Lean Detector Pack: External Calls, Delegatecall, Array Growth, and Access Guards

[nottherealalanturing]

Summary

This PR delivers the minimal detector set for the four assigned issues by extending the existing RulesService path used by the API scanner.

Added lightweight rules

• repeated-external-calls
• unsafe-delegatecall
• large-storage-arrays
• missing-access-modifiers

Implementation approach

• Kept scope to a single file: apps/api-service/src/rules/rules.service.ts
• Registered rules in the in-memory rule catalog
• Added straightforward heuristic checks in runRule dispatch
• Preserved current architecture and existing rule behavior

Notes

• This is intentionally minimal and heuristic-based to satisfy immediate detection coverage with low code churn.

Closes #295
Closes #296
Closes #297
Closes #298

[drips-wave]

@nottherealalanturing Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits