fdeops 3.15.0 → 3.15.1

package/README.md

@@ -17,9 +17,9 @@ Skills encode the workflows, quality gates, and judgment Forward Deployed Engine
 
 ## Commands
 
-6 slash commands that map to the engagement. Each one loads `@fde`. You never pick a method.
+6 slash commands that map to the engagement. Each one activates `@fde`.
 
-| What you're doing | Command | Principle |
+| What you're doing | Command | Key principle |
 |-------------------|---------|-----------|
 | Land the embed | `/brief` | Brief and trust before code |
 | Find the real problem | `/discover` | Brief is a hypothesis |
@@ -30,7 +30,7 @@ Skills encode the workflows, quality gates, and judgment Forward Deployed Engine
 
 Also: `/debrief` (after a meeting) · `/prep` (walk-in) · `/quiet` (sponsor silent) · `/agreed` (scope dispute) · `/status` (Friday readout).
 
-`@fde` plus English activates the same skill automatically. Ordinary TypeScript, unit tests, and git commits stay in the host agent.
+Skills also activate automatically based on what you're doing — naming a client, debriefing a meeting, or asking what was agreed triggers `@fde`. Ordinary TypeScript, unit tests, and git commits stay in the host agent.
 
 ---
 
@@ -92,13 +92,13 @@ Requires Node.js >= 18. Override: `FDEOPS_ENGAGEMENT` — [docs/install.md](docs
 
 ---
 
-## All 31 Methods
+## All 31 Skills
 
-The commands above are the entry points. One `@fde` skill routes to these 31 methods — each a structured workflow with an artifact and a checkpoint. You never pick a method by name. Full detail: [docs/skills-reference.md](docs/skills-reference.md).
+The commands above are the entry points. Under the hood, `@fde` activates these 31 skills — each a structured workflow with steps, an artifact, and a checkpoint. You never pick one by name. Full detail: [docs/skills-reference.md](docs/skills-reference.md).
 
-### Land
+### Land - Brief and trust
 
-| Method | What it does | Use when |
+| Skill | What It Does | Use When |
 |--------|--------------|----------|
 | [land](skills/fde/references/land.md) | Interrogate the brief, map stakeholders, define success | New client, first meeting, just got the brief |
 | [audit](skills/fde/references/audit.md) | Verify claims, find the load-bearing wall | Taking over, previous consultant left |
@@ -106,27 +106,27 @@ The commands above are the entry points. One `@fde` skill routes to these 31 met
 | [trust-engineering](skills/fde/references/trust-engineering.md) | Observer → trusted; navigate AI policy | Need access or credibility |
 | [scope-defense](skills/fde/references/scope-defense.md) | Scope receipts; the accumulation conversation | "Also can you…", timeline unchanged |
 
-### Discover
+### Discover - Find the real problem
 
-| Method | What it does | Use when |
+| Skill | What It Does | Use When |
 |--------|--------------|----------|
 | [discover](skills/fde/references/discover.md) | Repo + workaround + the real problem | Brief feels wrong, shadow processes |
 | [assumption-audit](skills/fde/references/assumption-audit.md) | Untested assumptions by blast radius | Brief feels too neat |
 | [use-case-scoring](skills/fde/references/use-case-scoring.md) | Value × urgency × alignment / complexity | Everything is P0 |
 | [sketch](skills/fde/references/sketch.md) | Kill the killer assumption in a day | Need to de-risk a direction |
 
-### Plan
+### Plan - Sequence the work
 
-| Method | What it does | Use when |
+| Skill | What It Does | Use When |
 |--------|--------------|----------|
 | [plan](skills/fde/references/plan.md) | Backwards from done, PR-sized | What order, what is done |
 | [business-case](skills/fde/references/business-case.md) | Cost of nothing → investment → return | Defend budget or timeline |
 | [options-analysis](skills/fde/references/options-analysis.md) | Three genuine options | "What should we do?" |
 | [initiative-triage](skills/fde/references/initiative-triage.md) | Pick three from twenty urgents | Everything is urgent |
 
-### Ship
+### Ship - Go live
 
-| Method | What it does | Use when |
+| Skill | What It Does | Use When |
 |--------|--------------|----------|
 | [incremental-build](skills/fde/references/incremental-build.md) | Vertical slices, visible every 2–3 days | Large feature on their codebase |
 | [blast-radius](skills/fde/references/blast-radius.md) | Impact from contained → irreversible | Touching shared infrastructure |
@@ -135,9 +135,9 @@ The commands above are the entry points. One `@fde` skill routes to these 31 met
 | [review](skills/fde/references/review.md) | Did we only build what we agreed | Before merge, scope creep |
 | [rollback-drill](skills/fde/references/rollback-drill.md) | Test the escape route before 2am | "We can always revert" |
 
-### Prove
+### Prove - What they got
 
-| Method | What it does | Use when |
+| Skill | What It Does | Use When |
 |--------|--------------|----------|
 | [status](skills/fde/references/status.md) | Promised → measured → accepted | Friday, sponsor update |
 | [demo-prep](skills/fde/references/demo-prep.md) | One number, five hard questions | Demo or exec walkthrough |
@@ -147,9 +147,9 @@ The commands above are the entry points. One `@fde` skill routes to these 31 met
 | [ingest](skills/fde/references/ingest.md) | Pull text you confirm | Transcript, Notion, Slack |
 | [ingest-connect](skills/fde/references/ingest-connect.md) | Wire a source MCP | Connect Granola |
 
-### Close
+### Close - They run it
 
-| Method | What it does | Use when |
+| Skill | What It Does | Use When |
 |--------|--------------|----------|
 | [close](skills/fde/references/close.md) | Handoff that survives you | Wrapping up |
 | [handoff-engineering](skills/fde/references/handoff-engineering.md) | Runbook, confidence scoring | They must operate without you |
@@ -163,9 +163,9 @@ Optional pull: you add the source MCP; we **pull** on request. [mcp/recipes/](mc
 
 ---
 
-## How it works
+## How Skills Work
 
-Every method follows the same anatomy:
+Every skill follows a consistent anatomy:
 
 ```
 ┌─────────────────────────────────────────────┐
@@ -181,19 +181,17 @@ Every method follows the same anatomy:
 └─────────────────────────────────────────────┘
          │
          ▼
-  references/<method>.md     fde CLI (local)
+  references/<skill>.md      fde CLI (local)
   one file, then stop        dating, gates, redaction
 ```
 
-- **Process, not prose.** Methods are workflows with an artifact and a checkpoint.
+- **Process, not prose.** Skills are workflows with an artifact and a checkpoint, not tip sheets.
 - **You confirm.** Nothing is written until you say so.
-- **Progressive disclosure.** `SKILL.md` is the entry point. One `references/*.md` loads when routed.
-- **Local CLI.** Writes, receipts, status. Zero model tokens. The AI coding agent runs it.
+- **Progressive disclosure.** The `SKILL.md` is the entry point. One `references/*.md` loads when routed.
+- **Local CLI.** Writes, status, dated agreements. Zero model tokens. The AI coding agent runs it.
 
 The record lives at `~/fde-engagements/<client>/.fde/` — not inside any vendor. Change hosts, install `@fde` on the new one, bind if needed, keep talking.
 
-**Words used here, once:** *engagement* - one client's body of work, one folder. *Fieldbook* - that folder (`.fde/`), the record itself. *Brief vs reality* - what they said the problem was, and what it turned out to be. *Terrain* - their systems and org as you actually found them. *Trust signal* - green / amber / red on one relationship. *Receipts* - the dated line proving something was agreed. *Vault* - the Obsidian copy `fde vault` generates to read it all in one window.
-
 ---
 
 ## Project Structure
@@ -202,18 +200,23 @@ The record lives at `~/fde-engagements/<client>/.fde/` — not inside any vendor
 fdeops/
 ├── skills/fde/                 # the one skill
 │   ├── SKILL.md                #   router
-│   └── references/             #   31 methods + overlays
+│   └── references/             #   31 skills + overlays
 ├── .claude/commands/           # slash commands (each loads @fde)
-├── bin/fde.js                  # local CLI — git + files, no network
+├── .claude-plugin/             # Claude Code marketplace
+├── bin/                        # local CLI — git + files, no network
 ├── hooks/                      # session-start / session-stop / pre-compact
 ├── adapters/                   # Cursor, Gemini, Copilot, Codex pointers
 ├── templates/.fde/             # memory files created on bind
-└── docs/                       # usage, schema, install
+├── examples/                   # fictional walkthroughs
+├── mcp/                        # optional ingest + source recipes
+├── evals/                      # routing checks + CLI attack notes
+├── media/                      # recorded session (docs/USAGE.md)
+└── docs/                       # usage, schema, install, methodology
 ```
 
 ---
 
-## Why this exists
+## Why FDEOps?
 
 ### 1. The brief is wrong
 
@@ -273,7 +276,7 @@ Local only — `git` + files, no network, no telemetry. Plain markdown. The mode
 ## Principles
 
 - **The artifact is the memory** — producing the work and recording it are one action
-- **Methods, not autonomy** — the kit says what to check; judgment stays yours
+- **Skills, not autonomy** — the kit says what to check; judgment stays yours
 - **Brief is a hypothesis** — discover before building the wrong thing
 - **Evidence on every claim** — these files get defended in the room
 - **One customer, one folder** — context never bleeds
@@ -284,7 +287,7 @@ Local only — `git` + files, no network, no telemetry. Plain markdown. The mode
 
 **[Subash Natarajan](https://www.linkedin.com/in/subashn/)**. [Issues](https://github.com/suboss87/fdeops/issues) · [CONTRIBUTING.md](CONTRIBUTING.md)
 
-Methods should be **specific** (actionable steps), **verifiable** (an artifact in `.fde/`), and **minimal**. The `fde` CLI stays local-only.
+Skills should be **specific** (actionable steps), **verifiable** (an artifact in `.fde/`), and **minimal**. The `fde` CLI stays local-only.
 
 ## License
 

package/adapters/LOCAL-LLM.md

@@ -62,7 +62,7 @@ The model reads SKILL.md, routes to the right skill, and produces artifacts in y
 
 ## Model size recommendations
 
-The methodology is detailed (31 methods, routing logic, evidence format, memory contract). Larger models handle it better:
+The methodology is detailed (31 skills, routing logic, evidence format, memory contract). Larger models handle it better:
 
 | Model class | Experience |
 |-------------|-----------|

package/adapters/README.md

@@ -31,4 +31,4 @@ Defaults to the current directory if no path is given. Existing files are never
 
 ## The principle
 
-The adapter only tells the tool **where the brain is and how to behave**. All the method - the 31 methods, the overlays, the memory contract - lives once in `skills/fde/SKILL.md`. Update the brain, every platform gets it. That's why fdeops feels native in whatever the FDE already uses, without five things to keep in sync.
+The adapter only tells the tool **where the brain is and how to behave**. All 31 skills, the overlays, and the memory contract live once in `skills/fde/SKILL.md`. Update the brain, every platform gets it. That's why fdeops feels native in whatever the FDE already uses, without five things to keep in sync.

package/bin/check.js

@@ -182,24 +182,22 @@ ok(`router dispatch (${mentioned.length} reference targets verified) + memory co
   // the agent can never reach, advertised anyway.
   const unrouted = [...documented].filter(name => !routed.has(name))
   if (unrouted.length) {
-    fail(`docs/skills-reference.md documents method(s) SKILL.md never routes to: ${unrouted.join(', ')}`)
+    fail(`docs/skills-reference.md documents skill(s) SKILL.md never routes to: ${unrouted.join(', ')}`)
   }
   for (const rel of ['docs/skills.md', 'docs/skills-reference.md']) {
     const body = read(rel)
     // `-` is a word boundary, so \bingest\b matches inside `ingest-connect`:
     // a method could disappear from the docs behind a hyphenated sibling.
     const absent = [...documented].filter(name => !new RegExp(`(?<![\\w-])${name}(?![\\w-])`).test(body))
-    if (absent.length) fail(`${rel} does not list method(s): ${absent.join(', ')}`)
-    // every count claim, not just the first: an earlier sentence must not shadow
-    // a stale headline (or the reverse).
-    const claims = [...body.matchAll(/(\d+)\s+methods/g)].map(m => Number(m[1]))
-    if (!claims.length) fail(`${rel} must state how many methods it documents`)
+    if (absent.length) fail(`${rel} does not list skill(s): ${absent.join(', ')}`)
+    const claims = [...body.matchAll(/(\d+)\s+skills/g)].map(m => Number(m[1]))
+    if (!claims.length) fail(`${rel} must state how many skills it documents`)
     const wrong = [...new Set(claims.filter(n => n !== documented.size))]
     if (wrong.length) {
-      fail(`${rel} claims ${wrong.join('/')} methods; ${documented.size} are documented`)
+      fail(`${rel} claims ${wrong.join('/')} skills; ${documented.size} are documented`)
     }
   }
-  ok(`public method count is verifiable (${documented.size} documented, ${routed.size} routed)`)
+  ok(`public skill count is verifiable (${documented.size} documented, ${routed.size} routed)`)
 
   const refDir = path.join(root, 'skills', 'fde', 'references')
   const extra = fs.readdirSync(refDir).filter(f => f.endsWith('.md') && !mentioned.includes(f))
@@ -250,7 +248,7 @@ if (brokenLinks.length) fail(`README links to missing paths: ${brokenLinks.join(
 else ok('README links all resolve')
 
 for (const section of [
-  'How it works',
+  'How Skills Work',
   'Quick Start',
   'Engagement memory',
   'Who this is for',
@@ -282,9 +280,8 @@ if (!readme.includes('fde-engagements') || !/fdeops.*init.*engagement/i.test(rea
   fail('README must document fde-engagements + init flow')
 } else ok('README engagement path')
 
-// The contributor-only testing skill lives in .agents/skills/, so a bare
-// `skills add` installs it too. The advertised command must name the one skill
-// a field user wants.
+// The advertised command must name the one skill a field user wants.
+// Contributor CLI attack notes live in evals/testing-fieldbook.md, not as a skill.
 for (const m of readme.match(/^.*npx skills add .*$/gm) || []) {
   if (!m.includes('--skill fde')) {
     fail(`README skills-add command must pin --skill fde: ${m.trim()}`)
@@ -310,19 +307,7 @@ if (!read('skills/fde/SKILL.md').includes('npx --yes fdeops')) {
     fail(`SKILL.md description needs several "Use when …" triggers so it fires on intent (found ${triggers.length})`)
   } else if (/Use when the human says @fde or/.test(desc)) {
     fail('SKILL.md description must not gate on @fde - name the client-work intents first')
-  } else ok('SKILL.md description triggers on intent')
-}
-
-// Six invented words (fieldbook, terrain, reality, trust signal, receipts,
-// vault) carry the method. They were never defined in one place, so a stranger
-// met them scattered through the docs and guessed.
-{
-  const gloss = /Words used here[\s\S]{0,1200}/.exec(readme)
-  const missing = ['fieldbook', 'reality', 'terrain', 'trust signal', 'receipts', 'vault']
-    .filter(w => !gloss || !new RegExp(w, 'i').test(gloss[0]))
-  if (!gloss) fail('README must define its invented words once (a "Words used here" line)')
-  else if (missing.length) fail(`README glossary is missing: ${missing.join(', ')}`)
-  else ok('README defines its own vocabulary')
+  }   else ok('SKILL.md description triggers on intent')
 }
 
 if (!fs.existsSync(path.join(root, 'docs', 'USAGE.md'))) {
@@ -629,12 +614,34 @@ for (const manifest of ['plugin.json', 'mcp.json']) {
   else ok(`${manifest} published to npm`)
 }
 
+const skillDirs = []
 for (const entry of fs.readdirSync(path.join(root, 'skills'))) {
   const dir = path.join(root, 'skills', entry)
   if (!fs.statSync(dir).isDirectory()) continue
   if (!fs.existsSync(path.join(dir, 'SKILL.md'))) fail(`skills/${entry}/ has no SKILL.md - clients skip it`)
-  else ok(`skill ${entry} discoverable`)
+  else {
+    skillDirs.push(entry)
+    ok(`skill ${entry} discoverable`)
+  }
+}
+if (skillDirs.length !== 1 || skillDirs[0] !== 'fde') {
+  fail(`public tree ships one skill (skills/fde); found: ${skillDirs.join(', ') || '(none)'}`)
+} else ok('one public skill')
+
+function findSkillMd(dir, acc = []) {
+  for (const e of fs.readdirSync(dir, { withFileTypes: true })) {
+    if (e.name === '.git' || e.name === 'node_modules' || e.name === '.agents') continue
+    const p = path.join(dir, e.name)
+    if (e.isDirectory()) findSkillMd(p, acc)
+    else if (e.name === 'SKILL.md') acc.push(path.relative(root, p))
+  }
+  return acc
 }
+const skillFiles = findSkillMd(root)
+const allowedSkill = path.join('skills', 'fde', 'SKILL.md')
+if (skillFiles.length !== 1 || skillFiles[0] !== allowedSkill) {
+  fail(`only ${allowedSkill} may exist; found: ${skillFiles.join(', ') || '(none)'}`)
+} else ok('one SKILL.md')
 
 if (!fs.existsSync(path.join(root, '.github', 'ISSUE_TEMPLATE', 'bug_report.yml'))) {
   fail('GitHub issue template missing')

package/mcp/fdeops-ingest/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops-ingest-mcp",
-  "version": "3.15.0",
+  "version": "3.15.1",
   "private": true,
   "description": "Thin stdio MCP sink for FDEOps ingest (stage → propose → apply). Zero runtime dependencies.",
   "bin": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops",
-  "version": "3.15.0",
+  "version": "3.15.1",
   "description": "Forward deployed engineering skills for AI coding agents. Your agent forgets the client every morning - the sponsor, the promise, who signed off. FDEOps keeps that as dated markdown on your laptop: one @fde skill, a deterministic local CLI, and hooks that make it automatic. Claude Code plugin and any agent that loads skills.",
   "bin": {
     "fdeops": "bin/install.js",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "fdeops",
-  "version": "3.15.0",
+  "version": "3.15.1",
   "description": "Forward deployed engineering skills for AI coding agents: per-client memory in local .fde/ files, one @fde skill. Local-only, no network.",
   "author": {
     "name": "Subash Natarajan",