@massu/core 2.3.0 → 2.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -10,6 +10,29 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
10
10
  > redistributed under the **Apache License 2.0**. Full license + NOTICE:
11
11
  > `packages/core/assets/embedder/MODEL-LICENSE`.
12
12
 
13
+ ## [2.3.1] - 2026-07-23
14
+
15
+ ### Fixed
16
+
17
+ - **Anti-vacuity verification repairs — seven registered gates were listed as proven-can-fail
18
+ while exercising nothing.** A full DEFEAT sweep (the first to run to completion in some time)
19
+ found seven `gate-registry.json` plants whose patterns no longer matched their target source, so
20
+ the "planted defect" mutated nothing and the guarded test stayed green under it. Causes were
21
+ benign source edits the plants were never updated for: a retuned timeout constant, an engines
22
+ floor bump, an import gaining a symbol, a check being renamed, and a version pinned as a literal
23
+ (which rots every release by design). All seven re-derived as rot-proof patterns (character
24
+ classes, `\d` groups, `\g<0>` back-references) and individually DEFEAT-proven.
25
+ - **New `gate-plant-liveness-drift-guard`** asserts every plant pattern still matches its target,
26
+ so this rot fails in `npm test` in ~23ms instead of an hour into CI — and only against
27
+ git-tracked targets, since build artifacts are legitimately absent on a fresh checkout.
28
+ - **`.git/hooks/pre-push` now runs the 22-gate battery.** It was previously manual: `.git/hooks/`
29
+ held only `*.sample`, so nothing invoked `scripts/pre-push-light.sh` on `git push` and gate
30
+ `[20/22] Incident Coverage` (CR-62) never ran. Incident:
31
+ `docs/incidents/2026-07-23-unenforced-pre-push-gates-and-guard-validated-against-local-state.md`.
32
+
33
+ No runtime behaviour of `@massu/core` changes in this release; it is verification-infrastructure
34
+ only. Published because CR-64 forbids commits sitting on top of a published, tagged release.
35
+
13
36
  ## [2.3.0] - 2026-07-23
14
37
 
15
38
  ### Fixed
package/dist/cli.js CHANGED
File without changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@massu/core",
3
- "version": "2.3.0",
3
+ "version": "2.3.1",
4
4
  "type": "module",
5
5
  "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 56 workflow commands, 11 agents, 20+ patterns",
6
6
  "main": "./dist/cli.js",