pumuki 6.3.278 → 6.3.279

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## [6.3.279] - 2026-05-18
+
+- `PUMUKI-INC-149`: `pumuki sdd validate --stage=PRE_WRITE --json` now reports the resolved actionable blocking cause first when `next_action` identifies a concrete remediation. This prevents stale `EVIDENCE_GATE_BLOCKED` symptoms from hiding the real PRE_WRITE cause in JSON, terminal panels and blocked notifications.
+
 ## [6.3.278] - 2026-05-18
 
 - `PUMUKI-INC-149`: `EVIDENCE_GATE_BLOCKED` no longer hides the real blocking cause. PRE_WRITE/AI Gate now expands blocked evidence into actionable causes from `snapshot.findings` and `ai_gate.violations`, including rule, code, file, lines and remediation when available, while preserving the PRE_WRITE lease fail-closed contract.

package/integrations/lifecycle/cli.ts

@@ -1992,6 +1992,25 @@ export const resolvePreWriteBlockedRemediation = (params: {
   return PRE_WRITE_HINTS_BY_CODE[params.causeCode] ?? buildPreWriteDefaultRemediation();
 };
 
+export const prioritizePreWriteAiGateViolations = (
+  aiGate: ReturnType<typeof evaluateAiGate>,
+  nextAction?: PreWriteValidationEnvelope['next_action']
+): ReturnType<typeof evaluateAiGate> => {
+  if (!nextAction?.reason) {
+    return aiGate;
+  }
+  const violations = [...aiGate.violations];
+  violations.sort((left, right) => {
+    const leftMatches = left.code === nextAction.reason ? 0 : 1;
+    const rightMatches = right.code === nextAction.reason ? 0 : 1;
+    return leftMatches - rightMatches;
+  });
+  return {
+    ...aiGate,
+    violations,
+  };
+};
+
 const wrapPreWritePanelLine = (value: string, width: number): string[] => {
   if (width < 20 || value.length <= width) {
     return [value];

package/integrations/lifecycle/cliSdd.ts

@@ -37,6 +37,7 @@ import {
   buildSddExperimentalEnableAdvisoryCommand,
   runRawPreWriteAiGateCheck,
   buildPreWriteExperimentalEnableAdvisoryCommand,
+  prioritizePreWriteAiGateViolations,
 } from './cli';
 
 export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: LifecycleCliDependencies): Promise<number> => {
@@ -205,6 +206,10 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
             sdd: result,
             aiGate: rawPreWriteAiGate ?? aiGate,
           });
+          const effectiveAiGate = rawPreWriteAiGate ?? aiGate;
+          const reportedAiGate = effectiveAiGate
+            ? prioritizePreWriteAiGateViolations(effectiveAiGate, nextAction)
+            : null;
           const sddExperimentalNextAction =
             !aiGate && result.decision.code === 'SDD_EXPERIMENTAL_DISABLED'
               ? {
@@ -215,10 +220,10 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
           if (parsed.json) {
             writeInfo(
               JSON.stringify(
-                (rawPreWriteAiGate ?? aiGate)
+                reportedAiGate
                   ? buildPreWriteValidationEnvelope(
                     result,
-                    rawPreWriteAiGate ?? aiGate!,
+                    reportedAiGate,
                     preWriteEnforcement,
                     experimentalFeatures,
                     policyValidation,
@@ -272,16 +277,16 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
                 );
               }
             }
-            if (aiGate) {
+            if (reportedAiGate) {
               writeInfo(buildPreWriteValidationPanel({
                 sdd: result,
-                aiGate,
+                aiGate: reportedAiGate,
                 automation: automationTrace,
               }));
               writeInfo(
-                `[pumuki][ai-gate] stage=${aiGate.stage} status=${aiGate.status} violations=${aiGate.violations.length}`
+                `[pumuki][ai-gate] stage=${reportedAiGate.stage} status=${reportedAiGate.status} violations=${reportedAiGate.violations.length}`
               );
-              for (const violation of aiGate.violations) {
+              for (const violation of reportedAiGate.violations) {
                 writeInfo(
                   withOptionalLocation(
                     `[pumuki][ai-gate] ${violation.code}: ${violation.message}`,
@@ -303,14 +308,14 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
             activeDependencies.emitAuditSummaryNotificationFromAiGate({
               repoRoot: process.cwd(),
               stage: result.stage,
-              aiGateResult: aiGate,
+              aiGateResult: reportedAiGate ?? aiGate,
             });
           }
           if (!result.decision.allowed && preWriteEnforcement.blocking) {
             activeDependencies.emitGateBlockedNotification({
               repoRoot: process.cwd(),
               stage: result.stage,
-              totalViolations: aiGate?.violations.length ?? 0,
+              totalViolations: reportedAiGate?.violations.length ?? aiGate?.violations.length ?? 0,
               causeCode: result.decision.code,
               causeMessage: result.decision.message,
               remediation: resolvePreWriteBlockedRemediation({
@@ -320,21 +325,21 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
             });
             return 1;
           }
-          if (aiGate && !aiGate.allowed && preWriteEnforcement.blocking) {
-            const firstViolation = aiGate.violations[0];
+          if (reportedAiGate && !reportedAiGate.allowed && preWriteEnforcement.blocking) {
+            const firstViolation = reportedAiGate.violations[0];
             const causeCode = firstViolation?.code ?? 'AI_GATE_BLOCKED';
             const causeMessage = firstViolation?.message ?? 'AI gate blocked PRE_WRITE stage.';
             activeDependencies.emitGateBlockedNotification({
               repoRoot: process.cwd(),
               stage: result.stage,
-              totalViolations: aiGate.violations.length,
+              totalViolations: reportedAiGate.violations.length,
               causeCode,
               causeMessage,
               remediation: resolvePreWriteBlockedRemediation({
                 causeCode,
                 nextAction,
               }),
-              blockingCauses: aiGate.violations.map((violation) => ({
+              blockingCauses: reportedAiGate.violations.map((violation) => ({
                 code: violation.code,
                 message: violation.message,
                 ruleId: violation.code,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.278",
+  "version": "6.3.279",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {