From 472f046a85d9ec06424a5b910f333f2b19cbe223 Mon Sep 17 00:00:00 2001 From: Jason Woltje Date: Mon, 23 Mar 2026 01:29:05 +0000 Subject: [PATCH] =?UTF-8?q?chore:=20Harness=20Foundation=20mission=20COMPL?= =?UTF-8?q?ETE=20=E2=80=94=20v0.2.0=20(#327)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Jason Woltje Co-committed-by: Jason Woltje --- docs/MISSION-MANIFEST.md | 58 +++++++------- docs/PRD-Harness_Foundation.md | 2 +- docs/TASKS.md | 135 ++++++++++++++++----------------- 3 files changed, 97 insertions(+), 98 deletions(-) diff --git a/docs/MISSION-MANIFEST.md b/docs/MISSION-MANIFEST.md index cd21ea3..bc190cf 100644 --- a/docs/MISSION-MANIFEST.md +++ b/docs/MISSION-MANIFEST.md @@ -7,36 +7,36 @@ **ID:** harness-20260321 **Statement:** Transform Mosaic Stack from a functional demo into a real multi-provider, task-routing AI harness. Persist all conversations, integrate frontier LLM providers (Anthropic, OpenAI, OpenRouter, Z.ai, Ollama), build granular task-aware agent routing, harden agent sessions, replace cron with BullMQ, and design the channel protocol for future Matrix/remote integration. -**Phase:** Execution -**Current Milestone:** M3: Provider Integration -**Progress:** 2 / 7 milestones -**Status:** active -**Last Updated:** 2026-03-21 UTC +**Phase:** Complete +**Current Milestone:** All milestones done +**Progress:** 7 / 7 milestones +**Status:** complete +**Last Updated:** 2026-03-22 UTC ## Success Criteria -- [ ] AC-1: Send messages in TUI → restart TUI → resume conversation → agent has full history and context -- [ ] AC-2: Route a coding task to Claude Opus 4.6, a simple question to Haiku, a summarization to GLM-5 — all via granular routing rules -- [ ] AC-3: Two users exist, User A's memory searches never return User B's data -- [ ] AC-4: `/model claude-sonnet-4-6` in TUI switches the active model for subsequent messages -- [ ] AC-5: `/agent coding-agent` in TUI switches to a different agent with different system prompt and tools -- [ ] AC-6: BullMQ jobs execute on schedule, failures retry with backoff, admin can inspect via `/api/admin/jobs` -- [ ] AC-7: Channel protocol document exists with Matrix integration points defined, reviewed, and approved -- [ ] AC-8: Embeddings run on Ollama local models (no external API dependency for vector operations) -- [ ] AC-9: All five providers (Anthropic, OpenAI, OpenRouter, Z.ai, Ollama) connect, list models, and complete chat requests -- [ ] AC-10: Routing transparency — TUI displays which model was selected and the routing reason for each response +- [x] AC-1: Send messages in TUI → restart TUI → resume conversation → agent has full history and context +- [x] AC-2: Route a coding task to Claude Opus 4.6, a simple question to Haiku, a summarization to GLM-5 — all via granular routing rules +- [x] AC-3: Two users exist, User A's memory searches never return User B's data +- [x] AC-4: `/model claude-sonnet-4-6` in TUI switches the active model for subsequent messages +- [x] AC-5: `/agent coding-agent` in TUI switches to a different agent with different system prompt and tools +- [x] AC-6: BullMQ jobs execute on schedule, failures retry with backoff, admin can inspect via `/api/admin/jobs` +- [x] AC-7: Channel protocol document exists with Matrix integration points defined, reviewed, and approved +- [x] AC-8: Embeddings run on Ollama local models (no external API dependency for vector operations) +- [x] AC-9: All five providers (Anthropic, OpenAI, OpenRouter, Z.ai, Ollama) connect, list models, and complete chat requests +- [x] AC-10: Routing transparency — TUI displays which model was selected and the routing reason for each response ## Milestones -| # | ID | Name | Status | Branch | Issue | Started | Completed | -| --- | ------ | ---------------------------------- | ----------- | ------ | --------- | ---------- | ---------- | -| 1 | ms-166 | Conversation Persistence & Context | done | — | #224–#231 | 2026-03-21 | 2026-03-21 | -| 2 | ms-167 | Security & Isolation | done | — | #232–#239 | 2026-03-21 | 2026-03-21 | -| 3 | ms-168 | Provider Integration | in-progress | — | #240–#251 | 2026-03-21 | — | -| 4 | ms-169 | Agent Routing Engine | not-started | — | #252–#264 | — | — | -| 5 | ms-170 | Agent Session Hardening | not-started | — | #265–#272 | — | — | -| 6 | ms-171 | Job Queue Foundation | not-started | — | #273–#280 | — | — | -| 7 | ms-172 | Channel Protocol Design | not-started | — | #281–#288 | — | — | +| # | ID | Name | Status | Branch | Issue | Started | Completed | +| --- | ------ | ---------------------------------- | ------ | ------ | --------- | ---------- | ---------- | +| 1 | ms-166 | Conversation Persistence & Context | done | — | #224–#231 | 2026-03-21 | 2026-03-21 | +| 2 | ms-167 | Security & Isolation | done | — | #232–#239 | 2026-03-21 | 2026-03-21 | +| 3 | ms-168 | Provider Integration | done | — | #240–#251 | 2026-03-21 | 2026-03-22 | +| 4 | ms-169 | Agent Routing Engine | done | — | #252–#264 | 2026-03-22 | 2026-03-22 | +| 5 | ms-170 | Agent Session Hardening | done | — | #265–#272 | 2026-03-22 | 2026-03-22 | +| 6 | ms-171 | Job Queue Foundation | done | — | #273–#280 | 2026-03-22 | 2026-03-22 | +| 7 | ms-172 | Channel Protocol Design | done | — | #281–#288 | 2026-03-22 | 2026-03-22 | ## Deployment @@ -48,7 +48,7 @@ ## Coordination - **Primary Agent:** claude-opus-4-6 -- **Sibling Agents:** codex (for pure coding tasks), sonnet (for review/standard work) +- **Sibling Agents:** sonnet (workers), haiku (verification) - **Shared Contracts:** docs/PRD-Harness_Foundation.md, docs/TASKS.md ## Token Budget @@ -56,14 +56,14 @@ | Metric | Value | | ------ | ------ | | Budget | — | -| Used | 0 | +| Used | ~2.5M | | Mode | normal | ## Session History -| Session | Runtime | Started | Duration | Ended Reason | Last Task | -| ------- | --------------- | ---------- | -------- | ------------ | ------------- | -| 1 | claude-opus-4-6 | 2026-03-21 | — | — | Planning gate | +| Session | Runtime | Started | Duration | Ended Reason | Last Task | +| ------- | --------------- | ---------- | -------- | ------------ | ----------------- | +| 1 | claude-opus-4-6 | 2026-03-21 | ~6h | complete | M7-008 — all done | ## Scratchpad diff --git a/docs/PRD-Harness_Foundation.md b/docs/PRD-Harness_Foundation.md index 36f6338..8b3754b 100644 --- a/docs/PRD-Harness_Foundation.md +++ b/docs/PRD-Harness_Foundation.md @@ -4,7 +4,7 @@ - **Owner:** Jason Woltje - **Date:** 2026-03-21 -- **Status:** draft +- **Status:** completed - **Phase:** 9 (post-MVP) - **Version Target:** v0.2.0 - **Agent Harness:** [Pi SDK](https://github.com/badlogic/pi-mono) diff --git a/docs/TASKS.md b/docs/TASKS.md index e78802b..b246f9e 100644 --- a/docs/TASKS.md +++ b/docs/TASKS.md @@ -3,72 +3,71 @@ > Single-writer: orchestrator only. Workers read but never modify. > > **`agent` column values:** `codex` | `sonnet` | `haiku` | `glm-5` | `opus` | `—` (auto/default) -> Pipeline crons pick the cheapest capable model. Override with a specific value when a task genuinely needs it. -| id | status | agent | milestone | description | pr | notes | -| ------ | ----------- | ------ | ------------------ | --------------------------------------------------------------------------------------------------------------- | ---- | ------------------------------------------------ | -| M1-001 | done | sonnet | M1: Persistence | Wire ChatGateway.handleMessage() → ConversationsRepo.addMessage() for user messages | #292 | #224 closed | -| M1-002 | done | sonnet | M1: Persistence | Wire agent event relay → ConversationsRepo.addMessage() for assistant responses (text, tool calls, thinking) | #292 | #225 closed | -| M1-003 | done | sonnet | M1: Persistence | Store message metadata: model used, provider, token counts, tool call details, timestamps | #292 | #226 closed | -| M1-004 | done | sonnet | M1: Persistence | On session resume, load message history from DB and inject into Pi session context | #301 | #227 closed | -| M1-005 | done | sonnet | M1: Persistence | Context window management: summarize older messages when history exceeds 80% of model context | #301 | #228 closed | -| M1-006 | done | sonnet | M1: Persistence | Conversation search: full-text search on messages table via /api/conversations/search | #299 | #229 closed | -| M1-007 | done | sonnet | M1: Persistence | TUI: /history command to display conversation message count and context usage | #297 | #230 closed | -| M1-008 | done | sonnet | M1: Persistence | Verify: send messages → kill TUI → resume with -c → agent references prior context | #304 | #231 closed — 20 integration tests | -| M2-001 | done | sonnet | M2: Security | Audit InsightsRepo: add userId filter to searchByEmbedding() vector search | #290 | #232 closed | -| M2-002 | done | sonnet | M2: Security | Audit InsightsRepo: add userId filter to findByUser(), decayOldInsights() | #290 | #233 closed | -| M2-003 | done | sonnet | M2: Security | Audit PreferencesRepo: verify all queries filter by userId | #294 | #234 closed — already scoped | -| M2-004 | done | sonnet | M2: Security | Audit agent memory tools: verify memory*search, memory_save*_, memory*get*_ scope to session user | #294 | #235 closed — FIXED userId injection | -| M2-005 | done | sonnet | M2: Security | Audit ConversationsRepo: verify ownership check on findById, update, delete, addMessage, findMessages | #293 | #236 closed | -| M2-006 | done | sonnet | M2: Security | Audit AgentsRepo: verify findAccessible() returns only user's agents + system agents | #293 | #237 closed | -| M2-007 | done | sonnet | M2: Security | Integration test: create two users, populate data, verify cross-user isolation on every query path | #305 | #238 closed — 28 integration tests | -| M2-008 | done | sonnet | M2: Security | Audit Valkey keys: verify session keys include userId or are not enumerable across users | #298 | #239 closed — SCAN replaces KEYS, /gc admin-only | -| M3-001 | done | sonnet | M3: Providers | Refactor ProviderService into IProviderAdapter pattern: register(), listModels(), healthCheck(), createClient() | #306 | #240 closed | -| M3-002 | done | sonnet | M3: Providers | Anthropic adapter: @anthropic-ai/sdk, Claude Sonnet 4.6 + Opus 4.6 + Haiku 4.5, OAuth + API key | #309 | #241 closed | -| M3-003 | done | sonnet | M3: Providers | OpenAI adapter: openai SDK, Codex gpt-5.4, OAuth + API key | #310 | #242 closed | -| M3-004 | done | sonnet | M3: Providers | OpenRouter adapter: OpenAI-compatible client, API key, dynamic model list from /api/v1/models | #311 | #243 closed | -| M3-005 | in-progress | sonnet | M3: Providers | Z.ai GLM adapter: GLM-5, API key, research API format | — | #244 | -| M3-006 | done | sonnet | M3: Providers | Ollama adapter: refactor existing integration into adapter pattern, add embedding model support | #311 | #245 closed | -| M3-007 | done | sonnet | M3: Providers | Provider health check: periodic probe, configurable interval, status per provider, /api/providers/health | #308 | #246 closed | -| M3-008 | done | sonnet | M3: Providers | Model capability matrix: per-model metadata (tier, context window, tool support, vision, streaming, embedding) | #303 | #247 closed | -| M3-009 | done | sonnet | M3: Providers | Refactor EmbeddingService: provider-agnostic interface, Ollama default (nomic-embed-text or mxbai-embed-large) | #308 | #248 closed | -| M3-010 | in-progress | sonnet | M3: Providers | OAuth token storage: persist provider tokens per user in DB (encrypted), refresh flow | — | #249 | -| M3-011 | in-progress | sonnet | M3: Providers | Provider config UI support: /api/providers CRUD for user-scoped provider credentials | — | #250 | -| M3-012 | not-started | haiku | M3: Providers | Verify: each provider connects, lists models, completes chat request, handles errors | — | #251 | -| M4-001 | in-progress | sonnet | M4: Routing | Define routing rule schema: RoutingRule { name, priority, conditions[], action } stored in DB | — | #252 DB migration | -| M4-002 | in-progress | sonnet | M4: Routing | Condition types: taskType, complexity, domain, costTier, requiredCapabilities | — | #253 | -| M4-003 | in-progress | sonnet | M4: Routing | Action types: routeTo { provider, model, agentConfigId?, systemPromptOverride?, toolAllowlist? } | — | #254 | -| M4-004 | in-progress | sonnet | M4: Routing | Default routing rules seed data: coding→Opus, Q&A→Sonnet, summarization→GLM-5, research→Codex, offline→Ollama | — | #255 | -| M4-005 | in-progress | sonnet | M4: Routing | Task classification: infer taskType + complexity from user message (regex/keyword first, LLM-assisted later) | — | #256 | -| M4-006 | not-started | opus | M4: Routing | Routing decision pipeline: classify → match rules → check health → fallback chain → return result | — | #257 | -| M4-007 | not-started | sonnet | M4: Routing | Routing override: /model forces specific model regardless of routing rules | — | #258 | -| M4-008 | not-started | sonnet | M4: Routing | Routing transparency: include routing decision in session:info event (model + reason) | — | #259 | -| M4-009 | not-started | sonnet | M4: Routing | Routing rules CRUD: /api/routing/rules — list, create, update, delete, reorder priority | — | #260 | -| M4-010 | not-started | sonnet | M4: Routing | Per-user routing overrides: users customize default rules for their sessions | — | #261 | -| M4-011 | not-started | sonnet | M4: Routing | Agent specialization: agents declare capabilities in config (domains, preferred models, tool sets) | — | #262 | -| M4-012 | not-started | sonnet | M4: Routing | Routing integration: wire into ChatGateway — every message triggers routing before agent dispatch | — | #263 | -| M4-013 | not-started | haiku | M4: Routing | Verify: coding→Opus, summarize→GLM-5, simple→Haiku, override via /model works | — | #264 | -| M5-001 | not-started | sonnet | M5: Sessions | Wire ChatGateway: on session create, load agent config from DB (system prompt, model, provider, tools, skills) | — | #265 | -| M5-002 | not-started | sonnet | M5: Sessions | /model command: end-to-end wiring — TUI → socket → gateway switches provider/model → new messages use it | — | #266 | -| M5-003 | not-started | sonnet | M5: Sessions | /agent command: switch agent config mid-session — loads new system prompt, tools, default model | — | #267 | -| M5-004 | not-started | sonnet | M5: Sessions | Session ↔ conversation binding: persist sessionId on conversation record, resume via conversationId | — | #268 | -| M5-005 | not-started | sonnet | M5: Sessions | Session info broadcast: on model/agent switch, emit session:info with updated state | — | #269 | -| M5-006 | not-started | sonnet | M5: Sessions | Agent creation from TUI: /agent new command creates agent config via gateway API | — | #270 | -| M5-007 | not-started | sonnet | M5: Sessions | Session metrics: per-session token usage, model switches, duration — persist in DB | — | #271 | -| M5-008 | not-started | haiku | M5: Sessions | Verify: /model switches model, /agent switches agent, session resume loads config | — | #272 | -| M6-001 | not-started | sonnet | M6: Jobs | Add BullMQ dependency, configure with Valkey connection | — | #273 Test compat first | -| M6-002 | not-started | sonnet | M6: Jobs | Create queue service: typed job definitions, worker registration, error handling with exponential backoff | — | #274 | -| M6-003 | not-started | sonnet | M6: Jobs | Migrate summarization cron → BullMQ repeatable job | — | #275 | -| M6-004 | not-started | sonnet | M6: Jobs | Migrate GC (session cleanup) → BullMQ repeatable job | — | #276 | -| M6-005 | not-started | sonnet | M6: Jobs | Migrate tier management (log archival) → BullMQ repeatable job | — | #277 | -| M6-006 | not-started | sonnet | M6: Jobs | Admin jobs API: GET /api/admin/jobs — list, status, retry, pause/resume queues | — | #278 | -| M6-007 | not-started | sonnet | M6: Jobs | Job event logging: emit job start/complete/fail events to agent_logs | — | #279 | -| M6-008 | not-started | haiku | M6: Jobs | Verify: jobs execute on schedule, failure retries with backoff, admin endpoint shows history | — | #280 | -| M7-001 | not-started | opus | M7: Channel Design | Define IChannelAdapter interface: lifecycle, message flow, identity mapping | — | #281 Architecture | -| M7-002 | not-started | opus | M7: Channel Design | Define channel message protocol: canonical format all adapters translate to/from | — | #282 Architecture | -| M7-003 | not-started | opus | M7: Channel Design | Design Matrix integration: appservice, room↔conversation, space↔team, agent ghosts, power levels | — | #283 Architecture | -| M7-004 | not-started | opus | M7: Channel Design | Design conversation multiplexing: same conversation from TUI+WebUI+Matrix, real-time sync | — | #284 Architecture | -| M7-005 | not-started | opus | M7: Channel Design | Design remote auth bridging: Matrix/Discord auth → Mosaic identity (token linking, OAuth bridge) | — | #285 Architecture | -| M7-006 | not-started | opus | M7: Channel Design | Design agent-to-agent communication via Matrix rooms: room per agent pair, human observation | — | #286 Architecture | -| M7-007 | not-started | opus | M7: Channel Design | Design multi-user isolation in Matrix: space-per-team, room visibility, encryption, admin access | — | #287 Architecture | -| M7-008 | not-started | haiku | M7: Channel Design | Publish docs/architecture/channel-protocol.md — reviewed and approved | — | #288 | +| id | status | agent | milestone | description | pr | notes | +| ------ | ------ | ------ | ------------------ | ------------------------------------------------------------------ | ---- | ----------- | +| M1-001 | done | sonnet | M1: Persistence | Wire ChatGateway → ConversationsRepo for user messages | #292 | #224 closed | +| M1-002 | done | sonnet | M1: Persistence | Wire agent event relay → ConversationsRepo for assistant responses | #292 | #225 closed | +| M1-003 | done | sonnet | M1: Persistence | Store message metadata: model, provider, tokens, tool calls | #292 | #226 closed | +| M1-004 | done | sonnet | M1: Persistence | Load message history into Pi session on resume | #301 | #227 closed | +| M1-005 | done | sonnet | M1: Persistence | Context window management: summarize when >80% | #301 | #228 closed | +| M1-006 | done | sonnet | M1: Persistence | Conversation search endpoint | #299 | #229 closed | +| M1-007 | done | sonnet | M1: Persistence | TUI /history command | #297 | #230 closed | +| M1-008 | done | sonnet | M1: Persistence | Verify persistence — 20 tests | #304 | #231 closed | +| M2-001 | done | sonnet | M2: Security | InsightsRepo userId on searchByEmbedding | #290 | #232 closed | +| M2-002 | done | sonnet | M2: Security | InsightsRepo userId on findByUser/decay | #290 | #233 closed | +| M2-003 | done | sonnet | M2: Security | PreferencesRepo userId verified | #294 | #234 closed | +| M2-004 | done | sonnet | M2: Security | Memory tools userId injection fixed | #294 | #235 closed | +| M2-005 | done | sonnet | M2: Security | ConversationsRepo ownership checks | #293 | #236 closed | +| M2-006 | done | sonnet | M2: Security | AgentsRepo findAccessible scoped | #293 | #237 closed | +| M2-007 | done | sonnet | M2: Security | Cross-user isolation — 28 tests | #305 | #238 closed | +| M2-008 | done | sonnet | M2: Security | Valkey SCAN + /gc admin-only | #298 | #239 closed | +| M3-001 | done | sonnet | M3: Providers | IProviderAdapter + OllamaAdapter | #306 | #240 closed | +| M3-002 | done | sonnet | M3: Providers | AnthropicAdapter | #309 | #241 closed | +| M3-003 | done | sonnet | M3: Providers | OpenAIAdapter | #310 | #242 closed | +| M3-004 | done | sonnet | M3: Providers | OpenRouterAdapter | #311 | #243 closed | +| M3-005 | done | sonnet | M3: Providers | ZaiAdapter (GLM-5) | #314 | #244 closed | +| M3-006 | done | sonnet | M3: Providers | Ollama embedding support | #311 | #245 closed | +| M3-007 | done | sonnet | M3: Providers | Provider health checks | #308 | #246 closed | +| M3-008 | done | sonnet | M3: Providers | Model capability matrix | #303 | #247 closed | +| M3-009 | done | sonnet | M3: Providers | EmbeddingService → Ollama default | #308 | #248 closed | +| M3-010 | done | sonnet | M3: Providers | OAuth token storage (AES-256-GCM) | #317 | #249 closed | +| M3-011 | done | sonnet | M3: Providers | Provider credentials CRUD | #317 | #250 closed | +| M3-012 | done | sonnet | M3: Providers | Verify providers — 40 tests | #319 | #251 closed | +| M4-001 | done | sonnet | M4: Routing | routing_rules DB schema | #315 | #252 closed | +| M4-002 | done | sonnet | M4: Routing | Condition types | #315 | #253 closed | +| M4-003 | done | sonnet | M4: Routing | Action types | #315 | #254 closed | +| M4-004 | done | sonnet | M4: Routing | Default routing rules (11 seeds) | #316 | #255 closed | +| M4-005 | done | sonnet | M4: Routing | Task classifier (60+ tests) | #316 | #256 closed | +| M4-006 | done | sonnet | M4: Routing | Routing decision pipeline | #318 | #257 closed | +| M4-007 | done | sonnet | M4: Routing | /model override | #323 | #258 closed | +| M4-008 | done | sonnet | M4: Routing | Routing transparency in session:info | #323 | #259 closed | +| M4-009 | done | sonnet | M4: Routing | Routing rules CRUD API | #320 | #260 closed | +| M4-010 | done | sonnet | M4: Routing | Per-user routing overrides | #320 | #261 closed | +| M4-011 | done | sonnet | M4: Routing | Agent specialization capabilities | #320 | #262 closed | +| M4-012 | done | sonnet | M4: Routing | Routing wired into ChatGateway | #323 | #263 closed | +| M4-013 | done | sonnet | M4: Routing | Verify routing — 9 E2E tests | #323 | #264 closed | +| M5-001 | done | sonnet | M5: Sessions | Agent config loaded on session create | #323 | #265 closed | +| M5-002 | done | sonnet | M5: Sessions | /model command end-to-end | #323 | #266 closed | +| M5-003 | done | sonnet | M5: Sessions | /agent command mid-session | #323 | #267 closed | +| M5-004 | done | sonnet | M5: Sessions | Session ↔ conversation binding | #321 | #268 closed | +| M5-005 | done | sonnet | M5: Sessions | Session info broadcast | #321 | #269 closed | +| M5-006 | done | sonnet | M5: Sessions | /agent new from TUI | #321 | #270 closed | +| M5-007 | done | sonnet | M5: Sessions | Session metrics | #321 | #271 closed | +| M5-008 | done | sonnet | M5: Sessions | Verify sessions — 28 tests | #324 | #272 closed | +| M6-001 | done | sonnet | M6: Jobs | BullMQ + Valkey config | #324 | #273 closed | +| M6-002 | done | sonnet | M6: Jobs | Queue service with typed jobs | #324 | #274 closed | +| M6-003 | done | sonnet | M6: Jobs | Summarization → BullMQ | #324 | #275 closed | +| M6-004 | done | sonnet | M6: Jobs | GC → BullMQ | #324 | #276 closed | +| M6-005 | done | sonnet | M6: Jobs | Tier management → BullMQ | #324 | #277 closed | +| M6-006 | done | sonnet | M6: Jobs | Admin jobs API | #325 | #278 closed | +| M6-007 | done | sonnet | M6: Jobs | Job event logging | #325 | #279 closed | +| M6-008 | done | sonnet | M6: Jobs | Verify jobs | #324 | #280 closed | +| M7-001 | done | sonnet | M7: Channel Design | IChannelAdapter interface | #325 | #281 closed | +| M7-002 | done | sonnet | M7: Channel Design | Channel message protocol | #325 | #282 closed | +| M7-003 | done | sonnet | M7: Channel Design | Matrix integration design | #326 | #283 closed | +| M7-004 | done | sonnet | M7: Channel Design | Conversation multiplexing | #326 | #284 closed | +| M7-005 | done | sonnet | M7: Channel Design | Remote auth bridging | #326 | #285 closed | +| M7-006 | done | sonnet | M7: Channel Design | Agent-to-agent via Matrix | #326 | #286 closed | +| M7-007 | done | sonnet | M7: Channel Design | Multi-user isolation in Matrix | #326 | #287 closed | +| M7-008 | done | sonnet | M7: Channel Design | channel-protocol.md published | #326 | #288 closed |