docs(roadmap): add #399 — history --output-format json sends error to stderr only; dual kind/type vocab

ROADMAP.md

@@ -6301,4 +6301,4 @@ Original filing (2026-04-18): the session emitted `SessionStart hook (completed)
 380. **Top-level `tokens --help --output-format json` hangs with zero stdout/stderr instead of returning bounded command help JSON** — dogfooded 2026-04-30 for the 02:30 nudge on current `origin/main` / rebuilt `./rust/target/debug/claw` with embedded `git_sha` `d95b230c`. After verifying #358 covered `cost --help`, a fresh adjacent probe on the token-budget surface showed the same silent failure class: repeated bounded runs of `timeout 8 ./rust/target/debug/claw tokens --help --output-format json` exited `124` with `stdout=0` and `stderr=0`. In the same rebuilt binary, `version --output-format json` returned promptly with version/build metadata, proving the binary itself and JSON output path are reachable. This is distinct from #358's cost help hang: the affected surface is the sibling `tokens` command help, which agents use before estimating prompt/session token budgets. **Required fix shape:** (a) make `tokens --help --output-format json` return static/bounded stdout JSON with `kind:"help"` or `kind:"tokens"`, `action:"help"`, usage, options, examples, supported output formats, and related slash/direct commands; (b) ensure help rendering does not initialize slow token accounting, session, or provider state; (c) if any dynamic provider is consulted, return a typed JSON timeout/unavailable error instead of hanging; (d) add regression coverage proving tokens help in JSON mode returns within a deterministic budget. **Why this matters:** token budgeting is a preflight clawability surface. If help hangs silently, automation cannot safely discover how to inspect or constrain token usage before running expensive prompts, and budget-aware wrappers stall at the discovery step. Source: gaebal-gajae dogfood follow-up for the 02:30 nudge on rebuilt `./rust/target/debug/claw` `d95b230c`.
 381. **Top-level `cache --help --output-format json` hangs with zero stdout/stderr instead of returning bounded command help JSON** — dogfooded 2026-04-30 for the 03:00 nudge on current `origin/main` / rebuilt `./rust/target/debug/claw` with embedded `git_sha` `d95b230c`. After #358 and #380 landed for the cost/tokens preflight help hangs, a fresh adjacent probe on the cache-control surface showed the same silent failure class: repeated bounded runs of `timeout --kill-after=1s 8s ./rust/target/debug/claw cache --help --output-format json` exited `124` with `stdout=0` and `stderr=0`. In the same rebuilt binary, `version --output-format json` returned promptly with version/build metadata, proving the binary itself and JSON output path are reachable. This is distinct from the separate `/cache` slash-command envelope mismatch class: the affected surface here is top-level `cache` command help, where agents need bounded local discovery before deciding whether to inspect, clear, or summarize cache state. **Required fix shape:** (a) make `cache --help --output-format json` return static/bounded stdout JSON with `kind:"help"` or `kind:"cache"`, `action:"help"`, usage, options, examples, supported output formats, and related slash/direct commands; (b) ensure help rendering does not initialize slow cache/session/provider state; (c) if any dynamic provider is consulted, return a typed JSON timeout/unavailable error instead of hanging; (d) add regression coverage proving cache help in JSON mode returns within a deterministic budget. **Why this matters:** cache inspection and cleanup are recovery/control-plane operations. If cache help hangs silently, claws cannot safely discover cache semantics before attempting cleanup, and automation stalls before it can choose a non-destructive cache action. Source: gaebal-gajae dogfood follow-up for the 03:00 nudge on rebuilt `./rust/target/debug/claw` `d95b230c`.
 
-402. **`doctor --output-format json` `config` check has `resolved_model: null` and `status:"ok"` simultaneously — a null/unresolved model is not flagged as a warning or misconfiguration, and `loaded_config_files` is an integer count while `discovered_files` is an array, making the two fields inconsistently typed for the same domain** — dogfooded 2026-04-30 by Jobdori on `e939777f`. Running `./claw --output-format json doctor` returns `{"name":"config","status":"ok","resolved_model":null,"loaded_config_files":2,"discovered_files":[...2 paths...]}`. Two issues: (1) `resolved_model: null` with `status:"ok"` — automation that reads doctor JSON to validate pre-flight state cannot tell from the config check alone that no model is configured; only the `system` check's `default_model: null` exposes the same gap, but from a different check with no cross-reference; (2) `loaded_config_files: 2` is an int count while `discovered_files: [...]` is an array — the two fields describe the same set of files but one is a scalar and the other a collection, preventing automation from correlating which loaded files map to which count. **Required fix shape:** (a) add `model_configured: bool` and `model_source: "config"|"default"|"env"|null` to the `config` check; (b) when `resolved_model: null`, set `status:"warn"` or add a structured `issues[]` entry rather than `status:"ok"`; (c) rename `loaded_config_files` to `loaded_config_file_count` or change it to a `loaded_config_files[]` array matching `discovered_files[]`; (d) add regression coverage. Source: Jobdori live dogfood, `e939777f`, 2026-04-30.
+399. **`claw --output-format json history` sends its error JSON to stderr only, leaving stdout empty; the error envelope uses dual classification vocabularies `kind:"unknown"` and `type:"error"` simultaneously — contradicting the single-vocabulary discriminator established for non-error JSON envelopes** — dogfooded 2026-04-30 by Jobdori on `e939777f`. Running `./claw --output-format json history` exits `1`, stdout is empty, stderr contains `{"error":"\`claw history\` is a slash command. Use \`claw --resume SESSION.jsonl /history\` or start \`claw\` and run \`/history\`.","hint":null,"kind":"unknown","type":"error"}`. The JSON-mode stdout contract is therefore violated even for commands that fail early with a hint: the only parseable payload is on stderr and uses both `kind` and `type` as competing discriminators. This pattern is also present in `plugins uninstall` (#353) and slash-command errors (#340-343). **Required fix shape:** (a) in `--output-format json` mode, emit all primary JSON error envelopes on stdout; (b) unify the discriminator: use `kind:"error"` + `code:"slash_command_only"` or `kind:"slash_command_redirect"` + `status:"error"`, but never both `kind` and `type` as sibling top-level discriminators; (c) populate `hint` with a structured `{command, resume_safe, examples[]}` object rather than a null placeholder; (d) add regression coverage for `history --output-format json` proving stdout contains the JSON error envelope and the envelope uses the documented single discriminator. Source: Jobdori live dogfood, `e939777f`, 2026-04-30.