pumuki-ast-hooks 6.0.6 → 6.0.8

package/README.md

@@ -55,6 +55,13 @@ Documentation:
 - `CHANGELOG.md` (Release notes and changes)
 - Keychain/Security casts are exempted from `ios.types.forbidden_type_cast` to avoid false positives in secure storage implementations.
 
+Release 6.0.6:
+- Keychain/Security casts are exempted from `ios.types.forbidden_type_cast` to avoid false positives in secure storage implementations.
+- Staging-only detection now ignores deleted files when building the file list.
+
+Release 6.0.7:
+- God Class detection (backend): baseline-first by default; optional hard cap via env; detector always runs (with or without baseline).
+
 ---
 
 ## Visual Overview

package/docs/RELEASE_NOTES.md

@@ -1,3 +1,31 @@
+# Release Notes - v6.0.8
+
+**Release Date**: January 13, 2026  
+**Type**: Patch Release  
+**Compatibility**: Fully backward compatible with 6.0.x
+
+---
+
+## ✅ Fixes
+
+- **iOS DIP detector**: protocol-constrained generics (e.g. `<Client: APIClientProtocol>`) are treated as abstract dependencies.
+
+---
+
+# Release Notes - v6.0.7
+
+**Release Date**: January 13, 2026  
+**Type**: Patch Release  
+**Compatibility**: Fully backward compatible with 6.0.x
+
+---
+
+## ✅ Fixes
+
+- **God Class detection (backend)**: baseline-first by default; optional hard cap via env; detector always runs (with or without baseline).
+
+---
+
 # Release Notes - v5.5.25
 
 **Release Date**: January 4, 2026

package/docs/USAGE.md

@@ -12,6 +12,13 @@
 
 ---
 
+## Recent Changes (v6.0.6)
+
+- Keychain/Security casts are exempted from `ios.types.forbidden_type_cast` to avoid false positives.
+- Staging gate evaluation ignores deleted files when assembling the staged file list.
+
+---
+
 ## Minimal Example (5 minutes)
 
 ### Step 1: Install

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki-ast-hooks",
-  "version": "6.0.6",
+  "version": "6.0.8",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {

package/scripts/hooks-system/.audit-reports/auto-recovery.log

@@ -19,3 +19,4 @@
 {"timestamp":"2026-01-12T23:31:06.880Z","level":"info","component":"AutoRecovery","event":"NotificationCenterService shutdown","data":{"totalEnqueued":0,"totalSent":0,"totalDeduplicated":0,"totalCooldownSkipped":0,"totalFailed":0,"totalRetries":0,"queueSize":0,"deduplication":{"size":0},"cooldowns":{"activeCooldowns":0}},"context":{}}
 {"timestamp":"2026-01-12T23:36:15.876Z","level":"info","component":"AutoRecovery","event":"NotificationCenterService shutdown","data":{"totalEnqueued":0,"totalSent":0,"totalDeduplicated":0,"totalCooldownSkipped":0,"totalFailed":0,"totalRetries":0,"queueSize":0,"deduplication":{"size":0},"cooldowns":{"activeCooldowns":0}},"context":{}}
 {"timestamp":"2026-01-13T00:00:36.969Z","level":"info","component":"AutoRecovery","event":"NotificationCenterService shutdown","data":{"totalEnqueued":0,"totalSent":0,"totalDeduplicated":0,"totalCooldownSkipped":0,"totalFailed":0,"totalRetries":0,"queueSize":0,"deduplication":{"size":0},"cooldowns":{"activeCooldowns":0}},"context":{}}
+{"timestamp":"2026-01-13T07:51:05.490Z","level":"info","component":"AutoRecovery","event":"NotificationCenterService shutdown","data":{"totalEnqueued":0,"totalSent":0,"totalDeduplicated":0,"totalCooldownSkipped":0,"totalFailed":0,"totalRetries":0,"queueSize":0,"deduplication":{"size":0},"cooldowns":{"activeCooldowns":0}},"context":{}}

package/scripts/hooks-system/.audit-reports/install-wizard.log

@@ -86,3 +86,7 @@
 {"timestamp":"2026-01-13T00:00:37.050Z","level":"info","component":"InstallWizard","event":"INSTALL_WIZARD_CONFIG_EXISTS","data":{"configPath":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system/.hook-system/config.json"},"context":{}}
 {"timestamp":"2026-01-13T00:00:37.050Z","level":"error","component":"InstallWizard","event":"INSTALL_WIZARD_SYMLINK_FAILED","data":{"error":"EEXIST: file already exists, symlink '/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system/scripts/hooks-system/bin/guard-supervisor.js' -> '/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system/.git/hooks/guard-supervisor'"},"context":{}}
 {"timestamp":"2026-01-13T00:00:37.050Z","level":"info","component":"InstallWizard","event":"INSTALL_WIZARD_COMPLETED","data":{},"context":{}}
+{"timestamp":"2026-01-13T07:51:05.568Z","level":"info","component":"InstallWizard","event":"INSTALL_WIZARD_START","data":{"repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"},"context":{}}
+{"timestamp":"2026-01-13T07:51:05.577Z","level":"info","component":"InstallWizard","event":"INSTALL_WIZARD_CONFIG_EXISTS","data":{"configPath":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system/.hook-system/config.json"},"context":{}}
+{"timestamp":"2026-01-13T07:51:05.577Z","level":"error","component":"InstallWizard","event":"INSTALL_WIZARD_SYMLINK_FAILED","data":{"error":"EEXIST: file already exists, symlink '/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system/scripts/hooks-system/bin/guard-supervisor.js' -> '/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system/.git/hooks/guard-supervisor'"},"context":{}}
+{"timestamp":"2026-01-13T07:51:05.577Z","level":"info","component":"InstallWizard","event":"INSTALL_WIZARD_COMPLETED","data":{},"context":{}}

package/scripts/hooks-system/.audit_tmp/hook-metrics.jsonl

@@ -762,3 +762,35 @@
 {"timestamp":1768262436969,"hook":"audit_logger","operation":"ensure_dir","status":"started"}
 {"timestamp":1768262436969,"hook":"audit_logger","operation":"ensure_dir","status":"success"}
 {"timestamp":1768262436969,"hook":"audit_logger","operation":"constructor","status":"success","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768288829103,"hook":"audit_logger","operation":"constructor","status":"started","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768288829103,"hook":"audit_logger","operation":"ensure_dir","status":"started"}
+{"timestamp":1768288829103,"hook":"audit_logger","operation":"ensure_dir","status":"success"}
+{"timestamp":1768288829103,"hook":"audit_logger","operation":"constructor","status":"success","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665487,"hook":"audit_logger","operation":"constructor","status":"started","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"ensure_dir","status":"started"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"ensure_dir","status":"success"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"constructor","status":"success","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"constructor","status":"started","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"ensure_dir","status":"started"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"ensure_dir","status":"success"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"constructor","status":"success","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"constructor","status":"started","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"ensure_dir","status":"started"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"ensure_dir","status":"success"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"constructor","status":"success","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"constructor","status":"started","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"ensure_dir","status":"started"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"ensure_dir","status":"success"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"constructor","status":"success","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665488,"hook":"audit_logger","operation":"constructor","status":"started","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665489,"hook":"audit_logger","operation":"ensure_dir","status":"started"}
+{"timestamp":1768290665489,"hook":"audit_logger","operation":"ensure_dir","status":"success"}
+{"timestamp":1768290665489,"hook":"audit_logger","operation":"constructor","status":"success","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665489,"hook":"audit_logger","operation":"constructor","status":"started","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768290665489,"hook":"audit_logger","operation":"ensure_dir","status":"started"}
+{"timestamp":1768290665489,"hook":"audit_logger","operation":"ensure_dir","status":"success"}
+{"timestamp":1768290665489,"hook":"audit_logger","operation":"constructor","status":"success","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768293907758,"hook":"audit_logger","operation":"constructor","status":"started","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}
+{"timestamp":1768293907758,"hook":"audit_logger","operation":"ensure_dir","status":"started"}
+{"timestamp":1768293907758,"hook":"audit_logger","operation":"ensure_dir","status":"success"}
+{"timestamp":1768293907758,"hook":"audit_logger","operation":"constructor","status":"success","repoRoot":"/Users/juancarlosmerlosalbarracin/Developer/Projects/ast-intelligence-hooks/scripts/hooks-system"}

package/scripts/hooks-system/application/__tests__/DIValidationService.spec.js

@@ -77,5 +77,22 @@ describe('DIValidationService', () => {
 
             expect(mockAnalyzer.pushFinding).not.toHaveBeenCalled();
         });
+
+        it('should skip generic constraints that bind to protocols', async () => {
+            mockAnalyzer.fileContent = 'final class TestViewModel<Client: APIClientProtocol> { }';
+            const properties = [
+                { 'key.name': 'apiClient', 'key.typename': 'Client' }
+            ];
+
+            await diValidationService.validateDependencyInjection(
+                mockAnalyzer,
+                properties,
+                'TestViewModel.swift',
+                'TestViewModel',
+                10
+            );
+
+            expect(mockAnalyzer.pushFinding).not.toHaveBeenCalled();
+        });
     });
 });

package/scripts/hooks-system/domain/strategies/ConcreteDependencyStrategy.js

@@ -18,7 +18,7 @@ class ConcreteDependencyStrategy extends DIStrategy {
             const typename = prop['key.typename'] || '';
             const propName = prop['key.name'] || '';
 
-            if (this._shouldSkipType(typename, propName, className)) {
+            if (this._shouldSkipType(typename, propName, className, context)) {
                 continue;
             }
 
@@ -34,7 +34,7 @@ class ConcreteDependencyStrategy extends DIStrategy {
         return violations;
     }
 
-    _shouldSkipType(typename, propName, className) {
+    _shouldSkipType(typename, propName, className, context) {
         if (this.config.allowedTypes.includes(typename)) {
             return true;
         }
@@ -43,6 +43,10 @@ class ConcreteDependencyStrategy extends DIStrategy {
             return true;
         }
 
+        if (this._isGenericConstraintType(typename, className, context)) {
+            return true;
+        }
+
         return false;
     }
 
@@ -62,6 +66,23 @@ class ConcreteDependencyStrategy extends DIStrategy {
         return isSingleLetter || (isCamelCase && hasContextHint);
     }
 
+    _isGenericConstraintType(typename, className, context) {
+        const content = context?.analyzer?.fileContent || '';
+        if (!content) return false;
+
+        const classPattern = new RegExp(`\\b(class|struct)\\s+${className}\\s*<([^>]+)>`);
+        const match = content.match(classPattern);
+        if (!match) return false;
+
+        const genericClause = match[2];
+        const constraints = genericClause.split(',').map((part) => part.trim());
+
+        return constraints.some((constraint) => {
+            const [name, bound] = constraint.split(':').map((value) => value.trim());
+            return name === typename && bound;
+        });
+    }
+
     _isConcreteService(typename) {
         const hasConcretePattern = this.config.concretePatterns.some(pattern =>
             new RegExp(pattern).test(typename)

package/scripts/hooks-system/infrastructure/ast/backend/ast-backend.js

@@ -310,9 +310,19 @@ function runBackendIntelligence(project, findings, platform) {
       pushFinding("backend.config.missing_validation", "warning", sf, sf, "Environment variables without validation - consider Joi or class-validator", findings);
     }
 
-    if (godClassBaseline) {
-      analyzeGodClasses(sf, findings, { SyntaxKind, pushFinding, godClassBaseline });
-    }
+    const hardMaxLines = env.getNumber('AST_GODCLASS_HARD_MAX_LINES', 0);
+    const softMaxLines = env.getNumber('AST_GODCLASS_SOFT_MAX_LINES', 500);
+    const absoluteGodLines = env.getNumber('AST_GODCLASS_ABSOLUTE_LINES', 1000);
+    const underThresholdLines = env.getNumber('AST_GODCLASS_UNDER_THRESHOLD_LINES', 300);
+    analyzeGodClasses(sf, findings, {
+      SyntaxKind,
+      pushFinding,
+      godClassBaseline,
+      hardMaxLines,
+      softMaxLines,
+      absoluteGodLines,
+      underThresholdLines
+    });
 
     if (!isRealBackendAppFile) {
       return;

package/scripts/hooks-system/infrastructure/ast/backend/detectors/god-class-detector.js

@@ -1,7 +1,15 @@
 /**
  * God Class detector extracted from ast-backend.js to keep responsibilities separated.
  */
-function analyzeGodClasses(sourceFile, findings, { SyntaxKind, pushFinding, godClassBaseline }) {
+function analyzeGodClasses(sourceFile, findings, {
+    SyntaxKind,
+    pushFinding,
+    godClassBaseline,
+    hardMaxLines,
+    softMaxLines,
+    absoluteGodLines,
+    underThresholdLines
+}) {
     const filePath = sourceFile.getFilePath().replace(/\\/g, '/');
     if (
         /\/infrastructure\/ast\//i.test(filePath) ||
@@ -24,6 +32,12 @@ function analyzeGodClasses(sourceFile, findings, { SyntaxKind, pushFinding, godC
         const endLine = cls.getEndLineNumber();
         const lineCount = Math.max(0, endLine - startLine);
 
+        const hardMax = Number.isFinite(hardMaxLines) && hardMaxLines > 0 ? hardMaxLines : 0;
+        const softMax = Number.isFinite(softMaxLines) && softMaxLines > 0 ? softMaxLines : 500;
+        const absoluteLines = Number.isFinite(absoluteGodLines) && absoluteGodLines > 0 ? absoluteGodLines : 1000;
+        const underLines = Number.isFinite(underThresholdLines) && underThresholdLines > 0 ? underThresholdLines : 300;
+        const isHardMaxViolation = hardMax > 0 && lineCount > hardMax;
+
         const decisionKinds = [
             SyntaxKind.IfStatement,
             SyntaxKind.ForStatement,
@@ -51,12 +65,20 @@ function analyzeGodClasses(sourceFile, findings, { SyntaxKind, pushFinding, godC
         if (/\bgit\b|rev-parse|git diff|git status|git log/i.test(clsText)) concerns.add('git');
         const concernCount = concerns.size;
 
-        const isMassiveFile = lineCount > 500;
-        const isAbsoluteGod = lineCount > 1000 ||
-            (lineCount > 500 && complexity > 50) ||
-            (lineCount > 500 && methodsCount > 20) ||
-            (lineCount > 600 && methodsCount > 30 && complexity > 80);
-        const isUnderThreshold = lineCount < 300 && methodsCount < 15 && complexity < 30;
+        if (isHardMaxViolation) {
+            pushFinding("backend.antipattern.god_classes", "critical", sourceFile, cls,
+                `God class detected: ${methodsCount} methods, ${propertiesCount} properties, ${lineCount} lines, complexity ${complexity}, concerns ${concernCount} - VIOLATES SRP`,
+                findings
+            );
+            return;
+        }
+
+        const isMassiveFile = lineCount > softMax;
+        const isAbsoluteGod = lineCount > absoluteLines ||
+            (lineCount > softMax && complexity > 50) ||
+            (lineCount > softMax && methodsCount > 20) ||
+            (lineCount > (softMax + 100) && methodsCount > 30 && complexity > 80);
+        const isUnderThreshold = lineCount < underLines && methodsCount < 15 && complexity < 30;
 
         if (!godClassBaseline) {
             if (!isUnderThreshold && (isMassiveFile || isAbsoluteGod)) {

package/scripts/hooks-system/infrastructure/watchdog/__tests__/.audit-reports/token-monitor.log

@@ -61,3 +61,6 @@
 {"timestamp":"2026-01-13T00:00:38.463Z","level":"info","component":"TokenMonitor","event":"TOKEN_MONITOR_RESULT","data":{"level":"ok","percentUsed":10,"tokensUsed":100000,"maxTokens":1000000,"source":"realtime","stale":false},"context":{"message":"Result level=ok percent=10% used=100000/1000000 source=realtime"}}
 {"timestamp":"2026-01-13T00:00:38.464Z","level":"info","component":"TokenMonitor","event":"TOKEN_MONITOR_RESULT","data":{"level":"warning","percentUsed":91,"tokensUsed":910000,"maxTokens":1000000,"source":"fallback","stale":false},"context":{"message":"Result level=warning percent=91% used=910000/1000000 source=fallback"}}
 {"timestamp":"2026-01-13T00:00:38.464Z","level":"info","component":"TokenMonitor","event":"TOKEN_MONITOR_RESULT","data":{"level":"critical","percentUsed":98,"tokensUsed":980000,"maxTokens":1000000,"source":"realtime","stale":true},"context":{"message":"Result level=critical percent=98% used=980000/1000000 source=realtime (stale)"}}
+{"timestamp":"2026-01-13T07:51:07.491Z","level":"info","component":"TokenMonitor","event":"TOKEN_MONITOR_RESULT","data":{"level":"ok","percentUsed":10,"tokensUsed":100000,"maxTokens":1000000,"source":"realtime","stale":false},"context":{"message":"Result level=ok percent=10% used=100000/1000000 source=realtime"}}
+{"timestamp":"2026-01-13T07:51:07.492Z","level":"info","component":"TokenMonitor","event":"TOKEN_MONITOR_RESULT","data":{"level":"warning","percentUsed":91,"tokensUsed":910000,"maxTokens":1000000,"source":"fallback","stale":false},"context":{"message":"Result level=warning percent=91% used=910000/1000000 source=fallback"}}
+{"timestamp":"2026-01-13T07:51:07.493Z","level":"info","component":"TokenMonitor","event":"TOKEN_MONITOR_RESULT","data":{"level":"critical","percentUsed":98,"tokensUsed":980000,"maxTokens":1000000,"source":"realtime","stale":true},"context":{"message":"Result level=critical percent=98% used=980000/1000000 source=realtime (stale)"}}