etymd 0.15.0 → 0.17.0

package/dist/{chunk-UFNETE6P.js → chunk-PIJZUDDQ.js}

@@ -168,7 +168,7 @@ function generatePreCommitHook(selfBuild = false) {
 
 ${localHookCall("pre-commit")}
 
-# Content screen \u2014 staged file bytes. Refuses to commit environment, employer or identity
+# Content screen \u2014 staged file bytes. Refuses to commit environment, guarded-side or identity
 # detail into a repo whose history is (or could become) public. The checker and its patterns
 # are machine-local by design, so this is a NO-OP wherever no checker is installed: safe to
 # commit anywhere, active only where you opted in.
@@ -431,9 +431,13 @@ async function planWorkflow(root, facts, opts) {
       commitFormat: opts.gateConfig?.commitFormat,
       allowWriting: opts.gateConfig?.allowWriting ?? []
     };
+    const tier = deriveFailOn(facts, {
+      failOn: gateConfig.failOn,
+      explicit: opts.gateFailOnPinned ?? false
+    });
     await add(
       ".githooks/pre-push",
-      generatePrePushHook(facts, gateConfig, selfBuild),
+      generatePrePushHook(facts, { ...gateConfig, failOn: tier.failOn }, selfBuild),
       "Correctness gate (pre-push)",
       true
     );

package/dist/{chunk-2RNQ6OLV.js → chunk-WKP7M2B3.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { stateFreshnessLens, rankFindings, listInstructionFiles, buildTruthEnv, emptyCounters, packageManagerUsage, checkDocRefs, listStateDocuments, loadDecisionLedger, checkDecisionRefs, checkTextClaims } from './chunk-IWG77WV3.js';
+import { stateFreshnessLens, rankFindings, listInstructionFiles, buildTruthEnv, emptyCounters, packageManagerUsage, checkDocRefs, listStateDocuments, loadDecisionLedger, checkDecisionRefs, checkTextClaims } from './chunk-FNA4R5KT.js';
 import { readLedger, reconcileLedger, writeLedger, visibleFindings } from './chunk-3E2IPCRY.js';
 import { measureContext, contextFileLabel } from './chunk-HI7NWPRA.js';
-import { scanProject } from './chunk-Y6RZRED3.js';
+import { scanProject } from './chunk-446EZNAQ.js';
 import { DEFAULT_CONFIG, ETYMD_DIR, writeCachedFacts, readBaseline, readConfig, deriveProfile, baselineCarriesMachinePath, BASELINE_FILE, CONFIG_FILE } from './chunk-P6ATKV2R.js';
 import { PACK_VERSION } from './chunk-YQZDYDAK.js';
 import { pathExists, readText, readJson, isCiEnvironment, isExecutable } from './chunk-4VPBP6K6.js';

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { VERSION } from './chunk-DBWDMIYO.js';
+import { VERSION } from './chunk-BUMOGHQA.js';
 import path from 'path';
 import { Command } from 'commander';
 import pc from 'picocolors';
@@ -31,7 +31,7 @@ program.command("audit").description("Verify every instruction claim against the
   "exit non-zero when findings at/above this tier exist (risk|gap|polish)"
 ).action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./audit-YSALDC2L.js');
+    const { run } = await import('./audit-PHAK5HEW.js');
     await run({
       cwd: resolveCwd(cmd),
       json: opts.json,
@@ -44,7 +44,7 @@ program.command("audit").description("Verify every instruction claim against the
 );
 program.command("init").description("Onboard the truth guard: approve the baseline; scaffold AGENTS.md only if asked").option("-y, --yes", "accept defaults without prompting (never overwrites)").option("--with-agents", "also scaffold a minimal AGENTS.md where none exists (off by default)").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./init-H57H2JBE.js');
+    const { run } = await import('./init-6RULX5JZ.js');
     await run({ cwd: resolveCwd(cmd), yes: opts.yes, withAgents: opts.withAgents });
   })
 );
@@ -52,19 +52,19 @@ program.command("approve").description(
   "Re-approve the committed baseline after intentional structural changes (non-interactive)"
 ).action(
   (_opts, cmd) => action(async () => {
-    const { run } = await import('./approve-MA4Z3TBT.js');
+    const { run } = await import('./approve-VN4EDBR5.js');
     await run({ cwd: resolveCwd(cmd) });
   })
 );
 program.command("scan").description("Deterministically reckon the project into a facts index").option("--json", "print the raw facts as JSON").option("--no-save", "do not write the .etymd cache").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./scan-XBOHDXAH.js');
+    const { run } = await import('./scan-LLWW4YOU.js');
     await run({ cwd: resolveCwd(cmd), json: opts.json, save: opts.save });
   })
 );
 program.command("doctor").description('Alias for `audit --truth` \u2014 "are the recorded instructions still true?"').option("--json", "print findings as JSON").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./doctor-Y3DWDEBT.js');
+    const { run } = await import('./doctor-R4QDCAN5.js');
     await run({ cwd: resolveCwd(cmd), json: opts.json });
   })
 );
@@ -76,7 +76,7 @@ program.command("context").description("Measure the always-loaded context footpr
 );
 program.command("brief").description("Emit a grounded briefing for the in-repo agent to complete the semantic layer").option("--human", "write a human onboarding brief instead of the agent briefing").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./brief-DPZYSAMC.js');
+    const { run } = await import('./brief-7MWP35UI.js');
     await run({ cwd: resolveCwd(cmd), human: opts.human });
   })
 );
@@ -90,7 +90,7 @@ program.command("premise").argument("[task]", "the task you are about to hand an
   "exit non-zero when findings at/above this tier exist (risk|gap|polish)"
 ).action(
   (task, opts, cmd) => action(async () => {
-    const { run } = await import('./premise-VMC3UUIB.js');
+    const { run } = await import('./premise-GFWHSR3K.js');
     await run({
       cwd: resolveCwd(cmd),
       task,
@@ -124,15 +124,15 @@ var fleet = program.command("fleet").description(
 ).option(
   "--manifest <file>",
   "the fleet manifest (registry.json / legacy sources.json) \u2014 required unless the cwd holds registry.json"
-).option("--only <names...>", "sweep only these registered names").option("--profile <profile>", "sweep only entries with this profile (personal|corp)").option("--truth", "truth lenses only per repo (the doctor subset)").option(
+).option("--only <names...>", "sweep only these registered names").option("--profile <profile>", "sweep only entries with this profile (personal|guarded)").option("--truth", "truth lenses only per repo (the doctor subset)").option(
   "--persist-ledgers",
-  "persist per-repo ledgers \u2014 personal-profile entries that already carry .etymd only; corp worktrees are never written"
+  "persist per-repo ledgers \u2014 personal-profile entries that already carry .etymd only; guarded worktrees are never written"
 ).option("--json", "print the machine schema (EXPERIMENTAL through 0.2.x, local-only)").option(
   "--fail-on <tier>",
   "exit non-zero when findings at/above this tier exist (risk|gap|polish)"
 ).action(
   (opts, cmd) => action(async () => {
-    const { sweep } = await import('./fleet-4FYZ3GBK.js');
+    const { sweep } = await import('./fleet-WPYEVHVL.js');
     await sweep({
       cwd: resolveCwd(cmd),
       manifest: opts.manifest,
@@ -147,17 +147,32 @@ var fleet = program.command("fleet").description(
 );
 fleet.command("check").description("Validate the manifest pair only \u2014 no lenses: dangling mappings, duplicates, leaks").option("--manifest <file>", "the fleet manifest \u2014 required unless the cwd holds registry.json").option("--json", "print the findings as JSON (EXPERIMENTAL through 0.2.x)").action(
   (_opts, cmd) => action(async () => {
-    const { check } = await import('./fleet-4FYZ3GBK.js');
+    const { check } = await import('./fleet-WPYEVHVL.js');
     const opts = cmd.optsWithGlobals();
     await check({ cwd: resolveCwd(cmd), manifest: opts.manifest, json: opts.json });
   })
 );
-fleet.command("add").argument("<dir>", "directory of the project to register").description("Register a project \u2014 refuses to write an entry missing a mandatory field").option("--name <name>", "registered name (defaults to the directory's basename)").option("--kind <kind>", "entry kind (defaults to a value derived from the scan)").option("--profile <profile>", "personal | corp (default: personal)").option(
+fleet.command("board").description(
+  "Render the fleet board: every project's milestones (contract key `milestones`) plus a ranked initiatives table"
+).option("--manifest <file>", "the fleet manifest \u2014 required unless the cwd holds registry.json").option("--initiatives <file>", "the hand-edited initiatives table (rank | id | initiative | \u2026)").option("--out <file>", "write the Markdown board here instead of printing it").option("--json", "print the board as JSON (EXPERIMENTAL)").action(
+  (opts, cmd) => action(async () => {
+    const { board } = await import('./fleet-WPYEVHVL.js');
+    const shared = cmd.optsWithGlobals();
+    await board({
+      cwd: resolveCwd(cmd),
+      manifest: shared.manifest,
+      initiatives: opts.initiatives,
+      out: opts.out,
+      json: opts.json ?? shared.json
+    });
+  })
+);
+fleet.command("add").argument("<dir>", "directory of the project to register").description("Register a project \u2014 refuses to write an entry missing a mandatory field").option("--name <name>", "registered name (defaults to the directory's basename)").option("--kind <kind>", "entry kind (defaults to a value derived from the scan)").option("--profile <profile>", "personal | guarded (default: personal)").option(
   "--trust <level>",
   "public-repo | public-bound | private \u2014 mandatory for personal entries"
 ).option("-y, --yes", "skip prompts; every mandatory value must be passed as a flag").option("--manifest <file>", "the fleet manifest \u2014 required unless the cwd holds registry.json").action(
   (dir, opts, cmd) => action(async () => {
-    const { add } = await import('./fleet-4FYZ3GBK.js');
+    const { add } = await import('./fleet-WPYEVHVL.js');
     const shared = cmd.optsWithGlobals();
     await add({
       cwd: resolveCwd(cmd),
@@ -167,9 +182,9 @@ fleet.command("add").argument("<dir>", "directory of the project to register").d
       kind: opts.kind,
       // `fleet` declares its own --profile (the sweep filter), and commander hands a
       // parent-declared option the value even when it is typed AFTER the subcommand — so
-      // `fleet add <dir> --profile corp` left opts.profile undefined and the flag silently
-      // did nothing, registering employer repos as personal. Reading the merged view is what
-      // makes the flag work; the corp-remote guard in add() is what makes forgetting it safe.
+      // `fleet add <dir> --profile guarded` left opts.profile undefined and the flag silently
+      // did nothing, registering guarded repos as personal. Reading the merged view is what
+      // makes the flag work; the guarded-remote guard in add() is what makes forgetting it safe.
       profile: opts.profile ?? shared.profile,
       trust: opts.trust,
       yes: opts.yes
@@ -177,10 +192,10 @@ fleet.command("add").argument("<dir>", "directory of the project to register").d
   })
 );
 fleet.command("dismiss").argument("<name>", "the registered project name").argument("<finding-id>", "the finding id (from `etymd fleet`) to dismiss").description(
-  "Dismiss a project's finding from any cwd \u2014 corp ledgers persist beside the manifest"
+  "Dismiss a project's finding from any cwd \u2014 guarded ledgers persist beside the manifest"
 ).requiredOption("--reason <text>", "why it is dismissed \u2014 recorded so the decision survives").option("--manifest <file>", "the fleet manifest \u2014 required unless the cwd holds registry.json").action(
   (name, id, _opts, cmd) => action(async () => {
-    const { dismiss } = await import('./fleet-4FYZ3GBK.js');
+    const { dismiss } = await import('./fleet-WPYEVHVL.js');
     const opts = cmd.optsWithGlobals();
     await dismiss({
       cwd: resolveCwd(cmd),
@@ -192,14 +207,34 @@ fleet.command("dismiss").argument("<name>", "the registered project name").argum
   })
 );
 fleet.command("accept").argument("<name>", "the registered project name").argument("<finding-id>", "the finding id (from `etymd fleet`) to accept").description(
-  "Accept a project's finding as a known trade-off \u2014 corp ledgers persist beside the manifest"
+  "Accept a project's finding as a known trade-off \u2014 guarded ledgers persist beside the manifest"
 ).option("--reason <text>", "optional note on why the trade-off is accepted").option("--manifest <file>", "the fleet manifest \u2014 required unless the cwd holds registry.json").action(
   (name, id, _opts, cmd) => action(async () => {
-    const { accept } = await import('./fleet-4FYZ3GBK.js');
+    const { accept } = await import('./fleet-WPYEVHVL.js');
     const opts = cmd.optsWithGlobals();
     await accept({ cwd: resolveCwd(cmd), manifest: opts.manifest, name, id, reason: opts.reason });
   })
 );
+program.command("propose").description(
+  "Score improvement findings + recurring classes against a fleet rubric \u2014 proposal records, read-only (schema proposal/1, EXPERIMENTAL)"
+).requiredOption(
+  "--rubric <file>",
+  "the rubric file \u2014 one `criterion: <weight>` line per criterion; etymd ships none"
+).option(
+  "--manifest <file>",
+  "the fleet manifest \u2014 runs a read-only sweep now (no delta baseline move)"
+).option("--from <file>", "read a stored `etymd fleet --json` output instead of sweeping").option("--json", "print the proposal/1 records as JSON (EXPERIMENTAL)").action(
+  (opts, cmd) => action(async () => {
+    const { run } = await import('./propose-IYNOIWAO.js');
+    await run({
+      cwd: resolveCwd(cmd),
+      manifest: opts.manifest,
+      from: opts.from,
+      rubric: opts.rubric,
+      json: opts.json
+    });
+  })
+);
 program.command("screen").description(
   "Content screen: check for text that must never be published. Bring your own patterns \u2014 etymd ships none."
 ).option("--staged", "screen what a commit is about to add (default)").option("--tree", "screen every tracked file \u2014 what is about to leave the machine").option("--message <file>", "screen a commit message (the commit-msg hook's $1)").option("--dir <dir>", "screen an unpacked build artifact \u2014 what actually ships").option("--patterns <file>", "pattern file (default: ~/.config/etymd/screen-patterns)").option("--advisory", "report without failing").option(
@@ -207,7 +242,7 @@ program.command("screen").description(
   "fork's upstream remote: files byte-identical to its refs skip vocabulary-class patterns (secret patterns stay absolute)"
 ).action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./screen-E4FC7W5N.js');
+    const { run } = await import('./screen-S736DXQ5.js');
     const scope = opts.message ? "message" : opts.dir ? "dir" : opts.tree ? "tree" : "staged";
     await run({
       cwd: resolveCwd(cmd),
@@ -221,7 +256,7 @@ program.command("screen").description(
 );
 program.command("gates").description("Install the local git-hook gates (process \u2192 pre-commit, correctness \u2192 pre-push)").option("--ci", "note about the CI review gate (ships later; local gates install now)").option("-y, --yes", "skip prompts; never overwrites a hand-edited hook").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./gates-IBQ7HCAN.js');
+    const { run } = await import('./gates-3HRGYCYY.js');
     await run({ cwd: resolveCwd(cmd), ci: opts.ci, yes: opts.yes });
   })
 );

package/dist/{doctor-Y3DWDEBT.js → doctor-R4QDCAN5.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
-import { run } from './chunk-CEO3BXQB.js';
-import './chunk-2RNQ6OLV.js';
-import './chunk-IWG77WV3.js';
+import { run } from './chunk-ANFNXFRI.js';
+import './chunk-WKP7M2B3.js';
+import './chunk-FNA4R5KT.js';
 import './chunk-3E2IPCRY.js';
 import './chunk-HI7NWPRA.js';
-import './chunk-Y6RZRED3.js';
-import './chunk-DBWDMIYO.js';
+import './chunk-446EZNAQ.js';
+import './chunk-BUMOGHQA.js';
 import './chunk-P6ATKV2R.js';
 import './chunk-YQZDYDAK.js';
 import './chunk-4VPBP6K6.js';