pumuki-ast-hooks 5.3.21 → 5.3.23

package/docs/VIOLATIONS_RESOLUTION_PLAN.md

@@ -10,8 +10,8 @@
 ---
 
 ## 📊 Executive Summary
-- **Current status:** ⚠️ Action required (211 critical, 5 high, 122 medium, 185 low)  
-- **Branch:** `feature/add-prometheus-metrics`  
+- **Current status:** ⚠️ Action required (3 critical, 6 high, 272 medium, 213 low)  
+- **Branch:** `main` (merged from `feature/add-prometheus-metrics`)  
 - **Start date:** 2025-12-30 — **Overall ETA:** 2026-01-15  
 - **Goal:** Reduce CRITICAL/HIGH to 0 and bring total < 20 before allowing commits without bypass.  
 - **Risks:**  
@@ -45,22 +45,22 @@ gantt
 ## 🔴 Phase 1: BLOCKER Violations (CRITICAL + HIGH)
 | Status | Severity | Count | Owner | DOD (Definition of Done) | Source |
 |--------|-----------|-------|-------------|--------------------------|--------|
-| ⏳ | CRITICAL | 211 | BE | Resolve CRITICAL violations in repository (0 CRITICAL to unblock) | `.audit_tmp/ast-summary.json` / `.violations-by-priority.md` |
-| ⏳ | HIGH | 5 | BE | Resolve HIGH violations in repository (0 HIGH to unblock) | `.audit_tmp/ast-summary.json` / `.violations-by-priority.md` |
+| 🚧 | CRITICAL | 3 | BE | Resolve CRITICAL violations in repository (0 CRITICAL to unblock) | `.audit_tmp/ast-summary.json` / `.violations-by-priority.md` |
+| 🚧 | HIGH | 6 | BE | Resolve HIGH violations in repository (0 HIGH to unblock) | `.audit_tmp/ast-summary.json` / `.violations-by-priority.md` |
 
 ---
 
-## 🟠 Phase 2: MEDIUM Violations (122)
+## 🟠 Phase 2: MEDIUM Violations (272)
 | Status | Violation | Count | Owner | DOD | Doc |
 |--------|-----------|-------|-------------|-----|-----|
-| ⏳ | MEDIUM | 122 | BE | Resolve remaining medium-complexity violations | [Medium violations](../docs/medium-violations.md) |
+| 🚧 | MEDIUM | 272 | BE | Resolve remaining medium-complexity violations | [Medium violations](../docs/medium-violations.md) |
 
 ---
 
-## 🔵 Phase 3: LOW Violations (185)
+## 🔵 Phase 3: LOW Violations (213)
 | Status | Violation | Count | Owner | DOD | Doc |
 |--------|-----------|-------|-------------|-----|-----|
-| ⏳ | LOW | 185 | BE/FE | Resolve remaining low-priority violations | [Low violations](../docs/low-violations.md) |
+| 🚧 | LOW | 213 | BE/FE | Resolve remaining low-priority violations | [Low violations](../docs/low-violations.md) |
 
 ---
 
@@ -93,5 +93,6 @@ gantt
 
 **Collaborative notes:**  
 - Add notes under each table when closing tasks (use the legend to update status).  
-- Progress on Prometheus metrics: automatic sweep applied over `scripts/hooks-system/application/services/**`; the audit still reports 42 (`backend.metrics.missing_prometheus`) and 30 (`backend.observability.missing_prometheus`) pending.  
-- Last scan (31/12/2025 10:39): 451 files, 523 total violations (211 critical, 5 high, 122 medium, 185 low).
+- Progress on Prometheus metrics: automatic sweep applied over `scripts/hooks-system/application/services/**`; the audit still reports 61 (`backend.metrics.missing_prometheus`) and 29 (`backend.observability.missing_prometheus`) pending.  
+- Last scan (02/01/2026 09:58): 457 files, 494 total violations (3 critical, 6 high, 272 medium, 213 low).  
+- **Major improvement**: CRITICAL violations reduced from 211 to 3 (98.6% reduction) due to fixes in guards, hooks installation, and MCP singleton.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki-ast-hooks",
-  "version": "5.3.21",
+  "version": "5.3.23",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {
@@ -101,6 +101,7 @@
   "files": [
     "bin/",
     "scripts/hooks-system/",
+    "scripts/hooks-system/config/",
     "presentation/",
     "skills/",
     "hooks/",

package/scripts/hooks-system/application/services/RealtimeGuardService.js

@@ -3,7 +3,7 @@ const path = require('path');
 const { getGitTreeState, isTreeBeyondLimit } = require('./GitTreeState');
 const AuditLogger = require('./logging/AuditLogger');
 const { recordMetric } = require('../../infrastructure/telemetry/metrics-logger');
-const env = require('../../config/env');
+const env = require('../../../config/env');
 
 class RealtimeGuardService {
     /**

package/scripts/hooks-system/application/services/installation/McpConfigurator.js

@@ -3,7 +3,7 @@ const path = require('path');
 const { execSync } = require('child_process');
 const crypto = require('crypto');
 const os = require('os');
-const env = require('../../config/env');
+const env = require('../../../config/env');
 
 const COLORS = {
     reset: '\x1b[0m',

package/scripts/hooks-system/application/services/monitoring/EvidenceMonitorService.js

@@ -1,7 +1,7 @@
 const fs = require('fs');
 const path = require('path');
 const { execSync } = require('child_process');
-const env = require('../../config/env');
+const env = require('../../../config/env');
 
 function resolveUpdateEvidenceScript(repoRoot) {
     const candidates = [

package/scripts/hooks-system/application/services/token/TokenMetricsService.js

@@ -54,7 +54,7 @@ class TokenMetricsService {
         if (untrusted) {
             level = 'ok';
         }
-        const env = require('../../config/env');
+        const env = require('../../../config/env');
         const forceLevel = (env.get('TOKEN_MONITOR_FORCE_LEVEL', '') || '').toLowerCase();
         if (forceLevel === 'warning' || forceLevel === 'critical' || forceLevel === 'ok') {
             level = forceLevel;

package/scripts/hooks-system/infrastructure/ast/ast-core.js

@@ -2,7 +2,7 @@
 const { Project, Node, SyntaxKind, ScriptTarget, ModuleKind } = require("ts-morph");
 const path = require("path");
 const fs = require("fs");
-const env = require("../../config/env");
+const env = require("../../../config/env");
 
 let SeverityEvaluator = null;
 let severityEvaluatorInstance = null;

package/scripts/hooks-system/infrastructure/ast/ast-intelligence.js

@@ -1,7 +1,7 @@
 
 const path = require("path");
 const fs = require("fs");
-const env = require("../../config/env");
+const env = require("../../../config/env");
 
 const astModulesPath = __dirname;
 const { createProject, platformOf, mapToLevel } = require(path.join(astModulesPath, "ast-core"));

package/scripts/hooks-system/infrastructure/hooks/skill-activation-prompt.js

@@ -3,7 +3,7 @@
 const fs = require('fs');
 const path = require('path');
 const { execSync } = require('child_process');
-const env = require('../../config/env');
+const env = require('../../../config/env');
 
 const projectDir = env.get('CLAUDE_PROJECT_DIR', process.cwd());
 const rulesPath = path.join(projectDir, '.cursor', 'ai-skills', 'skill-rules.json');

package/scripts/hooks-system/infrastructure/logging/UnifiedLoggerFactory.js

@@ -1,6 +1,6 @@
 const fs = require('fs');
 const path = require('path');
-const env = require('../../config/env');
+const env = require('../../../config/env');
 
 const UnifiedLogger = require('../../application/services/logging/UnifiedLogger');
 

package/scripts/hooks-system/infrastructure/orchestration/intelligent-audit.js

@@ -8,7 +8,7 @@ const { TokenManager } = require('../utils/token-manager');
 const { toErrorMessage } = require('../utils/error-utils');
 const fs = require('fs');
 const path = require('path');
-const env = require('../../config/env');
+const env = require('../../../config/env');
 
 function resolveAuditTmpDir() {
   const configured = (env.get('AUDIT_TMP', '') || '').trim();

package/scripts/hooks-system/infrastructure/telemetry/metrics-server.js

@@ -3,7 +3,7 @@
 const http = require('http');
 const fs = require('fs');
 const path = require('path');
-const env = require('../../config/env');
+const env = require('../../../config/env');
 
 const PORT = env.getNumber('HOOK_METRICS_PORT', 9464);
 const METRICS_FILE = path.join(process.cwd(), env.get('HOOK_METRICS_FILE', '.audit_tmp/hook-metrics.jsonl'));

package/scripts/hooks-system/infrastructure/validators/enforce-english-literals.js

@@ -4,7 +4,7 @@
 const fs = require('fs');
 const path = require('path');
 const { execSync } = require('child_process');
-const env = require('../../config/env');
+const env = require('../../../config/env');
 
 const REPO_ROOT = env.get('HOOK_GUARD_REPO_ROOT', process.cwd());
 const CONFIG_PATH = path.join(REPO_ROOT, 'scripts', 'hooks-system', 'config', 'language-guard.json');