Fixes a silent failure where custom rules never enforced in plugin installs that copy a repository checkout instead of running a package manager.
Fixed
- Fixed custom rules never loading in repository-checkout plugin installs, such as the Claude Code marketplace, Codex, Copilot CLI, and Kimi Code. These installs have no
node_modules, so the schema loader's lazyrequire('zod')failed and every custom rule stayed inactive while built-in protections kept working. The CLI bundle now resolves its schema dependency from a vendoreddist/vendor/zod.cjscopy that ships with the package. (#72, #74) - Fixed rulebook and policy configuration errors being reported as
Invalid JSONon files that are valid JSON. These loaders now reportInvalid JSONonly for a real parse failure, and show the underlying filesystem or dependency message otherwise. (#72)