etymd 0.9.1 → 0.11.0

package/dist/{init-RC35RS5J.js → init-QLGIYFCX.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import { applyFiles } from './chunk-EF6BPBG6.js';
-import { planWorkflow } from './chunk-WENIJMVV.js';
-import './chunk-D2RI3CCT.js';
+import { applyFiles } from './chunk-GWGKEPRX.js';
+import { planWorkflow } from './chunk-HRJJQCMT.js';
+import './chunk-DWL2IKZH.js';
 import { theme, renderFacts, print, renderPlan, section, glyph } from './chunk-5BVKFJWM.js';
-import { scanProject } from './chunk-UN7IAYM6.js';
-import { VERSION } from './chunk-AQM4GYGN.js';
-import { writeCachedFacts, deriveProfile, writeBaseline, CACHE_DIR } from './chunk-C7LBUFNU.js';
-import { PACK_VERSION } from './chunk-6DUDIVIC.js';
-import { git, readText } from './chunk-IV3FYVTS.js';
-import { promises } from 'node:fs';
-import path from 'node:path';
+import { scanProject } from './chunk-5GQ52DK6.js';
+import { VERSION } from './chunk-J7XVOTZL.js';
+import { writeCachedFacts, deriveProfile, writeBaseline, CACHE_DIR } from './chunk-JHZ2BN4U.js';
+import { PACK_VERSION } from './chunk-LSZGCKIQ.js';
+import { git, readText } from './chunk-4VPBP6K6.js';
+import { promises } from 'fs';
+import path from 'path';
 import { intro, spinner, select, confirm, outro, isCancel, cancel } from '@clack/prompts';
 
 function bail() {

package/dist/ledger-4FOZ5HAB.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+export { accept, dismiss, list } from './chunk-2VLNI3L2.js';
+import './chunk-3E2IPCRY.js';
+import './chunk-5BVKFJWM.js';
+import './chunk-4VPBP6K6.js';

package/dist/{scan-MBXSD5RO.js → scan-VWEXWM6G.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { print, renderFacts, theme } from './chunk-5BVKFJWM.js';
-import { scanProject } from './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
-import { writeCachedFacts } from './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
-import './chunk-IV3FYVTS.js';
+import { scanProject } from './chunk-5GQ52DK6.js';
+import './chunk-J7XVOTZL.js';
+import { writeCachedFacts } from './chunk-JHZ2BN4U.js';
+import './chunk-LSZGCKIQ.js';
+import './chunk-4VPBP6K6.js';
 
 // src/commands/scan.ts
 async function run(opts) {

package/dist/scan-W7RHZVSF.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+export { scanProject } from './chunk-5GQ52DK6.js';
+import './chunk-J7XVOTZL.js';
+import './chunk-LSZGCKIQ.js';
+import './chunk-4VPBP6K6.js';

package/dist/{screen-EHNK6ANK.js → screen-NSWNC7VQ.js}

@@ -1,14 +1,54 @@
 #!/usr/bin/env node
 import { print, glyph, theme, section } from './chunk-5BVKFJWM.js';
-import { readText, git, pathExists } from './chunk-IV3FYVTS.js';
-import { promises } from 'node:fs';
-import path from 'node:path';
+import { git, readText, pathExists } from './chunk-4VPBP6K6.js';
+import { promises } from 'fs';
+import path from 'path';
 
 var MACHINE_PATH_RE = /\/(?:Users|home)\/[A-Za-z0-9._-]+\//;
 var ALLOW_MARKER = "allow-published-string";
 var ALLOW_FILE = ".etymd-screen-allow";
 var LEGACY_ALLOW_FILE = ".artifact-check-allow";
-function compile(raw) {
+var LABELED_LINE = /^(pattern|reason|date|author)[ \t]+(.*)$/;
+function compileAllow(raw) {
+  const entries = [];
+  let current = null;
+  const close = () => {
+    if (current) entries.push(current);
+    current = null;
+  };
+  for (const rawLine of raw.split("\n")) {
+    const l = rawLine.trim();
+    if (!l || l.startsWith("#")) continue;
+    const labeled = LABELED_LINE.exec(l);
+    if (labeled) {
+      const [, label = "", value = ""] = labeled;
+      if (label === "pattern") {
+        close();
+        current = makeAllowEntry(value);
+      } else if (current) {
+        if (label === "reason") current.reason = value.trim();
+        else if (label === "date") current.date = value.trim();
+        else current.author = value.trim();
+      }
+    } else {
+      close();
+      current = makeAllowEntry(l);
+    }
+  }
+  close();
+  return entries;
+}
+function makeAllowEntry(patternStr) {
+  try {
+    return { pattern: new RegExp(patternStr, "i"), isSelfName: false };
+  } catch {
+    return {
+      pattern: new RegExp(patternStr.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "i"),
+      isSelfName: false
+    };
+  }
+}
+function compilePatterns(raw) {
   return raw.split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#")).map((l) => {
     try {
       return new RegExp(l, "i");
@@ -17,15 +57,56 @@ function compile(raw) {
     }
   });
 }
-function isSelfName(pattern, self) {
-  return pattern.source.toLowerCase() === self.toLowerCase();
+var META = ".[]*^$+?(){}|";
+function patternLiteral(source) {
+  let out = "";
+  let i = source.startsWith("\\b") ? 2 : 0;
+  for (; i < source.length; i++) {
+    const c = source.charAt(i);
+    if (c === "\\") {
+      const next = source[i + 1];
+      if (next === void 0) return null;
+      if (/[A-Za-z0-9]/.test(next)) return next === "b" && i + 2 === source.length ? out : null;
+      out += next;
+      i++;
+      continue;
+    }
+    if (META.includes(c)) return null;
+    out += c;
+  }
+  return out;
+}
+function isSelfName(pattern, selves) {
+  const literal = patternLiteral(pattern.source);
+  if (literal === null || literal === "") return false;
+  return selves.some((s) => s.toLowerCase() === literal.toLowerCase());
+}
+function bareName(raw) {
+  return raw.replace(/^@[^/]+\//, "").replace(/\.git$/, "");
+}
+async function selfIdentities(cwd) {
+  const names = /* @__PURE__ */ new Set();
+  const top = await git(cwd, ["rev-parse", "--show-toplevel"]);
+  names.add(path.basename(top || path.resolve(cwd)));
+  const pkg = await readText(path.join(top || cwd, "package.json"));
+  if (pkg) {
+    try {
+      const name = JSON.parse(pkg).name;
+      if (typeof name === "string" && name) names.add(bareName(name));
+    } catch {
+    }
+  }
+  const remote = await git(cwd, ["remote", "get-url", "origin"]);
+  if (remote) names.add(bareName(path.basename(remote.trim())));
+  names.delete("");
+  return [...names];
 }
 function screenText(text, file, patterns, allow = []) {
   const hits = [];
   const lines = text.split("\n");
   for (const [i, line] of lines.entries()) {
     if (line.includes(ALLOW_MARKER)) continue;
-    if (allow.some((re) => re.test(line))) continue;
+    if (allow.some((entry) => entry.pattern.test(line))) continue;
     for (const re of patterns) {
       if (re.test(line)) {
         hits.push({ file, line: i + 1, text: line.trim().slice(0, 160), reason: String(re) });
@@ -81,17 +162,42 @@ async function run(opts) {
     );
     return;
   }
-  const patterns = compile(rawPatterns);
+  const patterns = compilePatterns(rawPatterns);
   if (!patterns.length) {
     print(`  ${glyph.partial} ${theme.dim(`${patternPath} has no active patterns \u2014 skipping.`)}`);
     return;
   }
-  const allowRaw = await readText(path.join(opts.cwd, ALLOW_FILE)) ?? await readText(path.join(opts.cwd, LEGACY_ALLOW_FILE));
-  const allow = allowRaw ? compile(allowRaw) : [];
-  const self = path.basename(
-    await git(opts.cwd, ["rev-parse", "--show-toplevel"]) || path.resolve(opts.cwd)
-  );
-  const active = self ? patterns.filter((re) => !isSelfName(re, self)) : patterns;
+  const usingLegacy = !await pathExists(path.join(opts.cwd, ALLOW_FILE)) && await pathExists(path.join(opts.cwd, LEGACY_ALLOW_FILE));
+  const allowRaw = usingLegacy ? await readText(path.join(opts.cwd, LEGACY_ALLOW_FILE)) : await readText(path.join(opts.cwd, ALLOW_FILE));
+  const allowEntries = allowRaw ? compileAllow(allowRaw) : [];
+  const selves = await selfIdentities(opts.cwd);
+  const validatedEntries = allowEntries.filter((entry) => {
+    if (entry.isSelfName) return true;
+    if (isSelfName(entry.pattern, selves)) {
+      entry.isSelfName = true;
+      return true;
+    }
+    if (!entry.reason || !entry.date || !entry.author) {
+      print(
+        `  ${glyph.partial} ${theme.warn(`Missing provenance for exemption pattern`)} ${theme.dim(String(entry.pattern))}`
+      );
+      print(
+        `    ${theme.dim("Format: a `pattern` line, then `reason`, `date`, `author` lines \u2014 a bare pattern line is a self-name exemption")}`
+      );
+      return false;
+    }
+    return true;
+  });
+  const allow = validatedEntries;
+  const active = selves.length ? patterns.filter((re) => !isSelfName(re, selves)) : patterns;
+  if (usingLegacy) {
+    print(
+      `  ${glyph.partial} ${theme.warn(`Using legacy ${LEGACY_ALLOW_FILE} file \u2014 rename to ${ALLOW_FILE} and add provenance`)}`
+    );
+    print(
+      `    ${theme.dim("New format: a `pattern` line, then `reason`, `date`, `author` lines per entry")}`
+    );
+  }
   const hits = [];
   let scanned = 0;
   let skippedBinary = 0;
@@ -135,12 +241,15 @@ async function run(opts) {
       hits.push(...screenText(raw, rel, active, allow));
     }
   }
-  if (!hits.length) return;
   section(
     `Content screen ${theme.dim(
       `\xB7 ${opts.scope} \xB7 ${scanned} file(s)${skippedBinary ? ` \xB7 ${skippedBinary} binary skipped` : ""}`
     )}`
   );
+  if (!hits.length) {
+    print(`  ${glyph.ok} ${theme.dim("clean")}`);
+    return;
+  }
   for (const h of hits) {
     print(`  ${theme.warn(h.file)}${theme.dim(`:${h.line}`)}  ${theme.dim(`(${h.reason})`)}`);
     print(`    ${h.text}`);
@@ -155,4 +264,4 @@ async function run(opts) {
   if (!opts.advisory) process.exitCode = 1;
 }
 
-export { isSelfName, readScreenable, run, screenText };
+export { compileAllow, isSelfName, patternLiteral, readScreenable, run, screenText, selfIdentities };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "etymd",
-  "version": "0.9.1",
+  "version": "0.11.0",
   "description": "Keep your agent instructions true — verify AGENTS.md, CLAUDE.md, rules & skills against the actual repo, with drift caught over time and a regression ledger.",
   "keywords": [
     "cli",
@@ -69,12 +69,12 @@
     "yaml": "2.9.0"
   },
   "devDependencies": {
-    "@changesets/cli": "2.27.11",
+    "@changesets/cli": "2.31.1",
     "@types/node": "22.10.2",
     "prettier": "3.4.2",
-    "tsup": "8.3.5",
+    "tsup": "8.5.1",
     "typescript": "5.7.2",
-    "vitest": "2.1.8"
+    "vitest": "4.1.10"
   },
   "publishConfig": {
     "access": "public"

package/dist/audit-Y35XVD6Z.js

@@ -1,12 +0,0 @@
-#!/usr/bin/env node
-export { run } from './chunk-ULM25GWG.js';
-import './chunk-KGVRZ6WC.js';
-import './chunk-JSUYV26K.js';
-import './chunk-OAFYLBVG.js';
-import './chunk-D2RI3CCT.js';
-import './chunk-5BVKFJWM.js';
-import './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
-import './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
-import './chunk-IV3FYVTS.js';

package/dist/config-7WCVZCM6.js

@@ -1,4 +0,0 @@
-#!/usr/bin/env node
-export { CONFIG_FILE, DEFAULT_CONFIG, configPath, readConfig } from './chunk-D2RI3CCT.js';
-import './chunk-C7LBUFNU.js';
-import './chunk-IV3FYVTS.js';

package/dist/doctor-DXXQJ2L3.js

@@ -1,19 +0,0 @@
-#!/usr/bin/env node
-import { run } from './chunk-ULM25GWG.js';
-import './chunk-KGVRZ6WC.js';
-import './chunk-JSUYV26K.js';
-import './chunk-OAFYLBVG.js';
-import './chunk-D2RI3CCT.js';
-import './chunk-5BVKFJWM.js';
-import './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
-import './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
-import './chunk-IV3FYVTS.js';
-
-// src/commands/doctor.ts
-async function run2(opts) {
-  await run({ cwd: opts.cwd, json: opts.json, truth: true });
-}
-
-export { run2 as run };

package/dist/generate-IPY5QIR5.js

@@ -1,6 +0,0 @@
-#!/usr/bin/env node
-export { deriveFailOn, derivedCommands, planWorkflow, riskReachability } from './chunk-WENIJMVV.js';
-import './chunk-D2RI3CCT.js';
-import './chunk-C7LBUFNU.js';
-import './chunk-6DUDIVIC.js';
-import './chunk-IV3FYVTS.js';

package/dist/ledger-B2XGANTH.js

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-export { accept, dismiss, list } from './chunk-V2SOHPXF.js';
-import './chunk-OAFYLBVG.js';
-import './chunk-5BVKFJWM.js';
-import './chunk-IV3FYVTS.js';

package/dist/scan-KX522VKV.js

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-export { scanProject } from './chunk-UN7IAYM6.js';
-import './chunk-AQM4GYGN.js';
-import './chunk-6DUDIVIC.js';
-import './chunk-IV3FYVTS.js';