pumuki 6.3.152 → 6.3.154

package/core/facts/detectors/text/ios.test.ts

@@ -13,6 +13,7 @@ import {
   hasSwiftDispatchGroupUsage,
   hasSwiftDispatchQueueUsage,
   hasSwiftDispatchSemaphoreUsage,
+  hasSwiftExplicitColorStaticMemberUsage,
   hasSwiftForEachIndicesUsage,
   hasSwiftForceCastUsage,
   hasSwiftFontWeightBoldUsage,
@@ -20,6 +21,7 @@ import {
   hasSwiftForceTryUsage,
   hasSwiftForceUnwrap,
   hasSwiftGeometryReaderUsage,
+  hasSwiftInlineFilteringInForEachUsage,
   hasSwiftLegacyOnChangeUsage,
   hasSwiftLegacyExpectationDescriptionUsage,
   hasSwiftLegacySwiftUiObservableWrapperUsage,
@@ -243,7 +245,9 @@ MainActor.assumeIsolated { reload() }
   assert.equal(hasSwiftNonisolatedUnsafeUsage(source), true);
   assert.equal(hasSwiftAssumeIsolatedUsage(source), true);
   assert.equal(hasSwiftForEachIndicesUsage(source), true);
+  assert.equal(hasSwiftInlineFilteringInForEachUsage('ForEach(items.filter { $0.isActive }) { item in Text(item.title) }'), true);
   assert.equal(hasSwiftContainsUserFilterUsage(source), true);
+  assert.equal(hasSwiftExplicitColorStaticMemberUsage('Text("A").foregroundStyle(Color.blue)'), true);
   assert.equal(hasSwiftGeometryReaderUsage(source), true);
   assert.equal(hasSwiftFontWeightBoldUsage(source), true);
   assert.equal(hasSwiftObservableObjectUsage(source), true);
@@ -289,7 +293,9 @@ let t = "MainActor.assumeIsolated { reload() }"
   assert.equal(hasSwiftNonisolatedUnsafeUsage(source), false);
   assert.equal(hasSwiftAssumeIsolatedUsage(source), false);
   assert.equal(hasSwiftForEachIndicesUsage(source), false);
+  assert.equal(hasSwiftInlineFilteringInForEachUsage(source), false);
   assert.equal(hasSwiftContainsUserFilterUsage(source), false);
+  assert.equal(hasSwiftExplicitColorStaticMemberUsage('Text("A").foregroundStyle(.blue)'), false);
   assert.equal(hasSwiftGeometryReaderUsage(source), false);
   assert.equal(hasSwiftFontWeightBoldUsage(source), false);
   assert.equal(hasSwiftTaskDetachedUsage(source), false);
@@ -400,7 +406,7 @@ final class LoginModelTests: XCTestCase {
 }
 `;
 
-  assert.equal(hasSwiftLegacyXCTestImportUsage(unitTest), true);
+  assert.equal(hasSwiftLegacyXCTestImportUsage(unitTest), false);
   assert.equal(hasSwiftLegacyXCTestImportUsage(uiTest), false);
   assert.equal(hasSwiftLegacyXCTestImportUsage(performanceTest), false);
   assert.equal(hasSwiftLegacyXCTestImportUsage(brownfieldCompatibleUnitTest), false);
@@ -524,7 +530,7 @@ final class LoginModelTests: XCTestCase {
 }
 `;
 
-  assert.equal(hasSwiftModernizableXCTestSuiteUsage(legacySuite), true);
+  assert.equal(hasSwiftModernizableXCTestSuiteUsage(legacySuite), false);
   assert.equal(hasSwiftModernizableXCTestSuiteUsage(mixedSuite), false);
   assert.equal(hasSwiftModernizableXCTestSuiteUsage(uiSuite), false);
   assert.equal(hasSwiftModernizableXCTestSuiteUsage(brownfieldCompatibleSuite), false);
@@ -596,7 +602,7 @@ final class BuyerCommerceUISmokeTests: XCTestCase {
   assert.equal(hasSwiftXCTUnwrapUsage(`${uiSource}\nlet value = try XCTUnwrap(optional)`), false);
 });
 
-test('hasSwiftXCTestAssertionUsage excluye XCTest brownfield compatible y bloquea suites sin contrato de calidad', () => {
+test('detectores Swift Testing excluyen XCTest brownfield y dejan la calidad a su guard dedicado', () => {
   const compatibleSource = `
 import XCTest
 
@@ -633,7 +639,11 @@ final class LoginModelTests: XCTestCase {
 
   assert.equal(hasSwiftXCTestAssertionUsage(compatibleSource), false);
   assert.equal(hasSwiftXCTUnwrapUsage(compatibleSource), false);
-  assert.equal(hasSwiftXCTestAssertionUsage(missingQualityContract), true);
+  assert.equal(hasSwiftLegacyXCTestImportUsage(compatibleSource), false);
+  assert.equal(hasSwiftModernizableXCTestSuiteUsage(compatibleSource), false);
+  assert.equal(hasSwiftXCTestAssertionUsage(missingQualityContract), false);
+  assert.equal(hasSwiftLegacyXCTestImportUsage(missingQualityContract), false);
+  assert.equal(hasSwiftModernizableXCTestSuiteUsage(missingQualityContract), false);
 });
 
 test('hasSwiftXCTUnwrapUsage detecta XCTUnwrap real y evita strings', () => {

package/core/facts/detectors/text/ios.ts

@@ -479,6 +479,17 @@ export const hasSwiftForEachIndicesUsage = (source: string): boolean => {
   );
 };
 
+export const hasSwiftInlineFilteringInForEachUsage = (source: string): boolean => {
+  return hasSwiftSanitizedRegexMatch(
+    source,
+    /\bForEach\s*\(\s*[A-Za-z_][A-Za-z0-9_.]*\s*\.\s*filter\s*\{/g
+  );
+};
+
+export const hasSwiftExplicitColorStaticMemberUsage = (source: string): boolean => {
+  return hasSwiftSanitizedRegexMatch(source, /\bColor\s*\.\s*[a-z][A-Za-z0-9_]*\b/g);
+};
+
 const isUserSearchIdentifier = (value: string): boolean => {
   return /^(?:query|search(?:Text|Term|Query|Value)?|filter(?:Text|Value)?|text|term|input)$/i.test(
     value
@@ -756,6 +767,18 @@ const hasSwiftBrownfieldCompatibleXCTestUsage = (source: string): boolean => {
   return hasSwiftMakeSutUsage(source) && hasSwiftMemoryLeakTrackingUsage(source);
 };
 
+const hasSwiftXCTestOnlyBrownfieldSuiteUsage = (source: string): boolean => {
+  if (!hasSwiftXCTestImportUsage(source) || !hasSwiftXCTestCaseSubclassUsage(source)) {
+    return false;
+  }
+
+  if (hasSwiftLegacyXCTestUiOrPerformanceUsage(source)) {
+    return false;
+  }
+
+  return !hasSwiftTestingImportUsage(source) && !hasSwiftTestingSuiteAttributeUsage(source);
+};
+
 export const hasSwiftLegacyXCTestImportUsage = (source: string): boolean => {
   if (!hasSwiftXCTestImportUsage(source)) {
     return false;
@@ -765,7 +788,7 @@ export const hasSwiftLegacyXCTestImportUsage = (source: string): boolean => {
     return false;
   }
 
-  if (hasSwiftBrownfieldCompatibleXCTestUsage(source)) {
+  if (hasSwiftXCTestOnlyBrownfieldSuiteUsage(source)) {
     return false;
   }
 
@@ -801,7 +824,7 @@ export const hasSwiftXCTestAssertionUsage = (source: string): boolean => {
     return false;
   }
 
-  if (hasSwiftBrownfieldCompatibleXCTestUsage(source)) {
+  if (hasSwiftXCTestOnlyBrownfieldSuiteUsage(source)) {
     return false;
   }
 
@@ -816,7 +839,7 @@ export const hasSwiftXCTUnwrapUsage = (source: string): boolean => {
     return false;
   }
 
-  if (hasSwiftBrownfieldCompatibleXCTestUsage(source)) {
+  if (hasSwiftXCTestOnlyBrownfieldSuiteUsage(source)) {
     return false;
   }
 

package/core/rules/presets/heuristics/android.test.ts

@@ -3,7 +3,7 @@ import test from 'node:test';
 import { androidRules } from './android';
 
 test('androidRules define reglas heurísticas locked para plataforma android', () => {
-  assert.equal(androidRules.length, 76);
+  assert.equal(androidRules.length, 82);
 
   const ids = androidRules.map((rule) => rule.id);
   assert.deepEqual(ids, [
@@ -39,9 +39,15 @@ test('androidRules define reglas heurísticas locked para plataforma android', (
     'heuristics.android.single-source-of-truth-viewmodel-es-la-fuente.ast',
   'heuristics.android.skip-recomposition-para-metros-inmutables-o-estables.ast',
   'heuristics.android.stability-composables-estables-recomponen-menos.ast',
-  'heuristics.android.string-formatting-1-s-2-d-para-argumentos.ast',
+    'heuristics.android.string-formatting-1-s-2-d-para-argumentos.ast',
     'heuristics.android.binds-para-implementaciones-de-interfaces-ma-s-eficiente.ast',
     'heuristics.android.provides-para-interfaces-o-third-party.ast',
+    'heuristics.android.hilt-di-framework-no-manual-factories.ast',
+    'heuristics.android.hiltandroidapp-application-class.ast',
+    'heuristics.android.androidentrypoint-activity-fragment-viewmodel.ast',
+    'heuristics.android.inject-constructor-constructor-injection.ast',
+    'heuristics.android.module-installin-provide-dependencies.ast',
+    'heuristics.android.viewmodelscoped-para-dependencias-de-viewmodel.ast',
     'heuristics.android.workmanager-androidx-work-work-runtime-ktx.ast',
     'heuristics.android.version-catalogs-libs-versions-toml-para-dependencias.ast',
     'heuristics.android.workmanager-background-tasks.ast',
@@ -179,6 +185,30 @@ test('androidRules define reglas heurísticas locked para plataforma android', (
     byId.get('heuristics.android.provides-para-interfaces-o-third-party.ast')?.then.code,
     'HEURISTICS_ANDROID_PROVIDES_PARA_INTERFACES_O_THIRD_PARTY_AST'
   );
+  assert.equal(
+    byId.get('heuristics.android.hilt-di-framework-no-manual-factories.ast')?.then.code,
+    'HEURISTICS_ANDROID_HILT_DI_FRAMEWORK_NO_MANUAL_FACTORIES_AST'
+  );
+  assert.equal(
+    byId.get('heuristics.android.hiltandroidapp-application-class.ast')?.then.code,
+    'HEURISTICS_ANDROID_HILTANDROIDAPP_APPLICATION_CLASS_AST'
+  );
+  assert.equal(
+    byId.get('heuristics.android.androidentrypoint-activity-fragment-viewmodel.ast')?.then.code,
+    'HEURISTICS_ANDROID_ANDROIDENTRYPOINT_ACTIVITY_FRAGMENT_VIEWMODEL_AST'
+  );
+  assert.equal(
+    byId.get('heuristics.android.inject-constructor-constructor-injection.ast')?.then.code,
+    'HEURISTICS_ANDROID_INJECT_CONSTRUCTOR_CONSTRUCTOR_INJECTION_AST'
+  );
+  assert.equal(
+    byId.get('heuristics.android.module-installin-provide-dependencies.ast')?.then.code,
+    'HEURISTICS_ANDROID_MODULE_INSTALLIN_PROVIDE_DEPENDENCIES_AST'
+  );
+  assert.equal(
+    byId.get('heuristics.android.viewmodelscoped-para-dependencias-de-viewmodel.ast')?.then.code,
+    'HEURISTICS_ANDROID_VIEWMODELSCOPED_PARA_DEPENDENCIAS_DE_VIEWMODEL_AST'
+  );
   assert.equal(
     byId.get('heuristics.android.workmanager-androidx-work-work-runtime-ktx.ast')?.then.code,
     'HEURISTICS_ANDROID_WORKMANAGER_ANDROIDX_WORK_WORK_RUNTIME_KTX_AST'

package/core/rules/presets/heuristics/android.ts

@@ -663,6 +663,116 @@ export const androidRules: RuleSet = [
       code: 'HEURISTICS_ANDROID_PROVIDES_PARA_INTERFACES_O_THIRD_PARTY_AST',
     },
   },
+  {
+    id: 'heuristics.android.hilt-di-framework-no-manual-factories.ast',
+    description: 'Detects Hilt DI framework usage in Android production Kotlin files.',
+    severity: 'WARN',
+    platform: 'android',
+    locked: true,
+    when: {
+      kind: 'Heuristic',
+      where: {
+        ruleId: 'heuristics.android.hilt-di-framework-no-manual-factories.ast',
+      },
+    },
+    then: {
+      kind: 'Finding',
+      message:
+        'AST heuristic detected Hilt DI framework usage instead of manual factories in Android production code.',
+      code: 'HEURISTICS_ANDROID_HILT_DI_FRAMEWORK_NO_MANUAL_FACTORIES_AST',
+    },
+  },
+  {
+    id: 'heuristics.android.hiltandroidapp-application-class.ast',
+    description: 'Detects @HiltAndroidApp usage in Android production Kotlin files.',
+    severity: 'WARN',
+    platform: 'android',
+    locked: true,
+    when: {
+      kind: 'Heuristic',
+      where: {
+        ruleId: 'heuristics.android.hiltandroidapp-application-class.ast',
+      },
+    },
+    then: {
+      kind: 'Finding',
+      message: 'AST heuristic detected @HiltAndroidApp usage in Android production code.',
+      code: 'HEURISTICS_ANDROID_HILTANDROIDAPP_APPLICATION_CLASS_AST',
+    },
+  },
+  {
+    id: 'heuristics.android.androidentrypoint-activity-fragment-viewmodel.ast',
+    description: 'Detects @AndroidEntryPoint usage in Android production Kotlin files.',
+    severity: 'WARN',
+    platform: 'android',
+    locked: true,
+    when: {
+      kind: 'Heuristic',
+      where: {
+        ruleId: 'heuristics.android.androidentrypoint-activity-fragment-viewmodel.ast',
+      },
+    },
+    then: {
+      kind: 'Finding',
+      message:
+        'AST heuristic detected @AndroidEntryPoint usage in Android production code where Activity, Fragment, and ViewModel injection boundaries should remain explicit.',
+      code: 'HEURISTICS_ANDROID_ANDROIDENTRYPOINT_ACTIVITY_FRAGMENT_VIEWMODEL_AST',
+    },
+  },
+  {
+    id: 'heuristics.android.inject-constructor-constructor-injection.ast',
+    description: 'Detects @Inject constructor usage in Android production Kotlin files.',
+    severity: 'WARN',
+    platform: 'android',
+    locked: true,
+    when: {
+      kind: 'Heuristic',
+      where: {
+        ruleId: 'heuristics.android.inject-constructor-constructor-injection.ast',
+      },
+    },
+    then: {
+      kind: 'Finding',
+      message: 'AST heuristic detected @Inject constructor usage in Android production code.',
+      code: 'HEURISTICS_ANDROID_INJECT_CONSTRUCTOR_CONSTRUCTOR_INJECTION_AST',
+    },
+  },
+  {
+    id: 'heuristics.android.module-installin-provide-dependencies.ast',
+    description: 'Detects @Module + @InstallIn usage in Android production Kotlin files.',
+    severity: 'WARN',
+    platform: 'android',
+    locked: true,
+    when: {
+      kind: 'Heuristic',
+      where: {
+        ruleId: 'heuristics.android.module-installin-provide-dependencies.ast',
+      },
+    },
+    then: {
+      kind: 'Finding',
+      message: 'AST heuristic detected @Module + @InstallIn usage in Android production code.',
+      code: 'HEURISTICS_ANDROID_MODULE_INSTALLIN_PROVIDE_DEPENDENCIES_AST',
+    },
+  },
+  {
+    id: 'heuristics.android.viewmodelscoped-para-dependencias-de-viewmodel.ast',
+    description: 'Detects @ViewModelScoped usage in Android production Kotlin files.',
+    severity: 'WARN',
+    platform: 'android',
+    locked: true,
+    when: {
+      kind: 'Heuristic',
+      where: {
+        ruleId: 'heuristics.android.viewmodelscoped-para-dependencias-de-viewmodel.ast',
+      },
+    },
+    then: {
+      kind: 'Finding',
+      message: 'AST heuristic detected @ViewModelScoped usage in Android production code.',
+      code: 'HEURISTICS_ANDROID_VIEWMODELSCOPED_PARA_DEPENDENCIAS_DE_VIEWMODEL_AST',
+    },
+  },
   {
     id: 'heuristics.android.workmanager-androidx-work-work-runtime-ktx.ast',
     description: 'Detects WorkManager dependency usage in Android build files.',

package/integrations/lifecycle/preWriteAutomation.ts

@@ -116,7 +116,7 @@ export const buildPreWriteAutomationTrace = async (params: {
           warnOnOrAbove: 'INFO',
         },
         scope: {
-          kind: 'workingTree',
+          kind: 'staged',
         },
         auditMode: 'gate',
         dependencies: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.152",
+  "version": "6.3.154",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {

package/skills.lock.json

@@ -1,7 +1,7 @@
 {
   "version": "1.0",
   "compilerVersion": "1.0.0",
-  "generatedAt": "2026-05-03T20:19:41.600Z",
+  "generatedAt": "2026-05-05T20:36:04.017Z",
   "bundles": [
     {
       "name": "android-guidelines",
@@ -5298,7 +5298,7 @@
       "name": "ios-guidelines",
       "version": "1.0.0",
       "source": "file:vendor/skills/ios-enterprise-rules/SKILL.md",
-      "hash": "630af341b60b0303348b072f594200e52dc29ca1df3687fc1ed077ec9635b8d4",
+      "hash": "3c15fbec440154ff12f4ca998166a3faed9d943831bf34e8c80969bbcd0f94e5",
       "rules": [
         {
           "id": "skills.ios.guideline.ios.accessibility-identifiers-para-localizar-elementos",
@@ -5384,18 +5384,6 @@
           "evaluationMode": "DECLARATIVE",
           "origin": "core"
         },
-        {
-          "id": "skills.ios.guideline.ios.apiendpoint-como-struct-data-driven-ocp-endpoints-en-features-no-enum-",
-          "description": "APIEndpoint como struct data-driven - OCP: endpoints en features, no enum central",
-          "severity": "WARN",
-          "platform": "ios",
-          "sourceSkill": "ios-guidelines",
-          "sourcePath": "vendor/skills/ios-enterprise-rules/SKILL.md",
-          "confidence": "MEDIUM",
-          "locked": true,
-          "evaluationMode": "DECLARATIVE",
-          "origin": "core"
-        },
         {
           "id": "skills.ios.guideline.ios.app-transport-security-ats-https-por-defecto",
           "description": "App Transport Security (ATS) - HTTPS por defecto",
@@ -7761,18 +7749,6 @@
           "evaluationMode": "DECLARATIVE",
           "origin": "core"
         },
-        {
-          "id": "skills.ios.guideline.ios.verificar-que-no-viole-solid-srp-ocp-lsp-isp-dip",
-          "description": "Verificar que NO viole SOLID (SRP, OCP, LSP, ISP, DIP)",
-          "severity": "WARN",
-          "platform": "ios",
-          "sourceSkill": "ios-guidelines",
-          "sourcePath": "vendor/skills/ios-enterprise-rules/SKILL.md",
-          "confidence": "MEDIUM",
-          "locked": true,
-          "evaluationMode": "DECLARATIVE",
-          "origin": "core"
-        },
         {
           "id": "skills.ios.guideline.ios.viewmodels-por-pantalla-orderslistviewmodel-orderdetailviewmodel",
           "description": "ViewModels por pantalla - OrdersListViewModel, OrderDetailViewModel",
@@ -8098,6 +8074,19 @@
           "evaluationMode": "AUTO",
           "origin": "core"
         },
+        {
+          "id": "skills.ios.no-solid-violations",
+          "description": "Verificar que NO viole SOLID (SRP, OCP, LSP, ISP, DIP)",
+          "severity": "WARN",
+          "platform": "ios",
+          "sourceSkill": "ios-guidelines",
+          "sourcePath": "vendor/skills/ios-enterprise-rules/SKILL.md",
+          "stage": "PRE_WRITE",
+          "confidence": "MEDIUM",
+          "locked": true,
+          "evaluationMode": "AUTO",
+          "origin": "core"
+        },
         {
           "id": "skills.ios.no-string-format",
           "description": "String(localized:) + Text format en lugar de String(format:)",