docs(roadmap): mark sprints 3-6 complete; record post-Sprint-B UI migration

Sprint 3 (UI5), Sprint 4 (UI6), Sprint 5 (UI7+UI8), Sprint 6 (production
hardening) are all now substantially complete as of May 23, 2026.

NEXT_SPRINT_ROADMAP.md:
- Sprint 3 UI5 marked complete with commit hashes 9c65899, 30a30ce, 2408f43.
- Sprint 4 UI6 marked complete with commit 8d484c3.
- Sprint 5 UI7+UI8 marked complete with commits 2408f43, 3288e28, 0c982de.
- Sprint 6 production hardening verified item-by-item:
    backend config fail-closed: already enforced via lib/config.ts superRefine.
    backend logging clean: grep returns zero matches outside tests.
    CI mobile + web E2E + Docker build: jobs already wired.
    Docker compose smoke: scripts/e2e-docker-test.sh validated locally.
    Shared service smoke: backend+web verified at :3050/:4016 with sibling
    platform-service (4003), extraction-service (4005), mcp-server (4007).
    Only stale doc cleanup remains as deferred non-blocking work.

PRODUCTION_READINESS_HANDOFF_ROADMAP.md:
- Replaced Sprint-A 'Docker compose smoke deferred' note with verified
  status: Dockerfile corporate-proxy workarounds added, override pins
  sibling-service URLs and aligns JWT secret, e2e-docker-test.sh
  exercises full login/CORS/CRUD lifecycle.
- Added 'Post-Sprint-B UI Migration' section documenting the four UI
  ratchet category counts (legacy/colors/imports all 0; raw controls 14
  intentional) and the UI drift ratchet as the canonical CI gate.

No code changes.

docs/NEXT_SPRINT_ROADMAP.md

@@ -77,94 +77,45 @@ Web lint now exits 0 (23 advisory warnings retained). Mobile lint exits 0 (30 ad
 
 ---
 
-## Sprint 3 — UI5: Forms, Modals, Settings (~2 days)
+## Sprint 3 — UI5: Forms, Modals, Settings ✅ Complete (May 23, 2026)
 
-> **Why next:** Highest-value remaining UI migration. Auth/settings flows are user-facing and currently use raw HTML elements.
-
-### 3.1 — Auth Forms
-
-- [ ] Migrate login/register/forgot-password to common `Input`, `Label`, `Button`, `Card`
-- [ ] Ensure accessibility labels on all form elements
-
-### 3.2 — Settings Forms
-
-- [ ] Migrate settings forms to `Field`, `Input`, `Textarea`, `Select`, `Switch`, `ConfirmDialog`
-- [ ] Use common-platform form primitives from `@bytelyst/ui`
-
-### 3.3 — Create/Link/Share Modals
-
-- [ ] Migrate `CreateNoteModal`, `LinkNoteModal`, `ShareDialog` to common `Modal` + form primitives
-- [ ] Action bars and button groups via platform components
-
-### Exit Criteria
-
-- [ ] All auth/settings/modal screens use platform UI primitives
-- [ ] No raw `<button>`, `<input>`, `<textarea>`, `<select>` in migrated screens
-- [ ] Playwright release-flow specs pass
-- [ ] Web typecheck + tests pass
+- [x] Auth forms migrated to `Input`/`Button`/`Card`/`AlertBanner` (commits `9c65899`, `30a30ce`)
+- [x] Settings page (profile, appearance, password, MCP, API tokens, danger zone, offline queue, feedback) migrated (commit `30a30ce`)
+- [x] CreateNoteModal, LinkNoteModal, ShareDialog, CreateWorkspaceModal, PromptTemplateEditor migrated (commits `30a30ce`, `2408f43`)
+- [x] Web typecheck, 96/96 vitest, Playwright release-flows all green
 
 ---
 
-## Sprint 4 — UI6: Search, Workspaces, Dashboard (~2 days)
+## Sprint 4 — UI6: Search, Workspaces, Dashboard ✅ Complete (May 23, 2026)
 
-### 4.1 — Search Page
-
-- [ ] Replace saved-search/result cards with `Panel`, `DataList`, `Badge`, `EmptyState`
-- [ ] Replace filter chips with `StatusBadge` or `FilterChip`
-
-### 4.2 — Workspaces Page
-
-- [ ] Workspace cards → `Panel` + `Badge` + `StatCard`
-- [ ] Filter bar → common filter components
-
-### 4.3 — Dashboard
-
-- [ ] Metric cards → `StatCard`, recent notes → `DataList`
-- [ ] Two-column layout → reusable adapter primitive
-
-### Exit Criteria
-
-- [ ] Dashboard, search, workspaces all use platform primitives
-- [ ] Responsive visual checks pass (desktop + mobile widths)
-- [ ] All tests pass
+- [x] Dashboard page migrated to `Card` + `Badge` (commit `8d484c3`)
+- [x] Workspaces list page migrated (commit `8d484c3`)
+- [x] Search page migrated (commit `8d484c3`)
+- [x] Chat page migrated to `Select` + `Textarea` (commit `8d484c3`)
+- [x] Web vitest + visual specs green
 
 ---
 
-## Sprint 5 — UI7 + UI8: Notes, Smart Actions, Legacy Cleanup (~2.5 days)
+## Sprint 5 — UI7 + UI8: Notes, Smart Actions, Legacy Cleanup ✅ Complete (May 23, 2026)
 
-### 5.1 — Note Detail Shell
-
-- [ ] Keep rich editor local, replace shell/toolbar/popover with common primitives
-- [ ] Migrate Smart Actions cards/buttons/result panels
-
-### 5.2 — Palace Panels
-
-- [ ] Migrate Palace panels to common panel/list/form primitives
-- [ ] Keep domain rendering local
-
-### 5.3 — Remove Legacy Globals (UI8)
-
-- [ ] Remove `.surface-card`, `.surface-muted`, `.badge`, `.input-shell` globals
-- [ ] Add CI guard: `pnpm run audit:ui:strict`
-- [ ] Verify full E2E + visual smoke
-
-### Exit Criteria
-
-- [ ] `pnpm run audit:ui:strict` passes (no raw controls, no legacy globals, no hardcoded colors)
-- [ ] Full web test/typecheck/lint/E2E pass
+- [x] Note detail page migrated, Smart Actions panel migrated, NoteEditor shell migrated (commits `2408f43`, `3288e28`)
+- [x] Palace page + PalacePanel, MemoryTimeline, KnowledgeGraphView migrated (commit `3288e28`)
+- [x] Gaps page, prompts page, landing page, public share page, BroadcastBanner migrated (commit `3288e28`)
+- [x] `.surface-card`, `.surface-muted`, `.badge`, `.input-shell` removed from `web/src/app/globals.css` (commit `0c982de`)
+- [x] UI drift ratchet now enforces 0 for legacy classes / hardcoded colors / direct `@bytelyst/ui` imports outside adapter in CI
+- [x] Audit regex refined so Tailwind arbitrary-value references (`bg-[color:var(--nl-surface-muted)]`) are not flagged
+- [x] Final cumulative impact across UI5–UI8: raw controls 38 → 14 (–24); legacy classes 92 → 0 (−100%)
 
 ---
 
-## Sprint 6 (Future) — Production Hardening
+## Sprint 6 — Production Hardening ✅ Substantially Complete (May 23, 2026 audit)
 
-> **After UI migration is complete.**
-
-- [ ] Backend config: fail-closed in production (no dev defaults)
-- [ ] Backend logging: replace any remaining `process.stdout/stderr` with `app.log`
-- [ ] CI: add mobile tests, web E2E, Docker build check
-- [ ] Shared service smoke: platform-service, extraction-service, mcp-server
-- [ ] Docker compose smoke on Docker-capable host
-- [ ] Stale doc cleanup (reconcile AGENTS.md, README, older gap docs)
+- [x] **Backend config fail-closed in production** — `backend/src/lib/config.ts` superRefine() rejects production environments that use the dev JWT secret, JWT secret shorter than 32 chars, `DB_PROVIDER=memory`, missing Cosmos credentials, disabled field encryption, or `memory` key provider for field encryption. (already shipped before this sprint)
+- [x] **Backend logging clean** — audit `grep -rnE "process\.(stdout|stderr)|console\.(log|error|warn|info)" backend/src --include="*.ts"` returns zero matches outside tests. All logging via `req.log` / `app.log`. (already shipped)
+- [x] **CI: mobile + web E2E + Docker build** — `.github/workflows/ci.yml` already has dedicated jobs: `mobile` (lint+typecheck+test), `web-e2e` (Playwright), `docker-build` (backend + web images), `backend-cosmos` (emulator smoke), plus `release-guards` (ratchet + secrets).
+- [x] **Docker compose smoke** — `scripts/e2e-docker-test.sh` + `scripts/e2e-docker-seed.sh` exercise login / CORS / workspace+note CRUD lifecycle against the deployed compose stack. Runs locally on Docker-capable hosts via `pnpm run e2e:docker:test`.
+- [x] **Shared service smoke** — deployed compose stack via `docker-compose.override.yml` now points the backend at the sibling `platform-service` (4003), `extraction-service` (4005), and `mcp-server` (4007). Verified at http://localhost:3050 (web) and http://localhost:4016 (backend) returning 200.
+- [ ] **Stale doc cleanup** — reconcile AGENTS.md, README, and older gap docs against current reality (deferred; non-blocking).
 
 ---
 

docs/PRODUCTION_READINESS_HANDOFF_ROADMAP.md

@@ -21,7 +21,18 @@ Re-verified gates on May 22, 2026:
 - Backend lint, web lint, mobile lint all exit 0 (advisory warnings retained).
 - `pnpm run audit:release-guards` passes secret scan and color/token audit.
 - Live shared-service smoke **verified May 23, 2026** — `pnpm run smoke:local` passed end-to-end against live `platform-service` (4003), `extraction-service` (4005), and `mcp-server` (4007). Covered: NoteLett `/health`, `/api/bootstrap`, three sibling-service `/health` checks, authenticated workspace create, authenticated note create + read, smoke cleanup. Output: 11 `ok:` lines, exit 0.
-- Docker compose smoke remains environment-deferred: the `scripts/compose-smoke.sh` script and `docker-compose.yml` are validated (bash syntax + `docker compose config` parse) but the actual image build fails on corporate-network hosts due to TLS interception of `https://registry.npmjs.org` during `npm install -g pnpm@10.6.5` in `backend/Dockerfile`. The job runs successfully on CI (no TLS interception) and on any host without corporate proxy. Tracked in [`docs/NEXT_SPRINT_ROADMAP.md`](NEXT_SPRINT_ROADMAP.md) under Sprint B environment deferrals.
+- Docker compose smoke **verified May 23, 2026** on a Docker-capable host: the backend Dockerfile was updated with corporate-proxy TLS workarounds (`NODE_TLS_REJECT_UNAUTHORIZED=0`, `NPM_CONFIG_STRICT_SSL=false` during the build stage). The deployed stack (`docker compose up -d --build`) brings up backend on `:4016` and web on `:3050`; `scripts/e2e-docker-test.sh` exercises login / CORS / workspace+note CRUD lifecycle end-to-end. The `docker-compose.override.yml` wires the backend to the sibling `platform-service` (4003), `extraction-service` (4005), and `mcp-server` (4007) and aligns the JWT secret. Verified locally with HTTP 200 on `http://localhost:3050/login` and `http://localhost:4016/health`.
+
+## Post-Sprint-B UI Migration (May 23, 2026)
+
+Sprint B (May 23, 2026) drove the UI migration from ~6/10 to **10/10** across UI5, UI6, UI7, and UI8 \u2014 see [`docs/UI_UX_PLATFORM_CORE_ROADMAP.md`](UI_UX_PLATFORM_CORE_ROADMAP.md) for per-phase commit detail. The UI drift ratchet (`scripts/ui-drift-ratchet.sh`) now enforces a hard zero in CI for the three categories that can be driven to zero (legacy global classes, hardcoded color literals, direct `@bytelyst/ui` imports outside the adapter). Final counts:
+
+- Raw interactive controls: **14** (was 38) \u2014 the 14 remaining are intentional and tracked (NoteEditor toolbar, hidden file input, two search radios, version-disclosure button).
+- Legacy global surface classes: **0** (was 92). `.surface-card`, `.surface-muted`, `.badge`, `.input-shell` removed from `web/src/app/globals.css`.
+- Hardcoded color literals: **0** (held at zero throughout).
+- Direct `@bytelyst/ui` imports outside the adapter: **0** (held at zero throughout).
+
+All `pnpm run verify` gates remain green: backend 380/380, web 96/96, mobile 97/97.
 
 ## Current Baseline