@mocoto/mahoraga 0.14.1 → 0.14.2

package/dist/core/config/security.js

@@ -10,8 +10,8 @@ export function sanitizarRelPath(rel) {
     if (!rel) {
         return '';
     }
-    rel = rel.replace(/^[A-Za-z]:\\?/u, '').replace(/^\/+/, '');
-    const norm = rel.replace(/\\+/g, '/');
+    const safe = rel.replace(/^[A-Za-z]:\\?/u, '').replace(/^\/+/, '');
+    const norm = safe.replace(/\\+/g, '/');
     const collapsed = path.posix.normalize(norm);
     if (collapsed.startsWith('..')) {
         // remove todos os prefixos de ../ e ./ e barras iniciais resultantes

package/dist/core/execution/analysis-cache.js

@@ -53,17 +53,14 @@ export class AnalysisCache {
         await this.load();
         const hash = this.hashConteudo(conteudo);
         const entry = this.cache[relPath];
-        if (!entry) {
-            return null;
-        }
-        if (entry.hash !== hash) {
+        if (!entry || entry.hash !== hash) {
             return null;
         }
         // Verifica TTL
         if (config.ANALISE_CACHE_TTL_MS > 0) {
             const idade = Date.now() - entry.timestamp;
             if (idade > config.ANALISE_CACHE_TTL_MS) {
-                delete this.cache[relPath];
+                Reflect.deleteProperty(this.cache, relPath);
                 return null;
             }
         }
@@ -90,7 +87,7 @@ export class AnalysisCache {
      */
     async invalidate(relPath) {
         await this.load();
-        delete this.cache[relPath];
+        Reflect.deleteProperty(this.cache, relPath);
     }
     /**
      * Limpa todo o cache
@@ -118,7 +115,7 @@ export class AnalysisCache {
      */
     estatisticas() {
         const entradas = Object.keys(this.cache);
-        const totalOcorrencias = entradas.reduce((acc, key) => acc + (this.cache[key].count ?? 0), 0);
+        const totalOcorrencias = entradas.reduce((acc, key) => acc + this.cache[key].count, 0);
         return {
             totalEntradas: entradas.length,
             totalOcorrencias,
@@ -135,7 +132,7 @@ export class AnalysisCache {
         const agora = Date.now();
         for (const [key, entry] of Object.entries(this.cache)) {
             if (agora - entry.timestamp > config.ANALISE_CACHE_TTL_MS) {
-                delete this.cache[key];
+                Reflect.deleteProperty(this.cache, key);
             }
         }
     }

package/dist/core/execution/executor.js

@@ -12,7 +12,7 @@ import { analysisCache } from './analysis-cache.js';
 import { ScopeAstCache } from './ast-cache.js';
 import { ocorrenciaErroAnalista } from '../../types/index.js';
 async function withTimeout(value, timeoutMs, errorMessage) {
-    let timer = null;
+    let timer = undefined;
     try {
         return await Promise.race([
             Promise.resolve(value),
@@ -22,7 +22,7 @@ async function withTimeout(value, timeoutMs, errorMessage) {
         ]);
     }
     finally {
-        if (timer) {
+        if (timer !== undefined) {
             clearTimeout(timer);
         }
     }
@@ -57,9 +57,6 @@ function combinarVisitors(tecnicas) {
         return visitorCombinado;
     }
     for (const item of visitantes) {
-        if (!item.visitor) {
-            continue;
-        }
         for (const [key, val] of Object.entries(item.visitor)) {
             if (!visitorCombinado[key]) {
                 visitorCombinado[key] = val;
@@ -70,7 +67,7 @@ function combinarVisitors(tecnicas) {
                     if (typeof prev === 'function') {
                         prev(path, state);
                     }
-                    else if (prev && typeof prev === 'object' && 'enter' in prev && typeof prev.enter === 'function') {
+                    else if (typeof prev === 'object' && 'enter' in prev && typeof prev.enter === 'function') {
                         prev.enter(path, state);
                     }
                     if (typeof val === 'function') {
@@ -225,10 +222,8 @@ export async function executarInquisicao(fileEntriesComAst, tecnicas, baseDir, g
                     const hash = hashConteudo(entry.content ?? '');
                     novoEstado.arquivos[entry.relPath] = { hash, ocorrencias: [], reaproveitadoCount: 0 };
                 }
-                if (novoEstado.estatisticas) {
-                    novoEstado.estatisticas.totalArquivosProcessados = fileEntriesComAst.length;
-                    novoEstado.estatisticas.ultimaDuracaoMs = duracao;
-                }
+                novoEstado.estatisticas.totalArquivosProcessados = fileEntriesComAst.length;
+                novoEstado.estatisticas.ultimaDuracaoMs = duracao;
                 await salvarEstado(config.ANALISE_INCREMENTAL_STATE_PATH, novoEstado);
             }
             catch { /* Ignora erro ao salvar cache */ }
@@ -366,9 +361,7 @@ export async function executarInquisicao(fileEntriesComAst, tecnicas, baseDir, g
                 pushOcorrencia(...(cacheAnterior.ocorrencias ?? []));
                 novoEstado.arquivos[entry.relPath] = { ...cacheAnterior, hash, hashEstrutural: cacheAnterior.hashEstrutural };
                 novoEstado.arquivos[entry.relPath].reaproveitadoCount = (cacheAnterior.reaproveitadoCount ?? 0) + 1;
-                if (novoEstado.estatisticas) {
-                    novoEstado.estatisticas.totalReaproveitamentos = (novoEstado.estatisticas.totalReaproveitamentos || 0) + 1;
-                }
+                novoEstado.estatisticas.totalReaproveitamentos = (novoEstado.estatisticas.totalReaproveitamentos || 0) + 1;
                 if (detalharPorArquivo) {
                     messages.logCore.reaproveitadoIncremental(entry.relPath);
                 }
@@ -534,9 +527,7 @@ export async function executarInquisicao(fileEntriesComAst, tecnicas, baseDir, g
                 ultimaExecucaoMs: Date.now(),
                 reaproveitadoCount: 0
             };
-            if (novoEstado.estatisticas) {
-                novoEstado.estatisticas.totalArquivosProcessados = (novoEstado.estatisticas.totalArquivosProcessados || 0) + 1;
-            }
+            novoEstado.estatisticas.totalArquivosProcessados = (novoEstado.estatisticas.totalArquivosProcessados || 0) + 1;
         }
         // NOVO: Atualiza progresso por arquivo (não por analista)
         messages.logAnalistas.arquivoProcessado();
@@ -583,9 +574,7 @@ export async function executarInquisicao(fileEntriesComAst, tecnicas, baseDir, g
         await analysisCache.persistir().catch(() => { });
     }
     if (config.ANALISE_INCREMENTAL_ENABLED) {
-        if (novoEstado.estatisticas) {
-            novoEstado.estatisticas.ultimaDuracaoMs = duracaoMs;
-        }
+        novoEstado.estatisticas.ultimaDuracaoMs = duracaoMs;
         await salvarEstado(config.ANALISE_INCREMENTAL_STATE_PATH, novoEstado);
         if (config.LOG_ESTRUTURADO) {
             messages.log.info(JSON.stringify({

package/dist/core/execution/inquisitor.js

@@ -106,27 +106,25 @@ async function aplicarPriorizacao(entries, metaSet) {
             return entries;
         }
         const pesos = {
-            duracaoMs: config.ANALISE_PRIORIZACAO_PESOS.duracaoMs ?? 1,
-            ocorrencias: config.ANALISE_PRIORIZACAO_PESOS.ocorrencias ?? 2,
-            penalidadeReuso: config.ANALISE_PRIORIZACAO_PESOS.penalidadeReuso ?? 0.5
+            duracaoMs: config.ANALISE_PRIORIZACAO_PESOS.duracaoMs,
+            ocorrencias: config.ANALISE_PRIORIZACAO_PESOS.ocorrencias,
+            penalidadeReuso: config.ANALISE_PRIORIZACAO_PESOS.penalidadeReuso
         };
         const scored = entries.map(entry => {
             const hist = inc.arquivos[entry.relPath];
             let score = 0;
-            if (hist) {
-                let dur = 0;
-                let occ = 0;
-                if (hist.analistas) {
-                    for (const a of Object.values(hist.analistas)) {
-                        dur += a.duracaoMs;
-                        occ += a.ocorrencias;
-                    }
-                }
-                else {
-                    occ = hist.ocorrencias?.length ?? 0;
+            let dur = 0;
+            let occ = 0;
+            if (hist.analistas) {
+                for (const a of Object.values(hist.analistas)) {
+                    dur += a.duracaoMs;
+                    occ += a.ocorrencias;
                 }
-                score = dur * pesos.duracaoMs + occ * pesos.ocorrencias - (hist.reaproveitadoCount ?? 0) * pesos.penalidadeReuso;
             }
+            else {
+                occ = hist.ocorrencias?.length ?? 0;
+            }
+            score = dur * pesos.duracaoMs + occ * pesos.ocorrencias - (hist.reaproveitadoCount ?? 0) * pesos.penalidadeReuso;
             return { entry, score };
         });
         scored.sort((a, b) => b.score - a.score);
@@ -167,7 +165,7 @@ export async function prepararComAst(entries, baseDir) {
     metricas.cacheHits = 0;
     metricas.cacheMiss = 0;
     g.__SUKUNA_METRICAS__ = metricas;
-    const CONCURRENCY = (config.AUTOANALISE_CONCURRENCY ?? 50);
+    const CONCURRENCY = config.AUTOANALISE_CONCURRENCY;
     const limit = pLimit(CONCURRENCY);
     return Promise.all(entries.map(entry => limit(async () => {
         let ast;
@@ -235,13 +233,18 @@ export async function iniciarInquisicao(baseDir = process.cwd(), options = {}, t
             if (progressData.tipo === 'diretorio') {
                 const g = getGlobal();
                 g.__SUKUNA_DIR_COUNT__ = (g.__SUKUNA_DIR_COUNT__ ?? 0) + 1;
-                g.__SUKUNA_DIR_SAMPLES__ ??= [];
-                if (g.__SUKUNA_DIR_SAMPLES__.length < 5) {
-                    g.__SUKUNA_DIR_SAMPLES__.push(progressData.caminho);
+                const samples = g.__SUKUNA_DIR_SAMPLES__ ?? [];
+                if (samples.length < 5) {
+                    const caminho = progressData.caminho ?? '';
+                    samples.push(caminho);
+                    g.__SUKUNA_DIR_SAMPLES__ = samples;
                 }
             }
             else if (progressData.tipo === 'erro') {
-                messages.log.erro(`Erro ao ${progressData.acao} ${progressData.caminho}: ${progressData.mensagem}`);
+                const acao = progressData.acao ?? '';
+                const caminho = progressData.caminho ?? '';
+                const mensagem = progressData.mensagem ?? '';
+                messages.log.erro(`Erro ao ${acao} ${caminho}: ${mensagem}`);
             }
         }
         catch {
@@ -300,7 +303,7 @@ export async function iniciarInquisicao(baseDir = process.cwd(), options = {}, t
             const porArquivo = {};
             for (const pe of parseErros) {
                 const chave = pe.relPath || '__desconhecido__';
-                (porArquivo[chave] = porArquivo[chave] || []).push(pe);
+                porArquivo[chave].push(pe);
             }
             for (const [arq, lista] of Object.entries(porArquivo)) {
                 if (lista.length <= (config.PARSE_ERRO_MAX_POR_ARQUIVO || 1)) {

package/dist/core/execution/results.js

@@ -1 +1,2 @@
+// SPDX-License-Identifier: MIT
 export {};

package/dist/core/execution/scanner.js

@@ -33,7 +33,7 @@ export async function scanRepository(baseDir, options = {}) {
     const statCache = new Map();
     const cliIncludeGroups = config.CLI_INCLUDE_GROUPS;
     const includeGroups = Array.isArray(cliIncludeGroups) ? cliIncludeGroups : [];
-    const includeGroupsNorm = includeGroups.map(grupo => (grupo || []).map(caminho => toPosix(trimDotSlash((caminho || '')))));
+    const includeGroupsNorm = includeGroups.map(grupo => grupo.map(caminho => toPosix(trimDotSlash(caminho))));
     const includePadroes = ensureStringArray(config.CLI_INCLUDE_PATTERNS);
     const includePadroesNorm = includePadroes.map(caminho => toPosix(trimDotSlash((caminho || ''))));
     const excludePadroesNorm = ensureStringArray(config.CLI_EXCLUDE_PATTERNS).map(caminho => toPosix((caminho || '')));
@@ -188,7 +188,7 @@ export async function scanRepository(baseDir, options = {}) {
             return true;
         }
         // Compat extra também para padrões simples quando não há grupos
-        for (const caminho of includePadroesNorm || []) {
+        for (const caminho of includePadroesNorm) {
             if (matchesPadrao(relPath, caminho)) {
                 return true;
             }
@@ -367,7 +367,7 @@ export async function scanRepository(baseDir, options = {}) {
                     st = await fs.stat(norm);
                     statC.set(norm, st);
                 }
-                let isDir = st.isDirectory() ?? false;
+                let isDir = st.isDirectory();
                 if (!isDir) {
                     try {
                         await fs.readdir(norm);

package/dist/core/messages/en/analysts/analyst-github-actions-messages.js

@@ -54,5 +54,5 @@ export const AnalistaGithubActionsMensagens = {
     pullRequestTargetGrantsWritePermissionsSugestao: 'Use pull_request instead of pull_request_target, or carefully validate the source branch',
     workflowDispatchWithoutInputs: 'workflow_dispatch without defined inputs',
     workflowDispatchWithoutInputsSugestao: 'Define required inputs to control manual workflow execution',
-    erroAplicarCorrecao: (erro) => `Error applying fix: ${erro}`,
+    erroAplicarCorrecao: (erro) => `Error applying fix: ${String(erro)}`,
 };

package/dist/core/messages/en/analysts/analyst-patterns-usage-messages.js

@@ -16,5 +16,6 @@ export const PadroesUsoMensagens = {
     nonArrowCallback: "Callback using 'function' where arrow function would be more appropriate. Prefer () => {}.",
     consoleLog: "console.log detected in production code. Remove or replace with appropriate logger.",
     uselessConditional: "Unnecessary comparison: if (x === true). Use just if (x).",
+    satisfiesUsage: "TypeScript 'satisfies' keyword used — ensures type safety without widening",
     erroAnalise: (relPath, erro) => `Failed to analyze usage patterns in ${relPath}: ${erro}`
 };

package/dist/core/messages/en/analysts/analyst-shell-messages.js

@@ -60,4 +60,19 @@ export const AnalistaShellMensagens = {
     loopOverCommandOutputSugestao: 'Use glob: "for f in *".',
     pipeOverTempfile: 'Pipeline could replace temporary file.',
     pipeOverTempfileSugestao: 'Use pipes instead of temporary files.',
+    // Modern Bash (2026)
+    missingSetU: 'Missing "set -u" — unset variable references will silently expand to empty.',
+    missingSetUSugestao: 'Add "set -u" to catch typos in variable names.',
+    missingIso: 'Missing IFS=$\'\\n\\t\' — word splitting may cause unexpected behavior.',
+    missingIsoSugestao: 'Add IFS=$\'\\n\\t\' at the top of the script for safe word splitting.',
+    missingTrap: 'No trap handler found — cleanup may be skipped on signals.',
+    missingTrapSugestao: 'Add trap handler: trap "cleanup" EXIT INT TERM.',
+    missingMainFn: 'Script lacks a main function pattern.',
+    missingMainFnSugestao: 'Wrap logic in main() and call main "$@" at the bottom.',
+    missingCommandV: 'Hardcoded path instead of using command -v.',
+    missingCommandVSugestao: 'Use "command -v <tool>" to check availability.',
+    missingDebugMode: 'Script has no debug mode — troubleshooting is harder.',
+    missingDebugModeSugestao: 'Add [[ "${DEBUG:-}" == "true" ]] && set -x for debug tracing.',
+    missingInputValidation: 'Command arguments not validated — unexpected input may cause errors.',
+    missingInputValidationSugestao: 'Validate arguments at the top: [[ -z "$1" ]] && { echo "Usage: ..."; exit 1; }.',
 };

package/dist/core/messages/en/analysts/detector-constructions-syntactic-messages.js

@@ -11,4 +11,10 @@ export const DetectorConstrucoesSintaticasMensagens = {
     templateLiteralOveruse: "Unnecessary template literal for simple concatenation. Use '+' operator.",
     unnecessaryObjectSpread: "Unnecessary object spread. Direct assignment 'obj.prop = val' is more efficient.",
     getterSetterWithoutValidation: "Getter/setter without validation in the setter. Add validation to avoid invalid data.",
+    // ES2025/ES2026
+    explicitResourceManagement: "Explicit Resource Management with 'using' detected (ES2026)",
+    temporalApiUsage: "Temporal API usage detected (ES2026) — modern date/time alternative to Date",
+    iteratorHelperUsage: "Iterator helper method detected (ES2025) — lazy evaluation on iterables",
+    setMethodUsage: "New Set method detected (ES2025) — use for set operations",
+    mapUpsertUsage: "Map upsert method detected (ES2026) — .getOrInsert() / .getOrInsertComputed()",
 };

package/dist/core/messages/en/analysts/detector-js-ts-messages.js

@@ -54,4 +54,31 @@ export const DetectorJsTsMensagens = {
     observerWithoutDisconnect: 'Observer (MutationObserver/IntersectionObserver) without disconnect(). This causes memory leaks.',
     webSocketWithoutClose: 'WebSocket without matching close() call. The connection may remain open.',
     workerWithoutTerminate: 'Worker without terminate() call. The worker will continue running in the background.',
+    // ES2025+ features
+    satisfiesAvailable: 'Type can use "satisfies" instead of "as" assertion for safer narrowing',
+    satisfiesAvailableSugestao: 'Replace "as Type" with "satisfies Type" to validate without widening',
+    usingResourceManagement: 'Explicit Resource Management with "using" detected (ES2026)',
+    usingResourceManagementSugestao: 'Ensure the resource implements Symbol.dispose or Symbol.asyncDispose',
+    temporalApi: 'Temporal API usage detected (ES2026)',
+    temporalApiSugestao: 'Temporal replaces Date — use Temporal.Now, Temporal.PlainDate, etc.',
+    iteratorHelper: 'Iterator helper method detected (ES2025)',
+    iteratorHelperSugestao: 'Iterator helpers (.map(), .filter(), .take()) enable lazy evaluation',
+    setMethods: 'New Set method detected (ES2025)',
+    setMethodsSugestao: 'Use Set.prototype.union(), .intersection(), .difference() for set operations',
+    topLevelAwait: 'Top-level await detected',
+    topLevelAwaitSugestao: 'Verify the module top-level await does not block imports unnecessarily',
+    promiseWithResolvers: 'Promise.withResolvers() detected (ES2025)',
+    promiseWithResolversSugestao: 'Prefer async/await over Promise.withResolvers() when possible',
+    promiseAllSettled: 'Promise.allSettled() detected — good for all-settled patterns',
+    promiseAllSettledSugestao: 'Use Promise.allSettled() when you need results from all promises regardless of rejection',
+    forAwaitOf: 'for await...of detected — async iteration',
+    forAwaitOfSugestao: 'Ensure the async iterable correctly implements Symbol.asyncIterator',
+    regexpEscape: 'RegExp.escape() detected (ES2025)',
+    regexpEscapeSugestao: 'Use RegExp.escape() to safely escape user input in regex patterns',
+    errorIsError: 'Error.isError() detected (ES2026)',
+    errorIsErrorSugestao: 'Use Error.isError() for reliable error type checking',
+    arrayFromAsync: 'Array.fromAsync() detected (ES2026)',
+    arrayFromAsyncSugestao: 'Use Array.fromAsync() to create arrays from async iterables',
+    mapGetOrInsert: 'Map.getOrInsert() / .getOrInsertComputed() detected (ES2026)',
+    mapGetOrInsertSugestao: 'Use getOrInsert() for atomic map upsert operations',
 };

package/dist/core/messages/en/analysts/detector-react-messages.js

@@ -57,4 +57,12 @@ export const DetectorReactMensagens = {
     contextTooBroadSugestao: 'Split into smaller contexts',
     liftingStateTooHigh: 'State lifted more levels than needed',
     liftingStateTooHighSugestao: 'Consider context or local state',
+    react19ForwardRef: 'forwardRef deprecated in React 19',
+    react19ForwardRefSugestao: 'Pass ref as a regular prop instead',
+    react19FC: 'React.FC deprecated in React 19',
+    react19FCSugestao: 'Type props directly instead of using React.FC',
+    react19UseClient: 'Missing \'use client\' directive (React 19)',
+    react19UseClientSugestao: 'Add \'use client\' at the top of the file for client components',
+    react19DefaultProps: 'defaultProps deprecated in React 19',
+    react19DefaultPropsSugestao: 'Use default parameter values instead',
 };

package/dist/core/messages/en/analysts/detector-shell-messages.js

@@ -60,4 +60,21 @@ export const DetectorShellMensagens = {
     loopOverCommandOutputSugestao: 'Use glob patterns instead of parsing ls',
     pipeOverTempfile: 'Pipeline could replace temporary file',
     pipeOverTempfileSugestao: 'Use pipes instead of temporary files',
+    // Modern Bash (2026)
+    missingSetU: 'Missing "set -u" — unset variable references will silently expand to empty',
+    missingSetUSugestao: 'Add "set -u" to catch typos in variable names',
+    missingIso: 'Missing IFS=$\'\\n\\t\' — word splitting may cause unexpected behavior',
+    missingIsoSugestao: 'Add IFS=$\'\\n\\t\' at the top of the script for safe word splitting',
+    missingTrap: 'No trap handler found — cleanup may be skipped on signals',
+    missingTrapSugestao: 'Add trap handler: trap "cleanup" EXIT INT TERM',
+    missingMainFn: 'Script lacks a main function pattern',
+    missingMainFnSugestao: 'Wrap logic in main() and call main "$@" at the bottom',
+    missingCommandV: 'Hardcoded path instead of using command -v',
+    missingCommandVSugestao: 'Use "command -v <tool>" to check availability',
+    missingDebugMode: 'Script has no debug mode — troubleshooting is harder',
+    missingDebugModeSugestao: 'Add [[ "${DEBUG:-}" == "true" ]] && set -x for debug tracing',
+    missingInputValidation: 'Command arguments not validated — unexpected input may cause errors',
+    missingInputValidationSugestao: 'Validate arguments at the top: [[ -z "$1" ]] && { echo "Usage: ..."; exit 1; }',
+    shellCheckRecommended: 'Consider running ShellCheck for comprehensive analysis',
+    shellCheckRecommendedSugestao: 'Install shellcheck and run: shellcheck script.sh',
 };

package/dist/core/messages/en/analysts/detector-tailwind-messages.js

@@ -5,13 +5,13 @@ export const DetectorTailwindMensagens = {
     repeatedClasses: (duplicates) => `Repeated classes: ${duplicates}`,
     repeatedClassesSugestao: 'Remove duplicate classes',
     arbitraryValue: (val) => `Arbitrary value detected: ${val}`,
-    arbitraryValueSugestao: 'Consider adding it to tailwind.config.js',
+    arbitraryValueSugestao: 'Consider adding it via @theme in CSS (Tailwind v4)',
     important: '!important detected in Tailwind class',
     importantSugestao: 'Avoid !important - refactor specificity',
     arbitraryValueOveruse: 'Excessive use of arbitrary values - may indicate missing design tokens',
-    arbitraryValueOveruseSugestao: 'Define custom tokens in tailwind.config.js instead of arbitrary values',
+    arbitraryValueOveruseSugestao: 'Define custom tokens via @theme in CSS instead of arbitrary values (Tailwind v4)',
     missingDesignToken: 'Hardcoded value detected - use Tailwind design tokens',
-    missingDesignTokenSugestao: 'Extract colors, spacing, and sizes to tailwind.config.js',
+    missingDesignTokenSugestao: 'Extract colors, spacing, and sizes to @theme in CSS (Tailwind v4)',
     responsiveWithoutBase: 'Responsive class without corresponding base class',
     responsiveWithoutBaseSugestao: 'Add the base class before responsive variants',
     inlineStylesWithTailwind: 'Inline styles detected alongside Tailwind classes',

package/dist/core/messages/en/core/plugin-messages.js

@@ -29,7 +29,16 @@ export const ReactMensagens = {
 export const ReactHooksMensagens = {
     useEffectNoDeps: 'useEffect without dependency array (evaluate deps to avoid loops).',
     memoCallbackNoDeps: 'Hook without dependency array (useMemo/useCallback).',
-    hookInConditional: 'Hook declared inside conditional (breaks Rules of Hooks).'
+    hookInConditional: 'Hook declared inside conditional (breaks Rules of Hooks).',
+    react19Use: 'use() hook detected (React 19) — ensure wrapped in <Suspense> boundary.',
+    react19UseOptimistic: 'useOptimistic hook detected (React 19) — requires update function.',
+    react19UseActionState: 'useActionState hook detected (React 19) — for form actions.',
+    react19UseFormStatus: 'useFormStatus hook detected (React 19) — access form pending state.',
+    react19ForwardRefDeprecated: 'forwardRef is deprecated in React 19 — pass ref as regular prop.',
+    react19FCDeprecated: 'React.FC/FunctionComponent is deprecated in React 19 — type props directly.',
+    react19DefaultPropsDeprecated: 'defaultProps is deprecated in React 19 — use default parameters.',
+    react19UseClient: 'File uses client features (hooks/events) without \'use client\' directive (React 19).',
+    react19FormAction: 'Form with action prop detected (React 19).'
 };
 // ─── TAILWIND MESSAGES ────────────────────────────────────────
 export const TailwindMensagens = {
@@ -38,7 +47,13 @@ export const TailwindMensagens = {
     importantUsage: (token) => `Use of ! (important) detected in (${token}). Prefer utility classes or scope reinforcement instead of important.`,
     variantConflict: (prop, variants) => `Possible variant conflict for ${prop} (variants: ${variants.slice(0, 6).join(', ')}). Check order/scope.`,
     dangerousArbitraryValue: (token) => `Arbitrary value with potentially dangerous url (${token}). Avoid javascript:/data:text/html.`,
-    arbitraryValue: (token) => `Class with arbitrary value (${token}). Confirm it aligns with the design.`
+    arbitraryValue: (token) => `Class with arbitrary value (${token}). Confirm it aligns with the design.`,
+    v3DeprecatedUtility: (token, replacement) => `v3 deprecated utility "${token}" → use "${replacement}" (Tailwind v4).`,
+    v3Directive: `@tailwind directive detected (v3) → use @import "tailwindcss" (Tailwind v4).`,
+    v3LayerUtilities: `@layer utilities detected (v3) → use @utility (Tailwind v4).`,
+    themeFunction: `theme() function detected (deprecated v3) → prefer CSS variables (var(--color-*)).`,
+    v3ImportantPrefix: (token) => `!important as prefix in "${token}" (v3) → move ! to the end ("${token.replace('!', '')}!").`,
+    v3ArbitraryVar: `Variable in square brackets (v3) → use parentheses (e.g. bg-(--var) instead of bg-[--var]).`
 };
 // ─── CSS MESSAGES ─────────────────────────────────────────────
 export const CssMensagens = {
@@ -287,7 +302,20 @@ export const RustMensagens = {
     missingDoc: (fnName) => `Public function '${fnName}' missing documentation comment (///).`,
     namingConvention: (constName) => `Constant '${constName}' should follow SCREAMING_CASE convention.`,
     redundantReturn: 'Redundant return at end of function; Rust uses implicit return (last expression).',
-    wildcardImport: (importPath) => `Wildcard import '${importPath}' may pollute namespace; prefer explicit imports.`
+    wildcardImport: (importPath) => `Wildcard import '${importPath}' may pollute namespace; prefer explicit imports.`,
+    lazyLockSuggestion: 'once_cell::sync::Lazy detected — use std::sync::LazyLock (Rust 1.80+).',
+    onceLockSuggestion: 'once_cell::sync::OnceCell detected — use std::sync::OnceLock (Rust 1.70+).',
+    offsetOfSuggestion: 'Manual pointer offset for field access — use std::mem::offset_of! (Rust 1.77+).',
+    letChainsPattern: 'let_chains pattern detected (stable since Rust 1.78).',
+    assertMatchesSuggestion: 'assert!(matches!(...)) pattern — consider assert_matches!(...) (nightly).',
+    isSomeAnd: '.is_some() && predicate pattern — use .is_some_and(|x| ...) (Rust 1.70+).',
+    isOkAnd: '.is_ok() && predicate pattern — use .is_ok_and(|x| ...) (Rust 1.70+).',
+    inspectMethod: 'map() with side-effect closure — use .inspect() (Rust 1.76+).',
+    implicitFormatCapture: 'format!("...{var}...") can use implicit capture (Rust 1.80+).',
+    pointerCast: 'Using `as` for pointer cast — use .cast() (Rust 1.72+).',
+    splitOnce: 'splitn(2, ...) with index access — use .split_once() (Rust 1.62+).',
+    okErrAntipattern: '.ok()?.unwrap() antipattern — use ? directly on Result.',
+    collectOverPush: 'Collection built with push() in loop — use .map().collect().'
 };
 // ─── JAVA / KOTLIN MESSAGES ───────────────────────────────────
 export const JavaMensagens = {

package/dist/core/messages/en/log/log.js

@@ -140,9 +140,9 @@ export function formatarLinha({ nivel, mensagem, sanitize = true }) {
     if (!process.env.VITEST && process.env.SUKUNA_CENTER === '1') {
         try {
             const cols = obterColunasTerm();
-            const out = process.stdout && typeof process.stdout.isTTY !== 'undefined' ? process.stdout : undefined;
+            const out = typeof process.stdout.isTTY !== 'undefined' ? process.stdout : undefined;
             const isTty = !!out && out.isTTY;
-            if (isTty && cols && cols > 0) {
+            if (isTty && typeof cols === 'number' && cols > 0) {
                 const ANSI_REGEX = /[\u001B\u009B][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]/g;
                 const visLen = (string) => (string || '').replace(ANSI_REGEX, '').length;
                 const pad = Math.floor(Math.max(0, cols - visLen(linha)) / 2);
@@ -164,7 +164,7 @@ export function formatarLinha({ nivel, mensagem, sanitize = true }) {
 function obterColunasTerm() {
     // Tries to get terminal width safely
     try {
-        const out = process.stdout && typeof process.stdout.columns !== 'undefined' ? process.stdout : undefined;
+        const out = typeof process.stdout.columns !== 'undefined' ? process.stdout : undefined;
         const cols = out?.columns;
         if (typeof cols === 'number' && cols > 0) {
             return cols;
@@ -414,7 +414,7 @@ export const log = {
                 const visibleLen = (string) => string.replace(ANSI_REGEX, '').length;
                 const frameWidth = Math.max(...lines.map(linha => visibleLen(linha)));
                 const cols = obterColunasTerm() ?? 0;
-                const outStream = process.stdout && typeof process.stdout.isTTY !== 'undefined' ? process.stdout : undefined;
+                const outStream = typeof process.stdout.isTTY !== 'undefined' ? process.stdout : undefined;
                 const isTty = !!outStream && outStream.isTTY;
                 if (isTty) {
                     const pad = Math.floor(Math.max(0, cols - frameWidth) / 2);

package/dist/core/messages/en/ui/filter-config.js

@@ -221,11 +221,7 @@ export const AGRUPAMENTOS_MENSAGEM = [
  * Gets the priority of a problem type
  */
 export function getPrioridade(tipo) {
-    return PRIORIDADES[tipo] || {
-        prioridade: 'baixa',
-        icone: ICONES_ARQUIVO.arquivo,
-        descricao: 'Uncategorized problem'
-    };
+    return PRIORIDADES[tipo];
 }
 /**
  * Finds grouping by message

package/dist/core/messages/i18n-system.js

@@ -40,7 +40,7 @@ function detectLocale() {
         const configPath = path.join(process.cwd(), 'mahoraga.config.json');
         const conteudo = fs.readFileSync(configPath, 'utf-8');
         const json = JSON.parse(conteudo);
-        const confLocale = ((json.locale ?? json.locales) ?? json.LOCALE)?.toLowerCase();
+        const confLocale = (json.locale ?? json.locales ?? json.LOCALE)?.toLowerCase();
         if (confLocale && SUPPORTED_LOCALES.includes(confLocale)) {
             return confLocale;
         }
@@ -62,7 +62,7 @@ export function initLocale() {
 }
 initLocale();
 export function carregarMensagens(locale) {
-    if (cache[locale]) {
+    if (locale in cache) {
         return cache[locale];
     }
     const caminho = path.join(process.cwd(), 'src', 'core', 'messages', 'locales', `${locale}.json`);
@@ -101,7 +101,7 @@ const localeModules = {
 export const messages = new Proxy({}, {
     get(_target, prop) {
         const locale = getLocale();
-        const mod = localeModules[locale] || localeModules.pt;
+        const mod = localeModules[locale];
         if (prop in mod) {
             return mod[prop];
         }

package/dist/core/messages/index.js

@@ -43,7 +43,7 @@ function detectLocale() {
         const configPath = path.join(process.cwd(), 'mahoraga.config.json');
         const conteudo = fs.readFileSync(configPath, 'utf-8');
         const json = JSON.parse(conteudo);
-        const confLocale = ((json.locale ?? json.locales) ?? json.LOCALE)?.toLowerCase();
+        const confLocale = (json.locale ?? json.locales ?? json.LOCALE)?.toLowerCase();
         if (confLocale && SUPPORTED_LOCALES.includes(confLocale)) {
             return confLocale;
         }
@@ -66,7 +66,7 @@ export function initLocale() {
 }
 initLocale();
 export function carregarMensagens(locale) {
-    if (cache[locale]) {
+    if (locale in cache) {
         return cache[locale];
     }
     const caminho = path.join(process.cwd(), 'src', 'core', 'messages', 'locales', `${locale}.json`);
@@ -105,7 +105,7 @@ const localeModules = {
 export const messages = new Proxy({}, {
     get(_target, prop) {
         const locale = getLocale();
-        const mod = localeModules[locale] || localeModules.pt;
+        const mod = localeModules[locale];
         if (prop in mod) {
             return mod[prop];
         }

package/dist/core/messages/ja/analysts/analyst-github-actions-messages.js

@@ -55,5 +55,5 @@ export const AnalistaGithubActionsMensagens = {
     pullRequestTargetGrantsWritePermissionsSugestao: 'pull_request_target の代わりに pull_request を使用するか、ソースブランチを慎重に検証してください',
     workflowDispatchWithoutInputs: 'inputs が定義されていない workflow_dispatch',
     workflowDispatchWithoutInputsSugestao: '手動ワークフロー実行を制御するため必須入力を定義してください',
-    erroAplicarCorrecao: (erro) => `修正の適用エラー: ${erro}`,
+    erroAplicarCorrecao: (erro) => `修正の適用エラー: ${String(erro)}`,
 };

package/dist/core/messages/ja/analysts/analyst-patterns-usage-messages.js

@@ -16,5 +16,6 @@ export const PadroesUsoMensagens = {
     nonArrowCallback: "'function'を使用したコールバックでアロー関数の方が適切です。() => {}を優先してください。",
     consoleLog: "本番コードでconsole.logが検出されました。削除するか適切なロガーに置き換えてください。",
     uselessConditional: "不要な比較: if (x === true)。if (x) のみを使用してください。",
+    satisfiesUsage: "TypeScript の 'satisfies' キーワードが使用されています — ワイドニングなしで型安全性を保証します",
     erroAnalise: (relPath, erro) => `${relPath}の使用パターン分析に失敗しました: ${erro}`
 };

package/dist/core/messages/ja/analysts/analyst-shell-messages.js

@@ -60,4 +60,19 @@ export const AnalistaShellMensagens = {
     loopOverCommandOutputSugestao: 'グロブを使用: "for f in *"。',
     pipeOverTempfile: 'パイプラインが一時ファイルを置き換えられる可能性があります。',
     pipeOverTempfileSugestao: '一時ファイルの代わりにパイプを使用してください。',
+    // Modern Bash (2026)
+    missingSetU: '"set -u" がありません — 未設定の変数は静かに空に展開されます。',
+    missingSetUSugestao: '変数名のタイポをキャッチするために "set -u" を追加してください。',
+    missingIso: 'IFS=$\'\\n\\t\' がありません — ワードスプリッティングが予期しない動作を引き起こす可能性があります。',
+    missingIsoSugestao: '安全なワードスプリッティングのためにスクリプト先頭に IFS=$\'\\n\\t\' を追加してください。',
+    missingTrap: 'trap ハンドラが見つかりません — シグナル時にクリーンアップがスキップされる可能性があります。',
+    missingTrapSugestao: 'trap ハンドラを追加: trap "cleanup" EXIT INT TERM。',
+    missingMainFn: 'スクリプトに main 関数パターンがありません。',
+    missingMainFnSugestao: 'ロジックを main() でラップし、最後に main "$@" を呼び出してください。',
+    missingCommandV: 'command -v の代わりにハードコードされたパス。',
+    missingCommandVSugestao: '可用性を確認するには "command -v <ツール>" を使用してください。',
+    missingDebugMode: 'スクリプトにデバッグモードがありません — トラブルシューティングが困難です。',
+    missingDebugModeSugestao: 'デバッグトレースのために [[ "${DEBUG:-}" == "true" ]] && set -x を追加してください。',
+    missingInputValidation: 'コマンド引数が検証されていません — 予期しない入力がエラーの原因になる可能性があります。',
+    missingInputValidationSugestao: '先頭で引数を検証: [[ -z "$1" ]] && { echo "使用法: ..."; exit 1; }。',
 };

package/dist/core/messages/ja/analysts/detector-constructions-syntactic-messages.js

@@ -11,4 +11,10 @@ export const DetectorConstrucoesSintaticasMensagens = {
     templateLiteralOveruse: "単純な連結に不要なテンプレートリテラル。'+'演算子を使用してください。",
     unnecessaryObjectSpread: "不要なオブジェクトスプレッド。直接代入'obj.prop = val'の方が効率的です。",
     getterSetterWithoutValidation: "セッターにバリデーションのないgetter/setter。無効なデータを防ぐためバリデーションを追加してください。",
+    // ES2025/ES2026
+    explicitResourceManagement: "'using' を使用した明示的リソース管理が検出されました (ES2026)",
+    temporalApiUsage: "Temporal API の使用が検出されました (ES2026) — Date に代わる最新の日付/時刻 API",
+    iteratorHelperUsage: "イテレータヘルパーメソッドが検出されました (ES2025) — イテラブルに対する遅延評価",
+    setMethodUsage: "新しい Set メソッドが検出されました (ES2025) — 集合演算に使用",
+    mapUpsertUsage: "Map の upsert メソッドが検出されました (ES2026) — .getOrInsert() / .getOrInsertComputed()",
 };