pumuki 6.3.105 → 6.3.106

package/CHANGELOG.md

@@ -6,6 +6,13 @@ This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [6.3.106] - 2026-04-22
+
+### Fixed
+
+- **Activación advisory de SDD/PRE_WRITE fijada al runtime diagnosticado:** `sdd validate` deja de devolver `activation_command` con `pumuki@latest` cuando el namespace experimental está desactivado por defecto.
+- **Session guidance reproducible en SDD:** las instrucciones de `session --refresh` y `session --open` también quedan fijadas a la versión efectiva del runtime en lugar de depender de `latest`.
+
 ## [6.3.105] - 2026-04-22
 
 ### Fixed

package/VERSION

@@ -1 +1 @@
-v6.3.105
+v6.3.106

package/docs/operations/RELEASE_NOTES.md

@@ -6,6 +6,12 @@ This file keeps only the operational highlights and rollout notes that matter wh
 
 ## 2026-04 (CLI stability and macOS notifications)
 
+### 2026-04-22 (v6.3.106)
+
+- **Cierre útil del literal residual en RuralGo:** `sdd validate --stage=PRE_WRITE --json` ya no recomienda activar SDD con `pumuki@latest`; devuelve el mismo runtime versionado que está diagnosticando.
+- **Guía de sesión SDD alineada:** `session --refresh` y `session --open` quedan versionados para evitar drift en repos consumidores.
+- **Rollout recomendado:** publicar `pumuki@6.3.106`, repin inmediato en `RuralGo` y revalidar `sdd validate --stage=PRE_WRITE --json` comprobando `activation_command` fijo a `6.3.106`.
+
 ### 2026-04-22 (v6.3.105)
 
 - **Remediación reproducible en la línea publicada:** las rutas bloqueantes de `PRE_WRITE` dejan de sugerir `pumuki@latest` y fijan la versión efectiva del runtime al construir `next_action.command`.

package/integrations/lifecycle/cli.ts

@@ -1670,10 +1670,19 @@ export type PreWriteOpenSpecBootstrapTrace = {
   details?: string;
 };
 
-export const PRE_WRITE_ENABLE_ADVISORY_COMMAND =
-  'PUMUKI_EXPERIMENTAL_PRE_WRITE=advisory npx --yes --package pumuki@latest pumuki sdd validate --stage=PRE_WRITE --json';
-export const buildSddExperimentalEnableAdvisoryCommand = (stage: SddStage): string =>
-  `PUMUKI_EXPERIMENTAL_SDD=advisory npx --yes --package pumuki@latest pumuki sdd validate --stage=${stage} --json`;
+export const buildPreWriteExperimentalEnableAdvisoryCommand = (
+  repoRoot: string = process.cwd()
+): string =>
+  `PUMUKI_EXPERIMENTAL_PRE_WRITE=advisory ${buildPinnedPumukiNpxCommand(
+    getCurrentPumukiVersion({ repoRoot })
+  )} sdd validate --stage=PRE_WRITE --json`;
+export const buildSddExperimentalEnableAdvisoryCommand = (
+  stage: SddStage,
+  repoRoot: string = process.cwd()
+): string =>
+  `PUMUKI_EXPERIMENTAL_SDD=advisory ${buildPinnedPumukiNpxCommand(
+    getCurrentPumukiVersion({ repoRoot })
+  )} sdd validate --stage=${stage} --json`;
 const buildAnalyticsExperimentalEnableCommand = (action: AnalyticsHotspotsCommand): string =>
   `PUMUKI_EXPERIMENTAL_ANALYTICS=advisory npx --yes --package pumuki@latest pumuki analytics hotspots ${action} --json`;
 const SAAS_INGESTION_ENABLE_ADVISORY_COMMAND =

package/integrations/lifecycle/cliSdd.ts

@@ -36,7 +36,7 @@ import {
   buildPreWriteExperimentalDisabledResult,
   buildSddExperimentalEnableAdvisoryCommand,
   runRawPreWriteAiGateCheck,
-  PRE_WRITE_ENABLE_ADVISORY_COMMAND,
+  buildPreWriteExperimentalEnableAdvisoryCommand,
 } from './cli';
 
 export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: LifecycleCliDependencies): Promise<number> => {
@@ -106,7 +106,7 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
                     },
                     next_action: {
                       reason: 'PRE_WRITE_EXPERIMENTAL_DISABLED',
-                      command: PRE_WRITE_ENABLE_ADVISORY_COMMAND,
+                      command: buildPreWriteExperimentalEnableAdvisoryCommand(process.cwd()),
                     },
                   },
                   null,
@@ -127,7 +127,7 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
                 `[pumuki][sdd] pre-write enforcement: mode=${preWriteEnforcement.mode} source=${preWriteEnforcement.source} blocking=no`
               );
               writeInfo(
-                `[pumuki][sdd] next action (PRE_WRITE_EXPERIMENTAL_DISABLED): ${PRE_WRITE_ENABLE_ADVISORY_COMMAND}`
+                `[pumuki][sdd] next action (PRE_WRITE_EXPERIMENTAL_DISABLED): ${buildPreWriteExperimentalEnableAdvisoryCommand(process.cwd())}`
               );
             }
             return 0;
@@ -209,7 +209,7 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
             !aiGate && result.decision.code === 'SDD_EXPERIMENTAL_DISABLED'
               ? {
                 reason: 'SDD_EXPERIMENTAL_DISABLED',
-                command: buildSddExperimentalEnableAdvisoryCommand(result.stage),
+                command: buildSddExperimentalEnableAdvisoryCommand(result.stage, process.cwd()),
               }
               : undefined;
           if (parsed.json) {

package/integrations/sdd/policy.ts

@@ -13,6 +13,7 @@ import {
   refreshSddSession,
 } from './sessionStore';
 import { resolveDegradedMode } from '../gate/degradedMode';
+import { getCurrentPumukiVersion } from '../lifecycle/packageInfo';
 import { resolveSddCompletenessEnforcement } from '../policy/sddCompletenessEnforcement';
 import { resolveSddExperimentalFeature } from '../policy/experimentalFeatures';
 import type {
@@ -22,16 +23,20 @@ import type {
   SddStatusPayload,
 } from './types';
 
-const SDD_SESSION_REFRESH_COMMAND =
-  'npx --yes --package pumuki@latest pumuki sdd session --refresh --ttl-minutes=90';
-const SDD_SESSION_OPEN_AUTO_COMMAND =
-  'npx --yes --package pumuki@latest pumuki sdd session --open --change=auto';
-const SDD_SESSION_OPEN_EXPLICIT_COMMAND =
-  'npx --yes --package pumuki@latest pumuki sdd session --open --change=<id>';
 const SDD_COMPLETENESS_CONTRACT_VERSION = '1.0';
 
-const buildSddExperimentalEnableCommand = (stage: SddStage): string =>
-  `PUMUKI_EXPERIMENTAL_SDD=advisory npx --yes --package pumuki@latest pumuki sdd validate --stage=${stage} --json`;
+const buildPinnedPumukiNpxCommand = (version: string): string =>
+  `npx --yes --package pumuki@${version} pumuki`;
+const buildSddSessionRefreshCommand = (repoRoot: string): string =>
+  `${buildPinnedPumukiNpxCommand(getCurrentPumukiVersion({ repoRoot }))} sdd session --refresh --ttl-minutes=90`;
+const buildSddSessionOpenAutoCommand = (repoRoot: string): string =>
+  `${buildPinnedPumukiNpxCommand(getCurrentPumukiVersion({ repoRoot }))} sdd session --open --change=auto`;
+const buildSddSessionOpenExplicitCommand = (repoRoot: string): string =>
+  `${buildPinnedPumukiNpxCommand(getCurrentPumukiVersion({ repoRoot }))} sdd session --open --change=<id>`;
+const buildSddExperimentalEnableCommand = (stage: SddStage, repoRoot: string): string =>
+  `PUMUKI_EXPERIMENTAL_SDD=advisory ${buildPinnedPumukiNpxCommand(
+    getCurrentPumukiVersion({ repoRoot })
+  )} sdd validate --stage=${stage} --json`;
 
 const resolveMissingSessionGuidance = (repoRoot: string): {
   message: string;
@@ -40,15 +45,17 @@ const resolveMissingSessionGuidance = (repoRoot: string): {
   suggestedChangeId?: string;
   availableChangeIds: ReadonlyArray<string>;
 } => {
+  const sessionOpenAutoCommand = buildSddSessionOpenAutoCommand(repoRoot);
+  const sessionOpenExplicitCommand = buildSddSessionOpenExplicitCommand(repoRoot);
   const availableChangeIds = listActiveOpenSpecChangeIds(repoRoot);
   if (availableChangeIds.length === 1) {
     const suggestedChangeId = availableChangeIds[0] ?? '';
     const command =
-      `npx --yes --package pumuki@latest pumuki sdd session --open --change=${suggestedChangeId}`;
+      `${buildPinnedPumukiNpxCommand(getCurrentPumukiVersion({ repoRoot }))} sdd session --open --change=${suggestedChangeId}`;
     return {
       message: `SDD session is not active. Run \`${command}\` and retry.`,
       command,
-      fallbackCommand: SDD_SESSION_OPEN_AUTO_COMMAND,
+      fallbackCommand: sessionOpenAutoCommand,
       suggestedChangeId,
       availableChangeIds,
     };
@@ -56,17 +63,17 @@ const resolveMissingSessionGuidance = (repoRoot: string): {
   if (availableChangeIds.length > 1) {
     return {
       message:
-        `SDD session is not active. Run \`${SDD_SESSION_OPEN_EXPLICIT_COMMAND}\` ` +
+        `SDD session is not active. Run \`${sessionOpenExplicitCommand}\` ` +
         `with one active change id. Active changes: ${availableChangeIds.join(', ')}.`,
-      command: SDD_SESSION_OPEN_EXPLICIT_COMMAND,
-      fallbackCommand: SDD_SESSION_OPEN_EXPLICIT_COMMAND,
+      command: sessionOpenExplicitCommand,
+      fallbackCommand: sessionOpenExplicitCommand,
       availableChangeIds,
     };
   }
   return {
-    message: `SDD session is not active. Run \`${SDD_SESSION_OPEN_AUTO_COMMAND}\` and retry.`,
-    command: SDD_SESSION_OPEN_AUTO_COMMAND,
-    fallbackCommand: SDD_SESSION_OPEN_AUTO_COMMAND,
+    message: `SDD session is not active. Run \`${sessionOpenAutoCommand}\` and retry.`,
+    command: sessionOpenAutoCommand,
+    fallbackCommand: sessionOpenAutoCommand,
     availableChangeIds,
   };
 };
@@ -181,8 +188,9 @@ const evaluateSessionRequirements = (params: {
     );
   }
   if (!status.session.valid || !status.session.changeId) {
+    const refreshCommand = buildSddSessionRefreshCommand(params.repoRoot);
     const details: Record<string, string | boolean> = {
-      command: SDD_SESSION_REFRESH_COMMAND,
+      command: refreshCommand,
       autoRefreshEnabled: params.autoRefreshEnabled,
       autoRefreshAttempted: params.autoRefreshAttempted,
     };
@@ -191,8 +199,8 @@ const evaluateSessionRequirements = (params: {
     }
     const message =
       params.autoRefreshAttempted && params.autoRefreshError
-        ? `SDD session is invalid or expired. Auto-refresh failed (${params.autoRefreshError}). Run \`${SDD_SESSION_REFRESH_COMMAND}\` or reopen it.`
-        : `SDD session is invalid or expired. Run \`${SDD_SESSION_REFRESH_COMMAND}\` or reopen it.`;
+        ? `SDD session is invalid or expired. Auto-refresh failed (${params.autoRefreshError}). Run \`${refreshCommand}\` or reopen it.`
+        : `SDD session is invalid or expired. Run \`${refreshCommand}\` or reopen it.`;
     return blocked(
       'SDD_SESSION_INVALID',
       message,
@@ -327,7 +335,7 @@ export const evaluateSddPolicy = (params: {
           experimentalSource: sddExperimentalFeature.source,
           activation_env: sddExperimentalFeature.activationVariable,
           legacy_activation_env: sddExperimentalFeature.legacyActivationVariable,
-          activation_command: buildSddExperimentalEnableCommand(params.stage),
+          activation_command: buildSddExperimentalEnableCommand(params.stage, params.repoRoot),
         },
       },
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.105",
+  "version": "6.3.106",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {