@massu/core 1.14.0 → 1.15.1

package/CHANGELOG.md

@@ -4,6 +4,40 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.15.1] - 2026-07-05
+
+**Node 26 compatibility — native-module (better-sqlite3) ABI fix + Node-major CI matrix**. Restores massu on the now-default Node 26. `@massu/core` shipped a prebuilt `better-sqlite3` binary compiled for an older `NODE_MODULE_VERSION` (ABI) and declared `engines.node` `">=20.0.0 <26.0.0"`; when Homebrew's default Node became v26 (ABI 147), the native module failed to load (`NODE_MODULE_VERSION 127 ... requires 147`), breaking BOTH the license check and the memory database in every consumer repo — `npx @massu/core@1 doctor` reported UNHEALTHY. This bumps `better-sqlite3` `^12.6.2` → `^12.11.1` (which ships prebuilt ABI-147 binaries for macOS/Linux/Alpine/Windows, so `npx` consumers with no compiler still load it) and removes the artificial `<26.0.0` engines ceiling (now `>=20.0.0`). Verified end-to-end: the full sqlite-backed suite (2710 tests) + `doctor` HEALTHY on Node 26 AND Node 22 (previously-shipped ABI 127 — no regression). Patch per semver: a compatibility fix with no API change.
+
+### Fixed
+
+- **better-sqlite3 native module fails to load on Node 26 (ABI 147).** Bumped `better-sqlite3` to `^12.11.1` (prebuilt ABI-147 binaries for every consumer platform) and widened `packages/core` + `@massu/adapter-rails` + `@massu/adapter-spring` `engines.node` to `>=20.0.0` (dropped the `<26.0.0` ceiling that excluded the new default Node). `checkNativeModules()` + `checkLicenseStatus()` in `massu doctor` now pass on Node 26 (Status: HEALTHY).
+- **root `npm audit` → 0 findings.** Bumped `tsx` `^4.0.0` → `^4.23.0` (built on patched esbuild `~0.28.0`) and added a root `overrides` pin `esbuild` `^0.28.1`, deduping the dev/test tree onto esbuild 0.28.1 and closing GHSA-g7r4-m6w7-qqqr (esbuild dev-server file read, Windows-only; esbuild is a build/test-only dep — never in `@massu/core` `dependencies` nor any published artifact). `npm audit fix` resolved `tar` (GHSA-vmf3-w455-68vh, file smuggling) and `vite` (GHSA-v6wh-96g9-6wx3, high). All-severity closure: `npm audit` reports zero at repo root.
+
+### Added
+
+- **CI Node-major matrix + hard gate (structural drift-prevention, CR-46).** `.github/workflows/ci.yml` `native-module` job runs a better-sqlite3 load assertion + the full sqlite-backed suite on Node `20 / 22 / 24 / 26 / latest` — the `latest` leg auto-tracks the newest release, so a FUTURE Node major that breaks the native-module ABI fails CI with no manual matrix edit. Fronted by a required `Native Module Gate` status check (`.github/rulesets/main-branch.json`). The class is pinned by `node-compat-drift-guard.test.ts` (native load + no-`<`-ceiling on `engines.node` + CI-guard-wired) and the ruleset allowlist mirror (`ruleset-parser.ts` ↔ `ruleset-context-coverage.mjs`). Closes the "single-Node CI never sees a new-major ABI break" gap that let this incident ship. Incident: `docs/incidents/2026-07-05-node-26-native-module-abi.md`.
+
+## [1.15.0] - 2026-06-02
+
+**Enterprise auto-learning governance + signed audit export (`plan-2026-06-01-enterprise-governance-audit-export`)**. Generalizes the Phase-3 per-rule two-operator review into an org-level governance policy enforced at the server promotion chokepoint + role-aware RLS, and adds a cryptographically-signed compliance export. Enterprise orgs (`plan='cloud_enterprise'`) can now set a promotion policy — minimum promoter role (rank-compared, never lexicographic), N-of-M distinct-approver requirement, allowed destinations, and a tighten-only hardened-review flag — that `promoted_rule_upsert` enforces before any promotion applies; a promotion below threshold is held `pending` and excluded from every seat's pull cursor until enough distinct operators (each other than the promoter) approve it. The new signed audit export streams the org's full governance history (policy, approvals, promotions, revocations) as a single Ed25519-signed FLAT envelope (records carried as a `records_json` STRING so the signature covers every record — no nested-array forgery hole), verifiable offline against the bundled public key. The `audit-export` edge function is the SOLE signer (single-signer, CR-46) for both the programmatic `ms_live_` path (admin-scoped) and the dashboard path (which calls it server-side via a service-role bearer and holds no key). Backwards-compatible additive feature — off the Enterprise path, behavior is unchanged (`approval_state` defaults to `applied`) — minor per semver.
+
+### Added
+
+- **`packages/core/src/security/governance-export-verifier.ts`** — Ed25519 verifier for the signed `/audit-export` envelope; a one-line wrapper over the consolidated `verifyEd25519SignedEnvelope` core (third signed-envelope artifact, no copy-pasted crypto), NO transition mode. Bundled pubkey via `scripts/bundle-audit-export-pubkey.mjs` (+ `generate-audit-export-keypair.mjs`), wired into `prepublishOnly`.
+- **`packages/core/src/rule-candidate-hardened.ts`** — `validateGovernanceGate(policy, approvals)` (generalized N-of-M gate) + `roleRank()` ladder; `validateHardenedApplyGate` now delegates as the N=2 special case (CR-10: symbol + refs + exact messages preserved).
+- **`packages/core/src/auto-learning-entitlement.ts`** — `ENTERPRISE_GOVERNANCE_MIN_TIER` + `entitledForEnterpriseGovernance` (reuses the existing `tierLevel` + `PLAN_TO_TIER_MAP`; no parallel tier scheme).
+- **`/massu-rule approvals`** subcommand — surfaces the org policy + pending N-of-M approval state.
+- **pattern-scanner Check 37** + `governance-gate-invariant.test.ts` — the client-gate ↔ server-RPC ↔ RLS drift-guard (vitest ↔ scanner parity).
+- **Website (massu_prod + massu.ai)**: migration 049 (`org_promotion_policy` + `promotion_approvals` ledger + `promoted_rules.approval_state` + the `promoted_rule_upsert` governance branch + `promotion_approval_record`/`promotion_policy_reconcile` RPCs + role-aware RLS + widened `activity_feed` CHECK), the `audit-export` Enterprise-gated Ed25519-signing edge function (CR-58 `verify_jwt=false`), and the `/dashboard/governance` admin page (policy editor + approvals + signed-export download).
+
+### Changed
+
+- `promoted_rule_upsert` re-defined (CREATE OR REPLACE of the 045 body + governance branch); `/sync` recognizes the new `pending_approval` status; `/promoted-rules` excludes `approval_state='pending'` rows from the differential-pull cursor.
+
+### Fixed
+
+- **loop-controller mirror drift closed** (`plan-loop-controller-mirror-drift-closure`) — reconciled the 78-line preexisting drift between the canonical `.claude/commands/massu-loop/references/loop-controller.md` and its shipped mirror `packages/core/commands/massu-loop/references/loop-controller.md`, and extended the byte-equivalence drift-guard (`auto-learning-mirror-drift-guard.test.ts`) to cover the loop-controller pair so the drift class is now structurally impossible for both command-reference mirrors. Docs-only; no API change.
+
 ## [1.14.0] - 2026-06-02
 
 **Curated Rule Packs — versioned, installable, actually-enforced (`plan-2026-06-01-curated-rule-packs`)**. Closes the inert-marketplace bug class: the rule-pack marketplace existed but enforced nothing — installing a pack flattened its rules into `org_rules`, which no core enforcement path ever read. Now an installed pack's rules materialize on the developer's machine as Ed25519-signed, provenance-tagged rule candidates that a human reviews and approves through `/massu-rule packs` (packs **propose**, humans **approve** — CR-39; no fake "active"/"enforced" state). Pack rules ride the existing `applyRuleCandidate()` chokepoint with the same Team-gated, signature-verified trust model as team-shared promotion (CR-54/55/57); executable destinations (`pattern-scanner`/`custom-destination`) route through the hardened two-operator review path and never auto-enforce. Ships the versioning + curation workflow (SemVer monotonicity, an immutable `rule_pack_versions` history, a `rule_pack_publish` SECURITY DEFINER RPC) the marketplace previously lacked. Backwards-compatible additive feature — new `/massu-rule packs` subcommand + `pack` provenance origin, zero breaking changes — minor per semver.

package/commands/massu-loop/references/loop-controller.md

@@ -31,12 +31,21 @@ This command is a **loop controller** for implementation + verification. Your jo
 
 ### Agent Result Persistence
 
-All Task sub-agents MUST write their results to disk in addition to returning text:
-- Security review: `.massu/agent-results/{timestamp}-security.json`
-- Architecture review: `.massu/agent-results/{timestamp}-architecture.json`
-- Verification audit: `.massu/agent-results/{timestamp}-verify-{iteration}.json`
+All Task sub-agents MUST write their results to disk in addition to returning text. Two naming conventions are accepted by the completion gate (CR-52 / `scripts/massu-loop-completion-gate.sh`):
 
-JSON format: `{ iteration, gaps_discovered, gaps_fixed, gaps_remaining, plan_items_total, plan_items_verified, findings: [] }`
+**NEW convention (preferred, plan-token-namespaced)**:
+- `.massu/agent-results/<plan-token>-post-impl-security-<iso>.json`
+- `.massu/agent-results/<plan-token>-post-impl-architecture-<iso>.json`
+- `.massu/agent-results/<plan-token>-post-impl-pattern-<iso>.json`
+- `.massu/agent-results/<plan-token>-post-impl-ux-<iso>.json` (loop-playwright only)
+- Verification audit: `.massu/agent-results/<plan-token>-verify-iter<iteration>-<iso>.json`
+
+**LEGACY convention (still valid, accepted via filename + mtime ≥ loop-start)**:
+- `.massu/agent-results/{timestamp}-security.json`
+- `.massu/agent-results/{timestamp}-architecture.json`
+- `.massu/agent-results/{timestamp}-verify-{iteration}.json`
+
+JSON format: `{ plan_token, reviewer_type, timestamp, iteration, gaps_discovered, gaps_fixed, gaps_remaining, plan_items_total, plan_items_verified, findings: [] }`
 
 This prevents context overflow from killing verification progress. If the parent session crashes, a new session can read these files via `bash scripts/hooks/read-agent-results.sh` to resume.
 
@@ -53,8 +62,17 @@ At completion, write a completion entry.
 
 ```
 PLAN_PATH = $ARGUMENTS (the plan file path or task description)
+PLAN_TOKEN = extract `**Plan Token**:` value from PLAN_PATH header (used by Phase 0.5 / 2.2)
+# Interpolation contract: `${PLAN_TOKEN}` references in the snippets below are
+# substituted by the agent at protocol-interpretation time (NOT shell-substituted
+# inside a script). The PLAN_TOKEN value is validated by
+# scripts/lib/loop-completion-helpers.sh:plan_token_strict_check before any
+# script call (rejects newlines, whitespace, and degenerate tokens).
 iteration = 0
 
+# Phase 0.5: Record loop-start timestamp (consumed by Phase 2.2 completion gate, CR-52)
+bash -c 'source scripts/lib/loop-completion-helpers.sh && loop_start_record "${PLAN_TOKEN}"'
+
 # Phase 1: IMPLEMENT (do the work)
 # Read plan, extract items, implement each one with VR-* proof
 
@@ -62,17 +80,34 @@ iteration = 0
 # Spawn focused review subagents IN PARALLEL for independent analysis
 # Each reviewer has an adversarial mindset and a SINGLE focused concern (Principle #20)
 # Elegance/simplicity assessment happens in Phase 2.1 POST-BUILD REFLECTION (Q4)
+#
+# CR-52: Named reviewers REQUIRED (consolidated with golden-path/phase-2-implementation.md).
+# Each reviewer MUST write evidence JSON to:
+#   .massu/agent-results/${PLAN_TOKEN}-post-impl-<reviewer-type>-<iso>.json
+# before returning. The Phase 2.2 completion gate validates evidence existence.
 
-security_result = Task(subagent_type="general-purpose", model="opus", prompt="
+security_result = Task(subagent_type="massu-security-reviewer", model="opus", prompt="
   Review implementation for plan: {PLAN_PATH}
   Focus: Security vulnerabilities, auth gaps, input validation, data exposure
   Check all new/modified files. Return structured result with SECURITY_GATE.
+  CR-52: Write evidence to .massu/agent-results/${PLAN_TOKEN}-post-impl-security-<iso>.json
+  with fields {plan_token, reviewer_type:'security', timestamp, gaps_discovered, gaps_fixed, findings:[]}
 ")
 
-architecture_result = Task(subagent_type="general-purpose", model="opus", prompt="
+architecture_result = Task(subagent_type="massu-architecture-reviewer", model="opus", prompt="
   Review implementation for plan: {PLAN_PATH}
   Focus: Design issues, coupling problems, pattern compliance, scalability
   Check all new/modified files. Return structured result with ARCHITECTURE_GATE.
+  CR-52: Write evidence to .massu/agent-results/${PLAN_TOKEN}-post-impl-architecture-<iso>.json
+  with fields {plan_token, reviewer_type:'architecture', timestamp, gaps_discovered, gaps_fixed, findings:[]}
+")
+
+pattern_result = Task(subagent_type="massu-pattern-reviewer", model="sonnet", prompt="
+  Review implementation for plan: {PLAN_PATH}
+  Focus: Code quality, ESM compliance, config-driven patterns, TypeScript strict mode, test coverage
+  Check all new/modified files. Return structured result with PATTERN_GATE.
+  CR-52: Write evidence to .massu/agent-results/${PLAN_TOKEN}-post-impl-pattern-<iso>.json
+  with fields {plan_token, reviewer_type:'pattern', timestamp, gaps_discovered, gaps_fixed, findings:[]}
 ")
 
 # Parse results and fix ALL findings at ALL severity levels (CR-45)
@@ -159,6 +194,17 @@ END WHILE
 
 # Phase 2.1: POST-BUILD REFLECTION + MANDATORY MEMORY PERSIST (CR-38)
 # See references/auto-learning.md for full protocol
+
+# Phase 2.2: COMPLETION GATE (STRUCTURAL — CR-52)
+# AFTER Phase 2.1 POST-BUILD REFLECTION completes, but BEFORE returning the
+# final report. Non-zero exit BLOCKS the loop from declaring success.
+bash scripts/massu-loop-completion-gate.sh "${PLAN_TOKEN}" || {
+  echo "BLOCKED: Phase 1.5 evidence missing for ${PLAN_TOKEN}"
+  echo "Spawn at least one named reviewer subagent and ensure evidence JSON is written"
+  echo "to .massu/agent-results/${PLAN_TOKEN}-post-impl-*.json before retrying."
+  echo "Bypass (audit-trail logged): MASSU_SKIP_COMPLETION_GATE=1"
+  exit 1
+}
 ```
 
 ### Rules for the Loop Controller
@@ -175,6 +221,7 @@ END WHILE
 | **ALWAYS run multi-perspective review after implementation** | Multiple reviewers catch different issues than 1 auditor |
 | **Run review subagents IN PARALLEL** | Security and architecture reviews are independent |
 | **Fix CRITICAL/HIGH findings before verification** | Don't waste auditor passes on known issues |
+| **Phase 2.2 completion gate is STRUCTURAL** | `bash scripts/massu-loop-completion-gate.sh` — non-zero exit BLOCKS mark-complete (CR-52). Silent self-attestation is replaced by evidence-file existence check. |
 
 ### Why This Architecture Exists
 

package/dist/cli.js

@@ -12,11 +12,20 @@ var __require = /* @__PURE__ */ ((x2) => typeof require !== "undefined" ? requir
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x2 + '" is not supported');
 });
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e2) {
+    throw err = [e2], e2;
+  }
 };
 var __commonJS = (cb, mod) => function __require2() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e2) {
+    throw mod = 0, e2;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -16622,6 +16631,10 @@ var init_fileLock = __esm({
         this.causeCode = causeCode;
         this.name = "FileLockBusyError";
       }
+      lockPath;
+      holderPid;
+      retryAfterSeconds;
+      causeCode;
     };
   }
 });
@@ -16654,6 +16667,10 @@ var init_installLock = __esm({
         this.causeCode = causeCode;
         this.name = "InstallLockBusyError";
       }
+      lockPath;
+      holderPid;
+      retryAfterSeconds;
+      causeCode;
     };
   }
 });
@@ -17197,6 +17214,8 @@ var init_paths = __esm({
         this.cap = cap;
         this.name = "WatchSurfaceTooLargeError";
       }
+      fileCount;
+      cap;
     };
   }
 });
@@ -17312,6 +17331,8 @@ var init_state = __esm({
         this.daemonMax = daemonMax;
         this.name = "WatchStateNewerError";
       }
+      stateVersion;
+      daemonMax;
     };
     writeStateAtomicCounter = 0;
   }
@@ -18242,6 +18263,8 @@ var init_fetcher = __esm({
         this.host = host;
         this.name = "FetchAllowlistError";
       }
+      url;
+      host;
     };
     FetchTimeoutError = class extends Error {
       constructor(url, timeoutMs) {
@@ -18250,6 +18273,8 @@ var init_fetcher = __esm({
         this.timeoutMs = timeoutMs;
         this.name = "FetchTimeoutError";
       }
+      url;
+      timeoutMs;
     };
     FetchBodySizeError = class extends Error {
       constructor(url, maxBodyBytes) {
@@ -18260,6 +18285,8 @@ var init_fetcher = __esm({
         this.maxBodyBytes = maxBodyBytes;
         this.name = "FetchBodySizeError";
       }
+      url;
+      maxBodyBytes;
     };
   }
 });

package/dist/hooks/session-start.js

@@ -12,11 +12,20 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __commonJS = (cb, mod) => function __require2() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "1.14.0",
+  "version": "1.15.1",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 56 workflow commands, 11 agents, 20+ patterns",
   "main": "./dist/cli.js",
@@ -29,7 +29,7 @@
     "build:bundle-adapters": "tsx scripts/bundle-adapters.ts",
     "build:cli": "esbuild --bundle --platform=node --format=esm --outfile=dist/cli.js src/cli.ts --external:better-sqlite3 --external:yaml --external:zod --external:chokidar --external:proper-lockfile --external:fsevents --external:web-tree-sitter --external:tweetnacl --external:tar --external:smol-toml --external:vscode-languageserver-protocol --external:@massu/adapter-rails --external:@massu/adapter-spring --banner:js='#!/usr/bin/env node\nimport{createRequire as __cr}from\"module\";const require=__cr(import.meta.url);'",
     "build:hooks": "esbuild --bundle --platform=node --format=esm --outdir=dist/hooks src/hooks/*.ts --external:better-sqlite3 --external:yaml --external:zod --external:chokidar --external:proper-lockfile --external:fsevents --external:web-tree-sitter --external:tweetnacl --external:tar --external:smol-toml --external:vscode-languageserver-protocol --external:@massu/adapter-rails --external:@massu/adapter-spring --banner:js='import{createRequire as __cr}from\"module\";const require=__cr(import.meta.url);'",
-    "prepublishOnly": "bash ../../scripts/prepublish-check.sh && node ../../scripts/bundle-pubkey.mjs && node ../../scripts/bundle-license-pubkey.mjs && node ../../scripts/bundle-promotion-pubkey.mjs && cp ../../CHANGELOG.md ./CHANGELOG.md && npm run build",
+    "prepublishOnly": "bash ../../scripts/prepublish-check.sh && node ../../scripts/bundle-pubkey.mjs && node ../../scripts/bundle-license-pubkey.mjs && node ../../scripts/bundle-promotion-pubkey.mjs && node ../../scripts/bundle-audit-export-pubkey.mjs && cp ../../CHANGELOG.md ./CHANGELOG.md && npm run build",
     "bench:watch": "tsx test/perf/watch-benchmark.ts"
   },
   "dependencies": {
@@ -37,7 +37,7 @@
     "@massu/adapter-rails": "^1.0.0",
     "@massu/adapter-spring": "^1.0.0",
     "@massu/types": "1.12.0",
-    "better-sqlite3": "^12.6.2",
+    "better-sqlite3": "^12.11.1",
     "chokidar": "^3.6.0",
     "fast-glob": "^3.3.0",
     "proper-lockfile": "^4.1.2",
@@ -52,10 +52,11 @@
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",
     "@types/proper-lockfile": "^4.1.4",
-    "esbuild": "^0.27.3",
-    "tsx": "^4.0.0",
+    "@vitest/coverage-v8": "^4.1.8",
+    "esbuild": "^0.28.1",
+    "tsx": "^4.23.0",
     "typescript": "^5.4.0",
-    "vitest": "^4.0.18"
+    "vitest": "^4.1.8"
   },
   "files": [
     "dist/**/*",
@@ -79,7 +80,7 @@
     "feature-registry"
   ],
   "engines": {
-    "node": ">=20.0.0 <26.0.0"
+    "node": ">=20.0.0"
   },
   "repository": {
     "type": "git",