freshtechbro · freshtechbro · Mar 14, 2026 · Mar 14, 2026 · Mar 14, 2026 · Mar 14, 2026
diff --git a/.github/workflows/release-public.yml b/.github/workflows/release-public.yml
@@ -132,8 +132,8 @@ jobs:
       - name: Run strict live release gates
         if: steps.meta.outputs.run_live_gates == 'true'
         run: |
-          mkdir -p artifacts/release/v0.0.16
-          node scripts/provider-live-matrix.mjs --release-gate --use-global-env --out artifacts/release/v0.0.16/provider-live-matrix.json
+          mkdir -p "artifacts/release/v${{ steps.meta.outputs.release_version }}"
+          node scripts/provider-live-matrix.mjs --release-gate --use-global-env --out "artifacts/release/v${{ steps.meta.outputs.release_version }}/provider-live-matrix.json"
           node scripts/live-regression-matrix.mjs --release-gate
 
       - name: Pack extension artifact

diff --git a/.gitignore b/.gitignore
@@ -51,6 +51,7 @@ frontend/.validation/
 
 # Continuity ledger (local-only)
 CONTINUITY*.md
+CONTINUITY.md
 sub_continuity.md
 
 # Auto Claude data directory

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.0.17] - 2026-03-13
+
+### Added
+- Design canvas runtime delivery across core, CLI, tool, relay, and extension surfaces, including the extension-hosted `canvas.html` editor, overlay coordination, preview feedback, and repo-backed code-sync flows.
+- Canvas governance/supporting asset pack updates for `opendevbrowser-best-practices`, including `/canvas` handshake, blocker, feedback-evaluation, and robustness templates.
+- Release-cycle documents for v0.0.17, including current evidence tracking and a restored cutover checklist for the public/private website handoff.
+
+### Changed
+- Updated repo-wide active release docs, onboarding examples, and distribution runbooks to target `0.0.17`.
+- Release artifact paths now follow the active release version in workflows/runtime scripts instead of staying pinned to `v0.0.16`.
+- Packaging docs now align GitHub release, npm tarball, extension packaging, and private-site sync guidance around the current release cycle.
+
+### Fixed
+- `npm run extension:sync` now syncs both `extension/manifest.json` and `extension/package.json`, matching the `version:check` contract.
+- Active documentation references no longer point at the removed cutover doc or stale `0.0.16` packaging examples.
+
 ## [0.0.16] - 2026-02-28
 
 ### Added
@@ -140,7 +156,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Core browser management
 - Basic snapshot pipeline
 
-[Unreleased]: https://github.com/freshtechbro/opendevbrowser/compare/v0.0.16...HEAD
+[Unreleased]: https://github.com/freshtechbro/opendevbrowser/compare/v0.0.17...HEAD
+[0.0.17]: https://github.com/freshtechbro/opendevbrowser/compare/v0.0.16...v0.0.17
 [0.0.16]: https://github.com/freshtechbro/opendevbrowser/compare/v0.0.15...v0.0.16
 [0.0.15]: https://github.com/freshtechbro/opendevbrowser/compare/ebb109e...eaced1e
 [0.0.14]: https://github.com/freshtechbro/opendevbrowser/compare/v0.0.13...ebb109e

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -267,7 +267,7 @@ When making changes, update relevant documentation:
 - **docs/CLI.md**: CLI commands and options
 - **docs/ARCHITECTURE.md**: System design changes
 - **docs/TROUBLESHOOTING.md**: Common issues and solutions
-- **docs/RELEASE_RUNBOOK.md** and **docs/RELEASE_0.0.16_EVIDENCE.md**: Release-gate or release process changes
+- **docs/RELEASE_RUNBOOK.md** and the current version-scoped release evidence doc (for this cycle **docs/RELEASE_0.0.17_EVIDENCE.md**): Release-gate or release process changes
 - **AGENTS.md**: Development conventions (nearest to changed code)
 
 ### Documentation Standards

diff --git a/README.md b/README.md
@@ -87,7 +87,7 @@ npm pack
 WORKDIR=$(mktemp -d /tmp/opendevbrowser-first-run-XXXXXX)
 cd "$WORKDIR"
 npm init -y
-npm install <public-repo-root>/opendevbrowser-0.0.16.tgz
+npm install <public-repo-root>/opendevbrowser-0.0.17.tgz
 npx --no-install opendevbrowser --help
 npx --no-install opendevbrowser help
 ```
@@ -237,7 +237,13 @@ Use `--output-format json|stream-json` for automation-friendly output.
 
 ## Recent Features
 
-### v0.0.16 (Latest)
+### v0.0.17 (Latest)
+
+- **Design canvas runtime is now shipped end-to-end** across core, CLI, tool, relay, and extension surfaces, including `canvas.html`, overlay control, preview feedback, and repo-backed code sync.
+- **Canvas surface governance and skill-pack coverage** now include current `/canvas` inventories, handshake/blocker templates, and feedback-evaluation artifacts.
+- **Release packaging/docs were refreshed for v0.0.17**, including current tarball examples, extension version sync, release evidence, and public/private cutover guidance.
+
+### v0.0.16
 
 - **Release-gate hardening** with dedicated audit/compliance scripts (`audit-zombie-files`, `docs-drift-check`, `chrome-store-compliance-check`) and grouped release-gate tests.
 - **Live matrix robustness upgrades** across `live-regression-matrix` and `provider-live-matrix` (strict `--release-gate`, extension/CDP recovery paths, deterministic strict-mode semantics).
@@ -805,19 +811,22 @@ Uniform versioning is required (source of truth: `package.json`):
 1. Bump `package.json` version.
 2. Run: `npm run extension:sync`
 3. Run: `npm run version:check`
-4. Run: `npm run build`
-5. Run: `npm run extension:build`
-6. Run release audits:
+4. Run: `npm run test:release-gate`
+5. Run: `npm run build`
+6. Run: `npm run extension:build`
+7. Run release audits:
    - `node scripts/audit-zombie-files.mjs`
    - `node scripts/docs-drift-check.mjs`
    - `node scripts/chrome-store-compliance-check.mjs`
-7. Run strict live release gates:
-   - `node scripts/provider-live-matrix.mjs --release-gate --out artifacts/release/v0.0.16/provider-live-matrix.json`
+   - `./skills/opendevbrowser-best-practices/scripts/validate-skill-assets.sh`
+8. Run strict live release gates:
+   - `node scripts/provider-live-matrix.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-live-matrix.json`
    - `node scripts/live-regression-matrix.mjs --release-gate`
-8. Run first-time global install dry run checklist from `docs/FIRST_RUN_ONBOARDING.md`.
-9. Run: `npm run extension:pack` (outputs `./opendevbrowser-extension.zip`)
-10. Tag `vX.Y.Z` and let `.github/workflows/release-public.yml` publish npm + GitHub release artifacts.
-11. Dispatch website content sync to private repo through `.github/workflows/dispatch-private-sync.yml`.
+9. Run first-time global install dry run checklist from `docs/FIRST_RUN_ONBOARDING.md`.
+10. Run: `npm run extension:pack` (outputs `./opendevbrowser-extension.zip`)
+11. Run: `npm pack`
+12. Tag `vX.Y.Z` and let `.github/workflows/release-public.yml` publish npm + GitHub release artifacts.
+13. Dispatch website content sync to private repo through `.github/workflows/dispatch-private-sync.yml`.
 
 Runbooks:
 - `docs/DISTRIBUTION_PLAN.md`

diff --git a/docs/AGENTS.md b/docs/AGENTS.md
@@ -28,10 +28,11 @@ When command/tool/channel surface changes:
 - relevant `AGENTS.md` files
 
 When canvas session/code-sync/projection behavior changes:
-- `docs/DESIGN_CANVAS_TECHNICAL_SPEC.md`
-- `docs/CANVAS_BIDIRECTIONAL_CODE_SYNC_TECHNICAL_SPEC.md`
 - `docs/CLI.md`
 - `docs/SURFACE_REFERENCE.md`
+- `docs/ARCHITECTURE.md`
+- `docs/EXTENSION.md`
+- `docs/TROUBLESHOOTING.md`
 - relevant `AGENTS.md` files under `src/`, `src/browser/`, `src/canvas/`, and `extension/`
 
 When extension behavior changes:
@@ -43,7 +44,7 @@ When extension behavior changes:
 When release-gate automation changes:
 - `docs/RELEASE_RUNBOOK.md`
 - `docs/DISTRIBUTION_PLAN.md`
-- `docs/RELEASE_0.0.16_EVIDENCE.md`
+- the current version-scoped release evidence doc (for this release: `docs/RELEASE_0.0.17_EVIDENCE.md`)
 - automation scripts:
   - `scripts/audit-zombie-files.mjs`
   - `scripts/docs-drift-check.mjs`

diff --git a/docs/ARCHITECTURE.md b/docs/ARCHITECTURE.md
@@ -2,7 +2,7 @@
 
 This document describes the architecture of OpenDevBrowser across plugin, CLI, and extension distributions, with a security-first focus.
 Status: active  
-Last updated: 2026-03-12
+Last updated: 2026-03-13
 
 ---
 
@@ -350,7 +350,7 @@ When hub mode is enabled, the hub daemon is the **sole relay owner** and enforce
 - **Parity gate** via `tests/parity-matrix.test.ts` (CLI/tool/runtime surface checks + mode coverage).
 - **Provider performance gate** via `tests/providers-performance-gate.test.ts` (deterministic fixture SLO checks).
 - **Strict live release gates** via `node scripts/provider-live-matrix.mjs --release-gate` and `node scripts/live-regression-matrix.mjs --release-gate`.
-- **Release checklist** in `docs/RELEASE_RUNBOOK.md` with evidence tracking in `docs/RELEASE_0.0.16_EVIDENCE.md`.
+- **Release checklist** in `docs/RELEASE_RUNBOOK.md` with evidence tracking in the current version-scoped release ledger (for this cycle: `docs/RELEASE_0.0.17_EVIDENCE.md`).
 - **Benchmark fixture manifest** in `docs/benchmarks/provider-fixtures.md`.
 - **First-run onboarding checklist** in `docs/FIRST_RUN_ONBOARDING.md`.
 

diff --git a/docs/CLI.md b/docs/CLI.md
@@ -2,7 +2,7 @@
 
 Command-line interface for installing and managing the OpenDevBrowser plugin, plus automation commands for agents.
 Status: active  
-Last updated: 2026-03-12
+Last updated: 2026-03-13
 
 OpenDevBrowser exposes 49 `opendevbrowser_*` tools; see `README.md` and `docs/SURFACE_REFERENCE.md` for the full inventories.
 Agent runs should start with `opendevbrowser_prompting_guide` (or `opendevbrowser-best-practices` quickstart via `opendevbrowser_skill_load`); use continuity guidance only for long-running handoff/compaction.
@@ -46,7 +46,7 @@ npm pack
 WORKDIR=$(mktemp -d /tmp/opendevbrowser-first-run-XXXXXX)
 cd "$WORKDIR"
 npm init -y
-npm install <public-repo-root>/opendevbrowser-0.0.16.tgz
+npm install <public-repo-root>/opendevbrowser-0.0.17.tgz
 npx --no-install opendevbrowser --help
 npx --no-install opendevbrowser help
 ```
@@ -1331,7 +1331,7 @@ Strict release gate mode (forces auth-gated + high-friction + social-post scenar
 
 ```bash
 npm run build
-node scripts/provider-live-matrix.mjs --release-gate --out artifacts/release/v0.0.16/provider-live-matrix.json
+node scripts/provider-live-matrix.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-live-matrix.json
 ```
 
 CI-safe smoke mode (reduced cases, deterministic gating checks, no long workflow probes by default):
@@ -1367,7 +1367,7 @@ npm run test -- tests/providers-performance-gate.test.ts
 ./skills/opendevbrowser-best-practices/scripts/validate-skill-assets.sh
 ```
 
-Release gate source of truth: `docs/RELEASE_RUNBOOK.md` and `docs/RELEASE_0.0.16_EVIDENCE.md`.
+Release gate source of truth: `docs/RELEASE_RUNBOOK.md` and `docs/RELEASE_0.0.17_EVIDENCE.md`.
 Benchmark fixture manifest: `docs/benchmarks/provider-fixtures.md`.
 
 ### Latest validation (2026-03-01)

diff --git a/docs/CUTOVER_CHECKLIST.md b/docs/CUTOVER_CHECKLIST.md
@@ -0,0 +1,53 @@
+# Public/Private Cutover Checklist
+
+Status: active  
+Last updated: 2026-03-13
+
+Use this checklist when a public release changes mirrored docs, skills, assets, or changelog content that must reach the private website repository.
+
+## Preconditions
+
+- [ ] Public release docs and release artifacts are finalized.
+- [ ] `docs/RELEASE_RUNBOOK.md` and the current version-scoped evidence doc are updated for the target release.
+- [ ] `PRIVATE_REPO_DISPATCH_TOKEN` and `PRIVATE_WEBSITE_REPO` are configured in the public repo if automatic sync is expected.
+- [ ] Private repo access is available for validation and promotion checks.
+
+## Public Repo Validation
+
+- [ ] `node scripts/docs-drift-check.mjs`
+- [ ] `./skills/opendevbrowser-best-practices/scripts/validate-skill-assets.sh`
+- [ ] `npm run version:check`
+- [ ] `npm run lint`
+- [ ] `npm run typecheck`
+- [ ] `npm run build`
+- [ ] `npm run extension:build`
+- [ ] `npm run test`
+- [ ] `npm run extension:pack`
+- [ ] `npm pack`
+
+## Sync Trigger
+
+- [ ] Merge or push the public docs/source update that should mirror into the private repo.
+- [ ] Confirm `.github/workflows/dispatch-private-sync.yml` fired, or manually dispatch it with the intended `public_ref` and `public_sha`.
+- [ ] Record the public SHA sent to the private repo.
+
+## Private Repo Validation
+
+- [ ] `npm run sync:assets --prefix frontend`
+- [ ] `npm run generate:docs --prefix frontend`
+- [ ] `npm run lint --prefix frontend`
+- [ ] `npm run typecheck --prefix frontend`
+- [ ] `npm run build --prefix frontend`
+- [ ] Confirm generated docs include the new changelog/docs/skill content.
+
+## Production Promotion
+
+- [ ] Promote validated private `main` state to `website-production`.
+- [ ] Confirm hosting points production at `website-production`.
+- [ ] Verify the production docs routes load and show the expected release content.
+
+## Rollback
+
+- [ ] If sync output is wrong, stop promotion and retain the prior `website-production` commit.
+- [ ] Re-dispatch sync from the last known-good public SHA or repromote the last known-good private commit.
+- [ ] Record the rollback SHA pair in the release evidence doc.
diff --git a/docs/DEPENDENCIES.md b/docs/DEPENDENCIES.md
@@ -1,7 +1,7 @@
 # OpenDevBrowser Dependency Inventory
 
 Status: active  
-Last updated: 2026-03-12
+Last updated: 2026-03-13
 
 This document tracks runtime and build dependencies across the repository.
 
@@ -45,7 +45,7 @@ This public repository no longer tracks website package manifests or lockfiles.
 ## Extension package (`/extension`)
 
 The extension is built with the root toolchain (`npm run extension:build`) and does not maintain an independent runtime dependency graph.
-Version synchronization is handled by `npm run extension:sync`.
+Version synchronization is handled by `npm run extension:sync`, which keeps `extension/manifest.json` and `extension/package.json` aligned with the root package version.
 
 ## Dependency update workflow
 

diff --git a/docs/DISTRIBUTION_PLAN.md b/docs/DISTRIBUTION_PLAN.md
@@ -1,6 +1,6 @@
 # OpenDevBrowser Distribution Plan
 
-Last updated: 2026-02-25
+Last updated: 2026-03-13
 
 This document is the active distribution plan for the split model:
 - public repo for runtime + release artifacts
@@ -34,7 +34,7 @@ Public repo no longer carries the `frontend/` application directory.
 
 1. Prepare release branch:
 - bump `package.json` version
-- sync extension version (`npm run extension:sync`)
+- sync extension version metadata (`npm run extension:sync`)
 - update release notes/docs as needed
 
 2. Validate locally:
@@ -45,13 +45,16 @@ npm run test:release-gate
 node scripts/audit-zombie-files.mjs
 node scripts/docs-drift-check.mjs
 node scripts/chrome-store-compliance-check.mjs
+./skills/opendevbrowser-best-practices/scripts/validate-skill-assets.sh
 npm run lint
 npm run typecheck
 npm run test
 npm run build
 npm run extension:build
-node scripts/provider-live-matrix.mjs --release-gate --out artifacts/release/v0.0.16/provider-live-matrix.json
+node scripts/provider-live-matrix.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-live-matrix.json
 node scripts/live-regression-matrix.mjs --release-gate
+npm run extension:pack
+npm pack
 ```
 
 If one grouped release-gate unit fails, rerun only that unit:

diff --git a/docs/EXTENSION_RELEASE_RUNBOOK.md b/docs/EXTENSION_RELEASE_RUNBOOK.md
@@ -1,6 +1,6 @@
 # Extension Release Runbook
 
-Last updated: 2026-02-25
+Last updated: 2026-03-13
 
 Operational runbook for publishing extension artifacts from the public repo.
 
@@ -33,8 +33,7 @@ Configure in public GitHub repo secrets:
 ## Preflight checklist
 
 - [ ] `package.json` version equals intended release version.
-- [ ] `extension/manifest.json` version is synced.
-- [ ] `extension/package.json` version is synced.
+- [ ] `npm run extension:sync` keeps `extension/manifest.json` and `extension/package.json` aligned with the root package version.
 - [ ] `npm run extension:build` passes.
 - [ ] `node scripts/chrome-store-compliance-check.mjs` passes.
 - [ ] `npm run extension:pack` creates `opendevbrowser-extension.zip`.

diff --git a/docs/FIRST_RUN_ONBOARDING.md b/docs/FIRST_RUN_ONBOARDING.md
@@ -1,7 +1,7 @@
 # First-Run Onboarding (Pre-Release)
 
 Status: active  
-Last updated: 2026-03-12
+Last updated: 2026-03-13
 
 This guide is the shipping checklist for validating OpenDevBrowser as a new user **before npm distribution is live**.
 
@@ -25,7 +25,7 @@ This guide is the shipping checklist for validating OpenDevBrowser as a new user
 ```bash
 cd <public-repo-root>
 npm pack
-# -> opendevbrowser-0.0.16.tgz
+# -> opendevbrowser-0.0.17.tgz
 ```
 
 ## 2) Simulate a brand-new user workspace
@@ -34,7 +34,7 @@ npm pack
 WORKDIR=$(mktemp -d /tmp/opendevbrowser-first-run-XXXXXX)
 cd "$WORKDIR"
 npm init -y
-npm install <public-repo-root>/opendevbrowser-0.0.16.tgz
+npm install <public-repo-root>/opendevbrowser-0.0.17.tgz
 npx --no-install opendevbrowser version --output-format json
 ```
 

diff --git a/docs/README.md b/docs/README.md
@@ -29,7 +29,8 @@ Canonical documentation map for OpenDevBrowser runtime, extension, and distribut
 
 ## Version-scoped evidence
 
-- `<public-repo-root>/docs/RELEASE_0.0.16_EVIDENCE.md` - v0.0.16-specific release evidence ledger; treat as version-scoped, not evergreen operational guidance
+- `<public-repo-root>/docs/RELEASE_0.0.17_EVIDENCE.md` - current release evidence ledger for the active ship cycle
+- `<public-repo-root>/docs/RELEASE_0.0.16_EVIDENCE.md` - historical v0.0.16 release evidence; keep as archival context, not evergreen guidance
 
 ## Planning/spec docs (historical or in-flight)