pumuki-ast-hooks 5.3.2 → 5.3.4

package/scripts/hooks-system/.audit_tmp/severity-history.jsonl

@@ -1 +1,7 @@
 {"timestamp":"2025-12-25T22:29:39.634Z","commit":"cce11ed7eb1e70da937d1443853ccb86f718fe95","branch":"feature/meta-audit-insights","summary":{"total":556,"CRITICAL":257,"HIGH":0,"MEDIUM":99,"LOW":200},"averageScore":50,"gatePassed":false,"blockedBy":"CRITICAL"}
+{"timestamp":"2025-12-29T15:17:57.510Z","commit":"61b9945cfda1764f08f359ffed6228f4af1d7d92","branch":"fix/audit-staged-severity-case-insensitive","summary":{"total":546,"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":546},"averageScore":4,"gatePassed":true,"blockedBy":null}
+{"timestamp":"2025-12-29T15:24:55.686Z","commit":"61b9945cfda1764f08f359ffed6228f4af1d7d92","branch":"fix/audit-staged-severity-case-insensitive","summary":{"total":546,"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":546},"averageScore":4,"gatePassed":true,"blockedBy":null}
+{"timestamp":"2025-12-29T15:29:28.676Z","commit":"61b9945cfda1764f08f359ffed6228f4af1d7d92","branch":"fix/audit-staged-severity-case-insensitive","summary":{"total":546,"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":546},"averageScore":4,"gatePassed":true,"blockedBy":null}
+{"timestamp":"2025-12-29T15:33:41.996Z","commit":"61b9945cfda1764f08f359ffed6228f4af1d7d92","branch":"fix/audit-staged-severity-case-insensitive","summary":{"total":546,"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":546},"averageScore":4,"gatePassed":true,"blockedBy":null}
+{"timestamp":"2025-12-29T15:35:31.277Z","commit":"61b9945cfda1764f08f359ffed6228f4af1d7d92","branch":"fix/audit-staged-severity-case-insensitive","summary":{"total":546,"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":546},"averageScore":4,"gatePassed":true,"blockedBy":null}
+{"timestamp":"2025-12-29T15:38:11.144Z","commit":"61b9945cfda1764f08f359ffed6228f4af1d7d92","branch":"fix/audit-staged-severity-case-insensitive","summary":{"total":546,"CRITICAL":0,"HIGH":0,"MEDIUM":0,"LOW":546},"averageScore":4,"gatePassed":true,"blockedBy":null}

package/scripts/hooks-system/.audit_tmp/token-usage.jsonl

@@ -1 +1,7 @@
 {"timestamp":"2025-12-25T22:29:39.685Z","estimated":555199.75,"percentUsed":55.519975,"remaining":444800.25}
+{"timestamp":"2025-12-29T15:17:57.538Z","estimated":723658.5,"percentUsed":72.36585,"remaining":276341.5}
+{"timestamp":"2025-12-29T15:24:55.714Z","estimated":723658.5,"percentUsed":72.36585,"remaining":276341.5}
+{"timestamp":"2025-12-29T15:29:28.704Z","estimated":723658.5,"percentUsed":72.36585,"remaining":276341.5}
+{"timestamp":"2025-12-29T15:33:42.024Z","estimated":723658.5,"percentUsed":72.36585,"remaining":276341.5}
+{"timestamp":"2025-12-29T15:35:31.306Z","estimated":723658.5,"percentUsed":72.36585,"remaining":276341.5}
+{"timestamp":"2025-12-29T15:38:11.174Z","estimated":723658.5,"percentUsed":72.36585,"remaining":276341.5}

package/scripts/hooks-system/infrastructure/ast/ast-intelligence.js

@@ -28,6 +28,7 @@ async function runASTIntelligence() {
     const root = getRepoRoot();
 
     const isLibraryAudit = process.env.AUDIT_LIBRARY === 'true';
+
     const allFiles = listSourceFiles(root).filter(f => {
       const p = String(f || '').replace(/\\/g, '/');
       if (!isLibraryAudit && p.includes('/infrastructure/ast/')) return false;
@@ -534,19 +535,34 @@ function listSourceFiles(root) {
   if (process.env.STAGING_ONLY_MODE === "1") {
     const { execSync } = require("child_process");
     try {
-      const stagedFiles = execSync("git diff --cached --name-only --diff-filter=ACM", {
+      const allStaged = execSync("git diff --cached --name-only --diff-filter=ACM", {
         encoding: "utf8",
         cwd: root
       })
         .trim()
         .split("\n")
-        .filter(f => f.trim())
+        .filter(f => f.trim());
+
+      if (allStaged.length === 0) {
+        return [];
+      }
+
+      const stagedFiles = allStaged
         .map(f => path.resolve(root, f.trim()))
         .filter(f => {
           const ext = path.extname(f);
           return [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".swift", ".kt", ".kts"].includes(ext);
         })
         .filter(f => fs.existsSync(f) && !shouldIgnore(f.replace(/\\/g, "/")));
+
+      // Si hay staged files pero ninguno es compatible con AST
+      if (stagedFiles.length === 0 && allStaged.length > 0) {
+        console.error('\n⚠️  No AST-compatible files in staging area');
+        console.error('   Staged files found:', allStaged.length);
+        console.error('   AST analyzes: .ts, .tsx, .js, .jsx, .mjs, .cjs, .swift, .kt, .kts');
+        console.error('   Consider staging source code files or use option 2 for full repository analysis\n');
+      }
+
       return stagedFiles;
     } catch (error) {
       return [];
@@ -584,7 +600,9 @@ function listSourceFiles(root) {
 function shouldIgnore(file) {
   const p = file.replace(/\\/g, "/");
   if (p.includes("node_modules/")) return true;
+
   const isLibraryAudit = process.env.AUDIT_LIBRARY === 'true';
+
   if (!isLibraryAudit && p.includes("scripts/hooks-system/")) return true;
   if (!isLibraryAudit && p.includes("/infrastructure/ast/")) return true;
   if (p.includes("/.cursor/")) return true;

package/scripts/hooks-system/infrastructure/mcp/ast-intelligence-automation.js

@@ -27,11 +27,18 @@ const { execSync } = require('child_process');
 
 const MCP_VERSION = '2024-11-05';
 
-// Configuration
-const CompositionRoot = require('../../application/CompositionRoot');
-
+// Configuration - LAZY LOADING to avoid blocking MCP initialization
 const REPO_ROOT = process.env.REPO_ROOT || process.cwd();
-const compositionRoot = CompositionRoot.createForProduction(REPO_ROOT);
+
+// Lazy-loaded CompositionRoot - only initialized when first needed
+let _compositionRoot = null;
+function getCompositionRoot() {
+    if (!_compositionRoot) {
+        const CompositionRoot = require('../../application/CompositionRoot');
+        _compositionRoot = CompositionRoot.createForProduction(REPO_ROOT);
+    }
+    return _compositionRoot;
+}
 
 const EVIDENCE_FILE = path.join(REPO_ROOT, '.AI_EVIDENCE.json');
 const GITFLOW_STATE_FILE = path.join(REPO_ROOT, '.git', 'gitflow-state.json');
@@ -154,15 +161,15 @@ function resolveUpdateEvidenceScript() {
 
 // Lazy Loading Services
 function getContextEngine() {
-    return compositionRoot.getContextDetectionEngine();
+    return getCompositionRoot().getContextDetectionEngine();
 }
 
 function getOrchestrator() {
-    return compositionRoot.getOrchestrator();
+    return getCompositionRoot().getOrchestrator();
 }
 
 function getNotificationAdapter() {
-    return compositionRoot.getNotificationService();
+    return getCompositionRoot().getNotificationService();
 }
 
 // Polling state
@@ -183,7 +190,7 @@ const AUTO_PR_ENABLED = process.env.AUTO_PR_ENABLED === 'true';
  * Helper: Send macOS notification via centralized adapter
  */
 function sendNotification(title, message, sound = 'Hero') {
-    compositionRoot.getNotificationService().notify({
+    getCompositionRoot().getNotificationService().notify({
         type: 'mcp_automation',
         level: 'info',
         title,
@@ -196,9 +203,9 @@ function sendNotification(title, message, sound = 'Hero') {
  * Check evidence status
  */
 function checkEvidence() {
-    const monitor = compositionRoot.getEvidenceMonitor();
+    const monitor = getCompositionRoot().getEvidenceMonitor();
     const isStale = monitor.isStale();
-    const gitFlow = compositionRoot.getGitFlowService();
+    const gitFlow = getCompositionRoot().getGitFlowService();
     const currentBranch = gitFlow.getCurrentBranch();
 
     if (isStale) {
@@ -217,7 +224,7 @@ function checkEvidence() {
  * Auto-complete Git Flow cycle
  */
 async function autoCompleteGitFlow(params) {
-    const gitFlowService = compositionRoot.getGitFlowService();
+    const gitFlowService = getCompositionRoot().getGitFlowService();
     const results = [];
     const currentBranch = gitFlowService.getCurrentBranch();
     const baseBranch = process.env.AST_BASE_BRANCH || 'develop';
@@ -235,7 +242,7 @@ async function autoCompleteGitFlow(params) {
 
         if (!gitFlowService.isClean()) {
             results.push('⚠️  Uncommitted changes detected, committing...');
-            const gitCommand = compositionRoot.getGitCommandAdapter();
+            const gitCommand = getCompositionRoot().getGitCommandAdapter();
             gitCommand.addAll();
             const message = params.commitMessage || `chore: auto-commit changes on ${currentBranch}`;
             gitCommand.commit(message);
@@ -245,7 +252,7 @@ async function autoCompleteGitFlow(params) {
         }
 
         results.push('Pushing to origin...');
-        const gitCommand = compositionRoot.getGitCommandAdapter();
+        const gitCommand = getCompositionRoot().getGitCommandAdapter();
         gitCommand.push('origin', currentBranch, { setUpstream: true });
         results.push('✅ Pushed to origin');
 
@@ -260,7 +267,7 @@ async function autoCompleteGitFlow(params) {
 
                 if (params.autoMerge) {
                     results.push('Auto-merging PR...');
-                    const github = compositionRoot.getGitHubAdapter();
+                    const github = getCompositionRoot().getGitHubAdapter();
                     github.mergePullRequest(prUrl);
                     results.push(`✅ PR merged and branch deleted`);
 
@@ -295,7 +302,7 @@ async function autoCompleteGitFlow(params) {
  * Sync branches (develop ↔ main)
  */
 function syncBranches(params) {
-    const gitFlowService = compositionRoot.getGitFlowService();
+    const gitFlowService = getCompositionRoot().getGitFlowService();
     const result = gitFlowService.syncBranches();
 
     return {
@@ -309,11 +316,11 @@ function syncBranches(params) {
  * Cleanup stale branches (local + remote)
  */
 function cleanupStaleBranches(params) {
-    const gitFlowService = compositionRoot.getGitFlowService();
+    const gitFlowService = getCompositionRoot().getGitFlowService();
     const baseBranch = process.env.AST_BASE_BRANCH || 'develop';
-    const gitQuery = compositionRoot.getGitQueryAdapter();
-    const gitCommand = compositionRoot.getGitCommandAdapter();
-    const github = compositionRoot.getGitHubAdapter();
+    const gitQuery = getCompositionRoot().getGitQueryAdapter();
+    const gitCommand = getCompositionRoot().getGitCommandAdapter();
+    const github = getCompositionRoot().getGitHubAdapter();
 
     const results = [];
 
@@ -367,7 +374,7 @@ function cleanupStaleBranches(params) {
  * Auto-execute ai-start when code files detected
  */
 async function autoExecuteAIStart(params) {
-    const useCase = compositionRoot.getAutoExecuteAIStartUseCase();
+    const useCase = getCompositionRoot().getAutoExecuteAIStartUseCase();
 
     try {
         const result = await useCase.execute({
@@ -503,8 +510,8 @@ function checkBranchChangesCoherence(branchName, uncommittedChanges) {
  * Returns BLOCKED or ALLOWED status with auto-fixes applied
  */
 async function aiGateCheck() {
-    const gitFlowService = compositionRoot.getGitFlowService();
-    const gitQuery = compositionRoot.getGitQueryAdapter();
+    const gitFlowService = getCompositionRoot().getGitFlowService();
+    const gitQuery = getCompositionRoot().getGitQueryAdapter();
     const currentBranch = getCurrentGitBranch(REPO_ROOT);
     const isProtectedBranch = ['main', 'master', 'develop'].includes(currentBranch);
 
@@ -516,7 +523,7 @@ async function aiGateCheck() {
     const autoFixes = [];
 
     // 1. Evidence Freshness Check (Auto-fix included)
-    const evidenceMonitor = compositionRoot.getEvidenceMonitor();
+    const evidenceMonitor = getCompositionRoot().getEvidenceMonitor();
     if (evidenceMonitor.isStale()) {
         try {
             await evidenceMonitor.refresh();
@@ -541,8 +548,8 @@ async function aiGateCheck() {
     }
 
     // 3. Block Commit Use Case Integration
-    const blockCommitUseCase = compositionRoot.getBlockCommitUseCase();
-    const astAdapter = compositionRoot.getAstAdapter();
+    const blockCommitUseCase = getCompositionRoot().getBlockCommitUseCase();
+    const astAdapter = getCompositionRoot().getAstAdapter();
 
     try {
         const auditResult = await astAdapter.analyzeStagedFiles();
@@ -581,10 +588,10 @@ async function aiGateCheck() {
 async function validateAndFix(params) {
     const results = [];
     const issues = [];
-    const gitFlowService = compositionRoot.getGitFlowService();
-    const gitQuery = compositionRoot.getGitQueryAdapter();
-    const gitCommand = compositionRoot.getGitCommandAdapter();
-    const evidenceMonitor = compositionRoot.getEvidenceMonitor();
+    const gitFlowService = getCompositionRoot().getGitFlowService();
+    const gitQuery = getCompositionRoot().getGitQueryAdapter();
+    const gitCommand = getCompositionRoot().getGitCommandAdapter();
+    const evidenceMonitor = getCompositionRoot().getEvidenceMonitor();
 
     try {
         if (evidenceMonitor.isStale()) {
@@ -633,9 +640,10 @@ async function validateAndFix(params) {
 }
 
 /**
- * MCP Protocol Handler
+ * MCP Protocol Handler - Direct instantiation to avoid blocking on CompositionRoot
  */
-const protocolHandler = compositionRoot.getMcpProtocolHandler(process.stdin, process.stdout);
+const McpProtocolHandler = require('./services/McpProtocolHandler');
+const protocolHandler = new McpProtocolHandler(process.stdin, process.stdout);
 
 async function handleMcpMessage(message) {
     try {
@@ -749,8 +757,8 @@ async function handleMcpMessage(message) {
             }
 
             if (uri === 'gitflow://state') {
-                const gitFlow = compositionRoot.getGitFlowService();
-                const gitQuery = compositionRoot.getGitQueryAdapter();
+                const gitFlow = getCompositionRoot().getGitFlowService();
+                const gitQuery = getCompositionRoot().getGitQueryAdapter();
                 const currentBranch = getCurrentGitBranch(REPO_ROOT);
                 const branchState = getBranchStateSafe(gitQuery, REPO_ROOT, currentBranch);
 
@@ -776,7 +784,7 @@ async function handleMcpMessage(message) {
             }
 
             if (uri === 'context://active') {
-                const orchestrator = compositionRoot.getOrchestrator();
+                const orchestrator = getCompositionRoot().getOrchestrator();
                 try {
                     const decision = await orchestrator.analyzeContext();
                     return {
@@ -938,10 +946,10 @@ protocolHandler.start(handleMcpMessage);
 setInterval(async () => {
     try {
         const now = Date.now();
-        const gitFlowService = compositionRoot.getGitFlowService();
-        const gitQuery = compositionRoot.getGitQueryAdapter();
-        const evidenceMonitor = compositionRoot.getEvidenceMonitor();
-        const orchestrator = compositionRoot.getOrchestrator();
+        const gitFlowService = getCompositionRoot().getGitFlowService();
+        const gitQuery = getCompositionRoot().getGitQueryAdapter();
+        const evidenceMonitor = getCompositionRoot().getEvidenceMonitor();
+        const orchestrator = getCompositionRoot().getOrchestrator();
 
         const currentBranch = gitFlowService.getCurrentBranch();
         const baseBranch = process.env.AST_BASE_BRANCH || 'develop';
@@ -1002,9 +1010,9 @@ setInterval(async () => {
     if (now - lastAutoCommitTime < AUTO_COMMIT_INTERVAL) return;
 
     try {
-        const gitFlowService = compositionRoot.getGitFlowService();
-        const gitQuery = compositionRoot.getGitQueryAdapter();
-        const gitCommand = compositionRoot.getGitCommandAdapter();
+        const gitFlowService = getCompositionRoot().getGitFlowService();
+        const gitQuery = getCompositionRoot().getGitQueryAdapter();
+        const gitCommand = getCompositionRoot().getGitCommandAdapter();
 
         const currentBranch = gitFlowService.getCurrentBranch();
         const isFeatureBranch = currentBranch.match(/^(feature|fix|hotfix)\//);

package/scripts/hooks-system/infrastructure/shell/orchestrators/audit-orchestrator.sh

@@ -218,6 +218,8 @@ full_audit_strict_repo_and_staging() {
   export AUDIT_STRICT=1
   export BLOCK_ALL_SEVERITIES=1
   export BLOCK_ON_REPO_VIOLATIONS=1
+  export AUDIT_LIBRARY=true
+  unset STAGING_ONLY_MODE
   full_audit
 }
 
@@ -335,6 +337,9 @@ full_audit_standard() {
 compute_staged_summary() {
   if ! command -v git >/dev/null 2>&1; then return; fi
   local staged_file="$TMP_DIR/staged.txt"
+  local staged_file_rel="$TMP_DIR/staged-rel.txt"
+  # Store both absolute and relative paths for different matching needs
+  git diff --cached --name-only --diff-filter=ACM > "$staged_file_rel" || true
   git diff --cached --name-only --diff-filter=ACM | sed "s|^|$ROOT_DIR/|" > "$staged_file" || true
   if [[ ! -s "$staged_file" ]]; then return; fi
   printf "\n%bStaging Area%b\n" "$YELLOW" "$NC"
@@ -350,15 +355,22 @@ compute_staged_summary() {
 
   if [[ -f "$TMP_DIR/ast-summary.json" ]] && command -v jq >/dev/null 2>&1; then
     local scrit=0 shigh=0 smed=0 slow=0
-    while IFS= read -r fpath; do
-      [[ -z "$fpath" ]] && continue
-      local ccrit chigh cmed clow
-      ccrit=$(jq -r --arg p "$fpath" '[ .findings[] | select(.filePath == $p) | .severity | ascii_downcase | if .=="critical" or .=="error" then 1 else 0 end ] | add // 0' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
-      chigh=$(jq -r --arg p "$fpath" '[ .findings[] | select(.filePath == $p) | .severity | ascii_downcase | if .=="high" then 1 else 0 end ] | add // 0' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
-      cmed=$(jq -r --arg p "$fpath" '[ .findings[] | select(.filePath == $p) | .severity | ascii_downcase | if .=="warning" or .=="medium" then 1 else 0 end ] | add // 0' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
-      clow=$(jq -r --arg p "$fpath" '[ .findings[] | select(.filePath == $p) | .severity | ascii_downcase | if .=="info" or .=="low" then 1 else 0 end ] | add // 0' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
-      scrit=$((scrit + ccrit)); shigh=$((shigh + chigh)); smed=$((smed + cmed)); slow=$((slow + clow))
-    done < "$staged_file"
+    local total_findings=$(jq -r '.findings | length' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
+    
+    if [[ "$total_findings" -gt 0 ]] && [[ -s "$staged_file_rel" ]]; then
+      # Use relative paths for matching - more reliable across different path formats
+      while IFS= read -r relpath; do
+        [[ -z "$relpath" ]] && continue
+        local ccrit chigh cmed clow
+        # Match using 'endswith' with relative path OR exact match with absolute path
+        local abs_path="$ROOT_DIR/$relpath"
+        ccrit=$(jq -r --arg rel "$relpath" --arg abs "$abs_path" '[ .findings[] | select((.filePath | endswith($rel)) or .filePath == $abs) | .severity | ascii_downcase | if .=="critical" or .=="error" then 1 else 0 end ] | add // 0' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
+        chigh=$(jq -r --arg rel "$relpath" --arg abs "$abs_path" '[ .findings[] | select((.filePath | endswith($rel)) or .filePath == $abs) | .severity | ascii_downcase | if .=="high" then 1 else 0 end ] | add // 0' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
+        cmed=$(jq -r --arg rel "$relpath" --arg abs "$abs_path" '[ .findings[] | select((.filePath | endswith($rel)) or .filePath == $abs) | .severity | ascii_downcase | if .=="warning" or .=="medium" then 1 else 0 end ] | add // 0' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
+        clow=$(jq -r --arg rel "$relpath" --arg abs "$abs_path" '[ .findings[] | select((.filePath | endswith($rel)) or .filePath == $abs) | .severity | ascii_downcase | if .=="info" or .=="low" then 1 else 0 end ] | add // 0' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
+        scrit=$((scrit + ccrit)); shigh=$((shigh + chigh)); smed=$((smed + cmed)); slow=$((slow + clow))
+      done < "$staged_file_rel"
+    fi
     printf "  Staged AST → 🔴 CRITICAL:%s 🟠 HIGH:%s 🟡 MEDIUM:%s 🔵 LOW:%s\n" "${scrit:-0}" "${shigh:-0}" "${smed:-0}" "${slow:-0}"
     export STAGED_CRIT=${scrit:-0}
     export STAGED_HIGH=${shigh:-0}
@@ -999,9 +1011,9 @@ run_ast_intelligence() {
   # Execute AST with proper error handling and NODE_PATH
   # Change to HOOKS_SYSTEM_DIR so Node.js resolves modules correctly
   if [[ -n "$node_path_value" ]]; then
-    ast_output=$(cd "$HOOKS_SYSTEM_DIR" && export NODE_PATH="$node_path_value" && export AUDIT_TMP="$TMP_DIR" && "$node_bin" "${AST_DIR}/ast-intelligence.js" 2>&1) || ast_exit_code=$?
+    ast_output=$(cd "$HOOKS_SYSTEM_DIR" && export NODE_PATH="$node_path_value" && export AUDIT_TMP="$TMP_DIR" && export AUDIT_LIBRARY="${AUDIT_LIBRARY:-false}" && "$node_bin" "${AST_DIR}/ast-intelligence.js" 2>&1) || ast_exit_code=$?
   else
-    ast_output=$(cd "$HOOKS_SYSTEM_DIR" && export AUDIT_TMP="$TMP_DIR" && "$node_bin" "${AST_DIR}/ast-intelligence.js" 2>&1) || ast_exit_code=$?
+    ast_output=$(cd "$HOOKS_SYSTEM_DIR" && export AUDIT_TMP="$TMP_DIR" && export AUDIT_LIBRARY="${AUDIT_LIBRARY:-false}" && "$node_bin" "${AST_DIR}/ast-intelligence.js" 2>&1) || ast_exit_code=$?
   fi
 
   # Check if AST script failed