@mocoto/mahoraga 0.14.0

package/dist/analysts/azure-pipelines/scorers/scorer-azure.js

@@ -0,0 +1,161 @@
+import { messages } from '../../../core/messages/index.js';
+import { splitLines } from '../../../shared/helpers/index.js';
+export function pontuarAzure(src, _relPath) {
+    let score = 0;
+    const maxScore = 100;
+    const issues = [];
+    const strengths = [];
+    const _linhas = splitLines(src);
+    const srcCompleto = src;
+    if (!/vmImage:\s*['"]?.*latest['"]?/i.test(srcCompleto)) {
+        score += 5;
+        strengths.push(messages.RelatorioAzureMensagens.vulnerableTaskSugestao);
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.vulnerableTask);
+    }
+    const isVulnerableTask = Object.keys({
+        'Npm@1': 'Npm@1',
+        'NuGetCommand@2': 'NuGetCommand@2',
+        'DotNetCoreCLI@1': 'DotNetCoreCLI@1',
+        'VSBuild@1': 'VSBuild@1',
+        'VsTest@1': 'VsTest@1',
+    }).some(task => new RegExp(`task:\\s*${task.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`, 'i').test(srcCompleto));
+    if (!isVulnerableTask) {
+        score += 5;
+        strengths.push('Tasks com versões seguras');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.vulnerableTask);
+    }
+    const hardcodedSecrets = (srcCompleto.match(/(password|token|secret|key):\s*['"]?([^$({][a-zA-Z0-9_\-]{8,})['"]?/gi) || []).length;
+    if (hardcodedSecrets === 0) {
+        score += 15;
+        strengths.push('Sem secrets hardcoded');
+    }
+    else {
+        issues.push(`${hardcodedSecrets} secret(s) hardcoded`);
+    }
+    if (!/checkout:\s*self/i.test(srcCompleto) || /persistCredentials|persist-credentials/i.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Checkout com token configurado');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.missingCheckoutToken);
+    }
+    const hasInlineSecrets = /(password|passwd|pwd|api[_-]?key|access[_-]?token|secret|connection[_-]?string)\s*[:=]\s*['"][^'"]+['"]/gi.test(srcCompleto);
+    if (!hasInlineSecrets) {
+        score += 5;
+        strengths.push('Sem segredos inline em scripts');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.scriptWithInlineSecrets);
+    }
+    if (!/environment:/i.test(srcCompleto) || /approvals?|reviewers?/i.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Gates de aprovação configurados');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.missingApprovalGate);
+    }
+    const unsafeInjection = /script:.*\$\s*\(/i.test(srcCompleto) || /bash:.*\$\s*\(/i.test(srcCompleto);
+    if (!unsafeInjection) {
+        score += 5;
+        strengths.push('Variáveis usadas com segurança');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.unsafeVariableInjection);
+    }
+    if (!/bash:\s*curl.*\|\s*bash/i.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Sem comandos curl|bash perigosos');
+    }
+    else {
+        issues.push('Comandos curl|bash perigosos detectados');
+    }
+    if (/task:\s*Cache@/i.test(srcCompleto) || /CacheBeta@/i.test(srcCompleto)) {
+        score += 10;
+        strengths.push(messages.RelatorioAzureMensagens.missingCacheTaskSugestao);
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.missingCacheTask);
+    }
+    if (/strategy:\s*matrix:/i.test(srcCompleto) || /parallel:\s*\d+/i.test(srcCompleto)) {
+        score += 10;
+        strengths.push('Paralelismo configurado');
+    }
+    else {
+        issues.push('Sem estratégia de paralelismo');
+    }
+    if (/strategy:\s*matrix:/i.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Matrix strategy para multi-plataforma');
+    }
+    else if (/(ubuntu|windows|macos)/i.test(srcCompleto)) {
+        issues.push(messages.RelatorioAzureMensagens.singleBuildForAllPlatforms);
+    }
+    const publishCount = (srcCompleto.match(/task:\s*PublishBuildArtifacts@/gi) || []).length;
+    if (publishCount <= 3) {
+        score += 2;
+        strengths.push('Artefatos de staging otimizados');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.largeArtifactStaging);
+    }
+    if (/pool:\s*\n/i.test(srcCompleto) || /vmImage/i.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Pool de agentes definido');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.mutableAgentPool);
+    }
+    if (/checkout:\s*none/i.test(srcCompleto)) {
+        score += 3;
+        strengths.push('Checkout otimizado em jobs de deploy');
+    }
+    if (!/dependsOn:/i.test(srcCompleto)) {
+        issues.push(messages.RelatorioAzureMensagens.missingStageDependencies);
+    }
+    else {
+        score += 3;
+        strengths.push('Dependências entre stages explícitas');
+    }
+    const varCount = (srcCompleto.match(/^\s+\w+:\s/gm) || []).length;
+    if (varCount <= 20) {
+        score += 2;
+        strengths.push('Número de variáveis controlado');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.tooManyVariables);
+    }
+    const hasDisplayNames = (srcCompleto.match(/displayName:/gi) || []).length;
+    if (hasDisplayNames > 0) {
+        score += 3;
+        strengths.push('Jobs com displayName');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.missingJobDisplayName);
+    }
+    const hasValidation = /validation|qualityGate|gate:|sonar|checkmarx|fortify|synk|trivy/i.test(srcCompleto);
+    if (hasValidation) {
+        score += 5;
+        strengths.push('Gate de qualidade configurado');
+    }
+    else {
+        issues.push(messages.RelatorioAzureMensagens.missingValidationStep);
+    }
+    return {
+        score,
+        maxScore,
+        percentage: Math.round(score / maxScore * 100),
+        issues,
+        strengths,
+    };
+}
+export const pontuadorAzure = {
+    nome: 'pontuador-azure',
+    categoria: 'workflows',
+    descricao: 'Pontua qualidade de Azure Pipelines',
+    pontuar: pontuarAzure,
+};
+//# sourceMappingURL=scorer-azure.js.map

package/dist/analysts/azure-pipelines/scorers/scorer-azure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-azure.js","sourceRoot":"","sources":["../../../../src/analysts/azure-pipelines/scorers/scorer-azure.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAI7C,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,QAAgB;IACxD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,GAAG,CAAC;IAGxB,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC;QACnC,OAAO,EAAE,OAAO;QAChB,gBAAgB,EAAE,gBAAgB;QAClC,iBAAiB,EAAE,iBAAiB;QACpC,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,UAAU;KACvB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAE9G,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,gBAAgB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,uEAAuE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACnI,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,sBAAsB,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,yCAAyC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1G,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,gBAAgB,GAAG,2GAA2G,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvJ,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrF,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACrG,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IAGD,IAAI,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3E,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,wBAAwB,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrF,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAC1D,CAAC;SAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,0BAA0B,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,kCAAkC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1F,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACtB,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IACrE,CAAC;IAGD,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,wBAAwB,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAClE,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;QACnB,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,eAAe,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC3E,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GAAG,kEAAkE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3G,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;IACtE,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC;QAC9C,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,qCAAqC;IAChD,OAAO,EAAE,YAAY;CACtB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport { messages } from '@core/messages';\nimport { splitLines } from '@shared/helpers';\n\nimport type { AzureScoreResult } from '@';\n\nexport function pontuarAzure(src: string, _relPath: string): AzureScoreResult {\n  let score = 0;\n  const maxScore = 100;\n  const issues: string[] = [];\n  const strengths: string[] = [];\n  const _linhas = splitLines(src);\n  const srcCompleto = src;\n\n  // Security checks\n  if (!/vmImage:\\s*['\"]?.*latest['\"]?/i.test(srcCompleto)) {\n    score += 5;\n    strengths.push(messages.RelatorioAzureMensagens.vulnerableTaskSugestao);\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.vulnerableTask);\n  }\n\n  const isVulnerableTask = Object.keys({\n    'Npm@1': 'Npm@1',\n    'NuGetCommand@2': 'NuGetCommand@2',\n    'DotNetCoreCLI@1': 'DotNetCoreCLI@1',\n    'VSBuild@1': 'VSBuild@1',\n    'VsTest@1': 'VsTest@1',\n  }).some(task => new RegExp(`task:\\\\s*${task.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')}`, 'i').test(srcCompleto));\n\n  if (!isVulnerableTask) {\n    score += 5;\n    strengths.push('Tasks com versões seguras');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.vulnerableTask);\n  }\n\n  const hardcodedSecrets = (srcCompleto.match(/(password|token|secret|key):\\s*['\"]?([^$({][a-zA-Z0-9_\\-]{8,})['\"]?/gi) || []).length;\n  if (hardcodedSecrets === 0) {\n    score += 15;\n    strengths.push('Sem secrets hardcoded');\n  } else {\n    issues.push(`${hardcodedSecrets} secret(s) hardcoded`);\n  }\n\n  if (!/checkout:\\s*self/i.test(srcCompleto) || /persistCredentials|persist-credentials/i.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Checkout com token configurado');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.missingCheckoutToken);\n  }\n\n  const hasInlineSecrets = /(password|passwd|pwd|api[_-]?key|access[_-]?token|secret|connection[_-]?string)\\s*[:=]\\s*['\"][^'\"]+['\"]/gi.test(srcCompleto);\n  if (!hasInlineSecrets) {\n    score += 5;\n    strengths.push('Sem segredos inline em scripts');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.scriptWithInlineSecrets);\n  }\n\n  if (!/environment:/i.test(srcCompleto) || /approvals?|reviewers?/i.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Gates de aprovação configurados');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.missingApprovalGate);\n  }\n\n  const unsafeInjection = /script:.*\\$\\s*\\(/i.test(srcCompleto) || /bash:.*\\$\\s*\\(/i.test(srcCompleto);\n  if (!unsafeInjection) {\n    score += 5;\n    strengths.push('Variáveis usadas com segurança');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.unsafeVariableInjection);\n  }\n\n  if (!/bash:\\s*curl.*\\|\\s*bash/i.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Sem comandos curl|bash perigosos');\n  } else {\n    issues.push('Comandos curl|bash perigosos detectados');\n  }\n\n  // Performance checks\n  if (/task:\\s*Cache@/i.test(srcCompleto) || /CacheBeta@/i.test(srcCompleto)) {\n    score += 10;\n    strengths.push(messages.RelatorioAzureMensagens.missingCacheTaskSugestao);\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.missingCacheTask);\n  }\n\n  if (/strategy:\\s*matrix:/i.test(srcCompleto) || /parallel:\\s*\\d+/i.test(srcCompleto)) {\n    score += 10;\n    strengths.push('Paralelismo configurado');\n  } else {\n    issues.push('Sem estratégia de paralelismo');\n  }\n\n  if (/strategy:\\s*matrix:/i.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Matrix strategy para multi-plataforma');\n  } else if (/(ubuntu|windows|macos)/i.test(srcCompleto)) {\n    issues.push(messages.RelatorioAzureMensagens.singleBuildForAllPlatforms);\n  }\n\n  const publishCount = (srcCompleto.match(/task:\\s*PublishBuildArtifacts@/gi) || []).length;\n  if (publishCount <= 3) {\n    score += 2;\n    strengths.push('Artefatos de staging otimizados');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.largeArtifactStaging);\n  }\n\n  // Structure checks\n  if (/pool:\\s*\\n/i.test(srcCompleto) || /vmImage/i.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Pool de agentes definido');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.mutableAgentPool);\n  }\n\n  if (/checkout:\\s*none/i.test(srcCompleto)) {\n    score += 3;\n    strengths.push('Checkout otimizado em jobs de deploy');\n  }\n\n  if (!/dependsOn:/i.test(srcCompleto)) {\n    issues.push(messages.RelatorioAzureMensagens.missingStageDependencies);\n  } else {\n    score += 3;\n    strengths.push('Dependências entre stages explícitas');\n  }\n\n  const varCount = (srcCompleto.match(/^\\s+\\w+:\\s/gm) || []).length;\n  if (varCount <= 20) {\n    score += 2;\n    strengths.push('Número de variáveis controlado');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.tooManyVariables);\n  }\n\n  const hasDisplayNames = (srcCompleto.match(/displayName:/gi) || []).length;\n  if (hasDisplayNames > 0) {\n    score += 3;\n    strengths.push('Jobs com displayName');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.missingJobDisplayName);\n  }\n\n  const hasValidation = /validation|qualityGate|gate:|sonar|checkmarx|fortify|synk|trivy/i.test(srcCompleto);\n  if (hasValidation) {\n    score += 5;\n    strengths.push('Gate de qualidade configurado');\n  } else {\n    issues.push(messages.RelatorioAzureMensagens.missingValidationStep);\n  }\n\n  return {\n    score,\n    maxScore,\n    percentage: Math.round(score / maxScore * 100),\n    issues,\n    strengths,\n  };\n}\n\nexport const pontuadorAzure = {\n  nome: 'pontuador-azure',\n  categoria: 'workflows',\n  descricao: 'Pontua qualidade de Azure Pipelines',\n  pontuar: pontuarAzure,\n};\n"]}

package/dist/analysts/circleci/analysts/analyst-circleci.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const analistaCircleCI: Analista;
+//# sourceMappingURL=analyst-circleci.d.ts.map

package/dist/analysts/circleci/analysts/analyst-circleci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-circleci.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/analysts/analyst-circleci.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAkD,MAAM,GAAG,CAAC;AAMlF,eAAO,MAAM,gBAAgB,EAAE,QAwE9B,CAAC"}

package/dist/analysts/circleci/analysts/analyst-circleci.js

@@ -0,0 +1,66 @@
+import { parseDocument } from 'yaml';
+import { detectorCircleCIPerformance } from '../detectors/detector-circleci-performance.js';
+import { detectorCircleCISecurity, obterDetectoresCircleCI } from '../detectors/detector-circleci-security.js';
+import { detectorCircleCIEstrutura } from '../detectors/detector-circleci-structure.js';
+export const analistaCircleCI = {
+    nome: 'circleci',
+    categoria: 'workflows',
+    descricao: 'Analista de configurações do CircleCI',
+    test: (relPath) => relPath === '.circleci/config.yml' || relPath.endsWith('.circleci/config.yml'),
+    aplicar: async (conteudo, relPath, _ast = null, _fc, contexto) => {
+        const ocorrencias = [];
+        try {
+            const securityResults = await Promise.resolve(detectorCircleCISecurity.aplicar(conteudo, relPath, null, _fc, contexto));
+            const performanceResults = await Promise.resolve(detectorCircleCIPerformance.aplicar(conteudo, relPath, null, _fc, contexto));
+            const structureResults = await Promise.resolve(detectorCircleCIEstrutura.aplicar(conteudo, relPath, null, _fc, contexto));
+            ocorrencias.push(...securityResults, ...performanceResults, ...structureResults);
+            const caminhos = contexto?.arquivos.map(arquivo => arquivo.relPath) || [];
+            const plugResults = await Promise.all(obterDetectoresCircleCI().map(d => Promise.resolve(d.testar({ content: conteudo }, { conteudo, caminhos })).catch(() => [])));
+            for (const results of plugResults) {
+                for (const p of results) {
+                    ocorrencias.push({
+                        tipo: `circleci-plugin-${p.tipo}`,
+                        mensagem: p.descricao,
+                        relPath,
+                        linha: p.linha || 1,
+                        sugestao: p.sugestao || '',
+                        nivel: p.severidade === 'critica' || p.severidade === 'alta' ? 'erro' : p.severidade === 'media' ? 'aviso' : 'info'
+                    });
+                }
+            }
+            const doc = parseDocument(conteudo);
+            const config = doc.toJS();
+            if (config) {
+                const configData = config;
+                if (configData.version && parseFloat(String(configData.version)) < 2.1) {
+                    ocorrencias.push({
+                        tipo: 'CIRCLECI_OBSOLETE_VERSION',
+                        mensagem: `Versão do CircleCI (${configData.version}) está obsoleta`,
+                        relPath,
+                        linha: 1,
+                        nivel: 'aviso',
+                        sugestao: 'Atualize para a versão 2.1 para usar Orbs, Commands e outras melhorias modernas'
+                    });
+                }
+                if (configData.jobs) {
+                    for (const [jobName, job] of Object.entries(configData.jobs)) {
+                        if (job.steps && job.steps.length > 20) {
+                            ocorrencias.push({
+                                tipo: 'CIRCLECI_JOB_TOO_MANY_STEPS',
+                                mensagem: `Job '${jobName}' possui muitos steps (${job.steps.length})`,
+                                relPath,
+                                linha: 1,
+                                nivel: 'info',
+                                sugestao: 'Agrupe steps repetitivos em "commands" para maior legibilidade'
+                            });
+                        }
+                    }
+                }
+            }
+        }
+        catch {
+        }
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=analyst-circleci.js.map

package/dist/analysts/circleci/analysts/analyst-circleci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-circleci.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/analysts/analyst-circleci.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAIrC,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAC/G,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAExF,MAAM,CAAC,MAAM,gBAAgB,GAAa;IACxC,IAAI,EAAE,UAAU;IAChB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,uCAAuC;IAClD,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,KAAK,sBAAsB,IAAI,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACzG,OAAO,EAAE,KAAK,EAAE,QAAgB,EAAE,OAAe,EAAE,OAAwB,IAAI,EAAE,GAAY,EAAE,QAA2B,EAAyB,EAAE;QACnJ,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YACxH,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9H,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YAE1H,WAAW,CAAC,IAAI,CAAC,GAAI,eAAgC,EAAE,GAAI,kBAAmC,EAAE,GAAI,gBAAiC,CAAC,CAAC;YAGvI,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC1E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC,uBAAuB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAChC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAwB,CAAC,CAC/G,CACF,CAAC;YACF,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;gBAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,mBAAmB,CAAC,CAAC,IAAI,EAAE;wBACjC,QAAQ,EAAE,CAAC,CAAC,SAAS;wBACrB,OAAO;wBACP,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;wBACnB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;wBAC1B,KAAK,EAAE,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;qBACpH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAA6B,CAAC;YAErD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,UAAU,GAAG,MAAqF,CAAC;gBACzG,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;oBACvE,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,2BAA2B;wBACjC,QAAQ,EAAE,uBAAuB,UAAU,CAAC,OAAO,iBAAiB;wBACpE,OAAO;wBACP,KAAK,EAAE,CAAC;wBACR,KAAK,EAAE,OAAO;wBACd,QAAQ,EAAE,iFAAiF;qBAC5F,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;oBACpB,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC7D,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;4BACtC,WAAW,CAAC,IAAI,CAAC;gCACf,IAAI,EAAE,6BAA6B;gCACnC,QAAQ,EAAE,QAAQ,OAAO,0BAA0B,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG;gCACtE,OAAO;gCACP,KAAK,EAAE,CAAC;gCACR,KAAK,EAAE,MAAM;gCACb,QAAQ,EAAE,gEAAgE;6BAC3E,CAAC,CAAC;wBACN,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport type { NodePath } from '@babel/traverse';\nimport { parseDocument } from 'yaml';\n\nimport type { Analista, ContextoExecucao, Ocorrencia, ProblemaWorkflow } from '@';\n\nimport { detectorCircleCIPerformance } from '../detectors/detector-circleci-performance.js';\nimport { detectorCircleCISecurity, obterDetectoresCircleCI } from '../detectors/detector-circleci-security.js';\nimport { detectorCircleCIEstrutura } from '../detectors/detector-circleci-structure.js';\n\nexport const analistaCircleCI: Analista = {\n  nome: 'circleci',\n  categoria: 'workflows',\n  descricao: 'Analista de configurações do CircleCI',\n  test: (relPath: string) => relPath === '.circleci/config.yml' || relPath.endsWith('.circleci/config.yml'),\n  aplicar: async (conteudo: string, relPath: string, _ast: NodePath | null = null, _fc?: string, contexto?: ContextoExecucao): Promise<Ocorrencia[]> => {\n    const ocorrencias: Ocorrencia[] = [];\n\n    try {\n      const securityResults = await Promise.resolve(detectorCircleCISecurity.aplicar(conteudo, relPath, null, _fc, contexto));\n      const performanceResults = await Promise.resolve(detectorCircleCIPerformance.aplicar(conteudo, relPath, null, _fc, contexto));\n      const structureResults = await Promise.resolve(detectorCircleCIEstrutura.aplicar(conteudo, relPath, null, _fc, contexto));\n\n      ocorrencias.push(...(securityResults as Ocorrencia[]), ...(performanceResults as Ocorrencia[]), ...(structureResults as Ocorrencia[]));\n\n      // Run registered plugins\n      const caminhos = contexto?.arquivos.map(arquivo => arquivo.relPath) || [];\n      const plugResults = await Promise.all(\n        obterDetectoresCircleCI().map(d =>\n          Promise.resolve(d.testar({ content: conteudo }, { conteudo, caminhos })).catch(() => [] as ProblemaWorkflow[])\n        )\n      );\n      for (const results of plugResults) {\n        for (const p of results) {\n          ocorrencias.push({\n            tipo: `circleci-plugin-${p.tipo}`,\n            mensagem: p.descricao,\n            relPath,\n            linha: p.linha || 1,\n            sugestao: p.sugestao || '',\n            nivel: p.severidade === 'critica' || p.severidade === 'alta' ? 'erro' : p.severidade === 'media' ? 'aviso' : 'info'\n          });\n        }\n      }\n\n      const doc = parseDocument(conteudo);\n      const config = doc.toJS() as Record<string, unknown>;\n\n      if (config) {\n        const configData = config as { version?: number | string; jobs?: Record<string, { steps?: unknown[] }> };\n        if (configData.version && parseFloat(String(configData.version)) < 2.1) {\n          ocorrencias.push({\n            tipo: 'CIRCLECI_OBSOLETE_VERSION',\n            mensagem: `Versão do CircleCI (${configData.version}) está obsoleta`,\n            relPath,\n            linha: 1,\n            nivel: 'aviso',\n            sugestao: 'Atualize para a versão 2.1 para usar Orbs, Commands e outras melhorias modernas'\n          });\n        }\n\n        if (configData.jobs) {\n          for (const [jobName, job] of Object.entries(configData.jobs)) {\n            if (job.steps && job.steps.length > 20) {\n               ocorrencias.push({\n                 tipo: 'CIRCLECI_JOB_TOO_MANY_STEPS',\n                 mensagem: `Job '${jobName}' possui muitos steps (${job.steps.length})`,\n                 relPath,\n                 linha: 1,\n                 nivel: 'info',\n                 sugestao: 'Agrupe steps repetitivos em \"commands\" para maior legibilidade'\n               });\n            }\n          }\n        }\n      }\n    } catch {\n      // Falha silenciosa no parse\n    }\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/circleci/analysts/index.d.ts

@@ -0,0 +1,2 @@
+export * from './analyst-circleci.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/circleci/analysts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC"}

package/dist/analysts/circleci/analysts/index.js

@@ -0,0 +1,2 @@
+export * from './analyst-circleci.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/circleci/analysts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC","sourcesContent":["export * from './analyst-circleci.js';\n"]}

package/dist/analysts/circleci/corrections/autofix-engine.d.ts

@@ -0,0 +1,6 @@
+import type { Document } from 'yaml';
+export declare class AutofixEngine {
+    aplicarFixes(content: string, fixers: Array<(doc: Document) => void>): string;
+}
+export declare const autofixEngine: AutofixEngine;
+//# sourceMappingURL=autofix-engine.d.ts.map

package/dist/analysts/circleci/corrections/autofix-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofix-engine.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/autofix-engine.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAGrC,qBAAa,aAAa;IACjB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,QAAQ,KAAK,IAAI,CAAC,GAAG,MAAM;CASrF;AAED,eAAO,MAAM,aAAa,eAAsB,CAAC"}

package/dist/analysts/circleci/corrections/autofix-engine.js

@@ -0,0 +1,19 @@
+import { parseDocument } from 'yaml';
+export class AutofixEngine {
+    aplicarFixes(content, fixers) {
+        if (!content || fixers.length === 0)
+            return content;
+        const doc = parseDocument(content);
+        if (doc.errors.length > 0)
+            return content;
+        for (const fix of fixers) {
+            try {
+                fix(doc);
+            }
+            catch { }
+        }
+        return doc.toString();
+    }
+}
+export const autofixEngine = new AutofixEngine();
+//# sourceMappingURL=autofix-engine.js.map

package/dist/analysts/circleci/corrections/autofix-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofix-engine.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/autofix-engine.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAErC,MAAM,OAAO,aAAa;IACjB,YAAY,CAAC,OAAe,EAAE,MAAsC;QACzE,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACpD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAY,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport type { Document } from 'yaml';\nimport { parseDocument } from 'yaml';\n\nexport class AutofixEngine {\n  public aplicarFixes(content: string, fixers: Array<(doc: Document) => void>): string {\n    if (!content || fixers.length === 0) return content;\n    const doc = parseDocument(content);\n    if (doc.errors.length > 0) return content;\n    for (const fix of fixers) {\n      try { fix(doc); } catch { /* skip */ }\n    }\n    return doc.toString();\n  }\n}\n\nexport const autofixEngine = new AutofixEngine();\n"]}

package/dist/analysts/circleci/corrections/correction-circleci.d.ts

@@ -0,0 +1,4 @@
+import type { Analista, CircleCICorrection } from '../../../types/index.js';
+export declare function detectarCorrecoesCircleCI(src: string, _relPath: string): CircleCICorrection[];
+export declare const correctionCircleCI: Analista;
+//# sourceMappingURL=correction-circleci.d.ts.map

package/dist/analysts/circleci/corrections/correction-circleci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-circleci.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/correction-circleci.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAc,MAAM,GAAG,CAAC;AAGlE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,EAAE,CA0C7F;AAED,eAAO,MAAM,kBAAkB,EAAE,QAsBhC,CAAC"}

package/dist/analysts/circleci/corrections/correction-circleci.js

@@ -0,0 +1,66 @@
+import { messages } from '../../../core/messages/index.js';
+import { splitLines } from '../../../shared/helpers/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+export function detectarCorrecoesCircleCI(src, _relPath) {
+    const correcoes = [];
+    const linhas = splitLines(src);
+    linhas.forEach((linha, index) => {
+        const numeroLinha = index + 1;
+        if (/\bimage:\s*[^\s@]+:latest\b/.test(linha)) {
+            correcoes.push({
+                tipo: 'circleci-fix-latest-image',
+                original: linha,
+                sugerido: linha.replace(/:latest\b/, ':3.18'),
+                linha: numeroLinha,
+                confianca: 90
+            });
+        }
+        if (/\b(TOKEN|SECRET|PASSWORD|KEY|ACCESS_KEY)\b.*:\s*['"][^'"]+['"]/i.test(linha) && !/\$/.test(linha)) {
+            const replaced = linha.replace(/['"][^'"]+['"]/, '"$VAR_NAME"');
+            correcoes.push({
+                tipo: 'circleci-use-context',
+                original: linha,
+                sugerido: replaced,
+                linha: numeroLinha,
+                confianca: 90
+            });
+        }
+    });
+    if (!/save_cache:/.test(src) && !/restore_cache:/.test(src)) {
+        const firstJobLine = linhas.findIndex(l => /steps:/.test(l));
+        const targetLine = firstJobLine >= 0 ? firstJobLine : 0;
+        correcoes.push({
+            tipo: 'circleci-add-cache',
+            original: linhas[targetLine],
+            sugerido: `      - restore_cache:\n          key: deps-{{ checksum "package-lock.json" }}\n${linhas[targetLine]}\n      - save_cache:\n          key: deps-{{ checksum "package-lock.json" }}\n          paths:\n            - node_modules`,
+            linha: targetLine + 1,
+            confianca: 80
+        });
+    }
+    return correcoes;
+}
+export const correctionCircleCI = {
+    nome: 'correction-circleci',
+    categoria: 'workflows',
+    descricao: 'Correções automáticas para CircleCI',
+    test: (relPath) => relPath.endsWith('.circleci/config.yml'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const correcoes = detectarCorrecoesCircleCI(src, relPath);
+        return correcoes.map(elem => criarOcorrencia({
+            tipo: `correction-${elem.tipo}`,
+            nivel: elem.confianca > 85 ? 'aviso' : 'info',
+            mensagem: messages.SharedCommonMensagens.correcaoSugerida(elem.tipo),
+            relPath,
+            linha: elem.linha,
+            sugestao: ` ${elem.original}\n ${elem.sugerido}\nConfiança: ${elem.confianca}%`,
+            correcao: {
+                original: elem.original,
+                novo: elem.sugerido,
+                linha: elem.linha
+            }
+        }));
+    }
+};
+//# sourceMappingURL=correction-circleci.js.map

package/dist/analysts/circleci/corrections/correction-circleci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-circleci.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/correction-circleci.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,UAAU,yBAAyB,CAAC,GAAW,EAAE,QAAgB;IACrE,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;QAE9B,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,2BAA2B;gBACjC,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;gBAC7C,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QAED,IAAI,iEAAiE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAChE,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC;YAC5B,QAAQ,EAAE,mFAAmF,MAAM,CAAC,UAAU,CAAC,6HAA6H;YAC5O,KAAK,EAAE,UAAU,GAAG,CAAC;YACrB,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAa;IAC1C,IAAI,EAAE,qBAAqB;IAC3B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,qCAAqC;IAChD,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC5E,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC;YAC3C,IAAI,EAAE,cAAc,IAAI,CAAC,IAAI,EAAE;YAC/B,KAAK,EAAE,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC7C,QAAQ,EAAE,QAAQ,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YACpE,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,QAAQ,gBAAgB,IAAI,CAAC,SAAS,GAAG;YAC/E,QAAQ,EAAE;gBACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB;SACF,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport { messages } from '@core/messages';\nimport { splitLines } from '@shared/helpers';\n\nimport type { Analista, CircleCICorrection, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport function detectarCorrecoesCircleCI(src: string, _relPath: string): CircleCICorrection[] {\n  const correcoes: CircleCICorrection[] = [];\n  const linhas = splitLines(src);\n\n  linhas.forEach((linha, index) => {\n    const numeroLinha = index + 1;\n\n    if (/\\bimage:\\s*[^\\s@]+:latest\\b/.test(linha)) {\n      correcoes.push({\n        tipo: 'circleci-fix-latest-image',\n        original: linha,\n        sugerido: linha.replace(/:latest\\b/, ':3.18'),\n        linha: numeroLinha,\n        confianca: 90\n      });\n    }\n\n    if (/\\b(TOKEN|SECRET|PASSWORD|KEY|ACCESS_KEY)\\b.*:\\s*['\"][^'\"]+['\"]/i.test(linha) && !/\\$/.test(linha)) {\n      const replaced = linha.replace(/['\"][^'\"]+['\"]/, '\"$VAR_NAME\"');\n      correcoes.push({\n        tipo: 'circleci-use-context',\n        original: linha,\n        sugerido: replaced,\n        linha: numeroLinha,\n        confianca: 90\n      });\n    }\n  });\n\n  if (!/save_cache:/.test(src) && !/restore_cache:/.test(src)) {\n    const firstJobLine = linhas.findIndex(l => /steps:/.test(l));\n    const targetLine = firstJobLine >= 0 ? firstJobLine : 0;\n    correcoes.push({\n      tipo: 'circleci-add-cache',\n      original: linhas[targetLine],\n      sugerido: `      - restore_cache:\\n          key: deps-{{ checksum \"package-lock.json\" }}\\n${linhas[targetLine]}\\n      - save_cache:\\n          key: deps-{{ checksum \"package-lock.json\" }}\\n          paths:\\n            - node_modules`,\n      linha: targetLine + 1,\n      confianca: 80\n    });\n  }\n\n  return correcoes;\n}\n\nexport const correctionCircleCI: Analista = {\n  nome: 'correction-circleci',\n  categoria: 'workflows',\n  descricao: 'Correções automáticas para CircleCI',\n  test: (relPath: string): boolean => relPath.endsWith('.circleci/config.yml'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const correcoes = detectarCorrecoesCircleCI(src, relPath);\n    return correcoes.map(elem => criarOcorrencia({\n      tipo: `correction-${elem.tipo}`,\n      nivel: elem.confianca > 85 ? 'aviso' : 'info',\n      mensagem: messages.SharedCommonMensagens.correcaoSugerida(elem.tipo),\n      relPath,\n      linha: elem.linha,\n      sugestao: ` ${elem.original}\\n ${elem.sugerido}\\nConfiança: ${elem.confianca}%`,\n      correcao: {\n        original: elem.original,\n        novo: elem.sugerido,\n        linha: elem.linha\n      }\n    }));\n  }\n};\n"]}

package/dist/analysts/circleci/corrections/index.d.ts

@@ -0,0 +1,3 @@
+export * from './autofix-engine.js';
+export * from './correction-circleci.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/circleci/corrections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC"}

package/dist/analysts/circleci/corrections/index.js

@@ -0,0 +1,3 @@
+export * from './autofix-engine.js';
+export * from './correction-circleci.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/circleci/corrections/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './autofix-engine.js';\nexport * from './correction-circleci.js';\n"]}

package/dist/analysts/circleci/detectors/detector-circleci-performance.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorCircleCIPerformance: Analista;
+//# sourceMappingURL=detector-circleci-performance.d.ts.map

package/dist/analysts/circleci/detectors/detector-circleci-performance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-circleci-performance.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/detector-circleci-performance.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAK9C,eAAO,MAAM,2BAA2B,EAAE,QAoHzC,CAAC"}

package/dist/analysts/circleci/detectors/detector-circleci-performance.js

@@ -0,0 +1,109 @@
+import { messages } from '../../../core/messages/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+const MSG = messages.RelatorioCircleciMensagens;
+export const detectorCircleCIPerformance = {
+    nome: 'detector-circleci-performance',
+    categoria: 'performance',
+    descricao: 'Detecta problemas de performance em CircleCI configs',
+    test: (relPath) => relPath.endsWith('.circleci/config.yml'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        if (!/save_cache:/.test(src) && !/restore_cache:/.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'circleci-missing-cache',
+                nivel: 'aviso',
+                mensagem: 'Configuração de cache (save_cache/restore_cache) não encontrada',
+                relPath,
+                linha: 1,
+                sugestao: 'Implemente cache para dependências para reduzir drasticamente o tempo de build'
+            }));
+        }
+        if (!/parallelism:/.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'circleci-missing-parallelism',
+                nivel: 'info',
+                mensagem: 'Otimização de paralelismo não configurada',
+                relPath,
+                linha: 1,
+                sugestao: 'Considere usar "parallelism: N" para dividir suítes de teste longas entre múltiplos containers'
+            }));
+        }
+        if (/docker/.test(src) && /build/.test(src) && !/docker_layer_caching/.test(src)) {
+            const dockerMsg = MSG.missingDockerLayerCaching;
+            const dockerSugestao = MSG.missingDockerLayerCachingSugestao;
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'circleci-missing-docker-layer-caching',
+                nivel: 'info',
+                mensagem: typeof dockerMsg === 'function' ? dockerMsg() : dockerMsg,
+                relPath, linha: 1,
+                sugestao: typeof dockerSugestao === 'function' ? dockerSugestao() : dockerSugestao,
+            }));
+        }
+        const persistCount = (src.match(/persist_to_workspace:/g) || []).length;
+        if (persistCount > 0) {
+            const pathsMatch = src.match(/paths:\s*\n(\s+-[^\n]*\n?)*/g);
+            if (pathsMatch && pathsMatch.some(m => (m.match(/-/g) || []).length > 5)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'circleci-large-workspace-persistence',
+                    nivel: 'info',
+                    mensagem: typeof MSG.largeWorkspacePersistence === 'function' ? MSG.largeWorkspacePersistence() : MSG.largeWorkspacePersistence,
+                    relPath, linha: 1,
+                    sugestao: typeof MSG.largeWorkspacePersistenceSugestao === 'function' ? MSG.largeWorkspacePersistenceSugestao() : MSG.largeWorkspacePersistenceSugestao
+                }));
+            }
+        }
+        const hasTestCommand = /\b(npm test|yarn test|pnpm test|mocha|jest|rspec|pytest|go test)\b/i.test(src);
+        const hasTestSplitting = /test_split|circleci tests glob|circleci tests run/i.test(src) || /parallelism:\s*[2-9]/.test(src);
+        if (hasTestCommand && !hasTestSplitting) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'circleci-missing-test-splitting',
+                nivel: 'info',
+                mensagem: typeof MSG.missingTestSplitting === 'function' ? MSG.missingTestSplitting() : MSG.missingTestSplitting,
+                relPath, linha: 1,
+                sugestao: typeof MSG.missingTestSplittingSugestao === 'function' ? MSG.missingTestSplittingSugestao() : MSG.missingTestSplittingSugestao
+            }));
+        }
+        let jobCountEstimate = 0;
+        const jobSections = src.split(/^jobs:/m);
+        if (jobSections.length > 1) {
+            const jobsBlock = jobSections[1].split(/^workflows:|^orbs:|^commands:|^executors:/m)[0];
+            const jobNames = jobsBlock.match(/^\s{2}\w[^:]+:/gm);
+            jobCountEstimate = jobNames ? jobNames.length : 0;
+            if (jobCountEstimate > 2) {
+                const needsCount = (jobsBlock.match(/needs:/g) || []).length;
+                if (needsCount >= jobCountEstimate - 1) {
+                    ocorrencias.push(criarOcorrencia({
+                        tipo: 'circleci-sequential-test-jobs',
+                        nivel: 'info',
+                        mensagem: typeof MSG.sequentialTestJobs === 'function' ? MSG.sequentialTestJobs() : MSG.sequentialTestJobs,
+                        relPath, linha: 1,
+                        sugestao: typeof MSG.sequentialTestJobsSugestao === 'function' ? MSG.sequentialTestJobsSugestao() : MSG.sequentialTestJobsSugestao
+                    }));
+                }
+            }
+        }
+        const executorTypes = new Set();
+        const machineMatch = src.match(/machine:/g);
+        const dockerMatch = src.match(/(?<!image:)docker:/g);
+        const macosMatch = src.match(/macos:/g);
+        if (machineMatch)
+            executorTypes.add('machine');
+        if (dockerMatch)
+            executorTypes.add('docker');
+        if (macosMatch)
+            executorTypes.add('macos');
+        if (executorTypes.size === 1 && jobCountEstimate > 2) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'circleci-single-executor-type',
+                nivel: 'info',
+                mensagem: typeof MSG.singleExecutorForAllJobs === 'function' ? MSG.singleExecutorForAllJobs() : MSG.singleExecutorForAllJobs,
+                relPath, linha: 1,
+                sugestao: typeof MSG.singleExecutorForAllJobsSugestao === 'function' ? MSG.singleExecutorForAllJobsSugestao() : MSG.singleExecutorForAllJobsSugestao
+            }));
+        }
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-circleci-performance.js.map

package/dist/analysts/circleci/detectors/detector-circleci-performance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-circleci-performance.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/detector-circleci-performance.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,GAAG,GAAG,QAAQ,CAAC,0BAAuF,CAAC;AAE7G,MAAM,CAAC,MAAM,2BAA2B,GAAa;IACnD,IAAI,EAAE,+BAA+B;IACrC,SAAS,EAAE,aAAa;IACxB,SAAS,EAAE,sDAAsD;IACjE,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACnE,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QAGrC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,iEAAiE;gBAC3E,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,gFAAgF;aAC3F,CAAC,CAAC,CAAC;QACN,CAAC;QAGD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,8BAA8B;gBACpC,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,2CAA2C;gBACrD,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,gGAAgG;aAC3G,CAAC,CAAC,CAAC;QACP,CAAC;QAGD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjF,MAAM,SAAS,GAAG,GAAG,CAAC,yBAAyB,CAAC;YAChD,MAAM,cAAc,GAAG,GAAG,CAAC,iCAAiC,CAAC;YAC7D,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,uCAAuC;gBAC7C,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;gBACnE,OAAO,EAAE,KAAK,EAAE,CAAC;gBACjB,QAAQ,EAAE,OAAO,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,cAAc;aACnF,CAAC,CAAC,CAAC;QACN,CAAC;QAGD,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACxE,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC7D,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzE,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,sCAAsC;oBAC5C,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,OAAO,GAAG,CAAC,yBAAyB,KAAK,UAAU,CAAC,CAAC,CAAE,GAAG,CAAC,yBAA0C,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,yBAAmC;oBAC3J,OAAO,EAAE,KAAK,EAAE,CAAC;oBACjB,QAAQ,EAAE,OAAO,GAAG,CAAC,iCAAiC,KAAK,UAAU,CAAC,CAAC,CAAE,GAAG,CAAC,iCAAkD,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,iCAA2C;iBACpL,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAGD,MAAM,cAAc,GAAG,qEAAqE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvG,MAAM,gBAAgB,GAAG,oDAAoD,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5H,IAAI,cAAc,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,iCAAiC;gBACvC,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,OAAO,GAAG,CAAC,oBAAoB,KAAK,UAAU,CAAC,CAAC,CAAE,GAAG,CAAC,oBAAqC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,oBAA8B;gBAC5I,OAAO,EAAE,KAAK,EAAE,CAAC;gBACjB,QAAQ,EAAE,OAAO,GAAG,CAAC,4BAA4B,KAAK,UAAU,CAAC,CAAC,CAAE,GAAG,CAAC,4BAA6C,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,4BAAsC;aACrK,CAAC,CAAC,CAAC;QACN,CAAC;QAGD,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACrD,gBAAgB,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC7D,IAAI,UAAU,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;oBACvC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;wBAC/B,IAAI,EAAE,+BAA+B;wBACrC,KAAK,EAAE,MAAM;wBACb,QAAQ,EAAE,OAAO,GAAG,CAAC,kBAAkB,KAAK,UAAU,CAAC,CAAC,CAAE,GAAG,CAAC,kBAAmC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,kBAA4B;wBACtI,OAAO,EAAE,KAAK,EAAE,CAAC;wBACjB,QAAQ,EAAE,OAAO,GAAG,CAAC,0BAA0B,KAAK,UAAU,CAAC,CAAC,CAAE,GAAG,CAAC,0BAA2C,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,0BAAoC;qBAC/J,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;QACH,CAAC;QAGD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,YAAY;YAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,WAAW;YAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,UAAU;YAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3C,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACrD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,+BAA+B;gBACrC,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,OAAO,GAAG,CAAC,wBAAwB,KAAK,UAAU,CAAC,CAAC,CAAE,GAAG,CAAC,wBAAyC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAkC;gBACxJ,OAAO,EAAE,KAAK,EAAE,CAAC;gBACjB,QAAQ,EAAE,OAAO,GAAG,CAAC,gCAAgC,KAAK,UAAU,CAAC,CAAC,CAAE,GAAG,CAAC,gCAAiD,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,gCAA0C;aACjL,CAAC,CAAC,CAAC;QACN,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport { messages } from '@core/messages';\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nconst MSG = messages.RelatorioCircleciMensagens as Record<string, string | ((...args: unknown[]) => string)>;\n\nexport const detectorCircleCIPerformance: Analista = {\n  nome: 'detector-circleci-performance',\n  categoria: 'performance',\n  descricao: 'Detecta problemas de performance em CircleCI configs',\n  test: (relPath: string) => relPath.endsWith('.circleci/config.yml'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n\n    // 1. Falta de cache\n    if (!/save_cache:/.test(src) && !/restore_cache:/.test(src)) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'circleci-missing-cache',\n        nivel: 'aviso',\n        mensagem: 'Configuração de cache (save_cache/restore_cache) não encontrada',\n        relPath,\n        linha: 1,\n        sugestao: 'Implemente cache para dependências para reduzir drasticamente o tempo de build'\n      }));\n    }\n\n    // 2. Falta de parallelism\n    if (!/parallelism:/.test(src)) {\n       ocorrencias.push(criarOcorrencia({\n         tipo: 'circleci-missing-parallelism',\n         nivel: 'info',\n         mensagem: 'Otimização de paralelismo não configurada',\n         relPath,\n         linha: 1,\n         sugestao: 'Considere usar \"parallelism: N\" para dividir suítes de teste longas entre múltiplos containers'\n       }));\n    }\n\n    // 3. Docker layer caching detection\n    if (/docker/.test(src) && /build/.test(src) && !/docker_layer_caching/.test(src)) {\n      const dockerMsg = MSG.missingDockerLayerCaching;\n      const dockerSugestao = MSG.missingDockerLayerCachingSugestao;\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'circleci-missing-docker-layer-caching',\n        nivel: 'info',\n        mensagem: typeof dockerMsg === 'function' ? dockerMsg() : dockerMsg,\n        relPath, linha: 1,\n        sugestao: typeof dockerSugestao === 'function' ? dockerSugestao() : dockerSugestao,\n      }));\n    }\n\n    // 4. Workspace persistence analysis\n    const persistCount = (src.match(/persist_to_workspace:/g) || []).length;\n    if (persistCount > 0) {\n      const pathsMatch = src.match(/paths:\\s*\\n(\\s+-[^\\n]*\\n?)*/g);\n      if (pathsMatch && pathsMatch.some(m => (m.match(/-/g) || []).length > 5)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'circleci-large-workspace-persistence',\n          nivel: 'info',\n          mensagem: typeof MSG.largeWorkspacePersistence === 'function' ? (MSG.largeWorkspacePersistence as () => string)() : MSG.largeWorkspacePersistence as string,\n          relPath, linha: 1,\n          sugestao: typeof MSG.largeWorkspacePersistenceSugestao === 'function' ? (MSG.largeWorkspacePersistenceSugestao as () => string)() : MSG.largeWorkspacePersistenceSugestao as string\n        }));\n      }\n    }\n\n    // 5. Test splitting detection - has test but no test splitting\n    const hasTestCommand = /\\b(npm test|yarn test|pnpm test|mocha|jest|rspec|pytest|go test)\\b/i.test(src);\n    const hasTestSplitting = /test_split|circleci tests glob|circleci tests run/i.test(src) || /parallelism:\\s*[2-9]/.test(src);\n    if (hasTestCommand && !hasTestSplitting) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'circleci-missing-test-splitting',\n        nivel: 'info',\n        mensagem: typeof MSG.missingTestSplitting === 'function' ? (MSG.missingTestSplitting as () => string)() : MSG.missingTestSplitting as string,\n        relPath, linha: 1,\n        sugestao: typeof MSG.missingTestSplittingSugestao === 'function' ? (MSG.missingTestSplittingSugestao as () => string)() : MSG.missingTestSplittingSugestao as string\n      }));\n    }\n\n    // 6. Sequential test jobs analysis\n    let jobCountEstimate = 0;\n    const jobSections = src.split(/^jobs:/m);\n    if (jobSections.length > 1) {\n      const jobsBlock = jobSections[1].split(/^workflows:|^orbs:|^commands:|^executors:/m)[0];\n      const jobNames = jobsBlock.match(/^\\s{2}\\w[^:]+:/gm);\n      jobCountEstimate = jobNames ? jobNames.length : 0;\n      if (jobCountEstimate > 2) {\n        const needsCount = (jobsBlock.match(/needs:/g) || []).length;\n        if (needsCount >= jobCountEstimate - 1) {\n          ocorrencias.push(criarOcorrencia({\n            tipo: 'circleci-sequential-test-jobs',\n            nivel: 'info',\n            mensagem: typeof MSG.sequentialTestJobs === 'function' ? (MSG.sequentialTestJobs as () => string)() : MSG.sequentialTestJobs as string,\n            relPath, linha: 1,\n            sugestao: typeof MSG.sequentialTestJobsSugestao === 'function' ? (MSG.sequentialTestJobsSugestao as () => string)() : MSG.sequentialTestJobsSugestao as string\n          }));\n        }\n      }\n    }\n\n    // 7. Single executor type for all jobs\n    const executorTypes = new Set<string>();\n    const machineMatch = src.match(/machine:/g);\n    const dockerMatch = src.match(/(?<!image:)docker:/g);\n    const macosMatch = src.match(/macos:/g);\n    if (machineMatch) executorTypes.add('machine');\n    if (dockerMatch) executorTypes.add('docker');\n    if (macosMatch) executorTypes.add('macos');\n\n    if (executorTypes.size === 1 && jobCountEstimate > 2) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'circleci-single-executor-type',\n        nivel: 'info',\n        mensagem: typeof MSG.singleExecutorForAllJobs === 'function' ? (MSG.singleExecutorForAllJobs as () => string)() : MSG.singleExecutorForAllJobs as string,\n        relPath, linha: 1,\n        sugestao: typeof MSG.singleExecutorForAllJobsSugestao === 'function' ? (MSG.singleExecutorForAllJobsSugestao as () => string)() : MSG.singleExecutorForAllJobsSugestao as string\n      }));\n    }\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/circleci/detectors/detector-circleci-security.d.ts

@@ -0,0 +1,5 @@
+import type { Analista, DeteccaoCustom } from '../../../types/index.js';
+export declare function registrarDetectorCircleCI(detector: DeteccaoCustom): void;
+export declare function obterDetectoresCircleCI(): DeteccaoCustom[];
+export declare const detectorCircleCISecurity: Analista;
+//# sourceMappingURL=detector-circleci-security.d.ts.map

package/dist/analysts/circleci/detectors/detector-circleci-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-circleci-security.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/detector-circleci-security.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAgC,MAAM,GAAG,CAAC;AAIhF,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAExE;AACD,wBAAgB,uBAAuB,IAAI,cAAc,EAAE,CAE1D;AAQD,eAAO,MAAM,wBAAwB,EAAE,QAwGtC,CAAC"}