pumuki 6.3.105 → 6.3.107

package/CHANGELOG.md

@@ -6,6 +6,21 @@ This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [6.3.107] - 2026-04-22
+
+### Fixed
+
+- **Semántica inequívoca para sesión SDD expirada:** una sesión vencida deja de proyectarse como `active=true` y pasa a exponerse como inactiva (`active=false`) manteniendo `valid=false` y `remainingSeconds=0`.
+- **Refresh de sesión expiradas todavía permitido:** `refreshSddSession` ya no exige `active=true`; basta con conservar el `changeId` para poder renovar una sesión caducada sin reabrirla manualmente.
+- **Policy SDD alineada con esa semántica:** `evaluateSddPolicy` trata la sesión como `missing` solo cuando falta `changeId`, y conserva `SDD_SESSION_INVALID` para sesiones expiradas con contexto recuperable.
+
+## [6.3.106] - 2026-04-22
+
+### Fixed
+
+- **Activación advisory de SDD/PRE_WRITE fijada al runtime diagnosticado:** `sdd validate` deja de devolver `activation_command` con `pumuki@latest` cuando el namespace experimental está desactivado por defecto.
+- **Session guidance reproducible en SDD:** las instrucciones de `session --refresh` y `session --open` también quedan fijadas a la versión efectiva del runtime en lugar de depender de `latest`.
+
 ## [6.3.105] - 2026-04-22
 
 ### Fixed

package/VERSION

@@ -1 +1 @@
-v6.3.105
+v6.3.106

package/docs/operations/RELEASE_NOTES.md

@@ -6,6 +6,18 @@ This file keeps only the operational highlights and rollout notes that matter wh
 
 ## 2026-04 (CLI stability and macOS notifications)
 
+### 2026-04-22 (v6.3.107)
+
+- **Sesión SDD expirada sin semántica ambigua:** la línea publicada deja de diagnosticar sesiones vencidas como `active=true` con `valid=false`; ahora las proyecta como inactivas y mantiene la señal de expiración con `remainingSeconds=0`.
+- **Refresh reproducible de sesiones caducadas:** si el `changeId` sigue siendo válido, `session --refresh` vuelve a servir para recuperar la sesión sin exigir un `session --open` innecesario.
+- **Rollout recomendado:** publicar `pumuki@6.3.107`, repin inmediato en `RuralGo` y revalidar `sdd validate --stage=PRE_WRITE --json` comprobando que `status.session.active=false`, `valid=false` y que la remediación siga permitiendo refresh sobre el mismo `changeId`.
+
+### 2026-04-22 (v6.3.106)
+
+- **Cierre útil del literal residual en RuralGo:** `sdd validate --stage=PRE_WRITE --json` ya no recomienda activar SDD con `pumuki@latest`; devuelve el mismo runtime versionado que está diagnosticando.
+- **Guía de sesión SDD alineada:** `session --refresh` y `session --open` quedan versionados para evitar drift en repos consumidores.
+- **Rollout recomendado:** publicar `pumuki@6.3.106`, repin inmediato en `RuralGo` y revalidar `sdd validate --stage=PRE_WRITE --json` comprobando `activation_command` fijo a `6.3.106`.
+
 ### 2026-04-22 (v6.3.105)
 
 - **Remediación reproducible en la línea publicada:** las rutas bloqueantes de `PRE_WRITE` dejan de sugerir `pumuki@latest` y fijan la versión efectiva del runtime al construir `next_action.command`.

package/integrations/lifecycle/cli.ts

@@ -1670,10 +1670,19 @@ export type PreWriteOpenSpecBootstrapTrace = {
   details?: string;
 };
 
-export const PRE_WRITE_ENABLE_ADVISORY_COMMAND =
-  'PUMUKI_EXPERIMENTAL_PRE_WRITE=advisory npx --yes --package pumuki@latest pumuki sdd validate --stage=PRE_WRITE --json';
-export const buildSddExperimentalEnableAdvisoryCommand = (stage: SddStage): string =>
-  `PUMUKI_EXPERIMENTAL_SDD=advisory npx --yes --package pumuki@latest pumuki sdd validate --stage=${stage} --json`;
+export const buildPreWriteExperimentalEnableAdvisoryCommand = (
+  repoRoot: string = process.cwd()
+): string =>
+  `PUMUKI_EXPERIMENTAL_PRE_WRITE=advisory ${buildPinnedPumukiNpxCommand(
+    getCurrentPumukiVersion({ repoRoot })
+  )} sdd validate --stage=PRE_WRITE --json`;
+export const buildSddExperimentalEnableAdvisoryCommand = (
+  stage: SddStage,
+  repoRoot: string = process.cwd()
+): string =>
+  `PUMUKI_EXPERIMENTAL_SDD=advisory ${buildPinnedPumukiNpxCommand(
+    getCurrentPumukiVersion({ repoRoot })
+  )} sdd validate --stage=${stage} --json`;
 const buildAnalyticsExperimentalEnableCommand = (action: AnalyticsHotspotsCommand): string =>
   `PUMUKI_EXPERIMENTAL_ANALYTICS=advisory npx --yes --package pumuki@latest pumuki analytics hotspots ${action} --json`;
 const SAAS_INGESTION_ENABLE_ADVISORY_COMMAND =

package/integrations/lifecycle/cliSdd.ts

@@ -36,7 +36,7 @@ import {
   buildPreWriteExperimentalDisabledResult,
   buildSddExperimentalEnableAdvisoryCommand,
   runRawPreWriteAiGateCheck,
-  PRE_WRITE_ENABLE_ADVISORY_COMMAND,
+  buildPreWriteExperimentalEnableAdvisoryCommand,
 } from './cli';
 
 export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: LifecycleCliDependencies): Promise<number> => {
@@ -106,7 +106,7 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
                     },
                     next_action: {
                       reason: 'PRE_WRITE_EXPERIMENTAL_DISABLED',
-                      command: PRE_WRITE_ENABLE_ADVISORY_COMMAND,
+                      command: buildPreWriteExperimentalEnableAdvisoryCommand(process.cwd()),
                     },
                   },
                   null,
@@ -127,7 +127,7 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
                 `[pumuki][sdd] pre-write enforcement: mode=${preWriteEnforcement.mode} source=${preWriteEnforcement.source} blocking=no`
               );
               writeInfo(
-                `[pumuki][sdd] next action (PRE_WRITE_EXPERIMENTAL_DISABLED): ${PRE_WRITE_ENABLE_ADVISORY_COMMAND}`
+                `[pumuki][sdd] next action (PRE_WRITE_EXPERIMENTAL_DISABLED): ${buildPreWriteExperimentalEnableAdvisoryCommand(process.cwd())}`
               );
             }
             return 0;
@@ -209,7 +209,7 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
             !aiGate && result.decision.code === 'SDD_EXPERIMENTAL_DISABLED'
               ? {
                 reason: 'SDD_EXPERIMENTAL_DISABLED',
-                command: buildSddExperimentalEnableAdvisoryCommand(result.stage),
+                command: buildSddExperimentalEnableAdvisoryCommand(result.stage, process.cwd()),
               }
               : undefined;
           if (parsed.json) {

package/integrations/sdd/policy.ts

@@ -12,7 +12,9 @@ import {
   readSddSession,
   refreshSddSession,
 } from './sessionStore';
+import type { ILifecycleGitService } from '../lifecycle/gitService';
 import { resolveDegradedMode } from '../gate/degradedMode';
+import { getCurrentPumukiVersion } from '../lifecycle/packageInfo';
 import { resolveSddCompletenessEnforcement } from '../policy/sddCompletenessEnforcement';
 import { resolveSddExperimentalFeature } from '../policy/experimentalFeatures';
 import type {
@@ -22,16 +24,20 @@ import type {
   SddStatusPayload,
 } from './types';
 
-const SDD_SESSION_REFRESH_COMMAND =
-  'npx --yes --package pumuki@latest pumuki sdd session --refresh --ttl-minutes=90';
-const SDD_SESSION_OPEN_AUTO_COMMAND =
-  'npx --yes --package pumuki@latest pumuki sdd session --open --change=auto';
-const SDD_SESSION_OPEN_EXPLICIT_COMMAND =
-  'npx --yes --package pumuki@latest pumuki sdd session --open --change=<id>';
 const SDD_COMPLETENESS_CONTRACT_VERSION = '1.0';
 
-const buildSddExperimentalEnableCommand = (stage: SddStage): string =>
-  `PUMUKI_EXPERIMENTAL_SDD=advisory npx --yes --package pumuki@latest pumuki sdd validate --stage=${stage} --json`;
+const buildPinnedPumukiNpxCommand = (version: string): string =>
+  `npx --yes --package pumuki@${version} pumuki`;
+const buildSddSessionRefreshCommand = (repoRoot: string): string =>
+  `${buildPinnedPumukiNpxCommand(getCurrentPumukiVersion({ repoRoot }))} sdd session --refresh --ttl-minutes=90`;
+const buildSddSessionOpenAutoCommand = (repoRoot: string): string =>
+  `${buildPinnedPumukiNpxCommand(getCurrentPumukiVersion({ repoRoot }))} sdd session --open --change=auto`;
+const buildSddSessionOpenExplicitCommand = (repoRoot: string): string =>
+  `${buildPinnedPumukiNpxCommand(getCurrentPumukiVersion({ repoRoot }))} sdd session --open --change=<id>`;
+const buildSddExperimentalEnableCommand = (stage: SddStage, repoRoot: string): string =>
+  `PUMUKI_EXPERIMENTAL_SDD=advisory ${buildPinnedPumukiNpxCommand(
+    getCurrentPumukiVersion({ repoRoot })
+  )} sdd validate --stage=${stage} --json`;
 
 const resolveMissingSessionGuidance = (repoRoot: string): {
   message: string;
@@ -40,15 +46,17 @@ const resolveMissingSessionGuidance = (repoRoot: string): {
   suggestedChangeId?: string;
   availableChangeIds: ReadonlyArray<string>;
 } => {
+  const sessionOpenAutoCommand = buildSddSessionOpenAutoCommand(repoRoot);
+  const sessionOpenExplicitCommand = buildSddSessionOpenExplicitCommand(repoRoot);
   const availableChangeIds = listActiveOpenSpecChangeIds(repoRoot);
   if (availableChangeIds.length === 1) {
     const suggestedChangeId = availableChangeIds[0] ?? '';
     const command =
-      `npx --yes --package pumuki@latest pumuki sdd session --open --change=${suggestedChangeId}`;
+      `${buildPinnedPumukiNpxCommand(getCurrentPumukiVersion({ repoRoot }))} sdd session --open --change=${suggestedChangeId}`;
     return {
       message: `SDD session is not active. Run \`${command}\` and retry.`,
       command,
-      fallbackCommand: SDD_SESSION_OPEN_AUTO_COMMAND,
+      fallbackCommand: sessionOpenAutoCommand,
       suggestedChangeId,
       availableChangeIds,
     };
@@ -56,25 +64,25 @@ const resolveMissingSessionGuidance = (repoRoot: string): {
   if (availableChangeIds.length > 1) {
     return {
       message:
-        `SDD session is not active. Run \`${SDD_SESSION_OPEN_EXPLICIT_COMMAND}\` ` +
+        `SDD session is not active. Run \`${sessionOpenExplicitCommand}\` ` +
         `with one active change id. Active changes: ${availableChangeIds.join(', ')}.`,
-      command: SDD_SESSION_OPEN_EXPLICIT_COMMAND,
-      fallbackCommand: SDD_SESSION_OPEN_EXPLICIT_COMMAND,
+      command: sessionOpenExplicitCommand,
+      fallbackCommand: sessionOpenExplicitCommand,
       availableChangeIds,
     };
   }
   return {
-    message: `SDD session is not active. Run \`${SDD_SESSION_OPEN_AUTO_COMMAND}\` and retry.`,
-    command: SDD_SESSION_OPEN_AUTO_COMMAND,
-    fallbackCommand: SDD_SESSION_OPEN_AUTO_COMMAND,
+    message: `SDD session is not active. Run \`${sessionOpenAutoCommand}\` and retry.`,
+    command: sessionOpenAutoCommand,
+    fallbackCommand: sessionOpenAutoCommand,
     availableChangeIds,
   };
 };
 
-const buildStatus = (repoRoot: string): SddStatusPayload => {
+const buildStatus = (repoRoot: string, git?: ILifecycleGitService): SddStatusPayload => {
   const openspec = detectOpenSpecInstallation(repoRoot);
   const compatibility = evaluateOpenSpecCompatibility(openspec);
-  const session = readSddSession(repoRoot);
+  const session = readSddSession(repoRoot, git);
   return {
     repoRoot,
     openspec: {
@@ -164,7 +172,7 @@ const evaluateSessionRequirements = (params: {
   autoRefreshError?: string;
 }): SddDecision | undefined => {
   const { status } = params;
-  if (!status.session.active) {
+  if (!status.session.changeId) {
     const guidance = resolveMissingSessionGuidance(status.repoRoot);
     const details: Record<string, string | number | boolean | bigint | symbol | null | Date | object> = {
       command: guidance.command,
@@ -181,8 +189,9 @@ const evaluateSessionRequirements = (params: {
     );
   }
   if (!status.session.valid || !status.session.changeId) {
+    const refreshCommand = buildSddSessionRefreshCommand(params.repoRoot);
     const details: Record<string, string | boolean> = {
-      command: SDD_SESSION_REFRESH_COMMAND,
+      command: refreshCommand,
       autoRefreshEnabled: params.autoRefreshEnabled,
       autoRefreshAttempted: params.autoRefreshAttempted,
     };
@@ -191,8 +200,8 @@ const evaluateSessionRequirements = (params: {
     }
     const message =
       params.autoRefreshAttempted && params.autoRefreshError
-        ? `SDD session is invalid or expired. Auto-refresh failed (${params.autoRefreshError}). Run \`${SDD_SESSION_REFRESH_COMMAND}\` or reopen it.`
-        : `SDD session is invalid or expired. Run \`${SDD_SESSION_REFRESH_COMMAND}\` or reopen it.`;
+        ? `SDD session is invalid or expired. Auto-refresh failed (${params.autoRefreshError}). Run \`${refreshCommand}\` or reopen it.`
+        : `SDD session is invalid or expired. Run \`${refreshCommand}\` or reopen it.`;
     return blocked(
       'SDD_SESSION_INVALID',
       message,
@@ -221,7 +230,6 @@ const shouldAttemptSessionAutoRefresh = (params: {
 }): boolean =>
   params.stage !== 'PRE_WRITE'
   && params.autoRefreshEnabled
-  && params.status.session.active
   && !!params.status.session.changeId
   && !params.status.session.valid;
 
@@ -327,7 +335,7 @@ export const evaluateSddPolicy = (params: {
           experimentalSource: sddExperimentalFeature.source,
           activation_env: sddExperimentalFeature.activationVariable,
           legacy_activation_env: sddExperimentalFeature.legacyActivationVariable,
-          activation_command: buildSddExperimentalEnableCommand(params.stage),
+          activation_command: buildSddExperimentalEnableCommand(params.stage, params.repoRoot),
         },
       },
     };
@@ -545,5 +553,5 @@ export const evaluateSddPolicy = (params: {
   });
 };
 
-export const readSddStatus = (repoRoot?: string): SddStatusPayload =>
-  buildStatus(repoRoot ?? process.cwd());
+export const readSddStatus = (repoRoot?: string, git?: ILifecycleGitService): SddStatusPayload =>
+  buildStatus(repoRoot ?? process.cwd(), git);

package/integrations/sdd/sessionStore.ts

@@ -86,7 +86,7 @@ const readConfig = (
   repoRoot: string,
   git: ILifecycleGitService
 ): SddSessionState => {
-  const active = git.localConfig(repoRoot, SDD_KEYS.active) === 'true';
+  const rawActive = git.localConfig(repoRoot, SDD_KEYS.active) === 'true';
   const rawChangeId = git.localConfig(repoRoot, SDD_KEYS.change);
   const changeId =
     typeof rawChangeId === 'string' && rawChangeId.trim().length > 0
@@ -101,6 +101,7 @@ const readConfig = (
       : undefined;
 
   const validity = computeValidity(expiresAt);
+  const active = rawActive && !!changeId && validity.valid;
   return {
     repoRoot,
     active,
@@ -174,7 +175,7 @@ export const refreshSddSession = (params?: {
   const git = params?.git ?? new LifecycleGitService();
   const repoRoot = resolveRepoRoot(params?.cwd ?? process.cwd(), git);
   const current = readConfig(repoRoot, git);
-  if (!current.active || !current.changeId) {
+  if (!current.changeId) {
     throw new Error('No active SDD session to refresh. Run `pumuki sdd session --open --change=<id>` first.');
   }
   const ttlMinutes = parsePositiveMinutes(params?.ttlMinutes ?? current.ttlMinutes);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.105",
+  "version": "6.3.107",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {