chore: sync private v5.0.0 (a14d3cd)

[agent-kit-startup]

Summary

• Automated allowlist sync from the private source of truth.
• Release v5.0.0.
• Head branch sync/v5.0.0-a14d3cd.

Release notes

Fixed

• agent-kit cursor-awareness --check: walk up from --cwd to find docs/cursor-native-audit.md (fixes false Missing inventory when the shell is under packages/cli or another nested path); consumer/missing-docs path returns an actionable --cwd hint. Native-audit Action table: A5 Done (root AGENTS.md present), A4 Partial with dual-lane next step, A7 Open with scoped multi-IDE next step; A6 unchanged.

• Pre-v5.0.0 evidence gate: R14-pair mid-batch monitors plan-monitor-fix-staging-ci-and-queue-end-product-residuals.md and plan-monitor-close-ship-5.0-npm-npx-install-residuals.md with _index.md Audits rows and regenerate docs/evidence/knowledge-classification.json so pnpm evidence:knowledge-classification:check is green again (Still open A from ship-5.0 clean pre-git-prod gate).

• Pre-v5.0.0 tag gate: re-verify lint/typecheck/tests/deny-links/evidence/landing/Path-C-pack on staging 71dbbae; persist matrix at docs/evidence/runtime/ship-5.0-pre-tag-green-gate-2026-08-12.md; R15 Closed-by A/B on plan-monitor-ship-5.0-clean-pre-git-prod-gate.md. No tag; no /git-prod.

• Landing closeout: factory CI runs pnpm landing:build + landing:build:check; Align Closed-by pointer notes public LICENSE still pending /git-prod; R15 Closed-by appends on the five queue-end monitors (Design SoR re-absorb + clipboard success-path evidence still owed before next sync).

• Mission Control broadcast: live missionkit.io/mc/open.html matches repo harden (R1 verified by sha256); start-broadcast degrades to LAN/token print when share encode rejects non-RFC1918 primary LAN (Tailscale 100.64/10); HTTP-level serve auth matrix covers /open + /open.html without token vs token-gated data.

• Mission Control preferred-browser residuals: CLI uses resolveContextConfigPath; OS-default and fallback opens detect failure before claiming success; reject win32/cmd metacharacters " % ^ ' = , +; expand hermetic which/win32 spawnSync tests; ADR trust-boundary + failure-honesty updated.

• Dogfood L0 nits: /run-plan-all per-plan worker template states orchestrator already skimmed Unprocessed; drop inert PO dogfood read_scope paths; promote /continue-plan dogfood preflight to its own hard stop (runs regardless of externalPlanReview.preflight); overlay hash set +2.

• Dogfood Unprocessed parser: accept markdown table rows and numbered list items; terminate the Unprocessed section on any Processed Files heading (stops mixed H2/H3 leaks).

• Knowledge-classification CLI: default to the handoff fixture and refuse baking live .cursor/HANDOFF.md into the tracked ledger unless --allow-live-handoff (prevents repeated Evidence-check red after bare node …mjs regenerations).

• Staging Evidence checks: regenerate docs/evidence/knowledge-classification.json via pnpm evidence:knowledge-classification (handoff fixture) and R14-pair five queue-end plan monitors plus _index.md Audits rows so evidence:knowledge-classification:check is green again.

• missionkit.io install / prompt copy CTAs: await clipboard writes, show honest failure UI (not optimistic ✓), and fall back to execCommand when the Clipboard API rejects; decorative "Copy plan path" / "Copy /git-staging" mock buttons marked disabled. Built via landing:build, deployed to Hostinger; Design SoR re-absorb notes in UPSTREAM-DESIGN-FIX-PROMPT.md.

• Mission Control preferred-browser residuals (A–H): validate preferredBrowser as an app/binary name (reject path separators and shell metacharacters); attach spawn error handlers and fall back once to the OS default opener with honest starter messages; align start-broadcast.mjs preference root with resolveSnapshotRepoRoot; share normalizePreferredBrowser / OS_DEFAULT_TOKENS with the CLI; document per-platform values and factory/CLI-only /dashboard-broadcast slash; expand hermetic tests (win32, spawn-failed, invalid-url, fallback). Pack-gate hygiene I remains on broadcast F8. ADR 2026-08-11_mission-control-preferred-browser.md

• Dogfood Broad Intake / sessionStart now accept consumer ## Unprocessed Files as well as factory ### (parser ends on same-or-higher heading); /dogfood pins H3 on new consumer writes; ADR decision 2 append-only correction; bucket-count prose uses table-as-SoT (no hardcoded numeral); /run-plan-all orchestrator owns Unprocessed preflight (workers skip re-recite); docs/external-plan-review.md Broad Intake row names the dogfood bucket

• Cache lock release fail-closes when owner metadata is missing, unreadable, or mismatched (no longer deletes a successor's lock during the mkdir → owner publish window); owner.json is published via temp file + rename; install RootRefusedError matches update (process.exitCode = 1 + return) so cleanup/finally stay reachable

• Crew Monitor structural pin (residuals E/F from close-crew-glyph-avatar-still-open): expectBadgeIsRowSiblingBeforeActor now whole-template-counts ${chipHtml} / chip classes to zero and requires exactly one ${badgeHtml}, closing the half-locked sibling gap left by the retired feed-label helper; empty-template assertion names the crewMonitorRowRenderTemplate marker for clearer diagnostics

• npm pack --dry-run --json now receives clean JSON on stdout because the CLI dashboard prepack sync message is written to stderr.

• Close multi-workspace install isolation residuals D2/L1/L2/L4/P2/P3: mode-independent root guard for --yes/$HOME///no-git+no-manifest with --force-root escape hatch; cache lock ownership token (PID/UUID) with mtime refresh and ownership check before stale reclaim/release; hold cache lock across install/update/add/diff/contribute registry copy; refused update exits non-zero; dashboard-broadcast.md derives MC_PORT from repo root; install.md Port B notes chat-install Ask as the confirmProjectRoot equivalent. D3/L3/P1 were already fixed at HEAD (see .cursor/memory/plan-monitor-multi-workspace-install-isolation.md Closed-by section).

• Close vscode-first-install dashboard onboard residuals C/E/K/J-vscode: skip-if-exists guard for .vscode/settings.json, .github/copilot-instructions.md, and .vscode/security-review.agent.md; generated artifacts registered in protectedPaths and PersonalizationResult.items; generator/vscode.test.ts pins the guard; docs/getting-started.md splits npx -y (suppresses npx's own confirmation) from CLI --yes / AGENT_KIT_YES=1 (skips project-root prompt); terminal.test.ts pins isNonInteractive for CI, AGENT_KIT_YES, and stdin.isTTY. A/B fixed at HEAD; D2 owned by multi-workspace plan; F/G/H/I out of scope.

• Close BIGFIX PTY monitor still-open residuals R1–R7: build job checkout now uses fetch-depth: 0; risk-hotspot scorer no longer depends on a shallow-unresolvable git range; knowledge-classification --check ignores commit provenance fields; ledger census scopes to tracked paths; HANDOFF Gaps updated to honest red-build voice; behavioral tests added for wait_for_pty_progress banner-baseline and deadline logic; liveness probe for cap/warn concurrent-arm refusal documented as backlog

• Config persona Inherit default sends null to clear a stored mode override (guards merge delete path)

• Overlay update: end-to-end ledger-absent evidence that known-shipped files refresh while customized peers stay preserved (docs/evidence/overlay-update-preserve-refresh.md)

• SECURITY.md: private vulnerability reporting preferred first when enabled; public no-detail issue is fallback; PVR enable remains repo-admin HITL

• CLI welcome helmet outline uses HELMET_OUTLINE via trueColor; test asserts rendered ANSI

• CLI welcome grouped help: await citty Resolvable<CommandMeta> in help-groups.ts and accept generic CommandDef<T extends ArgsDef> so pnpm typecheck and packages/cli DTS build pass after the bare-invoke welcome work

• Regenerated docs/evidence/knowledge-classification.json and tracked three queue-end plan monitors with paired _index.md Audits rows so evidence:knowledge-classification:check is green

• Ship packages/cli/LICENSE in the published package files list so npm tarballs include PolyForm Noncommercial text

• Landing Mission Control demo (landing-missionkit/remote/mc): refresh #mc-mock-data Current Mission agent to Tech Lead and feed labels to design-v2 wire tokens (Eng / SQ). The tracked snapshot does not ship product CREW_ACTOR_MASK / crewActorRole, so the iframe still renders wire tokens verbatim (not long display masks). Correcting the earlier false claim that fixtures were display-masked; demo lexicon restoration waits on product-snapshot regen or Design export → landing:sync (do not hand-edit remote/ as SoT). See docs/agentkit-landing.md

• Evidence anti-overwrite: generate-codebase-findings.mjs --write preserves on-disk reviewed coverage batches; non-mutating findings/hotspots checks ignore HEAD-volatile generatedAt / working-tree digest fields

• Backfilled 11 registry skill hashes into KNOWN_SHIPPED_OVERLAY_HASHES and pin registry SKILL.md coverage in Vitest

• Capability inventory: regenerate launch-announcement anchors, restore SHA-verified counts, document factory-only /public-issue-triage counting policy

• Capability inventory: re-verify README positioning anchors against HEAD (Anchor L# column) and point verified-against SHA at 7fdb03c

• Config tab: persona mode "Inherit default" skips empty mode overrides; document /api/config token exemption in write verification matrix

• SECURITY.md: list working private maintainer channel first while public PVR remains disabled

• CLI welcome nits: guard meta (shell, prompt), column-aligned hints, broader CI env detect, hasCliSubcommand tests, helmet outline uses light text color

• KNOWN_SHIPPED_OVERLAY_HASHES was missing .cursor/skills/core/docs-repo/SKILL.md, so an unedited consumer copy of that skill was misread as customized and never refreshed by agent-kit update. Ledger refreshed to 75 entries (prior hashes retained)

• Overlay anti-overwrite: backfilled current hash for .cursor/commands/dogfood.md in KNOWN_SHIPPED_OVERLAY_HASHES and added a Vitest pin that every L0 overlay artifact body is present in the ledger (closes residual L3 drift that permanently stalled unedited consumer refreshes)

• Evidence anti-overwrite (AUDIT-001 follow-through): generate-codebase-findings.mjs and score-codebase-risk-surface.mjs refuse to rewrite reviewed JSON unless --write / --fix; package.json generators pass --write; pin test asserts every evidence:*:check script stays non-mutating

• Risk-hotspot scorer additionally excludes .cursor/plans/ from the product corpus so the manifest is independent of gitignored local backlog files; docs/evidence/codebase-risk-hotspots.json regenerated

• Closed staging-evidence R14 still-open residuals A–G: verified R1 allowlist pin reconciliation, corrected close-staging-evidence-checks-r14-index.md Closed-by B/C honesty, added HANDOFF Gaps voice / merge-gate ownership / R15 provenance notes to close-staging-evidence-checks-r14-a-d-residuals.md, and qualified the _index.md evidence-checks-green tag to evidence-checks-green-at-98e0cba

• Closed MC health healthcenter R1–R3 still-open residuals: removed the fallback-specific negative pin at packages/cli/src/dashboard/plugin-ux-validation.test.ts (then believed covered by the broader scan), bounded the remaining HEALTH_SEVERITY_CHROME pin to the object literal scope so unrelated token: strings below the literal do not fail the severity-chrome test, and noted R14 batch monitor hygiene (later corrected as already closed by a9498ca)

• Closed landing Mission Control session production-shot residuals B-H: documented the canonical missionkit.io cutover and five-asset legacy rollback bundle, differentiated Mission Control tab copy, refreshed inventory wording, aligned the 20x20 logo spec, and exposed row/image labels without a frame role="img" subtree trap

• Landing legacy rollback truth (R1–R5): removed the false self-contained claim for blob d0e43278cda5; documented that no production-shot single-file artifact exists (CSS-mockup blob 11197c8db22f @ 611c232 is the last pre-shot self-contained file); switched both legacy HTML files to root-relative /dashboard/ + /assets/production/ paths; dropped the stale worktree byte-identity assertion; refreshed source-monitor Audits tags

• Mission Control Healthcenter residuals R1–R3 (post-PR #632): drop unread token from all HEALTH_SEVERITY_CHROME severities and fallback; correct false comment that tied token to [data-sev] CSS; remove redundant E3 pin and assert no chrome token field; document SoT dashboard/dashboard.html (never gitignored packages/cli/dashboard/ mirror) in plan template and plan-routine

• Staging-evidence R14 residuals A/C (post-PR #626/#627): R15 Closed-by cites on public-ci-skip (R1/R4) and landing-v1-v6 (B) monitors for 743de13 / PR #626; R14-pair plan-monitor-close-staging-evidence-checks-r14-index.md with its _index.md Audits row and regenerate knowledge-classification ledger (B/D note-only; merge-gate enforcement deferred to public-ci-skip R8)

• Crew Monitor residuals R1–R4 (post-PR #631): replace inert whole-file avatar↔chip proximity regex with render-block structural pin (feedSegSpans[0] + chipHtml + no ${chipHtml} between avatar and feed-label); regenerate docs/evidence/knowledge-classification.json and R14-pair the close monitor with its _index.md Audits row (PR #637/#638)

• Landing v1–v6 monitor residuals C/D/E: split runtime-captured counts from source-of-record values in docs/evidence/runtime/landing-a11y-a-e-2026-08-01/ (new sot-counts.txt with "not served" header; live-counts.txt reduced to runtime capture); qualify README follow-on as source-of-record not yet served and mark pinned WP URL deprecated; reword wpautop guard comment in landing SoT files to avoid literal <br> (grep-clean); refresh .cursor/project-context.md product version and npm CLI lane 4.8.4 → 4.8.9. A delegated to deploy residuals plan; B to R14 companion.

• Mission Control Healthcenter residuals (E1–E3): widen git Autofix to git init && git commit --allow-empty (zero-commit repos); unify memory path CTA to Copy path with README; drop unused token on aggregate HEALTH_SEVERITY_CHROME.error

• Mission Control Healthcenter residuals (C/E/F/G/I): prune unreachable per-check error chrome; remap Autofix for handoff/git/memory; drop dead healthCheckKeydown / showHealthInfo / .health-message; scope seven-check test to HEALTH_CHECK_META

• Landing static SoT: lighten --text-muted to #7f93a8 (WCAG AA on card/gradient); document footer CTA cluster; rewrite live-counts.txt as real newlines; note dead br guard and unused purple contrast trap

Added

• Mission Control broadcast Share URL mask: dashboard:broadcast / agent-kit dashboard-broadcast print a cosmetic Mission Kit (or BYO) share link (https://missionkit.io/mc/open.html#v1.… by default). The Share URL embeds the live token (same secret handling as the raw token); soft TTL is advisory. Fragment stays client-side; not a WAN relay. Resolver rejects non-private targets; BYO base must be HTTPS (loopback http allowed for local preview). Env: MISSION_CONTROL_SHARE_BASE, MISSION_CONTROL_SHARE_TTL_SEC (0 = never), MISSION_CONTROL_SHARE_SHOW_LAN. ADR 2026-08-11_mission-control-broadcast-url-mask.md

• Mission Control broadcast share residuals: default share base uses live …/mc/open.html; pack gate asserts dashboard/lib/** + open.html; --no-open help matches Share-primary print; auth-gate tests cover /open + /open.html exemption matrix.

• Mission Control preferred browser: shared dashboard/lib/open-browser.mjs opens at most one OS browser (config missionControl.preferredBrowser, env MISSION_CONTROL_PREFERRED_BROWSER, CLI --browser); --no-open / MISSION_CONTROL_NO_OPEN still skip. Slash /dashboard stays IDE MCP only; /dashboard-broadcast is one surface (OS preferred or IDE verify). ADR 2026-08-11_mission-control-preferred-browser.md

• Broad Intake Unprocessed dogfood bucket (factory dogfood/README.md or consumer .cursor/dogfood/README.md ## or ### Unprocessed Files) on /start-project, /backlog-add, and Write residuals; advisory preflight on /continue-plan, /run-plan, and /run-plan-all. Same triage labels; never auto-analyze. ADR 2026-08-11_dogfood-unprocessed-broad-intake-bucket.md

• Community health C–F residuals: scripts/check-public-deny-links.mjs now scans .github/**/*.{yml,yaml} (issue-template forms, CI) in addition to markdown, with three new tests (9/9 pass). ADR 2026-08-05_community-health-files-live-under-github-dir point 5 corrected to "adapted in Enforcement section only". docs/CONTRIBUTING.md Standards bullet names both repos explicitly (main for public, staging for factory). .cursor/memory/_index.md trailing newline added.

• Design system pointer doc (docs/design-system.md): Claude Design project id (4451a0e9-5258-45cd-91f7-a837bdcbde81), upstream/downstream surface map, code-wins-on-divergence rule, --text-muted token divergence note. Crosslink added to docs/agentkit-landing.md. Comment added in dashboard/dashboard.html beside --text-muted: #6d8094 citing the landing AA exception (#7f93a8). Closes residuals A+D from transport monitor plan-monitor-design-system-transport-claude-design.md; B/C/E/F noted as operator-decision or superseded

• CLI bare-invoke welcome: branded Mission Kit helmet ASCII, agent-kit / @dadado/agent-kit-cli version line, print-and-exit utility hints (--help, doctor, status, dashboard, init); NO_COLOR / CI / non-TTY plain fallback; grouped root --help (SETUP / MISSION / DASHBOARD / INTEGRITY). Does not reuse run-plan persona banners. Dual-name ADR 2026-08-06_mission-kit-vs-agent-kit-naming

• Factory-only /public-issue-triage slash command for maintainers: list, classify, comment, label, and close incoming issues on agent-kit-startup/agent-kit with HITL gates; omitted from L0 install and excluded from public-sync; bridges optionally to dogfood, memory WRITE, or /backlog-add. ADR 2026-08-05_factory-only-public-issue-triage-command

• Dogfood inbox notes (2026-08-05): external design source-of-record gaps when a deploy artifact moves off-repo; /run-plan-all queue orchestration pitfalls (inferred park written to HANDOFF, refused-command retry, stale audit-session pile)

• Plan monitors (post-hoc): design-system-transport-claude-design, github-community-health-profile (paired _index.md Audits rows)

• Crew Monitor real-time rows for two activity classes the operator previously could not see at all. subagent rows track Task worker lifecycle (running / done / failed) read from the worker transcript's terminal record under ~/.cursor/projects/<slug>/agent-transcripts/<parent>/subagents/, labelled with the dispatched worker type and the to-do id lifted from the dispatch prompt. plan_review rows point at each recent plan-monitor-*.md and say whether it is still awaiting triage. Both kinds are additive to MONITOR_ACTIVITY_KINDS; both are bounded by the same recency / size / count discipline as the existing prompt and report collectors, and both degrade to an empty list rather than an error state. Flight Log and the attention inbox keep sole ownership of triage - a plan_review row is a pointer and never marks anything reviewed

• Crew Monitor row density toggle (compact / comfortable) in the card header, stored under the namespaced agent-kit:monitor-density key and restored before first paint. With no stored preference the mode is auto-picked from viewport width (comfortable at >=900px). Comfortable rows wrap the label to at most two lines instead of hard-truncating a token mid-word; the labelFull title tooltip stays required in both modes, because the display label is still capped upstream

• GitHub community health profile: .github/CODE_OF_CONDUCT.md (Contributor Covenant 2.1), .github/SECURITY.md (private disclosure via GitHub private vulnerability reporting, supported versions, documented Mission Control loopback / sandbox-disabled posture as out-of-scope-by-design), .github/SUPPORT.md (question routing, doctor --json first), .github/ISSUE_TEMPLATE/ (bug + feature forms, config.yml with blank issues disabled and contact links), and .github/PULL_REQUEST_TEMPLATE.md mirroring the docs/CONTRIBUTING.md quality gate. All files sit under .github/ so scripts/public-sync.manifest covers them via the existing .github/** include - no allowlist delta. docs/CONTRIBUTING.md stays the CONTRIBUTING source of truth (GitHub discovers docs/), and README Contribute plus the docs index carry thin cross-links

• Cursor Marketplace packaging: .cursor-plugin/plugin.json now declares explicit component paths (rules, skills, agents, commands, hooks) plus logo, homepage, and an object-shaped author. Without those entries the plugin would have listed with zero components, since Cursor's default discovery reads rules//skills//agents//commands/ at the repo root and Agent Kit keeps everything under .cursor/. skills points at .cursor/skills/core — one level deeper than the obvious path, because discovery only matches direct children holding a SKILL.md — which also keeps stack skills on agent-kit add

• name + description frontmatter on all 27 files in .cursor/commands/, required by the Marketplace submission checklist. name matches the existing filename slug, so no slash command was renamed

• Landing build pipeline for missionkit.io: landing:sync (Claude Design zip export → .cursor/context/landing-missionkit/remote/, React vendored and SRI-verified against the hashes the design runtime declares), landing:build / landing:build:check (derives the asset list from the canvas; drops unreferenced stylesheets; self-hosts React; injects a static <title>/OG head for crawlers), and landing:serve (loopback stage with Range support and no-store, for hands-on testing before deploy). Self-containment is proven by an offline headless render, not asserted: DOM byte-identical with all external DNS blocked, zero unresolved bindings

• Landing deployed to missionkit.io via the design-runtime bundle: favicon (assets/logo.svg), Open Graph image (assets/hero-astronaut.png), full Twitter Card with summary_large_image, and build-landing.mjs crawler <head> inject extended to mirror icon, og:image, twitter:image/title/description with absolutized URLs. P1-1 (YouTube-on-load before modal open) fixed upstream: the demo modal iframe now uses a lazy demoSrc binding (empty at rest, set only in openDemo, cleared in closeDemo), so first-paint issues zero external requests. docs/agentkit-landing.md rewritten for the new pipeline; check:landing-body-equality guard retired; legacy .cursor/context/landing-agentkit/ files kept for rollback reference only

• Public-sync compatibility evidence for the README and public maintainer guides: docs/evidence/runtime/public-sync-readme-residuals-2026-08-11.md records the allowlist dry-run, guard tests, and deny-link scan

• Multi-workspace install isolation: CLI root-confirm guard (confirmProjectRoot) on both install and update commands; directory-lock (acquireCacheLock) serializes concurrent ~/.cache/agent-kit/registry/ refreshes; ADR surfaces matrix (L0 per-project, cache shared, MC per-workspace port); /dashboard-broadcast kill guidance aligned with never-kill-foreign-workspace

• IDE-agnostic CLI install resilience: --yes flag and non-interactive terminal detection (isNonInteractive) for CI, VS Code output panels, and piped stdin; actionable error classification for EPERM, exit 255, registry 403, and network failures with recovery steps

• Dashboard first-failure UX: structured recovery message when dashboard/start.mjs is absent in L0-only consumer trees, naming four resolution paths (upgrade CLI, env var, sibling, direct script)

• VS Code onboard path: generateVSCodeArtifacts wired into personalization flow (.vscode/settings.json, .github/copilot-instructions.md, optional .vscode/security-review.agent.md); IDE-agnostic readiness docs with CLI equivalents table and slash-less onboard checklist

• Registry clone error messaging: auth/access vs network vs generic failures with actionable recovery in resolve.ts

• Dogfood bridge: consumer install-fallback and dashboard-runtime-block notes (2026-08-02); memory errors for npm-cache EPERM/exit-255 and dashboard-host-missing/registry-403

• Mission Control landing production shots: four PNGs under assets/production/ (Current mission, Checklist, Crew Monitor, Flight Log); design sources stay local under gitignored assets/design/

• Mid-batch plan monitors (6) for residual closeouts (crew-monitor R1–R3, docs-indicative A–L, mc-chrome-icon A–F, mc-health R1–R3, public-ci-skip R7–R10, staging-evidence R14 A–D) with _index.md Audits rows; knowledge-classification ledger regenerated

• Dogfood note: /git-prod should prove tag CI green on the close-release commit before creating or pushing an annotated v* tag

• CI Registry catalog parity: node scripts/build-registry.mjs && git diff --exit-code registry/registry.json so SKILL frontmatter ↔ registry/registry.json drift fails the build

• docs/DEVELOPMENT.md: factory topology, local CLI loops, and public-sync awareness for maintainers (root README stays consumer storefront)

• Onboard domain-skills scaffold: after essentials are ready, /agent-kit-onboard offers a HITL Scaffold domain skills / Defer / Skip gate before finish-setup / /start-project CTAs, reusing install-time personalization/doctor evidence and recording the outcome in onboarding.domainSkills (shipped as squash d00fb50; public agent-kit-startup/agent-kit#36 closed later via residuals with cross-repo evidence comment)

• Queue-end plan monitors (7) under .cursor/memory/ with triage headings; _index.md Audits rows R14-paired (including crew-monitor + docs-indicative); knowledge-classification ledger regenerated

• Evidence checks merge-gate policy: ADR 2026-08-01_evidence-checks-merge-gate (no silent continue-through-red; HANDOFF Gaps honesty)

• Docs indicative; delivery truth: always-apply read-time section in docs-professional-standard, ADR 2026-08-01_docs-indicative-delivery-truth, tightened external-review prompt/monitor templates (evidence-backed findings; no filler)

• CI private-origin allowlist pin: Vitest asserts github.repository == 'agent-kit-startup/agent-kit-dev' remains in .github/workflows/ci.yml (Path C remirror guard)

• Static landing deploy artifact .cursor/context/landing-agentkit/index.html (full document wrapper over redesign SoT)

• Landing Product proof: four alternating MC rows (L/R/L/R) with MC product header chrome (logo + Mission Control + workspace) replacing browser-chrome mockup; production PNGs from assets/production/; a11y labels per row

• Landing workflow copy: seven narrative sections in COPY.md (onboarding, orchestration, HITL/triage, DevOps, settings/update, dogfood, MC tabs) integrated from COPY-WORKFLOW-DRAFT.md after HITL rewrite (version 4.8.9 pin, no autonomous pitch)

• Landing DESIGN-SYSTEM: mockup chrome rewritten from browser window (traffic lights + URL pill) to MC product header; framing invariant updated

Changed

• Public root README.md storefront rewrite: Mission Kit product voice for strangers on GitHub (PolyForm Noncommercial / source-available / sales@missionkit.io); install and CLI keep real Agent Kit identifiers without ADR paths, private memory links, or dual-name legal essays. Maintainer naming table moved to docs/DEVELOPMENT.md.

• missionkit.io license copy cutover: Claude Design export synced (landing:sync / landing:build), Hostinger deploy of dist/, and as-served HTML verified with PolyForm Noncommercial / source-available / sales@missionkit.io (zero unqualified open-source claims). docs/agentkit-landing.md SEO section flipped from as-served-vs-target to live PolyForm wording. Public-sync allowlist/denylist unchanged (deny-link + dry-run guards pass). Public GitHub license label remains advisory until /git-prod HITL.

• Align Mission Kit public-compliance residuals (A–F): document that PR #698 already staged 783ca90; flip the Crew-lexicon as-served table in docs/agentkit-landing.md to Design-export labels (Engineering Manager / Squad ·); disclose that the same Design sync refreshed remote/mc/* lexicon incidental to license copy (product SoT / display-mask ownership unchanged); record deployed sha256 evidence; add an unqualified open-source wording assertion to landing:build:check. Public mirror LICENSE promote stays operator /git-prod HITL.

• Onboard domain-skills scaffold residuals A–J: closed public agent-kit-startup/agent-kit#36 with evidence citing d00fb50 (cross-repo Closes form documented in PR template + docs/CONTRIBUTING.md); documented instruction-only scaffold + .cursor/skills/domain/ one-way category; added ## Relevant skills to project-context generator and factory .cursor/project-context.md; HITL fallback free-text + gates table; moved domain-skills command pin to lifecycle/l0.test.ts; dogfood Processed provenance honesty; allowlist pin verified at 6 (CI green on staging). Squash honesty: original 4-phase plan landed as single squash d00fb50 (plan file gitignored), so per-tick verdicts are reconstructed from that commit rather than per-phase SHAs.

• Landing v1–v6 CDE still-open residuals (R1–R7): regenerated evidence ledger for green Knowledge checks; corrected stale "not yet live" SoT/README prose against WP-deprecated + agent.startupkit.com.br 301→missionkit.io delivery truth; documented index.html drift / retired byte-identity (no redeploy); R14/R7 process notes; append-only Closed-by on plan-monitor-close-landing-v1-v6-monitor-residuals-cde.md

• Ship-5.0 npm/npx honesty residuals: go/no-go record restated as NO-GO until CI-green-at-tagged-SHA + gate sign-off; Release Latest / storefront rows marked POST-PUBLISH; cite drift fixed; docs/npm-publish-checklist.md distinguishes tree 5.0.0 from registry 4.8.9; pack evidence at docs/evidence/npm-pack-5.0.0-2026-08-11/npm-pack-5.0.0.json (stdout JSON parseable after prepack stderr fix). Blank-folder npx @5.0 dogfood remains blocked until publish

• Plan audit residuals termination: /plan-review-triage and continuous /run-plan / /run-plan-all paths prefer Ack and stop or Fix nits only when Still open is nits/process-only or closeout depth is already capped (max depth 1 per theme family); Write residuals must not mint unbounded close-* conveyors (ADR 2026-08-11_plan-audit-residuals-termination.md). Throughput operator knobs documented under external plan review. Unprocessed dogfood Broad Intake visibility is ADR 2026-08-11_dogfood-unprocessed-broad-intake-bucket.md (not this process policy).

• Public vs dev README R2–R10 still-open residuals: restamp public-sync evidence Source SHA to green staging 84dbaa3 (342 allowlisted files); run sync-public --dry-run content denylist in the normal private CI deny-link step (pin count unchanged at 6); document private-filename content invariant beside the paid-spec path exclusion in the sync manifest; append-only A/D/F closeout corrections and a single S1 owner pointer (close-public-ci-skip-r7-r10-still-open.plan.md); CHANGELOG names the DEVELOPMENT.md private paid-spec filename generalization that unblocked denylist sync since c41efde (8705144); optional capability-inventory line-number assertion deferred (pattern scan only). Shared R14 ledger ownership unchanged.

• Deploy-agent startupkit post-merge residuals S5-S8: append-only R4 shared-owner basename correction (plan-monitor- prefix), historical S1-S4 honesty vs merged fcf1de0, allowlist counter-maintenance warnings on sync-public and publish-npm (count pin unchanged at 6), removed orphan scripts/check-landing-body-equality.mjs, and aligned DESIGN-SYSTEM deprecated Target line with the Current 301. Shared R14 Evidence ownership unchanged.

• Closed MC health healthcenter N2/N3 still-open residuals: restored a bounded token: pin on the healthSeverityChrome fallback return object and a positive const HEALTH_SEVERITY_CHROME = { … }; shape anchor in plugin-ux-validation.test.ts (literal-scoped pin kept; unbounded regex not restored); append-only R15 corrections on the source monitor for the lost fallback coverage claim and the stale R14 hygiene note (a9498ca predecessor); acceptance language asserts suite success and exit 0 rather than a hard-coded test count. N1 batch ledger ownership unchanged.

• VS Code first-install residuals closeout metadata (N2/N3): source monitor heading normalized to ## Closed by residuals plan (C, E, K, J-vscode); acceptance wording aligned to shipped skip-if-exists (no merge path). N1 ledger ownership unchanged.

• R14 queue-end still-open monitors: durable triage / Residuals headings plus N1 Closed-by appends staged add-by-name with regenerated docs/evidence/knowledge-classification.json (pnpm evidence:knowledge-classification:check green locally). Unblocks Evidence gate for sibling residual lanes; does not close product Still open on those themes.

• Mission Control chrome citation R3/R4/R5 still-open closeout: append-only re-cite of parent 271d4d2/PR #504 for mixed-surface lint evidence; Evidence-gate Validation and ledger-regen policy corrections; R15 bottom-up supersession readability ADR; knowledge-classification regenerated for edited monitors

• Mission Control chrome citation residuals R1-R5 closed through append-only monitor corrections: lint evidence reclassified as already recorded, assertion-message pins stabilized, shared ledger and HANDOFF Gaps ownership documented, and the supersession pointer aligned.

• Public sync slug resolution: scripts/sync-public.mjs warns on stderr whenever PUBLIC_REPO_SLUG diverges from a slug derivable from --url, the configured public remote, or PUBLIC_REPO_URL (not only when the URL env var wins); invalid owner/repo shape exits 1; --self-test-slug covers precedence. Docs updated in docs/public-launch.md and docs/repository-boundaries.md

• docs/design-system.md: drop markdown links into .cursor/memory/ (public-deny-link guard) and remove a denylisted private client path from the upstream surface table so CI / public-sync stay green

• seedManagedHashLedger documents that the walk includes user-added non-kit basenames under overlay prefixes (harmless while those names stay outside the L0/pack/skill apply set)

• Docs/copy alignment to missionkit.io Mission Kit 5 positioning under dual-name contract (ADR 2026-08-06_mission-kit-vs-agent-kit-naming): README hero/tagline, consumer docs index/getting-started/CONTRIBUTING/claim matrix/github-about Website, install.md intro, public launch announcement, project-context.md version lane 5.0.0, capability-inventory positioning rows; legacy agent.startupkit.com.br / landing-agentkit qualified as redirect/rollback-only. Landing canvas under landing-missionkit/remote/ untouched.

• Consumer and maintainer documentation alignment: the README Mission Control pointer promises production constraints only; getting-started restores copy-only paste destinations, removes the duplicated maintainer three-way loop in favor of a pointer to docs/DEVELOPMENT.md, and keeps the consumer guide consumer-focused. docs/DEVELOPMENT.md describes private exclusions generically (no denylist-triggering private paid-spec filename) so private→public sync dry-run stays green after c41efde.

• Crew role mask SoT sync (plan crew-role-mask-sot-sync): glossary ADR display-mask contract updated to wire-short / display-long (CREW_ACTOR_MASK + crewActorEngRole); Eng collision withdrawn at display; team-member framework core-slot lexicon aligned (Tech Lead / DevOps / Project Manager / Developer / Product Owner); landing Mission Control fixture JSON uses wire tokens (Eng / SQ) and Current Mission agent Tech Lead. Landing iframe #mc-mock-data lexicon refreshed in residuals Phase 3 (was still Engineering Manager / Squad). Product masks unchanged (already shipped PR #662)

• Crew Monitor row redesign via Claude Design brief (plan crew-monitor-design-brief-claude-design): tinted initials badge returns as the kind + identity cue; separate kind glyph removed; compaction hides whole fields at breakpoints instead of mid-token ellipsis; Eng display split from kind (delivery → DevOps); plan chip has no max-width cap. Three porting deltas vs the mirrored design recorded in .cursor/context/mission-control-design/remote/v1/ACCEPTANCE.md. Glossary ADR amended; Mission Control visual SoR stays the repo (one-off brief ADR 2026-08-05_mission-control-design-one-off-brief)

• Crew Monitor rows are compact and glyph-first. The kind glyph moved to the start of the row (it was mid-label, between actor and verb) and the avatar/initials box was removed entirely. The avatar shipped in #631 and #637-#639 and its removal is deliberate: initials were a lossier copy of the actor string two segments later, and the 18px box pushed the kind glyph off the left edge an operator scans down. Long profession display masks were replaced with the operator's short lexicon (Engineering Manager -> Eng, Squad -> SQ, Scrum Master - awaiting gate -> PM - awaiting gate, and so on), which retires the previously accepted actor-mask-vs-noshrink tradeoff instead of re-deciding it. (Interim compact-labels pass; design-v2 above restored long display masks while keeping short wire tokens.) Kind ids, #hero-activity, and the .monitor-row* class prefix are unchanged. ADR: 2026-07-27_crew-monitor-vs-plan-monitor-glossary

• Delivery rows read merged, not shipped. The row is derived from a merge/squash entry that already carries its PR number and SHA, and shipped implied a production promote that /git-staging never performed. shipped is retired from the row wording contract's verb list; failed joins it for subagent runs that end in error

• Crew Monitor column stability: actor and verb segments carry a min-width floor so the metadata column starts at the same x on every short-mask row (long kit agent ids still grow past the floor rather than truncate), and the plan filename now gives up width before the mid segments

• Domain migration: canonical URLs updated to new domains (missionkit.io, dadado.dev, startupkit.rocks, agentkit.works → GitHub). Legacy domains redirect via 301 to preserve links.

• Landing source of record moved to the external design project; the design mirror is versioned so the deploy is reproducible from git alone, and the now-duplicate assets/production/*.mp4 / *.webm masters are gitignored (ADR 2026-08-05_landing-external-design-source-of-record)

• Residual closeout plans: composite squash commits trade per-tick observability for batch efficiency; post-hoc verification against the merged state is the documented delivery-truth pattern (ADR 2026-08-08_ledger-regen-policy)

• Deploy-agent startupkit residuals R1-R8: corrected the DESIGN-SYSTEM current URL and its append-only monitor claim, documented shared ledger and HITL evidence paths, aligned the retired equality-guard wording, and added the CI allowlist counter coupling comment

• docs/cursor-native-audit.md inventory refreshed: plugin 3.0.0 → 5.0.0, rules 23 → 25, commands 10 → 27, skills 7 → 9, hooks 2 events → 5. Also corrected a stale claim that CLI init writes plugin.json into target projects — no generator does

• /plan-review-triage: paced Write residuals for multi-path walks (wave size 2 Tasks; write-confirm collapse when operator authorizes remaining set; per-monitor plans when themes diverge)

• Relocate Mission Control icon/vector sources off repo root into local assets/design/ (removed tracked root .ai files)

• Memory cite hygiene: mc-chrome-icon Closed-by C/G narrowed (circle/ellipsis intro → ec64be5/PR #584; >= 1+chip/door → 6acb2d7/PR #592; ADR/git-staging §3 amended in place; ellipsis/chip/door pins and thresholds re-derived at HEAD)

• Docs-indicative A–L residuals (D–G, I, K): restore R15 Still open rows on source monitor; prompt template R14 same-commit pairing + single-pipe Audits sample; name audits-wait-fresh sentinel in /plan-external-review; HANDOFF mid-batch monitor pointer; CI registry catalog parity step

• Public CI skip R7–R10 residuals: merge-gate ADR closeout contract (gh pr checks / Evidence green before Gaps-none); knowledge-classification.json regenerated by 05f6713 so build is green at 6d32c57; PUBLIC_REPO_SLUG honored when PUBLIC_REPO_URL unset (warn when both set); denylist pin uses tolerant regex; allowlist exact-count pin updated to 6 (landing body equality step)

• Public vs dev README separation: root README.md is consumer storefront only; maintainer dual-repo table moved to docs/DEVELOPMENT.md; docs/CONTRIBUTING.md points at Development for monorepo loops; public-sync.manifest comments document the boundary (ADR 2026-08-02_public-vs-dev-readme-separation)

• Crew Monitor feed hygiene (residuals C/E/F + D note): drop unreachable empty-segment branch; prune inert chip wrapper CSS; harden avatar↔chip sibling pin in plugin-ux-validation; document latent flat-label glyph-at-end in glossary ADR

• Public sync slug SoT: sync-public derives gh --repo owner/repo from PUBLIC_REPO_URL (removed hardcoded PUBLIC_REPO_SLUG from CI); docs/ADR note push + gh redirect; allowlist pin exact count 5 + denylist quote variants + skip when ci.yml absent

• /plan-external-review command doc: §What Claude should produce aligned with prompt template (delivery truth first, finding priority, evidence mandate, forbidden filler)

• docs-repo skill version 0.1.0 → 0.1.1 (registry.json + skill frontmatter mirrors) after delivery-truth content wire

• Memory cite hygiene: plan-monitor-mc-chrome-icon-style-consistency Closed-by F/C/G/E corrected (exact pins retained; C→6acb2d7/PR #592; G→52a1fc3+ADR; E deferred); close-monitor R15 Closed-by for A–D

• Public CI skip guards: flip denylist (!= public slug) to allowlist (== agent-kit-startup/agent-kit-dev) on sync-public, publish-npm, and private-only build steps; ADR + public-launch / repository-boundaries / gitupdate docs; verify checklist notes Path C one-release lag

• Crew Monitor feed row: order is avatar → actor → kind glyph → verb → metadata → time; kind chip is glyph-only (no solid fill); avatar carries the kind *-bg tint

• Landing docs: live URL truth for https://agent.startupkit.com.br (Hostinger ALIAS + static subdomain); WP /agentkit now 301 redirects to the subdomain via the agentkit-redirect WordPress plugin

• Landing SEO/a11y: hero promoted to <h1>, twitter:card downgraded to summary until an OG asset ships, and INVENTORY.md/docs/agentkit-landing.md current URL corrected to agent.startupkit.com.br

• Landing SoT guard: scripts/check-landing-body-equality.mjs + pnpm check:landing-body-equality + CI step pin index.html <body> to page-content.html fragment

Source

• Commit: a14d3cd
• Head branch: sync/v5.0.0-a14d3cd