@plumpslabs/kuma 2.3.0 → 2.3.2

package/dist/{init-O4MBXFZL.js → init-AJAESUZZ.js}

@@ -4,8 +4,8 @@ import {
   formatInitResults,
   generateInitMdContent,
   runInit
-} from "./chunk-5A6AKUJZ.js";
-import "./chunk-IXMWW5WA.js";
+} from "./chunk-L5WU2HTN.js";
+import "./chunk-E2KFPEBT.js";
 export {
   ALL_CONFIG_TYPES,
   CONFIG_LABELS,

package/dist/kumaDb-RC2EO3OB.js

@@ -0,0 +1,63 @@
+import {
+  addContextNote,
+  addSecurityFinding,
+  addTodo,
+  checkPortability,
+  ensureGitignore,
+  getBenchmarkDiff,
+  getChanges,
+  getDb,
+  getFileSummary,
+  getLatestVerifications,
+  getResearchCache,
+  getSecurityFindings,
+  listContextNotes,
+  listDecisionLog,
+  listResearchCache,
+  listTodos,
+  recordChange,
+  recordDecisionLog,
+  rollbackChange,
+  runDoctor,
+  runGarbageCollection,
+  saveBenchmark,
+  saveDb,
+  saveFileSummary,
+  saveHealthSnapshot,
+  saveResearchCache,
+  saveVerification,
+  updateDecisionStatus,
+  updateTodoStatus
+} from "./chunk-5N6KXACT.js";
+import "./chunk-E2KFPEBT.js";
+export {
+  addContextNote,
+  addSecurityFinding,
+  addTodo,
+  checkPortability,
+  ensureGitignore,
+  getBenchmarkDiff,
+  getChanges,
+  getDb,
+  getFileSummary,
+  getLatestVerifications,
+  getResearchCache,
+  getSecurityFindings,
+  listContextNotes,
+  listDecisionLog,
+  listResearchCache,
+  listTodos,
+  recordChange,
+  recordDecisionLog,
+  rollbackChange,
+  runDoctor,
+  runGarbageCollection,
+  saveBenchmark,
+  saveDb,
+  saveFileSummary,
+  saveHealthSnapshot,
+  saveResearchCache,
+  saveVerification,
+  updateDecisionStatus,
+  updateTodoStatus
+};

package/dist/{kumaGraph-GW5SWOHQ.js → kumaGraph-5IZ4FDZA.js}

@@ -14,9 +14,9 @@ import {
   searchGraph,
   traceFlow,
   upsertNode
-} from "./chunk-IMO4QAFJ.js";
-import "./chunk-6NEMSUKP.js";
-import "./chunk-IXMWW5WA.js";
+} from "./chunk-EQ2CE4UC.js";
+import "./chunk-5N6KXACT.js";
+import "./chunk-E2KFPEBT.js";
 export {
   addEdge,
   analyzeImpact,

package/dist/{kumaMemory-IO7TVE7W.js → kumaMemory-ME4XWD5Z.js}

@@ -4,9 +4,9 @@ import {
   recordDecision,
   scoreMemoryRelevance,
   shouldRecordDecision
-} from "./chunk-OUPFJQKW.js";
-import "./chunk-TT37TE4P.js";
-import "./chunk-IXMWW5WA.js";
+} from "./chunk-EIK7T746.js";
+import "./chunk-SU7BTOND.js";
+import "./chunk-E2KFPEBT.js";
 export {
   formatDecisionTemplate,
   getProactiveMemories,

package/dist/kumaMiner-GFEGUWGH.js

@@ -0,0 +1,142 @@
+import {
+  recordDecisionLog
+} from "./chunk-5N6KXACT.js";
+import {
+  recordDecision
+} from "./chunk-EIK7T746.js";
+import "./chunk-SU7BTOND.js";
+import "./chunk-E2KFPEBT.js";
+
+// src/engine/kumaMiner.ts
+import fs from "fs";
+import path from "path";
+import { execSync } from "child_process";
+import fastGlob from "fast-glob";
+async function mineHistoricalDecisions(options = {}) {
+  const root = process.cwd();
+  const limit = options.limit || 15;
+  const candidates = [];
+  try {
+    const sinceFlag = options.since ? `--since="${options.since}"` : `--since="1 year"`;
+    const gitCmd = `git log ${sinceFlag} -n 100 --pretty=format:"%h|%an|%ad|%s" --date=short`;
+    const gitOutput = execSync(gitCmd, { cwd: root, encoding: "utf-8" });
+    const keywords = ["fix", "revert", "hack", "workaround", "urgent", "hotfix", "don't touch", "temporary", "deprecated", "workaround"];
+    const lines = gitOutput.split("\n").filter(Boolean);
+    for (const line of lines) {
+      const parts = line.split("|");
+      if (parts.length < 4) continue;
+      const [hash, author, date, subject] = parts;
+      const lowerSubj = subject.toLowerCase();
+      const matchedKeyword = keywords.find((kw) => lowerSubj.includes(kw));
+      if (matchedKeyword) {
+        let changedFiles = "";
+        try {
+          changedFiles = execSync(`git show --name-only --oneline ${hash}`, { cwd: root, encoding: "utf-8" }).split("\n").slice(1).filter(Boolean).slice(0, 3).join(", ");
+        } catch {
+        }
+        candidates.push({
+          id: `git-${hash}`,
+          type: "git_commit",
+          title: `[Git Commit] ${subject}`,
+          context: `Commit ${hash} by ${author} on ${date}.${changedFiles ? ` Files touched: ${changedFiles}` : ""}`,
+          rationale: `Historical signal pattern "${matchedKeyword}" found in commit message.`,
+          commitHash: hash,
+          pattern: matchedKeyword
+        });
+        if (candidates.length >= limit) break;
+      }
+    }
+  } catch {
+  }
+  if (candidates.length < limit) {
+    try {
+      const scopePattern = options.scope ? `**/*${options.scope}*.*` : "**/*.{ts,js,py,go,rs,java,md}";
+      const files = await fastGlob(scopePattern, {
+        cwd: root,
+        ignore: ["node_modules/**", "dist/**", ".kuma/**", ".git/**", "coverage/**"],
+        onlyFiles: true
+      });
+      const commentPatterns = [
+        { tag: "HACK", regex: /\/\/\s*HACK:?\s*(.*)|#\s*HACK:?\s*(.*)/i },
+        { tag: "FIXME", regex: /\/\/\s*FIXME:?\s*(.*)|#\s*FIXME:?\s*(.*)/i },
+        { tag: "TODO", regex: /\/\/\s*TODO:?\s*(.*)|#\s*TODO:?\s*(.*)/i },
+        { tag: "XXX", regex: /\/\/\s*XXX:?\s*(.*)|#\s*XXX:?\s*(.*)/i },
+        { tag: "WARNING", regex: /\/\/\s*WARNING:?\s*(.*)|#\s*WARNING:?\s*(.*)/i }
+      ];
+      for (const file of files.slice(0, 50)) {
+        if (candidates.length >= limit) break;
+        const fullPath = path.join(root, file);
+        if (!fs.existsSync(fullPath)) continue;
+        const content = fs.readFileSync(fullPath, "utf-8");
+        const lines = content.split("\n");
+        for (let i = 0; i < lines.length; i++) {
+          const l = lines[i];
+          for (const cp of commentPatterns) {
+            const match = cp.regex.exec(l);
+            if (match) {
+              const text = (match[1] || match[2] || l).trim();
+              candidates.push({
+                id: `comment-${file}-${i + 1}`,
+                type: "inline_comment",
+                title: `[${cp.tag}] ${file}:${i + 1}`,
+                context: `Inline comment marker "${cp.tag}" found in file "${file}" at line ${i + 1}.`,
+                rationale: text || l.trim(),
+                filePath: file,
+                lineNumber: i + 1,
+                pattern: cp.tag
+              });
+              if (candidates.length >= limit) break;
+            }
+          }
+          if (candidates.length >= limit) break;
+        }
+      }
+    } catch {
+    }
+  }
+  if (options.confirm && candidates.length > 0) {
+    let recordedCount = 0;
+    for (const c of candidates) {
+      await recordDecisionLog({
+        title: c.title,
+        context: c.context,
+        rationale: c.rationale,
+        outcome: `Mined from ${c.type} (${c.pattern})`,
+        status: "proposed"
+      });
+      await recordDecision({
+        title: c.title,
+        context: c.context,
+        options: [],
+        rationale: c.rationale,
+        outcome: `Mined from ${c.type}`,
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      });
+      recordedCount++;
+    }
+    return `\u26CF\uFE0F **Mined & Recorded ${recordedCount} Decisions** into decision log & graph.
+Use \`kuma_memory({ action: 'decision_log' })\` to view all active & proposed decisions.`;
+  }
+  if (candidates.length === 0) {
+    return "\u26CF\uFE0F **Decision Mining**: No significant historical decision markers (HACK/FIXME/git fix) found for the requested scope.";
+  }
+  const report = [
+    `\u26CF\uFE0F **Decision Mining Candidates** (${candidates.length} candidate(s) found)`,
+    "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501",
+    "Review these draft historical decisions mined from git history & inline comments:",
+    ""
+  ];
+  candidates.forEach((c, idx) => {
+    report.push(`**${idx + 1}. ${c.title}**`);
+    report.push(`  \u2022 **Type**: \`${c.type}\` | **Signal**: \`${c.pattern}\``);
+    report.push(`  \u2022 **Context**: ${c.context}`);
+    report.push(`  \u2022 **Rationale**: ${c.rationale}`);
+    report.push("");
+  });
+  report.push("\u{1F4A1} *To accept and record these mined decisions into knowledge graph & decision.md:*");
+  report.push(`Run: \`kuma_memory({ action: 'mine', confirm: true${options.scope ? `, scope: '${options.scope}'` : ""} })\``);
+  return report.join("\n");
+}
+export {
+  mineHistoricalDecisions
+};

package/dist/kumaVerifier-VYW5WH6V.js

@@ -0,0 +1,108 @@
+import {
+  saveVerification
+} from "./chunk-5N6KXACT.js";
+import {
+  sessionMemory
+} from "./chunk-SU7BTOND.js";
+import "./chunk-E2KFPEBT.js";
+
+// src/engine/kumaVerifier.ts
+import fs from "fs";
+import path from "path";
+import { exec } from "child_process";
+function detectTestRunner(root = process.cwd()) {
+  const pkgPath = path.join(root, "package.json");
+  if (fs.existsSync(pkgPath)) {
+    try {
+      const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
+      if (pkg.scripts && pkg.scripts.test) {
+        if (fs.existsSync(path.join(root, "pnpm-lock.yaml"))) {
+          return { runner: "pnpm", baseCommand: "pnpm test" };
+        }
+        if (fs.existsSync(path.join(root, "yarn.lock"))) {
+          return { runner: "yarn", baseCommand: "yarn test" };
+        }
+        return { runner: "npm", baseCommand: "npm test" };
+      }
+    } catch {
+    }
+  }
+  if (fs.existsSync(path.join(root, "pytest.ini")) || fs.existsSync(path.join(root, "pyproject.toml"))) {
+    return { runner: "pytest", baseCommand: "pytest" };
+  }
+  if (fs.existsSync(path.join(root, "Cargo.toml"))) {
+    return { runner: "cargo", baseCommand: "cargo test" };
+  }
+  if (fs.existsSync(path.join(root, "go.mod"))) {
+    return { runner: "go", baseCommand: "go test ./..." };
+  }
+  if (fs.existsSync(path.join(root, "Makefile"))) {
+    return { runner: "make", baseCommand: "make test" };
+  }
+  return { runner: "unknown", baseCommand: "npm test" };
+}
+async function runAutoVerification(options = {}) {
+  const startTime = Date.now();
+  const root = process.cwd();
+  const scope = options.scope || "session-impact";
+  const timeoutMs = options.timeoutMs || 3e4;
+  const { runner, baseCommand } = detectTestRunner(root);
+  let testFiles = [];
+  const modified = sessionMemory.getModifiedFiles().map((f) => f.filePath);
+  if (options.scope) {
+    const term = options.scope.toLowerCase();
+    testFiles = modified.filter((f) => f.toLowerCase().includes(term));
+    if (testFiles.length === 0) {
+      try {
+        const { default: glob } = await import("fast-glob");
+        const found = await glob([`**/*${term}*test*.*`, `**/*test*/*${term}*.*`], { cwd: root, ignore: ["node_modules/**", "dist/**"] });
+        testFiles = found;
+      } catch {
+      }
+    }
+  } else {
+    testFiles = modified.filter((f) => f.includes(".test.") || f.includes(".spec.") || f.includes("_test."));
+  }
+  let fullCommand = baseCommand;
+  if (testFiles.length > 0 && runner === "npm") {
+    fullCommand = `${baseCommand} -- ${testFiles.map((f) => `"${f}"`).join(" ")}`;
+  }
+  return new Promise((resolve) => {
+    exec(fullCommand, { cwd: root, timeout: timeoutMs }, async (error, stdout, stderr) => {
+      const durationMs = Date.now() - startTime;
+      const rawOutput = (stdout + "\n" + stderr).trim();
+      const passed = !error;
+      const truncatedOutput = rawOutput.length > 2e3 ? rawOutput.substring(rawOutput.length - 2e3) : rawOutput;
+      await saveVerification(scope, runner, fullCommand, passed, truncatedOutput, durationMs);
+      const statusSymbol = passed ? "\u2705" : "\u{1F534}";
+      const summaryHeader = `${statusSymbol} **Auto-Verification ${passed ? "PASSED" : "FAILED"}**
+\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501`;
+      const details = [
+        summaryHeader,
+        `\u{1F6E0}\uFE0F **Runner**: \`${runner}\``,
+        `\u{1F4BB} **Command**: \`${fullCommand}\``,
+        `\u{1F3AF} **Scope**: \`${scope}\`${testFiles.length > 0 ? ` (${testFiles.length} file(s) matched)` : ""}`,
+        `\u23F1\uFE0F **Duration**: ${durationMs}ms`,
+        ""
+      ];
+      if (!passed) {
+        details.push("\u26A0\uFE0F **BLOCKER**: Verification failed! Please fix test failures before shipping or continuing edits.");
+        details.push("```text");
+        details.push(rawOutput.substring(0, 1500));
+        details.push("```");
+      } else {
+        details.push("\u{1F389} All scoped tests passed cleanly!");
+        if (rawOutput) {
+          details.push("```text");
+          details.push(rawOutput.substring(0, 800));
+          details.push("```");
+        }
+      }
+      resolve(details.join("\n"));
+    });
+  });
+}
+export {
+  detectTestRunner,
+  runAutoVerification
+};

package/dist/pathValidator-V4DC6U6Z.js

@@ -0,0 +1,22 @@
+import {
+  ensureBackupDir,
+  getBackupPath,
+  getKumaBackupsDir,
+  getKumaDir,
+  getProjectRoot,
+  isReadable,
+  isWritable,
+  validateFileExtension,
+  validateFilePath
+} from "./chunk-E2KFPEBT.js";
+export {
+  ensureBackupDir,
+  getBackupPath,
+  getKumaBackupsDir,
+  getKumaDir,
+  getProjectRoot,
+  isReadable,
+  isWritable,
+  validateFileExtension,
+  validateFilePath
+};

package/dist/{safetyScore-7FU7XSY5.js → safetyScore-QX2LBJ7H.js}

@@ -2,11 +2,11 @@ import {
   getGitDiffStat,
   getSessionStats,
   getUnresolvedCount
-} from "./chunk-WP3WRPDC.js";
+} from "./chunk-JIL533AM.js";
 import {
   sessionMemory
-} from "./chunk-TT37TE4P.js";
-import "./chunk-IXMWW5WA.js";
+} from "./chunk-SU7BTOND.js";
+import "./chunk-E2KFPEBT.js";
 
 // src/engine/safetyScore.ts
 async function computeSafetyScore(inputGoal) {
@@ -52,7 +52,7 @@ async function computeSafetyScore(inputGoal) {
     totalScore += 20;
   }
   try {
-    const { getDb } = await import("./kumaDb-KN7Z4B5V.js");
+    const { getDb } = await import("./kumaDb-RC2EO3OB.js");
     const db = await getDb();
     const nodeCount = db.exec("SELECT COUNT(*) as c FROM nodes")[0]?.values[0][0] ?? 0;
     const edgeCount = db.exec("SELECT COUNT(*) as c FROM edges")[0]?.values[0][0] ?? 0;
@@ -83,7 +83,7 @@ async function computeSafetyScore(inputGoal) {
     totalScore += 5;
   }
   try {
-    const { getDb } = await import("./kumaDb-KN7Z4B5V.js");
+    const { getDb } = await import("./kumaDb-RC2EO3OB.js");
     const db = await getDb();
     const researchCount = db.exec("SELECT COUNT(*) as c FROM research_cache")[0]?.values[0][0] ?? 0;
     checks.push({
@@ -106,14 +106,38 @@ async function computeSafetyScore(inputGoal) {
   const allFailures = stats.failedFiles.flatMap((f) => f.failures);
   const testFailures = allFailures.filter((f) => f.error.toLowerCase().includes("test") || f.error.toLowerCase().includes("fail"));
   const hasRunTests = stats.hasRunTests;
-  if (!hasRunTests) {
+  let latestVerif = null;
+  try {
+    const { getLatestVerifications } = await import("./kumaDb-RC2EO3OB.js");
+    const verifs = await getLatestVerifications(1);
+    if (verifs.length > 0) latestVerif = verifs[0];
+  } catch {
+  }
+  if (!hasRunTests && !latestVerif) {
     checks.push({
       label: "Tests Status",
       status: "warn",
-      message: "No tests run yet this session",
+      message: "No tests run yet this session \u2014 run kuma_safety({ action: 'verify' })",
       weight: 10
     });
     totalScore += 10;
+  } else if (latestVerif) {
+    if (latestVerif.passed) {
+      checks.push({
+        label: "Tests Status",
+        status: "pass",
+        message: `Auto-verified passed (${latestVerif.scope})`,
+        weight: 15
+      });
+      totalScore += 15;
+    } else {
+      checks.push({
+        label: "Tests Status",
+        status: "fail",
+        message: `Auto-verification failed (${latestVerif.scope}) \u2014 fix before shipping`,
+        weight: 0
+      });
+    }
   } else if (testFailures.length === 0 && unresolvedCount === 0) {
     checks.push({
       label: "Tests Status",

package/dist/{sessionMemory-52ECPXZ6.js → sessionMemory-LI4FIAMF.js}

@@ -1,6 +1,6 @@
 import {
   sessionMemory
-} from "./chunk-TT37TE4P.js";
+} from "./chunk-SU7BTOND.js";
 export {
   sessionMemory
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plumpslabs/kuma",
-  "version": "2.3.0",
+  "version": "2.3.2",
   "description": "Safety-first context & orchestration engine for AI coding agents. MCP server with mandatory research pipeline, knowledge graph, impact analysis, decision memory, and safety guard — works with any MCP client.",
   "type": "module",
   "main": "dist/index.js",