etymd 0.16.0 → 0.19.0

package/dist/{gates-NVWWKMT2.js → gates-UJ23THID.js}

@@ -1,11 +1,12 @@
 #!/usr/bin/env node
 import { applyFiles } from './chunk-GWGKEPRX.js';
-import { deriveFailOn, derivedCommands, planWorkflow, runPrefix, isSafeGateCommand } from './chunk-OKJ3RGJB.js';
+import { deriveFailOn, derivedCommands, planWorkflow } from './chunk-EZRK4MV3.js';
+import { runPrefix, isSafeGateCommand } from './chunk-HSRHOVII.js';
 import { section, print, glyph, theme, renderPlan } from './chunk-HI7NWPRA.js';
-import { scanProject } from './chunk-EJM47PIF.js';
-import './chunk-UYCGP5BS.js';
+import { scanProject } from './chunk-DLHC7QON.js';
+import './chunk-L4KIIKXI.js';
 import { readConfig, CONFIG_FILE, configPath } from './chunk-P6ATKV2R.js';
-import './chunk-YQZDYDAK.js';
+import './chunk-U7BCBJIH.js';
 import { readText, git } from './chunk-4VPBP6K6.js';
 import { promises } from 'fs';
 import path from 'path';
@@ -202,7 +203,10 @@ async function run(opts) {
     const files = await planWorkflow(opts.cwd, facts, {
       agents: false,
       gates: true,
-      gateConfig
+      gateConfig,
+      // A pinned tier is a decision planWorkflow must not lower; an unpinned one it derives —
+      // the same flag the fleet's drift comparison passes, so both generate identical bytes.
+      gateFailOnPinned: explicit.gatesFailOn
     });
     return files.filter((f) => f.executable);
   };

package/dist/{generate-YEARCSHW.js → generate-6IPTCLYG.js}

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
-export { deriveFailOn, derivedCommands, planWorkflow, riskReachability } from './chunk-OKJ3RGJB.js';
+export { deriveFailOn, derivedCommands, planWorkflow, riskReachability } from './chunk-EZRK4MV3.js';
+import './chunk-HSRHOVII.js';
 import './chunk-P6ATKV2R.js';
-import './chunk-YQZDYDAK.js';
+import './chunk-U7BCBJIH.js';
 import './chunk-4VPBP6K6.js';

package/dist/index.d.ts

@@ -66,6 +66,11 @@ interface GitFacts {
     isRepo: boolean;
     branch?: string;
     head?: string;
+    /**
+     * `core.hooksPath`, stated repo-relative whenever the directory sits inside the worktree — git
+     * accepts an absolute spelling of the same directory, and the spelling is neither a fact nor
+     * something a committed baseline should carry. Absolute only when it points outside the repo.
+     */
     hooksPath?: string;
     husky: boolean;
     /** Distinct commit authors in recent history — the solo-vs-team profile signal. */
@@ -303,6 +308,14 @@ interface PlanOptions {
     publishGate?: boolean;
     /** Recorded gate choices; absent means derive everything from the scan. */
     gateConfig?: GateConfig;
+    /**
+     * Whether `gateConfig.failOn` was PINNED by the repo's committed config, versus a default the
+     * config loader filled in. The tier derivation may only choose between defaults — a recorded
+     * tier is a decision and is never lowered (see `deriveFailOn`). Callers that read the config
+     * pass `explicit.gatesFailOn` from `readConfig`; callers planning from a bare scan leave it
+     * unset, which is the same as unpinned.
+     */
+    gateFailOnPinned?: boolean;
 }
 /** Build the file set an onboarding would write, flagging which exist and which differ. */
 declare function planWorkflow(root: string, facts: ProjectFacts, opts: PlanOptions): Promise<GeneratedFile[]>;
@@ -785,8 +798,12 @@ interface TruthEnv {
     manifestExists: boolean;
     /** The root plus every workspace package dir — where claims are resolved. */
     bases: string[];
-    /** A repo-relative claim resolves in the root, any workspace package, or their src/ scripts/. */
-    pathResolves(claim: string): Promise<boolean>;
+    /**
+     * A repo-relative claim resolves in the root, any workspace package, their src/ scripts/, or
+     * the directory of the file making the claim (`fromDir`) — a nested instruction file writes
+     * references the way an agent reading it resolves them: against its siblings.
+     */
+    pathResolves(claim: string, fromDir?: string): Promise<boolean>;
     /** `yarn X` / `pnpm X` may legitimately run an installed node_modules/.bin binary. */
     binResolves(name: string): Promise<boolean>;
 }
@@ -799,6 +816,8 @@ interface ClaimCounters {
     unverifiableCommands: number;
     gitignoredSkipped: number;
     prospectiveSkipped: number;
+    /** Path claims whose every mention sits beside the URL it is fetched from — another tree. */
+    fetchedSkipped: number;
     placeholderSkipped: number;
     /** Decision references naming another record (a fleet-level ledger) — not this repo's. */
     qualifiedRefsSkipped: number;
@@ -987,8 +1006,15 @@ declare function extractCommandClaims(text: string): CommandClaims;
 interface PathClaims {
     /** Claims to verify against the repo. */
     paths: string[];
+    /** Slash-terminated directory claims — candidate bases for resolving sibling references. */
+    dirs: string[];
     /** Claims whose every mention sits in create-this prose — skipped, counted, disclosed. */
     prospective: string[];
+    /**
+     * Claims whose every mention sits beside the URL they are fetched from — another tree's
+     * files, unverifiable here. Skipped, counted, disclosed.
+     */
+    fetched: string[];
     /** Claims whose every mention sits behind a namespace prefix (`pc:`) — another repo's tree. */
     namespaced: string[];
     /** Naming stand-ins (`my-custom-skill`) — never real claims. */
@@ -1101,7 +1127,7 @@ declare const gateIntegrityLens: Lens;
  * Gaps in the sequence are deliberate: a number stays retired even when the change that took it
  * never shipped, so a version cited in a baseline or a record means exactly one pack, ever.
  */
-declare const PACK_VERSION = "12";
+declare const PACK_VERSION = "14";
 
 declare const VERSION: string;
 declare const NAME: string;