Default spicy on; add --no-spicy option and docs

Author: Flamehaven CI

CHANGELOG.md

@@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - HF demo import path includes `src` so `dir2md` imports resolve in Spaces.
 - Lint/test cleanup after refactor (ruff + pytest green).
 - Default excludes now drop cache/venv noise (`.pytest_cache_local`, `.ruff_cache`, `venv_clean`) for cleaner blueprints out of the box.
+- Spicy is now enabled by default; `--no-spicy` disables, `--spicy-strict` enforces failure on high/critical.
 
 ### Documentation
 - Updated README/demo metadata (Spicy branding, HF front matter); pending: scrub remaining Pro/license mentions in docs.

README.md

@@ -38,7 +38,7 @@ Dir2md analyzes directory structures and generates comprehensive markdown docume
 - **[*] Fast preset**: `--fast` builds tree + manifest only (no file reads) for ultra-light contexts.
 - **[o] AI-friendly defaults**: `--ai-mode` with capped budgets, stats, manifest on; `--query` ranks files and injects snippets.
 - **[+] Dual outputs by default**: Generates human `md` and LLM-friendly `jsonl` together unless you choose `--output-format`.
-- **[#] Spicy risk report**: `--spicy` adds 5-level findings to md/json/jsonl/manifest; `--spicy-strict` fails on high/critical.
+- **[#] Spicy risk report**: On by default (`--spicy`); disable with `--no-spicy`. Adds 5-level findings to md/json/jsonl/manifest; `--spicy-strict` fails on high/critical.
 - **[T] CLI polish**: `[LEVEL]` status lines, `--progress none|dots|full`, timestamped `*_blueprint[_spicy]_YYYYMMDD` filenames.
 - **[&] Architecture**: Introduced `walker.py`, `selector.py`, `renderer.py`, `orchestrator.py` to reduce `core.py` coupling.
 - **[W] Release**: Added PyPI/TestPyPI release workflow and Docker usage notes.
@@ -331,10 +331,10 @@ Raw code slice for local agents:
 dir2md . --preset raw --masking basic --budget-tokens 4000
 ```
 
-### Spicy risk report
-- Enable spicy findings: `--spicy`
-- Enforce failure on high/critical: `--spicy --spicy-strict` (exit code 2)
-- Outputs:
+### Spicy risk report
+- Spicy on by default. Disable with `--no-spicy`
+- Enforce failure on high/critical: `--spicy --spicy-strict` (exit code 2)
+- Outputs:
   - `md` (human-friendly): includes ?쏶picy??section
   - `json`/`jsonl`/manifest (LLM-friendly): `spicy.score`, `spicy.counts`, `spicy.findings[]`
 Severity levels: ok, warn, risk, high, critical.

src/dir2md/cli.py

@@ -291,7 +291,8 @@ def main(argv: list[str] | None = None) -> int:
     ap.add_argument("--mask-pattern-file", action="append", dest="mask_pattern_files", help="Load custom mask regex patterns from file (JSON array or newline separated list). Supports file:// URIs.")
     ap.add_argument("--output-format", choices=["md", "json", "jsonl", "both"], help="Output format: md (human), json/jsonl (LLM); default produces md+jsonl")
     ap.add_argument("--progress", choices=["full", "dots", "none"], help="Progress verbosity for CLI output (default: dots)")
-    ap.add_argument("--spicy", action="store_true", help="Enable spicy risk report (severity counts and findings)")
+    ap.add_argument("--spicy", dest="spicy", action="store_true", default=True, help="Enable spicy risk report (default: on)")
+    ap.add_argument("--no-spicy", dest="spicy", action="store_false", help="Disable spicy risk report")
     ap.add_argument("--spicy-strict", action="store_true", help="Exit non-zero if spicy finds high/critical findings")
 
     ap.add_argument("-V", "--version", action="version", version=f"dir2md {__version__}")