pumuki 6.3.136 → 6.3.138

package/CHANGELOG.md

@@ -6,6 +6,18 @@ This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [6.3.138] - 2026-05-05
+
+### Fixed
+
+- **Doc-only evidence hygiene:** en commits documentales, `.ai_evidence.json` trackeado queda restaurado a `HEAD` y no deja modificaciones de hook que hagan fallar integraciones `pre-commit` con `files were modified by this hook`.
+
+## [6.3.137] - 2026-05-05
+
+### Fixed
+
+- **PUMUKI-INC-061 evidence/atomicity:** el guard de atomicidad ignora `.ai_evidence.json` / `.AI_EVIDENCE.json` gestionados por Pumuki al contar ficheros y scopes staged, evitando que un auto-restage de evidencia bloquee repins atómicos de consumers.
+
 ## [6.3.136] - 2026-05-05
 
 ### Fixed

package/docs/operations/RELEASE_NOTES.md

@@ -4,6 +4,16 @@ This file tracks the active deterministic framework line used in this repository
 Canonical release chronology lives in `CHANGELOG.md`.
 This file keeps only the operational highlights and rollout notes that matter while running the framework.
 
+### 2026-05-05 (v6.3.138)
+
+- **Doc-only sin worktree sucio:** cuando el índice solo contiene `*.md` / `*.mdx`, Pumuki restaura `.ai_evidence.json` trackeado a `HEAD` tras refrescar el gate, evitando el fallo del framework `pre-commit` por “files were modified by this hook”.
+- **RuralGo follow-up:** corrige el bloqueo observado al commitear el feedback `docs/technical/08-validation/refactor/pumuki-integration-feedback.md` después del repin.
+
+### 2026-05-05 (v6.3.137)
+
+- **Atomicidad compatible con evidencia gestionada:** `.ai_evidence.json` / `.AI_EVIDENCE.json` ya no cuentan como scope o fichero funcional en `git-atomicity`, de modo que un commit de repin no queda bloqueado solo porque el hook refresque evidencia trackeada.
+- **RuralGo follow-up:** corrige el bloqueo observado al intentar commitear el repin `package.json` + `package-lock.json`, donde Pumuki auto-restageaba evidencia y elevaba el commit a 3 scopes.
+
 ### 2026-05-05 (v6.3.136)
 
 - **All-severities blocking para consumers:** `PRE_WRITE`, `PRE_COMMIT`, `PRE_PUSH` y `CI` bloquean por cualquier violación de skills/reglas AST Intelligence, sin permitir rebajas por `skills.policy`, hard-mode `critical-high` ni `PRE_WRITE=advisory`.

package/integrations/git/gitAtomicity.ts

@@ -31,6 +31,7 @@ type GitAtomicityConfig = {
 const ATOMICITY_CONFIG_FILE = '.pumuki/git-atomicity.json';
 const DEFAULT_COMMIT_PATTERN =
   '^(feat|fix|chore|refactor|docs|test|perf|build|ci|revert)(\\([^)]+\\))?:\\s.+$';
+const MANAGED_EVIDENCE_PATHS = new Set(['.ai_evidence.json', '.AI_EVIDENCE.json']);
 
 const defaultConfig: GitAtomicityConfig = {
   enabled: true,
@@ -139,6 +140,9 @@ const parseLines = (value: string): ReadonlyArray<string> =>
     .map((line) => line.trim())
     .filter((line) => line.length > 0);
 
+const isManagedEvidencePath = (path: string): boolean =>
+  MANAGED_EVIDENCE_PATHS.has(path.replace(/\\/g, '/').trim());
+
 const toErrorMessage = (error: unknown): string => {
   if (error instanceof Error) {
     return error.message;
@@ -288,7 +292,7 @@ export const evaluateGitAtomicity = (params: {
     stage: params.stage,
     fromRef: params.fromRef,
     toRef: params.toRef,
-  });
+  }).filter((path) => !isManagedEvidencePath(path));
   const atomicSlicesRemediation = buildAtomicSlicesRemediation({
     git,
     repoRoot,

package/integrations/git/stageRunners.ts

@@ -20,9 +20,7 @@ import {
 } from '../notifications/emitAuditSummaryNotification';
 import { existsSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { buildEvidenceOperationalHints } from '../evidence/operationalHints';
 import { readEvidence, readEvidenceResult } from '../evidence/readEvidence';
-import { writeEvidence } from '../evidence/writeEvidence';
 import type { EvidenceReadResult } from '../evidence/readEvidence';
 import type { SnapshotFinding } from '../evidence/schema';
 import { ensureRuntimeArtifactsIgnored } from '../lifecycle/artifacts';
@@ -135,6 +133,7 @@ type StageRunnerDependencies = {
   isPathTracked: (repoRoot: string, relativePath: string) => boolean;
   listStagedIndexPaths: (repoRoot: string) => ReadonlyArray<string>;
   stagePath: (repoRoot: string, relativePath: string) => void;
+  restorePathFromHead: (repoRoot: string, relativePath: string) => void;
   resolveHeadOid: (repoRoot: string) => string | null;
   resolveGitAtomicityEnforcement: () => GitAtomicityEnforcementResolution;
 };
@@ -223,6 +222,9 @@ const defaultDependencies: StageRunnerDependencies = {
   stagePath: (repoRoot, relativePath) => {
     new GitService().runGit(['add', '--', relativePath], repoRoot);
   },
+  restorePathFromHead: (repoRoot, relativePath) => {
+    new GitService().runGit(['checkout', '--', relativePath], repoRoot);
+  },
   resolveHeadOid: (repoRoot) => {
     try {
       return new GitService().runGit(['rev-parse', 'HEAD'], repoRoot).trim();
@@ -507,26 +509,6 @@ const runHookGateWithPolicyRetry = async (params: {
   }
 };
 
-const patchOperationalHintsAfterDocumentationOnlyEvidenceSync = (repoRoot: string): void => {
-  const evidenceRead = readEvidenceResult(repoRoot);
-  if (evidenceRead.kind !== 'valid') {
-    return;
-  }
-  const evidence = evidenceRead.evidence;
-  const hints = buildEvidenceOperationalHints({
-    stage: evidence.snapshot.stage,
-    outcome: evidence.snapshot.outcome,
-    findings: evidence.snapshot.findings,
-    rulesCoverage: evidence.snapshot.rules_coverage,
-    evaluationMetrics: evidence.snapshot.evaluation_metrics,
-    extra: {
-      requires_second_pass: true,
-      second_pass_reason: 'tracked_evidence_refreshed_on_disk_not_staged_documentation_only_commit',
-    },
-  });
-  writeEvidence({ ...evidence, operational_hints: hints }, { repoRoot });
-};
-
 const syncTrackedEvidenceAfterSuccessfulPreCommit = (params: {
   dependencies: StageRunnerDependencies;
   repoRoot: string;
@@ -547,12 +529,11 @@ const syncTrackedEvidenceAfterSuccessfulPreCommit = (params: {
   ) {
     if (!params.dependencies.isQuietMode()) {
       process.stderr.write(
-        `[pumuki][evidence-sync] tracked ${EVIDENCE_FILE_PATH} updated on disk but not auto-staged (documentation-only staged paths: *.md / *.mdx). ` +
-          `Include in this commit if needed: git add -- ${EVIDENCE_FILE_PATH}. ` +
+        `[pumuki][evidence-sync] tracked ${EVIDENCE_FILE_PATH} left unchanged for documentation-only staged paths (*.md / *.mdx). ` +
           `Force previous behavior: PUMUKI_PRE_COMMIT_ALWAYS_RESTAGE_TRACKED_EVIDENCE=1\n`
       );
     }
-    patchOperationalHintsAfterDocumentationOnlyEvidenceSync(params.repoRoot);
+    params.dependencies.restorePathFromHead(params.repoRoot, EVIDENCE_FILE_PATH);
     return false;
   }
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.136",
+  "version": "6.3.138",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {