feat(mcp-bridge): close vibe's PR #32 gap + lift to Glama AAA tier

Carries forward the coord-mcp work orphaned when PR #32 closed on 2026-04-20
without the full set merging (only the watchdog squash landed as c9a291d).
The six tools added by the 0.8.0 health-snapshot and PR #29 variant/capability
commits were on the cartridge manifest but absent from the MCP bridge's
advertised tool list, so Glama could not see them.

What landed
-----------

MCP bridge tool surface now matches cartridge.json:

* Added: `coord_set_variant`, `coord_set_capabilities`,
  `coord_get_peer_capabilities`, `coord_health`, `coord_progress`,
  `coord_sweep_watchdog`.
* Renamed: `coord_promote_to_supervisor` -> `coord_promote_to_master`
  (DD-32). Old name kept only as a dispatch alias for one release;
  not re-advertised.

Glama AAA tier posture
----------------------

Every tool description rewritten to hit Glama's six TDQS dimensions:
Purpose Clarity, Usage Guidelines, Behavioral Transparency, Parameter
Semantics, Conciseness & Structure, Contextual Completeness. The
server-level score is 60% mean + 40% *min*, so a single thin
description tanks the number -- 32 one-liners (browser, github,
gitlab, comms, research) all lifted above the floor.

Input schemas tightened: `additionalProperties: false`, enum
constraints, `minimum`/`maximum`, `pattern` regexes where meaningful
(cartridge name, variant label).

Coherence tests
---------------

New `mcp-bridge/tests/dispatch_test.js` (6 tests, all green):

1. Every `coord_*` in `cartridge.json` is exposed by the bridge
   (drift = invisible to Glama).
2. `coord_promote_to_master` is canonical; old name not advertised.
3. Every tool has a >=80 char description (AAA floor).
4. Every `inputSchema` is a typed object.
5. `required[]` names match declared properties.
6. Tool names are unique.

`npm test` now runs these (was an echo no-op).

Version + metadata
------------------

* Server version 0.3.1 -> 0.4.0 across main.js, version.js, and both
  package.json files.
* Cartridge count description 96 -> 100.
* Offline menu: local-coord-mcp version 0.1.0 -> 0.9.0; summary total
  24 -> 100 to reflect disk truth.
* README: new "Local-coord-mcp at a glance" + "Glama AAA posture"
  sections documenting the server's Glama stance and how the coherence
  tests lock it in.

Also adds `docs/handover/HAIKU-SCOUT-PASS.md` -- reusable Haiku
scouting-pass prompt template for the next coord-mcp review cycle.

Test plan
---------

* [x] `node --test mcp-bridge/tests/dispatch_test.js` -- 6/6 green
* [x] `node --check` on every modified JS file
* [x] MCP stdio handshake still responds (verified by live reload
      picking up the 6 new tools + dropping the renamed one)
* [ ] Glama re-index picks up the expanded tool list with AAA scores

Context
-------

Branch `claude/enhance-vibe-aaa-standard-ATSCg`. Completes the
unfinished parts of vibe's PR #32 at the MCP bridge layer and lifts
the server posture to Glama AAA quality.

Author: claude

README.adoc

@@ -31,13 +31,47 @@ Glama listing: https://glama.ai/mcp/servers/hyperpolymath/boj-server
 
 == Features
 
-* *GitHub/GitLab/Bitbucket* — repos, issues, PRs, code search, mirroring
-* *Cloud* — Cloudflare (DNS, Workers, KV, R2, D1), Vercel (deployments, projects), Verpex
+* *GitHub/GitLab* — repos, issues, PRs, code search, mirroring (22 tools)
+* *Cloud* — Cloudflare (DNS, Workers, KV, R2, D1), Vercel (deployments, projects), Verpex (cPanel)
 * *Communication* — Gmail, Google Calendar
-* *Browser* — headless navigation, screenshots, JS execution
-* *Research* — web search, deep research
-* *ML* — HuggingFace model/dataset operations
-* *Cartridges* — pluggable open-source service integrations (50+)
+* *Browser* — Firefox automation: navigate, click, type, screenshot, arbitrary JS (7 tools)
+* *Code Intelligence* — CodeSeeker hybrid search + graph RAG
+* *Research* — Semantic Scholar papers, citations, authors
+* *ML* — Hugging Face model / dataset / inference
+* *Local coordination* — `local-coord-mcp` (24 tools): multi-instance AI peer discovery, typed envelopes, claim/heartbeat/watchdog, quarantine + master/journeyman/apprentice supervision, track-record affinity, capability advertisement
+* *Cartridges* — 100 pluggable cartridges across Teranga / Shield / Ayo trust tiers
+
+== Local-coord-mcp at a glance
+
+Localhost multi-agent bus on `127.0.0.1:7745`. Lets multiple Claude / Gemini / Codex / Vibe sessions on the same machine discover each other, claim tasks without collision, and operate under a supervision model (master approves; journeyman executes; apprentice stays gated).
+
+Highlights:
+
+* *Peer registration* with `client_kind`, `variant` (model id — `opus-4.7`, `flash-2.5`, `leanstral`), capability class/tier/prover-strengths — `coord_register`, `coord_set_variant`, `coord_set_capabilities`, `coord_get_peer_capabilities`.
+* *Typed envelopes* validated at the bridge via Nickel contracts (`coord-messages.ncl`) — `coord_send`, `coord_send_gated`.
+* *Task claims* with role-based watchdog TTL (apprentice 30s / journeyman 5m / master none), heartbeats via `coord_progress`, auto-release + explicit `coord_sweep_watchdog`.
+* *Track-record + reassignment* — `coord_report_outcome`, `coord_get_affinities`, `coord_scan_suggestions` (emits `overclaim` fyi + `drift` warn envelopes on confidence/affinity divergence).
+* *Supervision* — `coord_review`, `coord_approve`, `coord_reject`, `coord_promote_to_master`, `coord_transfer_master`.
+* *Observability* — `coord_health` snapshot of peer/quarantine/claim/reject state.
+
+Formally verified core in Idris2 (`cartridges/local-coord-mcp/abi/LocalCoord/`); Zig FFI; Deno/Node MCP bridge with input hardening (rate limiting, prompt-injection detection with unicode-normalisation, error sanitisation).
+
+== Glama AAA posture
+
+This server targets Glama's AAA tier. Posture:
+
+* *Inspectable* — `.mcp.json` + root `package.json` `bin` entry + shebang; offline manifest fallback so cloud inspection works without the REST backend (see `mcp-bridge/lib/offline-menu.js`).
+* *Tool Definition Quality* — every tool carries purpose, usage guidance, behavioural transparency (side effects, returns, errors), and parameter semantics with enums, ranges, and patterns. A coherence test enforces a minimum description floor so the server-level score (60% mean + 40% *min*) cannot regress — see `mcp-bridge/tests/dispatch_test.js`.
+* *Server Coherence* — one tool ↔ one verb; consistent `boj_<domain>_<action>` and `coord_<action>` naming; the same test asserts the bridge tool list matches the cartridge manifest so nothing advertised is un-dispatched (or vice versa).
+* *Security* — PR #27 hardening: rate limiting, size caps, prompt-injection detection with unicode-confusable normalisation, error sanitisation (strips paths, stack traces, env vars). SHA-pinned workflow actions.
+* *Formal* — `cartridges/local-coord-mcp/abi/LocalCoord/*.idr` Idris2 ABI + proof obligations (P-01..P-07).
+
+Run the coherence tests:
+
+[source,bash]
+----
+node --test mcp-bridge/tests/
+----
 
 == License
 

docs/handover/HAIKU-SCOUT-PASS.md

@@ -0,0 +1,57 @@
+# Haiku scout — next-pass lint / trivial-fix prompt
+
+Reusable template for a fast Haiku scouting pass over a concrete file list
+after a coord task lands. Paired with the multi-agent coord flow
+(Opus supervises, Haiku scouts, Sonnet/Opus writes).
+
+## Template
+
+```
+Haiku scout, scope = <exact file list for the step>
+
+1. Confirm each file compiles in isolation
+   (cargo check --lib / julia -e / zig build-obj / node --check).
+2. Scan for:
+   - unused imports
+   - dead code
+   - `todo!()` / FIXME / XXX
+   - orphan type references
+   - stale doc comments referring to renamed symbols
+   - broken `mod.rs` exports
+3. Trivially fix:
+   - unused imports (remove)
+   - obvious typos in comments
+   - unused `_var` renames
+4. DO NOT fix — FLAG to me:
+   - any TODO with semantic content (may be load-bearing)
+   - anything requiring judgement about intent
+   - any cross-module change
+5. Report: <20 lines. Green-light or list of blockers.
+```
+
+## Invocation guidance
+
+- Scope must be an **exact file list** (no globs, no "the changed files")
+  so the scout has a finite surface.
+- Compile-in-isolation check runs **before** the scan — a file that does
+  not parse on its own will generate too many false positives to be
+  useful.
+- Category 4 (FLAG, don't fix) is the firewall. `local-coord-mcp`
+  treats this as a tier-1 envelope from `apprentice` role: visible but
+  gated on master review before any change lands.
+- The `<20 lines` cap keeps the report digestible in the master's
+  next batch-review slot.
+
+## Coord integration
+
+When run under the `boj-server/cartridges/local-coord-mcp` bus, the
+scout should:
+
+1. `coord_register` as `kind=claude`, `variant=haiku-4.5`,
+   `declared_affinities=["scout", "lint"]`.
+2. `coord_claim_task` with `task_difficulty=routine`,
+   `dispatch_preference=auto`.
+3. For each flagged item in step 4, emit `coord_send_gated` with
+   `risk_tier=1` (warn) — goes straight into the master's quarantine.
+4. On completion, `coord_report_outcome` with the observed tag and
+   outcome so the track-record aggregates reflect scout accuracy.

mcp-bridge/lib/offline-menu.js

@@ -36,7 +36,11 @@ export const OFFLINE_MENU = {
     { name: "proof-mcp", version: "0.1.0", domain: "Proof", protocols: ["MCP","REST"], status: "Available", available: true },
   ],
   tier_ayo: [
-    { name: "local-coord-mcp", version: "0.1.0", domain: "Agent", protocols: ["MCP","Agentic"], status: "Available", available: true, notes: "Localhost-only (127.0.0.1:7745) multi-instance AI coordination — peer discovery, message passing, task claiming" },
+    { name: "local-coord-mcp", version: "0.9.0", domain: "Agent", protocols: ["MCP","Agentic"], status: "Available", available: true, notes: "Localhost-only (127.0.0.1:7745) multi-instance AI coordination — peer discovery, typed envelopes, task claiming, master/journeyman/apprentice supervision with quarantine + watchdog TTL + track-record affinity + capability advertisement" },
   ],
-  summary: { total: 24, ready: 24, mounted: 0 },
+  // `total` reflects the full cartridges/ directory (100 cartridges on disk);
+  // the tier_* arrays above enumerate the named ones exposed through the
+  // offline menu. Regenerate counts with
+  // `node mcp-bridge/lib/generate-offline-menu.js`.
+  summary: { total: 100, ready: 24, mounted: 0 },
 };