@mocoto/mahoraga 0.14.0

package/dist/analysts/jenkins/detectors/detector-jenkins-security.js

@@ -0,0 +1,164 @@
+import { criarOcorrencia } from '../../../types/index.js';
+function detectarSandboxDesabilitado(src) {
+    if (/useSandbox\s*{/i.test(src) && !/@NonCPS|@groovy\.transform/i.test(src)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-without-sandbox',
+            nivel: 'erro',
+            mensagem: 'Pipeline sem sandbox Groovy',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Ative o sandbox para pipelines não confiáveis'
+        });
+    }
+    return null;
+}
+function detectarPasswordParam(src) {
+    const paramPattern = /parameters\s*\{[^}]*password\s*\(/i;
+    const maskPattern = /parameters\s*\{[^}]*secret\s*\(/i;
+    if (paramPattern.test(src) && !maskPattern.test(src)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-password-param-exposed',
+            nivel: 'aviso',
+            mensagem: 'Parâmetro de senha sem mascaramento',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Marque parâmetros de senha como secret'
+        });
+    }
+    return null;
+}
+function detectarCredentialBinding(src) {
+    const bindPattern = /withCredentials\(\[[^\]]*\]\)/i;
+    const maskHints = /masked|hide|\${\s*[^}]+secret/i;
+    if (bindPattern.test(src) && !maskHints.test(src)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-credential-binding-exposed',
+            nivel: 'aviso',
+            mensagem: 'Credencial vinculada sem mascaramento',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Maske os bindings de credenciais'
+        });
+    }
+    return null;
+}
+function detectarShEval(src) {
+    const shPattern = /\b(sh|bat)\s+['"][^'"]*\$\{?PARAM/i;
+    const scmPattern = /\b(sh|bat)\s+['"][^'"]*\$\{?(?:env\.)?(?:BRANCH|TAG|CHANGE|PR)_/i;
+    if (shPattern.test(src) || scmPattern.test(src)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-dangerous-sh-eval',
+            nivel: 'erro',
+            mensagem: 'Uso de sh/bat com entrada não verificada',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Use comandos parametrizados seguros'
+        });
+    }
+    return null;
+}
+function detectarAgentIsolation(src) {
+    if (/agent\s+\{/i.test(src)) {
+        const hasContainer = /container\s*\{/i.test(src);
+        const hasPodTemplate = /podTemplate\s*\(/i.test(src);
+        if (!hasContainer && !hasPodTemplate) {
+            return criarOcorrencia({
+                tipo: 'jenkins-missing-agent-isolation',
+                nivel: 'info',
+                mensagem: 'Agente sem isolamento container/podTemplate',
+                relPath: '',
+                linha: 1,
+                sugestao: 'Use containers para builds isolados'
+            });
+        }
+    }
+    return null;
+}
+function detectarSharedLibraryPinning(src) {
+    const libPattern = /library\s+['"][^'"]+['"]\s*$/im;
+    const pinnedPattern = /library\s+['"][^'"]+@[a-f0-9]{7,40}['"]/i;
+    if (libPattern.test(src) && !pinnedPattern.test(src)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-shared-library-unpinned',
+            nivel: 'aviso',
+            mensagem: 'Biblioteca compartilhada sem versão fixa',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Fixe versões de bibliotecas compartilhadas'
+        });
+    }
+    return null;
+}
+export const detectorJenkinsSecurity = {
+    nome: 'detector-jenkins-security',
+    categoria: 'seguranca',
+    descricao: 'Detecta vulnerabilidades em Jenkinsfiles',
+    test: (relPath) => relPath.toLowerCase().includes('jenkinsfile'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        if (/\bsh\s+['"].*sudo\b/i.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'jenkins-dangerous-sudo',
+                nivel: 'erro',
+                mensagem: 'Uso de sudo em comandos shell detectado',
+                relPath,
+                linha: 1,
+                sugestao: 'Configure permissões no Jenkins Agent ou use Docker containers para evitar necessidade de sudo'
+            }));
+        }
+        if (/image\s*['"]?.*:latest['"]?/i.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'jenkins-docker-latest',
+                nivel: 'aviso',
+                mensagem: 'Uso de imagem :latest em agente Docker',
+                relPath,
+                linha: 1,
+                sugestao: 'Use uma tag de versão fixa para garantir reprodutibilidade do build'
+            }));
+        }
+        if (/\b(password|token|secret)\s*=\s*['"][^$({][^'"]{5,}['"]/i.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'jenkins-hardcoded-secrets',
+                nivel: 'erro',
+                mensagem: 'Potencial segredo hardcoded detectado',
+                relPath,
+                linha: 1,
+                sugestao: 'Use a função credentials(\'ID\') do Jenkins para injetar segredos com segurança'
+            }));
+        }
+        const sandboxIssue = detectarSandboxDesabilitado(src);
+        if (sandboxIssue) {
+            sandboxIssue.relPath = relPath;
+            ocorrencias.push(sandboxIssue);
+        }
+        const passwordIssue = detectarPasswordParam(src);
+        if (passwordIssue) {
+            passwordIssue.relPath = relPath;
+            ocorrencias.push(passwordIssue);
+        }
+        const credIssue = detectarCredentialBinding(src);
+        if (credIssue) {
+            credIssue.relPath = relPath;
+            ocorrencias.push(credIssue);
+        }
+        const shIssue = detectarShEval(src);
+        if (shIssue) {
+            shIssue.relPath = relPath;
+            ocorrencias.push(shIssue);
+        }
+        const isolationIssue = detectarAgentIsolation(src);
+        if (isolationIssue) {
+            isolationIssue.relPath = relPath;
+            ocorrencias.push(isolationIssue);
+        }
+        const libIssue = detectarSharedLibraryPinning(src);
+        if (libIssue) {
+            libIssue.relPath = relPath;
+            ocorrencias.push(libIssue);
+        }
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-jenkins-security.js.map

package/dist/analysts/jenkins/detectors/detector-jenkins-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-jenkins-security.js","sourceRoot":"","sources":["../../../../src/analysts/jenkins/detectors/detector-jenkins-security.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAKpC,SAAS,2BAA2B,CAAC,GAAW;IAC9C,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,6BAA6B;YACvC,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,+CAA+C;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,YAAY,GAAG,oCAAoC,CAAC;IAC1D,MAAM,WAAW,GAAG,kCAAkC,CAAC;IACvD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,gCAAgC;YACtC,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,qCAAqC;YAC/C,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,wCAAwC;SACnD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,yBAAyB,CAAC,GAAW;IAC5C,MAAM,WAAW,GAAG,gCAAgC,CAAC;IACrD,MAAM,SAAS,GAAG,gCAAgC,CAAC;IACnD,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,oCAAoC;YAC1C,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,uCAAuC;YACjD,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,kCAAkC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,SAAS,GAAG,oCAAoC,CAAC;IACvD,MAAM,UAAU,GAAG,kEAAkE,CAAC;IACtF,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,2BAA2B;YACjC,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,0CAA0C;YACpD,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,qCAAqC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,sBAAsB,CAAC,GAAW;IACzC,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc,EAAE,CAAC;YACrC,OAAO,eAAe,CAAC;gBACrB,IAAI,EAAE,iCAAiC;gBACvC,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,6CAA6C;gBACvD,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,qCAAqC;aAChD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,4BAA4B,CAAC,GAAW;IAC/C,MAAM,UAAU,GAAG,gCAAgC,CAAC;IACpD,MAAM,aAAa,GAAG,0CAA0C,CAAC;IACjE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,iCAAiC;YACvC,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,0CAA0C;YACpD,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,4CAA4C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAa;IAC/C,IAAI,EAAE,2BAA2B;IACjC,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,0CAA0C;IACrD,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACxE,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QAGrC,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,yCAAyC;gBACnD,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,gGAAgG;aAC3G,CAAC,CAAC,CAAC;QACN,CAAC;QAGD,IAAI,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,wCAAwC;gBAClD,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,qEAAqE;aAChF,CAAC,CAAC,CAAC;QACN,CAAC;QAGD,IAAI,0DAA0D,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxE,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,2BAA2B;gBACjC,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,uCAAuC;gBACjD,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,iFAAiF;aAC5F,CAAC,CAAC,CAAC;QACP,CAAC;QAGD,MAAM,YAAY,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,YAAY,EAAE,CAAC;YACjB,YAAY,CAAC,OAAO,GAAG,OAAO,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjC,CAAC;QAGD,MAAM,aAAa,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,aAAa,EAAE,CAAC;YAClB,aAAa,CAAC,OAAO,GAAG,OAAO,CAAC;YAChC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClC,CAAC;QAGD,MAAM,SAAS,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;YAC5B,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QAGD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;YAC1B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAGD,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,cAAc,EAAE,CAAC;YACnB,cAAc,CAAC,OAAO,GAAG,OAAO,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnC,CAAC;QAGD,MAAM,QAAQ,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;YAC3B,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Detector de Segurança para Jenkinsfiles\n */\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\n/**\n * Detecta se o pipeline desabilita a sandbox Groovy.\n */\nfunction detectarSandboxDesabilitado(src: string): Ocorrencia | null {\n  if (/useSandbox\\s*{/i.test(src) && !/@NonCPS|@groovy\\.transform/i.test(src)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-without-sandbox',\n      nivel: 'erro',\n      mensagem: 'Pipeline sem sandbox Groovy',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Ative o sandbox para pipelines não confiáveis'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta parâmetros de senha sem mascaramento.\n */\nfunction detectarPasswordParam(src: string): Ocorrencia | null {\n  const paramPattern = /parameters\\s*\\{[^}]*password\\s*\\(/i;\n  const maskPattern = /parameters\\s*\\{[^}]*secret\\s*\\(/i;\n  if (paramPattern.test(src) && !maskPattern.test(src)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-password-param-exposed',\n      nivel: 'aviso',\n      mensagem: 'Parâmetro de senha sem mascaramento',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Marque parâmetros de senha como secret'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta bindings de credenciais sem mascaramento.\n */\nfunction detectarCredentialBinding(src: string): Ocorrencia | null {\n  const bindPattern = /withCredentials\\(\\[[^\\]]*\\]\\)/i;\n  const maskHints = /masked|hide|\\${\\s*[^}]+secret/i;\n  if (bindPattern.test(src) && !maskHints.test(src)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-credential-binding-exposed',\n      nivel: 'aviso',\n      mensagem: 'Credencial vinculada sem mascaramento',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Maske os bindings de credenciais'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta sh/bat com input de usuário não verificado.\n */\nfunction detectarShEval(src: string): Ocorrencia | null {\n  const shPattern = /\\b(sh|bat)\\s+['\"][^'\"]*\\$\\{?PARAM/i;\n  const scmPattern = /\\b(sh|bat)\\s+['\"][^'\"]*\\$\\{?(?:env\\.)?(?:BRANCH|TAG|CHANGE|PR)_/i;\n  if (shPattern.test(src) || scmPattern.test(src)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-dangerous-sh-eval',\n      nivel: 'erro',\n      mensagem: 'Uso de sh/bat com entrada não verificada',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Use comandos parametrizados seguros'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta agente sem isolamento container/podTemplate.\n */\nfunction detectarAgentIsolation(src: string): Ocorrencia | null {\n  if (/agent\\s+\\{/i.test(src)) {\n    const hasContainer = /container\\s*\\{/i.test(src);\n    const hasPodTemplate = /podTemplate\\s*\\(/i.test(src);\n    if (!hasContainer && !hasPodTemplate) {\n      return criarOcorrencia({\n        tipo: 'jenkins-missing-agent-isolation',\n        nivel: 'info',\n        mensagem: 'Agente sem isolamento container/podTemplate',\n        relPath: '',\n        linha: 1,\n        sugestao: 'Use containers para builds isolados'\n      });\n    }\n  }\n  return null;\n}\n\n/**\n * Detecta shared library sem version pinning.\n */\nfunction detectarSharedLibraryPinning(src: string): Ocorrencia | null {\n  const libPattern = /library\\s+['\"][^'\"]+['\"]\\s*$/im;\n  const pinnedPattern = /library\\s+['\"][^'\"]+@[a-f0-9]{7,40}['\"]/i;\n  if (libPattern.test(src) && !pinnedPattern.test(src)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-shared-library-unpinned',\n      nivel: 'aviso',\n      mensagem: 'Biblioteca compartilhada sem versão fixa',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Fixe versões de bibliotecas compartilhadas'\n    });\n  }\n  return null;\n}\n\nexport const detectorJenkinsSecurity: Analista = {\n  nome: 'detector-jenkins-security',\n  categoria: 'seguranca',\n  descricao: 'Detecta vulnerabilidades em Jenkinsfiles',\n  test: (relPath: string) => relPath.toLowerCase().includes('jenkinsfile'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n\n    // 1. Uso de sudo\n    if (/\\bsh\\s+['\"].*sudo\\b/i.test(src)) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'jenkins-dangerous-sudo',\n        nivel: 'erro',\n        mensagem: 'Uso de sudo em comandos shell detectado',\n        relPath,\n        linha: 1,\n        sugestao: 'Configure permissões no Jenkins Agent ou use Docker containers para evitar necessidade de sudo'\n      }));\n    }\n\n    // 2. Docker latest\n    if (/image\\s*['\"]?.*:latest['\"]?/i.test(src)) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'jenkins-docker-latest',\n        nivel: 'aviso',\n        mensagem: 'Uso de imagem :latest em agente Docker',\n        relPath,\n        linha: 1,\n        sugestao: 'Use uma tag de versão fixa para garantir reprodutibilidade do build'\n      }));\n    }\n\n    // 3. Credenciais Hardcoded\n    if (/\\b(password|token|secret)\\s*=\\s*['\"][^$({][^'\"]{5,}['\"]/i.test(src)) {\n       ocorrencias.push(criarOcorrencia({\n         tipo: 'jenkins-hardcoded-secrets',\n         nivel: 'erro',\n         mensagem: 'Potencial segredo hardcoded detectado',\n         relPath,\n         linha: 1,\n         sugestao: 'Use a função credentials(\\'ID\\') do Jenkins para injetar segredos com segurança'\n       }));\n    }\n\n    // 4. Groovy sandbox detection\n    const sandboxIssue = detectarSandboxDesabilitado(src);\n    if (sandboxIssue) {\n      sandboxIssue.relPath = relPath;\n      ocorrencias.push(sandboxIssue);\n    }\n\n    // 5. Password parameter masking\n    const passwordIssue = detectarPasswordParam(src);\n    if (passwordIssue) {\n      passwordIssue.relPath = relPath;\n      ocorrencias.push(passwordIssue);\n    }\n\n    // 6. Credential binding exposure\n    const credIssue = detectarCredentialBinding(src);\n    if (credIssue) {\n      credIssue.relPath = relPath;\n      ocorrencias.push(credIssue);\n    }\n\n    // 7. Sh/bat with user input\n    const shIssue = detectarShEval(src);\n    if (shIssue) {\n      shIssue.relPath = relPath;\n      ocorrencias.push(shIssue);\n    }\n\n    // 8. Agent isolation\n    const isolationIssue = detectarAgentIsolation(src);\n    if (isolationIssue) {\n      isolationIssue.relPath = relPath;\n      ocorrencias.push(isolationIssue);\n    }\n\n    // 9. Shared library version pinning\n    const libIssue = detectarSharedLibraryPinning(src);\n    if (libIssue) {\n      libIssue.relPath = relPath;\n      ocorrencias.push(libIssue);\n    }\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/jenkins/detectors/detector-jenkins-structure.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorJenkinsEstrutura: Analista;
+//# sourceMappingURL=detector-jenkins-structure.d.ts.map

package/dist/analysts/jenkins/detectors/detector-jenkins-structure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-jenkins-structure.d.ts","sourceRoot":"","sources":["../../../../src/analysts/jenkins/detectors/detector-jenkins-structure.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAqJ9C,eAAO,MAAM,wBAAwB,EAAE,QAwItC,CAAC"}

package/dist/analysts/jenkins/detectors/detector-jenkins-structure.js

@@ -0,0 +1,229 @@
+import { criarOcorrencia } from '../../../types/index.js';
+const STAGES_SUGERIDOS = ['Checkout', 'Build', 'Test', 'Deploy'];
+function detectarEstilosMisturados(src) {
+    const hasDeclarative = /pipeline\s*\{/i.test(src);
+    const hasScripted = /node\s*\{/i.test(src);
+    if (hasDeclarative && hasScripted) {
+        return criarOcorrencia({
+            tipo: 'jenkins-declarative-vs-scripted',
+            nivel: 'aviso',
+            mensagem: 'Padrões de pipeline declarativo e scripted misturados',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Escolha um estilo consistentemente'
+        });
+    }
+    return null;
+}
+function detectarPostAlways(src) {
+    if (/post\s*\{/i.test(src) && !/always\s*\{/i.test(src)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-missing-post-always',
+            nivel: 'aviso',
+            mensagem: 'Bloco post{always} ausente para limpeza',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Adicione post{always} para limpeza confiável'
+        });
+    }
+    return null;
+}
+function detectarPostFailure(src) {
+    if (/post\s*\{/i.test(src) && !/failure\s*\{/i.test(src)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-missing-post-failure',
+            nivel: 'info',
+            mensagem: 'Bloco post{failure} ausente para notificações',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Configure notificações de falha'
+        });
+    }
+    return null;
+}
+function detectarMuitosStages(src, stageCount) {
+    if (stageCount > 8) {
+        return criarOcorrencia({
+            tipo: 'jenkins-too-many-stages',
+            nivel: 'info',
+            mensagem: `Muitos stages (${stageCount}) em um único pipeline`,
+            relPath: '',
+            linha: 1,
+            sugestao: 'Considere stages paralelos ou pipelines separados'
+        });
+    }
+    return null;
+}
+function detectarParallelFailFast(src) {
+    if (/parallel\s*\{/i.test(src) && !/failFast\s*(true|false)/i.test(src)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-parallel-without-failfast',
+            nivel: 'info',
+            mensagem: 'Stages paralelos sem failFast',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Defina failFast true para pipelines CI'
+        });
+    }
+    return null;
+}
+function detectarStageSemWhen(src) {
+    const stageMatches = src.match(/stage\s*\(/g);
+    const whenMatches = src.match(/when\s*\{/g);
+    if (stageMatches && stageMatches.length > 1 && (!whenMatches || whenMatches.length === 0)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-when-without-conditions',
+            nivel: 'info',
+            mensagem: 'Stage sem condições when',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Adicione condições when para execução condicional'
+        });
+    }
+    return null;
+}
+function detectarToolsSemVersao(src) {
+    const toolsBlock = src.match(/tools\s*\{([^}]+)\}/i);
+    if (toolsBlock) {
+        const content = toolsBlock[1];
+        if (!/\d+(\.\d+)?/.test(content)) {
+            return criarOcorrencia({
+                tipo: 'jenkins-tools-without-version',
+                nivel: 'info',
+                mensagem: 'Declaração de ferramenta sem versão',
+                relPath: '',
+                linha: 1,
+                sugestao: 'Especifique versões explícitas de ferramentas'
+            });
+        }
+    }
+    return null;
+}
+function detectarAgentSemLabel(src) {
+    if (/agent\s+any/i.test(src)) {
+        return criarOcorrencia({
+            tipo: 'jenkins-missing-agent-label',
+            nivel: 'info',
+            mensagem: 'Agente sem label (executa em qualquer agente)',
+            relPath: '',
+            linha: 1,
+            sugestao: 'Especifique um label para o agente garantir consistência'
+        });
+    }
+    return null;
+}
+export const detectorJenkinsEstrutura = {
+    nome: 'detector-jenkins-estrutura',
+    categoria: 'workflows',
+    descricao: 'Detecta problemas estruturais em Jenkinsfiles',
+    test: (relPath) => relPath.toLowerCase().includes('jenkinsfile'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        if (!/pipeline\s*\{/i.test(src) && !/node\s*\{/i.test(src)) {
+            return ocorrencias;
+        }
+        const mixedIssue = detectarEstilosMisturados(src);
+        if (mixedIssue) {
+            mixedIssue.relPath = relPath;
+            ocorrencias.push(mixedIssue);
+        }
+        if (/pipeline\s*\{/i.test(src)) {
+            if (!/agent\s+\{/i.test(src)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'jenkins-sem-agent',
+                    nivel: 'erro',
+                    mensagem: 'Pipeline declarativo sem bloco agent definido',
+                    relPath, linha: 1,
+                    sugestao: 'Adicione agent { label \'...\' } ou agent any para definir onde o pipeline executa'
+                }));
+            }
+            if (!/post\s*\{/i.test(src)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'jenkins-sem-post',
+                    nivel: 'info',
+                    mensagem: 'Pipeline sem bloco post para ações pós-execução',
+                    relPath, linha: 1,
+                    sugestao: 'Adicione post { always { cleanWs() } } para limpeza do workspace'
+                }));
+            }
+        }
+        if (/post\s*\{/i.test(src)) {
+            const postAlwaysIssue = detectarPostAlways(src);
+            if (postAlwaysIssue) {
+                postAlwaysIssue.relPath = relPath;
+                ocorrencias.push(postAlwaysIssue);
+            }
+            const postFailureIssue = detectarPostFailure(src);
+            if (postFailureIssue) {
+                postFailureIssue.relPath = relPath;
+                ocorrencias.push(postFailureIssue);
+            }
+        }
+        const stageNames = [];
+        const stageRegex = /stage\s*\(\s*['"]([^'"]+)['"]\s*\)/g;
+        let match;
+        while ((match = stageRegex.exec(src)) !== null) {
+            stageNames.push(match[1]);
+        }
+        if (stageNames.length === 0) {
+            return ocorrencias;
+        }
+        if (stageNames.length <= 1) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'jenkins-poucos-stages',
+                nivel: 'info',
+                mensagem: 'Pipeline com apenas 1 stage definido',
+                relPath, linha: 1,
+                sugestao: 'Divida o pipeline em stages (ex: Build, Test, Deploy)'
+            }));
+        }
+        const manyStagesIssue = detectarMuitosStages(src, stageNames.length);
+        if (manyStagesIssue) {
+            manyStagesIssue.relPath = relPath;
+            ocorrencias.push(manyStagesIssue);
+        }
+        const parallelIssue = detectarParallelFailFast(src);
+        if (parallelIssue) {
+            parallelIssue.relPath = relPath;
+            ocorrencias.push(parallelIssue);
+        }
+        const whenIssue = detectarStageSemWhen(src);
+        if (whenIssue) {
+            whenIssue.relPath = relPath;
+            ocorrencias.push(whenIssue);
+        }
+        const toolVersionIssue = detectarToolsSemVersao(src);
+        if (toolVersionIssue) {
+            toolVersionIssue.relPath = relPath;
+            ocorrencias.push(toolVersionIssue);
+        }
+        const agentLabelIssue = detectarAgentSemLabel(src);
+        if (agentLabelIssue) {
+            agentLabelIssue.relPath = relPath;
+            ocorrencias.push(agentLabelIssue);
+        }
+        const missingStages = STAGES_SUGERIDOS.filter(s => !stageNames.some(n => n.toLowerCase().includes(s.toLowerCase())));
+        if (missingStages.length >= 2 && stageNames.length >= 3) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'jenkins-pipeline-incompleto',
+                nivel: 'info',
+                mensagem: `Pipeline pode estar faltando stages como: ${missingStages.join(', ')}`,
+                relPath, linha: 1,
+                sugestao: 'Considere adicionar stages de build, teste e deploy separados'
+            }));
+        }
+        if (!/tools\s*\{/i.test(src) && /pipeline\s*\{/i.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'jenkins-sem-tools',
+                nivel: 'info',
+                mensagem: 'Pipeline sem bloco tools para definir ferramentas (JDK, Maven, Node)',
+                relPath, linha: 1,
+                sugestao: 'Adicione tools { nodejs \'NodeJS\' } ou tools { jdk \'JDK17\' }'
+            }));
+        }
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-jenkins-structure.js.map

package/dist/analysts/jenkins/detectors/detector-jenkins-structure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-jenkins-structure.js","sourceRoot":"","sources":["../../../../src/analysts/jenkins/detectors/detector-jenkins-structure.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAKjE,SAAS,yBAAyB,CAAC,GAAW;IAC5C,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,cAAc,IAAI,WAAW,EAAE,CAAC;QAClC,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,iCAAiC;YACvC,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,uDAAuD;YACjE,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,oCAAoC;SAC/C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,yCAAyC;YACnD,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,8CAA8C;SACzD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,8BAA8B;YACpC,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,+CAA+C;YACzD,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,iCAAiC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,oBAAoB,CAAC,GAAW,EAAE,UAAkB;IAC3D,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,kBAAkB,UAAU,wBAAwB;YAC9D,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,mDAAmD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,wBAAwB,CAAC,GAAW;IAC3C,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,mCAAmC;YACzC,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,+BAA+B;YACzC,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,wCAAwC;SACnD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,iCAAiC;YACvC,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,0BAA0B;YACpC,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,mDAAmD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,OAAO,eAAe,CAAC;gBACrB,IAAI,EAAE,+BAA+B;gBACrC,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,qCAAqC;gBAC/C,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,+CAA+C;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,eAAe,CAAC;YACrB,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,+CAA+C;YACzD,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,0DAA0D;SACrE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD,IAAI,EAAE,4BAA4B;IAClC,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,+CAA+C;IAC1D,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACxE,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,WAAW,CAAC;QACrB,CAAC;QAGD,MAAM,UAAU,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,+CAA+C;oBACzD,OAAO,EAAE,KAAK,EAAE,CAAC;oBACjB,QAAQ,EAAE,oFAAoF;iBAC/F,CAAC,CAAC,CAAC;YACN,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,kBAAkB;oBACxB,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,iDAAiD;oBAC3D,OAAO,EAAE,KAAK,EAAE,CAAC;oBACjB,QAAQ,EAAE,kEAAkE;iBAC7E,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAGD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,eAAe,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,eAAe,EAAE,CAAC;gBACpB,eAAe,CAAC,OAAO,GAAG,OAAO,CAAC;gBAClC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;YAED,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,gBAAgB,EAAE,CAAC;gBACrB,gBAAgB,CAAC,OAAO,GAAG,OAAO,CAAC;gBACnC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,qCAAqC,CAAC;QACzD,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC3B,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,sCAAsC;gBAChD,OAAO,EAAE,KAAK,EAAE,CAAC;gBACjB,QAAQ,EAAE,uDAAuD;aAClE,CAAC,CAAC,CAAC;QACN,CAAC;QAGD,MAAM,eAAe,GAAG,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,eAAe,EAAE,CAAC;YACpB,eAAe,CAAC,OAAO,GAAG,OAAO,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;QAGD,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,aAAa,EAAE,CAAC;YAClB,aAAa,CAAC,OAAO,GAAG,OAAO,CAAC;YAChC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClC,CAAC;QAGD,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;YAC5B,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QAGD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,gBAAgB,EAAE,CAAC;YACrB,gBAAgB,CAAC,OAAO,GAAG,OAAO,CAAC;YACnC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrC,CAAC;QAGD,MAAM,eAAe,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,eAAe,EAAE,CAAC;YACpB,eAAe,CAAC,OAAO,GAAG,OAAO,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QACrH,IAAI,aAAa,CAAC,MAAM,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACxD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,6BAA6B;gBACnC,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,6CAA6C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjF,OAAO,EAAE,KAAK,EAAE,CAAC;gBACjB,QAAQ,EAAE,+DAA+D;aAC1E,CAAC,CAAC,CAAC;QACN,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,sEAAsE;gBAChF,OAAO,EAAE,KAAK,EAAE,CAAC;gBACjB,QAAQ,EAAE,iEAAiE;aAC5E,CAAC,CAAC,CAAC;QACN,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nconst STAGES_SUGERIDOS = ['Checkout', 'Build', 'Test', 'Deploy'];\n\n/**\n * Detecta mistura de padrões declarativos e scripted.\n */\nfunction detectarEstilosMisturados(src: string): Ocorrencia | null {\n  const hasDeclarative = /pipeline\\s*\\{/i.test(src);\n  const hasScripted = /node\\s*\\{/i.test(src);\n  if (hasDeclarative && hasScripted) {\n    return criarOcorrencia({\n      tipo: 'jenkins-declarative-vs-scripted',\n      nivel: 'aviso',\n      mensagem: 'Padrões de pipeline declarativo e scripted misturados',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Escolha um estilo consistentemente'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta presença de post{always}.\n */\nfunction detectarPostAlways(src: string): Ocorrencia | null {\n  if (/post\\s*\\{/i.test(src) && !/always\\s*\\{/i.test(src)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-missing-post-always',\n      nivel: 'aviso',\n      mensagem: 'Bloco post{always} ausente para limpeza',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Adicione post{always} para limpeza confiável'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta post{failure} ausente.\n */\nfunction detectarPostFailure(src: string): Ocorrencia | null {\n  if (/post\\s*\\{/i.test(src) && !/failure\\s*\\{/i.test(src)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-missing-post-failure',\n      nivel: 'info',\n      mensagem: 'Bloco post{failure} ausente para notificações',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Configure notificações de falha'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta muitos stages em um único pipeline.\n */\nfunction detectarMuitosStages(src: string, stageCount: number): Ocorrencia | null {\n  if (stageCount > 8) {\n    return criarOcorrencia({\n      tipo: 'jenkins-too-many-stages',\n      nivel: 'info',\n      mensagem: `Muitos stages (${stageCount}) em um único pipeline`,\n      relPath: '',\n      linha: 1,\n      sugestao: 'Considere stages paralelos ou pipelines separados'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta parallel sem failFast.\n */\nfunction detectarParallelFailFast(src: string): Ocorrencia | null {\n  if (/parallel\\s*\\{/i.test(src) && !/failFast\\s*(true|false)/i.test(src)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-parallel-without-failfast',\n      nivel: 'info',\n      mensagem: 'Stages paralelos sem failFast',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Defina failFast true para pipelines CI'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta stage sem when conditions.\n */\nfunction detectarStageSemWhen(src: string): Ocorrencia | null {\n  const stageMatches = src.match(/stage\\s*\\(/g);\n  const whenMatches = src.match(/when\\s*\\{/g);\n  if (stageMatches && stageMatches.length > 1 && (!whenMatches || whenMatches.length === 0)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-when-without-conditions',\n      nivel: 'info',\n      mensagem: 'Stage sem condições when',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Adicione condições when para execução condicional'\n    });\n  }\n  return null;\n}\n\n/**\n * Detecta tools sem versão explícita.\n */\nfunction detectarToolsSemVersao(src: string): Ocorrencia | null {\n  const toolsBlock = src.match(/tools\\s*\\{([^}]+)\\}/i);\n  if (toolsBlock) {\n    const content = toolsBlock[1];\n    if (!/\\d+(\\.\\d+)?/.test(content)) {\n      return criarOcorrencia({\n        tipo: 'jenkins-tools-without-version',\n        nivel: 'info',\n        mensagem: 'Declaração de ferramenta sem versão',\n        relPath: '',\n        linha: 1,\n        sugestao: 'Especifique versões explícitas de ferramentas'\n      });\n    }\n  }\n  return null;\n}\n\n/**\n * Detecta agent sem label (any).\n */\nfunction detectarAgentSemLabel(src: string): Ocorrencia | null {\n  if (/agent\\s+any/i.test(src)) {\n    return criarOcorrencia({\n      tipo: 'jenkins-missing-agent-label',\n      nivel: 'info',\n      mensagem: 'Agente sem label (executa em qualquer agente)',\n      relPath: '',\n      linha: 1,\n      sugestao: 'Especifique um label para o agente garantir consistência'\n    });\n  }\n  return null;\n}\n\nexport const detectorJenkinsEstrutura: Analista = {\n  nome: 'detector-jenkins-estrutura',\n  categoria: 'workflows',\n  descricao: 'Detecta problemas estruturais em Jenkinsfiles',\n  test: (relPath: string) => relPath.toLowerCase().includes('jenkinsfile'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n\n    if (!/pipeline\\s*\\{/i.test(src) && !/node\\s*\\{/i.test(src)) {\n      return ocorrencias;\n    }\n\n    // --- Mixed style detection ---\n    const mixedIssue = detectarEstilosMisturados(src);\n    if (mixedIssue) {\n      mixedIssue.relPath = relPath;\n      ocorrencias.push(mixedIssue);\n    }\n\n    if (/pipeline\\s*\\{/i.test(src)) {\n      if (!/agent\\s+\\{/i.test(src)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'jenkins-sem-agent',\n          nivel: 'erro',\n          mensagem: 'Pipeline declarativo sem bloco agent definido',\n          relPath, linha: 1,\n          sugestao: 'Adicione agent { label \\'...\\' } ou agent any para definir onde o pipeline executa'\n        }));\n      }\n\n      if (!/post\\s*\\{/i.test(src)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'jenkins-sem-post',\n          nivel: 'info',\n          mensagem: 'Pipeline sem bloco post para ações pós-execução',\n          relPath, linha: 1,\n          sugestao: 'Adicione post { always { cleanWs() } } para limpeza do workspace'\n        }));\n      }\n    }\n\n    // --- Post condition analysis ---\n    if (/post\\s*\\{/i.test(src)) {\n      const postAlwaysIssue = detectarPostAlways(src);\n      if (postAlwaysIssue) {\n        postAlwaysIssue.relPath = relPath;\n        ocorrencias.push(postAlwaysIssue);\n      }\n\n      const postFailureIssue = detectarPostFailure(src);\n      if (postFailureIssue) {\n        postFailureIssue.relPath = relPath;\n        ocorrencias.push(postFailureIssue);\n      }\n    }\n\n    const stageNames: string[] = [];\n    const stageRegex = /stage\\s*\\(\\s*['\"]([^'\"]+)['\"]\\s*\\)/g;\n    let match;\n    while ((match = stageRegex.exec(src)) !== null) {\n      stageNames.push(match[1]);\n    }\n\n    if (stageNames.length === 0) {\n      return ocorrencias;\n    }\n\n    if (stageNames.length <= 1) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'jenkins-poucos-stages',\n        nivel: 'info',\n        mensagem: 'Pipeline com apenas 1 stage definido',\n        relPath, linha: 1,\n        sugestao: 'Divida o pipeline em stages (ex: Build, Test, Deploy)'\n      }));\n    }\n\n    // --- Too many stages ---\n    const manyStagesIssue = detectarMuitosStages(src, stageNames.length);\n    if (manyStagesIssue) {\n      manyStagesIssue.relPath = relPath;\n      ocorrencias.push(manyStagesIssue);\n    }\n\n    // --- Parallel failFast ---\n    const parallelIssue = detectarParallelFailFast(src);\n    if (parallelIssue) {\n      parallelIssue.relPath = relPath;\n      ocorrencias.push(parallelIssue);\n    }\n\n    // --- When conditions ---\n    const whenIssue = detectarStageSemWhen(src);\n    if (whenIssue) {\n      whenIssue.relPath = relPath;\n      ocorrencias.push(whenIssue);\n    }\n\n    // --- Tool version ---\n    const toolVersionIssue = detectarToolsSemVersao(src);\n    if (toolVersionIssue) {\n      toolVersionIssue.relPath = relPath;\n      ocorrencias.push(toolVersionIssue);\n    }\n\n    // --- Agent label ---\n    const agentLabelIssue = detectarAgentSemLabel(src);\n    if (agentLabelIssue) {\n      agentLabelIssue.relPath = relPath;\n      ocorrencias.push(agentLabelIssue);\n    }\n\n    const missingStages = STAGES_SUGERIDOS.filter(s => !stageNames.some(n => n.toLowerCase().includes(s.toLowerCase())));\n    if (missingStages.length >= 2 && stageNames.length >= 3) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'jenkins-pipeline-incompleto',\n        nivel: 'info',\n        mensagem: `Pipeline pode estar faltando stages como: ${missingStages.join(', ')}`,\n        relPath, linha: 1,\n        sugestao: 'Considere adicionar stages de build, teste e deploy separados'\n      }));\n    }\n\n    if (!/tools\\s*\\{/i.test(src) && /pipeline\\s*\\{/i.test(src)) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'jenkins-sem-tools',\n        nivel: 'info',\n        mensagem: 'Pipeline sem bloco tools para definir ferramentas (JDK, Maven, Node)',\n        relPath, linha: 1,\n        sugestao: 'Adicione tools { nodejs \\'NodeJS\\' } ou tools { jdk \\'JDK17\\' }'\n      }));\n    }\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/jenkins/detectors/index.d.ts

@@ -0,0 +1,4 @@
+export * from './detector-jenkins-best-practices.js';
+export * from './detector-jenkins-security.js';
+export * from './detector-jenkins-structure.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/jenkins/detectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/jenkins/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,sCAAsC,CAAC;AACrD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC"}

package/dist/analysts/jenkins/detectors/index.js

@@ -0,0 +1,4 @@
+export * from './detector-jenkins-best-practices.js';
+export * from './detector-jenkins-security.js';
+export * from './detector-jenkins-structure.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/jenkins/detectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/jenkins/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,sCAAsC,CAAC;AACrD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './detector-jenkins-best-practices.js';\nexport * from './detector-jenkins-security.js';\nexport * from './detector-jenkins-structure.js';\n"]}

package/dist/analysts/jenkins/index.d.ts

@@ -0,0 +1,6 @@
+export * from './analysts/analyst-jenkins.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './reports/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/jenkins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analysts/jenkins/index.ts"],"names":[],"mappings":"AAKA,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}

package/dist/analysts/jenkins/index.js

@@ -0,0 +1,6 @@
+export * from './analysts/analyst-jenkins.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './reports/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/jenkins/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analysts/jenkins/index.ts"],"names":[],"mappings":"AAKA,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Analistas de Jenkins\n */\n\nexport * from './analysts/analyst-jenkins.js';\nexport * from './corrections/index.js';\nexport * from './detectors/index.js';\nexport * from './reports/index.js';\nexport * from './scorers/index.js';\n"]}

package/dist/analysts/jenkins/reports/generator-report-jenkins.d.ts

@@ -0,0 +1,18 @@
+import type { Ocorrencia } from '../../../types/index.js';
+import type { DadosRelatorioJenkins, OpcoesRelatorio } from '../../../types/analysts/jenkins.js';
+export declare function gerarRelatorioJson(dados: DadosRelatorioJenkins): string;
+export declare function gerarRelatorioMarkdown(dados: DadosRelatorioJenkins, opcoes?: {
+    titulo?: string;
+    incluirDetalhes?: boolean;
+}): string;
+export declare function gerarRelatorioHtml(dados: DadosRelatorioJenkins, opcoes?: {
+    titulo?: string;
+}): string;
+export declare function gerarRelatorioCsv(dados: DadosRelatorioJenkins): string;
+export declare function gerarRelatorio(dados: DadosRelatorioJenkins, opcoes: OpcoesRelatorio): Promise<string>;
+export declare function prepararDadosRelatorio(ocorrencias: Ocorrencia[], nomeRepositorio: string, tempoAnaliseMs: number, jenkinsfiles?: Array<{
+    nome: string;
+    score: number;
+    ocorrencias: number;
+}>): DadosRelatorioJenkins;
+//# sourceMappingURL=generator-report-jenkins.d.ts.map

package/dist/analysts/jenkins/reports/generator-report-jenkins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator-report-jenkins.d.ts","sourceRoot":"","sources":["../../../../src/analysts/jenkins/reports/generator-report-jenkins.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC;AAEpC,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAEjG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAEvE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAepI;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAIrG;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAItE;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAa3G;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,qBAAqB,CAUpN"}

package/dist/analysts/jenkins/reports/generator-report-jenkins.js

@@ -0,0 +1,62 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { messages } from '../../../core/messages/index.js';
+export function gerarRelatorioJson(dados) {
+    return JSON.stringify({ $schema: 'mahoraga://schemas/jenkins-report/v1', geradoEm: new Date().toISOString(), versao: '0.7.0', ...dados }, null, 2);
+}
+export function gerarRelatorioMarkdown(dados, opcoes) {
+    const linhas = [];
+    const titulo = opcoes?.titulo || 'Relatório de Análise - Jenkins';
+    linhas.push(`# ${titulo}`, '', `**Repositório:** ${dados.nomeRepositorio}`, `**Data:** ${dados.dataAnalise}`, `**Tempo:** ${dados.tempoAnaliseMs}ms`, '');
+    linhas.push('## Resumo', '', '| Métrica | Valor |', '|---|---|', `| Score Geral | ${dados.scoreGeral}/100 |`, `| Total de Jenkinsfiles | ${dados.totalJenkinsfiles} |`, `| Total de Ocorrências | ${dados.ocorrencias.length} |`, '');
+    linhas.push('## Severidade', '', '| Severidade | Quantidade |', '|---|---|');
+    for (const [sev, count] of Object.entries(dados.resumoPorSeveridade))
+        linhas.push(`| ${sev} | ${count} |`);
+    linhas.push('', '## Jenkinsfiles Analisados', '', '| Jenkinsfile | Score | Ocorrências |', '|---|---|---|');
+    for (const j of dados.jenkinsfiles)
+        linhas.push(`| ${j.nome} | ${j.score}/100 | ${j.ocorrencias} |`);
+    if (opcoes?.incluirDetalhes !== false && dados.ocorrencias.length > 0) {
+        linhas.push('', '## Ocorrências Detalhadas', '', '| Arquivo | Linha | Severidade | Tipo | Mensagem |', '|---|---|---|---|---|');
+        for (const o of dados.ocorrencias.slice(0, 200))
+            linhas.push(`| \`${o.relPath}\` | ${o.linha || '-'} | ${o.nivel || 'info'} | ${o.tipo || ''} | ${(o.mensagem || '').replace(/\|/g, '\\|').replace(/\n/g, ' ')} |`);
+    }
+    linhas.push('', '*Gerado por Mahoraga v0.7.0*');
+    return linhas.join('\n');
+}
+export function gerarRelatorioHtml(dados, opcoes) {
+    const titulo = opcoes?.titulo || 'Relatório de Análise - Jenkins';
+    const sc = dados.scoreGeral >= 80 ? '#10b981' : dados.scoreGeral >= 50 ? '#f59e0b' : '#ef4444';
+    return `<!DOCTYPE html><html lang="pt-BR"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1.0"><title>${titulo}</title><style>*{margin:0;padding:0;box-sizing:border-box}body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:#0d1117;color:#c9d1d9;padding:2rem}.container{max-width:1200px;margin:0 auto}h1{color:#d33833;margin-bottom:.5rem}h2{color:#d33833;margin:2rem 0 1rem;border-bottom:1px solid #21262d;padding-bottom:.5rem}.meta{color:#8b949e;margin-bottom:2rem}.score-card{background:#161b22;border:1px solid #30363d;border-radius:12px;padding:2rem;text-align:center;margin-bottom:2rem}.score-value{font-size:4rem;font-weight:bold;color:${sc}}.score-label{color:#8b949e;font-size:1.2rem}table{width:100%;border-collapse:collapse;margin:1rem 0}th{background:#161b22;color:#d33833;padding:.75rem 1rem;text-align:left;border-bottom:2px solid #30363d}td{padding:.75rem 1rem;border-bottom:1px solid #21262d}tr:hover{background:#161b22}.badge{padding:.25rem .5rem;border-radius:12px;font-size:.85rem;font-weight:600}.badge-erro{background:rgba(239,68,68,.2);color:#ef4444}.badge-aviso{background:rgba(245,158,11,.2);color:#f59e0b}.badge-info{background:rgba(56,139,253,.2);color:#388bfd}.summary-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(200px,1fr));gap:1rem;margin:1rem 0}.summary-item{background:#161b22;border:1px solid #30363d;border-radius:8px;padding:1rem}.summary-item .label{color:#8b949e;font-size:.85rem}.summary-item .value{font-size:1.5rem;font-weight:bold;color:#d33833}.footer{margin-top:3rem;padding-top:1rem;border-top:1px solid #21262d;color:#8b949e;font-size:.85rem;text-align:center}code{background:#161b22;padding:.2rem .4rem;border-radius:4px;font-family:'JetBrains Mono',monospace;font-size:.9em}</style></head><body><div class="container"><h1>${titulo}</h1><div class="meta"><p><strong>Repositório:</strong> ${dados.nomeRepositorio} | <strong>Data:</strong> ${dados.dataAnalise} | <strong>Tempo:</strong> ${dados.tempoAnaliseMs}ms</p></div><div class="score-card"><div class="score-value">${dados.scoreGeral}</div><div class="score-label">Score (0-100)</div></div><h2>Resumo</h2><div class="summary-grid"><div class="summary-item"><div class="label">Jenkinsfiles</div><div class="value">${dados.totalJenkinsfiles}</div></div><div class="summary-item"><div class="label">Ocorrências</div><div class="value">${dados.ocorrencias.length}</div></div>${Object.entries(dados.resumoPorSeveridade).map(([s, c]) => `<div class="summary-item"><div class="label">${s}</div><div class="value">${c}</div></div>`).join('')}</div><h2>Jenkinsfiles</h2><table><thead><tr><th>Jenkinsfile</th><th>Score</th><th>Ocorrências</th></tr></thead><tbody>${dados.jenkinsfiles.map(p => `<tr><td>${p.nome}</td><td style="color:${p.score >= 80 ? '#10b981' : p.score >= 50 ? '#f59e0b' : '#ef4444'};font-weight:bold">${p.score}/100</td><td>${p.ocorrencias}</td></tr>`).join('')}</tbody></table><h2>Ocorrências</h2><table><thead><tr><th>Arquivo</th><th>Linha</th><th>Severidade</th><th>Tipo</th><th>Mensagem</th></tr></thead><tbody>${dados.ocorrencias.slice(0, 200).map(o => `<tr><td><code>${o.relPath}</code></td><td>${o.linha || '-'}</td><td><span class="badge badge-${o.nivel || 'info'}">${o.nivel || 'info'}</span></td><td>${o.tipo || ''}</td><td>${o.mensagem || ''}</td></tr>`).join('')}</tbody></table>${dados.ocorrencias.length > 200 ? `<p style="color:#8b949e;margin-top:1rem">Mostrando 200 de ${dados.ocorrencias.length}</p>` : ''}<div class="footer"><p>Gerado por Mahoraga v0.7.0</p></div></div></body></html>`;
+}
+export function gerarRelatorioCsv(dados) {
+    const linhas = ['Arquivo,Linha,Severidade,Tipo,Mensagem,Sugestao'];
+    for (const o of dados.ocorrencias)
+        linhas.push([o.relPath, String(o.linha || ''), o.nivel || 'info', o.tipo || '', `"${(o.mensagem || '').replace(/"/g, '""')}"`, `"${(o.sugestao || '').replace(/"/g, '""')}"`].join(','));
+    return linhas.join('\n');
+}
+export async function gerarRelatorio(dados, opcoes) {
+    const conteudo = (() => {
+        switch (opcoes.formato) {
+            case 'json': return gerarRelatorioJson(dados);
+            case 'markdown': return gerarRelatorioMarkdown(dados, { titulo: opcoes.titulo, incluirDetalhes: opcoes.incluirDetalhes });
+            case 'html': return gerarRelatorioHtml(dados, { titulo: opcoes.titulo });
+            case 'csv': return gerarRelatorioCsv(dados);
+            default: throw new Error(messages.ExcecoesMensagens.formatoNaoSuportado(opcoes.formato));
+        }
+    })();
+    fs.mkdirSync(path.dirname(opcoes.output), { recursive: true });
+    fs.writeFileSync(opcoes.output, conteudo, 'utf-8');
+    return opcoes.output;
+}
+export function prepararDadosRelatorio(ocorrencias, nomeRepositorio, tempoAnaliseMs, jenkinsfiles) {
+    const jList = jenkinsfiles || [];
+    const resumo = {};
+    const resumoTipo = {};
+    for (const o of ocorrencias) {
+        resumo[String(o.nivel || 'info')] = (resumo[String(o.nivel || 'info')] || 0) + 1;
+        resumoTipo[o.tipo || 'desconhecido'] = (resumoTipo[o.tipo || 'desconhecido'] || 0) + 1;
+    }
+    const scoreGeral = jList.length > 0 ? Math.round(jList.reduce((s, j) => s + j.score, 0) / jList.length) : Math.max(0, 100 - ocorrencias.length * 5);
+    return { nomeRepositorio, dataAnalise: new Date().toISOString(), totalJenkinsfiles: jList.length || 1, scoreGeral, ocorrencias, resumoPorSeveridade: resumo, resumoPorTipo: resumoTipo, jenkinsfiles: jList, tempoAnaliseMs };
+}
+//# sourceMappingURL=generator-report-jenkins.js.map