@pieai/pro-gov 0.9.7 → 0.9.9

package/dist/cli.js

@@ -2318,8 +2318,10 @@ function pathExistsEvenIfDanglingSymlink3(path) {
 }
 
 // src/asset-targets/check.ts
-import { existsSync as existsSync10, lstatSync as lstatSync5, readFileSync as readFileSync6, realpathSync as realpathSync4 } from "node:fs";
-import { join as join10 } from "node:path";
+import { existsSync as existsSync10, lstatSync as lstatSync5, readFileSync as readFileSync6, readlinkSync as readlinkSync3, realpathSync as realpathSync4 } from "node:fs";
+import { join as join10, relative as relative7, resolve as resolve4 } from "node:path";
+var SHARED_RULE_PATH_PREFIX = "docs/policy/shared-rules/";
+var PGS_SHARED_RULE_TARGET_PATTERN = /^(?:\.\.\/)+ProjectGovernanceSystem\/agent-assets\/rules\/pie-rules\/([^/]+\.md)$/;
 function checkInstalledAssets(options) {
   const lockfilePath = join10(options.targetDir, ".pro-gov/assets.lock.json");
   if (!existsSync10(lockfilePath)) {
@@ -2366,6 +2368,7 @@ function checkInstalledAssets(options) {
     const targetAbsolutePath = join10(options.targetDir, entry.targetPath);
     const delivery = entry.delivery ?? "symlink";
     const portableDeferredSkill = delivery === "symlink" && !strictRegistry && isProjectSkillTarget(entry.targetPath);
+    const portableDeferredSharedRule = delivery === "symlink" && !strictRegistry && isPortableManagedSharedRuleSymlink(options.targetDir, targetAbsolutePath);
     if (delivery !== "symlink" && delivery !== "snapshot") {
       issues.push({
         type: "unsupported-delivery",
@@ -2416,7 +2419,7 @@ function checkInstalledAssets(options) {
       }
     }
     if (!pathExistsEvenIfDanglingSymlink4(targetAbsolutePath)) {
-      if (portableDeferredSkill) continue;
+      if (portableDeferredSkill || portableDeferredSharedRule) continue;
       issues.push({
         type: "missing-target",
         id: entry.id,
@@ -2445,7 +2448,7 @@ function checkInstalledAssets(options) {
       continue;
     }
     if (delivery === "symlink" && !existsSync10(targetAbsolutePath)) {
-      if (portableDeferredSkill) continue;
+      if (portableDeferredSkill || portableDeferredSharedRule) continue;
       issues.push({
         type: "dangling-symlink",
         id: entry.id,
@@ -2585,6 +2588,26 @@ function pathExistsEvenIfDanglingSymlink4(path) {
 function isProjectSkillTarget(targetPath) {
   return targetPath.startsWith(".agents/skills/") || targetPath.startsWith(".agents/manual-skills/");
 }
+function isPortableManagedSharedRuleSymlink(targetDir, candidatePath) {
+  const repoPath = relative7(resolve4(targetDir), resolve4(candidatePath)).split(/\\/g).join("/");
+  if (!repoPath.startsWith(SHARED_RULE_PATH_PREFIX)) return false;
+  const filename = repoPath.slice(SHARED_RULE_PATH_PREFIX.length);
+  if (!filename || filename.includes("/") || !filename.endsWith(".md")) return false;
+  let stats;
+  try {
+    stats = lstatSync5(candidatePath);
+  } catch {
+    return false;
+  }
+  if (!stats.isSymbolicLink() || existsSync10(candidatePath)) return false;
+  try {
+    const target = normalizeSymlinkTarget(readlinkSync3(candidatePath));
+    const match = target.match(PGS_SHARED_RULE_TARGET_PATTERN);
+    return match?.[1] === filename;
+  } catch {
+    return false;
+  }
+}
 
 // src/asset-targets/recommend.ts
 import { existsSync as existsSync11, readdirSync as readdirSync7, readFileSync as readFileSync7 } from "node:fs";
@@ -3521,7 +3544,7 @@ function readFlag(args, flag) {
 
 // src/commands/host-lens.ts
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname11, resolve as resolve6 } from "node:path";
+import { dirname as dirname11, resolve as resolve7 } from "node:path";
 
 // src/host-lens.ts
 import { execFileSync } from "node:child_process";
@@ -3535,7 +3558,7 @@ import {
   writeFileSync as writeFileSync5
 } from "node:fs";
 import { homedir } from "node:os";
-import { dirname as dirname9, join as join15, relative as relative7, resolve as resolve4 } from "node:path";
+import { dirname as dirname9, join as join15, relative as relative8, resolve as resolve5 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var ROOT_DEFINITIONS = [
   {
@@ -3617,7 +3640,7 @@ var ROOT_DEFINITIONS = [
   }
 ];
 function inspectHost(options = {}) {
-  const homePath = resolve4(options.homeDir ?? homedir());
+  const homePath = resolve5(options.homeDir ?? homedir());
   const now = options.now ?? /* @__PURE__ */ new Date();
   const rootPaths = ROOT_DEFINITIONS.map((definition) => join15(homePath, definition.relativePath));
   const rootSizes = measurePaths(rootPaths);
@@ -3930,7 +3953,7 @@ function matchingChildren(root, predicate) {
   }
 }
 function measurePaths(paths) {
-  const uniquePaths = [...new Set(paths.map((path) => resolve4(path)))].filter(
+  const uniquePaths = [...new Set(paths.map((path) => resolve5(path)))].filter(
     (path) => existsSync14(path)
   );
   const result = /* @__PURE__ */ new Map();
@@ -3944,7 +3967,7 @@ function measurePaths(paths) {
     for (const line of output.split(/\r?\n/)) {
       const match = line.match(/^(\d+)\s+(.+)$/);
       if (!match) continue;
-      result.set(resolve4(match[2]), Number(match[1]) * 1024);
+      result.set(resolve5(match[2]), Number(match[1]) * 1024);
     }
     return result;
   } catch {
@@ -3994,8 +4017,8 @@ function countImmediateEntries(path) {
   }
 }
 function displayPath(path, homePath) {
-  const absolute = resolve4(path);
-  const withinHome = relative7(homePath, absolute);
+  const absolute = resolve5(path);
+  const withinHome = relative8(homePath, absolute);
   if (withinHome === "") return "~";
   if (!withinHome.startsWith("..")) return `~/${withinHome.replaceAll("\\", "/")}`;
   return absolute;
@@ -4003,7 +4026,7 @@ function displayPath(path, homePath) {
 function undisplayPath(path, homePath) {
   if (path === "~") return homePath;
   if (path.startsWith("~/")) return join15(homePath, path.slice(2));
-  return resolve4(path);
+  return resolve5(path);
 }
 function findHostDashboardAssets() {
   const packageRoot2 = dirname9(dirname9(fileURLToPath3(import.meta.url)));
@@ -4029,7 +4052,7 @@ function safeJavaScriptJson(value) {
 
 // src/portfolio/manifest.ts
 import { existsSync as existsSync15, readFileSync as readFileSync10 } from "node:fs";
-import { dirname as dirname10, isAbsolute as isAbsolute4, resolve as resolve5 } from "node:path";
+import { dirname as dirname10, isAbsolute as isAbsolute4, resolve as resolve6 } from "node:path";
 function loadPortfolioManifest(configPath) {
   let parsed;
   try {
@@ -4045,7 +4068,7 @@ function loadPortfolioManifest(configPath) {
       ]
     };
   }
-  const normalized = resolveManifestPaths(parsed, dirname10(resolve5(configPath)));
+  const normalized = resolveManifestPaths(parsed, dirname10(resolve6(configPath)));
   const issues = validatePortfolioManifest(normalized);
   return {
     configPath,
@@ -4059,13 +4082,13 @@ function resolveManifestPaths(value, configDir) {
     if (!isRecord(endpoint) || typeof endpoint.path !== "string" || isAbsolute4(endpoint.path)) {
       return endpoint;
     }
-    return { ...endpoint, path: resolve5(configDir, endpoint.path) };
+    return { ...endpoint, path: resolve6(configDir, endpoint.path) };
   };
   return {
     ...value,
     technologyGovernance: isRecord(value.technologyGovernance) && typeof value.technologyGovernance.strategySource === "string" && !isAbsolute4(value.technologyGovernance.strategySource) ? {
       ...value.technologyGovernance,
-      strategySource: resolve5(configDir, value.technologyGovernance.strategySource)
+      strategySource: resolve6(configDir, value.technologyGovernance.strategySource)
     } : value.technologyGovernance,
     controlPlane: resolveEndpoint(value.controlPlane),
     executionEngine: resolveEndpoint(value.executionEngine),
@@ -4985,7 +5008,7 @@ function runScan(options) {
   const inspection = resolveInspectionOptions(options);
   if (!inspection.ok) return reportConfigError(inspection.error);
   const report = inspectHost(inspection.value);
-  const written = writeHostLensReport(report, resolve6(options.outPath));
+  const written = writeHostLensReport(report, resolve7(options.outPath));
   if (options.json) {
     console.log(JSON.stringify({ ok: true, ...written, summary: report.summary }, null, 2));
   } else {
@@ -5005,7 +5028,7 @@ function runPlan(options) {
   if (!inspection.ok) return reportConfigError(inspection.error);
   const report = inspectHost(inspection.value);
   const plan = createHostLensCleanupPlan(report);
-  const outPath = resolve6(options.outPath);
+  const outPath = resolve7(options.outPath);
   mkdirSync7(dirname11(outPath), { recursive: true });
   writeFileSync6(outPath, `${JSON.stringify(plan, null, 2)}
 `);
@@ -5080,7 +5103,7 @@ function parseOptions(args) {
     if (arg === "--home") {
       const value = args[index + 1];
       if (!value) return { ok: false, error: "Expected value after --home" };
-      options.homeDir = resolve6(value);
+      options.homeDir = resolve7(value);
       index += 1;
       continue;
     }
@@ -5094,7 +5117,7 @@ function parseOptions(args) {
     if (arg === "--config") {
       const value = args[index + 1];
       if (!value) return { ok: false, error: "Expected value after --config" };
-      options.configPath = resolve6(value);
+      options.configPath = resolve7(value);
       index += 1;
       continue;
     }
@@ -5121,7 +5144,7 @@ function printUsage2() {
 
 // src/learning/recall.ts
 import { existsSync as existsSync16, readdirSync as readdirSync9, readFileSync as readFileSync11 } from "node:fs";
-import { basename as basename4, join as join16, relative as relative8 } from "node:path";
+import { basename as basename4, join as join16, relative as relative9 } from "node:path";
 function recallLearnings(root, options) {
   const query = options.query.trim();
   const terms = tokenize(query);
@@ -5176,7 +5199,7 @@ function readLearningRecord(root, absolutePath) {
   const parsed = splitFrontmatter(content);
   const body = parsed.body;
   return {
-    relativePath: normalizePath(relative8(root, absolutePath)),
+    relativePath: normalizePath(relative9(root, absolutePath)),
     title: findTitle(parsed.frontmatter, body) ?? titleFromPath(absolutePath),
     metadata: parsed.frontmatter,
     body
@@ -5258,7 +5281,7 @@ function cleanMarkdownLine(input) {
 
 // src/learning/capture.ts
 import { existsSync as existsSync17, mkdirSync as mkdirSync8, writeFileSync as writeFileSync7 } from "node:fs";
-import { basename as basename5, join as join17, relative as relative9 } from "node:path";
+import { basename as basename5, join as join17, relative as relative10 } from "node:path";
 function captureLearning(root, options) {
   const title = options.title.trim();
   const summary = options.summary.trim();
@@ -5272,7 +5295,7 @@ function captureLearning(root, options) {
   const idSlug = basename5(path, ".md");
   writeFileSync7(path, renderLearning({ title, summary, category, moduleName, idSlug }));
   return {
-    relativePath: normalizePath2(relative9(root, path)),
+    relativePath: normalizePath2(relative10(root, path)),
     title,
     captureMode: "pgs-native"
   };
@@ -5896,8 +5919,8 @@ import { homedir as homedir3 } from "node:os";
 import { join as join23 } from "node:path";
 
 // src/host-ssot.ts
-import { lstatSync as lstatSync8, readlinkSync as readlinkSync3, realpathSync as realpathSync5 } from "node:fs";
-import { dirname as dirname13, isAbsolute as isAbsolute5, join as join19, resolve as resolve7 } from "node:path";
+import { lstatSync as lstatSync8, readlinkSync as readlinkSync4, realpathSync as realpathSync5 } from "node:fs";
+import { dirname as dirname13, isAbsolute as isAbsolute5, join as join19, resolve as resolve8 } from "node:path";
 function inspectProjectHostSsot(root) {
   const agentsEntry = inspectCanonicalPath(root, "AGENTS.md");
   const canonicalSkills = inspectCanonicalPath(root, ".agents/skills");
@@ -5966,9 +5989,9 @@ function inspectCompatibilityLink(root, path, expectedRawTarget) {
     if (stat.isDirectory()) return { ...base, status: "directory" };
     return { ...base, status: "other" };
   }
-  const rawTarget = normalizeSymlinkTarget(readlinkSync3(absolutePath));
-  const resolvedTarget = resolve7(dirname13(absolutePath), rawTarget);
-  const expectedPath = resolve7(dirname13(absolutePath), expectedRawTarget);
+  const rawTarget = normalizeSymlinkTarget(readlinkSync4(absolutePath));
+  const resolvedTarget = resolve8(dirname13(absolutePath), rawTarget);
+  const expectedPath = resolve8(dirname13(absolutePath), expectedRawTarget);
   const targetStat = safeLstat2(resolvedTarget);
   if (!targetStat) {
     return {
@@ -6174,7 +6197,7 @@ function readPackageJson(path) {
 // src/repository-files.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { existsSync as existsSync21, readdirSync as readdirSync11 } from "node:fs";
-import { isAbsolute as isAbsolute6, join as join22, posix as posix3, relative as relative10 } from "node:path";
+import { isAbsolute as isAbsolute6, join as join22, posix as posix3, relative as relative11 } from "node:path";
 var gitMaxBufferBytes = 64 * 1024 * 1024;
 var RepositoryFileDiscoveryError = class extends Error {
   constructor(message) {
@@ -6242,7 +6265,7 @@ function discoverFilesystemFiles(root, options) {
         continue;
       }
       if (!entry.isFile()) continue;
-      const relativePath = normalizeRepositoryRelativePath(relative10(root, absolutePath));
+      const relativePath = normalizeRepositoryRelativePath(relative11(root, absolutePath));
       if (isSafeRepositoryRelativePath(relativePath) && (options.fallbackIncludeFile?.(relativePath) ?? true)) {
         files.add(relativePath);
       }
@@ -7088,7 +7111,7 @@ function deduplicateIssues(issues) {
 
 // src/portfolio/ai-health/index.ts
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname18, join as join34, resolve as resolve10 } from "node:path";
+import { dirname as dirname18, join as join34, resolve as resolve11 } from "node:path";
 
 // src/portfolio/ai-health/entries.ts
 import { existsSync as existsSync27, lstatSync as lstatSync12, realpathSync as realpathSync7 } from "node:fs";
@@ -7394,11 +7417,11 @@ function inspectGit2(root) {
 
 // src/portfolio/ai-health/hosts.ts
 import { existsSync as existsSync29 } from "node:fs";
-import { join as join29, resolve as resolve9, sep as sep3 } from "node:path";
+import { join as join29, resolve as resolve10, sep as sep3 } from "node:path";
 
 // src/portfolio/ai-health/devspace.ts
 import { existsSync as existsSync28, statSync as statSync9 } from "node:fs";
-import { join as join28, relative as relative11, resolve as resolve8, sep as sep2 } from "node:path";
+import { join as join28, relative as relative12, resolve as resolve9, sep as sep2 } from "node:path";
 function inspectDevSpaceHealth(options) {
   const run = options.run ?? runDevSpaceCommand;
   const configDirectory = join28(options.homeDir, ".devspace");
@@ -7498,7 +7521,7 @@ function isLoopbackHost(host) {
   return ["127.0.0.1", "localhost", "::1"].includes(host.trim().toLowerCase());
 }
 function isPathInside(path, root) {
-  const fromRoot = relative11(resolve8(root), resolve8(path));
+  const fromRoot = relative12(resolve9(root), resolve9(path));
   return fromRoot === "" || fromRoot !== ".." && !fromRoot.startsWith(`..${sep2}`);
 }
 
@@ -7560,11 +7583,11 @@ function claudeProjectLocalMcpNames(homeDir, root) {
   const value = readJson4(join29(homeDir, MCP_DISCOVERY_PATHS.user.claudeCode));
   if (!isRecord3(value) || !isRecord3(value.projects)) return [];
   const candidates = new Set(
-    [resolve9(root), safeRealpath(root)].filter((path) => Boolean(path))
+    [resolve10(root), safeRealpath(root)].filter((path) => Boolean(path))
   );
   const names = /* @__PURE__ */ new Set();
   for (const [path, project] of Object.entries(value.projects)) {
-    const projectPaths = [resolve9(path), safeRealpath(path)].filter(
+    const projectPaths = [resolve10(path), safeRealpath(path)].filter(
       (candidate) => Boolean(candidate)
     );
     if (!projectPaths.some((candidate) => candidates.has(candidate)) || !isRecord3(project) || !isRecord3(project.mcpServers))
@@ -7663,23 +7686,23 @@ function inferGrokMcpScope(name, sourceType, sourcePath, root, homeDir, userClau
     if (userClaudeNames.has(name)) return "user";
     return "unknown";
   }
-  const resolvedSource = safeRealpath(sourcePath) ?? resolve9(sourcePath);
-  const resolvedRoot = safeRealpath(root) ?? resolve9(root);
+  const resolvedSource = safeRealpath(sourcePath) ?? resolve10(sourcePath);
+  const resolvedRoot = safeRealpath(root) ?? resolve10(root);
   if (resolvedSource === join29(resolvedRoot, MCP_DISCOVERY_PATHS.project.claudeCodeShared))
     return "project-shared";
   if (resolvedSource.startsWith(resolvedRoot + sep3)) return "project";
-  if (homeDir && resolvedSource === join29(resolve9(homeDir), MCP_DISCOVERY_PATHS.user.claudeCode)) {
+  if (homeDir && resolvedSource === join29(resolve10(homeDir), MCP_DISCOVERY_PATHS.user.claudeCode)) {
     if (localClaudeNames.has(name)) return "project-local";
     if (userClaudeNames.has(name)) return "user";
   }
-  if (homeDir && resolvedSource.startsWith(resolve9(homeDir) + sep3)) return "user";
+  if (homeDir && resolvedSource.startsWith(resolve10(homeDir) + sep3)) return "user";
   if (sourceType === "project") return "project";
   return "unknown";
 }
 
 // src/portfolio/ai-health/secrets.ts
 import { existsSync as existsSync30, lstatSync as lstatSync13, readdirSync as readdirSync13, statSync as statSync10 } from "node:fs";
-import { join as join30, relative as relative12, sep as sep4 } from "node:path";
+import { join as join30, relative as relative13, sep as sep4 } from "node:path";
 var supportsPosixModes = process.platform !== "win32";
 function inspectRepositorySecrets(root, id, secretsRoot, isRepository, environmentPolicy) {
   const centralPath = join30(secretsRoot, id);
@@ -7731,7 +7754,7 @@ function collectEnvironmentFiles(root, current = root, depth = 0) {
         if (!SKIP_ENV_DIRECTORIES.has(entry.name))
           found.push(...collectEnvironmentFiles(root, join30(current, entry.name), depth + 1));
       } else if (isEnvironmentFilename(entry.name) && !isProviderGeneratedEnvironmentFile(entry.name)) {
-        found.push(relative12(root, join30(current, entry.name)).replaceAll("\\", "/"));
+        found.push(relative13(root, join30(current, entry.name)).replaceAll("\\", "/"));
       }
     }
   } catch {
@@ -7748,7 +7771,7 @@ function collectCentralSecretFiles(root, current = root, depth = 0) {
       if (entry.isDirectory()) found.push(...collectCentralSecretFiles(root, path, depth + 1));
       else
         found.push({
-          path: relative12(root, path).replaceAll("\\", "/"),
+          path: relative13(root, path).replaceAll("\\", "/"),
           mode: supportsPosixModes ? modeString(lstatSync13(path).mode) : "unknown"
         });
     }
@@ -7777,7 +7800,7 @@ function pointsInside(path, expectedRoot) {
   if (!expectedRoot || !lstatSync13(path).isSymbolicLink()) return false;
   const target = safeRealpath(path);
   if (!target) return false;
-  const fromRoot = relative12(expectedRoot, target);
+  const fromRoot = relative13(expectedRoot, target);
   return fromRoot === "" || fromRoot !== ".." && !fromRoot.startsWith(`..${sep4}`);
 }
 function hasUnsafeCentralSecretPermissions(secrets) {
@@ -8366,7 +8389,7 @@ function collectEndpoints(manifest) {
   for (const target of manifest.targets) result.push({ endpoint: target, role: "target" });
   const seen = /* @__PURE__ */ new Set();
   return result.filter(({ endpoint }) => {
-    const key = resolve10(endpoint.path);
+    const key = resolve11(endpoint.path);
     if (seen.has(key)) return false;
     seen.add(key);
     return true;
@@ -9079,7 +9102,7 @@ function readExistingAiHealthReport(outDir, portfolioId) {
 }
 
 // src/commands/sync.ts
-import { existsSync as existsSync35, lstatSync as lstatSync15, readFileSync as readFileSync20, readlinkSync as readlinkSync4 } from "node:fs";
+import { existsSync as existsSync35, lstatSync as lstatSync15, readFileSync as readFileSync20, readlinkSync as readlinkSync5 } from "node:fs";
 import { join as join36 } from "node:path";
 function runSync(args) {
   const check = args.includes("--check");
@@ -9126,7 +9149,7 @@ function runSync(args) {
       continue;
     }
     if (file.kind === "symlink") {
-      if (!stat.isSymbolicLink() || normalizeSymlinkTarget(readlinkSync4(targetPath)) !== file.linkTarget) {
+      if (!stat.isSymbolicLink() || normalizeSymlinkTarget(readlinkSync5(targetPath)) !== file.linkTarget) {
         console.log(`different: ${file.targetPath}`);
         differences += 1;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pieai/pro-gov",
-  "version": "0.9.7",
+  "version": "0.9.9",
   "description": "Project-level distribution kit for Project Governance System.",
   "keywords": [
     "ai-agents",
@@ -35,7 +35,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@pieai/doc-gov": "^0.9.7"
+    "@pieai/doc-gov": "^0.9.9"
   },
   "devDependencies": {
     "@pieai/swimmer-ui-kit": "1.3.2",