etymd 0.9.1 → 0.10.0

package/CHANGELOG.md

@@ -1,10 +1,50 @@
 # etymd
 
+## 0.10.0
+
+### Minor Changes
+
+- 2efbd34: `etymd gates` can now check the commit subject against Conventional Commits, at the commit-msg
+  door the content screen already used. Pack v7 — run `etymd gates` to pick it up.
+
+  **Off unless you ask for it.** Set `gates.commitFormat: true` in `.etymd/config.json`; anything
+  else, including leaving the key out, writes exactly the hook you got before this release. It is
+  the one generated check that needs nothing installed and would therefore run for everyone who
+  clones your repo — every other check the pack writes is either derived from what your repo
+  already does, or inert without a checker you installed yourself. A commit convention is neither.
+  It is an opinion, and this tool does not hold opinions on your behalf.
+
+  Where you do turn it on, it is a format check and not a taste check: it asks whether a machine
+  can classify the subject and stops there. An over-long subject is advice and never blocks, and
+  the subjects git writes for you (merge, revert, fixup, squash, amend) are exempt.
+
+### Patch Changes
+
+- 5104394: Content screen: recognise a repo's own name however the pattern spells it
+
+  The self-name exemption compared a pattern's raw source to the repo's directory name. Once a
+  pattern file started listing names word-anchored — `\bwidget\b` rather than `widget` — no source
+  matched any name, and the exemption silently stopped applying: a repo began reporting its own
+  `package.json`, its own contract titles and its own storage keys as leaks, enough of them to bury
+  anything else in the report. Nothing failed; the code, its comment and its test all still read as
+  correct.
+
+  The comparison is now of meaning rather than spelling. A pattern is exempt when the single
+  string it matches is one of the names the repo can prove is its own, with word anchors accepted
+  because they change where a match may begin, never which string matches. Any pattern that can
+  match more than one string — a class, a quantifier, an alternation — is never exempt, so an
+  exemption stays exactly as wide as a name.
+
+  "Its own name" also widens from the worktree directory to the union of the directory, the
+  `name` in `package.json` (npm scope stripped) and the basename of the `origin` remote, since
+  those three routinely disagree. Each is read from the repo being screened, so a repo can only
+  ever exempt itself; where none can be read the union is empty and every pattern stays active.
+
 ## 0.9.1
 
 ### Patch Changes
 
-- 8967d26: Content screen: skip binary files, and say how many were skipped
+- 91ddb97: Content screen: skip binary files, and say how many were skipped
 
   Compressed bytes contain any short sequence eventually, so a short pattern
   matches inside binary assets by accident and is reported as a "line" of
@@ -24,7 +64,7 @@
 
 ### Minor Changes
 
-- 3cf2e53: State documents are now checked for truth, not only for age: the instruction-truth lens runs its
+- 35dbeab: State documents are now checked for truth, not only for age: the instruction-truth lens runs its
   command-claim and path-claim checks over detected state docs, and resolves their `D-NNN` decision
   references against the repo's decisions file — a citation of an entry that was never written is a
   gap finding. References naming another record ("peer D-050") and citations against directory
@@ -35,12 +75,12 @@
 
 ### Minor Changes
 
-- f2c1bfd: `etymd gates` no longer writes a gate that cannot fail. It derives whether any risk-tier finding is
+- bad1380: `etymd gates` no longer writes a gate that cannot fail. It derives whether any risk-tier finding is
   reachable in the repo (a package manifest to contradict, a state document to fall behind); where
   none is, the generated hook drops to `--fail-on gap` and the output says so and why. A `failOn`
   recorded in `.etymd/config.json` is never adjusted, and `gates` now states which tier it wrote and
   where that tier came from — the config key was previously unmentioned anywhere in its output.
-- 743ad44: Declared-field checks are forward-only from the marker's position, not from the file. A decisions
+- e873664: Declared-field checks are forward-only from the marker's position, not from the file. A decisions
   file that declares required entry fields mid-life no longer demands them from the entries appended
   above the marker — an append-only record cannot backfill them. The built-in `Scope:` check shares
   the same gate; `Revisit:` keeps whole-file reach, since it fires only where the entry already wrote
@@ -50,7 +90,7 @@
 
 ### Minor Changes
 
-- 7371c8b: Decisions records can require fields of their own, and etymd holds no opinion about which.
+- d27d635: Decisions records can require fields of their own, and etymd holds no opinion about which.
 
   A decisions file already opts into per-entry format checks with a marker. It can now append field
   names to it — `<!-- decisions-format: 1 fields=Owner,Rollback -->` — and every entry after the
@@ -86,7 +126,7 @@
 
 ### Minor Changes
 
-- b02943b: Local gates: the tool now reads and rewrites what it generated, instead of guessing about it.
+- 47c5032: Local gates: the tool now reads and rewrites what it generated, instead of guessing about it.
 
   Two defects in the local-gate machinery, both silent, both affecting every project using
   `etymd gates`. Decision record:
@@ -164,7 +204,7 @@
 
 ### Minor Changes
 
-- e199ccc: `fleet add --profile corp` now records the alias-to-directory mapping too, not just the entry.
+- e265713: `fleet add --profile corp` now records the alias-to-directory mapping too, not just the entry.
 
   A corp entry in the tracked manifest is deliberately alias-only — no path, no remote — which is
   what keeps employer names out of a file that gets pushed. It also means the entry resolves to
@@ -185,7 +225,7 @@
   without an entry is inert, while an entry without a mapping is a broken registration sitting in
   the file that gets committed.
 
-- 9546979: `fleet add` no longer records a remote URL in the manifest.
+- e8ed2ba: `fleet add` no longer records a remote URL in the manifest.
 
   The field was write-only: nothing in the tool ever read it back. It was persisted because it
   happened to be derivable at registration time, and it stayed because no one asked what consumed
@@ -204,7 +244,7 @@
 
 ### Patch Changes
 
-- 52ebca8: Fix: `fleet add --profile corp` was silently ignored, registering employer repos as personal.
+- 88492b5: Fix: `fleet add --profile corp` was silently ignored, registering employer repos as personal.
 
   `fleet` declares its own `--profile` (the sweep filter), and commander hands a parent-declared
   option the value even when it is typed after the subcommand. So `fleet add <dir> --profile corp`
@@ -225,7 +265,7 @@
 
 ### Patch Changes
 
-- 915ae78: Fix: the shell gate now actually prints the sub-warning findings it documented.
+- 821f144: Fix: the shell gate now actually prints the sub-warning findings it documented.
 
   0.4.0 said "style and info print as advice" and did not do it — the generated hook ran only
   `shellcheck -S warning` and discarded everything below that bar. The generated file made no such
@@ -246,7 +286,7 @@
 
 ### Minor Changes
 
-- 69d1aad: Gate the shell surface: `etymd gates` now installs a shellcheck step in repos that have one.
+- 59c506d: Gate the shell surface: `etymd gates` now installs a shellcheck step in repos that have one.
 
   Package scripts are not the only executable surface a repo has, and in some repos they are not
   the main one. A tools or infra repo can be entirely `bootstrap/*.sh` plus `.githooks/*` with no
@@ -363,7 +403,7 @@
 
 ### Patch Changes
 
-- 80db483: Gate integrity: detect scripts regardless of how the package manager is invoked.
+- 7bc6cf5: Gate integrity: detect scripts regardless of how the package manager is invoked.
 
   Script expansion guessed the script name positionally — the token straight after the
   manager. That only holds for `npm run x`, `yarn x` and `pnpm x`. Every other live shape
@@ -392,7 +432,7 @@
 
 ### Patch Changes
 
-- fdf6b6e: Fleet sweep: recurring classes + `placement: "none"` honored.
+- 983c0e5: Fleet sweep: recurring classes + `placement: "none"` honored.
 
   - **Recurring classes** — the sweep report groups open findings by their engine-minted
     class prefix and lists every class present in ≥2 projects (worst tier first). A class
@@ -410,7 +450,7 @@
 
 ### Minor Changes
 
-- a58d3bd: Fleet mode — the truth guard across your repositories (design record `docs/decisions/004-fleet-truth-guard.md`; registry + fleet `--json` schemas EXPERIMENTAL through 0.2.x).
+- a336902: Fleet mode — the truth guard across your repositories (design record `docs/decisions/004-fleet-truth-guard.md`; registry + fleet `--json` schemas EXPERIMENTAL through 0.2.x).
 
   - New `state-freshness` truth lens: state/decisions artifacts dated by git committer dates only (never mtime); staleness is relative, so a dormant repo's old state is current; state char budget against the ~10k session-hook truncation; marker-gated decisions format checks (`Scope:`, duplicate/out-of-order `D-NNN` ids, past `Revisit:` dates as due review debt); ADR conventions (`docs/adr/`, `docs/decisions/`, `NNNN-*.md`) recognized natively.
   - New `etymd fleet` command family. The sweep runs a read-only audit per registered repo (`--manifest` required unless the cwd holds `registry.json` — no env var, no global pointer) and renders one line per project with a delta against `last.fleet.json`; detail only for new or risk findings. `fleet check` validates the manifest pair alone (dangling mappings, duplicate names, privacy leaks, machine paths). `fleet dismiss`/`fleet accept` resolve a project's finding from any cwd.

package/README.md

@@ -223,6 +223,7 @@ Every key is optional; omit the file entirely and the defaults below apply.
     "commands": ["typecheck", "lint"], // pre-push steps, in order
     "failOn": "risk", // audit tier that fails the push: risk | gap | polish
     "publishGate": true, // screen the published artifact
+    "commitFormat": true, // check the commit subject — Conventional Commits, off unless set
     "allowWriting": [], // commands allowed into a gate despite writing
     // Why a value here is what it is. Each key mirrors the field it explains, so the
     // note says what it refers to instead of sitting near it and hoping. Etymd keeps
@@ -340,6 +341,32 @@ same hook file is safe to commit to a public repo: it carries no patterns and im
 on anyone who clones it. A deliberate exception is marked inline with `allow-published-string`,
 visible in the diff rather than hidden in an allowlist.
 
+### The commit subject, if you ask for it
+
+Off unless you turn it on:
+
+```json
+{ "gates": { "commitFormat": true } }
+```
+
+in `.etymd/config.json`. Then the `commit-msg` hook also checks the subject against
+[Conventional Commits](https://www.conventionalcommits.org) — `<type>[(scope)][!]: <summary>`,
+with `feat fix docs style refactor perf test build ci chore revert` as the types. It is a format
+check and not a taste check: it asks whether a machine can classify the line, and stops there.
+An over-long subject is reported as advice and never blocks, and the subjects git writes for you
+— merge, revert, fixup, squash, amend — are exempt, since gating those would ask you to rewrite
+text you did not write.
+
+It is the one generated check that needs nothing installed, and therefore the one that would run
+for everyone who clones your repo. That is exactly why it is off by default. Every other check
+the pack writes is either derived from what your repo already does or inert without a checker you
+installed yourself; a commit convention is neither — it is an opinion, and this tool does not
+hold opinions on your behalf.
+
+Turn it on where the convention is already yours. A convention nobody gates does not get
+abandoned in a decision you could point at: it erodes one hurried commit at a time, and by the
+time the log reads as a mixture, every commit in it is already published.
+
 Modeled on this repo's own workflow (Etymd guards its own instructions with Etymd — its CI runs
 the same gate against its own freshly built CLI):
 

package/dist/{approve-HED3NCTE.js → approve-6TMXJLOI.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { section, theme, print, renderBaselineDrift, glyph } from './chunk-5BVKFJWM.js';
-import { scanProject } from './chunk-UN7IAYM6.js';
-import { VERSION } from './chunk-AQM4GYGN.js';
+import { scanProject } from './chunk-WTD2EIMN.js';
+import { VERSION } from './chunk-K34AVLDP.js';
 import { readBaseline, summarizeBaselineDrift, isDriftEmpty, writeBaseline, deriveProfile } from './chunk-C7LBUFNU.js';
-import { PACK_VERSION } from './chunk-6DUDIVIC.js';
+import { PACK_VERSION } from './chunk-OIYNP6Y6.js';
 import './chunk-IV3FYVTS.js';
 
 // src/commands/approve.ts

package/dist/audit-FGDX2AYS.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+export { run } from './chunk-SGW7OPHZ.js';
+import './chunk-KQMQJJZK.js';
+import './chunk-IPOAD67U.js';
+import './chunk-OAFYLBVG.js';
+import './chunk-YVGC3E6U.js';
+import './chunk-5BVKFJWM.js';
+import './chunk-WTD2EIMN.js';
+import './chunk-K34AVLDP.js';
+import './chunk-C7LBUFNU.js';
+import './chunk-OIYNP6Y6.js';
+import './chunk-IV3FYVTS.js';

package/dist/{brief-2CXAUDNN.js → brief-X64HK325.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { print, theme } from './chunk-5BVKFJWM.js';
-import { scanProject } from './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
+import { scanProject } from './chunk-WTD2EIMN.js';
+import './chunk-K34AVLDP.js';
 import { ETYMD_DIR } from './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
+import './chunk-OIYNP6Y6.js';
 import './chunk-IV3FYVTS.js';
 import { promises } from 'node:fs';
 import path from 'node:path';

package/dist/{chunk-JSUYV26K.js → chunk-IPOAD67U.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { DEFAULT_CONFIG } from './chunk-D2RI3CCT.js';
+import { DEFAULT_CONFIG } from './chunk-YVGC3E6U.js';
 import { readText, wordCount, approxTokens, pathExists } from './chunk-IV3FYVTS.js';
 import { promises } from 'node:fs';
 import path from 'node:path';

package/dist/{chunk-AQM4GYGN.js → chunk-K34AVLDP.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 // package.json
 var package_default = {
-  version: "0.9.1"};
+  version: "0.10.0"};
 
 // src/version.ts
 var VERSION = package_default.version;

package/dist/{chunk-KGVRZ6WC.js → chunk-KQMQJJZK.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { measureContext } from './chunk-JSUYV26K.js';
+import { measureContext } from './chunk-IPOAD67U.js';
 import { readLedger, reconcileLedger, writeLedger, visibleFindings } from './chunk-OAFYLBVG.js';
-import { DEFAULT_CONFIG, readConfig, CONFIG_FILE } from './chunk-D2RI3CCT.js';
-import { scanProject, expandFileGlobs } from './chunk-UN7IAYM6.js';
+import { DEFAULT_CONFIG, readConfig, CONFIG_FILE } from './chunk-YVGC3E6U.js';
+import { scanProject, expandFileGlobs } from './chunk-WTD2EIMN.js';
 import { ETYMD_DIR, writeCachedFacts, readBaseline, deriveProfile, baselineCarriesMachinePath, BASELINE_FILE } from './chunk-C7LBUFNU.js';
-import { PACK_VERSION } from './chunk-6DUDIVIC.js';
+import { PACK_VERSION } from './chunk-OIYNP6Y6.js';
 import { pathExists, readJson, readText, isDirectory, matchesAnyGlob, git, normalizeRelPath, isCiEnvironment, isExecutable } from './chunk-IV3FYVTS.js';
 import path from 'node:path';
 import YAML from 'yaml';

package/dist/{chunk-6DUDIVIC.js → chunk-OIYNP6Y6.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
 // src/pack/version.ts
-var PACK_VERSION = "6";
+var PACK_VERSION = "7";
 
 export { PACK_VERSION };

package/dist/{chunk-WENIJMVV.js → chunk-R6CVJ5D7.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { DEFAULT_CONFIG } from './chunk-D2RI3CCT.js';
-import { PACK_VERSION } from './chunk-6DUDIVIC.js';
+import { DEFAULT_CONFIG } from './chunk-YVGC3E6U.js';
+import { PACK_VERSION } from './chunk-OIYNP6Y6.js';
 import { readText, pathExists } from './chunk-IV3FYVTS.js';
 import path from 'node:path';
 import { createHash } from 'node:crypto';
@@ -161,9 +161,48 @@ fi
 exit 0
 `);
 }
-function generateCommitMsgHook() {
+var COMMIT_TYPES = [
+  "feat",
+  "fix",
+  "docs",
+  "style",
+  "refactor",
+  "perf",
+  "test",
+  "build",
+  "ci",
+  "chore",
+  "revert"
+];
+var SUBJECT_ADVISORY_LENGTH = 72;
+function commitFormatStep() {
+  const types = COMMIT_TYPES.join("|");
+  return `
+# Message format \u2014 <type>[(scope)][!]: <summary>. Needs nothing installed, so it always runs.
+subject=$(sed -e '/^#/d' -e '/^[[:space:]]*$/d' "$1" | head -1)
+case "$subject" in
+  "Merge "*|"Revert "*|fixup!*|squash!*|amend!*) ;;
+  *)
+    if ! printf '%s' "$subject" | grep -qE '^(${types})(\\([a-z0-9._/-]+\\))?!?: .+'; then
+      echo "\u2717 commit message: expected '<type>[(scope)][!]: <summary>'"
+      echo "  got:   $subject"
+      echo "  types: ${COMMIT_TYPES.join(" ")}"
+      echo "  a '!' after the type or scope marks a breaking change"
+      exit 1
+    fi
+    # Length is advice, not a block: the format is what tooling reads, the length is what a
+    # person reads, and only one of the two can break anything.
+    if [ "\${#subject}" -gt ${SUBJECT_ADVISORY_LENGTH} ]; then
+      echo "\u203A note: subject is \${#subject} characters; ${SUBJECT_ADVISORY_LENGTH} or fewer reads better in git log"
+    fi
+    ;;
+esac`;
+}
+function generateCommitMsgHook(gates) {
+  const format = gates?.commitFormat === true ? `${commitFormatStep()}
+` : "";
   return stampGenerated(`#!/usr/bin/env sh
-# etymd: content screen \u2014 the commit message itself.
+# etymd: the commit message itself \u2014 content screen, then format.
 #
 # The staged-content gate reads file bytes and never sees the message, yet a message is as
 # permanently published as any file. No-op where no checker is installed.
@@ -173,7 +212,7 @@ GATE="\${COMMIT_MSG_GATE:-$(command -v etymd || true)}"
 if [ -x "$GATE" ]; then
   "$GATE" screen --message "$1" || exit 1
 fi
-
+${format}
 ${localHookCall("commit-msg")}
 
 exit 0
@@ -336,14 +375,15 @@ async function planWorkflow(root, facts, opts) {
     await add(".githooks/pre-commit", generatePreCommitHook(), "Process gate (pre-commit)", true);
     await add(
       ".githooks/commit-msg",
-      generateCommitMsgHook(),
-      "Content screen (commit message)",
+      generateCommitMsgHook(opts.gateConfig),
+      "Message gate (content screen, format)",
       true
     );
     const gateConfig = opts.gateConfig?.commands?.length ? opts.gateConfig : {
       commands: derivedCommands(facts, existingPrePush ?? void 0),
       failOn: opts.gateConfig?.failOn ?? DEFAULT_CONFIG.gates.failOn,
       publishGate: opts.gateConfig?.publishGate,
+      commitFormat: opts.gateConfig?.commitFormat,
       allowWriting: opts.gateConfig?.allowWriting ?? []
     };
     await add(

package/dist/{chunk-ULM25GWG.js → chunk-SGW7OPHZ.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { parseFailOnTier, runAudit, meetsFailOn } from './chunk-KGVRZ6WC.js';
+import { parseFailOnTier, runAudit, meetsFailOn } from './chunk-KQMQJJZK.js';
 import { print, section, theme, renderLensCoverage, renderFindings, renderLedgerDiff } from './chunk-5BVKFJWM.js';
 
 // src/commands/audit.ts

package/dist/{chunk-UN7IAYM6.js → chunk-WTD2EIMN.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { VERSION } from './chunk-AQM4GYGN.js';
-import { PACK_VERSION } from './chunk-6DUDIVIC.js';
+import { VERSION } from './chunk-K34AVLDP.js';
+import { PACK_VERSION } from './chunk-OIYNP6Y6.js';
 import { normalizeRelPath, isDirectory, readJson, git, matchesAnyGlob, pathExists, readText } from './chunk-IV3FYVTS.js';
 import path from 'node:path';
 import { promises } from 'node:fs';

package/dist/{chunk-D2RI3CCT.js → chunk-YVGC3E6U.js}

@@ -70,6 +70,14 @@ async function readConfig(root) {
     }
     return gates.publishGate;
   })();
+  const commitFormat = (() => {
+    if (gates.commitFormat === void 0) return void 0;
+    if (typeof gates.commitFormat !== "boolean") {
+      problems.push(`${CONFIG_FILE}: \`gates.commitFormat\` must be true or false \u2014 ignored.`);
+      return void 0;
+    }
+    return gates.commitFormat;
+  })();
   return {
     present: true,
     problems,
@@ -91,6 +99,7 @@ async function readConfig(root) {
         commands: readGlobList(gates.commands, "gates.commands", problems) ?? DEFAULT_CONFIG.gates.commands,
         failOn: failOn ?? DEFAULT_CONFIG.gates.failOn,
         publishGate,
+        commitFormat,
         allowWriting: readGlobList(gates.allowWriting, "gates.allowWriting", problems) ?? DEFAULT_CONFIG.gates.allowWriting
       }
     }

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { VERSION } from './chunk-AQM4GYGN.js';
+import { VERSION } from './chunk-K34AVLDP.js';
 import path from 'node:path';
 import { Command } from 'commander';
 import pc from 'picocolors';
@@ -31,7 +31,7 @@ program.command("audit").description("Verify every instruction claim against the
   "exit non-zero when findings at/above this tier exist (risk|gap|polish)"
 ).action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./audit-Y35XVD6Z.js');
+    const { run } = await import('./audit-FGDX2AYS.js');
     await run({
       cwd: resolveCwd(cmd),
       json: opts.json,
@@ -44,7 +44,7 @@ program.command("audit").description("Verify every instruction claim against the
 );
 program.command("init").description("Onboard the truth guard: approve the baseline; scaffold AGENTS.md only if missing").option("-y, --yes", "accept defaults without prompting (never overwrites)").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./init-RC35RS5J.js');
+    const { run } = await import('./init-YYGRFIHQ.js');
     await run({ cwd: resolveCwd(cmd), yes: opts.yes });
   })
 );
@@ -52,31 +52,31 @@ program.command("approve").description(
   "Re-approve the committed baseline after intentional structural changes (non-interactive)"
 ).action(
   (_opts, cmd) => action(async () => {
-    const { run } = await import('./approve-HED3NCTE.js');
+    const { run } = await import('./approve-6TMXJLOI.js');
     await run({ cwd: resolveCwd(cmd) });
   })
 );
 program.command("scan").description("Deterministically reckon the project into a facts index").option("--json", "print the raw facts as JSON").option("--no-save", "do not write the .etymd cache").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./scan-MBXSD5RO.js');
+    const { run } = await import('./scan-VO776GM7.js');
     await run({ cwd: resolveCwd(cmd), json: opts.json, save: opts.save });
   })
 );
 program.command("doctor").description('Alias for `audit --truth` \u2014 "are the recorded instructions still true?"').option("--json", "print findings as JSON").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./doctor-DXXQJ2L3.js');
+    const { run } = await import('./doctor-W3UZK7KS.js');
     await run({ cwd: resolveCwd(cmd), json: opts.json });
   })
 );
 program.command("context").description("Measure the always-loaded context footprint and flag extraction candidates").option("--json", "print the budget as JSON").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./context-5ANOP2IJ.js');
+    const { run } = await import('./context-K6DZNWAV.js');
     await run({ cwd: resolveCwd(cmd), json: opts.json });
   })
 );
 program.command("brief").description("Emit a grounded briefing for the in-repo agent to complete the semantic layer").option("--human", "write a human onboarding brief instead of the agent briefing").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./brief-2CXAUDNN.js');
+    const { run } = await import('./brief-X64HK325.js');
     await run({ cwd: resolveCwd(cmd), human: opts.human });
   })
 );
@@ -111,7 +111,7 @@ var fleet = program.command("fleet").description(
   "exit non-zero when findings at/above this tier exist (risk|gap|polish)"
 ).action(
   (opts, cmd) => action(async () => {
-    const { sweep } = await import('./fleet-DPJSZDEY.js');
+    const { sweep } = await import('./fleet-4PPNUIDJ.js');
     await sweep({
       cwd: resolveCwd(cmd),
       manifest: opts.manifest,
@@ -126,7 +126,7 @@ var fleet = program.command("fleet").description(
 );
 fleet.command("check").description("Validate the manifest pair only \u2014 no lenses: dangling mappings, duplicates, leaks").option("--manifest <file>", "the fleet manifest \u2014 required unless the cwd holds registry.json").option("--json", "print the findings as JSON (EXPERIMENTAL through 0.2.x)").action(
   (_opts, cmd) => action(async () => {
-    const { check } = await import('./fleet-DPJSZDEY.js');
+    const { check } = await import('./fleet-4PPNUIDJ.js');
     const opts = cmd.optsWithGlobals();
     await check({ cwd: resolveCwd(cmd), manifest: opts.manifest, json: opts.json });
   })
@@ -136,7 +136,7 @@ fleet.command("add").argument("<dir>", "directory of the project to register").d
   "public-repo | public-bound | private \u2014 mandatory for personal entries"
 ).option("-y, --yes", "skip prompts; every mandatory value must be passed as a flag").option("--manifest <file>", "the fleet manifest \u2014 required unless the cwd holds registry.json").action(
   (dir, opts, cmd) => action(async () => {
-    const { add } = await import('./fleet-DPJSZDEY.js');
+    const { add } = await import('./fleet-4PPNUIDJ.js');
     const shared = cmd.optsWithGlobals();
     await add({
       cwd: resolveCwd(cmd),
@@ -159,7 +159,7 @@ fleet.command("dismiss").argument("<name>", "the registered project name").argum
   "Dismiss a project's finding from any cwd \u2014 corp ledgers persist beside the manifest"
 ).requiredOption("--reason <text>", "why it is dismissed \u2014 recorded so the decision survives").option("--manifest <file>", "the fleet manifest \u2014 required unless the cwd holds registry.json").action(
   (name, id, _opts, cmd) => action(async () => {
-    const { dismiss } = await import('./fleet-DPJSZDEY.js');
+    const { dismiss } = await import('./fleet-4PPNUIDJ.js');
     const opts = cmd.optsWithGlobals();
     await dismiss({
       cwd: resolveCwd(cmd),
@@ -174,7 +174,7 @@ fleet.command("accept").argument("<name>", "the registered project name").argume
   "Accept a project's finding as a known trade-off \u2014 corp ledgers persist beside the manifest"
 ).option("--reason <text>", "optional note on why the trade-off is accepted").option("--manifest <file>", "the fleet manifest \u2014 required unless the cwd holds registry.json").action(
   (name, id, _opts, cmd) => action(async () => {
-    const { accept } = await import('./fleet-DPJSZDEY.js');
+    const { accept } = await import('./fleet-4PPNUIDJ.js');
     const opts = cmd.optsWithGlobals();
     await accept({ cwd: resolveCwd(cmd), manifest: opts.manifest, name, id, reason: opts.reason });
   })
@@ -183,7 +183,7 @@ program.command("screen").description(
   "Content screen: check for text that must never be published. Bring your own patterns \u2014 etymd ships none."
 ).option("--staged", "screen what a commit is about to add (default)").option("--tree", "screen every tracked file \u2014 what is about to leave the machine").option("--message <file>", "screen a commit message (the commit-msg hook's $1)").option("--dir <dir>", "screen an unpacked build artifact \u2014 what actually ships").option("--patterns <file>", "pattern file (default: ~/.config/etymd/screen-patterns)").option("--advisory", "report without failing").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./screen-EHNK6ANK.js');
+    const { run } = await import('./screen-MOQP6XC7.js');
     const scope = opts.message ? "message" : opts.dir ? "dir" : opts.tree ? "tree" : "staged";
     await run({
       cwd: resolveCwd(cmd),
@@ -196,7 +196,7 @@ program.command("screen").description(
 );
 program.command("gates").description("Install the local git-hook gates (process \u2192 pre-commit, correctness \u2192 pre-push)").option("--ci", "note about the CI review gate (ships later; local gates install now)").option("-y, --yes", "skip prompts; never overwrites a hand-edited hook").action(
   (opts, cmd) => action(async () => {
-    const { run } = await import('./gates-RR3V4PII.js');
+    const { run } = await import('./gates-Q7FMVUQP.js');
     await run({ cwd: resolveCwd(cmd), ci: opts.ci, yes: opts.yes });
   })
 );

package/dist/{config-7WCVZCM6.js → config-TPK5LYDM.js}

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
-export { CONFIG_FILE, DEFAULT_CONFIG, configPath, readConfig } from './chunk-D2RI3CCT.js';
+export { CONFIG_FILE, DEFAULT_CONFIG, configPath, readConfig } from './chunk-YVGC3E6U.js';
 import './chunk-C7LBUFNU.js';
 import './chunk-IV3FYVTS.js';

package/dist/{context-5ANOP2IJ.js → context-K6DZNWAV.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { measureContext } from './chunk-JSUYV26K.js';
-import { readConfig } from './chunk-D2RI3CCT.js';
+import { measureContext } from './chunk-IPOAD67U.js';
+import { readConfig } from './chunk-YVGC3E6U.js';
 import { print, renderContext } from './chunk-5BVKFJWM.js';
 import './chunk-C7LBUFNU.js';
 import './chunk-IV3FYVTS.js';

package/dist/{doctor-DXXQJ2L3.js → doctor-W3UZK7KS.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
-import { run } from './chunk-ULM25GWG.js';
-import './chunk-KGVRZ6WC.js';
-import './chunk-JSUYV26K.js';
+import { run } from './chunk-SGW7OPHZ.js';
+import './chunk-KQMQJJZK.js';
+import './chunk-IPOAD67U.js';
 import './chunk-OAFYLBVG.js';
-import './chunk-D2RI3CCT.js';
+import './chunk-YVGC3E6U.js';
 import './chunk-5BVKFJWM.js';
-import './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
+import './chunk-WTD2EIMN.js';
+import './chunk-K34AVLDP.js';
 import './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
+import './chunk-OIYNP6Y6.js';
 import './chunk-IV3FYVTS.js';
 
 // src/commands/doctor.ts

package/dist/{fleet-DPJSZDEY.js → fleet-4PPNUIDJ.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { dismiss, accept } from './chunk-V2SOHPXF.js';
-import { parseFailOnTier, meetsFailOn, runAudit } from './chunk-KGVRZ6WC.js';
-import './chunk-JSUYV26K.js';
+import { parseFailOnTier, meetsFailOn, runAudit } from './chunk-KQMQJJZK.js';
+import './chunk-IPOAD67U.js';
 import { readLedger } from './chunk-OAFYLBVG.js';
-import { DEFAULT_CONFIG } from './chunk-D2RI3CCT.js';
+import { DEFAULT_CONFIG } from './chunk-YVGC3E6U.js';
 import { print, theme, section, renderFleetRows, renderFleetNotes, renderFindings, TIER_BADGE, glyph } from './chunk-5BVKFJWM.js';
-import { scanProject } from './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
+import { scanProject } from './chunk-WTD2EIMN.js';
+import './chunk-K34AVLDP.js';
 import { ETYMD_DIR } from './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
+import './chunk-OIYNP6Y6.js';
 import { readText, pathExists, git, isDirectory } from './chunk-IV3FYVTS.js';
 import { promises } from 'node:fs';
 import os from 'node:os';
@@ -687,9 +687,9 @@ async function checkCorpEmails(manifest, findings, disclosures) {
   }
 }
 async function checkGateDrift(manifest, findings, disclosures) {
-  const { planWorkflow } = await import('./generate-IPY5QIR5.js');
-  const { scanProject: scanProject2 } = await import('./scan-KX522VKV.js');
-  const { readConfig } = await import('./config-7WCVZCM6.js');
+  const { planWorkflow } = await import('./generate-NLHGTRZB.js');
+  const { scanProject: scanProject2 } = await import('./scan-PJSZGUG7.js');
+  const { readConfig } = await import('./config-TPK5LYDM.js');
   for (const entry of manifest.entries) {
     const root = entry.resolvedRoot;
     if (!root || !await isDirectory(root)) continue;

package/dist/{gates-RR3V4PII.js → gates-Q7FMVUQP.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { applyFiles } from './chunk-EF6BPBG6.js';
-import { deriveFailOn, derivedCommands, planWorkflow, runPrefix, isSafeGateCommand } from './chunk-WENIJMVV.js';
-import { readConfig, CONFIG_FILE, configPath } from './chunk-D2RI3CCT.js';
+import { deriveFailOn, derivedCommands, planWorkflow, runPrefix, isSafeGateCommand } from './chunk-R6CVJ5D7.js';
+import { readConfig, CONFIG_FILE, configPath } from './chunk-YVGC3E6U.js';
 import { section, print, glyph, theme, renderPlan } from './chunk-5BVKFJWM.js';
-import { scanProject } from './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
+import { scanProject } from './chunk-WTD2EIMN.js';
+import './chunk-K34AVLDP.js';
 import './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
+import './chunk-OIYNP6Y6.js';
 import { readText, git } from './chunk-IV3FYVTS.js';
 import { promises } from 'node:fs';
 import path from 'node:path';

package/dist/{generate-IPY5QIR5.js → generate-NLHGTRZB.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-export { deriveFailOn, derivedCommands, planWorkflow, riskReachability } from './chunk-WENIJMVV.js';
-import './chunk-D2RI3CCT.js';
+export { deriveFailOn, derivedCommands, planWorkflow, riskReachability } from './chunk-R6CVJ5D7.js';
+import './chunk-YVGC3E6U.js';
 import './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
+import './chunk-OIYNP6Y6.js';
 import './chunk-IV3FYVTS.js';

package/dist/index.d.ts

@@ -226,6 +226,14 @@ interface GateConfig {
     failOn: string;
     /** Emit the publish-time screen. Unset = derive from whether the repo publishes. */
     publishGate?: boolean;
+    /**
+     * Check the commit subject against Conventional Commits. **Unset = off.** Every other check
+     * the pack generates is either derived from what the repo already does or inert without a
+     * checker the user installed themselves; this one is a convention, and a convention is an
+     * opinion. Etymd ships the door and never decides that a repo wants it: `true` here is the
+     * repo asking, and nothing else turns it on.
+     */
+    commitFormat?: boolean;
     /** Commands allowed into a gate despite looking like they write (an explicit override). */
     allowWriting: string[];
 }
@@ -804,7 +812,7 @@ declare const gateIntegrityLens: Lens;
  * change meaning. Stamped into facts, baselines, and generated artifacts so drift against the
  * pack is computable and `harvest` has something to diff.
  */
-declare const PACK_VERSION = "6";
+declare const PACK_VERSION = "7";
 
 declare const VERSION: string;
 declare const NAME: string;

package/dist/index.js

@@ -20,7 +20,7 @@ var __export = (target, all) => {
 var PACK_VERSION;
 var init_version = __esm({
   "src/pack/version.ts"() {
-    PACK_VERSION = "6";
+    PACK_VERSION = "7";
   }
 });
 
@@ -30,7 +30,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "etymd",
-      version: "0.9.1",
+      version: "0.10.0",
       description: "Keep your agent instructions true \u2014 verify AGENTS.md, CLAUDE.md, rules & skills against the actual repo, with drift caught over time and a regression ledger.",
       keywords: [
         "cli",
@@ -961,6 +961,14 @@ async function readConfig(root) {
     }
     return gates.publishGate;
   })();
+  const commitFormat = (() => {
+    if (gates.commitFormat === void 0) return void 0;
+    if (typeof gates.commitFormat !== "boolean") {
+      problems.push(`${CONFIG_FILE}: \`gates.commitFormat\` must be true or false \u2014 ignored.`);
+      return void 0;
+    }
+    return gates.commitFormat;
+  })();
   return {
     present: true,
     problems,
@@ -982,6 +990,7 @@ async function readConfig(root) {
         commands: readGlobList(gates.commands, "gates.commands", problems) ?? DEFAULT_CONFIG.gates.commands,
         failOn: failOn ?? DEFAULT_CONFIG.gates.failOn,
         publishGate,
+        commitFormat,
         allowWriting: readGlobList(gates.allowWriting, "gates.allowWriting", problems) ?? DEFAULT_CONFIG.gates.allowWriting
       }
     }
@@ -1155,9 +1164,34 @@ fi
 exit 0
 `);
 }
-function generateCommitMsgHook() {
+function commitFormatStep() {
+  const types = COMMIT_TYPES.join("|");
+  return `
+# Message format \u2014 <type>[(scope)][!]: <summary>. Needs nothing installed, so it always runs.
+subject=$(sed -e '/^#/d' -e '/^[[:space:]]*$/d' "$1" | head -1)
+case "$subject" in
+  "Merge "*|"Revert "*|fixup!*|squash!*|amend!*) ;;
+  *)
+    if ! printf '%s' "$subject" | grep -qE '^(${types})(\\([a-z0-9._/-]+\\))?!?: .+'; then
+      echo "\u2717 commit message: expected '<type>[(scope)][!]: <summary>'"
+      echo "  got:   $subject"
+      echo "  types: ${COMMIT_TYPES.join(" ")}"
+      echo "  a '!' after the type or scope marks a breaking change"
+      exit 1
+    fi
+    # Length is advice, not a block: the format is what tooling reads, the length is what a
+    # person reads, and only one of the two can break anything.
+    if [ "\${#subject}" -gt ${SUBJECT_ADVISORY_LENGTH} ]; then
+      echo "\u203A note: subject is \${#subject} characters; ${SUBJECT_ADVISORY_LENGTH} or fewer reads better in git log"
+    fi
+    ;;
+esac`;
+}
+function generateCommitMsgHook(gates) {
+  const format = gates?.commitFormat === true ? `${commitFormatStep()}
+` : "";
   return stampGenerated(`#!/usr/bin/env sh
-# etymd: content screen \u2014 the commit message itself.
+# etymd: the commit message itself \u2014 content screen, then format.
 #
 # The staged-content gate reads file bytes and never sees the message, yet a message is as
 # permanently published as any file. No-op where no checker is installed.
@@ -1167,7 +1201,7 @@ GATE="\${COMMIT_MSG_GATE:-$(command -v etymd || true)}"
 if [ -x "$GATE" ]; then
   "$GATE" screen --message "$1" || exit 1
 fi
-
+${format}
 ${localHookCall("commit-msg")}
 
 exit 0
@@ -1274,12 +1308,26 @@ fi
 exit 0
 `);
 }
-var GENERATION_MARKER_RE, CONTENT_GATE_RESOLUTION;
+var GENERATION_MARKER_RE, CONTENT_GATE_RESOLUTION, COMMIT_TYPES, SUBJECT_ADVISORY_LENGTH;
 var init_templates = __esm({
   "src/pack/templates.ts"() {
     init_version();
     GENERATION_MARKER_RE = /^(?:# |<!-- )etymd:generated pack-v\S+ ([0-9a-f]{16})(?: -->)?$/;
     CONTENT_GATE_RESOLUTION = `GATE="\${CONTENT_GATE:-$(command -v etymd || true)}"`;
+    COMMIT_TYPES = [
+      "feat",
+      "fix",
+      "docs",
+      "style",
+      "refactor",
+      "perf",
+      "test",
+      "build",
+      "ci",
+      "chore",
+      "revert"
+    ];
+    SUBJECT_ADVISORY_LENGTH = 72;
   }
 });
 
@@ -1345,14 +1393,15 @@ async function planWorkflow(root, facts, opts) {
     await add(".githooks/pre-commit", generatePreCommitHook(), "Process gate (pre-commit)", true);
     await add(
       ".githooks/commit-msg",
-      generateCommitMsgHook(),
-      "Content screen (commit message)",
+      generateCommitMsgHook(opts.gateConfig),
+      "Message gate (content screen, format)",
       true
     );
     const gateConfig = opts.gateConfig?.commands?.length ? opts.gateConfig : {
       commands: derivedCommands(facts, existingPrePush ?? void 0),
       failOn: opts.gateConfig?.failOn ?? DEFAULT_CONFIG.gates.failOn,
       publishGate: opts.gateConfig?.publishGate,
+      commitFormat: opts.gateConfig?.commitFormat,
       allowWriting: opts.gateConfig?.allowWriting ?? []
     };
     await add(

package/dist/{init-RC35RS5J.js → init-YYGRFIHQ.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { applyFiles } from './chunk-EF6BPBG6.js';
-import { planWorkflow } from './chunk-WENIJMVV.js';
-import './chunk-D2RI3CCT.js';
+import { planWorkflow } from './chunk-R6CVJ5D7.js';
+import './chunk-YVGC3E6U.js';
 import { theme, renderFacts, print, renderPlan, section, glyph } from './chunk-5BVKFJWM.js';
-import { scanProject } from './chunk-UN7IAYM6.js';
-import { VERSION } from './chunk-AQM4GYGN.js';
+import { scanProject } from './chunk-WTD2EIMN.js';
+import { VERSION } from './chunk-K34AVLDP.js';
 import { writeCachedFacts, deriveProfile, writeBaseline, CACHE_DIR } from './chunk-C7LBUFNU.js';
-import { PACK_VERSION } from './chunk-6DUDIVIC.js';
+import { PACK_VERSION } from './chunk-OIYNP6Y6.js';
 import { git, readText } from './chunk-IV3FYVTS.js';
 import { promises } from 'node:fs';
 import path from 'node:path';

package/dist/scan-PJSZGUG7.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+export { scanProject } from './chunk-WTD2EIMN.js';
+import './chunk-K34AVLDP.js';
+import './chunk-OIYNP6Y6.js';
+import './chunk-IV3FYVTS.js';

package/dist/{scan-MBXSD5RO.js → scan-VO776GM7.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { print, renderFacts, theme } from './chunk-5BVKFJWM.js';
-import { scanProject } from './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
+import { scanProject } from './chunk-WTD2EIMN.js';
+import './chunk-K34AVLDP.js';
 import { writeCachedFacts } from './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
+import './chunk-OIYNP6Y6.js';
 import './chunk-IV3FYVTS.js';
 
 // src/commands/scan.ts

package/dist/{screen-EHNK6ANK.js → screen-MOQP6XC7.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { print, glyph, theme, section } from './chunk-5BVKFJWM.js';
-import { readText, git, pathExists } from './chunk-IV3FYVTS.js';
+import { git, readText, pathExists } from './chunk-IV3FYVTS.js';
 import { promises } from 'node:fs';
 import path from 'node:path';
 
@@ -17,8 +17,49 @@ function compile(raw) {
     }
   });
 }
-function isSelfName(pattern, self) {
-  return pattern.source.toLowerCase() === self.toLowerCase();
+var META = ".[]*^$+?(){}|";
+function patternLiteral(source) {
+  let out = "";
+  let i = source.startsWith("\\b") ? 2 : 0;
+  for (; i < source.length; i++) {
+    const c = source.charAt(i);
+    if (c === "\\") {
+      const next = source[i + 1];
+      if (next === void 0) return null;
+      if (/[A-Za-z0-9]/.test(next)) return next === "b" && i + 2 === source.length ? out : null;
+      out += next;
+      i++;
+      continue;
+    }
+    if (META.includes(c)) return null;
+    out += c;
+  }
+  return out;
+}
+function isSelfName(pattern, selves) {
+  const literal = patternLiteral(pattern.source);
+  if (literal === null || literal === "") return false;
+  return selves.some((s) => s.toLowerCase() === literal.toLowerCase());
+}
+function bareName(raw) {
+  return raw.replace(/^@[^/]+\//, "").replace(/\.git$/, "");
+}
+async function selfIdentities(cwd) {
+  const names = /* @__PURE__ */ new Set();
+  const top = await git(cwd, ["rev-parse", "--show-toplevel"]);
+  names.add(path.basename(top || path.resolve(cwd)));
+  const pkg = await readText(path.join(top || cwd, "package.json"));
+  if (pkg) {
+    try {
+      const name = JSON.parse(pkg).name;
+      if (typeof name === "string" && name) names.add(bareName(name));
+    } catch {
+    }
+  }
+  const remote = await git(cwd, ["remote", "get-url", "origin"]);
+  if (remote) names.add(bareName(path.basename(remote.trim())));
+  names.delete("");
+  return [...names];
 }
 function screenText(text, file, patterns, allow = []) {
   const hits = [];
@@ -88,10 +129,8 @@ async function run(opts) {
   }
   const allowRaw = await readText(path.join(opts.cwd, ALLOW_FILE)) ?? await readText(path.join(opts.cwd, LEGACY_ALLOW_FILE));
   const allow = allowRaw ? compile(allowRaw) : [];
-  const self = path.basename(
-    await git(opts.cwd, ["rev-parse", "--show-toplevel"]) || path.resolve(opts.cwd)
-  );
-  const active = self ? patterns.filter((re) => !isSelfName(re, self)) : patterns;
+  const selves = await selfIdentities(opts.cwd);
+  const active = selves.length ? patterns.filter((re) => !isSelfName(re, selves)) : patterns;
   const hits = [];
   let scanned = 0;
   let skippedBinary = 0;
@@ -155,4 +194,4 @@ async function run(opts) {
   if (!opts.advisory) process.exitCode = 1;
 }
 
-export { isSelfName, readScreenable, run, screenText };
+export { isSelfName, patternLiteral, readScreenable, run, screenText, selfIdentities };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "etymd",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "description": "Keep your agent instructions true — verify AGENTS.md, CLAUDE.md, rules & skills against the actual repo, with drift caught over time and a regression ledger.",
   "keywords": [
     "cli",

package/dist/audit-Y35XVD6Z.js

@@ -1,12 +0,0 @@
-#!/usr/bin/env node
-export { run } from './chunk-ULM25GWG.js';
-import './chunk-KGVRZ6WC.js';
-import './chunk-JSUYV26K.js';
-import './chunk-OAFYLBVG.js';
-import './chunk-D2RI3CCT.js';
-import './chunk-5BVKFJWM.js';
-import './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
-import './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
-import './chunk-IV3FYVTS.js';

package/dist/scan-KX522VKV.js

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-export { scanProject } from './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
-import './chunk-6DUDIVIC.js';
-import './chunk-IV3FYVTS.js';