plugpressco
diff --git a/‎AGENTS.md‎
Lines changed: 13 additions & 0 deletions b/‎AGENTS.md‎
Lines changed: 13 additions & 0 deletions
diff --git a/‎CLAUDE.md‎
Lines changed: 7 additions & 2 deletions b/‎CLAUDE.md‎
Lines changed: 7 additions & 2 deletions
diff --git a/‎STATUS.md‎
Lines changed: 20 additions & 11 deletions b/‎STATUS.md‎
Lines changed: 20 additions & 11 deletions
diff --git a/‎admin/DESIGN-ALIGNMENT.md‎
Lines changed: 40 additions & 40 deletions b/‎admin/DESIGN-ALIGNMENT.md‎
Lines changed: 40 additions & 40 deletions
diff --git a/‎admin/build/index-rtl.css‎
Lines changed: 1 addition & 1 deletion b/‎admin/build/index-rtl.css‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎admin/build/index.asset.php‎
Lines changed: 1 addition & 1 deletion b/‎admin/build/index.asset.php‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎admin/build/index.css‎
Lines changed: 1 addition & 1 deletion b/‎admin/build/index.css‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎admin/build/index.js‎
Lines changed: 23 additions & 22 deletions b/‎admin/build/index.js‎
Lines changed: 23 additions & 22 deletions
diff --git a/‎admin/build/style-index-rtl.css‎
Lines changed: 1 addition & 1 deletion b/‎admin/build/style-index-rtl.css‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎admin/build/style-index.css‎
Lines changed: 1 addition & 1 deletion b/‎admin/build/style-index.css‎
Lines changed: 1 addition & 1 deletion
@@ -0,0 +1,13 @@
+# saddle
+
+<!-- BEGIN @plugpress/ui (managed by fleet:agents) -->
+## @plugpress/ui
+
+This plugin's admin UI is built on the PlugPress design system. Before building or editing any
+admin UI, read the usage guide shipped with the package:
+
+    node_modules/@plugpress/ui/docs/consumer-agent-guide.md
+
+It covers setup, the design rules you must follow, the component inventory, and why UI changes
+don't appear until the pinned tag is bumped and the plugin is rebuilt.
+<!-- END @plugpress/ui -->
@@ -93,8 +93,13 @@ tests/                        — PHPUnit integration suite (SQLite-backed, real
   tool — write them like documentation, not code comments.
 - No `eval()`, `proc_open`, `shell_exec`, `exec()` anywhere. Grep for these four
   before every release.
-- React: `@wordpress/components` only — no separate UI kit, no Tailwind, until
-  `DESIGN-ALIGNMENT.md` says otherwise.
+- React UI: **`@plugpress/ui`** (github tag pin in package.json) is the UI kit —
+  import primitives directly from `@plugpress/ui`. No `@wordpress/components`,
+  no Tailwind, no second kit. Product-specific pieces (BrandMark, LevelIcon,
+  AppLogo, the Permissions lanes/chips, the activity timeline) stay in-plugin,
+  styled on `--pp-*` tokens. Light-only — no theme toggles. The brand mark is
+  single-sourced from `assets/brand/mark.svg` (React SVGR import + PHP menu
+  icon read the same file). See `admin/DESIGN-ALIGNMENT.md`.
 
 ## Testing checklist before any release
 
 
@@ -4,19 +4,28 @@
 **Board:** [PlugPress HQ](https://github.com/orgs/plugpressco/projects/3)
 
 ## Last session
-2026-07-10 — **The Closed-Loop Quality Engine shipped, free half complete** (epic [#22](https://github.com/plugpressco/saddle/issues/22), PRs #28–#32, suite 244 → **300 green**):
-- **F1** `Saddle_Lint_Style_Accessor` companion interface (additive — older accessors keep working) + Gutenberg impl (#23/PR #28).
-- **F5** a11y rules: text-contrast (ancestor-walk effective bg, WCAG AA 4.5/3.0 thresholds), missing-alt-text, heading-order — all feature-detect the companion and skip silently without it (#27/PR #29).
-- **F2** Agent Eyes: `saddle/render-node` — effective persisted styles (one resolver shared with lint) + capped/sanitized HTML; whole-page = bounded section outline. New `saddle_render_accessor` filter (#24/PR #30).
-- **F3** preview transport: `saddle/get-preview-url` — HMAC (post-bound, 5-min TTL, rotating secret with grace), served via the public-preview posts_results flip, noindex; the agent's own client does the screenshotting, nothing leaves the install (#25/PR #31).
-- **F4** `saddle/verify-page` — structural + echo (silently-ignored attrs) + lint over freshly re-read state, deduped/ranked/capped findings at real addresses, deterministic 0–100 score. Builders plug in via `saddle_verify_builder_findings` (#26/PR #32).
-- The Pro half (Divi driver, quality judgments, brief, context discipline, builder memory, skill) shipped the same day — see `saddle-pro/STATUS.md`.
-- Old-backlog #7 (render preview) closed as delivered by this scope.
+2026-07-11 — **Admin UI refresh + two DS crash fixes + #8 hygiene → PR [#37](https://github.com/plugpressco/saddle/pull/37)** (branch `feat/admin-header`, base main):
+- **[#35](https://github.com/plugpressco/saddle/issues/35) shipped** — full-bleed header was already in place; added Home `StatCard`/`StatGrid` tiles (Connected apps · Access level · Actions logged), `SkipLink` → `#pp-main`, dropped the redundant "%d apps" badge. Resynced the stale `@plugpress/ui` (node_modules was 0.6.2 vs the v0.8.0 pin).
+- **Two `@plugpress/ui` bugs found via live testing, fixed at root + released:** **v0.8.1** — `Button asChild` threw `React.Children.only` on every use (passed a 2-entry `[spinner, children]` array to `Slot`); **v0.8.2** — `Dialog` "no accessible name" warning fired on *closed* dialogs (ConfirmProvider's idle dialog), now gated on `open`. Both tagged/pushed on `plugpressco/plugpress-ui` (manual release, not `fleet release`, to avoid repinning the whole fleet). Saddle also switched TopBar Docs/Rate to `Button href=`; pin now **v0.8.2**.
+- **[#8](https://github.com/plugpressco/saddle/issues/8) closed** — deduped the four `log()` wrappers into `Saddle_Log::record_action()`; confirmed `--scope user` fix ships + connect/revoke tests already automated (22 green). Optional 401-legibility tail split to **[#36](https://github.com/plugpressco/saddle/issues/36)**.
+- Note: an unrelated in-progress change to `includes/class-saddle-mcp.php` (MCP inputSchema `properties: []` → `{}` normalization) sits uncommitted in the working tree — NOT part of PR #37.
+
+2026-07-10 (later session) — **Admin UI fully migrated to @plugpress/ui v0.6.0** (on top of v0.9.0):
+- Pin bumped v0.2.0 → v0.6.0 (v0.6.0 verified non-breaking for Saddle: all 34 imports resolve, flat Tabs/FilterTabs/Steps + all `pp-*` classes survive; adds a WCAG 2.2 AA pass); `TooltipProvider`/`ConfirmProvider`/`Toaster` mounted once in App.jsx.
+- Every screen rewritten on DS components: TopBar (Tabs/StatusDot), Onboarding + Permissions (CardRadioGroup/SelectableCard, ApplyBar, toast), Home (Hero/CalloutCard/CardGrid/RowList), Connect tab (PageHeader/EmptyState/RowList/useConfirm/Snippet/Badge), ConnectionHealth (CodeBlock/CalloutCard), ConnectWizard (Steps/CodeBlock/Snippet/LiveIndicator/useCopy — everCopied gate + back-out revoke preserved), Guidance/Memory (Card/RowList/Switch/Field/useConfirm/toast), Activity (FilterTabs/EmptyState/Badge).
+- `admin/src/ui.jsx` compat shim **deleted**; zero `@wordpress/components` usage (PHP fallback deps + stylesheet deps updated to match); dead theme icons removed.
+- `style.scss` 2,203 → **1,109 lines** (kept: token aliases, setup shell, lanes/chips, activity timeline, wizard flourishes, `.saddle-doc`).
+- **Brand mark single-sourced**: `assets/brand/mark.svg` is the only copy — React `<BrandMark/>` (SVGR) and the PHP menu icon (file read + recolor, with fallback) both consume it.
+- Docs reconciled: CLAUDE.md convention now names @plugpress/ui; DESIGN-ALIGNMENT.md re-decided (2026-07-10) — monochrome stands via the saddle accent, light-only.
+- Earlier same day: the Closed-Loop Quality Engine free half (epic #22, PRs #28–#32, 300 green) — see git history.
 
 ## Next up
-- **Live divi-dev round-trip** (the epic's last gate): build a seeded-bad page → `verify-page` flags at correct addresses → fix → score rises; screenshot a minted preview URL in Claude Code; confirm effective styles against real Divi 5.8. Then close #22.
-- Consider a free minor release (the scope note says: free ships minor, Pro's min-free constant bumps — the constant bump is still pending in Pro).
+- **Review + merge PR [#37](https://github.com/plugpressco/saddle/pull/37)** (admin UI migration + refresh + crash fixes + hygiene). Manual click-through recommended: onboarding → wizard end-to-end (copy gate, back-out revoke, live listen), Permissions ApplyBar save/cancel/partial-fail, Guidance/Memory confirms + toasts, Activity filters/paging, ForeignNotices, keyboard-only + reduced-motion. Console should be clean post-reload (hash `14af28ac`).
+- **Decide on `includes/class-saddle-mcp.php`** — the uncommitted inputSchema normalization; commit it on its own (small PR) or discard.
+- **Live divi-dev round-trip** (epic #22's last gate): seeded-bad page → `verify-page` flags at correct addresses → fix → score rises; then close #22.
+- **Next backlog issue** (post-#8): [#5](https://github.com/plugpressco/saddle/issues/5) design-system unify (triage vs shipped brief/bundle first) or saddle-pro [#2](https://github.com/plugpressco/saddle-pro/issues/2) CF7.
+- Consider a free minor release (0.10.0) bundling the UI migration; Pro's min-free constant bump to match is still pending in Pro.
 - CI PHPUnit still red on GitHub Actions (no WP core in the runner) — fix as its own PR so future PRs get a real green.
 
 ## Blockers / open questions
-- Old work tickets #4–#6, #8 remain from the previous scope — #5 (design-system unify) partially overlaps the shipped brief/bundle; triage them against the new scope when convenient.
+- Old work tickets #4–#6 remain from the previous scope — #5 (design-system unify) partially overlaps the shipped brief/bundle; triage against the new scope when convenient. (#8 closed 2026-07-11.)
@@ -1,48 +1,48 @@
 # Saddle — Design Alignment
 
-> **DECIDED (2026-07-04, Fahim):** the monochrome identity is now intentional,
-> not a placeholder. Saddle keeps its own near-black/white, OpenAI/Apple-register
-> look — one restrained accent reserved for status/safety — with light AND dark
-> themes driven by the `s-palette-*` mixins in `style.scss`. The earlier
-> "align to inbees/outbees" directive below is SUPERSEDED; kept for history.
-> The brand mark is the stirrup-arch SVG (`<BrandMark />` in `icons.jsx`,
-> mirrored as the admin-menu icon in `class-saddle-settings.php`) — keep the
-> two paths in sync. Don't re-litigate this in future sessions.
-
-## The former rule (superseded)
-
-Do **not** invent a visual design from memory or taste. Saddle has to read as
-"the same workspace" as the rest of the PlugPress portfolio (inbees/outbees).
-That means pulling real values, not approximating them.
-
-## Before you touch styles, gather the real reference
-
-1. **Get the real inbees/outbees source.** Find the actual plugin admin code in
-   the PlugPress monorepo (or the installed plugins). Do not work from
-   screenshots or memory.
-2. **Extract real tokens, don't guess:**
-   - Color palette (primary, surface, border, text, success/warning/error).
-   - Font family and the type scale (sizes, weights, line-heights).
-   - Spacing scale and border-radius conventions.
-   - Any logo / icon assets and how they're sized.
-3. **Check for a shared component package.** If inbees/outbees pull from a shared
-   PlugPress design-system package (React components or a token file), Saddle
-   should consume that same package rather than re-implementing it. Re-using it
-   is the whole point of "same workspace."
+> **DECIDED (2026-07-10, Fahim):** the admin UI is fully migrated to
+> **`@plugpress/ui` v0.3.0** — the shared PlugPress design system — which is
+> exactly the "shared component package" outcome the original research called
+> for. Import primitives directly from `@plugpress/ui`; the old
+> `admin/src/ui.jsx` compat shim is deleted. The system is **light-only**
+> (dark mode was removed from the DS in v0.2.0 — the dark-theme and
+> `s-palette-*` mentions below are historical). The 2026-07-04 monochrome
+> identity **stands**, now expressed through `tokens/accents/saddle.css`
+> (a fully monochrome accent) on top of the shared `--pp-*` tokens;
+> `style.scss` keeps only product-specific pieces (setup shell, permissions
+> lanes/chips, activity timeline, wizard flourishes) aliased to those tokens.
+> The brand mark is **single-sourced** from `assets/brand/mark.svg` — React's
+> `<BrandMark />` (SVGR import) and the PHP admin-menu icon
+> (`class-saddle-settings.php`, `file_get_contents` + recolor) both read that
+> one file; edit the SVG once to rebrand every surface.
+> Don't re-litigate any of this in future sessions.
 
 ## Constraints that still apply
 
-- `@wordpress/components` only for UI primitives (see CLAUDE.md). No Tailwind,
-  no styled-components, no separate UI kit — unless this research concludes a
-  shared PlugPress package is the established pattern and overrides that.
+- UI primitives come from `@plugpress/ui` only — no `@wordpress/components`,
+  no Tailwind, no styled-components, no second UI kit.
 - The Settings page must remain a single mounted React root (`#saddle-root`).
-- Don't regress accessibility: keep `@wordpress/components` semantics (labels,
-  focus states) intact when restyling.
+- Don't regress accessibility: labels, focus rings, `role`/`aria-*` semantics,
+  and `prefers-reduced-motion` support must survive any restyling.
+- Light-only: never add a theme toggle.
+- Portaled DS overlays (dialogs, dropdowns, toasts) read tokens from the
+  `pp-scope` class on `<body>` (added via `admin_body_class`) — keep it.
+- Stylesheet order: the DS bundle (`index.css` → handle `saddle-admin-ds`)
+  loads before Saddle's own `style-index.css` so product rules win.
+
+---
 
-## Done when
+## History
 
-- `admin/src/style.scss` is built from real reference material (tokens traceable
-  to inbees/outbees source, not invented).
-- A real Saddle icon replaces the placeholder `dashicons-rest-api` menu icon.
-- Side by side with inbees/outbees, the Saddle settings page is recognizably the
-  same product family.
+> **DECIDED (2026-07-04, Fahim):** the monochrome identity is intentional,
+> not a placeholder. Saddle keeps its own near-black/white, OpenAI/Apple-register
+> look — one restrained accent reserved for status/safety. The earlier
+> "align to inbees/outbees" directive below is SUPERSEDED; kept for history.
+
+### The former rule (superseded)
+
+Do **not** invent a visual design from memory or taste. Saddle has to read as
+"the same workspace" as the rest of the PlugPress portfolio (inbees/outbees).
+That means pulling real values, not approximating them — and if a shared
+PlugPress design-system package exists, consume it rather than re-implementing
+it. (That package now exists: `@plugpress/ui`. It happened.)
@@ -1 +1 @@
-<?php return array('dependencies' => array('react', 'react-dom', 'wp-api-fetch', 'wp-element', 'wp-i18n'), 'version' => 'fb668179e4dd58c480c4');
+<?php return array('dependencies' => array('react', 'react-dom', 'wp-api-fetch', 'wp-element', 'wp-i18n'), 'version' => '14af28acb07e0cb454e5');
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-<?php return array('dependencies' => array('react', 'react-dom', 'wp-api-fetch', 'wp-element', 'wp-i18n'), 'version' => 'fb668179e4dd58c480c4');`
	`1`	`+<?php return array('dependencies' => array('react', 'react-dom', 'wp-api-fetch', 'wp-element', 'wp-i18n'), 'version' => '14af28acb07e0cb454e5');`