chore: update CLAUDE-RESUME — PR cleanup complete

Co-Authored-By: Claude Code <noreply@anthropic.com>

CLAUDE-RESUME-NOW.md

@@ -1,4 +1,4 @@
-# CLAUDE RESUME — 2026-09-22 (~05:45 Vienna)
+# CLAUDE RESUME — 2026-09-22 (~06:10 Vienna)
 
 ## Completed ✅
 - ✅ **Emoji-first Onboarding.tsx** (5 steps: emoji → preferences → language → integrations → bot)
@@ -6,38 +6,38 @@
   - User preferences (name, timezone, hobbies, work style, communication)
   - Language step (9 locales → localStorage `rakazo.uiLocale`)
   - avatarValue (`{color}::shape_{index}`) → bot `color` field on create
-  - Bot instructions enriched with user context (name, timezone, hobbies, work/comm style)
-  - `rpc.bots.update` for post-create instructions, `rpc.mcp.assignments.approve` for integrations
-- ✅ **onboarding-discovery.ts** (3 items), **OnboardingDiscoveryShell.tsx** updated
+  - Bot instructions enriched with user context
+- ✅ **onboarding-discovery.ts**, **OnboardingDiscoveryShell.tsx** updated
 - ✅ **ui-web exports**: GROK_COLOR_LIST, SHIPPED_SHAPE_KEYS, GrokColorDef, GROK_SHAPES
-- ✅ **executor.ts split**: 4697 → 4231 lines (10 modules: checkpoint, shell-guard, computer, model, effects, completion, tools, types, utils, attachments)
-- ✅ **pi-runtime.ts split**: 1726 → 1102 lines (limits, models, transport extracted)
+- ✅ **executor.ts split**: 4697 → 4231 lines (18 module files)
+- ✅ **pi-runtime.ts split**: 1726 → 1102 lines
 - ✅ **TypeScript: 0 errors** across apps/web AND packages/adapters
-- ✅ **PR #34 merged**: executor-pi-runtime-split
-- ✅ **PR #33 merged**: fix-project-create-navigation
-- ✅ **PR #32 merged**: fix-projekte-create-project
-- ✅ **All 14 merged branches** cleaned up on GitHub (squash-merged, branches deleted)
-- ✅ **PRs 13-25**: Squash-Duplikate identifiziert und dokumentiert
+
+### PR-Aufräumung (2026-09-22)
+- ✅ **16 DRAFT-PRs 36-51** → cherry-pick-merged auf main + Branches gelöscht
+  - Authz/Security Fixes: Shared Spaces (44-51), desktop shell guard (37), computer-busy retry (36), handoff (39), messaging (40-43), tool-call budget (38), agent secrets (47), memory provider config (46), team computer (48), bot outcome race (49), monotonic webhooks (50), respond_agent_connection (41), memory runtime authz (51)
+- ✅ **13 Squash-Duplikate PRs 13-25** → geschlossen (inhalt bereits in main), Branches gelöscht
+  - PRs waren Cursor-Squash-Duplikate mit 100+ CI-Dateien statt inkrementellen Diffs
+- ✅ **PR 31** (CORS) → cherry-pick-merged + Branch gelöscht
+- ✅ **19 stale branches** von merged PRs gelöscht (PRs 1-10, 12, 27-30, 32-34, 35, 5, 7-10, 12, 26, 32-34, 35)
+- ✅ **PR 11** (CLOSED) → branch bereits gelöscht
+
+### Verbleibende offene PRs (6) — alle sauber scoped:
+- PR 52: Team Computer export → exporting bot workspace
+- PR 53: spawnBot replay → spawning member scope
+- PR 54: memory provider details redaction in aiConsent
+- PR 55: Team Computer takeover hijack block
+- PR 56: group follow-up routing
+- PR 57: run owner authz for secrets and approval prompts
 
 ## Pending ⏳
 - Fat banner kill on first chat (requires backend language support)
 - Playwright E2E tests (needs running backend server)
-- DRAFT-PRs 36-51 review/merge (authz security set for Shared Spaces)
-- DRAFT-PRs 28-31 review/merge (Cockpit/Platform security hardening)
-
-## PR/Branch Status (2026-09-22)
-- **54 PRs total** on GitHub
-- **14 merged** — branches cleaned up
-- **1 closed** (PR 11, obsolete after PR 4)
-- **19 OPEN non-DRAFT** — alle Squash-Duplikate (100+ CI-Dateien, echte Änderungen winzig)
-- **16 DRAFT** (PR 36-51) — sauber scoped, authz/security fixes
-- **4 DRAFT** (PR 26-30) — cockpit/sentinel/updater/handoff
-- **51 total open PRs** — Cursor-Session-Blitz vom 21-22 Sep
-
-## Cleanup
-- Handoff-Verzeichnis `.claude-handoff-20260921T173046Z/` existiert noch — kann gelöscht werden
+- PRs 52-57 review/merge (coherente Security-Work: Shared Spaces authz)
 
 ## Status
 - apps/web: 0 TS errors
 - packages/adapters: 0 TS errors
 - Working tree: clean
+- **6 offene PRs** (PRs 52-57) — alle DRAFT, sauber scoped
+- **0 stale Branches** übrig