pumuki 6.3.63 → 6.3.65

package/README.md

@@ -37,7 +37,7 @@ npx --yes pumuki status
 npx --yes pumuki doctor --json
 ```
 
-Desde **6.3.63**, `npm install` en la raíz de un repo **Git** dispara un `postinstall` que ejecuta `pumuki install` automáticamente (hooks `pre-commit` / `pre-push`). No configura MCP del IDE por sí solo: usa `pumuki install --with-mcp` o el adaptador. Desactivar el postinstall: `PUMUKI_SKIP_POSTINSTALL=1`. En CI suele saltarse solo (`CI=true`).
+Desde **6.3.63**, `npm install` en la raíz de un repo **Git** dispara un `postinstall` que ejecuta `pumuki install` automáticamente (hooks `pre-commit` / `pre-push`). No configura MCP del IDE por sí solo: usa `pumuki install --with-mcp` o el adaptador. Desactivar el postinstall: `PUMUKI_SKIP_POSTINSTALL=1`. En CI suele saltarse solo (`CI=true`). En **6.3.64+**, las notificaciones del sistema en plataformas sin banner nativo se reflejan en **stderr** por defecto (`PUMUKI_DISABLE_STDERR_NOTIFICATIONS=1` para silenciarlas).
 
 Fallback (equivalent in pasos separados):
 

package/VERSION

@@ -1 +1 @@
-v6.3.61
+v6.3.64

package/docs/operations/RELEASE_NOTES.md

@@ -6,6 +6,16 @@ This file keeps only the operational highlights and rollout notes that matter wh
 
 ## 2026-04 (CLI stability and macOS notifications)
 
+### 2026-04-06 (v6.3.65)
+
+- **pre-commit.com + `exec`**: Pumuki ya no inserta su bloque gestionado *después* del `exec` del hook generado por pre-commit (código inalcanzable). Tras actualizar a **6.3.65**, ejecutar `pumuki install` en el consumer para reordenar `.git/hooks/pre-commit`.
+- Rollout: repin a `pumuki@6.3.65`; validar que un `git commit` dispara el gate (salida `[pumuki]` / policy) antes de que corra pre-commit.
+
+### 2026-04-05 (v6.3.64)
+
+- **Notificaciones multiplataforma**: fuera de macOS, avisos críticos van a **stderr** por defecto (terminal visible). `PUMUKI_DISABLE_STDERR_NOTIFICATIONS=1` lo silencia para CI/scripts. En macOS, `PUMUKI_NOTIFICATION_STDERR_MIRROR=1` añade copia en terminal; si `osascript`/banner falla, stderr actúa como respaldo.
+- Rollout: repin a `pumuki@6.3.64`; validar hooks y, si usáis notificaciones, comprobar salida en entorno no-macOS.
+
 ### 2026-04-05 (v6.3.63)
 
 - **Auto-wire on install**: el paquete npm ejecuta `postinstall` → `pumuki install` en el repo del consumidor (`INIT_CWD`) cuando hay `.git`. Saltar con `PUMUKI_SKIP_POSTINSTALL=1` o en CI. OpenSpec bootstrap sigue omitido en ese camino (`PUMUKI_SKIP_OPENSPEC_BOOTSTRAP` por defecto ahí). MCP en Cursor/Codex no se configura solo: usar `pumuki install --with-mcp` / adaptador cuando proceda.

package/docs/product/USAGE.md

@@ -242,6 +242,7 @@ Stage mapping:
 If a scope is empty, the menu prints an explicit operational hint (`Scope vacío`), so `PASS` with zero findings is distinguishable from a clean repository scan.
 
 System notifications (macOS) can be enabled from advanced menu option `31` (persisted in `.pumuki/system-notifications.json`).
+On non-macOS platforms, the same payloads are written to **stderr** by default (visible in the terminal) because there is no native banner API. Set `PUMUKI_DISABLE_STDERR_NOTIFICATIONS=1` to silence that path (delivery reports `unsupported-platform` on those OSes). On macOS, set `PUMUKI_NOTIFICATION_STDERR_MIRROR=1` to duplicate the banner text to stderr in addition to the system notification.
 Blocked notifications now use a native Swift floating modal (bottom-right) by default, with AppleScript fallback.
 Override mode with `PUMUKI_MACOS_BLOCKED_DIALOG_MODE=auto|swift-floating|applescript`.
 Custom skills import is available in advanced menu option `33` (writes `/.pumuki/custom-rules.json`).

package/integrations/lifecycle/hookBlock.ts

@@ -82,23 +82,58 @@ const ensureExecutableHeader = (contents: string): string => {
   return contents;
 };
 
+const isPreCommitFrameworkWithExecTerminator = (contents: string): boolean => {
+  if (!contents.includes('pre-commit.com') && !contents.includes('pre_commit')) {
+    return false;
+  }
+  return /\bexec\b/.test(contents);
+};
+
+const prependManagedBlockAfterShebang = (params: {
+  contents: string;
+  block: string;
+}): string => {
+  const trimmed = trimTrailingWhitespace(params.contents);
+  const firstNewline = trimmed.indexOf('\n');
+  const shebangLine = firstNewline === -1 ? trimmed : trimmed.slice(0, firstNewline);
+  const rest =
+    firstNewline === -1 ? '' : trimmed.slice(firstNewline + 1).replace(/^\n+/, '');
+  const header = shebangLine.startsWith('#!') ? shebangLine : '#!/usr/bin/env sh';
+  const bodyAfterShebang = shebangLine.startsWith('#!') ? rest : trimmed;
+  const tail = trimTrailingWhitespace(bodyAfterShebang);
+  return tail.length > 0
+    ? `${header}\n${params.block}\n\n${tail}\n`
+    : `${header}\n${params.block}\n`;
+};
+
 export const upsertPumukiManagedBlock = (params: {
   contents: string;
   hook: PumukiManagedHook;
 }): string => {
   const block = buildPumukiManagedHookBlock(params.hook);
   const baseline = ensureExecutableHeader(params.contents);
+  const hadManagedBlock = hasPumukiManagedBlock(baseline);
+  const core = collapseBlankLines(
+    trimTrailingWhitespace(
+      hadManagedBlock ? baseline.replace(managedBlockPattern, '\n') : baseline
+    )
+  );
+
+  if (
+    params.hook === 'pre-commit' &&
+    core.length > 0 &&
+    isPreCommitFrameworkWithExecTerminator(core)
+  ) {
+    const merged = prependManagedBlockAfterShebang({ contents: core, block });
+    return `${trimTrailingWhitespace(merged)}\n`;
+  }
 
-  if (hasPumukiManagedBlock(baseline)) {
-    const replaced = baseline.replace(managedBlockPattern, `${block}\n`);
-    return `${trimTrailingWhitespace(replaced)}\n`;
+  if (hadManagedBlock || core.length > 0) {
+    const withSeparator = core.length > 0 ? `${core}\n\n${block}` : block;
+    return `${trimTrailingWhitespace(withSeparator)}\n`;
   }
 
-  const withSeparator =
-    trimTrailingWhitespace(baseline).length > 0
-      ? `${trimTrailingWhitespace(baseline)}\n\n${block}`
-      : block;
-  return `${withSeparator}\n`;
+  return `${block}\n`;
 };
 
 export const removePumukiManagedBlock = (contents: string): {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.63",
+  "version": "6.3.65",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {

package/scripts/framework-menu-system-notifications-dispatch.ts

@@ -8,18 +8,33 @@ import type {
 } from './framework-menu-system-notifications-types';
 import { applyDialogChoice } from './framework-menu-system-notifications-config';
 import { deliverMacOsNotification } from './framework-menu-system-notifications-macos';
+import { isTruthyEnvValue } from './framework-menu-system-notifications-env';
+import {
+  deliverStderrNotificationBanner,
+  isStderrNotificationFallbackDisabled,
+} from './framework-menu-system-notifications-stdio-fallback';
 
 export const dispatchSystemNotification = (params: {
   event: PumukiCriticalNotificationEvent;
   payload: SystemNotificationPayload;
+  platform: NodeJS.Platform;
   repoRoot?: string;
   config: SystemNotificationsConfig;
   env: NodeJS.ProcessEnv;
   nowMs: number;
   runCommand?: SystemNotificationCommandRunner;
   runCommandWithOutput?: SystemNotificationCommandRunnerWithOutput;
-}): SystemNotificationEmitResult =>
-  deliverMacOsNotification({
+}): SystemNotificationEmitResult => {
+  const stderrOff = isStderrNotificationFallbackDisabled(params.env);
+
+  if (params.platform !== 'darwin') {
+    if (stderrOff) {
+      return { delivered: false, reason: 'unsupported-platform' };
+    }
+    return deliverStderrNotificationBanner({ payload: params.payload });
+  }
+
+  const macResult = deliverMacOsNotification({
     event: params.event,
     payload: params.payload,
     repoRoot: params.repoRoot,
@@ -30,3 +45,14 @@ export const dispatchSystemNotification = (params: {
     runCommandWithOutput: params.runCommandWithOutput,
     applyDialogChoice,
   });
+
+  if (macResult.delivered && isTruthyEnvValue(params.env.PUMUKI_NOTIFICATION_STDERR_MIRROR)) {
+    deliverStderrNotificationBanner({ payload: params.payload });
+  }
+
+  if (!macResult.delivered && macResult.reason === 'command-failed' && !stderrOff) {
+    return deliverStderrNotificationBanner({ payload: params.payload });
+  }
+
+  return macResult;
+};

package/scripts/framework-menu-system-notifications-env.ts

@@ -0,0 +1,7 @@
+export const isTruthyEnvValue = (value?: string): boolean => {
+  if (!value) {
+    return false;
+  }
+  const normalized = value.trim().toLowerCase();
+  return normalized === '1' || normalized === 'true' || normalized === 'yes' || normalized === 'on';
+};

package/scripts/framework-menu-system-notifications-gate.ts

@@ -3,19 +3,11 @@ import type {
   SystemNotificationEmitResult,
   SystemNotificationsConfig,
 } from './framework-menu-system-notifications-types';
-
-const isTruthyEnvValue = (value?: string): boolean => {
-  if (!value) {
-    return false;
-  }
-  const normalized = value.trim().toLowerCase();
-  return normalized === '1' || normalized === 'true' || normalized === 'yes' || normalized === 'on';
-};
+import { isTruthyEnvValue } from './framework-menu-system-notifications-env';
 
 export const resolveSystemNotificationGate = (params: {
   config: SystemNotificationsConfig;
   nowMs: number;
-  platform: NodeJS.Platform;
   env?: NodeJS.ProcessEnv;
 }): SystemNotificationEmitResult | null => {
   if (isTruthyEnvValue(params.env?.PUMUKI_DISABLE_SYSTEM_NOTIFICATIONS)) {
@@ -27,8 +19,5 @@ export const resolveSystemNotificationGate = (params: {
   if (isMutedAt(params.config, params.nowMs)) {
     return { delivered: false, reason: 'muted' };
   }
-  if (params.platform !== 'darwin') {
-    return { delivered: false, reason: 'unsupported-platform' };
-  }
   return null;
 };

package/scripts/framework-menu-system-notifications-lib.ts

@@ -48,7 +48,6 @@ export const emitSystemNotification = (params: {
   const gateResult = resolveSystemNotificationGate({
     config,
     nowMs,
-    platform,
     env: params.env ?? process.env,
   });
   if (gateResult) {
@@ -62,6 +61,7 @@ export const emitSystemNotification = (params: {
   return dispatchSystemNotification({
     event: params.event,
     payload,
+    platform,
     repoRoot: params.repoRoot,
     config,
     env: params.env ?? process.env,

package/scripts/framework-menu-system-notifications-payload-types.ts

@@ -6,5 +6,5 @@ export type SystemNotificationPayload = {
 };
 
 export type SystemNotificationEmitResult =
-  | { delivered: true; reason: 'delivered' }
+  | { delivered: true; reason: 'delivered' | 'stderr-fallback' }
   | { delivered: false; reason: 'disabled' | 'muted' | 'unsupported-platform' | 'command-failed' };

package/scripts/framework-menu-system-notifications-stdio-fallback.ts

@@ -0,0 +1,23 @@
+import type {
+  SystemNotificationEmitResult,
+  SystemNotificationPayload,
+} from './framework-menu-system-notifications-types';
+import { isTruthyEnvValue } from './framework-menu-system-notifications-env';
+
+export const isStderrNotificationFallbackDisabled = (env: NodeJS.ProcessEnv): boolean =>
+  isTruthyEnvValue(env.PUMUKI_DISABLE_STDERR_NOTIFICATIONS);
+
+export const deliverStderrNotificationBanner = (params: {
+  payload: SystemNotificationPayload;
+  stderr?: NodeJS.WriteStream;
+}): SystemNotificationEmitResult => {
+  const stderr = params.stderr ?? process.stderr;
+  const lines = [
+    '[pumuki]',
+    `title: ${params.payload.title}`,
+    ...(params.payload.subtitle ? [`subtitle: ${params.payload.subtitle}`] : []),
+    `message: ${params.payload.message}`,
+  ];
+  stderr.write(`${lines.join('\n')}\n`);
+  return { delivered: true, reason: 'stderr-fallback' };
+};