@mocoto/mahoraga 0.14.0

package/dist/analysts/shell/scorers/scorer-shell.js

@@ -0,0 +1,197 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+export function pontuarShell(src, _relPath) {
+    let score = 0;
+    const maxScore = 200;
+    const issues = [];
+    const strengths = [];
+    const linhas = splitLines(src);
+    const srcCompleto = src;
+    if (linhas.length > 0 && linhas[0].startsWith('#!')) {
+        score += 10;
+        strengths.push('Shebang presente');
+    }
+    else {
+        issues.push('Shebang ausente');
+    }
+    if (/set\s+(-e|-o\s+pipefail)/.test(srcCompleto)) {
+        score += 15;
+        strengths.push('Error handling configurado');
+    }
+    else {
+        issues.push('Sem set -e / pipefail');
+    }
+    if (!/\beval\s+/.test(srcCompleto)) {
+        score += 15;
+        strengths.push('Sem eval');
+    }
+    else {
+        issues.push('eval detectado');
+    }
+    if (!/(curl|wget).*\|\s*(ba)?sh/.test(srcCompleto)) {
+        score += 10;
+        strengths.push('Sem curl|sh');
+    }
+    else {
+        issues.push('curl|sh detectado');
+    }
+    const hardcodedPasswords = (srcCompleto.match(/\b(password|pass|secret|token)\b\s*=\s*['"]/gi) || []).length;
+    if (hardcodedPasswords === 0) {
+        score += 10;
+        strengths.push('Sem senhas hardcoded');
+    }
+    else {
+        issues.push(`${hardcodedPasswords} senha(s) hardcoded`);
+    }
+    const unquotedVars = (srcCompleto.match(/\b(echo|ls|cd|rm|cp|mv)\s+.*\$\w+/g) || []).filter(linha => !/["'].*\$\w+.*["']/.test(linha)).length;
+    if (unquotedVars === 0) {
+        score += 10;
+        strengths.push('Variáveis corretamente aspeadas');
+    }
+    else {
+        score += Math.max(0, 10 - unquotedVars * 3);
+        issues.push(`${unquotedVars} variável(is) sem aspas`);
+    }
+    if (!/\brm\s+-rf\s+\/(\s|$)/.test(srcCompleto)) {
+        score += 10;
+        strengths.push('Sem rm -rf /');
+    }
+    else {
+        issues.push('rm -rf / detectado!');
+    }
+    const cds = srcCompleto.match(/^\s*cd\s+\S+/gm) || [];
+    const cdsChecked = cds.filter(c => /cd\s+\S+\s*(;|&&|\|\|)/.test(c) || c.includes('|| exit') || c.includes('|| return')).length;
+    if (cds.length === 0 || cdsChecked === cds.length) {
+        score += 5;
+        strengths.push('cd com verificação de erro');
+    }
+    else {
+        issues.push(`${cds.length - cdsChecked} cd(s) sem verificação`);
+    }
+    if (/\bmktemp\b/.test(srcCompleto) || !/\/tmp\/\w+\.\w+/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Sem arquivos tmp inseguros');
+    }
+    else {
+        issues.push('Uso inseguro de /tmp');
+    }
+    if (!/\bchmod\s+777\b/.test(srcCompleto) && !/\bumask\s+000\b/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Permissões seguras');
+    }
+    else {
+        issues.push('Permissões inseguras (chmod 777/umask 000)');
+    }
+    const reads = srcCompleto.match(/^\s*read\s+/gm) || [];
+    const readsWithR = reads.filter(r => /^\s*read\s+-r/.test(r)).length;
+    if (reads.length === 0 || readsWithR === reads.length) {
+        score += 5;
+        strengths.push('read com -r');
+    }
+    else {
+        issues.push(`${reads.length - readsWithR} read(s) sem -r`);
+    }
+    const functions = (srcCompleto.match(/(\w+)\s*\(\s*\)/g) || []).length;
+    const locals = (srcCompleto.match(/\blocal\s+/g) || []).length;
+    if (functions === 0 || locals >= functions) {
+        score += 10;
+        strengths.push('Variáveis locais escopadas');
+    }
+    else {
+        score += Math.max(0, 10 - (functions - locals) * 3);
+        issues.push(`${functions - locals} função(ões) sem local variables`);
+    }
+    if (!/`[^`]+`/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Sem crases');
+    }
+    else {
+        issues.push('Substituição com crases');
+    }
+    if (!/^\s*\[[^\]]+\]/.test(srcCompleto) || /\[\[/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Uso de [[ para testes');
+    }
+    else {
+        issues.push('[ usado em vez de [[');
+    }
+    if (!/\blet\s+/.test(srcCompleto) && !/^\s*expr\s+/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Uso de $(( )) para aritmética');
+    }
+    else {
+        issues.push('let/expr usado em vez de $(( ))');
+    }
+    if (!/^\s*function\s+\w+\s*\{/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Sintaxe POSIX de função');
+    }
+    else {
+        issues.push('Palavra-chave function usada');
+    }
+    const shebang = linhas.length > 0 ? linhas[0] : '';
+    if (!/\/bin\/sh(\s|$)/.test(shebang) || !/\b(function|\[\[|<<<|shopt)\b/.test(srcCompleto)) {
+        score += 10;
+        strengths.push('Portabilidade POSIX');
+    }
+    else {
+        issues.push('Bashisms em script sh');
+    }
+    const hardPaths = (srcCompleto.match(/\/(usr\/bin|usr\/local\/bin|bin|sbin)\//g) || []).length;
+    if (hardPaths === 0) {
+        score += 5;
+        strengths.push('Sem caminhos de plataforma fixos');
+    }
+    else {
+        score += Math.max(0, 5 - hardPaths);
+        issues.push(`${hardPaths} caminho(s) de plataforma fixos`);
+    }
+    if (!/\$\{\w+\[@\]\}/.test(srcCompleto) || /"\$\{\w+\[@\]\}"/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Arrays com aspas');
+    }
+    else {
+        issues.push('Expansão de array sem aspas');
+    }
+    if (!/\bcat\s+\S+\s*\|\s*/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Sem cat inútil');
+    }
+    else {
+        issues.push('cat | command detectado');
+    }
+    if (!/for\s+\w+\s+in\s+\$\(ls\)/.test(srcCompleto) && !/for\s+\w+\s+in\s+`ls`/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Glob em vez de ls');
+    }
+    else {
+        issues.push('Loop sobre ls');
+    }
+    if (/>\s*\S+\.tmp\b/.test(srcCompleto) && /<\s*\S+\.tmp\b/.test(srcCompleto)) {
+        issues.push('Arquivo tmp usado em vez de pipe');
+    }
+    else {
+        score += 5;
+        strengths.push('Pipes em vez de tmp files');
+    }
+    if (!/\bsudo\s+/.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Sem sudo');
+    }
+    else {
+        issues.push('sudo detectado');
+    }
+    return {
+        score,
+        maxScore,
+        percentage: Math.round(score / maxScore * 100),
+        issues,
+        strengths
+    };
+}
+export const pontuadorShell = {
+    nome: 'pontuador-shell',
+    categoria: 'infrastructure',
+    descricao: 'Pontua qualidade de Shell Script',
+    pontuar: pontuarShell
+};
+//# sourceMappingURL=scorer-shell.js.map

package/dist/analysts/shell/scorers/scorer-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-shell.js","sourceRoot":"","sources":["../../../../src/analysts/shell/scorers/scorer-shell.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAS7C,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,QAAgB;IACxD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,GAAG,CAAC;IAGxB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjC,CAAC;IAGD,IAAI,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAGD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IAGD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAGD,MAAM,kBAAkB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,+CAA+C,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC7G,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;QAC7B,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,qBAAqB,CAAC,CAAC;IAC1D,CAAC;IAGD,MAAM,YAAY,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,oCAAoC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9I,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,yBAAyB,CAAC,CAAC;IACxD,CAAC;IAGD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAKD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IAChI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QAClD,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,UAAU,wBAAwB,CAAC,CAAC;IAClE,CAAC;IAGD,IAAI,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3E,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAGD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IAGD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACtD,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,UAAU,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IAKD,MAAM,SAAS,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC/D,IAAI,SAAS,KAAK,CAAC,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;QAC3C,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,MAAM,kCAAkC,CAAC,CAAC;IACvE,CAAC;IAGD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IAGD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAGD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACtE,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAGD,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IAKD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3F,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAGD,MAAM,SAAS,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,0CAA0C,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC/F,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IAGD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChF,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IAKD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IAGD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACjG,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAGD,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC9C,CAAC;IAGD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC;QAC9C,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,gBAAgB;IAC3B,SAAS,EAAE,kCAAkC;IAC7C,OAAO,EAAE,YAAY;CACtB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [GRAFICO] Pontuador de qualidade Shell Script\n *\n * Avalia a qualidade do Shell baseado em:\n * - Segurança\n * - Error handling\n * - Boas práticas\n * - Portabilidade\n * - Performance\n */\n\nimport { splitLines } from '@shared/helpers';\n\nexport interface ShellScoreResult {\n  score: number;\n  maxScore: number;\n  percentage: number;\n  issues: string[];\n  strengths: string[];\n}\nexport function pontuarShell(src: string, _relPath: string): ShellScoreResult {\n  let score = 0;\n  const maxScore = 200;\n  const issues: string[] = [];\n  const strengths: string[] = [];\n  const linhas = splitLines(src);\n  const srcCompleto = src;\n\n  // Shebang (10 pontos)\n  if (linhas.length > 0 && linhas[0].startsWith('#!')) {\n    score += 10;\n    strengths.push('Shebang presente');\n  } else {\n    issues.push('Shebang ausente');\n  }\n\n  // set -e / pipefail (15 pontos)\n  if (/set\\s+(-e|-o\\s+pipefail)/.test(srcCompleto)) {\n    score += 15;\n    strengths.push('Error handling configurado');\n  } else {\n    issues.push('Sem set -e / pipefail');\n  }\n\n  // No eval (15 pontos)\n  if (!/\\beval\\s+/.test(srcCompleto)) {\n    score += 15;\n    strengths.push('Sem eval');\n  } else {\n    issues.push('eval detectado');\n  }\n\n  // No curl|sh (10 pontos)\n  if (!/(curl|wget).*\\|\\s*(ba)?sh/.test(srcCompleto)) {\n    score += 10;\n    strengths.push('Sem curl|sh');\n  } else {\n    issues.push('curl|sh detectado');\n  }\n\n  // No hardcoded passwords (10 pontos)\n  const hardcodedPasswords = (srcCompleto.match(/\\b(password|pass|secret|token)\\b\\s*=\\s*['\"]/gi) || []).length;\n  if (hardcodedPasswords === 0) {\n    score += 10;\n    strengths.push('Sem senhas hardcoded');\n  } else {\n    issues.push(`${hardcodedPasswords} senha(s) hardcoded`);\n  }\n\n  // Quoted variables (10 pontos)\n  const unquotedVars = (srcCompleto.match(/\\b(echo|ls|cd|rm|cp|mv)\\s+.*\\$\\w+/g) || []).filter(linha => !/[\"'].*\\$\\w+.*[\"']/.test(linha)).length;\n  if (unquotedVars === 0) {\n    score += 10;\n    strengths.push('Variáveis corretamente aspeadas');\n  } else {\n    score += Math.max(0, 10 - unquotedVars * 3);\n    issues.push(`${unquotedVars} variável(is) sem aspas`);\n  }\n\n  // No rm -rf / (10 pontos)\n  if (!/\\brm\\s+-rf\\s+\\/(\\s|$)/.test(srcCompleto)) {\n    score += 10;\n    strengths.push('Sem rm -rf /');\n  } else {\n    issues.push('rm -rf / detectado!');\n  }\n\n  // ── Security (enhanced) ──────────────────────────────────────────────────\n\n  // cd with check (5 pontos)\n  const cds = srcCompleto.match(/^\\s*cd\\s+\\S+/gm) || [];\n  const cdsChecked = cds.filter(c => /cd\\s+\\S+\\s*(;|&&|\\|\\|)/.test(c) || c.includes('|| exit') || c.includes('|| return')).length;\n  if (cds.length === 0 || cdsChecked === cds.length) {\n    score += 5;\n    strengths.push('cd com verificação de erro');\n  } else {\n    issues.push(`${cds.length - cdsChecked} cd(s) sem verificação`);\n  }\n\n  // mktemp usage (5 pontos)\n  if (/\\bmktemp\\b/.test(srcCompleto) || !/\\/tmp\\/\\w+\\.\\w+/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Sem arquivos tmp inseguros');\n  } else {\n    issues.push('Uso inseguro de /tmp');\n  }\n\n  // Permissions (5 pontos)\n  if (!/\\bchmod\\s+777\\b/.test(srcCompleto) && !/\\bumask\\s+000\\b/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Permissões seguras');\n  } else {\n    issues.push('Permissões inseguras (chmod 777/umask 000)');\n  }\n\n  // read -r (5 pontos)\n  const reads = srcCompleto.match(/^\\s*read\\s+/gm) || [];\n  const readsWithR = reads.filter(r => /^\\s*read\\s+-r/.test(r)).length;\n  if (reads.length === 0 || readsWithR === reads.length) {\n    score += 5;\n    strengths.push('read com -r');\n  } else {\n    issues.push(`${reads.length - readsWithR} read(s) sem -r`);\n  }\n\n  // ── Best Practices ───────────────────────────────────────────────────────\n\n  // local variables (10 pontos)\n  const functions = (srcCompleto.match(/(\\w+)\\s*\\(\\s*\\)/g) || []).length;\n  const locals = (srcCompleto.match(/\\blocal\\s+/g) || []).length;\n  if (functions === 0 || locals >= functions) {\n    score += 10;\n    strengths.push('Variáveis locais escopadas');\n  } else {\n    score += Math.max(0, 10 - (functions - locals) * 3);\n    issues.push(`${functions - locals} função(ões) sem local variables`);\n  }\n\n  // No backticks (5 pontos)\n  if (!/`[^`]+`/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Sem crases');\n  } else {\n    issues.push('Substituição com crases');\n  }\n\n  // [[ instead of [ (5 pontos)\n  if (!/^\\s*\\[[^\\]]+\\]/.test(srcCompleto) || /\\[\\[/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Uso de [[ para testes');\n  } else {\n    issues.push('[ usado em vez de [[');\n  }\n\n  // $(( )) for arithmetic (5 pontos)\n  if (!/\\blet\\s+/.test(srcCompleto) && !/^\\s*expr\\s+/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Uso de $(( )) para aritmética');\n  } else {\n    issues.push('let/expr usado em vez de $(( ))');\n  }\n\n  // POSIX function style (5 pontos)\n  if (!/^\\s*function\\s+\\w+\\s*\\{/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Sintaxe POSIX de função');\n  } else {\n    issues.push('Palavra-chave function usada');\n  }\n\n  // ── Portability ──────────────────────────────────────────────────────────\n\n  // No bashisms in sh scripts (10 pontos)\n  const shebang = linhas.length > 0 ? linhas[0] : '';\n  if (!/\\/bin\\/sh(\\s|$)/.test(shebang) || !/\\b(function|\\[\\[|<<<|shopt)\\b/.test(srcCompleto)) {\n    score += 10;\n    strengths.push('Portabilidade POSIX');\n  } else {\n    issues.push('Bashisms em script sh');\n  }\n\n  // command -v for paths (5 pontos)\n  const hardPaths = (srcCompleto.match(/\\/(usr\\/bin|usr\\/local\\/bin|bin|sbin)\\//g) || []).length;\n  if (hardPaths === 0) {\n    score += 5;\n    strengths.push('Sem caminhos de plataforma fixos');\n  } else {\n    score += Math.max(0, 5 - hardPaths);\n    issues.push(`${hardPaths} caminho(s) de plataforma fixos`);\n  }\n\n  // Quoted array expansion (5 pontos)\n  if (!/\\$\\{\\w+\\[@\\]\\}/.test(srcCompleto) || /\"\\$\\{\\w+\\[@\\]\\}\"/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Arrays com aspas');\n  } else {\n    issues.push('Expansão de array sem aspas');\n  }\n\n  // ── Performance ─────────────────────────────────────────────────────────\n\n  // No useless cat (5 pontos)\n  if (!/\\bcat\\s+\\S+\\s*\\|\\s*/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Sem cat inútil');\n  } else {\n    issues.push('cat | command detectado');\n  }\n\n  // No loop over ls (5 pontos)\n  if (!/for\\s+\\w+\\s+in\\s+\\$\\(ls\\)/.test(srcCompleto) && !/for\\s+\\w+\\s+in\\s+`ls`/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Glob em vez de ls');\n  } else {\n    issues.push('Loop sobre ls');\n  }\n\n  // Pipes instead of temp files (5 pontos)\n  if (/>\\s*\\S+\\.tmp\\b/.test(srcCompleto) && /<\\s*\\S+\\.tmp\\b/.test(srcCompleto)) {\n    issues.push('Arquivo tmp usado em vez de pipe');\n  } else {\n    score += 5;\n    strengths.push('Pipes em vez de tmp files');\n  }\n\n  // Sudo score (5 pontos)\n  if (!/\\bsudo\\s+/.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Sem sudo');\n  } else {\n    issues.push('sudo detectado');\n  }\n\n  return {\n    score,\n    maxScore,\n    percentage: Math.round(score / maxScore * 100),\n    issues,\n    strengths\n  };\n}\nexport const pontuadorShell = {\n  nome: 'pontuador-shell',\n  categoria: 'infrastructure',\n  descricao: 'Pontua qualidade de Shell Script',\n  pontuar: pontuarShell\n};\n"]}

package/dist/analysts/sql/analysts/analyst-sql.d.ts

@@ -0,0 +1,10 @@
+import type { Ocorrencia } from '../../../types/index.js';
+export declare const analistaSql: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    test: (relPath: string) => boolean;
+    aplicar: (src: string, relPath: string) => Promise<Ocorrencia[]>;
+    global: false;
+};
+//# sourceMappingURL=analyst-sql.d.ts.map

package/dist/analysts/sql/analysts/analyst-sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-sql.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/analysts/analyst-sql.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC;AAOpC,eAAO,MAAM,WAAW;;;;oBAIN,MAAM;mBACD,MAAM,WAAW,MAAM,KAAG,OAAO,CAAC,UAAU,EAAE,CAAC;;CAuGpE,CAAC"}

package/dist/analysts/sql/analysts/analyst-sql.js

@@ -0,0 +1,94 @@
+import { criarAnalista, criarOcorrencia } from '../../../types/index.js';
+export const analistaSql = criarAnalista({
+    nome: 'analista-sql',
+    categoria: 'database',
+    descricao: 'Analisa arquivos SQL em busca de injeções, performance ruim e comandos perigosos.',
+    test: (relPath) => /\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),
+    aplicar: async (src, relPath) => {
+        const ocorrencias = [];
+        const linhas = src.split('\n');
+        linhas.forEach((linha, index) => {
+            const numeroLinha = index + 1;
+            const linhaTrim = linha.trim().toLowerCase();
+            if ((linhaTrim.startsWith('delete ') || linhaTrim.startsWith('update ')) &&
+                !linhaTrim.includes('where') &&
+                !linha.includes('--') && !linha.includes('/*')) {
+                const proximaLinha = linhas[index + 1]?.trim().toLowerCase() || '';
+                if (!proximaLinha.includes('where')) {
+                    ocorrencias.push(criarOcorrencia({
+                        tipo: 'vulnerabilidade-seguranca',
+                        nivel: 'erro',
+                        mensagem: 'Comando DELETE/UPDATE sem cláusula WHERE detectado. Isso pode apagar ou alterar todos os dados da tabela.',
+                        relPath,
+                        linha: numeroLinha,
+                        sugestao: 'Sempre utilize a cláusula WHERE para restringir o impacto do comando.'
+                    }));
+                }
+            }
+            if (/\bselect\s+\*\s+from\b/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'problema-performance',
+                    nivel: 'aviso',
+                    mensagem: 'Uso de "SELECT *" detectado. Isso aumenta o tráfego de rede e pode quebrar se a estrutura da tabela mudar.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Liste explicitamente as colunas necessárias.'
+                }));
+            }
+            if (/\b(password|senha|secret|key|token|credential)\b\s*[:=]\s*['"].*['"]/i.test(linha) ||
+                /identified\s+by\s+['"].*['"]/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'vulnerabilidade-seguranca',
+                    nivel: 'erro',
+                    mensagem: 'Possível credencial ou segredo hardcoded em script SQL.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Utilize variáveis de ambiente ou sistemas de gerenciamento de segredos.'
+                }));
+            }
+            if (/\s\+\s*['"`].*['"`]/.test(linha) && /select|insert|update|delete/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'sql-injection',
+                    nivel: 'erro',
+                    mensagem: 'Possível injeção de SQL detectada via concatenação de strings.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Utilize consultas parametrizadas ou placeholders.'
+                }));
+            }
+            if (/create\s+(table|procedure|view)\s+\w+/i.test(linha) && !/if\s+not\s+exists/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'codigo-fragil',
+                    nivel: 'info',
+                    mensagem: 'Criação de objeto sem "IF NOT EXISTS". Pode causar erro se o script for reexecutado.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Utilize "CREATE TABLE IF NOT EXISTS ..." para maior idempotência.'
+                }));
+            }
+            if (/\btruncate\s+table\b/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'vulnerabilidade-seguranca',
+                    nivel: 'aviso',
+                    mensagem: 'Uso de TRUNCATE TABLE detectado. Este comando não pode ser revertido por ROLLBACK em alguns bancos e limpa toda a tabela.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Certifique-se de que a limpeza total é intencional e prefira DELETE com WHERE se precisar de reversibilidade.'
+                }));
+            }
+            if (/\bvarchar\b\s*(\(|\s|$)/i.test(linha) && !/\bvarchar\(\d+\)/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'codigo-fragil',
+                    nivel: 'info',
+                    mensagem: 'VARCHAR sem especificação de tamanho máximo.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Defina um tamanho máximo apropriado para otimizar o armazenamento.'
+                }));
+            }
+        });
+        return ocorrencias;
+    },
+    global: false
+});
+//# sourceMappingURL=analyst-sql.js.map

package/dist/analysts/sql/analysts/analyst-sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-sql.js","sourceRoot":"","sources":["../../../../src/analysts/sql/analysts/analyst-sql.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAMnD,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;IACvC,IAAI,EAAE,cAAc;IACpB,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,mFAAmF;IAC9F,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;IACvE,OAAO,EAAE,KAAK,EAAE,GAAW,EAAE,OAAe,EAAyB,EAAE;QACrE,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAG7C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACpE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAEnD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;gBACnE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;wBAC/B,IAAI,EAAE,2BAA2B;wBACjC,KAAK,EAAE,MAAM;wBACb,QAAQ,EAAE,2GAA2G;wBACrH,OAAO;wBACP,KAAK,EAAE,WAAW;wBAClB,QAAQ,EAAE,uEAAuE;qBAClF,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;YAGD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,sBAAsB;oBAC5B,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,4GAA4G;oBACtH,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,8CAA8C;iBACzD,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,uEAAuE,CAAC,IAAI,CAAC,KAAK,CAAC;gBACnF,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,yDAAyD;oBACnE,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,yEAAyE;iBACpF,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpF,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,gEAAgE;oBAC1E,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,mDAAmD;iBAC9D,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9F,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,sFAAsF;oBAChG,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,mEAAmE;iBAC9E,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,2HAA2H;oBACrI,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,+GAA+G;iBAC1H,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/E,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,8CAA8C;oBACxD,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,oEAAoE;iBAC/E,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,EAAE,KAAK;CACd,CAAC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport type { Ocorrencia } from '@';\nimport { criarAnalista, criarOcorrencia } from '@';\n\n/**\n * Analista de SQL\n * Detecta práticas inseguras, problemas de performance e má organização em arquivos SQL.\n */\nexport const analistaSql = criarAnalista({\n  nome: 'analista-sql',\n  categoria: 'database',\n  descricao: 'Analisa arquivos SQL em busca de injeções, performance ruim e comandos perigosos.',\n  test: (relPath: string) => /\\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),\n  aplicar: async (src: string, relPath: string): Promise<Ocorrencia[]> => {\n    const ocorrencias: Ocorrencia[] = [];\n    const linhas = src.split('\\n');\n\n    linhas.forEach((linha, index) => {\n      const numeroLinha = index + 1;\n      const linhaTrim = linha.trim().toLowerCase();\n\n      // 1. DELETE/UPDATE sem WHERE (Crítico)\n      if ((linhaTrim.startsWith('delete ') || linhaTrim.startsWith('update ')) &&\n          !linhaTrim.includes('where') &&\n          !linha.includes('--') && !linha.includes('/*')) {\n        // Verificar se o WHERE está na próxima linha (heurística simples)\n        const proximaLinha = linhas[index + 1]?.trim().toLowerCase() || '';\n        if (!proximaLinha.includes('where')) {\n          ocorrencias.push(criarOcorrencia({\n            tipo: 'vulnerabilidade-seguranca',\n            nivel: 'erro',\n            mensagem: 'Comando DELETE/UPDATE sem cláusula WHERE detectado. Isso pode apagar ou alterar todos os dados da tabela.',\n            relPath,\n            linha: numeroLinha,\n            sugestao: 'Sempre utilize a cláusula WHERE para restringir o impacto do comando.'\n          }));\n        }\n      }\n\n      // 2. SELECT * (Performance/Manutenibilidade)\n      if (/\\bselect\\s+\\*\\s+from\\b/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'problema-performance',\n          nivel: 'aviso',\n          mensagem: 'Uso de \"SELECT *\" detectado. Isso aumenta o tráfego de rede e pode quebrar se a estrutura da tabela mudar.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Liste explicitamente as colunas necessárias.'\n        }));\n      }\n\n      // 3. Senhas ou segredos em scripts (Segurança)\n      if (/\\b(password|senha|secret|key|token|credential)\\b\\s*[:=]\\s*['\"].*['\"]/i.test(linha) ||\n          /identified\\s+by\\s+['\"].*['\"]/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'vulnerabilidade-seguranca',\n          nivel: 'erro',\n          mensagem: 'Possível credencial ou segredo hardcoded em script SQL.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Utilize variáveis de ambiente ou sistemas de gerenciamento de segredos.'\n        }));\n      }\n\n      // 4. Injeção de SQL via strings concatenadas (se for template ou arquivo de migração dinâmico)\n      if (/\\s\\+\\s*['\"`].*['\"`]/.test(linha) && /select|insert|update|delete/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'sql-injection',\n          nivel: 'erro',\n          mensagem: 'Possível injeção de SQL detectada via concatenação de strings.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Utilize consultas parametrizadas ou placeholders.'\n        }));\n      }\n\n      // 5. Tabelas temporárias ou globais sem DROP prévio (Boas Práticas)\n      if (/create\\s+(table|procedure|view)\\s+\\w+/i.test(linha) && !/if\\s+not\\s+exists/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'codigo-fragil',\n          nivel: 'info',\n          mensagem: 'Criação de objeto sem \"IF NOT EXISTS\". Pode causar erro se o script for reexecutado.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Utilize \"CREATE TABLE IF NOT EXISTS ...\" para maior idempotência.'\n        }));\n      }\n\n      // 6. TRUNCATE TABLE (Risco)\n      if (/\\btruncate\\s+table\\b/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'vulnerabilidade-seguranca',\n          nivel: 'aviso',\n          mensagem: 'Uso de TRUNCATE TABLE detectado. Este comando não pode ser revertido por ROLLBACK em alguns bancos e limpa toda a tabela.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Certifique-se de que a limpeza total é intencional e prefira DELETE com WHERE se precisar de reversibilidade.'\n        }));\n      }\n\n      // 7. Uso de tipos obsoletos (ex: VARCHAR sem tamanho, TEXT para colunas pequenas)\n      if (/\\bvarchar\\b\\s*(\\(|\\s|$)/i.test(linha) && !/\\bvarchar\\(\\d+\\)/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'codigo-fragil',\n          nivel: 'info',\n          mensagem: 'VARCHAR sem especificação de tamanho máximo.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Defina um tamanho máximo apropriado para otimizar o armazenamento.'\n        }));\n      }\n    });\n\n    return ocorrencias;\n  },\n  global: false\n});\n"]}

package/dist/analysts/sql/analysts/index.d.ts

@@ -0,0 +1,2 @@
+export * from './analyst-sql.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/sql/analysts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC"}

package/dist/analysts/sql/analysts/index.js

@@ -0,0 +1,2 @@
+export * from './analyst-sql.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/sql/analysts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/sql/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC","sourcesContent":["export * from './analyst-sql.js';\n"]}

package/dist/analysts/sql/corrections/correction-sql.d.ts

@@ -0,0 +1,11 @@
+import type { Analista } from '../../../types/index.js';
+export interface SqlCorrection {
+    tipo: string;
+    original: string;
+    sugerido: string;
+    linha: number;
+    confianca: number;
+}
+export declare function detectarCorrecoesSql(src: string, _relPath: string): SqlCorrection[];
+export declare const correctionSql: Analista;
+//# sourceMappingURL=correction-sql.d.ts.map

package/dist/analysts/sql/corrections/correction-sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-sql.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/corrections/correction-sql.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CA8CnF;AACD,eAAO,MAAM,aAAa,EAAE,QAiB3B,CAAC"}

package/dist/analysts/sql/corrections/correction-sql.js

@@ -0,0 +1,70 @@
+import { messages } from '../../../core/messages/index.js';
+import { splitLines } from '../../../shared/helpers/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+export function detectarCorrecoesSql(src, _relPath) {
+    const correcoes = [];
+    const linhas = splitLines(src);
+    linhas.forEach((linha, index) => {
+        const numeroLinha = index + 1;
+        if (/\bselect\s+\*\s+from\b/i.test(linha)) {
+            const tableMatch = /from\s+(\w+)/i.exec(linha);
+            if (tableMatch) {
+                correcoes.push({
+                    tipo: 'sql-select-star',
+                    original: linha.trim(),
+                    sugerido: linha.replace(/\bselect\s+\*\s+from/i, `SELECT coluna1, coluna2 FROM`),
+                    linha: numeroLinha,
+                    confianca: 60
+                });
+            }
+        }
+        if (/^\s*(delete|update)\s+/i.test(linha.trim()) && !/where/i.test(linha)) {
+            correcoes.push({
+                tipo: 'sql-add-where',
+                original: linha.trim(),
+                sugerido: `${linha.trim()}\n-- [AVISO] ADICIONE: WHERE condicao = valor`,
+                linha: numeroLinha,
+                confianca: 90
+            });
+        }
+        if (/\bvarchar\b\s*(\(|\s|$)/i.test(linha) && !/\bvarchar\(\d+\)/i.test(linha)) {
+            correcoes.push({
+                tipo: 'sql-varchar-size',
+                original: linha.trim(),
+                sugerido: linha.replace(/\bvarchar\b/gi, 'VARCHAR(255)'),
+                linha: numeroLinha,
+                confianca: 80
+            });
+        }
+        if (/create\s+table\s+(\w+)/i.test(linha) && !/if\s+not\s+exists/i.test(linha)) {
+            correcoes.push({
+                tipo: 'sql-add-if-not-exists',
+                original: linha.trim(),
+                sugerido: linha.replace(/create\s+table\s+/i, 'CREATE TABLE IF NOT EXISTS '),
+                linha: numeroLinha,
+                confianca: 95
+            });
+        }
+    });
+    return correcoes;
+}
+export const correctionSql = {
+    nome: 'correction-sql',
+    categoria: 'database',
+    descricao: 'Correções automáticas para problemas SQL',
+    test: (relPath) => /\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const correcoes = detectarCorrecoesSql(src, relPath);
+        return correcoes.map(elem => criarOcorrencia({
+            tipo: `correction-${elem.tipo}`,
+            nivel: elem.confianca > 85 ? 'aviso' : 'info',
+            mensagem: messages.SharedCommonMensagens.correcaoSugerida(elem.tipo),
+            relPath,
+            linha: elem.linha,
+            sugestao: `[ERRO] ${elem.original}\n[OK] ${elem.sugerido}\nConfiança: ${elem.confianca}%`
+        }));
+    }
+};
+//# sourceMappingURL=correction-sql.js.map

package/dist/analysts/sql/corrections/correction-sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-sql.js","sourceRoot":"","sources":["../../../../src/analysts/sql/corrections/correction-sql.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AASpC,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,QAAgB;IAChE,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;QAC9B,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,UAAU,EAAE,CAAC;gBACf,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;oBACtB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,EAAE,8BAA8B,CAAC;oBAChF,KAAK,EAAE,WAAW;oBAClB,SAAS,EAAE,EAAE;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,+CAA+C;gBACxE,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC;gBACxD,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,6BAA6B,CAAC;gBAC5E,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,CAAC,MAAM,aAAa,GAAa;IACrC,IAAI,EAAE,gBAAgB;IACtB,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,0CAA0C;IACrD,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;IAChF,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC;YAC3C,IAAI,EAAE,cAAc,IAAI,CAAC,IAAI,EAAE;YAC/B,KAAK,EAAE,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC7C,QAAQ,EAAE,QAAQ,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YACpE,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,UAAU,IAAI,CAAC,QAAQ,UAAU,IAAI,CAAC,QAAQ,gBAAgB,IAAI,CAAC,SAAS,GAAG;SAC1F,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [CHAVE-INGLESA] Correções automáticas para SQL\n *\n * Fornece correções sugeridas para problemas comuns em SQL:\n * - SELECT * → colunas explícitas\n * - DELETE/UPDATE sem WHERE → adicionar WHERE\n * - VARCHAR sem tamanho → definir tamanho\n */\n\nimport { messages } from '@core/messages';\nimport { splitLines } from '@shared/helpers';\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport interface SqlCorrection {\n  tipo: string;\n  original: string;\n  sugerido: string;\n  linha: number;\n  confianca: number;\n}\nexport function detectarCorrecoesSql(src: string, _relPath: string): SqlCorrection[] {\n  const correcoes: SqlCorrection[] = [];\n  const linhas = splitLines(src);\n  linhas.forEach((linha, index) => {\n    const numeroLinha = index + 1;\n    if (/\\bselect\\s+\\*\\s+from\\b/i.test(linha)) {\n      const tableMatch = /from\\s+(\\w+)/i.exec(linha);\n      if (tableMatch) {\n        correcoes.push({\n          tipo: 'sql-select-star',\n          original: linha.trim(),\n          sugerido: linha.replace(/\\bselect\\s+\\*\\s+from/i, `SELECT coluna1, coluna2 FROM`),\n          linha: numeroLinha,\n          confianca: 60\n        });\n      }\n    }\n    if (/^\\s*(delete|update)\\s+/i.test(linha.trim()) && !/where/i.test(linha)) {\n      correcoes.push({\n        tipo: 'sql-add-where',\n        original: linha.trim(),\n        sugerido: `${linha.trim()}\\n-- [AVISO] ADICIONE: WHERE condicao = valor`,\n        linha: numeroLinha,\n        confianca: 90\n      });\n    }\n    if (/\\bvarchar\\b\\s*(\\(|\\s|$)/i.test(linha) && !/\\bvarchar\\(\\d+\\)/i.test(linha)) {\n      correcoes.push({\n        tipo: 'sql-varchar-size',\n        original: linha.trim(),\n        sugerido: linha.replace(/\\bvarchar\\b/gi, 'VARCHAR(255)'),\n        linha: numeroLinha,\n        confianca: 80\n      });\n    }\n    if (/create\\s+table\\s+(\\w+)/i.test(linha) && !/if\\s+not\\s+exists/i.test(linha)) {\n      correcoes.push({\n        tipo: 'sql-add-if-not-exists',\n        original: linha.trim(),\n        sugerido: linha.replace(/create\\s+table\\s+/i, 'CREATE TABLE IF NOT EXISTS '),\n        linha: numeroLinha,\n        confianca: 95\n      });\n    }\n  });\n  return correcoes;\n}\nexport const correctionSql: Analista = {\n  nome: 'correction-sql',\n  categoria: 'database',\n  descricao: 'Correções automáticas para problemas SQL',\n  test: (relPath: string): boolean => /\\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const correcoes = detectarCorrecoesSql(src, relPath);\n    return correcoes.map(elem => criarOcorrencia({\n      tipo: `correction-${elem.tipo}`,\n      nivel: elem.confianca > 85 ? 'aviso' : 'info',\n      mensagem: messages.SharedCommonMensagens.correcaoSugerida(elem.tipo),\n      relPath,\n      linha: elem.linha,\n      sugestao: `[ERRO] ${elem.original}\\n[OK] ${elem.sugerido}\\nConfiança: ${elem.confianca}%`\n    }));\n  }\n};"]}

package/dist/analysts/sql/corrections/index.d.ts

@@ -0,0 +1,2 @@
+export * from './correction-sql.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/sql/corrections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC"}

package/dist/analysts/sql/corrections/index.js

@@ -0,0 +1,2 @@
+export * from './correction-sql.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/sql/corrections/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/sql/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './correction-sql.js';\n"]}

package/dist/analysts/sql/detectors/detector-sql-best-practices.d.ts

@@ -0,0 +1,3 @@
+export type { DeteccaoCustomSql } from './detector-sql.js';
+export { detectorSql, detectorSqlBestPractices, obterDetectoresSql, registrarDetectorSql, } from './detector-sql.js';
+//# sourceMappingURL=detector-sql-best-practices.d.ts.map

package/dist/analysts/sql/detectors/detector-sql-best-practices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-sql-best-practices.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/detectors/detector-sql-best-practices.ts"],"names":[],"mappings":"AAQA,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC"}

package/dist/analysts/sql/detectors/detector-sql-best-practices.js

@@ -0,0 +1,2 @@
+export { detectorSql, detectorSqlBestPractices, obterDetectoresSql, registrarDetectorSql, } from './detector-sql.js';
+//# sourceMappingURL=detector-sql-best-practices.js.map

package/dist/analysts/sql/detectors/detector-sql-best-practices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-sql-best-practices.js","sourceRoot":"","sources":["../../../../src/analysts/sql/detectors/detector-sql-best-practices.ts"],"names":[],"mappings":"AASA,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Detector de boas práticas SQL (backward compat)\n *\n * Re-exporta do novo detector abrangente.\n * @deprecated Use './detector-sql.js' diretamente.\n */\n\nexport type { DeteccaoCustomSql } from './detector-sql.js';\nexport {\n  detectorSql,\n  detectorSqlBestPractices,\n  obterDetectoresSql,\n  registrarDetectorSql,\n} from './detector-sql.js';\n"]}

package/dist/analysts/sql/detectors/detector-sql.d.ts

@@ -0,0 +1,15 @@
+import type { Analista, Ocorrencia } from '../../../types/index.js';
+export type DeteccaoCustomSql = {
+    nome: string;
+    descricao: string;
+    severidade: 'baixa' | 'media' | 'alta' | 'critica';
+    testar: (src: string, contexto: {
+        relPath: string;
+        linhas: string[];
+    }) => Ocorrencia[] | Promise<Ocorrencia[]>;
+};
+export declare function registrarDetectorSql(detector: DeteccaoCustomSql): void;
+export declare function obterDetectoresSql(): DeteccaoCustomSql[];
+export declare const detectorSql: Analista;
+export declare const detectorSqlBestPractices: Analista;
+//# sourceMappingURL=detector-sql.d.ts.map

package/dist/analysts/sql/detectors/detector-sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-sql.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/detectors/detector-sql.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,QAAQ,EAAoB,UAAU,EAAE,MAAM,GAAG,CAAC;AAGhE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,UAAU,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;CAChH,CAAC;AAIF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAEtE;AAED,wBAAgB,kBAAkB,IAAI,iBAAiB,EAAE,CAExD;AAoBD,eAAO,MAAM,WAAW,EAAE,QA4dzB,CAAC;AAGF,eAAO,MAAM,wBAAwB,UAAc,CAAC"}