-------|-------------|
+| 1 | engineer | Create `src/theme/` directory with all 10 CSS files, extracting tokens from the `genie` concept block |
+| 2 | engineer | Delete concept infrastructure: registry, use-concept, ThemeConcept type, theme-store simplification |
+
+### Wave 2 (after Wave 1 — component cleanup)
+| Group | Agent | Description |
+|-------|-------|-------------|
+| 3 | engineer | Simplify window + taskbar: delete OmniGlassStack/OmniDock, single control style, fix all 17 files |
+| 4 | engineer | Gut globals.css, update layout.tsx, Settings.tsx, commit auth fixes, production build test |
+
+### Wave 3
+| Group | Agent | Description |
+|-------|-------|-------------|
+| review | reviewer | Review all groups, verify production build |
+
+## Execution Groups
+
+### Group 1: Create src/theme/ Directory
+
+**Goal:** Build the 10-file theme directory with all tokens for dark + light modes, sourced from the designer's mockup palette.
+
+**Deliverables:**
+
+1. **`src/theme/index.css`** — imports all other files
+2. **`src/theme/surfaces.css`** — 6-layer depth system (desktop → chrome → inactive → raised → border → hover), glass tokens (blur, opacity, tint, border), overlay backgrounds. `:root` (light) + `.dark` (dark).
+3. **`src/theme/typography.css`** — 4-tier text hierarchy (primary → secondary → muted → inverse), font families (Geist Sans, Geist Mono), line-heights
+4. **`src/theme/controls.css`** — accent colors (primary, secondary, hover, active, subtle), button backgrounds, input borders, switch colors, focus rings
+5. **`src/theme/window.css`** — window radius, bg, border (focused/unfocused), shadow (focused/unfocused), title bar bg, frame height/padding, control button styles (glass only), close hover color
+6. **`src/theme/taskbar.css`** — taskbar bg, border, shadow, active indicator, hover bg, glass blur
+7. **`src/theme/status.css`** — pipeline stage colors (7), product identity colors (4), status indicators (live/idle/warning/error), event type colors (6)
+8. **`src/theme/terminal.css`** — terminal bg + 16 ANSI colors (standard + bright) for dark and light modes
+9. **`src/theme/animations.css`** — easing curves, duration tokens, orb drift keyframes, pulse animation
+10. **`src/theme/menus.css`** — command palette bg/border/shadow/hover, dropdown/context menu, tooltip, notification position
+
+**Dark mode values** — sourced from the designer's 16 mockup screens in `repos/khal-landing/components/mockups/`. The following reference table maps each token to the exact mockup file and line where the designer used that value:
+
+### Mockup Color Reference (Dark Mode)
+
+**Surfaces (→ surfaces.css)**
+| Token | Value | Source Mockup | File:Line | Usage |
+|-------|-------|---------------|-----------|-------|
+| `--khal-bg-desktop` | `#0a0a0f` | MockupChrome, MissionControl, AuditTrail, AgentInspector | mockup-chrome.tsx:24, mission-control.tsx:90, audit-trail.tsx:118 | Window/app background |
+| `--khal-bg-primary` (chrome) | `#0d0d14` | MockupChrome title bar | mockup-chrome.tsx:29 | Title bar, chrome header |
+| `--khal-bg-secondary` (inactive) | `#0f0f18` | WorkflowBuilder inactive nodes | workflow-builder.tsx (inactive stage bg) | Inactive cards, background areas |
+| `--khal-surface-default` (raised) | `#141420` | All mockups — active cards | agent-inspector.tsx:108, audit-trail.tsx:121, channel-hub.tsx (cards) | Cards, panels (often at /80 opacity with backdrop-blur-sm) |
+| `--khal-border-default` | `#1e1e30` | ALL 16 mockups | mockup-chrome.tsx:23,28, agent-inspector.tsx:131,153, audit-trail.tsx:230 | Every border, divider, separator |
+
+**Text (→ typography.css)**
+| Token | Value | Source Mockup | File:Line | Usage |
+|-------|-------|---------------|-----------|-------|
+| `--khal-text-primary` | `#e2e8f0` | All mockups — titles, values | mockup-chrome.tsx:52, agent-inspector.tsx:111, mission-control.tsx:113 | Titles, active text, values |
+| `--khal-text-secondary` | `#94a3b8` | All mockups — descriptions | agent-inspector.tsx:201,255, audit-trail.tsx:163, task-detail.tsx:123 | Body text, descriptions, events |
+| `--khal-text-muted` | `#64748b` | All mockups — labels, metadata | mockup-chrome.tsx:47,53,64, agent-inspector.tsx:115,142, status-dot.tsx:26-27 | Labels, timestamps, metadata, breadcrumbs |
+| `--khal-text-faint` | `#475569` | AuditTrail, AgentInspector | audit-trail.tsx:230,247,264, agent-inspector.tsx:218 | Timestamps, deeply muted text, disabled |
+
+**Accent (→ controls.css)**
+| Token | Value | Source Mockup | File:Line | Usage |
+|-------|-------|---------------|-----------|-------|
+| `--khal-accent-primary` | `#3b82f6` | TaskDetail, WorkflowBuilder, AgentInspector | task-detail.tsx:46,91, agent-inspector.tsx:22,200,246 | Primary action, links, selected state, BUILD stage |
+| `--khal-accent-subtle` | `rgba(59,130,246,0.12)` | TaskDetail auto-created badge, AgentInspector selected | task-detail.tsx:202, agent-inspector.tsx:200 | Background tint for selected/active states |
+
+**Window Chrome (→ window.css)**
+| Token | Value | Source Mockup | File:Line | Usage |
+|-------|-------|---------------|-----------|-------|
+| `--khal-window-shadow` | `0 4px 24px rgba(0,0,0,0.4)` | MockupChrome | mockup-chrome.tsx:23 | Window drop shadow |
+| Close button | `#ff5f57` | MockupChrome traffic lights | mockup-chrome.tsx:34 | Close button color |
+| Minimize button | `#febc2e` | MockupChrome | mockup-chrome.tsx:35 | Minimize button color |
+| Maximize button | `#28c840` | MockupChrome | mockup-chrome.tsx:36 | Maximize button color |
+
+**Status & Stage Colors (→ status.css)**
+| Token | Value | Source Mockup | File:Line | Usage |
+|-------|-------|---------------|-----------|-------|
+| `--khal-stage-triage` | `#f59e0b` | MissionControl, TaskDetail | mission-control.tsx:71, task-detail.tsx:45 | TRIAGE stage |
+| `--khal-stage-plan` | `#8b5cf6` | MissionControl | mission-control.tsx:72 | PLAN/BRAINSTORM stage |
+| `--khal-stage-build` | `#3b82f6` | MissionControl, TaskDetail | mission-control.tsx:73, task-detail.tsx:46 | BUILD stage |
+| `--khal-stage-review` | `#06b6d4` | MissionControl, TaskDetail | mission-control.tsx:74, task-detail.tsx:47 | REVIEW stage |
+| `--khal-stage-qa` | `#22c55e` | MissionControl, TaskDetail | mission-control.tsx:75, task-detail.tsx:48 | QA stage |
+| `--khal-stage-ship` | `#22c55e` | MissionControl | mission-control.tsx:76 | SHIP stage (same as QA — both "done") |
+| `--khal-status-live` | `#22c55e` | StatusDot | status-dot.tsx:22-25 | Live/online/active/working (with pulse) |
+| `--khal-status-idle` | `#64748b` | StatusDot | status-dot.tsx:26-27 | Idle/away (no pulse) |
+| `--khal-status-warning` | `#f59e0b` | StatusDot | status-dot.tsx:28 | Queued (no pulse) |
+| `--khal-status-error` | `#ef4444` | StatusDot | status-dot.tsx:29 | Error (with pulse) |
+| `--khal-event-stage` | `#3b82f6` | AuditTrail | audit-trail.tsx:42 | task.stage_change events |
+| `--khal-event-tool` | `#22c55e` | AuditTrail | audit-trail.tsx:50 | tool.result events |
+| `--khal-event-agent` | `#8b5cf6` | AuditTrail | audit-trail.tsx:58 | agent.decision events |
+| `--khal-event-api` | `#f59e0b` | AuditTrail | audit-trail.tsx:74 | api.request events |
+| `--khal-event-hire` | `#06b6d4` | AuditTrail | audit-trail.tsx:82 | agent.hired events |
+| `--khal-event-omni` | `#25d366` | AuditTrail | audit-trail.tsx:106 | omni.event / WhatsApp events |
+| `--khal-product-genie` | `#b4a0f4` | Landing page (not mockups) | — | Product identity: orchestration |
+| `--khal-product-omni` | `#2dd4bf` | Landing page | — | Product identity: messaging |
+| `--khal-product-khal` | `#fb923c` | Landing page | — | Product identity: product |
+| `--khal-product-os` | `#60a5fa` | Landing page | — | Product identity: infrastructure |
+
+**Cost Display (→ controls.css or status.css)**
+| Token | Value | Source Mockup | File:Line | Usage |
+|-------|-------|---------------|-----------|-------|
+| Cost green | `#22c55e` | CostCounter, AuditTrail | cost-counter.tsx ($ symbol), audit-trail.tsx:186 | Dollar sign, positive costs |
+| Cost threshold blue | `#3b82f6` | CostCounter | cost-counter.tsx (budget bar <60%) | Budget bar under 60% |
+| Cost threshold amber | `#f59e0b` | CostCounter | cost-counter.tsx (budget bar 60-80%) | Budget bar 60-80% |
+| Cost threshold red | `#ef4444` | CostCounter | cost-counter.tsx (budget bar >80%) | Budget bar over 80% |
+
+### Light Mode Derivation Rules
+
+Light mode is derived from dark mode by applying these explicit transformations:
+
+| Category | Dark Value | Light Value | Rule |
+|----------|-----------|-------------|------|
+| **Desktop bg** | `#0a0a0f` | `linear-gradient(135deg, #f0f2f8, #dfe4ef)` | Invert to light gradient |
+| **Chrome bg** | `#0d0d14` | `#ffffff` | Invert to white |
+| **Inactive bg** | `#0f0f18` | `#f8f9fb` | Invert to near-white |
+| **Raised surface** | `#141420` | `#ffffff` | Invert to white |
+| **Borders** | `#1e1e30` | `#e2e4ea` | Shift from dark separator to light separator |
+| **Text primary** | `#e2e8f0` | `#1a1a2e` | Swap: light text on dark → dark text on light |
+| **Text secondary** | `#94a3b8` | `#4a5568` | Darken for contrast on light bg |
+| **Text muted** | `#64748b` | `#94a3b8` | Lighten (less contrast needed on light bg) |
+| **Accent primary** | `#3b82f6` | `#2563eb` | Darken slightly for contrast on white |
+| **Accent subtle bg** | `rgba(59,130,246,0.12)` | `rgba(37,99,235,0.08)` | Lower opacity on light bg |
+| **Glass tint** | `rgba(20,20,32,0.8)` | `rgba(255,255,255,0.6)` | Dark tint → light tint |
+| **Glass border** | `rgba(255,255,255,0.06)` | `rgba(0,0,0,0.06)` | White border on dark → dark border on light |
+| **Shadows** | `rgba(0,0,0,0.4)` | `rgba(0,0,0,0.08)` | Lighter shadows on light bg |
+| **Status/stage colors** | (unchanged) | (unchanged) | Functional colors stay the same in both modes |
+| **ANSI terminal colors** | Dark palette | Adjusted for light bg | Darker variants for readability |
+
+**Starting point:** Use the existing light mode values from globals.css lines 2298-2434 (`[data-concept="genie"]:not(.dark)` block). These were already derived using these rules.
+
+**Token naming** — keep ALL existing `--khal-*` names exactly. Components already use them.
+
+**Acceptance Criteria:**
+- [ ] All 10 files exist in `src/theme/`
+- [ ] `index.css` imports all 9 other files
+- [ ] Every `--khal-*` variable currently defined in the `genie` concept block exists in the new files
+- [ ] `:root` contains light mode values
+- [ ] `.dark` contains dark mode values
+- [ ] No `[data-concept=` selectors in any theme file
+
+**Validation:**
+```bash
+cd /home/genie/agents/sofia/repos/genie-os && ls src/theme/index.css src/theme/surfaces.css src/theme/typography.css src/theme/controls.css src/theme/window.css src/theme/taskbar.css src/theme/status.css src/theme/terminal.css src/theme/animations.css src/theme/menus.css && grep -c 'data-concept' src/theme/*.css | grep -v ':0$' | wc -l | grep '^0$' && echo "PASS"
+```
+
+**depends-on:** none
+
+---
+
+### Group 2: Delete Concept Infrastructure
+
+**Goal:** Remove all concept-switching code from the codebase.
+
+**Deliverables:**
+
+1. **Delete files:**
+   - `src/lib/theme/concept-registry.ts`
+   - `src/lib/theme/use-concept.ts`
+
+2. **Simplify `src/stores/theme-store.ts`:**
+   - Remove `ThemeConcept` type
+   - Remove `concept` state field
+   - Remove `setConcept` action
+   - Keep: `mode` ('light' | 'dark' | 'system'), `setMode`, `reduceMotion`, `setReduceMotion`
+
+3. **Update `src/components/ui/theme-provider.tsx`:**
+   - Remove any concept-related logic
+   - Keep: next-themes ThemeProvider wrapping
+
+4. **Fix all imports** — grep for `concept-registry`, `use-concept`, `useConcept`, `ThemeConcept`, `setConcept` and remove/fix every reference across the codebase
+
+**Acceptance Criteria:**
+- [ ] `concept-registry.ts` deleted
+- [ ] `use-concept.ts` deleted
+- [ ] `theme-store.ts` has no `concept` or `ThemeConcept`
+- [ ] Zero imports of deleted files anywhere
+- [ ] `bunx tsc --noEmit` shows no new errors from deletions
+
+**Validation:**
+```bash
+cd /home/genie/agents/sofia/repos/genie-os && test ! -f src/lib/theme/concept-registry.ts && test ! -f src/lib/theme/use-concept.ts && grep -r "concept-registry\|use-concept\|useConcept\|ThemeConcept\|setConcept" src/ packages/ --include="*.ts" --include="*.tsx" 2>/dev/null | grep -v node_modules | grep -v ".next" | wc -l | grep '^0$' && echo "PASS"
+```
+
+**depends-on:** none (parallel with Group 1)
+
+---
+
+### Group 3: Simplify Window + Taskbar + Component Cleanup
+
+**Goal:** Remove concept-specific components and branching from all OS shell components.
+
+**Deliverables:**
+
+1. **Delete files:**
+   - `src/components/window/OmniGlassStack.tsx`
+   - `src/components/taskbar/OmniDock.tsx`
+   - `src/components/taskbar/OmniDockItem.tsx`
+
+2. **Simplify `Window.tsx`:**
+   - Remove `hasGlassStack` checks and OmniGlassStack rendering
+   - Remove concept-based conditional styling
+   - Use `--khal-*` CSS vars directly (they now come from theme/ files)
+
+3. **Simplify `WindowFrame.tsx`:**
+   - Remove concept-based control style branching (traffic-light / minimal / glass)
+   - Keep ONLY glass controls style
+   - Remove `useConcept()` import
+
+4. **Simplify `WindowControlsOverlay.tsx`:**
+   - Remove concept checks
+
+5. **Simplify `Taskbar.tsx`:**
+   - Remove concept check for OmniDock vs bar
+   - Always render bottom bar
+   - Remove `useConcept()` import
+
+6. **Fix `TerminalTabBar.tsx`** (both `src/components/apps/` and `packages/terminal-app/`):
+   - Remove concept reference
+
+7. **Fix any other files** referencing concepts (from the 17-file list)
+
+**Acceptance Criteria:**
+- [ ] `OmniGlassStack.tsx`, `OmniDock.tsx`, `OmniDockItem.tsx` deleted
+- [ ] WindowFrame has one control style, no branching
+- [ ] Taskbar always renders bottom bar
+- [ ] Zero `useConcept()` calls in codebase
+- [ ] Zero `hasGlassStack` references in codebase
+
+**Validation:**
+```bash
+cd /home/genie/agents/sofia/repos/genie-os && test ! -f src/components/window/OmniGlassStack.tsx && test ! -f src/components/taskbar/OmniDock.tsx && test ! -f src/components/taskbar/OmniDockItem.tsx && grep -r "useConcept\|hasGlassStack\|OmniGlassStack\|OmniDock" src/ packages/ --include="*.ts" --include="*.tsx" 2>/dev/null | grep -v node_modules | grep -v ".next" | wc -l | grep '^0$' && echo "PASS"
+```
+
+**depends-on:** Group 2 (concept infrastructure deleted first)
+
+---
+
+### Group 4: Globals.css Gut + Layout + Settings + Auth + Build
+
+**Goal:** Reduce globals.css to imports-only, update layout.tsx, simplify Settings, commit auth fixes, verify production build.
+
+**Deliverables:**
+
+1. **Gut `globals.css`:**
+   - Remove ALL `[data-concept=...]` blocks (~2800 lines)
+   - Keep: Tailwind imports, `@import "./theme/index.css"`, base tokens (radii, z-index, safe-area), any non-concept utility classes (`.khal-animated-bg`, `.khal-orb`, keyframes, scrollbar hiding, etc.)
+   - Result should be < 100 lines of actual content
+
+2. **Update `layout.tsx`:**
+   - Remove `data-concept="genie"` attribute from `<html>`
+   - Keep: `class` for dark/light, `suppressHydrationWarning`, etc.
+
+3. **Simplify Settings Appearance (both `src/components/apps/settings/Settings.tsx` AND `packages/settings-app/views/settings/Settings.tsx`):**
+   - Remove the entire `THEME_CONCEPTS` array and theme picker grid
+   - Keep: dark/light/system toggle (the "Change theme" button already does this)
+   - Keep: keyboard shortcuts, about, NATS echo sections
+
+4. **Commit auth fixes** (already modified on prod, need to be in the branch):
+   - `src/middleware.ts` — HeadlessChrome bypass checks for session cookie
+   - `src/lib/auth/use-auth.ts` — always use role-based permissions, ignore WorkOS org permissions
+
+5. **Production build test:**
+   - `bun next build` must exit 0
+   - Deploy to alpha.khal.namastex.io and verify
+
+**Acceptance Criteria:**
+- [ ] `globals.css` < 100 lines
+- [ ] `layout.tsx` has no `data-concept`
+- [ ] Settings has no theme concept picker
+- [ ] Auth fixes committed
+- [ ] `bun next build` exits 0
+- [ ] alpha.khal.namastex.io renders correctly after deploy
+
+**Validation:**
+```bash
+cd /home/genie/agents/sofia/repos/genie-os && wc -l src/app/globals.css | awk '{if($1<100) print "PASS: "$1" lines"; else print "FAIL: "$1" lines"}' && grep -c 'data-concept' src/app/layout.tsx | grep '^0$' && grep -c 'THEME_CONCEPTS\|theme.*concept.*picker' packages/settings-app/views/settings/Settings.tsx | grep '^0$' && bun next build 2>&1 | tail -5
+```
+
+**depends-on:** Group 1 (theme files must exist before gutting globals.css), Group 3 (components must be cleaned before build)
+
+---
+
+## QA Criteria
+
+- [ ] Desktop renders in dark mode with mockup palette colors
+- [ ] Desktop renders in light mode (coherent, readable)
+- [ ] All 5 apps open and function: Terminal, Files, Settings, NATS Viewer, dev3000
+- [ ] Terminal ANSI colors render correctly in both modes
+- [ ] Window chrome (title bar, glass controls, shadows) looks correct
+- [ ] Taskbar glass blur and borders render correctly
+- [ ] Launcher opens and lists all apps
+- [ ] Settings opens (no "Permission denied")
+- [ ] Settings Appearance shows dark/light/system toggle only
+- [ ] No visual glitches or missing styles
+- [ ] No console errors related to missing CSS variables
+
+## Assumptions / Risks
+
+| Risk | Severity | Mitigation |
+|------|----------|------------|
+| Some `--khal-*` variables only existed in specific concepts (not in genie block) | Medium | Grep all variable USAGE across components. Cross-reference with genie concept block. Add any missing vars to theme files. |
+| Utility classes in globals.css (khal-animated-bg, scrollbar, etc.) get accidentally deleted | Medium | Carefully separate concept blocks from utility classes. Keep all non-concept CSS. |
+| Production build fails due to missing imports | Medium | Run `bunx tsc --noEmit` after each group. Fix immediately. |
+| Light mode looks wrong | Low | Ship as best-effort. Iterate post-merge. Dark mode is the primary. |
+
+---
+
+## Review Results
+
+_Populated by `/review` after execution completes._
+
+---
+
+## Files to Create/Modify
+
+```
+# CREATE (theme directory)
+src/theme/index.css
+src/theme/surfaces.css
+src/theme/typography.css
+src/theme/controls.css
+src/theme/window.css
+src/theme/taskbar.css
+src/theme/status.css
+src/theme/terminal.css
+src/theme/animations.css
+src/theme/menus.css
+
+# DELETE (concept infrastructure)
+src/lib/theme/concept-registry.ts
+src/lib/theme/use-concept.ts
+src/components/window/OmniGlassStack.tsx
+src/components/taskbar/OmniDock.tsx
+src/components/taskbar/OmniDockItem.tsx
+
+# MODIFY (simplify)
+src/app/globals.css                                    (gut from 3109 → <100 lines)
+src/app/layout.tsx                                     (remove data-concept)
+src/stores/theme-store.ts                              (remove concept, keep mode)
+src/components/ui/theme-provider.tsx                    (remove concept logic)
+src/components/window/Window.tsx                        (remove glass stack + concept)
+src/components/window/WindowFrame.tsx                   (one control style)
+src/components/window/WindowControlsOverlay.tsx         (remove concept)
+src/components/taskbar/Taskbar.tsx                      (one layout, no OmniDock)
+src/components/apps/terminal/ui/TerminalTabBar.tsx      (remove concept)
+src/components/apps/settings/Settings.tsx               (remove theme picker)
+packages/terminal-app/views/terminal/ui/TerminalTabBar.tsx (remove concept)
+packages/settings-app/views/settings/Settings.tsx       (remove theme picker)
+
+# MODIFY (auth fixes — already changed on prod, commit properly)
+src/middleware.ts
+src/lib/auth/use-auth.ts
+```