fix(05): clean must_haves, trailing XML, update ROADMAP to 5 plans

- Remove frontend artifacts from 05-03 must_haves (belong to 05-04)
- Remove trailing XML generation artifacts from 05-04 and 05-05
- Update ROADMAP Phase 5: 5 plans across 4 waves

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.planning/ROADMAP.md

@@ -193,7 +193,26 @@ Decimal phases appear between their surrounding integers in numeric order.
   2. Desktop app connects to the existing web backend (no standalone server)
   3. Code changes are automatically committed and pushed to Gitea with minimal manual intervention
 
-**Plans**: TBD
+**Plans**: 5 plans
+
+**Wave 1**
+
+- [ ] 05-01-PLAN.md -- Dashboard foundation: Prisma models, CRUD API, grid, edit-mode, clock widget, settings shell, header link, i18n
+
+**Wave 2** *(blocked on Wave 1 completion)*
+
+- [ ] 05-02-PLAN.md -- Search + Notes widgets, widget settings panel, SearchProvider backend
+
+**Wave 3** *(blocked on Wave 2 completion)*
+
+- [ ] 05-03-PLAN.md -- Calendar backend: Prisma model, AES-256-GCM crypto, source CRUD, CalDAV/ICS/Exchange providers, event aggregation
+- [ ] 05-04-PLAN.md -- Calendar frontend: calendar widget, calendar settings page, API client (depends on 05-03)
+
+**Wave 4** *(blocked on Wave 3 completion)*
+
+- [ ] 05-05-PLAN.md -- Visual Verification: Human confirms dashboard, widgets, calendar, settings
+
+**UI hint**: yes
 
 ## Progress
 

.planning/phases/05-dashboard-calendar/05-03-PLAN.md

@@ -41,15 +41,7 @@ must_haves:
       exports: ["CalendarService"]
     - path: "apps/api/src/calendar/providers/ics.provider.ts"
       provides: "ICS event fetch + parse"
-    - path: "apps/web/src/components/dashboard/widgets/calendar-widget.tsx"
-      provides: "Upcoming-events list widget"
-    - path: "apps/web/src/app/(portal)/settings/dashboard/calendar/page.tsx"
-      provides: "Calendar source management UI"
   key_links:
-    - from: "apps/web/src/components/dashboard/widgets/calendar-widget.tsx"
-      to: "/api/calendar/events"
-      via: "fetch in effect"
-      pattern: "calendar/events"
     - from: "apps/api/src/calendar/calendar.service.ts"
       to: "prisma.calendarSource"
       via: "user-scoped query with credential decryption"

.planning/phases/05-dashboard-calendar/05-04-PLAN.md

@@ -180,6 +180,3 @@ Consumed (built in 05-03, do NOT redefine): `GET /api/calendar/events`, `GET|POS
 
 <output>
 Create `.planning/phases/05-dashboard-calendar/05-04-SUMMARY.md` when done
-</output>
-</content>
-</invoke>

.planning/phases/05-dashboard-calendar/05-05-PLAN.md

@@ -126,6 +126,3 @@ No new trust boundaries — verification-only plan; all enforcement was implemen
 
 <output>
 Create `.planning/phases/05-dashboard-calendar/05-05-SUMMARY.md` when done
-</output>
-</content>
-</invoke>