@mocoto/mahoraga 0.14.0

package/dist/analysts/js-ts/detectors/detector-types-unsafe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-types-unsafe.js","sourceRoot":"","sources":["../../../../src/analysts/js-ts/detectors/detector-types-unsafe.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAG/M,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAC,UAAU,EAAG,MAAM,iBAAiB,CAAC;AAItF,MAAM,QAAQ,GAAa;IACzB,IAAI,EAAE,0BAA0B;IAChC,SAAS,EAAE,cAAc;IACzB,SAAS,EAAE,+EAA+E;IAC1F,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE;QACxB,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAgB,EAAE,OAAe,EAAE,IAA2B,EAAE,WAAoB,EAAyB,EAAE;QAC7H,MAAM,WAAW,GAAiB,EAAE,CAAC;QAKrC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAE5C,MAAM,eAAe,GAAG,OAAO,CAAE,MAI/B,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAE9B,IAAI,eAAe,IAAI,aAAa,CAAC,WAAW,IAAI,OAAO,CAAC,EAAE,CAAC;YAC7D,OAAO,WAAW,CAAC;QACrB,CAAC;QAGD,IAAI,oBAAoB,CAAC,WAAW,IAAI,OAAO,CAAC,EAAE,CAAC;YACjD,OAAO,WAAW,CAAC;QACrB,CAAC;QAGD,MAAM,SAAS,GAAG,kFAAkF,CAAC;QACrG,IAAI,QAAiC,CAAC;QACtC,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;YAGrC,IAAI,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YAGD,IAAI,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YAGD,IAAI,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YAGD,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAG7D,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,QAAQ,GAAG,EAAE,CAAC;YAGlB,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC1B,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,OAAO,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;gBACnG,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;YAC9F,CAAC;iBAAM,IAAI,iCAAiC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/D,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,aAAa,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;gBAC9E,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,qBAAqB,CAAC;YAClE,CAAC;iBAAM,IAAI,+BAA+B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7D,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,WAAW,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;gBAC5E,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,mBAAmB,CAAC;YAChE,CAAC;iBAAM,IAAI,6BAA6B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3D,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,eAAe,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;gBAChF,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,uBAAuB,CAAC;YACpE,CAAC;iBAAM,IAAI,sCAAsC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpE,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,iBAAiB,CAAC;gBAC5D,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,yBAAyB,CAAC;YACtE,CAAC;iBAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpD,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;gBAC1E,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,iBAAiB,CAAC;YAC9D,CAAC;iBAAM,IAAI,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzE,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;gBACzE,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,gBAAgB,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,eAAe,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;gBAChF,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,uBAAuB,CAAC;YACpE,CAAC;YAED,IAAI,iBAAiB,GAAG,EAAE,CAAC;YAC3B,IAAI,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,iBAAiB,GAAG,QAAQ,CAAC,qBAAqB,CAAC,sBAAsB,CAAC;YAC5E,CAAC;iBAAM,IAAI,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9E,iBAAiB,GAAG,QAAQ,CAAC,qBAAqB,CAAC,qBAAqB,CAAC;YAC3E,CAAC;YACD,MAAM,gBAAgB,GAAG,GAAG,QAAQ,cAAc,QAAQ,GAAG,iBAAiB,GAAG,QAAQ,CAAC,qBAAqB,CAAC,aAAa,EAAE,CAAC;YAGhI,IAAI,wBAAwB,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC3D,SAAS;YACX,CAAC;YACD,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,mBAAmB;gBACzB,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,gBAAgB;gBAC1B,OAAO;gBACP,KAAK;gBACL,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;QAChE,IAAI,UAAmC,CAAC;QACxC,OAAO,CAAC,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC;YACvC,IAAI,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC;gBAAE,SAAS;YAGjD,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrE,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAE/C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAO3B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAGnE,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,KAAO,MAAM,CAAC;gBAAE,SAAS;YAGzD,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YAGlD,IAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YAG/D,IAAI,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,SAAS;YAG1D,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAG5C,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAGlD,IAAI,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,SAAS;YAGrD,IAAI,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,SAAS;YAG5D,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBAAE,SAAS;YAEtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,iBAAiB,CAAC;YAE1I,IAAI,wBAAwB,CAAC,wBAAwB,EAAE,OAAO,CAAC;gBAAE,SAAS;YAE1E,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,GAAG,QAAQ,cAAc,QAAQ,EAAE;gBAC7C,OAAO;gBACP,KAAK;gBACL,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACtC,IAAI,UAAmC,CAAC;QACxC,OAAO,CAAC,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC;YAGvC,IAAI,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAG7D,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,gBAAgB,CAAC;YACjE,IAAI,QAAQ,GAAG,EAAE,CAAC;YAElB,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,2BAA2B,CAAC;YACxE,CAAC;iBAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChD,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,gCAAgC,CAAC;YAC7E,CAAC;iBAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzC,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,8BAA8B,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,6BAA6B,CAAC;YAC1E,CAAC;YACD,MAAM,gBAAgB,GAAG,GAAG,QAAQ,cAAc,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,gBAAgB,GAAG,QAAQ,CAAC,qBAAqB,CAAC,aAAa,EAAE,CAAC;YAG9J,IAAI,wBAAwB,CAAC,6BAA6B,EAAE,OAAO,CAAC,EAAE,CAAC;gBACrE,SAAS;YACX,CAAC;YACD,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,6BAA6B;gBACnC,KAAK,EAAE,MAAM;gBAEb,QAAQ,EAAE,gBAAgB;gBAC1B,OAAO;gBACP,KAAK;gBACL,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,kBAAkB,GAAG,QAAQ,CAAC;QACpC,IAAI,iBAA0C,CAAC;QAC/C,OAAO,CAAC,iBAAiB,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,IAAI,CAAC,CAAC;YAG9C,IAAI,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC7D,MAAM,gBAAgB,GAAG,GAAG,QAAQ,CAAC,qBAAqB,CAAC,gBAAgB,GAAG,QAAQ,CAAC,qBAAqB,CAAC,aAAa,EAAE,CAAC;YAG7H,IAAI,wBAAwB,CAAC,wBAAwB,EAAE,OAAO,CAAC,EAAE,CAAC;gBAChE,SAAS;YACX,CAAC;YACD,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,gBAAgB;gBAC1B,OAAO;gBACP,KAAK;gBACL,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;QAGD,MAAM,aAAa,GAAG,gBAAgB,CAAC;QACvC,IAAI,YAAqC,CAAC;QAC1C,OAAO,CAAC,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC;YAGzC,IAAI,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YAGD,IAAI,yBAAyB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC7C,SAAS;YACX,CAAC;YAGD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC7D,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,EAAE,WAAW,IAAI,OAAO,EAAE,WAAW,CAAC,CAAC;YAGnF,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAGvD,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,KAAgC,CAAC;YACrC,IAAI,aAAa,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;gBAE3C,IAAI,aAAa,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;oBAClC,SAAS;gBACX,CAAC;gBAED,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,eAAe,CAAC,OAAO,IAAI,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtG,KAAK,GAAG,MAAM,CAAC;gBAGf,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;oBAC3B,QAAQ,IAAI,cAAc,aAAa,CAAC,QAAQ,EAAE,CAAC;gBACrD,CAAC;YACH,CAAC;iBAAM,IAAI,aAAa,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;gBACpD,KAAK,GAAG,OAAO,CAAC;gBAChB,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,OAAO,IAAI,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC3G,QAAQ,IAAI,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC;gBACzC,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;oBAC3B,QAAQ,IAAI,cAAc,aAAa,CAAC,QAAQ,EAAE,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACN,QAAQ,IAAI,0DAA0D,CAAC;gBACzE,CAAC;gBACD,QAAQ,IAAI,QAAQ,CAAC,qBAAqB,CAAC,oBAAoB,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,MAAM,CAAC;gBACf,QAAQ,GAAG,QAAQ,CAAC,qBAAqB,CAAC,eAAe,CAAC,OAAO,IAAI,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;gBACzG,QAAQ,IAAI,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC;gBACzC,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;oBAC3B,QAAQ,IAAI,cAAc,aAAa,CAAC,QAAQ,EAAE,CAAC;gBACrD,CAAC;gBACD,QAAQ,IAAI,QAAQ,CAAC,qBAAqB,CAAC,yBAAyB,CAAC;YACvE,CAAC;YAGD,IAAI,wBAAwB,CAAC,uBAAuB,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,uBAAuB;gBAC7B,KAAK;gBACL,QAAQ;gBACR,OAAO;gBACP,KAAK;gBACL,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC;AACF,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * Detector de tipos inseguros (any e unknown) - Versão Inteligente\n * Identifica uso de any e unknown com análise contextual avançada\n *\n * Estratégia:\n * - Analisa contexto para determinar legitimidade do uso\n * - Sugere alternativas específicas quando possível\n * - Explica variantes e possibilidades quando análise é incerta\n * - Sempre recomenda revisão manual para casos complexos\n */\n\nimport { categorizarUnknown, extractVariableName, isAnyInGenericFunction, isInStringOrComment, isLegacyOrVendorFile, isTypeScriptContext, isUnknownInGenericContext } from '@analysts/corrections/type-safety';\nimport type { NodePath } from '@babel/traverse';\nimport type { Node } from '@babel/types';\nimport { config } from '@core/config';\nimport { messages } from '@core/messages';\nimport { isTestArquivo, shouldSuppressOccurrence,splitLines  } from '@shared/helpers';\n\nimport type { Analista, Ocorrencia } from '@';\n\nconst ANALISTA: Analista = {\n  nome: 'detector-tipos-inseguros',\n  categoria: 'code-quality',\n  descricao: 'Detecta uso de any e unknown que podem ser substituídos por tipos específicos',\n  test: (relPath: string) => {\n    return relPath.endsWith('.ts') || relPath.endsWith('.tsx');\n  },\n  aplicar: async (srcParam: string, relPath: string, _ast: NodePath<Node> | null, fullCaminho?: string): Promise<Ocorrencia[]> => {\n    const ocorrencias: Ocorrencia[] = [];\n\n    // IMPORTANTE: Normalização de line endings para compatibilidade Windows/Linux\n    // Sem isso, arquivos com \\r\\n causam split('\\n') incorreto (retorna 1 linha)\n    // Ver: docs/reports/DEBUG-TYPE-SAFETY-DETECTOR-2025-11-03.md\n    const src = srcParam.replace(/\\r\\n/g, '\\n');\n\n    const allowAnyInTests = Boolean((config as unknown as {\n      testPadroes?: {\n        allowAnyType?: boolean;\n      };\n    }).testPadroes?.allowAnyType);\n\n    if (allowAnyInTests && isTestArquivo(fullCaminho || relPath)) {\n      return ocorrencias;\n    }\n\n    // Verificar se é arquivo que deve ser ignorado\n    if (isLegacyOrVendorFile(fullCaminho || relPath)) {\n      return ocorrencias;\n    }\n\n    // Detectar uso de any\n    const anyPadrao = /:\\s*(any|NonNullable<any>|Partial<any>|Omit<any,\\s*[^>]+>|Pick<any,\\s*[^>]+>)\\b/g;\n    let anyMatch: RegExpMatchArray | null;\n    while ((anyMatch = anyPadrao.exec(src)) !== null) {\n      const position = anyMatch.index || 0;\n\n      // Pular se estiver em string ou comentário\n      if (isInStringOrComment(src, position)) {\n        continue;\n      }\n\n      // Pular se estiver em contexto TypeScript específico (type assertions)\n      if (isTypeScriptContext(src, position)) {\n        continue;\n      }\n\n      // Pular se any está em função genérica apropriada\n      if (isAnyInGenericFunction(src, position)) {\n        continue;\n      }\n\n      // Extrair nome da variável e contexto\n      const varNome = extractVariableName(anyMatch, src);\n      const linha = splitLines(src.substring(0, position)).length;\n      const lineContext = splitLines(src)[linha - 1]?.trim() || '';\n\n      // Análise contextual para any\n      let mensagem = '';\n      let sugestao = '';\n\n      // Detectar padrões específicos\n      if (anyMatch[1] !== 'any') {\n        mensagem = messages.DetectorJsTsMensagens.tipoAnyComUtilidade(varNome ?? '', anyMatch[1] ?? 'any');\n        sugestao = messages.DetectorJsTsMensagens.tipoAnyComUtilidadeSugestao(anyMatch[1] ?? 'any');\n      } else if (/catch\\s*\\(\\s*\\w+\\s*:\\s*any\\s*\\)/.test(lineContext)) {\n        mensagem = messages.DetectorJsTsMensagens.anyCatchBlock(varNome || undefined);\n        sugestao = messages.DetectorJsTsMensagens.anyCatchBlockSugestao;\n      } else if (/callback\\s*:\\s*\\([^)]*:\\s*any/.test(lineContext)) {\n        mensagem = messages.DetectorJsTsMensagens.callbackAny(varNome || undefined);\n        sugestao = messages.DetectorJsTsMensagens.callbackAnySugestao;\n      } else if (/event\\s*:\\s*any|e\\s*:\\s*any/.test(lineContext)) {\n        mensagem = messages.DetectorJsTsMensagens.eventHandlerAny(varNome || undefined);\n        sugestao = messages.DetectorJsTsMensagens.eventHandlerAnySugestao;\n      } else if (/\\[\\s*key\\s*:\\s*string\\s*\\]\\s*:\\s*any/.test(lineContext)) {\n        mensagem = messages.DetectorJsTsMensagens.indexSignatureAny;\n        sugestao = messages.DetectorJsTsMensagens.indexSignatureAnySugestao;\n      } else if (/Record<[^,]+,\\s*any>/.test(lineContext)) {\n        mensagem = messages.DetectorJsTsMensagens.recordAny(varNome || undefined);\n        sugestao = messages.DetectorJsTsMensagens.recordAnySugestao;\n      } else if (/Array<any>/.test(lineContext) || /any\\[\\]/.test(lineContext)) {\n        mensagem = messages.DetectorJsTsMensagens.arrayAny(varNome || undefined);\n        sugestao = messages.DetectorJsTsMensagens.arrayAnySugestao;\n      } else {\n        mensagem = messages.DetectorJsTsMensagens.tipoAnyGenerico(varNome || undefined);\n        sugestao = messages.DetectorJsTsMensagens.tipoAnyGenericoSugestao;\n      }\n\n      let contextoAdicional = '';\n      if (fullCaminho?.includes('tipos/')) {\n        contextoAdicional = messages.DetectorJsTsMensagens.contextoAdicionalTipos;\n      } else if (fullCaminho?.includes('core/') || fullCaminho?.includes('shared/')) {\n        contextoAdicional = messages.DetectorJsTsMensagens.contextoAdicionalCore;\n      }\n      const mensagemCompleta = `${mensagem} | [IDEIA] ${sugestao}${contextoAdicional}${messages.DetectorJsTsMensagens.revisaoManual}`;\n\n      // Verifica se regra está suprimida para este arquivo\n      if (shouldSuppressOccurrence('tipo-inseguro-any', relPath)) {\n        continue;\n      }\n      ocorrencias.push({\n        tipo: 'tipo-inseguro-any',\n        nivel: 'aviso',\n        mensagem: mensagemCompleta,\n        relPath,\n        linha,\n        contexto: lineContext\n      });\n    }\n\n// ─── DETECTAR Object e {} (tipos fracos) ──────────────────────\n    const tiposFracosPadrao = /:\\s*(Object|\\{\\})(?![a-zA-Z0-9_$])/g;\n    let matchFraco: RegExpMatchArray | null;\n    while ((matchFraco = tiposFracosPadrao.exec(src)) !== null) {\n      const position = matchFraco.index || 0;\n      if (isInStringOrComment(src, position)) continue;\n\n      // Pular se Object é usado como método estático (ex: Object.keys(), Object.create())\n      const antesObj = src.substring(Math.max(0, position - 10), position);\n      if (/Object\\s*\\.\\s*$/.test(antesObj)) continue;\n\n      const linha = splitLines(src.substring(0, position)).length;\n      const lineContext = splitLines(src)[linha - 1]?.trim() || '';\n      const tipo = matchFraco[1];\n\n      // Filtrar contextos legítimos onde {} é aceitável\n      // 1. Inicialização de objeto vazio: prop?: {} = {}\n      // 2. Partial types: Partial<SomeType> - contexto válido\n      // 3. Parâmetros opcionais com valor padrão\n      // 4. Type assertions em objetos reais (não tipagem explícita)\n      const antes = src.substring(Math.max(0, position - 30), position);\n      const depois = lineContext.substring(lineContext.indexOf(':') + 1);\n\n      // Pular se é inicialização de objeto vazio (prop?: {} = {})\n      if (/\\?\\s*:\\s*\\{\\}\\s*=/.test(`${antes  }: {}`)) continue;\n\n      // Pular se é parâmetro de função com valor default\n      if (/\\?\\s*:\\s*\\{\\}\\s*[=,)]/.test(antes)) continue;\n\n      // Pular se é parte de Partial/Required/Readonly\n      if (/Partial<|Required<|Readonly<|\\}\\?$/.test(antes)) continue;\n\n      // Pular se é em contexto de catch block\n      if (/catch\\s*\\([^)]*:\\s*\\{\\}/.test(lineContext)) continue;\n\n      // Pular se é inicialização de objeto vazio: algo = {}\n      if (depois.trim().startsWith('=')) continue;\n\n      // Pular se é parâmetro de função com default: : {} = ou : {} ,\n      if (/^\\s*\\{?\\s*\\}\\s*[,=)]/.test(depois)) continue;\n\n      // Pular se é valor de propriedade em objeto: chave: {}\n      if (/\\w+\\s*:\\s*\\{\\}\\s*$/.test(lineContext)) continue;\n\n      // Pular se é spread com objeto vazio condicional: ...cond ? {x} : {}\n      if (/\\?\\s*\\{[^}]*\\}\\s*:\\s*\\{\\}/.test(lineContext)) continue;\n\n      // Pular se é ternário com objeto vazio como fallback\n      if (/:\\s*\\{\\}\\s*$/.test(lineContext.trim())) continue;\n\n      const mensagem = messages.DetectorJsTsMensagens.tipoPermissivo(tipo);\n      const sugestao = tipo === 'Object' ? messages.DetectorJsTsMensagens.tipoObjectSugestao : messages.DetectorJsTsMensagens.tipoVazioSugestao;\n\n      if (shouldSuppressOccurrence('tipo-permissivo-object', relPath)) continue;\n\n      ocorrencias.push({\n        tipo: 'tipo-permissivo-object',\n        nivel: 'aviso',\n        mensagem: `${mensagem} | [IDEIA] ${sugestao}`,\n        relPath,\n        linha,\n        contexto: lineContext\n      });\n    }\n\n// ─── DETECTAR TYPE ASSERTIONS (as any) ────────────────────────\n    const asAnyPadrao = /\\b(as\\s+any)\\b/g;\n    let asAnyMatch: RegExpMatchArray | null;\n    while ((asAnyMatch = asAnyPadrao.exec(src)) !== null) {\n      const position = asAnyMatch.index || 0;\n\n      // Pular se estiver em string ou comentário\n      if (isInStringOrComment(src, position)) {\n        continue;\n      }\n      const linha = splitLines(src.substring(0, position)).length;\n      const lineContext = splitLines(src)[linha - 1]?.trim() || '';\n\n      // Extrair contexto da expressão\n      const after = src.substring(position, Math.min(src.length, position + 50));\n      const mensagem = messages.DetectorJsTsMensagens.typeAssertionAny;\n      let sugestao = '';\n\n      if (/\\)\\s*as\\s+any/.test(lineContext)) {\n        sugestao = messages.DetectorJsTsMensagens.assertionCastFuncaoSugestao;\n      } else if (/\\.\\w+\\s+as\\s+any/.test(lineContext)) {\n        sugestao = messages.DetectorJsTsMensagens.assertionCastPropriedadeSugestao;\n      } else if (/\\bas\\s+any\\s*\\)/.test(after)) {\n        sugestao = messages.DetectorJsTsMensagens.assertionCastParametroSugestao;\n      } else {\n        sugestao = messages.DetectorJsTsMensagens.assertionCastGenericoSugestao;\n      }\n      const mensagemCompleta = `${mensagem} | [IDEIA] ${sugestao}${messages.DetectorJsTsMensagens.assertionCritico}${messages.DetectorJsTsMensagens.revisaoManual}`;\n\n      // Verifica se regra está suprimida para este arquivo\n      if (shouldSuppressOccurrence('tipo-inseguro-any-assertion', relPath)) {\n        continue;\n      }\n      ocorrencias.push({\n        tipo: 'tipo-inseguro-any-assertion',\n        nivel: 'erro',\n        // Mais severo que declaração de tipo\n        mensagem: mensagemCompleta,\n        relPath,\n        linha,\n        contexto: lineContext\n      });\n    }\n\n// ─── DETECTAR ANGLE BRACKET CASTING (<any>) ───────────────────\n    const angleBracketPadrao = /<any>/g;\n    let angleBracketMatch: RegExpMatchArray | null;\n    while ((angleBracketMatch = angleBracketPadrao.exec(src)) !== null) {\n      const position = angleBracketMatch.index || 0;\n\n      // Pular se estiver em string ou comentário\n      if (isInStringOrComment(src, position)) {\n        continue;\n      }\n      const linha = splitLines(src.substring(0, position)).length;\n      const lineContext = splitLines(src)[linha - 1]?.trim() || '';\n      const mensagemCompleta = `${messages.DetectorJsTsMensagens.angleBracketCast}${messages.DetectorJsTsMensagens.revisaoManual}`;\n\n      // Verifica se regra está suprimida para este arquivo\n      if (shouldSuppressOccurrence('tipo-inseguro-any-cast', relPath)) {\n        continue;\n      }\n      ocorrencias.push({\n        tipo: 'tipo-inseguro-any-cast',\n        nivel: 'erro',\n        mensagem: mensagemCompleta,\n        relPath,\n        linha,\n        contexto: lineContext\n      });\n    }\n\n    // Detectar uso de unknown\n    const unknownPadrao = /:\\s*unknown\\b/g;\n    let unknownMatch: RegExpMatchArray | null;\n    while ((unknownMatch = unknownPadrao.exec(src)) !== null) {\n      const position = unknownMatch.index || 0;\n\n      // Pular se estiver em string ou comentário\n      if (isInStringOrComment(src, position)) {\n        continue;\n      }\n\n      // Pular se unknown está em contexto genérico apropriado (validação básica)\n      if (isUnknownInGenericContext(src, position)) {\n        continue;\n      }\n\n      // Análise contextual inteligente\n      const linha = splitLines(src.substring(0, position)).length;\n      const lineContext = splitLines(src)[linha - 1]?.trim() || '';\n      const categorizacao = categorizarUnknown(src, fullCaminho || relPath, lineContext);\n\n      // Extrair nome da variável\n      const varNome = extractVariableName(unknownMatch, src);\n\n      // Construir mensagem baseada na categorização\n      let mensagem = '';\n      let nivel: 'info' | 'aviso' | 'erro';\n      if (categorizacao.categoria === 'legitimo') {\n        // Legítimo com alta confiança (>=95%) - PULAR completamente\n        if (categorizacao.confianca >= 95) {\n          continue;\n        }\n\n        mensagem = messages.DetectorJsTsMensagens.unknownLegitimo(varNome || undefined, categorizacao.motivo);\n        nivel = 'info';\n\n        // Se tem sugestão, adicionar\n        if (categorizacao.sugestao) {\n          mensagem += ` | [IDEIA] ${categorizacao.sugestao}`;\n        }\n      } else if (categorizacao.categoria === 'melhoravel') {\n        nivel = 'aviso';\n        mensagem = messages.DetectorJsTsMensagens.unknownMelhoravel(varNome || undefined, categorizacao.confianca);\n        mensagem += ` | ${categorizacao.motivo}`;\n        if (categorizacao.sugestao) {\n          mensagem += ` | [IDEIA] ${categorizacao.sugestao}`;\n        } else {\n          mensagem += ` | [IDEIA] Revisar uso para inferir tipo mais específico`;\n        }\n        mensagem += messages.DetectorJsTsMensagens.unknownRevisaoManual;\n      } else {\n        nivel = 'erro';\n        mensagem = messages.DetectorJsTsMensagens.unknownCorrigir(varNome || undefined, categorizacao.confianca);\n        mensagem += ` | ${categorizacao.motivo}`;\n        if (categorizacao.sugestao) {\n          mensagem += ` | [EDIT]  ${categorizacao.sugestao}`;\n        }\n        mensagem += messages.DetectorJsTsMensagens.unknownRevisaoObrigatoria;\n      }\n\n      // Verifica se regra está suprimida para este arquivo\n      if (shouldSuppressOccurrence('tipo-inseguro-unknown', relPath)) {\n        continue;\n      }\n      ocorrencias.push({\n        tipo: 'tipo-inseguro-unknown',\n        nivel,\n        mensagem,\n        relPath,\n        linha,\n        contexto: lineContext\n      });\n    }\n    return ocorrencias;\n  }\n};\nexport const detectorTiposInseguros = ANALISTA;\n"]}

package/dist/analysts/js-ts/detectors/index.d.ts

@@ -0,0 +1,7 @@
+export * from './detector-anti-patterns-async.js';
+export * from './detector-constructions-syntactic.js';
+export * from './detector-context-smart.js';
+export * from './detector-interfaces-inline.js';
+export * from './detector-leaks-memory.js';
+export * from './detector-types-unsafe.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/js-ts/detectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/js-ts/detectors/index.ts"],"names":[],"mappings":"AAKA,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC"}

package/dist/analysts/js-ts/detectors/index.js

@@ -0,0 +1,7 @@
+export * from './detector-anti-patterns-async.js';
+export * from './detector-constructions-syntactic.js';
+export * from './detector-context-smart.js';
+export * from './detector-interfaces-inline.js';
+export * from './detector-leaks-memory.js';
+export * from './detector-types-unsafe.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/js-ts/detectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/js-ts/detectors/index.ts"],"names":[],"mappings":"AAKA,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * @fileoverview Detectores específicos de JavaScript/TypeScript\n */\n\nexport * from './detector-anti-patterns-async.js';\nexport * from './detector-constructions-syntactic.js';\nexport * from './detector-context-smart.js';\nexport * from './detector-interfaces-inline.js';\nexport * from './detector-leaks-memory.js';\nexport * from './detector-types-unsafe.js';\n"]}

package/dist/analysts/js-ts/index.d.ts

@@ -0,0 +1,4 @@
+export * from './analysts/index.js';
+export * from './detectors/index.js';
+export * from './registrar.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/js-ts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analysts/js-ts/index.ts"],"names":[],"mappings":"AAKA,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC"}

package/dist/analysts/js-ts/index.js

@@ -0,0 +1,4 @@
+export * from './analysts/index.js';
+export * from './detectors/index.js';
+export * from './registrar.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/js-ts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analysts/js-ts/index.ts"],"names":[],"mappings":"AAKA,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * @fileoverview Analistas específicos de JavaScript/TypeScript\n */\n\nexport * from './analysts/index.js';\nexport * from './detectors/index.js';\nexport * from './registrar.js';\n"]}

package/dist/analysts/js-ts/registrar.d.ts

@@ -0,0 +1,5 @@
+import type { Analista } from '../../types/index.js';
+export declare function registrarDetectorJsTs(detector: Analista): void;
+export declare function obterDetectoresJsTs(): Analista[];
+export declare function limparDetectoresJsTs(): void;
+//# sourceMappingURL=registrar.d.ts.map

package/dist/analysts/js-ts/registrar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registrar.d.ts","sourceRoot":"","sources":["../../../src/analysts/js-ts/registrar.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,CAAC;AAIlC,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAM9D;AAED,wBAAgB,mBAAmB,IAAI,QAAQ,EAAE,CAEhD;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}

package/dist/analysts/js-ts/registrar.js

@@ -0,0 +1,16 @@
+const detectoresJsTs = [];
+export function registrarDetectorJsTs(detector) {
+    if (!detector || !detector.nome)
+        return;
+    const exists = detectoresJsTs.some(d => d.nome === detector.nome);
+    if (!exists) {
+        detectoresJsTs.push(detector);
+    }
+}
+export function obterDetectoresJsTs() {
+    return [...detectoresJsTs];
+}
+export function limparDetectoresJsTs() {
+    detectoresJsTs.length = 0;
+}
+//# sourceMappingURL=registrar.js.map

package/dist/analysts/js-ts/registrar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registrar.js","sourceRoot":"","sources":["../../../src/analysts/js-ts/registrar.ts"],"names":[],"mappings":"AAOA,MAAM,cAAc,GAAe,EAAE,CAAC;AAEtC,MAAM,UAAU,qBAAqB,CAAC,QAAkB;IACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;AAC5B,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * @fileoverview Sistema de registro de detectores JS/TS\n */\n\nimport type { Analista } from '@';\n\nconst detectoresJsTs: Analista[] = [];\n\nexport function registrarDetectorJsTs(detector: Analista): void {\n  if (!detector || !detector.nome) return;\n  const exists = detectoresJsTs.some(d => d.nome === detector.nome);\n  if (!exists) {\n    detectoresJsTs.push(detector);\n  }\n}\n\nexport function obterDetectoresJsTs(): Analista[] {\n  return [...detectoresJsTs];\n}\n\nexport function limparDetectoresJsTs(): void {\n  detectoresJsTs.length = 0;\n}\n"]}

package/dist/analysts/php/analysts/analyst-php.d.ts

@@ -0,0 +1,12 @@
+import { criarOcorrencia } from '../../../types/index.js';
+type Msg = ReturnType<typeof criarOcorrencia>;
+export declare const analistaPhp: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    global: false;
+    test: (relPath: string) => boolean;
+    aplicar: (src: string, relPath: string) => Promise<Msg[] | null>;
+};
+export {};
+//# sourceMappingURL=analyst-php.d.ts.map

package/dist/analysts/php/analysts/analyst-php.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-php.d.ts","sourceRoot":"","sources":["../../../../src/analysts/php/analysts/analyst-php.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiB,eAAe,EAAE,MAAM,GAAG,CAAC;AAGnD,KAAK,GAAG,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;AAsI9C,eAAO,MAAM,WAAW;;;;;oBAKN,MAAM,KAAG,OAAO;+CACD,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;CAKpD,CAAC"}

package/dist/analysts/php/analysts/analyst-php.js

@@ -0,0 +1,116 @@
+import { messages } from '../../../core/messages/index.js';
+import { createLineLookup } from '../../../shared/helpers/index.js';
+import { criarAnalista, criarOcorrencia } from '../../../types/index.js';
+const disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_PHP === '1';
+function isPhpFile(relPath) {
+    return /\.(php|phtml|php3|php4|php5|php7|php8)$/i.test(relPath);
+}
+function warn(message, relPath, line, nivel) {
+    return criarOcorrencia({
+        relPath,
+        mensagem: message,
+        linha: line,
+        nivel: nivel ?? messages.SeverityNiveis.warning,
+        origem: messages.AnalystOrigens.php,
+        tipo: messages.AnalystTipos.php
+    });
+}
+function collectPhpIssues(src, relPath) {
+    const ocorrencias = [];
+    const lineOf = createLineLookup(src).lineAt;
+    const scanWithoutStrings = src.replace(/['"`][^'"]*['"`]/g, '""');
+    for (const match of scanWithoutStrings.matchAll(/\b(?:mysql|mysqli|sqlite|pg)_query\s*\(\s*\$[^)]*(?:\$|\.)/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.sqlInjection, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scanWithoutStrings.matchAll(/\beval\s*\(/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.evalUsage, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scanWithoutStrings.matchAll(/\bassert\s*\(\s*['"]/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.assertString, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scanWithoutStrings.matchAll(/\bunserialize\s*\(/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.unserializeUsage, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scanWithoutStrings.matchAll(/\bextract\s*\(/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.extractUsage, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scanWithoutStrings.matchAll(/\bfile_get_contents\s*\(\s*['"](?:https?:\/\/)/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.urlFetch, relPath, line));
+    }
+    for (const match of scanWithoutStrings.matchAll(/\b(?:system|exec|shell_exec|passthru|popen|proc_open)\s*\(/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.commandExecution, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scanWithoutStrings.matchAll(/\$_REQUEST\b/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.requestUsage, relPath, line));
+    }
+    for (const match of scanWithoutStrings.matchAll(/(?:password|secret|api[_-]?key|token|credential|db_password|db_user)\s*(?::\s*|=>\s*|=\s*["'`])([^"'`\s]{4,})/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.hardcodedSecret, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scanWithoutStrings.matchAll(/\bmysql_\w+\s*\(/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.deprecatedMysql, relPath, line));
+    }
+    if (/^<\?[^=phHP\r\n]/m.test(src)) {
+        ocorrencias.push(warn(messages.PhpMensagens.shortOpenTag, relPath, 1));
+    }
+    for (const match of src.matchAll(/@\s*(?:mkdir|file_put_contents|fopen|include|require|unlink|copy|rename|move_uploaded_file|file_get_contents)\s*\(/g)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PhpMensagens.errorSuppression, relPath, line));
+    }
+    const funcMatches = src.matchAll(/(?:^|\n)\s*(?:public|private|protected|static)?\s*function\s+\w+\s*\([^)]*\)\s*(?::\s*\w+)?\s*\{/g);
+    for (const funcMatch of funcMatches) {
+        const startIdx = (funcMatch.index ?? 0) + (funcMatch[0]?.length ?? 0);
+        let braceCount = 1;
+        let endIdx = startIdx;
+        for (let i = startIdx; i < src.length && braceCount > 0; i++) {
+            if (src[i] === '{')
+                braceCount++;
+            if (src[i] === '}')
+                braceCount--;
+            endIdx = i;
+        }
+        const body = src.slice(startIdx, endIdx);
+        const lines = body.split('\n').length;
+        if (lines > 60) {
+            const line = lineOf(funcMatch.index ?? 0);
+            ocorrencias.push(warn(messages.PhpMensagens.longFunction, relPath, line));
+        }
+    }
+    for (const match of src.matchAll(/\b(?:var_dump|dump|print_r|die|exit)\s*\(/g)) {
+        const line = lineOf(match.index);
+        if (!relPath.includes('tests/') && !relPath.includes('debug/')) {
+            ocorrencias.push(warn(messages.PhpMensagens.debugOutput, relPath, line));
+        }
+    }
+    for (const match of scanWithoutStrings.matchAll(/\bfunction\s+([a-z][a-zA-Z0-9]*)\s*\(/g)) {
+        const funcName = match[1] ?? '';
+        if (/^[a-z]+[A-Z]/.test(funcName)) {
+            const line = lineOf(match.index);
+            ocorrencias.push(warn(messages.PhpMensagens.camelCaseFunction, relPath, line, messages.SeverityNiveis.suggestion));
+        }
+    }
+    return ocorrencias;
+}
+export const analistaPhp = criarAnalista({
+    nome: 'analista-php',
+    categoria: 'linguagem',
+    descricao: 'Analisa código PHP em busca de segurança, boas práticas e qualidade com parser dedicado.',
+    global: false,
+    test: (relPath) => isPhpFile(relPath),
+    aplicar: async (src, relPath) => {
+        if (disableEnv)
+            return null;
+        const msgs = collectPhpIssues(src, relPath);
+        return msgs.length ? msgs : null;
+    }
+});
+//# sourceMappingURL=analyst-php.js.map

package/dist/analysts/php/analysts/analyst-php.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-php.js","sourceRoot":"","sources":["../../../../src/analysts/php/analysts/analyst-php.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEnD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,CAAC;AAGnE,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,IAAI,CAAC,OAAe,EAAE,OAAe,EAAE,IAAa,EAAE,KAAc;IAC3E,OAAO,eAAe,CAAC;QACrB,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,KAAK,IAAI,QAAQ,CAAC,cAAc,CAAC,OAAO;QAC/C,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG;QACnC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,OAAe;IACpD,MAAM,WAAW,GAAU,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAG5C,MAAM,kBAAkB,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IAGlE,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,8DAA8D,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3G,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACxG,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3G,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/G,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3G,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,kDAAkD,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,8DAA8D,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/G,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,iHAAiH,CAAC,EAAE,CAAC;QACnK,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9G,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IAGD,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,qHAAqH,CAAC,EAAE,CAAC;QACxJ,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAChF,CAAC;IAGD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,mGAAmG,CAAC,CAAC;IACtI,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,MAAM,GAAG,QAAQ,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7D,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,UAAU,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,UAAU,EAAE,CAAC;YACjC,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACtC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YAC1C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,4CAA4C,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC;QAC1F,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;IACvC,IAAI,EAAE,cAAc;IACpB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,0FAA0F;IACrG,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;IACtD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAyB,EAAE;QACrD,IAAI,UAAU;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;CACF,CAAC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { messages } from '@core/messages';\nimport { createLineLookup } from '@shared/helpers';\n\nimport { criarAnalista, criarOcorrencia } from '@';\n\nconst disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_PHP === '1';\ntype Msg = ReturnType<typeof criarOcorrencia>;\n\nfunction isPhpFile(relPath: string): boolean {\n  return /\\.(php|phtml|php3|php4|php5|php7|php8)$/i.test(relPath);\n}\n\nfunction warn(message: string, relPath: string, line?: number, nivel?: string): Msg {\n  return criarOcorrencia({\n    relPath,\n    mensagem: message,\n    linha: line,\n    nivel: nivel ?? messages.SeverityNiveis.warning,\n    origem: messages.AnalystOrigens.php,\n    tipo: messages.AnalystTipos.php\n  });\n}\n\nfunction collectPhpIssues(src: string, relPath: string): Msg[] {\n  const ocorrencias: Msg[] = [];\n  const lineOf = createLineLookup(src).lineAt;\n\n  // Reduz falsos positivos mascarando strings\n  const scanWithoutStrings = src.replace(/['\"`][^'\"]*['\"`]/g, '\"\"');\n\n  // --- Security: SQL injection (mysql_query, mysqli_query, etc) ---\n  for (const match of scanWithoutStrings.matchAll(/\\b(?:mysql|mysqli|sqlite|pg)_query\\s*\\(\\s*\\$[^)]*(?:\\$|\\.)/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.sqlInjection, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // --- Security: eval() usage ---\n  for (const match of scanWithoutStrings.matchAll(/\\beval\\s*\\(/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.evalUsage, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // --- Security: assert() with string (code injection) ---\n  for (const match of scanWithoutStrings.matchAll(/\\bassert\\s*\\(\\s*['\"]/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.assertString, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // --- Security: unserialize() ---\n  for (const match of scanWithoutStrings.matchAll(/\\bunserialize\\s*\\(/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.unserializeUsage, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // --- Security: extract() ---\n  for (const match of scanWithoutStrings.matchAll(/\\bextract\\s*\\(/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.extractUsage, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // --- Security: file_get_contents with URL ---\n  for (const match of scanWithoutStrings.matchAll(/\\bfile_get_contents\\s*\\(\\s*['\"](?:https?:\\/\\/)/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.urlFetch, relPath, line));\n  }\n\n  // --- Security: system/exec/shell_exec/passthru ---\n  for (const match of scanWithoutStrings.matchAll(/\\b(?:system|exec|shell_exec|passthru|popen|proc_open)\\s*\\(/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.commandExecution, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // --- Security: $_REQUEST usage ---\n  for (const match of scanWithoutStrings.matchAll(/\\$_REQUEST\\b/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.requestUsage, relPath, line));\n  }\n\n  // --- Security: hardcoded secrets ---\n  for (const match of scanWithoutStrings.matchAll(/(?:password|secret|api[_-]?key|token|credential|db_password|db_user)\\s*(?::\\s*|=>\\s*|=\\s*[\"'`])([^\"'`\\s]{4,})/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.hardcodedSecret, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // --- Code Quality: deprecated mysql_* functions ---\n  for (const match of scanWithoutStrings.matchAll(/\\bmysql_\\w+\\s*\\(/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.deprecatedMysql, relPath, line));\n  }\n\n  // --- Code Quality: short_open_tag ---\n  if (/^<\\?[^=phHP\\r\\n]/m.test(src)) {\n    ocorrencias.push(warn(messages.PhpMensagens.shortOpenTag, relPath, 1));\n  }\n\n  // --- Code Quality: error suppression (@) ---\n  for (const match of src.matchAll(/@\\s*(?:mkdir|file_put_contents|fopen|include|require|unlink|copy|rename|move_uploaded_file|file_get_contents)\\s*\\(/g)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PhpMensagens.errorSuppression, relPath, line));\n  }\n\n  // --- Code Quality: long function/method ---\n  const funcMatches = src.matchAll(/(?:^|\\n)\\s*(?:public|private|protected|static)?\\s*function\\s+\\w+\\s*\\([^)]*\\)\\s*(?::\\s*\\w+)?\\s*\\{/g);\n  for (const funcMatch of funcMatches) {\n    const startIdx = (funcMatch.index ?? 0) + (funcMatch[0]?.length ?? 0);\n    let braceCount = 1;\n    let endIdx = startIdx;\n    for (let i = startIdx; i < src.length && braceCount > 0; i++) {\n      if (src[i] === '{') braceCount++;\n      if (src[i] === '}') braceCount--;\n      endIdx = i;\n    }\n    const body = src.slice(startIdx, endIdx);\n    const lines = body.split('\\n').length;\n    if (lines > 60) {\n      const line = lineOf(funcMatch.index ?? 0);\n      ocorrencias.push(warn(messages.PhpMensagens.longFunction, relPath, line));\n    }\n  }\n\n  // --- Code Quality: var_dump/die in production ---\n  for (const match of src.matchAll(/\\b(?:var_dump|dump|print_r|die|exit)\\s*\\(/g)) {\n    const line = lineOf(match.index);\n    if (!relPath.includes('tests/') && !relPath.includes('debug/')) {\n      ocorrencias.push(warn(messages.PhpMensagens.debugOutput, relPath, line));\n    }\n  }\n\n  // --- Style: naming convention (snake_case) ---\n  for (const match of scanWithoutStrings.matchAll(/\\bfunction\\s+([a-z][a-zA-Z0-9]*)\\s*\\(/g)) {\n    const funcName = match[1] ?? '';\n    if (/^[a-z]+[A-Z]/.test(funcName)) {\n      const line = lineOf(match.index);\n      ocorrencias.push(warn(messages.PhpMensagens.camelCaseFunction, relPath, line, messages.SeverityNiveis.suggestion));\n    }\n  }\n\n  return ocorrencias;\n}\n\nexport const analistaPhp = criarAnalista({\n  nome: 'analista-php',\n  categoria: 'linguagem',\n  descricao: 'Analisa código PHP em busca de segurança, boas práticas e qualidade com parser dedicado.',\n  global: false,\n  test: (relPath: string): boolean => isPhpFile(relPath),\n  aplicar: async (src, relPath): Promise<Msg[] | null> => {\n    if (disableEnv) return null;\n    const msgs = collectPhpIssues(src, relPath);\n    return msgs.length ? msgs : null;\n  }\n});\n"]}

package/dist/analysts/php/analysts/index.d.ts

@@ -0,0 +1,2 @@
+export * from './analyst-php.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/php/analysts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/php/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC"}

package/dist/analysts/php/analysts/index.js

@@ -0,0 +1,2 @@
+export * from './analyst-php.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/php/analysts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/php/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC","sourcesContent":["export * from './analyst-php.js';\n"]}

package/dist/analysts/php/corrections/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/php/corrections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/php/corrections/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC"}

package/dist/analysts/php/corrections/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/analysts/php/corrections/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/php/corrections/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport {};\n"]}

package/dist/analysts/php/detectors/detector-php-best-practices.d.ts

@@ -0,0 +1,12 @@
+import type { criarOcorrencia } from '../../../types/index.js';
+type Msg = ReturnType<typeof criarOcorrencia>;
+export declare const detectorPhpBestPractices: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    global: false;
+    test: (relPath: string) => boolean;
+    aplicar: (src: string, relPath: string) => Promise<Msg[] | null>;
+};
+export {};
+//# sourceMappingURL=detector-php-best-practices.d.ts.map

package/dist/analysts/php/detectors/detector-php-best-practices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-php-best-practices.d.ts","sourceRoot":"","sources":["../../../../src/analysts/php/detectors/detector-php-best-practices.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAIzC,KAAK,GAAG,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;AAgL9C,eAAO,MAAM,wBAAwB;;;;;oBAKnB,MAAM,KAAG,OAAO;+CACD,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;CAKpD,CAAC"}

package/dist/analysts/php/detectors/detector-php-best-practices.js

@@ -0,0 +1,174 @@
+import { messages } from '../../../core/messages/index.js';
+import { createLineLookup, maskPhpComments } from '../../../shared/helpers/index.js';
+import { criarAnalista } from '../../../types/index.js';
+const disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_PHP === '1';
+function detectBestPracticesIssues(src, relPath) {
+    const ocorrencias = [];
+    const lineOf = createLineLookup(src).lineAt;
+    const scan = maskPhpComments(src);
+    if (/^<\?php/i.test(src) && !/^<\?php\s+declare\s*\(\s*strict_types\s*=\s*1\s*\)/im.test(src)) {
+        ocorrencias.push({
+            relPath,
+            mensagem: messages.PhpMensagens.missingStrictTypes,
+            linha: 1,
+            nivel: messages.SeverityNiveis.suggestion,
+            origem: 'detector-php-best-practices',
+            tipo: 'php/rule'
+        });
+    }
+    const deprecatedFns = [
+        /\bmysql_\w+\s*\(/gi,
+        /\bereg(?:_\w+)?\s*\(/gi,
+        /\bsplit\s*\(/gi,
+        /\beach\s*\(/gi,
+        /\bcreate_function\s*\(/gi,
+        /\b__autoload\s*\(/gi,
+        /\bmagic_quotes_runtime\s*\(/gi,
+        /\bset_magic_quotes_runtime\s*\(/gi,
+        /\bcall_user_method\s*\(/gi,
+        /\bcall_user_method_array\s*\(/gi,
+        /\bdl\s*\(/gi
+    ];
+    for (const regex of deprecatedFns) {
+        for (const match of scan.matchAll(regex)) {
+            const line = lineOf(match.index);
+            ocorrencias.push({
+                relPath,
+                mensagem: messages.PhpMensagens.deprecatedFunction,
+                linha: line,
+                nivel: messages.SeverityNiveis.warning,
+                origem: 'detector-php-best-practices',
+                tipo: 'php/rule'
+            });
+        }
+    }
+    for (const match of scan.matchAll(/(?<!\$)[\s(,=[+\-*/%&|^]=?](\d{3,})\b(?!\s*=>)/g)) {
+        const line = lineOf(match.index);
+        const context = scan.slice(Math.max(0, (match.index ?? 0) - 40), match.index ?? 0);
+        if (!context.includes('define') && !context.includes('const') && !context.includes('LIMIT') && !context.includes('offset') && !context.includes('count') && !context.includes('max') && !context.includes('min') && !context.includes('timeout') && !context.includes('port') && !context.includes('sleep')) {
+            ocorrencias.push({
+                relPath,
+                mensagem: messages.PhpMensagens.magicNumber,
+                linha: line,
+                nivel: messages.SeverityNiveis.suggestion,
+                origem: 'detector-php-best-practices',
+                tipo: 'php/rule'
+            });
+        }
+    }
+    for (const funcMatch of scan.matchAll(/(?:^|\n)\s*(?:public|private|protected|static)?\s*function\s+\w+\s*\([^)]*\)\s*(?::\s*\w+(?:\s*\|\s*\w+)*)?\s*\{/g)) {
+        const funcStart = funcMatch.index ?? 0;
+        const bodyStart = funcStart + (funcMatch[0]?.length ?? 0);
+        let braceCount = 1;
+        let bodyEnd = bodyStart;
+        for (let i = bodyStart; i < scan.length && braceCount > 0; i++) {
+            if (scan[i] === '{')
+                braceCount++;
+            if (scan[i] === '}')
+                braceCount--;
+            bodyEnd = i;
+        }
+        const body = src.slice(bodyStart, bodyEnd);
+        const complexityMarkers = body.match(/\b(?:if|elseif|for|foreach|while|case\s|catch|&&|\|\|)\b/g);
+        const complexity = complexityMarkers ? complexityMarkers.length : 0;
+        if (complexity > 10) {
+            const line = lineOf(funcStart);
+            ocorrencias.push({
+                relPath,
+                mensagem: messages.PhpMensagens.highComplexity,
+                linha: line,
+                nivel: messages.SeverityNiveis.warning,
+                origem: 'detector-php-best-practices',
+                tipo: 'php/rule'
+            });
+        }
+    }
+    const riskyOps = ['file_get_contents', 'file_put_contents', 'fopen', 'mkdir', 'unlink', 'copy', 'rename', 'move_uploaded_file', 'curl_exec', 'ftp_get', 'ftp_put'];
+    for (const op of riskyOps) {
+        for (const match of scan.matchAll(new RegExp(`\\b${op}\\s*\\(`, 'gi'))) {
+            const line = lineOf(match.index);
+            const before = scan.slice(Math.max(0, (match.index ?? 0) - 100), match.index ?? 0);
+            if (!before.includes('@') && !before.includes('try') && !before.includes('if') && !/(?:if\s*\(|try\s*\{)/.test(before)) {
+                ocorrencias.push({
+                    relPath,
+                    mensagem: messages.PhpMensagens.missingErrorHandling,
+                    linha: line,
+                    nivel: messages.SeverityNiveis.warning,
+                    origem: 'detector-php-best-practices',
+                    tipo: 'php/rule'
+                });
+            }
+        }
+    }
+    for (const match of scan.matchAll(/\$(?:_GET|_POST|_REQUEST|_COOKIE|_SERVER)\s*\[/gi)) {
+        const line = lineOf(match.index);
+        const before = scan.slice(Math.max(0, (match.index ?? 0) - 150), match.index ?? 0);
+        if (!before.includes('filter_input') && !before.includes('filter_var') && !before.includes('htmlspecialchars') && !before.includes('trim') && !before.includes('strip_tags') && !before.includes('intval') && !/=\s*(int|float|string|bool)\s*\$/.test(before)) {
+            ocorrencias.push({
+                relPath,
+                mensagem: messages.PhpMensagens.unfilteredSuperglobal,
+                linha: line,
+                nivel: messages.SeverityNiveis.warning,
+                origem: 'detector-php-best-practices',
+                tipo: 'php/rule'
+            });
+        }
+    }
+    for (const match of scan.matchAll(/(?:^|\n)\s*global\s+\$/gm)) {
+        const line = lineOf(match.index);
+        ocorrencias.push({
+            relPath,
+            mensagem: messages.PhpMensagens.globalKeyword,
+            linha: line,
+            nivel: messages.SeverityNiveis.suggestion,
+            origem: 'detector-php-best-practices',
+            tipo: 'php/rule'
+        });
+    }
+    for (const match of scan.matchAll(/(?:^|\n)\s*(?:public|private|protected)\s+function\s+([a-zA-Z_]\w*)\s*\(/g)) {
+        const funcName = match[1];
+        if (funcName && /^[A-Z]/.test(funcName)) {
+            const line = lineOf(match.index);
+            ocorrencias.push({
+                relPath,
+                mensagem: messages.PhpMensagens.methodNamingConvention,
+                linha: line,
+                nivel: messages.SeverityNiveis.suggestion,
+                origem: 'detector-php-best-practices',
+                tipo: 'php/rule'
+            });
+        }
+    }
+    for (const match of scan.matchAll(/(?:^|\n)\s*(?:public|private|protected|static)?\s*function\s+\w+\s*\(([^)]*)\)/g)) {
+        const params = match[1];
+        if (params) {
+            const paramCount = params.split(',').filter(p => p.trim().length > 0 && !p.includes('\n')).length;
+            if (paramCount > 5) {
+                const line = lineOf(match.index);
+                ocorrencias.push({
+                    relPath,
+                    mensagem: messages.PhpMensagens.longParameterList,
+                    linha: line,
+                    nivel: messages.SeverityNiveis.suggestion,
+                    origem: 'detector-php-best-practices',
+                    tipo: 'php/rule'
+                });
+            }
+        }
+    }
+    return ocorrencias;
+}
+export const detectorPhpBestPractices = criarAnalista({
+    nome: 'detector-php-best-practices',
+    categoria: 'boas-praticas',
+    descricao: 'Detecta desvios de boas práticas e code style em código PHP.',
+    global: false,
+    test: (relPath) => /\.(php|phtml|php3|php4|php5|php7|php8)$/i.test(relPath),
+    aplicar: async (src, relPath) => {
+        if (disableEnv)
+            return null;
+        const msgs = detectBestPracticesIssues(src, relPath);
+        return msgs.length ? msgs : null;
+    }
+});
+//# sourceMappingURL=detector-php-best-practices.js.map

package/dist/analysts/php/detectors/detector-php-best-practices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-php-best-practices.js","sourceRoot":"","sources":["../../../../src/analysts/php/detectors/detector-php-best-practices.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGpE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,CAAC;AAElC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,CAAC;AAGnE,SAAS,yBAAyB,CAAC,GAAW,EAAE,OAAe;IAC7D,MAAM,WAAW,GAAU,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAGlC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sDAAsD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9F,WAAW,CAAC,IAAI,CAAC;YACf,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,kBAAkB;YAClD,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU;YACzC,MAAM,EAAE,6BAA6B;YACrC,IAAI,EAAE,UAAU;SACV,CAAC,CAAC;IACZ,CAAC;IAGD,MAAM,aAAa,GAAG;QACpB,oBAAoB;QACpB,wBAAwB;QACxB,gBAAgB;QAChB,eAAe;QACf,0BAA0B;QAC1B,qBAAqB;QACrB,+BAA+B;QAC/B,mCAAmC;QACnC,2BAA2B;QAC3B,iCAAiC;QACjC,aAAa;KACd,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,kBAAkB;gBAClD,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;gBACtC,MAAM,EAAE,6BAA6B;gBACrC,IAAI,EAAE,UAAU;aACV,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5S,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,WAAW;gBAC3C,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU;gBACzC,MAAM,EAAE,6BAA6B;gBACrC,IAAI,EAAE,UAAU;aACV,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,mHAAmH,CAAC,EAAE,CAAC;QAC3J,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,SAAS,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,UAAU,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,UAAU,EAAE,CAAC;YAClC,OAAO,GAAG,CAAC,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAClG,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,cAAc;gBAC9C,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;gBACtC,MAAM,EAAE,6BAA6B;gBACrC,IAAI,EAAE,UAAU;aACV,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAGD,MAAM,QAAQ,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACnK,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvH,WAAW,CAAC,IAAI,CAAC;oBACf,OAAO;oBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,oBAAoB;oBACpD,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;oBACtC,MAAM,EAAE,6BAA6B;oBACrC,IAAI,EAAE,UAAU;iBACV,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/P,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,qBAAqB;gBACrD,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;gBACtC,MAAM,EAAE,6BAA6B;gBACrC,IAAI,EAAE,UAAU;aACV,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC;YACf,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,aAAa;YAC7C,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU;YACzC,MAAM,EAAE,6BAA6B;YACrC,IAAI,EAAE,UAAU;SACV,CAAC,CAAC;IACZ,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,2EAA2E,CAAC,EAAE,CAAC;QAC/G,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,sBAAsB;gBACtD,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU;gBACzC,MAAM,EAAE,6BAA6B;gBACrC,IAAI,EAAE,UAAU;aACV,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,iFAAiF,CAAC,EAAE,CAAC;QACrH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YAClG,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC;oBACf,OAAO;oBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,iBAAiB;oBACjD,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU;oBACzC,MAAM,EAAE,6BAA6B;oBACrC,IAAI,EAAE,UAAU;iBACV,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;IACpD,IAAI,EAAE,6BAA6B;IACnC,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,8DAA8D;IACzE,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC;IAC5F,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAyB,EAAE;QACrD,IAAI,UAAU;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,IAAI,GAAG,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;CACF,CAAC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { messages } from '@core/messages';\nimport { createLineLookup, maskPhpComments } from '@shared/helpers';\n\nimport type { criarOcorrencia } from '@';\nimport { criarAnalista } from '@';\n\nconst disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_PHP === '1';\ntype Msg = ReturnType<typeof criarOcorrencia>;\n\nfunction detectBestPracticesIssues(src: string, relPath: string): Msg[] {\n  const ocorrencias: Msg[] = [];\n  const lineOf = createLineLookup(src).lineAt;\n  const scan = maskPhpComments(src);\n\n  // Missing strict types declaration\n  if (/^<\\?php/i.test(src) && !/^<\\?php\\s+declare\\s*\\(\\s*strict_types\\s*=\\s*1\\s*\\)/im.test(src)) {\n    ocorrencias.push({\n      relPath,\n      mensagem: messages.PhpMensagens.missingStrictTypes,\n      linha: 1,\n      nivel: messages.SeverityNiveis.suggestion,\n      origem: 'detector-php-best-practices',\n      tipo: 'php/rule'\n    } as Msg);\n  }\n\n  // Deprecated functions\n  const deprecatedFns = [\n    /\\bmysql_\\w+\\s*\\(/gi,\n    /\\bereg(?:_\\w+)?\\s*\\(/gi,\n    /\\bsplit\\s*\\(/gi,\n    /\\beach\\s*\\(/gi,\n    /\\bcreate_function\\s*\\(/gi,\n    /\\b__autoload\\s*\\(/gi,\n    /\\bmagic_quotes_runtime\\s*\\(/gi,\n    /\\bset_magic_quotes_runtime\\s*\\(/gi,\n    /\\bcall_user_method\\s*\\(/gi,\n    /\\bcall_user_method_array\\s*\\(/gi,\n    /\\bdl\\s*\\(/gi\n  ];\n  for (const regex of deprecatedFns) {\n    for (const match of scan.matchAll(regex)) {\n      const line = lineOf(match.index);\n      ocorrencias.push({\n        relPath,\n        mensagem: messages.PhpMensagens.deprecatedFunction,\n        linha: line,\n        nivel: messages.SeverityNiveis.warning,\n        origem: 'detector-php-best-practices',\n        tipo: 'php/rule'\n      } as Msg);\n    }\n  }\n\n  // Magic numbers (numeric literals that aren't 0, 1, -1, or common config values)\n  for (const match of scan.matchAll(/(?<!\\$)[\\s(,=[+\\-*/%&|^]=?](\\d{3,})\\b(?!\\s*=>)/g)) {\n    const line = lineOf(match.index);\n    const context = scan.slice(Math.max(0, (match.index ?? 0) - 40), match.index ?? 0);\n    if (!context.includes('define') && !context.includes('const') && !context.includes('LIMIT') && !context.includes('offset') && !context.includes('count') && !context.includes('max') && !context.includes('min') && !context.includes('timeout') && !context.includes('port') && !context.includes('sleep')) {\n      ocorrencias.push({\n        relPath,\n        mensagem: messages.PhpMensagens.magicNumber,\n        linha: line,\n        nivel: messages.SeverityNiveis.suggestion,\n        origem: 'detector-php-best-practices',\n        tipo: 'php/rule'\n      } as Msg);\n    }\n  }\n\n  // Complex functions (cyclomatic complexity via brace counting)\n  for (const funcMatch of scan.matchAll(/(?:^|\\n)\\s*(?:public|private|protected|static)?\\s*function\\s+\\w+\\s*\\([^)]*\\)\\s*(?::\\s*\\w+(?:\\s*\\|\\s*\\w+)*)?\\s*\\{/g)) {\n    const funcStart = funcMatch.index ?? 0;\n    const bodyStart = funcStart + (funcMatch[0]?.length ?? 0);\n    let braceCount = 1;\n    let bodyEnd = bodyStart;\n    for (let i = bodyStart; i < scan.length && braceCount > 0; i++) {\n      if (scan[i] === '{') braceCount++;\n      if (scan[i] === '}') braceCount--;\n      bodyEnd = i;\n    }\n    const body = src.slice(bodyStart, bodyEnd);\n    const complexityMarkers = body.match(/\\b(?:if|elseif|for|foreach|while|case\\s|catch|&&|\\|\\|)\\b/g);\n    const complexity = complexityMarkers ? complexityMarkers.length : 0;\n    if (complexity > 10) {\n      const line = lineOf(funcStart);\n      ocorrencias.push({\n        relPath,\n        mensagem: messages.PhpMensagens.highComplexity,\n        linha: line,\n        nivel: messages.SeverityNiveis.warning,\n        origem: 'detector-php-best-practices',\n        tipo: 'php/rule'\n      } as Msg);\n    }\n  }\n\n  // Missing error handling around risky operations\n  const riskyOps = ['file_get_contents', 'file_put_contents', 'fopen', 'mkdir', 'unlink', 'copy', 'rename', 'move_uploaded_file', 'curl_exec', 'ftp_get', 'ftp_put'];\n  for (const op of riskyOps) {\n    for (const match of scan.matchAll(new RegExp(`\\\\b${op}\\\\s*\\\\(`, 'gi'))) {\n      const line = lineOf(match.index);\n      const before = scan.slice(Math.max(0, (match.index ?? 0) - 100), match.index ?? 0);\n      if (!before.includes('@') && !before.includes('try') && !before.includes('if') && !/(?:if\\s*\\(|try\\s*\\{)/.test(before)) {\n        ocorrencias.push({\n          relPath,\n          mensagem: messages.PhpMensagens.missingErrorHandling,\n          linha: line,\n          nivel: messages.SeverityNiveis.warning,\n          origem: 'detector-php-best-practices',\n          tipo: 'php/rule'\n        } as Msg);\n      }\n    }\n  }\n\n  // Superglobal access without filtering\n  for (const match of scan.matchAll(/\\$(?:_GET|_POST|_REQUEST|_COOKIE|_SERVER)\\s*\\[/gi)) {\n    const line = lineOf(match.index);\n    const before = scan.slice(Math.max(0, (match.index ?? 0) - 150), match.index ?? 0);\n    if (!before.includes('filter_input') && !before.includes('filter_var') && !before.includes('htmlspecialchars') && !before.includes('trim') && !before.includes('strip_tags') && !before.includes('intval') && !/=\\s*(int|float|string|bool)\\s*\\$/.test(before)) {\n      ocorrencias.push({\n        relPath,\n        mensagem: messages.PhpMensagens.unfilteredSuperglobal,\n        linha: line,\n        nivel: messages.SeverityNiveis.warning,\n        origem: 'detector-php-best-practices',\n        tipo: 'php/rule'\n      } as Msg);\n    }\n  }\n\n  // Use of `global` keyword in functions\n  for (const match of scan.matchAll(/(?:^|\\n)\\s*global\\s+\\$/gm)) {\n    const line = lineOf(match.index);\n    ocorrencias.push({\n      relPath,\n      mensagem: messages.PhpMensagens.globalKeyword,\n      linha: line,\n      nivel: messages.SeverityNiveis.suggestion,\n      origem: 'detector-php-best-practices',\n      tipo: 'php/rule'\n    } as Msg);\n  }\n\n  // Method naming conventions (PSR-12: methods should be camelCase)\n  for (const match of scan.matchAll(/(?:^|\\n)\\s*(?:public|private|protected)\\s+function\\s+([a-zA-Z_]\\w*)\\s*\\(/g)) {\n    const funcName = match[1];\n    if (funcName && /^[A-Z]/.test(funcName)) {\n      const line = lineOf(match.index);\n      ocorrencias.push({\n        relPath,\n        mensagem: messages.PhpMensagens.methodNamingConvention,\n        linha: line,\n        nivel: messages.SeverityNiveis.suggestion,\n        origem: 'detector-php-best-practices',\n        tipo: 'php/rule'\n      } as Msg);\n    }\n  }\n\n  // Long parameter lists (>5 params)\n  for (const match of scan.matchAll(/(?:^|\\n)\\s*(?:public|private|protected|static)?\\s*function\\s+\\w+\\s*\\(([^)]*)\\)/g)) {\n    const params = match[1];\n    if (params) {\n      const paramCount = params.split(',').filter(p => p.trim().length > 0 && !p.includes('\\n')).length;\n      if (paramCount > 5) {\n        const line = lineOf(match.index);\n        ocorrencias.push({\n          relPath,\n          mensagem: messages.PhpMensagens.longParameterList,\n          linha: line,\n          nivel: messages.SeverityNiveis.suggestion,\n          origem: 'detector-php-best-practices',\n          tipo: 'php/rule'\n        } as Msg);\n      }\n    }\n  }\n\n  return ocorrencias;\n}\n\nexport const detectorPhpBestPractices = criarAnalista({\n  nome: 'detector-php-best-practices',\n  categoria: 'boas-praticas',\n  descricao: 'Detecta desvios de boas práticas e code style em código PHP.',\n  global: false,\n  test: (relPath: string): boolean => /\\.(php|phtml|php3|php4|php5|php7|php8)$/i.test(relPath),\n  aplicar: async (src, relPath): Promise<Msg[] | null> => {\n    if (disableEnv) return null;\n    const msgs = detectBestPracticesIssues(src, relPath);\n    return msgs.length ? msgs : null;\n  }\n});\n"]}

package/dist/analysts/php/detectors/detector-php-security.d.ts

@@ -0,0 +1,12 @@
+import type { criarOcorrencia } from '../../../types/index.js';
+type Msg = ReturnType<typeof criarOcorrencia>;
+export declare const detectorPhpSecurity: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    global: false;
+    test: (relPath: string) => boolean;
+    aplicar: (src: string, relPath: string) => Promise<Msg[] | null>;
+};
+export {};
+//# sourceMappingURL=detector-php-security.d.ts.map

package/dist/analysts/php/detectors/detector-php-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-php-security.d.ts","sourceRoot":"","sources":["../../../../src/analysts/php/detectors/detector-php-security.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAIzC,KAAK,GAAG,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;AAkM9C,eAAO,MAAM,mBAAmB;;;;;oBAKd,MAAM,KAAG,OAAO;+CACD,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;CAKpD,CAAC"}