fdeops 3.5.6 → 3.6.1

package/bin/fde.js

@@ -13,6 +13,7 @@
  *   fde resume --full       same, but the complete context.md (no bound)
  *   fde resume --init <n>   create + bind an engagement for this workspace
  *   fde log <type> <text>   structured append (decision|risk|delivery|contact)
+ *   fde debrief [file]      meeting notes → structured memory (stdin if no file)
  *   fde receipts <term>     "what did we agree?" - search memory with dates
  *   fde capture             session-end snapshot → context.md (hooks use this)
  *   fde status              portfolio across ~/fde-engagements (red/amber/green)
@@ -28,6 +29,8 @@ const ENGAGEMENTS_ROOT = path.join(HOME, 'fde-engagements')
 const REGISTRY = path.join(ENGAGEMENTS_ROOT, '.registry')
 const CODE_EXT = ['.js', '.ts', '.tsx', '.jsx', '.py', '.java', '.go', '.rb', '.cs', '.php']
 const CONF_EXT = CODE_EXT.concat(['.env', '.yaml', '.yml', '.json'])
+// one routing table for structured appends - cmdLog and cmdDebrief share it
+const LOG_FILES = { decision: 'decisions.md', risk: 'risks.md', delivery: 'delivery.md', contact: 'stakeholders.md' }
 
 // constant-command runner - never receives user input
 function sh(cmd, cwd) {
@@ -143,12 +146,34 @@ function sectionBody(md, heading) {
 }
 
 // phase / trust / top risk / freshness - identical heuristic for status + dashboard.
+// Trust resolution: structured [signal:red|amber|green] tokens in stakeholders.md
+// (written by `fde log contact --signal` and `fde debrief`) win - the latest dated
+// one. Older than 21 days → stale: shown with a "?" marker + age so a forgotten
+// signal never silently drives triage. The keyword grep survives only as the
+// zero-effort floor when NO token exists anywhere - prose like "escalated to CTO,
+// resolved amicably" must not flip a client amber forever.
 function computeSignals(eng) {
   const ctx = readEng(eng, 'context.md'); const stake = readEng(eng, 'stakeholders.md'); const risks = readEng(eng, 'risks.md')
   const phase = (ctx.match(/phase[:* ]+\**([a-z-]+)/i) || [])[1] || '?'
-  const sLines = stake.split('\n').filter(l => !(/green/i.test(l) && /red|amber/i.test(l)))
-  const trust = sLines.some(l => /\bred\b/i.test(l)) ? 'RED'
-    : sLines.some(l => /amber|gone quiet|routing around|escalat/i.test(l)) ? 'amber' : 'green'
+  let latest = null
+  for (const l of stake.split('\n')) {
+    const sm = l.match(/\[signal:(red|amber|green)\]/i)
+    if (!sm) continue
+    const date = (l.match(/\[(\d{4}-\d{2}-\d{2})\]/) || [])[1] || ''
+    if (!latest || date >= latest.date) latest = { date, sig: sm[1].toLowerCase() }
+  }
+  let trust, signalAge = null, stale = false
+  if (latest) {
+    trust = latest.sig === 'red' ? 'RED' : latest.sig
+    if (latest.date) {
+      signalAge = Math.max(0, Math.floor((Date.now() - Date.parse(latest.date)) / 86400000))
+      stale = signalAge > 21
+    }
+  } else {
+    const sLines = stake.split('\n').filter(l => !(/green/i.test(l) && /red|amber/i.test(l)))
+    trust = sLines.some(l => /\bred\b/i.test(l)) ? 'RED'
+      : sLines.some(l => /amber|gone quiet|routing around|escalat/i.test(l)) ? 'amber' : 'green'
+  }
   const topRisk = (risks.split('\n').find(l => {
     const t = l.trim()
     return /^[-|]/.test(t) && t.length > 20 && !/^\|?[-\s|]+$/.test(t) &&
@@ -159,7 +184,7 @@ function computeSignals(eng) {
     ageDays = Math.floor((Date.now() - fs.statSync(path.join(eng, 'context.md')).mtimeMs) / 86400000)
     updated = ageDays === 0 ? 'today' : `${ageDays}d ago`
   } catch (_) {}
-  return { phase, trust, topRisk, updated, ageDays }
+  return { phase, trust, signalAge, stale, topRisk, updated, ageDays }
 }
 
 // ---------- commands ----------
@@ -183,6 +208,7 @@ function cmdScan() {
 
   // churn × tests = the load-bearing walls
   out.push('\nHOTSPOTS (churn 90d × test coverage) - handle with care:')
+  let firstUntested = ''
   if (isGit) {
     const churn = sh("git log --since='90 days ago' --name-only --pretty=format:") || ''
     const counts = {}
@@ -193,6 +219,7 @@ function cmdScan() {
     for (const [f, n] of top) {
       const base = path.basename(f).replace(/\.[^.]+$/, '')
       const tested = testFiles.some(t => t.includes(base))
+      if (!tested && !firstUntested) firstUntested = f
       out.push(`  ${String(n).padStart(3)} commits/90d  ${f}  ${tested ? '' : '⚠ NO TEST NEIGHBOR'}`)
     }
   } else out.push('  (not a git repo - churn unavailable)')
@@ -205,7 +232,10 @@ function cmdScan() {
 
   // AI components - they fail silently
   out.push('\nAI COMPONENTS (no exception fires when these drift):')
-  const ai = grepFiles(codeFiles, /openai|anthropic|\bllm\b|gpt-|claude|embedding|vector store|inference/i, 10)
+  // NOTE: bare "inference" is banned from this regex - TypeScript codebases are
+  // full of "type inference" comments and the false positives poison the day-1
+  // questions. Model inference only, in explicit forms.
+  const ai = grepFiles(codeFiles, /openai|anthropic|\bllm\b|gpt-|claude|embedding|vector store|model inference|inference (?:api|endpoint|server|engine)/i, 10)
   ai.length ? ai.forEach(h => out.push(`  ${h.file}:${h.line}  ${h.text}`)) : out.push('  none found')
 
   // secrets (redacted)
@@ -216,6 +246,7 @@ function cmdScan() {
   sec.length
     ? sec.forEach(h => out.push(`  ${h.file}:${h.line}  ${h.text.replace(/(['"])([^'"]{4})[^'"]+(['"])/, '$1$2…REDACTED$3')}`))
     : out.push('  none found')
+  out.push('  (grep-grade check - run gitleaks or trufflehog for real secret coverage)')
 
   // previous attempts - the political archaeology
   out.push('\nPREVIOUS ATTEMPTS (ask who ran these, and what happened):')
@@ -229,6 +260,18 @@ function cmdScan() {
   const testCount = files.filter(f => /test|spec/i.test(f)).length
   out.push(`\nTEST LANDSCAPE  ${testCount} test file(s) across ${codeFiles.length} code files`)
 
+  // day-1 questions - each one earned by a finding above, skipped when empty
+  out.push('\nASK ON DAY 1:')
+  const asks = []
+  if (reverts || readmeHits.length) asks.push('Who ran the previous attempt(s), and what happened to them?')
+  if (firstUntested) asks.push(`What breaks when ${firstUntested} changes, and who owns it?`)
+  if (ai.length) asks.push(`How would anyone notice if ${ai[0].file}'s model output drifted?`)
+  if (sec.length) asks.push('What is the secret-rotation story?')
+  if (tmp.length) asks.push("Which of these 'temporary' fixes are now load-bearing contracts?")
+  asks.length
+    ? asks.slice(0, 5).forEach((q, i) => out.push(`  ${i + 1}. ${q}`))
+    : out.push('  (clean scan - ask what the last engineer wished they had known)')
+
   out.push('\n' + '-'.repeat(60))
   out.push("Facts only - interpretation is the FDE's (or @fde's) job.")
   console.log(out.join('\n'))
@@ -250,11 +293,30 @@ function cmdResume(args) {
       else if (!fs.existsSync(dst)) fs.copyFileSync(src, dst)
     }
     fs.mkdirSync(path.join(fdeDir, 'retrospectives'), { recursive: true })
-    // bind THIS workspace to the engagement (zero ceremony next time)
-    const line = `${process.cwd()} ${slug}\n`
-    const reg = fs.existsSync(REGISTRY) ? fs.readFileSync(REGISTRY, 'utf8') : ''
-    if (!reg.includes(line.trim())) fs.appendFileSync(REGISTRY, line)
-    console.log(`ENGAGEMENT READY: ${fdeDir}\nbound to workspace: ${process.cwd()}`)
+    // bind THIS workspace to the engagement (zero ceremony next time).
+    // A workspace binds to exactly ONE engagement: rebinding REPLACES the old
+    // line - resolution is first-match-wins, so appending a second line would
+    // leave the stale binding winning and silently write to the wrong client.
+    const cwd = process.cwd()
+    const prev = readRegistry().find(r => r.workspace === cwd)
+    const kept = readRegistry().filter(r => r.workspace !== cwd).map(r => `${r.workspace} ${r.slug}`)
+    kept.push(`${cwd} ${slug}`)
+    fs.writeFileSync(REGISTRY, kept.join('\n') + '\n')
+    console.log(`ENGAGEMENT READY: ${fdeDir}\nbound to workspace: ${cwd}`)
+    if (prev && prev.slug !== slug) console.log(`rebound: this workspace previously wrote to "${prev.slug}" - that memory is untouched; sessions here now write to "${slug}"`)
+    // NDA surface: engagement notes must not silently leave the machine via file sync
+    const syncHit = /icloud|mobile documents|dropbox|onedrive|google drive|box sync/i.exec(ENGAGEMENTS_ROOT)
+    if (syncHit) console.log(`⚠ engagements root is inside a synced folder ("${syncHit[0]}") - client notes will leave this machine via sync. See PRIVACY.md.`)
+    return
+  }
+  if (args[0] === '--bind') {
+    // inspection: what does THIS workspace resolve to, and why
+    const cwd = process.cwd()
+    const reg = readRegistry().find(r => r.workspace === cwd)
+    const eng = resolveEngagement()
+    console.log(`workspace: ${cwd}`)
+    console.log(`registry:  ${reg ? `${reg.slug} (${path.join(ENGAGEMENTS_ROOT, reg.slug, '.fde')})` : '(not bound)'}`)
+    console.log(`resolves:  ${eng || '(nothing - run: fde resume --init <client>)'}`)
     return
   }
   const eng = resolveEngagement()
@@ -296,14 +358,77 @@ function resumeView(md) {
 }
 
 function cmdLog(args) {
-  const map = { decision: 'decisions.md', risk: 'risks.md', delivery: 'delivery.md', contact: 'stakeholders.md' }
+  args = args.slice()
+  // --signal red|amber|green (contact only) → structured token computeSignals trusts
+  let signal = ''
+  const sigIdx = args.indexOf('--signal')
+  if (sigIdx !== -1) {
+    signal = (args[sigIdx + 1] || '').toLowerCase()
+    if (!['red', 'amber', 'green'].includes(signal)) { console.error('usage: fde log contact <text> --signal red|amber|green'); process.exit(1) }
+    args.splice(sigIdx, 2)
+  }
   const type = args[0]; const text = args.slice(1).join(' ')
-  if (!map[type] || !text) { console.error('usage: fde log <decision|risk|delivery|contact> <text>'); process.exit(1) }
+  if (!LOG_FILES[type] || !text) { console.error('usage: fde log <decision|risk|delivery|contact> <text> [--signal red|amber|green]'); process.exit(1) }
+  if (signal && type !== 'contact') { console.error('--signal only applies to: fde log contact'); process.exit(1) }
   const eng = resolveEngagement()
   if (!eng) { console.error('no engagement - run: fde resume --init <name>'); process.exit(2) }
   const date = new Date().toISOString().slice(0, 10)
-  fs.appendFileSync(path.join(eng, map[type]), `\n- [${date}] ${text}\n`)
-  console.log(`logged → ${map[type]}`)
+  fs.appendFileSync(path.join(eng, LOG_FILES[type]), `\n- [${date}] ${signal ? `[signal:${signal}] ` : ''}${text}\n`)
+  console.log(`logged → ${LOG_FILES[type]}${signal ? ` (signal:${signal})` : ''}`)
+}
+
+// Meeting notes → structured memory. Deterministic routing, zero AI: lines that
+// start with decision:/risk:/delivery:/contact: (case-insensitive) go to their
+// LOG_FILES target as dated bullets; everything else lands in context.md as one
+// dated debrief block. contact: lines may carry an inline [signal:x] token
+// anywhere in the text - preserved verbatim so computeSignals can trust it.
+// Real notes arrive as markdown: "- decision: ...", "* contact: ...",
+// "**Decision:** ..." - strip bullet/bold dressing before matching, or the
+// prefix silently misses and a [signal:x] token lands in context.md, which
+// signal parsing never reads. Silent loss is the one failure a memory tool
+// cannot have. --dry-run prints the routing without writing anything.
+function cmdDebrief(args) {
+  args = args.slice()
+  const dryIdx = args.indexOf('--dry-run')
+  const dry = dryIdx !== -1
+  if (dry) args.splice(dryIdx, 1)
+  const eng = resolveEngagement()
+  if (!eng) { console.error('no engagement - run: fde resume --init <name>'); process.exit(2) }
+  let input = ''
+  if (args[0]) {
+    try { input = fs.readFileSync(args[0].replace(/^~/, HOME), 'utf8') }
+    catch (_) { console.error(`cannot read ${args[0]}`); process.exit(1) }
+  } else {
+    try { input = fs.readFileSync(0, 'utf8') } catch (_) {} // stdin until EOF
+  }
+  const d = new Date()
+  const date = d.toISOString().slice(0, 10)
+  const counts = { decision: 0, risk: 0, delivery: 0, contact: 0 }
+  const ctxLines = []
+  for (const raw of input.split('\n')) {
+    let line = raw.trim()
+    if (!line) continue
+    // markdown dressing: leading bullets (-, *, +) and bold around the prefix
+    const bare = line.replace(/^[-*+]\s+/, '').replace(/^\*\*(decision|risk|delivery|contact):?\*\*:?\s*/i, '$1: ')
+    const m = bare.match(/^(decision|risk|delivery|contact):\s*(.+)$/i)
+    if (m) {
+      const type = m[1].toLowerCase()
+      if (dry) console.log(`→ ${LOG_FILES[type]}  - [${date}] ${m[2]}`)
+      else fs.appendFileSync(path.join(eng, LOG_FILES[type]), `\n- [${date}] ${m[2]}\n`)
+      counts[type]++
+    } else ctxLines.push(line)
+  }
+  if (ctxLines.length) {
+    const stamp = `${date} ${String(d.getHours()).padStart(2, '0')}:${String(d.getMinutes()).padStart(2, '0')}`
+    if (dry) ctxLines.forEach(l => console.log(`→ context.md  - ${l}`))
+    else fs.appendFileSync(path.join(eng, 'context.md'), `\n## Debrief - ${stamp}\n${ctxLines.map(l => `- ${l}`).join('\n')}\n`)
+  }
+  const plural = { decision: 'decisions', risk: 'risks', delivery: 'deliveries', contact: 'contacts' }
+  const parts = Object.keys(counts).filter(t => counts[t])
+    .map(t => `${counts[t]} ${counts[t] === 1 ? t : plural[t]}`)
+  if (ctxLines.length) parts.push(`${ctxLines.length} context line${ctxLines.length === 1 ? '' : 's'}`)
+  const verb = dry ? 'debrief would route' : 'debrief routed'
+  console.log(parts.length ? `${verb} → ${parts.join(', ')}` : 'debrief empty - nothing routed')
 }
 
 function cmdReceipts(args) {
@@ -320,7 +445,7 @@ function cmdReceipts(args) {
       if (rx.test(l)) { console.log(`${f}:${i + 1}  ${l.trim().slice(0, 160)}`); found++ }
     })
   }
-  if (!found) console.log(`no record of "${term}" - if it was agreed, it was never logged. That is itself the answer.`)
+  if (!found) console.log(`no record of "${term}" - nothing was ever logged about it. A gap in the record, not proof of absence: if it WAS agreed, log it now, dated today.`)
 }
 
 function cmdCapture() {
@@ -353,16 +478,19 @@ function cmdStatus() {
     const eng = path.join(ENGAGEMENTS_ROOT, d, '.fde')
     if (!fs.existsSync(eng)) continue
     const s = computeSignals(eng)
-    rows.push({ name: d, phase: s.phase, trust: s.trust, updated: s.updated, topRisk: s.topRisk.slice(0, 60) })
+    rows.push({ name: d, phase: s.phase, trust: s.trust, signalAge: s.signalAge, stale: s.stale, updated: s.updated, topRisk: s.topRisk.slice(0, 60) })
   }
   if (!rows.length) { console.log('no engagements yet'); return }
   const order = { RED: 0, amber: 1, green: 2 }
   rows.sort((a, b) => order[a.trust] - order[b.trust])
   console.log('FDE PORTFOLIO - trust-first triage (heuristic: red > amber > green)\n')
   for (const r of rows) {
-    console.log(`  [${r.trust.padEnd(5)}] ${r.name.padEnd(24)} phase:${r.phase.padEnd(10)} updated:${r.updated.padEnd(8)} ${r.topRisk}`)
+    // "amber?" = structured signal went stale (>21d) - reconfirm before trusting it
+    const label = r.trust + (r.stale ? '?' : '')
+    const sig = r.signalAge != null ? `signal ${r.signalAge}d old${r.stale ? ' (STALE - reconfirm)' : ''}  ` : ''
+    console.log(`  [${label.padEnd(6)}] ${r.name.padEnd(24)} phase:${r.phase.padEnd(10)} updated:${r.updated.padEnd(8)} ${sig}${r.topRisk}`)
   }
-  console.log('\nred/amber derive from stakeholders.md signal words - verify before acting.')
+  console.log('\ntrust: latest [signal:x] token in stakeholders.md wins (fde log contact --signal, fde debrief); keyword heuristic only when none exists - verify before acting.')
 }
 
 // ---------- dashboard (deterministic markdown → one local HTML) ----------
@@ -475,12 +603,21 @@ const DASH_SECTIONS = [
 function dashStyles() {
   return [
     // design system: quiet chrome, high density, daily-use second brain
+    // light (default) + dark (opt-in via [data-fde-theme="dark"], set pre-paint - see cmdDashboard head script)
     ':root{--bg:#f9fafb;--card:#fff;--ink:#111827;--2:#374151;--3:#4b5563;--muted:#6b7280;--line:#f3f4f6;--line2:#e5e7eb;',
     '--green:#10b981;--amber:#f59e0b;--red:#ef4444;--accent:#6366f1;',
+    '--red-bg:#fef2f2;--red-border:#fecaca;--red-ink:#7f1d1d;--red-ink2:#991b1b;',
+    '--amber-bg:#fffbeb;--amber-border:#fde68a;--amber-ink:#78350f;--amber-ink2:#92400e;',
     '--shadow-s:0 1px 2px rgba(0,0,0,.04);--shadow:0 1px 3px rgba(0,0,0,.06);--shadow-l:0 4px 12px rgba(0,0,0,.08);',
     '--r:8px}',
+    'html[data-fde-theme="dark"]{--bg:#0b0d12;--card:#161a22;--ink:#e5e7eb;--2:#cbd5e1;--3:#9ca3af;--muted:#7b8494;--line:#1f2430;--line2:#262c3a;',
+    '--green:#34d399;--amber:#fbbf24;--red:#f87171;--accent:#818cf8;',
+    '--red-bg:#2a1517;--red-border:#5b2328;--red-ink:#fecaca;--red-ink2:#fca5a5;',
+    '--amber-bg:#2a2210;--amber-border:#5b4a1f;--amber-ink:#fde68a;--amber-ink2:#fcd34d;',
+    '--shadow-s:0 1px 2px rgba(0,0,0,.3);--shadow:0 1px 3px rgba(0,0,0,.35);--shadow-l:0 4px 16px rgba(0,0,0,.45)}',
     '*{box-sizing:border-box;margin:0}',
-    'body{font:14px/1.6 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",sans-serif;color:var(--ink);background:var(--bg);-webkit-font-smoothing:antialiased}',
+    'body{font:14px/1.6 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",sans-serif;color:var(--ink);background:var(--bg);-webkit-font-smoothing:antialiased;transition:background .15s,color .15s}',
+    '.mono{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,"Liberation Mono",monospace}',
     // header - compact, purposeful
     'header{background:#111827;color:#fff;padding:20px 32px}',
     'header .inner{max-width:960px;margin:0 auto;display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:12px}',
@@ -490,27 +627,31 @@ function dashStyles() {
     '.stats{display:flex;align-items:center;gap:16px}',
     '.stat{font-size:12px;color:#9ca3af;display:flex;align-items:center;gap:5px}',
     '.stat b{color:#e5e7eb;font-weight:600}',
-    '.stat .sdot{width:6px;height:6px;border-radius:50%;flex-shrink:0}',
-    '.stat .sdot.green{background:#34d399}.stat .sdot.amber{background:#fbbf24}.stat .sdot.red{background:#f87171}',
+    '.stat .sdot{width:6px;height:6px;border-radius:50%;flex-shrink:0;box-sizing:border-box}',
+    '.stat .sdot.green{background:#34d399}.stat .sdot.amber{background:#fbbf24;border-radius:1.5px}.stat .sdot.red{background:transparent;border:1.5px solid #f87171}',
+    '.theme-toggle{border:1px solid #374151;background:transparent;color:#d1d5db;font-size:11px;padding:5px 10px;border-radius:6px;cursor:pointer;font-family:inherit;line-height:1.4}',
+    '.theme-toggle:hover{border-color:#6b7280;color:#fff}',
     // layout
     '.wrap{max-width:960px;margin:0 auto;padding:24px 32px 64px}',
     // search - integrated, not floating
-    '.search-wrap{position:relative;margin-bottom:24px}',
+    '.search-wrap{position:relative;margin-bottom:8px}',
     '.search-wrap svg{position:absolute;left:12px;top:50%;transform:translateY(-50%);width:16px;height:16px;stroke:var(--muted);stroke-width:2;fill:none}',
-    '.search{width:100%;padding:10px 14px 10px 36px;font-size:13px;border:1px solid var(--line2);border-radius:var(--r);background:var(--card);transition:border-color .15s,box-shadow .15s;outline:none}',
-    '.search:focus{border-color:var(--accent);box-shadow:0 0 0 3px rgba(99,102,241,.1)}',
+    '.search{width:100%;padding:10px 14px 10px 36px;font-size:13px;border:1px solid var(--line2);border-radius:var(--r);background:var(--card);color:var(--ink);transition:border-color .15s,box-shadow .15s;outline:none}',
+    '.search:focus{border-color:var(--accent);box-shadow:0 0 0 3px rgba(99,102,241,.15)}',
     '.search::placeholder{color:var(--muted)}',
+    '.search-hint{display:block;margin:6px 2px 20px;font-size:11px;color:var(--muted)}',
+    '.search-hint kbd{font-family:inherit;border:1px solid var(--line2);border-radius:4px;padding:1px 5px;font-size:10.5px;background:var(--bg)}',
     // directive - the one line that says where to start today
-    '.directive{display:flex;align-items:center;gap:10px;margin:0 0 20px;padding:12px 16px;background:#fef2f2;border:1px solid #fecaca;border-radius:var(--r);font-size:13.5px;line-height:1.5;color:#7f1d1d}',
-    '.directive b{font-weight:700;color:#7f1d1d}',
-    '.directive.amber{background:#fffbeb;border-color:#fde68a;color:#78350f}',
-    '.directive.amber b{color:#78350f}',
+    '.directive{display:flex;align-items:center;gap:10px;margin:0 0 20px;padding:12px 16px;background:var(--red-bg);border:1px solid var(--red-border);border-radius:var(--r);font-size:13.5px;line-height:1.5;color:var(--red-ink)}',
+    '.directive b{font-weight:700;color:var(--red-ink)}',
+    '.directive.amber{background:var(--amber-bg);border-color:var(--amber-border);color:var(--amber-ink)}',
+    '.directive.amber b{color:var(--amber-ink)}',
     '.directive-dot{width:9px;height:9px;border-radius:50%;background:var(--red);flex-shrink:0;box-shadow:0 0 0 3px rgba(239,68,68,.18)}',
     '.directive.amber .directive-dot{background:var(--amber);box-shadow:0 0 0 3px rgba(245,158,11,.18)}',
     // attention rows - red engagements dominate the page, full width
     '.attn-stack{display:flex;flex-direction:column;gap:10px}',
-    '.attn{background:#fef2f2;border:1px solid #fecaca;border-left:4px solid var(--red);border-radius:var(--r);padding:16px 18px;cursor:pointer;transition:box-shadow .15s,border-color .15s}',
-    '.attn:hover{border-color:#f87171;box-shadow:var(--shadow-l)}',
+    '.attn{background:var(--red-bg);border:1px solid var(--red-border);border-left:4px solid var(--red);border-radius:var(--r);padding:16px 18px;cursor:pointer;transition:box-shadow .15s,border-color .15s}',
+    '.attn:hover{border-color:var(--red);box-shadow:var(--shadow-l)}',
     '.attn-head{display:flex;align-items:center;gap:8px;flex-wrap:wrap}',
     '.attn-head h3{font-size:15px;font-weight:700;color:var(--ink)}',
     '.attn .risk{margin-top:10px}',
@@ -520,22 +661,27 @@ function dashStyles() {
     // cards - clean, scannable
     '.card{background:var(--card);border:1px solid var(--line2);border-radius:var(--r);padding:16px 18px;cursor:pointer;transition:border-color .15s,box-shadow .15s;position:relative;overflow:hidden}',
     '.card::before{content:"";position:absolute;left:0;top:0;bottom:0;width:3px}',
-    '.card:hover{border-color:#d1d5db;box-shadow:var(--shadow-l)}',
+    '.card:hover{border-color:var(--muted);box-shadow:var(--shadow-l)}',
     '.card.green::before{background:var(--green)}.card.amber::before{background:var(--amber)}.card.red::before{background:var(--red)}',
     '.card h3{font-size:14px;font-weight:600;margin-bottom:6px}',
     '.row{display:flex;align-items:center;gap:6px;flex-wrap:wrap}',
-    '.badge{font-size:10px;font-weight:600;text-transform:uppercase;letter-spacing:.4px;padding:2px 7px;border-radius:4px;background:#f3f4f6;color:#4b5563}',
-    '.dot{width:8px;height:8px;border-radius:50%;display:inline-block;flex-shrink:0}',
-    '.dot.green{background:var(--green)}.dot.amber{background:var(--amber)}.dot.red{background:var(--red)}',
+    '.badge{font-size:10px;font-weight:600;text-transform:uppercase;letter-spacing:.4px;padding:2px 7px;border-radius:4px;background:var(--line);color:var(--3);font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,"Liberation Mono",monospace}',
+    // colorblind-safe: shape carries the signal too, color reinforces it - circle/square/ring
+    '.dot{width:8px;height:8px;border-radius:50%;display:inline-block;flex-shrink:0;box-sizing:border-box}',
+    '.dot.green{background:var(--green)}.dot.amber{background:var(--amber);border-radius:2px}.dot.red{background:transparent;border:2px solid var(--red)}',
     '.trust-label{font-weight:600;font-size:11px;text-transform:uppercase;letter-spacing:.3px}',
     '.t-green{color:var(--green)}.t-amber{color:var(--amber)}.t-red{color:var(--red)}',
     '.meta{color:var(--muted);font-size:11px}',
     '.card .next{margin-top:10px;font-size:12.5px;line-height:1.5;color:var(--2)}.card .next b{color:var(--3);font-weight:600;font-size:10px;text-transform:uppercase;letter-spacing:.3px;margin-right:2px}',
-    '.card .risk{margin-top:8px;font-size:11.5px;color:#991b1b;padding:5px 8px;background:#fef2f2;border-radius:4px;border-left:2px solid var(--red);line-height:1.4}',
-    '.card .risk.amber-risk{color:#92400e;background:#fffbeb;border-left-color:var(--amber)}',
+    '.card .risk{margin-top:8px;font-size:11.5px;color:var(--red-ink2);padding:5px 8px;background:var(--red-bg);border-radius:4px;border-left:2px solid var(--red);line-height:1.4}',
+    '.card .risk.amber-risk{color:var(--amber-ink2);background:var(--amber-bg);border-left-color:var(--amber)}',
     // demote placeholder cards (no next action) - quiet until they earn attention
     '.card.muted{opacity:.55}',
     '.card.muted:hover{opacity:1}',
+    // search match context - why this card/row matched, in the card's own words
+    '.match-snippet{margin-top:8px;font-size:11.5px;line-height:1.4;color:var(--3);background:var(--bg);border-radius:4px;padding:5px 8px}',
+    '.match-snippet:empty{display:none;padding:0;margin:0}',
+    '.match-snippet mark{background:rgba(99,102,241,.25);color:inherit;border-radius:2px;padding:0 1px}',
     // section labels
     'h2.section{margin:28px 0 12px;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:.6px;color:var(--muted)}',
     // detail accordion - tight, content-forward
@@ -559,10 +705,10 @@ function dashStyles() {
     'th{background:var(--bg);font-size:10px;font-weight:600;text-transform:uppercase;letter-spacing:.4px;color:var(--3);border-bottom:1px solid var(--line2)}',
     'tr:last-child td{border-bottom:none}',
     'tr:hover td{background:var(--bg)}',
-    'code{background:#f3f4f6;padding:1px 5px;border-radius:4px;font-size:12px;color:#4b5563}',
+    'code{background:var(--line);padding:1px 5px;border-radius:4px;font-size:12px;color:var(--3)}',
     // footer
     'footer{max-width:960px;margin:0 auto;padding:0 32px 48px;color:var(--muted);font-size:11.5px;line-height:1.5}',
-    'footer code{color:var(--3);background:#f3f4f6}',
+    'footer code{color:var(--3);background:var(--line)}',
     '.hide{display:none!important}',
     // responsive
     '@media(max-width:640px){header{padding:16px}.header .inner{flex-direction:column;align-items:flex-start}.wrap{padding:16px 16px 48px}.grid{grid-template-columns:1fr}.search{padding-left:32px}}',
@@ -573,19 +719,47 @@ function dashScript() {
   return [
     "var q=document.getElementById('q');",
     "function norm(s){return (s||'').toLowerCase();}",
+    "function esc(s){return s.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');}",
+    // why a card matched - a short excerpt from its own text, term highlighted
+    "function snippetFor(raw,term){",
+    "  var i=raw.indexOf(term);",
+    "  if(i<0)return '';",
+    "  var start=Math.max(0,i-28),end=Math.min(raw.length,i+term.length+46);",
+    "  var pre=esc(raw.slice(start,i)),hit=esc(raw.slice(i,i+term.length)),post=esc(raw.slice(i+term.length,end));",
+    "  return (start>0?'\u2026':'')+pre+'<mark>'+hit+'</mark>'+post+(end<raw.length?'\u2026':'');",
+    "}",
     "if(q){q.addEventListener('input',function(){",
     "  var term=norm(q.value);",
     "  document.querySelectorAll('[data-search]').forEach(function(el){",
-    "    var hit=!term||norm(el.getAttribute('data-search')).indexOf(term)>-1;",
+    "    var raw=norm(el.getAttribute('data-search'));",
+    "    var hit=!term||raw.indexOf(term)>-1;",
     "    el.classList.toggle('hide',!hit);",
+    "    var snip=el.querySelector('.match-snippet');",
+    "    if(snip)snip.innerHTML=(hit&&term)?snippetFor(raw,term):'';",
     "  });",
     "});}",
-    "document.querySelectorAll('.card').forEach(function(c){",
+    "document.querySelectorAll('.card,.attn').forEach(function(c){",
     "  c.addEventListener('click',function(){",
     "    var d=document.getElementById(c.getAttribute('data-target'));",
     "    if(d){d.open=true;d.scrollIntoView({behavior:'smooth',block:'start'});}",
     "  });",
     "});",
+    // '/' jumps to search from anywhere, unless already typing somewhere
+    "document.addEventListener('keydown',function(e){",
+    "  var t=e.target,typing=t&&(t.tagName==='INPUT'||t.tagName==='TEXTAREA'||t.isContentEditable);",
+    "  if(!typing&&e.key==='/'&&q){e.preventDefault();q.focus();}",
+    "});",
+    // theme toggle - local only, no network; pre-paint script in <head> avoids a flash
+    "var themeBtn=document.getElementById('fde-theme-btn');",
+    "function currentTheme(){return document.documentElement.getAttribute('data-fde-theme')==='dark'?'dark':'light';}",
+    "function setThemeLabel(){if(themeBtn)themeBtn.textContent=(currentTheme()==='dark'?'light':'dark')+' mode';}",
+    "setThemeLabel();",
+    "if(themeBtn){themeBtn.addEventListener('click',function(){",
+    "  var next=currentTheme()==='dark'?'light':'dark';",
+    "  try{localStorage.setItem('fde-fieldbook-theme',next);}catch(_){}",
+    "  document.documentElement.setAttribute('data-fde-theme',next);",
+    "  setThemeLabel();",
+    "});}",
   ].join('\n')
 }
 
@@ -628,16 +802,21 @@ function cmdDashboard(args) {
     directiveClass = reds.length ? 'directive' : 'directive amber'
   }
 
+  // signal provenance: how old the structured trust token is, "?" when stale (>21d)
+  const signalMeta = e => e.signals.signalAge != null
+    ? `<span class="meta">signal ${e.signals.signalAge}d old${e.signals.stale ? ' - reconfirm' : ''}</span>` : ''
+
   // red engagements: full-width attention rows that dominate the page
   const attention = reds.map(e => {
     const id = 'eng-' + slugify(e.name)
     return [
       `<div class="attn" data-target="${id}" data-search="${e.searchBlob}">`,
-      `<div class="attn-head"><span class="dot red"></span><span class="trust-label t-red">RED</span>`,
+      `<div class="attn-head"><span class="dot red"></span><span class="trust-label t-red">RED${e.signals.stale ? '?' : ''}</span>`,
       `<h3>${inlineMd(e.name)}</h3>`,
-      `<span class="badge">${inlineMd(e.signals.phase)}</span><span class="meta">updated ${e.signals.updated}</span></div>`,
+      `<span class="badge">${inlineMd(e.signals.phase)}</span><span class="meta">updated ${e.signals.updated}</span>${signalMeta(e)}</div>`,
       e.signals.topRisk ? `<div class="risk">${inlineMd(e.signals.topRisk)}</div>` : '',
       e.next ? `<div class="next"><b>Next</b> ${inlineMd(e.next)}</div>` : '',
+      `<div class="match-snippet"></div>`,
       `</div>`,
     ].join('')
   }).join('\n')
@@ -650,10 +829,11 @@ function cmdDashboard(args) {
     return [
       `<div class="card ${trustClass}${muted}" data-target="${id}" data-search="${e.searchBlob}">`,
       `<h3>${inlineMd(e.name)}</h3>`,
-      `<div class="row"><span class="dot ${trustClass}"></span><span class="trust-label t-${trustClass}">${trustClass}</span>`,
-      `<span class="badge">${inlineMd(e.signals.phase)}</span><span class="meta">updated ${e.signals.updated}</span></div>`,
+      `<div class="row"><span class="dot ${trustClass}"></span><span class="trust-label t-${trustClass}">${trustClass}${e.signals.stale ? '?' : ''}</span>`,
+      `<span class="badge">${inlineMd(e.signals.phase)}</span><span class="meta">updated ${e.signals.updated}</span>${signalMeta(e)}</div>`,
       e.next ? `<div class="next"><b>Next</b> ${inlineMd(e.next)}</div>` : '<div class="next meta">next action not set</div>',
       e.signals.topRisk ? `<div class="risk amber-risk">${inlineMd(e.signals.topRisk)}</div>` : '',
+      `<div class="match-snippet"></div>`,
       `</div>`,
     ].join('')
   }).join('\n')
@@ -691,6 +871,9 @@ function cmdDashboard(args) {
   const html = [
     '<!doctype html><html lang="en"><head><meta charset="utf-8">',
     '<meta name="viewport" content="width=device-width,initial-scale=1">',
+    // pre-paint theme: read the one localStorage key before first render so there is no flash.
+    // No network calls - this file still opens and works fully offline.
+    '<script>try{var t=localStorage.getItem("fde-fieldbook-theme");if(t==="dark"||(!t&&window.matchMedia&&window.matchMedia("(prefers-color-scheme: dark)").matches))document.documentElement.setAttribute("data-fde-theme","dark");}catch(e){}</script>',
     '<title>FDE Fieldbook</title><style>' + dashStyles() + '</style></head><body>',
     '<header><div class="inner"><div class="brand"><h1>FDE Fieldbook</h1>',
     `<span class="tagline">${engagements.length} engagement${engagements.length === 1 ? '' : 's'}</span></div>`,
@@ -698,9 +881,11 @@ function cmdDashboard(args) {
     `<span class="stat"><span class="sdot green"></span> <b>${counts.green}</b> green</span>`,
     `<span class="stat"><span class="sdot amber"></span> <b>${counts.amber}</b> amber</span>`,
     `<span class="stat"><span class="sdot red"></span> <b>${counts.RED}</b> red</span>`,
+    '<button id="fde-theme-btn" class="theme-toggle" type="button">dark mode</button>',
     '</div></div></header>',
     '<div class="wrap">',
     engagements.length ? '<div class="search-wrap"><svg viewBox="0 0 24 24"><circle cx="11" cy="11" r="8"/><path d="M21 21l-4.35-4.35"/></svg><input id="q" class="search" placeholder="Search across all engagements..."></div>' : '',
+    engagements.length ? '<span class="search-hint">press <kbd>/</kbd> to search - a matching card shows why, right on the card</span>' : '',
     directive ? `<div class="${directiveClass}"><span class="directive-dot"></span><span>${directive}</span></div>` : '',
     reds.length ? '<h2 class="section">Needs attention</h2><div class="attn-stack">' + attention + '</div>' : '',
     engagements.length ? `<h2 class="section">${reds.length ? 'Rest of portfolio' : 'Portfolio'}</h2>` : '',
@@ -732,6 +917,7 @@ switch (cmd) {
   case 'scan': cmdScan(); break
   case 'resume': cmdResume(args); break
   case 'log': cmdLog(args); break
+  case 'debrief': cmdDebrief(args); break
   case 'receipts': cmdReceipts(args); break
   case 'capture': cmdCapture(); break
   case 'status': cmdStatus(); break
@@ -741,8 +927,10 @@ switch (cmd) {
   fde scan                 day-1 recon of this repo (facts, no AI)
   fde resume               load this workspace's engagement memory (bounded)
   fde resume --full        load the complete context.md (no bound)
-  fde resume --init <name> create + bind engagement for this workspace
-  fde log <type> <text>    append decision|risk|delivery|contact
+  fde resume --init <name> create + bind engagement for this workspace (rebind replaces)
+  fde resume --bind        show what this workspace is bound to, and what resolves
+  fde log <type> <text>    append decision|risk|delivery|contact (contact takes --signal red|amber|green)
+  fde debrief [file]       meeting notes → memory: decision:/risk:/delivery:/contact: lines route, rest → context.md (stdin if no file; --dry-run previews)
   fde receipts <term>      "what did we agree?" with dates
   fde capture              session-end memory snapshot (hooks use this)
   fde status               portfolio across all engagements

package/bin/install.js

@@ -210,11 +210,17 @@ function cmdInstall() {
   console.log('')
 }
 
+// `npx fdeops scan` must recon, not install - any fde subcommand passes straight
+// through to the CLI (fde.js reads process.argv itself, so require() is enough).
+const FDE_SUBCOMMANDS = ['scan', 'resume', 'log', 'debrief', 'receipts', 'capture', 'status', 'dashboard']
+
 const arg = process.argv[2]
 if (arg === 'init') {
   cmdInit(process.argv[3])
 } else if (arg === 'adapters') {
   cmdAdapters(process.argv[3])
+} else if (FDE_SUBCOMMANDS.includes(arg)) {
+  require(path.join(__dirname, 'fde.js'))
 } else {
   cmdInstall()
 }

package/hooks/pre-compact

@@ -11,8 +11,27 @@ resolve_engagement_dir() {
   return 1
 }
 
+# Workspace registry written by `fde resume --init` - mirrors resolveEngagement()
+# step 2 in bin/fde.js; keep the resolution order identical in bash and JS.
+# Lines are "<workspace-path> <slug>": the path may contain spaces, the slug
+# never does, so split on the LAST space (same as the JS lastIndexOf parse).
+registry_engagement_dir() {
+  local reg="$HOME/fde-engagements/.registry" slug
+  [ -f "$reg" ] || return 1
+  slug=$(awk 'BEGIN{ws=ENVIRON["PWD"]}
+    { i = match($0, / [^ ]*$/)
+      if (i > 0 && substr($0, 1, i - 1) == ws) { print substr($0, i + 1); exit } }' "$reg" 2>/dev/null)
+  [ -z "$slug" ] && return 1
+  [ -d "$HOME/fde-engagements/$slug/.fde" ] && printf '%s\n' "$HOME/fde-engagements/$slug/.fde" && return 0
+  return 1
+}
+
 ENG_DIR=$(resolve_engagement_dir "${FDEOPS_ENGAGEMENT:-${FDEOS_ENGAGEMENT:-}}")
 
+if [ -z "$ENG_DIR" ]; then
+  ENG_DIR=$(registry_engagement_dir)
+fi
+
 if [ -z "$ENG_DIR" ] && [ -f "CLAUDE.md" ]; then
   ENG=$(grep -m1 '^FDEOPS_ENGAGEMENT=\|^FDEOS_ENGAGEMENT=' CLAUDE.md 2>/dev/null | cut -d= -f2-)
   ENG_DIR=$(resolve_engagement_dir "$ENG")

package/hooks/session-start

@@ -23,27 +23,48 @@ resolve_engagement_dir() {
   return 1
 }
 
+# Workspace registry written by `fde resume --init` - mirrors resolveEngagement()
+# step 2 in bin/fde.js; keep the resolution order identical in bash and JS.
+# Lines are "<workspace-path> <slug>": the path may contain spaces, the slug
+# never does, so split on the LAST space (same as the JS lastIndexOf parse).
+registry_engagement_dir() {
+  local reg="$HOME/fde-engagements/.registry" slug
+  [ -f "$reg" ] || return 1
+  slug=$(awk 'BEGIN{ws=ENVIRON["PWD"]}
+    { i = match($0, / [^ ]*$/)
+      if (i > 0 && substr($0, 1, i - 1) == ws) { print substr($0, i + 1); exit } }' "$reg" 2>/dev/null)
+  [ -z "$slug" ] && return 1
+  [ -d "$HOME/fde-engagements/$slug/.fde" ] && printf '%s\n' "$HOME/fde-engagements/$slug/.fde" && return 0
+  return 1
+}
+
 # 1) Environment variable (any agent)
 if [ -z "$CONTEXT_FILE" ]; then
   ENG_DIR=$(resolve_engagement_dir "${FDEOPS_ENGAGEMENT:-${FDEOS_ENGAGEMENT:-}}")
   [ -n "$ENG_DIR" ] && CONTEXT_FILE="$ENG_DIR/context.md"
 fi
 
-# 2) Project CLAUDE.md
+# 2) Workspace registry binding (written by fde resume --init)
+if [ -z "$CONTEXT_FILE" ]; then
+  ENG_DIR=$(registry_engagement_dir)
+  [ -n "$ENG_DIR" ] && CONTEXT_FILE="$ENG_DIR/context.md"
+fi
+
+# 3) Project CLAUDE.md
 if [ -z "$CONTEXT_FILE" ] && [ -f "CLAUDE.md" ]; then
   ENG=$(grep -m1 '^FDEOPS_ENGAGEMENT=\|^FDEOS_ENGAGEMENT=' CLAUDE.md 2>/dev/null | cut -d= -f2-)
   ENG_DIR=$(resolve_engagement_dir "$ENG")
   [ -n "$ENG_DIR" ] && CONTEXT_FILE="$ENG_DIR/context.md"
 fi
 
-# 3) Global fdeops pointer file
+# 4) Global fdeops pointer file
 if [ -z "$CONTEXT_FILE" ] && [ -f "$HOME/.claude/FDEOPS-CLAUDE.md" ]; then
   ENG=$(grep -m1 '^FDEOPS_ENGAGEMENT=\|^FDEOS_ENGAGEMENT=' "$HOME/.claude/FDEOPS-CLAUDE.md" 2>/dev/null | cut -d= -f2-)
   ENG_DIR=$(resolve_engagement_dir "$ENG")
   [ -n "$ENG_DIR" ] && CONTEXT_FILE="$ENG_DIR/context.md"
 fi
 
-# 4) Optional in-repo .fde (customer-approved only)
+# 5) Optional in-repo .fde (customer-approved only)
 if [ -z "$CONTEXT_FILE" ] && [ -f ".fde/context.md" ]; then
   CONTEXT_FILE=".fde/context.md"
 fi