pumuki 6.3.309 → 6.3.311

package/integrations/lifecycle/cli.ts

@@ -26,6 +26,7 @@ import { runLifecycleUninstall } from './uninstall';
 import { runLifecycleUpdate } from './update';
 import { runOpenSpecBootstrap } from './openSpecBootstrap';
 import { runLifecycleAdapterInstall, type AdapterAgent } from './adapter';
+import { writePreWriteLease } from './preWriteLease';
 import { createLoopSessionContract, isLoopSessionTransitionAllowed } from './loopSessionContract';
 import {
   createLoopSession,
@@ -1864,6 +1865,7 @@ export type LifecycleCliDependencies = {
   emitAuditSummaryNotificationFromAiGate: typeof emitAuditSummaryNotificationFromAiGate;
   emitGateBlockedNotification: typeof emitGateBlockedNotification;
   runPlatformGate: typeof runPlatformGate;
+  writePreWriteLease: typeof writePreWriteLease;
   runLifecycleWatch: typeof runLifecycleWatch;
   collectRemoteCiDiagnostics: typeof collectRemoteCiDiagnostics;
 };
@@ -1872,6 +1874,7 @@ const defaultLifecycleCliDependencies: LifecycleCliDependencies = {
   emitAuditSummaryNotificationFromAiGate,
   emitGateBlockedNotification,
   runPlatformGate,
+  writePreWriteLease,
   runLifecycleWatch,
   collectRemoteCiDiagnostics,
 };
@@ -2019,8 +2022,11 @@ export const prioritizePreWriteAiGateViolations = (
     const rightMatches = right.code === nextAction.reason ? 0 : 1;
     return leftMatches - rightMatches;
   });
+  const blocked = violations.some((violation) => violation.severity === 'ERROR');
   return {
     ...aiGate,
+    status: blocked ? 'BLOCKED' : 'ALLOWED',
+    allowed: !blocked,
     violations,
   };
 };

package/integrations/lifecycle/cliSdd.ts

@@ -21,6 +21,7 @@ import {
   type PreWriteEnforcementResolution,
 } from '../policy/preWriteEnforcement';
 import { readLifecycleExperimentalFeaturesSnapshot } from './experimentalFeaturesSnapshot';
+import { GitService } from '../git/GitService';
 
 import {
   type ParsedArgs,
@@ -207,9 +208,54 @@ export const runSddCommand = async (parsed: ParsedArgs, activeDependencies: Life
             aiGate: rawPreWriteAiGate ?? aiGate,
           });
           const effectiveAiGate = rawPreWriteAiGate ?? aiGate;
-          const reportedAiGate = effectiveAiGate
+          let reportedAiGate = effectiveAiGate
             ? prioritizePreWriteAiGateViolations(effectiveAiGate, nextAction)
             : null;
+          if (
+            result.stage === 'PRE_WRITE' &&
+            result.decision.allowed &&
+            reportedAiGate?.allowed
+          ) {
+            try {
+              const lease = activeDependencies.writePreWriteLease({
+                repoRoot: process.cwd(),
+                git: new GitService(),
+                allowExistingCodeChanges: true,
+              });
+              if (!lease.valid) {
+                reportedAiGate = {
+                  ...reportedAiGate,
+                  status: 'BLOCKED',
+                  allowed: false,
+                  violations: [
+                    ...reportedAiGate.violations,
+                    {
+                      code: lease.code,
+                      severity: 'ERROR',
+                      message: lease.message,
+                    },
+                  ],
+                };
+              }
+            } catch (error) {
+              reportedAiGate = {
+                ...reportedAiGate,
+                status: 'BLOCKED',
+                allowed: false,
+                violations: [
+                  ...reportedAiGate.violations,
+                  {
+                    code: 'PRE_WRITE_LEASE_WRITE_FAILED',
+                    severity: 'ERROR',
+                    message:
+                      error instanceof Error
+                        ? `PRE_WRITE validation passed but could not write the required lease: ${error.message}`
+                        : 'PRE_WRITE validation passed but could not write the required lease.',
+                  },
+                ],
+              };
+            }
+          }
           const sddExperimentalNextAction =
             !aiGate && result.decision.code === 'SDD_EXPERIMENTAL_DISABLED'
               ? {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.309",
+  "version": "6.3.311",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {