briefops 1.1.0 → 2.1.1

package/CHANGELOG.md

@@ -4,6 +4,28 @@
 
 - No changes yet.
 
+## 2.1.1 - 2026-06-28
+
+- Refresh the development dependency baseline for Node.js type definitions and Vitest lockfile resolution.
+- Prepare the npm package version for the next patch publication after the GitHub-only `v2.1.0` tag.
+- Clarify npm install, release readiness, and 2.1.x public documentation.
+
+## 2.1.0 - 2026-06-22
+
+- Add `briefops harness route` and `briefops harness matrix` as a Codex-first Master Harness routing MVP.
+- Add a Codex `briefops-route-task` skill for workflow-depth classification before implementation.
+- Add `briefops obs continuity` for compression, continuity, queue, and memory hygiene observability without dumping private memory.
+- Add `briefops doctor --strict --json` as a local release-readiness gate across stability, security, privacy, and memory hygiene.
+- Add optional evidence anchors to memory items and memory proposals.
+- Harden lock stale detection so fresh in-progress lock files are not removed during concurrent writes.
+- Update release readiness docs and patch the esbuild lockfile to clear npm audit findings.
+
+## 2.0.0 - 2026-06-14
+
+- Make `briefops finish` apply durable directory-local memory by default while retaining proposal files as an audit trail.
+- Add `--memory-review` for explicit pending memory queues.
+- Update Codex/plugin/router guidance to treat `.briefops/` memory as local repo state and reserve confirmation for external sharing or skill patches.
+
 ## 1.1.0 - 2026-06-10
 
 - Add `briefops doctor --stability` for bounded read-only workspace integrity checks.

package/README.md

@@ -6,13 +6,11 @@
 
 BriefOps is a local-first CLI for AI coding agents with persistent memory, handoffs, and token-aware context.
 
-The goal is not just to generate a good brief. The goal is to let a user finish an AI coding task, carry recent work into the next handoff immediately, promote only reviewed items into durable memory, and start a fresh Codex or Claude Code thread where the same worker can continue with prior decisions, lessons, risks, and judgment profile.
+The goal is not just to generate a good brief. The goal is to let a user finish an AI coding task, carry recent work into the next handoff immediately, promote useful items into directory-local durable memory, and start a fresh Codex or Claude Code thread where the same worker can continue with prior decisions, lessons, risks, and judgment profile.
 
 ```bash
 briefops prime --task "Start the next task." --format codex --max-tokens 800
 briefops finish ...
-briefops memory proposal-show latest
-briefops memory proposal-apply latest
 briefops continue --worker <worker> --task "<next task>" --pack
 ```
 
@@ -23,7 +21,7 @@ It should not maximize context. It preserves continuity by selecting the smalles
 
 - a local CLI
 - a file-based skill, project, memory, worker, and work-log store
-- a deterministic memory proposal and approval workflow
+- a deterministic directory-local memory promotion workflow
 - a token-aware brief, handoff, Codex mission, and resume generator
 - a compact first-context primer for fresh Codex threads
 - a persistent worker continuity layer for fresh AI coding threads
@@ -48,12 +46,14 @@ BriefOps can generate Codex skill-plugin assets, but the plugin calls the local
 
 ## Release Status
 
-BriefOps 1.0 is intended for developers who want a local-first memory and context ledger for AI coding agents. The public CLI and file-format compatibility policy is documented in `docs/compatibility.md` and `docs/file-format.md`. The core safety principles are stable:
+BriefOps 2.1.1 is the current npm-ready release for developers who want a local-first memory and context ledger for AI coding agents. It packages the 2.1 Master Harness routing, continuity observability, strict release-readiness checks, evidence anchors, and workspace-lock hardening that were prepared after 2.0.
+
+The public CLI behavior and workspace file-format policy are documented in `docs/compatibility.md` and `docs/file-format.md`. The core safety principles are stable:
 
 - local files first
 - no hosted service required
 - no required MCP server
-- human-approved memory
+- directory-local memory by default
 - shared-only export controls
 - deterministic CLI behavior
 
@@ -66,11 +66,18 @@ Before publishing a repository or sharing generated context, review:
 - `SECURITY.md` for vulnerability reporting and local data handling.
 - `CONTRIBUTING.md` for development checks and safety rules.
 - `CHANGELOG.md` for release notes.
-- `docs/file-format.md` and `docs/compatibility.md` for the 1.0 local data contract.
+- `docs/file-format.md` and `docs/compatibility.md` for the local data contract.
 - `docs/privacy-model.md` for export-policy and local data boundaries.
 
 ## Install
 
+From npm:
+
+```bash
+npm install -g briefops
+briefops --version
+```
+
 From this repository:
 
 ```bash
@@ -99,22 +106,22 @@ This is the primary BriefOps workflow.
 ### 1. Initialize
 
 ```bash
-briefops init
+briefops bootstrap
 ```
 
-This creates a local `.briefops/` workspace.
+This creates a local `.briefops/` workspace, installs Codex first-context guidance into `AGENTS.md`, writes `.briefops/codex/prompts/`, installs the deterministic local plugin bundle under `.briefops/codex/plugin/briefops`, adds `.briefops/` to `.gitignore`, and runs bounded privacy/stability checks.
 
-### 2. Install Codex Guidance
+If you want the manual path instead:
 
 ```bash
+briefops init
 briefops codex install
 briefops codex plugin install
+briefops doctor --privacy --fix-gitignore
+briefops doctor --stability
 ```
 
-This creates or updates `AGENTS.md` with BriefOps guidance and creates `.briefops/codex/prompts/`.
-`briefops codex plugin install` writes a deterministic local plugin bundle under `.briefops/codex/plugin/briefops`. It does not publish to a marketplace and does not write to global Codex folders by default.
-
-### 3. Create A Skill
+### 2. Create A Skill
 
 ```bash
 briefops skill create risk-review \
@@ -124,7 +131,7 @@ briefops skill create risk-review \
 
 A skill is a reusable working protocol.
 
-### 4. Create Project Context
+### 3. Create Project Context
 
 ```bash
 briefops project create atlas-q \
@@ -134,7 +141,7 @@ briefops project create atlas-q \
 
 A project stores durable facts and constraints.
 
-### 5. Create A Worker
+### 4. Create A Worker
 
 ```bash
 briefops worker create quant-reviewer \
@@ -147,7 +154,7 @@ briefops worker use quant-reviewer
 
 A worker is the persistent identity BriefOps carries across fresh threads: default project, skill bundle, style, lessons, risks, and judgment profile. `worker use` makes it the default worker for start-of-thread priming.
 
-### 6. Prime A Fresh Codex Thread
+### 5. Prime A Fresh Codex Thread
 
 ```bash
 briefops prime \
@@ -156,11 +163,11 @@ briefops prime \
   --max-tokens 800
 ```
 
-Paste the compact prime context into Codex first. It is smaller than a full resume pack and is designed to reduce repeated history/context lookup.
+Paste the compact prime context into Codex first. Repos bootstrapped with BriefOps also get `AGENTS.md` guidance that tells Codex to run this before broad repo/history inspection.
 
-Codex-format prime output includes an operating note for Codex: use the selected worker/project context, inspect only files needed for the task, and never apply memory or skill patches without user approval.
+Codex-format prime output includes an operating note for Codex: use the selected worker/project context, inspect only files needed for the task, treat `.briefops/` memory as local repo state, and ask before exporting private memory or applying skill patches.
 
-### 7. Start A Codex Mission When Needed
+### 6. Start A Codex Mission When Needed
 
 ```bash
 briefops codex mission \
@@ -173,7 +180,7 @@ briefops codex mission \
 
 Paste the generated mission prompt into Codex.
 
-### 8. Finish The Task
+### 7. Finish The Task
 
 When Codex finishes, record what happened:
 
@@ -193,27 +200,25 @@ briefops finish \
 
 `finish` always writes a work log when `--task` and `--result` are valid. If the log has no durable memory candidates, `finish` warns and still prints the next `briefops continue` command.
 
-### 9. Review And Apply Memory
+### 8. Local Memory Is Applied
 
-Memory is human-approved. Review the proposal:
+`finish` applies durable memory candidates into `.briefops/memory/` by default and keeps the proposal file as an audit trail. The output reports how many memory items were created or skipped as duplicates.
 
-```bash
-briefops memory proposal-show latest
-```
-
-Apply it only when useful:
+Use review mode only when you explicitly want a pending local queue:
 
 ```bash
-briefops memory proposal-apply latest
+briefops finish --memory-review ...
 ```
 
-You can also use the convenience command:
+Inspect, apply, or reject queued proposals when needed:
 
 ```bash
-briefops approve latest
+briefops memory proposal-show latest
+briefops memory proposal-apply latest
+briefops memory proposal-reject latest
 ```
 
-### 10. Continue In A Fresh Thread
+### 9. Continue In A Fresh Thread
 
 ```bash
 briefops continue \
@@ -222,7 +227,7 @@ briefops continue \
   --pack
 ```
 
-`continue --pack` checks continuity health, warns about pending memory proposals, refreshes worker intelligence, saves a handoff, saves a Codex resume prompt, saves a portable resume pack, and prints all generated paths.
+`continue --pack` checks continuity health, notes any optional pending memory proposals, refreshes worker intelligence, saves a handoff, saves a Codex resume prompt, saves a portable resume pack, and prints all generated paths.
 
 ## Shared-Only Export Path
 
@@ -239,7 +244,7 @@ It omits private memory, local project file details, raw work logs, open risks,
 
 `local-private` is intended for local terminal/Codex use only and may include local private continuity context.
 
-BriefOps skills must never auto-approve memory proposals or skill patches.
+BriefOps may update directory-local memory during normal local work. Explicit confirmation is reserved for sharing private memory outside the workspace or applying skill patches.
 
 ## Local Harness Export
 
@@ -252,10 +257,26 @@ briefops export cursor-rules
 briefops export all
 ```
 
-Exports are routers, not memory dumps. They tell local AI tools to run `briefops prime`, `briefops finish`, `briefops approve`, and `briefops continue --pack`.
+Exports are routers, not memory dumps. They tell local AI tools to run `briefops prime`, `briefops finish`, and `briefops continue --pack`.
 
 They do not copy `.briefops` memory, raw logs, private decisions, incidents, handoffs, or worker summaries into `AGENTS.md`, `CLAUDE.md`, or Cursor rules. Export commands default to `--export-policy shared-only` because these files are often committed.
 
+## Master Harness Routing
+
+Use the Master Harness router when Codex should decide the smallest sufficient workflow before implementation:
+
+```bash
+briefops harness route --task "Fix the failing dashboard layout test."
+briefops harness route --task "Build the release readiness flow." --type large-feature
+briefops harness matrix
+```
+
+The router classifies work across bug fixes, features, refactors, dependency upgrades, UI changes, test repairs, incidents, documentation, architecture decisions, research, code review, and release preparation. It returns the required specification, planning, goal ledger, findings, verification, memory update, artifacts, exit criteria, and final response contract.
+
+In 2.1.x this is a routing contract, not a forced process engine. Tiny fixes can stay light; release, incident, UI, and larger feature work can require evidence, findings, and handoff discipline.
+
+See `docs/master-harness.md` for the Codex-compatible BriefOps Master Harness architecture and MVP plan.
+
 ## Context Minimalism
 
 Inspect the built-in budget policy:
@@ -272,6 +293,14 @@ briefops compare context --worker quant-reviewer --task "Review this PR."
 
 BriefOps should not become the context bloat it was built to prevent. Use `prime` first, then generate a handoff or resume pack only when continuity needs more detail.
 
+Inspect the live continuity signal for a worker:
+
+```bash
+briefops obs continuity --worker quant-reviewer --task "Review this PR." --json
+```
+
+This reports raw candidate context, compiled prime size, compression, continuity health, local queues, and memory hygiene signals without dumping private memory content.
+
 ## Memory Hygiene
 
 Not every task deserves durable memory. Use durable memory for decisions, lessons, incidents, open risks, and reusable constraints:
@@ -293,6 +322,7 @@ Run this before publishing a repository, sharing a pack, or attaching BriefOps c
 briefops doctor --privacy
 briefops doctor --privacy --fix-gitignore
 briefops doctor --stability
+briefops doctor --strict --json
 ```
 
 BriefOps is local-first, but `.briefops/` may contain private logs and memory. Keep `.briefops/` out of source control unless you intentionally curated the contents.
@@ -301,6 +331,8 @@ BriefOps is local-first, but `.briefops/` may contain private logs and memory. K
 
 `doctor --stability` checks local workspace integrity, schema validity, duplicate memory ids, broken references, managed-path symlinks, and orphaned review artifacts. It keeps diagnostics bounded and does not add detailed doctor output to `prime`, handoff, resume, or pack context.
 
+`doctor --strict` aggregates stability, security, privacy, and memory hygiene checks. Warnings keep `releaseReady` false in JSON output, which makes the command useful as a pre-release gate.
+
 ## Pre-Publish Readiness
 
 Before `npm publish`, run the local release checks and review the package contents:
@@ -308,7 +340,9 @@ Before `npm publish`, run the local release checks and review the package conten
 ```bash
 npm run build
 npm test
+npm audit --audit-level=moderate
 npm pack --dry-run
+npm run verify:release
 ```
 
 Run `npm audit --audit-level=moderate` or `npm run verify:release` only from an environment where sending dependency metadata to the npm registry is acceptable.
@@ -318,6 +352,7 @@ Confirm:
 - generated harness files are routers, not `.briefops` memory dumps
 - `briefops --version` matches `package.json`
 - `.briefops/` is ignored or intentionally curated
+- `npm view briefops versions --json` does not already include the target version
 - `SECURITY.md`, `CHANGELOG.md`, and the release checklist reflect the shipped behavior
 - `npm pack --dry-run` includes `dist`, docs, examples, plugins, README, LICENSE, SECURITY, CONTRIBUTING, CODE_OF_CONDUCT, and CHANGELOG
 
@@ -329,13 +364,13 @@ BriefOps works best as a local memory ledger beside stronger harnesses such as C
 
 `finish` records what happened.
 
-It writes a work log, proposes durable memory when the log contains useful candidates, can propose a skill patch, can refresh the worker summary, and prints the next `briefops continue` command.
+It writes a work log, applies durable directory-local memory when the log contains useful candidates, keeps a proposal audit file, can propose a skill patch, can refresh the worker summary, and prints the next `briefops continue` command.
 
-Recent work logs are available to the next local handoff immediately. Durable memory is separate: lessons, decisions, incidents, and reusable rules become long-lived memory only after review.
+Recent work logs are available to the next local handoff immediately. Durable memory is the long-lived layer: lessons, decisions, incidents, and reusable rules are promoted locally by default unless `--memory-review` is used.
 
 `continue` prepares the same worker for a fresh thread.
 
-It inspects continuity health, warns about pending memory proposals, refreshes the worker summary, generates a handoff, and saves a Codex resume prompt. Add `--pack` when you also want one self-contained markdown file.
+It inspects continuity health, notes optional pending memory proposals, refreshes the worker summary, generates a handoff, and saves a Codex resume prompt. Add `--pack` when you also want one self-contained markdown file.
 
 ```bash
 briefops finish \
@@ -353,7 +388,7 @@ briefops continue \
   --pack
 ```
 
-You can continue before applying a memory proposal. The handoff still includes recent local work such as results, lessons, decisions, open risks, incidents, and next steps. If pending memory proposals exist, `continue` prints explicit review, apply, and reject commands. It never applies memory automatically.
+You can continue even if older or review-mode memory proposals are still pending. The handoff still includes recent local work such as results, lessons, decisions, open risks, incidents, and next steps. If pending memory proposals exist, `continue` prints inspect, apply, and reject commands without blocking the flow.
 
 ## Portable Resume Pack
 
@@ -386,11 +421,11 @@ exportable: false
 
 BriefOps does not add cloud sync or encryption.
 
-## Approvals
+## Local Memory Queue And Skill Patches
 
-Memory and skill changes are human-approved.
+`briefops finish` applies durable memory locally by default. Pending memory proposals still exist for audit/review mode and older workspaces.
 
-Use explicit proposal commands:
+Use explicit proposal commands when you choose to inspect the queue:
 
 ```bash
 briefops memory proposal-show latest
@@ -402,7 +437,7 @@ briefops skill apply-patch risk-review --patch latest
 briefops skill reject-patch latest
 ```
 
-Or use the convenience approval command:
+The convenience approval command remains available for pending queue items:
 
 ```bash
 briefops approve latest
@@ -410,7 +445,7 @@ briefops approve memory latest
 briefops approve skill-patch latest
 ```
 
-`briefops approve <id|latest>` tries memory first. If no matching memory proposal exists, it tries a skill patch. It applies at most one item.
+`briefops approve <id|latest>` tries memory first. If no matching memory proposal exists, it tries a skill patch. It applies at most one item. Skill patches should be applied only with explicit user direction.
 
 ## Inbox
 
@@ -435,8 +470,8 @@ briefops inbox --skill risk-review
 | Worker Summary | Refreshed worker intelligence | `.briefops/workers/summaries/*.summary.md` |
 | Work Log | Completed task record | `.briefops/logs/*.yaml` |
 | Memory | Curated facts, decisions, lessons, incidents | `.briefops/memory/*.yaml` |
-| Memory Proposal | Human-reviewed memory candidate | `.briefops/memory-proposals/*.yaml` |
-| Skill Patch | Human-reviewed skill improvement | `.briefops/patches/*.patch.yaml` |
+| Memory Proposal | Audit/review memory candidate | `.briefops/memory-proposals/*.yaml` |
+| Skill Patch | Explicit-review skill improvement | `.briefops/patches/*.patch.yaml` |
 | Handoff | Fresh-thread continuity brief | `.briefops/handoffs/*.md` |
 | Codex Prompt | Mission or resume prompt | `.briefops/codex/prompts/*.md` |
 | Portable Pack | Self-contained resume markdown | `.briefops/codex/prompts/*resume-pack*.md` |
@@ -486,7 +521,7 @@ briefops memory show <memory-id>
 briefops memory update-status <memory-id> --status archived
 ```
 
-Promote useful work-log items through a proposal:
+Promote useful work-log items through a proposal. `briefops finish` does this automatically by default; these commands are for manual or review-mode flows:
 
 ```bash
 briefops memory propose-from-log latest
@@ -496,7 +531,7 @@ briefops memory proposal-apply <proposal-id|latest>
 briefops memory proposal-reject <proposal-id|latest>
 ```
 
-Extraction is deterministic and local. Lessons, decisions, incidents, open risks, prefixed notes, and policy-like next steps can become proposal items. Proposal generation and approval are local file-backed operations protected by workspace locks.
+Extraction is deterministic and local. Lessons, decisions, incidents, open risks, prefixed notes, and policy-like next steps can become proposal items. Proposal generation and application are local file-backed operations protected by workspace locks.
 
 ## Skills And Skill Patches
 
@@ -659,6 +694,9 @@ When generated briefs, handoffs, or resumes are too large, BriefOps trims lower-
 +-- briefs/
 +-- codex/
 |   +-- prompts/
+|       +-- prime.md
+|       +-- mission.md
+|       +-- plan.md
 +-- evals/
 |   +-- results/
 +-- patches/
@@ -675,6 +713,7 @@ Because `.briefops/` is local/private, Codex does not automatically see it. Prov
 ## Command Reference
 
 ```bash
+briefops bootstrap
 briefops init
 briefops doctor
 briefops doctor --stability
@@ -768,7 +807,7 @@ Workspace not found:
 briefops init
 ```
 
-Pending memory before continuing:
+Optional pending memory before continuing:
 
 ```bash
 briefops memory proposal-list --status proposed

package/SECURITY.md

@@ -6,8 +6,9 @@ BriefOps is a local-first CLI. It stores project memory, work logs, generated pr
 
 | Version | Supported |
 | --- | --- |
-| 1.x | Security fixes accepted |
-| 0.2.x alpha | Not supported; upgrade to 1.x |
+| 2.x | Security fixes accepted |
+| 1.x | Security fixes accepted for critical issues |
+| 0.2.x alpha | Not supported; upgrade to 2.x |
 
 ## Reporting A Vulnerability
 
@@ -44,7 +45,7 @@ See `docs/privacy-model.md` for the full 1.0 privacy contract.
 
 `briefops export agents-md`, `briefops export claude-md`, `briefops export cursor-rules`, and `briefops export all` generate router files for local AI coding harnesses.
 
-These files are intended to be safe to commit by default. They should contain command guidance and approval boundaries, not raw `.briefops/` memory, work logs, handoffs, resume packs, private decisions, private incidents, or worker summaries.
+These files are intended to be safe to commit by default. They should contain command guidance and explicit export/skill-patch boundaries, not raw `.briefops/` memory, work logs, handoffs, resume packs, private decisions, private incidents, or worker summaries.
 
 If you use `--export-policy local-private`, review the generated files before sharing them outside the local machine.
 

package/dist/cli.js

@@ -1,6 +1,7 @@
 import { Command } from "commander";
 import { registerApproveCommand } from "./commands/approve.js";
 import { registerBriefCommands } from "./commands/brief.js";
+import { registerBootstrapCommand } from "./commands/bootstrap.js";
 import { registerCodexCommands } from "./commands/codex.js";
 import { registerCompareCommands } from "./commands/compare.js";
 import { registerContinueCommand } from "./commands/continue.js";
@@ -8,12 +9,14 @@ import { registerDoctorCommand } from "./commands/doctor.js";
 import { registerEvalCommands } from "./commands/eval.js";
 import { registerExportCommands } from "./commands/export.js";
 import { registerFinishCommand } from "./commands/finish.js";
+import { registerHarnessCommands } from "./commands/harness.js";
 import { registerInitCommand } from "./commands/init.js";
 import { registerHandoffCommands } from "./commands/handoff.js";
 import { registerInboxCommand } from "./commands/inbox.js";
 import { registerInspectCommands } from "./commands/inspect.js";
 import { registerLogCommands } from "./commands/log.js";
 import { registerMemoryCommands } from "./commands/memory.js";
+import { registerObsCommands } from "./commands/obs.js";
 import { registerPackCommands } from "./commands/pack.js";
 import { registerPrimeCommand } from "./commands/prime.js";
 import { registerProjectCommands } from "./commands/project.js";
@@ -26,17 +29,20 @@ export function buildProgram() {
         .name("briefops")
         .description("Local-first, token-aware brief compiler for AI coding workflows.")
         .version(briefopsVersion);
+    registerBootstrapCommand(program);
     registerInitCommand(program);
     registerDoctorCommand(program);
     registerPrimeCommand(program);
     registerApproveCommand(program);
     registerFinishCommand(program);
+    registerHarnessCommands(program);
     registerContinueCommand(program);
     registerExportCommands(program);
     registerInboxCommand(program);
     registerSkillCommands(program);
     registerProjectCommands(program);
     registerMemoryCommands(program);
+    registerObsCommands(program);
     registerBriefCommands(program);
     registerHandoffCommands(program);
     registerCodexCommands(program);

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,UAAU,CAAC;SAChB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,OAAO,CAAC,eAAe,CAAC,CAAC;IAE5B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,MAAM,YAAY,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,UAAU,CAAC;SAChB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,OAAO,CAAC,eAAe,CAAC,CAAC;IAE5B,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,MAAM,YAAY,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}

package/dist/commands/bootstrap.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerBootstrapCommand(program: Command): void;

package/dist/commands/bootstrap.js

@@ -0,0 +1,59 @@
+import { bootstrapWorkspace } from "../core/bootstrap.js";
+import { printTable } from "./shared.js";
+export function registerBootstrapCommand(program) {
+    program
+        .command("bootstrap")
+        .description("Initialize BriefOps and install first-context Codex guidance for this repo.")
+        .option("--force", "Update existing generated guidance/plugin files when safe.")
+        .option("--no-codex", "Skip AGENTS.md Codex guidance and prompt pack installation.")
+        .option("--no-plugin", "Skip local Codex plugin bundle installation.")
+        .option("--no-fix-gitignore", "Do not add `.briefops/` to .gitignore.")
+        .option("--no-doctor", "Skip privacy and stability doctor checks.")
+        .action(async (options) => {
+        const result = await bootstrapWorkspace({
+            force: Boolean(options.force),
+            codex: options.codex,
+            plugin: options.plugin,
+            fixGitignore: options.fixGitignore,
+            doctor: options.doctor
+        });
+        console.log("BriefOps bootstrap complete.");
+        printTable([
+            ["Item", "Status", "Path"],
+            ["Workspace", "ready", result.root],
+            ["Codex guidance", result.agentsPath ? "installed" : "skipped", result.agentsPath ?? "-"],
+            ["Codex prompts", result.promptDir ? "ready" : "skipped", result.promptDir ?? "-"],
+            ["Codex plugin", result.pluginRoot ? "installed" : "skipped", result.pluginRoot ?? "-"],
+            [".gitignore", result.gitignorePath ? "updated" : "skipped", result.gitignorePath ?? "-"],
+            [
+                "Stability doctor",
+                result.stability ? (result.stability.ok ? "ok" : "fail") : "skipped",
+                result.stability ? `${result.stability.checks.length} check(s)` : "-"
+            ],
+            [
+                "Privacy doctor",
+                result.privacy ? (result.privacy.ok ? "ok" : "fail") : "skipped",
+                result.privacy ? `${result.privacy.checks.length} check(s)` : "-"
+            ]
+        ]);
+        if (result.warnings.length > 0) {
+            console.log("");
+            console.log("Warnings:");
+            for (const warning of result.warnings) {
+                console.log(`- ${warning}`);
+            }
+        }
+        console.log("");
+        console.log("Next commands:");
+        for (const command of result.nextCommands) {
+            console.log(`- ${command}`);
+        }
+        if (result.stability && !result.stability.ok) {
+            process.exitCode = 1;
+        }
+        if (result.privacy && !result.privacy.ok) {
+            process.exitCode = 1;
+        }
+    });
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/commands/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/commands/bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,6EAA6E,CAAC;SAC1F,MAAM,CAAC,SAAS,EAAE,4DAA4D,CAAC;SAC/E,MAAM,CAAC,YAAY,EAAE,6DAA6D,CAAC;SACnF,MAAM,CAAC,aAAa,EAAE,8CAA8C,CAAC;SACrE,MAAM,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;SACtE,MAAM,CAAC,aAAa,EAAE,2CAA2C,CAAC;SAClE,MAAM,CAAC,KAAK,EAAE,OAAgC,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;YACtC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YAC7B,KAAK,EAAE,OAAO,CAAC,KAA4B;YAC3C,MAAM,EAAE,OAAO,CAAC,MAA6B;YAC7C,YAAY,EAAE,OAAO,CAAC,YAAmC;YACzD,MAAM,EAAE,OAAO,CAAC,MAA6B;SAC9C,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,UAAU,CAAC;YACT,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC1B,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC;YACnC,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;YACzF,CAAC,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC;YAClF,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;YACvF,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC;YACzF;gBACE,kBAAkB;gBAClB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBACpE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,GAAG;aACtE;YACD;gBACE,gBAAgB;gBAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBAChE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,GAAG;aAClE;SACF,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/continue.js

@@ -38,16 +38,17 @@ export function registerContinueCommand(program) {
         }
         if (result.pendingMemoryProposals > 0) {
             console.log("");
-            console.log("Pending memory proposals should be reviewed before continuing.");
+            console.log("Pending local memory proposals found.");
+            console.log("They do not block continuing; apply or reject them when useful.");
             console.log("");
-            console.log("Review:");
+            console.log("Inspect:");
             console.log("briefops memory proposal-list --status proposed");
             console.log("briefops memory proposal-show latest");
             console.log("");
-            console.log("Apply if appropriate:");
+            console.log("Apply locally:");
             console.log("briefops memory proposal-apply latest");
             console.log("");
-            console.log("Reject if not useful:");
+            console.log("Reject:");
             console.log("briefops memory proposal-reject latest");
         }
         console.log("");

package/dist/commands/continue.js.map

@@ -1 +1 @@
-{"version":3,"file":"continue.js","sourceRoot":"","sources":["../../src/commands/continue.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,oGAAoG,CAAC;SACjH,MAAM,CAAC,qBAAqB,EAAE,+CAA+C,CAAC;SAC9E,cAAc,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;SAC3D,cAAc,CAAC,eAAe,EAAE,YAAY,CAAC;SAC7C,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,IAAI,CAAC;SAC3E,MAAM,CAAC,eAAe,EAAE,mBAAmB,EAAE,MAAM,CAAC;SACpD,MAAM,CAAC,6BAA6B,EAAE,8BAA8B,CAAC;SACrE,MAAM,CAAC,iBAAiB,EAAE,6CAA6C,CAAC;SACxE,MAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC;SAChE,MAAM,CAAC,QAAQ,EAAE,kDAAkD,CAAC;SACpE,MAAM,CAAC,KAAK,EAAE,OAAgC,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,OAAO,EAAE,OAAO,CAAC,OAA6B;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAgB;YAChC,IAAI,EAAE,OAAO,CAAC,IAAc;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAgB;YAChC,IAAI,EAAE,OAAO,CAAC,IAA0B;YACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAuC;YAClE,UAAU,EAAE,OAAO,CAAC,MAAM;gBACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,MAAgB,CAAC;gBACvD,CAAC,CAAC,SAAS;YACb,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YAC7B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;SAC5B,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,sBAAsB,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,6BAA6B,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"continue.js","sourceRoot":"","sources":["../../src/commands/continue.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,oGAAoG,CAAC;SACjH,MAAM,CAAC,qBAAqB,EAAE,+CAA+C,CAAC;SAC9E,cAAc,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;SAC3D,cAAc,CAAC,eAAe,EAAE,YAAY,CAAC;SAC7C,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,IAAI,CAAC;SAC3E,MAAM,CAAC,eAAe,EAAE,mBAAmB,EAAE,MAAM,CAAC;SACpD,MAAM,CAAC,6BAA6B,EAAE,8BAA8B,CAAC;SACrE,MAAM,CAAC,iBAAiB,EAAE,6CAA6C,CAAC;SACxE,MAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC;SAChE,MAAM,CAAC,QAAQ,EAAE,kDAAkD,CAAC;SACpE,MAAM,CAAC,KAAK,EAAE,OAAgC,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,OAAO,EAAE,OAAO,CAAC,OAA6B;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAgB;YAChC,IAAI,EAAE,OAAO,CAAC,IAAc;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAgB;YAChC,IAAI,EAAE,OAAO,CAAC,IAA0B;YACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAuC;YAClE,UAAU,EAAE,OAAO,CAAC,MAAM;gBACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,MAAgB,CAAC;gBACvD,CAAC,CAAC,SAAS;YACb,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YAC7B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;SAC5B,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,sBAAsB,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,6BAA6B,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/doctor.js

@@ -3,6 +3,7 @@ import { memoryCategories, workspacePaths } from "../core/paths.js";
 import { fixBriefOpsGitignore, runPrivacyDoctor } from "../core/privacyDoctor.js";
 import { runSecurityDoctor } from "../core/securityDoctor.js";
 import { runStabilityDoctor } from "../core/stabilityDoctor.js";
+import { runStrictDoctor } from "../core/strictDoctor.js";
 import { pathExists } from "../core/storage.js";
 import { printTable } from "./shared.js";
 export function registerDoctorCommand(program) {
@@ -15,7 +16,33 @@ export function registerDoctorCommand(program) {
         .option("--fix-stale-locks", "Remove stale BriefOps workspace locks before reporting security checks.")
         .option("--privacy", "Run privacy checks for local memory and share safety.")
         .option("--fix-gitignore", "Add `.briefops/` to .gitignore when running --privacy.")
+        .option("--strict", "Run stability, security, privacy, and memory hygiene checks as one release-readiness gate.")
+        .option("--json", "Print JSON output for --strict.")
         .action(async (options) => {
+        if (options.strict) {
+            const result = await runStrictDoctor({
+                maxExamples: options.verbose ? 25 : 5
+            });
+            if (options.json) {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                console.log("BriefOps Strict Doctor");
+                console.log("");
+                console.log(`OK: ${result.ok ? "yes" : "no"}`);
+                console.log(`Release ready: ${result.releaseReady ? "yes" : "no"}`);
+                console.log(`Checks: ${result.summary.checks} (${result.summary.ok} ok, ${result.summary.warn} warn, ${result.summary.fail} fail)`);
+                console.log("");
+                printTable([
+                    ["Source", "Check", "Status", "Detail"],
+                    ...result.checks.map((check) => [check.source, check.name, check.status, check.detail])
+                ]);
+            }
+            if (!result.releaseReady) {
+                process.exitCode = 1;
+            }
+            return;
+        }
         if (options.privacy) {
             if (options.fixGitignore) {
                 const path = await fixBriefOpsGitignore();