feat(6.8): role-template management UI — versioning, full + augmented types

[fstamatelopoulos]

Summary

Adds a top-level "Agents" tab to the web UI for managing each agent role's instruction template. Per-role versioning + promote-to-production with two complementary modes:

• full — body replaces the bundled cf² default. Maximum flexibility (delete sections, restructure); doesn't auto-pick-up cf² upgrades. UI shows a "Forked from cf² vX.Y.Z" badge so users know their version may be drifting.
• augmented — body is appended to the live bundled default at promote time and every server boot. The bundled default is read live (never duplicated on disk), so when cf² ships a new template, the user's extension automatically rides along on the new version. Upgrade-friendly by default.

Hooks into the existing user-global override path (~/.cfcf/templates/<name> — what getTemplate() already reads) so the runtime is unchanged. Promote writes the (composed-for-augmented) content there; revert-to-default deletes it.

What's new

Core (packages/core/src/role-templates.ts)

• New module with full CRUD: listManagedTemplates, getManagedTemplate, getVersionContent, saveVersion, updateVersion, deleteVersion, promoteVersion, findOrphanedVersions, refreshAugmentedOverrides.
• Storage at ~/.cfcf/templates-managed/<name>/{manifest.json, v_<id>.md}. Manifest self-heals on corruption; missing version files fall back gracefully.
• Round-1 manifests (no type field) read back as type: "full" automatically — no migration needed.
• getEmbeddedTemplate(name) newly exported from templates.ts for read-only access to the bundled default.

Server

• New /api/role-templates/* endpoints (list / get / per-version content / create / update / delete / promote) with uniform { error: string } envelope.
• Boot-time auto-recompose for augmented overrides (refreshAugmentedOverrides() called from start.ts after the orphan reaper). Cheap idempotent pass — only writes when on-disk content actually differs from live composition. Single log line on change. Full versions are not touched (frozen by design).

Web UI

• New /agents route (Header link between Memory and Settings). Optional ?template=<name> query for deep-linking.
• Tab strip ordered by natural agent execution sequence: Solution Architect → Developer → Judge → Reflection → Documenter. Tabs whose role currently uses a custom version show a • marker.
• Action bar: Edit (full-edit mode) / Augment (augmented-edit mode) / Promote / Revert to default / Delete version.
• Two editor layouts: single textarea for full-type versions; split view for augmented (read-only standard on top + editable extension below). Both panels at 25vh floor height with resize: vertical handle.
• Version selector dropdown shows <label> — <type> (<date>) — promoted for each entry. Bundled default always selectable, never deletable.
• "Forked from cf² vX.Y.Z" badge below the selector for full versions (since they don't auto-upgrade).
• Status messages above the version selector with non-directional wording.

Naming + ordering polish (informed by user feedback)

• Renamed the process.md tab from "Workspace Process" to "Developer" — the file's content literally opens with "You are a dev agent…", so it functionally serves as the dev role's primary instruction template even though the historical filename predates the per-role-instructions convention.
• Tab order matches the natural agent execution flow within an iteration loop (architect → dev → judge → reflection → documenter).

Documentation

• New design doc: docs/design/role-template-management.md.
• Full documentation audit (commit 804824c) — updated 9 user-facing docs to align with this PR + recent changes (items 6.30, 6.31, 6.33). Stale "manually-invoked Solution Architect via cfcf review is interactive" claims removed (verified in code: SA is headless on all paths). New endpoints documented in docs/api/server-api.md. CLAUDE.md gains bullets for role-template management, orphan reaper, ollama auto-refresh, and the architect-always-unattended classification.

Test plan

• bun run typecheck — clean
• bun test packages/core packages/cli packages/web — 845/845 pass (41 unit tests in role-templates.test.ts, 17 endpoint tests, 3 route-parser tests)
• cd packages/web && bun run build — clean
• Manual — open Agents tab, click around the five roles
• Manual — Edit on Default → save as new full version → Promote → verify ~/.cfcf/templates/<name> contains the body verbatim
• Manual — Augment on any role → type extension → save as new augmented version → Promote → verify override file = <bundled default> + separator + <extension>
• Manual — manually edit the override file to clobber the bundled-default portion → restart server → verify [server] Re-composed N augmented role-template override(s)… log line + override file is back to <fresh bundled> + <extension>
• Manual — delete a promoted version → verify auto-revert to default + override file deleted

Notes

• Round 1 (initial full-template editing) and round 2 (augmented type + boot-time recompose) ship together in this PR — there's no intermediate state worth merging separately.
• Out of scope (deferred follow-ups): dev-role custom-directions block (dev's Tier-1 instructions are programmatically generated by context-assembler.generateInstructionContent(), not file-loaded — needs a different sentinel-merge insertion-point design); Product Architect / Help Assistant system-prompt management (their prompts are programmatically assembled); per-project (workspace-local) override management UI; diff viewer between versions.
• Pre-existing app.test.ts config-merge failure on main is unrelated to this PR (verified earlier in iter-6 via git stash && bun test).
• Branch contains 11 commits — the work was iterated with user feedback. A squash-merge will keep main history clean if you'd prefer; happy either way.