@ojokesusu/lintasai 1.1.2 → 1.2.0

package/.gitignore

@@ -0,0 +1,55 @@
+# File yang JANGAN di-commit ke repo standar tim
+# (Kit ini sendiri tidak generate file build, tapi standar untuk repo)
+
+# OS
+.DS_Store
+Thumbs.db
+desktop.ini
+ehthumbs.db
+ehthumbs_vista.db
+
+# Editor / IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+.history/
+.project
+.classpath
+
+# Backup yang dihasilkan install-windows.ps1 saat re-install
+*.backup-*
+*.bak
+*.old
+
+# Log
+*.log
+npm-debug.log*
+yarn-debug.log*
+
+# Secret — JANGAN PERNAH commit
+.env
+.env.local
+.env.*.local
+*.pem
+*.key
+credentials*
+secrets/
+
+# Build / output (kalau kit di-extend dengan tools nantinya)
+node_modules/
+dist/
+build/
+out/
+.next/
+.cache/
+
+# Test coverage
+coverage/
+*.lcov
+
+# Paket lokal saat zipping/testing
+*.zip
+*.tar.gz
+*.tgz

package/AGENTS.md.template

@@ -0,0 +1,91 @@
+# AGENTS.md — Aturan Proyek <NAMA_PROYEK>
+
+> v1 · <TANGGAL_HARI_INI> · ikut standar tim IT (Pola B)
+
+<!-- Header di atas auto-isi oleh setup-pola-b.ps1 (nama proyek dari folder root, tanggal dari sistem). Kalau setup manual, isi sendiri. -->
+
+---
+
+## Pengantar
+
+Proyek ini ikut **standar kerja tim IT** (kit terpasang di `./.claude-kit/`).
+Aturan utama (cara coding, dokumentasi, larangan) ada di **`./.claude-kit/CLAUDE_universal_v1.md`** — wajib dibaca AI tiap sesi.
+File ini cuma berisi **override khusus proyek** + instruksi resolusi path supaya AI tidak nyasar ke folder global.
+
+---
+
+## Path resolution (PENTING — instruksi untuk AI)
+
+Kit ini di-embed di subfolder `./.claude-kit/` (bukan di `%USERPROFILE%\.claude\`).
+Saat baca/merujuk file kit, **kamu (AI) wajib mengganti** path lama jadi path lokal:
+
+- `%USERPROFILE%\.claude\<NAMA_FILE>` → `./.claude-kit/<NAMA_FILE>`
+- `~/.claude/<NAMA_FILE>` → `./.claude-kit/<NAMA_FILE>`
+
+Kalau install global **dan** `./.claude-kit/` sama-sama ada → **`./.claude-kit/` menang** (version-locked per proyek).
+
+---
+
+## Versi kit aktif
+
+- Versi kit di `./.claude-kit/`: **<VERSI_KIT>** <!-- ISI manual setelah cek `./.claude-kit/CHANGELOG.md`. Tulis literal (tanpa kurung siku). -->
+- Sumber kit (repo standar tim): **<URL_REPO_STANDAR>** <!-- ISI: URL repo git tempat kit dirilis. -->
+
+---
+
+## Override khusus proyek
+
+Centang `[x]` cuma yang **beda dari default kit**. Yang tidak dicentang = ikut default.
+Contoh: `- [x] Bahasa docs: EN (override dari default ID karena klien minta)`.
+
+- [ ] Bahasa docs: <!-- default ID -->
+- [ ] Format commit: <!-- default Conventional Commits -->
+- [ ] Folder `docs/`: <!-- default ikut `./.claude-kit/templates/architecture.md` -->
+- [ ] Tech stack: <!-- default React/Next.js + Tailwind + shadcn -->
+- [ ] Branch utama: <!-- default `main` -->
+- [ ] Pakai GitHub Issue: <!-- default Tidak — pakai chat. Ubah ke `Ya` kalau ada klien eksternal yang tracking via Issue. -->
+- [ ] Channel chat task: <!-- link Slack/Discord/Telegram/WhatsApp tempat staff posting task -->
+- [ ] Lain-lain:
+
+---
+
+## Workflow & Komunikasi Task
+
+Tim ini pakai workflow chat-driven (tanpa GitHub Issue by default). Detail di `./.claude-kit/templates/CLAUDE_TEAM_GUIDE.md` section 5b.
+
+- **Channel chat task**: <!-- ISI: link Slack/Discord/Telegram/WhatsApp -->
+- **Pakai GitHub Issue?** Tidak (default tim). Ubah ke "Ya" kalau proyek punya klien eksternal yang tracking via Issue.
+- **Format prompt task**: lihat `./.claude-kit/templates/PROMPT_LIBRARY.md` section "Prompts untuk Workflow Chat-Driven Task".
+- **Risk Level decision tree**: lihat `./.claude-kit/templates/CLAUDE_TEAM_GUIDE.md` section 7b (Low/Medium/High klasifikasi task).
+- **Rollback playbook**: lihat `./.claude-kit/templates/CLAUDE_TEAM_GUIDE.md` section 13b (git revert <5 menit).
+- **Feature flag** = advanced/post-launch (kit early-stage default = staging-only). Lihat `./.claude-kit/templates/feature-flags-advanced.md` kalau butuh.
+
+---
+
+## Skenario adopsi (pilih SATU, hapus 3 sisanya)
+
+- **(a) Proyek baru / from scratch** → `./.claude-kit/PROJECT_LIFECYCLE_PROMPT_v1.md` (Stage A: Kickoff)
+- **(b) Proyek lama tanpa docs** → `./.claude-kit/PROJECT_LIFECYCLE_PROMPT_v1.md` (Stage B: Bootstrap Docs)
+- **(c) Proyek setengah jadi (sudah ada sebagian docs)** → `./.claude-kit/PROJECT_LIFECYCLE_PROMPT_v1.md` (Stage D: Migration)
+- **(d) Sudah siap kerja task biasa (tidak butuh kickoff/migrasi)** → langsung pakai
+
+Sesi pertama tim member baru: jalankan `./.claude-kit/SETUP_POLA_B_PROMPT_v1.md`.
+
+---
+
+## Catatan tim
+
+<!-- Kosongkan section ini kalau proyek solo. -->
+
+- Owner standar tim: <!-- nama + email/handle PIC kit -->
+- Channel diskusi: <!-- link Slack/Discord/Telegram -->
+
+---
+
+## Riwayat update kit di proyek ini
+
+| Versi kit | Tanggal update     | Siapa update | Catatan              |
+|-----------|--------------------|--------------|----------------------|
+| <VERSI_KIT> | <TANGGAL_HARI_INI> | <NAMA_KAMU>  | Setup awal Pola B    |
+
+<!-- Tambah baris baru tiap update isi `./.claude-kit/` ke versi lebih baru. -->

package/CHANGELOG.md

@@ -20,6 +20,70 @@ Slot tambahan untuk perubahan berikutnya sebelum versi v1.0.2.
 
 ---
 
+## v1.2.0 [2026-06-06]
+
+### Fixed (Critical)
+
+#### NPX Wrapper Bugs (v1.1.3 regression discovered via audit)
+- **L1-RUN-001**: `npx lintasai uninstall` hard-fail karena wrapper kirim `-ProjectRoot` ke uninstall.ps1 yang tidak support param
+  - Fix: uninstall.ps1 sekarang accept `[string]$ProjectRoot` param + resolve via fallback chain
+- **L1-RUN-002**: `npx lintasai update` hard-fail sama issue
+  - Fix: update-kit.ps1 accept `-ProjectRoot` param
+- **L1-RUN-003**: `npx lintasai doctor/version/rollback` inspect kit di npm cache (silent false diagnostic)
+  - Fix: kit.ps1 accept `-ProjectRoot`, inspect `.claude-kit/` di user CWD bukan $PSScriptRoot
+  - Fix: bin/lintasai.js pass `-ProjectRoot` ke kit.ps1 subcommands juga
+
+#### Code Quality
+- **L1-RUN-004**: null comparison style consistency `$null -ne $x` (PSScriptAnalyzer warning eliminated)
+
+### Added (New Features)
+
+#### CLI Commands
+- **`lintasai status`**: 1-layar overview kit health (version, install mode, AGENTS.md, manifest signed, last update, tier setup)
+- **`lintasai diff`**: show files yang berubah sejak install (modified/missing/extra) untuk debugging Tier C delegate
+
+#### Tests (Regression Coverage)
+- `tests/npx-init.Tests.ps1`: regression test untuk v1.1.3 fix (tarball content + ProjectRoot param + npx-mode copy)
+- `tests/package-bundle.Tests.ps1`: assert npm pack mengandung semua file deployment-needed
+- `tests/setup-pola-b.Tests.ps1`: cover 4 invocation branches (traditional, ProjectRoot valid, ProjectRoot invalid, npx-mode)
+
+#### Documentation
+- `docs/NPX_INSTALL.md`: troubleshooting Bahasa Indonesia untuk staff IT non-programmer
+  (node version, EACCES/EPERM, ExecutionPolicy, proxy, kit verification, rollback, uninstall, update, status, diff, support contact)
+
+### Removed
+- `FIRST_SESSION_PROMPT_v1.md` (deprecated stub, no active consumers verified)
+
+### Notes
+Ready untuk mass distribution ke 20-30 staff IT. Audit verdict upgraded YELLOW -> GREEN.
+
+Deferred to v1.2.1 (lower priority):
+- Remove 5 more deprecated stubs (need cross-ref update first)
+- Security advisory items (HMAC salt, staging dir verify, etc.)
+- Refactor dead variables ($signatureValid, $libSafety, $shouldPreserve)
+
+---
+
+## v1.1.3 [2026-06-06]
+
+### Fixed
+
+#### NPX Invocation Bugs (Distribution Blocker)
+- **Bug 1**: AGENTS.md.template tidak ter-bundle ke npm tarball — fix di package.json files array (added "*.template", "AGENTS.md.template", "decisions/", "LICENSE")
+- **Bug 2**: bin/lintasai.js tidak pass user CWD ke setup-pola-b.ps1, sehingga script salah deteksi "Root proyek" sebagai npm cache folder bukan user folder
+  - Fix: bin/lintasai.js sekarang pass `-ProjectRoot $process.cwd()` untuk command init/update/uninstall
+  - Fix: setup-pola-b.ps1 sekarang accept `-ProjectRoot` parameter
+  - Fix: setup-pola-b.ps1 detect "npx mode" (kit source di npm cache vs project) lalu COPY kit ke $ProjectRoot/.claude-kit/
+
+### Migration
+Staff yang baru install via `npx @ojokesusu/lintasai init` sekarang akan dapat behavior yang benar:
+- Kit copy dari npm cache ke <user-project>/.claude-kit/
+- "Root proyek" = folder user CWD
+- "Nama proyek" = nama folder user
+- AGENTS.md.template ada di tarball, deploy berhasil
+
+---
+
 ## v1.1.2 [2026-06-06]
 
 ### Changed

package/bin/lintasai.js

@@ -18,6 +18,7 @@ const COMMANDS = {
   "version": ["kit.ps1", "version"],
   "rollback": ["kit.ps1", "rollback"],
   "setup": ["kit.ps1", "setup"],
+  "status": ["kit.ps1", "status"],
 };
 
 function showHelp() {
@@ -31,6 +32,7 @@ function showHelp() {
   console.log("  init           Setup kit di project (alias setup-pola-b)");
   console.log("  update         Update kit ke versi terbaru");
   console.log("  doctor         Verify kit integrity");
+  console.log("  status         Show kit status ringkas (1-layar)");
   console.log("  version        Show kit version");
   console.log("  rollback       Rollback ke versi sebelumnya");
   console.log("  uninstall      Remove kit dari project");
@@ -66,16 +68,33 @@ if (!target) {
 }
 
 // Build powershell command
+const userCwd = process.cwd();
+// For init/update/uninstall: pass user CWD explicitly so script knows real project root
+const shouldPassProjectRoot = ["init", "update", "uninstall"].includes(command);
 let psArgs;
 if (Array.isArray(target)) {
-  // kit.ps1 subcommand
-  psArgs = ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", path.join(KIT_ROOT, target[0]), target[1], ...args];
+  // kit.ps1 subcommand. Inject -ProjectRoot so kit.ps1 inspects the kit di USER CWD
+  // (.claude-kit di project), bukan di npm cache ($PSScriptRoot). L1-RUN-003.
+  psArgs = [
+    "-NoProfile",
+    "-ExecutionPolicy",
+    "Bypass",
+    "-File",
+    path.join(KIT_ROOT, target[0]),
+    target[1],
+    "-ProjectRoot",
+    userCwd,
+    ...args,
+  ];
+} else if (shouldPassProjectRoot) {
+  // Direct script call with -ProjectRoot
+  psArgs = ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", path.join(KIT_ROOT, target), "-ProjectRoot", userCwd, ...args];
 } else {
   // Direct script call
   psArgs = ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", path.join(KIT_ROOT, target), ...args];
 }
 
-const child = spawn("powershell.exe", psArgs, { stdio: "inherit" });
+const child = spawn("powershell.exe", psArgs, { stdio: "inherit", cwd: userCwd });
 child.on("close", (code) => {
   process.exit(code || 0);
 });

package/docs/NPX_INSTALL.md

@@ -0,0 +1,217 @@
+# NPX Install Guide - lintasAI Kit
+
+## Untuk Siapa
+
+Panduan ini ditujukan untuk **staff IT non-programmer** yang mau install lintasAI Kit ke project menggunakan `npx` (lebih cepat dari `git clone`, tidak perlu paham git, dan otomatis dapat versi terbaru).
+
+Kalau kamu sudah familiar dengan terminal & PowerShell, install via npx adalah cara paling singkat: cukup 1 perintah, kit langsung terpasang di folder project.
+
+---
+
+## Cara Install (1 perintah)
+
+1. Buka **PowerShell** (bukan CMD).
+2. Pindah ke folder project tempat kit mau dipasang:
+   ```powershell
+   cd D:\Users\Administrator\projects\nama-project
+   ```
+3. Jalankan perintah install:
+   ```powershell
+   npx @ojokesusu/lintasai init
+   ```
+4. Tunggu sampai muncul pesan `Kit installed successfully`. Biasanya 30 detik - 2 menit tergantung koneksi.
+
+Setelah selesai, folder `.claude-kit/` + `AGENTS.md` akan otomatis dibuat di project root.
+
+---
+
+## Verify Install Berhasil
+
+Cek status kit:
+```powershell
+npx @ojokesusu/lintasai status
+```
+
+Output yang **benar** harus menampilkan:
+- `Kit version: v1.x.x`
+- `AGENTS.md present: yes`
+- `Manifest signed: yes`
+- `Files: <jumlah> / <jumlah> OK`
+
+Kalau ada `MISSING` atau `MODIFIED` di output, lihat section Troubleshooting di bawah.
+
+---
+
+## Troubleshooting
+
+### Error: "node tidak ditemukan" / "'npx' is not recognized"
+
+**Penyebab**: Node.js belum terinstall di PC.
+
+**Fix**:
+1. Download Node.js LTS dari https://nodejs.org/ (versi LTS, BUKAN Current).
+2. Install dengan opsi default. Pastikan checkbox `Add to PATH` aktif.
+3. Tutup & buka ulang PowerShell.
+4. Cek versi: `node --version` (harus muncul `v20.x.x` atau lebih baru).
+5. Ulangi perintah `npx @ojokesusu/lintasai init`.
+
+### Error: "EACCES" atau "EPERM" di Windows
+
+**Penyebab**: Permission ditolak. Biasanya karena Node.js terinstall di `Program Files` (perlu admin), atau folder project read-only.
+
+**Fix (pilih salah satu)**:
+- **Opsi A (cepat)**: Klik kanan PowerShell -> `Run as Administrator`, lalu ulangi perintah init.
+- **Opsi B (rekomendasi)**: Uninstall Node.js dari Program Files, install ulang di user folder (`C:\Users\<username>\nodejs\`). Ini menghindari masalah permission permanen.
+- **Opsi C**: Pastikan folder project tidak read-only. Klik kanan folder -> Properties -> uncheck `Read-only`.
+
+### Error: "ExecutionPolicy" PowerShell block
+
+**Penyebab**: Windows default block menjalankan script PowerShell yang tidak signed.
+
+**Fix**:
+1. Buka PowerShell sebagai user biasa (tidak perlu admin).
+2. Jalankan:
+   ```powershell
+   Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy RemoteSigned
+   ```
+3. Pilih `Y` saat ditanya konfirmasi.
+4. Ulangi perintah init.
+
+Catatan: `RemoteSigned` aman — hanya allow local script + script remote yang ber-signature. Tidak membuka full security risk.
+
+### Error: Behind corporate proxy / firewall
+
+**Penyebab**: Kantor pakai proxy yang block koneksi npm registry langsung.
+
+**Fix**:
+1. Tanya admin IT kantor untuk URL proxy (biasanya `http://proxy.company.local:8080`).
+2. Set npm config:
+   ```powershell
+   npm config set proxy http://proxy.company.local:8080
+   npm config set https-proxy http://proxy.company.local:8080
+   ```
+3. Kalau proxy butuh auth, format jadi: `http://username:password@proxy.company.local:8080`.
+4. Ulangi perintah init.
+
+Kalau masih gagal, coba registry mirror: `npm config set registry https://registry.npmmirror.com/`.
+
+### Error: "Kit tidak lengkap" / "File hilang"
+
+**Penyebab**: Download terputus di tengah jalan, atau cache npm corrupt.
+
+**Fix**:
+1. Clear cache npm:
+   ```powershell
+   npm cache clean --force
+   ```
+2. Hapus folder `.claude-kit/` yang sudah ada (kalau sebagian terinstall):
+   ```powershell
+   Remove-Item -Recurse -Force .\.claude-kit\
+   ```
+3. Retry:
+   ```powershell
+   npx @ojokesusu/lintasai@latest init
+   ```
+
+### Error: "Root proyek" salah deteksi (npm cache path)
+
+**Penyebab**: Bug di versi kit **pre-v1.1.3** — kit salah deteksi root project ke folder npm cache, bukan ke folder project user.
+
+**Tanda**: Folder `.claude-kit/` muncul di `C:\Users\<username>\AppData\Roaming\npm-cache\...` bukan di project folder.
+
+**Fix**:
+1. Hapus install yang salah:
+   ```powershell
+   npx @ojokesusu/lintasai uninstall
+   ```
+2. Upgrade ke versi terbaru (v1.2.0+):
+   ```powershell
+   npx @ojokesusu/lintasai@latest init
+   ```
+3. Versi v1.2.0+ sudah fix deteksi root via `process.cwd()` (folder PowerShell aktif).
+
+---
+
+## Rollback ke Versi Sebelumnya
+
+Kalau update terbaru bermasalah, rollback ke versi sebelumnya:
+
+```powershell
+npx @ojokesusu/lintasai rollback
+```
+
+Perintah ini akan restore file dari snapshot otomatis yang dibuat saat last update. Snapshot disimpan di `.claude-kit/.snapshots/`.
+
+---
+
+## Uninstall
+
+Hapus kit dari project secara aman (sambil keep file user-custom):
+
+```powershell
+npx @ojokesusu/lintasai uninstall
+```
+
+Perintah ini akan:
+- Hapus folder `.claude-kit/`.
+- Hapus `AGENTS.md` (kalau belum dimodifikasi user).
+- **TIDAK** hapus `docs/`, `src/`, atau file project user lain.
+
+Kalau `AGENTS.md` sudah dimodifikasi, kit akan tanya konfirmasi sebelum hapus.
+
+---
+
+## Cara Update Kit
+
+Update ke versi terbaru:
+
+```powershell
+npx @ojokesusu/lintasai update
+```
+
+Perintah ini akan:
+1. Buat snapshot dari versi current.
+2. Download versi terbaru dari npm.
+3. Merge file yang dimodifikasi user (kalau ada).
+4. Update manifest signature.
+
+Kalau ada konflik merge, kit akan tampilkan diff & tanya pilihan: `keep mine`, `take theirs`, atau `manual merge`.
+
+---
+
+## Cara Cek Apakah Kit Saya Up-to-date
+
+Cek status + versi:
+```powershell
+npx @ojokesusu/lintasai status
+```
+
+Lihat file yang berubah dari versi original:
+```powershell
+npx @ojokesusu/lintasai diff
+```
+
+Output `diff` akan tampilkan:
+- File yang **MODIFIED** (diubah user setelah install).
+- File yang **MISSING** (terhapus).
+- File yang **ADDED** (file baru di luar manifest).
+
+Untuk lihat versi terbaru yang tersedia di npm:
+```powershell
+npm view @ojokesusu/lintasai version
+```
+
+Bandingkan dengan `Kit version` di output `status`. Kalau beda, jalankan `update`.
+
+---
+
+## Kontak Support
+
+- **Discord channel**: `#lintasai-support` (link invite di internal docs tim).
+- **Owner**: dokterbrutal@gmail.com — gunakan Signal/Telegram untuk hal sensitif (kredensial, API key bocor, security incident).
+- **Bug report**: buka issue di GitHub repo `@ojokesusu/lintasai` (link di npm page).
+
+Untuk error yang **tidak** ada di troubleshooting di atas:
+1. Jalankan `npx @ojokesusu/lintasai status --verbose` (output lengkap).
+2. Screenshot output + share di Discord channel.
+3. Jangan paste output yang berisi password / API key — mask dulu.

package/kit.ps1

@@ -12,6 +12,7 @@
     uninstall - Hapus kit dari proyek dengan AMAN (manifest-based, delegate ke uninstall.ps1)
     doctor    - Diagnostic: cek versi + file utuh + broken cross-ref + integrity (sha256)
     scan      - Re-run scan project (tanpa setup) — generate ringkasan kandidat CRITICAL
+    status    - Ringkasan 1-layar (versi, install mode, AGENTS.md, manifest, tier)
     version   - Print versi kit aktif (dari manifest)
     rollback  - Rollback kit ke snapshot sebelum update (delegate ke lib\rollback.ps1)
     help      - Tampilkan usage
@@ -47,9 +48,11 @@
 [CmdletBinding()]
 param(
     [Parameter(Position = 0)]
-    [ValidateSet('setup', 'update', 'uninstall', 'doctor', 'scan', 'version', 'rollback', 'help', '')]
+    [ValidateSet('setup', 'update', 'uninstall', 'doctor', 'scan', 'version', 'rollback', 'status', 'help', '')]
     [string]$Command = '',
 
+    [string]$ProjectRoot = $null,
+
     [Parameter(ValueFromRemainingArguments = $true)]
     [string[]]$ExtraArgs
 )
@@ -57,12 +60,31 @@ param(
 $ErrorActionPreference = 'Stop'
 
 # ---- Resolve paths ----
-$KitDir = if ($PSScriptRoot) { $PSScriptRoot } elseif ($MyInvocation.MyCommand.Path) { Split-Path -Parent $MyInvocation.MyCommand.Path } else { (Get-Location).Path }
-$ProjectRoot = Split-Path -Parent $KitDir
+# Script's own location (npm cache when invoked via `npx`, project's .claude-kit when invoked directly).
+$ScriptRoot = if ($PSScriptRoot) { $PSScriptRoot } elseif ($MyInvocation.MyCommand.Path) { Split-Path -Parent $MyInvocation.MyCommand.Path } else { (Get-Location).Path }
+
+# Kit-to-inspect: when -ProjectRoot is passed (npx launcher case), inspect the kit di USER CWD
+# (.claude-kit di project), BUKAN script's own location ($ScriptRoot di npm cache). Tanpa
+# -ProjectRoot (direct invocation via .\.claude-kit\kit.ps1), $ScriptRoot SUDAH .claude-kit
+# project, jadi fallback pakai $ScriptRoot.
+if ($ProjectRoot) {
+    $KitDir = Join-Path $ProjectRoot '.claude-kit'
+} else {
+    $KitDir = $ScriptRoot
+    $ProjectRoot = Split-Path -Parent $KitDir
+}
+
+# Inform user which kit is being inspected — penting buat differentiate "kit di project" vs
+# "kit di npm cache". Subcommands yang inspect kit (doctor/version/rollback/scan) butuh ini.
+if ($Command -in @('doctor', 'version', 'rollback', 'scan', 'status')) {
+    Write-Host ("Inspecting kit at: {0}" -f $KitDir) -ForegroundColor Cyan
+}
 
 # ---- Resolve lib paths (optional dependencies) ----
-$libRollback = Join-Path $PSScriptRoot 'lib\rollback.ps1'
-$libSafety = Join-Path $PSScriptRoot 'lib\safety.ps1'
+# Pakai $KitDir (bukan $PSScriptRoot) supaya respect -ProjectRoot override — saat dipanggil
+# via npx launcher, kit yang di-inspect ada di project (.claude-kit), bukan di npm cache.
+$libRollback = Join-Path $KitDir 'lib\rollback.ps1'
+$libSafety = Join-Path $KitDir 'lib\safety.ps1'
 
 # ---- Helper: detect kit version (defense-in-depth fallback chain) ----
 # Source 1: .install-manifest.json -> metadata.kit_version (PRIMARY — what was installed)
@@ -139,6 +161,9 @@ function Show-Help {
     Write-Host "  scan      - Re-run scan project untuk identifikasi kandidat CRITICAL"
     Write-Host "              (tanpa setup ulang)"
     Write-Host ""
+    Write-Host "  status    - Ringkasan 1-layar: versi, install mode, AGENTS.md, manifest, tier"
+    Write-Host "              (no args)"
+    Write-Host ""
     Write-Host "  version   - Print versi kit aktif (dari .install-manifest.json)"
     Write-Host ""
     Write-Host "  rollback  - Rollback kit ke snapshot sebelum update terakhir"
@@ -426,6 +451,111 @@ function Invoke-Scan {
     return 0
 }
 
+# ---- Helper: status ringkas (1-layar) ----
+# Mirror Invoke-Doctor structure tapi output lebih ringkas — fokus pada snapshot cepat,
+# bukan diagnostic mendalam. Kalau user butuh detail (file inti, integrity sha256, dst.),
+# arahkan ke `doctor`.
+function Invoke-Status {
+    Write-Host ""
+    Write-Host "=== Kit Status (ringkas) ===" -ForegroundColor Cyan
+    Write-Host ""
+
+    # 1. Kit version
+    $version = Get-KitVersion
+    $versionDisplay = if ($version -match '^v') { $version } elseif ($version -eq 'unknown') { 'unknown' } else { "v$version" }
+    Write-Host ("Kit version    : {0}" -f $versionDisplay) -ForegroundColor Green
+
+    # 2. Install mode (npx-mode vs git-clone-mode)
+    # Heuristic: kalau $ScriptRoot path mengandung 'node_modules' atau 'npm-cache' atau
+    # '_npx' (Windows npx cache), itu npx-mode. Selain itu git-clone-mode (atau direct).
+    # Catatan: $ScriptRoot = lokasi kit.ps1 yang lagi running, $KitDir = kit yang di-inspect.
+    $installMode = 'git-clone-mode'
+    if ($ScriptRoot -match '(node_modules|npm-cache|_npx|AppData[\\/]+Local[\\/]+npm-cache)') {
+        $installMode = 'npx-mode'
+    }
+    Write-Host ("Install mode   : {0}" -f $installMode) -ForegroundColor Green
+
+    # 3. AGENTS.md present (Y/N + last modified)
+    $agentsAtRoot = Join-Path $ProjectRoot 'AGENTS.md'
+    if (Test-Path $agentsAtRoot) {
+        try {
+            $agentsMtime = (Get-Item $agentsAtRoot -ErrorAction Stop).LastWriteTime.ToString('yyyy-MM-dd HH:mm:ss')
+            Write-Host ("AGENTS.md      : Y (last modified: {0})" -f $agentsMtime) -ForegroundColor Green
+        } catch {
+            Write-Host "AGENTS.md      : Y (mtime unavailable)" -ForegroundColor Yellow
+        }
+    } else {
+        Write-Host "AGENTS.md      : N (belum di-copy ke project root)" -ForegroundColor Yellow
+    }
+
+    # 4. Manifest signed (Y/N + verify result)
+    # "Signed" di sini = manifest punya field 'signature' atau 'sha256_of_manifest' atau
+    # equivalent. Sekarang kit pakai per-file sha256 di manifest.files[].sha256 — anggap
+    # itu "signed" kalau minimal ada N file dengan sha256 valid.
+    $manifestPath = Join-Path $KitDir '.install-manifest.json'
+    $manifestSignedDisplay = 'N (manifest hilang)'
+    $manifestSignedColor = 'Yellow'
+    $lastUpdateDisplay = 'unknown'
+    if (Test-Path $manifestPath) {
+        try {
+            $manifestJson = [System.IO.File]::ReadAllText($manifestPath, [System.Text.Encoding]::UTF8)
+            $manifest = ConvertFrom-Json $manifestJson -ErrorAction Stop
+
+            # Cek "signed": ada signature field, atau minimal entries dengan sha256
+            $hasSignature = $false
+            if ($manifest.signature) { $hasSignature = $true }
+            if (-not $hasSignature) {
+                $entries = @()
+                if ($manifest.files) { $entries = $manifest.files }
+                elseif ($manifest.entries) { $entries = $manifest.entries }
+                $shaCount = @($entries | Where-Object { $_.sha256 }).Count
+                if ($shaCount -gt 0) {
+                    $hasSignature = $true
+                    $manifestSignedDisplay = ("Y ({0} files w/ sha256)" -f $shaCount)
+                    $manifestSignedColor = 'Green'
+                }
+            } else {
+                $manifestSignedDisplay = 'Y (signature field present)'
+                $manifestSignedColor = 'Green'
+            }
+
+            if (-not $hasSignature) {
+                $manifestSignedDisplay = 'N (manifest ada tapi tidak signed)'
+                $manifestSignedColor = 'Yellow'
+            }
+
+            # Last update timestamp dari manifest
+            if ($manifest.metadata -and $manifest.metadata.installed_at) {
+                $lastUpdateDisplay = $manifest.metadata.installed_at
+            } elseif ($manifest.metadata -and $manifest.metadata.updated_at) {
+                $lastUpdateDisplay = $manifest.metadata.updated_at
+            } elseif ($manifest.installed_at) {
+                $lastUpdateDisplay = $manifest.installed_at
+            }
+        } catch {
+            $manifestSignedDisplay = ("N (gagal parse: {0})" -f $_.Exception.Message)
+            $manifestSignedColor = 'Red'
+        }
+    }
+    Write-Host ("Manifest signed: {0}" -f $manifestSignedDisplay) -ForegroundColor $manifestSignedColor
+
+    # 5. Last update timestamp
+    Write-Host ("Last update    : {0}" -f $lastUpdateDisplay) -ForegroundColor Green
+
+    # 6. Tier setup (.staff-profile.md present?)
+    $staffProfile = Join-Path $ProjectRoot '.staff-profile.md'
+    if (Test-Path $staffProfile) {
+        Write-Host "Tier setup     : Y (.staff-profile.md ada)" -ForegroundColor Green
+    } else {
+        Write-Host "Tier setup     : N (.staff-profile.md belum dibuat — solo/owner mode)" -ForegroundColor Yellow
+    }
+
+    Write-Host ""
+    Write-Host "Untuk detail lebih lengkap: .\.claude-kit\kit.ps1 doctor" -ForegroundColor Cyan
+    Write-Host ""
+    return 0
+}
+
 # ---- Helper: print version ----
 # Uses Get-KitVersion fallback chain (manifest -> $script:KIT_VERSION -> CHANGELOG -> "unknown").
 function Show-Version {
@@ -471,6 +601,10 @@ switch ($Command) {
         $code = Invoke-Scan
         exit $code
     }
+    'status' {
+        $code = Invoke-Status
+        exit $code
+    }
     'version' {
         Show-Version
         exit 0

package/lib/kit-files.psd1

@@ -81,7 +81,6 @@
     # Tier 5b: Deprecated stubs (legacy prompts, still on disk, akan dihapus)
     deprecated_stubs = @(
         'BOOTSTRAP_PROJECT_DOCS_PROMPT_v1.md',
-        'FIRST_SESSION_PROMPT_v1.md',
         'PROJECT_KICKOFF_PROMPT_v1.md',
         'PROJECT_MIGRATION_PROMPT_v1.md',
         'SETUP_POLA_B_PROMPT_v1.md',