etymd 0.2.2 → 0.3.0

package/dist/doctor-C2RTL2QV.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import { run } from './chunk-XTAX4YNT.js';
+import './chunk-V3DPLOOM.js';
+import './chunk-LT67FU2Y.js';
+import './chunk-WWBF4Y7K.js';
+import './chunk-NMZ3RHWW.js';
+import './chunk-TADKOW6P.js';
+import './chunk-R74SJ7HS.js';
+import './chunk-MKYPLNLH.js';
+import './chunk-NFENQ3IK.js';
+import './chunk-CRJHIXJH.js';
+import './chunk-YLNQQZ5F.js';
+
+// src/commands/doctor.ts
+async function run2(opts) {
+  await run({ cwd: opts.cwd, json: opts.json, truth: true });
+}
+
+export { run2 as run };

package/dist/{fleet-N3G5ZIGR.js → fleet-YZGR4UC2.js}

@@ -1,18 +1,26 @@
 #!/usr/bin/env node
-import { dismiss, accept } from './chunk-EUIHYD6F.js';
-import { parseFailOnTier, meetsFailOn, runAudit } from './chunk-KMAJIQHC.js';
-import { readLedger } from './chunk-KBF3SW3N.js';
-import { DEFAULT_CONFIG } from './chunk-ANCCGYSH.js';
-import './chunk-BH37LELV.js';
-import './chunk-LVLZLCND.js';
-import { ETYMD_DIR } from './chunk-FZSIOCOZ.js';
-import { print, theme, section, renderFleetRows, renderFleetNotes, renderFindings, TIER_BADGE, glyph, pathExists, readText, isDirectory, git } from './chunk-LBRNZZZF.js';
+import { dismiss, accept } from './chunk-MMPV67FW.js';
+import { parseFailOnTier, meetsFailOn, runAudit } from './chunk-V3DPLOOM.js';
+import './chunk-LT67FU2Y.js';
+import { readLedger } from './chunk-WWBF4Y7K.js';
+import { DEFAULT_CONFIG } from './chunk-NMZ3RHWW.js';
+import { print, theme, section, renderFleetRows, renderFleetNotes, renderFindings, TIER_BADGE, glyph } from './chunk-TADKOW6P.js';
+import { ETYMD_DIR } from './chunk-R74SJ7HS.js';
+import { scanProject } from './chunk-MKYPLNLH.js';
+import './chunk-NFENQ3IK.js';
+import './chunk-CRJHIXJH.js';
+import { readText, pathExists, git, isDirectory } from './chunk-YLNQQZ5F.js';
 import { promises } from 'node:fs';
 import path from 'node:path';
+import { select, isCancel, cancel, text, confirm } from '@clack/prompts';
 import os from 'node:os';
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
 
+var FLEET_TRUST_VALUES = ["public-repo", "public-bound", "private"];
+function isFleetTrust(value) {
+  return typeof value === "string" && FLEET_TRUST_VALUES.includes(value);
+}
 function expandTilde(p) {
   if (p === "~") return os.homedir();
   if (p.startsWith("~/")) return path.join(os.homedir(), p.slice(2));
@@ -108,7 +116,10 @@ function loadRegistryEntries(projects, manifest, manifestFile) {
       private: rec.private === true,
       path: asString(rec.path),
       upstream: asString(rec.upstream),
-      trust: asString(rec.trust),
+      // An unknown value is NOT coerced to a default: trust gates content screening, so a typo
+      // must surface as "undeclared" (a finding) rather than quietly picking an answer.
+      trust: isFleetTrust(rec.trust) ? rec.trust : void 0,
+      trustRaw: asString(rec.trust),
       staleAfterDays: typeof rec.staleAfterDays === "number" ? rec.staleAfterDays : void 0,
       stateBudget: typeof rec.stateBudget === "number" ? rec.stateBudget : void 0,
       contract,
@@ -225,6 +236,24 @@ async function loadFleetManifest(manifestPath) {
     manifest.machineProfile = local.data.machineProfile === "corp" || local.data.machineProfile === "personal" ? local.data.machineProfile : void 0;
     const rootRaw = asString(local.data.root) ?? asString(parsed.root);
     if (rootRaw) manifest.root = path.resolve(dir, expandTilde(rootRaw));
+    const orientationRec = asRecord(parsed.orientation);
+    if (orientationRec) {
+      const orientationRoot = asString(orientationRec.root);
+      if (orientationRoot) manifest.orientation = { root: orientationRoot };
+      else {
+        manifest.problems.push({
+          kind: "bad-shape",
+          file: manifestFile,
+          detail: "`orientation` declares no `root` name \u2014 the fleet's orientation cannot be resolved"
+        });
+      }
+    } else if (parsed.orientation !== void 0) {
+      manifest.problems.push({
+        kind: "bad-shape",
+        file: manifestFile,
+        detail: '`orientation` must be an object (`{ "root": "<name>" }`) \u2014 ignored'
+      });
+    }
     loadRegistryEntries(parsed.projects, manifest, manifestFile);
   } else if (Array.isArray(parsed.sources)) {
     manifest.shape = "corpus";
@@ -367,6 +396,19 @@ async function checkManifest(manifest) {
       );
     }
     seen.add(entry.name);
+    if (entry.profile !== "corp" && !entry.private && !entry.trust) {
+      const bad = entry.trustRaw;
+      findings.push(
+        finding(
+          `${FLEET_LENS}/${bad ? "unknown-trust" : "undeclared-trust"}:${entry.name}`,
+          "risk",
+          bad ? `\`${entry.name}\` declares unknown trust \`${bad}\`` : `\`${entry.name}\` declares no \`trust\``,
+          [`${manifestFile}: ${entry.name}${bad ? `.trust = ${bad}` : " has no trust field"}`],
+          "Trust decides whether content screening applies. An unanswered entry is not a private one \u2014 publishing exposes ALL history, so a repo that went public without ever answering is exactly what a default would hide.",
+          `Declare one of ${FLEET_TRUST_VALUES.map((t) => `\`${t}\``).join(", ")}.`
+        )
+      );
+    }
     if (entry.private && entry.path) {
       findings.push(
         finding(
@@ -421,6 +463,18 @@ async function checkManifest(manifest) {
       }
     }
   }
+  if (manifest.orientation && !seen.has(manifest.orientation.root)) {
+    findings.push(
+      finding(
+        `${FLEET_LENS}/dangling-orientation:${manifest.orientation.root}`,
+        "gap",
+        `\`orientation.root\` names \`${manifest.orientation.root}\`, which is not a registered name`,
+        [`${manifestFile}: orientation.root = ${manifest.orientation.root}`],
+        "Every entry is guided by the orientation root implicitly \u2014 if it resolves to nothing, the whole fleet's orientation is a claim nothing can follow.",
+        "Point it at a registered name, or drop the block if this fleet has no orientation root."
+      )
+    );
+  }
   for (const name of Object.keys(manifest.localDirs)) {
     if (manifest.shape === "registry" && !seen.has(name)) {
       findings.push(
@@ -631,6 +685,52 @@ async function checkCorpEmails(manifest, findings, disclosures) {
     }
   }
 }
+async function checkGateDrift(manifest, findings, disclosures) {
+  const { planWorkflow } = await import('./generate-IYCQETQB.js');
+  const { scanProject: scanProject2 } = await import('./scan-ZYZ7XDSJ.js');
+  const { readConfig } = await import('./config-MX7OYI7F.js');
+  for (const entry of manifest.entries) {
+    const root = entry.resolvedRoot;
+    if (!root || !await isDirectory(root)) continue;
+    if (entry.profile === "corp" || entry.private) continue;
+    const facts = await scanProject2(root);
+    if (!facts.git.isRepo) continue;
+    if (facts.hooks.source === "husky" || facts.hooks.source === "husky-legacy") {
+      disclosures.push(
+        `${entry.name}: hooks managed by ${facts.hooks.source} \u2014 gate drift not comparable against the .githooks pack`
+      );
+      continue;
+    }
+    const { config } = await readConfig(root);
+    const planned = (await planWorkflow(root, facts, { agents: false, gates: true, gateConfig: config.gates })).filter((f) => f.executable);
+    const missing = planned.filter((f) => !f.exists).map((f) => f.path);
+    const stale = planned.filter((f) => f.exists && f.differs).map((f) => f.path);
+    if (missing.length) {
+      findings.push(
+        finding(
+          `${FLEET_LENS}/gate-missing:${entry.name}`,
+          "gap",
+          `\`${entry.name}\` is missing ${missing.length} gate${missing.length === 1 ? "" : "s"} the pack would install`,
+          missing.map((m) => `${entry.name}: no ${m}`),
+          "A gate absent in one repo is invisible from inside it \u2014 every commit there skips a check its siblings run.",
+          "Run `etymd gates` in that repo."
+        )
+      );
+    }
+    if (stale.length) {
+      findings.push(
+        finding(
+          `${FLEET_LENS}/gate-stale:${entry.name}`,
+          "polish",
+          `\`${entry.name}\` has ${stale.length} gate${stale.length === 1 ? "" : "s"} that differ from what its own inputs generate`,
+          stale.map((s) => `${entry.name}: ${s}`),
+          "A hand-edited or outdated hook drifts from the pack silently \u2014 the repo believes it runs checks the file no longer contains.",
+          "Re-run `etymd gates` (it asks before overwriting), or record the intent in .etymd/config.json."
+        )
+      );
+    }
+  }
+}
 async function collectWallFindings(manifest) {
   const findings = [];
   const disclosures = [];
@@ -639,6 +739,7 @@ async function collectWallFindings(manifest) {
   await checkManifestRepoMachinePaths(manifest, findings, disclosures);
   await checkHygieneNeedles(manifest, findings, disclosures);
   await checkCorpEmails(manifest, findings, disclosures);
+  await checkGateDrift(manifest, findings, disclosures);
   return { findings, disclosures };
 }
 function stateAgeDays(facts) {
@@ -971,6 +1072,138 @@ async function check(opts) {
   renderFindings(findings);
   renderFleetNotes([], disclosures);
 }
+async function add(opts) {
+  const { manifest, autoNote } = await loadManifest(opts.cwd, opts.manifest);
+  if (autoNote) print(`  ${theme.dim(`\u25E6 ${autoNote}`)}`);
+  if (manifest.shape !== "registry") {
+    throw new Error("`fleet add` targets the registry shape \u2014 this manifest is a legacy corpus");
+  }
+  const raw = await readText(manifest.manifestPath);
+  if (raw === null) throw new Error(`cannot read ${manifest.manifestPath}`);
+  const absTarget = path.resolve(opts.cwd, opts.target);
+  if (!await pathExists(absTarget)) throw new Error(`no such directory: ${absTarget}`);
+  const name = opts.name ?? path.basename(absTarget);
+  if (manifest.entries.some((e) => e.name === name)) {
+    throw new Error(`\`${name}\` is already registered \u2014 resolution is keyed by name`);
+  }
+  const facts = await scanProject(absTarget);
+  const remote = facts.git.isRepo ? await git(absTarget, ["remote", "get-url", "origin"]) : null;
+  section(`Fleet add ${theme.dim(`\xB7 ${name} \xB7 ${absTarget}`)}`);
+  let profile = opts.profile;
+  if (!profile && !opts.yes) {
+    const picked = await select({
+      message: "Which side of the wall does this belong to?",
+      initialValue: "personal",
+      options: [
+        { value: "personal", label: "personal \u2014 your own work" },
+        { value: "corp", label: "corp \u2014 employer work (alias-only, machine-pinned)" }
+      ]
+    });
+    if (isCancel(picked)) {
+      cancel("No entry written.");
+      return;
+    }
+    profile = picked;
+  }
+  profile = profile ?? "personal";
+  if (profile !== "personal" && profile !== "corp") {
+    throw new Error(`--profile must be personal or corp, got \`${profile}\``);
+  }
+  const derivedKind = facts.commands.build || facts.commands.test ? "tool" : "repo";
+  let kind = opts.kind;
+  if (!kind && !opts.yes) {
+    const known = [...new Set(manifest.entries.map((e) => e.kind).filter(Boolean))];
+    const choices = [.../* @__PURE__ */ new Set([derivedKind, ...known])];
+    const picked = await select({
+      message: "Kind?",
+      initialValue: derivedKind,
+      options: [
+        ...choices.map((k) => ({
+          value: k,
+          label: k === derivedKind ? `${k} \u2014 matches this repo's shape` : k
+        })),
+        { value: "", label: "something else\u2026" }
+      ]
+    });
+    if (isCancel(picked)) {
+      cancel("No entry written.");
+      return;
+    }
+    kind = picked;
+    if (!kind) {
+      const typed = await text({
+        message: "Kind (free text):",
+        validate: (v) => v.trim() ? void 0 : "a kind is required"
+      });
+      if (isCancel(typed)) {
+        cancel("No entry written.");
+        return;
+      }
+      kind = typed.trim();
+    }
+  }
+  kind = kind ?? derivedKind;
+  let trust;
+  if (profile === "personal") {
+    trust = opts.trust;
+    if (!trust && !opts.yes) {
+      const picked = await select({
+        message: "How exposed is this repo's history? (gates content screening)",
+        options: [
+          { value: "private", label: "private \u2014 not destined to be published" },
+          { value: "public-bound", label: "public-bound \u2014 private now, plausibly public later" },
+          { value: "public-repo", label: "public-repo \u2014 already public" }
+        ]
+      });
+      if (isCancel(picked)) {
+        cancel("No entry written.");
+        return;
+      }
+      trust = picked;
+    }
+    if (!trust) {
+      throw new Error(
+        `\`${name}\` needs a trust level: pass --trust <${FLEET_TRUST_VALUES.join("|")}> (non-interactive runs cannot be prompted, and there is deliberately no default \u2014 trust gates content screening)`
+      );
+    }
+    if (!isFleetTrust(trust)) {
+      throw new Error(`--trust must be one of ${FLEET_TRUST_VALUES.join(", ")}, got \`${trust}\``);
+    }
+  } else if (opts.trust) {
+    throw new Error("corp entries take no `trust` \u2014 `profile: corp` already implies it");
+  }
+  const entry = profile === "corp" ? { name, kind, profile, private: true } : {
+    name,
+    kind,
+    profile,
+    path: path.relative(manifest.root ?? manifest.dir, absTarget),
+    trust,
+    contract: {},
+    links: {},
+    // The scan does not collect remotes (they are not a workflow fact), so read it here —
+    // recorded when present, simply absent when the repo has no origin yet.
+    ...remote ? { remote } : {}
+  };
+  print(`  ${glyph.bullet} ${theme.dim("entry")}`);
+  print(
+    JSON.stringify(entry, null, 2).split("\n").map((l) => `    ${theme.dim(l)}`).join("\n")
+  );
+  if (!opts.yes) {
+    const ok = await confirm({
+      message: `Write this entry to ${path.basename(manifest.manifestPath)}?`
+    });
+    if (isCancel(ok) || !ok) {
+      cancel("No entry written.");
+      return;
+    }
+  }
+  const doc = JSON.parse(raw);
+  if (!Array.isArray(doc.projects)) throw new Error("manifest has no `projects` array to append to");
+  doc.projects.push(entry);
+  await promises.writeFile(manifest.manifestPath, JSON.stringify(doc, null, 2) + "\n", "utf8");
+  print(`  ${glyph.ok} ${theme.dim("registered")} ${theme.info(name)}`);
+  print(`  ${theme.dim(`verify with \`etymd fleet check --manifest ${manifest.manifestPath}\``)}`);
+}
 async function resolveFleetFinding(opts, status) {
   if (status === "dismissed" && !opts.reason?.trim()) {
     throw new Error('dismiss needs a reason: etymd fleet dismiss <name> <id> --reason "\u2026"');
@@ -1001,4 +1234,4 @@ async function accept2(opts) {
   await resolveFleetFinding(opts, "accepted");
 }
 
-export { accept2 as accept, check, dismiss2 as dismiss, sweep };
+export { accept2 as accept, add, check, dismiss2 as dismiss, sweep };

package/dist/gates-ILE4PXDA.js

@@ -0,0 +1,272 @@
+#!/usr/bin/env node
+import { readConfig, CONFIG_FILE, configPath } from './chunk-NMZ3RHWW.js';
+import { applyFiles } from './chunk-EF6BPBG6.js';
+import { isSafeGateCommand, planWorkflow, runPrefix } from './chunk-3NYDVB4Z.js';
+import { section, print, glyph, theme, renderPlan } from './chunk-TADKOW6P.js';
+import './chunk-R74SJ7HS.js';
+import { scanProject } from './chunk-MKYPLNLH.js';
+import './chunk-NFENQ3IK.js';
+import './chunk-CRJHIXJH.js';
+import { readText, git } from './chunk-YLNQQZ5F.js';
+import { promises } from 'node:fs';
+import path from 'node:path';
+import { confirm, isCancel, cancel, select, multiselect } from '@clack/prompts';
+
+function detectIndent(raw) {
+  const m = raw.match(/\n(\s+)"/);
+  if (!m) return 2;
+  const ws = m[1];
+  return ws.includes("	") ? "	" : ws.length;
+}
+function mergeScriptInto(raw, key, value) {
+  let doc;
+  try {
+    doc = JSON.parse(raw);
+  } catch (err) {
+    return {
+      result: {
+        outcome: "unparsable",
+        detail: err instanceof Error ? err.message : String(err)
+      }
+    };
+  }
+  const scripts = doc.scripts ?? {};
+  const current = scripts[key];
+  if (typeof current === "string") {
+    if (current === value) return { result: { outcome: "unchanged" } };
+    return { result: { outcome: "conflict", existing: current } };
+  }
+  const indent = detectIndent(raw);
+  const next = { ...doc, scripts: { ...scripts, [key]: value } };
+  const trailing = raw.endsWith("\n") ? "\n" : "";
+  return { text: JSON.stringify(next, null, indent) + trailing, result: { outcome: "added" } };
+}
+async function ensurePackageScript(pkgPath, key, value) {
+  const raw = await readText(pkgPath);
+  if (raw === null) return { outcome: "absent" };
+  const { text, result } = mergeScriptInto(raw, key, value);
+  if (text) await promises.writeFile(pkgPath, text, "utf8");
+  return result;
+}
+
+// src/commands/gates.ts
+var PUBLISH_GATE_SCRIPT = "scripts/artifact-check.sh";
+var PUBLISH_GATE_VALUE = `./${PUBLISH_GATE_SCRIPT}`;
+function publishGateKey(route) {
+  return route === "vscode" ? "vscode:prepublish" : "prepublishOnly";
+}
+function derivedCommands(facts, existingHook) {
+  const c = facts.commands;
+  const base = [c.formatCheck, c.typecheck, c.lint].filter(
+    (k) => Boolean(k) && isSafeGateCommand(c.raw[k])
+  );
+  if (c.test && existingHook && new RegExp(`\\b${c.test}\\b`).test(existingHook)) {
+    base.push(c.test);
+  }
+  return base;
+}
+function printGateSummary(gates, facts, source) {
+  const run2 = runPrefix(facts.packageManager);
+  const cmds = gates.commands.length ? gates.commands.map((c) => `${run2} ${c}`).join(", ") : "none detected";
+  print(`  ${glyph.bullet} ${theme.dim("pre-push runs")} ${theme.info(cmds)}`);
+  print(`  ${glyph.bullet} ${theme.dim("audit fails on")} ${theme.info(gates.failOn)}`);
+  print(
+    `  ${glyph.bullet} ${theme.dim("publish screen")} ${theme.info(gates.publishGate ? "yes" : "no")}${gates.publishGate && !facts.publishable ? theme.dim(" (overridden)") : ""}`
+  );
+  if (source.recorded || source.willRecord) {
+    print(`  ${theme.dim(`change any of these later in ${CONFIG_FILE}`)}`);
+  } else {
+    print(
+      `  ${theme.dim(`derived from this repo \u2014 write ${CONFIG_FILE} (or run without --yes) to pin them`)}`
+    );
+  }
+}
+async function customize(current, facts) {
+  const c = facts.commands;
+  const available = [c.formatCheck, c.typecheck, c.lint, c.test].filter(
+    (k) => Boolean(k)
+  );
+  const picked = available.length ? await multiselect({
+    message: "Which commands should the pre-push gate run?",
+    required: false,
+    initialValues: current.commands,
+    options: available.map((k) => ({
+      value: k,
+      label: `${runPrefix(facts.packageManager)} ${k}`,
+      hint: isSafeGateCommand(c.raw[k]) ? void 0 : "writes \u2014 allowed only if you pick it"
+    }))
+  }) : [];
+  if (isCancel(picked)) return void 0;
+  const tier = await select({
+    message: "Fail the push on which finding tier?",
+    initialValue: current.failOn,
+    options: [
+      { value: "risk", label: "risk \u2014 only what makes an agent do the wrong thing" },
+      { value: "gap", label: "gap \u2014 also dead references and missing safeguards" },
+      { value: "polish", label: "polish \u2014 everything" }
+    ]
+  });
+  if (isCancel(tier)) return void 0;
+  const publish = await confirm({
+    message: "Screen the published artifact? (the only check that sees what actually ships)",
+    initialValue: current.publishGate ?? facts.publishable
+  });
+  if (isCancel(publish)) return void 0;
+  const commands = picked;
+  return {
+    commands,
+    failOn: tier,
+    publishGate: publish,
+    // Picking a writing command IS the override — recorded so the generator honors it.
+    allowWriting: commands.filter((k) => !isSafeGateCommand(c.raw[k]))
+  };
+}
+function mergeGateSection(previous, gates) {
+  const merged = { ...previous, ...gates };
+  const why = previous._why;
+  if (!why) return merged;
+  const next = gates;
+  const kept = Object.fromEntries(
+    Object.entries(why).filter(
+      ([field]) => JSON.stringify(previous[field]) === JSON.stringify(next[field])
+    )
+  );
+  if (Object.keys(kept).length) merged._why = kept;
+  else delete merged._why;
+  return merged;
+}
+async function writeGateConfig(root, gates) {
+  const target = configPath(root);
+  const existing = await readText(target);
+  let doc = {};
+  if (existing) {
+    try {
+      doc = JSON.parse(existing);
+    } catch {
+      return;
+    }
+  }
+  doc.gates = mergeGateSection(doc.gates ?? {}, gates);
+  await promises.mkdir(path.dirname(target), { recursive: true });
+  await promises.writeFile(target, JSON.stringify(doc, null, 2) + "\n", "utf8");
+}
+async function run(opts) {
+  const facts = await scanProject(opts.cwd);
+  if (opts.ci) {
+    section("CI review gate");
+    print(
+      `  ${glyph.partial} ${theme.dim("The advisory AI-review CI job (bring-your-own-key) ships in a later release \u2014 installing the free local gates below.")}`
+    );
+  }
+  if (!facts.git.isRepo) {
+    print(
+      `  ${glyph.bad} ${theme.dim("Not a git repository \u2014 local hooks need git. Run `git init` first.")}`
+    );
+    return;
+  }
+  if (facts.hooks.source === "husky" || facts.hooks.source === "husky-legacy" || facts.hooks.source === "custom") {
+    print(
+      `  ${glyph.partial} ${theme.warn(`${facts.hooks.source} already manages hooks here.`)} ${theme.dim("git runs ONE hook path \u2014 installing .githooks + core.hooksPath takes over. Fold the existing hook logic in first.")}`
+    );
+    if (!opts.yes) {
+      const go = await confirm({ message: "Proceed with .githooks anyway?", initialValue: false });
+      if (isCancel(go) || !go) {
+        cancel("No changes made.");
+        return;
+      }
+    }
+  }
+  const existingPrePush = await readText(path.join(opts.cwd, ".githooks", "pre-push"));
+  const { config, present: hasConfig } = await readConfig(opts.cwd);
+  const configSource = { recorded: hasConfig, willRecord: !opts.yes };
+  let gateConfig = {
+    ...config.gates,
+    commands: config.gates.commands.length ? config.gates.commands : derivedCommands(facts, existingPrePush ?? void 0),
+    publishGate: config.gates.publishGate ?? facts.publishable
+  };
+  const plan = async () => {
+    const files = await planWorkflow(opts.cwd, facts, {
+      agents: false,
+      gates: true,
+      gateConfig
+    });
+    return files.filter((f) => f.executable);
+  };
+  let gateFiles = await plan();
+  renderPlan(gateFiles);
+  printGateSummary(gateConfig, facts, configSource);
+  if (!opts.yes) {
+    const choice = await select({
+      message: "Install these gates?",
+      initialValue: "yes",
+      options: [
+        { value: "yes", label: "yes \u2014 install as shown" },
+        { value: "customize", label: "customize \u2014 change what the gates run" },
+        { value: "no", label: "cancel" }
+      ]
+    });
+    if (isCancel(choice) || choice === "no") {
+      cancel("No changes made.");
+      return;
+    }
+    if (choice === "customize") {
+      const customized = await customize(gateConfig, facts);
+      if (!customized) {
+        cancel("No changes made.");
+        return;
+      }
+      gateConfig = customized;
+      gateFiles = await plan();
+      renderPlan(gateFiles);
+      printGateSummary(gateConfig, facts, configSource);
+    }
+    await writeGateConfig(opts.cwd, gateConfig);
+  }
+  const overwrite = /* @__PURE__ */ new Set();
+  for (const f of gateFiles) {
+    if (!f.exists) continue;
+    if (!f.differs) {
+      overwrite.add(f.path);
+      continue;
+    }
+    if (opts.yes) continue;
+    const ow = await confirm({
+      message: `${f.path} exists with different content (hand-edited?). Overwrite with the pack version?`,
+      initialValue: false
+    });
+    if (isCancel(ow)) {
+      cancel("No changes made.");
+      return;
+    }
+    if (ow) overwrite.add(f.path);
+  }
+  const result = await applyFiles(opts.cwd, gateFiles, overwrite);
+  await git(opts.cwd, ["config", "core.hooksPath", ".githooks"]);
+  section("Done");
+  for (const w of result.written) print(`  ${glyph.ok} ${theme.dim("wrote")} ${theme.info(w)}`);
+  for (const sk of result.skipped)
+    print(`  ${glyph.bullet} ${theme.dim("kept (hand-edited)")} ${theme.dim(sk)}`);
+  print(`  ${glyph.ok} ${theme.dim("set")} ${theme.code("core.hooksPath = .githooks")}`);
+  const wrotePublishGate = result.written.includes(PUBLISH_GATE_SCRIPT);
+  if (wrotePublishGate) {
+    const pkgPath = path.join(opts.cwd, "package.json");
+    const PUBLISH_GATE_KEY = publishGateKey(facts.publishRoute);
+    {
+      const merged = await ensurePackageScript(pkgPath, PUBLISH_GATE_KEY, PUBLISH_GATE_VALUE);
+      if (merged.outcome === "added")
+        print(`  ${glyph.ok} ${theme.dim("wired")} ${theme.code(PUBLISH_GATE_KEY)}`);
+      else if (merged.outcome === "conflict")
+        print(
+          `  ${glyph.partial} ${theme.warn(`${PUBLISH_GATE_KEY} already runs \`${merged.existing}\``)} ${theme.dim("\u2014 left as is; chain the screen into it by hand if you want both.")}`
+        );
+      else if (merged.outcome === "unchanged")
+        print(`  ${glyph.bullet} ${theme.dim(`${PUBLISH_GATE_KEY} already wired`)}`);
+      else
+        print(
+          `  ${glyph.partial} ${theme.dim(`package.json ${merged.outcome}${merged.detail ? `: ${merged.detail}` : ""} \u2014 wire ${PUBLISH_GATE_KEY} by hand`)}`
+        );
+    }
+  }
+}
+
+export { derivedCommands, mergeGateSection, run };

package/dist/generate-IYCQETQB.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+export { planWorkflow } from './chunk-3NYDVB4Z.js';
+import './chunk-CRJHIXJH.js';
+import './chunk-YLNQQZ5F.js';