pumuki-ast-hooks 5.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +1105 -0
- package/bin/__tests__/auto-fix-violations.spec.js +132 -0
- package/bin/__tests__/auto-restart-guards.spec.js +11 -0
- package/bin/__tests__/check-doc-drift.spec.js +11 -0
- package/bin/__tests__/check-version.spec.js +240 -0
- package/bin/__tests__/cli.spec.js +11 -0
- package/bin/__tests__/guard-auto-manager.spec.js +11 -0
- package/bin/__tests__/guard-supervisor.spec.js +11 -0
- package/bin/__tests__/hook-status.spec.js +11 -0
- package/bin/__tests__/install.spec.js +11 -0
- package/bin/__tests__/nightly-metrics-report.spec.js +94 -0
- package/bin/__tests__/plan-review.spec.js +11 -0
- package/bin/__tests__/predictive-hooks.spec.js +11 -0
- package/bin/__tests__/run-ast-adapter.spec.js +11 -0
- package/bin/__tests__/run-orchestrator.spec.js +11 -0
- package/bin/__tests__/run-playbook.spec.js +11 -0
- package/bin/__tests__/setup-eslint.spec.js +11 -0
- package/bin/__tests__/violations-api.spec.js +11 -0
- package/bin/__tests__/watch-hooks.spec.js +11 -0
- package/bin/ai-commit.sh +5 -0
- package/bin/audit +5 -0
- package/bin/audit-library.js +6 -0
- package/bin/auto-fix-violations.js +19 -0
- package/bin/auto-restart-guards.js +6 -0
- package/bin/check-doc-drift.js +6 -0
- package/bin/check-version.js +19 -0
- package/bin/cleanup-branches.sh +5 -0
- package/bin/cli.js +6 -0
- package/bin/demo-recording.sh +5 -0
- package/bin/demo-violations +5 -0
- package/bin/fix-enforcer +5 -0
- package/bin/fix-gitflow-enforcement.sh +5 -0
- package/bin/generate-progress-report.sh +5 -0
- package/bin/git-analyze-pairs.sh +5 -0
- package/bin/git-leave-branch-check.sh +5 -0
- package/bin/gitflow +5 -0
- package/bin/gitflow-shell-integration.sh +5 -0
- package/bin/guard-auto-manager.js +6 -0
- package/bin/guard-autostart.sh +5 -0
- package/bin/guard-env.sh +5 -0
- package/bin/guard-supervisor.js +6 -0
- package/bin/hook-status.js +6 -0
- package/bin/install-git-wrapper.sh +5 -0
- package/bin/install.js +6 -0
- package/bin/kill-mcp-zombies.sh +5 -0
- package/bin/nightly-metrics-report.js +8 -0
- package/bin/plan-review.js +6 -0
- package/bin/predictive-hooks.js +6 -0
- package/bin/pumuki-audit.js +6 -0
- package/bin/pumuki-init.js +19 -0
- package/bin/pumuki-mcp-server.js +13 -0
- package/bin/pumuki-mcp.js +6 -0
- package/bin/pumuki-rules.js +6 -0
- package/bin/request-no-verify-approval.sh +5 -0
- package/bin/run-ast-adapter.js +6 -0
- package/bin/run-intelligent-audit.sh +5 -0
- package/bin/run-orchestrator.js +6 -0
- package/bin/run-playbook.js +6 -0
- package/bin/session-loader.sh +5 -0
- package/bin/setup-eslint.js +6 -0
- package/bin/start-guards.sh +5 -0
- package/bin/sync-autonomous-orchestrator.sh +5 -0
- package/bin/sync-to-library.sh +5 -0
- package/bin/update-evidence.sh +5 -0
- package/bin/update-session-context.sh +5 -0
- package/bin/verify-no-verify.sh +5 -0
- package/bin/violations +5 -0
- package/bin/violations-api.js +6 -0
- package/bin/watch-hooks.js +6 -0
- package/docs/API_REFERENCE.md +161 -0
- package/docs/ARCHITECTURE.md +236 -0
- package/docs/ARCHITECTURE_DETAILED.md +499 -0
- package/docs/BRANCH_PROTECTION_GUIDE.md +236 -0
- package/docs/CODE_STANDARDS.md +440 -0
- package/docs/CONTRIBUTING.md +246 -0
- package/docs/DEPENDENCIES.md +541 -0
- package/docs/HOW_IT_WORKS.md +716 -0
- package/docs/INSTALLATION.md +784 -0
- package/docs/MCP_SERVERS.md +786 -0
- package/docs/TESTING.md +423 -0
- package/docs/USAGE.md +856 -0
- package/docs/images/ast_intelligence_01.png +0 -0
- package/docs/images/ast_intelligence_02.png +0 -0
- package/docs/images/ast_intelligence_03.png +0 -0
- package/docs/images/ast_intelligence_04.png +0 -0
- package/docs/images/ast_intelligence_05.png +0 -0
- package/hooks/getSkillRulesPath.ts +52 -0
- package/hooks/git-status-monitor.ts +160 -0
- package/hooks/index.js +5 -0
- package/hooks/notify-macos.ts +42 -0
- package/hooks/package.json +16 -0
- package/hooks/post-tool-use-tracker.sh +89 -0
- package/hooks/pre-tool-use-evidence-validator.ts +252 -0
- package/hooks/pre-tool-use-guard.ts +151 -0
- package/hooks/skill-activation-prompt.sh +8 -0
- package/hooks/skill-activation-prompt.ts +307 -0
- package/index.js +49 -0
- package/package.json +117 -0
- package/presentation/cli/audit.sh +24 -0
- package/presentation/cli/autonomous-status.sh +92 -0
- package/presentation/cli/categorize-violations.sh +179 -0
- package/presentation/cli/direct-audit-option2.sh +23 -0
- package/presentation/cli/direct-audit.sh +33 -0
- package/scripts/hooks-system/.AI_TOKEN_STATUS.txt +16 -0
- package/scripts/hooks-system/.audit-reports/auto-recovery.log +1 -0
- package/scripts/hooks-system/.audit-reports/install-wizard.log +4 -0
- package/scripts/hooks-system/.audit-reports/notifications.log +425 -0
- package/scripts/hooks-system/.audit-reports/token-monitor.log +1275 -0
- package/scripts/hooks-system/.audit_tmp/intelligent-report.json +44953 -0
- package/scripts/hooks-system/.audit_tmp/intelligent-report.txt +1338 -0
- package/scripts/hooks-system/.audit_tmp/severity-history.jsonl +1 -0
- package/scripts/hooks-system/.audit_tmp/token-usage.jsonl +1 -0
- package/scripts/hooks-system/.hook-system/config.json +8 -0
- package/scripts/hooks-system/application/CompositionRoot.js +325 -0
- package/scripts/hooks-system/application/__tests__/CompositionRoot.spec.js +84 -0
- package/scripts/hooks-system/application/commands/index.js +64 -0
- package/scripts/hooks-system/application/queries/index.js +60 -0
- package/scripts/hooks-system/application/services/AutonomousOrchestrator.js +130 -0
- package/scripts/hooks-system/application/services/ContextDetectionEngine.js +181 -0
- package/scripts/hooks-system/application/services/DynamicRulesLoader.js +182 -0
- package/scripts/hooks-system/application/services/GitFlowService.js +156 -0
- package/scripts/hooks-system/application/services/GitTreeState.js +140 -0
- package/scripts/hooks-system/application/services/HookSystemScheduler.js +77 -0
- package/scripts/hooks-system/application/services/IntelligentCommitAnalyzer.js +151 -0
- package/scripts/hooks-system/application/services/IntelligentGitTreeMonitor.js +118 -0
- package/scripts/hooks-system/application/services/PlatformAnalysisService.js +173 -0
- package/scripts/hooks-system/application/services/PlatformDetectionService.js +168 -0
- package/scripts/hooks-system/application/services/PlaybookRunner.js +39 -0
- package/scripts/hooks-system/application/services/PredictiveHookAdvisor.js +56 -0
- package/scripts/hooks-system/application/services/RealtimeGuardPlugin.js +62 -0
- package/scripts/hooks-system/application/services/RealtimeGuardService.js +374 -0
- package/scripts/hooks-system/application/services/SmartDirtyTreeAnalyzer.js +63 -0
- package/scripts/hooks-system/application/services/__tests__/AutonomousOrchestrator.spec.js +36 -0
- package/scripts/hooks-system/application/services/__tests__/ContextDetectionEngine.spec.js +33 -0
- package/scripts/hooks-system/application/services/__tests__/DynamicRulesLoader.spec.js +43 -0
- package/scripts/hooks-system/application/services/__tests__/GitTreeState.spec.js +163 -0
- package/scripts/hooks-system/application/services/__tests__/HookSystemScheduler.spec.js +207 -0
- package/scripts/hooks-system/application/services/__tests__/IntelligentCommitAnalyzer.spec.js +365 -0
- package/scripts/hooks-system/application/services/__tests__/IntelligentGitTreeMonitor.spec.js +188 -0
- package/scripts/hooks-system/application/services/__tests__/PlatformDetectionService.spec.js +28 -0
- package/scripts/hooks-system/application/services/__tests__/PlaybookRunner.spec.js +143 -0
- package/scripts/hooks-system/application/services/__tests__/PredictiveHookAdvisor.spec.js +181 -0
- package/scripts/hooks-system/application/services/__tests__/RealtimeGuardPlugin.spec.js +45 -0
- package/scripts/hooks-system/application/services/__tests__/RealtimeGuardService.critical.spec.js +401 -0
- package/scripts/hooks-system/application/services/commit/CommitMessageGenerator.js +34 -0
- package/scripts/hooks-system/application/services/commit/FeatureDetector.js +101 -0
- package/scripts/hooks-system/application/services/evidence/EvidenceContextManager.js +163 -0
- package/scripts/hooks-system/application/services/evidence/__tests__/EvidenceContextManager.spec.js +98 -0
- package/scripts/hooks-system/application/services/guard/GuardAutoManagerService.js +169 -0
- package/scripts/hooks-system/application/services/guard/GuardConfig.js +15 -0
- package/scripts/hooks-system/application/services/guard/GuardEventLogger.js +70 -0
- package/scripts/hooks-system/application/services/guard/GuardHealthReminder.js +54 -0
- package/scripts/hooks-system/application/services/guard/GuardHeartbeatMonitor.js +94 -0
- package/scripts/hooks-system/application/services/guard/GuardLockManager.js +72 -0
- package/scripts/hooks-system/application/services/guard/GuardMonitorLoop.js +29 -0
- package/scripts/hooks-system/application/services/guard/GuardNotificationHandler.js +36 -0
- package/scripts/hooks-system/application/services/guard/GuardProcessManager.js +113 -0
- package/scripts/hooks-system/application/services/guard/GuardRecoveryService.js +90 -0
- package/scripts/hooks-system/application/services/guard/__tests__/GuardAutoManagerService.spec.js +77 -0
- package/scripts/hooks-system/application/services/installation/ConfigurationGeneratorService.js +123 -0
- package/scripts/hooks-system/application/services/installation/FileSystemInstallerService.js +112 -0
- package/scripts/hooks-system/application/services/installation/GitEnvironmentService.js +166 -0
- package/scripts/hooks-system/application/services/installation/HookInstaller.js +197 -0
- package/scripts/hooks-system/application/services/installation/IdeIntegrationService.js +37 -0
- package/scripts/hooks-system/application/services/installation/InstallService.js +130 -0
- package/scripts/hooks-system/application/services/installation/McpConfigurator.js +172 -0
- package/scripts/hooks-system/application/services/installation/PlatformDetectorService.js +36 -0
- package/scripts/hooks-system/application/services/installation/VSCodeTaskConfigurator.js +97 -0
- package/scripts/hooks-system/application/services/logging/UnifiedLogger.js +142 -0
- package/scripts/hooks-system/application/services/logging/__tests__/UnifiedLogger.spec.js +66 -0
- package/scripts/hooks-system/application/services/monitoring/ActivityMonitor.js +80 -0
- package/scripts/hooks-system/application/services/monitoring/AstMonitor.js +140 -0
- package/scripts/hooks-system/application/services/monitoring/DevDocsMonitor.js +85 -0
- package/scripts/hooks-system/application/services/monitoring/EvidenceMonitor.js +103 -0
- package/scripts/hooks-system/application/services/monitoring/EvidenceMonitorService.js +162 -0
- package/scripts/hooks-system/application/services/monitoring/GitTreeMonitor.js +123 -0
- package/scripts/hooks-system/application/services/monitoring/GitTreeMonitorService.js +114 -0
- package/scripts/hooks-system/application/services/monitoring/HealthCheckProviders.js +153 -0
- package/scripts/hooks-system/application/services/monitoring/HealthCheckService.js +118 -0
- package/scripts/hooks-system/application/services/monitoring/HeartbeatMonitorService.js +61 -0
- package/scripts/hooks-system/application/services/monitoring/TokenMonitor.js +60 -0
- package/scripts/hooks-system/application/services/monitoring/__tests__/EvidenceMonitorService.spec.js +107 -0
- package/scripts/hooks-system/application/services/monitoring/__tests__/GitTreeMonitorService.spec.js +27 -0
- package/scripts/hooks-system/application/services/monitoring/__tests__/HealthCheckProviders.spec.js +68 -0
- package/scripts/hooks-system/application/services/monitoring/__tests__/HealthCheckService.spec.js +69 -0
- package/scripts/hooks-system/application/services/monitoring/__tests__/HeartbeatMonitorService.spec.js +35 -0
- package/scripts/hooks-system/application/services/notification/MacNotificationSender.js +106 -0
- package/scripts/hooks-system/application/services/notification/NotificationCenterService.js +221 -0
- package/scripts/hooks-system/application/services/notification/NotificationDispatcher.js +42 -0
- package/scripts/hooks-system/application/services/notification/__tests__/NotificationCenterService.spec.js +40 -0
- package/scripts/hooks-system/application/services/notification/components/NotificationCooldownManager.js +62 -0
- package/scripts/hooks-system/application/services/notification/components/NotificationDeduplicator.js +67 -0
- package/scripts/hooks-system/application/services/notification/components/NotificationQueue.js +36 -0
- package/scripts/hooks-system/application/services/notification/components/NotificationRetryExecutor.js +58 -0
- package/scripts/hooks-system/application/services/platform/PlatformHeuristics.js +144 -0
- package/scripts/hooks-system/application/services/recovery/AutoRecoveryManager.js +137 -0
- package/scripts/hooks-system/application/services/recovery/__tests__/AutoRecoveryManager.spec.js +62 -0
- package/scripts/hooks-system/application/services/smart-commit/CommitMessageSuggester.js +97 -0
- package/scripts/hooks-system/application/services/smart-commit/FileContextGrouper.js +114 -0
- package/scripts/hooks-system/application/services/smart-commit/SmartCommitSummaryBuilder.js +53 -0
- package/scripts/hooks-system/application/services/token/CursorTokenService.js +44 -0
- package/scripts/hooks-system/application/services/token/TokenMetricsService.js +109 -0
- package/scripts/hooks-system/application/services/token/TokenMonitorService.js +160 -0
- package/scripts/hooks-system/application/services/token/TokenStatusReporter.js +56 -0
- package/scripts/hooks-system/application/services/token/__tests__/CursorTokenService.spec.js +69 -0
- package/scripts/hooks-system/application/services/token/__tests__/TokenMonitorService.spec.js +185 -0
- package/scripts/hooks-system/application/state/HookSystemStateMachine.js +59 -0
- package/scripts/hooks-system/application/state/__tests__/HookSystemStateMachine.spec.js +115 -0
- package/scripts/hooks-system/application/use-cases/AnalyzeCodebaseUseCase.js +54 -0
- package/scripts/hooks-system/application/use-cases/AnalyzeStagedFilesUseCase.js +61 -0
- package/scripts/hooks-system/application/use-cases/AutoExecuteAIStartUseCase.js +123 -0
- package/scripts/hooks-system/application/use-cases/BlockCommitUseCase.js +90 -0
- package/scripts/hooks-system/application/use-cases/GenerateAuditReportUseCase.js +184 -0
- package/scripts/hooks-system/application/use-cases/__tests__/AnalyzeCodebaseUseCase.spec.js +156 -0
- package/scripts/hooks-system/application/use-cases/__tests__/AnalyzeStagedFilesUseCase.spec.js +146 -0
- package/scripts/hooks-system/application/use-cases/__tests__/AutoExecuteAIStartUseCase.spec.js +89 -0
- package/scripts/hooks-system/application/use-cases/__tests__/BlockCommitUseCase.spec.js +171 -0
- package/scripts/hooks-system/application/use-cases/__tests__/GenerateAuditReportUseCase.spec.js +207 -0
- package/scripts/hooks-system/bin/__tests__/auto-fix-violations.spec.js +132 -0
- package/scripts/hooks-system/bin/__tests__/auto-restart-guards.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/check-doc-drift.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/check-version.spec.js +240 -0
- package/scripts/hooks-system/bin/__tests__/cli.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/guard-auto-manager.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/guard-supervisor.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/hook-status.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/install.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/nightly-metrics-report.spec.js +94 -0
- package/scripts/hooks-system/bin/__tests__/plan-review.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/predictive-hooks.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/run-ast-adapter.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/run-orchestrator.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/run-playbook.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/setup-eslint.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/violations-api.spec.js +11 -0
- package/scripts/hooks-system/bin/__tests__/watch-hooks.spec.js +11 -0
- package/scripts/hooks-system/bin/ai-commit.sh +63 -0
- package/scripts/hooks-system/bin/audit +463 -0
- package/scripts/hooks-system/bin/audit-library.js +54 -0
- package/scripts/hooks-system/bin/auto-fix-violations.js +130 -0
- package/scripts/hooks-system/bin/auto-restart-guards.js +93 -0
- package/scripts/hooks-system/bin/check-doc-drift.js +35 -0
- package/scripts/hooks-system/bin/check-version.js +201 -0
- package/scripts/hooks-system/bin/cleanup-branches.sh +106 -0
- package/scripts/hooks-system/bin/cli.js +208 -0
- package/scripts/hooks-system/bin/demo-recording.sh +57 -0
- package/scripts/hooks-system/bin/demo-violations +44 -0
- package/scripts/hooks-system/bin/fix-enforcer +27 -0
- package/scripts/hooks-system/bin/fix-gitflow-enforcement.sh +68 -0
- package/scripts/hooks-system/bin/generate-progress-report.sh +129 -0
- package/scripts/hooks-system/bin/git-analyze-pairs.sh +0 -0
- package/scripts/hooks-system/bin/git-leave-branch-check.sh +73 -0
- package/scripts/hooks-system/bin/gitflow +17 -0
- package/scripts/hooks-system/bin/gitflow-shell-integration.sh +64 -0
- package/scripts/hooks-system/bin/guard-auto-manager.js +44 -0
- package/scripts/hooks-system/bin/guard-autostart.sh +158 -0
- package/scripts/hooks-system/bin/guard-env.sh +40 -0
- package/scripts/hooks-system/bin/guard-supervisor.js +516 -0
- package/scripts/hooks-system/bin/hook-status.js +41 -0
- package/scripts/hooks-system/bin/install-git-wrapper.sh +53 -0
- package/scripts/hooks-system/bin/install.js +10 -0
- package/scripts/hooks-system/bin/kill-mcp-zombies.sh +48 -0
- package/scripts/hooks-system/bin/nightly-metrics-report.js +138 -0
- package/scripts/hooks-system/bin/plan-review.js +31 -0
- package/scripts/hooks-system/bin/predictive-hooks.js +18 -0
- package/scripts/hooks-system/bin/pumuki-audit.js +113 -0
- package/scripts/hooks-system/bin/pumuki-init.js +104 -0
- package/scripts/hooks-system/bin/pumuki-mcp.js +74 -0
- package/scripts/hooks-system/bin/pumuki-rules.js +74 -0
- package/scripts/hooks-system/bin/request-no-verify-approval.sh +116 -0
- package/scripts/hooks-system/bin/run-ast-adapter.js +86 -0
- package/scripts/hooks-system/bin/run-intelligent-audit.sh +67 -0
- package/scripts/hooks-system/bin/run-orchestrator.js +27 -0
- package/scripts/hooks-system/bin/run-playbook.js +23 -0
- package/scripts/hooks-system/bin/session-loader.sh +264 -0
- package/scripts/hooks-system/bin/setup-eslint.js +110 -0
- package/scripts/hooks-system/bin/start-guards.sh +190 -0
- package/scripts/hooks-system/bin/sync-autonomous-orchestrator.sh +32 -0
- package/scripts/hooks-system/bin/sync-to-library.sh +46 -0
- package/scripts/hooks-system/bin/update-evidence.sh +1167 -0
- package/scripts/hooks-system/bin/update-session-context.sh +261 -0
- package/scripts/hooks-system/bin/verify-no-verify.sh +68 -0
- package/scripts/hooks-system/bin/violations +20 -0
- package/scripts/hooks-system/bin/violations-api.js +345 -0
- package/scripts/hooks-system/bin/watch-hooks.js +20 -0
- package/scripts/hooks-system/config/project.config.json +36 -0
- package/scripts/hooks-system/config/state-map.json +12 -0
- package/scripts/hooks-system/domain/entities/AuditResult.js +139 -0
- package/scripts/hooks-system/domain/entities/Finding.js +116 -0
- package/scripts/hooks-system/domain/entities/SeverityConfig.js +73 -0
- package/scripts/hooks-system/domain/entities/SeverityConfig.ts +90 -0
- package/scripts/hooks-system/domain/entities/__tests__/AuditResult.spec.js +450 -0
- package/scripts/hooks-system/domain/entities/__tests__/Finding.spec.js +335 -0
- package/scripts/hooks-system/domain/entities/__tests__/SeverityConfig.spec.js +240 -0
- package/scripts/hooks-system/domain/entities/__tests__/entities.spec.js +29 -0
- package/scripts/hooks-system/domain/errors/__tests__/DomainErrors.spec.js +59 -0
- package/scripts/hooks-system/domain/errors/index.js +169 -0
- package/scripts/hooks-system/domain/events/__tests__/DomainEvents.spec.js +60 -0
- package/scripts/hooks-system/domain/events/index.js +121 -0
- package/scripts/hooks-system/domain/ports/IAstPort.js +67 -0
- package/scripts/hooks-system/domain/ports/IEvidencePort.js +86 -0
- package/scripts/hooks-system/domain/ports/IGitCommandPort.js +110 -0
- package/scripts/hooks-system/domain/ports/IGitPort.js +114 -0
- package/scripts/hooks-system/domain/ports/IGitQueryPort.js +93 -0
- package/scripts/hooks-system/domain/ports/INotificationPort.js +35 -0
- package/scripts/hooks-system/domain/ports/__tests__/ports.spec.js +36 -0
- package/scripts/hooks-system/domain/ports/index.js +14 -0
- package/scripts/hooks-system/domain/repositories/ICursorTokenRepository.js +13 -0
- package/scripts/hooks-system/domain/repositories/IFindingsRepository.js +30 -0
- package/scripts/hooks-system/domain/repositories/__tests__/IFindingsRepository.spec.js +18 -0
- package/scripts/hooks-system/domain/rules/CommitBlockingRules.js +142 -0
- package/scripts/hooks-system/domain/rules/__tests__/CommitBlockingRules.spec.js +18 -0
- package/scripts/hooks-system/domain/services/AuditAnalyzer.js +103 -0
- package/scripts/hooks-system/domain/services/AuditFilter.js +26 -0
- package/scripts/hooks-system/domain/services/AuditResultSerializer.js +35 -0
- package/scripts/hooks-system/domain/services/AuditScorer.js +38 -0
- package/scripts/hooks-system/domain/values/Severity.js +93 -0
- package/scripts/hooks-system/index.js +49 -0
- package/scripts/hooks-system/infrastructure/adapters/AstAnalyzerAdapter.js +150 -0
- package/scripts/hooks-system/infrastructure/adapters/FileEvidenceAdapter.js +140 -0
- package/scripts/hooks-system/infrastructure/adapters/GitCliAdapter.js +16 -0
- package/scripts/hooks-system/infrastructure/adapters/GitCommandAdapter.js +68 -0
- package/scripts/hooks-system/infrastructure/adapters/GitHubCliAdapter.js +85 -0
- package/scripts/hooks-system/infrastructure/adapters/GitQueryAdapter.js +58 -0
- package/scripts/hooks-system/infrastructure/adapters/LegacyAnalyzerAdapter.js +61 -0
- package/scripts/hooks-system/infrastructure/adapters/MacOSNotificationAdapter.js +99 -0
- package/scripts/hooks-system/infrastructure/adapters/__tests__/AstAnalyzerAdapter.spec.js +32 -0
- package/scripts/hooks-system/infrastructure/adapters/__tests__/FileEvidenceAdapter.spec.js +31 -0
- package/scripts/hooks-system/infrastructure/adapters/__tests__/GitCliAdapter.spec.js +39 -0
- package/scripts/hooks-system/infrastructure/adapters/__tests__/MacOSNotificationAdapter.spec.js +33 -0
- package/scripts/hooks-system/infrastructure/adapters/git/GitCommandRunner.js +78 -0
- package/scripts/hooks-system/infrastructure/adapters/git/GitCommandService.js +67 -0
- package/scripts/hooks-system/infrastructure/adapters/git/GitQueryService.js +50 -0
- package/scripts/hooks-system/infrastructure/adapters/index.js +14 -0
- package/scripts/hooks-system/infrastructure/ast/README.md +198 -0
- package/scripts/hooks-system/infrastructure/ast/__tests__/ast-core.spec.js +160 -0
- package/scripts/hooks-system/infrastructure/ast/__tests__/ast-intelligence.spec.js +20 -0
- package/scripts/hooks-system/infrastructure/ast/android/__tests__/ast-android.spec.js +33 -0
- package/scripts/hooks-system/infrastructure/ast/android/__tests__/clean-architecture-analyzer.spec.js +96 -0
- package/scripts/hooks-system/infrastructure/ast/android/__tests__/ddd-analyzer.spec.js +113 -0
- package/scripts/hooks-system/infrastructure/ast/android/__tests__/detekt-runner.spec.js +36 -0
- package/scripts/hooks-system/infrastructure/ast/android/__tests__/feature-first-analyzer.spec.js +80 -0
- package/scripts/hooks-system/infrastructure/ast/android/__tests__/native-bridge.spec.js +31 -0
- package/scripts/hooks-system/infrastructure/ast/android/analyzers/AndroidASTIntelligentAnalyzer.js +15 -0
- package/scripts/hooks-system/infrastructure/ast/android/analyzers/AndroidASTParser.js +157 -0
- package/scripts/hooks-system/infrastructure/ast/android/analyzers/AndroidAnalysisOrchestrator.js +164 -0
- package/scripts/hooks-system/infrastructure/ast/android/analyzers/AndroidArchitectureDetector.js +334 -0
- package/scripts/hooks-system/infrastructure/ast/android/analyzers/AndroidClassAnalyzer.js +162 -0
- package/scripts/hooks-system/infrastructure/ast/android/analyzers/AndroidForbiddenLiteralsAnalyzer.js +261 -0
- package/scripts/hooks-system/infrastructure/ast/android/analyzers/AndroidSOLIDAnalyzer.js +287 -0
- package/scripts/hooks-system/infrastructure/ast/android/analyzers/__tests__/AndroidForbiddenLiteralsAnalyzer.spec.js +58 -0
- package/scripts/hooks-system/infrastructure/ast/android/analyzers/__tests__/AndroidSOLIDAnalyzer.spec.js +84 -0
- package/scripts/hooks-system/infrastructure/ast/android/ast-android.js +1785 -0
- package/scripts/hooks-system/infrastructure/ast/android/clean-architecture-analyzer.js +115 -0
- package/scripts/hooks-system/infrastructure/ast/android/ddd-analyzer.js +70 -0
- package/scripts/hooks-system/infrastructure/ast/android/detekt-runner.js +81 -0
- package/scripts/hooks-system/infrastructure/ast/android/feature-first-analyzer.js +53 -0
- package/scripts/hooks-system/infrastructure/ast/android/native-bridge.js +119 -0
- package/scripts/hooks-system/infrastructure/ast/archive/README.md +18 -0
- package/scripts/hooks-system/infrastructure/ast/archive/ast-intelligence.ts +276 -0
- package/scripts/hooks-system/infrastructure/ast/archive/ios-rules.js +329 -0
- package/scripts/hooks-system/infrastructure/ast/archive/kotlin-analyzer.js +332 -0
- package/scripts/hooks-system/infrastructure/ast/archive/kotlin-parser.js +303 -0
- package/scripts/hooks-system/infrastructure/ast/archive/swift-analyzer.js +390 -0
- package/scripts/hooks-system/infrastructure/ast/ast-core.js +594 -0
- package/scripts/hooks-system/infrastructure/ast/ast-intelligence.js +617 -0
- package/scripts/hooks-system/infrastructure/ast/backend/__tests__/ast-backend.spec.js +20 -0
- package/scripts/hooks-system/infrastructure/ast/backend/__tests__/clean-architecture-analyzer.spec.js +151 -0
- package/scripts/hooks-system/infrastructure/ast/backend/__tests__/ddd-analyzer.spec.js +124 -0
- package/scripts/hooks-system/infrastructure/ast/backend/__tests__/feature-first-analyzer.spec.js +128 -0
- package/scripts/hooks-system/infrastructure/ast/backend/__tests__/forbidden-literals-analyzer.spec.js +95 -0
- package/scripts/hooks-system/infrastructure/ast/backend/__tests__/nestjs-patterns-analyzer.spec.js +59 -0
- package/scripts/hooks-system/infrastructure/ast/backend/__tests__/solid-analyzer.spec.js +114 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/BackendArchitectureDetector.js +141 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/BackendPatternDetector.js +23 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/__tests__/BackendArchitectureDetector.spec.js +239 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/__tests__/BackendPatternDetector.spec.js +58 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/detectors/CQRSDetector.js +41 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/detectors/CleanArchitectureDetector.js +52 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/detectors/FeatureFirstCleanDetector.js +74 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/detectors/LayeredArchitectureDetector.js +25 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/detectors/MVCDetector.js +32 -0
- package/scripts/hooks-system/infrastructure/ast/backend/analyzers/detectors/OnionArchitectureDetector.js +32 -0
- package/scripts/hooks-system/infrastructure/ast/backend/ast-backend-clean.js +44 -0
- package/scripts/hooks-system/infrastructure/ast/backend/ast-backend.js +2048 -0
- package/scripts/hooks-system/infrastructure/ast/backend/clean-architecture-analyzer.js +142 -0
- package/scripts/hooks-system/infrastructure/ast/backend/ddd-analyzer.js +256 -0
- package/scripts/hooks-system/infrastructure/ast/backend/feature-first-analyzer.js +70 -0
- package/scripts/hooks-system/infrastructure/ast/backend/forbidden-literals-analyzer.js +236 -0
- package/scripts/hooks-system/infrastructure/ast/backend/nestjs-patterns-analyzer.js +11 -0
- package/scripts/hooks-system/infrastructure/ast/backend/solid-analyzer.js +392 -0
- package/scripts/hooks-system/infrastructure/ast/common/BDDTDDWorkflowRules.js +52 -0
- package/scripts/hooks-system/infrastructure/ast/common/__tests__/BDDTDDWorkflowRules.spec.js +133 -0
- package/scripts/hooks-system/infrastructure/ast/common/__tests__/ast-common.spec.js +20 -0
- package/scripts/hooks-system/infrastructure/ast/common/__tests__/documentation-analyzer.spec.js +120 -0
- package/scripts/hooks-system/infrastructure/ast/common/__tests__/images-backend-analyzer.spec.js +123 -0
- package/scripts/hooks-system/infrastructure/ast/common/__tests__/monorepo-health-analyzer.spec.js +118 -0
- package/scripts/hooks-system/infrastructure/ast/common/__tests__/network-resilience-analyzer.spec.js +180 -0
- package/scripts/hooks-system/infrastructure/ast/common/__tests__/offline-backend-analyzer.spec.js +111 -0
- package/scripts/hooks-system/infrastructure/ast/common/__tests__/push-backend-analyzer.spec.js +124 -0
- package/scripts/hooks-system/infrastructure/ast/common/ast-common.js +345 -0
- package/scripts/hooks-system/infrastructure/ast/common/documentation-analyzer.js +217 -0
- package/scripts/hooks-system/infrastructure/ast/common/images-backend-analyzer.js +36 -0
- package/scripts/hooks-system/infrastructure/ast/common/monorepo-health-analyzer.js +452 -0
- package/scripts/hooks-system/infrastructure/ast/common/network-resilience-analyzer.js +178 -0
- package/scripts/hooks-system/infrastructure/ast/common/offline-backend-analyzer.js +53 -0
- package/scripts/hooks-system/infrastructure/ast/common/push-backend-analyzer.js +42 -0
- package/scripts/hooks-system/infrastructure/ast/common/rules/BDDRules.js +87 -0
- package/scripts/hooks-system/infrastructure/ast/common/rules/ImplementationRules.js +83 -0
- package/scripts/hooks-system/infrastructure/ast/common/rules/TDDRules.js +109 -0
- package/scripts/hooks-system/infrastructure/ast/common/rules/WorkflowRules.js +137 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/__tests__/ast-frontend.spec.js +20 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/analyzers/FrontendArchitectureDetector.js +289 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/analyzers/FrontendForbiddenLiteralsAnalyzer.js +257 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/analyzers/FrontendSOLIDAnalyzer.js +274 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/analyzers/__tests__/FrontendArchitectureDetector.spec.js +151 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/analyzers/__tests__/FrontendForbiddenLiteralsAnalyzer.spec.js +20 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/analyzers/__tests__/FrontendSOLIDAnalyzer.spec.js +108 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/ast-frontend-clean.js +42 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/ast-frontend.js +2094 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/clean-architecture-analyzer.js +88 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/ddd-analyzer.js +94 -0
- package/scripts/hooks-system/infrastructure/ast/frontend/feature-first-analyzer.js +51 -0
- package/scripts/hooks-system/infrastructure/ast/ios/__tests__/ast-ios.spec.js +40 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/__tests__/iOSArchitectureDetector.spec.js +20 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/__tests__/iOSArchitectureRules.spec.js +61 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/__tests__/iOSCICDRules.spec.js +10 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/__tests__/iOSEnterpriseAnalyzer.spec.js +36 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/__tests__/iOSForbiddenLiteralsAnalyzer.spec.js +64 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/__tests__/iOSNetworkingAdvancedRules.spec.js +10 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/__tests__/iOSPerformanceRules.spec.js +34 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/__tests__/iOSSPMRules.spec.js +10 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/__tests__/iOSSwiftUIAdvancedRules.spec.js +10 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSASTIntelligentAnalyzer.js +894 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSArchitectureDetector.js +445 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSArchitectureRules.js +700 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSCICDRules.js +431 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSEnterpriseAnalyzer.js +580 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSForbiddenLiteralsAnalyzer.js +261 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSNetworkingAdvancedRules.js +177 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSPerformanceRules.js +11 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSSPMRules.js +496 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSSwiftUIAdvancedRules.js +333 -0
- package/scripts/hooks-system/infrastructure/ast/ios/analyzers/iOSTestingAdvancedRules.js +225 -0
- package/scripts/hooks-system/infrastructure/ast/ios/ast-ios.js +2176 -0
- package/scripts/hooks-system/infrastructure/ast/ios/native-bridge.js +92 -0
- package/scripts/hooks-system/infrastructure/ast/ios/parsers/SourceKittenParser.js +471 -0
- package/scripts/hooks-system/infrastructure/ast/ios/parsers/__tests__/SourceKittenParser.spec.js +41 -0
- package/scripts/hooks-system/infrastructure/ast/text/__tests__/text-scanner.spec.js +20 -0
- package/scripts/hooks-system/infrastructure/ast/text/text-scanner.js +1120 -0
- package/scripts/hooks-system/infrastructure/cache/CacheService.js +160 -0
- package/scripts/hooks-system/infrastructure/cli/__tests__/install-wizard.spec.js +16 -0
- package/scripts/hooks-system/infrastructure/cli/install-wizard.js +74 -0
- package/scripts/hooks-system/infrastructure/core/GitOperations.js +50 -0
- package/scripts/hooks-system/infrastructure/core/GitOperations.ts +112 -0
- package/scripts/hooks-system/infrastructure/core/__tests__/GitOperations.spec.js +146 -0
- package/scripts/hooks-system/infrastructure/eslint/eslint-integration.sh +75 -0
- package/scripts/hooks-system/infrastructure/events/EventListeners.js +143 -0
- package/scripts/hooks-system/infrastructure/events/__tests__/events.spec.js +14 -0
- package/scripts/hooks-system/infrastructure/external-tools/GitOperations.js +54 -0
- package/scripts/hooks-system/infrastructure/external-tools/eslint/backend.config.template.mjs +58 -0
- package/scripts/hooks-system/infrastructure/git-hooks/pre-push +35 -0
- package/scripts/hooks-system/infrastructure/git-server/pre-receive-hook +253 -0
- package/scripts/hooks-system/infrastructure/guards/git-wrapper.sh +32 -0
- package/scripts/hooks-system/infrastructure/guards/master-validator.sh +247 -0
- package/scripts/hooks-system/infrastructure/guards/prevent-no-verify.sh +34 -0
- package/scripts/hooks-system/infrastructure/hooks/__tests__/skill-activation-prompt.spec.js +11 -0
- package/scripts/hooks-system/infrastructure/hooks/pre-tool-use-intelligent-enforcer.sh +489 -0
- package/scripts/hooks-system/infrastructure/hooks/skill-activation-prompt.js +244 -0
- package/scripts/hooks-system/infrastructure/logging/UnifiedLoggerFactory.js +40 -0
- package/scripts/hooks-system/infrastructure/logging/__tests__/logging.spec.js +9 -0
- package/scripts/hooks-system/infrastructure/mcp/README.md +116 -0
- package/scripts/hooks-system/infrastructure/mcp/__tests__/ast-intelligence-automation.spec.js +38 -0
- package/scripts/hooks-system/infrastructure/mcp/__tests__/evidence-watcher.spec.js +38 -0
- package/scripts/hooks-system/infrastructure/mcp/ast-intelligence-automation.js +1097 -0
- package/scripts/hooks-system/infrastructure/mcp/evidence-watcher.js +128 -0
- package/scripts/hooks-system/infrastructure/mcp/package.json +17 -0
- package/scripts/hooks-system/infrastructure/mcp/services/EvidenceService.js +87 -0
- package/scripts/hooks-system/infrastructure/mcp/services/McpProtocolHandler.js +166 -0
- package/scripts/hooks-system/infrastructure/orchestration/__tests__/intelligent-audit.spec.js +11 -0
- package/scripts/hooks-system/infrastructure/orchestration/intelligent-audit.js +353 -0
- package/scripts/hooks-system/infrastructure/patterns/pattern-checks.sh +98 -0
- package/scripts/hooks-system/infrastructure/reporting/ReportImpactAnalyzer.js +109 -0
- package/scripts/hooks-system/infrastructure/reporting/ReportMetricsCalculator.js +114 -0
- package/scripts/hooks-system/infrastructure/reporting/ReportPresenter.js +86 -0
- package/scripts/hooks-system/infrastructure/reporting/__tests__/reporting.spec.js +15 -0
- package/scripts/hooks-system/infrastructure/reporting/report-generator.js +130 -0
- package/scripts/hooks-system/infrastructure/reporting/severity-tracker.js +105 -0
- package/scripts/hooks-system/infrastructure/repositories/CursorTokenRepository.js +76 -0
- package/scripts/hooks-system/infrastructure/repositories/FileFindingsRepository.js +88 -0
- package/scripts/hooks-system/infrastructure/repositories/__tests__/repositories.spec.js +20 -0
- package/scripts/hooks-system/infrastructure/repositories/datasources/CursorApiDataSource.js +73 -0
- package/scripts/hooks-system/infrastructure/repositories/datasources/CursorFileDataSource.js +55 -0
- package/scripts/hooks-system/infrastructure/severity/__tests__/severity-evaluator.spec.js +18 -0
- package/scripts/hooks-system/infrastructure/severity/analyzers/__tests__/maintainability-analyzer.spec.js +170 -0
- package/scripts/hooks-system/infrastructure/severity/analyzers/__tests__/performance-analyzer.spec.js +186 -0
- package/scripts/hooks-system/infrastructure/severity/analyzers/__tests__/security-analyzer.spec.js +151 -0
- package/scripts/hooks-system/infrastructure/severity/analyzers/__tests__/stability-analyzer.spec.js +143 -0
- package/scripts/hooks-system/infrastructure/severity/analyzers/maintainability-analyzer.js +100 -0
- package/scripts/hooks-system/infrastructure/severity/analyzers/performance-analyzer.js +109 -0
- package/scripts/hooks-system/infrastructure/severity/analyzers/security-analyzer.js +104 -0
- package/scripts/hooks-system/infrastructure/severity/analyzers/stability-analyzer.js +85 -0
- package/scripts/hooks-system/infrastructure/severity/context/analyzers/CodeClassificationAnalyzer.js +71 -0
- package/scripts/hooks-system/infrastructure/severity/context/analyzers/DataAnalyzer.js +64 -0
- package/scripts/hooks-system/infrastructure/severity/context/analyzers/ImpactAnalyzer.js +68 -0
- package/scripts/hooks-system/infrastructure/severity/context/analyzers/SafetyAnalyzer.js +82 -0
- package/scripts/hooks-system/infrastructure/severity/context/context-builder.js +88 -0
- package/scripts/hooks-system/infrastructure/severity/generators/RecommendationGenerator.js +153 -0
- package/scripts/hooks-system/infrastructure/severity/mappers/SeverityMapper.js +10 -0
- package/scripts/hooks-system/infrastructure/severity/policies/gate-policies.js +136 -0
- package/scripts/hooks-system/infrastructure/severity/policies/severity-policies.json +206 -0
- package/scripts/hooks-system/infrastructure/severity/scorers/ContextMultiplier.js +49 -0
- package/scripts/hooks-system/infrastructure/severity/severity-evaluator.js +117 -0
- package/scripts/hooks-system/infrastructure/shell/core/constants.sh +26 -0
- package/scripts/hooks-system/infrastructure/shell/core/utils.sh +45 -0
- package/scripts/hooks-system/infrastructure/shell/gitflow/git-wrapper.sh +646 -0
- package/scripts/hooks-system/infrastructure/shell/gitflow/gitflow-enforcer.sh +620 -0
- package/scripts/hooks-system/infrastructure/shell/gitflow/gitflow-state-manager.sh +235 -0
- package/scripts/hooks-system/infrastructure/shell/gitflow-state-manager.sh +225 -0
- package/scripts/hooks-system/infrastructure/shell/orchestrators/audit-orchestrator.sh +1106 -0
- package/scripts/hooks-system/infrastructure/shell/security/detect-secrets.sh +26 -0
- package/scripts/hooks-system/infrastructure/shell/security/detect_secrets.py +182 -0
- package/scripts/hooks-system/infrastructure/shell/validate-clean-architecture.sh +254 -0
- package/scripts/hooks-system/infrastructure/shell/validators/check-doc-structure.sh +62 -0
- package/scripts/hooks-system/infrastructure/shell/validators/ensure-critical-docs.sh +26 -0
- package/scripts/hooks-system/infrastructure/shell/validators/validate-ai-protocol.sh +474 -0
- package/scripts/hooks-system/infrastructure/shell/validators/validate-clean-architecture.sh +303 -0
- package/scripts/hooks-system/infrastructure/shell/validators/validate-conventional-commit.sh +42 -0
- package/scripts/hooks-system/infrastructure/storage/file-operations.sh +31 -0
- package/scripts/hooks-system/infrastructure/telemetry/TelemetryService.js +165 -0
- package/scripts/hooks-system/infrastructure/telemetry/__tests__/telemetry.spec.js +15 -0
- package/scripts/hooks-system/infrastructure/telemetry/metrics-logger.js +66 -0
- package/scripts/hooks-system/infrastructure/telemetry/metrics-server.js +61 -0
- package/scripts/hooks-system/infrastructure/utils/__tests__/utils.spec.js +8 -0
- package/scripts/hooks-system/infrastructure/utils/error-utils.js +28 -0
- package/scripts/hooks-system/infrastructure/utils/timestamp-helper.sh +106 -0
- package/scripts/hooks-system/infrastructure/utils/token-manager.js +121 -0
- package/scripts/hooks-system/infrastructure/validators/__tests__/detect-commit-language.spec.js +16 -0
- package/scripts/hooks-system/infrastructure/validators/__tests__/enforce-english-literals.spec.js +67 -0
- package/scripts/hooks-system/infrastructure/validators/detect-commit-language.js +145 -0
- package/scripts/hooks-system/infrastructure/validators/enforce-english-literals.js +202 -0
- package/scripts/hooks-system/infrastructure/watchdog/__tests__/.audit-reports/token-monitor.log +18 -0
- package/scripts/hooks-system/infrastructure/watchdog/__tests__/auto-recovery.spec.js +14 -0
- package/scripts/hooks-system/infrastructure/watchdog/__tests__/token-monitor.spec.js +67 -0
- package/scripts/hooks-system/infrastructure/watchdog/__tests__/watchdog.spec.js +22 -0
- package/scripts/hooks-system/infrastructure/watchdog/ai-watchdog.sh +278 -0
- package/scripts/hooks-system/infrastructure/watchdog/auto-recovery.js +32 -0
- package/scripts/hooks-system/infrastructure/watchdog/health-check.js +58 -0
- package/scripts/hooks-system/infrastructure/watchdog/token-monitor-loop.sh +20 -0
- package/scripts/hooks-system/infrastructure/watchdog/token-monitor.js +69 -0
- package/scripts/hooks-system/infrastructure/watchdog/token-tracker.sh +208 -0
- package/scripts/hooks-system/presentation/cli/audit.sh +32 -0
- package/scripts/hooks-system/presentation/cli/autonomous-status.sh +92 -0
- package/scripts/hooks-system/presentation/cli/categorize-violations.sh +179 -0
- package/scripts/hooks-system/presentation/cli/direct-audit-option2.sh +23 -0
- package/scripts/hooks-system/presentation/cli/direct-audit.sh +33 -0
- package/skills/android-guidelines/SKILL.md +475 -0
- package/skills/android-guidelines/resources/advanced-topics.md +44 -0
- package/skills/android-guidelines/resources/architecture-overview.md +44 -0
- package/skills/backend-guidelines/SKILL.md +335 -0
- package/skills/backend-guidelines/resources/architecture-overview.md +48 -0
- package/skills/frontend-guidelines/SKILL.md +367 -0
- package/skills/frontend-guidelines/resources/architecture-overview.md +44 -0
- package/skills/ios-guidelines/SKILL.md +406 -0
- package/skills/ios-guidelines/resources/architecture-overview.md +47 -0
- package/skills/skill-rules.json +334 -0
package/scripts/hooks-system/infrastructure/ast/common/__tests__/offline-backend-analyzer.spec.js
ADDED
|
@@ -0,0 +1,111 @@
|
|
|
1
|
+
const { analyzeOfflineBackend } = require('../offline-backend-analyzer');
|
|
2
|
+
|
|
3
|
+
function createMockProject(files) {
|
|
4
|
+
return {
|
|
5
|
+
getSourceFiles: () => files.map(f => ({
|
|
6
|
+
getFilePath: () => f.path,
|
|
7
|
+
getFullText: () => f.content
|
|
8
|
+
}))
|
|
9
|
+
};
|
|
10
|
+
}
|
|
11
|
+
|
|
12
|
+
describe('offline-backend-analyzer', () => {
|
|
13
|
+
describe('analyzeOfflineBackend', () => {
|
|
14
|
+
it('should detect mutation without versioning', () => {
|
|
15
|
+
const project = createMockProject([{
|
|
16
|
+
path: '/app/backend/orders.controller.ts',
|
|
17
|
+
content: '@Post() createOrder(@Body() dto) { return this.service.create(dto); }'
|
|
18
|
+
}]);
|
|
19
|
+
const findings = [];
|
|
20
|
+
|
|
21
|
+
analyzeOfflineBackend(project, findings);
|
|
22
|
+
|
|
23
|
+
expect(findings.some(f => f.ruleId === 'backend.offline.missing_optimistic_locking')).toBe(true);
|
|
24
|
+
});
|
|
25
|
+
|
|
26
|
+
it('should not flag when version field present', () => {
|
|
27
|
+
const project = createMockProject([{
|
|
28
|
+
path: '/app/backend/orders.controller.ts',
|
|
29
|
+
content: '@Put() update(@Body() dto) { if (dto.version !== current.version) throw 409; }'
|
|
30
|
+
}]);
|
|
31
|
+
const findings = [];
|
|
32
|
+
|
|
33
|
+
analyzeOfflineBackend(project, findings);
|
|
34
|
+
|
|
35
|
+
expect(findings.filter(f => f.ruleId === 'backend.offline.missing_optimistic_locking')).toHaveLength(0);
|
|
36
|
+
});
|
|
37
|
+
|
|
38
|
+
it('should detect mutation without idempotency key', () => {
|
|
39
|
+
const project = createMockProject([{
|
|
40
|
+
path: '/app/api/orders.service.ts',
|
|
41
|
+
content: 'async createOrder(data) { await db.insert(data); }'
|
|
42
|
+
}]);
|
|
43
|
+
const findings = [];
|
|
44
|
+
|
|
45
|
+
analyzeOfflineBackend(project, findings);
|
|
46
|
+
|
|
47
|
+
expect(findings.some(f => f.ruleId === 'backend.offline.missing_idempotency_key')).toBe(true);
|
|
48
|
+
expect(findings.find(f => f.ruleId === 'backend.offline.missing_idempotency_key').severity).toBe('CRITICAL');
|
|
49
|
+
});
|
|
50
|
+
|
|
51
|
+
it('should not flag when idempotencyKey present', () => {
|
|
52
|
+
const project = createMockProject([{
|
|
53
|
+
path: '/app/api/orders.service.ts',
|
|
54
|
+
content: 'async createOrder(data, idempotencyKey) { if (await exists(idempotencyKey)) return; await db.insert(data); }'
|
|
55
|
+
}]);
|
|
56
|
+
const findings = [];
|
|
57
|
+
|
|
58
|
+
analyzeOfflineBackend(project, findings);
|
|
59
|
+
|
|
60
|
+
expect(findings.filter(f => f.ruleId === 'backend.offline.missing_idempotency_key')).toHaveLength(0);
|
|
61
|
+
});
|
|
62
|
+
|
|
63
|
+
it('should detect sync endpoint without delta', () => {
|
|
64
|
+
const project = createMockProject([{
|
|
65
|
+
path: '/app/backend/sync.controller.ts',
|
|
66
|
+
content: '@Get("/sync") getAll() { return this.repo.findAll(); }'
|
|
67
|
+
}]);
|
|
68
|
+
const findings = [];
|
|
69
|
+
|
|
70
|
+
analyzeOfflineBackend(project, findings);
|
|
71
|
+
|
|
72
|
+
expect(findings.some(f => f.ruleId === 'backend.offline.sync_endpoint_optimization')).toBe(true);
|
|
73
|
+
});
|
|
74
|
+
|
|
75
|
+
it('should not flag sync with delta optimization', () => {
|
|
76
|
+
const project = createMockProject([{
|
|
77
|
+
path: '/app/backend/sync.controller.ts',
|
|
78
|
+
content: '@Get("/sync") getChanges(@Query() lastSyncedAt) { return this.repo.findSince(lastSyncedAt); }'
|
|
79
|
+
}]);
|
|
80
|
+
const findings = [];
|
|
81
|
+
|
|
82
|
+
analyzeOfflineBackend(project, findings);
|
|
83
|
+
|
|
84
|
+
expect(findings.filter(f => f.ruleId === 'backend.offline.sync_endpoint_optimization')).toHaveLength(0);
|
|
85
|
+
});
|
|
86
|
+
|
|
87
|
+
it('should skip non-backend files', () => {
|
|
88
|
+
const project = createMockProject([{
|
|
89
|
+
path: '/app/frontend/orders.component.ts',
|
|
90
|
+
content: '@Post() createOrder() {}'
|
|
91
|
+
}]);
|
|
92
|
+
const findings = [];
|
|
93
|
+
|
|
94
|
+
analyzeOfflineBackend(project, findings);
|
|
95
|
+
|
|
96
|
+
expect(findings).toHaveLength(0);
|
|
97
|
+
});
|
|
98
|
+
|
|
99
|
+
it('should accept etag as versioning', () => {
|
|
100
|
+
const project = createMockProject([{
|
|
101
|
+
path: '/app/backend/orders.controller.ts',
|
|
102
|
+
content: '@Patch() update(@Headers("If-Match") etag) { checkEtag(etag); }'
|
|
103
|
+
}]);
|
|
104
|
+
const findings = [];
|
|
105
|
+
|
|
106
|
+
analyzeOfflineBackend(project, findings);
|
|
107
|
+
|
|
108
|
+
expect(findings.filter(f => f.ruleId === 'backend.offline.missing_optimistic_locking')).toHaveLength(0);
|
|
109
|
+
});
|
|
110
|
+
});
|
|
111
|
+
});
|
package/scripts/hooks-system/infrastructure/ast/common/__tests__/push-backend-analyzer.spec.js
ADDED
|
@@ -0,0 +1,124 @@
|
|
|
1
|
+
const { analyzePushBackend } = require('../push-backend-analyzer');
|
|
2
|
+
|
|
3
|
+
function createMockProject(files) {
|
|
4
|
+
return {
|
|
5
|
+
getSourceFiles: () => files.map(f => ({
|
|
6
|
+
getFilePath: () => f.path,
|
|
7
|
+
getFullText: () => f.content
|
|
8
|
+
}))
|
|
9
|
+
};
|
|
10
|
+
}
|
|
11
|
+
|
|
12
|
+
describe('push-backend-analyzer', () => {
|
|
13
|
+
describe('analyzePushBackend', () => {
|
|
14
|
+
it('should detect push notification without queue', () => {
|
|
15
|
+
const project = createMockProject([{
|
|
16
|
+
path: '/app/services/notification.service.ts',
|
|
17
|
+
content: 'function send() { sendNotification(token, payload); }'
|
|
18
|
+
}]);
|
|
19
|
+
const findings = [];
|
|
20
|
+
|
|
21
|
+
analyzePushBackend(project, findings);
|
|
22
|
+
|
|
23
|
+
expect(findings).toHaveLength(1);
|
|
24
|
+
expect(findings[0].ruleId).toBe('backend.push.missing_notification_queue');
|
|
25
|
+
expect(findings[0].severity).toBe('HIGH');
|
|
26
|
+
});
|
|
27
|
+
|
|
28
|
+
it('should not flag when queue is present', () => {
|
|
29
|
+
const project = createMockProject([{
|
|
30
|
+
path: '/app/services/notification.service.ts',
|
|
31
|
+
content: 'import { Queue } from "bull"; sendNotification(token, payload);'
|
|
32
|
+
}]);
|
|
33
|
+
const findings = [];
|
|
34
|
+
|
|
35
|
+
analyzePushBackend(project, findings);
|
|
36
|
+
|
|
37
|
+
expect(findings).toHaveLength(0);
|
|
38
|
+
});
|
|
39
|
+
|
|
40
|
+
it('should exclude hooks-system files', () => {
|
|
41
|
+
const project = createMockProject([{
|
|
42
|
+
path: '/scripts/hooks-system/mcp/watcher.js',
|
|
43
|
+
content: 'sendNotification("title", "message");'
|
|
44
|
+
}]);
|
|
45
|
+
const findings = [];
|
|
46
|
+
|
|
47
|
+
analyzePushBackend(project, findings);
|
|
48
|
+
|
|
49
|
+
expect(findings).toHaveLength(0);
|
|
50
|
+
});
|
|
51
|
+
|
|
52
|
+
it('should exclude scripts folder files', () => {
|
|
53
|
+
const project = createMockProject([{
|
|
54
|
+
path: '/scripts/deploy/notify.js',
|
|
55
|
+
content: 'sendNotification("deploy complete");'
|
|
56
|
+
}]);
|
|
57
|
+
const findings = [];
|
|
58
|
+
|
|
59
|
+
analyzePushBackend(project, findings);
|
|
60
|
+
|
|
61
|
+
expect(findings).toHaveLength(0);
|
|
62
|
+
});
|
|
63
|
+
|
|
64
|
+
it('should detect missing batching in loops', () => {
|
|
65
|
+
const project = createMockProject([{
|
|
66
|
+
path: '/app/services/broadcast.service.ts',
|
|
67
|
+
content: `
|
|
68
|
+
items.forEach(item => {
|
|
69
|
+
sendNotification(item, payload);
|
|
70
|
+
});
|
|
71
|
+
`
|
|
72
|
+
}]);
|
|
73
|
+
const findings = [];
|
|
74
|
+
|
|
75
|
+
analyzePushBackend(project, findings);
|
|
76
|
+
|
|
77
|
+
expect(findings).toHaveLength(2);
|
|
78
|
+
expect(findings[1].ruleId).toBe('backend.push.missing_notification_batching');
|
|
79
|
+
expect(findings[1].severity).toBe('MEDIUM');
|
|
80
|
+
});
|
|
81
|
+
|
|
82
|
+
it('should not flag batching when batch keyword present', () => {
|
|
83
|
+
const project = createMockProject([{
|
|
84
|
+
path: '/app/services/broadcast.service.ts',
|
|
85
|
+
content: `
|
|
86
|
+
const batches = chunk(items, 500);
|
|
87
|
+
batches.forEach(batch => {
|
|
88
|
+
sendNotification(batch, payload);
|
|
89
|
+
});
|
|
90
|
+
`
|
|
91
|
+
}]);
|
|
92
|
+
const findings = [];
|
|
93
|
+
|
|
94
|
+
analyzePushBackend(project, findings);
|
|
95
|
+
|
|
96
|
+
expect(findings).toHaveLength(1);
|
|
97
|
+
expect(findings[0].ruleId).toBe('backend.push.missing_notification_queue');
|
|
98
|
+
});
|
|
99
|
+
|
|
100
|
+
it('should detect FCM send patterns', () => {
|
|
101
|
+
const project = createMockProject([{
|
|
102
|
+
path: '/app/services/fcm.service.ts',
|
|
103
|
+
content: 'await fcm.send(message);'
|
|
104
|
+
}]);
|
|
105
|
+
const findings = [];
|
|
106
|
+
|
|
107
|
+
analyzePushBackend(project, findings);
|
|
108
|
+
|
|
109
|
+
expect(findings).toHaveLength(1);
|
|
110
|
+
});
|
|
111
|
+
|
|
112
|
+
it('should detect APNS send patterns', () => {
|
|
113
|
+
const project = createMockProject([{
|
|
114
|
+
path: '/app/services/apns.service.ts',
|
|
115
|
+
content: 'apns.send(notification);'
|
|
116
|
+
}]);
|
|
117
|
+
const findings = [];
|
|
118
|
+
|
|
119
|
+
analyzePushBackend(project, findings);
|
|
120
|
+
|
|
121
|
+
expect(findings).toHaveLength(1);
|
|
122
|
+
});
|
|
123
|
+
});
|
|
124
|
+
});
|
|
@@ -0,0 +1,345 @@
|
|
|
1
|
+
const path = require('path');
|
|
2
|
+
const { pushFinding, SyntaxKind, platformOf, getRepoRoot } = require(path.join(__dirname, '../ast-core'));
|
|
3
|
+
const { BDDTDDWorkflowRules } = require(path.join(__dirname, 'BDDTDDWorkflowRules'));
|
|
4
|
+
|
|
5
|
+
function getTypeContext(node) {
|
|
6
|
+
const parent = node.getParent();
|
|
7
|
+
if (!parent) return 'unknown';
|
|
8
|
+
|
|
9
|
+
const parentKind = parent.getKind();
|
|
10
|
+
const grandParent = parent.getParent();
|
|
11
|
+
|
|
12
|
+
if (parentKind === SyntaxKind.Parameter) {
|
|
13
|
+
const func = parent.getFirstAncestorByKind(SyntaxKind.MethodDeclaration) ||
|
|
14
|
+
parent.getFirstAncestorByKind(SyntaxKind.FunctionDeclaration);
|
|
15
|
+
if (func) {
|
|
16
|
+
const funcText = func.getText();
|
|
17
|
+
if (/interface\s+\w+/.test(funcText) || func.getParent()?.getKind() === SyntaxKind.InterfaceDeclaration) {
|
|
18
|
+
return 'interface_method_param';
|
|
19
|
+
}
|
|
20
|
+
return 'function_param';
|
|
21
|
+
}
|
|
22
|
+
return 'parameter';
|
|
23
|
+
}
|
|
24
|
+
|
|
25
|
+
if (parentKind === SyntaxKind.PropertySignature || parentKind === SyntaxKind.PropertyDeclaration) {
|
|
26
|
+
const iface = parent.getFirstAncestorByKind(SyntaxKind.InterfaceDeclaration);
|
|
27
|
+
if (iface && iface.isExported()) {
|
|
28
|
+
return 'public_interface_property';
|
|
29
|
+
}
|
|
30
|
+
return 'property';
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
if (parentKind === SyntaxKind.TypeReference && grandParent) {
|
|
34
|
+
const gpKind = grandParent.getKind();
|
|
35
|
+
if (gpKind === SyntaxKind.TypeReference) {
|
|
36
|
+
const gpText = grandParent.getText();
|
|
37
|
+
if (/Promise<|Observable</.test(gpText)) {
|
|
38
|
+
return 'return_type';
|
|
39
|
+
}
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
|
|
43
|
+
if (parentKind === SyntaxKind.VariableDeclaration) {
|
|
44
|
+
return 'variable';
|
|
45
|
+
}
|
|
46
|
+
|
|
47
|
+
return 'other';
|
|
48
|
+
}
|
|
49
|
+
|
|
50
|
+
function determineAnySeverity(context) {
|
|
51
|
+
switch (context) {
|
|
52
|
+
case 'interface_method_param':
|
|
53
|
+
case 'public_interface_property':
|
|
54
|
+
case 'return_type':
|
|
55
|
+
return 'critical';
|
|
56
|
+
|
|
57
|
+
case 'function_param':
|
|
58
|
+
case 'parameter':
|
|
59
|
+
return 'high';
|
|
60
|
+
|
|
61
|
+
case 'property':
|
|
62
|
+
case 'variable':
|
|
63
|
+
return 'high';
|
|
64
|
+
|
|
65
|
+
default:
|
|
66
|
+
return 'high';
|
|
67
|
+
}
|
|
68
|
+
}
|
|
69
|
+
|
|
70
|
+
function getAnyTypeMessage(context) {
|
|
71
|
+
const contextMessages = {
|
|
72
|
+
'interface_method_param': 'any type in public interface method parameter - define specific type or use generics',
|
|
73
|
+
'public_interface_property': 'any type in public interface property - define specific interface type',
|
|
74
|
+
'return_type': 'any type in return type - define specific return type or use union types',
|
|
75
|
+
'function_param': 'any type in function parameter - define specific parameter type',
|
|
76
|
+
'parameter': 'any type in parameter - replace with specific type',
|
|
77
|
+
'property': 'any type in property - define specific property type',
|
|
78
|
+
'variable': 'any type in variable - infer type or define explicitly',
|
|
79
|
+
'other': 'any type detected - replace with specific type'
|
|
80
|
+
};
|
|
81
|
+
|
|
82
|
+
return contextMessages[context] || contextMessages['other'];
|
|
83
|
+
}
|
|
84
|
+
|
|
85
|
+
function checkForTypeGuard(node) {
|
|
86
|
+
const parent = node.getParent();
|
|
87
|
+
if (!parent) return false;
|
|
88
|
+
|
|
89
|
+
const nextSiblings = parent.getNextSiblings();
|
|
90
|
+
for (const sibling of nextSiblings.slice(0, 3)) {
|
|
91
|
+
const text = sibling.getText();
|
|
92
|
+
if (/typeof|instanceof|Array\.isArray|is\w+\(/.test(text)) {
|
|
93
|
+
return true;
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
|
|
97
|
+
return false;
|
|
98
|
+
}
|
|
99
|
+
|
|
100
|
+
function runCommonIntelligence(project, findings) {
|
|
101
|
+
try {
|
|
102
|
+
const repoRoot = getRepoRoot();
|
|
103
|
+
const workflowRules = new BDDTDDWorkflowRules(findings, repoRoot);
|
|
104
|
+
workflowRules.analyze();
|
|
105
|
+
} catch (error) {
|
|
106
|
+
if (process.stderr) {
|
|
107
|
+
process.stderr.write(`[BDD/TDD Workflow] Error: ${error.message}\n`);
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
|
|
111
|
+
project.getSourceFiles().forEach((sf) => {
|
|
112
|
+
const filePath = sf.getFilePath();
|
|
113
|
+
const plat = platformOf(filePath) || 'other';
|
|
114
|
+
|
|
115
|
+
if (/\/hooks-system\/infrastructure\/ast\//i.test(filePath)) return;
|
|
116
|
+
if (/\/ast-(?:backend|frontend|android|ios|common|core|intelligence)\.js$/.test(filePath)) return;
|
|
117
|
+
|
|
118
|
+
|
|
119
|
+
sf.getDescendantsOfKind(SyntaxKind.TypeReference).forEach((tref) => {
|
|
120
|
+
const txt = tref.getText();
|
|
121
|
+
if (txt === 'any' || /<\s*any\s*>/.test(txt)) {
|
|
122
|
+
const isUtilityScript = /\/(scripts?|migrations?|seeders?|fixtures?)\//i.test(filePath);
|
|
123
|
+
if (isUtilityScript) return;
|
|
124
|
+
|
|
125
|
+
if (/node_modules|\.d\.ts$|@types/.test(filePath)) return;
|
|
126
|
+
|
|
127
|
+
const parent = tref.getParent();
|
|
128
|
+
if (parent?.getKind() === SyntaxKind.Parameter) {
|
|
129
|
+
const paramName = parent.getText().split(':')[0].trim();
|
|
130
|
+
if (/^(e|event|evt|args?|payload)$/i.test(paramName)) {
|
|
131
|
+
return;
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
|
|
135
|
+
const ancestors = tref.getAncestors();
|
|
136
|
+
const inCatchClause = ancestors.some(a => a.getKind() === SyntaxKind.CatchClause);
|
|
137
|
+
if (inCatchClause) {
|
|
138
|
+
return;
|
|
139
|
+
}
|
|
140
|
+
|
|
141
|
+
const context = getTypeContext(tref);
|
|
142
|
+
const severity = determineAnySeverity(context);
|
|
143
|
+
const message = getAnyTypeMessage(context);
|
|
144
|
+
pushFinding('common.types.any', severity, sf, tref, message, findings);
|
|
145
|
+
}
|
|
146
|
+
});
|
|
147
|
+
|
|
148
|
+
sf.getDescendantsOfKind(SyntaxKind.AnyKeyword).forEach((node) => {
|
|
149
|
+
|
|
150
|
+
const isUtilityScript = /\/(scripts?|migrations?|seeders?|fixtures?)\//i.test(filePath);
|
|
151
|
+
if (isUtilityScript) return;
|
|
152
|
+
|
|
153
|
+
if (/node_modules|\.d\.ts$|@types/.test(filePath)) return;
|
|
154
|
+
|
|
155
|
+
const parent = node.getParent();
|
|
156
|
+
if (parent?.getKind() === SyntaxKind.Parameter) {
|
|
157
|
+
const paramText = parent.getText();
|
|
158
|
+
const paramName = paramText.split(':')[0].trim();
|
|
159
|
+
if (/^(e|event|evt|args?|payload)$/i.test(paramName)) return;
|
|
160
|
+
}
|
|
161
|
+
|
|
162
|
+
const ancestors = node.getAncestors();
|
|
163
|
+
const inCatchClause = ancestors.some(a => a.getKind() === SyntaxKind.CatchClause);
|
|
164
|
+
if (inCatchClause) return;
|
|
165
|
+
|
|
166
|
+
const context = getTypeContext(node);
|
|
167
|
+
const severity = determineAnySeverity(context);
|
|
168
|
+
const message = getAnyTypeMessage(context);
|
|
169
|
+
pushFinding('common.types.any', severity, sf, node, message, findings);
|
|
170
|
+
});
|
|
171
|
+
|
|
172
|
+
sf.getDescendantsOfKind(SyntaxKind.AsExpression).forEach((node) => {
|
|
173
|
+
const nodeText = node.getText();
|
|
174
|
+
if (nodeText.includes(' as any')) {
|
|
175
|
+
const isUtilityScript = /\/(scripts?|migrations?|seeders?|fixtures?)\//i.test(filePath);
|
|
176
|
+
if (isUtilityScript) return;
|
|
177
|
+
|
|
178
|
+
if (/node_modules|\.d\.ts$|@types/.test(filePath)) return;
|
|
179
|
+
|
|
180
|
+
if (/event|evt|handler/.test(nodeText.toLowerCase())) return;
|
|
181
|
+
|
|
182
|
+
const ancestors = node.getAncestors();
|
|
183
|
+
const inCatchClause = ancestors.some(a => a.getKind() === SyntaxKind.CatchClause);
|
|
184
|
+
if (inCatchClause) return;
|
|
185
|
+
|
|
186
|
+
const context = 'type_assertion';
|
|
187
|
+
pushFinding('common.types.any', 'high', sf, node, 'Type assertion to any - replace with specific type or use type guards', findings);
|
|
188
|
+
} else if (nodeText.includes(' as unknown')) {
|
|
189
|
+
const isRecordUnknown = /Record<string,\s*unknown>/.test(nodeText);
|
|
190
|
+
if (!isRecordUnknown) {
|
|
191
|
+
const hasTypeGuard = checkForTypeGuard(node);
|
|
192
|
+
if (!hasTypeGuard) {
|
|
193
|
+
pushFinding('common.types.unknown_without_guard', 'medium', sf, node, 'Type assertion to unknown without type guard - add proper type narrowing', findings);
|
|
194
|
+
}
|
|
195
|
+
}
|
|
196
|
+
}
|
|
197
|
+
});
|
|
198
|
+
|
|
199
|
+
sf.getDescendantsOfKind(SyntaxKind.TypeReference).forEach((tref) => {
|
|
200
|
+
const text = tref.getText();
|
|
201
|
+
const hasRecordUnknown = /Record<string,\s*unknown>/.test(text);
|
|
202
|
+
|
|
203
|
+
if (hasRecordUnknown) {
|
|
204
|
+
const parent = tref.getParent();
|
|
205
|
+
if (!parent) return;
|
|
206
|
+
|
|
207
|
+
const interfaceDecl = parent.getFirstAncestorByKind(SyntaxKind.InterfaceDeclaration);
|
|
208
|
+
const typeAliasDecl = parent.getFirstAncestorByKind(SyntaxKind.TypeAliasDeclaration);
|
|
209
|
+
|
|
210
|
+
const isPartOfUnionType = typeAliasDecl && /\|/.test(typeAliasDecl.getType().getText());
|
|
211
|
+
|
|
212
|
+
const isDefinedType = typeAliasDecl !== undefined;
|
|
213
|
+
|
|
214
|
+
if (!isDefinedType || !isPartOfUnionType) {
|
|
215
|
+
pushFinding('common.types.record_unknown_requires_type', 'high', sf, tref, 'Record<string, unknown> detected - define value type union (string | number | boolean | null | Date)', findings);
|
|
216
|
+
}
|
|
217
|
+
}
|
|
218
|
+
|
|
219
|
+
const hasUndefinedInBaseType = /:\s*(?:string|number|boolean|object)\s*\|\s*undefined|:\s*undefined\s*\|/i.test(text);
|
|
220
|
+
const hasUndefinedInIndexSignature = /\[key:\s*string\]:\s*[^}]*\|\s*undefined|\[key:\s*string\]:\s*undefined/i.test(text);
|
|
221
|
+
const hasUndefinedInRecord = /Record<[^>]*\|\s*undefined|Record<[^>]*undefined\s*\|/i.test(text);
|
|
222
|
+
const hasUndefinedInArray = /Array<[^>]*\|\s*undefined|Array<[^>]*undefined\s*\|/i.test(text);
|
|
223
|
+
|
|
224
|
+
const fullText = sf.getFullText();
|
|
225
|
+
const nodeStart = tref.getStart();
|
|
226
|
+
const lineStart = fullText.lastIndexOf('\n', nodeStart) + 1;
|
|
227
|
+
const lineEnd = fullText.indexOf('\n', nodeStart);
|
|
228
|
+
const fullLine = lineEnd === -1 ? fullText.substring(lineStart) : fullText.substring(lineStart, lineEnd);
|
|
229
|
+
const hasUndefinedInLine = /\|\s*undefined|undefined\s*\|/.test(fullLine) && !/typeof\s+\w+\s*===\s*['"]undefined['"]/.test(fullLine);
|
|
230
|
+
|
|
231
|
+
if (hasUndefinedInBaseType || hasUndefinedInIndexSignature || hasUndefinedInRecord || hasUndefinedInArray || hasUndefinedInLine) {
|
|
232
|
+
const parent = tref.getParent();
|
|
233
|
+
if (!parent) return;
|
|
234
|
+
|
|
235
|
+
const isOptionalProperty = parent.getKind() === SyntaxKind.PropertySignature && parent.getQuestionTokenNode() !== undefined;
|
|
236
|
+
if (isOptionalProperty) return;
|
|
237
|
+
|
|
238
|
+
const interfaceDecl = parent.getFirstAncestorByKind(SyntaxKind.InterfaceDeclaration);
|
|
239
|
+
const typeAliasDecl = parent.getFirstAncestorByKind(SyntaxKind.TypeAliasDeclaration);
|
|
240
|
+
const isInInterfaceOrType = interfaceDecl !== undefined || typeAliasDecl !== undefined;
|
|
241
|
+
|
|
242
|
+
if (isInInterfaceOrType) {
|
|
243
|
+
pushFinding('common.types.undefined_in_base_type', 'critical', sf, tref, 'undefined in base type - normalize at boundary with mapper/type guard, base type must be non-nullable', findings);
|
|
244
|
+
}
|
|
245
|
+
}
|
|
246
|
+
});
|
|
247
|
+
|
|
248
|
+
sf.getDescendantsOfKind(SyntaxKind.CallExpression).forEach((call) => {
|
|
249
|
+
const expr = call.getExpression();
|
|
250
|
+
if (!expr) return;
|
|
251
|
+
const exprText = expr.getText();
|
|
252
|
+
if (/console\.\w+\(/.test(exprText)) {
|
|
253
|
+
pushFinding('common.debug.console', 'medium', sf, call, 'Console usage detected - use Logger instead', findings);
|
|
254
|
+
}
|
|
255
|
+
});
|
|
256
|
+
|
|
257
|
+
const full = sf.getFullText();
|
|
258
|
+
const isSpecFile = /\.(spec|test)\.(ts|tsx|js|jsx)$/.test(filePath);
|
|
259
|
+
const secretPattern = /(PASSWORD|TOKEN|SECRET|API_KEY)\s*[:=]\s*['"]([^'"]{8,})['"]/gi;
|
|
260
|
+
const matches = Array.from(full.matchAll(secretPattern));
|
|
261
|
+
|
|
262
|
+
for (const match of matches) {
|
|
263
|
+
const fullMatch = match[0];
|
|
264
|
+
const credentialValue = match[2];
|
|
265
|
+
|
|
266
|
+
const matchIndex = match.index || 0;
|
|
267
|
+
const lineStart = full.lastIndexOf('\n', matchIndex) + 1;
|
|
268
|
+
const lineEnd = full.indexOf('\n', matchIndex);
|
|
269
|
+
const fullLine = full.substring(lineStart, lineEnd === -1 ? undefined : lineEnd);
|
|
270
|
+
|
|
271
|
+
const isEnvVar = /process\.env\.|env\.|config\.|from.*env/i.test(fullMatch);
|
|
272
|
+
|
|
273
|
+
const isPlaceholderPattern = /^(placeholder|example|test-|mock-|fake-|dummy-|your-|xxx|abc|000|123|bearer\s)/i.test(credentialValue);
|
|
274
|
+
const hasObviousTestWords = /(valid|invalid|wrong|expired|reset|sample|demo|user-\d|customer-\d|store-\d)/i.test(credentialValue);
|
|
275
|
+
const isShortRepeating = credentialValue.length <= 20 && /^(.)\1+$/.test(credentialValue);
|
|
276
|
+
const isPlaceholder = isPlaceholderPattern || hasObviousTestWords || isShortRepeating;
|
|
277
|
+
|
|
278
|
+
const isTestContext = isSpecFile && /mock|jest\.fn|describe|it\(|beforeEach|afterEach/.test(full);
|
|
279
|
+
const isTestFile = isSpecFile || /\/(tests?|__tests__|e2e|spec|playwright)\//i.test(filePath);
|
|
280
|
+
const hasStorageContext = (
|
|
281
|
+
/localStorage|sessionStorage|AsyncStorage|getItem|setItem|removeItem/i.test(fullLine) ||
|
|
282
|
+
/const\s+\w*(KEY|STORAGE|CACHE|Token|Key|Storage)\s*=/i.test(fullLine)
|
|
283
|
+
);
|
|
284
|
+
const hasKeyNamingPattern = /_(?:key|token|storage|cache|slots)$/i.test(credentialValue);
|
|
285
|
+
const hasDescriptivePrefix = /^(?:admin|user|auth|session|cache|storage|local|temp)_/i.test(credentialValue);
|
|
286
|
+
const isStorageKey = (hasStorageContext || hasKeyNamingPattern || hasDescriptivePrefix) &&
|
|
287
|
+
!/^eyJ/.test(credentialValue) && credentialValue.length < 50;
|
|
288
|
+
|
|
289
|
+
const isCacheKey = credentialValue.includes(':') || /^(?:products|orders|users|stores|cache|metrics|session):/i.test(credentialValue);
|
|
290
|
+
|
|
291
|
+
const isConstantKey = /(?:const|let|var)\s+\w*(?:KEY|TOKEN|STORAGE)\s*=/i.test(fullLine) &&
|
|
292
|
+
credentialValue.length < 30 &&
|
|
293
|
+
!/^(?:eyJ|sk_|pk_|live_|prod_|[a-f0-9]{32,})/.test(credentialValue);
|
|
294
|
+
const isRolesDecorator = /ROLES_KEY\s*=\s*['"`]roles['"`]/.test(fullLine);
|
|
295
|
+
|
|
296
|
+
const prodFormatRegex = /^(eyJ|sk_|pk_|live_|prod_|[a-f0-9]{32,}|\$2[aby]\$)/;
|
|
297
|
+
const looksLikeProdValue = prodFormatRegex.test(credentialValue);
|
|
298
|
+
const isTestData = isTestFile && credentialValue.length < 50 && !looksLikeProdValue;
|
|
299
|
+
|
|
300
|
+
if (!isEnvVar && !isPlaceholder && !isTestContext && !isStorageKey && !isCacheKey && !isConstantKey && !isRolesDecorator && !isTestData && credentialValue.length >= 8) {
|
|
301
|
+
pushFinding('common.security.secret', 'critical', sf, sf, 'Hardcoded secret detected - replace with environment variable', findings);
|
|
302
|
+
}
|
|
303
|
+
}
|
|
304
|
+
const lintDisablePattern = new RegExp(['eslint', 'disable'].join('-') + '|' + ['ts', 'ignore'].join('-'));
|
|
305
|
+
if (lintDisablePattern.test(full)) {
|
|
306
|
+
pushFinding('common.quality.disabled_lint', 'low', sf, sf, 'Disabled lint directive present', findings);
|
|
307
|
+
}
|
|
308
|
+
const taskMarkerPattern = new RegExp('(^|\\s)(' + ['TO', 'DO'].join('') + '|' + ['FIX', 'ME'].join('') + ')(:| \\s)');
|
|
309
|
+
if (taskMarkerPattern.test(full)) {
|
|
310
|
+
pushFinding('common.quality.todo_fixme', 'medium', sf, sf, 'Task marker present in code', findings);
|
|
311
|
+
}
|
|
312
|
+
if (/\/\/|\/\*/.test(full)) {
|
|
313
|
+
if (/^#![^\n]*$/m.test(full)) return;
|
|
314
|
+
const withoutShebang = full.replace(/^#![^\n]*$/gm, '');
|
|
315
|
+
if (!/\/\/|\/\*/.test(withoutShebang)) return;
|
|
316
|
+
|
|
317
|
+
let withoutStrings = withoutShebang;
|
|
318
|
+
withoutStrings = withoutStrings.replace(/`[^`]*`/g, '');
|
|
319
|
+
withoutStrings = withoutStrings.replace(/"[^"]*"/g, '');
|
|
320
|
+
withoutStrings = withoutStrings.replace(/'[^']*'/g, '');
|
|
321
|
+
|
|
322
|
+
if (!/\/\/|\/\*/.test(withoutStrings)) return;
|
|
323
|
+
|
|
324
|
+
const withoutUrls = withoutStrings.replace(/https?:\/\//g, '');
|
|
325
|
+
if (!/\/\/|\/\*/.test(withoutUrls)) return;
|
|
326
|
+
|
|
327
|
+
const withoutJSDoc = withoutUrls.replace(/\/\*\*[\s\S]*?\*\//g, '');
|
|
328
|
+
const hasOnlyJSDoc = !/\/\/|\/\*/.test(withoutJSDoc);
|
|
329
|
+
if (hasOnlyJSDoc) return;
|
|
330
|
+
|
|
331
|
+
const withoutAllComments = withoutJSDoc.replace(/\/\/.*$/gm, '').replace(/\/\*[\s\S]*?\*\//g, '');
|
|
332
|
+
if (!/\/\/|\/\*/.test(withoutAllComments)) return;
|
|
333
|
+
|
|
334
|
+
const lines = full.split('\n');
|
|
335
|
+
const firstNonEmptyLine = lines.findIndex(l => l.trim().length > 0);
|
|
336
|
+
if (firstNonEmptyLine >= 0 && firstNonEmptyLine < 5 && /copyright|license|author/i.test(lines[firstNonEmptyLine])) {
|
|
337
|
+
return;
|
|
338
|
+
}
|
|
339
|
+
|
|
340
|
+
pushFinding('common.quality.comments', 'high', sf, sf, 'Comments present in code - prefer self-documenting code with clear naming', findings);
|
|
341
|
+
}
|
|
342
|
+
});
|
|
343
|
+
}
|
|
344
|
+
|
|
345
|
+
module.exports = { runCommonIntelligence };
|