@pieai/pro-gov 0.9.1 → 0.9.2

package/assets/public-agent-assets/registry.json

@@ -25,11 +25,11 @@
       "notes": "Public rule for choosing evidence lanes and requiring fresh verification before completion.",
       "promotion": {
         "privateSourcePath": "rules/pie-rules/ai-in-the-loop.md",
-        "privateSourceHash": "sha256:71f487152123491a2c110ad839a90780b08e04ae3a133d59bbe977bf8b2f64e4",
+        "privateSourceHash": "sha256:344eba8c3b1f3130ed33e4b6a4511a332e2ca477e6a40ad7d4c73006197f5445",
         "publicHash": "sha256:911702baf6ea1d724e41ea1876d23d80f4de8dfaaadbf1399a40c982c810224c",
         "sanitized": true,
-        "lastReviewed": "2026-08-17",
-        "reviewNotes": "Reviewed after the private source gained governed front matter and normalized formatting. The public copy intentionally keeps the portable evidence-loop method without the private Grok compatibility lane or project governance metadata."
+        "lastReviewed": "2026-08-20",
+        "reviewNotes": "Reviewed after the private source gained governed front matter and normalized formatting. The public copy intentionally keeps the portable evidence-loop method without the private Grok compatibility lane or project governance metadata. Re-reviewed 2026-08-20: the private source moved by Markdown table padding only, with no wording change, so the sanitized public copy is unaffected and only the private hash is re-pinned."
       }
     },
     {

package/assets/starter/.github/workflows/docs-check.yml

@@ -43,7 +43,7 @@ jobs:
 
       - uses: pnpm/action-setup@v6
         with:
-          version: 11.9.0
+          version: 11.22.0
 
       - uses: actions/setup-node@v6
         with:

package/assets/starter/.oxfmtignore

@@ -0,0 +1,27 @@
+# Seeded by `pro-gov init`. This file is project-local after seeding — add
+# your own build outputs and generated paths freely.
+
+# Dependencies and build output
+node_modules
+dist
+build
+coverage
+out
+.next
+.turbo
+.tmp
+
+# ─────────────────────────────────────────────────────────────────────────
+# PGS-managed content — DO NOT REFORMAT. Keep these entries.
+#
+# `pro-gov sync --check` byte-compares docs/governance against the packaged
+# starter, and `pro-gov portfolio assets-check` byte-compares the shared-rule
+# snapshots. A formatter that only pads Markdown table cells is enough to fail
+# both, and the guardrails cannot tell cosmetic padding from a real local edit
+# — re-applying the asset then refuses with asset-lock-drift.
+#
+# If you need one of these files changed, change it upstream in Project
+# Governance System and re-sync; do not restyle it here.
+# ─────────────────────────────────────────────────────────────────────────
+docs/governance
+docs/policy/shared-rules

package/dist/cli.js

@@ -2328,7 +2328,10 @@ function classifyOwnership(targetPath) {
   if (targetPath === "lefthook.yml" || targetPath === ".github/workflows/docs-check.yml") {
     return "optional-guardrail";
   }
-  if (targetPath === "AGENTS.md" || targetPath === "docs/policy/best-practice-for-this-project.md" || targetPath === "docs/reference/documentation-map.md" || targetPath === "docs/reference/execution/current-work.md") {
+  if (targetPath === "AGENTS.md" || // Seeded so a new project starts with the managed paths protected from its
+  // formatter, then owned locally — every project adds its own build outputs,
+  // so this must not be byte-compared by `sync --check`.
+  targetPath === ".oxfmtignore" || targetPath === "docs/policy/best-practice-for-this-project.md" || targetPath === "docs/reference/documentation-map.md" || targetPath === "docs/reference/execution/current-work.md") {
     return "project-local-seed";
   }
   return "shared";
@@ -2593,7 +2596,11 @@ function inspectAgentBrowser(options) {
     const output = execFileSync(command2, ["--version"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
-      timeout: 3e3
+      // Host scans can run alongside the full portfolio test matrix. Keep the
+      // probe bounded, but leave enough headroom for a busy Node process to
+      // spawn the pinned CLI instead of misclassifying a slow start as an
+      // unparseable version.
+      timeout: 1e4
     }).trim();
     const installedVersion = output.match(/(?:^|\s)(\d+\.\d+\.\d+)(?:\s|$)/)?.[1];
     if (!installedVersion) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pieai/pro-gov",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "Project-level distribution kit for Project Governance System.",
   "keywords": [
     "ai-agents",
@@ -35,7 +35,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pieai/doc-gov": "^0.9.1"
+    "@pieai/doc-gov": "^0.9.2"
   },
   "devDependencies": {
     "@pieai/swimmer-ui-kit": "1.3.2",