fdeops 3.29.0 → 3.30.0

package/README.md

@@ -56,6 +56,8 @@ Read-only HTML of the record - promised, measured, accepted, and evidence. Regen
 /plugin install fdeops@fdeops
 ```
 
+Make it fit your day: `fde setup` asks three choices for your daily overview, context size, and report masking. [First-use setup](docs/USAGE.md#make-fdeops-fit-your-day).
+
 The plugin adds session hooks and the slash commands below. Skill-only installation does not add hooks. See the [installation guide](docs/install.md) for setup details.
 
 </details>

package/bin/fde.js

@@ -46,8 +46,26 @@ const ENGAGEMENTS_ROOT = ((process.env.FDEOPS_ENGAGEMENTS_ROOT || '').trim().rep
   || path.join(HOME, 'fde-engagements')
 const REGISTRY = path.join(ENGAGEMENTS_ROOT, '.registry')
 const masking = require('./lib/masking').createMasking(ENGAGEMENTS_ROOT)
+const setup = require('./lib/setup')
+const setupStore = setup.createSetup(ENGAGEMENTS_ROOT)
+let preferences = setup.DEFAULTS
+function contextBudget(args) {
+  return context.budgetArgs(args, preferences.context === 'compact' ? 4096 : 16384)
+}
+function portfolioView(args) {
+  if (args.includes('--all') && args.includes('--current')) throw new Error('Choose --all or --current, not both.')
+  return args.includes('--all') || (!args.includes('--current') && preferences.view === 'portfolio')
+}
 function maskDisplay(text) {
-  return ['dashboard', 'vault'].includes(process.argv[2]) ? String(text) : masking.mask(text)
+  return ['dashboard', 'vault'].includes(process.argv[2]) && preferences.privacy !== 'reports' ? String(text) : masking.mask(text)
+}
+// Classify the original record first; aliases must never become evidence or a signer.
+function maskReport(value) {
+  if (preferences.privacy !== 'reports') return value
+  if (typeof value === 'string') return masking.mask(value)
+  if (Array.isArray(value)) return value.map(maskReport)
+  if (value && typeof value === 'object') return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, maskReport(item)]))
+  return value
 }
 function maskedSections(sections, maxBytes) {
   return context.boundedSections(sections.map(text => masking.mask(text)), maxBytes)
@@ -990,7 +1008,7 @@ const {
   countOpenRisks,
 } = createTrustApi({
   fs, path, readClean, readEng, parseMdTable, sectionBody, SIGNAL_LEDGER, memoryDirtyManual,
-  stripTemplateNoise, stripLegendLines, extractRisks,
+  stripTemplateNoise, stripLegendLines, extractRisks, maskDisplay,
 })
 
 // Stakeholders: columns are matched by header wording, not position - real
@@ -1023,6 +1041,7 @@ function parseSignalHistoryEntries(eng) {
 }
 
 function displayNameFromSignalText(text) {
+  if (preferences.privacy === 'reports' && masking.mask(text) !== text) return 'Contact (identifier masked)'
   const person = personFromSignalText(text)
   if (person) return person
   const t = String(text).trim()
@@ -1162,7 +1181,7 @@ function extractStats(eng) {
       const key = from + '→' + to
       if (seen.has(key)) continue
       seen.add(key)
-      const pre = text.slice(Math.max(0, m.index - 40), m.index)
+      const pre = maskDisplay(text.slice(0, m.index)).slice(-40)
       const label = pre.split(/\s+/).filter(Boolean).slice(-3).join(' ').replace(/^[,:;.\-]+|[,:;.\-]+$/g, '') || 'metric'
       stats.push({ label, from, to })
     }
@@ -1315,7 +1334,7 @@ function cmdScan() {
 
 function cmdResume(args) {
   let maxBytes
-  try { ({ args, maxBytes } = context.budgetArgs(args)) } catch (e) { console.error(e.message); process.exit(2) }
+  try { ({ args, maxBytes } = contextBudget(args)) } catch (e) { console.error(e.message); process.exit(2) }
 
   const initIdx = args.indexOf('--init')
   if (initIdx !== -1) {
@@ -1400,6 +1419,10 @@ function cmdResume(args) {
       const head = memoryHead(fdeDir)
       console.log(`memory git: ${head || 'ready'}${owner ? `  owner: ${owner.email}` : ''}`)
     }
+    if (!setupStore.read()) {
+      if (process.stdin.isTTY && process.stdout.isTTY) return setup.command(setupStore, [])
+      console.log('Make FDEOps fit your day: run fde setup once for three short choices. Agents: ask these after binding; do not guess the answers.')
+    }
     return
   }
   if (args[0] === '--bind') {
@@ -2548,7 +2571,7 @@ function cmdReceipts(args) {
 // overwrites an engagement record, existing file, or symlink.
 function cmdHandoff(args, label = 'Handoff') {
   let parsed
-  try { parsed = context.budgetArgs(args) } catch (e) { console.error(e.message); process.exit(1) }
+  try { parsed = contextBudget(args) } catch (e) { console.error(e.message); process.exit(1) }
   let out = ''
   if (parsed.args.length) {
     if (parsed.args.length !== 2 || parsed.args[0] !== '--out' || !parsed.args[1] || parsed.args[1].startsWith('--')) {
@@ -2594,7 +2617,7 @@ function cmdHandoff(args, label = 'Handoff') {
 
 function cmdRecall(args) {
   let maxBytes
-  try { ({ args, maxBytes } = context.budgetArgs(args)) } catch (e) { console.error(e.message); process.exit(2) }
+  try { ({ args, maxBytes } = contextBudget(args)) } catch (e) { console.error(e.message); process.exit(2) }
   const query = args.join(' ').trim()
   if (!query || Buffer.byteLength(query) > 2048 || args.some(a => a.startsWith('--'))) {
     console.error('usage: fde recall <topic> [--max-bytes 4096..65536]'); process.exit(2)
@@ -3609,7 +3632,7 @@ function engagementSlugFromPath(eng) {
 }
 
 function cmdStatus(args) {
-  const all = args.includes('--all')
+  const all = portfolioView(args)
   if (!fs.existsSync(ENGAGEMENTS_ROOT)) { console.log('no engagements yet - fde resume --init <name>'); return }
   const rows = []
   if (all) {
@@ -3678,7 +3701,7 @@ function gatherEngagements(opts = {}) {
 }
 
 function cmdDashboard(args) {
-  const all = args.includes('--all')
+  const all = portfolioView(args)
   const outIdx = args.indexOf('--out')
   const outPath = outIdx !== -1 && args[outIdx + 1]
     ? path.resolve(args[outIdx + 1].replace(/^~/, HOME))
@@ -3734,7 +3757,7 @@ function cmdDashboard(args) {
       ['trust-profile.md', 'Trust profile'],
     ].map(([f, title]) => [title, readClean(e.dir, f)])
     .filter(([, md]) => render.hasRealContent(md))
-    .map(([title, md]) => ({ title, html: render.mdBlockHtml(md, parseMdTable) }))
+    .map(([title, md]) => ({ title, html: render.mdBlockHtml(maskDisplay(md), parseMdTable) }))
     e.searchBlob = render.escapeHtml([
       e.name, e.next, e.lastSession, e.reality, e.brief,
       ...e.log.map(g => g.text), ...e.risks.map(r => r.text),
@@ -3744,7 +3767,7 @@ function cmdDashboard(args) {
     ].join(' ').toLowerCase())
   })
 
-  const html = render.buildFieldbookHtml({ engagements, today, generatedAt: new Date().toISOString() })
+  const html = render.buildFieldbookHtml({ engagements: maskReport(engagements), today, generatedAt: new Date().toISOString() })
 
   try {
     const isRecordPath = p => p.split(path.sep).some(part => ['.fde', '.git'].includes(part.toLowerCase()))
@@ -3915,10 +3938,10 @@ function cmdVault(args) {
   })
 
   const files = vault.buildVaultFiles({
-    engagements,
+    engagements: maskReport(engagements),
     today: render.formatToday(new Date()),
     redacted,
-    engagementsRoot: ENGAGEMENTS_ROOT,
+    engagementsRoot: maskReport(ENGAGEMENTS_ROOT),
     version: cliVersion(),
   })
 
@@ -4102,6 +4125,7 @@ ${fs.existsSync(html) ? `\n  Open the fieldbook:  ${html}` : ''}
 function printUsage() {
   console.log(`fde - deterministic core of fdeops
   fde demo                 the whole loop on a fake client (fde demo --clean removes it)
+  fde setup                three first-use choices (or --show for saved preferences)
   fde privacy              show masking capability and its boundaries
   fde scan                 day-1 recon of this repo (facts, no AI)
   fde resume               load this workspace's engagement memory (bounded)
@@ -4131,8 +4155,8 @@ function printUsage() {
   fde receipts <term>      source-backed records versus claims
   fde defend              sponsor readout: accepted assertions, claims, sources, gaps
   fde handoff [--out file] portable redacted packet; stdout by default, new file only
-  fde status [--all]       value ledger, then trust (pass --all for full portfolio)
-  fde dashboard [--all] [--open] [--out <path>]  bound fieldbook (pass --all for every client)
+  fde status [--all|--current] value ledger, then trust (scope follows setup)
+  fde dashboard [--all|--current] [--open] [--out <path>] fieldbook (scope follows setup)
   fde vault                derived Obsidian vault of every engagement (--current for one, --redacted for a shared screen, --out <dir>)
   hooks call these; you do not: capture (session-end snapshot), preserve (pre-compaction snapshot)
   env FDEOPS_ENGAGEMENTS_ROOT  override ~/fde-engagements (init/status/dashboard/registry)
@@ -4144,7 +4168,7 @@ function printUsage() {
 const [cmd, ...rawArgs] = process.argv.slice(2)
 let outputBudget
 if (['resume', 'recall', 'handoff', 'defend'].includes(cmd) && !rawArgs.some(a => ['--full', '--init', '--bind', '--out'].includes(a))) {
-  try { outputBudget = context.budgetArgs(rawArgs).maxBytes } catch (_) {}
+  try { outputBudget = context.budgetArgs(rawArgs, (setupStore.read() || setup.DEFAULTS).context === 'compact' ? 4096 : 16384).maxBytes } catch (_) {}
 }
 require('./lib/masking').protectOutput(masking, { maxBytes: outputBudget })
 let args
@@ -4162,14 +4186,17 @@ if (args.includes('--help') || args.includes('-h') || cmd === 'help' || cmd ===
   process.exit(0)
 }
 try {
+  if (cmd !== 'setup' && cmd !== 'privacy') preferences = setupStore.read() || setup.DEFAULTS
+  const finishAsync = result => { if (result && typeof result.catch === 'function') result.catch(error => { console.error(error.message); process.exitCode = 1 }) }
 switch (cmd) {
+  case 'setup': finishAsync(setup.command(setupStore, args)); break
   case 'privacy':
     if (args.length) { console.error('usage: fde privacy'); process.exitCode = 2; break }
-    console.log(`FDEOps ${require('../package.json').version} - identifier masking enabled by default.\nCLI responses, smart proposals, handoff packets and ingest MCP results use local aliases.\nPatterns: common emails, international/US phones, SSN-shaped identifiers and supported credentials.\nNames and arbitrary sensitive prose are not detected; mark them <private>.\nRaw files, pasted chat, upstream MCP content and local dashboard/vault files bypass this protection.`)
+    console.log(`FDEOps ${require('../package.json').version} - identifier masking enabled by default.\nCLI responses, smart proposals, handoff packets and ingest MCP results use local aliases.\nPatterns: common emails, international/US phones, SSN-shaped identifiers and supported credentials.\nNames and arbitrary sensitive prose are not detected; mark them <private>.\nRaw files, pasted chat and upstream MCP content bypass this protection. Local reports retain identifiers by default; fde setup can also mask newly generated report content.`)
     break
   case 'demo': cmdDemo(args); break
   case 'scan': cmdScan(); break
-  case 'resume': cmdResume(args); break
+  case 'resume': finishAsync(cmdResume(args)); break
   case 'recall': cmdRecall(args); break
   case 'triage': cmdTriage(); break
   case 'log': cmdLog(args); break

package/bin/install.js

@@ -376,7 +376,7 @@ function cmdInstall(opts = {}) {
 // `npx fdeops scan` must recon, not install - any fde subcommand passes straight
 // through to the CLI (fde.js reads process.argv itself, so require() is enough).
 const FDE_SUBCOMMANDS = [
-  'demo', 'scan', 'resume', 'triage', 'log', 'debrief', 'ingest', 'prep', 'doctor', 'redact',
+  'setup', 'privacy', 'demo', 'scan', 'resume', 'triage', 'log', 'debrief', 'ingest', 'prep', 'doctor', 'redact',
   'tidy', 'garden', 'owner', 'receipts', 'recall', 'handoff', 'defend', 'capture', 'preserve', 'status', 'dashboard', 'vault', 'help',
 ]
 

package/bin/lib/context.js

@@ -14,9 +14,9 @@ function clipUtf8(text, bytes) {
   while (end > 0 && (buf[end] & 0xc0) === 0x80) end--
   return buf.subarray(0, end).toString('utf8')
 }
-function budgetArgs(args) {
+function budgetArgs(args, defaultBytes = DEFAULT_BYTES) {
   const rest = [...args]
-  let maxBytes = DEFAULT_BYTES
+  let maxBytes = defaultBytes
   const at = rest.indexOf('--max-bytes')
   if (at !== -1) {
     const raw = rest[at + 1]

package/bin/lib/setup.js

@@ -0,0 +1,109 @@
+'use strict'
+const fs = require('node:fs')
+const path = require('node:path')
+const crypto = require('node:crypto')
+const paths = require('./install-paths')
+
+const DEFAULTS = { view: 'current', context: 'standard', privacy: 'agent' }
+const QUESTIONS = [
+  { key: 'view', title: 'What should your daily overview show?', options: [
+    ['current', 'The client I am working on'], ['portfolio', 'All my clients'],
+  ] },
+  { key: 'context', title: 'How much context should your agent start with?', options: [
+    ['standard', 'Standard (up to 16 KiB)'], ['compact', 'Compact (up to 4 KiB; retrieve details as needed)'],
+  ] },
+  { key: 'privacy', title: 'Where should common identifiers be masked?', options: [
+    ['agent', 'Agent context; keep originals in my local reports'],
+    ['reports', 'Agent context and newly generated Fieldbook/vault reports'],
+  ] },
+]
+const LIMITS = 'Both options hide <private> content. Masking covers common identifier formats, not all personal data. Names and sensitive prose need private marking. Your AI host controls provider transmission; setup does not change it. Existing exports are not rewritten.'
+function validate(value) {
+  if (!value || typeof value !== 'object' || Array.isArray(value) ||
+      Object.keys(value).length !== 3 || QUESTIONS.some(q => !q.options.some(([v]) => value[q.key] === v))) {
+    throw new Error('Invalid setup choices; run fde setup to see the supported options.')
+  }
+  return value
+}
+function createSetup(root) {
+  const file = path.join(root, '.preferences.json')
+  function read() {
+    let fd
+    try {
+      paths.checkPath(file)
+      fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK)
+      const st = fs.fstatSync(fd)
+      if (!st.isFile() || st.nlink !== 1 || st.size > 4096) throw new Error('unsafe')
+      return validate(JSON.parse(fs.readFileSync(fd, 'utf8')))
+    } catch (e) {
+      if (e.code === 'ENOENT') return null
+      throw new Error('Cannot read setup safely. Check .preferences.json in your engagements folder; no settings were changed.')
+    } finally { if (fd !== undefined) fs.closeSync(fd) }
+  }
+  function save(value) {
+    validate(value)
+    paths.mkdir(root)
+    paths.checkPath(file)
+    const temporary = path.join(root, `.preferences-${crypto.randomBytes(12).toString('hex')}.tmp`)
+    try {
+      fs.writeFileSync(temporary, JSON.stringify(value, null, 2) + '\n', { flag: 'wx', mode: 0o600 })
+      paths.checkPath(file)
+      fs.renameSync(temporary, file)
+    } finally { try { fs.unlinkSync(temporary) } catch (_) {} }
+  }
+  return { read, save }
+}
+function describe(value) {
+  return QUESTIONS.map(q => `${q.title} ${q.options.find(([v]) => v === value[q.key])[1]}`).join('\n')
+}
+function command(store, args) {
+  if (args.length === 1 && args[0] === '--show') {
+    const saved = store.read()
+    console.log(JSON.stringify({ configured: !!saved, ...(saved || DEFAULTS) }))
+    return
+  }
+  if (args.length) {
+    const choices = {}
+    if (!args.includes('--save') || args.filter(a => a === '--save').length !== 1) throw new Error('Use fde setup, or supply all three choices with --save.')
+    const rest = args.filter(a => a !== '--save')
+    for (let i = 0; i < rest.length; i += 2) {
+      const key = rest[i].replace(/^--/, '')
+      if (!rest[i].startsWith('--') || !Object.hasOwn(DEFAULTS, key) || Object.hasOwn(choices, key)) throw new Error('Unknown or repeated setup option.')
+      choices[key] = rest[i + 1]
+    }
+    validate(choices)
+    store.save(choices)
+    console.log('Setup saved for this engagements folder. Change it anytime with fde setup.\n' + describe(choices) + '\n' + LIMITS)
+    return
+  }
+  if (process.stdin.isTTY && process.stdout.isTTY) return interactive(store)
+  console.log('FIRST-USE SETUP: ask these three questions together, then save the answers. No settings have been changed.')
+  for (const [i, q] of QUESTIONS.entries()) console.log(`${i + 1}. ${q.title}\n` + q.options.map(([value, label]) => `   ${value}: ${label}`).join('\n'))
+  console.log(LIMITS + '\nAfter the user answers: fde setup --view current|portfolio --context standard|compact --privacy agent|reports --save\nUse fde setup --show to inspect existing choices. Never infer client policy from these preferences.')
+}
+async function interactive(store) {
+  // Only static prompts and validated enum labels bypass buffered CLI output.
+  const emit = text => fs.writeSync(1, text)
+  const rl = require('node:readline').createInterface({ input: process.stdin, terminal: false })
+  const lines = rl[Symbol.asyncIterator]()
+  const current = store.read() || DEFAULTS, choices = {}
+  try {
+    emit('Make FDEOps fit your day. Three choices; Enter keeps the current choice. Ctrl-C cancels.\n' + LIMITS + '\n')
+    for (const q of QUESTIONS) {
+      const selected = q.options.findIndex(([v]) => v === current[q.key])
+      while (true) {
+        emit(q.title + '\n' + q.options.map(([, label], i) => `  ${i + 1}. ${label}${i === selected ? ' (current)' : ''}`).join('\n') + '\n> ')
+        const next = await lines.next()
+        if (next.done) { emit('\nSetup cancelled; nothing saved.\n'); return }
+        const value = next.value.trim(), index = value === '' ? selected : /^[12]$/.test(value) ? Number(value) - 1 : -1
+        if (index >= 0) { choices[q.key] = q.options[index][0]; break }
+        emit('Choose 1 or 2, or press Enter.\n')
+      }
+    }
+    emit('\n' + describe(choices) + '\nSave these settings? [y/N] ')
+    const next = await lines.next()
+    if (!next.done && /^y(es)?$/i.test(next.value.trim())) { store.save(choices); emit('\nSetup saved. Change it anytime with fde setup.\n') }
+    else emit('\nSetup cancelled; nothing saved.\n')
+  } finally { rl.close() }
+}
+module.exports = { createSetup, command, DEFAULTS }

package/bin/lib/trust.js

@@ -3,7 +3,7 @@
 function createTrustApi(deps) {
   const {
     fs, path, readClean, readEng, parseMdTable, sectionBody, SIGNAL_LEDGER, memoryDirtyManual,
-    stripTemplateNoise, stripLegendLines, extractRisks,
+    stripTemplateNoise, stripLegendLines, extractRisks, maskDisplay = text => text,
   } = deps
 
   // phase / trust / top risk / freshness - identical heuristic for status + dashboard.
@@ -138,7 +138,7 @@ function createTrustApi(deps) {
     const body = sectionBody(ctx, 'Next action', { lastNonEmpty: true })
     for (const raw of body.split('\n')) {
       const t = raw.trim().replace(/^[-*]\s+/, '')
-      if (t) return t.slice(0, 120)
+      if (t) return maskDisplay(t).slice(0, 120)
     }
     return ''
   }
@@ -180,7 +180,7 @@ function createTrustApi(deps) {
       trustReason = mem.warn
     } else if (worst) {
       trust = worst.sig === 'red' ? 'RED' : worst.sig
-      trustReason = (worst.text || '').slice(0, 80)
+      trustReason = maskDisplay(worst.text || '').slice(0, 80)
       if (worst.date) {
         signalAge = Math.max(0, Math.floor((Date.now() - Date.parse(worst.date)) / 86400000))
         stale = signalAge > 21
@@ -195,7 +195,7 @@ function createTrustApi(deps) {
       trust = sLines.some(l => /\bred\b/i.test(l)) ? 'RED'
         : sLines.some(l => /amber|gone quiet|routing around|escalat/i.test(l)) ? 'amber' : 'new'
     }
-    const topRisk = (extractRisks(eng)[0]?.text || '').replace(/\s+/g, ' ').trim().slice(0, 80)
+    const topRisk = maskDisplay((extractRisks(eng)[0]?.text || '').replace(/\s+/g, ' ').trim()).slice(0, 80)
     // Prefer trust trigger / memory warn over a random risk line; always keep mem.warn available
     const reason = (trustReason || mem.warn) ? (trustReason || mem.warn) : topRisk
     // What the triage line is actually quoting. A risk bullet printed under

package/mcp/fdeops-ingest/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops-ingest-mcp",
-  "version": "3.29.0",
+  "version": "3.30.0",
   "private": true,
   "description": "Thin stdio MCP sink for FDEOps ingest (stage → propose → apply). Zero runtime dependencies.",
   "bin": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops",
-  "version": "3.29.0",
+  "version": "3.30.0",
   "description": "Client delivery tools for Forward Deployed Engineers. One @fde skill, local Markdown engagement records, and an offline dashboard for decisions, evidence, approvals, and next actions.",
   "bin": {
     "fdeops": "bin/install.js",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "fdeops",
-  "version": "3.29.0",
+  "version": "3.30.0",
   "description": "Forward deployed engineering skills for AI coding agents. One @fde skill for the client work around the code. You confirm; then it lands in .fde/ on your laptop.",
   "author": {
     "name": "Subash Natarajan",

package/skills/fde/SKILL.md

@@ -56,9 +56,13 @@ Use the customer's existing coding, testing, review, and repository instructions
 
 Fallbacks: `node ~/.claude/fdeops/fde.js …`, then `npx --yes fdeops …`. Skill-only install is not "unavailable."
 
+## First-use preferences
+
+Run `fde setup --show` before client reads. If unavailable, update the CLI before offering setup; never pretend preferences were saved. If `configured` is false, finish binding the named client, then run `fde setup` and present its **three questions together**, with the two choices each. Use answers already given; do not invent preferences or ask again per client. Save their selections using the displayed `--save` command; their answers authorize this settings write only. If they skip, continue with existing defaults and leave setup unsaved. On later sessions use saved choices; change them only when requested. Setup configures report scope, initial context size and masking of newly generated reports. It does not install a model, approve client data for AI, or change provider settings. Client policy always takes precedence. Reports can still contain names or other unrecognized sensitive prose; never treat them as anonymized.
+
 ## Entry (every session)
 
-1. `fde resume` (16 KiB output ceiling, not a model token count). Read client constraints first, then signer, goals, risks, delivery ledger and current context. This command is the inspectable packet the session hook loads; never substitute a recursive read of `.fde/` or raw transcripts. If truncated or a decision needs evidence, run `fde recall <specific topic>`; narrow the query rather than loading the whole history. `--max-bytes 4096` reduces the allowance for smaller models. `--full` only when the complete log is explicitly needed.
+1. `fde resume` (16 KiB by default, 4 KiB with compact setup; a byte ceiling, not a model token count). Read client constraints first, then signer, goals, risks, delivery ledger and current context. This command is the inspectable packet the session hook loads; never substitute a recursive read of `.fde/` or raw transcripts. If truncated or a decision needs evidence, run `fde recall <specific topic>`; narrow the query rather than loading the whole history. `--max-bytes 4096` reduces the allowance for smaller models. `--full` only when the complete log is explicitly needed.
 2. **NO ENGAGEMENT:** ask "What should we call this client?" then **you** init. Pasted notes → debrief after bind.
 3. Playback 2-3 lines. `hygiene:` → offer `fde doctor`; **never auto-rewrite**.
 4. Route. Read **one** `references/*.md`. Confirm, then write.