@esneiderbravo/speclaw 2.0.4 → 2.0.5

package/dist/modules/foundation/integrity.js

@@ -9,7 +9,9 @@ import { digestText, discoverIntegrityPaths, integrityPolicy, isRegenerableIdeMi
 import { loadScanSuppressions, scanPaths } from "./scan.js";
 /**
  * Verify digests and/or scan rule files. Missing lockfile is soft (ok=true)
- * with guidance to run `speclaw laws lock`.
+ * with guidance to run `speclaw laws lock`. Lock entries for regenerable IDE
+ * mirrors (files or the `.claude/rules/speclaw` symlink) that are missing or
+ * retargeted only warn; other managed symlinks fail strictly.
  */
 export function verifyIntegrity(opts) {
     const projectPath = opts.projectPath;
@@ -174,6 +176,11 @@ export function verifyIntegrity(opts) {
             catch {
                 actual = null;
             }
+            // Entries for regenerable mirror links come from locks written before
+            // they stopped being pinned; the link targets gitignored `ai-specs/` and
+            // is absent or dangling on clean clones, so it warns only and never
+            // fails CI.
+            const regenerable = isRegenerableIdeMirror(rel);
             if (actual === null) {
                 symlinks.push({
                     path: rel,
@@ -181,13 +188,16 @@ export function verifyIntegrity(opts) {
                     actualTarget: null,
                     status: "missing",
                 });
-                ok = false;
+                if (!regenerable)
+                    ok = false;
                 verifyFindings.push({
                     lawId: "integrity~symlink~1",
-                    severity: "error",
+                    severity: regenerable ? "warn" : "error",
                     engine: "integrity",
                     file: rel,
-                    message: `Managed symlink missing (expected → ${entry.target})`,
+                    message: regenerable
+                        ? "Regenerable IDE mirror symlink missing — run `speclaw update` or `speclaw laws lock` to drop the stale entry"
+                        : `Managed symlink missing (expected → ${entry.target})`,
                 });
             }
             else if (normalizeLink(actual) !== normalizeLink(entry.target)) {
@@ -197,13 +207,16 @@ export function verifyIntegrity(opts) {
                     actualTarget: actual,
                     status: "mismatch",
                 });
-                ok = false;
+                if (!regenerable)
+                    ok = false;
                 verifyFindings.push({
                     lawId: "integrity~symlink~1",
-                    severity: "error",
+                    severity: regenerable ? "warn" : "error",
                     engine: "integrity",
                     file: rel,
-                    message: `Managed symlink retargeted`,
+                    message: regenerable
+                        ? "Regenerable IDE mirror symlink retargeted — run `speclaw update` or `speclaw laws lock` to drop the stale entry"
+                        : `Managed symlink retargeted`,
                     detail: `expected ${entry.target} found ${actual}`,
                 });
             }

package/dist/modules/foundation/lock.js

@@ -106,13 +106,13 @@ export function buildLock(opts) {
 /** Integrity severity policy for a project-relative path. */
 export function integrityPolicy(relPath) {
     const n = relPath.split("\\").join("/");
-    // `.cursor/rules/` mirrors regenerable `ai-specs/` (gitignored) — lock/CI must
-    // not treat them as strict committed files; scan when present, never pin.
+    // Regenerable IDE mirrors of gitignored `ai-specs/` (`.cursor/rules/`, the
+    // `.claude/rules/speclaw` link) fall through to scan-only: lock/CI must not
+    // treat them as strict committed files; scan when present, never pin.
     if (n === "AGENTS.md" ||
         n === "CLAUDE.md" ||
         n.startsWith(".github/instructions/") ||
-        n === ".coderabbit.yaml" ||
-        n === ".claude/rules/speclaw") {
+        n === ".coderabbit.yaml") {
         return "strict";
     }
     if (n === "LAWS.md" || n === "docs/compass.md" || n.startsWith("docs/standards/")) {
@@ -120,10 +120,22 @@ export function integrityPolicy(relPath) {
     }
     return "scan-only";
 }
-/** True when a path is an IDE mirror of regenerable (typically gitignored) content. */
+/**
+ * True when a path is an IDE mirror of regenerable (typically gitignored) content.
+ *
+ * Covers the `.claude/rules/speclaw` symlink as well as mirror files: the link
+ * targets gitignored `ai-specs/rules`, so on a clean clone it is absent (when
+ * the project ignores it) or dangling, and must never be pinned in, or fail
+ * verify against, the lock.
+ *
+ * @param relPath - Project-relative path (file or symlink).
+ * @returns Whether lock/verify should treat the path as regenerable.
+ */
 export function isRegenerableIdeMirror(relPath) {
     const n = relPath.split("\\").join("/");
-    return (n.startsWith(".cursor/rules/") ||
+    return (n === ".claude/rules/speclaw" ||
+        n.startsWith(".claude/rules/speclaw/") ||
+        n.startsWith(".cursor/rules/") ||
         n.startsWith(".cursor/skills/") ||
         n.startsWith(".cursor/commands/") ||
         n.startsWith(".claude/skills/") ||
@@ -226,6 +238,8 @@ export function prepareIntegrityText(relPath, raw) {
  * Snapshot digests for discovered files with ownership policy.
  * For `.coderabbit.yaml`, digests only the speclaw delimited block when present.
  * For `docs/compass.md`, digests with the regenerable map body stripped.
+ * Regenerable IDE mirror symlinks ({@link isRegenerableIdeMirror}) are never
+ * pinned, so the lock is identical with or without the local link.
  */
 export function snapshotLockEntries(projectPath) {
     const { files: paths, symlinks } = discoverIntegrityPaths(projectPath);
@@ -239,8 +253,11 @@ export function snapshotLockEntries(projectPath) {
         files[rel] = { digest: digestText(raw), ownership };
     }
     const symlinkMap = {};
-    for (const s of symlinks)
+    for (const s of symlinks) {
+        if (isRegenerableIdeMirror(s.path))
+            continue;
         symlinkMap[s.path] = { target: s.target };
+    }
     return { files, symlinks: symlinkMap };
 }
 /** Extract a speclaw-marked region from coderabbit yaml if present. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@esneiderbravo/speclaw",
-  "version": "2.0.4",
+  "version": "2.0.5",
   "publishConfig": {
     "access": "public"
   },