@terreno/mcp 57.6.1 → 57.7.0

package/src/docs/versioned/next/how-to/circleci.md

@@ -4,17 +4,17 @@ CircleCI CI/CD source of truth. See
 [`docs/implementationPlans/migrate-cicd-to-circleci.md`](../implementationPlans/migrate-cicd-to-circleci.md).
 
 **Status:** CircleCI owns package CI, repo policies, Playwright e2e, Maestro web
-e2e, architectural PR review, and semver-tag npm releases. Path filters start
-CircleCI Netlify and GCP production/preview jobs, but those jobs **skip green**
-until `terreno-netlify` and `terreno-gcp` are filled. GitHub Actions still
-owns live Netlify/GCP deploys in this window. Do not leave both applying
-terraform once CircleCI GCP deploys succeed — set the GHA deploy workflows
-back to `push.branches-ignore: ["**"]` in the same change. GitHub-native security, Cursor GitHub App
-checks (Approval / Security / Bugbot), and repository automation remain
-enabled. EAS PR updates and the fingerprint gate are temporarily disabled;
-manual EAS development dispatch remains available in CircleCI. Preview
-**cleanup** on PR close is GitHub `preview-cleanup.yml` plus the manual
-CircleCI `run-preview-cleanup` parameter.
+e2e, architectural PR review, semver-tag npm releases, and all continuous
+deploys (Netlify demo / example frontend / docs, GCP terraform, Cloud Run
+backend + tasks, MCP). The GitHub Actions deploy workflows are disabled and
+kept only for rollback. CircleCI deploy jobs **fail** when `terreno-netlify`
+or `terreno-gcp` is missing a value; they never skip green. GitHub-native
+security, Cursor GitHub App checks (Approval / Security / Bugbot), and
+repository automation remain enabled. EAS PR updates and the fingerprint gate
+are temporarily disabled; manual EAS development dispatch remains available in
+CircleCI. Preview **cleanup** on PR close is a thin GitHub
+`preview-cleanup.yml` hook that starts a CircleCI `run-preview-cleanup`
+pipeline.
 
 ## Project setup (maintainers)
 
@@ -23,9 +23,8 @@ CircleCI `run-preview-cleanup` parameter.
 3. Enable **dynamic config** / setup workflows for the project (required for
    `.circleci/config.yml` `setup: true`).
 4. Create the contexts below (`terreno-netlify`, `terreno-gcp`, and the rest).
-   Copy Netlify and GCP values from GitHub Actions secrets/vars. Until they
-   are set, CircleCI deploy jobs skip with exit 0 and GHA remains the live
-   deployer.
+   Copy Netlify and GCP values from GitHub Actions secrets/vars. CircleCI is
+   the only deployer, so deploy jobs fail until these are set.
 5. Set project Environment Variable `CODECOV_TOKEN` (Codecov upload token) so
    package CI can upload `coverage/lcov.info`. Uploads skip when it is unset.
    Mirror the same secret as GitHub Actions `CODECOV_TOKEN` for retained twins.
@@ -34,7 +33,7 @@ CircleCI `run-preview-cleanup` parameter.
 6. Build forked PRs if you want DCO + rulesync on forks.
 
 GitHub App org/project slug (API and CLI):
-`circleci/6UHiK7pThPXbhnNi3umQNe/W3HZeMJujyMB2sYiUXaQbs`.
+`circleci/6UHiK7pThPXbhnNi3umQNe/LdjghuhydHjFMyFjcEXMA2`.
 
 Do not query `gh/TerrenoLabs/terreno` — that slug returns `404 Project not found`.
 Cloud agents use `CIRCLECI_TOKEN` (accepted alias of CircleCI's `CIRCLE_TOKEN`). Send
@@ -166,28 +165,62 @@ non-PR branch builds.
 | Path (examples) | Parameter | PR job | `master` job |
 | --- | --- | --- | --- |
 | `demo/**`, `ui/**` | `run-deploy-demo` | `deploy-demo-preview` | `deploy-demo` |
-| `example-frontend/**`, `admin-frontend/**`, `rtk/**` | `run-deploy-frontend` | `deploy-frontend-preview` | `deploy-frontend` |
+| `example-frontend/**`, `admin-frontend/**`, `rtk/**`, `ui/**`, `ai/**`, `syncdb/**`, `bun.lock` | `run-deploy-frontend` | `deploy-frontend-preview` | `deploy-frontend` |
 | `docs/**`, `website/**` | `run-deploy-docs` | `deploy-docs-preview` | `deploy-docs` |
-| `example-backend/**`, `api/**`, `comms/**` | `run-cd-backend` | `gcp-cd-preview` | `gcp-cd-prod` |
+| `example-backend/**`, `api/**`, `comms/**`, `jobs/**`, `admin-spa/**`, `feature-flags/**`, `announcements/**`, plus every frontend path above | `run-cd-backend` | `gcp-cd-preview` | `gcp-cd-prod` |
 | `terraform/**` | `run-cd-terraform` | `gcp-cd-preview` | `gcp-cd-prod` |
-| `mcp-server/**` | `run-cd-mcp` | _(none)_ | `gcp-cd-prod` |
-
-Until `terreno-netlify` is populated, GitHub Actions `docs-deploy` /
-`demo-deploy` / `frontend-example-deploy` publish the live sites (including
-PR aliases). CircleCI `deploy-*-preview` jobs still start from path filters
-and skip when `NETLIFY_AUTH_TOKEN` or the site id is missing. The same skip
-applies to `gcp-cd-*` when `terreno-gcp` lacks WIF or SA emails, so GitHub
-`cd.yml` remains the live GCP writer. GitHub `terraform-preview` and
-`backend-deploy-preview` run only when
-`github.event.pull_request.head.repo.full_name == github.repository`.
-Terraform preview always describes the Infra Manager preview (state,
-`errorCode`, `errorLogs`) before delete, including when `previews create`
-fails. Fork PRs still present `repository: TerrenoLabs/terreno` on the
-OIDC token, so
-WIF would accept them if those jobs ran. Netlify GHA jobs fail closed on
-forks (secrets withheld). After filling a context, confirm a CircleCI deploy
-URL, then set the matching GHA workflows to `push.branches-ignore: ["**"]`. Turn off Netlify's
-GitHub auto-build so only one system publishes.
+| `mcp-server/**`, `ui/**` | `run-cd-mcp` | _(none)_ | `gcp-cd-prod` (runs `mcp-server` `test:ci` first) |
+
+The backend image bundles the admin SPA (ui, rtk, admin-frontend, syncdb), so
+those paths redeploy the backend too. Every frontend PR preview therefore gets
+an isolated `pr-N` backend: `deploy-frontend-preview` always points
+`EXPO_PUBLIC_API_URL` at it (the prod backend rejects preview CORS) and waits
+up to 20 minutes for its `/health` before publishing, because `gcp-cd-preview`
+runs in a separate workflow.
+
+Backend previews prune not-Ready tagged revisions from traffic
+(`rebuild-cloud-run-ready-traffic.sh`), deploy untagged with
+`--revision-suffix`, then point the `pr-N` tag at that revision. Terraform
+preview always describes the Infra Manager preview (state, `errorCode`,
+`errorLogs`) before delete, including when `previews create` fails. Fork PRs
+still present `repository: TerrenoLabs/terreno` on the OIDC token, so WIF
+would accept them if those jobs ran. Preview jobs halt on fork PRs, where CircleCI withholds contexts.
+GitHub App builds do not set `CIRCLE_PR_USERNAME` / `CIRCLE_PR_REPONAME`;
+`skip_if_fork_deploy` asks the pulls API and halts before
+`require_*_context` would fail on those withheld secrets.
+
+### GitHub Deployment records
+
+Deploy scripts wrap the publish step in `with_github_deployment`
+(`scripts/ci/github-deployment-lib.sh`): the deployment is created as
+`in_progress` with the CircleCI job as `log_url`, then set to `success`
+(with the environment URL) or `failure`. PR previews are transient; the rest
+are production environments. Environment names match the retired GitHub
+workflows, so history stays continuous:
+
+| Job | Environment | URL |
+| --- | --- | --- |
+| `deploy-demo` / `deploy-demo-preview` | `demo` / `demo-preview-pr-N` | `terreno-demo.netlify.app` / `pr-N--terreno-demo.netlify.app` |
+| `deploy-frontend` / `deploy-frontend-preview` | `example-frontend` / `example-frontend-preview-pr-N` | `terreno-frontend.netlify.app` / `pr-N--terreno-frontend.netlify.app` |
+| `deploy-docs` / `deploy-docs-preview` | `docs` / `docs-preview-pr-N` | `terreno-docs.netlify.app` / `docs-pr-N--terreno-docs.netlify.app` |
+| `gcp-cd-prod` backend / `gcp-cd-preview` | `example-backend-production` / `example-backend-preview-pr-N` | Cloud Run URL / `pr-N---` tag URL |
+| `gcp-cd-prod` MCP | `mcp-production` | Cloud Run `terreno-mcp` URL |
+
+Records are posted to `GITHUB_REPOSITORY` when that is set, otherwise
+`TerrenoLabs/terreno`. CircleCI does not set `GITHUB_REPOSITORY`, and
+`CIRCLE_PROJECT_USERNAME` can still be the pre-transfer `FlourishHealth`
+project link, so the script does not use it. Recording is best-effort: an
+unset `GITHUB_DEPLOYMENTS_TOKEN` or a GitHub API error prints a warning and
+never fails the deploy. Terraform applies are not recorded. PR close
+deactivates the preview environments (`preview-cleanup.yml`). The token lives
+in its own context so the GitHub write scope is limited to deployments.
+Same-repo PR pipelines can read every context their jobs attach, so keep this
+token scoped to deployments.
+
+Each deploy job has a `serial-group`: production jobs queue per target, and
+previews queue per branch, so two master merges never apply terraform or roll
+Cloud Run at the same time. Turn off Netlify's GitHub auto-build so only
+CircleCI publishes.
 
 ## Contexts (create empty shells, then fill)
 
@@ -204,6 +237,7 @@ restrict `terreno-release` and `terreno-npm` to tag/manual release pipelines.
 | `terreno-release` | `REPO_ADMIN_TOKEN`, `ZOOM_WEBHOOK_URL`, `ZOOM_WEBHOOK_TOKEN` | stable version bump + release notification |
 | `terreno-agentic` | `CURSOR_API_KEY`, optional `CURSOR_MODEL` | `architectural-pr-review` |
 | `terreno-github-api` | PAT (`pull-requests`, `contents`, …) | `dco`, `architectural-pr-review` |
+| `terreno-github-deployments` | `GITHUB_DEPLOYMENTS_TOKEN`: fine-grained PAT on `TerrenoLabs/terreno` with **Deployments: read/write** and **Pull requests: read** only | GitHub Deployment records + preview PR lookup in every Netlify/GCP deploy job |
 
 Until contexts exist, e2e jobs may use **project env vars for `E2E_*` secrets only**
 (or the in-job `ci-e2e-*-secret` fallbacks). **Do not** put `GITHUB_TOKEN` (or any
@@ -215,10 +249,9 @@ project, leave fork-PR secret passing off, and attach that context **only** to
 unset, and it skips fork PRs. The job checks out `origin/master` before running
 the review script so a PR cannot rewrite the reviewer.
 
-Netlify and GCP jobs **halt as the first step** when `terreno-netlify` /
-`terreno-gcp` are empty, before checkout or `bun install`. Path filters still
-start those jobs so filling the context turns deploys on without a config
-change; skip-green no longer pays for a full `large` install. Docker Layer
+Netlify and GCP jobs **validate their context as the first step** and fail,
+before checkout or `bun install`, listing the missing variables. Preview jobs
+halt earlier on fork PRs, where CircleCI withholds contexts. Docker Layer
 Caching is off (200 credits per job). The docs Netlify target disables
 Docusaurus minification so the build stays within the 8 GB `large` executor.
 
@@ -284,13 +317,13 @@ the same commands through the parameterized `packages-ci` job, gated by
 
 CD replacement map:
 
-| GHA job `name:` / workflow (not yet ported) | Planned CircleCI job |
+| GHA job `name:` / workflow | CircleCI job |
 |---------------------------------------------|----------------------|
 | Fingerprint gate (`fingerprint-gate.yml`) | Temporarily disabled; no CircleCI automatic gate |
 | EAS PR update/build (`eas-pr.yml`) | Temporarily disabled; use manual EAS dispatch |
 | EAS dev build (`eas-dev-build.yml`) | CircleCI manual `eas-dev-target` |
 | CD terraform / Cloud Run (`cd.yml`) | `gcp-cd-prod` (master) and `gcp-cd-preview` (PRs) |
-| Preview cleanup (`preview-cleanup.yml`) | CircleCI manual `run-preview-cleanup` |
+| Preview cleanup (`preview-cleanup.yml`) | `preview-cleanup`, started by the GitHub PR-close hook |
 | Netlify demo / frontend / docs deploys | production + `*-preview` jobs |
 | Publish on tag (`publish-on-tag.yml`) | `publish-release` |
 | Appium Android / iOS | Not ported (Maestro web is `maestro-e2e`) |
@@ -332,12 +365,23 @@ Only stable tags (`57.3.0`) run `deploy-demo` after publish. Use
 `{"run-demo-deploy":true}` on `master` if a prerelease must also refresh the
 demo site.
 
-PR preview **cleanup** is manual because CircleCI does not receive GitHub
-`pull_request.closed` events. Configure a GitHub App/webhook to call
-`run-preview-cleanup` if automatic lifecycle cleanup is required. Path-filtered
+CircleCI does not receive GitHub `pull_request.closed` events, so
+`.github/workflows/preview-cleanup.yml` forwards them: it runs master's
+`scripts/ci/trigger-circleci-pipeline.sh` with `{"run-preview-cleanup":"<PR>"}`
+and deactivates the PR's old GitHub Deployments. The manual GHA publisher
+(`publish-on-tag.yml`) uses the same script to start `{"run-demo-deploy":true}`
+on `master`. Both need the GitHub secret `CIRCLECI_TOKEN` (a CircleCI personal
+or project API token) and the repository variable
+`CIRCLECI_PIPELINE_DEFINITION_ID` (Project Settings → Pipelines, or
+`GET /api/v2/projects/<project id>/pipeline-definitions`; the project id comes from
+`GET /api/v2/project/<slug>`). Set the
+optional variable `CIRCLECI_PROJECT_SLUG` if re-linking the project changes
+its slug. Path-filtered
 preview **deploys** run on open PRs from this repository; fork PRs are skipped.
 If `CIRCLE_PULL_REQUEST` is unset (GitHub App `push` pipelines), the job looks
-up the open PR for `CIRCLE_BRANCH` via the GitHub API.
+up the open PR for `CIRCLE_BRANCH` via the GitHub API on `TerrenoLabs/terreno`
+(`GITHUB_REPOSITORY` when set). It does not use `CIRCLE_PROJECT_USERNAME`,
+which can still be the pre-transfer `FlourishHealth` project link.
 
 `mcp-server-docker` is push-only, matching GitHub Actions. It uses
 `resolve-preview-pr.sh` for that lookup and skips when a PR exists. Its
@@ -348,8 +392,7 @@ tree.
 ## Path-filter parity guard
 
 `bun run check:circleci-parity` guards active GitHub/CircleCI twins. Deploy
-workflows are dual-run until CircleCI contexts are filled; they are not in
-the parity mapping. New CircleCI-only path rules still belong in
+workflows are disabled on GitHub, so they are not in the parity mapping. New CircleCI-only path rules still belong in
 `.circleci/config.yml` and config tests. The checker prefers live `config.yml`
 when `setup: true`.
 
@@ -401,12 +444,11 @@ circleci config validate .circleci/continue-config.yml
 
 ## Disabled GitHub workflows
 
-Package CI, e2e, and npm tag workflows stay `push.branches-ignore: ["**"]`. Netlify/GCP deploy
-workflows are **re-enabled** until CircleCI contexts have the same secrets.
-After a successful CircleCI production or preview deploy, set
-`docs-deploy.yml`, `demo-deploy.yml`, `frontend-example-deploy.yml`, `cd.yml`,
-and `preview-cleanup.yml` back to `push.branches-ignore: ["**"]` in the same PR. Never enable both
-npm tag publishers. Never leave both GCP terraform applies enabled.
+Package CI, e2e, npm tag, and deploy workflows (`docs-deploy.yml`,
+`demo-deploy.yml`, `frontend-example-deploy.yml`, `cd.yml`) stay
+`push.branches-ignore: ["**"]` for rollback. `preview-cleanup.yml` stays live
+only as the PR-close trigger. Never enable both npm tag publishers. Never
+re-enable `cd.yml` while CircleCI deploys: both would apply terraform.
 
 ## Cursor GitHub App checks
 

package/src/docs/versioned/next/how-to/github-actions-ci.md

@@ -1,8 +1,9 @@
 # GitHub Actions CI (Terreno)
 
-GitHub Actions is the CI of record. Operator map for the expensive jobs:
-[GitHub Actions CI](github-actions-ci.md). CircleCI twins are parked; see
-[CircleCI](circleci.md).
+CircleCI is the CI/CD of record; see [CircleCI](circleci.md). The GitHub
+Actions CI and deploy workflows below are disabled
+(`push.branches-ignore: ["**"]`) and kept only for rollback. This page
+describes how they behaved if one is ever re-enabled.
 
 ## Docs site (`docs-deploy.yml`)
 

package/src/docs/versioned/next/how-to/run-tests-locally.md

@@ -8,7 +8,28 @@ the example-backend **dev** server need a replica-set `mongod` (see
 [AGENTS.md](https://github.com/TerrenoLabs/terreno/blob/master/AGENTS.md) Cursor Cloud
 section).
 
-## Do now — package tests
+## Do now — prepush mirrors CI
+
+```bash
+bun run prepush            # lint, compile, then every CI job this branch triggers
+bun run prepush --dry-run  # print the plan only
+bun run prepush --all      # every check, regardless of changed files
+```
+
+`prepush` diffs committed, staged, unstaged, and untracked files against the merge-base
+with `origin/master`. It applies the CircleCI path-filter mapping in
+`.circleci/config.yml`, then runs the local command for each triggered job: package
+`test:coverage` plus the 90% new-file LCOV gate, `ui` types, demo typecheck,
+example-backend and example-frontend tests, every `repo-policies` step, rulesync drift,
+and the typedoc API reference when `api/src` or `rtk/src` changes. Every step runs even
+after a failure, so a single pass lists every problem. Fix them all, then push once.
+
+Jobs that need infrastructure (Playwright e2e, Maestro, admin-spa integration, Docker)
+are listed at the end with the command to run by hand. A test in
+`scripts/ci/prepush/plan.test.ts` fails when the mapping gains a parameter that
+`prepush` neither runs nor lists.
+
+## Package tests
 
 From the repo root after `bun bootstrap`:
 
@@ -39,7 +60,7 @@ bun test --only-failures <path>
 | `example-frontend-ci` | `bun run frontend:test` |
 | `ui-demo-ci` | `cd demo && bun run test:ci` then `bun run check:demo-coverage` |
 | `new-file-coverage` | `bun run check:new-file-coverage --base=origin/master --threshold=90` |
-| `repo-policies` | `bun run prepush` (lint, compile, `analyze:full`) |
+| `repo-policies` | `bun run prepush` (runs every repo-policies step) |
 
 Coverage gate for a published package: `cd <package> && bun run test:coverage`.
 

package/src/docs/versioned/next/implementationPlans/IP_TEMPLATE.md

@@ -3,9 +3,11 @@
 Copy to `docs/implementationPlans/<slug>.md` and replace placeholders. Pair with
 `docs/tasks/<slug>.md`. Add `**Parent IP:** [other](other.md)` only when this plan
 rides on another plan's roadmap entry instead of getting its own. A filled Parent
-IP header skips reconcile for that file.
+IP header skips reconcile for that file. `**Roadmap:**` sets the Area / Target / Impact
+the roadmap entry is scaffolded with on merge; omit it to have them inferred.
 
 **Status:** Draft | Approved | In progress | Complete | Deferred  
+**Roadmap:** Area=`api`, Target=`Next`, Impact=`Feature`  
 **Branch:**  
 **Owner:**  
 **Created:** YYYY-MM-DD  

package/src/docs/versioned/next/implementationPlans/admin-improvements.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Admin Improvements (post–Admin UI v2)
 
-**Status:** Approved  
+**Status:** Deferred — roadmap declined #1099; Phase 7 (rules, MCP generator, migration guide, telemetry) not started  
 **Branch:** (implementation TBD)  
 **Owner:** Josh Gachnang  
 **Created:** 2026-06-01 (original); revised 2026-08-20 post–v2 gap analysis  

package/src/docs/versioned/next/implementationPlans/admin-scripts-durable-jobs.md

@@ -1,6 +1,7 @@
 # Implementation Plan: Admin scripts via durable jobs
 
-**Status:** Approved (operator) — 2026-09-14
+**Status:** Complete
+**Roadmap:** Area=`admin`, Target=`Released`, Impact=`Improvement`  
 **Branch:** `cursor/scripts-via-durable-jobs-803d`
 **Task list:** [admin-scripts-durable-jobs.md](../tasks/admin-scripts-durable-jobs.md)
 **Depends on:** [job-queues.md](job-queues.md)

package/src/docs/versioned/next/implementationPlans/agent-ui-blocks.md

@@ -1,6 +1,7 @@
 # Agent UI Blocks — a strict YAML DSL for agent-rendered Terreno components
 
 **Status:** Approved 2026-09-15 (grilling rounds 1–2 closed: D1, D2, D4, D6, D8, D15, D17, D18 confirmed; remaining `assumed` rows are engineering defaults Pick may revise with a note)  
+**Roadmap:** Area=`ai`, Target=`Next`, Impact=`Feature`  
 **Branch:** `cursor/agent-ui-blocks-grow-e5c0`  
 **Owner:** unassigned  
 **Created:** 2026-09-15  

package/src/docs/versioned/next/implementationPlans/ai-agents-and-failover.md

@@ -1,6 +1,7 @@
 # Implementation plan: AI agents and provider failover
 
 **Status:** Draft  
+**Roadmap:** Area=`ai`, Target=`Future`, Impact=`Feature`  
 **Branch:** `cursor/ai-agents-and-failover-ip-97fd`  
 **Owner:** unassigned  
 **Created:** 2026-08-24  

package/src/docs/versioned/next/implementationPlans/ai-observability.md

@@ -1,6 +1,7 @@
 # Implementation Plan: AI observability (Langfuse-light, pluggable)
 
 **Status:** Draft  
+**Roadmap:** Area=`ai`, Target=`Future`, Impact=`Feature`  
 **Created:** 2026-08-24  
 **Owner:** unassigned  
 **Branch:** `cursor/ai-observability-ip-64ca`  

package/src/docs/versioned/next/implementationPlans/announcements-surfaces.md

@@ -1,6 +1,6 @@
 # Announcement Surfaces, Targeting, and Click Tracking
 
-**Status:** Implementation complete — Phase 4 verified; Taste in progress
+**Status:** Complete — shipped with announcements
 **Parent IP:** [announcements](announcements.md)  
 **Branch:** `cursor/announcements-grow-bf9c`  
 **Owner:** Terreno  

package/src/docs/versioned/next/implementationPlans/announcements.md

@@ -1,6 +1,7 @@
 # Product Update Announcements — In-App Core Feature
 
-**Status:** In progress — implementation and Roast complete; pending Brew
+**Status:** Complete — shipped with @terreno/announcements (57.6.x)
+**Roadmap:** Area=`api`, Target=`Released`, Impact=`Feature`  
 **Branch:** `cursor/announcements-grow-bf9c`  
 **Owner:** Terreno  
 **Created:** 2026-09-08  

package/src/docs/versioned/next/implementationPlans/app-mcp-server.md

@@ -1,6 +1,7 @@
 # Implementation Plan: App MCP server
 
 **Status:** Draft  
+**Roadmap:** Area=`mcp`, Target=`Future`, Impact=`Feature`  
 **Created:** 2026-08-24  
 **Owner:** unassigned  
 **Depends on:** [model-router-mcp.md](model-router-mcp.md) (shipped), [mcp-boost-parity.md](mcp-boost-parity.md) (dev-time MCP — sibling, not a blocker)  

package/src/docs/versioned/next/implementationPlans/better-auth-strict-oauth-provider.md

@@ -1,6 +1,7 @@
 # Implementation plan: Better Auth sync omits unset `oauthProvider`
 
-**Status:** In progress  
+**Status:** Complete — fix on master (`syncBetterAuthUser` omits unset `oauthProvider`)  
+**Roadmap:** Area=`auth`, Target=`Released`, Impact=`Fix`  
 **Issue:** https://github.com/TerrenoLabs/terreno/issues/1218  
 **Branch:** `cursor/better-auth-strict-oauth-provider-3b37`  
 **Created:** 2026-08-30  

package/src/docs/versioned/next/implementationPlans/can-as-permission-seam.md

@@ -1,6 +1,6 @@
 # `can()` as the permission seam
 
-**Status:** Approved — 2026-08-24  
+**Status:** Complete  
 **Branch:** `cursor/architecture-ips-a7ec`  
 **Owner:** —  
 **Created:** 2026-08-24  

package/src/docs/versioned/next/implementationPlans/collection-registry.md

@@ -1,6 +1,6 @@
 # One collection registry
 
-**Status:** Approved — 2026-08-24  
+**Status:** Complete  
 **Branch:** `cursor/architecture-ips-a7ec`  
 **Owner:** —  
 **Created:** 2026-08-24  

package/src/docs/versioned/next/implementationPlans/comms-adapter-expo-push.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Comms adapter — Expo push notifications
 
-**Status:** In progress
+**Status:** Complete — shipped in #1204
 **Roadmap issue:** https://github.com/TerrenoLabs/terreno/issues/1019
 **Priority:** High
 **Effort:** Small batch

package/src/docs/versioned/next/implementationPlans/comms-adapter-twilio-sms.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Comms adapter — Twilio SMS
 
-**Status:** Approved
+**Status:** In progress — Phase 1 send path shipped; Phase 2 (status callbacks, STOP/START opt-out) open
 **Roadmap issue:** https://github.com/TerrenoLabs/terreno/issues/1020
 **Priority:** Medium
 **Effort:** Small batch

package/src/docs/versioned/next/implementationPlans/comms-admin-dashboard.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Comms admin dashboard (errors, retries, log digging)
 
-**Status:** Approved
+**Status:** Complete
 **Roadmap issue:** https://github.com/TerrenoLabs/terreno/issues/1091
 **Priority:** High
 **Effort:** Medium batch

package/src/docs/versioned/next/implementationPlans/compile-pipeline-dedup.md

@@ -1,6 +1,7 @@
 # Implementation Plan: Compile pipeline dedup (remove redundant recompiles)
 
-**Status:** Approved (2026-09-22)
+**Status:** Complete — shipped in #1360
+**Roadmap:** Area=`dx`, Target=`Released`, Impact=`Improvement`  
 **Scan goal:** reduce-cold-compile-time ([charter](../scans/reduce-cold-compile-time/charter.md)) — cold `bun run compile` 305s → 214s
 **Slice:** pipeline-ordering-dedup (round 1, top slice)
 **Findings:** redundant-explicit-prefix (high, S), compile-workspace-deps-overlap (high, M)

package/src/docs/versioned/next/implementationPlans/datatable-server-side-filtering.md

@@ -1,6 +1,6 @@
 # Implementation Plan: DataTable server-side filtering and search
 
-**Status:** Approved  
+**Status:** Complete — shipped in #1303  
 **Branch:** `cursor/datatable-server-side-filtering-191d`  
 **Owner:** —  
 **Created:** 2026-09-10  

package/src/docs/versioned/next/implementationPlans/describe-model-schema.md

@@ -1,6 +1,6 @@
 # `describeModel()` schema metadata
 
-**Status:** Approved — 2026-08-24  
+**Status:** Complete — shipped in #1154  
 **Branch:** `cursor/architecture-ips-a7ec`  
 **Owner:** —  
 **Created:** 2026-08-24  

package/src/docs/versioned/next/implementationPlans/docs-reference-coverage.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Reference Documentation Coverage
 
-**Status:** In progress — remaining README, sanitization, and docs-audit work
+**Status:** Complete
 **Roadmap issue:** https://github.com/TerrenoLabs/terreno/issues/1009
 **Priority:** High
 **Effort:** Big batch

package/src/docs/versioned/next/implementationPlans/docs-site-and-versioning.md

@@ -1,7 +1,7 @@
 # Implementation Plan: Documentation Site, Versioned Docs, and Docs-Maintenance Skills
 
 **Roadmap issue:** https://github.com/TerrenoLabs/terreno/issues/1086  
-**Status:** Approved
+**Status:** Complete — shipped in #754
 
 *When an engineer is assigned to a project but before you begin coding, you should fill in the implementation plan and get feedback from the engineering team. Once you have finished or you make any changes, tag Josh with the @ symbol so he can review. Also tag anyone else that needs to be notified, has conflicting work, etc.*
 

package/src/docs/versioned/next/implementationPlans/examples-demo-coverage.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Examples, Demo, and Test Coverage
 
-**Status:** Approved — key decisions recorded (2026-07-29)
+**Status:** Complete — shipped in #1299
 **Roadmap issue:** https://github.com/TerrenoLabs/terreno/issues/1016
 **Priority:** Medium
 **Effort:** Big batch

package/src/docs/versioned/next/implementationPlans/framework-audit-log.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Framework-level audit log
 
-**Status:** Approved  
+**Status:** Complete — shipped in #1301  
 **Branch:** `cursor/framework-audit-log-grow-0d6c`  
 **Owner:** —  
 **Created:** 2026-09-10  

package/src/docs/versioned/next/implementationPlans/gpt-chat-mascot.md

@@ -1,6 +1,7 @@
 # GPTChat optional mascot
 
 **Status:** Complete  
+**Roadmap:** Area=`ui`, Target=`Released`, Impact=`Feature`  
 **Branch:** `cursor/gpt-chat-mascot-d39f`  
 **Owner:** cloud agent  
 **Created:** 2026-09-15

package/src/docs/versioned/next/implementationPlans/inbound-webhooks.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Inbound webhook framework
 
-**Status:** Approved  
+**Status:** Complete — shipped in #1251  
 **Branch:** `cursor/inbound-webhooks-4945`  
 **Owner:** —  
 **Created:** 2026-09-01  

package/src/docs/versioned/next/implementationPlans/knip-cleanup.md

@@ -1,6 +1,7 @@
 # Implementation Plan: Remove the Knip baseline
 
 **Status:** Complete  
+**Roadmap:** Area=`dx`, Target=`Released`, Impact=`Improvement`  
 **Created:** 2026-09-09  
 **Owner:** unassigned  
 **Primary packages:** repo-wide (`knip.jsonc`, `scripts/static-analysis/`, every workspace Knip currently fingerprints)  

package/src/docs/versioned/next/implementationPlans/mcp-doc-sync-off-compile-path.md

@@ -1,6 +1,7 @@
 # Implementation Plan: Move mcp-server doc-sync off the compile path
 
-**Status:** Approved (2026-09-22)
+**Status:** Complete
+**Roadmap:** Area=`dx`, Target=`Released`, Impact=`Improvement`  
 **Scan goal:** reduce-cold-compile-time ([charter](../scans/reduce-cold-compile-time/charter.md)) — cold `bun run compile` 305s → 214s
 **Slice:** mcp-doc-sync-off-compile-path (round 1) — **must land before** `compile-pipeline-dedup`
 **Findings:** mcp-doc-sync-on-compile-path (medium, S)

package/src/docs/versioned/next/implementationPlans/mcp-service-tokens.md

@@ -1,6 +1,7 @@
 # Implementation Plan: MCP service tokens
 
-**Status:** Approved  
+**Status:** Complete — shipped in #1263  
+**Roadmap:** Area=`mcp`, Target=`Released`, Impact=`Feature`  
 **Branch:** TBD  
 **Owner:** unassigned  
 **Created:** 2026-09-03  

package/src/docs/versioned/next/implementationPlans/migrate-admin-to-syncdb.md

@@ -1,6 +1,7 @@
 # Implementation Plan: Migrate built-in admin to syncdb
 
-**Status:** Approved
+**Status:** Complete
+**Roadmap:** Area=`admin`, Target=`Released`, Impact=`Improvement`  
 **Branch:** `cursor/migrate-admin-to-syncdb-de61`
 **Owner:** Josh Gachnang
 **Created:** 2026-09-01

package/src/docs/versioned/next/implementationPlans/migrate-cicd-to-circleci.md

@@ -214,7 +214,7 @@ are ported.
 | `codeql-analysis` | CircleCI job uploading SARIF to GitHub Code Scanning API **or** third-party SAST orb; preserve Security tab if possible |
 | `dependabot-auto-merge` | Keep Dependabot PRs on GitHub; auto-merge via CircleCI on Dependabot branches **or** Renovate on CircleCI |
 | `triage.yml` | CircleCI pipeline trigger on `issues` via GitHub Apps webhook → CircleCI API, or GitHub Action **stub** only if product accepts residual GHA (conflicts with CC1 — prefer webhook) |
-| `roadmap-generate` | Scheduled CircleCI job with `ROADMAP_PROJECT_TOKEN` |
+| `roadmap-generate`, `roadmap-sync`, `roadmap-reconcile` | **Stay on GitHub Actions** (decided 2026-09-26). They only talk to GitHub (issues, Projects v2, `master` commits via `ROADMAP_PROJECT_TOKEN`), so moving them buys nothing. Exception to CC1. |
 | `architectural-pr-review` | Implemented: CircleCI job + `CURSOR_API_KEY` / `GITHUB_TOKEN`. Checks out `origin/master`, skips forks. GHA workflow is `push.branches-ignore: ["**"]`. |
 | Cursor Approval / Security / Bugbot | **Cannot move.** Cursor GitHub App automations, not repo workflows. |
 | `agentics-maintenance` + `*.lock.yml` gh-aw | Re-home to CircleCI scheduled pipelines calling the same scripts **or** retire features; do not leave gh-aw as the only runner if CC1 holds |

package/src/docs/versioned/next/implementationPlans/mongodb-migrations-tooling.md

@@ -1,6 +1,6 @@
 # MongoDB migrations tooling
 
-**Status:** Approved — decisions 2026-09-10  
+**Status:** Complete  
 **Branch:** `cursor/mongodb-migrations-tooling-04f9`  
 **Owner:** —  
 **Created:** 2026-09-10  

package/src/docs/versioned/next/implementationPlans/notification-center.md

@@ -1,6 +1,6 @@
 # Implementation Plan: In-app notification center
 
-**Status:** Approved  
+**Status:** Complete — shipped in #1307  
 **Branch:** `cursor/notification-center-ip-b11f`  
 **Owner:** —  
 **Created:** 2026-09-10  

package/src/docs/versioned/next/implementationPlans/org-management-ui.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Organizations as a first-class primitive (admin UI + RBAC)
 
-**Status:** Approved
+**Status:** Complete
 **Roadmap issue:** https://github.com/TerrenoLabs/terreno/issues/1024 (absorbs `orgs-and-teams`; retitle on approve)
 **Priority:** High
 **Effort:** Big batch

package/src/docs/versioned/next/implementationPlans/password-reset-and-email-verification.md

@@ -1,6 +1,6 @@
 # Implementation Plan: Password reset and email verification
 
-**Status:** Approved
+**Status:** Complete
 **Roadmap issue:** https://github.com/TerrenoLabs/terreno/issues/1023
 **Priority:** High
 **Effort:** Big batch

package/src/docs/versioned/next/implementationPlans/rate-limiting.md

@@ -1,6 +1,6 @@
 # Implementation Plan: API rate limiting
 
-**Status:** Approved  
+**Status:** Complete  
 **Branch:** `cursor/api-rate-limiting-d03a`  
 **Owner:** —  
 **Created:** 2026-08-30  

package/src/docs/versioned/next/implementationPlans/remove-legacy-realtime.md

@@ -1,6 +1,7 @@
 # Implementation Plan: Remove legacy RTK realtime in Terreno 58
 
 **Status:** Approved  
+**Roadmap:** Area=`api`, Target=`58`, Impact=`Breaking`  
 **Branch:** `cursor/deprecate-realtime-for-58`  
 **Owner:** unassigned  
 **Created:** 2026-08-25