pumuki 6.3.293 → 6.3.295

package/integrations/config/skillsDetectorRegistry.ts

@@ -175,6 +175,14 @@ const registryByRuleId: Record<string, SkillsDetectorBinding> = {
     'ios.error.empty-catch',
     ['heuristics.ios.error.empty-catch.ast']
   ),
+  'skills.ios.guideline.ios.error-handling-custom-networkerror-enum': heuristicDetector(
+    'ios.error.typed-error-enum',
+    ['heuristics.ios.error.nserror-throw.ast']
+  ),
+  'skills.ios.guideline.ios.error-handling-global-custom-error-enum': heuristicDetector(
+    'ios.error.typed-error-enum',
+    ['heuristics.ios.error.nserror-throw.ast']
+  ),
   'skills.ios.guideline.ios.no-loggear-pii-tokens-emails-ids-sensibles': heuristicDetector(
     'ios.logging.sensitive-data',
     ['heuristics.ios.logging.sensitive-data.ast']
@@ -364,6 +372,10 @@ const registryByRuleId: Record<string, SkillsDetectorBinding> = {
     heuristicDetector('ios.swiftui.environment-system-values-no-swinject', [
       'heuristics.ios.architecture.swinject.ast',
     ]),
+  'skills.ios.guideline.ios.dependencies-en-package-swift-versiones-especi-ficas':
+    heuristicDetector('ios.dependencies.swiftpm-branch-dependency', [
+      'heuristics.ios.dependencies.swiftpm-branch-dependency.ast',
+    ]),
   'skills.ios.no-unchecked-sendable': heuristicDetector('ios.unchecked-sendable', [
     'heuristics.ios.unchecked-sendable.ast',
   ]),
@@ -397,6 +409,8 @@ const registryByRuleId: Record<string, SkillsDetectorBinding> = {
   'skills.ios.no-assume-isolated': heuristicDetector('ios.assume-isolated', [
     'heuristics.ios.assume-isolated.ast',
   ]),
+  'skills.ios.guideline.ios.no-usar-mainactor-como-parche-justificar-el-aislamiento':
+    heuristicDetector('ios.assume-isolated', ['heuristics.ios.assume-isolated.ast']),
   'skills.ios.no-observable-object': heuristicDetector('ios.observable-object', [
     'heuristics.ios.observable-object.ast',
   ]),
@@ -781,6 +795,38 @@ const registryByRuleId: Record<string, SkillsDetectorBinding> = {
     heuristicDetector('typescript.backend.persistence-mutation-without-audit-event', [
       'heuristics.ts.backend.persistence-mutation-without-audit-event.ast',
     ]),
+  'skills.backend.guideline.backend.event-handlers-onevent-order-created': heuristicDetector(
+    'typescript.backend.event-handler-without-on-event',
+    ['heuristics.ts.backend.event-handler-without-on-event.ast']
+  ),
+  'skills.backend.guideline.backend.no-cachear-datos-sensibles-o-cifrar-antes-de-cachear':
+    heuristicDetector('typescript.backend.sensitive-cache-write', [
+      'heuristics.ts.backend.sensitive-cache-write.ast',
+    ]),
+  'skills.backend.guideline.backend.refresh-tokens-no-solo-access-tokens':
+    heuristicDetector('typescript.backend.auth-response-without-refresh-token', [
+      'heuristics.ts.backend.auth-response-without-refresh-token.ast',
+    ]),
+  'skills.backend.guideline.backend.no-defaults-en-produccio-n-fallar-si-falta-config-cri-tica':
+    heuristicDetector('typescript.backend.process-env-default-fallback', [
+      'heuristics.ts.backend.process-env-default-fallback.ast',
+    ]),
+  'skills.backend.guideline.backend.correlation-ids-para-tracing-distribuido':
+    heuristicDetector('typescript.backend.log-without-context', [
+      'heuristics.ts.backend.log-without-context.ast',
+    ]),
+  'skills.backend.guideline.backend.nestjs-config-configmodule-para-variables-de-entorno':
+    heuristicDetector('typescript.backend.direct-process-env-read', [
+      'heuristics.ts.backend.direct-process-env-read.ast',
+    ]),
+  'skills.backend.guideline.backend.validation-de-config-joi-o-class-validator-para-env':
+    heuristicDetector('typescript.backend.config-module-without-validation', [
+      'heuristics.ts.backend.config-module-without-validation.ast',
+    ]),
+  'skills.backend.guideline.backend.compression-gzip-para-responses-grandes':
+    heuristicDetector('typescript.backend.missing-compression-middleware', [
+      'heuristics.ts.backend.missing-compression-middleware.ast',
+    ]),
   'skills.backend.guideline.backend.soft-deletes-deletedat-en-lugar-de-delete-fi-sico':
     heuristicDetector('typescript.backend.hard-delete-without-soft-delete', [
       'heuristics.ts.backend.hard-delete-without-soft-delete.ast',
@@ -809,10 +855,26 @@ const registryByRuleId: Record<string, SkillsDetectorBinding> = {
     heuristicDetector('typescript.backend.dto-property-without-validation', [
       'heuristics.ts.backend.dto-property-without-validation.ast',
     ]),
+  'skills.backend.guideline.backend.swagger-nestjs-swagger-decoradores-apiproperty':
+    heuristicDetector('typescript.backend.dto-property-without-api-property', [
+      'heuristics.ts.backend.dto-property-without-api-property.ast',
+    ]),
   'skills.backend.guideline.backend.nested-validation-validatenested-type':
     heuristicDetector('typescript.backend.dto-nested-property-without-nested-validation', [
       'heuristics.ts.backend.dto-nested-property-without-nested-validation.ast',
     ]),
+  'skills.backend.guideline.backend.pipes-para-validacio-n-global-validationpipe-en-main-ts':
+    heuristicDetector('typescript.backend.missing-global-validation-pipe', [
+      'heuristics.ts.backend.missing-global-validation-pipe.ast',
+    ]),
+  'skills.backend.guideline.backend.validationpipe-global-en-main-ts-con-whitelist-true':
+    heuristicDetector('typescript.backend.missing-global-validation-pipe', [
+      'heuristics.ts.backend.missing-global-validation-pipe.ast',
+    ]),
+  'skills.backend.guideline.backend.helmet-security-headers':
+    heuristicDetector('typescript.backend.missing-helmet-security-headers', [
+      'heuristics.ts.backend.missing-helmet-security-headers.ast',
+    ]),
   'skills.backend.guideline.backend.guards-en-todas-las-rutas-protegidas-useguards-jwtauthguard':
     heuristicDetector('typescript.backend.controller-route-without-guard', [
       'heuristics.ts.backend.controller-route-without-guard.ast',
@@ -821,6 +883,18 @@ const registryByRuleId: Record<string, SkillsDetectorBinding> = {
     heuristicDetector('typescript.backend.controller-route-without-guard', [
       'heuristics.ts.backend.controller-route-without-guard.ast',
     ]),
+  'skills.backend.guideline.backend.role-based-access-control-roles-admin-user':
+    heuristicDetector('typescript.backend.controller-route-without-roles', [
+      'heuristics.ts.backend.controller-route-without-roles.ast',
+    ]),
+  'skills.backend.guideline.backend.rate-limiting-nestjs-throttler-para-prevenir-brute-force':
+    heuristicDetector('typescript.backend.auth-route-without-throttle', [
+      'heuristics.ts.backend.auth-route-without-throttle.ast',
+    ]),
+  'skills.backend.guideline.backend.rate-limiting-throttler-para-prevenir-abuse':
+    heuristicDetector('typescript.backend.auth-route-without-throttle', [
+      'heuristics.ts.backend.auth-route-without-throttle.ast',
+    ]),
   'skills.backend.guideline.backend.callback-hell-usar-async-await': heuristicDetector(
     'typescript.callback-hell',
     ['heuristics.ts.callback-hell.ast']
@@ -898,6 +972,22 @@ const registryByRuleId: Record<string, SkillsDetectorBinding> = {
     heuristicDetector('typescript.backend.controller-entity-response', [
       'heuristics.ts.backend.controller-entity-response.ast',
     ]),
+  'skills.backend.guideline.backend.controllers-delgados-solo-routing-y-validacio-n-lo-gica-en-servicios':
+    heuristicDetector('typescript.backend.controller-business-logic', [
+      'heuristics.ts.backend.controller-business-logic.ast',
+    ]),
+  'skills.backend.guideline.backend.lo-gica-en-controllers-mover-a-servicios-use-cases':
+    heuristicDetector('typescript.backend.controller-business-logic', [
+      'heuristics.ts.backend.controller-business-logic.ast',
+    ]),
+  'skills.backend.guideline.backend.no-lo-gica-de-negocio-en-repositorios-solo-crud-y-queries':
+    heuristicDetector('typescript.backend.repository-business-logic', [
+      'heuristics.ts.backend.repository-business-logic.ast',
+    ]),
+  'skills.backend.guideline.backend.repositories-para-datos-abstraer-acceso-a-bd-con-interfaces':
+    heuristicDetector('typescript.backend.repository-business-logic', [
+      'heuristics.ts.backend.repository-business-logic.ast',
+    ]),
   'skills.backend.guideline.backend.anemic-domain-models-entidades-solo-con-getters-setters':
     heuristicDetector('typescript.backend.anemic-domain-model', [
       'heuristics.ts.backend.anemic-domain-model.ast',

package/integrations/git/runPlatformGate.ts

@@ -196,6 +196,29 @@ const isFindingOutsideChangedLines = (
   return findingLines.every((line) => !changedLines.has(line));
 };
 
+const BROAD_BROWNFIELD_FINDING_LINES_THRESHOLD = 20;
+
+const isBroadFileLevelFinding = (finding: Finding): boolean => {
+  const findingLines = normalizeFindingLines(finding.lines);
+  if (findingLines.length <= BROAD_BROWNFIELD_FINDING_LINES_THRESHOLD) {
+    return false;
+  }
+  const hasPreciseNode =
+    typeof finding.primary_node !== 'undefined' || (finding.related_nodes?.length ?? 0) > 0;
+  return !hasPreciseNode;
+};
+
+const isFindingTooBroadForStagedDiffBlock = (
+  finding: Finding,
+  changedLinesByPath: ReadonlyMap<string, ReadonlySet<number>>
+): boolean => {
+  if (!finding.filePath || !isBroadFileLevelFinding(finding)) {
+    return false;
+  }
+  const changedLines = changedLinesByPath.get(toNormalizedPath(finding.filePath));
+  return typeof changedLines !== 'undefined' && changedLines.size > 0;
+};
+
 const normalizeScopedRuleEngineFindings = (params: {
   findings: ReadonlyArray<Finding>;
   scope: GateScope;
@@ -210,7 +233,18 @@ const normalizeScopedRuleEngineFindings = (params: {
   }
 
   return params.findings.map((finding) => {
-    if (!isAstRuleFinding(finding) || !isFindingOutsideChangedLines(finding, params.changedLinesByPath)) {
+    if (!isAstRuleFinding(finding)) {
+      return finding;
+    }
+    const outsideChangedLines = isFindingOutsideChangedLines(
+      finding,
+      params.changedLinesByPath
+    );
+    const tooBroadForDiffBlock = isFindingTooBroadForStagedDiffBlock(
+      finding,
+      params.changedLinesByPath
+    );
+    if (!outsideChangedLines && !tooBroadForDiffBlock) {
       return finding;
     }
     return {
@@ -219,10 +253,14 @@ const normalizeScopedRuleEngineFindings = (params: {
       severity: 'INFO',
       message:
         `${finding.message} ` +
-        'Baseline brownfield outside the staged diff; tracked as advisory for this atomic slice.',
+        (tooBroadForDiffBlock
+          ? 'Finding is file-level/broad and cannot prove the violation was introduced by the staged diff; tracked as advisory for this atomic slice.'
+          : 'Baseline brownfield outside the staged diff; tracked as advisory for this atomic slice.'),
       expected_fix:
         finding.expected_fix ??
-        'Plan a dedicated brownfield remediation slice for this pre-existing finding.',
+        (tooBroadForDiffBlock
+          ? 'Emit a precise AST/nodal finding with line-level evidence for the changed node, or plan a dedicated brownfield remediation slice for this file-level debt.'
+          : 'Plan a dedicated brownfield remediation slice for this pre-existing finding.'),
     };
   });
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pumuki",
-  "version": "6.3.293",
+  "version": "6.3.295",
   "description": "Enterprise-grade AST Intelligence System with multi-platform support (iOS, Android, Backend, Frontend) and Feature-First + DDD + Clean Architecture enforcement. Includes dynamic violations API for intelligent querying.",
   "main": "index.js",
   "bin": {