@pieai/pro-gov 0.3.8 → 0.3.10

package/README.md

@@ -139,6 +139,22 @@ engineering work. The default PGS pattern is a Compound Gate: run
 skipped. Full CE workflows such as `ce-plan`, `ce-work`, and `lfg` remain
 explicit user choices.
 
+Engineering-runtime starters include cross-host Stop hooks for Codex,
+Claude Code, and Antigravity. Those hooks call `pro-gov host-hook` and require
+the final report to include either:
+
+```text
+Compound Gate: ran ce-compound -> <path>
+Compound Gate: skipped -> <reason>
+```
+
+Use `pro-gov doctor --strict-hooks` after syncing an engineering project to
+verify that the host configs are wired. This is a wiring check: it proves the
+project calls `pro-gov host-hook` for Codex, Claude Code, and Antigravity. The
+host behavior contract is covered by PGS package tests against recorded
+per-host Stop/SubagentStop fixtures. Open a fresh AI session after installing or
+changing hooks; old sessions may not reload host configuration.
+
 Ponytail can be installed as an optional complexity adviser. Keep its global mode
 `off`; test `lite` in one isolated task before considering a stronger mode.
 Ponytail must not remove requested scope, tests, safety, accessibility, or proof.

package/assets/docs/reference/adoption/adoption-playbook.md

@@ -6,7 +6,7 @@ status: stable
 canonical: true
 owner: human
 created: 2026-05-06
-last_reviewed: 2026-06-15
+last_reviewed: 2026-07-02
 domain: adoption
 tags:
   - adoption
@@ -92,8 +92,17 @@ Current package-based method:
 - copy `starter/lefthook.template.yml` to `lefthook.yml` and
   `starter/.github/workflows/docs-check.yml` to `.github/workflows/docs-check.yml`
   when the target project is ready for standard guardrails
+- for an `engineering-runtime` target, install the three host-hook starter files
+  or merge their Stop/SubagentStop entries into the target's existing host
+  config:
+  - `.codex/hooks.json`
+  - `.claude/settings.json`
+  - `.agents/hooks.json`
 - run `doc-gov doctor` after wiring guardrails to verify they are actually
   connected
+- run `pro-gov doctor --strict-hooks` after wiring host hooks to prove the
+  target has the expected host-hook configuration for Codex, Claude Code, and
+  Antigravity
 - treat the npm package as the CLI source and the local `docs/governance/`
   files as the project's checked-in governance contract
 
@@ -198,6 +207,16 @@ Use Compound Engineering by default only as the post-work Compound Gate:
 `ce-compound` captures reusable lessons when they exist; otherwise the agent
 reports a skip reason. Full CE workflows require an explicit user request.
 
+The host-hook gate is deliberately small. It does not make Compound Engineering
+the main workflow. It only blocks a final completion report that looks like
+finished engineering work but does not say whether the Compound Gate ran or was
+skipped:
+
+```text
+Compound Gate: ran ce-compound -> <path>
+Compound Gate: skipped -> <reason>
+```
+
 ### Doc-Only
 
 Add:
@@ -257,6 +276,7 @@ For the v0.9 structural migration, use
 Minimum:
 
 ```bash
+pnpm pro-gov doctor --strict-hooks
 pnpm doc-gov check
 pnpm doc-gov router-check
 pnpm doc-gov scan --check
@@ -266,6 +286,15 @@ pnpm doc-gov doctor
 git diff --check
 ```
 
+Use `pro-gov doctor --strict-hooks` for engineering-runtime projects. Doc-only
+projects may omit strict host hooks unless they intentionally adopt the
+engineering runtime profile.
+
+`pro-gov doctor --strict-hooks` is a wiring check, not a live host simulation.
+It proves the project has hook files that call `pro-gov host-hook`; PGS package
+tests prove the expected Stop/SubagentStop behavior for the supported host
+schemas. After installing or changing hooks, validate from a fresh AI session.
+
 Engineering projects should also run their local verification ladder.
 
 ## Example: Migrating A Runtime Product

package/assets/profiles/engineering-runtime/profile.md

@@ -39,3 +39,9 @@ project shape. `pro-gov init --apply` can install it into a fresh target, but
 refuses all writes when any destination already exists. `sync --check` compares
 shared core files while leaving project-local router, policy, and current-work
 content under the target project's ownership.
+
+Engineering-runtime starters also include Codex, Claude Code, and Antigravity
+Stop hooks that call `pro-gov host-hook`. Use `pro-gov doctor --strict-hooks`
+after sync to confirm the exit gate is wired. The hook enforces the Compound
+Gate final-report marker; it does not replace verification, tests, or
+`ce-compound` itself.

package/assets/starter/.agents/hooks.json

@@ -0,0 +1,26 @@
+{
+  "pgs-compound-gate": {
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "cd \"$(git rev-parse --show-toplevel)\" && if [ -x ./node_modules/.bin/pro-gov ]; then ./node_modules/.bin/pro-gov host-hook --host antigravity --event Stop; elif [ -f packages/pro-gov/src/cli.ts ] && command -v pnpm >/dev/null 2>&1; then pnpm --silent --filter @pieai/pro-gov dev host-hook --host antigravity --event Stop; else npx --no-install @pieai/pro-gov host-hook --host antigravity --event Stop; fi",
+            "timeout": 30
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "cd \"$(git rev-parse --show-toplevel)\" && if [ -x ./node_modules/.bin/pro-gov ]; then ./node_modules/.bin/pro-gov host-hook --host antigravity --event SubagentStop; elif [ -f packages/pro-gov/src/cli.ts ] && command -v pnpm >/dev/null 2>&1; then pnpm --silent --filter @pieai/pro-gov dev host-hook --host antigravity --event SubagentStop; else npx --no-install @pieai/pro-gov host-hook --host antigravity --event SubagentStop; fi",
+            "timeout": 30
+          }
+        ]
+      }
+    ]
+  }
+}

package/assets/starter/.claude/settings.json

@@ -0,0 +1,26 @@
+{
+  "hooks": {
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "cd \"${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel)}\" && if [ -x ./node_modules/.bin/pro-gov ]; then ./node_modules/.bin/pro-gov host-hook --host claude-code --event Stop; elif [ -f packages/pro-gov/src/cli.ts ] && command -v pnpm >/dev/null 2>&1; then pnpm --silent --filter @pieai/pro-gov dev host-hook --host claude-code --event Stop; else npx --no-install @pieai/pro-gov host-hook --host claude-code --event Stop; fi",
+            "timeout": 30
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "cd \"${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel)}\" && if [ -x ./node_modules/.bin/pro-gov ]; then ./node_modules/.bin/pro-gov host-hook --host claude-code --event SubagentStop; elif [ -f packages/pro-gov/src/cli.ts ] && command -v pnpm >/dev/null 2>&1; then pnpm --silent --filter @pieai/pro-gov dev host-hook --host claude-code --event SubagentStop; else npx --no-install @pieai/pro-gov host-hook --host claude-code --event SubagentStop; fi",
+            "timeout": 30
+          }
+        ]
+      }
+    ]
+  }
+}

package/assets/starter/.codex/hooks.json

@@ -0,0 +1,28 @@
+{
+  "hooks": {
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "cd \"$(git rev-parse --show-toplevel)\" && if [ -x ./node_modules/.bin/pro-gov ]; then ./node_modules/.bin/pro-gov host-hook --host codex --event Stop; elif [ -f packages/pro-gov/src/cli.ts ] && command -v pnpm >/dev/null 2>&1; then pnpm --silent --filter @pieai/pro-gov dev host-hook --host codex --event Stop; else npx --no-install @pieai/pro-gov host-hook --host codex --event Stop; fi",
+            "timeout": 30,
+            "statusMessage": "Checking PGS Compound Gate"
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "cd \"$(git rev-parse --show-toplevel)\" && if [ -x ./node_modules/.bin/pro-gov ]; then ./node_modules/.bin/pro-gov host-hook --host codex --event SubagentStop; elif [ -f packages/pro-gov/src/cli.ts ] && command -v pnpm >/dev/null 2>&1; then pnpm --silent --filter @pieai/pro-gov dev host-hook --host codex --event SubagentStop; else npx --no-install @pieai/pro-gov host-hook --host codex --event SubagentStop; fi",
+            "timeout": 30,
+            "statusMessage": "Checking PGS subagent Compound Gate"
+          }
+        ]
+      }
+    ]
+  }
+}

package/assets/starter/AGENTS.template.md

@@ -39,6 +39,7 @@
 - Point to the chosen agents-routing file from `docs/governance/agents-routing/`.
 - Engineering projects may use Superpowers, Directed Development, GStack, or other external workflows only inside the selected lane; do not copy upstream integration guides into the target project by default.
 - For engineering projects, Superpowers is the default engineering workflow. Compound Engineering is used by default only as the post-work Compound Gate through `ce-compound`; full CE workflows require an explicit user request.
+- Engineering projects should have PGS Stop hooks wired for Codex, Claude Code, and Antigravity. Before final reporting after completed engineering work, report `Compound Gate: ran ce-compound -> <path>` or `Compound Gate: skipped -> <reason>`.
 - Doc-only projects should say that Superpowers TDD and Directed Development are not enabled by default.
 - External workflow systems such as Superpowers or GStack run inside the lane selected by this router. They must not replace this project router.
 

package/dist/cli.js

@@ -14,7 +14,7 @@ var assetRoots = [
   "docs/reference/adoption"
 ];
 function listAssets() {
-  const root = existsSync(packagedAssetsRoot) ? packagedAssetsRoot : sourceRoot;
+  const root = existsSync(join(sourceRoot, "starter")) ? sourceRoot : packagedAssetsRoot;
   return assetRoots.flatMap((assetRoot) => {
     const absoluteRoot = join(root, assetRoot);
     if (!existsSync(absoluteRoot)) return [];
@@ -1542,7 +1542,7 @@ function printNpxUsage() {
 
 // src/commands/doctor.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync12 } from "node:fs";
+import { existsSync as existsSync12, readFileSync as readFileSync8 } from "node:fs";
 import { createRequire } from "node:module";
 import { dirname as dirname6, join as join12 } from "node:path";
 var REQUIRED_ASSETS = [
@@ -1554,9 +1554,11 @@ var REQUIRED_ASSETS = [
   "profiles/doc-only/profile.md"
 ];
 function runDoctor(_args) {
+  const strictHooks = _args.includes("--strict-hooks");
   const assets = listAssets();
   const assetPaths = new Set(assets.map((asset) => asset.path));
   const missing = REQUIRED_ASSETS.filter((assetPath) => !assetPaths.has(assetPath));
+  const hookIssues = strictHooks ? checkStrictHostHooks(process.cwd()) : [];
   console.log("pro-gov doctor");
   console.log(`assets: ${assets.length}`);
   if (missing.length > 0) {
@@ -1567,7 +1569,13 @@ function runDoctor(_args) {
     console.log("assets: required project-governance assets found");
   }
   console.log(checkDocGov());
-  return missing.length > 0 ? 1 : 0;
+  for (const issue of hookIssues) {
+    console.error(issue);
+  }
+  if (strictHooks && hookIssues.length === 0) {
+    console.log("host-hooks: PGS Compound Gate hooks wired");
+  }
+  return missing.length > 0 || hookIssues.length > 0 ? 1 : 0;
 }
 function checkDocGov() {
   const fromPath = spawnSync2("doc-gov", ["--help"], {
@@ -1600,9 +1608,276 @@ function resolveDocGovDependencyCli() {
     return null;
   }
 }
+function checkStrictHostHooks(root) {
+  if (!isEngineeringRuntimeProject(root)) {
+    return [];
+  }
+  const expected = [
+    { path: ".codex/hooks.json", host: "codex" },
+    { path: ".claude/settings.json", host: "claude-code" },
+    { path: ".agents/hooks.json", host: "antigravity" }
+  ];
+  const issues = [];
+  for (const entry of expected) {
+    const absolutePath = join12(root, entry.path);
+    if (!existsSync12(absolutePath)) {
+      issues.push(`host-hooks: missing ${entry.path}`);
+      continue;
+    }
+    const content = readFileSync8(absolutePath, "utf8");
+    if (!content.includes("pro-gov host-hook") || !content.includes(`--host ${entry.host}`)) {
+      issues.push(`host-hooks: ${entry.path} does not call pro-gov host-hook for ${entry.host}`);
+    }
+  }
+  return issues;
+}
+function isEngineeringRuntimeProject(root) {
+  return existsSync12(join12(root, "docs/governance/agents-routing/engineering-runtime-v0.9.md"));
+}
+
+// src/commands/host-hook.ts
+import { readFileSync as readFileSync10 } from "node:fs";
+
+// src/host-hooks/host-hook-runner.ts
+import { closeSync, openSync, readFileSync as readFileSync9, readSync, statSync as statSync3 } from "node:fs";
+var gateMarkerPattern = /Compound Gate:\s*(ran ce-compound|skipped)\s*->/i;
+var completionSignalPatterns = [
+  /\b(done|completed|implemented|fixed|verified|validated|shipped|pushed|committed)\b/i,
+  /\b(tests?|typecheck|build|lint|doctor|pack)\b.*\b(pass|passed|green|succeed|succeeded|ok)\b/i,
+  /\b(changed|updated|modified|created|deleted|refactored)\b.*\b(files?|docs?|tests?|hooks?|configs?)\b/i,
+  /完成|已完成|修好了|实现了|验证通过|测试通过|已经提交|已经推送|提交并推送/
+];
+var compoundGateInstruction = [
+  "Before final reporting, pass the PGS Compound Gate.",
+  "If this completed work produced reusable learning, run compound-engineering:ce-compound and report:",
+  "Compound Gate: ran ce-compound -> <path>",
+  "If there is no reusable learning, report:",
+  "Compound Gate: skipped -> <reason>"
+].join("\n");
+var maxTranscriptBytes = 2 * 1024 * 1024;
+function evaluateHostHook(request) {
+  if (request.event !== "Stop" && request.event !== "SubagentStop") {
+    return { action: "allow" };
+  }
+  const input = normalizeStopInput(request.input);
+  if (input.stopHookActive) {
+    return { action: "allow" };
+  }
+  if (!input.lastAssistantMessage) {
+    return { action: "allow" };
+  }
+  if (gateMarkerPattern.test(input.lastAssistantMessage)) {
+    return { action: "allow" };
+  }
+  if (!looksLikeCompletedEngineeringWork(input.lastAssistantMessage)) {
+    return { action: "allow" };
+  }
+  return { action: "continue", reason: compoundGateInstruction };
+}
+function formatHostHookOutput(host, event, decision) {
+  if (decision.action === "allow") {
+    return {};
+  }
+  if (host === "codex") {
+    if (event === "Stop" || event === "SubagentStop") {
+      return { decision: "block", reason: decision.reason };
+    }
+    if (decision.action === "block") {
+      return {
+        hookSpecificOutput: {
+          hookEventName: event,
+          permissionDecision: "deny",
+          permissionDecisionReason: decision.reason
+        },
+        systemMessage: decision.reason
+      };
+    }
+    return { systemMessage: decision.reason };
+  }
+  if (host === "claude" || host === "claude-code") {
+    if (event === "Stop" || event === "SubagentStop") {
+      return { decision: "block", reason: decision.reason };
+    }
+    if (decision.action === "block") {
+      return {
+        hookSpecificOutput: {
+          hookEventName: event,
+          permissionDecision: "deny",
+          permissionDecisionReason: decision.reason
+        }
+      };
+    }
+    return { systemMessage: decision.reason };
+  }
+  if (host === "antigravity") {
+    if (event === "Stop" || event === "SubagentStop") {
+      return { decision: "continue", reason: decision.reason };
+    }
+    if (decision.action === "block") {
+      return { decision: "deny", reason: decision.reason };
+    }
+    return { decision: "allow", reason: decision.reason };
+  }
+  return {};
+}
+function normalizeStopInput(input) {
+  if (!isRecord(input)) {
+    return { lastAssistantMessage: void 0, stopHookActive: false };
+  }
+  return {
+    lastAssistantMessage: findString(input, ["last_assistant_message", "lastAssistantMessage", "message", "text"]) ?? findLastAssistantMessageFromTranscript(findString(input, ["agent_transcript_path", "agentTranscriptPath"])) ?? findLastAssistantMessageFromTranscript(findString(input, ["transcript_path", "transcriptPath"])),
+    stopHookActive: findBoolean(input, ["stop_hook_active", "stopHookActive"]) ?? false
+  };
+}
+function looksLikeCompletedEngineeringWork(message) {
+  return completionSignalPatterns.some((pattern) => pattern.test(message));
+}
+function findString(input, keys) {
+  for (const key of keys) {
+    const value = input[key];
+    if (typeof value === "string" && value.trim().length > 0) {
+      return value;
+    }
+  }
+  return void 0;
+}
+function findBoolean(input, keys) {
+  for (const key of keys) {
+    const value = input[key];
+    if (typeof value === "boolean") {
+      return value;
+    }
+  }
+  return void 0;
+}
+function findLastAssistantMessageFromTranscript(path) {
+  if (!path || path.startsWith("~/")) {
+    return void 0;
+  }
+  let content;
+  try {
+    content = readTranscriptTail(path);
+  } catch {
+    return void 0;
+  }
+  const lines = content.split(/\r?\n/);
+  for (let index = lines.length - 1; index >= 0; index -= 1) {
+    const line = lines[index]?.trim();
+    if (!line) {
+      continue;
+    }
+    let record;
+    try {
+      record = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    const message = extractAssistantText(record);
+    if (message) {
+      return message;
+    }
+  }
+  return void 0;
+}
+function readTranscriptTail(path) {
+  const size = statSync3(path).size;
+  if (size <= maxTranscriptBytes) {
+    return readFileSync9(path, "utf8");
+  }
+  const fd = openSync(path, "r");
+  try {
+    const buffer = Buffer.allocUnsafe(maxTranscriptBytes);
+    readSync(fd, buffer, 0, maxTranscriptBytes, size - maxTranscriptBytes);
+    return buffer.toString("utf8");
+  } finally {
+    closeSync(fd);
+  }
+}
+function extractAssistantText(value) {
+  if (!isRecord(value)) {
+    return void 0;
+  }
+  const nested = value.message;
+  const role = findString(value, ["role", "type"]);
+  if (isRecord(nested)) {
+    const nestedRole = findString(nested, ["role", "type"]);
+    if (nestedRole === "assistant") {
+      return extractTextContent(nested.content);
+    }
+  }
+  if (role === "assistant") {
+    return extractTextContent(value.content) ?? extractTextContent(value.text);
+  }
+  return void 0;
+}
+function extractTextContent(value) {
+  if (typeof value === "string" && value.trim().length > 0) {
+    return value;
+  }
+  if (!Array.isArray(value)) {
+    return void 0;
+  }
+  const parts = [];
+  for (const item of value) {
+    if (typeof item === "string") {
+      parts.push(item);
+      continue;
+    }
+    if (isRecord(item) && typeof item.text === "string") {
+      parts.push(item.text);
+    }
+  }
+  const text = parts.join("\n").trim();
+  return text.length > 0 ? text : void 0;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+// src/host-hooks/types.ts
+function isHostHookHost(value) {
+  return value === "antigravity" || value === "claude" || value === "claude-code" || value === "codex";
+}
+function isHostHookEvent(value) {
+  return value === "PostToolUse" || value === "PreToolUse" || value === "Stop" || value === "SubagentStop" || value === "UserPromptSubmit";
+}
+
+// src/commands/host-hook.ts
+function runHostHook(args) {
+  const host = readOption(args, "--host");
+  const event = readOption(args, "--event");
+  if (!isHostHookHost(host)) {
+    console.error("Expected --host <codex|claude-code|antigravity>");
+    return 1;
+  }
+  if (!isHostHookEvent(event)) {
+    console.error("Expected --event <Stop|SubagentStop|PreToolUse|PostToolUse|UserPromptSubmit>");
+    return 1;
+  }
+  const input = readStdinJson();
+  const decision = evaluateHostHook({ host, event, input });
+  const output = formatHostHookOutput(host, event, decision);
+  console.log(`${JSON.stringify(output)}
+`);
+  return 0;
+}
+function readOption(args, name) {
+  const index = args.indexOf(name);
+  if (index < 0) return void 0;
+  return args[index + 1];
+}
+function readStdinJson() {
+  const raw = readFileSync10(0, "utf8").trim();
+  if (!raw) return {};
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return {};
+  }
+}
 
 // src/commands/init.ts
-import { existsSync as existsSync13, mkdirSync as mkdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync3 } from "node:fs";
 import { basename as basename3, dirname as dirname7, join as join13 } from "node:path";
 
 // src/commands/shared.ts
@@ -1611,6 +1886,7 @@ function planStarterFiles(profile) {
     const targetPath = starterTargetPath(asset.path);
     if (!targetPath) return [];
     if (profile && isOtherProfileRouting(targetPath, profile)) return [];
+    if (profile && isEngineeringOnlyGuardrail(targetPath) && profile !== "engineering-runtime") return [];
     return [
       {
         sourcePath: asset.path,
@@ -1633,6 +1909,9 @@ function classifyOwnership(targetPath) {
 function isOtherProfileRouting(targetPath, profile) {
   return targetPath.startsWith("docs/governance/agents-routing/") && targetPath !== `docs/governance/agents-routing/${profile}-v0.9.md`;
 }
+function isEngineeringOnlyGuardrail(targetPath) {
+  return targetPath === ".codex/hooks.json" || targetPath === ".claude/settings.json" || targetPath === ".agents/hooks.json";
+}
 function starterTargetPath(sourcePath) {
   if (sourcePath === "starter/AGENTS.template.md") return "AGENTS.md";
   if (sourcePath === "starter/CLAUDE.template.md") return "CLAUDE.md";
@@ -1681,7 +1960,7 @@ function applyStarterFiles(files, profile) {
   for (const file of files) {
     const targetPath = join13(root, file.targetPath);
     mkdirSync4(dirname7(targetPath), { recursive: true });
-    const source = readFileSync8(file.absoluteSourcePath);
+    const source = readFileSync11(file.absoluteSourcePath);
     const content = file.targetPath === "AGENTS.md" ? renderAgentsTemplate(source.toString("utf8"), basename3(root), profile) : source;
     writeFileSync3(targetPath, content);
   }
@@ -1715,7 +1994,7 @@ import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync5 } from "node:f
 import { dirname as dirname9 } from "node:path";
 
 // src/lens/audit.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync5, readFileSync as readFileSync9, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync5, readFileSync as readFileSync12, writeFileSync as writeFileSync4 } from "node:fs";
 import { basename as basename4, dirname as dirname8, join as join14 } from "node:path";
 var REQUIRED_ARTIFACTS = [
   "manifest.md",
@@ -1763,7 +2042,7 @@ function checkProjectLensAuditPackage(auditDir, options = {}) {
   }
   let contract;
   try {
-    contract = JSON.parse(readFileSync9(contractPath, "utf8"));
+    contract = JSON.parse(readFileSync12(contractPath, "utf8"));
   } catch (error) {
     return {
       ok: false,
@@ -1801,7 +2080,7 @@ function checkProjectLensAuditPackage(auditDir, options = {}) {
       issues.push({ type: "missing-required-artifact", path: artifactPath });
       continue;
     }
-    const content = readFileSync9(absolutePath, "utf8");
+    const content = readFileSync12(absolutePath, "utf8");
     if (isPendingArtifact(content)) {
       issues.push({ type: "artifact-not-complete", path: artifactPath });
     } else if (hasTemplateBody(content)) {
@@ -2061,7 +2340,7 @@ function bulletList(values) {
 
 // src/lens/scan.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
-import { existsSync as existsSync15, readdirSync as readdirSync6, readFileSync as readFileSync10, statSync as statSync3 } from "node:fs";
+import { existsSync as existsSync15, readdirSync as readdirSync6, readFileSync as readFileSync13, statSync as statSync4 } from "node:fs";
 import { join as join15, relative as relative5 } from "node:path";
 var ignoredDirectories = /* @__PURE__ */ new Set([
   ".git",
@@ -2089,14 +2368,14 @@ function scanProjectLensTarget(targetDir, options = {}) {
       governanceFiles: markdownFiles.filter((file) => file.startsWith("docs/governance/") || file.startsWith("docs/policy/")).sort()
     },
     git: readGitState(targetDir),
-    largeFiles: files.map((file) => ({ path: file, bytes: statSync3(join15(targetDir, file)).size })).filter((file) => file.bytes >= largeFileBytes).sort((a, b) => b.bytes - a.bytes || a.path.localeCompare(b.path)).slice(0, 25)
+    largeFiles: files.map((file) => ({ path: file, bytes: statSync4(join15(targetDir, file)).size })).filter((file) => file.bytes >= largeFileBytes).sort((a, b) => b.bytes - a.bytes || a.path.localeCompare(b.path)).slice(0, 25)
   };
 }
 function readPackageJson(targetDir) {
   const packageJsonPath = join15(targetDir, "package.json");
   if (!existsSync15(packageJsonPath)) return void 0;
   try {
-    const packageJson = JSON.parse(readFileSync10(packageJsonPath, "utf8"));
+    const packageJson = JSON.parse(readFileSync13(packageJsonPath, "utf8"));
     return {
       scripts: Object.keys(packageJson.scripts ?? {}).sort(),
       dependencies: Object.keys(packageJson.dependencies ?? {}).sort(),
@@ -2297,12 +2576,12 @@ import { existsSync as existsSync17 } from "node:fs";
 import { join as join16 } from "node:path";
 
 // src/portfolio/manifest.ts
-import { existsSync as existsSync16, readFileSync as readFileSync11 } from "node:fs";
+import { existsSync as existsSync16, readFileSync as readFileSync14 } from "node:fs";
 import { dirname as dirname10, isAbsolute as isAbsolute3, resolve as resolve2 } from "node:path";
 function loadPortfolioManifest(configPath) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync11(configPath, "utf8"));
+    parsed = JSON.parse(readFileSync14(configPath, "utf8"));
   } catch (error) {
     return {
       configPath,
@@ -2323,9 +2602,9 @@ function loadPortfolioManifest(configPath) {
   };
 }
 function resolveManifestPaths(value, configDir) {
-  if (!isRecord(value)) return value;
+  if (!isRecord2(value)) return value;
   const resolveEndpoint = (endpoint) => {
-    if (!isRecord(endpoint) || typeof endpoint.path !== "string" || isAbsolute3(endpoint.path)) {
+    if (!isRecord2(endpoint) || typeof endpoint.path !== "string" || isAbsolute3(endpoint.path)) {
       return endpoint;
     }
     return { ...endpoint, path: resolve2(configDir, endpoint.path) };
@@ -2339,7 +2618,7 @@ function resolveManifestPaths(value, configDir) {
 }
 function validatePortfolioManifest(value) {
   const issues = [];
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     return [
       {
         type: "invalid-field",
@@ -2375,7 +2654,7 @@ function validatePortfolioManifest(value) {
   }
   const seenTargetIds = /* @__PURE__ */ new Set();
   for (const target of value.targets) {
-    if (!isRecord(target)) {
+    if (!isRecord2(target)) {
       issues.push({
         type: "invalid-field",
         field: "targets",
@@ -2432,7 +2711,7 @@ function validateAllowedFields(value, location, allowedFields, issues) {
 }
 function validateEndpoint(value, field, issues) {
   if (value === void 0) return;
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     issues.push({
       type: "invalid-field",
       field,
@@ -2476,7 +2755,7 @@ function validateOptionalStringArray(value, id, field, issues) {
     });
   }
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -2742,7 +3021,7 @@ function printUsage3() {
 }
 
 // src/commands/sync.ts
-import { existsSync as existsSync18, readFileSync as readFileSync12 } from "node:fs";
+import { existsSync as existsSync18, readFileSync as readFileSync15 } from "node:fs";
 import { join as join17 } from "node:path";
 function runSync(args) {
   if (!args.includes("--check")) {
@@ -2778,8 +3057,8 @@ function runSync(args) {
       continue;
     }
     if (file.ownership === "project-local-seed") continue;
-    const source = readFileSync12(file.absoluteSourcePath, "utf8");
-    const target = readFileSync12(targetPath, "utf8");
+    const source = readFileSync15(file.absoluteSourcePath, "utf8");
+    const target = readFileSync15(targetPath, "utf8");
     if (source !== target) {
       console.log(`different: ${file.targetPath}`);
       differences += 1;
@@ -2822,6 +3101,7 @@ var COMMANDS = [
   "lens report --target <path> --out <path>",
   "lens audit init --target <path> --out <path>",
   "lens audit check --dir <path> [--json]",
+  "host-hook --host <codex|claude-code|antigravity> --event <Stop|SubagentStop|...>",
   "init --profile <engineering-runtime|doc-only> <--dry-run|--apply>",
   "sync --check [--profile <engineering-runtime|doc-only>]",
   "doctor"
@@ -2836,6 +3116,8 @@ if (!command || command === "--help" || command === "-h") {
   process.exitCode = runLens(process.argv.slice(3));
 } else if (command === "portfolio") {
   process.exitCode = runPortfolio(process.argv.slice(3));
+} else if (command === "host-hook") {
+  process.exitCode = runHostHook(process.argv.slice(3));
 } else if (command === "init") {
   process.exitCode = runInit(process.argv.slice(3));
 } else if (command === "sync") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pieai/pro-gov",
-  "version": "0.3.8",
+  "version": "0.3.10",
   "description": "Project-level distribution kit for Project Governance System.",
   "keywords": [
     "ai-agents",
@@ -35,7 +35,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pieai/doc-gov": "^0.3.8"
+    "@pieai/doc-gov": "^0.3.10"
   },
   "devDependencies": {
     "@types/node": "24.13.2",