fdeops 3.13.0 → 3.15.1

package/bin/check.js

@@ -41,12 +41,11 @@ for (const f of requiredTemplates) {
   else ok(`template ${f}`)
 }
 
-const gif = path.join(root, 'media', 'demo.gif')
-if (!fs.existsSync(gif) || fs.statSync(gif).size < 1000) {
-  fail('media/demo.gif missing or too small')
-} else {
-  ok('media/demo.gif')
+const deadMedia = ['demo.gif', 'demo.sh', 'demo.tape', 'terminal-demo.svg', 'fieldbook-dashboard.png', 'fieldbook-detail.png', 'fieldbook-walkthrough.gif']
+for (const name of deadMedia) {
+  if (fs.existsSync(path.join(root, 'media', name))) fail(`dead media/${name} must not ship — the recorded session is session.gif`)
 }
+ok('no staged mock media')
 
 for (const dir of fs.readdirSync(path.join(root, 'skills'))) {
   const skill = path.join(root, 'skills', dir, 'SKILL.md')
@@ -57,6 +56,10 @@ for (const dir of fs.readdirSync(path.join(root, 'skills'))) {
 }
 ok('skills structure')
 
+if (fs.existsSync(path.join(root, 'skills', 'fde', 'archive'))) {
+  fail('skills/fde/archive must not exist — unrouted methods are dead code')
+} else ok('no archived skill dump')
+
 // v3: one skill + phase references (progressive disclosure)
 const requiredReferences = [
   'land.md', 'discover.md', 'audit.md', 'plan.md', 'review.md',
@@ -118,7 +121,7 @@ ok(`router dispatch (${mentioned.length} reference targets verified) + memory co
   // Every routing row must parse. A row this misses is a method that could go
   // undocumented for free, so an unparsed row is a hard failure, not a silent skip.
   const routed = new Set()
-  const routing = (router.split('## Routing - 6 domains')[1] || '').split('**Overlays')[0]
+  const routing = (router.split(/^## Routing[^\n]*$/m)[1] || '').split('**Overlays')[0]
   const methodCell = line => (line.split('|')[2] || '').trim().replace(/\s*\([^)]*\)\s*$/, '')
   for (const line of routing.split('\n')) {
     if (!/^\|/.test(line)) continue
@@ -179,24 +182,27 @@ ok(`router dispatch (${mentioned.length} reference targets verified) + memory co
   // the agent can never reach, advertised anyway.
   const unrouted = [...documented].filter(name => !routed.has(name))
   if (unrouted.length) {
-    fail(`docs/skills-reference.md documents method(s) SKILL.md never routes to: ${unrouted.join(', ')}`)
+    fail(`docs/skills-reference.md documents skill(s) SKILL.md never routes to: ${unrouted.join(', ')}`)
   }
   for (const rel of ['docs/skills.md', 'docs/skills-reference.md']) {
     const body = read(rel)
     // `-` is a word boundary, so \bingest\b matches inside `ingest-connect`:
     // a method could disappear from the docs behind a hyphenated sibling.
     const absent = [...documented].filter(name => !new RegExp(`(?<![\\w-])${name}(?![\\w-])`).test(body))
-    if (absent.length) fail(`${rel} does not list method(s): ${absent.join(', ')}`)
-    // every count claim, not just the first: an earlier sentence must not shadow
-    // a stale headline (or the reverse).
-    const claims = [...body.matchAll(/(\d+)\s+methods/g)].map(m => Number(m[1]))
-    if (!claims.length) fail(`${rel} must state how many methods it documents`)
+    if (absent.length) fail(`${rel} does not list skill(s): ${absent.join(', ')}`)
+    const claims = [...body.matchAll(/(\d+)\s+skills/g)].map(m => Number(m[1]))
+    if (!claims.length) fail(`${rel} must state how many skills it documents`)
     const wrong = [...new Set(claims.filter(n => n !== documented.size))]
     if (wrong.length) {
-      fail(`${rel} claims ${wrong.join('/')} methods; ${documented.size} are documented`)
+      fail(`${rel} claims ${wrong.join('/')} skills; ${documented.size} are documented`)
     }
   }
-  ok(`public method count is verifiable (${documented.size} documented, ${routed.size} routed)`)
+  ok(`public skill count is verifiable (${documented.size} documented, ${routed.size} routed)`)
+
+  const refDir = path.join(root, 'skills', 'fde', 'references')
+  const extra = fs.readdirSync(refDir).filter(f => f.endsWith('.md') && !mentioned.includes(f))
+  if (extra.length) fail(`unrouted reference file(s) — dead method: ${extra.join(', ')}`)
+  else ok('no unrouted reference files')
 }
 
 const install = read('bin/install.js')
@@ -215,26 +221,20 @@ if (read('package.json').includes('postinstall')) {
 }
 
 const readme = read('README.md')
-// The README shows one recording: media/session.gif, a real CLI session.
-// media/demo.gif is a hand-typed mock kept for history - it must never be embedded,
-// or the front door shows output no command actually produced.
-if (readme.includes('demo.gif')) fail('README must not embed media/demo.gif (staged mock, not real CLI output)')
-else ok('README no staged demo gif')
-
-// The recording may live on the front door or one click in (docs/USAGE.md), but
-// it must stay reachable and reproducible - an orphaned gif rots silently.
-const recordingHosts = ['README.md', 'docs/USAGE.md'].filter(f => read(f).includes('media/session.gif'))
-if (!recordingHosts.length) {
-  fail('media/session.gif must be embedded in README.md or docs/USAGE.md (the recorded session is the proof)')
-} else if (!recordingHosts.some(f => read(f).includes('media/record-session.sh'))) {
-  fail('link media/record-session.sh next to the recording, so it can be re-recorded')
+if (/session\.gif|demo\.gif|<img /i.test(readme)) {
+  fail('README must not embed images — front door is text; the recording lives in docs/USAGE.md')
+} else ok('README is text (no gif)')
+
+const usage = read('docs/USAGE.md')
+if (!usage.includes('media/session.gif') || !usage.includes('media/record-session.sh')) {
+  fail('docs/USAGE.md must embed media/session.gif and link media/record-session.sh')
 } else {
   const gifPath = path.join(root, 'media', 'session.gif')
   const rec = path.join(root, 'media', 'record-session.sh')
   if (!fs.existsSync(gifPath) || fs.statSync(gifPath).size < 50000) fail('media/session.gif missing or too small')
   else if (!fs.existsSync(rec)) fail('media/record-session.sh missing - the recording must be reproducible')
   else if (!fs.existsSync(path.join(root, 'media', 'session.cast'))) fail('media/session.cast missing - keep the source recording next to the gif')
-  else ok(`recorded session in ${recordingHosts.join(' + ')} (gif + reproducible recorder + cast)`)
+  else ok('recorded session in docs/USAGE.md (gif + reproducible recorder + cast)')
 }
 
 // Every repo-relative README link and image must resolve, or the front door 404s.
@@ -248,11 +248,11 @@ if (brokenLinks.length) fail(`README links to missing paths: ${brokenLinks.join(
 else ok('README links all resolve')
 
 for (const section of [
-  'How it works',
-  'Quickstart',
+  'How Skills Work',
+  'Quick Start',
   'Engagement memory',
   'Who this is for',
-  'The week',
+  'Commands',
   'Principles',
 ]) {
   if (!readme.includes(section)) fail(`README missing section: ${section}`)
@@ -262,6 +262,16 @@ if (!readme.includes('AI coding agent')) {
 }
 ok('README clarity sections')
 
+for (const cmd of ['/brief', '/discover', '/plan', '/ship', '/got', '/close', '/debrief', '/prep', '/quiet', '/agreed', '/status']) {
+  if (!readme.includes(cmd)) fail(`README must document slash command ${cmd}`)
+}
+ok('README slash commands documented')
+
+// Front-door map is the embed left-to-right (LAND → CLOSE), not a pile of situations.
+if (!readme.slice(0, 4000).includes('LAND') || !readme.slice(0, 4000).includes('/discover')) {
+  fail('README must include the LAND→CLOSE command-map diagram near the top')
+} else ok('README command-map diagram')
+
 if (readme.includes('your-client-repo')) {
   fail('README must not instruct install in customer repo (your-client-repo)')
 } else ok('README no customer-repo install')
@@ -270,9 +280,8 @@ if (!readme.includes('fde-engagements') || !/fdeops.*init.*engagement/i.test(rea
   fail('README must document fde-engagements + init flow')
 } else ok('README engagement path')
 
-// The contributor-only testing skill lives in .agents/skills/, so a bare
-// `skills add` installs it too. The advertised command must name the one skill
-// a field user wants.
+// The advertised command must name the one skill a field user wants.
+// Contributor CLI attack notes live in evals/testing-fieldbook.md, not as a skill.
 for (const m of readme.match(/^.*npx skills add .*$/gm) || []) {
   if (!m.includes('--skill fde')) {
     fail(`README skills-add command must pin --skill fde: ${m.trim()}`)
@@ -298,19 +307,7 @@ if (!read('skills/fde/SKILL.md').includes('npx --yes fdeops')) {
     fail(`SKILL.md description needs several "Use when …" triggers so it fires on intent (found ${triggers.length})`)
   } else if (/Use when the human says @fde or/.test(desc)) {
     fail('SKILL.md description must not gate on @fde - name the client-work intents first')
-  } else ok('SKILL.md description triggers on intent')
-}
-
-// Six invented words (fieldbook, terrain, reality, trust signal, receipts,
-// vault) carry the method. They were never defined in one place, so a stranger
-// met them scattered through the docs and guessed.
-{
-  const gloss = /Words used here[\s\S]{0,1200}/.exec(readme)
-  const missing = ['fieldbook', 'reality', 'terrain', 'trust signal', 'receipts', 'vault']
-    .filter(w => !gloss || !new RegExp(w, 'i').test(gloss[0]))
-  if (!gloss) fail('README must define its invented words once (a "Words used here" line)')
-  else if (missing.length) fail(`README glossary is missing: ${missing.join(', ')}`)
-  else ok('README defines its own vocabulary')
+  }   else ok('SKILL.md description triggers on intent')
 }
 
 if (!fs.existsSync(path.join(root, 'docs', 'USAGE.md'))) {
@@ -535,6 +532,16 @@ const plugin = JSON.parse(read('.claude-plugin/plugin.json'))
 if (pkg.version !== plugin.version) {
   fail(`version mismatch package.json ${pkg.version} vs plugin ${plugin.version}`)
 } else ok('plugin version aligned')
+if (plugin.commands !== './.claude/commands' || plugin.skills !== './skills') {
+  fail('.claude-plugin/plugin.json must declare skills and commands')
+} else {
+  for (const cmd of ['brief', 'discover', 'plan', 'ship', 'got', 'close', 'debrief', 'prep', 'quiet', 'agreed', 'status']) {
+    const rel = `.claude/commands/${cmd}.md`
+    if (!fs.existsSync(path.join(root, rel))) fail(`${rel} missing`)
+    else if (!read(rel).includes('@fde')) fail(`${rel} must load @fde`)
+  }
+  ok('slash commands load @fde')
+}
 
 if (!fs.existsSync(path.join(root, 'mcp', 'fdeops-ingest', 'server.js'))) {
   fail('mcp/fdeops-ingest/server.js missing (ingest MCP sink)')
@@ -607,12 +614,34 @@ for (const manifest of ['plugin.json', 'mcp.json']) {
   else ok(`${manifest} published to npm`)
 }
 
+const skillDirs = []
 for (const entry of fs.readdirSync(path.join(root, 'skills'))) {
   const dir = path.join(root, 'skills', entry)
   if (!fs.statSync(dir).isDirectory()) continue
   if (!fs.existsSync(path.join(dir, 'SKILL.md'))) fail(`skills/${entry}/ has no SKILL.md - clients skip it`)
-  else ok(`skill ${entry} discoverable`)
+  else {
+    skillDirs.push(entry)
+    ok(`skill ${entry} discoverable`)
+  }
+}
+if (skillDirs.length !== 1 || skillDirs[0] !== 'fde') {
+  fail(`public tree ships one skill (skills/fde); found: ${skillDirs.join(', ') || '(none)'}`)
+} else ok('one public skill')
+
+function findSkillMd(dir, acc = []) {
+  for (const e of fs.readdirSync(dir, { withFileTypes: true })) {
+    if (e.name === '.git' || e.name === 'node_modules' || e.name === '.agents') continue
+    const p = path.join(dir, e.name)
+    if (e.isDirectory()) findSkillMd(p, acc)
+    else if (e.name === 'SKILL.md') acc.push(path.relative(root, p))
+  }
+  return acc
 }
+const skillFiles = findSkillMd(root)
+const allowedSkill = path.join('skills', 'fde', 'SKILL.md')
+if (skillFiles.length !== 1 || skillFiles[0] !== allowedSkill) {
+  fail(`only ${allowedSkill} may exist; found: ${skillFiles.join(', ') || '(none)'}`)
+} else ok('one SKILL.md')
 
 if (!fs.existsSync(path.join(root, '.github', 'ISSUE_TEMPLATE', 'bug_report.yml'))) {
   fail('GitHub issue template missing')

package/bin/fde.js

@@ -738,11 +738,20 @@ function appendLogEntry(eng, type, entry, opts = {}) {
 // degrading to "nothing found" rather than guessing when the shape does not
 // match. Never fabricate a number, a name, or a signal that is not in the text.
 
+const PHASES = ['land', 'discover', 'plan', 'ship', 'prove', 'close']
+const PHASE_ALIASES = { build: 'ship' } // legacy SDLC name; public map is ship
 const PHASE_LABELS = {
-  land: 'Embed & Trust', discover: 'Discover & Diagnose', plan: 'Plan & Align',
-  build: 'Build & Guard', ship: 'Ship & Verify', close: 'Operate & Close',
+  land: 'Land', discover: 'Discover', plan: 'Plan',
+  ship: 'Ship', prove: 'Prove', close: 'Close',
+}
+function canonicalPhase(phase) {
+  const p = String(phase).toLowerCase()
+  return PHASE_ALIASES[p] || p
+}
+function phaseLabel(phase) {
+  const p = canonicalPhase(phase)
+  return PHASE_LABELS[p] || phase
 }
-function phaseLabel(phase) { return PHASE_LABELS[String(phase).toLowerCase()] || phase }
 
 // First real (non-blank, non-heading) line of a prose file, bold-label prefix
 // stripped ("**Confirmed:** text..." -> "text...") - same spirit as the
@@ -1312,11 +1321,11 @@ function cmdLog(args) {
   const eng = resolveEngagement({ forWrite: true })
   if (!eng) { console.error('no engagement - run: fde resume --init <name>'); process.exit(2) }
 
-  // fde log phase <land|discover|plan|build|ship|close> - advances portfolio phase
+  // fde log phase <land|discover|plan|ship|prove|close> - advances portfolio phase
   if (type === 'phase') {
-    const phase = (text || '').toLowerCase().trim()
-    if (!['land', 'discover', 'plan', 'build', 'ship', 'close'].includes(phase)) {
-      console.error('usage: fde log phase <land|discover|plan|build|ship|close>')
+    const phase = canonicalPhase((text || '').toLowerCase().trim())
+    if (!PHASES.includes(phase)) {
+      console.error(`usage: fde log phase <${PHASES.join('|')}>`)
       process.exit(1)
     }
     const hash = setContextPhase(eng, phase)
@@ -1324,7 +1333,7 @@ function cmdLog(args) {
     return
   }
 
-  if (!LOG_FILES[type] || !text) { console.error('usage: fde log <decision|risk|delivery|contact> <text> [--signal red|amber|green] [--force]\n       fde log phase <land|discover|plan|build|ship|close>\n       fde log --undo'); process.exit(1) }
+  if (!LOG_FILES[type] || !text) { console.error(`usage: fde log <decision|risk|delivery|contact> <text> [--signal red|amber|green] [--force]\n       fde log phase <${PHASES.join('|')}>\n       fde log --undo`); process.exit(1) }
   if (signal && type !== 'contact') { console.error('--signal only applies to: fde log contact'); process.exit(1) }
   const hit = findSecretHit(text)
   if (hit && !force) { refuseSecret('log text', hit); process.exit(1) }
@@ -2091,7 +2100,7 @@ function collectDoctorIssues(eng) {
 
   if (s.phase === '?' || s.phase === 'unset') {
     if (hasDatedWork) {
-      issues.push('phase is unset but dated work exists - run: fde log phase <land|discover|plan|build|ship|close>')
+      issues.push(`phase is unset but dated work exists - run: fde log phase <${PHASES.join('|')}>`)
     }
   }
   if (s.stale) issues.push(`trust signal is STALE (${s.signalAge}d) - reconfirm with fde log contact ... --signal`)
@@ -2161,7 +2170,7 @@ function collectDoctorIssues(eng) {
   }
   // Failure-path (exception-led operating map): required once past discover.
   // Land seeds; discover fills; plan+ without a real break→owner row is wallpaper.
-  if (/^(plan|build|ship|close)$/.test(s.phase) && !hasOperatingMapContent(eng)) {
+  if (/^(plan|ship|prove|close)$/.test(s.phase) && !hasOperatingMapContent(eng)) {
     issues.push(
       `phase is ${s.phase} with empty operating map - fill terrain.md ## Operating map (exception-led): break → who notices → workaround → evidence`
     )
@@ -3178,7 +3187,7 @@ function printUsage() {
   fde resume --bind        show what this workspace is bound to, and what resolves
   fde triage               TRIAGE block only (hooks / Cursor session entry)
   fde log <type> <text>    append decision|risk|delivery|contact (contact takes --signal red|amber|green; --force to allow secret-like text)
-  fde log phase <phase>    set engagement phase (land|discover|plan|build|ship|close)
+  fde log phase <phase>    set engagement phase (land|discover|plan|ship|prove|close)
   fde log --undo           remove the last CLI log/debrief entry from memory
   fde debrief [file]       meeting notes → memory (prefixed lines; --dry-run; --force)
   fde debrief --smart      heuristic propose (prefix + light keywords); agent routes, CLI gates → --apply

package/bin/lib/trust.js

@@ -64,8 +64,9 @@ function createTrustApi(deps) {
     if (!m) return '?'
     const raw = m[1].replace(/\*/g, '').trim()
     if (!raw || /\|/.test(raw) || /^unset$/i.test(raw) || /^[\[(]/.test(raw)) return '?'
-    const one = raw.toLowerCase().match(/^(land|discover|plan|build|ship|close)\b/)
-    return one ? one[1] : '?'
+    const one = raw.toLowerCase().match(/^(land|discover|plan|build|ship|prove|close)\b/)
+    if (!one) return '?'
+    return one[1] === 'build' ? 'ship' : one[1]
   }
 
   function countOpenRisks(eng) {

package/mcp/fdeops-ingest/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops-ingest-mcp",
-  "version": "3.13.0",
+  "version": "3.15.1",
   "private": true,
   "description": "Thin stdio MCP sink for FDEOps ingest (stage → propose → apply). Zero runtime dependencies.",
   "bin": {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "fdeops",
-  "version": "3.13.0",
-  "description": "Engagement memory for AI coding agents. Your agent forgets the client every morning - the sponsor, the promise, who signed off. FDEOps keeps that as dated markdown on your laptop: one @fde skill for the four days of an embed, a deterministic local CLI, and hooks that make it automatic. Claude Code plugin and any agent that loads skills.",
+  "version": "3.15.1",
+  "description": "Forward deployed engineering skills for AI coding agents. Your agent forgets the client every morning - the sponsor, the promise, who signed off. FDEOps keeps that as dated markdown on your laptop: one @fde skill, a deterministic local CLI, and hooks that make it automatic. Claude Code plugin and any agent that loads skills.",
   "bin": {
     "fdeops": "bin/install.js",
     "fde": "bin/fde.js"

package/plugin.json

@@ -1,13 +1,13 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "fdeops",
-  "version": "3.13.0",
-  "description": "Engagement memory for AI coding agents: per-client memory in local .fde/ files, one @fde skill, the four days of an embed. Local-only, no network.",
+  "version": "3.15.1",
+  "description": "Forward deployed engineering skills for AI coding agents: per-client memory in local .fde/ files, one @fde skill. Local-only, no network.",
   "author": {
     "name": "Subash Natarajan",
     "url": "https://github.com/suboss87"
   },
-  "homepage": "https://fdeops.io/",
+  "homepage": "https://github.com/suboss87/fdeops",
   "repository": "https://github.com/suboss87/FDEOps",
   "license": "MIT",
   "keywords": [