@delorenj/pjangler 1.3.0 → 1.4.2

package/dist/prompt.js

@@ -0,0 +1,404 @@
+#!/usr/bin/env node
+
+// src/prompt.ts
+import { readFileSync as readFileSync2, realpathSync } from "node:fs";
+import { basename, join as join3 } from "node:path";
+import { pathToFileURL } from "node:url";
+
+// src/describe/activity.ts
+import { spawn, spawnSync } from "node:child_process";
+import { statSync } from "node:fs";
+import { join } from "node:path";
+var ACTIVE_WINDOW_SECONDS = 24 * 60 * 60;
+var MAX_DIRTY_STATS = 500;
+var GIT_TIMEOUT_MS = 5e3;
+var GIT_MAX_BUFFER = 16 * 1024 * 1024;
+function git(repo, args) {
+  const result = spawnSync("git", ["-C", repo, ...args], {
+    encoding: "utf8",
+    timeout: GIT_TIMEOUT_MS,
+    maxBuffer: GIT_MAX_BUFFER
+  });
+  if (result.status !== 0 || typeof result.stdout !== "string") return void 0;
+  return result.stdout;
+}
+function trimmed(raw) {
+  if (raw === void 0) return void 0;
+  const value = raw.trim();
+  return value === "" ? void 0 : value;
+}
+function gitLine(repo, args) {
+  return trimmed(git(repo, args));
+}
+function isGitRepo(repo) {
+  return gitLine(repo, ["rev-parse", "--is-inside-work-tree"]) === "true";
+}
+var MINUTE = 60;
+var HOUR = 60 * MINUTE;
+var DAY = 24 * HOUR;
+var WEEK = 7 * DAY;
+var MONTH = 30 * DAY;
+var YEAR = 365 * DAY;
+function plural(count, unit) {
+  return `${count} ${unit}${count === 1 ? "" : "s"} ago`;
+}
+function formatRelativeAge(deltaSeconds) {
+  const delta = Math.max(0, Math.floor(deltaSeconds));
+  if (delta < MINUTE) return "just now";
+  if (delta < HOUR) return plural(Math.floor(delta / MINUTE), "minute");
+  if (delta < DAY) return plural(Math.floor(delta / HOUR), "hour");
+  if (delta < WEEK) return plural(Math.floor(delta / DAY), "day");
+  if (delta < MONTH) return plural(Math.floor(delta / WEEK), "week");
+  if (delta < YEAR) return plural(Math.floor(delta / MONTH), "month");
+  return plural(Math.floor(delta / YEAR), "year");
+}
+function formatCompactAge(deltaSeconds) {
+  const delta = Math.max(0, Math.floor(deltaSeconds));
+  if (delta < MINUTE) return "now";
+  if (delta < HOUR) return `${Math.floor(delta / MINUTE)}m`;
+  if (delta < DAY) return `${Math.floor(delta / HOUR)}h`;
+  if (delta < WEEK) return `${Math.floor(delta / DAY)}d`;
+  if (delta < MONTH) return `${Math.floor(delta / WEEK)}w`;
+  if (delta < YEAR) return `${Math.floor(delta / MONTH)}mo`;
+  return `${Math.floor(delta / YEAR)}y`;
+}
+var REF_ARGS = [
+  "for-each-ref",
+  "--sort=-committerdate",
+  "--format=%(committerdate:unix)%09%(refname:short)",
+  "refs/heads",
+  "refs/remotes",
+  "refs/tags"
+];
+var WORKTREE_ARGS = ["worktree", "list", "--porcelain"];
+var STATUS_ARGS = ["status", "--porcelain", "-z", "--ignore-submodules=dirty"];
+function parseRefs(raw) {
+  if (raw === void 0) return { count: 0 };
+  const lines = raw.split("\n").filter((line) => line.trim() !== "");
+  if (!lines.length) return { count: 0 };
+  const [stamp, name] = lines[0].split("	");
+  const unix = Number(stamp);
+  if (!Number.isFinite(unix) || unix <= 0) return { count: lines.length };
+  return { source: { kind: "ref", label: name ?? "(unnamed ref)", unix }, count: lines.length };
+}
+function parseWorktrees(raw) {
+  if (raw === void 0) return [];
+  const entries = [];
+  let current = { detached: false };
+  const flush = () => {
+    if (current.path && current.sha) entries.push({ path: current.path, sha: current.sha, detached: current.detached });
+    current = { detached: false };
+  };
+  for (const line of raw.split("\n")) {
+    if (line.startsWith("worktree ")) {
+      flush();
+      current.path = line.slice("worktree ".length);
+    } else if (line.startsWith("HEAD ")) {
+      current.sha = line.slice("HEAD ".length).trim();
+    } else if (line === "detached") {
+      current.detached = true;
+    }
+  }
+  flush();
+  return entries;
+}
+function parseWorktreeStamps(raw, entries) {
+  if (raw === void 0) return void 0;
+  let best;
+  for (const line of raw.split("\n")) {
+    const [stamp, sha] = line.trim().split(" ");
+    const unix = Number(stamp);
+    if (!Number.isFinite(unix) || unix <= 0 || !sha) continue;
+    if (best && unix <= best.unix) continue;
+    const owner = entries.find((entry) => entry.sha === sha);
+    const name = owner ? basenameOf(owner.path) : sha.slice(0, 7);
+    best = { kind: "worktree", label: owner?.detached ? `${name} (detached)` : name, unix };
+  }
+  return best;
+}
+function parseStatusPaths(raw) {
+  if (raw === void 0) return [];
+  const parts = raw.split("\0").filter((part) => part !== "");
+  const paths = [];
+  for (let index = 0; index < parts.length; index++) {
+    const entry = parts[index];
+    if (entry.length < 4 || entry[2] !== " ") continue;
+    paths.push(entry.slice(3));
+    if (entry[0] === "R" || entry[0] === "C") index += 1;
+  }
+  return paths;
+}
+function basenameOf(path) {
+  const parts = path.split("/").filter(Boolean);
+  return parts[parts.length - 1] ?? path;
+}
+function uncommittedSource(repo, paths) {
+  if (!paths.length) return void 0;
+  let newest = 0;
+  for (const path of paths.slice(0, MAX_DIRTY_STATS)) {
+    try {
+      const mtime = Math.floor(statSync(join(repo, path)).mtimeMs / 1e3);
+      if (mtime > newest) newest = mtime;
+    } catch {
+    }
+  }
+  if (newest <= 0) return void 0;
+  const label = paths.length === 1 ? "1 uncommitted file" : `${paths.length} uncommitted files`;
+  return { kind: "uncommitted", label, unix: newest };
+}
+var NO_ACTIVITY = {
+  updated: null,
+  updatedUnix: null,
+  relative: "never",
+  compact: "\u2014",
+  active: false,
+  source: null,
+  scanned: { refs: 0, worktrees: 0, dirtyFiles: 0 }
+};
+function emptyActivity() {
+  return { ...NO_ACTIVITY, scanned: { refs: 0, worktrees: 0, dirtyFiles: 0 } };
+}
+function assembleActivity(candidates, scanned, now) {
+  let winner = null;
+  for (const candidate of candidates) {
+    if (!candidate) continue;
+    if (!winner || candidate.unix >= winner.unix) winner = candidate;
+  }
+  if (!winner) return { ...NO_ACTIVITY, scanned };
+  const nowUnix = Math.floor((now?.getTime() ?? Date.now()) / 1e3);
+  const delta = nowUnix - winner.unix;
+  return {
+    updated: new Date(winner.unix * 1e3).toISOString(),
+    updatedUnix: winner.unix,
+    relative: formatRelativeAge(delta),
+    compact: formatCompactAge(delta),
+    active: delta < ACTIVE_WINDOW_SECONDS,
+    source: winner,
+    scanned
+  };
+}
+function computeRepoActivity(repo, options = {}) {
+  if (!isGitRepo(repo)) return emptyActivity();
+  const refs = parseRefs(git(repo, REF_ARGS));
+  const worktrees = parseWorktrees(git(repo, WORKTREE_ARGS));
+  const shas = [...new Set(worktrees.map((entry) => entry.sha))];
+  const worktreeSource = shas.length ? parseWorktreeStamps(git(repo, ["show", "-s", "--format=%ct %H", ...shas]), worktrees) : void 0;
+  const paths = parseStatusPaths(git(repo, STATUS_ARGS));
+  return assembleActivity(
+    [refs.source, worktreeSource, uncommittedSource(repo, paths)],
+    { refs: refs.count, worktrees: worktrees.length, dirtyFiles: paths.length },
+    options.now
+  );
+}
+
+// src/project/boardUrl.ts
+import { existsSync, readFileSync, statSync as statSync2 } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join as join2, resolve } from "node:path";
+var DEFAULT_PLANE_BASE = "https://plane.delo.sh";
+var DEFAULT_PLANE_WORKSPACE = "33god";
+function resolveTemplateConfigPath(env = process.env, home = homedir()) {
+  const fromEnv = env.HERMES_TEMPLATE_CONFIG;
+  if (fromEnv && fromEnv.trim()) return fromEnv.trim();
+  const xdg = env.XDG_CONFIG_HOME?.trim();
+  const base = xdg && xdg.length ? xdg : join2(home, ".config");
+  return join2(base, "hermes-agent-template", "config.toml");
+}
+function readTomlScalar(text, section, key) {
+  let inSection = false;
+  for (const raw of text.split("\n")) {
+    const line = raw.trim();
+    if (!line || line.startsWith("#")) continue;
+    if (line.startsWith("[")) {
+      inSection = line === `[${section}]`;
+      continue;
+    }
+    if (!inSection) continue;
+    const eq = line.indexOf("=");
+    if (eq === -1) continue;
+    if (line.slice(0, eq).trim() !== key) continue;
+    const value = line.slice(eq + 1).trim();
+    const quoted = /^"([^"]*)"|^'([^']*)'/.exec(value);
+    if (quoted) return quoted[1] ?? quoted[2];
+    const bare = (value.split("#")[0] ?? "").trim();
+    return bare || void 0;
+  }
+  return void 0;
+}
+function readTemplateConfig(env, home) {
+  try {
+    const path = resolveTemplateConfigPath(env, home);
+    return existsSync(path) ? readFileSync(path, "utf8") : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function planeBase(env = process.env, home = homedir()) {
+  const fromEnv = env.PLANE_BASE?.trim();
+  if (fromEnv) return fromEnv.replace(/\/+$/, "");
+  const config = readTemplateConfig(env, home);
+  const fromConfig = config ? readTomlScalar(config, "plane", "base")?.trim() : void 0;
+  if (fromConfig) return fromConfig.replace(/\/+$/, "");
+  return DEFAULT_PLANE_BASE;
+}
+function planeWorkspace(provider, env, home) {
+  const fromManifest = provider.workspace?.trim();
+  if (fromManifest) return fromManifest;
+  const config = readTemplateConfig(env, home);
+  const fromConfig = config ? readTomlScalar(config, "plane", "workspace")?.trim() : void 0;
+  return fromConfig || DEFAULT_PLANE_WORKSPACE;
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function extractTicketRef(branch, identifier) {
+  if (!branch || !identifier) return void 0;
+  const ident = identifier.trim();
+  if (!ident) return void 0;
+  const match = new RegExp(`\\b${escapeRegExp(ident)}-(\\d+)\\b`, "i").exec(branch);
+  return match ? `${ident.toUpperCase()}-${match[1]}` : void 0;
+}
+function normalizeTicketRef(input, identifier) {
+  const value = input?.trim();
+  if (!value) return void 0;
+  if (/^\d+$/.test(value)) {
+    const ident = identifier?.trim();
+    return ident ? `${ident.toUpperCase()}-${value}` : void 0;
+  }
+  const qualified = /^([A-Za-z][A-Za-z0-9]*)-(\d+)$/.exec(value);
+  if (!qualified) return void 0;
+  return `${qualified[1].toUpperCase()}-${qualified[2]}`;
+}
+function resolveTicketRef(provider, options) {
+  return normalizeTicketRef(options.ref, provider.identifier) ?? extractTicketRef(options.branch, provider.identifier);
+}
+function boardUrl(provider, options = {}) {
+  if (!provider) return void 0;
+  const env = options.env ?? process.env;
+  const home = options.home ?? homedir();
+  const type = (provider.type || "plane").trim().toLowerCase();
+  const boardId = provider.board_id?.trim();
+  if (!boardId) return void 0;
+  if (type === "trello") {
+    return `https://trello.com/b/${boardId}`;
+  }
+  if (type !== "plane") return void 0;
+  const workspace = planeWorkspace(provider, env, home);
+  if (!workspace) return void 0;
+  const base = planeBase(env, home);
+  const ref = resolveTicketRef(provider, options);
+  return ref ? `${base}/${workspace}/browse/${ref}` : `${base}/${workspace}/projects/${boardId}/issues`;
+}
+function findProjectRoot(from) {
+  let dir = resolve(from);
+  for (; ; ) {
+    if (existsSync(join2(dir, ".project.json"))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+}
+function readTicketProvider(root) {
+  try {
+    const manifest = JSON.parse(readFileSync(join2(root, ".project.json"), "utf8"));
+    const provider = manifest.ticket_provider;
+    if (!provider || typeof provider !== "object") return void 0;
+    return provider;
+  } catch {
+    return void 0;
+  }
+}
+function currentBranch(from) {
+  try {
+    let dir = resolve(from);
+    for (; ; ) {
+      const dotgit = join2(dir, ".git");
+      if (existsSync(dotgit)) {
+        let gitDir = dotgit;
+        if (statSync2(dotgit).isFile()) {
+          const pointer = /^gitdir:\s*(.+)$/m.exec(readFileSync(dotgit, "utf8"));
+          if (!pointer) return void 0;
+          const target = pointer[1].trim();
+          gitDir = isAbsolute(target) ? target : resolve(dir, target);
+        }
+        const head = readFileSync(join2(gitDir, "HEAD"), "utf8").trim();
+        const ref = /^ref:\s*refs\/heads\/(.+)$/.exec(head);
+        return ref ? ref[1].trim() : void 0;
+      }
+      const parent = dirname(dir);
+      if (parent === dir) return void 0;
+      dir = parent;
+    }
+  } catch {
+    return void 0;
+  }
+}
+function resolveBoardUrl(cwd, ref, env = process.env) {
+  const root = findProjectRoot(cwd);
+  if (!root) return void 0;
+  const provider = readTicketProvider(root);
+  if (!provider) return void 0;
+  return boardUrl(provider, { ref, branch: currentBranch(root), env });
+}
+
+// src/prompt.ts
+function readPromptFacts(root, now) {
+  let slug = basename(root);
+  let identifier;
+  try {
+    const manifest = JSON.parse(readFileSync2(join3(root, ".project.json"), "utf8"));
+    if (typeof manifest.project_slug === "string" && manifest.project_slug) slug = manifest.project_slug;
+    const provider = manifest.ticket_provider;
+    if (provider && typeof provider.identifier === "string" && provider.identifier) identifier = provider.identifier;
+  } catch {
+  }
+  const activity = computeRepoActivity(root, { now });
+  return {
+    root,
+    slug,
+    identifier,
+    age: activity.updatedUnix ? activity.compact : void 0,
+    active: activity.active
+  };
+}
+function formatPromptLine(facts) {
+  const parts = [facts.slug];
+  if (facts.identifier) parts.push(`(${facts.identifier})`);
+  const head = parts.join(" ");
+  return facts.age ? `${head} \xB7 ${facts.age}` : head;
+}
+function promptLine(cwd, now) {
+  const root = findProjectRoot(cwd);
+  if (!root) return void 0;
+  return formatPromptLine(readPromptFacts(root, now));
+}
+function main() {
+  try {
+    const args = process.argv.slice(2);
+    if (args[0] === "--url") {
+      const url = resolveBoardUrl(process.cwd(), args[1]);
+      if (url) process.stdout.write(`${url}
+`);
+      else process.exitCode = 1;
+      return;
+    }
+    const line = promptLine(process.cwd());
+    if (line) process.stdout.write(line);
+  } catch {
+  }
+}
+function isMainModule() {
+  if (!process.argv[1]) return false;
+  try {
+    return import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href;
+  } catch {
+    return false;
+  }
+}
+if (isMainModule()) main();
+export {
+  findProjectRoot,
+  formatPromptLine,
+  promptLine,
+  readPromptFacts
+};

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "@delorenj/pjangler",
-  "version": "1.3.0",
+  "version": "1.4.2",
   "description": "Project subsystem bootstrapper CLI",
   "type": "module",
   "main": "dist/index.js",
   "bin": {
     "pjangler": "dist/index.js",
     "pj": "dist/index.js",
-    "pjangler-mcp": "dist/mcp-server.js"
+    "pjangler-mcp": "dist/mcp-server.js",
+    "pjangler-prompt": "dist/prompt.js"
   },
   "files": [
     "dist",
@@ -22,7 +23,7 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "esbuild src/index.ts src/mcp-server.ts --bundle --packages=external --platform=node --format=esm --outdir=dist",
+    "build": "esbuild src/index.ts src/mcp-server.ts src/prompt.ts --bundle --packages=external --platform=node --format=esm --outdir=dist && node scripts/export-project-notebook-skill.mjs",
     "check:audit:prod": "npm audit --omit=dev",
     "check:lock": "node scripts/check-package-lock-parity.mjs",
     "check:submodules": "node scripts/check-submodule-contract.mjs",
@@ -31,11 +32,13 @@
     "mcp": "node dist/mcp-server.js",
     "typecheck": "tsc --noEmit",
     "test:bmad-installer-contract": "node tests/bmad-installer-contract-regressions.mjs",
-    "test": "npm run check:lock && npm run check:submodules && npm run check:tracked-secrets && node tests/portable-test-paths-regressions.mjs && node tests/release-regressions.mjs && node tests/submodule-contract-regressions.mjs && node tests/secret-publication-gate-regressions.mjs && node tests/bmad-version-surface-regressions.mjs && node tests/bmad-transaction-regressions.mjs && node tests/parity-migrate-regressions.mjs && node tests/pjan-57-lifecycle-recipes-regressions.mjs && node tests/pjan-57-dogfood-regressions.mjs && node tests/generated-project-lifecycle-regressions.mjs && node tests/pack-flatten-regressions.mjs && node tests/pack-flatten-cross-engine-regressions.mjs && node tests/registry-cache-parity-regressions.mjs && node tests/registry-root-ladder-regressions.mjs && node tests/pjan-23-regressions.mjs && node tests/pjan-24-regressions.mjs && node tests/pjan-28-regressions.mjs && node tests/pjan-30-regressions.mjs && node tests/pjan-31a-regressions.mjs && node tests/pjan-36-regressions.mjs && node tests/pjan-43-regressions.mjs && node tests/pjan-48-regressions.mjs && node tests/pjan-49-regressions.mjs && node tests/pjan-50-regressions.mjs && node tests/skillex-init-regressions.mjs && node tests/fleet-shared-bloodbank-regressions.mjs && node tests/mcp-catalog-regressions.mjs && node tests/mcp-server-regressions.mjs && node tests/project-registry-regressions.mjs && node tests/pg-registry-regressions.mjs && node tests/momo-lifecycle-plane-regressions.mjs",
+    "test:pjan-77": "node tests/pjan-77-notebook-domain-regressions.mjs && node tests/pjan-77-notebook-adapter-contract.mjs && node tests/pjan-77-notebook-lifecycle-regressions.mjs && node tests/pjan-77-notebook-cli-contract.mjs && node tests/pjan-77-notebook-hooks-capture.mjs && node tests/pjan-77-notebook-security-isolation.mjs && node tests/pjan-77-notebook-release-gates.mjs",
+    "test": "npm run check:lock && node tests/package-lock-parity-regressions.mjs && npm run check:submodules && npm run check:tracked-secrets && node tests/portable-test-paths-regressions.mjs && node tests/release-regressions.mjs && node tests/submodule-contract-regressions.mjs && node tests/secret-publication-gate-regressions.mjs && node tests/bmad-version-surface-regressions.mjs && node tests/bmad-transaction-regressions.mjs && node tests/parity-migrate-regressions.mjs && node tests/hermes-profile-inheritance-regressions.mjs && node tests/pjan-57-lifecycle-recipes-regressions.mjs && node tests/pjan-57-dogfood-regressions.mjs && node tests/generated-project-lifecycle-regressions.mjs && node tests/pack-flatten-regressions.mjs && node tests/pack-flatten-cross-engine-regressions.mjs && node tests/registry-cache-parity-regressions.mjs && node tests/registry-root-ladder-regressions.mjs && node tests/pjan-23-regressions.mjs && node tests/pjan-24-regressions.mjs && node tests/pjan-28-regressions.mjs && node tests/pjan-30-regressions.mjs && node tests/pjan-31a-regressions.mjs && node tests/pjan-36-regressions.mjs && node tests/pjan-43-regressions.mjs && node tests/pjan-48-regressions.mjs && node tests/pjan-49-regressions.mjs && node tests/pjan-50-regressions.mjs && node tests/pjan-65-regressions.mjs && node tests/pjan-67-lifecycle-preflight-regressions.mjs && node tests/pjan-67-regressions.mjs && node tests/pjan-67-trusted-lifecycle-regressions.mjs && node tests/pjan-71-regressions.mjs && node tests/pjan-72-regressions.mjs && node tests/pjan-75-regressions.mjs && node tests/pjan-76-regressions.mjs && node tests/skillex-init-regressions.mjs && node tests/pjan-84-global-scope-regressions.mjs && node tests/pjan-84-registry-flag-regressions.mjs && node tests/pjan-84-finding-scope-regressions.mjs && node tests/pjan-84-orphan-adoption-regressions.mjs && node tests/fleet-shared-bloodbank-regressions.mjs && node tests/mcp-catalog-regressions.mjs && node tests/mcp-server-regressions.mjs && node tests/project-registry-regressions.mjs && node tests/pg-registry-regressions.mjs && node tests/momo-lifecycle-plane-regressions.mjs && npm run test:pjan-77",
     "migrate:up": "node-pg-migrate --migrations-dir migrations up",
     "migrate:down": "node-pg-migrate --migrations-dir migrations down",
     "migrate:create": "node-pg-migrate --migrations-dir migrations create",
-    "prepublishOnly": "npm run check:lock && npm run check:submodules -- --remote --recursive --archive --npm && npm run build && npm run check:tracked-secrets"
+    "prepublishOnly": "npm run check:lock && npm run check:submodules -- --remote --recursive --archive --npm && npm run build && npm run check:tracked-secrets",
+    "test:hermes-profile-inheritance": "node tests/hermes-profile-inheritance-regressions.mjs"
   },
   "keywords": [
     "cli",

package/templates/commonproject/copier.yml

@@ -114,13 +114,27 @@ _exclude:
 # into the caller's shared per-user CLI configs. Scaffolding must never mutate
 # global state as a side effect — the operator trusts/enters the repo themselves.
 _tasks:
-  - "cp ~/.config/git/ignore .gitignore 2>/dev/null || echo '# Add ignores here' > .gitignore"
+  # PJAN-82: seed the base ignore only when there is nothing to lose. `cp` over
+  # an existing .gitignore silently discarded whatever the repo already had,
+  # every time the template was re-rendered into a live project.
+  - "[ -s .gitignore ] || cp ~/.config/git/ignore .gitignore 2>/dev/null || [ -s .gitignore ] || echo '# Add ignores here' > .gitignore"
   # Ensure secrets + per-dev agent-hook/skill overrides are ignored (appended after the base ignore).
-  - "printf '\\n# Secrets + per-dev agent-hook/skill overrides (see .agents/local.example.json)\\n.env\\n.env.*\\n!.env.op\\n.agents/local.json\\n.lastagent\\n**/.claude/settings.local.json\\n\\n# PJAN-57: all six generated CLI configurations are durable project state.\\n!.claude/\\n!.claude/**\\n!.codex/\\n!.codex/**\\n!.gemini/\\n!.gemini/**\\n!.copilot/\\n!.copilot/**\\n!.opencode/\\n!.opencode/**\\n!.kimi-code/\\n!.kimi-code/**\\n' >> .gitignore"
-  - "ln -sf AGENTS.md CLAUDE.md"
-  - "ln -sf AGENTS.md GEMINI.md"
+  # Each CLI root's hand-owned config is durable project state; the skill
+  # projections inside it are not — bmad-method and skills:sync rewrite them
+  # on every run, so they are re-ignored after the un-ignore lines (last
+  # match wins). _bmad/_config/manifest.yaml pins the version that
+  # reproduces them exactly.
+  # PJAN-82: appended once (a re-render used to duplicate the whole block), and
+  # the skill patterns carry no trailing slash so a SYMLINKED projection is
+  # ignored too — .gemini/.copilot/.kimi-code get a symlink, not a directory.
+  - "grep -q '^# Generated CLI configurations are durable project state' .gitignore 2>/dev/null || printf '\\n# Secrets + per-dev agent-hook/skill overrides (see .agents/local.example.json)\\n.env\\n.env.*\\n!.env.op\\n.agents/local.json\\n.lastagent\\n**/.claude/settings.local.json\\n\\n# Generated CLI configurations are durable project state...\\n!.claude/\\n!.claude/**\\n!.codex/\\n!.codex/**\\n!.gemini/\\n!.gemini/**\\n!.copilot/\\n!.copilot/**\\n!.opencode/\\n!.opencode/**\\n!.kimi-code/\\n!.kimi-code/**\\n# ...but their skill projections are regenerated, so they stay out of the tree.\\n# No trailing slash: some CLIs get a real directory here and some a symlink.\\n/.agents/skills\\n.claude/skills\\n.codex/skills\\n.gemini/skills\\n.copilot/skills\\n.opencode/skills\\n.kimi-code/skills\\n' >> .gitignore"
+  # PJAN-82: use the managed script, which refuses to replace a REAL CLAUDE.md.
+  # `ln -sf` cannot distinguish a stale link it owns from a hand-written file it
+  # must not touch, so a re-render into a live project destroyed the file and
+  # reported success.
+  - "./.mise/scripts/link-agentfiles.sh \"$(pwd)\""
   # Materialize the declared Skillex packs' manifest + symlink topology
   # without copying pack content or disturbing project-specific skills.
-  - "python3 .mise/scripts/provision-packs.py"
+  - "python3 .mise/scripts/provision-packs.py --root \"$(pwd)\""
   # Stamp the repo's absolute path into .project.json (the SOT) post-render.
   - "python3 -c \"import json,os,pathlib; p=pathlib.Path('.project.json'); d=json.loads(p.read_text()); d['repo_path']=os.getcwd(); p.write_text(json.dumps(d,indent=2)+chr(10))\""

package/templates/commonproject/template/.mise/scripts/link-agentfiles.sh

@@ -1,9 +1,42 @@
 #!/bin/bash
+set -eu
 
-if [ -f AGENTS.md ]; then
-  ln -sf AGENTS.md CLAUDE.md
-  ln -sf AGENTS.md GEMINI.md
-  echo "✅ AI agent symlinks verified"
+# Symlink the per-CLI agent instruction files at AGENTS.md.
+#
+# A mise ENTER hook runs with cwd set to the directory the user cd'd into, NOT
+# to config_root — measured on mise 2026.8.10, and true even for a parent config
+# when the entered directory is a nested child. `mise run <task>` does run at
+# config_root, which is why the old cwd-relative version looked correct for
+# years: only the enter-hook path was wrong. So take the root explicitly, and
+# fall back to this script's own location — never to cwd.
+root="${1:-${MISE_CONFIG_ROOT:-}}"
+own_root=$(CDPATH= cd "$(dirname "$0")/../.." && pwd -P)
+if [ -z "$root" ]; then
+  root="$own_root"
 else
-  echo "No AGENTS.md file found. Can't symlink."
+  root=$(CDPATH= cd "$root" && pwd -P)
 fi
+if [ "$root" != "$own_root" ]; then
+  echo "link-agentfiles: refusing to act on $root; this script belongs to $own_root" >&2
+  echo "link-agentfiles: a nested repo must ship its own .mise/scripts copy" >&2
+  exit 1
+fi
+
+CDPATH= cd "$root"
+if [ ! -f AGENTS.md ]; then
+  echo "No AGENTS.md in $root. Nothing to symlink."
+  exit 0
+fi
+
+# `ln -sf` cannot tell a stale link it owns from a real file it must not touch:
+# -f means "unlink whatever is there". A hand-written CLAUDE.md was silently
+# replaced by a symlink, and the script printed a green checkmark while doing it.
+for name in CLAUDE.md GEMINI.md; do
+  if [ -e "$name" ] && [ ! -L "$name" ]; then
+    echo "link-agentfiles: refusing to replace the real file $root/$name with a symlink" >&2
+    echo "link-agentfiles: move its content into AGENTS.md, then delete $name" >&2
+    exit 1
+  fi
+  ln -sfn AGENTS.md "$name"
+done
+echo "✅ AGENTS.md links verified in $root"