stackkeel v0.1.0

v0.1 — Initial release

The first complete cut of the kit: a cross-AI monorepo starter with four apps
(portal, admin, Capacitor shell, Expo mobile), seven shared packages, and the
personalization/sync meta-layer that makes it a template rather than a demo.

Platform

• Credentials + Google + native Google ID-token + generic OIDC sign-in;
  TOTP 2FA (AES-256-GCM at rest, recovery codes); account lockout; audit log
  with CI-enforced coverage; roles/permissions with an anti-lockout floor;
  feature flags; queued email with retry/backoff and delivery webhooks;
  in-app feedback with promote-to-ticket; helpdesk (tickets, threads, action
  timeline, admin triage); what's-new announcements; OKLCH brand engine with
  WCAG-contrast-guaranteed light/dark ramps and an admin branding editor;
  device auth for native clients (pairing codes, hashed opaque tokens,
  revocation, release-version gating); scheduled maintenance crons and
  health endpoints.

Kit meta-layer

• kit.json manifest + kit-check (canonical / personalized / declined /
  unpersonalized detection across template-copy, fork, and clone).
• personalize skill: identity interview, app/feature selection,
  registry-driven module stripping with verify-or-rollback, seed-hex
  branding, strategic-docs interviews, manual-TODO report.
• upstream-sync / downstream-sync skills + monthly sync-reminder
  workflow; contribution kits under docs/starter-contributions/.
• AGENTS.md-canonical instructions; skills in the Agent Skills open format;
  enforcement in git hooks + CI (commit grammar, work-log gate, kit-verify,
  tripwire suite).

Verified

Full workspace green (typecheck/lint/build/test, ~1,180 unit tests + 13
Playwright smoke tests against a live Neon Postgres); 9 migrations applied
to real Postgres 18; both web apps booted live with correct auth gating;
personalization rehearsed end-to-end in a scratch fork (strip shell + mobile

• device-auth, rebrand, manifest flip) with a green build as the outcome.