@svayam-opensource/prj 0.5.8 → 0.5.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@svayam-opensource/prj",
-  "version": "0.5.8",
+  "version": "0.5.9",
   "description": "Governed Agentic Development Framework CLI (prj). A bash CLI wrapped for npm; operates on a governance workspace resolved via $ADF_WORKSPACE or the nearest org-config.yaml. Runtime prerequisites (not npm deps): bash, git, gh, yq, python3 (use Git Bash on Windows).",
   "bin": {
     "prj": "bin/prj"

package/prj

@@ -1465,6 +1465,18 @@ cmd_upgrade() {
   echo "  Push:    git push origin $DEFAULT_BRANCH"
 }
 
+# Validate a governance DATA workspace (schema/registry/lifecycle/cross-refs/
+# knowledge-org/secrets). This is the npm CLI surface that replaces a consumer
+# repo's vendored scripts/validate/ in CI (Option C un-vendor). Runs the data
+# subset (skips CLI/framework-dev checks) against $WORKSPACE_ROOT.
+# NB: privacy (org-config values must not leak into PUBLIC content) is a
+# publish-lane check — it lives in the template repo's CI, not here.
+cmd_validate() {
+  header "Validate Workspace"
+  divider
+  python3 "$SCRIPTS/validate/run.py" --data "$WORKSPACE_ROOT"
+}
+
 # ── Manage: project assignment commands ──────────────────────────────────────
 #
 # Open to anyone with write access to the workspace repo. GitHub enforces
@@ -2349,6 +2361,7 @@ case "$CMD" in
   deps)         cmd_deps ;;
   manage)       cmd_manage "${2:-}" ;;
   upgrade)      cmd_upgrade "${2:-}" ;;
+  validate)     cmd_validate ;;
   help|--help|-h)
     echo ""
     echo -e "${BOLD}Usage:${NC} ./prj [command]"

package/scripts/validate/run.py

@@ -359,9 +359,26 @@ CHECKS = [
     ("version-sync", check_version_sync),
 ]
 
+# Data-workspace subset: a pure governance DATA repo (a consumer that installs
+# the CLI from npm) has no scripts/ , agent/ harness, or package.json, so the
+# CLI/framework-dev checks (exec-bits, protocol render, version-sync) don't apply.
+# `prj validate` (and a consumer's CI) runs this subset via --data.
+DATA_CHECKS = [
+    ("schema",        check_schema),
+    ("registry",      check_registry),
+    ("lifecycle",     check_lifecycle),
+    ("cross-refs",    check_cross_refs),
+    ("knowledge-org", check_knowledge),
+    ("secrets",       check_secrets),
+]
+
 
 def main() -> int:
-    repo_root = Path(sys.argv[1] if len(sys.argv) > 1 else ".").resolve()
+    argv = sys.argv[1:]
+    data_only = "--data" in argv
+    argv = [a for a in argv if a != "--data"]
+    repo_root = Path(argv[0] if argv else ".").resolve()
+    checks = DATA_CHECKS if data_only else CHECKS
 
     if not (repo_root / "registry.yaml").exists():
         print(
@@ -371,7 +388,7 @@ def main() -> int:
         return 1
 
     total_errors = 0
-    for name, check in CHECKS:
+    for name, check in checks:
         errors = check(repo_root)
         if errors:
             print(f"[FAIL] {name} ({len(errors)} error{'s' if len(errors) != 1 else ''}):")