pumuki 6.3.249 → 6.3.250
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -6,12 +6,13 @@ This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
|
6
6
|
|
|
7
7
|
## [Unreleased]
|
|
8
8
|
|
|
9
|
-
## [6.3.
|
|
9
|
+
## [6.3.250] - 2026-05-14
|
|
10
10
|
|
|
11
11
|
### Fixed
|
|
12
12
|
|
|
13
13
|
- **Zero-violation gate contract:** runtime findings are blocking regardless of severity; `pumuki audit` no longer degrades findings to non-blocking warnings just because the runner returned exit 0.
|
|
14
14
|
- **AST-actionable findings contract:** scoped `skills.*` and `heuristics.*` matches without line, range or semantic node attribution are no longer emitted as advisory findings. A runtime finding must be actionable by AST/location evidence or it is not a gate finding.
|
|
15
|
+
- **Synthetic coverage findings removed from runtime gates:** cross-platform critical coverage gaps are no longer emitted as `.ai_evidence.json` findings. Coverage remains diagnostic metadata; runtime findings must be source-actionable.
|
|
15
16
|
|
|
16
17
|
## [6.3.248] - 2026-05-14
|
|
17
18
|
|
|
@@ -6,13 +6,14 @@ This file keeps only the operational highlights and rollout notes that matter wh
|
|
|
6
6
|
|
|
7
7
|
## 2026-04 (CLI stability and macOS notifications)
|
|
8
8
|
|
|
9
|
-
### 2026-05-14 (v6.3.
|
|
9
|
+
### 2026-05-14 (v6.3.250)
|
|
10
10
|
|
|
11
11
|
- **Normalización iOS mode-aware:** la línea activa conserva reglas iOS automatizables con evidencia concreta y deja como declarativas las reglas greenfield/brownfield que requieren contexto de adopción, baseline o migración.
|
|
12
12
|
- **Package smoke estable para fixtures Git:** los commits y pushes internos de preparación del consumer smoke no disparan hooks del paquete bajo prueba; el gate real sigue validándose en los pasos explícitos del smoke.
|
|
13
13
|
- **Smokes no interactivos sin diálogos macOS:** `PUMUKI_SYSTEM_NOTIFICATIONS=0` y `PUMUKI_NOTIFICATIONS=0` vuelven a apagar el canal de sistema, evitando bloqueos por Swift dialog en validaciones de release.
|
|
14
14
|
- **Zero-violation real:** cualquier finding runtime emitido por regla activa bloquea; los matches scoped sin línea/rango/nodo AST dejan de publicarse como findings advisory.
|
|
15
|
-
- **
|
|
15
|
+
- **AST accionable obligatorio:** los gaps sintéticos de cobertura cross-platform dejan de emitirse como findings sobre `.ai_evidence.json`; la cobertura queda como metadato diagnóstico y las findings runtime deben apuntar a código accionable.
|
|
16
|
+
- **Rollout recomendado:** publicar `pumuki@6.3.250` tras el test suite global verde; `validation:package-smoke`, metadata local y `PRE_WRITE` strict/advisory quedan alineados para esta versión.
|
|
16
17
|
|
|
17
18
|
### 2026-04-25 (v6.3.116)
|
|
18
19
|
|
|
@@ -693,13 +693,7 @@ const collectPreWriteCrossPlatformCriticalViolations = (params: {
|
|
|
693
693
|
return [];
|
|
694
694
|
}
|
|
695
695
|
|
|
696
|
-
return [
|
|
697
|
-
toSkillsViolation(
|
|
698
|
-
params.skillsEnforcement,
|
|
699
|
-
'EVIDENCE_CROSS_PLATFORM_CRITICAL_ENFORCEMENT_INCOMPLETE',
|
|
700
|
-
`Cross-platform critical enforcement incomplete in PRE_WRITE: ${missingCriticalCoverage.join(' | ')}.`
|
|
701
|
-
),
|
|
702
|
-
];
|
|
696
|
+
return [];
|
|
703
697
|
};
|
|
704
698
|
|
|
705
699
|
const toSkillsContractAssessment = (params: {
|
|
@@ -945,15 +939,6 @@ const toSkillsContractAssessment = (params: {
|
|
|
945
939
|
)
|
|
946
940
|
);
|
|
947
941
|
}
|
|
948
|
-
if (!transversalCriticalCovered && requiredAnyTransversalCriticalRuleIds.length > 0) {
|
|
949
|
-
violations.push(
|
|
950
|
-
toSkillsViolation(
|
|
951
|
-
params.skillsEnforcement,
|
|
952
|
-
'EVIDENCE_CROSS_PLATFORM_CRITICAL_ENFORCEMENT_INCOMPLETE',
|
|
953
|
-
`Skills contract missing transversal critical coverage for ${platform}: required_any=[${requiredAnyTransversalCriticalRuleIds.join(', ')}].`
|
|
954
|
-
)
|
|
955
|
-
);
|
|
956
|
-
}
|
|
957
942
|
}
|
|
958
943
|
|
|
959
944
|
return {
|
|
@@ -794,50 +794,7 @@ const toCrossPlatformCriticalEnforcementBlockingFinding = (params: {
|
|
|
794
794
|
return undefined;
|
|
795
795
|
}
|
|
796
796
|
|
|
797
|
-
|
|
798
|
-
const gaps: string[] = [];
|
|
799
|
-
|
|
800
|
-
for (const platform of detectedPlatformKeys) {
|
|
801
|
-
const rulePrefix = PLATFORM_SKILLS_RULE_PREFIXES[platform];
|
|
802
|
-
const criticalSkillRules = params.skillsRules
|
|
803
|
-
.filter(
|
|
804
|
-
(rule) =>
|
|
805
|
-
rule.id.startsWith(rulePrefix) &&
|
|
806
|
-
isCriticalProfileSeverity(rule.severity)
|
|
807
|
-
)
|
|
808
|
-
.map((rule) => rule.id)
|
|
809
|
-
.sort();
|
|
810
|
-
|
|
811
|
-
if (criticalSkillRules.length === 0) {
|
|
812
|
-
gaps.push(`${platform}{critical_profile_rules=missing}`);
|
|
813
|
-
continue;
|
|
814
|
-
}
|
|
815
|
-
|
|
816
|
-
const evaluatedCriticalSkillRules = criticalSkillRules.filter((ruleId) =>
|
|
817
|
-
evaluatedRuleIds.has(ruleId)
|
|
818
|
-
);
|
|
819
|
-
if (evaluatedCriticalSkillRules.length === 0) {
|
|
820
|
-
gaps.push(
|
|
821
|
-
`${platform}{critical_profile_rules=${criticalSkillRules.length}; evaluated=0}`
|
|
822
|
-
);
|
|
823
|
-
}
|
|
824
|
-
}
|
|
825
|
-
|
|
826
|
-
if (gaps.length === 0) {
|
|
827
|
-
return undefined;
|
|
828
|
-
}
|
|
829
|
-
|
|
830
|
-
return {
|
|
831
|
-
ruleId: 'governance.skills.cross-platform-critical.incomplete',
|
|
832
|
-
severity: 'ERROR',
|
|
833
|
-
code: 'SKILLS_CROSS_PLATFORM_CRITICAL_INCOMPLETE_S0',
|
|
834
|
-
message:
|
|
835
|
-
`Cross-platform critical enforcement incomplete at ${params.stage}: ${gaps.join(' | ')}. ` +
|
|
836
|
-
'Ensure each detected platform has critical-profile skill rules active and evaluated.',
|
|
837
|
-
filePath: '.ai_evidence.json',
|
|
838
|
-
matchedBy: 'SkillsCrossPlatformCriticalGuard',
|
|
839
|
-
source: 'skills-cross-platform-critical',
|
|
840
|
-
};
|
|
797
|
+
return undefined;
|
|
841
798
|
};
|
|
842
799
|
|
|
843
800
|
const shouldBlockFromFinding = (finding: Finding | undefined): boolean => {
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "pumuki",
|
|
3
|
-
"version": "6.3.
|
|
3
|
+
"version": "6.3.250",
|
|
4
4
|
"description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
|
|
5
5
|
"main": "index.js",
|
|
6
6
|
"bin": {
|