@dadado/agent-kit-cli 5.1.0 → 5.2.1

package/dashboard/dashboard.html

@@ -743,16 +743,19 @@ body.mc-fullscreen .top-tabs-row {
 }
 
 /* ===== Progress Bar ===== */
+/* Track must stay visibly a track at 0% (contract item 5): --border-active
+   reads against --bg-card in both skins where --border blended in, and 6px
+   with rounded ends keeps mid fills from collapsing into a hairline. */
 .progress-bar {
-  height: 4px;
-  background: var(--border);
-  border-radius: 2px;
+  height: 6px;
+  background: var(--border-active);
+  border-radius: 3px;
   overflow: hidden;
   margin-top: 8px;
 }
 .progress-fill {
   height: 100%;
-  border-radius: 2px;
+  border-radius: 3px;
   transition: width 0.5s ease;
 }
 .progress-fill.green { background: var(--green); }
@@ -4267,11 +4270,11 @@ function fmtDate(iso) {
   return d.toLocaleString('en-US', { month: 'short', day: 'numeric', hour: '2-digit', minute: '2-digit' });
 }
 
+// Presentation contract (Phase 2): progress is never an error signal. Any
+// in-flight percentage (0-99) renders the neutral accent; 100% renders green
+// (lifecycle completed with total > 0 implies 100 per the Phase 0 contract).
 function progressColor(pct) {
-  if (pct >= 100) return 'green';
-  if (pct >= 50) return 'blue';
-  if (pct >= 25) return 'yellow';
-  return 'red';
+  return pct >= 100 ? 'green' : 'blue';
 }
 
 // Dot semantics: only state signals survive. completed = good, cancelled =
@@ -5614,8 +5617,8 @@ function renderConfigSection(d) {
           </div>
           <div class="config-row">
             <label for="config-epr-reviewerModel">Reviewer model</label>
-            <input type="text" id="config-epr-reviewerModel" name="eprReviewerModel" value="${escapeAttr(epr.reviewerModel || 'haiku')}" maxlength="64" data-focus-key="config-epr-reviewerModel" />
-            <span class="config-hint">Claude default haiku. Must differ from the implementer stamp (Auto/Auto refused).</span>
+            <input type="text" id="config-epr-reviewerModel" name="eprReviewerModel" value="${escapeAttr(epr.reviewerModel || 'sonnet')}" maxlength="64" data-focus-key="config-epr-reviewerModel" />
+            <span class="config-hint">Claude default sonnet (auto permission mode). Must differ from the implementer stamp (Auto/Auto refused).</span>
           </div>
           <div class="config-row">
             <label for="config-epr-advisorModel">Advisor model</label>
@@ -5702,7 +5705,7 @@ function collectMissionConfigPayload() {
       offerOnExhausted: !!document.getElementById('config-epr-offer')?.checked,
       autoRemediate: !!document.getElementById('config-epr-auto')?.checked,
       backend: document.getElementById('config-epr-backend')?.value || 'claude',
-      reviewerModel: (document.getElementById('config-epr-reviewerModel')?.value || 'haiku').trim(),
+      reviewerModel: (document.getElementById('config-epr-reviewerModel')?.value || 'sonnet').trim(),
       advisorModel: (document.getElementById('config-epr-advisorModel')?.value || 'opus').trim(),
       waitSliceSeconds: (() => {
         const raw = document.getElementById('config-epr-waitSlice')?.value;
@@ -6334,10 +6337,18 @@ function mergePlansForUi(d) {
     const inProgress = fromItems
       ? items.filter((t) => t.status === 'in_progress').length
       : (raw.todos?.inProgress ?? 0);
+    // Cancelled counts toward the fill numerator (terminal work, mirrors
+    // TERMINAL_TODO_STATUSES / todoStats in dashboard/lib/semantic-model.mjs)
+    // so the bar reaches 100% whenever the lifecycle pill says COMPLETED.
+    const cancelled = fromItems
+      ? items.filter((t) => t.status === 'cancelled').length
+      : (raw.todos?.cancelled ?? enriched.progress?.cancelled ?? 0);
     const nextActionTodo = planNextActionTodo(items);
     let lifecycle = enriched.lifecycle;
     if (!lifecycle) {
-      if (total > 0 && completed >= total && (raw.todos?.inProgress || 0) === 0) {
+      // Mirrors classifyPlan: terminal (completed + cancelled) exhausting the
+      // list means todoStats.open === 0 → completed.
+      if (total > 0 && completed + cancelled >= total && inProgress === 0) {
         lifecycle = 'completed';
       } else {
         lifecycle = 'incomplete';
@@ -6351,12 +6362,13 @@ function mergePlansForUi(d) {
       modifiedAt: raw.modifiedAt || enriched.modifiedAt || null,
       progressPct:
         total > 0
-          ? Math.round((completed / total) * 100)
+          ? Math.round(((completed + cancelled) / total) * 100)
           : typeof raw.progress === 'number'
             ? raw.progress
             : 0,
-      progressLabel: `${completed} of ${total} complete`,
+      progressLabel: `${completed} of ${total} complete` + (cancelled > 0 ? ` · ${cancelled} cancelled` : ''),
       progressCompleted: completed,
+      progressCancelled: cancelled,
       progressTotal: total,
       progressInProgress: inProgress,
       nextActionTodo,

package/dashboard/lib/guards.d.mts

@@ -1,5 +1,84 @@
 /** Ambient types for dashboard/lib/guards.mjs (consumed by CLI TypeScript). */
 
+type ProcessEnvLike = NodeJS.ProcessEnv | Record<string, string | undefined>;
+type HeaderMap = Record<string, string | string[] | undefined>;
+type GuardRequest = { headers?: HeaderMap };
+type PortOpts = { base?: number; range?: number };
+type GitStatusFile = {
+  path: string;
+  status: string;
+  staged: boolean;
+  unstaged: boolean;
+  untracked: boolean;
+  oldPath?: string;
+  renamed?: boolean;
+};
+
+export const DEFAULT_HOST: "127.0.0.1";
+export const BROADCAST_TOKEN_ENV: "MISSION_CONTROL_TOKEN";
+export const REPO_ROOT_ENV: "MISSION_CONTROL_REPO_ROOT";
+export const KIT_ROOT_ENV_KEYS: readonly ["MISSION_CONTROL_KIT_ROOT", "AGENT_KIT_HOME"];
+export const BROADCAST_TOKEN_MIN_LEN: 16;
+export const BROADCAST_TOKEN_COOKIE: "mc_token";
+export const DEFAULT_PORT_BASE: 3333;
+export const DEFAULT_PORT_RANGE: 256;
+export const MAX_STRING: {
+  branch: number;
+  lastCommit: number;
+  terminalCwd: number;
+  terminalCommand: number;
+  processCommand: number;
+};
+export const MAX_GIT_FILES: 50;
+export const MAX_GIT_PATH: 240;
+export const CONTEXT_CONFIG_REL: ".cursor/context/config.json";
+export const CONFIG_PERSONA_IDS: readonly ["autopilot", "night-shift", "ghost-runner"];
+export const CONFIG_PERSONA_MODES: readonly ["continue-plan", "run-plan", "cli-run-plan"];
+export const CONFIG_REVIEW_BACKENDS: readonly ["auto", "claude", "cursor"];
+export const CONFIG_REVIEW_MODES: readonly ["paste", "autonomous"];
+export const CONFIG_REVIEW_PREFLIGHT: readonly ["off", "warn", "block"];
+
+export function escapePerlDoubleQuoted(value: string): string;
+export function resolveSnapshotRepoRoot(env: ProcessEnvLike | undefined, kitRoot: string): string;
+export function normalizeRepoRootKey(repoRoot: string): string;
+export function hashRepoRoot(repoRoot: string): number;
+export function repoRootLogId(repoRoot: string): string;
+export function preferredPortForRepoRoot(repoRoot: string, opts?: PortOpts): number;
+export function portCandidatesForRepoRoot(repoRoot: string, opts?: PortOpts): number[];
+export function sameRepoRoot(a: string | null | undefined, b: string | null | undefined): boolean;
+export function resolveMissionControlPort(args: {
+  repoRoot: string;
+  envPort?: string | number | null;
+  probe: (port: number) => { listening: boolean; repoRoot: string | null };
+  opts?: PortOpts;
+}): { port: number; reuse: boolean; explicit: boolean };
+export function isSafeRepoRelativePath(relPath: unknown): boolean;
+export function resolveBindHost(envHost?: string | null): string;
+export function isLoopbackBindHost(host: string | undefined | null): boolean;
+export function normalizeAuthToken(raw: unknown): string;
+export function isValidBroadcastToken(token: unknown): boolean;
+export function generateBroadcastToken(): string;
+export function tokensMatch(a: unknown, b: unknown): boolean;
+export function resolveBroadcastAuth(
+  env?: ProcessEnvLike,
+):
+  | { ok: true; host: string; tokenRequired: boolean; token: string | null; broadcast: boolean }
+  | { ok: false; error: string };
+export function extractRequestToken(req: GuardRequest, url: URL): string;
+export function authorizeMissionControlRequest(
+  req: GuardRequest,
+  url: URL,
+  opts: { tokenRequired: boolean; expectedToken: string | null },
+): { ok: true; viaQuery: boolean } | { ok: false; status: number; error: string };
+export function broadcastAuthCookieHeader(token: string): string;
+export function listLanIPv4Addresses(): string[];
+export function truncateStr(value: unknown, maxLen: number): unknown;
+export function parseGitStatusShort(output: unknown): {
+  files: GitStatusFile[];
+  total: number;
+  truncated: boolean;
+};
+export function isLoopbackAddress(addr: string | undefined | null): boolean;
 export function resolveContextConfigPath(
   repoRoot: string,
   fsHooks?: {
@@ -8,3 +87,27 @@ export function resolveContextConfigPath(
     mkdirSync?: (path: string, opts?: { recursive?: boolean }) => void;
   },
 ): { ok: true; path: string } | { ok: false; error: string };
+export function validateConfigWriteBody(
+  body: unknown,
+): { ok: true; patch: Record<string, unknown> } | { ok: false; error: string };
+export function mergeConfigAllowlist(
+  existing: Record<string, unknown> | object,
+  patch: Record<string, unknown> | object,
+): Record<string, unknown>;
+export function allowlistConfig(raw: unknown): Record<string, unknown>;
+export function isAllowedOrigin(origin: unknown, port: unknown): boolean;
+export function applyCorsHeaders(
+  req: GuardRequest,
+  res: { setHeader: (name: string, value: string) => unknown },
+  port: unknown,
+): boolean;
+export function isUnderDashboard(resolvedPath: string, dashboardReal: string): boolean;
+export function resolveDashboardStatic(
+  pathname: string,
+  hooks: {
+    dashboardDir: string;
+    dashboardReal: string;
+    existsSync: (path: string) => boolean;
+    realpathSync: (path: string) => string;
+  },
+): string | null;

package/dashboard/lib/open-browser.mjs

@@ -201,16 +201,11 @@ export function openBrowser(url, options = {}) {
 
   /**
    * Preferred open: detect failure before claiming success, then caller may fall back.
-   * Hermetic tests that only inject spawnFn use the detached path (throw = fail).
    *
    * @param {{ command: string, args: string[] }} built
    * @returns {{ opened: boolean, reason?: string, command: string, args: string[] }}
    */
   function runPreferred(built) {
-    if (options.spawnFn && !spawnSyncFn) {
-      return runDetached(built);
-    }
-
     const sync = spawnSyncFn ?? spawnSync;
 
     if (platform !== "darwin" && platform !== "win32") {

package/dashboard/lib/semantic-model.mjs

@@ -3064,10 +3064,16 @@ export function enrichPlans(plans, handoff) {
       path: plan.path,
       overview: truncateStr(plan.overview || "", MAX_SEMANTIC_LABEL),
       modifiedAt: plan.modifiedAt || null,
+      // Counter SoT for plan progress (todoStats / TERMINAL_TODO_STATUSES).
+      // `terminal` (completed + cancelled) is the fill numerator so the bar can
+      // reach 100% exactly when classifyPlan says completed (open === 0).
+      // Label format is mirrored by mergePlansForUi in dashboard/dashboard.html.
       progress: {
         completed: stats.completed,
+        cancelled: stats.cancelled,
+        terminal: stats.completed + stats.cancelled,
         total: stats.total,
-        label: `${stats.completed} of ${stats.total}`,
+        label: `${stats.completed} of ${stats.total} complete${stats.cancelled > 0 ? ` · ${stats.cancelled} cancelled` : ""}`,
       },
       lifecycle: classifyPlan(plan, handoff),
       // Preserved when lifecycle is completed so UI/sort can still know provenance.

package/dashboard/logo-marketplace.svg

@@ -0,0 +1,13 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="512" height="512" viewBox="0 0 512 512" fill="none">
+  <!-- Marketplace 1:1 logotype. Plate fill is Mission Control bg-primary #0b0e14. Artwork is the Cursor-skin stroke helmet from logo-cursor.svg, centered with ~10% padding. Chrome marks stay in logo.svg and logo-cursor.svg. -->
+  <rect width="512" height="512" rx="96" fill="#0b0e14"/>
+  <g transform="translate(51.839 51.2) scale(18.244989)">
+    <path d="M9.61,22.1c-4.45-1.22-7.48-4.71-8.17-9.63v-2.47c0-5.39,4.37-9.75,9.75-9.75h0c5.39,0,9.75,4.37,9.75,9.75,0,.62.04,1.85,0,2.47-.34,4.86-3.54,8.41-8.2,9.63-.49.13-2.63.13-3.13,0Z" stroke="#e4e4e4" stroke-width=".5" stroke-miterlimit="10" fill="none"/>
+    <path d="M18.42,9.54c-.38,3.74-1.81,8.07-7.22,8.07s-6.66-4.49-7.22-8.07v-.19c0-3.47,3.23-6.28,7.22-6.28s7.22,2.81,7.22,6.28v.19Z" stroke="#e4e4e4" stroke-width=".5" stroke-miterlimit="10" fill="none"/>
+    <path d="M13.59,6.08c1.18.76,1.99,1.85,2.2,3.16.07.43.07.86,0,1.28s-.19.84-.37,1.25" stroke="#e4e4e4" stroke-width=".5" stroke-linecap="round" fill="none"/>
+    <g>
+      <line x1=".25" y1="7.9" x2=".25" y2="13.68" stroke="#e4e4e4" stroke-width=".5" stroke-linecap="round"/>
+      <line x1="22.13" y1="7.9" x2="22.13" y2="13.68" stroke="#e4e4e4" stroke-width=".5" stroke-linecap="round"/>
+    </g>
+  </g>
+</svg>

package/dashboard/start-broadcast.mjs

@@ -8,7 +8,7 @@
  */
 
 import { execFileSync, execSync, spawn } from "node:child_process";
-import { existsSync, openSync } from "node:fs";
+import { existsSync, openSync, realpathSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import {
@@ -241,7 +241,7 @@ async function main() {
     return;
   }
   let configValue = null;
-  const cfg = resolveContextConfigPath(ROOT, { existsSync });
+  const cfg = resolveContextConfigPath(ROOT, { existsSync, realpathSync });
   if (cfg.ok) {
     configValue = readPreferredBrowserFromConfig(cfg.path);
   }

package/dashboard/start.mjs

@@ -17,7 +17,7 @@
  */
 
 import { execFileSync, execSync, spawn } from "node:child_process";
-import { existsSync, openSync } from "node:fs";
+import { existsSync, openSync, realpathSync } from "node:fs";
 import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import {
@@ -257,7 +257,7 @@ async function main() {
     return;
   }
   let configValue = null;
-  const cfg = resolveContextConfigPath(ROOT, { existsSync });
+  const cfg = resolveContextConfigPath(ROOT, { existsSync, realpathSync });
   if (cfg.ok) {
     configValue = readPreferredBrowserFromConfig(cfg.path);
   }

package/dist/index.js

@@ -194,7 +194,11 @@ var KNOWN_SHIPPED_OVERLAY_HASHES = /* @__PURE__ */ new Set([
   "f981764422d468567b5aff31148dc659aeee22cb13dc0ecd873d737deaf07372",
   "fa306a0cdb0f40c817e32164cd03b946564a02b4b7f7c3f4f0b9513096584d28",
   "fa5cf460eb314437081f7cea30dc8041c0bd6fc3f560a74bc2d7be1bf07384b0",
-  "fc39ec6d8a22498697f968ffc0fe5f717bed97afd68f922c76a80ed1f10d6579"
+  "fc39ec6d8a22498697f968ffc0fe5f717bed97afd68f922c76a80ed1f10d6579",
+  "a8756742197c3a2e1a6d64f4bde2a88db48abb66a0f449d625cd2e1c7b8d0cb4",
+  "6a5f8795a4a26b419f167e249576b798781c95308dc1ea50958351de713231d4",
+  "4009c5e2faf9775d5708cdff0b5f9da80fd3ce390cc42aed0bb94272f6b05b1b",
+  "a8e070fae187908ef7b2cf2a41605e3079329403b1802b5fc67e83294c96a070"
 ]);
 
 // src/lifecycle/paths.ts
@@ -588,18 +592,36 @@ async function readLockOwner(lockDir) {
 }
 async function writeLockOwner(lockDir, owner) {
   const finalPath = lockOwnerPath(lockDir);
-  const tmpPath = path5.join(lockDir, `owner.${owner.uuid}.tmp`);
+  const tmpPath = path5.join(lockDir, `owner.${owner.uuid}.${randomUUID()}.tmp`);
   await writeFile3(tmpPath, JSON.stringify(owner), "utf8");
   await rename(tmpPath, finalPath);
 }
 async function refreshLockOwner(lockDir, uuid) {
   const owner = await readLockOwner(lockDir);
-  if (!owner || owner.uuid !== uuid) return;
-  await writeLockOwner(lockDir, { ...owner, updatedAt: Date.now() });
+  if (owner && owner.uuid !== uuid) return;
+  await writeLockOwner(lockDir, { pid: process.pid, uuid, updatedAt: Date.now() });
 }
 async function releaseCacheLock(lockDir, uuid) {
-  const owner = await readLockOwner(lockDir);
-  if (!owner || owner.uuid !== uuid) {
+  const claimPath = path5.join(lockDir, `releasing.${uuid}`);
+  try {
+    await rename(lockOwnerPath(lockDir), claimPath);
+  } catch {
+    return;
+  }
+  let claimed = null;
+  try {
+    const raw = await readFile4(claimPath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (typeof parsed.pid === "number" && typeof parsed.uuid === "string") {
+      claimed = parsed;
+    }
+  } catch {
+  }
+  if (!claimed || claimed.uuid !== uuid) {
+    try {
+      await rename(claimPath, lockOwnerPath(lockDir));
+    } catch {
+    }
     return;
   }
   try {
@@ -638,12 +660,18 @@ async function acquireCacheLock(cacheDir) {
   const uuid = randomUUID();
   const owner = { pid: process.pid, uuid, updatedAt: Date.now() };
   await mkdir4(path5.dirname(lockDir), { recursive: true });
+  let lastErrorCode;
   while (Date.now() < deadline) {
     try {
       await mkdir4(lockDir, { recursive: false });
       await writeLockOwner(lockDir, owner);
+      let refreshing = false;
       const refreshInterval = setInterval(() => {
+        if (refreshing) return;
+        refreshing = true;
         refreshLockOwner(lockDir, uuid).catch(() => {
+        }).finally(() => {
+          refreshing = false;
         });
       }, LOCK_REFRESH_MS);
       return async () => {
@@ -652,6 +680,7 @@ async function acquireCacheLock(cacheDir) {
       };
     } catch (err) {
       const code = err.code;
+      lastErrorCode = code;
       if (code === "EEXIST") {
         if (await tryReclaimStaleLock(lockDir)) {
           continue;
@@ -660,12 +689,16 @@ async function acquireCacheLock(cacheDir) {
         continue;
       }
       if (code === "ENOENT") {
+        await mkdir4(path5.dirname(lockDir), { recursive: true });
+        await new Promise((r) => setTimeout(r, LOCK_RETRY_MS + Math.random() * 100));
         continue;
       }
       throw err;
     }
   }
-  throw new Error(`Timed out waiting for cache lock on ${cacheDir}. Another install may be stuck.`);
+  throw new Error(
+    lastErrorCode === "ENOENT" ? `Timed out acquiring cache lock on ${cacheDir}: the lock parent directory kept vanishing (concurrent cache clear?).` : `Timed out waiting for cache lock on ${cacheDir}. Another install may be stuck.`
+  );
 }
 var DEFAULT_REGISTRY_URL = "https://github.com/agent-kit-startup/agent-kit";
 var DEFAULT_REGISTRY_REF = "main";
@@ -1851,6 +1884,7 @@ async function resolveInventoryRoot(cwd) {
       return dir;
     } catch {
     }
+    if (await fileExists(path10.join(dir, ".git"))) break;
     const parent = path10.dirname(dir);
     if (parent === dir) break;
     dir = parent;
@@ -2027,12 +2061,16 @@ function baseResult(partial) {
   };
 }
 async function checkCursorUpdateAwareness(cwd, options = {}) {
-  const prefs = readCursorUpdateCheckPrefs(await loadContextConfig(cwd));
+  const inventoryRoot = await resolveInventoryRoot(cwd);
+  const prefs = readCursorUpdateCheckPrefs(
+    inventoryRoot ? await loadContextConfig(inventoryRoot) : null
+  );
   const changelogUrl = options.changelogUrl ?? prefs.changelogUrl;
   if (options.respectPrefs) {
     if (!prefs.enabled) {
       return baseResult({
         status: "skipped-disabled",
+        inventoryRoot,
         inventoryPath: INVENTORY_REL,
         featuresPath: FEATURES_REL,
         changelogUrl,
@@ -2047,6 +2085,7 @@ async function checkCursorUpdateAwareness(cwd, options = {}) {
     if (!intervalElapsed(prefs.lastCheckedAt, prefs.intervalDays)) {
       return baseResult({
         status: "skipped-interval",
+        inventoryRoot,
         inventoryPath: INVENTORY_REL,
         featuresPath: FEATURES_REL,
         changelogUrl,
@@ -2059,10 +2098,10 @@ async function checkCursorUpdateAwareness(cwd, options = {}) {
       });
     }
   }
-  const inventoryRoot = await resolveInventoryRoot(cwd);
   if (!inventoryRoot) {
     return baseResult({
       status: "error",
+      inventoryRoot: null,
       inventoryPath: INVENTORY_REL,
       featuresPath: FEATURES_REL,
       changelogUrl,
@@ -2082,6 +2121,7 @@ async function checkCursorUpdateAwareness(cwd, options = {}) {
   } catch {
     return baseResult({
       status: "error",
+      inventoryRoot,
       inventoryPath: INVENTORY_REL,
       featuresPath: FEATURES_REL,
       changelogUrl,
@@ -2166,6 +2206,7 @@ async function checkCursorUpdateAwareness(cwd, options = {}) {
       const msg = err instanceof Error ? err.message : String(err);
       return baseResult({
         status: "error",
+        inventoryRoot,
         inventoryPath: INVENTORY_REL,
         featuresPath: FEATURES_REL,
         changelogUrl,
@@ -2178,8 +2219,8 @@ async function checkCursorUpdateAwareness(cwd, options = {}) {
       });
     }
   }
-  if (options.stamp) {
-    await stampCursorUpdateCheck(cwd, {
+  if (options.stamp && inventoryRoot) {
+    await stampCursorUpdateCheck(inventoryRoot, {
       lastSeenCursorVersion: latestCursorVersion ?? prefs.lastSeenCursorVersion
     });
   }
@@ -2187,6 +2228,7 @@ async function checkCursorUpdateAwareness(cwd, options = {}) {
   const message = status === "current" ? "No advisory Cursor-update gaps vs inventory (check-only)." : `Found ${gaps.length} advisory gap(s). ${CONVEYOR_HINT}`;
   return baseResult({
     status,
+    inventoryRoot,
     inventoryPath: INVENTORY_REL,
     featuresPath: FEATURES_REL,
     changelogUrl: options.offline ? null : changelogUrl,
@@ -5008,11 +5050,19 @@ async function fileExists2(p) {
     return false;
   }
 }
+function isMarkdownTableSeparator(line) {
+  const stripped = line.trim();
+  if (!stripped.startsWith("|")) return false;
+  const parts = stripped.replace(/^\|/, "").replace(/\|$/, "").split("|").map((cell) => cell.trim());
+  return parts.length > 0 && parts.every((cell) => /^:?-+:?$/.test(cell));
+}
 function parseUnprocessedDogfoodItems(readmeText) {
   const items = [];
   let inSection = false;
   let sectionLevel = 0;
-  for (const line of readmeText.split(/\r?\n/)) {
+  const lines = readmeText.split(/\r?\n/);
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i] ?? "";
     const unprocessedMatch = /^(#{2,3})\s+Unprocessed Files\b/.exec(line);
     if (unprocessedMatch) {
       const hashes = unprocessedMatch[1];
@@ -5024,11 +5074,14 @@ function parseUnprocessedDogfoodItems(readmeText) {
     if (!inSection) continue;
     const headingMatch = /^(#{1,6})\s+/.exec(line);
     if (headingMatch) {
-      if (/\bProcessed Files\b/.test(line)) break;
+      if (/^#{1,6}\s+Processed(?:\s+Files)?\b/.test(line)) break;
       const hashes = headingMatch[1];
       if (hashes && hashes.length <= sectionLevel) break;
       continue;
     }
+    if (line.trim().startsWith("|") && isMarkdownTableSeparator(lines[i + 1] ?? "")) {
+      continue;
+    }
     const body = extractUnprocessedDogfoodLine(line);
     if (!body) continue;
     items.push(body);
@@ -5046,13 +5099,10 @@ function extractUnprocessedDogfoodLine(line) {
     if (numbered?.[2]) {
       raw = numbered[2].trim();
     } else if (stripped.startsWith("|")) {
+      if (isMarkdownTableSeparator(stripped)) return null;
       const parts = stripped.replace(/^\|/, "").replace(/\|$/, "").split("|").map((cell) => cell.trim());
       if (parts.length === 0) return null;
-      if (parts.every((cell) => /^:?-+:?$/.test(cell))) return null;
-      const first = parts[0] ?? "";
-      const headerish = first.toLowerCase().replace(/[*_`]/g, "").trim();
-      if (/^(note|file|entrada|title|name|item|path)$/.test(headerish)) return null;
-      raw = first.trim();
+      raw = (parts[0] ?? "").trim();
     }
   }
   if (!raw) return null;
@@ -5818,7 +5868,40 @@ function buildPersonalizationPlan(profile, report, registry) {
     (item) => componentAvailable(registry, item) ? item : { ...item, status: "unavailable" }
   ).sort((left, right) => `${left.kind}:${left.id}`.localeCompare(`${right.kind}:${right.id}`));
 }
-function renderProjectContext(profile) {
+var INSTALLED_SKILL_STATUSES = /* @__PURE__ */ new Set(["applied", "skipped-customized"]);
+function installedSkillItems(items, installedIds = []) {
+  const rows = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const item of items) {
+    if (item.kind !== "skill" || !INSTALLED_SKILL_STATUSES.has(item.status)) continue;
+    if (seen.has(item.id)) continue;
+    seen.add(item.id);
+    rows.push(item);
+  }
+  for (const id of installedIds) {
+    if (seen.has(id)) continue;
+    seen.add(id);
+    rows.push({
+      kind: "skill",
+      id,
+      status: "applied",
+      evidence: [{ source: "configuration", value: `.cursor/agent-kit.json skills[]:${id}` }]
+    });
+  }
+  return rows.sort((left, right) => left.id.localeCompare(right.id));
+}
+function relevantSkillTableRows(skills) {
+  if (skills.length === 0) {
+    return ["| (none yet) | No installed or project-owned skills detected | \u2014 |"];
+  }
+  return skills.map((skill) => {
+    const label = skill.path ?? skill.id;
+    const role = skill.status === "skipped-customized" ? "Already present (customized)" : "Installed by personalization";
+    const evidence = skill.path ?? skill.evidence[0]?.value ?? "personalization";
+    return `| ${label} | ${role} | ${evidence} |`;
+  });
+}
+function renderProjectContext(profile, skillItems = []) {
   const sections = ["# Project Context", "", "Verified repository facts:"];
   const purpose = purposeEvidence(profile);
   if (purpose.length > 0 && profile.purpose.value !== "unknown") {
@@ -5845,7 +5928,7 @@ function renderProjectContext(profile) {
     "",
     "| Skill / path | Role | Evidence |",
     "|--------------|------|----------|",
-    "| (none yet) | Add rows when `/agent-kit-onboard` scaffolds domain skills or personalization installs packs | \u2014 |"
+    ...relevantSkillTableRows(installedSkillItems(skillItems))
   );
   if (profile.context.sources.length > 0) {
     sections.push("", "## Sources", ...profile.context.sources.map((item) => `- ${item.value}`));
@@ -5946,7 +6029,7 @@ async function applyPersonalization(input) {
     createOwnedFile(
       input.rootDir,
       CONTEXT_PATH,
-      renderProjectContext(input.profile),
+      renderProjectContext(input.profile, installedSkillItems(componentResults, skills)),
       profileEvidence
     ),
     createOwnedFile(
@@ -6269,7 +6352,8 @@ var installCommand = defineCommand11({
       console.error(`
 ${hint.recovery}
 `);
-      process.exit(1);
+      process.exitCode = 1;
+      return;
     }
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dadado/agent-kit-cli",
-  "version": "5.1.0",
+  "version": "5.2.1",
   "description": "Agent Kit CLI: HITL framework install and tooling for AI-assisted IDEs (rules, skills, plan/handoff, context).",
   "license": "PolyForm-Noncommercial-1.0.0",
   "type": "module",
@@ -32,6 +32,8 @@
     "dev": "tsx src/index.ts",
     "start": "tsx src/index.ts",
     "lint": "biome check src",
+    "overlay:hashes": "tsx src/lifecycle/refresh-known-hashes.ts",
+    "overlay:hashes:check": "tsx src/lifecycle/refresh-known-hashes.ts --check",
     "test": "vitest run",
     "typecheck": "tsc --noEmit"
   }