pumuki 6.3.236 → 6.3.238

package/VERSION

@@ -1 +1 @@
-v6.3.236
+v6.3.238

package/integrations/lifecycle/audit.ts

@@ -100,6 +100,16 @@ const collectStagedMatchingExtensions = (
     .filter((path) => hasAllowedExtension(path, extensions));
 };
 
+const collectStagedFiles = (
+  git: Pick<IGitService, 'resolveRepoRoot' | 'runGit'>
+): string[] => {
+  const repoRoot = git.resolveRepoRoot();
+  return git.runGit(['diff', '--cached', '--name-only'], repoRoot)
+    .split('\n')
+    .map((line) => line.trim())
+    .filter((line) => line.length > 0);
+};
+
 const runGitOrNull = (
   git: Pick<IGitService, 'runGit'>,
   args: ReadonlyArray<string>,
@@ -205,11 +215,12 @@ const resolveLifecycleAuditScope = (params: {
   git: Pick<IGitService, 'runGit'>;
   repoRoot: string;
   extensions: ReadonlyArray<string>;
+  stagedFiles: ReadonlyArray<string>;
   stagedMatchingExtensions: ReadonlyArray<string>;
 }): LifecycleAuditScope => {
   if (
     (params.stage === 'PRE_WRITE' || params.stage === 'PRE_COMMIT') &&
-    params.stagedMatchingExtensions.length > 0
+    params.stagedFiles.length > 0
   ) {
     return { kind: 'staged' };
   }
@@ -407,6 +418,29 @@ const toRangeNoSupportedCodeAuditAdvisoryFinding = (
   blocking: false,
 });
 
+const isStagedWithoutSupportedCode = (params: {
+  stage: LifecycleAuditStage;
+  scope: LifecycleAuditScope;
+  stagedMatchingExtensions: ReadonlyArray<string>;
+  findings: ReadonlyArray<LifecycleAuditFinding>;
+}): boolean =>
+  (params.stage === 'PRE_WRITE' || params.stage === 'PRE_COMMIT') &&
+  params.scope.kind === 'staged' &&
+  params.stagedMatchingExtensions.length === 0 &&
+  params.findings.length > 0;
+
+const toStagedNoSupportedCodeAuditAdvisoryFinding = (
+  finding: LifecycleAuditFinding
+): LifecycleAuditFinding => ({
+  ...finding,
+  severity: 'INFO',
+  code: 'AUDIT_STAGED_NO_SUPPORTED_CODE_ADVISORY',
+  message:
+    'Staged audit found no supported code files; baseline repository debt is retained as advisory for this documentation/config-only slice. ' +
+    finding.message,
+  blocking: false,
+});
+
 export const runLifecycleAudit = async (params: {
   stage: LifecycleAuditStage;
   auditMode: 'gate' | 'engine';
@@ -427,12 +461,14 @@ export const runLifecycleAudit = async (params: {
   );
   const extensions = DEFAULT_FACT_FILE_EXTENSIONS;
   const untrackedMatchingExtensionsCount = countUntrackedMatchingExtensions(git, extensions);
+  const stagedFiles = collectStagedFiles(git);
   const stagedMatchingExtensions = collectStagedMatchingExtensions(git, extensions);
   const scope = resolveLifecycleAuditScope({
     stage: params.stage,
     git,
     repoRoot,
     extensions,
+    stagedFiles,
     stagedMatchingExtensions,
   });
   const gateScope = toGateScope(scope);
@@ -491,16 +527,24 @@ export const runLifecycleAudit = async (params: {
     scope,
     findings,
   });
+  const stagedWithoutSupportedCode = isStagedWithoutSupportedCode({
+    stage: params.stage,
+    scope,
+    stagedMatchingExtensions,
+    findings,
+  });
   const gateAllowed = originalGateExitCode === 0;
   const effectiveFindings = scopedGlobalEnforcementOnly
     ? findings.map(toScopedAuditAdvisoryFinding)
     : rangePrePushWithoutSupportedCodeSddOnly
       ? findings.map(toRangeNoSupportedCodeAuditAdvisoryFinding)
+    : stagedWithoutSupportedCode
+      ? findings.map(toStagedNoSupportedCodeAuditAdvisoryFinding)
     : gateAllowed
       ? findings.map(toGateAllowedAuditAdvisoryFinding)
       : findings;
   const gateExitCode =
-    scopedGlobalEnforcementOnly || rangePrePushWithoutSupportedCodeSddOnly
+    scopedGlobalEnforcementOnly || rangePrePushWithoutSupportedCodeSddOnly || stagedWithoutSupportedCode
       ? 0
       : originalGateExitCode;
   const effectiveSnapshotOutcome =

package/integrations/lifecycle/cli.ts

@@ -1989,6 +1989,11 @@ export const buildPreWriteValidationPanel = (params: {
 }): string => {
   const git = params.aiGate.repo_state.git;
   const receipt = params.aiGate.mcp_receipt;
+  const blockingViolations = params.aiGate.violations.filter((violation) => violation.severity === 'ERROR');
+  const nonBlockingViolations = params.aiGate.violations.filter((violation) => violation.severity !== 'ERROR');
+  const rawSkillsContractStatus = params.aiGate.skills_contract?.status ?? 'n/a';
+  const visibleSkillsContractStatus =
+    rawSkillsContractStatus === 'FAIL' && params.aiGate.allowed ? 'ADVISORY' : rawSkillsContractStatus;
   const lines: string[] = [
     'PRE-FLIGHT CHECK',
     `Stage: ${params.sdd.stage} · SDD: ${params.sdd.decision.code} · AI Gate: ${params.aiGate.status}`,
@@ -1997,9 +2002,9 @@ export const buildPreWriteValidationPanel = (params: {
     `Evidence: kind=${params.aiGate.evidence.kind} age=${params.aiGate.evidence.age_seconds ?? 'n/a'}s max=${params.aiGate.evidence.max_age_seconds}s`,
     `Evidence source: source=${params.aiGate.evidence.source.source} path=${params.aiGate.evidence.source.path} digest=${params.aiGate.evidence.source.digest ?? 'null'} generated_at=${params.aiGate.evidence.source.generated_at ?? 'null'}`,
     `MCP receipt: required=${receipt.required ? 'yes' : 'no'} kind=${receipt.kind} age=${receipt.age_seconds ?? 'n/a'}s max=${receipt.max_age_seconds ?? 'n/a'}s`,
-    `Skills contract: enforced=${params.aiGate.skills_contract?.enforced ? 'yes' : 'no'} status=${params.aiGate.skills_contract?.status ?? 'n/a'} platforms=${params.aiGate.skills_contract?.detected_platforms.join(',') ?? 'none'}`,
+    `Skills contract: enforced=${params.aiGate.skills_contract?.enforced ? 'yes' : 'no'} status=${visibleSkillsContractStatus} platforms=${params.aiGate.skills_contract?.detected_platforms.join(',') ?? 'none'}`,
     `Auto-heal: attempted=${params.automation.attempted ? 'yes' : 'no'} actions=${params.automation.actions.length}`,
-    `Violations: ${params.aiGate.violations.length}`,
+    `Violations: blocking=${blockingViolations.length} advisory=${nonBlockingViolations.length}`,
   ];
 
   if (params.automation.actions.length > 0) {
@@ -2010,15 +2015,15 @@ export const buildPreWriteValidationPanel = (params: {
     }
   }
 
-  if (params.aiGate.violations.length > 0) {
+  if (blockingViolations.length > 0) {
     lines.push('');
     lines.push('Blocking causes:');
-    for (const violation of params.aiGate.violations) {
+    for (const violation of blockingViolations) {
       lines.push(`- ${violation.code}: ${violation.message}`);
     }
     lines.push('');
     lines.push('Operational hints:');
-    for (const violation of params.aiGate.violations) {
+    for (const violation of blockingViolations) {
       const hint = PRE_WRITE_HINTS_BY_CODE[violation.code];
       if (!hint) {
         continue;
@@ -2027,6 +2032,14 @@ export const buildPreWriteValidationPanel = (params: {
     }
   }
 
+  if (nonBlockingViolations.length > 0) {
+    lines.push('');
+    lines.push('Advisory findings:');
+    for (const violation of nonBlockingViolations) {
+      lines.push(`- ${violation.code}: ${violation.message}`);
+    }
+  }
+
   return renderPreWritePanel(lines);
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.236",
+  "version": "6.3.238",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {