pumuki-ast-hooks 5.5.8 → 5.5.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki-ast-hooks",
-  "version": "5.5.8",
+  "version": "5.5.10",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {

package/scripts/hooks-system/application/services/guard/EvidenceManager.js

@@ -54,10 +54,10 @@ class EvidenceManager {
             }
             const raw = fs.readFileSync(this.evidencePath, 'utf8');
             const json = JSON.parse(raw);
-            const ts = json?.timestamp;
-            if (!ts) return null;
-            const ms = new Date(ts).getTime();
-            if (Number.isNaN(ms)) return null;
+            const rootMs = new Date(json?.timestamp).getTime();
+            const severityMs = new Date(json?.severity_metrics?.last_updated).getTime();
+            const ms = [rootMs, severityMs].filter(Number.isFinite).reduce((max, v) => Math.max(max, v), NaN);
+            if (!Number.isFinite(ms)) return null;
             return ms;
         } catch (error) {
             const msg = error && error.message ? error.message : String(error);

package/scripts/hooks-system/application/services/monitoring/EvidenceMonitorService.js

@@ -89,7 +89,9 @@ class EvidenceMonitorService {
         try {
             const raw = this.fs.readFileSync(this.evidencePath, 'utf8');
             const data = JSON.parse(raw);
-            const timestamp = new Date(data.timestamp).getTime();
+            const rootTimestamp = new Date(data.timestamp).getTime();
+            const severityTimestamp = new Date(data?.severity_metrics?.last_updated).getTime();
+            const timestamp = [rootTimestamp, severityTimestamp].filter(Number.isFinite).reduce((max, v) => Math.max(max, v), NaN);
             if (!Number.isFinite(timestamp)) {
                 this.notify({
                     message: 'Evidence timestamp is invalid.',

package/scripts/hooks-system/bin/update-evidence.sh

@@ -14,9 +14,9 @@ for arg in "$@"; do
   fi
 done
 
-CLI="$REPO_ROOT/scripts/hooks-system/bin/cli.js"
+CLI="$REPO_ROOT/node_modules/pumuki-ast-hooks/scripts/hooks-system/bin/cli.js"
 if [[ ! -f "$CLI" ]]; then
-  CLI="$REPO_ROOT/node_modules/pumuki-ast-hooks/scripts/hooks-system/bin/cli.js"
+  CLI="$REPO_ROOT/scripts/hooks-system/bin/cli.js"
 fi
 
 if [[ ! -f "$CLI" ]]; then

package/scripts/hooks-system/infrastructure/orchestration/intelligent-audit.js

@@ -180,6 +180,8 @@ function updateAIEvidence(violations, gateResult, tokenUsage) {
   try {
     const evidence = JSON.parse(fs.readFileSync(evidencePath, 'utf8'));
 
+    evidence.timestamp = new Date().toISOString();
+
     evidence.severity_metrics = {
       last_updated: new Date().toISOString(),
       total_violations: violations.length,

package/scripts/hooks-system/infrastructure/shell/orchestrators/audit-orchestrator.sh

@@ -771,6 +771,13 @@ summarize_all() {
       print_final_signature
       exit 0
     fi
+ 
+    local is_revert_in_progress=0
+    if [[ "${AST_ALLOW_REVERT:-1}" == "1" ]] && command -v git >/dev/null 2>&1; then
+      if git rev-parse -q --verify REVERT_HEAD >/dev/null 2>&1; then
+        is_revert_in_progress=1
+      fi
+    fi
     local gate_crit gate_high gate_med gate_low gate_es
 
     # Decide gate values based on mode
@@ -795,6 +802,15 @@ summarize_all() {
       # Block on ANY violation (CRITICAL + HIGH + MEDIUM + LOW)
       if (( gate_crit > 0 || gate_high > 0 || gate_med > 0 || gate_low > 0 || gate_es > 0 )); then
         printf "\n"
+        if (( is_revert_in_progress == 1 )); then
+          printf "%b[REVERT MODE - COMMIT ALLOWED]%b\n" "$YELLOW" "$NC"
+          printf "  Detected git revert in progress (REVERT_HEAD).\n"
+          printf "  Skipping quality gate blocking for pre-existing violations.\n"
+          printf "  Tip: set AST_ALLOW_REVERT=0 to enforce gates during revert.\n"
+          printf "\n"
+          print_final_signature
+          exit 0
+        fi
         if [[ "${BLOCK_ON_REPO_VIOLATIONS:-0}" == "1" ]]; then
           printf "%b[COMMIT BLOCKED - STRICT REPO+STAGING]%b\n" "$RED" "$NC"
           printf "  CRITICAL violations (repository): %s\n" "$gate_crit"
@@ -819,6 +835,15 @@ summarize_all() {
       # Standard mode: Block only on CRITICAL/HIGH IN STAGING
       if (( gate_crit > 0 || gate_high > 0 )); then
         printf "\n"
+        if (( is_revert_in_progress == 1 )); then
+          printf "%b[REVERT MODE - COMMIT ALLOWED]%b\n" "$YELLOW" "$NC"
+          printf "  Detected git revert in progress (REVERT_HEAD).\n"
+          printf "  Skipping quality gate blocking for pre-existing violations.\n"
+          printf "  Tip: set AST_ALLOW_REVERT=0 to enforce gates during revert.\n"
+          printf "\n"
+          print_final_signature
+          exit 0
+        fi
         printf "%b[COMMIT BLOCKED - CRITICAL/HIGH]%b\n" "$RED" "$NC"
         printf "  CRITICAL violations in staging: %s\n" "$gate_crit"
         printf "  HIGH violations in staging:     %s\n" "$gate_high"