clembot-doorman 0.2.0 → 0.2.1

package/README.md

@@ -1,13 +1,15 @@
-<img src="logo.png" alt="Clembot Doorman" width="150" align="right">
+<p align="center">
+  <img src="media/hero.png" alt="Clembot Doorman - The Package Manager and Security Gate for AI Agents" width="100%">
+</p>
 
 # Clembot Doorman
 
-> **The Package Manager & Security Doorman for Clembot.**  
+> **The Package Manager & Security Doorman for AI Agents.**  
 > Inspect your build. Recommend vetted MCPs from prompt history. Block rogue tools before they reach context.
 
 [![Live Explainer & Simulator](https://img.shields.io/badge/Live%20Explainer-clembot--doorman.wanessalabs.com-green.svg)](https://clembot-doorman.wanessalabs.com)
 [![Gateway](https://img.shields.io/badge/Bazantic%20Gateway-active-blue.svg)](https://clembot-doorman.bazgateway.com)
-[![Tests](https://img.shields.io/badge/Tests-403%20passing-brightgreen.svg)](RUNBOOK.md)
+[![Tests](https://img.shields.io/badge/Tests-505%20passing-brightgreen.svg)](RUNBOOK.md)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
 ---
@@ -40,6 +42,56 @@
 
 ---
 
+## 📸 Architecture & Platform Gallery
+
+<table>
+  <tr>
+    <td width="50%" align="center" valign="top">
+      <a href="media/gallery-03-two-phase-solution.png"><img src="media/gallery-03-two-phase-solution.png" alt="2 phase solution with Clembot Doorman" width="100%"></a><br>
+      <b>2-Phase Defense Solution with Clembot Doorman</b><br>
+      <i>$0.00 local pre-screening before $0.01 Base mainnet verification</i>
+    </td>
+    <td width="50%" align="center" valign="top">
+      <a href="media/gallery-04-tiered-architecture.png"><img src="media/gallery-04-tiered-architecture.png" alt="Tiered Clembot-doorman Architecture" width="100%"></a><br>
+      <b>Tiered Clembot-Doorman Architecture</b><br>
+      <i>Four modular layers (L0 Doctor → L1 Needs → L2 Offline Gate → L3 Scorecard)</i>
+    </td>
+  </tr>
+  <tr>
+    <td width="50%" align="center" valign="top">
+      <a href="media/gallery-01-bazantic-gateway.png"><img src="media/gallery-01-bazantic-gateway.png" alt="Bazantic doorman gateway" width="100%"></a><br>
+      <b>Bazantic Doorman Gateway</b><br>
+      <i>Live edge gateway (<code>clembot-doorman.bazgateway.com</code>) with 10 managed tools</i>
+    </td>
+    <td width="50%" align="center" valign="top">
+      <a href="media/gallery-02-bazantic-recipes.png"><img src="media/gallery-02-bazantic-recipes.png" alt="Bazantic recipes" width="100%"></a><br>
+      <b>Bazantic Recipes</b><br>
+      <i>Three published production recipes delivering 87% context token reduction</i>
+    </td>
+  </tr>
+  <tr>
+    <td width="50%" align="center" valign="top">
+      <a href="media/gallery-05-powered-by-bazantic.png"><img src="media/gallery-05-powered-by-bazantic.png" alt="Powered by Bazantic" width="100%"></a><br>
+      <b>Powered by Bazantic</b><br>
+      <i>Deep technical integration: Continuity, Edge Infrastructure, and Cryptographic Allowlisting</i>
+    </td>
+    <td width="50%" align="center" valign="top">
+      <a href="media/gallery-06-doorman-demo.png"><img src="media/gallery-06-doorman-demo.png" alt="Doorman demo" width="100%"></a><br>
+      <b>Doorman Demo</b><br>
+      <i>Interactive flow testing real MCPs with toggleable Base x402 micropayments</i>
+    </td>
+  </tr>
+  <tr>
+    <td colspan="2" align="center" valign="top">
+      <a href="media/gallery-07-clembot-org-chart.png"><img src="media/gallery-07-clembot-org-chart.png" alt="Clembot org chart" width="100%"></a><br>
+      <b>Clembot Organization Chart</b><br>
+      <i>27 autonomous agents across 5 divisions: Design Director is the sole surface gated by Doorman</i>
+    </td>
+  </tr>
+</table>
+
+---
+
 ## What this is for
 
 Doorman measures whether a candidate tool actually helps **your** agent, and gives you a report about **your** build.
@@ -77,6 +129,7 @@ The verdict is yours, produced on your machine, from numbers we never receive.
 | `site/` | The live product & explainer at [clembot-doorman.wanessalabs.com](https://clembot-doorman.wanessalabs.com). |
 | `fixtures/planted-bad-mcp/` | A deliberately hostile MCP server, deployed, so the demo denies something real instead of a line in a JSON file. |
 
+<a id="install"></a>
 ## Quickstart & Installation
 
 **The answer depends on your stack, so run it on yours.**

package/doorman/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "clembot-doorman",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "A gate on what your agent is allowed to use. Blocks MCP servers that are not on your trust list, reads your prompt history to find what the build actually needs, and grades candidates before you install them.",
   "author": {
     "name": "Clemens Wan",

package/doorman/cli/audit.mjs

@@ -0,0 +1,232 @@
+/**
+ * `doorman audit` — Unified security audit & tool recommendation report.
+ *
+ * Combines three layers in one fast, local sweep:
+ *   1. L0 doctor: Inspects your harness, gate wiring, and installed MCP servers.
+ *   2. L0.5 needs: Scans local prompt history to detect missing capability needs.
+ *   3. L2 watch: Cross-references unmet gaps against the public graded feed.
+ *
+ * Output: An actionable, executive-grade posture and tool recommendation report.
+ * Free, offline-first, zero runtime dependencies.
+ */
+
+import { resolve } from 'node:path';
+import { writeFileSync } from 'node:fs';
+import { doctor } from './doctor.mjs';
+import { needs as readNeeds } from './needs.mjs';
+import { watch } from './watch.mjs';
+
+export async function auditProject(targetDir = process.cwd(), opts = {}) {
+  const absRoot = resolve(targetDir);
+
+  // 1. Run Doctor (L0: Harness, Gate, Installed servers)
+  const doc = await doctor(absRoot, opts);
+  if (!doc.ok) {
+    return { ok: false, why: doc.why };
+  }
+
+  // 2. Run Needs (L0.5: Prompt history scan for capability gaps)
+  let needsResult = null;
+  try {
+    needsResult = await readNeeds({
+      root: absRoot,
+      historyDir: opts.historyDir,
+      candidateFile: opts.candidateFile,
+      api: opts.api,
+    });
+  } catch {
+    needsResult = null;
+  }
+
+  // 3. Run Watch (L2: Classified feed of newly graded tools & threats)
+  let watchResult = null;
+  try {
+    watchResult = await watch({
+      root: absRoot,
+      api: opts.api,
+      all: true,
+    });
+  } catch {
+    watchResult = null;
+  }
+
+  // Synthesize executive findings
+  const gateStatus = doc.gate?.verdict || 'unknown';
+  const isGateWired = gateStatus === 'installed and wired' || gateStatus.includes('wired');
+  const harnesses = (doc.harnesses || []).map((h) => h.harness);
+  const installedCount = (doc.servers || []).length;
+
+  const gaps = (needsResult?.matches || []).filter((m) => m.status === 'GAP' || m.status === 'UNMET');
+  const covered = (needsResult?.matches || []).filter((m) => m.status === 'COVERED');
+
+  const candidates = watchResult?.candidates || [];
+  const recommended = candidates
+    .filter((c) => (c.grade === 'A' || c.grade === 'B') && c.verdict === 'unreviewed' && !c.is_fixture && !c.self_graded)
+    .slice(0, 5);
+
+  const blockedThreats = candidates
+    .filter((c) => c.grade === 'F' || c.hard_fail || c.verdict === 'blocked')
+    .slice(0, 3);
+
+  const result = {
+    ok: true,
+    root: absRoot,
+    timestamp: new Date().toISOString(),
+    posture: {
+      gateStatus,
+      isGateWired,
+      harnesses,
+      installedCount,
+      agentsCount: doc.agents?.count ?? 0,
+    },
+    needs: {
+      totalPrompts: needsResult?.promptCount ?? 0,
+      gaps,
+      covered,
+    },
+    recommendations: recommended,
+    threats: blockedThreats,
+  };
+
+  if (opts.out) {
+    const md = renderAuditMarkdown(result);
+    writeFileSync(opts.out, md, 'utf8');
+    result.outFile = opts.out;
+  }
+
+  return result;
+}
+
+export function renderAuditMarkdown(res) {
+  const lines = [];
+  lines.push('# Clembot Doorman Security & Tool Recommendation Report');
+  lines.push(`\n**Target:** \`${res.root}\``);
+  lines.push(`**Generated:** ${res.timestamp}`);
+  lines.push('');
+
+  // Posture
+  lines.push('## 1. Security & Gate Posture');
+  const gateIcon = res.posture.isGateWired ? 'PASS' : 'WARN';
+  lines.push(`- **Gate Status:** [${gateIcon}] ${res.posture.gateStatus}`);
+  lines.push(`- **Harnesses Detected:** ${res.posture.harnesses.join(', ') || 'none'}`);
+  lines.push(`- **Reachable MCP Servers:** ${res.posture.installedCount}`);
+  lines.push(`- **Subagents Configured:** ${res.posture.agentsCount}`);
+  lines.push('');
+
+  // Recommendations based on needs
+  lines.push('## 2. Capability Needs & Tool Recommendations');
+  if (res.needs.gaps.length > 0) {
+    lines.push('Your prompt history reveals the following unmet tool capabilities:');
+    for (const g of res.needs.gaps) {
+      lines.push(`- **${g.title}:** ${g.promptsCount} prompt(s) reaching for this capability.`);
+      if (g.topCandidates && g.topCandidates.length > 0) {
+        for (const c of g.topCandidates.slice(0, 2)) {
+          lines.push(`  → Recommended: **${c.name || c.url}** (${c.grade ? `Grade ${c.grade}` : 'verified'})`);
+        }
+      }
+    }
+  } else {
+    lines.push('- No active capability gaps detected in prompt history.');
+  }
+  lines.push('');
+
+  if (res.recommendations.length > 0) {
+    lines.push('### Top Verified Safe MCP Servers');
+    for (const r of res.recommendations) {
+      const score = typeof r.score === 'number' ? `${r.score.toFixed(1)}/100` : 'passing';
+      lines.push(`- **${r.server_name || r.server_url}** — Grade **${r.grade}** (${score})`);
+      lines.push(`  \`${r.server_url}\``);
+    }
+    lines.push('');
+  }
+
+  // Threats
+  lines.push('## 3. Threat Intelligence');
+  if (res.threats.length > 0) {
+    lines.push('The following servers failed security inspection and are blocked at the gate:');
+    for (const t of res.threats) {
+      const reason = t.hard_fail || 'Failed safety scan / commercial steering detected';
+      lines.push(`- ⚠️ **${t.server_name || t.server_url}** — Grade **${t.grade}** [BLOCKED]: ${reason}`);
+    }
+  } else {
+    lines.push('- No active threat flags recorded on your trust list.');
+  }
+  lines.push('');
+
+  // Next Steps
+  lines.push('## 4. Recommended Actions');
+  if (!res.posture.isGateWired) {
+    lines.push('1. **Wire the security gate:** `claude plugin marketplace add clemenswan/clembot-doorman && claude plugin install clembot-doorman`');
+  }
+  lines.push('2. **Vet new candidate servers before adoption:** `/vet <url>`');
+  lines.push('3. **Allow trusted servers:** `doorman allow <server-name>`');
+  lines.push('4. **Schedule recurring audits:** `doorman schedule`');
+
+  return lines.join('\n');
+}
+
+export function renderAudit(res) {
+  const lines = [];
+  lines.push('');
+  lines.push('================================================================');
+  lines.push('          CLEMBOT DOORMAN · UNIFIED AUDIT & RECOMMENDATIONS     ');
+  lines.push('================================================================');
+  lines.push(`Build: ${res.root}`);
+  lines.push('');
+
+  // 1. Security Posture
+  lines.push('── 1. SECURITY POSTURE ─────────────────────────────────────────');
+  const gateMark = res.posture.isGateWired ? '✓' : '!';
+  lines.push(`  [${gateMark}] Gate: ${res.posture.gateStatus}`);
+  lines.push(`  [i] Harness: ${res.posture.harnesses.join(', ') || 'None declared'}`);
+  lines.push(`  [i] Reachable MCP Tools: ${res.posture.installedCount} declared`);
+  lines.push('');
+
+  // 2. Capability Recommendations
+  lines.push('── 2. CAPABILITY GAPS & RECOMMENDED TOOLS ──────────────────────');
+  if (res.needs.gaps.length > 0) {
+    lines.push(`  Detected ${res.needs.gaps.length} capability gap(s) from prompt history:`);
+    for (const g of res.needs.gaps) {
+      lines.push(`  • ${g.title} (${g.promptsCount} prompt asks)`);
+    }
+  } else {
+    lines.push('  No unmet capability gaps detected.');
+  }
+
+  if (res.recommendations.length > 0) {
+    lines.push('');
+    lines.push('  Top Vetted Candidates from Graded Feed:');
+    for (const r of res.recommendations) {
+      const score = typeof r.score === 'number' ? `${r.score.toFixed(1)}/100` : '';
+      lines.push(`  → [Grade ${r.grade} · ${score}] ${r.server_name || 'Server'}`);
+      lines.push(`    URL: ${r.server_url}`);
+    }
+  }
+  lines.push('');
+
+  // 3. Blocked Threats
+  lines.push('── 3. THREATS BLOCKED AT THE GATE ──────────────────────────────');
+  if (res.threats.length > 0) {
+    for (const t of res.threats) {
+      lines.push(`  ✗ [Grade ${t.grade}] ${t.server_name || t.server_url}`);
+      if (t.hard_fail) lines.push(`    Reason: ${t.hard_fail}`);
+    }
+  } else {
+    lines.push('  No active security alerts on installed servers.');
+  }
+  lines.push('');
+
+  // 4. Quick Actions
+  lines.push('── 4. QUICK ACTIONS ────────────────────────────────────────────');
+  if (!res.posture.isGateWired) {
+    lines.push('  • Wire Gate:   claude plugin install clembot-doorman');
+  }
+  lines.push('  • Vet Tool:    /vet <candidate_url>');
+  lines.push('  • Trust Tool:  doorman allow <server_name>');
+  lines.push('  • Schedule:    doorman schedule');
+  if (res.outFile) {
+    lines.push(`  • Report:      Saved to ${res.outFile}`);
+  }
+  lines.push('');
+  return lines.join('\n');
+}

package/doorman/cli/doorman.mjs

@@ -31,16 +31,48 @@ import { needs as readNeeds, render as renderNeedsCli } from './needs.mjs';
 import { install, renderInstall } from './install.mjs';
 import { allow, renderAllow, SCOPES } from './allow.mjs';
 import { refreshNotify, consumeDigest, DEFAULT_DIGEST } from './notify.mjs';
+import { auditProject, renderAudit } from './audit.mjs';
+import { schedule as scheduleReport, renderSchedule } from './schedule.mjs';
 import { join } from 'node:path';
 
 // Pinned to every other declaration by version.test.mjs. There are FOUR of
 // them (root package.json, doorman/package.json, plugin.json, this) and this
 // one silently reported 0.1.0 out of a 0.2.0 tarball.
-const VERSION = '0.2.0';
+const VERSION = '0.2.1';
+
+const QUICKSTART = `
+doorman ${VERSION} — Security gate & tool package manager for AI agents
+
+QUICKSTART (3 SIMPLE STEPS):
+  1. doorman audit        Run full build check & get vetted MCP recommendations
+  2. /vet <url>           Audit an untrusted candidate MCP server before adoption
+  3. doorman schedule     Configure automated weekly/daily audit reports
+
+COMMON COMMANDS:
+  doorman audit [path]    Unified scan: doctor + prompt needs + recommended tools
+  doorman schedule        Configure recurring automated reports (cron, GitHub Actions)
+  doorman doctor [path]   L0 build & gate inspection (free, offline, <5ms)
+  doorman needs [path]    L0.5 scan prompt history for missing capabilities
+  doorman watch [path]    Check public feed for newly graded tools
+  doorman allow <server>  Trust an MCP server by name on your local allowlist
+  doorman install [path]  Install the gate & hooks into this project
+
+Run \`doorman --help\` for full manual and advanced benchmark flags.
+`;
 
 const HELP = `
 doorman ${VERSION} — measure a candidate, do not just read it
 
+  doorman audit [path] [--out FILE] [--json]
+      Unified security audit & capability recommendations. Runs doctor,
+      prompt-history needs, and watch in one fast command. Produces an
+      executive report with security posture, capability gaps, and top
+      verified tools.
+
+  doorman schedule [path] [--github]
+      Set up automated recurring audit reports via GitHub Actions, system
+      cron, or session-notify hooks.
+
   doorman doctor [path]
       L0. What is in YOUR build: which harness, which MCP servers your agents can
       reach, how many subagents hold MCP tools, and whether the gate is installed
@@ -125,7 +157,7 @@ Options
  */
 const BOOLEAN_FLAGS = new Set([
   'json', 'dry-run', 'all', 'estimate', 'help', 'version', 'allow-network',
-  'static-only', 'no-feed',
+  'static-only', 'no-feed', 'github', 'cron', 'weekly',
 ]);
 
 function parseArgs(argv) {
@@ -149,12 +181,34 @@ const log = (m) => console.error(`${new Date().toISOString().slice(11, 19)} ${m}
 async function main() {
   const args = parseArgs(process.argv.slice(2));
   if (args.version) { console.log(VERSION); return; }
-  if (args.help || args._.length === 0) { console.log(HELP); return; }
+  if (args.help) { console.log(HELP); return; }
+  if (args._.length === 0) { console.log(QUICKSTART); return; }
 
-  // `doctor` is the one command that needs no link: it reads the project.
+  const [cmd, link] = args._;
 
+  if (cmd === 'audit' || cmd === 'scan' || cmd === 'recommend') {
+    const target = args._[1] || process.cwd();
+    const r = await auditProject(target, {
+      out: typeof args.out === 'string' ? args.out : null,
+      api: typeof args.api === 'string' ? args.api : undefined,
+      historyDir: typeof args.history === 'string' ? args.history : undefined,
+    });
+    if (!r.ok) { console.error(`audit: ${r.why}`); process.exitCode = 1; return; }
+    if (args.json) { console.log(JSON.stringify(r, null, 2)); return; }
+    console.log(renderAudit(r));
+    return;
+  }
 
-  const [cmd, link] = args._;
+  if (cmd === 'schedule') {
+    const target = args._[1] || process.cwd();
+    const r = await scheduleReport(target, {
+      github: Boolean(args.github),
+    });
+    if (!r.ok) { console.error(`schedule: ${r.why}`); process.exitCode = 1; return; }
+    if (args.json) { console.log(JSON.stringify(r, null, 2)); return; }
+    console.log(renderSchedule(r));
+    return;
+  }
 
   if (cmd === 'doctor') {
     const d = await doctor(args._[1] || process.cwd());

package/doorman/cli/install.mjs

@@ -183,6 +183,20 @@ export function renderInstall(res) {
     L.push('');
   }
 
-  L.push('Done. Run `doorman doctor` to verify your installation.');
+  L.push('════════════════════════════════════════════════════════════════');
+  L.push('  INSTALLATION COMPLETE · GETTING STARTED GUIDANCE');
+  L.push('════════════════════════════════════════════════════════════════');
+  L.push('  1. Run unified health & tool check:');
+  L.push('     doorman audit');
+  L.push('');
+  L.push('  2. In Claude Code, manage your gate interactively:');
+  L.push('     /doorman');
+  L.push('');
+  L.push('  3. Audit any candidate tool before adoption:');
+  L.push('     /vet <mcp_server_url>');
+  L.push('');
+  L.push('  4. Set up recurring automated audit digests:');
+  L.push('     doorman schedule');
+  L.push('════════════════════════════════════════════════════════════════');
   return L.join('\n');
 }

package/doorman/cli/schedule.mjs

@@ -0,0 +1,128 @@
+/**
+ * `doorman schedule` — Configure automated, recurring tool audits & recommendation reports.
+ *
+ * Supports three automation modes:
+ *   1. Built-in SessionStart Hook (runs silently in background on session open)
+ *   2. GitHub Actions Workflow (--github: creates .github/workflows/doorman-audit.yml)
+ *   3. Agent / Cron Scheduling (prints crontab entry & /schedule agent prompt)
+ */
+
+import { resolve, join } from 'node:path';
+import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
+
+export const GITHUB_WORKFLOW_YAML = `name: Doorman Tool Audit & Security Report
+
+on:
+  schedule:
+    # Run every Monday at 09:00 UTC
+    - cron: '0 9 * * 1'
+  workflow_dispatch:
+
+jobs:
+  audit:
+    name: Run Clembot Doorman Audit
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install Clembot Doorman
+        run: npm i -g clembot-doorman
+
+      - name: Run Unified Audit
+        run: |
+          mkdir -p .doorman
+          doorman audit --out .doorman/audit-report.md
+
+      - name: Upload Audit Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: doorman-audit-report
+          path: .doorman/audit-report.md
+`;
+
+export async function schedule(targetDir = process.cwd(), opts = {}) {
+  const absRoot = resolve(targetDir);
+
+  if (opts.github) {
+    const wfDir = join(absRoot, '.github', 'workflows');
+    mkdirSync(wfDir, { recursive: true });
+    const wfPath = join(wfDir, 'doorman-audit.yml');
+    writeFileSync(wfPath, GITHUB_WORKFLOW_YAML, 'utf8');
+    return {
+      ok: true,
+      mode: 'github',
+      path: wfPath,
+    };
+  }
+
+  // Check hook status
+  const sessionHook = join(absRoot, '.claude', 'hooks', 'session-notify.sh');
+  const hasHook = existsSync(sessionHook);
+
+  return {
+    ok: true,
+    mode: 'guide',
+    root: absRoot,
+    hasHook,
+  };
+}
+
+export function renderSchedule(res) {
+  const lines = [];
+  lines.push('');
+  lines.push('================================================================');
+  lines.push('          CLEMBOT DOORMAN · AUTOMATED AUDIT SCHEDULING           ');
+  lines.push('================================================================');
+  lines.push('');
+
+  if (res.mode === 'github') {
+    lines.push(`  ✓ Created GitHub Actions workflow at:`);
+    lines.push(`    ${res.path}`);
+    lines.push('');
+    lines.push('  This workflow runs `doorman audit` every Monday at 09:00 UTC');
+    lines.push('  and uploads the markdown report as an artifact.');
+    lines.push('');
+    return lines.join('\n');
+  }
+
+  lines.push('Choose how you want to schedule your tool audit & recommendations:');
+  lines.push('');
+
+  // 1. SessionStart Hook
+  lines.push('── 1. BUILT-IN SESSION HOOK (ZERO CONFIG) ───────────────────────');
+  if (res.hasHook) {
+    lines.push('  [ACTIVE] .claude/hooks/session-notify.sh is installed.');
+    lines.push('  Claude Code automatically checks for new graded MCP tools at the');
+    lines.push('  start of every session and notifies you if fresh tools are available.');
+  } else {
+    lines.push('  Install the plugin to enable silent background session checks:');
+    lines.push('  claude plugin marketplace add clemenswan/clembot-doorman && claude plugin install clembot-doorman');
+  }
+  lines.push('');
+
+  // 2. AI Agent Loop / Slash Command
+  lines.push('── 2. AI AGENT RECURRING SCHEDULING ────────────────────────────');
+  lines.push('  In Antigravity or pair-programming chat, invoke the /schedule command:');
+  lines.push('  /schedule CronExpression="0 9 * * 1", Prompt="Run doorman audit and report recommended MCP tools"');
+  lines.push('');
+
+  // 3. GitHub Actions
+  lines.push('── 3. CI/CD GITHUB ACTIONS (RECOMMENDED FOR TEAMS) ──────────────');
+  lines.push('  Generate a weekly automated audit workflow with:');
+  lines.push('  doorman schedule --github');
+  lines.push('');
+
+  // 4. System Cron
+  lines.push('── 4. SYSTEM CRON / TASK SCHEDULER ─────────────────────────────');
+  lines.push('  Add to your crontab (crontab -e) to generate weekly markdown reports:');
+  lines.push(`  0 9 * * 1 cd "${res.root}" && npx clembot-doorman audit --out .doorman/audit.md`);
+  lines.push('');
+
+  return lines.join('\n');
+}

package/doorman/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clembot-doorman",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "private": true,
   "type": "module",
   "description": "Vets MCP servers, skills and repos before an agent gets them. Fit review first, paid grade second.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clembot-doorman",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "The Package Manager & Security Doorman for Claude Code: inspect your build, recommend vetted MCPs from prompt history, and block rogue tools before context.",
   "homepage": "https://clembot-doorman.wanessalabs.com",
   "type": "module",