chore(memory): sync Serena memories to contract 2.3.0

.serena/memories/ADR-01-CORE.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-08-02
-Last verified: 2026-08-02
-Last commit: 881c07ad415e6ac11052cfe01ab088de92de810d Merge pull request #32 from NDDev-it-com/feat/go-rust-lsp-hosts
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: architecture decisions and owner-approved policy changes
 Area: ADR
 -->
@@ -22,6 +22,7 @@ architecture decisions and owner-approved policy changes
 ## Facts
 - Bootstrap architecture or policy meaning changes require explicit owner approval; implementation-only maintenance must preserve the current decisions.
 - ADR 0004 (accepted 2026-07-10) fixes profile composition and the CloakBrowser boundary.
+- ADR 0006 (accepted 2026-08-03) amends ADR 0005: the Dart SDK joins Go and Rust as a desktop language-server host, which also makes the `dart-flutter` MCP transport available, and the zcode harness is delegated out of bootstrap to `nddev-harnesses` because its target cannot be adopted unattended. ADR 0005 had listed `dart` among the things that stay forbidden; the `dart` apt package still is.
 - ADR 0005 (accepted 2026-08-02) amends ADR 0004: Go and Rust join Node, Python, and LLVM as desktop language-server hosts. It is explicit that this trades away the strong form of the desktop boundary — the separation between source analysis and local project build becomes intent and documentation rather than absence of a compiler, the same weaker guarantee that already applied to Node and Python.
 
 ## Evidence

.serena/memories/BROWSER-01-WORKFLOW.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: browser-visible validation and debugging workflows
 Area: BROWSER
 -->

.serena/memories/CI-01-ACTIONS.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: GitHub Actions and local CI policy
 Area: CI
 -->

.serena/memories/CONTEXT-01-CORE.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: always-needed repository context
 Area: CONTEXT
 -->

.serena/memories/CORE-01-INDEX.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-08-02
-Last verified: 2026-08-02
-Last commit: 81c1184dcb6c34caffeef513bb5b5660b17f6a78 Merge pull request #36 from NDDev-it-com/release/2.2.1
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: README.md, AGENTS.md, .claude/CLAUDE.md, .serena/project.yml, .serena/memories/**
 Area: CORE
 -->
@@ -32,7 +32,7 @@ Durable Serena memory index for the `rldyour-new-mac-or-ubuntu` bootstrap module
 
 ## Current State
 - This module has three tracked memories: `CORE-01-INDEX.md`, `RELEASE-01-VALIDATION.md`, and `TECHDEBT-01-NOW.md`.
-- The `2.2.1` contract composes Apple Silicon macOS desktop, Ubuntu 24.04/26.04 desktop, and Ubuntu 24.04/26.04 server roles. Desktop roles are source/LSP-only; the Ubuntu server role owns build/runtime and explicit Docker modes.
+- The `2.3.0` contract composes Apple Silicon macOS desktop, Ubuntu 24.04/26.04 desktop, and Ubuntu 24.04/26.04 server roles. Desktop roles are source/LSP-only; the Ubuntu server role owns build/runtime and explicit Docker modes.
 - GUI is an optional desktop overlay. Ubuntu server is always headless.
 - The module owns exact AI CLI installation, terminal integration, language-server/tooling installation, and the mandatory CloakBrowser runtime. Native AI CLI configuration remains in sibling adapter repositories.
 - Serena indexes Bash and Python because the implementation is shell-first with Python validators and fault-injection tests.

.serena/memories/DEPLOY-01-RUNTIME.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: deploy and rollout verification contracts
 Area: DEPLOY
 -->

.serena/memories/DESIGN-01-WORKFLOW.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: design, UI, Figma, and visual validation workflow
 Area: DESIGN
 -->

.serena/memories/DOCS-01-INSTRUCTIONS.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: instruction docs and durable operator documentation
 Area: DOCS
 -->

.serena/memories/EXPLORE-01-RESEARCH.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: source-backed research workflow
 Area: EXPLORE
 -->

.serena/memories/FLOW-01-SDLC.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: rldyour SDLC command lifecycle
 Area: FLOW
 -->

.serena/memories/FUTURE-01-VISION.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: future architecture direction and scalability gravity
 Area: FUTURE
 -->

.serena/memories/HOOKS-01-LIFECYCLE.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: deterministic hook lifecycle behavior
 Area: HOOKS
 -->

.serena/memories/ISSUES-01-VERIFIED-PROBLEMS.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: GitHub issue and PR evidence policy
 Area: ISSUES
 -->

.serena/memories/LSP-01-LANGUAGE-SERVERS.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-08-02
-Last verified: 2026-08-02
-Last commit: 644384032ffff1f0f9dc11f0600e45f662f2b48c Merge pull request #34 from NDDev-it-com/feat/ubuntu-tool-parity
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: language-server setup and diagnostic proof
 Area: LSP
 -->
@@ -26,6 +26,10 @@ language-server setup and diagnostic proof
 ## Facts
 - Desktop profiles install source-editing and language-server tooling; project build execution belongs on servers.
 - Contract `2.1.0` (ADR 0005) admits Go `1.26.5` and Rust `1.97.1` as desktop-only language-server hosts for `gopls` and `rust-analyzer`, on the same footing as Node, Python, and Homebrew's LLVM: present to resolve source, not to authorize project builds.
+- Contract `2.3.0` (ADR 0006) admits the Dart SDK `3.12.2` on the same footing, and it carries two capabilities: `dart language-server --protocol=lsp` (the invocation `rldyour-lsps` declares, proven against a real `initialize` handshake) and `dart mcp-server`, the transport the `dart-flutter` MCP server in `rldyour-mcps` executes. Before `2.3.0` no bootstrap path installed Dart on either platform while the marketplace claimed otherwise, so that MCP server could never start.
+- The Dart SDK zip records its directories as `0775` and umask only clears bits it never adds, so the staged tree passes `rldyour::_managed_tree_permissions normalize` before its receipt is written and a reused tree is re-validated. That helper is the generalized former browser-Node one; adding a second permission path is forbidden.
+- Dart telemetry is disabled through `rldyour::ensure_dart_telemetry_disabled`, which runs the SDK's own `--disable-analytics` switch and then reads `reporting=0` back from the shared Dart/Flutter telemetry config. Never hand-write that file: upstream maintains it. Ubuntu's verifier re-proves the opt-out; macOS keeps its documented weaker-gate posture.
+- The Flutter SDK is deliberately not installed: its `bin/cache` self-populates at runtime and would mutate a hash-verified tree.
 - Ubuntu installs both from tracked per-architecture SHA-256 artifacts into owned versioned directories with runtime receipts; `golang-go`, `rustc`, `cargo`, and `rustup` remain forbidden distribution packages. macOS uses the `go`, `rust`, and `rust-analyzer` Homebrew formulae.
 - One combined `rust-<version>-<triple>` archive carries rustc, cargo, rust-std, clippy, rustfmt, and rust-analyzer, so a single tracked hash covers the whole Rust host.
 - `gopls` `v0.23.0` is the one host component without a tracked archive hash: it publishes no prebuilt archive, so it is pinned by exact module version and verified through the Go module checksum database. `runtime_support.ubuntu_gopls_provenance` records that class explicitly.

.serena/memories/MCP-01-TRANSPORT.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: MCP runtime transport and pin policy
 Area: MCP
 -->

.serena/memories/PATTERNS-01-CANONICAL.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: canonical implementation and naming patterns
 Area: PATTERNS
 -->

.serena/memories/RELEASE-01-VALIDATION.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-08-02
-Last verified: 2026-08-02
-Last commit: 81c1184dcb6c34caffeef513bb5b5660b17f6a78 Merge pull request #36 from NDDev-it-com/release/2.2.1
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: README.md, VERSION, CHANGELOG.md, config/rldyour-contract.json, scripts/**, templates/**, tests/**, .github/workflows/**
 Area: RELEASE
 -->
@@ -46,11 +46,11 @@ Release, validation, CI, and public README contract for the macOS/Ubuntu bootstr
 - launchd forward and rollback handoffs use bounded loaded/unloaded state convergence instead of treating an immediate `launchctl` exit status as proof.
 
 ## Current State
-- Current product/config version is `2.2.1` (`VERSION`, `config/rldyour-contract.json` -> `adapter`), and `2.2.1` is the published GitHub release tag — the published release and the contract agree.
+- Current product/config version is `2.3.0` (`VERSION`, `config/rldyour-contract.json` -> `adapter`). The published GitHub release tag is still `2.2.1`: `2.3.0` advances the contract and the gitlink only, so the published tag trails by design until a release is cut.
 - Contracts `2.1.0` and `2.2.0` were never released; `2.2.1` publishes their combined contents. Do not expect tags for them.
 - Release `2.2.1` published five immutable checksummed assets in one create call: the source archive, `release-manifest.json`, `release-notes.md`, `sbom.spdx.json`, and `SHA256SUMS`.
 - Supported targets are Apple Silicon macOS desktop and Ubuntu 24.04/26.04 desktop/server on amd64 or arm64. Desktop Docker mode is always `none`; server Docker is explicit `none`, `rootful`, or `rootless`.
-- The active harness set is codex and zcode only (`harnesses.active`). Neither is installed inline: each is owned by an NDDev module pinned by exact `harnesses.<id>.module_commit`, and is self-materialized from `module_repo` at that commit when its `module_path_env` is unset. Exact commits and vendor runtime versions are read from the contract and the module's `build/version.json`; they are not duplicated here.
+- The active harness set is codex only (`harnesses.active`). It is not installed inline: it is owned by an NDDev module pinned by exact `harnesses.codex.module_commit`, and is self-materialized from `module_repo` at that commit when `RLDYOUR_CODEX_MODULE` is unset. zcode moved to `harnesses.delegated` in `2.3.0` and is installed by `nddev-harnesses`; `scripts/ci/validate.sh` fails if the active set drifts or if the delegation loses its owner or reason. Exact commits and vendor runtime versions are read from the contract and the module's `build/version.json`; they are not duplicated here.
 - The mandatory browser baseline is CloakBrowser `0.4.12`, Chrome DevTools MCP `1.6.0`, and Playwright CLI `0.1.17` on loopback CDP `127.0.0.1:9222`; Webwright has no installed runtime or dependency tree.
 - AI, browser Node, and CloakBrowser runtimes install from repository-owned frozen locks into content-addressed directories before an atomic wrapper/service/receipt handoff.
 - Browser Node staging removes group/world-write permission bits before publication. An already published runtime with unsafe permissions is preserved outside the active namespace and rebuilt from the frozen lock.

.serena/memories/RULES-01-QUALITY-POLICY.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: quality-first engineering rules
 Area: RULES
 -->

.serena/memories/RUNTIME-01-BASELINES.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 9f8f97792500a7af4787448a1478fbe5c9ca12cc chore(release): new-mac-or-ubuntu 0.3.9 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: CLI runtime and package baselines
 Area: RUNTIME
 -->

.serena/memories/SECURITY-01-POSTURE.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: security posture and blocking/warning policy
 Area: SECURITY
 -->

.serena/memories/SERENA-01-MEMORY-SYNC.md

@@ -1,7 +1,7 @@
 <!-- Memory Metadata
-Last updated: 2026-07-10
-Last verified: 2026-07-10
-Last commit: 25e5b7bbf07ca90192022ac8fb9f300d443b9410 chore(release): new-mac-or-ubuntu 0.3.7 (other)
+Last updated: 2026-08-03
+Last verified: 2026-08-03
+Last commit: 4ceac2921743308354b4292034e12e6400ad3e6d Merge pull request #40 from NDDev-it-com/feat/dart-host-and-zcode-delegation
 Scope: Serena memory, fullrepo, and knowledge sync policy
 Area: SERENA
 -->