phasegate 0.159.0 → 0.160.1

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.160.1] - 2026-05-14
+
+### Fixed
+
+- **WI-181 / WI-182 / WI-183 — downstream install and package contract** — declares `tinyglobby` as a packaged runtime dependency, updates pre-commit and AIDLC workflow templates to call the published `phasegate` bin instead of monorepo-only scripts, and makes the workflow choose npm/yarn/pnpm install commands from lockfiles.
+
+## [0.160.0] - 2026-05-13
+
+### Added
+
+- **WI-170 — phase2 initial-creation expiration public contract** — documents `p2:check-initial-creation` as a public compatibility command and adds schema/type support for `phase2Extensions.initialCreationExpirationRules` in v2 and v3 config documents.
+
 ## [0.159.0] - 2026-05-13
 
 ### Added

package/docs/guide/cli-reference.md

@@ -415,7 +415,7 @@ ISSUE-005 P3-10 で明確化された境界:
 | `p2:check-freshness` | `--pattern <glob>` `--dry-run` `--format text\|json` | Compatibility entry point for L4-004 doc freshness; canonical L4 execution is `validate --layer L4` |
 | `p2:validate-pointers` | `--include-urls` `--format text\|json` | Compatibility entry point for L4-005 pointer validation; canonical L4 execution is `validate --layer L4` |
 | `p2:generate-e2e-template` | `--phase <phase>` `--output <path>` | Generate E2E test template |
-| `p2:check-initial-creation` | `--pattern <glob>` `--format text\|json` | Compatibility detector for long-lived `initial_creation: true` docs. |
+| `p2:check-initial-creation` | `--pattern <glob>` `--format text\|json` | Public compatibility detector for long-lived `initial_creation: true` docs; configured by `phase2Extensions.initialCreationExpirationRules`. |
 
 ### `phasegate:generate-matrix`
 

package/docs/guide/configuration.md

@@ -75,6 +75,18 @@ The plan identifies target fields, managed artifacts, commands, validation, risk
   "baseline": {
     "enabled": true,
     "path": ".phasegate/baseline.json"
+  },
+  "phase2Extensions": {
+    "initialCreationExpirationRules": [
+      {
+        "ruleId": "stale-initial-creation",
+        "documentPattern": "docs/**/*.md",
+        "daysThreshold": 90,
+        "commitCountThreshold": 5,
+        "evaluationMode": "or",
+        "enabled": true
+      }
+    ]
   }
 }
 ```
@@ -179,6 +191,29 @@ Example for Python and TypeScript:
 
 The metadata validators read `@unit` and `@layer` with language-agnostic regular expressions, so Python `# @unit api` and Go `// @unit api` style comments are both valid as long as the file extension is included here.
 
+#### `phase2Extensions`
+
+<!-- @work-item-id WI-170 -->
+
+`phase2Extensions.initialCreationExpirationRules` is a public compatibility contract for `phasegate p2:check-initial-creation`. The command detects documents that still carry `traceability.initial_creation: true` after they have aged past configured thresholds. Regular scheduled drift checks should still run through `phasegate validate --layer L4`.
+
+| Sub-field | Type | Default | Description |
+|-----------|------|---------|-------------|
+| `initialCreationExpirationRules` | `array` | built-in `90 days / 5 commits / or` rule | Rules used by `p2:check-initial-creation`. Omit to use the built-in rule. |
+
+Rule fields:
+
+| Field | Type | Description |
+|-------|------|-------------|
+| `ruleId` | `string` | Stable identifier shown in diagnostics. |
+| `documentPattern` | `string` | Glob for candidate Markdown documents. |
+| `daysThreshold` | `number` | Non-negative age threshold in days. |
+| `commitCountThreshold` | `number` | Non-negative threshold for the number of commits touching the document. |
+| `evaluationMode` | `"or"` \| `"and"` | `"or"` reports when either threshold is met; `"and"` requires both. |
+| `enabled` | `boolean` | Optional. Defaults to `true`. |
+
+Keep `initial_creation: true` only while a document is genuinely new and still being filled. Remove it once the expected initial content exists; otherwise this compatibility command reports the document after the configured age or commit-count threshold.
+
 ##### Phase Dependency Presets
 
 | Preset     | Phase 3 Gates | storyReflection default                                                 | Use Case                                           |

package/docs/templates/ci/aidlc-gate.yml

@@ -1,13 +1,13 @@
 # Phasegate — PR検証ワークフロー
 #
 # 使い方:
-#   このファイルを .github/workflows/aidlc-gate.yml にコピーして使用する。
+#   phasegate install または ci:generate-template で配置する。
 #
 # 実行タイミング: Pull Request（open / synchronize / reopen）
 # 実行内容:
 #   1. bypass:audit — bypass trailer / evidence 監査
-#   2. harness:lint  — L1 Biome AST ルール検証
-#   3. harness:ci-check — L3 CI バリデータ（security / performance / coverage / nyquist）
+#   2. phasegate lint  — L1 Biome AST ルール検証
+#   3. phasegate:ci-check — L3 CI バリデータ（security / performance / coverage / nyquist）
 #   4. 失敗時: PR にエラーサマリーをコメント
 
 name: AIDLC Quality Gate
@@ -33,15 +33,21 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: '20'
-          cache: 'pnpm'
 
-      - name: Install pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9
+      - name: Enable Corepack
+        run: corepack enable
 
       - name: Install dependencies
-        run: pnpm install --frozen-lockfile
+        run: |
+          if [ -f pnpm-lock.yaml ]; then
+            pnpm install --frozen-lockfile
+          elif [ -f yarn.lock ]; then
+            yarn install --immutable || yarn install --frozen-lockfile
+          elif [ -f package-lock.json ] || [ -f npm-shrinkwrap.json ]; then
+            npm ci
+          else
+            npm install
+          fi
 
       # Bypass audit: local `git commit --no-verify` can skip hooks, but CI
       # replays the gate over the PR range and requires structured evidence.
@@ -63,7 +69,7 @@ jobs:
         id: lint
         run: |
           set +e
-          RESULT=$(pnpm run harness lint --json 2>&1)
+          RESULT=$(npx phasegate lint --json 2>&1)
           EXIT_CODE=$?
           echo "result<<EOF" >> $GITHUB_OUTPUT
           echo "$RESULT" >> $GITHUB_OUTPUT
@@ -77,7 +83,7 @@ jobs:
         if: always()
         run: |
           set +e
-          RESULT=$(pnpm run harness harness:ci-check --json 2>&1)
+          RESULT=$(npx phasegate phasegate:ci-check --json 2>&1)
           EXIT_CODE=$?
           echo "result<<EOF" >> $GITHUB_OUTPUT
           echo "$RESULT" >> $GITHUB_OUTPUT

package/docs/templates/hooks/pre-commit

@@ -1,10 +1,8 @@
 #!/usr/bin/env sh
 # GSDLC Quality Harness — Pre-commit Hook テンプレート
 #
-# 使い方:
-#   1. このファイルを .husky/pre-commit にコピーする
-#   2. chmod +x .husky/pre-commit
-#   3. pnpm add --save-dev husky && npx husky install
+# Managed by phasegate install / ci:generate-template.
+# Requires phasegate to be available through package.json devDependencies or npx.
 #
 # 実行内容:
 #   L1: Biome AST ルール（require-unit-comment, no-layer-violation など 8ルール）
@@ -15,7 +13,7 @@
 
 . "$(dirname -- "$0")/_/husky.sh"
 
-HARNESS_CMD="npx tsx scripts/harness/main.ts"
+PHASEGATE_CMD="${PHASEGATE_CMD:-npx phasegate}"
 
 echo "🔍 AIDLC Quality Gate (Pre-commit)"
 echo "──────────────────────────────────"
@@ -24,14 +22,14 @@ echo "────────────────────────
 # L1: Biome AST ルール
 # -----------------------------------------------------------------------
 echo "▶ L1 Lint (Biome AST)..."
-$HARNESS_CMD lint
+$PHASEGATE_CMD lint
 L1_EXIT=$?
 
 if [ $L1_EXIT -ne 0 ]; then
   echo ""
   echo "❌ L1 Lint が失敗しました。"
   echo "   修正してから再度コミットしてください。"
-  echo "   詳細: pnpm run harness lint"
+  echo "   詳細: npx phasegate lint"
   exit 1
 fi
 echo "✅ L1 Lint: passed"
@@ -42,10 +40,10 @@ echo "✅ L1 Lint: passed"
 # Quick Mode では phase-gate をスキップ
 if [ "${HARNESS_QUICK_MODE:-0}" = "1" ]; then
   echo "▶ L2 Validators (Quick Mode: phase-gate スキップ)..."
-  $HARNESS_CMD check-phase-gate --skip-phase-gate
+  $PHASEGATE_CMD validate --layer L2 --format human --no-l4
 else
   echo "▶ L2 Validators (phase-gate / metadata / test-quality)..."
-  $HARNESS_CMD check-phase-gate
+  $PHASEGATE_CMD validate --layer L2 --format human
 fi
 L2_EXIT=$?
 
@@ -53,7 +51,7 @@ if [ $L2_EXIT -ne 0 ]; then
   echo ""
   echo "❌ L2 Validators が失敗しました。"
   echo "   修正してから再度コミットしてください。"
-  echo "   詳細: pnpm run harness check-phase-gate"
+  echo "   詳細: npx phasegate validate --layer L2 --format human"
   exit 1
 fi
 echo "✅ L2 Validators: passed"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phasegate",
-  "version": "0.159.0",
+  "version": "0.160.1",
   "packageManager": "pnpm@10.30.1",
   "description": "Phasegate — AI-agnostic quality defense toolkit. Enforces structural integrity between design intent and code.",
   "license": "MIT",
@@ -64,6 +64,7 @@
   "dependencies": {
     "ajv": "^8.18.0",
     "picomatch": "^4.0.4",
+    "tinyglobby": "^0.2.15",
     "tsx": "^4.0.0"
   },
   "devDependencies": {

package/scripts/harness/ci-governance/infrastructure/adapters/yaml-template-renderer-adapter.ts

@@ -1,6 +1,7 @@
 /**
  * @layer infrastructure
  * @unit ci-governance
+ * @work-item-id WI-182 / WI-183
  *
  * TemplateRendererPort実装（YAML書き出し）
  */

package/scripts/harness/config-foundation/domain/harness-config.ts

@@ -54,6 +54,7 @@ export interface HarnessConfigSourceDocument {
   ci?: HarnessConfigResolvedDocument['ci'];
   validate?: HarnessConfigResolvedDocument['validate'];
   preCommit?: Partial<HarnessConfigResolvedDocument['preCommit']>;
+  phase2Extensions?: HarnessConfigResolvedDocument['phase2Extensions'];
   architecture?: ArchitectureConfigSource;
 }
 
@@ -122,6 +123,16 @@ export interface HarnessConfigResolvedDocument {
   preCommit?: {
     implementationExtensions: string[];
   };
+  phase2Extensions?: {
+    initialCreationExpirationRules?: Array<{
+      ruleId: string;
+      documentPattern: string;
+      daysThreshold: number;
+      commitCountThreshold: number;
+      evaluationMode: 'or' | 'and';
+      enabled?: boolean;
+    }>;
+  };
   architecture?: ArchitectureConfigDocument;
 }
 

package/scripts/harness/config-foundation/infrastructure/schemas/harness-config-v2.schema.json

@@ -498,6 +498,55 @@
           "minLength": 1
         }
       }
+    },
+    "phase2Extensions": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "initialCreationExpirationRules": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "ruleId",
+              "documentPattern",
+              "daysThreshold",
+              "commitCountThreshold",
+              "evaluationMode"
+            ],
+            "properties": {
+              "ruleId": {
+                "type": "string",
+                "minLength": 1
+              },
+              "documentPattern": {
+                "type": "string",
+                "minLength": 1
+              },
+              "daysThreshold": {
+                "type": "number",
+                "minimum": 0
+              },
+              "commitCountThreshold": {
+                "type": "number",
+                "minimum": 0
+              },
+              "evaluationMode": {
+                "type": "string",
+                "enum": [
+                  "or",
+                  "and"
+                ]
+              },
+              "enabled": {
+                "type": "boolean"
+              }
+            }
+          },
+          "uniqueItems": true
+        }
+      }
     }
   }
 }

package/scripts/harness/config-foundation/infrastructure/schemas/harness-config-v3.schema.json

@@ -619,6 +619,55 @@
           "then": { "required": ["preset", "layers", "allowedDependencies"] }
         }
       ]
+    },
+    "phase2Extensions": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "initialCreationExpirationRules": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "ruleId",
+              "documentPattern",
+              "daysThreshold",
+              "commitCountThreshold",
+              "evaluationMode"
+            ],
+            "properties": {
+              "ruleId": {
+                "type": "string",
+                "minLength": 1
+              },
+              "documentPattern": {
+                "type": "string",
+                "minLength": 1
+              },
+              "daysThreshold": {
+                "type": "number",
+                "minimum": 0
+              },
+              "commitCountThreshold": {
+                "type": "number",
+                "minimum": 0
+              },
+              "evaluationMode": {
+                "type": "string",
+                "enum": [
+                  "or",
+                  "and"
+                ]
+              },
+              "enabled": {
+                "type": "boolean"
+              }
+            }
+          },
+          "uniqueItems": true
+        }
+      }
     }
   }
 }

package/scripts/harness/installation/application/usecases/run-install.ts

@@ -4,6 +4,8 @@
 // @work-item-id WI-174
 // @work-item-id WI-175
 // @work-item-id WI-177
+// @work-item-id WI-182
+// @work-item-id WI-183
 
 import { mkdir, readFile, writeFile, copyFile, chmod, access, lstat, readlink, symlink } from "node:fs/promises";
 import { dirname, join } from "node:path";

package/scripts/harness/main.ts

@@ -221,7 +221,7 @@ Commands:
   p2:check-freshness             Check doc freshness (--pattern <glob>, --dry-run, --format text|json)
   p2:validate-pointers           Validate doc pointers (--include-urls, --format text|json)
   p2:generate-e2e-template       Generate E2E test template (--phase <phase>, --output <path>)
-  p2:check-initial-creation      Detect long-lived initial_creation:true docs (--pattern <glob>, --format text|json)
+  p2:check-initial-creation      Public compatibility detector for long-lived initial_creation:true docs (--pattern <glob>, --format text|json)
   hook <pre-tool-use|post-tool-use|stop|session-start|user-prompt-submit>  Run agent hook (reads JSON from stdin; writes JSON to stdout for session-start/user-prompt-submit)
   pre-commit                              Run L2 pre-commit validators on staged files
   commit-msg <message-file>               Validate commit message trailers against staged files

package/scripts/harness/skill-quality/composition-root.ts

@@ -1,6 +1,7 @@
 /**
  * @layer infrastructure
  * @unit skill-quality
+ * @work-item-id WI-181
  * Composition Root - wires all dependencies together
  */