rulesync 14.2.0 → 15.0.0

package/dist/cli/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as createTempDirectory, A as RulesyncIgnore, At as RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH, B as ConfigFileSchema, Bt as RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH, C as RulesyncSubagentFrontmatterSchema, Ct as RULESYNC_AIIGNORE_FILE_NAME, D as RulesyncRuleFrontmatterSchema, Dt as RULESYNC_CONFIG_RELATIVE_FILE_PATH, E as RulesyncRule, Et as RULESYNC_COMMANDS_RELATIVE_DIR_PATH, F as RulesyncCheckFrontmatterSchema, Ft as RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH, G as fallbackLogger, Gt as RULESYNC_RELATIVE_DIR_PATH, H as findControlCharacter, Ht as RULESYNC_PERMISSIONS_JSONC_FILE_NAME, I as stringifyFrontmatter, It as RULESYNC_MCP_FILE_NAME, J as ErrorCodes, Jt as RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH, K as warnOnConflictingFlags, Kt as RULESYNC_RULES_RELATIVE_DIR_PATH, L as loadYaml, Lt as RULESYNC_MCP_JSONC_FILE_NAME, M as RulesyncCommand, Mt as RULESYNC_HOOKS_JSONC_FILE_NAME, N as RulesyncCommandFrontmatterSchema, Nt as RULESYNC_HOOKS_RELATIVE_FILE_PATH, O as RulesyncPermissions, Ot as RULESYNC_CONFIG_SCHEMA_URL, P as RulesyncCheck, Pt as RULESYNC_IGNORE_RELATIVE_FILE_PATH, Q as checkPathTraversal, Qt as ALL_FEATURES_WITH_WILDCARD, R as SKILL_FILE_NAME$1, Rt as RULESYNC_MCP_RELATIVE_FILE_PATH, S as RulesyncSubagent, St as MAX_FILE_SIZE, T as RulesyncSkillFrontmatterSchema, Tt as RULESYNC_CHECKS_RELATIVE_DIR_PATH, U as ConsoleLogger, Ut as RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH, V as SourceEntrySchema, Vt as RULESYNC_PERMISSIONS_FILE_NAME, W as JsonLogger, Wt as RULESYNC_PERMISSIONS_SCHEMA_URL, X as assertTreeContainsNoSymlinks, Xt as formatError, Y as assertDirectoryIfExists, Yt as RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH, Z as assertWritablePathInsideRoot, Zt as ALL_FEATURES, _ as CLAUDECODE_MEMORIES_DIR_NAME, _t as toPosixPath, a as convertFromTool, at as getHomeDirectory, b as ChecksProcessor, bt as ALL_TOOL_TARGETS_WITH_WILDCARD, c as SkillsProcessor, ct as readFileContent, d as HooksProcessor, dt as removeDirectoryStrict, et as directoryExists, f as CommandsProcessor, ft as removeFile, g as CLAUDECODE_LOCAL_RULE_FILE_NAME, gt as runWithDirectoryRollback, h as CLAUDECODE_DIR, ht as resolvePath, i as getProcessorRegistryEntry, it as getFileSize, j as RulesyncHooks, jt as RULESYNC_HOOKS_FILE_NAME, k as RulesyncMcp, kt as RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH, l as McpProcessor, lt as readFileContentOrNull, m as CODEXCLI_DIR, mt as removeTempDirectory, n as checkRulesyncDirExists, nt as fileExists, o as RulesProcessor, ot as isSymlink, p as CODEXCLI_BASH_RULES_FILE_NAME, pt as removeFileStrict, q as CLIError, qt as RULESYNC_SKILLS_RELATIVE_DIR_PATH, r as generate, rt as findFilesByGlobs, s as SubagentsProcessor, st as listDirectoryFiles, t as importFromTool, tt as ensureDir, u as IgnoreProcessor, ut as removeDirectory, v as CLAUDECODE_SETTINGS_LOCAL_FILE_NAME, vt as writeFileContent, w as RulesyncSkill, wt as RULESYNC_AIIGNORE_RELATIVE_FILE_PATH, x as getLocalSkillDirNames, xt as ToolTargetSchema, y as CLAUDECODE_SKILLS_DIR_PATH, yt as ALL_TOOL_TARGETS, z as ConfigResolver, zt as RULESYNC_MCP_SCHEMA_URL } from "../import-CMCy95RI.js";
+import { $ as assertDirectoryIfExists, $t as RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH, A as RulesyncMcp, At as RULESYNC_CHECKS_RELATIVE_DIR_PATH, B as stringifyFrontmatter, Bt as RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH, C as RulesyncSubagent, Ct as ALL_TOOL_TARGETS, D as RulesyncRule, Dt as MAX_FILE_SIZE, E as RulesyncSkillFrontmatterSchema, Et as ToolTargetSchema, F as parseJsonc, Ft as RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH, G as SourceEntrySchema, Gt as RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH, H as SKILL_FILE_NAME$1, Ht as RULESYNC_MCP_LEGACY_FILE_NAME, I as RulesyncCommand, It as RULESYNC_HOOKS_FILE_NAME, J as JsonLogger, Jt as RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH, K as findControlCharacter, Kt as RULESYNC_PERMISSIONS_FILE_NAME, L as RulesyncCommandFrontmatterSchema, Lt as RULESYNC_HOOKS_LEGACY_FILE_NAME, M as RulesyncHooks, Mt as RULESYNC_CONFIG_RELATIVE_FILE_PATH, N as getRulesyncSourceCandidates, Nt as RULESYNC_CONFIG_SCHEMA_URL, O as RulesyncRuleFrontmatterSchema, Ot as RULESYNC_AIIGNORE_FILE_NAME, P as resolveRulesyncSourceWritePath, Pt as RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH, Q as ErrorCodes, Qt as RULESYNC_SKILLS_RELATIVE_DIR_PATH, R as RulesyncCheck, Rt as RULESYNC_HOOKS_RELATIVE_FILE_PATH, S as getLocalSkillDirNames, St as writeFileContent, T as RulesyncSkill, Tt as PACKAGING_TOOL_TARGETS, U as ConfigResolver, Ut as RULESYNC_MCP_RELATIVE_FILE_PATH, V as loadYaml, Vt as RULESYNC_MCP_FILE_NAME, W as ConfigFileSchema, Wt as RULESYNC_MCP_SCHEMA_URL, X as warnOnConflictingFlags, Xt as RULESYNC_RELATIVE_DIR_PATH, Y as fallbackLogger, Yt as RULESYNC_PERMISSIONS_SCHEMA_URL, Z as CLIError, Zt as RULESYNC_RULES_RELATIVE_DIR_PATH, _ as CLAUDECODE_LOCAL_RULE_FILE_NAME, _t as removeFileStrict, a as convertFromTool, at as ensureDir, b as CLAUDECODE_SKILLS_DIR_PATH, bt as runWithDirectoryRollback, c as SubagentsProcessor, ct as getFileSize, d as IgnoreProcessor, dt as listDirectoryFiles, en as RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH, et as assertTreeContainsNoSymlinks, f as HooksProcessor, ft as readFileContent, g as CLAUDECODE_DIR, gt as removeFile, h as CODEXCLI_DIR, ht as removeDirectoryStrict, i as getProcessorRegistryEntry, it as directoryExists, j as RulesyncIgnore, jt as RULESYNC_COMMANDS_RELATIVE_DIR_PATH, k as RulesyncPermissions, kt as RULESYNC_AIIGNORE_RELATIVE_FILE_PATH, l as SkillsProcessor, lt as getHomeDirectory, m as CODEXCLI_BASH_RULES_FILE_NAME, mt as removeDirectory, n as checkRulesyncDirExists, nn as ALL_FEATURES_WITH_WILDCARD, nt as checkPathTraversal, o as isPackagingToolTarget, ot as fileExists, p as CommandsProcessor, pt as readFileContentOrNull, q as ConsoleLogger, qt as RULESYNC_PERMISSIONS_LEGACY_FILE_NAME, r as generate, rn as formatError, rt as createTempDirectory, s as RulesProcessor, st as findFilesByGlobs, t as importFromTool, tn as ALL_FEATURES, tt as assertWritablePathInsideRoot, u as McpProcessor, ut as isSymlink, v as CLAUDECODE_MEMORIES_DIR_NAME, vt as removeTempDirectory, w as RulesyncSubagentFrontmatterSchema, wt as ALL_TOOL_TARGETS_WITH_WILDCARD, x as ChecksProcessor, xt as toPosixPath, y as CLAUDECODE_SETTINGS_LOCAL_FILE_NAME, yt as resolvePath, z as RulesyncCheckFrontmatterSchema, zt as RULESYNC_IGNORE_RELATIVE_FILE_PATH } from "../import-BuxzyDyH.js";
 import { Command } from "commander";
 import { nonnegative, optional, refine, z } from "zod/mini";
 import { cp, mkdtemp, realpath, rm } from "node:fs/promises";
@@ -276,8 +276,14 @@ function singletonTemplate(feature) {
       "src/**": "allow"
     },
     "read": {
-      ".env": "deny"
+      ".env": "deny",
+      "credentials/**": "deny"
     }
+  },
+  "codexcli": {
+    "approval_policy": "on-request",
+    "approvals_reviewer": "auto_review",
+    "base_permission_profile": ":danger-full-access"
   }
 }
 `;
@@ -317,25 +323,19 @@ function createFeatureScaffold({ feature, name }) {
 		});
 		case "mcp": {
 			const paths = RulesyncMcp.getSettablePaths();
-			const relativeFilePath = join(paths.recommended.relativeDirPath, paths.recommended.relativeFilePath);
 			return {
 				feature,
-				relativeFilePath,
-				candidateRelativeFilePaths: [
-					...paths.jsonc ? [join(paths.jsonc.relativeDirPath, paths.jsonc.relativeFilePath)] : [],
-					relativeFilePath,
-					...paths.legacy ? [join(paths.legacy.relativeDirPath, paths.legacy.relativeFilePath)] : []
-				],
+				relativeFilePath: join(paths.recommended.relativeDirPath, paths.recommended.relativeFilePath),
+				candidateRelativeFilePaths: getRulesyncSourceCandidates({ paths }).map((candidate) => join(candidate.relativeDirPath, candidate.relativeFilePath)),
 				content: singletonTemplate(feature)
 			};
 		}
 		case "hooks": {
 			const paths = RulesyncHooks.getSettablePaths();
-			const relativeFilePath = join(paths.relativeDirPath, paths.relativeFilePath);
 			return {
 				feature,
-				relativeFilePath,
-				candidateRelativeFilePaths: [...paths.jsonc ? [join(paths.jsonc.relativeDirPath, paths.jsonc.relativeFilePath)] : [], relativeFilePath],
+				relativeFilePath: join(paths.recommended.relativeDirPath, paths.recommended.relativeFilePath),
+				candidateRelativeFilePaths: getRulesyncSourceCandidates({ paths }).map((candidate) => join(candidate.relativeDirPath, candidate.relativeFilePath)),
 				content: singletonTemplate(feature)
 			};
 		}
@@ -351,11 +351,10 @@ function createFeatureScaffold({ feature, name }) {
 		}
 		case "permissions": {
 			const paths = RulesyncPermissions.getSettablePaths();
-			const relativeFilePath = join(paths.relativeDirPath, paths.relativeFilePath);
 			return {
 				feature,
-				relativeFilePath,
-				candidateRelativeFilePaths: [...paths.jsonc ? [join(paths.jsonc.relativeDirPath, paths.jsonc.relativeFilePath)] : [], relativeFilePath],
+				relativeFilePath: join(paths.recommended.relativeDirPath, paths.recommended.relativeFilePath),
+				candidateRelativeFilePaths: getRulesyncSourceCandidates({ paths }).map((candidate) => join(candidate.relativeDirPath, candidate.relativeFilePath)),
 				content: singletonTemplate(feature)
 			};
 		}
@@ -3795,6 +3794,8 @@ async function convertCommand(logger, options) {
 	const fromTool = parseToolTarget$1(options.from ?? "", "source");
 	const toToolsRaw = (options.to ?? []).map((t) => parseToolTarget$1(t, "destination"));
 	const toTools = Array.from(new Set(toToolsRaw));
+	const packagingTarget = [fromTool, ...toTools].find(isPackagingToolTarget);
+	if (packagingTarget) throw new CLIError(`Plugin packaging target '${packagingTarget}' is not supported by convert. Use import --output-root and generate --output-roots with an explicit plugin directory.`, ErrorCodes.CONVERT_FAILED);
 	if (toTools.includes(fromTool)) throw new CLIError(`Destination tools must not include the source tool '${fromTool}'. Converting a tool onto itself is likely a mistake and may cause lossy round-trips.`, ErrorCodes.CONVERT_FAILED);
 	const config = await ConfigResolver.resolve({
 		...options,
@@ -3859,9 +3860,9 @@ const FEATURE_PATHS = {
 	skills: ["skills"],
 	checks: ["checks"],
 	ignore: [RULESYNC_AIIGNORE_FILE_NAME],
-	mcp: [RULESYNC_MCP_FILE_NAME, RULESYNC_MCP_JSONC_FILE_NAME],
-	hooks: [RULESYNC_HOOKS_FILE_NAME, RULESYNC_HOOKS_JSONC_FILE_NAME],
-	permissions: [RULESYNC_PERMISSIONS_FILE_NAME, RULESYNC_PERMISSIONS_JSONC_FILE_NAME]
+	mcp: [RULESYNC_MCP_FILE_NAME, RULESYNC_MCP_LEGACY_FILE_NAME],
+	hooks: [RULESYNC_HOOKS_FILE_NAME, RULESYNC_HOOKS_LEGACY_FILE_NAME],
+	permissions: [RULESYNC_PERMISSIONS_FILE_NAME, RULESYNC_PERMISSIONS_LEGACY_FILE_NAME]
 };
 /**
 * Check if target is a tool target (not rulesync)
@@ -3999,10 +4000,11 @@ async function convertFetchedFilesToRulesync(params) {
 	};
 }
 /**
-* Resolve features from options, handling wildcard
+* Resolve features from options, defaulting to skills and handling wildcard.
 */
 function resolveFeatures(features) {
-	if (!features || features.length === 0 || features.includes("*")) return [...ALL_FEATURES];
+	if (features === void 0) return ["skills"];
+	if (features.includes("*")) return [...ALL_FEATURES];
 	return features.filter((f) => ALL_FEATURES.includes(f));
 }
 /**
@@ -4821,6 +4823,7 @@ const ALL_GITIGNORE_ENTRIES = (() => {
 	const seen = /* @__PURE__ */ new Set();
 	const result = [];
 	for (const tag of GITIGNORE_ENTRY_REGISTRY) {
+		if (normalizeGitignoreEntryTargets(tag.target).every((target) => PACKAGING_TOOL_TARGETS.includes(target))) continue;
 		if (seen.has(tag.entry)) continue;
 		seen.add(tag.entry);
 		result.push(tag.entry);
@@ -4830,14 +4833,13 @@ const ALL_GITIGNORE_ENTRIES = (() => {
 const isTargetSelected = (target, selectedTargets) => {
 	const targets = normalizeGitignoreEntryTargets(target);
 	if (targets.includes("common")) return true;
-	if (!selectedTargets || selectedTargets.length === 0) return true;
-	if (selectedTargets.includes("*")) return true;
+	if (!selectedTargets || selectedTargets.length === 0 || selectedTargets.includes("*")) return targets.some((candidate) => selectedTargets?.includes(candidate) || !PACKAGING_TOOL_TARGETS.includes(candidate));
 	return targets.some((candidate) => selectedTargets.includes(candidate));
 };
 const getSelectedGitignoreEntryTargets = (target, selectedTargets) => {
 	const targets = normalizeGitignoreEntryTargets(target);
 	if (targets.includes("common")) return ["common"];
-	if (!selectedTargets || selectedTargets.length === 0 || selectedTargets.includes("*")) return targets;
+	if (!selectedTargets || selectedTargets.length === 0 || selectedTargets.includes("*")) return targets.filter((candidate) => selectedTargets?.includes(candidate) || !PACKAGING_TOOL_TARGETS.includes(candidate));
 	return targets.filter((candidate) => selectedTargets.includes(candidate));
 };
 const isFeatureSelected = (feature, features) => {
@@ -5158,16 +5160,13 @@ async function createConfigFile() {
 	await writeFileContent(path, JSON.stringify({
 		$schema: RULESYNC_CONFIG_SCHEMA_URL,
 		targets: [
-			"copilot",
-			"cursor",
+			"codexcli",
 			"claudecode",
-			"codexcli"
+			"opencode"
 		],
 		features: [
 			"rules",
-			"ignore",
 			"mcp",
-			"commands",
 			"subagents",
 			"skills",
 			"hooks",
@@ -5195,10 +5194,6 @@ async function createSampleFiles() {
 			name: "overview"
 		}),
 		createFeatureScaffold({ feature: "mcp" }),
-		createFeatureScaffold({
-			feature: "command",
-			name: "review-pr"
-		}),
 		createFeatureScaffold({
 			feature: "subagent",
 			name: "planner"
@@ -5207,21 +5202,24 @@ async function createSampleFiles() {
 			feature: "skill",
 			name: "project-context"
 		}),
-		createFeatureScaffold({ feature: "ignore" }),
 		createFeatureScaffold({ feature: "hooks" }),
 		createFeatureScaffold({ feature: "permissions" })
 	];
 	const results = [];
 	for (const sample of samples) {
 		await ensureDir(dirname(sample.relativeFilePath));
-		results.push(await writeIfNotExists(sample.relativeFilePath, sample.content));
+		results.push(await writeIfNotExists({
+			path: sample.relativeFilePath,
+			candidatePaths: sample.candidateRelativeFilePaths,
+			content: sample.content
+		}));
 	}
 	return results;
 }
-async function writeIfNotExists(path, content) {
-	if (await fileExists(path)) return {
+async function writeIfNotExists({ path, candidatePaths, content }) {
+	for (const candidatePath of candidatePaths) if (await fileExists(candidatePath)) return {
 		created: false,
-		path
+		path: candidatePath
 	};
 	await writeFileContent(path, content);
 	return {
@@ -5257,7 +5255,7 @@ async function initCommand(logger) {
 	}
 	logger.success("rulesync initialized successfully!");
 	logger.info("Next steps:");
-	logger.info(`1. Edit ${RULESYNC_RELATIVE_DIR_PATH}/**/*.md, ${RULESYNC_RELATIVE_DIR_PATH}/skills/*/${SKILL_FILE_NAME$1}, ${RULESYNC_MCP_RELATIVE_FILE_PATH}, ${RULESYNC_HOOKS_RELATIVE_FILE_PATH}, ${RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH} and ${RULESYNC_AIIGNORE_RELATIVE_FILE_PATH}`);
+	logger.info(`1. Edit ${RULESYNC_RELATIVE_DIR_PATH}/**/*.md, ${RULESYNC_RELATIVE_DIR_PATH}/skills/*/${SKILL_FILE_NAME$1}, ${RULESYNC_MCP_RELATIVE_FILE_PATH}, ${RULESYNC_HOOKS_RELATIVE_FILE_PATH} and ${RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH}`);
 	logger.info("2. Run 'rulesync generate' to create configuration files");
 }
 //#endregion
@@ -7235,17 +7233,16 @@ async function getHooksFile() {
 async function putHooksFile({ content }) {
 	if (content.length > maxHooksSizeBytes) throw new Error(`Hooks file size ${content.length} bytes exceeds maximum ${maxHooksSizeBytes} bytes (1MB) for ${RULESYNC_HOOKS_RELATIVE_FILE_PATH}`);
 	try {
-		JSON.parse(content);
+		parseJsonc(content);
 	} catch (error) {
-		throw new Error(`Invalid JSON format in hooks file (${RULESYNC_HOOKS_RELATIVE_FILE_PATH}): ${formatError(error)}`, { cause: error });
+		throw new Error(`Invalid JSONC format in hooks file (${RULESYNC_HOOKS_RELATIVE_FILE_PATH}): ${formatError(error)}`, { cause: error });
 	}
 	try {
 		const outputRoot = process.cwd();
-		const paths = RulesyncHooks.getSettablePaths();
-		const jsoncRelativePath = join(paths.jsonc.relativeDirPath, paths.jsonc.relativeFilePath);
-		if (await fileExists(join(outputRoot, jsoncRelativePath))) throw new Error(`${jsoncRelativePath} exists and takes precedence over ${RULESYNC_HOOKS_RELATIVE_FILE_PATH}. Edit ${jsoncRelativePath} directly instead.`);
-		const relativeDirPath = paths.relativeDirPath;
-		const relativeFilePath = paths.relativeFilePath;
+		const { relativeDirPath, relativeFilePath } = await resolveRulesyncSourceWritePath({
+			outputRoot,
+			paths: RulesyncHooks.getSettablePaths()
+		});
 		const fullPath = join(outputRoot, relativeDirPath, relativeFilePath);
 		const rulesyncHooks = new RulesyncHooks({
 			outputRoot,
@@ -7271,9 +7268,8 @@ async function deleteHooksFile() {
 	try {
 		const outputRoot = process.cwd();
 		const paths = RulesyncHooks.getSettablePaths();
-		await removeFile(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath));
-		await removeFile(join(outputRoot, paths.jsonc.relativeDirPath, paths.jsonc.relativeFilePath));
-		return { relativePathFromCwd: join(paths.relativeDirPath, paths.relativeFilePath) };
+		for (const candidate of getRulesyncSourceCandidates({ paths })) await removeFile(join(outputRoot, candidate.relativeDirPath, candidate.relativeFilePath));
+		return { relativePathFromCwd: join(paths.recommended.relativeDirPath, paths.recommended.relativeFilePath) };
 	} catch (error) {
 		throw new Error(`Failed to delete hooks file (${RULESYNC_HOOKS_RELATIVE_FILE_PATH}): ${formatError(error)}`, { cause: error });
 	}
@@ -7301,7 +7297,7 @@ const hooksTools = {
 	},
 	putHooksFile: {
 		name: "putHooksFile",
-		description: "Create or update the hooks configuration file (upsert operation). content parameter is required and must be valid JSON.",
+		description: "Create or update the hooks configuration file (upsert operation). content parameter is required and must be valid JSONC.",
 		parameters: hooksToolSchemas.putHooksFile,
 		execute: async (args) => {
 			const result = await putHooksFile({ content: args.content });
@@ -7517,17 +7513,16 @@ async function getMcpFile() {
 async function putMcpFile({ content }) {
 	if (content.length > maxMcpSizeBytes) throw new Error(`MCP file size ${content.length} bytes exceeds maximum ${maxMcpSizeBytes} bytes (1MB) for ${RULESYNC_MCP_RELATIVE_FILE_PATH}`);
 	try {
-		JSON.parse(content);
+		parseJsonc(content);
 	} catch (error) {
-		throw new Error(`Invalid JSON format in MCP file (${RULESYNC_MCP_RELATIVE_FILE_PATH}): ${formatError(error)}`, { cause: error });
+		throw new Error(`Invalid JSONC format in MCP file (${RULESYNC_MCP_RELATIVE_FILE_PATH}): ${formatError(error)}`, { cause: error });
 	}
 	try {
 		const outputRoot = process.cwd();
-		const paths = RulesyncMcp.getSettablePaths();
-		const jsoncRelativePath = join(paths.jsonc.relativeDirPath, paths.jsonc.relativeFilePath);
-		if (await fileExists(join(outputRoot, jsoncRelativePath))) throw new Error(`${jsoncRelativePath} exists and takes precedence over ${RULESYNC_MCP_RELATIVE_FILE_PATH}. Edit ${jsoncRelativePath} directly instead.`);
-		const relativeDirPath = paths.recommended.relativeDirPath;
-		const relativeFilePath = paths.recommended.relativeFilePath;
+		const { relativeDirPath, relativeFilePath } = await resolveRulesyncSourceWritePath({
+			outputRoot,
+			paths: RulesyncMcp.getSettablePaths()
+		});
 		const fullPath = join(outputRoot, relativeDirPath, relativeFilePath);
 		const rulesyncMcp = new RulesyncMcp({
 			outputRoot,
@@ -7553,11 +7548,7 @@ async function deleteMcpFile() {
 	try {
 		const outputRoot = process.cwd();
 		const paths = RulesyncMcp.getSettablePaths();
-		const recommendedPath = join(outputRoot, paths.recommended.relativeDirPath, paths.recommended.relativeFilePath);
-		const legacyPath = join(outputRoot, paths.legacy.relativeDirPath, paths.legacy.relativeFilePath);
-		await removeFile(recommendedPath);
-		await removeFile(join(outputRoot, paths.jsonc.relativeDirPath, paths.jsonc.relativeFilePath));
-		await removeFile(legacyPath);
+		for (const candidate of getRulesyncSourceCandidates({ paths })) await removeFile(join(outputRoot, candidate.relativeDirPath, candidate.relativeFilePath));
 		return { relativePathFromCwd: join(paths.recommended.relativeDirPath, paths.recommended.relativeFilePath) };
 	} catch (error) {
 		throw new Error(`Failed to delete MCP file (${RULESYNC_MCP_RELATIVE_FILE_PATH}): ${formatError(error)}`, { cause: error });
@@ -7586,7 +7577,7 @@ const mcpTools = {
 	},
 	putMcpFile: {
 		name: "putMcpFile",
-		description: "Create or update the MCP configuration file (upsert operation). content parameter is required and must be valid JSON.",
+		description: "Create or update the MCP configuration file (upsert operation). content parameter is required and must be valid JSONC.",
 		parameters: mcpToolSchemas.putMcpFile,
 		execute: async (args) => {
 			const result = await putMcpFile({ content: args.content });
@@ -7626,17 +7617,16 @@ async function getPermissionsFile() {
 async function putPermissionsFile({ content }) {
 	if (content.length > maxPermissionsSizeBytes) throw new Error(`Permissions file size ${content.length} bytes exceeds maximum ${maxPermissionsSizeBytes} bytes (1MB) for ${RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH}`);
 	try {
-		JSON.parse(content);
+		parseJsonc(content);
 	} catch (error) {
-		throw new Error(`Invalid JSON format in permissions file (${RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH}): ${formatError(error)}`, { cause: error });
+		throw new Error(`Invalid JSONC format in permissions file (${RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH}): ${formatError(error)}`, { cause: error });
 	}
 	try {
 		const outputRoot = process.cwd();
-		const paths = RulesyncPermissions.getSettablePaths();
-		const jsoncRelativePath = join(paths.jsonc.relativeDirPath, paths.jsonc.relativeFilePath);
-		if (await fileExists(join(outputRoot, jsoncRelativePath))) throw new Error(`${jsoncRelativePath} exists and takes precedence over ${RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH}. Edit ${jsoncRelativePath} directly instead.`);
-		const relativeDirPath = paths.relativeDirPath;
-		const relativeFilePath = paths.relativeFilePath;
+		const { relativeDirPath, relativeFilePath } = await resolveRulesyncSourceWritePath({
+			outputRoot,
+			paths: RulesyncPermissions.getSettablePaths()
+		});
 		const fullPath = join(outputRoot, relativeDirPath, relativeFilePath);
 		const rulesyncPermissions = new RulesyncPermissions({
 			outputRoot,
@@ -7662,9 +7652,8 @@ async function deletePermissionsFile() {
 	try {
 		const outputRoot = process.cwd();
 		const paths = RulesyncPermissions.getSettablePaths();
-		await removeFile(join(outputRoot, paths.relativeDirPath, paths.relativeFilePath));
-		await removeFile(join(outputRoot, paths.jsonc.relativeDirPath, paths.jsonc.relativeFilePath));
-		return { relativePathFromCwd: join(paths.relativeDirPath, paths.relativeFilePath) };
+		for (const candidate of getRulesyncSourceCandidates({ paths })) await removeFile(join(outputRoot, candidate.relativeDirPath, candidate.relativeFilePath));
+		return { relativePathFromCwd: join(paths.recommended.relativeDirPath, paths.recommended.relativeFilePath) };
 	} catch (error) {
 		throw new Error(`Failed to delete permissions file (${RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH}): ${formatError(error)}`, { cause: error });
 	}
@@ -7692,7 +7681,7 @@ const permissionsTools = {
 	},
 	putPermissionsFile: {
 		name: "putPermissionsFile",
-		description: "Create or update the permissions configuration file (upsert operation). content parameter is required and must be valid JSON.",
+		description: "Create or update the permissions configuration file (upsert operation). content parameter is required and must be valid JSONC.",
 		parameters: permissionsToolSchemas.putPermissionsFile,
 		execute: async (args) => {
 			const result = await putPermissionsFile({ content: args.content });
@@ -8989,8 +8978,9 @@ function wrapCommand$1({ name, errorCode, handler, getVersion, loggerFactory = c
 	};
 }
 //#endregion
-//#region src/cli/index.ts
-const getVersion = () => "14.2.0";
+//#region src/cli/program.ts
+const getVersion = () => "15.0.0";
+const FEATURES_HELP = `${ALL_FEATURES.join(",")}; ignore is deprecated, use permissions`;
 function wrapCommand(name, errorCode, handler) {
 	return wrapCommand$1({
 		name,
@@ -8999,14 +8989,14 @@ function wrapCommand(name, errorCode, handler) {
 		getVersion
 	});
 }
-const main = async () => {
+function createProgram() {
 	const program = new Command();
 	const version = getVersion();
 	program.name("rulesync").description("Unified AI rules management CLI tool").version(version, "-v, --version", "Show version").option("-j, --json", "Output results as JSON");
 	program.command("init").description("Initialize rulesync in current directory").option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").action(wrapCommand("init", "INIT_FAILED", async (logger) => {
 		await initCommand(logger);
 	}));
-	program.command("gitignore").description("Add generated files to .gitignore").option("-t, --targets <tools>", "Comma-separated list of tools to include (e.g., 'claudecode,copilot' or '*' for all)", parseCommaSeparatedList).option("-f, --features <features>", `Comma-separated list of features to include (${ALL_FEATURES.join(",")}) or '*' for all`, parseCommaSeparatedList).option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").action(wrapCommand("gitignore", "GITIGNORE_FAILED", async (logger, options) => {
+	program.command("gitignore").description("Add generated files to .gitignore").option("-t, --targets <tools>", "Comma-separated list of tools to include (e.g., 'claudecode,copilot' or '*' for all)", parseCommaSeparatedList).option("-f, --features <features>", `Comma-separated list of features to include (${FEATURES_HELP}) or '*' for all`, parseCommaSeparatedList).option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").action(wrapCommand("gitignore", "GITIGNORE_FAILED", async (logger, options) => {
 		const cliTargets = options.targets;
 		const cliFeatures = options.features;
 		const resolvedTargets = await resolveGitignoreTargets({ cliTargets });
@@ -9017,7 +9007,7 @@ const main = async () => {
 			silent: options.silent
 		});
 	}));
-	program.command("add <source>").description("Add a Rulesync feature file or install a declarative rule or skill source").option("--name <name>", "Name for a rule, command, subagent, skill, or check scaffold").option("-f, --force", "Overwrite an existing scaffold file without prompting").option("--skills <skills>", "Comma-separated skill names to install", parseCommaSeparatedList).option("--rules <rules>", "Comma-separated rule names to install", parseCommaSeparatedList).option("--transport <transport>", "Source transport: github, git, or npm").option("-r, --ref <ref>", "Git ref, npm version, or npm dist-tag").option("-p, --path <path>", "Skills path within the source").option("--rules-path <path>", "Rules path within the source").option("--registry <url>", "npm-compatible registry URL").option("--token-env <name>", "Environment variable containing the npm registry token").option("--token <token>", "GitHub token for private repositories").option("-c, --config <path>", "Path to configuration file").option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").action(wrapCommand("add", "ADD_FAILED", async (logger, options, _globalOpts, positionalArgs) => {
+	program.command("add <source>").description("Add a Rulesync feature file (ignore is deprecated; use permissions) or install a declarative rule or skill source").option("--name <name>", "Name for a rule, command, subagent, skill, or check scaffold").option("-f, --force", "Overwrite an existing scaffold file without prompting").option("--skills <skills>", "Comma-separated skill names to install", parseCommaSeparatedList).option("--rules <rules>", "Comma-separated rule names to install", parseCommaSeparatedList).option("--transport <transport>", "Source transport: github, git, or npm").option("-r, --ref <ref>", "Git ref, npm version, or npm dist-tag").option("-p, --path <path>", "Skills path within the source").option("--rules-path <path>", "Rules path within the source").option("--registry <url>", "npm-compatible registry URL").option("--token-env <name>", "Environment variable containing the npm registry token").option("--token <token>", "GitHub token for private repositories").option("-c, --config <path>", "Path to configuration file").option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").action(wrapCommand("add", "ADD_FAILED", async (logger, options, _globalOpts, positionalArgs) => {
 		const source = positionalArgs[0];
 		const addOptions = options;
 		await addCommand(logger, {
@@ -9026,17 +9016,21 @@ const main = async () => {
 			configPath: addOptions.config
 		});
 	}));
-	program.command("fetch <source>").description("Fetch files from a Git repository (GitHub/GitLab)").option("-t, --target <target>", "Target format to interpret files as (e.g., 'rulesync', 'claudecode'). Default: rulesync").option("-f, --features <features>", `Comma-separated list of features to fetch (${ALL_FEATURES.join(",")}) or '*' for all`, parseCommaSeparatedList).option("-r, --ref <ref>", "Branch, tag, or commit SHA to fetch from").option("-p, --path <path>", "Subdirectory path within the repository").option("-o, --output <dir>", "Output directory (default: .rulesync)").option("-c, --conflict <strategy>", "Conflict resolution strategy: skip, overwrite (default: overwrite)").option("--token <token>", "Git provider token for private repositories").option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").action(wrapCommand("fetch", "FETCH_FAILED", async (logger, options, _globalOpts, positionalArgs) => {
+	program.command("fetch <source>").description("Fetch files from a Git repository (GitHub/GitLab)").option("-t, --target <target>", "Target format to interpret files as (e.g., 'rulesync', 'claudecode'). Default: rulesync").option("-f, --features <features>", `Comma-separated list of features to fetch (${FEATURES_HELP}) or '*' for all. Default: skills`, parseCommaSeparatedList).option("-r, --ref <ref>", "Branch, tag, or commit SHA to fetch from").option("-p, --path <path>", "Subdirectory path within the repository").option("-o, --output <dir>", "Output directory (default: .rulesync)").option("-c, --conflict <strategy>", "Conflict resolution strategy: skip, overwrite (default: overwrite)").option("--token <token>", "Git provider token for private repositories").option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").action(wrapCommand("fetch", "FETCH_FAILED", async (logger, options, _globalOpts, positionalArgs) => {
 		const source = positionalArgs[0];
 		await fetchCommand(logger, {
 			...options,
 			source
 		});
 	}));
-	program.command("import").description("Import configurations from AI tools to rulesync format").option("-t, --targets <tool>", "Tool to import from (e.g., 'copilot', 'cursor', 'cline')", parseCommaSeparatedList).option("-f, --features <features>", `Comma-separated list of features to import (${ALL_FEATURES.join(",")}) or '*' for all`, parseCommaSeparatedList).option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").option("-g, --global", "Import for global(user scope) configuration files").action(wrapCommand("import", "IMPORT_FAILED", async (logger, options) => {
-		await importCommand(logger, options);
+	program.command("import").description("Import configurations from AI tools to rulesync format").option("-t, --targets <tool>", "Tool to import from (e.g., 'copilot', 'cursor', 'cline')", parseCommaSeparatedList).option("-f, --features <features>", `Comma-separated list of features to import (${FEATURES_HELP}) or '*' for all`, parseCommaSeparatedList).option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").option("-g, --global", "Import for global(user scope) configuration files").option("-o, --output-root <path>", "Root directory containing the tool configuration to import").action(wrapCommand("import", "IMPORT_FAILED", async (logger, options) => {
+		const { outputRoot, ...importOptions } = options;
+		await importCommand(logger, {
+			...importOptions,
+			outputRoots: outputRoot ? [outputRoot] : void 0
+		});
 	}));
-	program.command("convert").description("Convert configurations from one AI tool to other AI tools without writing .rulesync/ files").requiredOption("--from <tool>", "Source tool to convert from (e.g., 'cursor', 'claudecode')").requiredOption("--to <tools>", "Comma-separated list of destination tools (e.g., 'copilot,claudecode')", parseCommaSeparatedList).option("-f, --features <features>", `Comma-separated list of features to convert (${ALL_FEATURES.join(",")}) or '*' for all`, parseCommaSeparatedList).option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").option("-g, --global", "Convert for global(user scope) configuration files").option("--dry-run", "Dry run: show changes without writing files").action(wrapCommand("convert", "CONVERT_FAILED", async (logger, options) => {
+	program.command("convert").description("Convert configurations from one AI tool to other AI tools without writing .rulesync/ files").requiredOption("--from <tool>", "Source tool to convert from (e.g., 'cursor', 'claudecode')").requiredOption("--to <tools>", "Comma-separated list of destination tools (e.g., 'copilot,claudecode')", parseCommaSeparatedList).option("-f, --features <features>", `Comma-separated list of features to convert (${FEATURES_HELP}) or '*' for all`, parseCommaSeparatedList).option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").option("-g, --global", "Convert for global(user scope) configuration files").option("--dry-run", "Dry run: show changes without writing files").action(wrapCommand("convert", "CONVERT_FAILED", async (logger, options) => {
 		await convertCommand(logger, options);
 	}));
 	program.command("mcp").description("Start MCP server for rulesync").action(wrapCommand("mcp", "MCP_FAILED", async (logger, _options) => {
@@ -9054,20 +9048,25 @@ const main = async () => {
 			silent: options.silent
 		});
 	}));
-	program.command("generate").description("Generate configuration files for AI tools").option("-t, --targets <tools>", "Comma-separated list of tools to generate for (e.g., 'copilot,cursor,cline' or '*' for all)", parseCommaSeparatedList).option("-f, --features <features>", `Comma-separated list of features to generate (${ALL_FEATURES.join(",")}) or '*' for all`, parseCommaSeparatedList).option("--delete", "Delete all existing files in output directories before generating").option("-o, --output-roots <paths>", "Output root directories to generate files into (comma-separated for multiple paths)", parseCommaSeparatedList).option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").option("-c, --config <path>", "Path to configuration file").option("-g, --global", "Generate for global(user scope) configuration files").option("--simulate-commands", "Generate simulated commands. This feature is only available for copilot, cursor and codexcli.").option("--simulate-subagents", "Generate simulated subagents. This feature is only available for copilot and codexcli.").option("--simulate-skills", "Generate simulated skills. This feature is only available for copilot, cursor and codexcli.").option("--input-root <path>", "Path to the directory containing .rulesync/ (parent of .rulesync/)").option("--dry-run", "Dry run: show changes without writing files").option("--check", "Check if files are up to date (exits with code 1 if changes needed)").action(wrapCommand("generate", "GENERATION_FAILED", async (logger, options) => {
+	program.command("generate").description("Generate configuration files for AI tools").option("-t, --targets <tools>", "Comma-separated list of tools to generate for (e.g., 'copilot,cursor,cline' or '*' for all)", parseCommaSeparatedList).option("-f, --features <features>", `Comma-separated list of features to generate (${FEATURES_HELP}) or '*' for all`, parseCommaSeparatedList).option("--delete", "Delete all existing files in output directories before generating").option("-o, --output-roots <paths>", "Output root directories to generate files into (comma-separated for multiple paths)", parseCommaSeparatedList).option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").option("-c, --config <path>", "Path to configuration file").option("-g, --global", "Generate for global(user scope) configuration files").option("--simulate-commands", "Generate simulated commands. This feature is only available for copilot, cursor and codexcli.").option("--simulate-subagents", "Generate simulated subagents. This feature is only available for copilot and codexcli.").option("--simulate-skills", "Generate simulated skills. This feature is only available for copilot, cursor and codexcli.").option("--input-root <path>", "Path to the directory containing .rulesync/ (parent of .rulesync/)").option("--dry-run", "Dry run: show changes without writing files").option("--check", "Check if files are up to date (exits with code 1 if changes needed)").action(wrapCommand("generate", "GENERATION_FAILED", async (logger, options) => {
 		await generateCommand(logger, options);
 	}));
 	program.command("update").description("Update rulesync to the latest version").option("--check", "Check for updates without installing").option("--force", "Force update even if already at latest version").option("--token <token>", "GitHub token for API access").option("-V, --verbose", "Verbose output").option("-s, --silent", "Suppress all output").action(wrapCommand("update", "UPDATE_FAILED", async (logger, options) => {
 		await updateCommand(logger, version, options);
 	}));
-	program.parse();
-};
+	return program;
+}
 function parseInstallMode(raw) {
 	if (raw === void 0) return void 0;
 	const match = INSTALL_MODES.find((m) => m === raw);
 	if (!match) throw new Error(`Invalid --mode value "${raw}". Expected one of: ${INSTALL_MODES.join(", ")}.`);
 	return match;
 }
+//#endregion
+//#region src/cli/index.ts
+async function main() {
+	createProgram().parse();
+}
 main().catch((error) => {
 	console.error(formatError(error));
 	process.exit(1);