fdeops 3.16.0 → 3.20.0

package/bin/fde.js

@@ -408,6 +408,8 @@ const SECRET_PATTERNS = [
   { name: 'Slack token', re: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/ },
   { name: 'PEM private key', re: /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/ },
   { name: 'Bearer token', re: /\bBearer\s+[A-Za-z0-9._\-]{20,}\b/ },
+  { name: 'database URL', re: /\b[a-z][a-z0-9+.-]*:\/\/[^/\s:]+:[^/\s@]+@/i },
+  { name: 'api key assignment', re: /\b(?:api[_-]?key|secret|password)\s*=\s*\S{8,}/i },
 ]
 
 function findSecretHit(text) {
@@ -738,11 +740,11 @@ function appendLogEntry(eng, type, entry, opts = {}) {
 // degrading to "nothing found" rather than guessing when the shape does not
 // match. Never fabricate a number, a name, or a signal that is not in the text.
 
-const PHASES = ['land', 'discover', 'plan', 'ship', 'prove', 'close']
-const PHASE_ALIASES = { build: 'ship' } // legacy SDLC name; public map is ship
+const PHASES = ['land', 'discover', 'plan', 'ship', 'outcome', 'close']
+const PHASE_ALIASES = { build: 'ship', prove: 'outcome' } // legacy names; public map is ship / outcome
 const PHASE_LABELS = {
   land: 'Land', discover: 'Discover', plan: 'Plan',
-  ship: 'Ship', prove: 'Prove', close: 'Close',
+  ship: 'Ship', outcome: 'Outcome', close: 'Close',
 }
 function canonicalPhase(phase) {
   const p = String(phase).toLowerCase()
@@ -769,6 +771,89 @@ function firstLine(md, maxLen) {
   return ''
 }
 
+// reality.md is the one panel whose job is "not the brief". If the file does
+// not carry Working theory / Evidence / Differs from brief, do not scrape a
+// first line that might be the inherited brief and label it truth.
+function parseReality(md, maxLen) {
+  const theory = (md.match(/\*\*Working theory:\*\*\s*(.*)/i) || [])[1]
+  const hasSchema = /\*\*(Working theory|Evidence|Differs from brief how):\*\*/i.test(md)
+  const theoryText = (theory || '').trim()
+  if (theoryText) {
+    const line = theoryText.length > maxLen ? theoryText.slice(0, maxLen - 1).trim() + '…' : theoryText
+    return { line, missing: '' }
+  }
+  if (hasSchema) return { line: '', missing: '' }
+  const prose = firstLine(md, maxLen)
+  if (prose) {
+    return {
+      line: '',
+      missing: 'UNREADABLE - reality.md does not match the schema (Working theory / Evidence / Differs from brief). Not showing the brief as truth.',
+    }
+  }
+  return { line: '', missing: '' }
+}
+
+function appendValueLedgerRow(eng, cells) {
+  ensureMemoryGit(eng)
+  const p = path.join(eng, 'delivery.md')
+  let md = readEng(eng, 'delivery.md')
+  if (!md) md = '# Delivery log\n\n## Value ledger\n\n'
+  const date = new Date().toISOString().slice(0, 10)
+  const cols = []
+  for (let i = 0; i < 7; i++) cols.push((cells[i] || '').replace(/\|/g, '\\|').trim() || ' ')
+  const row = `| ${date} | ${cols.join(' | ')} |`
+  const lines = md.split('\n')
+  let inLedger = false
+  let lastTableLine = -1
+  for (let i = 0; i < lines.length; i++) {
+    if (/^##\s+Value ledger\b/i.test(lines[i])) { inLedger = true; continue }
+    if (inLedger && /^##\s+/.test(lines[i])) break
+    if (inLedger && /^\|/.test(lines[i].trim())) lastTableLine = i
+  }
+  if (lastTableLine === -1) md = appendUnderSection(md, 'Value ledger', row)
+  else {
+    lines.splice(lastTableLine + 1, 0, row)
+    md = lines.join('\n')
+  }
+  withFileLock(p, () => { atomicWriteFile(p, md.endsWith('\n') ? md : md + '\n') })
+  recordLastWrite(eng, 'delivery.md', row)
+  commitMemory(eng, 'log delivery', { files: ['delivery.md'] })
+}
+
+function retireOpenRisks(eng, needle) {
+  const n = String(needle || '').toLowerCase()
+  if (!n) return 0
+  const p = path.join(eng, 'risks.md')
+  const md = readEng(eng, 'risks.md')
+  if (!md) return 0
+  const retired = []
+  const kept = []
+  let inRetired = false
+  for (const raw of md.split('\n')) {
+    const t = raw.trim()
+    if (/^#{1,6}\s+Retired\b/i.test(t)) { inRetired = true; kept.push(raw); continue }
+    if (!inRetired) {
+      const m = t.match(/^-\s*\[\d{4}-\d{2}-\d{2}\]\s*(?:\[@[^\]]+\]\s*)?(.*)$/)
+      if (m && m[1].toLowerCase().includes(n)) {
+        retired.push(raw)
+        continue
+      }
+    }
+    kept.push(raw)
+  }
+  if (!retired.length) return 0
+  let out = kept.join('\n')
+  if (!/^#{1,6}\s+Retired\b/im.test(out)) out = out.replace(/\n*$/, '\n\n## Retired\n')
+  const stamp = new Date().toISOString().slice(0, 10)
+  const block = retired.map(l => {
+    const body = l.trim().replace(/^-\s*/, '')
+    return `- [${stamp}] (retired) ${body}`
+  }).join('\n')
+  out = appendUnderSection(out, 'Retired', block)
+  withFileLock(p, () => { atomicWriteFile(p, out.endsWith('\n') ? out : out + '\n') })
+  return retired.length
+}
+
 // Engagement age from the .fde/ directory's own birth time - hidden (not
 // fabricated as 0) on filesystems that do not report birthtime.
 function daysElapsed(eng) {
@@ -817,6 +902,7 @@ function parseMdTable(md) {
 function colIndex(headers, rx) { return headers.findIndex(h => rx.test(h)) }
 
 const {
+  personFromSignalText,
   signalSubjectKey,
   nextActionLine,
   computeSignals,
@@ -856,6 +942,8 @@ function parseSignalHistoryEntries(eng) {
 }
 
 function displayNameFromSignalText(text) {
+  const person = personFromSignalText(text)
+  if (person) return person
   const t = String(text).trim()
   const proper = t.match(/^([A-Z][a-z]+(?:\s+[A-Z][a-z]+)?)/)
   if (proper) return proper[1]
@@ -885,11 +973,11 @@ function extractStakeholders(eng) {
         const stance = stanceIdx !== -1 ? (cs[stanceIdx] || '').trim() : ''
         const note = notesIdx !== -1 ? (cs[notesIdx] || '').trim() : ''
         const words = name.replace(/\([^)]*\)/g, '').split(/\s+/).filter(w => w && !/^(dr|mr|mrs|ms)\.?$/i.test(w))
-        const frag = (words[0] || '').replace(/[^a-z0-9]/gi, '')
+        const nameKey = signalSubjectKey(name)
         let signal = null, matchedDate = null
-        if (frag.length >= 3) {
+        if (nameKey) {
           for (const h of history) {
-            if (h.text.trim().toLowerCase().startsWith(frag.toLowerCase()) && (!matchedDate || h.date >= matchedDate)) {
+            if (signalSubjectKey(h.text) === nameKey && (!matchedDate || h.date >= matchedDate)) {
               signal = h.signal; matchedDate = h.date
             }
           }
@@ -1317,11 +1405,14 @@ function cmdLog(args) {
     if (!['red', 'amber', 'green'].includes(signal)) { console.error('usage: fde log contact <text> --signal red|amber|green'); process.exit(1) }
     args.splice(sigIdx, 2)
   }
+  let retire = false
+  const retireIdx = args.indexOf('--retire')
+  if (retireIdx !== -1) { retire = true; args.splice(retireIdx, 1) }
   const type = args[0]; const text = args.slice(1).join(' ')
   const eng = resolveEngagement({ forWrite: true })
   if (!eng) { console.error('no engagement - run: fde resume --init <name>'); process.exit(2) }
 
-  // fde log phase <land|discover|plan|ship|prove|close> - advances portfolio phase
+  // fde log phase <land|discover|plan|ship|outcome|close> - advances portfolio phase (prove → outcome)
   if (type === 'phase') {
     const phase = canonicalPhase((text || '').toLowerCase().trim())
     if (!PHASES.includes(phase)) {
@@ -1333,11 +1424,26 @@ function cmdLog(args) {
     return
   }
 
-  if (!LOG_FILES[type] || !text) { console.error(`usage: fde log <decision|risk|delivery|contact> <text> [--signal red|amber|green] [--force]\n       fde log phase <${PHASES.join('|')}>\n       fde log --undo`); process.exit(1) }
+  if (!LOG_FILES[type] || !text) { console.error(`usage: fde log <decision|risk|delivery|contact> <text> [--signal red|amber|green] [--force]\n       fde log risk --retire <text>\n       fde log phase <${PHASES.join('|')}>\n       fde log --undo`); process.exit(1) }
   if (signal && type !== 'contact') { console.error('--signal only applies to: fde log contact'); process.exit(1) }
+  if (retire && type !== 'risk') { console.error('--retire only applies to: fde log risk'); process.exit(1) }
   const hit = findSecretHit(text)
   if (hit && !force) { refuseSecret('log text', hit); process.exit(1) }
   if (hit && force) console.error(`warning: logging possible ${hit} (--force)`)
+  if (retire) {
+    const n = retireOpenRisks(eng, text)
+    if (!n) { console.error(`no open risk matched ${JSON.stringify(text)}`); process.exit(1) }
+    const hash = commitMemory(eng, 'retire risk', { files: ['risks.md'] })
+    console.log(`retired ${n} risk(s) → risks.md${hash ? ` @${hash}` : ''}`)
+    return
+  }
+  if (type === 'delivery' && text.includes('|')) {
+    const cells = text.split('|').map(s => s.trim())
+    appendValueLedgerRow(eng, cells)
+    const hash = memoryHead(eng)
+    console.log(`logged → delivery.md (value ledger)${hash ? ` @${hash}` : ''}`)
+    return
+  }
   const date = new Date().toISOString().slice(0, 10)
   const entry = datedEntry(eng, date, text, signal || '')
   appendLogEntry(eng, type, entry)
@@ -1651,9 +1757,11 @@ function cmdDebrief(args) {
     input = readDebriefInput(args)
   }
 
-  if (smart) {
+    if (smart) {
     const { proposePath, clean, blocks } = writeProposal(eng, smartProposeText(input))
     console.log('SMART PROPOSE (heuristic - review before apply; no new facts invented beyond line rewrites)\n')
+    console.log('Prefix vocabulary (lines that route): decision:  risk:  delivery:  contact:  next:')
+    console.log('Everything else → context.md. Keep the prefixes; the preview gate stays.\n')
     routeDebriefInput(eng, clean, { dry: true, force, sealed: blocks })
     if (!apply) {
       console.log(`\nproposal saved → ${proposePath}`)
@@ -2129,7 +2237,7 @@ function collectDoctorIssues(eng) {
     }
   }
   const success = readClean(eng, 'success.md')
-  if (!firstLine(success, 80)) issues.push('success.md has no stated done-definition - fill before plan/build')
+  if (!firstLine(success, 80)) issues.push('success.md has no stated done-definition - fill before plan/ship')
   const ctxMd = readClean(eng, 'context.md')
   if (!sectionBody(ctxMd, 'Next action', { lastNonEmpty: true })) {
     issues.push('no ## Next action in context.md - Monday morning has nothing to drive')
@@ -2170,7 +2278,7 @@ function collectDoctorIssues(eng) {
   }
   // Failure-path (exception-led operating map): required once past discover.
   // Land seeds; discover fills; plan+ without a real break→owner row is wallpaper.
-  if (/^(plan|ship|prove|close)$/.test(s.phase) && !hasOperatingMapContent(eng)) {
+  if (/^(plan|ship|outcome|close)$/.test(s.phase) && !hasOperatingMapContent(eng)) {
     issues.push(
       `phase is ${s.phase} with empty operating map - fill terrain.md ## Operating map (exception-led): break → who notices → workaround → evidence`
     )
@@ -2182,6 +2290,8 @@ function collectDoctorIssues(eng) {
       `${aliases.length} stakeholder identity cluster(s) (e.g. "${sample}") - same person under different names? consolidate in stakeholders.md`
     )
   }
+  const reality = parseReality(readClean(eng, 'reality.md'), 220)
+  if (reality.missing) issues.push(reality.missing)
   return issues
 }
 
@@ -2484,7 +2594,7 @@ function cmdRedact(args) {
     console.log('nothing changed')
     return
   }
-  const hash = commitMemory(eng, `redact ${term.slice(0, 40)}`, { files: touched })
+  const hash = commitMemory(eng, `redact ${hits.length} line(s)`, { files: touched })
   console.log(`redacted ${hits.length} line(s) in ${touched.join(', ')}${hash ? ` @${hash}` : ''}`)
   console.log('rotate the real credential if this was a secret - history may still contain it')
 }
@@ -2585,6 +2695,15 @@ function cmdGarden(args) {
       sessionBlocks,
     })
   }
+  const dirty = memoryDirtyManual(eng)
+  if (dirty.length) {
+    proposals.push({
+      id: 'bless-manual',
+      kind: 'apply',
+      text: `Bless ${dirty.length} hand-written file(s) into the ledger: ${dirty.slice(0, 5).join(', ')}${dirty.length > 5 ? '…' : ''}`,
+      files: dirty,
+    })
+  }
   if (!proposals.length) {
     console.log('\nNothing to tidy.')
     return
@@ -2613,6 +2732,12 @@ function cmdGarden(args) {
       }
       continue
     }
+    if (p.id === 'bless-manual') {
+      applied++
+      for (const f of p.files) touched.add(f)
+      console.log(`applied: bless ${p.files.join(', ')}`)
+      continue
+    }
     if (p.id !== 'archive-sessions') continue
     const cutDates = new Set(p.sessionBlocks.map(b => b.date))
     const keep = []
@@ -2744,6 +2869,10 @@ function cmdStatus(args) {
     }
   }
   if (!all) console.log('\n(current engagement only - pass --all for the full portfolio)')
+  if (!all) {
+    const current = resolveEngagement()
+    if (current) for (const line of hygieneTriageLines(current)) console.log(line)
+  }
   console.log('\ntrust: worst active [signal:x] across stakeholders (latest per person) - a green from B cannot clear an amber/red on A; keyword heuristic only when none exists.')
 }
 
@@ -2801,7 +2930,9 @@ function cmdDashboard(args) {
     // line instead of sharing one, a shorter cap just meant more sentences
     // cut off mid-thought for no reason.
     e.brief = firstLine(readClean(e.dir, 'brief.md'), 220)
-    e.reality = firstLine(readClean(e.dir, 'reality.md'), 220)
+    const reality = parseReality(readClean(e.dir, 'reality.md'), 220)
+    e.reality = reality.line
+    e.realityMissing = reality.missing
     e.overlay = detectOverlay(e.dir)
     e.days = daysElapsed(e.dir)
     e.phaseLabel = phaseLabel(e.signals.phase)
@@ -2839,6 +2970,10 @@ function cmdDashboard(args) {
   }
   console.log(`fieldbook → ${outPath}`)
   console.log(`${engagements.length} engagement(s) rendered · ${counts.RED} red / ${counts.amber} amber / ${counts.green} green · 0 tokens (pure render)`)
+  if (!all) {
+    const current = resolveEngagement()
+    if (current) for (const line of hygieneTriageLines(current)) console.log(line)
+  }
   if (args.includes('--open')) {
     // arg-array form: the path is never interpolated into a shell string.
     const [bin, pre] = process.platform === 'darwin' ? ['open', []]
@@ -2985,7 +3120,8 @@ function cmdVault(args) {
     const ctx = readClean(e.dir, 'context.md')
     e.next = (sectionBody(ctx, 'Next action', { lastNonEmpty: true }).split('\n').find(l => l.trim()) || '').trim()
     e.brief = firstLine(readClean(e.dir, 'brief.md'), 400)
-    e.reality = firstLine(readClean(e.dir, 'reality.md'), 400)
+    const reality = parseReality(readClean(e.dir, 'reality.md'), 400)
+    e.reality = reality.line || reality.missing
     e.overlay = detectOverlay(e.dir)
     e.days = daysElapsed(e.dir)
     e.stakeholders = extractStakeholders(e.dir)
@@ -3186,19 +3322,20 @@ function printUsage() {
   fde resume --init <name> create + bind engagement for this workspace (rebind replaces)
   fde resume --bind        show what this workspace is bound to, and what resolves
   fde triage               TRIAGE block only (hooks / Cursor session entry)
-  fde log <type> <text>    append decision|risk|delivery|contact (contact takes --signal red|amber|green; --force to allow secret-like text)
-  fde log phase <phase>    set engagement phase (land|discover|plan|ship|prove|close)
+  fde log <type> <text>    append decision|risk|delivery|contact (contact takes --signal red|amber|green; delivery "a|b|c" writes the value ledger; --force to allow secret-like text)
+  fde log risk --retire    move matching open-risk bullets to ## Retired
+  fde log phase <phase>    set engagement phase (land|discover|plan|ship|outcome|close)
   fde log --undo           remove the last CLI log/debrief entry from memory
   fde debrief [file]       meeting notes → memory (prefixed lines; --dry-run; --force)
-  fde debrief --smart      heuristic propose (prefix + light keywords); agent routes, CLI gates → --apply
+  fde debrief --smart      heuristic propose (prints decision:/risk:/delivery:/contact:/next:); --apply after confirm
   fde ingest stage …       stage raw pull into <engagement>/.inbox/ (not .fde/)
   fde ingest list          list staged inbox items
   fde ingest propose <id>  smart-propose a staged item → .debrief-propose (confirm before apply)
   fde ingest apply         same as: fde debrief --apply
   fde prep [label]         grounded walk-in brief from existing .fde/ only
-  fde doctor               lint engagement memory (stale signals, gaps)
-  fde redact <term>        preview/remove lines containing a buried term (pass --apply to commit)
-  fde tidy [--apply]       propose safe consolidations (contract: no new facts; git-reversible)
+  fde doctor               lint engagement memory (stale signals, gaps). status/dashboard/resume print the same issues
+  fde redact <term>        preview/remove lines containing a buried term (pass --apply to commit; subject never repeats the term)
+  fde tidy [--apply]       propose consolidations; blesses hand-written dirty files when you apply
   fde owner [set email]    who keeps this engagement record
   fde receipts <term>      "what did we agree?" with dates
   fde status [--all]       value ledger, then trust (pass --all for full portfolio)

package/bin/lib/render.js

@@ -467,10 +467,10 @@ ${e.lastSession ? `<div class="fb-now-session">${inlineMd(e.lastSession)}</div>`
   // needed vs what's actually true. Squeezed onto one truncated line, that
   // contrast disappears. Each gets its own line, its own room to finish a
   // thought, not a race to fit before an ellipsis.
-  const whyBlock = (e.brief || e.reality) ? `<div class="fb-block">
+  const whyBlock = (e.brief || e.reality || e.realityMissing) ? `<div class="fb-block">
 <div class="fb-sec">Why</div>
 ${e.brief ? `<p class="fb-why"><span class="t-faint">What they asked for:</span> ${inlineMd(e.brief)}</p>` : ''}
-${e.reality ? `<p class="fb-why fb-why-reality"><span class="fb-accent-label">What's actually true:</span> ${inlineMd(e.reality)}</p>` : ''}
+${e.realityMissing ? `<p class="fb-why fb-why-missing"><span class="fb-accent-label">What's actually true:</span> ${escapeHtml(e.realityMissing)}</p>` : e.reality ? `<p class="fb-why fb-why-reality"><span class="fb-accent-label">What's actually true:</span> ${inlineMd(e.reality)}</p>` : ''}
 </div>` : ''
 
   // Vitals: a fixed field-facing gut-check panel, not a Movement block that

package/bin/lib/trust.js

@@ -48,12 +48,46 @@ function createTrustApi(deps) {
     return { ok: true, warn: '' }
   }
 
-  // Subject key for a signal-history line - first real name word (same spirit as
-  // extractStakeholders). A green about Randy must not clear an amber about Denise.
+  // Event labels are not people. "INCIDENT: … Marcus escalated" must key on
+  // Marcus, or a recovered engagement stays RED in front of the sponsor.
+  const SIGNAL_EVENT_KEYS = new Set([
+    'incident', 'recovery', 'alert', 'update', 'note', 'status', 'escalation',
+    'blocker', 'outage', 'fire', 'issue', 'sev', 'sev1', 'sev2', 'p1', 'p2', 'p3',
+    'resolved', 'risk', 'decision', 'delivery', 'contact',
+  ])
+
+  function personFromSignalText(text) {
+    let cleaned = String(text || '')
+      .replace(/\[@[^\]]+\]/g, '')
+      .replace(/\([^)]*\)/g, '')
+      .replace(/\[signal:[^\]]+\]/gi, '')
+      .replace(/\[\d{4}-\d{2}-\d{2}\]/g, '')
+      .replace(/^([A-Z]{2,}[A-Z0-9_-]*):?\s+/, '')
+      .trim()
+    const names = cleaned.match(/\b[A-Z][a-z]{1,20}(?:\s+[A-Z][a-z]{1,20})?\b/g) || []
+    for (const name of names) {
+      const first = name.split(/\s+/)[0].toLowerCase()
+      if (SIGNAL_EVENT_KEYS.has(first)) continue
+      return name
+    }
+    return ''
+  }
+
+  // Subject key for a signal-history line. Prefer a proper name in the bullet.
+  // A green about Randy must not clear an amber about Denise.
   // Strip author tags [@email-local] so attribution never becomes the subject key.
   function signalSubjectKey(text) {
+    const person = personFromSignalText(text)
+    if (person) {
+      const frag = person.split(/\s+/)[0].replace(/[^a-z0-9]/gi, '').toLowerCase()
+      if (frag.length >= 3) return frag
+    }
     const cleaned = String(text).replace(/\[@[^\]]+\]/g, '').replace(/\([^)]*\)/g, '')
-    const words = cleaned.split(/\s+/).filter(w => w && !/^(dr|mr|mrs|ms)\.?$/i.test(w))
+      .replace(/^([A-Z]{2,}[A-Z0-9_-]*):?\s+/, '')
+    const words = cleaned.split(/\s+/).filter(w => {
+      const n = w.replace(/[^a-z0-9]/gi, '').toLowerCase()
+      return n.length >= 3 && !SIGNAL_EVENT_KEYS.has(n) && !/^(dr|mr|mrs|ms)$/i.test(w)
+    })
     const frag = (words[0] || '').replace(/[^a-z0-9]/gi, '').toLowerCase()
     return frag.length >= 3 ? frag : ('anon:' + cleaned.slice(0, 48).toLowerCase())
   }
@@ -64,9 +98,11 @@ function createTrustApi(deps) {
     if (!m) return '?'
     const raw = m[1].replace(/\*/g, '').trim()
     if (!raw || /\|/.test(raw) || /^unset$/i.test(raw) || /^[\[(]/.test(raw)) return '?'
-    const one = raw.toLowerCase().match(/^(land|discover|plan|build|ship|prove|close)\b/)
+    const one = raw.toLowerCase().match(/^(land|discover|plan|build|ship|prove|outcome|close)\b/)
     if (!one) return '?'
-    return one[1] === 'build' ? 'ship' : one[1]
+    if (one[1] === 'build') return 'ship'
+    if (one[1] === 'prove') return 'outcome'
+    return one[1]
   }
 
   function countOpenRisks(eng) {
@@ -196,6 +232,7 @@ function createTrustApi(deps) {
 
   return {
     stakeholdersMemoryHealth,
+    personFromSignalText,
     signalSubjectKey,
     parsePhase,
     countOpenRisks,

package/mcp/fdeops-ingest/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops-ingest-mcp",
-  "version": "3.16.0",
+  "version": "3.20.0",
   "private": true,
   "description": "Thin stdio MCP sink for FDEOps ingest (stage → propose → apply). Zero runtime dependencies.",
   "bin": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops",
-  "version": "3.16.0",
+  "version": "3.20.0",
   "description": "Forward deployed engineering skills for AI coding agents. Your agent forgets the client every morning - the sponsor, the promise, who signed off. FDEOps keeps that as dated markdown on your laptop: one @fde skill, a deterministic local CLI, and hooks that make it automatic. Claude Code plugin and any agent that loads skills.",
   "bin": {
     "fdeops": "bin/install.js",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "fdeops",
-  "version": "3.16.0",
+  "version": "3.20.0",
   "description": "Forward deployed engineering skills for AI coding agents: per-client memory in local .fde/ files, one @fde skill. Local-only, no network.",
   "author": {
     "name": "Subash Natarajan",

package/skills/fde/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: fde
-description: Keeps the engagement record for client work. Use when they name a client or stakeholder. Use when they debrief a meeting or paste notes. Use when they ask what was agreed. Use when they run a POC, slice a feature on the client's codebase, prove it on their staging, or need evals before a model acts. Use when they prep a readout, when trust shifts, or they say @fde. Route and run the local fde CLI (or npx --yes fdeops). Never ask them to type commands. Not for ordinary code edits in an unbound repo.
+description: Keeps the engagement record for client work. Use when they name a client or stakeholder. Use when they debrief a meeting or paste notes. Use when they ask what was agreed. Use when they run a POC, change the client's codebase, prove it on their staging, go live, or need evals before a model acts. Use when they prep a readout, when trust shifts, or they say @fde. Route and run the local fde CLI (or npx --yes fdeops). Never ask them to type commands. Not for ordinary code edits in an unbound repo.
 ---
 
 # @fde
 
 ## Purpose
 
-The **engagement record** for one client, from first meeting to signed outcome. One skill; six stages (land → close). You route; they never pick a skill. Confirm, then write `.fde/`. The workspace still compiles and commits. `@fde` does not leave.
+The **engagement record** for one client, from first meeting to signed outcome. One skill; six stages (land → close). Same map at any scale, on greenfield or brownfield, in any industry (overlays). You route; they never pick a skill. Confirm, then write `.fde/`. The workspace still compiles and commits. `@fde` does not leave.
 
 ## When to use
 
@@ -17,7 +17,7 @@ The **engagement record** for one client, from first meeting to signed outcome.
 
 ## When NOT to use
 
-A one-line typo or compile error in a file that will not ship. On a bound client: stay here for POC, slice, characterisation, eval, go-live, rollback, and acceptance.
+A one-line typo or compile error in a file that will not ship. On a bound client: stay here for POC, characterisation, the change on their repo, eval, go-live, rollback, and acceptance.
 
 ## Use these first
 
@@ -32,15 +32,15 @@ After a meeting: `fde debrief --smart` → confirm → `--apply`. Walk-in: `fde
 
 ## Ground loop
 
-On someone else's site the work is not "write code, remember later." Every slice stays on `@fde`:
+On someone else's site the work is not "write code, remember later." Every change on a bound client stays on `@fde`:
 
 1. **Name it** in `decisions.md` (plan) or kill it in a day (poc).
-2. **Characterise their code** before you change it (thin-slices). Their tests, their runner.
-3. **Prove it where they live.** Staging they operate, a screen the signer in `success.md` can reject.
-4. **If a model judges:** `evals.md` Verdict SHIP before the slice is done (eval-pack).
-5. **Log delivery.** Outcome is promised → measured → accepted, not a green CI.
+2. **Characterise their code** before you change it. Brownfield: their tests, their runner. Greenfield: the empty tree, first path they can click.
+3. **Prove it on their staging.** Staging they operate, a screen the signer in `success.md` can reject.
+4. **If a model judges:** `evals.md` Verdict SHIP before that change is done (eval-pack).
+5. **Log delivery.** Outcome is promised → measured → accepted, not a green CI. Then go live with a rollback you have run (`ship`).
 
-A throwaway file can skip the loop. A client slice cannot.
+A throwaway file can skip the loop. Bound client work cannot.
 
 ## Human surface vs agent plumbing
 
@@ -77,7 +77,7 @@ Writes need a bind (`FDEOPS_ENGAGEMENT` or registry). Never install fdeops on in
 
 ## The memory contract
 
-1. **On entry:** `fde resume` only. Pull other `.fde/` files when the method needs them.
+1. **On entry:** `fde resume` only. Pull other `.fde/` files when the skill needs them.
 2. **Deliverable = memory.** The work *is* the `.fde/` file. The reference names which one.
 3. **Evidence.** Every claim has a source. Traceable beats plausible.
 4. **No invented facts.** People, quotes, meetings, numbers: they said it or the repo shows it. Else `unknown - ask: <question>`.
@@ -107,84 +107,83 @@ CLI is local (`git` + files, no network). You see their code only when they poin
 
 Direct. Their words. No "Certainly." Playback 2-4 lines, then act. One question only when a missing fact changes the next move.
 
-New embed: sprint / standard / programme changes depth, not which methods exist. Before first code: safe place to break things, plus AI-code policy. Before go-live: who needs to know, what's the rollback. Before a sponsor artifact: as-is or gut-check first.
+New embed: sprint / standard / programme changes depth, not which skills exist. Before first code: safe place to break things, plus AI-code policy. Before go-live: who needs to know, what's the rollback. Before a sponsor artifact: as-is or gut-check first.
 
 Muddy signal: name it ("discover or rescue - leaning X"). Never a phase-picker interview. Default: land if new, audit if takeover.
 
 ## Routing - 6 stages
 
-Read **one** reference and follow it. Do not improvise from memory.
+Work names (engage, diagnose, align, deliver, realize, transfer) are the same map. Read **one** reference and follow it. Do not improvise from memory.
 
 ### Land
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
-| Starting fresh, new customer, first meeting, just got the brief | land | `references/land.md` |
+| Engage, onboarding, starting fresh, new customer, first meeting, just got the brief, set product strategy, define success metrics, scope the brief | land | `references/land.md` |
 | Taking over, previous consultant left, joining mid-project | audit | `references/audit.md` |
-| Need to understand who matters, who decides, who blocks quietly | who-decides | `references/who-decides.md` |
+| Need to understand who matters, who decides, map decision rights, who blocks quietly | who-decides | `references/who-decides.md` |
 | Need to earn access, navigate AI policy, build credibility | earn-trust | `references/earn-trust.md` |
-| "Also can you…", scope expanding, timeline unchanged | hold-scope | `references/hold-scope.md` |
+| "Also can you…", scope expanding, timeline unchanged, hold scope, scope the brief after kickoff | hold-scope | `references/hold-scope.md` |
 
 ### Discover
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
-| Don't know the real problem, brief feels wrong, shadow processes | discover | `references/discover.md` |
-| The brief feels too neat, assumptions untested, "we just need…" | test-assumptions | `references/test-assumptions.md` |
-| Multiple use cases competing, "we want to do everything" | score-use-cases | `references/score-use-cases.md` |
-| Need to validate a direction, prototype, demo to de-risk, **POC**, spike, killer assumption | poc | `references/poc.md` |
+| Diagnose, don't know the real problem, brief feels wrong, shadow processes, frame discovery, understand the problem space, data not ready, data estate, catalog the data | discover | `references/discover.md` |
+| The brief feels too neat, assumptions untested, "we just need…", test assumptions | test-assumptions | `references/test-assumptions.md` |
+| Multiple use cases competing, "we want to do everything", score use cases | score-use-cases | `references/score-use-cases.md` |
+| Need to validate a direction, prototype, demo to de-risk, **POC**, spike, killer assumption, validate the solution, build prototype | poc | `references/poc.md` |
 
 ### Plan
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
-| Break this down, what order, sequence the build | plan | `references/plan.md` |
-| Sponsor needs justification, need to defend budget or timeline | business-case | `references/business-case.md` |
-| Significant decision, multiple approaches, "what should we do?" | three-options | `references/three-options.md` |
-| 20 things are "urgent," need to pick the 3 that matter | pick-three | `references/pick-three.md` |
+| Align, break this down, what order, sequence the build, plan the roadmap, create user stories, write the tasks | plan | `references/plan.md` |
+| Sponsor needs justification, need to defend budget or timeline, build the business case | business-case | `references/business-case.md` |
+| Significant decision, multiple approaches, "what should we do?", generate solutions, generate options | three-options | `references/three-options.md` |
+| 20 things are "urgent," need to pick the 3 that matter, prioritize three | pick-three | `references/pick-three.md` |
 
 ### Ship
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
-| Large feature, need visible progress every 2-3 days, slice it, characterise their tests, POC follow-through | thin-slices | `references/thin-slices.md` |
-| What could go wrong, touching shared infrastructure, need to assess impact | what-breaks | `references/what-breaks.md` |
-| Production down, urgent - OR stakeholder gone quiet, trust slipping | rescue | `references/rescue.md` |
-| Ready to deploy, going live, pre-flight check | ship | `references/ship.md` |
-| Review this change, is it safe, does it match what we agreed | review | `references/review.md` |
+| What could go wrong, touching shared infrastructure, need to assess impact, assess impact, provision, IaC, shared infra | what-breaks | `references/what-breaks.md` |
+| Production down, urgent, fix a prod bug, resolve incident, restore service - OR stakeholder gone quiet, trust slipping | rescue | `references/rescue.md` |
+| Deliver, start building, update their checkout, first module, visible progress, their tests, POC follow-through, ready to deploy, going live, pre-flight, deliver the increment, build the increment, create the launch plan, design their UI | ship | `references/ship.md` |
+| Review this change, review the pull request, is it safe, does it match what we agreed | review | `references/review.md` |
 | Diff grew / scope creep in the PR / "did we only build what we said" / KEEP JUSTIFY SPLIT DROP | review (+ ship if going live) | `references/review.md` Stage 1 · `references/ship.md` Intent vs diff |
 | Wrap the session / share the thinking / catch teammates up / before I open the PR | (memory contract - session digest) | SKILL.md **On exit** - write TL;DR + decisions/why into `.fde/`; no transcript sync |
-| "We can always revert" - need to actually test the escape route | rollback | `references/rollback.md` |
+| "We can always revert" - need to actually test the escape route, rehearse rollback | rollback | `references/rollback.md` |
 
-### Prove
+### Outcome
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
-| Weekly update due, "need to send the sponsor something" | readout | `references/readout.md` |
-| Demo coming up, show-and-tell, exec walkthrough | demo-prep | `references/demo-prep.md` |
-| Just out of a meeting, raw notes, "they said…", "debrief" | debrief | the debrief verb (above) + `references/debrief.md` |
+| Realize, weekly update due, "need to send the sponsor something", report the outcome | readout | `references/readout.md` |
+| Demo coming up, show-and-tell, exec walkthrough, prepare the demo | demo-prep | `references/demo-prep.md` |
+| Just out of a meeting, raw notes, "they said…", "debrief", user interviews, workshop notes, capture the meeting | debrief | the debrief verb (above) + `references/debrief.md` |
 | Make sure we're up to date, pull what's relevant, fetch from Granola/Slack/Gmail/transcript | ingest | `references/ingest.md` (capability check → stage → propose → confirm → apply) |
 | Connect a new MCP / connect Granola Slack or Notion / what can you pull | connect | `references/connect.md` (+ `mcp/recipes/`) |
 | Prep me for a meeting / walk-in brief / "what should I know before I talk to…" | - | run `fde prep "<label>"`, present in plain language |
-| Sponsor's boss needs a summary, board update, justify continued investment | board-memo | `references/board-memo.md` |
-| Status across all my customers | dashboard | `references/dashboard.md` |
+| Sponsor's boss needs a summary, board update, brief the board, justify continued investment | board-memo | `references/board-memo.md` |
+| Status across all my customers, view the portfolio | dashboard | `references/dashboard.md` |
 
 ### Close
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
-| Juggling 2+ customers, losing track, context-switching | switch-clients | `references/switch-clients.md` |
-| Wrapping up, handoff, making yourself replaceable | close | `references/close.md` |
-| Engagement ending, team needs to operate without you | runbook | `references/runbook.md` |
-| Something worked well and will apply to future engagements | encode-pattern | `references/encode-pattern.md` |
-| "Red-team this," "stress-test my plan," poke holes, what am I missing | red-team | `references/red-team.md` |
+| Juggling 2+ customers, losing track, context-switching, switch engagements | switch-clients | `references/switch-clients.md` |
+| Transfer, wrapping up, handoff, making yourself replaceable, transfer operations | close | `references/close.md` |
+| Engagement ending, team needs to operate without you, write the runbook | runbook | `references/runbook.md` |
+| Something worked well and will apply to future engagements, encode the pattern | encode-pattern | `references/encode-pattern.md` |
+| "Red-team this," "stress-test my plan," poke holes, challenge the plan, what am I missing | red-team | `references/red-team.md` |
 | "What did we agree about X?", scope dispute, receipts | - | run `fde receipts <term>`, answer with dates |
 
 **Overlays - activate alongside any skill on signal, don't wait to be told:**
 
 | Signal | Overlay |
 |--------|---------|
-| AI, ML, LLM, model, embeddings, RAG, agents, fine-tuning, inference, drift | `references/ai.md` |
+| AI, ML, LLM, model, embeddings, RAG, agents, fine-tuning, inference, drift, train the model | `references/ai.md` |
 | Golden set, eval suite, eval pack, pass/fail before AI ship, HITL gate for model, POC the model | `references/eval-pack.md` (+ `ai.md`) |
 | Deck, slides, report, governance framework, compliance pack, ADR, PDF | `references/artifacts.md` |
 | Patient data, PHI, HIPAA, EHR, clinical | `references/healthcare.md` |
@@ -196,7 +195,9 @@ Ready to build with no `terrain.md` / plan: discover or plan first. Takeover wit
 ## Principles
 
 - Never ask the FDE to pick a phase. That's your job.
-- Ground loop on a bound client: name → characterise → prove where they live → log. Do not hand the slice to a generic coding pack.
+- Same six stages at any scale. Overlays carry the industry. Greenfield and brownfield change the first move inside ship, not the map.
+- Ground loop on a bound client: name → characterise → prove on their staging → go live → log. Do not hand their repo to a generic coding pack.
+- Do not call a change done until the signer in `success.md` can reject it on staging they operate.
 - Read `context.md` before speaking. One sharp question - never a barrage.
 - Never invent people, meetings, or numbers - `unknown - ask:` beats a polished lie.
 - Every phase ends with its artifact written. No artifact, no "done."