@pieai/pro-gov 0.4.1 → 0.4.3

package/README.md

@@ -72,7 +72,7 @@ What these commands do:
 | `lens report` | Writes the requested report file. | Only the explicit output |
 | `init --dry-run` | Shows starter/profile files that would be needed. | No |
 | `init --apply` | Installs one profile into a fresh target; refuses the whole operation if any target file exists. Optional CI and Lefthook references are not installed. | Yes |
-| `sync --check` | Strictly compares shared core files and checks only the presence of project-local seed files. | No |
+| `sync --check` | Strictly compares shared core files, checks project-local seeds for presence, and leaves optional guardrail contents consumer-owned. | No |
 | `sync --apply-host-hooks` | Merges current PGS Compound Gate entries into engineering-runtime host configs while preserving consumer-owned keys and hooks. | Only the three host config files |
 | `doctor` | Checks required packaged assets and whether `doc-gov` is available. | No |
 

package/assets/profiles/doc-only/profile.md

@@ -34,4 +34,6 @@ This profile is a human/AI adoption contract. `doc-gov` validates the resulting
 project shape. `pro-gov init --apply` can install it into a fresh target, but
 refuses all writes when any destination already exists. `sync --check` compares
 shared core files while leaving project-local router, policy, and current-work
-content under the target project's ownership.
+content under the target project's ownership. Optional Lefthook and CI
+guardrails are also consumer-owned when installed; `doc-gov doctor` checks that
+their required governance commands remain present.

package/assets/profiles/engineering-runtime/profile.md

@@ -40,7 +40,9 @@ This profile is a human/AI adoption contract. `doc-gov` validates the resulting
 project shape. `pro-gov init --apply` can install it into a fresh target, but
 refuses all writes when any destination already exists. `sync --check` compares
 shared core files while leaving project-local router, policy, and current-work
-content under the target project's ownership.
+content under the target project's ownership. Optional Lefthook and CI
+guardrails are also consumer-owned when installed; `doc-gov doctor` checks that
+their required governance commands remain present.
 
 Engineering-runtime starters also include Codex, Claude Code, and Antigravity
 Stop hooks that call `pro-gov host-hook`. Use `pro-gov doctor --strict-hooks`

package/cli-guide.md

@@ -43,9 +43,12 @@ Actions references stay packaged but are not installed by default.
 
 `sync --check` is read-only. It compares shared governance core files strictly,
 but checks project-local seeds such as `AGENTS.md`, project policy, and current
-work for presence only. Host configs are compared by PGS-owned entries, so
-consumer hooks do not create false drift. It infers the installed profile when
-exactly one route exists; `--profile` resolves an empty or temporarily ambiguous target.
+work for presence only. Optional `lefthook.yml` and CI guardrails remain
+consumer-owned when installed; `doc-gov doctor` validates their required PGS
+commands without requiring byte-for-byte template equality. Host configs are
+compared by PGS-owned entries, so consumer hooks do not create false drift. It
+infers the installed profile when exactly one route exists; `--profile` resolves
+an empty or temporarily ambiguous target.
 
 `sync --apply-host-hooks` is the bounded write path for engineering-runtime
 host configs. It updates only PGS Compound Gate entries and preserves consumer

package/dist/cli.js

@@ -4211,6 +4211,7 @@ function runSync(args) {
       differences += 1;
       continue;
     }
+    if (file.ownership === "optional-guardrail") continue;
     if (file.ownership === "project-local-seed") continue;
     const source = readFileSync18(file.absoluteSourcePath, "utf8");
     const target = readFileSync18(targetPath, "utf8");
@@ -4259,7 +4260,12 @@ function applyHostHookConfigs(profile) {
   return 0;
 }
 function matchesExpectedContent(targetPath, source, target) {
-  if (!isHostHookTargetPath(targetPath)) return source === target;
+  if (!isHostHookTargetPath(targetPath)) {
+    if (targetPath.endsWith(".md")) {
+      return normalizeMarkdownTablePadding(source) === normalizeMarkdownTablePadding(target);
+    }
+    return source === target;
+  }
   try {
     const current = JSON.parse(target);
     const template = JSON.parse(source);
@@ -4268,6 +4274,19 @@ function matchesExpectedContent(targetPath, source, target) {
     return false;
   }
 }
+function normalizeMarkdownTablePadding(content) {
+  return content.split("\n").map((line) => {
+    const match = line.match(/^(\s*)\|(.+)\|\s*$/);
+    if (!match) return line;
+    const [, indentation, cells] = match;
+    return `${indentation}|${cells.split(/(?<!\\)\|/).map((cell) => normalizeMarkdownTableCell(cell)).join("|")}|`;
+  }).join("\n");
+}
+function normalizeMarkdownTableCell(cell) {
+  const trimmed = cell.trim();
+  const separator = trimmed.match(/^(:?)-{3,}(:?)$/);
+  return separator ? `${separator[1]}---${separator[2]}` : trimmed;
+}
 function inferInstalledProfile(root) {
   const installed = ["engineering-runtime", "doc-only"].filter(
     (profile) => existsSync23(join22(root, `docs/governance/agents-routing/${profile}-v0.9.md`))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pieai/pro-gov",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "description": "Project-level distribution kit for Project Governance System.",
   "keywords": [
     "ai-agents",
@@ -35,7 +35,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pieai/doc-gov": "^0.4.1"
+    "@pieai/doc-gov": "^0.4.3"
   },
   "devDependencies": {
     "@types/node": "24.13.2",