progmune-runtime 3.3.2 → 3.3.4

package/dist/mcp-server.mjs

@@ -10,9 +10,13 @@ import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextpro
 import * as fs from "fs";
 import * as path from "path";
 import { fileURLToPath } from "url";
+import { createRequire } from "module";
 import { createLogger } from "./logger.js";
-// ── ESM-compatible __dirname (the compiled output is an .mjs module) ──
+// ── ESM-compatible __dirname + require (the compiled output is an .mjs
+//    module, but the codebase uses lazy require() for circular-dependency
+//    handling — createRequire keeps those working in ESM scope) ──
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const require = createRequire(import.meta.url);
 // ── Load .env（包目录 + 项目目录，后者优先） ──
 for (const envPath of [
     path.resolve(process.env.PROGMUNE_PROJECT_DIR || process.cwd(), ".env"),

package/dist/validator.js

@@ -86,13 +86,14 @@ function checkVariableFlow(actions) {
     };
     const processAction = (action) => {
         if (action.kind === "call") {
-            // call 参数值若是变量引用（$ 前缀，或 planner 剥离 $ 后的裸标识符），
-            // 必须已声明——白皮书 SVL-3："变量先声明后使用"。
+            // call 参数值若是显式变量引用（$ 前缀），必须已声明——白皮书 SVL-3：
+            // "变量先声明后使用"。裸标识符保持字面量语义（可能是枚举值），
+            // 不做声明检查。
             for (const arg of action.args || []) {
                 const val = arg?.value;
-                if (typeof val !== "string")
+                if (typeof val !== "string" || !val.startsWith("$"))
                     continue;
-                const bare = val.startsWith("$") ? val.slice(1) : val;
+                const bare = val.slice(1);
                 if (bare && !isLiteral(bare) && /^[a-zA-Z_]\w*$/.test(bare) && !declared.has(bare)) {
                     errors.push(`变量 '${bare}' 在使用前未声明 (call 参数 '${arg.name || "?"}')`);
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "progmune-runtime",
-  "version": "3.3.2",
+  "version": "3.3.4",
   "description": "Progmune — AI Trust Decision Engine. Verify AI-generated code before it reaches production. Outputs APPROVED / NEEDS_REVIEW / BLOCKED with evidence.",
   "files": [
     "dist/",