@mocoto/mahoraga 0.14.0

package/dist/app/github/app/server.js

@@ -0,0 +1,125 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { messages } from '../../../core/messages/index.js';
+import { App } from '@octokit/app';
+import express from 'express';
+import { parse } from 'yaml';
+import { createDashboardRouter } from '../dashboard/index.js';
+import { bloquearPentestUrl } from '../middleware/bloqueio-pentest.js';
+import { bloquearRobos } from '../middleware/bloqueio-robos.js';
+import { createDdosProtection } from '../middleware/ddos-protection.js';
+import { createIsolationMiddleware } from '../middleware/isolamento.js';
+import { rateLimiter } from '../middleware/rate-limit.js';
+import { createSecurityMiddleware } from '../middleware/seguranca.js';
+import { createWebhookHandler } from './webhook-handler.js';
+const log = messages.log;
+const { GithubAppMensagens } = messages;
+const HTTP_OK = 200;
+const HTTP_NOT_FOUND = 404;
+const FRONTEND_DIR = join(process.cwd(), 'out');
+const OCTOKIT_TIMEOUT = parseInt(process.env.MAHORAGA_OCTOKIT_TIMEOUT_MS ?? '30000', 10);
+const INDEX_HTML = join(FRONTEND_DIR, 'index.html');
+const ADMIN_CONFIG_PATH = join(process.cwd(), 'public', 'admin', 'config.yml');
+function resolveCmsAppId() {
+    return process.env.GITHUB_CMS_APP_ID || process.env.GITHUB_APP_ID || '';
+}
+function loadAdminCmsConfig() {
+    const raw = readFileSync(ADMIN_CONFIG_PATH, 'utf-8');
+    const config = parse(raw);
+    if (typeof config !== 'object' || config === null) {
+        return {};
+    }
+    const backend = config.backend ?? {};
+    backend.app_id = resolveCmsAppId();
+    config.backend = backend;
+    return config;
+}
+function serveIndexHtml(res) {
+    if (existsSync(INDEX_HTML)) {
+        res.sendFile(INDEX_HTML, {
+            headers: {
+                'X-Content-Type-Options': 'nosniff',
+                'X-Frame-Options': 'DENY',
+                'Cross-Origin-Resource-Policy': 'same-origin',
+                'Cross-Origin-Opener-Policy': 'same-origin',
+                'Referrer-Policy': 'no-referrer',
+            }
+        });
+    }
+    else {
+        res.status(HTTP_OK).type('html').send('Mahoraga API rodando.');
+    }
+}
+export function iniciarServidorApp(opts) {
+    const app = express();
+    app.set('x-powered-by', false);
+    app.use(express.json({
+        limit: '50mb',
+        verify: (req, _res, buf) => {
+            req.rawBody = buf;
+        }
+    }));
+    app.use(express.urlencoded({ extended: false, limit: '8kb' }));
+    app.use(createSecurityMiddleware());
+    app.use(bloquearRobos);
+    app.use(createDdosProtection());
+    app.use(rateLimiter);
+    app.use('/api/github', bloquearPentestUrl, createIsolationMiddleware());
+    const appOctokit = new App({
+        appId: opts.appId,
+        privateKey: opts.privateKey,
+        webhooks: { secret: opts.webhookSecret },
+        request: { timeout: OCTOKIT_TIMEOUT }
+    });
+    const webhookHandler = createWebhookHandler(appOctokit);
+    app.post('/api/github/webhooks', webhookHandler);
+    app.use('/api/github', createDashboardRouter(appOctokit));
+    app.get('/ping', (_req, res) => {
+        res.status(HTTP_OK).send('pong');
+    });
+    if (existsSync(FRONTEND_DIR)) {
+        app.get('/admin/cms-config', (_req, res) => {
+            res.json(loadAdminCmsConfig());
+        });
+        app.use(express.static(FRONTEND_DIR, {
+            dotfiles: 'deny',
+            index: ['index.html'],
+            setHeaders: (res) => {
+                res.setHeader('X-Content-Type-Options', 'nosniff');
+                res.setHeader('X-Frame-Options', 'DENY');
+            }
+        }));
+        app.use((req, res, next) => {
+            if (req.path === '/favicon.ico') {
+                res.status(HTTP_NOT_FOUND).type('png').end();
+                return;
+            }
+            next();
+        });
+        app.get('/{*path}', (_req, res) => {
+            serveIndexHtml(res);
+        });
+    }
+    else {
+        app.get('/', (_req, res) => {
+            res.type('html').send('Mahoraga API rodando. Landing nao encontrada (rode npm run build para gerar out/).');
+        });
+    }
+    return new Promise((resolve, reject) => {
+        try {
+            app.listen(opts.port, () => {
+                log.sucesso(GithubAppMensagens.servidorRodando(opts.port));
+                log.info(GithubAppMensagens.webhooksEndpoint(opts.port));
+                log.info(GithubAppMensagens.healthEndpoint(opts.port));
+                log.info(GithubAppMensagens.dashboardEndpoint(opts.port));
+                log.info(GithubAppMensagens.statsEndpoint(opts.port));
+                resolve();
+            });
+        }
+        catch (err) {
+            log.erro(GithubAppMensagens.erroIniciarServidor(err instanceof Error ? err.message : String(err)));
+            reject(err);
+        }
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/app/github/app/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/app/github/app/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAI7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;AACzB,MAAM,EAAE,kBAAkB,EAAE,GAAG,QAAQ,CAAC;AAExC,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;AAChD,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AAEzF,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;AACpD,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AAE/E,SAAS,eAAe;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAA4B,CAAC;IAErD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAI,MAAM,CAAC,OAAmC,IAAI,EAAE,CAAC;IAClE,OAAO,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,GAAqB;IAC3C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE;YACvB,OAAO,EAAE;gBACP,wBAAwB,EAAE,SAAS;gBACnC,iBAAiB,EAAE,MAAM;gBACzB,8BAA8B,EAAE,aAAa;gBAC7C,4BAA4B,EAAE,aAAa;gBAC3C,iBAAiB,EAAE,aAAa;aACjC;SACF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAE/B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,CAAC,GAA2C,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAChE,GAA4B,CAAC,OAAO,GAAG,GAAG,CAAC;QAC9C,CAAC;KACF,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAE/D,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAErB,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAExE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE;QACxC,OAAO,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE;KACtC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAExD,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC;IAEjD,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1D,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC7B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACzC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE;YACnC,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,YAAY,CAAC;YACrB,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;gBAClB,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;gBACnD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;SACF,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACzB,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAChC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAChC,cAAc,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;QAC9G,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACzB,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3D,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvD,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1D,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnG,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { existsSync, readFileSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport { messages } from '@core/messages';\nimport { App } from '@octokit/app';\nimport express from 'express';\nimport { parse } from 'yaml';\n\nimport type { ServidorAppOptions } from '@';\n\nimport { createDashboardRouter } from '../dashboard/index.js';\nimport { bloquearPentestUrl } from '../middleware/bloqueio-pentest.js';\nimport { bloquearRobos } from '../middleware/bloqueio-robos.js';\nimport { createDdosProtection } from '../middleware/ddos-protection.js';\nimport { createIsolationMiddleware } from '../middleware/isolamento.js';\nimport { rateLimiter } from '../middleware/rate-limit.js';\nimport { createSecurityMiddleware } from '../middleware/seguranca.js';\nimport { createWebhookHandler } from './webhook-handler.js';\n\nconst log = messages.log;\nconst { GithubAppMensagens } = messages;\n\nconst HTTP_OK = 200;\nconst HTTP_NOT_FOUND = 404;\nconst FRONTEND_DIR = join(process.cwd(), 'out');\nconst OCTOKIT_TIMEOUT = parseInt(process.env.MAHORAGA_OCTOKIT_TIMEOUT_MS ?? '30000', 10);\n\nconst INDEX_HTML = join(FRONTEND_DIR, 'index.html');\nconst ADMIN_CONFIG_PATH = join(process.cwd(), 'public', 'admin', 'config.yml');\n\nfunction resolveCmsAppId(): string {\n  return process.env.GITHUB_CMS_APP_ID || process.env.GITHUB_APP_ID || '';\n}\n\nfunction loadAdminCmsConfig(): Record<string, unknown> {\n  const raw = readFileSync(ADMIN_CONFIG_PATH, 'utf-8');\n  const config = parse(raw) as Record<string, unknown>;\n\n  if (typeof config !== 'object' || config === null) {\n    return {};\n  }\n\n  const backend = (config.backend as Record<string, unknown>) ?? {};\n  backend.app_id = resolveCmsAppId();\n  config.backend = backend;\n  return config;\n}\n\nfunction serveIndexHtml(res: express.Response): void {\n  if (existsSync(INDEX_HTML)) {\n    res.sendFile(INDEX_HTML, {\n      headers: {\n        'X-Content-Type-Options': 'nosniff',\n        'X-Frame-Options': 'DENY',\n        'Cross-Origin-Resource-Policy': 'same-origin',\n        'Cross-Origin-Opener-Policy': 'same-origin',\n        'Referrer-Policy': 'no-referrer',\n      }\n    });\n  } else {\n    res.status(HTTP_OK).type('html').send('Mahoraga API rodando.');\n  }\n}\n\nexport function iniciarServidorApp(opts: ServidorAppOptions): Promise<void> {\n  const app = express();\n\n  app.set('x-powered-by', false);\n\n  app.use(express.json({\n    limit: '50mb',\n    verify: (req: express.Request & { rawBody?: Buffer }, _res, buf) => {\n      (req as { rawBody?: Buffer }).rawBody = buf;\n    }\n  }));\n\n  app.use(express.urlencoded({ extended: false, limit: '8kb' }));\n\n  app.use(createSecurityMiddleware());\n  app.use(bloquearRobos);\n  app.use(createDdosProtection());\n  app.use(rateLimiter);\n\n  app.use('/api/github', bloquearPentestUrl, createIsolationMiddleware());\n\n  const appOctokit = new App({\n    appId: opts.appId,\n    privateKey: opts.privateKey,\n    webhooks: { secret: opts.webhookSecret },\n    request: { timeout: OCTOKIT_TIMEOUT }\n  });\n\n  const webhookHandler = createWebhookHandler(appOctokit);\n\n  app.post('/api/github/webhooks', webhookHandler);\n\n  app.use('/api/github', createDashboardRouter(appOctokit));\n\n  app.get('/ping', (_req, res) => {\n    res.status(HTTP_OK).send('pong');\n  });\n\n  if (existsSync(FRONTEND_DIR)) {\n    app.get('/admin/cms-config', (_req, res) => {\n      res.json(loadAdminCmsConfig());\n    });\n\n    app.use(express.static(FRONTEND_DIR, {\n      dotfiles: 'deny',\n      index: ['index.html'],\n      setHeaders: (res) => {\n        res.setHeader('X-Content-Type-Options', 'nosniff');\n        res.setHeader('X-Frame-Options', 'DENY');\n      }\n    }));\n    app.use((req, res, next) => {\n      if (req.path === '/favicon.ico') {\n        res.status(HTTP_NOT_FOUND).type('png').end();\n        return;\n      }\n      next();\n    });\n    app.get('/{*path}', (_req, res) => {\n      serveIndexHtml(res);\n    });\n  } else {\n    app.get('/', (_req, res) => {\n      res.type('html').send('Mahoraga API rodando. Landing nao encontrada (rode npm run build para gerar out/).');\n    });\n  }\n\n  return new Promise<void>((resolve, reject) => {\n    try {\n      app.listen(opts.port, () => {\n        log.sucesso(GithubAppMensagens.servidorRodando(opts.port));\n        log.info(GithubAppMensagens.webhooksEndpoint(opts.port));\n        log.info(GithubAppMensagens.healthEndpoint(opts.port));\n        log.info(GithubAppMensagens.dashboardEndpoint(opts.port));\n        log.info(GithubAppMensagens.statsEndpoint(opts.port));\n        resolve();\n      });\n    } catch (err) {\n      log.erro(GithubAppMensagens.erroIniciarServidor(err instanceof Error ? err.message : String(err)));\n      reject(err);\n    }\n  });\n}\n"]}

package/dist/app/github/app/setup-routes.d.ts

@@ -0,0 +1,5 @@
+import type { App } from '@octokit/app';
+import { type Request, Router } from 'express';
+export declare function createSetupRouter(app: App): Router;
+export declare function buildSetupUrl(req?: Request): string;
+//# sourceMappingURL=setup-routes.d.ts.map

package/dist/app/github/app/setup-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-routes.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/setup-routes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,KAAK,OAAO,EAAiB,MAAM,EAAE,MAAM,SAAS,CAAC;AAc9D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CA6DlD;AAED,wBAAgB,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,CAYnD"}

package/dist/app/github/app/setup-routes.js

@@ -0,0 +1,79 @@
+import { GithubSetupMensagens, messages } from '../../../core/messages/index.js';
+import { Router } from 'express';
+import { salvarConfigInstalacao } from './installation-store.js';
+const HTTP_BAD_REQUEST = 400;
+function publicBaseUrl(req) {
+    const env = process.env.MAHORAGA_PUBLIC_URL || process.env.PUBLIC_URL;
+    if (env)
+        return env.replace(/\/$/, '');
+    const proto = req.headers['x-forwarded-proto'] || req.protocol;
+    const host = req.headers['x-forwarded-host'] || req.headers.host;
+    return `${proto}://${host}`;
+}
+export function createSetupRouter(app) {
+    const router = Router();
+    router.get('/setup', async (req, res) => {
+        const installationIdRaw = req.query.installation_id;
+        const installationId = typeof installationIdRaw === 'string'
+            ? parseInt(installationIdRaw, 10)
+            : Array.isArray(installationIdRaw)
+                ? parseInt(installationIdRaw[0], 10)
+                : NaN;
+        if (!installationId || Number.isNaN(installationId)) {
+            res.status(HTTP_BAD_REQUEST).type('html').send(GithubSetupMensagens.installationIdAusente);
+            return;
+        }
+        try {
+            salvarConfigInstalacao({
+                installationId,
+                pushAnalysisEnabled: true,
+                pullRequestAnalysisEnabled: true,
+                fast: false,
+                incrementalOnPush: true
+            });
+        }
+        catch (err) {
+            messages.log.erro(`${GithubSetupMensagens.erroSalvarConfig}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        let destino = 'https://github.com';
+        try {
+            const { data: installation } = await app.octokit.request('GET /app/installations/{installation_id}', {
+                installation_id: installationId,
+            });
+            const account = installation.account;
+            const username = account && 'login' in account ? account.login :
+                account && 'slug' in account ? account.slug : null;
+            if (username) {
+                destino = `https://github.com/${username}`;
+            }
+        }
+        catch (err) {
+            messages.log.erro(`Falha ao buscar instalacao ${installationId}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        res.redirect(302, destino);
+    });
+    router.get('/setup-info', (req, res) => {
+        const base = publicBaseUrl(req);
+        res.json({
+            setupUrl: `${base}/api/github/setup`,
+            redirectAfterInstall: 'https://github.com/settings/installations/{installation_id}',
+            instrucao: 'No painel do GitHub App, defina "Setup URL" como setupUrl. Após instalar, o usuário permanece no GitHub.'
+        });
+    });
+    return router;
+}
+export function buildSetupUrl(req) {
+    const env = process.env.MAHORAGA_PUBLIC_URL || process.env.PUBLIC_URL;
+    if (env)
+        return `${env.replace(/\/$/, '')}/api/github/setup`;
+    if (req) {
+        const base = (() => {
+            const proto = req.headers['x-forwarded-proto'] || req.protocol;
+            const host = req.headers['x-forwarded-host'] || req.headers.host;
+            return `${proto}://${host}`;
+        })();
+        return `${base}/api/github/setup`;
+    }
+    return '/api/github/setup';
+}
+//# sourceMappingURL=setup-routes.js.map

package/dist/app/github/app/setup-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-routes.js","sourceRoot":"","sources":["../../../../src/app/github/app/setup-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EAA+B,MAAM,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACtE,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,GAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,IAAI,GAAG,CAAC,QAAQ,CAAC;IAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IACjE,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAQ;IACxC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACzD,MAAM,iBAAiB,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;QAEpD,MAAM,cAAc,GAAG,OAAO,iBAAiB,KAAK,QAAQ;YAC1D,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACjC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC;gBAChC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC;gBAC9C,CAAC,CAAC,GAAG,CAAC;QAEV,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,oBAAoB,CAAC,qBAAqB,CAC3C,CAAC;YACF,OAAO;QACT,CAAC;QAEA,IAAI,CAAC;YACH,sBAAsB,CAAC;gBACrB,cAAc;gBACd,mBAAmB,EAAE,IAAI;gBACzB,0BAA0B,EAAE,IAAI;gBAChC,IAAI,EAAE,KAAK;gBACX,iBAAiB,EAAE,IAAI;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,gBAAgB,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;QAEF,IAAI,OAAO,GAAG,oBAAoB,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,0CAA0C,EAAE;gBACnG,eAAe,EAAE,cAAc;aAChC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;YACrC,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/C,OAAO,IAAI,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACpE,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,GAAG,sBAAsB,QAAQ,EAAE,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,cAAc,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzH,CAAC;QAED,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,GAAG,IAAI,mBAAmB;YACpC,oBAAoB,EAAE,6DAA6D;YACnF,SAAS,EACP,0GAA0G;SAC7G,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAa;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACtE,IAAI,GAAG;QAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC;IAC7D,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,IAAI,GAAG,CAAC,QAAQ,CAAC;YAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YACjE,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;QAC9B,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,IAAI,mBAAmB,CAAC;IACpC,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { GithubSetupMensagens, messages } from '@core/messages';\nimport type { App } from '@octokit/app';\nimport { type Request, type Response, Router } from 'express';\n\nimport { salvarConfigInstalacao } from './installation-store.js';\n\nconst HTTP_BAD_REQUEST = 400;\n\nfunction publicBaseUrl(req: Request): string {\n  const env = process.env.MAHORAGA_PUBLIC_URL || process.env.PUBLIC_URL;\n  if (env) return env.replace(/\\/$/, '');\n  const proto = (req.headers['x-forwarded-proto'] as string) || req.protocol;\n  const host = req.headers['x-forwarded-host'] || req.headers.host;\n  return `${proto}://${host}`;\n}\n\nexport function createSetupRouter(app: App): Router {\n  const router = Router();\n\n  router.get('/setup', async (req: Request, res: Response) => {\n    const installationIdRaw = req.query.installation_id;\n\n    const installationId = typeof installationIdRaw === 'string'\n      ? parseInt(installationIdRaw, 10)\n      : Array.isArray(installationIdRaw)\n        ? parseInt(installationIdRaw[0] as string, 10)\n        : NaN;\n\n    if (!installationId || Number.isNaN(installationId)) {\n      res.status(HTTP_BAD_REQUEST).type('html').send(\n        GithubSetupMensagens.installationIdAusente\n      );\n      return;\n    }\n\n     try {\n       salvarConfigInstalacao({\n         installationId,\n         pushAnalysisEnabled: true,\n         pullRequestAnalysisEnabled: true,\n         fast: false,\n         incrementalOnPush: true\n       });\n     } catch (err) {\n       messages.log.erro(`${GithubSetupMensagens.erroSalvarConfig}: ${err instanceof Error ? err.message : String(err)}`);\n     }\n\n    let destino = 'https://github.com';\n\n    try {\n      const { data: installation } = await app.octokit.request('GET /app/installations/{installation_id}', {\n        installation_id: installationId,\n      });\n      const account = installation.account;\n      const username = account && 'login' in account ? account.login :\n                       account && 'slug' in account ? account.slug : null;\n      if (username) {\n        destino = `https://github.com/${username}`;\n      }\n    } catch (err) {\n      messages.log.erro(`Falha ao buscar instalacao ${installationId}: ${err instanceof Error ? err.message : String(err)}`);\n    }\n\n    res.redirect(302, destino);\n  });\n\n  router.get('/setup-info', (req: Request, res: Response) => {\n    const base = publicBaseUrl(req);\n    res.json({\n      setupUrl: `${base}/api/github/setup`,\n      redirectAfterInstall: 'https://github.com/settings/installations/{installation_id}',\n      instrucao:\n        'No painel do GitHub App, defina \"Setup URL\" como setupUrl. Após instalar, o usuário permanece no GitHub.'\n    });\n  });\n\n  return router;\n}\n\nexport function buildSetupUrl(req?: Request): string {\n  const env = process.env.MAHORAGA_PUBLIC_URL || process.env.PUBLIC_URL;\n  if (env) return `${env.replace(/\\/$/, '')}/api/github/setup`;\n  if (req) {\n    const base = (() => {\n      const proto = (req.headers['x-forwarded-proto'] as string) || req.protocol;\n      const host = req.headers['x-forwarded-host'] || req.headers.host;\n      return `${proto}://${host}`;\n    })();\n    return `${base}/api/github/setup`;\n  }\n  return '/api/github/setup';\n}\n"]}

package/dist/app/github/app/webhook-handler.d.ts

@@ -0,0 +1,9 @@
+import type { App } from '@octokit/app';
+import type { Request, Response } from 'express';
+import type { PullRequestPayload, PushPayload } from '../../../types/github/app.js';
+export type { OctokitInstance } from './octokit.js';
+export { analisarWorkflows, buscarWorkflows } from './workflow-reader.js';
+export declare function processarPullRequest(app: App, payload: PullRequestPayload): Promise<void>;
+export declare function processarPush(app: App, payload: PushPayload): Promise<void>;
+export declare function createWebhookHandler(app: App): (req: Request, res: Response) => Promise<void>;
+//# sourceMappingURL=webhook-handler.d.ts.map

package/dist/app/github/app/webhook-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-handler.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/webhook-handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAcpF,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE1E,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,wBAAsB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBjF;AAiBD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAoL7F"}

package/dist/app/github/app/webhook-handler.js

@@ -0,0 +1,255 @@
+import { GithubWebhookMensagens, messages } from '../../../core/messages/index.js';
+import { statsStore } from '../dashboard/stats-store.js';
+import { executarAnalisePullRequest } from '../push-analysis/pr-analysis-service.js';
+import { executarAnalisePush } from '../push-analysis/push-analysis-service.js';
+import { processarCheckSuite } from './check-suite-handler.js';
+import { salvarConfigInstalacao } from './installation-store.js';
+import { processarIssues } from './issues-handler.js';
+import { HTTP_BAD_REQUEST, HTTP_OK, repoBase } from './octokit.js';
+import { processarPullRequestReview } from './pr-review-handler.js';
+export { analisarWorkflows, buscarWorkflows } from './workflow-reader.js';
+export async function processarPullRequest(app, payload) {
+    const { repository, pull_request, installation, action } = payload;
+    if (!['opened', 'synchronize', 'reopened'].includes(action))
+        return;
+    if (!installation?.id)
+        return;
+    const owner = repository.owner.login;
+    const repo = repository.name;
+    try {
+        await executarAnalisePullRequest(app, {
+            installationId: installation.id,
+            owner,
+            repo,
+            prNumber: pull_request.number,
+            headSha: pull_request.head.sha,
+            headRef: pull_request.head.ref,
+            baseSha: pull_request.base.sha,
+            baseRef: pull_request.base.ref,
+            prTitle: pull_request.title
+        });
+    }
+    catch (err) {
+        const error = err;
+        const octokit = await app.getInstallationOctokit(installation.id);
+        await octokit.request('POST /repos/{owner}/{repo}/issues/{issue_number}/comments', {
+            owner,
+            repo,
+            issue_number: pull_request.number,
+            body: `## Mahoraga — erro no diagnóstico\n\nNão foi possível concluir a análise: \`${error.message}\``
+        }).catch(() => { });
+        messages.log.erro(GithubWebhookMensagens.erroAnalisePR(owner, repo, pull_request.number, error.message));
+    }
+}
+export async function processarPush(app, payload) {
+    const { repository, head_commit, ref, installation, before, after } = payload;
+    if (!installation?.id)
+        return;
+    if (!ref.startsWith('refs/heads/'))
+        return;
+    const owner = repository.owner.login;
+    const repo = repository.name;
+    const branch = ref.replace('refs/heads/', '');
+    const headSha = after || head_commit.id;
+    if (!headSha)
+        return;
+    try {
+        await executarAnalisePush(app, {
+            installationId: installation.id,
+            owner,
+            repo,
+            branch,
+            headSha,
+            beforeSha: before,
+            commitMessage: head_commit.message || 'push'
+        });
+    }
+    catch (err) {
+        const error = err;
+        messages.log.erro(GithubWebhookMensagens.erroProcessarPush(repository.full_name, branch, error.message));
+    }
+}
+function extractRepo(payload) {
+    return (payload.repository?.full_name ||
+        (payload.repository?.owner?.login
+            ? `${payload.repository.owner.login}/${payload.repository.name}`
+            : 'desconhecido'));
+}
+function extractInstallation(payload) {
+    return payload.installation?.id ?? 0;
+}
+export function createWebhookHandler(app) {
+    app.webhooks.on('check_suite.requested', async ({ payload }) => {
+        await processarCheckSuite(app, {
+            repository: repoBase(payload.repository),
+            check_suite: { head_sha: payload.check_suite.head_sha },
+            installation: { id: payload.installation?.id ?? 0 }
+        });
+    });
+    app.webhooks.on('check_suite.rerequested', async ({ payload }) => {
+        await processarCheckSuite(app, {
+            repository: repoBase(payload.repository),
+            check_suite: { head_sha: payload.check_suite.head_sha },
+            installation: { id: payload.installation?.id ?? 0 }
+        });
+    });
+    app.webhooks.on('pull_request.opened', async ({ payload }) => {
+        await processarPullRequest(app, {
+            repository: repoBase(payload.repository),
+            pull_request: {
+                head: payload.pull_request.head,
+                base: payload.pull_request.base,
+                number: payload.pull_request.number,
+                title: payload.pull_request.title
+            },
+            installation: { id: payload.installation?.id ?? 0 },
+            action: payload.action
+        });
+    });
+    app.webhooks.on('pull_request.synchronize', async ({ payload }) => {
+        await processarPullRequest(app, {
+            repository: repoBase(payload.repository),
+            pull_request: {
+                head: payload.pull_request.head,
+                base: payload.pull_request.base,
+                number: payload.pull_request.number,
+                title: payload.pull_request.title
+            },
+            installation: { id: payload.installation?.id ?? 0 },
+            action: payload.action
+        });
+    });
+    app.webhooks.on('pull_request.reopened', async ({ payload }) => {
+        await processarPullRequest(app, {
+            repository: repoBase(payload.repository),
+            pull_request: {
+                head: payload.pull_request.head,
+                base: payload.pull_request.base,
+                number: payload.pull_request.number,
+                title: payload.pull_request.title
+            },
+            installation: { id: payload.installation?.id ?? 0 },
+            action: payload.action
+        });
+    });
+    app.webhooks.on('push', async ({ payload }) => {
+        if (!payload.repository.owner)
+            return;
+        await processarPush(app, {
+            repository: {
+                ...repoBase(payload.repository),
+                full_name: payload.repository.full_name
+            },
+            head_commit: {
+                id: payload.head_commit?.id ?? '',
+                message: payload.head_commit?.message ?? ''
+            },
+            ref: payload.ref,
+            before: payload.before,
+            after: payload.after,
+            installation: { id: payload.installation?.id ?? 0 }
+        });
+    });
+    app.webhooks.on('installation', async ({ payload }) => {
+        const installation = payload.installation;
+        if (!installation?.id)
+            return;
+        if (payload.action === 'created' || payload.action === 'new_permissions_accepted') {
+            const account = installation.account;
+            salvarConfigInstalacao({
+                installationId: installation.id,
+                accountLogin: account && 'login' in account ? String(account.login) : undefined,
+                targetType: installation.target_type,
+                repositorySelection: installation.repository_selection,
+                pushAnalysisEnabled: true,
+                pullRequestAnalysisEnabled: true,
+                fast: false,
+                incrementalOnPush: true
+            });
+        }
+    });
+    app.webhooks.on('installation_repositories', async ({ payload }) => {
+        const installation = payload.installation;
+        if (!installation?.id)
+            return;
+        if (payload.action === 'added' || payload.action === 'removed') {
+            salvarConfigInstalacao({
+                installationId: installation.id,
+                repositorySelection: installation.repository_selection
+            });
+        }
+    });
+    app.webhooks.on('pull_request_review.submitted', async ({ payload }) => {
+        await processarPullRequestReview(app, {
+            repository: repoBase(payload.repository),
+            pull_request: {
+                head: { sha: payload.pull_request.head.sha },
+                number: payload.pull_request.number
+            },
+            review: {
+                state: payload.review.state,
+                body: payload.review.body
+            },
+            installation: { id: payload.installation?.id ?? 0 },
+            action: payload.action
+        });
+    });
+    app.webhooks.on('issues.opened', async ({ payload }) => {
+        await processarIssues(app, {
+            repository: repoBase(payload.repository),
+            issue: { number: payload.issue.number, body: payload.issue.body },
+            installation: { id: payload.installation?.id ?? 0 },
+            action: payload.action
+        });
+    });
+    app.webhooks.onError(error => {
+        messages.log.erro(`${GithubWebhookMensagens.erroWebhook}: ${error instanceof Error ? error.message : String(error)}`);
+    });
+    return async (req, res) => {
+        const startTime = Date.now();
+        const eventName = req.headers['x-github-event'];
+        const deliveryId = req.headers['x-github-delivery'];
+        const payload = req.rawBody?.toString() ?? JSON.stringify(req.body);
+        let parsedBody = {};
+        try {
+            parsedBody = typeof req.body === 'object' ? req.body : JSON.parse(payload);
+        }
+        catch { }
+        const repoName = extractRepo(parsedBody);
+        const installationId = extractInstallation(parsedBody);
+        try {
+            await app.webhooks.verifyAndReceive({
+                id: deliveryId,
+                name: eventName,
+                payload,
+                signature: req.headers['x-hub-signature-256']
+            });
+            statsStore.recordEvent({
+                id: deliveryId,
+                event: eventName,
+                action: parsedBody.action,
+                repository: repoName,
+                installation: installationId,
+                status: 'success',
+                durationMs: Date.now() - startTime
+            });
+            res.status(HTTP_OK).send('OK');
+        }
+        catch (err) {
+            const error = err;
+            statsStore.recordEvent({
+                id: deliveryId,
+                event: eventName,
+                action: parsedBody.action,
+                repository: repoName,
+                installation: installationId,
+                status: 'error',
+                error: error.message,
+                durationMs: Date.now() - startTime
+            });
+            messages.log.erro(GithubWebhookMensagens.erroProcessandoWebhookMsg(error.message));
+            res.status(HTTP_BAD_REQUEST).send('Webhook inválido.');
+        }
+    };
+}
+//# sourceMappingURL=webhook-handler.js.map

package/dist/app/github/app/webhook-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-handler.js","sourceRoot":"","sources":["../../../../src/app/github/app/webhook-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAKlE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACL,gBAAgB,EAChB,OAAO,EACP,QAAQ,EACT,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAGpE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAQ,EACR,OAA2B;IAE3B,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACnE,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO;IACpE,IAAI,CAAC,YAAY,EAAE,EAAE;QAAE,OAAO;IAE9B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,0BAA0B,CAAC,GAAG,EAAE;YACpC,cAAc,EAAE,YAAY,CAAC,EAAE;YAC/B,KAAK;YACL,IAAI;YACJ,QAAQ,EAAE,YAAY,CAAC,MAAM;YAC7B,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG;YAC9B,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG;YAC9B,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG;YAC9B,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG;YAC9B,OAAO,EAAE,YAAY,CAAC,KAAK;SAC5B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,GAAY,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,CAAC,OAAO,CAAC,2DAA2D,EAAE;YACjF,KAAK;YACL,IAAI;YACJ,YAAY,EAAE,YAAY,CAAC,MAAM;YACjC,IAAI,EAAE,+EAA+E,KAAK,CAAC,OAAO,IAAI;SACvG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAQ,EAAE,OAAoB;IAChE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC9E,IAAI,CAAC,YAAY,EAAE,EAAE;QAAE,OAAO;IAC9B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO;IAE3C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,KAAK,IAAI,WAAW,CAAC,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO;IAErB,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,GAAG,EAAE;YAC7B,cAAc,EAAE,YAAY,CAAC,EAAE;YAC/B,KAAK;YACL,IAAI;YACJ,MAAM;YACN,OAAO;YACP,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,WAAW,CAAC,OAAO,IAAI,MAAM;SAC7C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,GAAY,CAAC;QAC3B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAEpB;IACC,OAAO,CACL,OAAO,CAAC,UAAU,EAAE,SAAS;QAC7B,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK;YAC/B,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE;YAChE,CAAC,CAAC,cAAc,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA2C;IACtE,OAAO,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAQ;IAC3C,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,uBAAuB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC7D,MAAM,mBAAmB,CAAC,GAAG,EAAE;YAC7B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE;YACvD,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,EAAE;SACpD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,yBAAyB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/D,MAAM,mBAAmB,CAAC,GAAG,EAAE;YAC7B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE;YACvD,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,EAAE;SACpD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC3D,MAAM,oBAAoB,CAAC,GAAG,EAAE;YAC9B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,YAAY,EAAE;gBACZ,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI;gBAC/B,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI;gBAC/B,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM;gBACnC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK;aAClC;YACD,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,0BAA0B,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAChE,MAAM,oBAAoB,CAAC,GAAG,EAAE;YAC9B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,YAAY,EAAE;gBACZ,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI;gBAC/B,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI;gBAC/B,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM;gBACnC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK;aAClC;YACD,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,uBAAuB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC7D,MAAM,oBAAoB,CAAC,GAAG,EAAE;YAC9B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,YAAY,EAAE;gBACZ,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI;gBAC/B,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI;gBAC/B,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM;gBACnC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK;aAClC;YACD,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC5C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK;YAAE,OAAO;QACtC,MAAM,aAAa,CAAC,GAAG,EAAE;YACvB,UAAU,EAAE;gBACV,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;gBAC/B,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;aACxC;YACD,WAAW,EAAE;gBACX,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE;gBACjC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,IAAI,EAAE;aAC5C;YACD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,EAAE;SACpD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACpD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,YAAY,EAAE,EAAE;YAAE,OAAO;QAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;YAClF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;YACrC,sBAAsB,CAAC;gBACrB,cAAc,EAAE,YAAY,CAAC,EAAE;gBAC/B,YAAY,EAAE,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/E,UAAU,EAAE,YAAY,CAAC,WAAW;gBACpC,mBAAmB,EAAE,YAAY,CAAC,oBAAoB;gBACtD,mBAAmB,EAAE,IAAI;gBACzB,0BAA0B,EAAE,IAAI;gBAChC,IAAI,EAAE,KAAK;gBACX,iBAAiB,EAAE,IAAI;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,2BAA2B,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACjE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,YAAY,EAAE,EAAE;YAAE,OAAO;QAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/D,sBAAsB,CAAC;gBACrB,cAAc,EAAE,YAAY,CAAC,EAAE;gBAC/B,mBAAmB,EAAE,YAAY,CAAC,oBAAoB;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,+BAA+B,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACrE,MAAM,0BAA0B,CAAC,GAAG,EAAE;YACpC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,YAAY,EAAE;gBACZ,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5C,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM;aACpC;YACD,MAAM,EAAE;gBACN,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;gBAC3B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;aAC1B;YACD,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACrD,MAAM,eAAe,CAAC,GAAG,EAAE;YACzB,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;YACjE,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,CAAC,EAAE;YACnD,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QAC3B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,WAAW,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAW,CAAC;QAC1D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAW,CAAC;QAC9D,MAAM,OAAO,GAAI,GAA4B,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9F,IAAI,UAAU,GAA4B,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,UAAU,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC,CAAc,CAAC;QACxB,MAAM,QAAQ,GAAG,WAAW,CAAC,UAA+C,CAAC,CAAC;QAC9E,MAAM,cAAc,GAAG,mBAAmB,CAAC,UAAuD,CAAC,CAAC;QAEpG,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAClC,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,SAAS;gBACf,OAAO;gBACP,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAW;aACxD,CAAC,CAAC;YACH,UAAU,CAAC,WAAW,CAAC;gBACrB,EAAE,EAAE,UAAU;gBACd,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAG,UAAsC,CAAC,MAA4B;gBAC5E,UAAU,EAAE,QAAQ;gBACpB,YAAY,EAAE,cAAc;gBAC5B,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,GAAY,CAAC;YAC3B,UAAU,CAAC,WAAW,CAAC;gBACrB,EAAE,EAAE,UAAU;gBACd,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAG,UAAsC,CAAC,MAA4B;gBAC5E,UAAU,EAAE,QAAQ;gBACpB,YAAY,EAAE,cAAc;gBAC5B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACnF,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { GithubWebhookMensagens, messages } from '@core/messages';\nimport type { App } from '@octokit/app';\nimport type { Request, Response } from 'express';\n\nimport type { PullRequestPayload, PushPayload } from '../../../types/github/app.js';\nimport { statsStore } from '../dashboard/stats-store.js';\nimport { executarAnalisePullRequest } from '../push-analysis/pr-analysis-service.js';\nimport { executarAnalisePush } from '../push-analysis/push-analysis-service.js';\nimport { processarCheckSuite } from './check-suite-handler.js';\nimport { salvarConfigInstalacao } from './installation-store.js';\nimport { processarIssues } from './issues-handler.js';\nimport {\n  HTTP_BAD_REQUEST,\n  HTTP_OK,\n  repoBase\n} from './octokit.js';\nimport { processarPullRequestReview } from './pr-review-handler.js';\n\nexport type { OctokitInstance } from './octokit.js';\nexport { analisarWorkflows, buscarWorkflows } from './workflow-reader.js';\n\nexport async function processarPullRequest(\n  app: App,\n  payload: PullRequestPayload\n): Promise<void> {\n  const { repository, pull_request, installation, action } = payload;\n  if (!['opened', 'synchronize', 'reopened'].includes(action)) return;\n  if (!installation?.id) return;\n\n  const owner = repository.owner.login;\n  const repo = repository.name;\n\n  try {\n    await executarAnalisePullRequest(app, {\n      installationId: installation.id,\n      owner,\n      repo,\n      prNumber: pull_request.number,\n      headSha: pull_request.head.sha,\n      headRef: pull_request.head.ref,\n      baseSha: pull_request.base.sha,\n      baseRef: pull_request.base.ref,\n      prTitle: pull_request.title\n    });\n  } catch (err: unknown) {\n    const error = err as Error;\n    const octokit = await app.getInstallationOctokit(installation.id);\n    await octokit.request('POST /repos/{owner}/{repo}/issues/{issue_number}/comments', {\n      owner,\n      repo,\n      issue_number: pull_request.number,\n      body: `## Mahoraga — erro no diagnóstico\\n\\nNão foi possível concluir a análise: \\`${error.message}\\``\n    }).catch(() => {});\n    messages.log.erro(GithubWebhookMensagens.erroAnalisePR(owner, repo, pull_request.number, error.message));\n  }\n}\n\nexport async function processarPush(app: App, payload: PushPayload): Promise<void> {\n  const { repository, head_commit, ref, installation, before, after } = payload;\n  if (!installation?.id) return;\n  if (!ref.startsWith('refs/heads/')) return;\n\n  const owner = repository.owner.login;\n  const repo = repository.name;\n  const branch = ref.replace('refs/heads/', '');\n  const headSha = after || head_commit.id;\n  if (!headSha) return;\n\n  try {\n    await executarAnalisePush(app, {\n      installationId: installation.id,\n      owner,\n      repo,\n      branch,\n      headSha,\n      beforeSha: before,\n      commitMessage: head_commit.message || 'push'\n    });\n  } catch (err: unknown) {\n    const error = err as Error;\n    messages.log.erro(GithubWebhookMensagens.erroProcessarPush(repository.full_name, branch, error.message));\n  }\n}\n\nfunction extractRepo(payload: {\n  repository?: { full_name?: string; owner?: { login?: string }; name?: string };\n}): string {\n  return (\n    payload.repository?.full_name ||\n    (payload.repository?.owner?.login\n      ? `${payload.repository.owner.login}/${payload.repository.name}`\n      : 'desconhecido')\n  );\n}\n\nfunction extractInstallation(payload: { installation?: { id?: number } }): number {\n  return payload.installation?.id ?? 0;\n}\n\nexport function createWebhookHandler(app: App): (req: Request, res: Response) => Promise<void> {\n  app.webhooks.on('check_suite.requested', async ({ payload }) => {\n    await processarCheckSuite(app, {\n      repository: repoBase(payload.repository),\n      check_suite: { head_sha: payload.check_suite.head_sha },\n      installation: { id: payload.installation?.id ?? 0 }\n    });\n  });\n\n  app.webhooks.on('check_suite.rerequested', async ({ payload }) => {\n    await processarCheckSuite(app, {\n      repository: repoBase(payload.repository),\n      check_suite: { head_sha: payload.check_suite.head_sha },\n      installation: { id: payload.installation?.id ?? 0 }\n    });\n  });\n\n  app.webhooks.on('pull_request.opened', async ({ payload }) => {\n    await processarPullRequest(app, {\n      repository: repoBase(payload.repository),\n      pull_request: {\n        head: payload.pull_request.head,\n        base: payload.pull_request.base,\n        number: payload.pull_request.number,\n        title: payload.pull_request.title\n      },\n      installation: { id: payload.installation?.id ?? 0 },\n      action: payload.action\n    });\n  });\n\n  app.webhooks.on('pull_request.synchronize', async ({ payload }) => {\n    await processarPullRequest(app, {\n      repository: repoBase(payload.repository),\n      pull_request: {\n        head: payload.pull_request.head,\n        base: payload.pull_request.base,\n        number: payload.pull_request.number,\n        title: payload.pull_request.title\n      },\n      installation: { id: payload.installation?.id ?? 0 },\n      action: payload.action\n    });\n  });\n\n  app.webhooks.on('pull_request.reopened', async ({ payload }) => {\n    await processarPullRequest(app, {\n      repository: repoBase(payload.repository),\n      pull_request: {\n        head: payload.pull_request.head,\n        base: payload.pull_request.base,\n        number: payload.pull_request.number,\n        title: payload.pull_request.title\n      },\n      installation: { id: payload.installation?.id ?? 0 },\n      action: payload.action\n    });\n  });\n\n  app.webhooks.on('push', async ({ payload }) => {\n    if (!payload.repository.owner) return;\n    await processarPush(app, {\n      repository: {\n        ...repoBase(payload.repository),\n        full_name: payload.repository.full_name\n      },\n      head_commit: {\n        id: payload.head_commit?.id ?? '',\n        message: payload.head_commit?.message ?? ''\n      },\n      ref: payload.ref,\n      before: payload.before,\n      after: payload.after,\n      installation: { id: payload.installation?.id ?? 0 }\n    });\n  });\n\n  app.webhooks.on('installation', async ({ payload }) => {\n    const installation = payload.installation;\n    if (!installation?.id) return;\n    if (payload.action === 'created' || payload.action === 'new_permissions_accepted') {\n      const account = installation.account;\n      salvarConfigInstalacao({\n        installationId: installation.id,\n        accountLogin: account && 'login' in account ? String(account.login) : undefined,\n        targetType: installation.target_type,\n        repositorySelection: installation.repository_selection,\n        pushAnalysisEnabled: true,\n        pullRequestAnalysisEnabled: true,\n        fast: false,\n        incrementalOnPush: true\n      });\n    }\n  });\n\n  app.webhooks.on('installation_repositories', async ({ payload }) => {\n    const installation = payload.installation;\n    if (!installation?.id) return;\n    if (payload.action === 'added' || payload.action === 'removed') {\n      salvarConfigInstalacao({\n        installationId: installation.id,\n        repositorySelection: installation.repository_selection\n      });\n    }\n  });\n\n  app.webhooks.on('pull_request_review.submitted', async ({ payload }) => {\n    await processarPullRequestReview(app, {\n      repository: repoBase(payload.repository),\n      pull_request: {\n        head: { sha: payload.pull_request.head.sha },\n        number: payload.pull_request.number\n      },\n      review: {\n        state: payload.review.state,\n        body: payload.review.body\n      },\n      installation: { id: payload.installation?.id ?? 0 },\n      action: payload.action\n    });\n  });\n\n  app.webhooks.on('issues.opened', async ({ payload }) => {\n    await processarIssues(app, {\n      repository: repoBase(payload.repository),\n      issue: { number: payload.issue.number, body: payload.issue.body },\n      installation: { id: payload.installation?.id ?? 0 },\n      action: payload.action\n    });\n  });\n\n  app.webhooks.onError(error => {\n    messages.log.erro(`${GithubWebhookMensagens.erroWebhook}: ${error instanceof Error ? error.message : String(error)}`);\n  });\n\n  return async (req: Request, res: Response): Promise<void> => {\n    const startTime = Date.now();\n    const eventName = req.headers['x-github-event'] as string;\n    const deliveryId = req.headers['x-github-delivery'] as string;\n    const payload = (req as { rawBody?: Buffer }).rawBody?.toString() ?? JSON.stringify(req.body);\n    let parsedBody: Record<string, unknown> = {};\n    try {\n      parsedBody = typeof req.body === 'object' ? req.body : JSON.parse(payload);\n    } catch { /* ignore */ }\n    const repoName = extractRepo(parsedBody as Parameters<typeof extractRepo>[0]);\n    const installationId = extractInstallation(parsedBody as Parameters<typeof extractInstallation>[0]);\n\n    try {\n      await app.webhooks.verifyAndReceive({\n        id: deliveryId,\n        name: eventName,\n        payload,\n        signature: req.headers['x-hub-signature-256'] as string\n      });\n      statsStore.recordEvent({\n        id: deliveryId,\n        event: eventName,\n        action: (parsedBody as Record<string, unknown>).action as string | undefined,\n        repository: repoName,\n        installation: installationId,\n        status: 'success',\n        durationMs: Date.now() - startTime\n      });\n      res.status(HTTP_OK).send('OK');\n    } catch (err: unknown) {\n      const error = err as Error;\n      statsStore.recordEvent({\n        id: deliveryId,\n        event: eventName,\n        action: (parsedBody as Record<string, unknown>).action as string | undefined,\n        repository: repoName,\n        installation: installationId,\n        status: 'error',\n        error: error.message,\n        durationMs: Date.now() - startTime\n      });\n      messages.log.erro(GithubWebhookMensagens.erroProcessandoWebhookMsg(error.message));\n      res.status(HTTP_BAD_REQUEST).send('Webhook inválido.');\n    }\n  };\n}\n"]}

package/dist/app/github/app/workflow-reader.d.ts

@@ -0,0 +1,5 @@
+import type { AnaliseWorkflowsResult, WorkflowSummary } from '../../../types/github/app.js';
+import { type OctokitInstance } from './octokit.js';
+export declare function buscarWorkflows(octokit: OctokitInstance, owner: string, repo: string, ref: string): Promise<WorkflowSummary[]>;
+export declare function analisarWorkflows(octokit: OctokitInstance, owner: string, repo: string, ref: string, workflows: WorkflowSummary[]): Promise<AnaliseWorkflowsResult>;
+//# sourceMappingURL=workflow-reader.d.ts.map

package/dist/app/github/app/workflow-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-reader.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/workflow-reader.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AASpE,wBAAsB,eAAe,CACnC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,eAAe,EAAE,CAAC,CAqB5B;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,eAAe,EAAE,GAC3B,OAAO,CAAC,sBAAsB,CAAC,CAqCjC"}

package/dist/app/github/app/workflow-reader.js

@@ -0,0 +1,67 @@
+import { analistaGithubActions, analistaGithubActionsGlobal, pontuarWorkflow } from '../../../analysts/github-actions/index.js';
+import { GithubWebhookMensagens, messages } from '../../../core/messages/index.js';
+import { HTTP_NOT_FOUND } from './octokit.js';
+const DEFAULT_SCORE = 100;
+function normalizarOcorrencias(result) {
+    if (!result)
+        return [];
+    return Array.isArray(result) ? result : [result];
+}
+export async function buscarWorkflows(octokit, owner, repo, ref) {
+    try {
+        const response = await octokit.request('GET /repos/{owner}/{repo}/contents/{path}', {
+            owner,
+            repo,
+            path: '.github/workflows',
+            ref
+        });
+        if (Array.isArray(response.data)) {
+            return response.data
+                .filter((file) => file.name.endsWith('.yml') || file.name.endsWith('.yaml'))
+                .map((file) => ({ name: file.name, path: file.path }));
+        }
+    }
+    catch (err) {
+        const error = err;
+        if (error.status !== HTTP_NOT_FOUND) {
+            messages.log.erro(GithubWebhookMensagens.erroListarWorkflows(owner, repo, ref));
+            throw err;
+        }
+    }
+    return [];
+}
+export async function analisarWorkflows(octokit, owner, repo, ref, workflows) {
+    const arquivosCtx = [];
+    const todasOcorrencias = [];
+    const workflowsInfo = [];
+    let somaScores = 0;
+    for (const wf of workflows) {
+        const fileContentResp = await octokit.request('GET /repos/{owner}/{repo}/contents/{path}', {
+            owner,
+            repo,
+            path: wf.path,
+            ref,
+            headers: { accept: 'application/vnd.github.v3.raw' }
+        });
+        const conteudo = fileContentResp.data;
+        const relPath = wf.path;
+        arquivosCtx.push({ relPath, content: conteudo });
+        const result = await analistaGithubActions.aplicar(conteudo, relPath, null, undefined, {
+            arquivos: arquivosCtx
+        });
+        const ocorrencias = normalizarOcorrencias(result);
+        const scoreResult = pontuarWorkflow(conteudo, relPath);
+        workflowsInfo.push({ nome: wf.name, score: scoreResult.percentage, ocorrencias: ocorrencias.length });
+        todasOcorrencias.push(...ocorrencias);
+        somaScores += scoreResult.percentage;
+    }
+    if (workflows.length > 0) {
+        const resultGlobal = await analistaGithubActionsGlobal.aplicar('', '', null, undefined, {
+            arquivos: arquivosCtx
+        });
+        todasOcorrencias.push(...normalizarOcorrencias(resultGlobal));
+    }
+    const scoreGeral = workflows.length > 0 ? Math.round(somaScores / workflows.length) : DEFAULT_SCORE;
+    return { ocorrencias: todasOcorrencias, scoreGeral, workflowsInfo };
+}
+//# sourceMappingURL=workflow-reader.js.map