pumuki 6.3.58 → 6.3.59

package/VERSION

@@ -1 +1 @@
-v6.3.58
+v6.3.59

package/docs/operations/RELEASE_NOTES.md

@@ -6,6 +6,22 @@ This file keeps only the operational highlights and rollout notes that matter wh
 
 ## 2026-03 (enterprise hardening updates)
 
+### 2026-03-14 (v6.3.59)
+
+- PRE_WRITE tooling-only no-op:
+  - consumer deltas that only touch package/runtime alignment files no longer materialize a fake multi-platform skills contract,
+  - the result is now `skills_contract=NOT_APPLICABLE` even with `pending_changes > 0` when no code platform is active in the worktree delta.
+- Policy packaging alignment:
+  - the published tarball now includes the `integrations/policy/*.ts` helpers required by `evaluateAiGate`, `stageRunners`, `watch` and `cli`.
+- Operational impact:
+  - `SAAS · PUMUKI-021` can now be revalidated against the published package on a real tooling-only adoption slice.
+- Validation evidence:
+  - `npm run -s typecheck` (`PASS`)
+  - `node --import tsx --test integrations/gate/__tests__/evaluateAiGate.test.ts` (`41 pass / 0 fail`)
+  - `node --import tsx --test --test-name-pattern "autocura evidence y receipt stale aunque la sesión SDD esté inválida|blocks AI gate violations in strict enforcement mode|blocks missing OpenSpec in strict enforcement mode|expone next_action de reconcile cuando active_rule_ids está vacío para código|expone next_action con slice atómico" integrations/lifecycle/__tests__/cli.test.ts` (`4 pass / 0 fail`)
+  - `npm run -s validation:package-manifest` (`PASS`)
+  - `npm pack --json --dry-run` (`PASS`)
+
 ### 2026-03-14 (v6.3.58)
 
 - PRE_WRITE no-op stability for consumer slices:

package/integrations/gate/evaluateAiGate.ts

@@ -3,6 +3,7 @@ import { readEvidenceResult } from '../evidence/readEvidence';
 import { captureRepoState } from '../evidence/repoState';
 import type { RepoState } from '../evidence/schema';
 import { resolvePolicyForStage } from './stagePolicies';
+import { execFileSync } from 'node:child_process';
 import { existsSync, realpathSync } from 'node:fs';
 import { resolve } from 'node:path';
 import type { SkillsLockV1, SkillsStage } from '../config/skillsLock';
@@ -353,6 +354,109 @@ const toRepoTreeDetectedPlatforms = (params: {
   });
 };
 
+const normalizeChangedPath = (value: string): string =>
+  value.replace(/\\/g, '/').replace(/^"+|"+$/g, '').trim();
+
+const parseChangedPath = (line: string): string | null => {
+  if (line.length < 4) {
+    return null;
+  }
+  const raw = line.slice(3).trim();
+  if (raw.length === 0) {
+    return null;
+  }
+  if (raw.includes(' -> ')) {
+    const renamed = raw.split(' -> ').pop();
+    if (!renamed) {
+      return null;
+    }
+    const normalizedRenamed = normalizeChangedPath(renamed);
+    return normalizedRenamed.length > 0 ? normalizedRenamed : null;
+  }
+  const normalized = normalizeChangedPath(raw);
+  return normalized.length > 0 ? normalized : null;
+};
+
+const collectWorktreeChangedPaths = (repoRoot: string): ReadonlyArray<string> => {
+  try {
+    const output = execFileSync(
+      'git',
+      ['status', '--short', '--untracked-files=all'],
+      {
+        cwd: repoRoot,
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'ignore'],
+      }
+    );
+    const files = output
+      .split('\n')
+      .map((line) => parseChangedPath(line))
+      .filter((line): line is string => typeof line === 'string' && line.length > 0);
+    return [...new Set(files)];
+  } catch {
+    return [];
+  }
+};
+
+const isPlatformPath = (platform: PreWriteSkillsPlatform, filePath: string): boolean => {
+  const normalized = normalizeChangedPath(filePath).toLowerCase();
+  if (platform === 'ios') {
+    return normalized.endsWith('.swift')
+      || normalized.startsWith('apps/ios/')
+      || normalized.startsWith('ios/');
+  }
+  if (platform === 'android') {
+    return normalized.endsWith('.kt')
+      || normalized.endsWith('.kts')
+      || normalized.startsWith('apps/android/')
+      || normalized.startsWith('android/');
+  }
+  if (platform === 'backend') {
+    const isTypeScriptOrJavaScript =
+      normalized.endsWith('.ts')
+      || normalized.endsWith('.js')
+      || normalized.endsWith('.mts')
+      || normalized.endsWith('.cts')
+      || normalized.endsWith('.mjs')
+      || normalized.endsWith('.cjs');
+    if (!isTypeScriptOrJavaScript) {
+      return false;
+    }
+    return normalized.startsWith('apps/backend/')
+      || /(^|\/)(backend|server|api)(\/|$)/.test(normalized);
+  }
+  const isReactExtension = normalized.endsWith('.tsx') || normalized.endsWith('.jsx');
+  if (isReactExtension) {
+    return true;
+  }
+  const isTypeScriptOrJavaScript =
+    normalized.endsWith('.ts')
+    || normalized.endsWith('.js')
+    || normalized.endsWith('.mts')
+    || normalized.endsWith('.cts')
+    || normalized.endsWith('.mjs')
+    || normalized.endsWith('.cjs');
+  if (!isTypeScriptOrJavaScript) {
+    return false;
+  }
+  return normalized.startsWith('apps/frontend/')
+    || normalized.startsWith('apps/web/')
+    || /(^|\/)(frontend|web|client)(\/|$)/.test(normalized);
+};
+
+const hasWorktreeCodePlatforms = (params: {
+  repoRoot: string;
+  requiredPlatforms: ReadonlyArray<PreWriteSkillsPlatform>;
+}): boolean => {
+  const changedPaths = collectWorktreeChangedPaths(params.repoRoot);
+  if (changedPaths.length === 0) {
+    return false;
+  }
+  return changedPaths.some((filePath) =>
+    params.requiredPlatforms.some((platform) => isPlatformPath(platform, filePath))
+  );
+};
+
 const toLockRequiredPlatforms = (
   requiredLock: SkillsLockV1 | undefined
 ): ReadonlyArray<PreWriteSkillsPlatform> => {
@@ -674,7 +778,16 @@ const toSkillsContractAssessment = (params: {
       : detectedPlatforms;
 
   if (requiredPlatforms.length > 0 && detectedPlatforms.length === 0) {
-    if (params.stage === 'PRE_WRITE' && pendingChanges === 0) {
+    if (
+      params.stage === 'PRE_WRITE'
+      && (
+        pendingChanges === 0
+        || !hasWorktreeCodePlatforms({
+          repoRoot: params.repoRoot,
+          requiredPlatforms,
+        })
+      )
+    ) {
       return {
         stage: params.stage,
         enforced: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.58",
+  "version": "6.3.59",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {