aienvmp 0.1.60 → 0.1.61

package/BUGFIXES.md

@@ -4,6 +4,12 @@ Short record of bugs, fixes, and follow-up checks.
 
 ## 2026-07-08
 
+### GitHub Action hid strict-plan guidance inside artifacts
+
+- Issue: the Action produced `doctor.json` and `summary.md`, but the recommended local/CI strict commands were not visible as a dedicated Step Summary block.
+- Fix: the Action now appends an `aienvmp strict plan` section sourced from advisory doctor metadata, using a temporary payload when `write-doctor-json` is disabled.
+- Verification: Action regression tests check the strict-plan block, `strictPlan` source, CI command, and temporary-file fallback.
+
 ### CLI version was hardcoded
 
 - Issue: `npm run smoke` printed `0.1.0` after the package version changed.

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.1.61
+
+- Added an `aienvmp strict plan` block to the GitHub Action Step Summary.
+- Reused advisory `doctor --json` data so CI can show local and strict commands without forcing failure.
+- Preserved `write-doctor-json: false` by using a temporary advisory doctor payload when only the summary needs strict guidance.
+- Documented the Action Step Summary strict-plan surface in the README.
+- Added regression coverage for the Action strict-plan summary contract.
+
 ## 0.1.60
 
 - Added `enforcement.strictPlan` to help AI agents and CI choose the narrowest explicit strict scope.

package/README.md

@@ -98,7 +98,7 @@ aienvmp doctor --strict security|policy|coordination|all
 ## CI
 
 The GitHub Action writes status, summary, schema, doctor, plan, SBOM, and dashboard artifacts. `strict: "off"` reports warnings without failing the job.
-Use `doctor --json` or `context --json` to read `strictPlan` and choose the narrowest CI strict scope.
+The Step Summary includes an `aienvmp strict plan` block so humans and AI agents can pick the narrowest CI strict scope without parsing the full artifacts.
 
 ```yaml
 - uses: soovwv/aienvmp@main

package/action.yml

@@ -91,6 +91,38 @@ runs:
           fi
         fi
 
+    - name: Append strict plan summary
+      shell: bash
+      run: |
+        if [ "${{ inputs.write-summary }}" = "true" ] && [ -n "$GITHUB_STEP_SUMMARY" ]; then
+          mkdir -p "${{ inputs.directory }}/.aienvmp"
+          plan_source="${{ inputs.directory }}/.aienvmp/doctor.json"
+          if [ ! -f "$plan_source" ]; then
+            plan_source="$(mktemp)"
+            node "$GITHUB_ACTION_PATH/bin/aienvmp.js" doctor --dir "${{ inputs.directory }}" --json > "$plan_source"
+          fi
+          node - "$plan_source" "$GITHUB_STEP_SUMMARY" <<'NODE'
+        const fs = require("node:fs");
+
+        const [doctorPath, summaryPath] = process.argv.slice(2);
+        const doctor = JSON.parse(fs.readFileSync(doctorPath, "utf8"));
+        const plan = doctor.enforcement?.strictPlan || {};
+        const local = plan.localDefault || "aienvmp doctor --json";
+        const ci = plan.ciCommand || "aienvmp doctor --strict all --json";
+        const rule = plan.rule || "Strict failure is explicit only.";
+
+        fs.appendFileSync(summaryPath, [
+          "",
+          "## aienvmp strict plan",
+          "",
+          `- local: \`${local}\``,
+          `- ci: \`${ci}\``,
+          `- rule: ${rule}`,
+          ""
+        ].join("\n"));
+        NODE
+        fi
+
     - name: Doctor
       shell: bash
       run: |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aienvmp",
-  "version": "0.1.60",
+  "version": "0.1.61",
   "description": "AI-first environment maps and lightweight runtime SBOMs for shared development machines.",
   "type": "module",
   "bin": {