@mocoto/mahoraga 0.14.0

package/dist/analysts/php/detectors/detector-php-security.js

@@ -0,0 +1,188 @@
+import { messages } from '../../../core/messages/index.js';
+import { createLineLookup, maskPhpComments } from '../../../shared/helpers/index.js';
+import { criarAnalista } from '../../../types/index.js';
+const disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_PHP === '1';
+function detectSecurityIssues(src, relPath) {
+    const ocorrencias = [];
+    const lineOf = createLineLookup(src).lineAt;
+    const scan = maskPhpComments(src);
+    for (const match of scan.matchAll(/(?:if|elseif|while)\s*\([^)]*==[^=][^)]*\)/gi)) {
+        const line = lineOf(match.index);
+        const snippet = scan.slice(Math.max(0, (match.index ?? 0) - 40), (match.index ?? 0) + 120);
+        if (/\$_(?:GET|POST|REQUEST|COOKIE|SERVER)/.test(snippet) || /password|senha|token|auth|login/i.test(snippet)) {
+            ocorrencias.push({
+                relPath,
+                mensagem: messages.PhpMensagens.looseComparison,
+                linha: line,
+                nivel: messages.SeverityNiveis.warning,
+                origem: 'detector-php-security',
+                tipo: 'php/rule'
+            });
+        }
+    }
+    for (const match of scan.matchAll(/\b(?:include|require)(?:_once)?\s*\(\s*\$/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push({
+            relPath,
+            mensagem: messages.PhpMensagens.insecureFileInclude,
+            linha: line,
+            nivel: messages.SeverityNiveis.error,
+            origem: 'detector-php-security',
+            tipo: 'php/rule'
+        });
+    }
+    for (const match of scan.matchAll(/(?:echo|print)\s+.*\$(?:_GET|_POST|_REQUEST|_COOKIE|_SERVER)/gi)) {
+        const line = lineOf(match.index);
+        const before = scan.slice(Math.max(0, (match.index ?? 0) - 120), match.index ?? 0);
+        if (!before.includes('htmlspecialchars') && !before.includes('htmlentities') && !before.includes('strip_tags') && !before.includes('filter_var') && !before.includes('esc_html') && !before.includes('e(')) {
+            ocorrencias.push({
+                relPath,
+                mensagem: messages.PhpMensagens.xssOutput,
+                linha: line,
+                nivel: messages.SeverityNiveis.error,
+                origem: 'detector-php-security',
+                tipo: 'php/rule'
+            });
+        }
+    }
+    for (const match of scan.matchAll(/<form[^>]*>/gi)) {
+        const formPos = match.index ?? 0;
+        const formTag = match[0];
+        const formEnd = scan.indexOf('</form>', formPos);
+        const formBlock = scan.slice(formPos, formEnd > 0 ? formEnd + 7 : formPos + 500);
+        const line = lineOf(formPos);
+        if (!formBlock.includes('csrf_field') && !formBlock.includes('csrf_token') && !formBlock.includes('wp_nonce') && !formBlock.includes('_token') && !formBlock.includes('__RequestVerificationToken') && formTag.includes('action') && !formTag.includes('action="') && !formTag.includes("action='")) {
+            ocorrencias.push({
+                relPath,
+                mensagem: messages.PhpMensagens.csrfMissing,
+                linha: line,
+                nivel: messages.SeverityNiveis.warning,
+                origem: 'detector-php-security',
+                tipo: 'php/rule'
+            });
+        }
+    }
+    for (const match of scan.matchAll(/header\s*\(\s*['"]\s*Location\s*['"]\s*,\s*\$/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push({
+            relPath,
+            mensagem: messages.PhpMensagens.openRedirect,
+            linha: line,
+            nivel: messages.SeverityNiveis.warning,
+            origem: 'detector-php-security',
+            tipo: 'php/rule'
+        });
+    }
+    for (const match of scan.matchAll(/header\s*\(\s*['"]\s*Location\s*:\s*\$/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push({
+            relPath,
+            mensagem: messages.PhpMensagens.openRedirect,
+            linha: line,
+            nivel: messages.SeverityNiveis.warning,
+            origem: 'detector-php-security',
+            tipo: 'php/rule'
+        });
+    }
+    const dangerousIni = ['allow_url_include', 'allow_url_fopen', 'display_errors', 'register_globals', 'session.use_cookies', 'session.use_only_cookies', 'session.use_trans_sid'];
+    for (const match of scan.matchAll(/ini_set\s*\(\s*['"]([^'"]+)['"]/gi)) {
+        const key = match[1];
+        if (key && dangerousIni.some(d => key.includes(d))) {
+            const line = lineOf(match.index);
+            ocorrencias.push({
+                relPath,
+                mensagem: messages.PhpMensagens.dangerousIniSet,
+                linha: line,
+                nivel: messages.SeverityNiveis.warning,
+                origem: 'detector-php-security',
+                tipo: 'php/rule'
+            });
+        }
+    }
+    for (const match of scan.matchAll(/\bregister_globals\b/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push({
+            relPath,
+            mensagem: messages.PhpMensagens.registerGlobals,
+            linha: line,
+            nivel: messages.SeverityNiveis.error,
+            origem: 'detector-php-security',
+            tipo: 'php/rule'
+        });
+    }
+    if (/password/i.test(scan)) {
+        const hasHash = /\bpassword_hash\s*\(/.test(scan);
+        const hasVerify = /\bpassword_verify\s*\(/.test(scan);
+        if (hasHash && !hasVerify) {
+            for (const match of scan.matchAll(/\bpassword_hash\s*\(/gi)) {
+                const line = lineOf(match.index);
+                ocorrencias.push({
+                    relPath,
+                    mensagem: messages.PhpMensagens.passwordHashWithoutVerify,
+                    linha: line,
+                    nivel: messages.SeverityNiveis.warning,
+                    origem: 'detector-php-security',
+                    tipo: 'php/rule'
+                });
+            }
+        }
+        if (/(?:md5|sha1)\s*\(\s*\$.*pass/i.test(scan)) {
+            for (const match of scan.matchAll(/(?:md5|sha1)\s*\(/gi)) {
+                const line = lineOf(match.index);
+                const before = scan.slice(Math.max(0, (match.index ?? 0) - 60), match.index ?? 0);
+                if (/pass/i.test(before) || /pass/i.test(scan.slice(match.index ?? 0, (match.index ?? 0) + 80))) {
+                    ocorrencias.push({
+                        relPath,
+                        mensagem: messages.PhpMensagens.weakPasswordHash,
+                        linha: line,
+                        nivel: messages.SeverityNiveis.error,
+                        origem: 'detector-php-security',
+                        tipo: 'php/rule'
+                    });
+                }
+            }
+        }
+    }
+    if (/\bsession_start\s*\(/i.test(scan)) {
+        const hasRegenerate = /\bsession_regenerate_id\s*\(/i.test(scan);
+        if (!hasRegenerate) {
+            for (const match of scan.matchAll(/\bsession_start\s*\(/gi)) {
+                const line = lineOf(match.index);
+                ocorrencias.push({
+                    relPath,
+                    mensagem: messages.PhpMensagens.sessionFixation,
+                    linha: line,
+                    nivel: messages.SeverityNiveis.warning,
+                    origem: 'detector-php-security',
+                    tipo: 'php/rule'
+                });
+            }
+        }
+    }
+    for (const match of scan.matchAll(/\b(?:mysql|mysqli|sqlite|pg)_query\s*\(\s*[^)]*\$(?:row|data|result|res|item|entry)\b/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push({
+            relPath,
+            mensagem: messages.PhpMensagens.secondOrderInjection,
+            linha: line,
+            nivel: messages.SeverityNiveis.warning,
+            origem: 'detector-php-security',
+            tipo: 'php/rule'
+        });
+    }
+    return ocorrencias;
+}
+export const detectorPhpSecurity = criarAnalista({
+    nome: 'detector-php-security',
+    categoria: 'seguranca',
+    descricao: 'Detecta vulnerabilidades de segurança em código PHP.',
+    global: false,
+    test: (relPath) => /\.(php|phtml|php3|php4|php5|php7|php8)$/i.test(relPath),
+    aplicar: async (src, relPath) => {
+        if (disableEnv)
+            return null;
+        const msgs = detectSecurityIssues(src, relPath);
+        return msgs.length ? msgs : null;
+    }
+});
+//# sourceMappingURL=detector-php-security.js.map

package/dist/analysts/php/detectors/detector-php-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-php-security.js","sourceRoot":"","sources":["../../../../src/analysts/php/detectors/detector-php-security.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGpE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,CAAC;AAElC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,CAAC;AAGnE,SAAS,oBAAoB,CAAC,GAAW,EAAE,OAAe;IACxD,MAAM,WAAW,GAAU,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAGlC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC3F,IAAI,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9G,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,eAAe;gBAC/C,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;gBACtC,MAAM,EAAE,uBAAuB;gBAC/B,IAAI,EAAE,UAAU;aACV,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC;YACf,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,mBAAmB;YACnD,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK;YACpC,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,UAAU;SACV,CAAC,CAAC;IACZ,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,gEAAgE,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3M,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,SAAS;gBACzC,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK;gBACpC,MAAM,EAAE,uBAAuB;gBAC/B,IAAI,EAAE,UAAU;aACV,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACpS,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,WAAW;gBAC3C,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;gBACtC,MAAM,EAAE,uBAAuB;gBAC/B,IAAI,EAAE,UAAU;aACV,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,iDAAiD,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC;YACf,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,YAAY;YAC5C,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;YACtC,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,UAAU;SACV,CAAC,CAAC;IACZ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC;YACf,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,YAAY;YAC5C,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;YACtC,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,UAAU;SACV,CAAC,CAAC;IACZ,CAAC;IAGD,MAAM,YAAY,GAAG,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,uBAAuB,CAAC,CAAC;IAChL,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,eAAe;gBAC/C,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;gBACtC,MAAM,EAAE,uBAAuB;gBAC/B,IAAI,EAAE,UAAU;aACV,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC;YACf,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,eAAe;YAC/C,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK;YACpC,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,UAAU;SACV,CAAC,CAAC;IACZ,CAAC;IAGD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC;oBACf,OAAO;oBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,yBAAyB;oBACzD,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;oBACtC,MAAM,EAAE,uBAAuB;oBAC/B,IAAI,EAAE,UAAU;iBACV,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;gBAClF,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;oBAChG,WAAW,CAAC,IAAI,CAAC;wBACf,OAAO;wBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,gBAAgB;wBAChD,KAAK,EAAE,IAAI;wBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK;wBACpC,MAAM,EAAE,uBAAuB;wBAC/B,IAAI,EAAE,UAAU;qBACV,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGD,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC;oBACf,OAAO;oBACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,eAAe;oBAC/C,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;oBACtC,MAAM,EAAE,uBAAuB;oBAC/B,IAAI,EAAE,UAAU;iBACV,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,yFAAyF,CAAC,EAAE,CAAC;QAC7H,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC;YACf,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,oBAAoB;YACpD,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO;YACtC,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,UAAU;SACV,CAAC,CAAC;IACZ,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;IAC/C,IAAI,EAAE,uBAAuB;IAC7B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,sDAAsD;IACjE,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC;IAC5F,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAyB,EAAE;QACrD,IAAI,UAAU;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;CACF,CAAC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { messages } from '@core/messages';\nimport { createLineLookup, maskPhpComments } from '@shared/helpers';\n\nimport type { criarOcorrencia } from '@';\nimport { criarAnalista } from '@';\n\nconst disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_PHP === '1';\ntype Msg = ReturnType<typeof criarOcorrencia>;\n\nfunction detectSecurityIssues(src: string, relPath: string): Msg[] {\n  const ocorrencias: Msg[] = [];\n  const lineOf = createLineLookup(src).lineAt;\n  const scan = maskPhpComments(src);\n\n  // Loose comparison (== vs ===) in security-sensitive contexts\n  for (const match of scan.matchAll(/(?:if|elseif|while)\\s*\\([^)]*==[^=][^)]*\\)/gi)) {\n    const line = lineOf(match.index);\n    const snippet = scan.slice(Math.max(0, (match.index ?? 0) - 40), (match.index ?? 0) + 120);\n    if (/\\$_(?:GET|POST|REQUEST|COOKIE|SERVER)/.test(snippet) || /password|senha|token|auth|login/i.test(snippet)) {\n      ocorrencias.push({\n        relPath,\n        mensagem: messages.PhpMensagens.looseComparison,\n        linha: line,\n        nivel: messages.SeverityNiveis.warning,\n        origem: 'detector-php-security',\n        tipo: 'php/rule'\n      } as Msg);\n    }\n  }\n\n  // Insecure file inclusion (include/require with user input)\n  for (const match of scan.matchAll(/\\b(?:include|require)(?:_once)?\\s*\\(\\s*\\$/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push({\n      relPath,\n      mensagem: messages.PhpMensagens.insecureFileInclude,\n      linha: line,\n      nivel: messages.SeverityNiveis.error,\n      origem: 'detector-php-security',\n      tipo: 'php/rule'\n    } as Msg);\n  }\n\n  // XSS: echo/print with user input without htmlspecialchars\n  for (const match of scan.matchAll(/(?:echo|print)\\s+.*\\$(?:_GET|_POST|_REQUEST|_COOKIE|_SERVER)/gi)) {\n    const line = lineOf(match.index);\n    const before = scan.slice(Math.max(0, (match.index ?? 0) - 120), match.index ?? 0);\n    if (!before.includes('htmlspecialchars') && !before.includes('htmlentities') && !before.includes('strip_tags') && !before.includes('filter_var') && !before.includes('esc_html') && !before.includes('e(')) {\n      ocorrencias.push({\n        relPath,\n        mensagem: messages.PhpMensagens.xssOutput,\n        linha: line,\n        nivel: messages.SeverityNiveis.error,\n        origem: 'detector-php-security',\n        tipo: 'php/rule'\n      } as Msg);\n    }\n  }\n\n  // CSRF protection missing\n  for (const match of scan.matchAll(/<form[^>]*>/gi)) {\n    const formPos = match.index ?? 0;\n    const formTag = match[0];\n    const formEnd = scan.indexOf('</form>', formPos);\n    const formBlock = scan.slice(formPos, formEnd > 0 ? formEnd + 7 : formPos + 500);\n    const line = lineOf(formPos);\n    if (!formBlock.includes('csrf_field') && !formBlock.includes('csrf_token') && !formBlock.includes('wp_nonce') && !formBlock.includes('_token') && !formBlock.includes('__RequestVerificationToken') && formTag.includes('action') && !formTag.includes('action=\"') && !formTag.includes(\"action='\")) {\n      ocorrencias.push({\n        relPath,\n        mensagem: messages.PhpMensagens.csrfMissing,\n        linha: line,\n        nivel: messages.SeverityNiveis.warning,\n        origem: 'detector-php-security',\n        tipo: 'php/rule'\n      } as Msg);\n    }\n  }\n\n  // Open redirect: header('Location: ...') with user input\n  for (const match of scan.matchAll(/header\\s*\\(\\s*['\"]\\s*Location\\s*['\"]\\s*,\\s*\\$/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push({\n      relPath,\n      mensagem: messages.PhpMensagens.openRedirect,\n      linha: line,\n      nivel: messages.SeverityNiveis.warning,\n      origem: 'detector-php-security',\n      tipo: 'php/rule'\n    } as Msg);\n  }\n  for (const match of scan.matchAll(/header\\s*\\(\\s*['\"]\\s*Location\\s*:\\s*\\$/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push({\n      relPath,\n      mensagem: messages.PhpMensagens.openRedirect,\n      linha: line,\n      nivel: messages.SeverityNiveis.warning,\n      origem: 'detector-php-security',\n      tipo: 'php/rule'\n    } as Msg);\n  }\n\n  // Dangerous ini_set calls\n  const dangerousIni = ['allow_url_include', 'allow_url_fopen', 'display_errors', 'register_globals', 'session.use_cookies', 'session.use_only_cookies', 'session.use_trans_sid'];\n  for (const match of scan.matchAll(/ini_set\\s*\\(\\s*['\"]([^'\"]+)['\"]/gi)) {\n    const key = match[1];\n    if (key && dangerousIni.some(d => key.includes(d))) {\n      const line = lineOf(match.index);\n      ocorrencias.push({\n        relPath,\n        mensagem: messages.PhpMensagens.dangerousIniSet,\n        linha: line,\n        nivel: messages.SeverityNiveis.warning,\n        origem: 'detector-php-security',\n        tipo: 'php/rule'\n      } as Msg);\n    }\n  }\n\n  // register_globals usage\n  for (const match of scan.matchAll(/\\bregister_globals\\b/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push({\n      relPath,\n      mensagem: messages.PhpMensagens.registerGlobals,\n      linha: line,\n      nivel: messages.SeverityNiveis.error,\n      origem: 'detector-php-security',\n      tipo: 'php/rule'\n    } as Msg);\n  }\n\n  // Password hashing without password_hash/password_verify\n  if (/password/i.test(scan)) {\n    const hasHash = /\\bpassword_hash\\s*\\(/.test(scan);\n    const hasVerify = /\\bpassword_verify\\s*\\(/.test(scan);\n    if (hasHash && !hasVerify) {\n      for (const match of scan.matchAll(/\\bpassword_hash\\s*\\(/gi)) {\n        const line = lineOf(match.index);\n        ocorrencias.push({\n          relPath,\n          mensagem: messages.PhpMensagens.passwordHashWithoutVerify,\n          linha: line,\n          nivel: messages.SeverityNiveis.warning,\n          origem: 'detector-php-security',\n          tipo: 'php/rule'\n        } as Msg);\n      }\n    }\n    if (/(?:md5|sha1)\\s*\\(\\s*\\$.*pass/i.test(scan)) {\n      for (const match of scan.matchAll(/(?:md5|sha1)\\s*\\(/gi)) {\n        const line = lineOf(match.index);\n        const before = scan.slice(Math.max(0, (match.index ?? 0) - 60), match.index ?? 0);\n        if (/pass/i.test(before) || /pass/i.test(scan.slice(match.index ?? 0, (match.index ?? 0) + 80))) {\n          ocorrencias.push({\n            relPath,\n            mensagem: messages.PhpMensagens.weakPasswordHash,\n            linha: line,\n            nivel: messages.SeverityNiveis.error,\n            origem: 'detector-php-security',\n            tipo: 'php/rule'\n          } as Msg);\n        }\n      }\n    }\n  }\n\n  // Session fixation risks\n  if (/\\bsession_start\\s*\\(/i.test(scan)) {\n    const hasRegenerate = /\\bsession_regenerate_id\\s*\\(/i.test(scan);\n    if (!hasRegenerate) {\n      for (const match of scan.matchAll(/\\bsession_start\\s*\\(/gi)) {\n        const line = lineOf(match.index);\n        ocorrencias.push({\n          relPath,\n          mensagem: messages.PhpMensagens.sessionFixation,\n          linha: line,\n          nivel: messages.SeverityNiveis.warning,\n          origem: 'detector-php-security',\n          tipo: 'php/rule'\n        } as Msg);\n      }\n    }\n  }\n\n  // Second-order injection patterns (storing user input then using unsafely)\n  for (const match of scan.matchAll(/\\b(?:mysql|mysqli|sqlite|pg)_query\\s*\\(\\s*[^)]*\\$(?:row|data|result|res|item|entry)\\b/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push({\n      relPath,\n      mensagem: messages.PhpMensagens.secondOrderInjection,\n      linha: line,\n      nivel: messages.SeverityNiveis.warning,\n      origem: 'detector-php-security',\n      tipo: 'php/rule'\n    } as Msg);\n  }\n\n  return ocorrencias;\n}\n\nexport const detectorPhpSecurity = criarAnalista({\n  nome: 'detector-php-security',\n  categoria: 'seguranca',\n  descricao: 'Detecta vulnerabilidades de segurança em código PHP.',\n  global: false,\n  test: (relPath: string): boolean => /\\.(php|phtml|php3|php4|php5|php7|php8)$/i.test(relPath),\n  aplicar: async (src, relPath): Promise<Msg[] | null> => {\n    if (disableEnv) return null;\n    const msgs = detectSecurityIssues(src, relPath);\n    return msgs.length ? msgs : null;\n  }\n});\n"]}

package/dist/analysts/php/detectors/index.d.ts

@@ -0,0 +1,3 @@
+export { detectorPhpBestPractices } from './detector-php-best-practices.js';
+export { detectorPhpSecurity } from './detector-php-security.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/php/detectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/php/detectors/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/analysts/php/detectors/index.js

@@ -0,0 +1,3 @@
+export { detectorPhpBestPractices } from './detector-php-best-practices.js';
+export { detectorPhpSecurity } from './detector-php-security.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/php/detectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/php/detectors/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport { detectorPhpBestPractices } from './detector-php-best-practices.js';\nexport { detectorPhpSecurity } from './detector-php-security.js';\n"]}

package/dist/analysts/php/index.d.ts

@@ -0,0 +1,5 @@
+export * from './analysts/analyst-php.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/php/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analysts/php/index.ts"],"names":[],"mappings":"AACA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC"}

package/dist/analysts/php/index.js

@@ -0,0 +1,5 @@
+export * from './analysts/analyst-php.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/php/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analysts/php/index.ts"],"names":[],"mappings":"AACA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './analysts/analyst-php.js';\nexport * from './corrections/index.js';\nexport * from './detectors/index.js';\nexport * from './scorers/index.js';\n"]}

package/dist/analysts/php/scorers/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/php/scorers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/php/scorers/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC"}

package/dist/analysts/php/scorers/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/analysts/php/scorers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/php/scorers/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport {};\n"]}

package/dist/analysts/php/scorers/scorer-php.d.ts

@@ -0,0 +1,9 @@
+import type { PhpScoreResult } from '../../../types/index.js';
+export declare function pontuarPhp(src: string, relPath: string): Promise<PhpScoreResult>;
+export declare const pontuadorPhp: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    pontuar: typeof pontuarPhp;
+};
+//# sourceMappingURL=scorer-php.d.ts.map

package/dist/analysts/php/scorers/scorer-php.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-php.d.ts","sourceRoot":"","sources":["../../../../src/analysts/php/scorers/scorer-php.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,GAAG,CAAC;AAIxC,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAoFtF;AAED,eAAO,MAAM,YAAY;;;;;CAKxB,CAAC"}

package/dist/analysts/php/scorers/scorer-php.js

@@ -0,0 +1,89 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+import { detectorPhpBestPractices, detectorPhpSecurity } from '../detectors/index.js';
+export async function pontuarPhp(src, relPath) {
+    let score = 0;
+    const maxScore = 100;
+    const issues = [];
+    const strengths = [];
+    const linhas = splitLines(src);
+    const linesCount = linhas.length;
+    let securityScore = 0;
+    const securityMsgs = await detectorPhpSecurity.aplicar(src, relPath);
+    const securityCount = (securityMsgs ?? []).length;
+    if (securityCount === 0) {
+        securityScore = 40;
+        strengths.push('Nenhuma vulnerabilidade de segurança detectada');
+    }
+    else {
+        securityScore = Math.max(0, 40 - securityCount * 8);
+        issues.push(`${securityCount} problema(s) de segurança`);
+    }
+    let psrScore = 0;
+    const bpMsgs = await detectorPhpBestPractices.aplicar(src, relPath);
+    const bpCount = (bpMsgs ?? []).length;
+    if (bpCount === 0) {
+        psrScore = 35;
+        strengths.push('Boas práticas seguidas');
+    }
+    else {
+        psrScore = Math.max(0, 35 - bpCount * 5);
+        issues.push(`${bpCount} desvio(s) de boas práticas`);
+    }
+    let complexityScore = 25;
+    const fnMatches = src.matchAll(/(?:^|\n)\s*(?:public|private|protected|static)?\s*function\s+\w+\s*\([^)]*\)\s*(?::\s*\w+(?:\s*\|\s*\w+)*)?\s*\{/g);
+    let hasComplex = false;
+    let longFns = 0;
+    for (const fn of fnMatches) {
+        const bodyStart = (fn.index ?? 0) + (fn[0]?.length ?? 0);
+        let braceCount = 1;
+        let bodyEnd = bodyStart;
+        for (let i = bodyStart; i < src.length && braceCount > 0; i++) {
+            if (src[i] === '{')
+                braceCount++;
+            if (src[i] === '}')
+                braceCount--;
+            bodyEnd = i;
+        }
+        const body = src.slice(bodyStart, bodyEnd);
+        const complexity = (body.match(/\b(?:if|elseif|for|foreach|while|case\s|catch|&&|\|\|)\b/g) || []).length;
+        if (complexity > 10) {
+            hasComplex = true;
+            longFns++;
+        }
+    }
+    if (hasComplex) {
+        complexityScore = Math.max(0, 25 - longFns * 5);
+        issues.push(`${longFns} função(ões) complexa(s)`);
+    }
+    else {
+        strengths.push('Funções com complexidade adequada');
+    }
+    if (linesCount > 500) {
+        const penalty = Math.min(10, Math.floor((linesCount - 500) / 100));
+        score -= penalty;
+        issues.push(`Arquivo longo (${linesCount} linhas)`);
+    }
+    if (linesCount < 10) {
+        score += 3;
+        strengths.push('Arquivo conciso');
+    }
+    score = securityScore + psrScore + complexityScore;
+    score = Math.max(0, Math.min(maxScore, score));
+    return {
+        score,
+        maxScore,
+        percentage: Math.round(score / maxScore * 100),
+        securityScore,
+        psrScore,
+        complexityScore,
+        issues,
+        strengths
+    };
+}
+export const pontuadorPhp = {
+    nome: 'pontuador-php',
+    categoria: 'qualidade',
+    descricao: 'Pontua qualidade de código PHP com base em segurança, PSR e complexidade.',
+    pontuar: pontuarPhp
+};
+//# sourceMappingURL=scorer-php.js.map

package/dist/analysts/php/scorers/scorer-php.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-php.js","sourceRoot":"","sources":["../../../../src/analysts/php/scorers/scorer-php.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAI7C,OAAO,EAAE,wBAAwB,EAAC,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAErF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,OAAe;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IAGjC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QACxB,aAAa,GAAG,EAAE,CAAC;QACnB,SAAS,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,2BAA2B,CAAC,CAAC;IAC3D,CAAC;IAGD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,QAAQ,GAAG,EAAE,CAAC;QACd,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,6BAA6B,CAAC,CAAC;IACvD,CAAC;IAGD,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,mHAAmH,CAAC,CAAC;IACpJ,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;QACzD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,SAAS,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9D,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,UAAU,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,UAAU,EAAE,CAAC;YACjC,OAAO,GAAG,CAAC,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,2DAA2D,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1G,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;YACpB,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,0BAA0B,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACtD,CAAC;IAGD,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACnE,KAAK,IAAI,OAAO,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,kBAAkB,UAAU,UAAU,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,GAAG,aAAa,GAAG,QAAQ,GAAG,eAAe,CAAC;IACnD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAE/C,OAAO;QACL,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC;QAC9C,aAAa;QACb,QAAQ;QACR,eAAe;QACf,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,eAAe;IACrB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,2EAA2E;IACtF,OAAO,EAAE,UAAU;CACpB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { splitLines } from '@shared/helpers';\n\nimport type { PhpScoreResult } from '@';\n\nimport { detectorPhpBestPractices,detectorPhpSecurity } from '../detectors/index.js';\n\nexport async function pontuarPhp(src: string, relPath: string): Promise<PhpScoreResult> {\n  let score = 0;\n  const maxScore = 100;\n  const issues: string[] = [];\n  const strengths: string[] = [];\n  const linhas = splitLines(src);\n  const linesCount = linhas.length;\n\n  // Security score (40 points)\n  let securityScore = 0;\n  const securityMsgs = await detectorPhpSecurity.aplicar(src, relPath);\n  const securityCount = (securityMsgs ?? []).length;\n  if (securityCount === 0) {\n    securityScore = 40;\n    strengths.push('Nenhuma vulnerabilidade de segurança detectada');\n  } else {\n    securityScore = Math.max(0, 40 - securityCount * 8);\n    issues.push(`${securityCount} problema(s) de segurança`);\n  }\n\n  // PSR/best practices score (35 points)\n  let psrScore = 0;\n  const bpMsgs = await detectorPhpBestPractices.aplicar(src, relPath);\n  const bpCount = (bpMsgs ?? []).length;\n  if (bpCount === 0) {\n    psrScore = 35;\n    strengths.push('Boas práticas seguidas');\n  } else {\n    psrScore = Math.max(0, 35 - bpCount * 5);\n    issues.push(`${bpCount} desvio(s) de boas práticas`);\n  }\n\n  // Complexity score (25 points)\n  let complexityScore = 25;\n  const fnMatches = src.matchAll(/(?:^|\\n)\\s*(?:public|private|protected|static)?\\s*function\\s+\\w+\\s*\\([^)]*\\)\\s*(?::\\s*\\w+(?:\\s*\\|\\s*\\w+)*)?\\s*\\{/g);\n  let hasComplex = false;\n  let longFns = 0;\n  for (const fn of fnMatches) {\n    const bodyStart = (fn.index ?? 0) + (fn[0]?.length ?? 0);\n    let braceCount = 1;\n    let bodyEnd = bodyStart;\n    for (let i = bodyStart; i < src.length && braceCount > 0; i++) {\n      if (src[i] === '{') braceCount++;\n      if (src[i] === '}') braceCount--;\n      bodyEnd = i;\n    }\n    const body = src.slice(bodyStart, bodyEnd);\n    const complexity = (body.match(/\\b(?:if|elseif|for|foreach|while|case\\s|catch|&&|\\|\\|)\\b/g) || []).length;\n    if (complexity > 10) {\n      hasComplex = true;\n      longFns++;\n    }\n  }\n  if (hasComplex) {\n    complexityScore = Math.max(0, 25 - longFns * 5);\n    issues.push(`${longFns} função(ões) complexa(s)`);\n  } else {\n    strengths.push('Funções com complexidade adequada');\n  }\n\n  // File size penalty\n  if (linesCount > 500) {\n    const penalty = Math.min(10, Math.floor((linesCount - 500) / 100));\n    score -= penalty;\n    issues.push(`Arquivo longo (${linesCount} linhas)`);\n  }\n  if (linesCount < 10) {\n    score += 3;\n    strengths.push('Arquivo conciso');\n  }\n\n  score = securityScore + psrScore + complexityScore;\n  score = Math.max(0, Math.min(maxScore, score));\n\n  return {\n    score,\n    maxScore,\n    percentage: Math.round(score / maxScore * 100),\n    securityScore,\n    psrScore,\n    complexityScore,\n    issues,\n    strengths\n  };\n}\n\nexport const pontuadorPhp = {\n  nome: 'pontuador-php',\n  categoria: 'qualidade',\n  descricao: 'Pontua qualidade de código PHP com base em segurança, PSR e complexidade.',\n  pontuar: pontuarPhp\n};\n"]}

package/dist/analysts/plugins/analyst-formatter.d.ts

@@ -0,0 +1,12 @@
+import { criarOcorrencia } from '../../types/index.js';
+type Msg = ReturnType<typeof criarOcorrencia>;
+export declare const analistaFormatador: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    global: false;
+    test: (relPath: string) => boolean;
+    aplicar: (src: string, relPath: string) => Promise<Msg[] | null>;
+};
+export {};
+//# sourceMappingURL=analyst-formatter.d.ts.map

package/dist/analysts/plugins/analyst-formatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-formatter.d.ts","sourceRoot":"","sources":["../../../src/analysts/plugins/analyst-formatter.ts"],"names":[],"mappings":"AAKA,OAAO,EAAiB,eAAe,EAAE,MAAM,GAAG,CAAC;AAGnD,KAAK,GAAG,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;AAoC9C,eAAO,MAAM,kBAAkB;;;;;oBAKb,MAAM,KAAG,OAAO;+CAID,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;CA6BpD,CAAC"}

package/dist/analysts/plugins/analyst-formatter.js

@@ -0,0 +1,83 @@
+import { messages } from '../../core/messages/index.js';
+import { formatarMarkdownMinimo, formatarPrettierMinimo } from '../../shared/formatters/index.js';
+import { extrairSupressoes, shouldSuppressOccurrence } from '../../shared/helpers/index.js';
+import { criarAnalista, criarOcorrencia } from '../../types/index.js';
+const disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_FORMATADOR === '1';
+function parserParaTipo(parser) {
+    return `formatador-${parser}`;
+}
+function msg(message, relPath, parser, nivel = messages.SeverityNiveis.warning, line = 1) {
+    return criarOcorrencia({
+        relPath,
+        mensagem: message,
+        linha: line,
+        nivel,
+        origem: messages.AnalystOrigens.formatador,
+        tipo: parserParaTipo(parser)
+    });
+}
+function normalizarEol(code) {
+    return code.replace(/\r\n?/g, '\n');
+}
+function primeiraLinhaDiferente(arquivo, base) {
+    const aLines = normalizarEol(arquivo).split('\n');
+    const bLines = normalizarEol(base).split('\n');
+    const len = Math.max(aLines.length, bLines.length);
+    for (let indice = 0; indice < len; indice++) {
+        if ((aLines[indice] ?? '') !== (bLines[indice] ?? ''))
+            return indice + 1;
+    }
+    return 1;
+}
+function extrairLinhasProtegidas(src) {
+    const supressoes = extrairSupressoes(src);
+    const protegidas = new Set();
+    for (const [linha, regras] of supressoes.porLinha) {
+        if (regras.has('pontuacao-repetida') || regras.has('espacamento-incorreto') || regras.has('*') || regras.has('analista-formatador')) {
+            protegidas.add(linha);
+        }
+    }
+    return protegidas;
+}
+export const analistaFormatador = criarAnalista({
+    nome: 'analista-formatador',
+    categoria: 'formatacao',
+    descricao: 'Verifica formatação mínima interna do Mahoraga (JSON/Markdown/YAML).',
+    global: false,
+    test: (relPath) => {
+        if (/package-lock\.json$/i.test(relPath) || /yarn\.lock$/i.test(relPath) || /pnpm-lock\.yaml$/i.test(relPath))
+            return false;
+        return /\.(json|md|markdown|ya?ml)$/i.test(relPath);
+    },
+    aplicar: async (src, relPath) => {
+        if (disableEnv)
+            return null;
+        const isMarkdown = /\.(md|markdown)$/i.test(relPath);
+        let res;
+        if (isMarkdown) {
+            const protectedLines = extrairLinhasProtegidas(src);
+            res = formatarMarkdownMinimo(src, protectedLines.size > 0 ? protectedLines : undefined);
+        }
+        else {
+            res = formatarPrettierMinimo({
+                code: src,
+                relPath
+            });
+        }
+        if (!res.ok) {
+            const tipo = parserParaTipo(res.parser);
+            if (shouldSuppressOccurrence(tipo, relPath))
+                return null;
+            return [msg(messages.FormatadorMensagens.parseErro(res.parser, res.error), relPath, res.parser, messages.SeverityNiveis.error, 1)];
+        }
+        if (!res.changed)
+            return null;
+        const tipo = parserParaTipo(res.parser);
+        if (shouldSuppressOccurrence(tipo, relPath))
+            return null;
+        const linha = primeiraLinhaDiferente(src, res.formatted);
+        const detalhes = [`primeira diferença na linha ${linha}`, res.reason ? `motivo: ${res.reason}` : null].filter(Boolean).join(', ');
+        return [msg(messages.FormatadorMensagens.naoFormatado(res.parser, detalhes || undefined), relPath, res.parser, messages.SeverityNiveis.warning, linha)];
+    }
+});
+//# sourceMappingURL=analyst-formatter.js.map

package/dist/analysts/plugins/analyst-formatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-formatter.js","sourceRoot":"","sources":["../../../src/analysts/plugins/analyst-formatter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAC,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAC,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEnD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kCAAkC,KAAK,GAAG,CAAC;AAE1E,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,cAAc,MAAM,EAAE,CAAC;AAChC,CAAC;AACD,SAAS,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,MAAc,EAAE,QAAgF,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC;IACtL,OAAO,eAAe,CAAC;QACrB,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,IAAI;QACX,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU;QAC1C,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;AACL,CAAC;AACD,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC;AACD,SAAS,sBAAsB,CAAC,OAAe,EAAE,IAAY;IAC3D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,MAAM,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,uBAAuB,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACpI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;IAC9C,IAAI,EAAE,qBAAqB;IAC3B,SAAS,EAAE,YAAY;IACvB,SAAS,EAAE,sEAAsE;IACjF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE;QACjC,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5H,OAAO,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAyB,EAAE;QACrD,IAAI,UAAU;YAAE,OAAO,IAAI,CAAC;QAG5B,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,GAA8C,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,cAAc,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YACpD,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,sBAAsB,CAAC;gBAC3B,IAAI,EAAE,GAAG;gBACT,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACrI,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,CAAC,+BAA+B,KAAK,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAGlI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1J,CAAC;CACF,CAAC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { messages } from '@core/messages';\nimport { formatarMarkdownMinimo,formatarPrettierMinimo } from '@shared/formatters';\nimport { extrairSupressoes,shouldSuppressOccurrence } from '@shared/helpers';\n\nimport { criarAnalista, criarOcorrencia } from '@';\n\nconst disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_FORMATADOR === '1';\ntype Msg = ReturnType<typeof criarOcorrencia>;\nfunction parserParaTipo(parser: string): string {\n  return `formatador-${parser}`;\n}\nfunction msg(message: string, relPath: string, parser: string, nivel: (typeof messages.SeverityNiveis)[keyof typeof messages.SeverityNiveis] = messages.SeverityNiveis.warning, line = 1): Msg {\n  return criarOcorrencia({\n    relPath,\n    mensagem: message,\n    linha: line,\n    nivel,\n    origem: messages.AnalystOrigens.formatador,\n    tipo: parserParaTipo(parser)\n  });\n}\nfunction normalizarEol(code: string): string {\n  return code.replace(/\\r\\n?/g, '\\n');\n}\nfunction primeiraLinhaDiferente(arquivo: string, base: string): number {\n  const aLines = normalizarEol(arquivo).split('\\n');\n  const bLines = normalizarEol(base).split('\\n');\n  const len = Math.max(aLines.length, bLines.length);\n  for (let indice = 0; indice < len; indice++) {\n    if ((aLines[indice] ?? '') !== (bLines[indice] ?? '')) return indice + 1;\n  }\n  return 1;\n}\nfunction extrairLinhasProtegidas(src: string): Set<number> {\n  const supressoes = extrairSupressoes(src);\n  const protegidas = new Set<number>();\n  for (const [linha, regras] of supressoes.porLinha) {\n    if (regras.has('pontuacao-repetida') || regras.has('espacamento-incorreto') || regras.has('*') || regras.has('analista-formatador')) {\n      protegidas.add(linha);\n    }\n  }\n  return protegidas;\n}\nexport const analistaFormatador = criarAnalista({\n  nome: 'analista-formatador',\n  categoria: 'formatacao',\n  descricao: 'Verifica formatação mínima interna do Mahoraga (JSON/Markdown/YAML).',\n  global: false,\n  test: (relPath: string): boolean => {\n    if (/package-lock\\.json$/i.test(relPath) || /yarn\\.lock$/i.test(relPath) || /pnpm-lock\\.yaml$/i.test(relPath)) return false;\n    return /\\.(json|md|markdown|ya?ml)$/i.test(relPath);\n  },\n  aplicar: async (src, relPath): Promise<Msg[] | null> => {\n    if (disableEnv) return null;\n\n    // Para markdown, extrair supressões inline e passar ao formatter\n    const isMarkdown = /\\.(md|markdown)$/i.test(relPath);\n    let res: ReturnType<typeof formatarPrettierMinimo>;\n    if (isMarkdown) {\n      const protectedLines = extrairLinhasProtegidas(src);\n      res = formatarMarkdownMinimo(src, protectedLines.size > 0 ? protectedLines : undefined);\n    } else {\n      res = formatarPrettierMinimo({\n        code: src,\n        relPath\n      });\n    }\n    if (!res.ok) {\n      const tipo = parserParaTipo(res.parser);\n      if (shouldSuppressOccurrence(tipo, relPath)) return null;\n      return [msg(messages.FormatadorMensagens.parseErro(res.parser, res.error), relPath, res.parser, messages.SeverityNiveis.error, 1)];\n    }\n    if (!res.changed) return null;\n    const tipo = parserParaTipo(res.parser);\n    if (shouldSuppressOccurrence(tipo, relPath)) return null;\n    const linha = primeiraLinhaDiferente(src, res.formatted);\n    const detalhes = [`primeira diferença na linha ${linha}`, res.reason ? `motivo: ${res.reason}` : null].filter(Boolean).join(', ');\n\n    // Manter como aviso (alinha com intenção de \"check\" sem mutação)\n    return [msg(messages.FormatadorMensagens.naoFormatado(res.parser, detalhes || undefined), relPath, res.parser, messages.SeverityNiveis.warning, linha)];\n  }\n});\n"]}

package/dist/analysts/plugins/detector-documentation.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../types/index.js';
+export declare const analistaDocumentacao: Analista;
+//# sourceMappingURL=detector-documentation.d.ts.map

package/dist/analysts/plugins/detector-documentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-documentation.d.ts","sourceRoot":"","sources":["../../../src/analysts/plugins/detector-documentation.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAoC,MAAM,GAAG,CAAC;AAGpE,eAAO,MAAM,oBAAoB,EAAE,QA0DlC,CAAC"}