docs(design): record the 2026-10-24 Claude Design sync

.design-sync/NOTES.md

@@ -19,3 +19,8 @@
   `board-knowledge.html`.
 - 2026-10-23: pushed `insights-delivery.html` (#272) and `board-knowledge-practices.html` (#273). The MVP dock (#271:
   Home · Board · Insights · Settings) is app data, not a component — no card shows the dock's items.
+- 2026-10-24: pushed `settings-autopilot.html` (new, #279) and replaced `agent-profiles.html` (#278 — Board agents /
+  Workflow pipeline tables, "Computer's default"), `settings-prompts.html` (#278 — Board agents first) and `board-autopilot.html`
+  (#279 — live limits, the real merge rule, the plan-limit wait card). The older `agent-profiles.html` inlined its own
+  token copy (217 KB); it now uses the shared frame (`../../styles.css`). Keep a full local mirror of the project's
+  `tokens/*.css` (fetch with `get_file`) — a stale mirror hid that dark `--warn-soft` exists and rendered the wait card unreadable.

CLAUDE.md

@@ -136,7 +136,7 @@ real-Postgres test.
 3. **`/design-review`** the pulled result (phantom-CSS + vocabulary check) — it must still satisfy `design-system.md`.
 4. **Verify E2E** in the standalone Web (light + dark), **commit**, and **push any new/changed component, screen, token, or chrome UP to the Claude Design project** (DesignSync `finalize_plan` → `write_files`) — a UI change that only lands in the repo is **incomplete**. Pushed `.html`/`.jsx` carry a first-line `<!-- @dsCard group="…" -->` marker so the Design System pane indexes them.
 
-Hand-editing the repo directly (Claude Design auth unavailable in a non-interactive session — `/design-login` needs an interactive terminal) is a **fallback**, not an exemption: you STILL push the same change up to Claude Design the moment auth is available (DesignSync `write_files`, or have the user run `/design-login` / use Claude Design's "Send to Claude Code Web"). The project is the source of truth, the repo is the pulled artifact; the two must never drift. Reference of what's already pushed: `tokens/*` + `components/{core,forms,feedback,surfaces,navigation,shell}/*` + `ui_kits/agentos/{home,activities,activities-search,settings,settings-routing,agent-profiles,settings-api-tokens,settings-audit-log,settings-data,settings-platform,settings-prompts,system-about,board,board-tasks,board-try-the-app,board-autopilot,board-knowledge,board-knowledge-practices,insights-delivery,workflow*}.html` (last sync 2026-10-23) + `guidelines/cards/shell-widgets.html`. Keep branding **AgentOS.NET**, one accent, responsive (≤1024 = full-screen sheets).
+Hand-editing the repo directly (Claude Design auth unavailable in a non-interactive session — `/design-login` needs an interactive terminal) is a **fallback**, not an exemption: you STILL push the same change up to Claude Design the moment auth is available (DesignSync `write_files`, or have the user run `/design-login` / use Claude Design's "Send to Claude Code Web"). The project is the source of truth, the repo is the pulled artifact; the two must never drift. Reference of what's already pushed: `tokens/*` + `components/{core,forms,feedback,surfaces,navigation,shell}/*` + `ui_kits/agentos/{home,activities,activities-search,settings,settings-routing,agent-profiles,settings-api-tokens,settings-audit-log,settings-data,settings-platform,settings-prompts,settings-autopilot,system-about,board,board-tasks,board-try-the-app,board-autopilot,board-knowledge,board-knowledge-practices,insights-delivery,workflow*}.html` (last sync 2026-10-24) + `guidelines/cards/shell-widgets.html`. Keep branding **AgentOS.NET**, one accent, responsive (≤1024 = full-screen sheets).
 
 **Commits**: Conventional Commits in English (e.g. `feat(tools):`, `fix(llm):`, `chore(deps):`). Co-author Claude when pair-coded. CI fails if the Release build/test fails.