fdeops 3.7.1 → 3.7.2

package/AGENTS.md

@@ -1,6 +1,6 @@
 # AGENTS.md - working in the fdeops repository
 
-This repository **is** fdeops - the operating system for Forward Deployed Engineers. One `@fde` skill routes an entire client engagement across six domains, the `fde` CLI does the deterministic work, and per-customer memory writes itself into `.fde/` files.
+This repository **is** fdeops - the second brain for Forward Deployed Engineers. One `@fde` skill routes an entire client engagement across six domains, the `fde` CLI does the deterministic work, and per-customer memory writes itself into `.fde/` files.
 
 ## If you are helping use fdeops in an engagement
 

package/README.md

@@ -27,6 +27,8 @@ Your AI agent's memory is scoped to a **repo**. Client work isn't: one engagemen
 
 fdeops adds the missing layer: memory scoped to the **client** - plain markdown at `~/fde-engagements/<client>/.fde/`, written as a side effect of doing the work. Local only, zero dependencies, no network, no telemetry.
 
+A notes app stores what you type. fdeops loads the right client into your AI agent's context automatically and turns meetings into dated receipts you can defend - the difference is what happens without you opening it.
+
 ## Without fdeops vs with fdeops
 
 | Moment | Without fdeops | With fdeops |
@@ -51,9 +53,11 @@ fdeops adds the missing layer: memory scoped to the **client** - plain markdown
 **2. Bind your client workspace** - run once, inside the workspace:
 
 ```bash
-fde resume --init garvey
+npx fdeops resume --init garvey
 ```
 
+(`npx` needs nothing pre-installed. Want the bare `fde` command the rest of this README uses? `npm i -g fdeops` - the plugin install alone does not put `fde` on your PATH.)
+
 fdeops' `--init` creates the engagement memory at `~/fde-engagements/garvey/.fde/` (plain markdown, private to your machine) and binds this workspace to it. The hooks read that binding - context auto-loads at session start, auto-captures at session end. That is the whole setup.
 
 **3. Work**
@@ -64,7 +68,7 @@ fdeops' `--init` creates the engagement memory at `~/fde-engagements/garvey/.fde
 
 `@fde` is the one skill fdeops installs. Describe what's happening; it routes to the right field method and the memory writes itself. Full workflow: [docs/USAGE.md](docs/USAGE.md).
 
-Not ready to install? `npx fdeops scan` runs on any repo you can read - day-1 recon (pure `git` + file reads, no config, no account) that maps hotspots, test gaps, and reverted attempts, and ends with the ASK ON DAY 1 questions the brief never mentions.
+Not ready to install? `npx fdeops scan` runs on any repo you can read - day-1 recon (pure `git` + file reads, no config, no account) that maps hotspots, test gaps, and reverted attempts, and ends with the ASK ON DAY 1 questions the brief never mentions. The scan is heuristic by design - treat its output as leads to verify on day one, not findings.
 
 <details>
 <summary><strong>Other install paths</strong> - Cursor, Codex, Copilot, Gemini CLI, local LLMs, air-gapped</summary>
@@ -80,6 +84,17 @@ Not ready to install? `npx fdeops scan` runs on any repo you can read - day-1 re
 
 ---
 
+## The week
+
+This is the actual habit, not the 35 skills:
+
+- **Monday morning** - open your agent, context loads, you're not re-explaining anything
+- **After a meeting** - `fde debrief` turns raw notes into dated decisions, risks, and signals
+- **Mid-scope-fight** - `fde receipts <term>` answers "when did we agree to that?"
+- **Friday** - `fde status` gives you the sponsor update from the week's actual record
+
+---
+
 ## How it works
 
 Two hooks and one router, on top of the fieldbook:
@@ -100,7 +115,7 @@ Two hooks and one router, on top of the fieldbook:
 
 Overlays for regulated domains (AI, fintech, healthcare, government) activate on signal. fdeops complements your agent's native repo memory: CLAUDE.md holds how the *code* works; the fieldbook holds how the *engagement* works. Full matrix: [docs/skills.md](docs/skills.md).
 
-Works with **Claude Code** - **Cursor** - **Copilot** - **Devin** - **Gemini CLI** - **Ollama** - **LM Studio** - any model that reads a markdown file.
+Works with **Claude Code** - **Cursor** - **Copilot** - **Gemini CLI** - **Ollama** - **LM Studio** - any model that reads a markdown file.
 
 ---
 
@@ -174,6 +189,7 @@ Details: [PRIVACY.md](PRIVACY.md) · [SECURITY.md](SECURITY.md)
 ## Principles
 
 - **The artifact is the memory** - producing work and recording it are one action
+- **Methods, not autonomy** - each skill tells you what to check; the judgment, the trust, and the consequences stay yours
 - **Trust before production** - earn the right to touch their systems
 - **Brief is a hypothesis** - discover before building the wrong thing
 - **Evidence on every claim** - these files get defended in front of skeptical clients

package/bin/fde.js

@@ -547,10 +547,11 @@ function cmdResume(args) {
     process.exit(2)
   }
   console.log(`ENGAGEMENT: ${eng}\n`)
-  try {
-    const ctx = fs.readFileSync(path.join(eng, 'context.md'), 'utf8')
-    console.log(args.includes('--full') ? ctx : resumeView(ctx))
-  } catch (_) { console.log('(context.md empty - new engagement)') }
+  // readClean, not fs.readFileSync: this output is what an agent loads as
+  // context, so it goes through the same <private> redaction as the dashboard.
+  const ctx = readClean(eng, 'context.md')
+  if (!ctx) { console.log('(context.md empty - new engagement)') }
+  else { console.log(args.includes('--full') ? ctx : resumeView(ctx)) }
 }
 
 // Token discipline: context.md grows every session (the session-stop hook

package/hooks/session-start

@@ -79,6 +79,31 @@ if [ "$IS_FDE_PROJECT" -eq 0 ]; then
   exit 0
 fi
 
+# Mirrors stripPrivate() in bin/fde.js: this is what an agent loads as
+# context, so <private>...</private> blocks (sacred data, never-AI content)
+# must never reach here unredacted, same guarantee as the dashboard renderer.
+# <private> blocks are written one per line in the templates (own line, own
+# closing tag), so a line-based state machine matches the real usage; an
+# unclosed <private> redacts to end-of-file, same as the JS regex fallback.
+strip_private() {
+  awk '
+    BEGIN { inblock = 0 }
+    {
+      line = $0
+      if (inblock) {
+        if (index(line, "</private>") > 0) { inblock = 0 }
+        next
+      }
+      if (index(line, "<private>") > 0) {
+        print "(private - redacted)"
+        if (index(line, "</private>") == 0) { inblock = 1 }
+        next
+      }
+      print line
+    }
+  ' "$1"
+}
+
 # Token discipline: context.md grows every session (session-stop appends a
 # snapshot). Inject a bounded view - curated head + most recent activity -
 # instead of the whole log. Mirrors resumeView() in bin/fde.js; keep in sync.
@@ -106,7 +131,10 @@ if [ -n "$BOOTSTRAP" ]; then
 fi
 
 if [ -n "$CONTEXT_FILE" ] && [ -f "$CONTEXT_FILE" ]; then
-  CONTENT="$CONTENT---\nEngagement context ($CONTEXT_FILE):\n$(bounded_context "$CONTEXT_FILE")\n"
+  REDACTED_CONTEXT=$(mktemp)
+  strip_private "$CONTEXT_FILE" > "$REDACTED_CONTEXT"
+  CONTENT="$CONTENT---\nEngagement context ($CONTEXT_FILE):\n$(bounded_context "$REDACTED_CONTEXT")\n"
+  rm -f "$REDACTED_CONTEXT"
 fi
 
 printf '%b' "$CONTENT"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops",
-  "version": "3.7.1",
+  "version": "3.7.2",
   "description": "Field kit for engineers embedded in client work - a real CLI (recon, memory, portfolio), one @fde skill with field judgment on top, and hooks that make it automatic. Claude Code plugin and any agent that loads skills.",
   "bin": {
     "fdeops": "bin/install.js",

package/skills/fde/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: fde
-description: The operating system for Forward Deployed Engineers. 35 skills across 6 domains - from first meeting to final handoff. Tell it your situation, it routes to the right skill, does the work, and the engagement memory writes itself.
+description: The second brain for Forward Deployed Engineers. 35 skills across 6 domains - from first meeting to final handoff. Tell it your situation, it routes to the right skill, does the work, and the engagement memory writes itself.
 ---
 
 # @fde