docs: update PRD statuses and mission artifacts for MS16+MS17 (#484)

Co-authored-by: Jason Woltje <jason@diversecanvas.com>
Co-committed-by: Jason Woltje <jason@diversecanvas.com>

docs/PRD.md

@@ -24,43 +24,74 @@ The Mosaic Stack web UI has a basic navigation and simple widget-based dashboard
 9. Build global terminal, project chat, and master chat session
 10. Configure telemetry with opt-out support
 
+## Completed Work
+
+### MS15-DashboardShell (v0.0.15) — Complete
+
+Design system + app shell + dashboard page. PRs #451-454.
+
+- CSS design token system (colors, fonts, spacing, radii)
+- App shell layout: collapsible sidebar + full-width header + main content
+- Sidebar navigation with groups, icons, badges, active states, collapse/expand
+- Responsive layout with hamburger at small breakpoints
+- Light/dark theme matching reference design
+- Mosaic logo spinner as global loading indicator
+- Shared component updates in packages/ui
+- Dashboard page: metrics strip, orchestrator sessions, quick actions, activity feed, token budget
+- Grain overlay texture
+
+### Go-Live MVP (v0.1.0) — Complete
+
+Dashboard polish, task ingestion pipeline, agent cycle visibility, deploy + smoke test. PRs #458, #460, #462, #464.
+
+- Fixed broken test suites and removed legacy unused widgets
+- Visual + theme polish across all components
+- Dashboard summary API endpoint (aggregated task counts, project counts, activity, jobs)
+- Dashboard widgets wired to real API data (ActivityFeed, DashboardMetrics, OrchestratorSessions)
+- WebSocket emits for job status/progress/step events
+- Dashboard auto-refresh with polling + progress bars + step status indicators
+- Deployed to Coolify at mosaic.woltje.com, auth working via Authentik
+- Release tag v0.1.0
+
 ## Scope
 
-### In Scope (Milestone 0.0.15 — Dashboard Shell & Design System)
+### In Scope (MS16+MS17 — Pages & Data Integration)
 
-1. CSS design token system overhaul (colors, fonts, spacing, radii from dashboard.html)
-2. App shell layout: sidebar + full-width header + main content area
-3. Full-width header with logo, search, system status, terminal toggle, notifications, theme toggle, user avatar dropdown
-4. Collapsible sidebar with nav groups, icons, badges, active states, collapse/expand button
-5. Responsive layout with hamburger button at small breakpoints, sidebar hidden by default at mobile
-6. Light/dark theme matching the reference design
-7. Mosaic logo icon as global loading spinner
-8. Shared component updates in packages/ui (Card, Badge, Button, Dot, MetricsStrip, ProgressBar, FilterTabs, SectionHeader, Table, LogLine, Terminal panel)
-9. Dashboard page: metrics strip, active orchestrator sessions, quick actions, activity feed, token budget
-10. Grain overlay texture from reference design
+This is the active mission scope. MS16 (Pages) and MS17 (Backend Integration) are combined because the backend API modules already exist — the work is primarily frontend page creation and API wiring.
+
+1. Projects list page with CRUD (wire to existing `/api/projects`)
+2. Project workspace/detail page (wire to `/api/projects/:id`, `/api/tasks`, `/api/runner-jobs`)
+3. Kanban board page with status-based columns (wire to existing `/api/tasks`)
+4. File Manager page with tree/list view and CRUD (wire to existing `/api/knowledge`)
+5. Logs & Telemetry page with log viewer and filtering (wire to `/api/runner-jobs`, job steps, events)
+6. Settings root/index page linking to existing subpages
+7. Custom 404 page for unknown routes
+8. Wire `/tasks` page to real API data (currently mock)
+9. Wire `/calendar` page to real API data (currently mock)
+10. Wire `/knowledge` pages to real API data (currently mock)
 
 ### In Scope (Future Milestones — Documented for Planning)
 
-11. Additional pages: Projects, Workspace, Kanban, File Manager, Logs & Telemetry, Settings, Profile
-12. Theme system with installable theme packages
-13. Widget system with installable widget packages, customizable sizes
-14. Global terminal (project/orchestrator level, smart)
-15. Project-level orchestrator chat
-16. Master chat session (collapsible sidebar/slideout, always available)
-17. Settings page for ALL environment variables, dynamically configurable via webUI
-18. Multi-tenant configuration with admin user management
-19. Team management with shared data spaces and chat rooms
-20. RBAC for file access, resources, models
-21. Federation: master-master and master-slave with key exchange
-22. Federation testing: 3 instances on Coolify (woltje.com domain)
-23. Agent task mapping configuration (system-level defaults, user-level overrides)
-24. Telemetry: opt-out, customizable endpoint, sanitized data
-25. File manager with WYSIWYG editing (system/user/project levels)
-26. User-level and project-level Kanban with filtering
-27. Break-glass authentication user
-28. Playwright E2E tests for all pages
-29. API documentation via Swagger
-30. Backend endpoints for all dashboard data
+11. Theme system with installable theme packages (MS18)
+12. Widget system with installable widget packages, customizable sizes (MS18)
+13. Global terminal: project/orchestrator level, smart (MS19)
+14. Project-level orchestrator chat (MS19)
+15. Master chat session: collapsible sidebar/slideout, always available (MS19)
+16. Settings page for ALL environment variables, dynamically configurable via webUI (MS20)
+17. Multi-tenant configuration with admin user management (MS20)
+18. Team management with shared data spaces and chat rooms (MS20)
+19. RBAC for file access, resources, models (MS20)
+20. Federation: master-master and master-slave with key exchange (MS21)
+21. Federation testing: 3 instances on Coolify (woltje.com domain) (MS21)
+22. Agent task mapping configuration: system-level defaults, user-level overrides (MS22)
+23. Telemetry: opt-out, customizable endpoint, sanitized data (MS22)
+24. File manager with WYSIWYG editing: system/user/project levels (MS18)
+25. User-level and project-level Kanban with filtering (MS18)
+26. Break-glass authentication user (MS20)
+27. Playwright E2E tests for all pages (MS23)
+28. API documentation via Swagger (MS23)
+29. Backend endpoints for all dashboard data (MS17 — already complete for existing modules)
+30. Profile page linked from user card (MS16)
 
 ### Out of Scope
 
@@ -74,7 +105,7 @@ The Mosaic Stack web UI has a basic navigation and simple widget-based dashboard
 1. The `jarvis` user must be able to log into mosaic.woltje.com via Authentik as administrator with access to all pages
 2. A standard `jarvis-user` must operate at a lower permission level
 3. A break-glass user must have access without Authentik authentication
-4. All pages must be navigable without errors
+4. All pages must be navigable without errors (no 404s from sidebar links)
 5. Light and dark themes must work across all pages and components
 6. Sidebar must be collapsible with open/close button; hidden by default at small breakpoints
 7. Hamburger button visible at lower breakpoints for sidebar control
@@ -89,12 +120,14 @@ The Mosaic Stack web UI has a basic navigation and simple widget-based dashboard
 - Dark theme as default (`:root`), light theme via `[data-theme="light"]`
 - Fonts: Outfit (body), Fira Code (monospace)
 - All components must use design tokens, never hardcoded colors
+- **Status: COMPLETE (MS15)**
 
 ### FR-002: App Shell Layout
 
 - CSS Grid: sidebar column + header row + main content
 - Full-width header spanning above sidebar and content
 - ASSUMPTION: Header spans full width including above sidebar area. The logo is in the header, not the sidebar. Rationale: User explicitly stated "The logo will NOT be part of the sidebar."
+- **Status: COMPLETE (MS15)**
 
 ### FR-003: Sidebar Navigation
 
@@ -103,6 +136,7 @@ The Mosaic Stack web UI has a basic navigation and simple widget-based dashboard
 - Active state indicator (left border accent)
 - User card in footer with avatar, name, role, online status
 - ASSUMPTION: Sidebar footer user card navigates to Profile page. Rationale: Matches reference design behavior.
+- **Status: COMPLETE (MS15+MS16) — Profile page added in PR #482.**
 
 ### FR-004: Header/Topbar
 
@@ -113,6 +147,7 @@ The Mosaic Stack web UI has a basic navigation and simple widget-based dashboard
 - Notification bell with badge
 - Theme toggle (sun/moon icon)
 - User avatar button with dropdown (Profile, Account Settings, Sign Out)
+- **Status: COMPLETE (MS15)**
 
 ### FR-005: Responsive Design
 
@@ -120,6 +155,7 @@ The Mosaic Stack web UI has a basic navigation and simple widget-based dashboard
 - Below md: sidebar hidden, hamburger button in header
 - md-lg: sidebar can be toggled
 - lg+: sidebar visible by default
+- **Status: COMPLETE (MS15)**
 
 ### FR-006: Dashboard Page
 
@@ -128,28 +164,98 @@ The Mosaic Stack web UI has a basic navigation and simple widget-based dashboard
 - Quick Actions 2x2 grid
 - Activity Feed sidebar card
 - Token Budget sidebar card with progress bars
+- Wired to real API via `/api/dashboard/summary`
+- **Status: COMPLETE (Go-Live MVP)**
 
 ### FR-007: Loading Spinner
 
 - Mosaic logo icon (4 corner squares + center circle) with CSS rotation animation
 - Used as global loading indicator across all pages
 - Available as a shared component
+- **Status: COMPLETE (MS15)**
 
-### FR-008: Theme System (Future Milestone)
+### FR-008: Projects Page (MS16)
+
+- Projects list view with card or table layout
+- Project creation dialog/form
+- Project detail view (name, description, status, created/updated timestamps)
+- Wire to existing `/api/projects` (full CRUD already implemented)
+- Navigate from sidebar → /projects
+- **Status: COMPLETE (MS16) — PR #477. Card layout, create/delete dialogs, status badges.**
+
+### FR-009: Project Workspace Page (MS16)
+
+- Single-project view showing tasks, agent sessions, and project settings
+- Task list for selected project
+- Agent session history and status
+- Wire to `/api/projects/:id`, `/api/tasks`, `/api/runner-jobs`
+- Navigate from sidebar → /workspace (with project context)
+- **Status: COMPLETE (MS16) — PR #479. Tabbed view (Tasks, Agent Sessions, Settings), project selector mode.**
+
+### FR-010: Kanban Board Page (MS16)
+
+- Drag-and-drop board with columns mapped to task status values
+- Task cards showing title, assignee, priority, status
+- Column headers with task counts
+- Wire to existing `/api/tasks` (status field drives columns)
+- Navigate from sidebar → /kanban
+- **Status: COMPLETE (MS16) — PR #478. 5 columns (NOT_STARTED→ARCHIVED), @hello-pangea/dnd, optimistic updates.**
+
+### FR-011: File Manager Page (MS16)
+
+- Tree or list view of knowledge entries
+- CRUD operations (create, read, update, delete)
+- Search functionality
+- Wire to existing `/api/knowledge` (full CRUD + search already implemented)
+- Navigate from sidebar → /files
+- **Status: COMPLETE (MS16) — PR #481. List+grid views, search, create/delete dialogs.**
+
+### FR-012: Logs & Telemetry Page (MS16)
+
+- Log viewer with timestamp, level, source, message columns
+- Filtering by level, source, date range
+- Auto-refresh for live logs
+- Wire to existing runner-jobs, job steps, and events APIs
+- Navigate from sidebar → /logs
+- **Status: COMPLETE (MS16) — PR #480. Auto-refresh (5s polling), expandable rows, filters.**
+
+### FR-013: Settings Root Page (MS16)
+
+- Landing/index page for settings
+- Category cards linking to existing subpages: Credentials, Domains, Personalities, Workspaces
+- Navigate from sidebar → /settings (currently 404; subpages exist)
+- **Status: COMPLETE (MS16) — PR #471. 4 category cards with icons and hover states.**
+
+### FR-014: Custom 404 Page (MS16)
+
+- Branded 404 page matching design system
+- Helpful message and navigation link back to dashboard
+- Applied to all unmatched routes within authenticated layout
+- **Status: COMPLETE (MS16) — PR #472. Global + authenticated route-group 404 pages.**
+
+### FR-015: Mock Data Elimination (MS16+MS17)
+
+- `/tasks` page: replace mock data with `/api/tasks` calls
+- `/calendar` page: replace mock data with `/api/events` calls
+- `/knowledge` pages: replace mock data with `/api/knowledge` calls
+- All pages must render real data from backend APIs
+- **Status: COMPLETE (MS16+MS17) — PRs #473-#476. 238+ lines of mock data removed.**
+
+### FR-016: Theme System (Future — MS18)
 
 - Support multiple themes beyond default dark/light
 - Themes are installable packages from Mosaic Stack repo
 - Theme installation and selection from Settings page
 - ASSUMPTION: Initial implementation supports dark/light from reference design. Multi-theme package system is a future milestone. Rationale: Foundation must be solid before extensibility.
 
-### FR-009: Terminal Panel (Future Milestone)
+### FR-017: Terminal Panel (Future — MS19)
 
 - Bottom drawer panel, toggleable from header and sidebar
 - Multiple tabs (Orchestrator, Shell, Build)
 - Smart terminal operating at project/orchestrator level
 - Global terminal for system interaction
 
-### FR-010: Settings Page (Future Milestone)
+### FR-018: Settings Configuration (Future — MS20)
 
 - All environment variables configurable via UI
 - Minimal launch env vars, rest configurable dynamically
@@ -165,30 +271,54 @@ The Mosaic Stack web UI has a basic navigation and simple widget-based dashboard
 
 ## Acceptance Criteria
 
-### Milestone 0.0.15
+### MS15-DashboardShell — COMPLETE
 
-1. Design tokens from dashboard.html are implemented in globals.css
-2. App shell shows full-width header with logo, collapsible sidebar, main content area
-3. Sidebar has all nav groups with icons, collapses to icon-only mode
-4. Hamburger button appears at mobile breakpoints, sidebar hidden by default
-5. Light/dark theme toggle works across all components
-6. Mosaic logo spinner is used as site-wide loading indicator
-7. Dashboard page shows metrics strip, orchestrator sessions, quick actions, activity feed, token budget
-8. All shared components in packages/ui use design tokens (no hardcoded colors)
-9. Lint, typecheck, and existing tests pass
-10. Grain overlay texture from reference is applied
+1. ~~Design tokens from dashboard.html are implemented in globals.css~~ DONE
+2. ~~App shell shows full-width header with logo, collapsible sidebar, main content area~~ DONE
+3. ~~Sidebar has all nav groups with icons, collapses to icon-only mode~~ DONE
+4. ~~Hamburger button appears at mobile breakpoints, sidebar hidden by default~~ DONE
+5. ~~Light/dark theme toggle works across all components~~ DONE
+6. ~~Mosaic logo spinner is used as site-wide loading indicator~~ DONE
+7. ~~Dashboard page shows metrics strip, orchestrator sessions, quick actions, activity feed, token budget~~ DONE
+8. ~~All shared components in packages/ui use design tokens (no hardcoded colors)~~ DONE
+9. ~~Lint, typecheck, and existing tests pass~~ DONE
+10. ~~Grain overlay texture from reference is applied~~ DONE
+
+### Go-Live MVP (v0.1.0) — COMPLETE
+
+11. ~~Dashboard widgets wired to real API data~~ DONE
+12. ~~WebSocket emits for agent job lifecycle~~ DONE
+13. ~~Deployed to mosaic.woltje.com with auth working~~ DONE
+
+### MS16+MS17 — Pages & Data Integration
+
+14. All sidebar links navigate to functional pages (no 404s)
+15. Projects page: list, create, view project details
+16. Workspace page: view single project with tasks and agent sessions
+17. Kanban page: drag-and-drop board with task status columns
+18. File Manager page: tree/list view with CRUD operations
+19. Logs page: log viewer with filtering and auto-refresh
+20. Settings root page: category index linking to subpages
+21. Custom 404 page for unknown routes
+22. `/tasks` page uses real API data (no mock)
+23. `/calendar` page uses real API data (no mock)
+24. `/knowledge` pages use real API data (no mock)
+25. All new pages support light/dark theme
+26. All new pages are responsive (sm/md/lg/xl breakpoints)
+27. Lint, typecheck, and tests pass
+28. Deployed and smoke-tested at mosaic.woltje.com
 
 ### Full Project (All Milestones)
 
-11. jarvis user logs in via Authentik, has admin access to all pages
-12. jarvis-user has standard access at lower permission level
-13. Break-glass user has access without Authentik
-14. Three Mosaic Stack instances on Coolify with federation testing
-15. Playwright tests confirm all pages, functions, theming work
-16. No errors during site navigation
-17. API documented via Swagger with proper auth gating
-18. Telemetry working locally with wide-event logging
-19. Mosaic Telemetry properly reporting to telemetry endpoint
+29. jarvis user logs in via Authentik, has admin access to all pages
+30. jarvis-user has standard access at lower permission level
+31. Break-glass user has access without Authentik
+32. Three Mosaic Stack instances on Coolify with federation testing
+33. Playwright tests confirm all pages, functions, theming work
+34. No errors during site navigation
+35. API documented via Swagger with proper auth gating
+36. Telemetry working locally with wide-event logging
+37. Mosaic Telemetry properly reporting to telemetry endpoint
 
 ## Constraints and Dependencies
 
@@ -199,35 +329,72 @@ The Mosaic Stack web UI has a basic navigation and simple widget-based dashboard
 5. PostgreSQL 17 with Prisma — all settings stored in DB
 6. Coolify for deployment — 3 instances needed for federation testing
 7. packages/ui is shared across apps — changes affect all consumers
+8. Backend API modules already exist for all page data needs — no new API endpoints required for MS16+MS17 scope
 
 ## Risks and Open Questions
 
-1. **Risk**: Changing globals.css design tokens may break existing pages (login, knowledge, calendar). Mitigation: Thorough regression testing.
-2. **Risk**: packages/ui uses hardcoded Tailwind colors — migration to CSS variables needs care. Mitigation: Phase the migration, test each component.
-3. **Open**: Exact federation protocol details for master-master vs master-slave data sync.
-4. **Open**: Specific telemetry data points to collect.
-5. **Open**: Agent task mapping configuration schema (informed by OpenClaw research).
+1. **Risk**: Pages need to match the design system established in MS15. Inconsistency would degrade UX. Mitigation: Use existing design tokens and shared components exclusively.
+2. **Risk**: Kanban drag-and-drop adds complexity and potential for state bugs. Mitigation: Use a proven DnD library (dnd-kit or react-beautiful-dnd), test edge cases.
+3. **Risk**: Mock data elimination may reveal backend API gaps or mismatches. Mitigation: Audit each API response shape against page needs during implementation.
+4. **Open**: Exact task status values for Kanban columns (need to check Prisma schema enum).
+5. **Open**: Whether Workspace page should require project selection or show a default view.
+6. **Open**: File Manager page — should it be a direct mapping of Knowledge entries or a separate file abstraction?
+
+## Existing Backend API Modules (Reference)
+
+These 19 NestJS modules are already implemented with Prisma and available for frontend wiring:
+
+| Module             | Endpoint                       | Capabilities          |
+| ------------------ | ------------------------------ | --------------------- |
+| Projects           | `/api/projects`                | Full CRUD             |
+| Tasks              | `/api/tasks`                   | Full CRUD             |
+| Layouts            | `/api/layouts`                 | Widget placement      |
+| Widgets            | `/api/widgets`                 | Data endpoints        |
+| Activity           | `/api/activity`                | Audit logs            |
+| Dashboard          | `/api/dashboard/summary`       | Aggregated summary    |
+| Knowledge          | `/api/knowledge`               | Full CRUD + search    |
+| Ideas              | `/api/ideas`                   | Capture/CRUD          |
+| Domains            | `/api/domains`                 | CRUD                  |
+| Events             | `/api/events`                  | CRUD                  |
+| Preferences        | `/api/users/me/preferences`    | User settings         |
+| Workspace Settings | `/api/workspaces/:id/settings` | LLM config            |
+| Runner Jobs        | `/api/runner-jobs`             | Job management        |
+| Job Steps          | `/api/runner-jobs/:id/steps`   | Step tracking         |
+| Agent Tasks        | `/api/agent-tasks`             | Agent task management |
+| Credentials        | `/api/credentials`             | Encrypted storage     |
+| Brain/AI           | `/api/brain`                   | Query/search          |
+| WebSocket          | Real-time                      | Event broadcasting    |
+| Telemetry          | Internal                       | Logging/monitoring    |
 
 ## Testing and Verification
 
 1. Baseline: `pnpm lint && pnpm build` must pass
-2. Situational: Visual verification at sm/md/lg/xl breakpoints
-3. Situational: Theme toggle across all pages
-4. Situational: Sidebar collapse/expand at all breakpoints
-5. E2E: Playwright tests for all page navigation
-6. E2E: Auth flow with Authentik
-7. Federation: Master-master and master-slave data access tests
+2. Situational: All sidebar links navigate without 404
+3. Situational: Each new page renders with real API data
+4. Situational: Theme toggle on each new page
+5. Situational: Responsive verification at sm/md/lg/xl
+6. E2E: Playwright tests for all page navigation (MS23)
+7. E2E: Auth flow with Authentik (MS23)
+8. Federation: Master-master and master-slave data access tests (MS21)
 
 ## Delivery/Milestone Intent
 
-| Milestone               | Version | Focus                                                             |
-| ----------------------- | ------- | ----------------------------------------------------------------- |
-| MS15-DashboardShell     | 0.0.15  | Design system + app shell + dashboard page                        |
-| MS16-Pages              | 0.0.16  | Projects, Workspace, Kanban, Settings, Profile, Files, Logs pages |
-| MS17-BackendIntegration | 0.0.17  | API endpoints, real data, Swagger docs                            |
-| MS18-ThemeWidgets       | 0.0.18  | Theme package system, widget registry, dashboard customization    |
-| MS19-ChatTerminal       | 0.0.19  | Global terminal, project chat, master chat session                |
-| MS20-MultiTenant        | 0.0.20  | Multi-tenant, teams, RBAC, RLS enforcement, break-glass auth      |
-| MS21-Federation         | 0.0.21  | Federation (M-M, M-S), 3 instances, key exchange, data separation |
-| MS22-AgentTelemetry     | 0.0.22  | Agent task mapping, telemetry, wide-event logging                 |
-| MS23-Testing            | 0.0.23  | Playwright E2E, federation tests, documentation finalization      |
+| Milestone                      | Version | Focus                                                             | Status      |
+| ------------------------------ | ------- | ----------------------------------------------------------------- | ----------- |
+| MS15-DashboardShell            | 0.0.15  | Design system + app shell + dashboard page                        | COMPLETE    |
+| Go-Live MVP                    | 0.1.0   | Dashboard polish, ingestion, agent visibility, deploy             | COMPLETE    |
+| MS16+MS17-PagesDataIntegration | 0.2.0   | All pages built + wired to real API data                          | IN PROGRESS |
+| MS18-ThemeWidgets              | 0.3.0   | Theme package system, widget registry, dashboard customization    | NOT STARTED |
+| MS19-ChatTerminal              | 0.4.0   | Global terminal, project chat, master chat session                | NOT STARTED |
+| MS20-MultiTenant               | 0.5.0   | Multi-tenant, teams, RBAC, RLS enforcement, break-glass auth      | NOT STARTED |
+| MS21-Federation                | 0.6.0   | Federation (M-M, M-S), 3 instances, key exchange, data separation | NOT STARTED |
+| MS22-AgentTelemetry            | 0.7.0   | Agent task mapping, telemetry, wide-event logging                 | NOT STARTED |
+| MS23-Testing                   | 0.8.0   | Playwright E2E, federation tests, documentation finalization      | NOT STARTED |
+
+## Assumptions
+
+1. ASSUMPTION: Header spans full width including above sidebar area. The logo is in the header, not the sidebar. Rationale: User explicitly stated "The logo will NOT be part of the sidebar."
+2. ASSUMPTION: Sidebar footer user card navigates to Profile page. Rationale: Matches reference design behavior.
+3. ASSUMPTION: Initial implementation supports dark/light from reference design. Multi-theme package system is a future milestone. Rationale: Foundation must be solid before extensibility.
+4. ASSUMPTION: MS16 and MS17 are combined into a single mission because 19 backend API modules already exist with real Prisma business logic. The remaining work is primarily frontend page creation and API wiring. Rationale: Backend audit on 2026-02-22 confirmed all required endpoints are implemented.
+5. ASSUMPTION: File Manager page maps to Knowledge entries rather than a separate file system abstraction. Rationale: `/api/knowledge` provides full CRUD + search which matches file manager needs. Can be extended later if needed.