pumuki 6.3.12 → 6.3.13

package/docs/REFRACTOR_PROGRESS.md

@@ -258,6 +258,8 @@ Estado consolidado del refactor con seguimiento de tareas y evidencia del avance
 - ✅ Ejecutar validación dirigida del lote iOS (detectors + heuristics + skills ruleset) y ajustar severidades finales por stage.
 - ✅ Extender cobertura semántica enterprise de SOLID (SRP/OCP/LSP/ISP/DIP) con señales AST no superficiales y contrato de evidencia.
 - ✅ Ejecutar validación determinista del lote SOLID (detectors TS + extractor heurístico + stage policies) y cerrar versión de pack heurístico.
+- ✅ Corregir persistencia de trazabilidad en evidence (`matchedBy` y `source`) en `snapshot.findings` y `ai_gate.violations`, con tests de regresión en verde.
+- 🚧 Publicar hotfix npm (`pumuki@6.3.13`) y revalidar en `pumuki-mock-consumer` que `.ai_evidence.json` conserva trazabilidad completa en escenario `violations`.
 - ✅ Cerrar implementación integral de reglas/skills (heurísticas iOS + SOLID TS + stage promotions + contracts skills) con validación completa (`typecheck`, `skills:lock:check`, `test:deterministic` y suite dirigida de policies/presets).
 - ✅ Endurecer `pumuki-mock-consumer` con una mini-app feature-first más elaborada y escenario `violations` ampliado para cubrir skills iOS/backend/frontend/android + heurísticas críticas (security/process/fs/browser/SOLID) mediante `docs/VIOLATION_SKILLS_MATRIX.md`.
 - ✅ Corregir carga de `pumuki.rules.ts` con `default export` en `integrations/config/loadProjectRules.ts` y añadir test de regresión.

package/integrations/evidence/writeEvidence.test.ts

@@ -38,6 +38,8 @@ const sampleEvidence = (repoRoot: string): AiEvidenceV2_1 => ({
         message: 'z finding',
         file: join(repoRoot, 'apps/ios/B.swift'),
         lines: [9.8, 1, 1, Number.NaN, 4],
+        matchedBy: 'FileContent',
+        source: 'git:staged',
       },
       {
         ruleId: 'a.rule',
@@ -46,6 +48,8 @@ const sampleEvidence = (repoRoot: string): AiEvidenceV2_1 => ({
         message: 'a finding',
         file: 'apps/backend/A.ts',
         lines: '   ',
+        matchedBy: 'Heuristic',
+        source: 'heuristics:ast',
       },
     ],
   },
@@ -106,10 +110,14 @@ test('writeEvidence escribe archivo estable y normaliza paths/orden/lineas', asy
       assert.equal(written.snapshot.findings[0]?.ruleId, 'a.rule');
       assert.equal(written.snapshot.findings[0]?.file, 'apps/backend/A.ts');
       assert.equal('lines' in (written.snapshot.findings[0] ?? {}), false);
+      assert.equal(written.snapshot.findings[0]?.matchedBy, 'Heuristic');
+      assert.equal(written.snapshot.findings[0]?.source, 'heuristics:ast');
 
       assert.equal(written.snapshot.findings[1]?.ruleId, 'z.rule');
       assert.equal(written.snapshot.findings[1]?.file.endsWith('/apps/ios/B.swift'), true);
       assert.deepEqual(written.snapshot.findings[1]?.lines, [1, 4, 9]);
+      assert.equal(written.snapshot.findings[1]?.matchedBy, 'FileContent');
+      assert.equal(written.snapshot.findings[1]?.source, 'git:staged');
 
       assert.equal(written.ledger[0]?.ruleId, 'a.rule');
       assert.deepEqual(written.ledger[0]?.lines, [2, 3]);
@@ -122,6 +130,13 @@ test('writeEvidence escribe archivo estable y normaliza paths/orden/lineas', asy
         'ios:z-bundle',
       ]);
       assert.deepEqual(written.ai_gate.violations.map((item) => item.ruleId), ['a.rule', 'z.rule']);
+      assert.deepEqual(
+        written.ai_gate.violations.map((item) => [item.ruleId, item.matchedBy, item.source]),
+        [
+          ['a.rule', 'Heuristic', 'heuristics:ast'],
+          ['z.rule', 'FileContent', 'git:staged'],
+        ]
+      );
     });
   });
 });

package/integrations/evidence/writeEvidence.ts

@@ -78,6 +78,8 @@ const normalizeFindingPath = (
     message: finding.message,
     file: toRelativeRepoPath(repoRoot, finding.file),
     lines: normalizeLines(finding.lines),
+    matchedBy: finding.matchedBy,
+    source: finding.source,
   };
 };
 
@@ -101,6 +103,8 @@ const toCompatibilityViolations = (
     message: finding.message,
     file: finding.file,
     lines: finding.lines,
+    matchedBy: finding.matchedBy,
+    source: finding.source,
   }));
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.12",
+  "version": "6.3.13",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {