runbrief 0.1.3 → 0.1.4

package/dist/cli.js

@@ -765,6 +765,7 @@ var init_dist = __esm({
       "small_refactor",
       "bug_investigation",
       "qa_edge_cases",
+      "web_dogfood",
       "performance",
       "porting",
       "experiment",
@@ -5472,12 +5473,12 @@ function sourceReadLimit(type) {
     return CODE_SOURCE_MAX_BYTES;
   return void 0;
 }
-function sourceDocument(pathName, type, content) {
+function sourceDocument(pathName2, type, content) {
   return {
-    id: idFor("src", `${pathName}:${content}`),
-    path: pathName,
+    id: idFor("src", `${pathName2}:${content}`),
+    path: pathName2,
     type,
-    title: titleFromPath(pathName),
+    title: titleFromPath(pathName2),
     excerpt: firstLines(content, 14),
     content,
     contentHash: contentHash(content),
@@ -7622,12 +7623,12 @@ function extractReviewMemories(sources, rules) {
   }
   return memories.slice(0, 32);
 }
-function mapNode(type, pathName, summary, tags, metadata) {
+function mapNode(type, pathName2, summary, tags, metadata) {
   const node = {
-    id: idFor("map", `${type}:${pathName}`),
+    id: idFor("map", `${type}:${pathName2}`),
     type,
-    name: titleFromPath(pathName),
-    path: pathName,
+    name: titleFromPath(pathName2),
+    path: pathName2,
     summary,
     tags
   };
@@ -13473,8 +13474,8 @@ function sameStem(testPath, sourcePath) {
 function isTestScriptNode(node) {
   return node.type === "workflow" && node.tags.some((tag) => /test|check|type|e2e|smoke/i.test(tag));
 }
-function isTestPathCandidate(pathName) {
-  return /(^|\/|\.)(test|spec)\.[^.]+$/i.test(pathName);
+function isTestPathCandidate(pathName2) {
+  return /(^|\/|\.)(test|spec)\.[^.]+$/i.test(pathName2);
 }
 function summarizeContext(task, rules, tests, map = []) {
   const implementationPaths = contextSummaryPaths(map);
@@ -14021,6 +14022,331 @@ var init_context = __esm({
   }
 });
 
+// ../core/dist/productIntelligence.js
+import { isIP } from "node:net";
+function loadProductIntelligence(repoRoot) {
+  for (const filePath of briefCacheCandidatePaths(repoRoot, productIntelligenceFile)) {
+    const content = readBriefLedgerFile(filePath);
+    if (!content)
+      continue;
+    try {
+      const parsed = JSON.parse(content);
+      if (isProductIntelligenceStore(parsed)) {
+        return withLocalProductLearnings(repoRoot, parsed);
+      }
+    } catch {
+    }
+  }
+  return withLocalProductLearnings(repoRoot, emptyProductIntelligence(pathName(repoRoot)));
+}
+function saveProductIntelligence(repoRoot, input) {
+  return withBriefCacheLock(repoRoot, "product-intelligence", () => {
+    const current = loadProductIntelligence(repoRoot);
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const facts = [...current.facts];
+    const savedFactIds = [];
+    for (const candidate of input.facts) {
+      const statement = normalizeText(candidate.statement, 1e3);
+      if (!statement)
+        continue;
+      const sources = (candidate.sources ?? []).map((source) => normalizeSource(source, now));
+      const existing = facts.find((fact2) => fact2.kind === candidate.kind && normalizeKey(fact2.statement) === normalizeKey(statement));
+      if (existing) {
+        existing.appliesTo = unique([
+          ...existing.appliesTo,
+          ...candidate.appliesTo ?? []
+        ]).slice(0, 24);
+        existing.sources = mergeSources(existing.sources, sources);
+        existing.confidence = Math.max(existing.confidence, clampConfidence(candidate.confidence ?? existing.confidence));
+        if (candidate.status)
+          existing.status = candidate.status;
+        existing.updatedAt = now;
+        savedFactIds.push(existing.id);
+        continue;
+      }
+      const fact = {
+        id: idFor("product-fact", `${candidate.kind}:${statement}`),
+        kind: candidate.kind,
+        statement,
+        appliesTo: unique(candidate.appliesTo ?? []).slice(0, 24),
+        status: candidate.status ?? "proposed",
+        confidence: clampConfidence(candidate.confidence ?? 0.65),
+        sources,
+        createdAt: now,
+        updatedAt: now
+      };
+      facts.unshift(fact);
+      savedFactIds.push(fact.id);
+    }
+    const store = {
+      version: 1,
+      repoName: input.repoName?.trim() || current.repoName,
+      updatedAt: now,
+      facts: facts.slice(0, 300),
+      openQuestions: unique([
+        ...current.openQuestions,
+        ...input.openQuestions ?? []
+      ]).map((item) => normalizeText(item, 300)).filter(Boolean).slice(0, 40),
+      decisions: unique([...current.decisions, ...input.decisions ?? []]).map((item) => normalizeText(item, 500)).filter(Boolean).slice(0, 80)
+    };
+    writeBriefCacheFile(repoRoot, productIntelligenceFile, `${JSON.stringify(store, null, 2)}
+`);
+    return { store, savedFactIds };
+  });
+}
+function buildProductIntelligenceContext(store, task, maxLines = 14) {
+  const now = Date.now();
+  const ranked = store.facts.filter((fact) => fact.status !== "rejected").map((fact) => ({
+    fact,
+    stale: isStale(fact, now),
+    score: factRelevance(fact, task)
+  })).sort((a, b) => b.score - a.score || Number(b.fact.status === "approved") - Number(a.fact.status === "approved") || b.fact.updatedAt.localeCompare(a.fact.updatedAt));
+  const relevant = ranked.filter((item) => item.score > 0);
+  const selected = (relevant.length > 0 ? relevant : ranked).slice(0, 8);
+  const relevantFacts = selected.map((item) => item.fact);
+  const staleFactCount = ranked.filter((item) => item.stale).length;
+  const sourceCount = new Set(store.facts.flatMap((fact) => fact.sources.map((source) => source.id))).size;
+  const hasApproved = relevantFacts.some((fact) => fact.status === "approved");
+  const hasProposed = relevantFacts.some((fact) => fact.status === "proposed");
+  const status = relevantFacts.length === 0 ? "needs_research" : hasProposed ? "needs_review" : hasApproved && staleFactCount === 0 ? "ready" : "needs_research";
+  const summary = relevantFacts.length === 0 ? "No product intelligence matches this task yet." : `${relevantFacts.length} product fact${relevantFacts.length === 1 ? "" : "s"} matched; ${sourceCount} cited source${sourceCount === 1 ? "" : "s"}${staleFactCount > 0 ? `, ${staleFactCount} may be stale` : ""}.`;
+  const compactLines = [
+    `Product intelligence: ${summary}`,
+    ...relevantFacts.slice(0, 5).map((fact) => `- ${statusLabel(fact.status)} ${fact.kind}: ${fact.statement}`),
+    ...store.openQuestions.length > 0 ? [`Open question: ${store.openQuestions[0]}`] : [],
+    ...staleFactCount > 0 ? ["Refresh market, competitor, or integration evidence before treating it as current."] : []
+  ];
+  const compactText = compactLines.slice(0, Math.max(4, maxLines)).join("\n");
+  return {
+    status,
+    summary,
+    relevantFacts,
+    staleFactCount,
+    sourceCount,
+    openQuestions: store.openQuestions.slice(0, 8),
+    compactText,
+    next: status === "needs_research" ? "Run brief.product_research_plan, use approved public sources where needed, then save cited observations as proposed context." : status === "needs_review" ? "Review proposed product facts with human judgment before treating them as team defaults." : "Use the cited product facts alongside repo rules; do not let market evidence override a direct user or team decision."
+  };
+}
+function buildProductResearchPlan(input) {
+  const task = normalizeText(input.task, 1e3);
+  const lower = task.toLowerCase();
+  const audience = input.audience?.trim() || "the target user";
+  const competitors = unique(input.competitors ?? []).slice(0, 8);
+  const integrations = unique(input.integrations ?? []).slice(0, 8);
+  const wantsTaste = /design|copy|content|microcopy|ux|ui|tone|visual|style/.test(lower);
+  const wantsMarket = competitors.length > 0 || /competitor|market|alternative|position|pricing|category|landscape/.test(lower);
+  const wantsIntegrations = integrations.length > 0 || /integration|connector|mcp|github|linear|jira|sentry|datadog|slack|figma/.test(lower);
+  const focus = unique([
+    "user job and desired outcome",
+    ...wantsTaste ? ["interaction and language taste"] : [],
+    ...wantsMarket ? ["category alternatives and differentiation"] : [],
+    ...wantsIntegrations ? ["integration expectations and trust boundaries"] : [],
+    "repo and team evidence that should constrain the decision"
+  ]);
+  const questions = [
+    `What is ${audience} trying to accomplish, and what makes the current path hard?`,
+    "Which existing behavior, workflow, or language should Brief preserve rather than reinvent?",
+    ...wantsTaste ? [
+      "What interaction, information hierarchy, and language patterns do users already recognize as high quality?",
+      "Which patterns are genuinely useful versus decorative or over-automated?"
+    ] : [],
+    ...wantsMarket ? [
+      "What do credible alternatives promise, and where do users still have to do the hard judgment themselves?",
+      "What narrow outcome can Brief own without copying a competitor's category language?"
+    ] : [],
+    ...wantsIntegrations ? [
+      "What setup, auth, permission, and failure behavior do users expect from this integration?",
+      "Which integration signals are official and current enough to become product guidance?"
+    ] : []
+  ];
+  const searchQueries = [
+    `${task} official documentation workflow users`,
+    ...competitors.length > 0 ? competitors.map((name) => `${name} official product docs ${task}`) : ["leading alternatives official docs product workflow"],
+    ...integrations.length > 0 ? integrations.map((name) => `${name} official integration docs auth permissions`) : []
+  ].slice(0, 10);
+  return {
+    status: "plan_ready",
+    task,
+    focus,
+    questions: questions.slice(0, 8),
+    searchQueries,
+    sourcePolicy: [
+      "Prefer official product documentation, changelogs, pricing, and security pages for current capabilities.",
+      "Use user feedback, interviews, support, analytics, and dogfood receipts for needs and outcomes; label them separately from market claims.",
+      "Attach the URL or repo path and access date to every saved observation; include a short excerpt only when it clarifies the claim.",
+      "Save findings as proposed until a product owner approves them. Conflicts stay visible as open questions.",
+      "Do not send private customer material or credentials to external research sources."
+    ],
+    deliverable: [
+      "3-7 cited observations, each with a claim and implication for Brief.",
+      "A short JTBD/persona or taste decision, if the evidence supports one.",
+      "Competitor or integration notes separated from direct user evidence.",
+      "Open questions and a decision owner rather than false certainty."
+    ],
+    next: "Research with the host's approved web/browser tools, then call brief.save_product_context with cited proposed facts."
+  };
+}
+function emptyProductIntelligence(repoName) {
+  return {
+    version: 1,
+    repoName,
+    updatedAt: (/* @__PURE__ */ new Date(0)).toISOString(),
+    facts: [],
+    openQuestions: [],
+    decisions: []
+  };
+}
+function withLocalProductLearnings(repoRoot, store) {
+  const learnedFacts = loadLocalLearnings(repoRoot).filter((learning) => /product|design|content|copy|ux|ui|user|journey|taste|terminology|workflow|integration|competitor|market/i.test(`${learning.title} ${learning.body} ${learning.files.join(" ")}`)).slice(0, 80).map((learning) => ({
+    id: idFor("product-learning", learning.id),
+    kind: /copy|content|terminology|tone/i.test(`${learning.title} ${learning.body}`) ? "terminology" : /user|journey|job/i.test(`${learning.title} ${learning.body}`) ? "jtbd" : "principle",
+    statement: normalizeText(learning.body, 1e3),
+    appliesTo: learning.files,
+    status: learning.status === "approved" ? "approved" : "proposed",
+    confidence: clampConfidence(learning.confidence),
+    sources: [
+      {
+        id: idFor("product-learning-source", learning.id),
+        kind: "feedback",
+        label: `Local learning: ${normalizeText(learning.title, 140)}`,
+        path: ".brief-cache/learnings.json",
+        accessedAt: learning.createdAt
+      }
+    ],
+    createdAt: learning.createdAt,
+    updatedAt: learning.createdAt
+  }));
+  const existingIds = new Set(store.facts.map((fact) => fact.id));
+  const nextFacts = learnedFacts.filter((fact) => !existingIds.has(fact.id));
+  return nextFacts.length === 0 ? store : { ...store, facts: [...nextFacts, ...store.facts].slice(0, 300) };
+}
+function pathName(repoRoot) {
+  return repoRoot.split(/[\\/]/).filter(Boolean).pop() ?? "repo";
+}
+function factRelevance(fact, task) {
+  const text = `${task} ${fact.appliesTo.join(" ")}`.toLowerCase();
+  const statement = fact.statement.toLowerCase();
+  const words = unique(text.split(/[^a-z0-9]+/).filter((word) => word.length >= 4));
+  let score = fact.status === "approved" ? 3 : 1;
+  for (const word of words)
+    if (statement.includes(word))
+      score += 4;
+  const kindTerms = {
+    persona: ["user", "audience", "persona", "customer"],
+    jtbd: ["job", "outcome", "workflow", "task"],
+    principle: ["design", "ui", "ux", "copy", "taste", "quality"],
+    terminology: ["copy", "content", "word", "term", "language", "tone"],
+    competitor: ["competitor", "market", "alternative", "position"],
+    integration: ["integration", "connector", "auth", "permission", "mcp"],
+    metric: ["metric", "activation", "retention", "conversion", "usage"],
+    decision: ["decision", "scope", "choose", "prioritize"]
+  };
+  if (kindTerms[fact.kind].some((term) => text.includes(term)))
+    score += 8;
+  return score;
+}
+function isStale(fact, now) {
+  const ageDays = (now - Date.parse(fact.updatedAt)) / 864e5;
+  const marketFact = ["competitor", "integration", "metric"].includes(fact.kind);
+  return !Number.isFinite(ageDays) || ageDays > (marketFact ? staleMarketDays : staleProductDays);
+}
+function statusLabel(status) {
+  return status === "approved" ? "[approved]" : "[proposed]";
+}
+function normalizeSource(input, fallbackAccessedAt) {
+  const url = input.url?.trim();
+  if (url)
+    assertPublicResearchUrl(url);
+  if (!input.path?.trim() && !url && input.kind !== "user" && input.kind !== "feedback" && input.kind !== "dogfood") {
+    throw new Error(`A ${input.kind} source needs a public URL or repo path.`);
+  }
+  const label = normalizeText(input.label, 180);
+  return {
+    id: idFor("product-source", `${input.kind}:${url ?? input.path ?? label}`),
+    kind: input.kind,
+    label,
+    ...url ? { url } : {},
+    ...input.path?.trim() ? { path: normalizeText(input.path, 300) } : {},
+    accessedAt: input.accessedAt ?? fallbackAccessedAt,
+    ...input.excerpt?.trim() ? { excerpt: normalizeText(input.excerpt, 420) } : {}
+  };
+}
+function assertPublicResearchUrl(value) {
+  let parsed;
+  try {
+    parsed = new URL(value);
+  } catch {
+    throw new Error("Product research URLs must be valid HTTPS URLs.");
+  }
+  if (parsed.protocol !== "https:" || parsed.username || parsed.password) {
+    throw new Error("Product research URLs must use HTTPS and cannot include credentials.");
+  }
+  const host = parsed.hostname.toLowerCase();
+  if (host === "localhost" || host.endsWith(".localhost") || host === "127.0.0.1" || host === "::1" || isPrivateIp(host)) {
+    throw new Error("Product research URLs must point to public sources.");
+  }
+}
+function isPrivateIp(host) {
+  const family = isIP(host);
+  if (family === 4) {
+    const octets = host.split(".").map(Number);
+    return octets[0] === 10 || octets[0] === 127 || octets[0] === 169 && octets[1] === 254 || octets[0] === 172 && (octets[1] ?? -1) >= 16 && (octets[1] ?? -1) <= 31 || octets[0] === 192 && octets[1] === 168;
+  }
+  return family === 6 && (host.startsWith("fc") || host.startsWith("fd") || host === "::1");
+}
+function mergeSources(current, incoming) {
+  const merged = [...current];
+  for (const source of incoming) {
+    const existing = merged.find((item) => item.id === source.id);
+    if (existing) {
+      Object.assign(existing, source);
+    } else {
+      merged.push(source);
+    }
+  }
+  return merged.slice(0, 12);
+}
+function normalizeText(value, maxLength) {
+  return value.trim().replace(/\s+/g, " ").slice(0, maxLength);
+}
+function normalizeKey(value) {
+  return value.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
+}
+function clampConfidence(value) {
+  return Math.max(0, Math.min(1, Number.isFinite(value) ? value : 0));
+}
+function isProductIntelligenceStore(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const item = value;
+  return item.version === 1 && typeof item.repoName === "string" && typeof item.updatedAt === "string" && Array.isArray(item.facts) && item.facts.every(isFact) && Array.isArray(item.openQuestions) && item.openQuestions.every((question) => typeof question === "string") && Array.isArray(item.decisions) && item.decisions.every((decision) => typeof decision === "string");
+}
+function isFact(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const item = value;
+  return typeof item.id === "string" && typeof item.kind === "string" && typeof item.statement === "string" && Array.isArray(item.appliesTo) && typeof item.status === "string" && typeof item.confidence === "number" && Array.isArray(item.sources) && item.sources.every(isSource) && typeof item.createdAt === "string" && typeof item.updatedAt === "string";
+}
+function isSource(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const item = value;
+  return typeof item.id === "string" && typeof item.kind === "string" && typeof item.label === "string" && typeof item.accessedAt === "string";
+}
+var productIntelligenceFile, staleMarketDays, staleProductDays;
+var init_productIntelligence = __esm({
+  "../core/dist/productIntelligence.js"() {
+    "use strict";
+    init_localCache();
+    init_localLearning();
+    init_utils();
+    productIntelligenceFile = "product-intelligence.json";
+    staleMarketDays = 90;
+    staleProductDays = 180;
+  }
+});
+
 // ../core/dist/productOperatingContext.js
 function buildProductOperatingContext(scan, request) {
   const files = unique(request.files ?? []);
@@ -14042,6 +14368,16 @@ function buildProductOperatingContext(scan, request) {
   });
   const status = statusFor(taskClasses, reuseBeforeBuild, productRules);
   const score = scoreFor(status, reuseBeforeBuild, productRules, terminology);
+  const productIntelligence = request.repoRoot ? buildProductIntelligenceContext(loadProductIntelligence(request.repoRoot), request.task, Math.max(4, Math.min(12, (request.maxLines ?? 32) - 8))) : {
+    status: "not_available",
+    summary: "Product intelligence is not available without a repo root.",
+    relevantFacts: [],
+    staleFactCount: 0,
+    sourceCount: 0,
+    openQuestions: [],
+    compactText: "Product intelligence: not available without a repo root.",
+    next: "Resolve the repository before reading product context."
+  };
   const summary = status === "not_applicable" ? `${scan.repoName}: no product/design operating context was needed for this task.` : `${scan.repoName}: ${taskClasses.join(", ")} work should reuse ${reuseBeforeBuild.length} existing pattern${reuseBeforeBuild.length === 1 ? "" : "s"} and satisfy ${acceptanceCriteria.length} acceptance checks before handoff.`;
   const compactText = compactTextFor({
     summary,
@@ -14051,6 +14387,7 @@ function buildProductOperatingContext(scan, request) {
     acceptanceCriteria,
     terminology,
     stopSignals: stopSignals2,
+    productIntelligence,
     maxLines: request.maxLines ?? 32
   });
   return {
@@ -14070,9 +14407,10 @@ function buildProductOperatingContext(scan, request) {
     validation,
     productMemoryCandidates,
     stopSignals: stopSignals2,
+    productIntelligence,
     compactText,
     lineCount: compactText.split(/\r?\n/).length,
-    next: status === "not_applicable" ? "Continue with the normal before-you-code packet." : "Read compactText before editing; reuse or rule out the listed patterns, then validate the journey, terminology, state, and CTA checks before handoff."
+    next: status === "not_applicable" ? "Continue with the normal before-you-code packet." : `Read compactText before editing; reuse or rule out the listed patterns, then validate the journey, terminology, state, and CTA checks before handoff. ${productIntelligence.next}`
   };
 }
 function needsProductOperatingContext(request) {
@@ -14530,6 +14868,7 @@ function compactTextFor(input) {
     ...input.terminology.preferred.length > 0 ? [
       `Terminology: use ${input.terminology.preferred.slice(0, 8).join(", ")}.`
     ] : [],
+    ...input.productIntelligence.status !== "not_available" ? input.productIntelligence.compactText.split(/\r?\n/) : [],
     "Stop if:",
     ...itemLines(input.stopSignals, (item) => item, "No stop signals.", 4)
   ];
@@ -14558,6 +14897,7 @@ var init_productOperatingContext = __esm({
   "../core/dist/productOperatingContext.js"() {
     "use strict";
     init_utils();
+    init_productIntelligence();
     PRODUCT_KEYWORDS = [
       "app",
       "cta",
@@ -14566,6 +14906,16 @@ var init_productOperatingContext = __esm({
       "feature",
       "flow",
       "journey",
+      "jtbd",
+      "job-to-be-done",
+      "persona",
+      "competitor",
+      "market",
+      "research",
+      "taste",
+      "integration",
+      "customer",
+      "feedback",
       "page",
       "product",
       "screen",
@@ -16803,6 +17153,9 @@ function recipeFor(explicitRecipe, task, request) {
     return missionRecipes.find((recipe) => recipe.id === explicitRecipe) ?? missionRecipes[0];
   }
   const lower = task.toLowerCase();
+  if (/\b(dogfood|dogfooding|exploratory browser|web app smoke|browser smoke|product safari|try the app|use the app)\b/.test(lower) && /\b(app|site|web|browser|page|screen|flow|journey|ui|ux|localhost|staging|production)\b/.test(lower)) {
+    return recipeById("web_dogfood");
+  }
   if (isDesignLedChange(lower)) {
     return recipeById("design_change");
   }
@@ -17153,6 +17506,9 @@ function missionSummary(repoName, recipe, autonomy, request) {
   if (recipe.id === "qa_edge_cases") {
     return `${repoName} can run this as the QA edge-case loop: find missing coverage around risky behavior, add or improve tests, validate the signal, then review the diff.`;
   }
+  if (recipe.id === "web_dogfood") {
+    return `${repoName} can run this as a read-only browser dogfooding loop: name the critical journeys, exercise the app like a user, capture reproducible evidence, separate product friction from environment noise, then hand back the top fixes and reusable learning.`;
+  }
   if (recipe.id === "performance") {
     return `${repoName} can run this as the performance loop: capture a baseline, form a bounded optimization hypothesis, measure before and after, review the diff, then save handoff proof.`;
   }
@@ -17295,6 +17651,15 @@ function missionGates(autonomy, recipe, options2) {
       failureMode: "Do not add low-signal tests or hide flaky checks. Ask for the behavior risk and validation target."
     });
   }
+  if (recipe.id === "web_dogfood") {
+    gates.push({
+      id: "browser_journey",
+      label: "Browser journey gate",
+      requiredTool: "available browser",
+      passCriteria: "The agent names safe starting state, critical journeys, expected outcomes, stop conditions, and evidence fields before interacting with the app.",
+      failureMode: "Do not click through an unclear or destructive flow. Ask for a safe fixture, account, URL, or narrower journey list."
+    });
+  }
   if (recipe.id === "performance") {
     gates.push({
       id: "benchmark_baseline",
@@ -17409,6 +17774,17 @@ function missionSteps(task, autonomy, recipe, options2) {
       gateId: "plan"
     }
   ];
+  if (recipe.id === "web_dogfood") {
+    steps.push({
+      id: "browser_journeys",
+      title: "Exercise critical browser journeys",
+      objective: "Use the app like a real user and gather evidence before proposing a fix.",
+      agentAction: "Start from the named safe state, exercise 2-5 critical journeys, capture expected versus actual behavior, and stop before destructive or credential-requiring actions.",
+      briefTool: "available browser",
+      expectedOutput: "Journey evidence with routes, actions, screenshots or DOM notes, viewport/accessibility checks, and console/network observations.",
+      gateId: "browser_journey"
+    });
+  }
   if (recipe.id === "ticket_write") {
     steps.push({
       id: "capture_judgment",
@@ -17849,6 +18225,17 @@ function selectMissionValidation(suggestedTests, recipe, needsRuntimeEvidence, n
       "Run brief.review_diff before PR handoff."
     ]);
   }
+  if (recipe.id === "web_dogfood") {
+    return unique([
+      "Name 2-5 user journeys with a safe starting state, expected outcome, and stop condition.",
+      "Exercise rendered, user-visible behavior before inferring implementation causes.",
+      "For each finding capture route, reproducible steps, expected vs actual, severity, and screenshot or DOM evidence when useful.",
+      "Check desktop and narrow/mobile layout, keyboard/focus, accessible names, console errors, and failed requests when relevant.",
+      "Separate product friction from auth, fixture, network, or environment limitations.",
+      "End with the top three fixes, what worked, and one reusable learning; do not edit the repo in read-only mode.",
+      "Save the dogfooding report with brief.save_handoff and verify its receipts; use brief.save_learning only for repeatable lessons."
+    ]);
+  }
   if (recipe.id === "performance") {
     return unique([
       "Benchmark baseline names workload, command, metric, variance, and success threshold before edits.",
@@ -17938,25 +18325,31 @@ function automationLoopContract(autonomy, recipe, validation, options2, delivery
   const isTicketWriter = mode === "ticket_writer";
   const isTicketFix = mode === "ticket_fix";
   const isRuntimeFix = mode === "runtime_fix";
+  const isWebDogfood = recipe.id === "web_dogfood";
   const isSecurityRecipe = recipe.id === "security_dependency" || recipe.id === "security_finding" || recipe.id === "security_testing";
   const handoffTarget = deliveryReviewTarget(deliveryMode);
   const phases = [
     {
-      id: isTicketWriter ? "ticket_intake" : "context_map",
-      title: isTicketWriter ? "Capture intent and judgment boundaries" : "Load team context and map the repo surface",
+      id: isTicketWriter ? "ticket_intake" : isWebDogfood ? "context_and_surface" : "context_map",
+      title: isTicketWriter ? "Capture intent and judgment boundaries" : isWebDogfood ? "Load app context and safe journey surface" : "Load team context and map the repo surface",
       required: true,
       tool: isTicketWriter ? "brief.write_ticket" : "brief.context_for_task + brief.codebase_map",
-      expectedArtifact: isTicketWriter ? "generatedArtifacts.automationTicket" : "context_receipt + map_proof",
+      expectedArtifact: isTicketWriter ? "generatedArtifacts.automationTicket" : isWebDogfood ? "context_receipt + map_proof + browser target" : "context_receipt + map_proof",
       proofRequired: isTicketWriter ? [
         "ticketReadiness.status",
         "automationTicket.machineReadableFields",
         "automationTicket.executionContract"
+      ] : isWebDogfood ? [
+        "contextReceipt.packetId",
+        "executionContract.evidenceContract.mapProof",
+        "context.likelyFiles",
+        "browser target and safe starting state"
       ] : [
         "contextReceipt.packetId",
         "executionContract.evidenceContract.mapProof",
         "context.likelyFiles"
       ],
-      stopIfMissing: isTicketWriter ? "Do not send the ticket until product intent, owner judgment, acceptance criteria, and stop conditions are explicit." : "Do not edit until likely files, rules, tests, owners, and affected systems are grounded in Brief context."
+      stopIfMissing: isTicketWriter ? "Do not send the ticket until product intent, owner judgment, acceptance criteria, and stop conditions are explicit." : isWebDogfood ? "Do not interact until the app URL, safe starting state, critical journeys, and destructive-action stop conditions are explicit." : "Do not edit until likely files, rules, tests, owners, and affected systems are grounded in Brief context."
     },
     ...isRuntimeFix ? [
       {
@@ -17976,6 +18369,23 @@ function automationLoopContract(autonomy, recipe, validation, options2, delivery
         stopIfMissing: "Do not code from a runtime symptom until the source, identifier, environment, time window, observed facts, and privacy boundary are present."
       }
     ] : [],
+    ...isWebDogfood ? [
+      {
+        id: "browser_journeys",
+        title: "Exercise critical user journeys",
+        required: true,
+        tool: "available browser",
+        expectedArtifact: "generatedArtifacts.browserJourneyEvidence",
+        proofRequired: [
+          "journey name and starting state",
+          "route and user-visible actions",
+          "expected versus actual outcome",
+          "screenshot or DOM evidence when useful",
+          "viewport, keyboard/focus, console, and failed-request notes"
+        ],
+        stopIfMissing: "Stop before destructive actions, credential entry, or ambiguous state changes; record the environment limitation instead."
+      }
+    ] : [],
     {
       id: "plan_loop",
       title: "Convert the work into a bounded loop",
@@ -17992,53 +18402,70 @@ function automationLoopContract(autonomy, recipe, validation, options2, delivery
     },
     ...isTicketWriter ? [] : [
       {
-        id: "execute_change",
-        title: "Make the smallest bounded change",
-        required: autonomy !== "read_only",
-        tool: "coding agent",
-        expectedArtifact: "local diff or no-code-change explanation",
-        proofRequired: [
+        id: isWebDogfood ? "read_only_pass" : "execute_change",
+        title: isWebDogfood ? "Keep the pass read-only" : "Make the smallest bounded change",
+        required: isWebDogfood ? true : autonomy !== "read_only",
+        tool: isWebDogfood ? "available browser" : "coding agent",
+        expectedArtifact: isWebDogfood ? "journey evidence or explicit environment gap" : "local diff or no-code-change explanation",
+        proofRequired: isWebDogfood ? [
+          "no repo files changed",
+          "journey evidence is reproducible",
+          "product friction is separated from environment noise"
+        ] : [
           "changedFiles[]",
           "rootCause or explicit no-root-cause finding",
           "acceptanceCriteriaStatus[]"
         ],
-        stopIfMissing: "Stop when the likely fix exceeds the ticket, runtime evidence, or selected autonomy boundary."
+        stopIfMissing: isWebDogfood ? "Stop when a journey needs an external side effect, private credential, or unsupported browser capability." : "Stop when the likely fix exceeds the ticket, runtime evidence, or selected autonomy boundary."
       },
       {
-        id: "validate_change",
-        title: "Run the validation loop",
+        id: isWebDogfood ? "review_evidence" : "validate_change",
+        title: isWebDogfood ? "Review and classify the evidence" : "Run the validation loop",
         required: true,
-        tool: "brief.find_tests + project commands",
-        expectedArtifact: "validation evidence",
-        proofRequired: validation.length ? validation.slice(0, 5) : [
+        tool: isWebDogfood ? "browser evidence + agent judgment" : "brief.find_tests + project commands",
+        expectedArtifact: isWebDogfood ? "classified dogfooding findings" : "validation evidence",
+        proofRequired: isWebDogfood ? [
+          "finding severity and reproducible steps",
+          "bug versus UX friction versus environment classification",
+          "top fixes and what worked"
+        ] : validation.length ? validation.slice(0, 5) : [
           "selected validation command",
           "pass/fail/skipped result",
           "environment note"
         ],
-        stopIfMissing: `Do not ask for ${handoffTarget} until validation is run or the missing environment is named with an owner.`
+        stopIfMissing: isWebDogfood ? "Do not report a product issue without a route, action, expected result, actual result, and evidence or an explicit environment limitation." : `Do not ask for ${handoffTarget} until validation is run or the missing environment is named with an owner.`
       },
       {
-        id: "challenge_review",
-        title: "Challenge the diff and the root cause",
+        id: isWebDogfood ? "prioritize_findings" : "challenge_review",
+        title: isWebDogfood ? "Prioritize the user impact" : "Challenge the diff and the root cause",
         required: true,
-        tool: "brief.review_diff",
-        expectedArtifact: "review receipt",
-        proofRequired: [
+        tool: isWebDogfood ? "brief.save_learning (when repeatable)" : "brief.review_diff",
+        expectedArtifact: isWebDogfood ? "prioritized product feedback" : "review receipt",
+        proofRequired: isWebDogfood ? [
+          "top three fixes by user impact and reproducibility",
+          "one thing that worked",
+          "one reusable learning or explicit no-learning decision"
+        ] : [
           "review.verdict",
           "review.readiness.status",
           "review receipt id",
           "blocker/high findings resolved or explicitly accepted"
         ],
-        stopIfMissing: "Do not hand off when blocker or high review findings remain unresolved."
+        stopIfMissing: isWebDogfood ? "Do not hand off a long undifferentiated bug list; rank the few findings that most affect a real user." : "Do not hand off when blocker or high review findings remain unresolved."
       }
     ],
     {
       id: "handoff_receipts",
-      title: isTicketWriter ? "Save the ticket contract and receipt ledger" : "Save handoff proof and verify receipts",
+      title: isTicketWriter ? "Save the ticket contract and receipt ledger" : isWebDogfood ? "Save the dogfooding report and verify receipts" : "Save handoff proof and verify receipts",
       required: true,
       tool: "brief.save_handoff + brief.verify_receipts",
-      expectedArtifact: "proof bundle + receipt ledger verification",
-      proofRequired: [
+      expectedArtifact: isWebDogfood ? "dogfooding report + receipt ledger verification" : "proof bundle + receipt ledger verification",
+      proofRequired: isWebDogfood ? [
+        "proofBundle.status",
+        "proofBundle.receipts.handoffId",
+        "proofBundle.missingEvidence",
+        "receiptLedger.status"
+      ] : [
         "proofBundle.status",
         "proofBundle.receipts.handoffId",
         "proofBundle.receipts.reviewReceiptId",
@@ -18072,7 +18499,7 @@ function automationLoopContract(autonomy, recipe, validation, options2, delivery
       "MCP-capable IDE",
       "console loop recipe"
     ],
-    evidenceSources: automationLoopEvidenceSources(mode, options2),
+    evidenceSources: automationLoopEvidenceSources(mode, options2, recipe.id),
     dataBoundaries: [
       "Use derived or redacted runtime facts in prompts; do not paste raw customer payloads, secrets, tokens, or private logs.",
       "Keep observed facts, hypotheses, and human decisions separate in the ticket or handoff.",
@@ -18089,7 +18516,10 @@ function automationLoopContract(autonomy, recipe, validation, options2, delivery
         "Root cause is inferred from symptoms rather than proven by source, CI, logs, traces, or reproduction.",
         "Two plausible approaches compete or the change touches architecture, data, auth, migrations, billing, or customer-visible behavior.",
         "The agent changes files outside the mapped scope or selected autonomy.",
-        "brief.review_diff returns blocker or high findings.",
+        ...isWebDogfood ? [] : ["brief.review_diff returns blocker or high findings."],
+        ...isWebDogfood ? [
+          "A journey result is ambiguous, not reproducible, or could be explained by auth, fixture, network, or deployment state."
+        ] : [],
         ...isRuntimeFix ? [
           "Runtime evidence is stale, contradictory, privacy-sensitive, or cannot be tied to the changed code path."
         ] : [],
@@ -18119,7 +18549,7 @@ function automationLoopContract(autonomy, recipe, validation, options2, delivery
       ] : []
     ]),
     finalUpdate: {
-      destination: deliveryFinalDestination(deliveryMode, isTicketWriter ? "Linear, Jira, or GitHub issue body" : isRuntimeFix ? "source ticket, incident, alert thread, or PR handoff" : isTicketFix ? "source Linear, Jira, GitHub, or pasted ticket" : isSecurityRecipe ? "security alert, Dependabot item, scanner finding, PR description, or handoff notes" : "PR description or handoff notes"),
+      destination: deliveryFinalDestination(deliveryMode, isTicketWriter ? "Linear, Jira, or GitHub issue body" : isWebDogfood ? "product feedback, bug triage, or follow-up mission" : isRuntimeFix ? "source ticket, incident, alert thread, or PR handoff" : isTicketFix ? "source Linear, Jira, GitHub, or pasted ticket" : isSecurityRecipe ? "security alert, Dependabot item, scanner finding, PR description, or handoff notes" : "PR description or handoff notes"),
       requiredSections: isTicketWriter ? [
         "Intent",
         "Automation Readiness",
@@ -18128,26 +18558,42 @@ function automationLoopContract(autonomy, recipe, validation, options2, delivery
         "Brief Evidence Contract",
         "Acceptance Criteria",
         "Stop Conditions"
+      ] : isWebDogfood ? [
+        "Journeys Tested",
+        "What Worked",
+        "Findings",
+        "Environment Limits",
+        "Top Fixes",
+        "Reusable Learning"
       ] : ticketIssueUpdateSections(),
       proofFields: [
         "proofBundle.status",
         "proofBundle.receipts.handoffId",
         "proofBundle.receipts.contextReceiptId",
-        "proofBundle.receipts.reviewReceiptId",
-        "proofBundle.receipts.reviewVerdict",
+        ...isWebDogfood ? [] : [
+          "proofBundle.receipts.reviewReceiptId",
+          "proofBundle.receipts.reviewVerdict"
+        ],
         "proofBundle.validation.passed",
         "proofBundle.missingEvidence"
       ],
       postOnlyWhen: [
-        "brief.review_diff has no unresolved blocker/high findings.",
+        ...isWebDogfood ? [
+          "Each reported finding has reproducible steps and evidence or an explicit environment limitation."
+        ] : ["brief.review_diff has no unresolved blocker/high findings."],
         "brief.verify_receipts is trusted or context_only with gaps explained.",
-        "Acceptance criteria have pass/fail/skipped evidence.",
-        "Remaining risk and owner are named."
+        ...isWebDogfood ? ["The top user-impact fixes and what worked are named."] : [
+          "Acceptance criteria have pass/fail/skipped evidence.",
+          "Remaining risk and owner are named."
+        ]
       ],
       doNotPostWhen: unique([
         "Required owner, product, security, data, or rollout judgment is missing.",
         "Validation is missing and no human owner accepted the gap.",
         "The change exceeded ticket scope, runtime evidence scope, or autonomy.",
+        ...isWebDogfood ? [
+          "A destructive action, private credential, or external side effect was required without approval."
+        ] : [],
         ...isRuntimeFix ? [
           "Runtime evidence packet is missing, stale, contradictory, or contains unresolved privacy gaps."
         ] : [],
@@ -18168,8 +18614,15 @@ function automationLoopMode(recipe, options2) {
     return "ticket_fix";
   return "mission";
 }
-function automationLoopEvidenceSources(mode, options2) {
+function automationLoopEvidenceSources(mode, options2, recipeId) {
   return unique([
+    ...recipeId === "web_dogfood" ? [
+      "available browser",
+      "journey steps and expected outcomes",
+      "screenshots or DOM snapshots",
+      "console and network observations",
+      "responsive and accessibility checks"
+    ] : [],
     ...mode === "ticket_writer" ? [
       "ticket intent",
       "acceptance criteria",
@@ -18205,6 +18658,7 @@ function loopProofContract(recipe, options2, deliveryMode) {
   const isTicketWriter = mode === "ticket_writer";
   const needsRuntimeEvidence = mode === "runtime_fix";
   const needsWorkItem = mode === "ticket_fix" || options2.needsWorkItem;
+  const isWebDogfood = recipe.id === "web_dogfood";
   const isSecurityDependency = recipe.id === "security_dependency";
   const isSecurityFinding = recipe.id === "security_finding";
   const isSecurityTesting = recipe.id === "security_testing";
@@ -18214,7 +18668,12 @@ function loopProofContract(recipe, options2, deliveryMode) {
       "map_proof",
       "team_rules_applied",
       "mission_receipt",
-      ...isTicketWriter ? ["ticket_readiness", "human_judgment_record", "automation_ticket"] : [
+      ...isTicketWriter ? ["ticket_readiness", "human_judgment_record", "automation_ticket"] : isWebDogfood ? [
+        "browser_journey_plan",
+        "browser_journey_evidence",
+        "dogfooding_report",
+        "handoff_receipt"
+      ] : [
         "acceptance_criteria_evidence",
         "validation_evidence",
         "review_readiness",
@@ -18243,7 +18702,8 @@ function loopProofContract(recipe, options2, deliveryMode) {
     ]),
     requiredReceipts: unique([
       "mission_plan",
-      ...isTicketWriter ? [] : ["review", "handoff"],
+      ...isTicketWriter || isWebDogfood ? [] : ["review", "handoff"],
+      ...isWebDogfood ? ["handoff"] : [],
       "receipt_ledger"
     ]),
     readyStatuses: {
@@ -18257,6 +18717,11 @@ function loopProofContract(recipe, options2, deliveryMode) {
       "Human judgment, acceptance criteria, non-goals, and owner boundaries are explicit.",
       "Machine-readable run fields and Brief evidence contract are present.",
       "Receipt ledger verifies the mission receipt digest."
+    ] : isWebDogfood ? [
+      "Browser journeys are named, exercised from a safe state, and reported with reproducible evidence.",
+      "Product issues are separated from auth, fixture, network, browser-capability, and deployment limitations.",
+      "The report is concise: top user-impact fixes, what worked, and reusable learning or an explicit no-learning decision.",
+      "A handoff receipt and receipt-ledger verification are present; review_diff is optional because no repo diff is expected."
     ] : [
       "Runtime evidence packet is ready when runtime evidence is part of the mission.",
       ...isSecurityDependency ? [
@@ -18343,6 +18808,11 @@ function missionRunContract(autonomy, recipe, validation, options2, deliveryMode
         "generatedArtifacts.contentProofPack.readiness",
         "generatedArtifacts.productOperatingContext"
       ] : [],
+      ...recipe.id === "web_dogfood" ? [
+        "generatedArtifacts.browserJourneyEvidence",
+        "generatedArtifacts.dogfoodingReport",
+        "generatedArtifacts.dogfoodingReport.topFindings[]"
+      ] : [],
       "runContract.exitCodes[]"
     ],
     artifacts,
@@ -18351,8 +18821,8 @@ function missionRunContract(autonomy, recipe, validation, options2, deliveryMode
     proofContract,
     successCriteria: [
       "The context receipt cites the rules, source paths, tests, owners, and memories used by the agent.",
-      recipe.id === "ticket_write" ? "The ticket separates human judgment from execution instructions and names unresolved decisions before automation starts." : recipe.id === "security_dependency" ? "The dependency vulnerability packet names advisory id, package, affected range, fixed range, manifest, lockfile, direct/transitive path, reachability, remediation choice, and rollback." : recipe.id === "security_finding" ? "The security finding packet names alert source, rule id, classification, source-to-sink or trust boundary, affected users/data, owner, exploitability, and validation path." : recipe.id === "security_testing" ? "The security test plan names the protected property, bad case, safe case, command, severity threshold, false-positive policy, owner, privacy boundary, and rollout mode." : recipe.id === "internal_app" ? "The app contract names the internal route, data source, auth context, allowed roles, row filters, audit events, and redaction rules before implementation." : recipe.id === "stale_pr" ? "The PR intent packet names original scope, unresolved review feedback, stale assumptions, validation, and handoff expectation." : recipe.id === "merge_conflict" ? "The conflict packet names conflicted files, both sides' intent, semantic conflicts, and validation before resolution." : recipe.id === "flaky_test" ? "The CI evidence packet names failing job or test, sample failure, platform, seed or timing signal, hypothesis, and validation path." : recipe.id === "small_refactor" ? "The mechanical scope packet names exact pattern, allowed files, exclusions, and expected behavior preservation." : recipe.id === "bug_investigation" ? "The hypothesis ledger names observed facts, prior attempts, plausible causes, disproven causes, next probes, and confidence." : recipe.id === "qa_edge_cases" ? "The edge-case inventory names current coverage, missing boundary cases, risky inputs, and validation commands." : recipe.id === "performance" ? "The benchmark packet names workload, command, metric, baseline, variance, success threshold, and rollback signal before edits." : recipe.id === "porting" ? "The source behavior packet names source paths, target paths, incompatible assumptions, owner decision, validation, and attribution notes." : recipe.id === "experiment" ? "The experiment contract names the hypothesis, success signal, throwaway boundary, rollback or discard path, and decision owner." : recipe.id === "session_review" ? "The session review uses receipt-derived activity and marks any need for raw prompts, logs, or transcripts explicitly." : recipe.id === "session_library" ? "The session library classifies every reusable example by proof quality, privacy posture, owner approval, and reuse trigger." : options2.needsRuntimeEvidence ? "The runtime evidence packet names the observed failure source, identifier, environment, time window, symptom, and open gaps." : options2.needsWorkItem ? "The work item packet names source, id, acceptance criteria, non-goals, and the update expected after execution." : recipe.id === "research" ? "The answer names sources, risks, and next steps without editing the repo." : "Required validation evidence is attached or the missing environment is explicitly explained.",
-      recipe.id === "ticket_write" ? "Acceptance criteria, constraints, validation plan, review bar, stop conditions, and update template are parseable from the ticket body." : recipe.id === "security_dependency" ? "Install integrity, build/typecheck, targeted tests, and scanner/audit evidence show the vulnerability is remediated without breaking the dependency path." : recipe.id === "security_finding" ? "The root cause is fixed with negative regression, safe abuse-case proof, or scanner rerun evidence; suppression-only fixes are explicitly rejected or owner-approved." : recipe.id === "security_testing" ? "The added test or scanner catches the intended bad case or has a clear preventive rationale, and rollout mode is calibrated for developer workflow." : recipe.id === "internal_app" ? "The built app follows repo-native UI/data patterns and validation proves the access-control contract." : recipe.id === "stale_pr" ? "The handoff names review feedback addressed, validation, remaining risk, and next reviewer action." : recipe.id === "merge_conflict" ? "The resolution preserves intended behavior from both sides or clearly escalates unresolved semantic conflicts." : recipe.id === "flaky_test" ? "The result stabilizes the test or explains the product root cause with evidence rather than hiding the signal." : recipe.id === "small_refactor" ? "The diff stays mechanical and validation proves no intended behavior changed." : recipe.id === "bug_investigation" ? "The root cause, fix, no-fix decision, or escalation is tied to evidence and includes a follow-up watch signal." : recipe.id === "qa_edge_cases" ? "The added or improved tests cover meaningful behavior risk and do not mute, skip, or obscure the signal." : recipe.id === "performance" ? "Before/after measurements, tradeoffs, and rollback signals are recorded before the optimization is accepted." : recipe.id === "porting" ? "The target behavior preserves source intent, attribution is handled, and intentional differences are explicit." : recipe.id === "experiment" ? "The keep, discard, or formalize decision is recorded with validation and remaining production-readiness gaps." : recipe.id === "session_review" ? "Run cards or skill drafts are tied to actual receipts, validation quality, review outcomes, and privacy posture." : recipe.id === "session_library" ? "The shared examples are derived from approved receipts or explicitly approved imports and include first-run commands, stop conditions, and validation expectations." : options2.needsRuntimeEvidence ? "The root cause, fix, validation, and incident or ticket update are tied back to the runtime evidence." : "The mission output is tied back to the selected recipe and context receipt.",
+      recipe.id === "ticket_write" ? "The ticket separates human judgment from execution instructions and names unresolved decisions before automation starts." : recipe.id === "security_dependency" ? "The dependency vulnerability packet names advisory id, package, affected range, fixed range, manifest, lockfile, direct/transitive path, reachability, remediation choice, and rollback." : recipe.id === "security_finding" ? "The security finding packet names alert source, rule id, classification, source-to-sink or trust boundary, affected users/data, owner, exploitability, and validation path." : recipe.id === "security_testing" ? "The security test plan names the protected property, bad case, safe case, command, severity threshold, false-positive policy, owner, privacy boundary, and rollout mode." : recipe.id === "web_dogfood" ? "The dogfooding packet names critical journeys, safe starting state, expected outcomes, stop conditions, and evidence policy." : recipe.id === "internal_app" ? "The app contract names the internal route, data source, auth context, allowed roles, row filters, audit events, and redaction rules before implementation." : recipe.id === "stale_pr" ? "The PR intent packet names original scope, unresolved review feedback, stale assumptions, validation, and handoff expectation." : recipe.id === "merge_conflict" ? "The conflict packet names conflicted files, both sides' intent, semantic conflicts, and validation before resolution." : recipe.id === "flaky_test" ? "The CI evidence packet names failing job or test, sample failure, platform, seed or timing signal, hypothesis, and validation path." : recipe.id === "small_refactor" ? "The mechanical scope packet names exact pattern, allowed files, exclusions, and expected behavior preservation." : recipe.id === "bug_investigation" ? "The hypothesis ledger names observed facts, prior attempts, plausible causes, disproven causes, next probes, and confidence." : recipe.id === "qa_edge_cases" ? "The edge-case inventory names current coverage, missing boundary cases, risky inputs, and validation commands." : recipe.id === "performance" ? "The benchmark packet names workload, command, metric, baseline, variance, success threshold, and rollback signal before edits." : recipe.id === "porting" ? "The source behavior packet names source paths, target paths, incompatible assumptions, owner decision, validation, and attribution notes." : recipe.id === "experiment" ? "The experiment contract names the hypothesis, success signal, throwaway boundary, rollback or discard path, and decision owner." : recipe.id === "session_review" ? "The session review uses receipt-derived activity and marks any need for raw prompts, logs, or transcripts explicitly." : recipe.id === "session_library" ? "The session library classifies every reusable example by proof quality, privacy posture, owner approval, and reuse trigger." : options2.needsRuntimeEvidence ? "The runtime evidence packet names the observed failure source, identifier, environment, time window, symptom, and open gaps." : options2.needsWorkItem ? "The work item packet names source, id, acceptance criteria, non-goals, and the update expected after execution." : recipe.id === "research" ? "The answer names sources, risks, and next steps without editing the repo." : "Required validation evidence is attached or the missing environment is explicitly explained.",
+      recipe.id === "ticket_write" ? "Acceptance criteria, constraints, validation plan, review bar, stop conditions, and update template are parseable from the ticket body." : recipe.id === "security_dependency" ? "Install integrity, build/typecheck, targeted tests, and scanner/audit evidence show the vulnerability is remediated without breaking the dependency path." : recipe.id === "security_finding" ? "The root cause is fixed with negative regression, safe abuse-case proof, or scanner rerun evidence; suppression-only fixes are explicitly rejected or owner-approved." : recipe.id === "security_testing" ? "The added test or scanner catches the intended bad case or has a clear preventive rationale, and rollout mode is calibrated for developer workflow." : recipe.id === "web_dogfood" ? "The browser report contains reproducible journey evidence, separates product friction from environment noise, and ranks the top user-impact fixes." : recipe.id === "internal_app" ? "The built app follows repo-native UI/data patterns and validation proves the access-control contract." : recipe.id === "stale_pr" ? "The handoff names review feedback addressed, validation, remaining risk, and next reviewer action." : recipe.id === "merge_conflict" ? "The resolution preserves intended behavior from both sides or clearly escalates unresolved semantic conflicts." : recipe.id === "flaky_test" ? "The result stabilizes the test or explains the product root cause with evidence rather than hiding the signal." : recipe.id === "small_refactor" ? "The diff stays mechanical and validation proves no intended behavior changed." : recipe.id === "bug_investigation" ? "The root cause, fix, no-fix decision, or escalation is tied to evidence and includes a follow-up watch signal." : recipe.id === "qa_edge_cases" ? "The added or improved tests cover meaningful behavior risk and do not mute, skip, or obscure the signal." : recipe.id === "performance" ? "Before/after measurements, tradeoffs, and rollback signals are recorded before the optimization is accepted." : recipe.id === "porting" ? "The target behavior preserves source intent, attribution is handled, and intentional differences are explicit." : recipe.id === "experiment" ? "The keep, discard, or formalize decision is recorded with validation and remaining production-readiness gaps." : recipe.id === "session_review" ? "Run cards or skill drafts are tied to actual receipts, validation quality, review outcomes, and privacy posture." : recipe.id === "session_library" ? "The shared examples are derived from approved receipts or explicitly approved imports and include first-run commands, stop conditions, and validation expectations." : options2.needsRuntimeEvidence ? "The root cause, fix, validation, and incident or ticket update are tied back to the runtime evidence." : "The mission output is tied back to the selected recipe and context receipt.",
       autonomy === "read_only" ? "No repo files are changed." : "The local diff has no blocker or high Brief findings before human review.",
       "Useful repeated feedback is saved or intentionally skipped with a reason."
     ],
@@ -18400,6 +18870,12 @@ function missionRunContract(autonomy, recipe, validation, options2, deliveryMode
         "The proposed tests do not map to observable behavior risk or only assert implementation details.",
         "The change hides failures by muting, skipping, or weakening validation."
       ] : [],
+      ...recipe.id === "web_dogfood" ? [
+        "The app URL, safe starting state, critical journey, or expected outcome is missing.",
+        "A journey requires destructive action, private credentials, production data, or an external side effect without explicit approval.",
+        "A finding is reported without reproducible steps, route, expected versus actual behavior, and evidence or an explicit environment limitation.",
+        "Browser, auth, fixture, network, or deployment noise is presented as a product defect without confirmation."
+      ] : [],
       ...recipe.id === "performance" ? [
         "The benchmark, workload, baseline, variance, or success threshold is missing.",
         "The optimization makes readability, correctness, or operability worse without an explicit human tradeoff."
@@ -18552,6 +19028,30 @@ function missionArtifacts(recipe, autonomy, options2) {
       description: "Labels, helper text, descriptions, errors, announcements, and screen-reader context remain accurate after copy changes."
     });
   }
+  if (recipe.id === "web_dogfood") {
+    artifacts.push({
+      id: "browser_journey_plan",
+      label: "Browser journey plan",
+      kind: "plan",
+      producer: "brief.mission_plan",
+      required: true,
+      description: "Safe starting state, critical user journeys, expected outcomes, stop conditions, viewport plan, and evidence policy."
+    }, {
+      id: "browser_journey_evidence",
+      label: "Browser journey evidence",
+      kind: "validation",
+      producer: "available browser",
+      required: true,
+      description: "Journey-by-journey route, actions, expected versus actual behavior, screenshot or DOM evidence, viewport, accessibility notes, and console/network result."
+    }, {
+      id: "dogfooding_report",
+      label: "Dogfooding report",
+      kind: "handoff",
+      producer: "brief.save_handoff",
+      required: true,
+      description: "Concise findings ranked by user impact and reproducibility, environment limitations, top fixes, what worked, and reusable learning."
+    });
+  }
   if (recipe.id === "internal_app") {
     artifacts.push({
       id: "product_operating_context",
@@ -19020,6 +19520,30 @@ function missionHookEvents(recipe, autonomy, options2) {
       mode: "advisory"
     });
   }
+  if (recipe.id === "web_dogfood") {
+    events.push({
+      id: "before_browser_journey",
+      label: "Before browser journey",
+      timing: "before",
+      trigger: "An agent starts an exploratory pass through a local, staging, or deployed web app.",
+      action: "Require safe starting state, 2-5 critical journeys, expected outcomes, viewport plan, evidence fields, and destructive-action stop conditions.",
+      mode: "blocking"
+    }, {
+      id: "after_browser_journey",
+      label: "After browser journey",
+      timing: "after",
+      trigger: "A browser journey or exploratory scenario completes.",
+      action: "Classify findings as product bug, UX friction, accessibility issue, or environment limitation; attach reproducible evidence and rank the top user-impact fixes.",
+      mode: "blocking"
+    }, {
+      id: "before_dogfood_handoff",
+      label: "Before dogfooding handoff",
+      timing: "before",
+      trigger: "The agent prepares a browser dogfooding report.",
+      action: "Save the concise report and receipt ledger; skip review_diff when no repo files changed, and save only repeatable lessons to shared learning.",
+      mode: "blocking"
+    });
+  }
   if (recipe.id === "ticket_write") {
     events.push({
       id: "before_ticket_execution",
@@ -19651,6 +20175,31 @@ var init_missionPlan = __esm({
           "learn"
         ]
       },
+      {
+        id: "web_dogfood",
+        title: "Web app dogfooding loop",
+        whenToUse: "Exercise a local or deployed web app like a real user, find the highest-friction moments, and return evidence-backed product feedback before changing code.",
+        defaultAutonomy: "read_only",
+        primaryOutput: "Journey-based dogfooding report with reproducible findings, screenshots, DOM/console/network evidence, accessibility and responsive checks, and prioritized next actions.",
+        requiredGates: [
+          "brief.context_for_task",
+          "brief.codebase_map",
+          "brief.mission_plan",
+          "browser journey evidence",
+          "brief.save_handoff",
+          "brief.verify_receipts",
+          "brief.save_learning"
+        ],
+        loopIds: [
+          "research",
+          "journey",
+          "browser",
+          "validate",
+          "review",
+          "handoff",
+          "learn"
+        ]
+      },
       {
         id: "performance",
         title: "Performance loop",
@@ -20285,6 +20834,51 @@ var init_missionPlan = __esm({
           "Signal quality improved rather than only coverage count."
         ]
       }),
+      web_dogfood: workPattern({
+        title: "Web app dogfooding pattern",
+        teamValue: "Turns browser exploration into a compact, source-grounded product report: real user journeys, visual and interaction evidence, prioritized friction, and a decision about what to fix next.",
+        goodFirstRun: 'brief.mission_plan({ recipe: "web_dogfood", task: "Dogfood <app URL> through <critical journeys>", autonomy: "read_only" })',
+        recommendedSurfaces: [
+          "Codex in-app browser",
+          "Playwright",
+          "Claude browser tools",
+          "Browser MCP",
+          "Storybook or app preview"
+        ],
+        dataContext: [
+          "critical user journeys",
+          "app URL and environment",
+          "repo code map and route ownership",
+          "design system and product rules",
+          "browser screenshots and DOM snapshots",
+          "console errors and failed network requests",
+          "responsive and accessibility observations",
+          "prior dogfooding feedback and known issues"
+        ],
+        validationBurden: [
+          "Name the journeys, starting state, test account or safe fixture, and stop conditions before interacting.",
+          "Use visible user behavior and stable labels; do not infer success from a click alone.",
+          "Capture before/after or step evidence for each finding: route, action, expected result, actual result, severity, and reproduction.",
+          "Check the critical path at desktop and narrow/mobile widths, including loading, empty, error, success, keyboard/focus, and long-content states when relevant.",
+          "Inspect console errors and failed requests after a broken or suspicious interaction; distinguish product bugs from environment/auth failures.",
+          "Keep the session read-only unless the user explicitly asks for a fix; a follow-up fix loop must cite this report.",
+          "End with the top three fixes, what worked, and one proposed learning for the team."
+        ],
+        humanReviewFocus: [
+          "The journey represents a real user job rather than a tour of every page.",
+          "Findings are reproducible, prioritized by user impact, and backed by visible evidence.",
+          "A confusing flow is separated from a purely visual preference or test-environment limitation.",
+          "The report recommends the smallest next product change and names what should remain unchanged."
+        ],
+        parallelism: {
+          fit: "lead_agent",
+          guidance: [
+            "Keep one lead agent responsible for the journey map, evidence quality, and final prioritization.",
+            "Use a second browser session only for an independent mobile, accessibility, or fresh-user pass.",
+            "Do not split one journey across agents; a single owner should observe the full interaction chain."
+          ]
+        }
+      }),
       performance: workPattern({
         title: "Performance work pattern",
         teamValue: "Requires a baseline, workload, threshold, measured diff, and rollback signal before optimization work expands.",
@@ -20595,7 +21189,7 @@ function categoryForRecipe(recipeId) {
   if (recipeId === "incident_fix" || recipeId === "bug_investigation" || recipeId === "flaky_test") {
     return "runtime";
   }
-  if (recipeId === "feature" || recipeId === "design_change" || recipeId === "content_change" || recipeId === "qa_edge_cases" || recipeId === "small_refactor" || recipeId === "bugfix") {
+  if (recipeId === "feature" || recipeId === "design_change" || recipeId === "content_change" || recipeId === "web_dogfood" || recipeId === "qa_edge_cases" || recipeId === "small_refactor" || recipeId === "bugfix") {
     return "quality";
   }
   if (recipeId === "internal_app")
@@ -20616,6 +21210,8 @@ function toolForRecipe(recipeId) {
     return "brief.write_ticket";
   if (recipeId === "ticket_fix")
     return "brief.fix_ticket";
+  if (recipeId === "web_dogfood")
+    return "browser + brief.save_handoff";
   if (recipeId === "incident_fix" || recipeId === "flaky_test") {
     return "brief.runtime_fix";
   }
@@ -20706,6 +21302,17 @@ function requiredInputsForRecipe(recipeId) {
       "privacy boundary for source, logs, secrets, and customer data"
     ];
   }
+  if (recipeId === "web_dogfood") {
+    return [
+      "app URL, environment, and safe account or fixture",
+      "two to five critical user journeys",
+      "expected outcome and stop condition for each journey",
+      "desktop and mobile or narrow viewport plan",
+      "accessibility checks for changed interactions",
+      "safe screenshot, DOM, console, and network evidence policy",
+      "known feedback or product principles to test"
+    ];
+  }
   if (recipeId === "incident_fix" || recipeId === "flaky_test" || recipeId === "bug_investigation") {
     return [
       "observed failure source",
@@ -20838,6 +21445,17 @@ function proofBarForRecipe(recipeId) {
       "the new signal is saved as team context for future missions"
     ];
   }
+  if (recipeId === "web_dogfood") {
+    return [
+      "journeys are named before exploration",
+      "each finding has route, steps, expected result, actual result, severity, and evidence",
+      "user-visible behavior is checked before implementation details",
+      "console and failed-request evidence is captured for suspicious states",
+      "desktop/narrow and keyboard/focus checks cover the critical path",
+      "environment/auth failures are separated from product defects",
+      "top fixes, what worked, and a team-learning candidate are prioritized"
+    ];
+  }
   if (recipeId === "incident_fix" || recipeId === "bug_investigation") {
     return [
       "observed facts",
@@ -20950,6 +21568,14 @@ function privacyBoundaryForRecipe(recipeId) {
       "keep scanner findings and test fixtures free of real credentials and production payloads"
     ];
   }
+  if (recipeId === "web_dogfood") {
+    return [
+      "use safe fixtures and redact customer data, tokens, cookies, and private URLs",
+      "do not upload screenshots, DOM, console, or network payloads unless the workspace allows it",
+      "prefer derived evidence such as route, action, status, error class, and screenshot reference",
+      "never submit external side effects, purchases, destructive actions, or production writes without explicit approval"
+    ];
+  }
   if (recipeId === "incident_fix" || recipeId === "flaky_test" || recipeId === "bug_investigation") {
     return [
       "summarize raw logs into observed facts first",
@@ -21001,6 +21627,9 @@ function teamOutcomeForRecipe(recipeId) {
   if (recipeId === "security_testing") {
     return "Teams can add security tests and scanning gates that are useful enough to trust and calibrated enough not to slow every developer down.";
   }
+  if (recipeId === "web_dogfood") {
+    return "Teams get a repeatable user-centered browser pass that finds confusing flows, broken states, accessibility gaps, and product friction before customers do, with evidence a coding agent can act on.";
+  }
   if (recipeId === "flaky_test") {
     return "Teams reduce CI noise without normalizing muted, skipped, or blindly retried failures.";
   }
@@ -21041,6 +21670,9 @@ function firstRunPrompts(items) {
     if (item.recipeId === "security_testing") {
       return 'Call brief.mission_plan with recipe "security_testing" for the security test, scanner, dependency-review, or CI gate you want to add.';
     }
+    if (item.recipeId === "web_dogfood") {
+      return 'Call brief.mission_plan with recipe "web_dogfood" for: <app URL and critical user journeys>.';
+    }
     return `Call brief.mission_plan with recipe "${item.recipeId}" for: <describe the work>.`;
   });
 }
@@ -21098,7 +21730,7 @@ function querySynonyms(term) {
     return ["mcp", "client", "surface", "terminal", "ide"];
   }
   if (term === "dogfood" || term === "dogfooding") {
-    return ["first", "receipt", "review"];
+    return ["web", "browser", "journey", "receipt", "review"];
   }
   if (term === "codex")
     return ["codex", "terminal", "mcp"];
@@ -21142,6 +21774,9 @@ function queryScore(item, terms) {
   if (termSet.has("quality") && (item.category === "quality" || item.recipeId === "pr_review")) {
     score += 4;
   }
+  if ((termSet.has("quality") || termSet.has("review")) && item.recipeId === "pr_review") {
+    score += 8;
+  }
   if (termSet.has("product") && item.recipeId === "feature") {
     score += 4;
   }
@@ -21160,8 +21795,8 @@ function queryScore(item, terms) {
   if ((termSet.has("scanner") || termSet.has("scanning") || termSet.has("gate") || termSet.has("tests")) && item.recipeId === "security_testing") {
     score += 7;
   }
-  if (termSet.has("dogfood") && ["pr_review", "session_library", "small_refactor"].includes(item.recipeId)) {
-    score += 2;
+  if (termSet.has("dogfood") && item.recipeId === "web_dogfood") {
+    score += 12;
   }
   if (termSet.has("tdd") && ["feature", "bugfix", "flaky_test", "dependency"].includes(item.recipeId)) {
     score += 4;
@@ -21233,6 +21868,7 @@ var init_agentLoopCatalog = __esm({
       "security_testing",
       "flaky_test",
       "bug_investigation",
+      "web_dogfood",
       "stale_pr",
       "internal_app",
       "pr_review",
@@ -24402,6 +25038,8 @@ function runCardTitle(recipeId) {
       return "Repeat bug investigation loop";
     case "qa_edge_cases":
       return "Repeat QA edge-case loop";
+    case "web_dogfood":
+      return "Repeat web app dogfooding loop";
     case "performance":
       return "Repeat performance loop";
     case "porting":
@@ -24450,6 +25088,8 @@ function runCardUseWhen(recipeId) {
       return "Use when a hard, rare, intermittent, or previously failed bug needs hypotheses, evidence, validation, and a watch signal.";
     case "qa_edge_cases":
       return "Use when important code paths need missing edge cases, fuzz/stress coverage, or stronger behavior tests.";
+    case "web_dogfood":
+      return "Use when a real user journey through a local or deployed web app needs evidence-backed product feedback.";
     case "performance":
       return "Use when latency, throughput, memory, CPU, or benchmark work needs a baseline before code changes.";
     case "porting":
@@ -24565,6 +25205,16 @@ function runCardSteps(recipeId) {
       "decision"
     ];
   }
+  if (recipeId === "web_dogfood") {
+    return [
+      "journeys",
+      "starting state",
+      "browser pass",
+      "evidence",
+      "prioritized findings",
+      "decision"
+    ];
+  }
   if (recipeId === "session_review") {
     return [
       "receipts",
@@ -24683,6 +25333,9 @@ function runCardStopConditions(recipeId) {
   if (recipeId === "experiment") {
     stops.unshift("Success signal, throwaway boundary, discard path, or decision owner is missing.");
   }
+  if (recipeId === "web_dogfood") {
+    stops.unshift("The journey, starting state, expected outcome, or evidence policy is missing.", "The agent is treating a click, route change, or visual preference as proof of success without checking user-visible outcome.", "A screenshot, DOM snapshot, console error, network failure, or auth/environment limitation is being shared without redaction or classification.");
+  }
   if (recipeId === "session_review") {
     return [
       "Raw prompt transcripts, secrets, customer data, or private logs are required without explicit approval.",
@@ -24776,6 +25429,9 @@ function inferLoopId2(task) {
   if (/\b(edge cases?|missing tests?|test gaps?|coverage gaps?|property[- ]based|qa|quality pass|corner cases?)\b/.test(normalized)) {
     return "qa_edge_cases";
   }
+  if (/\b(dogfood|dogfooding|exploratory browser|web app smoke|browser smoke|product safari|try the app|use the app)\b/.test(normalized) && /\b(app|site|web|browser|page|screen|flow|journey|ui|ux|localhost|staging|production)\b/.test(normalized)) {
+    return "web_dogfood";
+  }
   if (/\b(performance|latency|throughput|benchmark|slow|speed|optimi[sz]e|profile|memory|cpu)\b/.test(normalized)) {
     return "performance";
   }
@@ -25443,6 +26099,7 @@ function autoEngageInstruction(scan, skillLearning) {
     "- Read `brief.next.beforeYouCode.compactText` or `brief.start.beforeYouCode.compactText` before the first edit. Cite its target repo, branch, inspect-first files, reuse decision, likely tests, and stop signals in your working notes.",
     "- For micro or small cockpit passes, keep Brief lightweight: inspect, reuse or rule out the top candidate, validate narrowly, and skip mission_plan/save_handoff/verify_receipts unless scope grows.",
     "- For product, design, content, workflow, compliance, internal-app, or wiki work, read `beforeYouCode.productOperatingContext.compactText` or call `brief.product_context` before editing. Reuse or rule out listed patterns, then preserve its journey, terminology, CTA, state-machine, and acceptance checks.",
+    "- When the task asks about users, JTBD, competitors, market alternatives, product taste, microcopy, integrations, or current external behavior, call `brief.product_research_plan` automatically. Use the host's approved web/browser tools for current public evidence, then call `brief.save_product_context` with cited proposed facts; never turn search snippets or competitor claims into defaults without review.",
     "- If the user gives a Linear, Jira, GitHub, Sentry, Datadog, CI, log, trace, or pasted issue reference, pass that exact reference into `brief.start` instead of inventing a separate plan.",
     "- Before creating a new helper, component, route, workflow, template, design pattern, command, or skill, call `brief.reference_implementations` and `brief.codebase_map` to look for reuse first.",
     "- When scope, files, risk, or validation changes mid-task, refresh with `brief.context_for_task`, `brief.rules_for_files`, `brief.codebase_map`, `brief.find_tests`, or `brief.review_memory` before continuing.",
@@ -25526,6 +26183,14 @@ function autoEngageTriggers() {
       agentBehavior: "Look for existing primitives and saved references before adding another implementation.",
       proof: "The final update names reused candidates or explains why new code was justified."
     },
+    {
+      id: "product_research",
+      label: "Product research",
+      when: "The task asks about users, JTBD, competitors, market alternatives, product taste, microcopy, integrations, or current external behavior.",
+      briefCalls: ["brief.product_research_plan", "brief.save_product_context"],
+      agentBehavior: "Create a focused research plan, use the host's approved public research tools, and save only cited proposed facts with an implication for the product. Keep direct user evidence, repo evidence, and market evidence distinct.",
+      proof: "The task includes a research question, source URLs or repo paths, access dates, confidence, proposed/approved status, and open questions when evidence conflicts."
+    },
     {
       id: "scope_change",
       label: "Scope changes",
@@ -26258,7 +26923,7 @@ function consoleLoopContract(scan) {
     `Use this when the current console cannot call MCP tools directly for ${scan.repoName}.`,
     "",
     "1. Ask the operator for a Brief context packet or to run `brief.context_for_task` for the task.",
-    "2. State the mission recipe you are following: feature, design_change, content_change, bugfix, ticket_write, ticket_fix, incident_fix, internal_app, stale_pr, merge_conflict, flaky_test, small_refactor, bug_investigation, qa_edge_cases, performance, porting, experiment, pr_review, session_review, session_library, research, docs_wiki, or dependency.",
+    "2. State the mission recipe you are following: feature, design_change, content_change, bugfix, ticket_write, ticket_fix, incident_fix, internal_app, stale_pr, merge_conflict, flaky_test, small_refactor, bug_investigation, qa_edge_cases, web_dogfood, performance, porting, experiment, pr_review, session_review, session_library, research, docs_wiki, or dependency.",
     "3. Keep scope bounded to the cited files, owners, rules, tests, and wiki pages.",
     "4. Before suggesting handoff, list the validation commands to run and what each proves.",
     "5. Ask for `brief.review_diff`, `brief.save_handoff`, and `brief.verify_receipts` from an MCP-capable surface before PR review.",
@@ -26300,11 +26965,12 @@ function firstRunPromptsFor(label, scan) {
     "Ask the agent: Save one proven implementation reference with brief.save_reference, then list it with brief.reference_implementations.",
     "Ask the agent: Call brief.agent_pack_inventory and summarize skills, commands, hooks, MCP configs, host configs, installers, and high-risk trust boundaries.",
     "Ask the agent: Call brief.agent_pack_adoption_plan before importing a skill, command, or prompt pack.",
+    'For web app dogfooding: Call brief.mission_plan with recipe "web_dogfood", name 2-5 critical journeys and a safe starting state, then use the available browser and hand back the top fixes with evidence.',
     "For UI work: Call brief.design_system_map and use the team's templates, tokens, components, setup rules, and design_adherence gate.",
     "For a ticket: Call brief.fix_ticket with the work item, optional runtime evidence, and autonomy validate.",
     "For a runtime signal: Call brief.runtime_fix with the Sentry issue, Datadog trace, CI failure, log query, or incident id.",
     'For an internal analytics app: Call brief.mission_plan with recipe "internal_app", then follow the returned auth/data/access-control gates.',
-    'For maintenance work: Call brief.mission_plan with recipe "stale_pr", "merge_conflict", "flaky_test", "small_refactor", "bug_investigation", "qa_edge_cases", "performance", "porting", or "experiment" before editing.',
+    'For maintenance work: Call brief.mission_plan with recipe "stale_pr", "merge_conflict", "flaky_test", "small_refactor", "bug_investigation", "qa_edge_cases", "web_dogfood", "performance", "porting", or "experiment" before editing.',
     "Before handoff: Call brief.review_diff, brief.save_handoff, and brief.verify_receipts so the final update includes review, proof bundle, and ledger status."
   ];
 }
@@ -26314,7 +26980,7 @@ function mcpJsonSnippet(installMode, briefSourceRoot, repoRoot) {
     args: ["-lc", localSourceMcpCommand(briefSourceRoot, repoRoot)]
   } : {
     command: "npx",
-    args: ["-y", briefPublishedPackageSpec]
+    args: ["-y", briefPublishedPackageInstallSpec]
   };
   const env = {
     BRIEF_REPO_ROOT: repoRoot ?? "${workspaceFolder}",
@@ -26381,7 +27047,7 @@ function rolloutStepsFor(readiness) {
     "Promote the repo once rules, tests, owners, and memories are discoverable."
   ];
 }
-var ALL_TARGETS, briefPublishedPackageSpec, TARGET_LABELS, INSTALL_COMMANDS, CONNECTOR_DESTINATIONS;
+var ALL_TARGETS, briefPublishedPackageVersion, briefPublishedPackageSpec, briefPublishedPackageInstallSpec, TARGET_LABELS, INSTALL_COMMANDS, CONNECTOR_DESTINATIONS;
 var init_agentSetup = __esm({
   "../core/dist/agentSetup.js"() {
     "use strict";
@@ -26399,7 +27065,9 @@ var init_agentSetup = __esm({
       "ide",
       "generic"
     ];
-    briefPublishedPackageSpec = "runbrief@0.1.3";
+    briefPublishedPackageVersion = "0.1.4";
+    briefPublishedPackageSpec = `runbrief@${briefPublishedPackageVersion}`;
+    briefPublishedPackageInstallSpec = `runbrief@^${briefPublishedPackageVersion}`;
     TARGET_LABELS = {
       terminal: "Terminal agent",
       vscode: "VS Code",
@@ -26412,15 +27080,15 @@ var init_agentSetup = __esm({
       generic: "Any MCP client"
     };
     INSTALL_COMMANDS = {
-      terminal: `npx -y ${briefPublishedPackageSpec}`,
-      vscode: `npx -y ${briefPublishedPackageSpec}`,
-      claude: `claude mcp add --transport stdio --scope user brief -- npx -y ${briefPublishedPackageSpec}`,
+      terminal: `npx -y ${briefPublishedPackageInstallSpec}`,
+      vscode: `npx -y ${briefPublishedPackageInstallSpec}`,
+      claude: `claude mcp add --transport stdio --scope user brief -- npx -y ${briefPublishedPackageInstallSpec}`,
       claude_console: "Paste the mission_plan loop recipe when direct MCP tools are unavailable.",
-      codex: `codex mcp add brief -- npx -y ${briefPublishedPackageSpec}`,
-      cursor: `npx -y ${briefPublishedPackageSpec}`,
+      codex: `codex mcp add brief -- npx -y ${briefPublishedPackageInstallSpec}`,
+      cursor: `npx -y ${briefPublishedPackageInstallSpec}`,
       cursor_console: "Paste the mission_plan loop recipe when direct MCP tools are unavailable.",
-      ide: `npx -y ${briefPublishedPackageSpec}`,
-      generic: `npx -y ${briefPublishedPackageSpec}`
+      ide: `npx -y ${briefPublishedPackageInstallSpec}`,
+      generic: `npx -y ${briefPublishedPackageInstallSpec}`
     };
     CONNECTOR_DESTINATIONS = {
       terminal: "Repo shell MCP server env",
@@ -26690,6 +27358,9 @@ function recipeForIntent(kind, request, explicitRecipe, runtimeEvidence) {
     return /\b(bug|broken|fix|incorrect|wrong)\b/i.test(request) ? "bugfix" : "feature";
   }
   const lower = request.toLowerCase();
+  if (/\b(dogfood|dogfooding|exploratory browser|web app smoke|browser smoke|product safari|try the app|use the app)\b/.test(lower) && /\b(app|site|web|browser|page|screen|flow|journey|ui|ux|localhost|staging|production)\b/.test(lower)) {
+    return "web_dogfood";
+  }
   if (isDesignLedChange(lower)) {
     return "design_change";
   }
@@ -26726,7 +27397,7 @@ function isProductJourneyAudit(request) {
   return /\b(audit|assess|evaluate|inspect|study)\b/.test(request) && /\b(app|experience|flow|journey|launch readiness|onboarding|product|self[- ]serve|workspace)\b/.test(request);
 }
 function autonomyForIntent(kind, recipe) {
-  if (kind === "context_for_task" || kind === "write_ticket" || recipe === "research") {
+  if (kind === "context_for_task" || kind === "write_ticket" || recipe === "research" || recipe === "web_dogfood") {
     return "read_only";
   }
   return "validate";
@@ -27387,6 +28058,9 @@ function summaryForIntent(kind, recipe, workItem, runtimeEvidence) {
     return "Brief inferred a compact pre-PR readiness pass.";
   if (kind === "context_for_task")
     return "Brief inferred a context-only preflight.";
+  if (recipe === "web_dogfood") {
+    return "Brief inferred a read-only browser dogfooding loop: exercise journeys, capture evidence, and rank the top user-impact fixes.";
+  }
   return `Brief inferred a ${recipe ?? "mission"} loop.`;
 }
 function reasonForIntent(kind, request, workItem, runtimeEvidence) {
@@ -28686,7 +29360,7 @@ var init_governance = __esm({
 // ../core/dist/hookSetup.js
 function generateHookSetup(input = {}) {
   const mode = input.mode ?? "advisory";
-  const packageCommand = input.packageCommand ?? `npx -y ${briefPublishedPackageSpec}`;
+  const packageCommand = input.packageCommand ?? `npx -y ${briefPublishedPackageInstallSpec}`;
   const failOn = mode === "blocking" ? "high" : "blocker";
   return {
     mode,
@@ -33294,6 +33968,7 @@ var init_dist2 = __esm({
     init_agentBeforeYouCode();
     init_agentWorkPacket();
     init_productOperatingContext();
+    init_productIntelligence();
     init_ticketMissionRuntime();
     init_governance();
     init_hookSetup();
@@ -34929,9 +35604,9 @@ function buildConnectorRecoveryPlan(input) {
   });
   const restartNeeded = readiness.status === "restart_required" || readiness.status === "source_mismatch";
   const needsVerification = readiness.status === "needs_verification";
-  const canSelfRestart = input.mode === "server" && readiness.status !== "source_mismatch";
+  const canSelfRestart = input.mode === "server" && readiness.status !== "wrong_repo";
   const confirmed = input.confirm === briefRestartConfirmation;
-  const shouldSchedule = canSelfRestart && confirmed && (readiness.status === "restart_required" || input.force === true);
+  const shouldSchedule = canSelfRestart && confirmed && (readiness.status === "restart_required" || readiness.status === "source_mismatch" || input.force === true);
   const status = shouldSchedule ? "restart_scheduled" : restartNeeded ? readiness.status : needsVerification ? "needs_verification" : "ready";
   const verifyExpect = [
     "connectorReadiness.status is ready",
@@ -34955,7 +35630,7 @@ function buildConnectorRecoveryPlan(input) {
     mcpSelfRestart: {
       tool: "brief.restart_connector",
       available: canSelfRestart,
-      behavior: "When confirmed, Brief returns this recovery packet, waits briefly, then exits the local MCP process. MCP hosts that supervise subprocesses can relaunch it; hosts that do not should be restarted or reloaded by the user.",
+      behavior: "When confirmed, Brief returns this recovery packet, waits briefly, then exits the local MCP process. MCP hosts that supervise subprocesses can relaunch it; hosts that do not should be restarted or reloaded by the user. A restart refreshes the configured source; it does not change a host's source path.",
       call: {
         confirm: briefRestartConfirmation,
         surface: selectedSurface,
@@ -34978,7 +35653,8 @@ function buildConnectorRecoveryPlan(input) {
 }
 function summaryForStatus(status, readiness) {
   if (status === "restart_scheduled") {
-    return "Brief scheduled the local MCP process to exit so the host can relaunch a fresh connector.";
+    const restartSummary = "Brief scheduled the local MCP process to exit so the host can relaunch a fresh connector.";
+    return readiness.status === "source_mismatch" ? `${restartSummary} ${readiness.summary} Verify the host source path after reconnecting.` : restartSummary;
   }
   return readiness.summary;
 }
@@ -35081,7 +35757,7 @@ function mcpServerFreshness(options2) {
         ...base,
         action: freshnessAction("current"),
         summary: "The published Brief connector is running from an immutable package; source-checkout freshness checks are not applicable.",
-        next: "Continue using Brief normally. Update the package when you want a newer connector release."
+        next: "Continue using Brief normally. Fresh MCP starts resolve the latest compatible patch; reload the host to pick it up, and use a new generated setup for a future minor or major release."
       };
     }
     return {
@@ -35384,14 +36060,16 @@ var init_serverInstructions = __esm({
   "../mcp/src/serverInstructions.ts"() {
     "use strict";
     briefMcpInstructions = [
-      "Brief is the default repo-context, reuse, review, and handoff companion for non-trivial coding work. This is the normal path, not an optional reminder. Do not wait for the user to repeat 'use Brief'.",
-      "At the first Brief-relevant task in a session, call brief.install_status once and confirm the repo target and connector freshness.",
-      "Local mode is the default and does not require an account. Team mode is optional: it adds approved shared guidance through browser-authorized sync. If team sync is unavailable, continue local repo work and mention the team-sync limitation only when it affects the task.",
-      "When the user asks for non-trivial work, call brief.next with the user's actual request before inspecting or editing files, read the returned compact workPacket, and follow its recommendation before editing. Keep micro changes lightweight.",
-      "Before creating a helper, component, route, workflow, command, or skill, use the returned reuse candidates or call brief.reference_implementations and brief.codebase_map.",
-      "Refresh Brief context when the task, files, risk, or validation plan changes.",
+      "Brief is the default repo-context, reuse, review, and handoff companion for non-trivial coding work. Do not wait for the user to repeat 'use Brief'.",
+      "At the first task, call brief.install_status and confirm repo and connector freshness. Include task when known to get the first context packet.",
+      "Local mode is the default and needs no account. Team mode adds approved shared guidance. If team sync is unavailable, continue local repo work and mention it only when it affects the task.",
+      "Package-backed connectors pick up compatible patches on the next MCP start. Reload a long-lived host after an update; routine patches do not need a reinstall.",
+      "For non-trivial work, call brief.next with the request before inspecting or editing and follow its compact recommendation. Auto-engage. Keep micro changes lightweight.",
+      "Before creating a helper, component, route, workflow, command, or skill, use reuse candidates or call brief.reference_implementations and brief.codebase_map.",
+      "For user, JTBD, competitor, market, taste, copy, or integration questions, call brief.product_research_plan, research with the host, then save cited proposed facts with brief.save_product_context.",
+      "Refresh Brief when task, files, risk, or validation changes.",
       "Before a meaningful handoff, call brief.review_diff. Save and verify a handoff only for multi-step, high-risk, or durable work.",
-      "Keep Brief quiet in chat: report one concrete way it helped and the validation or remaining risk in one or two lines. Never invent Brief usage or paste full receipts unless asked."
+      "Keep Brief quiet: report one concrete benefit and validation or risk in one or two lines. Never invent usage or paste receipts unless asked."
     ].join("\n");
     briefMcpInstructionSignals = [
       "brief.install_status",
@@ -35437,6 +36115,16 @@ function compactInstallStatus(input) {
   const mcpContractActive = input.serverInstructionsActive && input.connectorReadiness.safeToUseBrief;
   const teamSyncStatus = input.cloudSync.configured ? input.teamContext.status === "failed" ? "unavailable" : input.teamContext.status === "fetched" ? "connected" : "checking" : "not_connected";
   const connectionMode = teamSyncStatus === "unavailable" ? "team_degraded" : teamSyncStatus === "connected" ? "team" : "local";
+  const connectorUpdate = input.serverFreshness.sourceKind === "package" ? {
+    policy: "automatic_compatible_patches",
+    installSpec: briefPublishedPackageInstallSpec,
+    applies: "next_mcp_start",
+    summary: "Package-backed connectors pick up the latest compatible patch when the MCP host starts them again."
+  } : {
+    policy: "manual_source_restart",
+    applies: "host_restart",
+    summary: "Source-checkout connectors use the files in their configured checkout; restart the host after local Brief changes."
+  };
   const totalMapCandidates = stats.mapTotalCandidateCount ?? stats.mapNodeCount + (stats.mapOmittedCount ?? 0);
   const mapCoveragePercent = totalMapCandidates ? Math.round(stats.mapNodeCount / totalMapCandidates * 100) : 100;
   const repoGuidanceSignals = unique4(
@@ -35467,6 +36155,7 @@ function compactInstallStatus(input) {
       fresh: input.serverFreshness.status === "current",
       distribution: input.serverFreshness.sourceKind,
       sourceRoot: input.serverFreshness.sourceRoot,
+      update: connectorUpdate,
       summary: input.connectorReadiness.summary
     },
     connection: {
@@ -35530,8 +36219,9 @@ var briefConnectorVersion;
 var init_installStatus = __esm({
   "../mcp/src/installStatus.ts"() {
     "use strict";
+    init_dist2();
     init_serverInstructions();
-    briefConnectorVersion = "0.1.3";
+    briefConnectorVersion = "0.1.4";
   }
 });
 
@@ -36024,7 +36714,7 @@ function renderWikiRefreshWorkflow(options2 = {}) {
     "        with:",
     "          node-version: 22",
     "      - name: Refresh wiki",
-    '        run: npx -y runbrief@0.1.3 wiki init --repo "$GITHUB_WORKSPACE" --update --no-agent-files',
+    `        run: npx -y ${briefPublishedPackageInstallSpec} wiki init --repo "$GITHUB_WORKSPACE" --update --no-agent-files`,
     "      - name: Open refresh PR",
     "        uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676 # v7.0.11",
     "        with:",
@@ -36140,8 +36830,8 @@ function bestMatchingReceipt(receipts, kind, input) {
 function missionIntentMatches(receipt, input) {
   if (input.recipeId && receipt.missionRecipeId === input.recipeId) return true;
   if (!input.task) return false;
-  const wantedTask = normalizeText(input.task);
-  const receiptTask = normalizeText(receipt.task);
+  const wantedTask = normalizeText2(input.task);
+  const receiptTask = normalizeText2(receipt.task);
   return receiptTask === wantedTask || wantedTask.length >= 20 && receiptTask.length >= 20 && (receiptTask.includes(wantedTask) || wantedTask.includes(receiptTask));
 }
 function matchScore(receipt, input) {
@@ -36151,8 +36841,8 @@ function matchScore(receipt, input) {
   }
   let score = input.branch && receiptBranch2 ? 15 : 0;
   if (input.task) {
-    const wantedTask = normalizeText(input.task);
-    const receiptTask = normalizeText(receipt.task);
+    const wantedTask = normalizeText2(input.task);
+    const receiptTask = normalizeText2(receipt.task);
     if (receiptTask === wantedTask) {
       score += 80;
     } else if (wantedTask.length >= 20 && receiptTask.length >= 20 && (receiptTask.includes(wantedTask) || wantedTask.includes(receiptTask))) {
@@ -36210,7 +36900,7 @@ function cleanValues(values, limit = 300) {
 function unique5(values) {
   return [...new Set(values)];
 }
-function normalizeText(value) {
+function normalizeText2(value) {
   return value.trim().toLowerCase().replace(/\s+/g, " ");
 }
 function normalizeBranch(value) {
@@ -36634,6 +37324,54 @@ function summarizePacket(packet) {
     ...packet.dependencyRemediation ? { dependencyRemediation: packet.dependencyRemediation } : {}
   };
 }
+async function buildActivationContext(input) {
+  const request = {
+    task: input.task,
+    repoRoot: input.repoRoot,
+    agent: "mcp-activation",
+    maxTokens: Math.min(input.maxTokens ?? 6e3, 6e3)
+  };
+  if (input.files) request.files = input.files;
+  if (input.branch) request.branch = input.branch;
+  const packet = contextForTask(input.scan, request);
+  const localReceipt = saveLocalContextReceipt(input.repoRoot, packet, {
+    kind: "context",
+    agent: "mcp-activation",
+    ...input.files ? { files: input.files } : {},
+    ...input.branch ? { branch: input.branch } : {}
+  });
+  const cloudSync = await syncContextReceipt(packet, input.repoRoot, {
+    agent: "mcp-activation",
+    ...input.files ? { files: input.files } : {},
+    ...input.branch ? { branch: input.branch } : {}
+  });
+  return {
+    status: "context_ready",
+    task: input.task,
+    packetId: packet.packetId,
+    summary: packet.summary,
+    tokenEstimate: packet.tokenEstimate,
+    inspectFirst: packet.map.slice(0, 5).map((node) => ({
+      path: node.path,
+      kind: node.type,
+      name: node.name
+    })),
+    rules: packet.rules.slice(0, 4).map((rule) => ({
+      text: rule.body,
+      sources: rule.sourcePaths
+    })),
+    suggestedTests: packet.suggestedTests.slice(0, 4),
+    sources: packet.sources.slice(0, 6),
+    localReceipt: {
+      id: localReceipt.id
+    },
+    cloudSync: {
+      status: cloudSync.status,
+      ..."reason" in cloudSync && cloudSync.reason ? { reason: cloudSync.reason } : {}
+    },
+    next: "Use this packet before editing. If the task or files change, call brief.next again."
+  };
+}
 function summarizeReview(review, detail = "auto") {
   if (detail === "auto" && isLightweightReview(review)) {
     return summarizeLightweightReview(review);
@@ -37241,15 +37979,17 @@ var init_server = __esm({
     init_workspace();
     init_handoffAutofill();
     init_scanFreshness();
-    cloudBootstrap = await bootstrapCloudCredentials();
+    cloudBootstrap = process.env.BRIEF_CLOUD_BOOTSTRAP_DONE === "1" ? { status: "skipped", reason: "already_bootstrapped" } : await bootstrapCloudCredentials();
+    process.env.BRIEF_CLOUD_BOOTSTRAP_DONE = "1";
     if (cloudBootstrap.status === "failed") {
-      console.error(`Brief cloud setup: ${cloudBootstrap.reason}`);
-      process.exit(1);
+      console.error(
+        `Brief team sync is unavailable: ${cloudBootstrap.reason} Continuing in local mode.`
+      );
     }
     server = new McpServer(
       {
         name: "brief",
-        version: "0.1.3"
+        version: "0.1.4"
       },
       {
         instructions: briefMcpInstructions
@@ -37349,6 +38089,7 @@ var init_server = __esm({
       "small_refactor",
       "bug_investigation",
       "qa_edge_cases",
+      "web_dogfood",
       "performance",
       "porting",
       "experiment",
@@ -37389,14 +38130,20 @@ var init_server = __esm({
     ]);
     registerTool(
       "install_status",
-      "First Brief call once per agent session. Confirms MCP is connected to the correct repo/worktree, then points the agent toward brief.next for the actual task.",
+      "First Brief call once per agent session. Confirms MCP is connected to the correct repo/worktree, scans it, and optionally returns the first compact context packet when task is provided. Never needs a reusable API key.",
       {
         repoPath: z2.string().optional().describe(
           "Path inside the repo. Defaults to BRIEF_REPO_ROOT captured from the agent workspace, then current working directory."
         ),
-        detail: responseDetailSchema
+        detail: responseDetailSchema,
+        task: z2.string().min(4).optional().describe(
+          "The user's current task, when already known. Brief returns a compact first context packet in this same call."
+        ),
+        files: z2.array(z2.string()).optional(),
+        branch: z2.string().optional(),
+        maxTokens: z2.number().int().min(500).max(12e3).optional()
       },
-      async ({ repoPath, detail }) => {
+      async ({ repoPath, detail, task, files, branch, maxTokens }) => {
         const rootResolution = resolveRepoRootDetails(repoPath);
         const repoRoot = rootResolution.repoRoot;
         const repoTarget = repoTargetHealth(rootResolution);
@@ -37420,8 +38167,16 @@ var init_server = __esm({
           );
         }
         const { scan, teamContext } = await scanRepoWithTeamContext(repoRoot, {
-          maxFiles: 400
+          maxFiles: 1200
         });
+        const activation = task?.trim() ? await buildActivationContext({
+          scan,
+          repoRoot,
+          task: task.trim(),
+          ...files ? { files } : {},
+          ...branch ? { branch } : {},
+          ...maxTokens !== void 0 ? { maxTokens } : {}
+        }) : void 0;
         const report = buildLocalValueReport(repoRoot, scan.repoName);
         const setups = generateAgentSetup(scan, { target: "all" });
         const skillLearning = buildRepoSkillLearningReport(repoRoot, {
@@ -37448,6 +38203,7 @@ var init_server = __esm({
           skillLearning: summarizeSkillLearningForStart(skillLearning, void 0),
           connectorHealth: summarizeAgentConnectorHealth(setups),
           proofLoop: report.proofLoop,
+          ...activation ? { activation } : {},
           value: {
             receiptCount: report.receiptCount,
             contextPacketCount: report.contextPacketCount,
@@ -37460,8 +38216,8 @@ var init_server = __esm({
           next: report.proofLoop.next
         };
         if (detail === "expanded") return jsonText(fullStatus);
-        return jsonText(
-          compactInstallStatus({
+        return jsonText({
+          ...compactInstallStatus({
             mode: fullStatus.mode,
             repoRoot,
             rootResolution,
@@ -37475,8 +38231,9 @@ var init_server = __esm({
             workflowWiring,
             valueReport: report,
             serverInstructionsActive: true
-          })
-        );
+          }),
+          ...activation ? { activation } : {}
+        });
       }
     );
     registerTool(
@@ -38700,6 +39457,109 @@ var init_server = __esm({
         });
       }
     );
+    registerTool(
+      "product_research_plan",
+      "Create a focused, source-safe research plan for a product, UX, content, market, competitor, or integration decision. Use the host's approved web/browser tools to investigate it, then save only cited observations with brief.save_product_context.",
+      {
+        task: z2.string().min(4).describe("The product decision or user job to research."),
+        audience: z2.string().max(200).optional(),
+        competitors: z2.array(z2.string().trim().min(1).max(120)).max(8).optional(),
+        integrations: z2.array(z2.string().trim().min(1).max(120)).max(8).optional()
+      },
+      async ({ task, audience, competitors, integrations }) => jsonText({
+        ...buildProductResearchPlan({
+          task,
+          ...audience ? { audience } : {},
+          ...competitors ? { competitors } : {},
+          ...integrations ? { integrations } : {}
+        }),
+        next: "Use the host's approved public web/browser research. Do not treat search snippets as product truth; save the source URL, access date, claim, implication, and confidence with brief.save_product_context."
+      })
+    );
+    registerTool(
+      "save_product_context",
+      "Save cited product intelligence locally for this repo. Facts remain proposed by default; use approved only after a human product decision. Store JTBD, personas, product principles, terminology, competitor/integration observations, metrics, and decisions without credentials or private source content.",
+      {
+        repoPath: z2.string().optional().describe(
+          "Path inside the repo. Defaults to BRIEF_REPO_ROOT captured from the agent workspace, then current working directory."
+        ),
+        repoName: z2.string().trim().max(160).optional(),
+        facts: z2.array(
+          z2.object({
+            kind: z2.enum([
+              "persona",
+              "jtbd",
+              "principle",
+              "terminology",
+              "competitor",
+              "integration",
+              "metric",
+              "decision"
+            ]),
+            statement: z2.string().trim().min(8).max(1e3),
+            appliesTo: z2.array(z2.string().trim().min(1).max(240)).max(24).optional(),
+            status: z2.enum(["proposed", "approved", "stale", "rejected"]).optional(),
+            confidence: z2.number().min(0).max(1).optional(),
+            sources: z2.array(
+              z2.object({
+                kind: z2.enum(["repo", "user", "research", "feedback", "dogfood"]),
+                label: z2.string().trim().min(1).max(180),
+                url: z2.string().url().optional(),
+                path: z2.string().trim().max(300).optional(),
+                accessedAt: z2.string().datetime().optional(),
+                excerpt: z2.string().trim().max(420).optional()
+              })
+            ).max(12).optional()
+          })
+        ).min(1).max(40),
+        openQuestions: z2.array(z2.string().trim().min(4).max(300)).max(40).optional(),
+        decisions: z2.array(z2.string().trim().min(4).max(500)).max(80).optional()
+      },
+      async ({
+        repoPath,
+        repoName,
+        facts,
+        openQuestions,
+        decisions
+      }) => {
+        const repoTargetInfo = resolveRepoTarget(repoPath);
+        if (repoTargetInfo.repoTarget.status === "needs_repo_target") {
+          return repoTargetBlock(repoTargetInfo, { facts: facts.length });
+        }
+        const { repoRoot, rootResolution, repoTarget } = repoTargetInfo;
+        try {
+          const result = saveProductIntelligence(repoRoot, {
+            ...repoName ? { repoName } : {},
+            facts,
+            ...openQuestions ? { openQuestions } : {},
+            ...decisions ? { decisions } : {}
+          });
+          return jsonText({
+            status: "saved_product_context",
+            repoRoot,
+            rootResolution,
+            repoTarget,
+            savedFactIds: result.savedFactIds,
+            factCount: result.store.facts.length,
+            sourceCount: new Set(
+              result.store.facts.flatMap(
+                (fact) => fact.sources.map((source) => source.id)
+              )
+            ).size,
+            next: "Call brief.product_context for a task to see the relevant facts. Proposed facts need human review before becoming team defaults."
+          });
+        } catch (error) {
+          return jsonText({
+            status: "product_context_save_failed",
+            repoRoot,
+            rootResolution,
+            repoTarget,
+            error: error instanceof Error ? error.message : "Could not save product context.",
+            next: "Fix the source citation or repository target and retry; no context was saved from this request."
+          });
+        }
+      }
+    );
     registerTool(
       "context_for_task",
       "Return a compact, source-grounded context packet after brief.next or brief.start identifies that scoped context is needed. Use when scope changes, files are unclear, or an agent needs rules/tests/map evidence before continuing.",
@@ -39827,6 +40687,7 @@ var init_server = __esm({
           "small_refactor",
           "bug_investigation",
           "qa_edge_cases",
+          "web_dogfood",
           "performance",
           "porting",
           "experiment",
@@ -40137,6 +40998,7 @@ var cliStartedAt = /* @__PURE__ */ new Date();
 var cliModulePath = fileURLToPath2(import.meta.url);
 if (!isCloudLogoutCommand(command)) {
   const cloudBootstrap2 = await bootstrapCloudCredentials();
+  process.env.BRIEF_CLOUD_BOOTSTRAP_DONE = "1";
   if (cloudBootstrap2.status === "failed") {
     console.error(
       `Brief team sync is unavailable: ${cloudBootstrap2.reason} Continuing in local mode.`
@@ -40320,6 +41182,66 @@ async function runCli(commandName, commandArgs) {
     process.exitCode = 1;
     return;
   }
+  if (isCommand(
+    commandName,
+    "product-research-plan",
+    "product_research_plan",
+    "research-product"
+  )) {
+    const task = option2(commandArgs, "task") ?? positionalText(commandArgs);
+    if (!task) {
+      fail(
+        'Missing task for product-research-plan. Example: brief product-research-plan --repo "$PWD" "Choose the right issue-triage integration"'
+      );
+    }
+    const audience = option2(commandArgs, "audience");
+    const competitors = textListOption(commandArgs, "competitor");
+    const integrations = textListOption(commandArgs, "integration");
+    printJson(
+      buildProductResearchPlan({
+        task,
+        ...audience ? { audience } : {},
+        ...competitors ? { competitors } : {},
+        ...integrations ? { integrations } : {}
+      })
+    );
+    return;
+  }
+  if (isCommand(
+    commandName,
+    "save-product-context",
+    "save_product_context",
+    "product-context-save"
+  )) {
+    const factsFile = option2(commandArgs, "facts-file");
+    if (!factsFile) {
+      fail(
+        'Missing --facts-file. Pass a JSON file with { "facts": [{ "kind", "statement", "sources" }] } so citations stay reviewable.'
+      );
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(readFileSync7(path20.resolve(repoRoot, factsFile), "utf8"));
+    } catch (error) {
+      fail(
+        `Could not read --facts-file: ${error instanceof Error ? error.message : "invalid JSON"}`
+      );
+    }
+    if (!parsed?.facts || !Array.isArray(parsed.facts)) {
+      fail('The --facts-file must contain a top-level "facts" array.');
+    }
+    const result = saveProductIntelligence(repoRoot, parsed);
+    printJson({
+      status: "saved_product_context",
+      repoRoot,
+      rootResolution,
+      repoTarget,
+      savedFactIds: result.savedFactIds,
+      factCount: result.store.facts.length,
+      next: "Run brief product-context for a task to receive the relevant cited product facts."
+    });
+    return;
+  }
   if (isCommand(
     commandName,
     "pre-pr",
@@ -42123,6 +43045,36 @@ function cliCommandHelp() {
         "When the agent needs acceptance criteria and state checks before editing."
       ]
     },
+    {
+      command: "product-research-plan",
+      aliases: ["product_research_plan", "research-product"],
+      purpose: "Turn a product, user, competitor, taste, or integration question into a focused research plan with source and approval rules.",
+      repoBound: true,
+      usage: 'brief product-research-plan --repo $PWD "Choose the right issue-triage integration"',
+      examples: [
+        'brief product-research-plan --repo $PWD "Improve onboarding copy for coding agents"',
+        'brief product-research-plan --repo $PWD --competitor Cursor --competitor Factory "Improve agent context"'
+      ],
+      whenToUse: [
+        "When a PM, designer, or agent needs current market, competitor, integration, or user evidence.",
+        "Before turning external research into a product rule, skill, style, or copy decision."
+      ]
+    },
+    {
+      command: "save-product-context",
+      aliases: ["save_product_context", "product-context-save"],
+      purpose: "Save cited product intelligence locally so future product, design, copy, and integration work receives relevant context.",
+      repoBound: true,
+      usage: "brief save-product-context --repo $PWD --facts-file /tmp/brief-product-facts.json",
+      examples: [
+        "brief save-product-context --repo $PWD --facts-file ./product-facts.json"
+      ],
+      whenToUse: [
+        "After researching with an approved browser or web source.",
+        "After a user, dogfood session, or product decision produces a reusable fact.",
+        "Facts remain proposed by default until a human approves them."
+      ]
+    },
     {
       command: "map",
       aliases: ["codebase-map", "codebase_map"],
@@ -42381,6 +43333,15 @@ function positionalText(argsList) {
     "doNotCopy",
     "owner",
     "receipts",
+    "audience",
+    "competitor",
+    "competitors",
+    "integration",
+    "integrations",
+    "facts-file",
+    "repo-name",
+    "open-questions",
+    "decisions",
     "added-by",
     "addedBy",
     "agent-command",
@@ -42503,6 +43464,7 @@ function recipeOption(argsList) {
     "small_refactor",
     "bug_investigation",
     "qa_edge_cases",
+    "web_dogfood",
     "performance",
     "porting",
     "experiment",