pumuki 6.3.163 → 6.3.165

package/CHANGELOG.md

@@ -6,6 +6,19 @@ This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [6.3.165] - 2026-05-06
+
+### Fixed
+
+- **MCP evidence stdio PRE_PUSH:** los defaults de host, ruta, puerto y timeout quedan nombrados como constantes para cumplir reglas backend de configuración y evitar bloqueos del hook al publicar ramas de release.
+
+## [6.3.164] - 2026-05-06
+
+### Fixed
+
+- **PUMUKI-INC-130 XCTest helpers brownfield:** `trackForMemoryLeaks`/factory helpers that import `XCTest` but do not define `XCTestCase` suites or `test...` methods no longer trigger `skills.ios.critical-test-quality`.
+- **Skills runtime enforcement:** declarative skill registry rules stay visible in coverage metadata without being counted as missing runtime AST detectors; AUTO rules without detector mapping still fail closed.
+
 ## [6.3.143] - 2026-05-05
 
 ### Fixed

package/VERSION

@@ -1 +1 @@
-v6.3.132
+v6.3.165

package/core/facts/detectors/text/ios.test.ts

@@ -683,10 +683,46 @@ func trackForMemoryLeaks(_ instance: AnyObject, file: StaticString = #filePath,
   addTeardownBlock { _ = instance }
 }
   `;
+  const ruralGoHelperSource = `
+import XCTest
+
+final class WeakReference<T: AnyObject> {
+  weak var value: T?
+
+  init(_ value: T) {
+    self.value = value
+  }
+}
+
+func trackForMemoryLeaks(
+  _ instance: AnyObject,
+  testCase: XCTestCase,
+  file: StaticString = #filePath,
+  line: UInt = #line
+) {
+  nonisolated(unsafe) let reference = makeSUT(instance)
+  testCase.addTeardownBlock {
+    XCTAssertNil(
+      reference.value,
+      "Instance should have been deallocated. Potential memory leak.",
+      file: file,
+      line: line
+    )
+  }
+}
+
+private func makeSUT<T: AnyObject>(_ instance: T) -> WeakReference<T> {
+  WeakReference(instance)
+}
+  `;
 
   assert.equal(hasSwiftLegacyXCTestImportUsage(helperSource), false);
   assert.equal(hasSwiftModernizableXCTestSuiteUsage(helperSource), false);
   assert.equal(hasSwiftXCTestAssertionUsage(helperSource), false);
+  assert.equal(hasSwiftLegacyXCTestImportUsage(ruralGoHelperSource), false);
+  assert.equal(hasSwiftModernizableXCTestSuiteUsage(ruralGoHelperSource), false);
+  assert.equal(hasSwiftXCTestAssertionUsage(ruralGoHelperSource), false);
+  assert.equal(hasSwiftXCTUnwrapUsage(ruralGoHelperSource), false);
 });
 
 test('hasSwiftXCTUnwrapUsage detecta XCTUnwrap real y evita strings', () => {

package/core/facts/detectors/text/ios.ts

@@ -840,6 +840,14 @@ const hasSwiftXCTestOnlyBrownfieldSuiteUsage = (source: string): boolean => {
   return !hasSwiftTestingImportUsage(source) && !hasSwiftTestingSuiteAttributeUsage(source);
 };
 
+const hasSwiftXCTestHelperOrFactoryUsage = (source: string): boolean => {
+  return (
+    hasSwiftXCTestImportUsage(source) &&
+    !hasSwiftXCTestCaseSubclassUsage(source) &&
+    !hasSwiftLegacyXCTestMethodUsage(source)
+  );
+};
+
 export const hasSwiftLegacyXCTestImportUsage = (source: string): boolean => {
   if (!hasSwiftXCTestImportUsage(source)) {
     return false;
@@ -885,6 +893,10 @@ export const hasSwiftXCTestAssertionUsage = (source: string): boolean => {
     return false;
   }
 
+  if (hasSwiftXCTestHelperOrFactoryUsage(source)) {
+    return false;
+  }
+
   if (hasSwiftXCTestOnlyBrownfieldSuiteUsage(source)) {
     return false;
   }
@@ -900,6 +912,10 @@ export const hasSwiftXCTUnwrapUsage = (source: string): boolean => {
     return false;
   }
 
+  if (hasSwiftXCTestHelperOrFactoryUsage(source)) {
+    return false;
+  }
+
   if (hasSwiftXCTestOnlyBrownfieldSuiteUsage(source)) {
     return false;
   }
@@ -916,6 +932,10 @@ const hasSwiftConfirmationUsage = (source: string): boolean => {
 };
 
 export const hasSwiftWaitForExpectationsUsage = (source: string): boolean => {
+  if (hasSwiftXCTestHelperOrFactoryUsage(source)) {
+    return false;
+  }
+
   const legacyWaitPattern = /\bwait\s*\(\s*for\s*:|\bwaitForExpectations\s*\(/;
   return collectSwiftFunctionDeclarations(source).some((declaration) => {
     if (!/\basync\b/.test(declaration.signature)) {
@@ -927,6 +947,10 @@ export const hasSwiftWaitForExpectationsUsage = (source: string): boolean => {
 };
 
 export const hasSwiftLegacyExpectationDescriptionUsage = (source: string): boolean => {
+  if (hasSwiftXCTestHelperOrFactoryUsage(source)) {
+    return false;
+  }
+
   return collectSwiftFunctionDeclarations(source).some((declaration) => {
     if (!/\basync\b/.test(declaration.signature)) {
       return false;

package/integrations/config/coreSkillsLock.ts

@@ -8,6 +8,15 @@ const PACKAGE_ROOT = resolve(__dirname, '..', '..');
 
 let cachedCoreSkillsLock: SkillsLockV1 | undefined;
 
+const writeDebugFallback = (error: unknown): void => {
+  if (process.env.PUMUKI_DEBUG !== '1') {
+    return;
+  }
+
+  const message = error instanceof Error ? error.message : String(error);
+  process.stderr.write(`[pumuki][skills-lock] compile fallback: ${message}\n`);
+};
+
 export const resolveCoreSkillsLockForPackageRoot = (
   packageRoot: string
 ): SkillsLockV1 | undefined => {
@@ -20,7 +29,8 @@ export const resolveCoreSkillsLockForPackageRoot = (
     if (compiledLock.bundles.length > 0) {
       return compiledLock;
     }
-  } catch {
+  } catch (error) {
+    writeDebugFallback(error);
   }
 
   return loadSkillsLock(packageRoot);

package/integrations/config/skillsRuleSet.ts

@@ -603,7 +603,6 @@ export const loadSkillsRuleSetForStage = (
         continue;
       }
       if (evaluationMode !== 'AUTO') {
-        unsupportedDetectorRuleIds.add(compiledRule.id);
         continue;
       }
       stageApplicableAutoRuleIds.add(compiledRule.id);

package/integrations/mcp/evidenceStdioServer.cli.ts

@@ -21,6 +21,10 @@ type JsonRpcResponse = {
 };
 
 const MCP_PROTOCOL_VERSION = '2024-11-05';
+const DEFAULT_EVIDENCE_HOST = '127.0.0.1';
+const DEFAULT_EVIDENCE_ROUTE = '/ai-evidence';
+const DEFAULT_EVIDENCE_PORT = 7341;
+const PORT_PROBE_TIMEOUT_MS = 600;
 
 const toJsonRpcId = (value: unknown): JsonRpcId => {
   if (typeof value === 'string' || typeof value === 'number' || value === null) {
@@ -55,7 +59,7 @@ const sendError = (id: JsonRpcId, code: number, message: string): void => {
 const isPortInUse = async (host: string, port: number): Promise<boolean> =>
   await new Promise((resolve) => {
     const socket = new Socket();
-    socket.setTimeout(600);
+    socket.setTimeout(PORT_PROBE_TIMEOUT_MS);
     socket.once('connect', () => {
       socket.destroy();
       resolve(true);
@@ -91,15 +95,24 @@ const fetchJson = async (url: string): Promise<unknown> => {
   return JSON.parse(text) as unknown;
 };
 
+const writeDebugHealthProbeFailure = (error: unknown): void => {
+  if (process.env.PUMUKI_DEBUG !== '1') {
+    return;
+  }
+
+  const message = error instanceof Error ? error.message : String(error);
+  process.stderr.write(`[pumuki-mcp-evidence-stdio] health probe fallback: ${message}\n`);
+};
+
 const startOrReuseEvidenceHttp = async (): Promise<{
   host: string;
   port: number;
   route: string;
 }> => {
-  const host = process.env.PUMUKI_EVIDENCE_HOST ?? '127.0.0.1';
-  const route = process.env.PUMUKI_EVIDENCE_ROUTE ?? '/ai-evidence';
+  const host = process.env.PUMUKI_EVIDENCE_HOST ?? DEFAULT_EVIDENCE_HOST;
+  const route = process.env.PUMUKI_EVIDENCE_ROUTE ?? DEFAULT_EVIDENCE_ROUTE;
   const parsedPort = Number.parseInt(process.env.PUMUKI_EVIDENCE_PORT ?? '', 10);
-  const preferredPort = Number.isFinite(parsedPort) ? parsedPort : 7341;
+  const preferredPort = Number.isFinite(parsedPort) ? parsedPort : DEFAULT_EVIDENCE_PORT;
   const requestedPort = preferredPort > 0 ? preferredPort : await findEphemeralPort(host);
   const healthUrl = `http://${host}:${requestedPort}/health`;
 
@@ -108,8 +121,8 @@ const startOrReuseEvidenceHttp = async (): Promise<{
     if (health.status === 'ok') {
       return { host, port: requestedPort, route };
     }
-  } catch {
-    // ignored
+  } catch (error) {
+    writeDebugHealthProbeFailure(error);
   }
 
   const portInUse = await isPortInUse(host, requestedPort);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.163",
+  "version": "6.3.165",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {