pumuki-ast-hooks 5.5.25 → 5.5.27

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki-ast-hooks",
-  "version": "5.5.25",
+  "version": "5.5.27",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {

package/scripts/hooks-system/infrastructure/orchestration/intelligent-audit.js

@@ -10,6 +10,20 @@ const { toErrorMessage } = require('../utils/error-utils');
 const fs = require('fs');
 const path = require('path');
 
+function deriveCategoryFromRuleId(ruleId) {
+  if (!ruleId || typeof ruleId !== 'string') return 'unknown';
+  const parts = ruleId.split('.');
+  if (parts.length >= 2) {
+    const platform = parts[0].toLowerCase();
+    const domain = parts[1].toLowerCase();
+    if (['ios', 'android', 'backend', 'frontend'].includes(platform)) {
+      return `${platform}.${domain}`;
+    }
+    return domain;
+  }
+  return parts[0] || 'unknown';
+}
+
 function formatLocalTimestamp(date = new Date()) {
   const year = date.getFullYear();
   const month = String(date.getMonth() + 1).padStart(2, '0');
@@ -251,7 +265,14 @@ function updateAIEvidence(violations, gateResult, tokenUsage) {
     const isProtected = ['main', 'master', baseBranch].includes(currentBranch);
     const criticalViolations = violations.filter(v => v.severity === 'CRITICAL');
     const highViolations = violations.filter(v => v.severity === 'HIGH');
-    const blockingViolations = [...criticalViolations, ...highViolations].slice(0, 50);
+    const mediumViolations = violations.filter(v => v.severity === 'MEDIUM');
+    const lowViolations = violations.filter(v => v.severity === 'LOW');
+
+    let gateViolations = [...criticalViolations, ...highViolations];
+    if (gateViolations.length === 0) {
+      gateViolations = [...mediumViolations, ...lowViolations];
+    }
+    const blockingViolations = gateViolations.slice(0, 50);
 
     const gateScope = String(env.get('AI_GATE_SCOPE', 'staging') || 'staging').trim().toLowerCase();
 
@@ -272,16 +293,19 @@ function updateAIEvidence(violations, gateResult, tokenUsage) {
       status: gateResult.passed ? 'ALLOWED' : 'BLOCKED',
       scope: gateScope === 'repo' || gateScope === 'repository' ? 'repo' : 'staging',
       last_check: formatLocalTimestamp(),
-      violations: blockingViolations.map(v => ({
-        file: v.filePath || v.file || 'unknown',
-        line: v.line || null,
-        severity: v.severity,
-        rule: v.ruleId || v.rule || 'unknown',
-        message: v.message || v.description || '',
-        category: v.category || 'unknown',
-        intelligent_evaluation: v.intelligentEvaluation || false,
-        severity_score: v.severityScore || 0
-      })),
+      violations: blockingViolations.map(v => {
+        const ruleId = v.ruleId || v.rule || 'unknown';
+        return {
+          file: v.filePath || v.file || 'unknown',
+          line: v.line || null,
+          severity: v.severity,
+          rule: ruleId,
+          message: v.message || v.description || '',
+          category: v.category || deriveCategoryFromRuleId(ruleId),
+          intelligent_evaluation: v.intelligentEvaluation || false,
+          severity_score: v.severityScore || 0
+        };
+      }),
       instruction: '🚨 AI MUST call mcp_ast-intelligence-automation_ai_gate_check BEFORE any action. If BLOCKED, fix violations first!',
       mandatory: true
     };

package/scripts/hooks-system/infrastructure/shell/orchestrators/audit-orchestrator.sh

@@ -114,6 +114,52 @@ print_header() {
   printf "%b%s%b\n\n" "$BLUE" "$MSG_TITLE" "$NC"
 }
 
+print_blocking_violations() {
+  if [[ ! -f "$TMP_DIR/ast-summary.json" ]]; then
+    return
+  fi
+  if ! command -v jq >/dev/null 2>&1; then
+    return
+  fi
+
+  local max_show=${1:-20}
+
+  local critical_violations
+  critical_violations=$(jq -r '
+    [.findings[] | select(.severity == "CRITICAL" or .severity == "critical" or .severity == "error")]
+    | .[0:'"$max_show"']
+    | .[] | "🔴 CRITICAL: \(.ruleId) - File: \(.filePath):\(.line // 1)"
+  ' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "")
+
+  local high_violations
+  high_violations=$(jq -r '
+    [.findings[] | select(.severity == "HIGH" or .severity == "high")]
+    | .[0:'"$max_show"']
+    | .[] | "🟠 HIGH: \(.ruleId) - File: \(.filePath):\(.line // 1)"
+  ' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "")
+
+  if [[ -n "$critical_violations" || -n "$high_violations" ]]; then
+    printf "\n%b📋 BLOCKING VIOLATIONS DETAIL:%b\n" "$YELLOW" "$NC"
+    printf "─────────────────────────────────────────────────────────────\n"
+  fi
+
+  if [[ -n "$critical_violations" ]]; then
+    printf "%b%s%b\n" "$RED" "$critical_violations" "$NC"
+  fi
+
+  if [[ -n "$high_violations" ]]; then
+    printf "%b%s%b\n" "$YELLOW" "$high_violations" "$NC"
+  fi
+
+  local total_crit total_high
+  total_crit=$(jq '[.findings[] | select(.severity == "CRITICAL" or .severity == "critical" or .severity == "error")] | length' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
+  total_high=$(jq '[.findings[] | select(.severity == "HIGH" or .severity == "high")] | length' "$TMP_DIR/ast-summary.json" 2>/dev/null || echo "0")
+
+  if (( total_crit > max_show )) || (( total_high > max_show )); then
+    printf "\n  %b(Showing first %d of each severity. Run full audit for complete list)%b\n" "$BLUE" "$max_show" "$NC"
+  fi
+}
+
 ignored_globs() {
   cat <<'EOF'
 node_modules
@@ -268,6 +314,7 @@ full_audit_strict_staging_only() {
     printf "  🟠 HIGH:     %s\n" "$gate_high"
     printf "  🟡 MEDIUM:   %s\n" "$gate_med"
     printf "  🔵 LOW:      %s\n" "$gate_low"
+    print_blocking_violations
     printf "\n  Action: Fix ALL violations in staged files.\n"
     printf "\n"
     print_final_signature
@@ -324,6 +371,7 @@ full_audit_standard() {
     printf "  🟠 HIGH:     %s\n" "$gate_high"
     printf "  🟡 MEDIUM:   %s (allowed)\n" "$gate_med"
     printf "  🔵 LOW:      %s (allowed)\n" "$gate_low"
+    print_blocking_violations
     printf "\n  Action: Fix CRITICAL/HIGH violations in staged files.\n"
     printf "\n"
     print_final_signature
@@ -802,6 +850,7 @@ summarize_all() {
           printf "  MEDIUM violations (repository):   %s\n" "$gate_med"
           printf "  LOW violations (repository):      %s\n" "$gate_low"
           printf "  ESLint errors (repository):       %s\n" "$gate_es"
+          print_blocking_violations
           printf "  Action: Clean entire repository before committing.\n"
         else
           printf "%b[COMMIT BLOCKED - STRICT STAGING]%b\n" "$RED" "$NC"
@@ -809,6 +858,7 @@ summarize_all() {
           printf "  HIGH violations in staging:     %s\n" "$gate_high"
           printf "  MEDIUM violations in staging:   %s\n" "$gate_med"
           printf "  LOW violations in staging:      %s\n" "$gate_low"
+          print_blocking_violations
           printf "  Action: Fix violations in staged files before committing.\n"
         fi
         printf "\n"
@@ -822,6 +872,7 @@ summarize_all() {
         printf "%b[COMMIT BLOCKED - CRITICAL/HIGH]%b\n" "$RED" "$NC"
         printf "  CRITICAL violations in staging: %s\n" "$gate_crit"
         printf "  HIGH violations in staging:     %s\n" "$gate_high"
+        print_blocking_violations
         printf "  Action: Fix critical/high violations in staged files before committing.\n"
         printf "\n"
         print_final_signature