@mocoto/mahoraga 0.14.8 → 0.15.0

package/dist/analysts/github-actions/detectors/detector-workflow-trigger-unsafe.js

@@ -1,20 +1,8 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
-/**
- * [BUSCA] Detector de Workflow Triggers Inseguros para GitHub Actions
- *
- * Detecta configurações de trigger perigosas em workflows:
- * - Push em branches protegidos (main, master, release/*) sem proteção
- * - Workflow_dispatch sem restrições
- * - Schedule em branches sensíveis
- * - Triggers amplos demais (push em wildcards)
- */
 import { parseDocument } from 'yaml';
 import { messages } from '../../../core/messages/index.js';
 import { splitLines } from '../../../shared/helpers/index.js';
 import { criarOcorrencia } from '../../../types/index.js';
 const BRANCHES_PROTEGIDOS = ['main', 'master', 'production', 'release', 'prod'];
-// Actions que modificam o estado do repositório (alta permissão)
 const DANGEROUS_ACTIONS = ['actions/checkout', 'peter-evans/create-or-update-comment', 'peter-evans/create-pull-request', 'marocchino/sticky-pull-request', 'softprops/action-gh-release', 'ncipollo/release-action', 'docker/build-push-action', 'docker/login-action', 'docker/push-action', 'aws-actions/configure-aws-credentials', 'google-github-actions/auth', 'azure/login', 'hashicorp/vault-action'];
 export const detectorWorkflowTriggerInseguro = {
     nome: 'detector-workflow-trigger-inseguro',
@@ -44,16 +32,12 @@ export const detectorWorkflowTriggerInseguro = {
                 }));
                 return ocorrencias;
             }
-            // --- 1. Push em branches protegidos ---
             if (onConfig.push) {
                 const pushConf = onConfig.push;
-                // Se push tem apenas tags, não é push em branches - é disparo por tag
                 if (pushConf.tags && !pushConf.branches && !pushConf['branches-ignore']) {
-                    // Workflow disparado por tags, não por branches - não aplicar esta regra
                 }
                 else {
                     const branches = typeof pushConf === 'object' && pushConf.branches ? Array.isArray(pushConf.branches) ? pushConf.branches : [pushConf.branches] : typeof pushConf === 'object' && pushConf.branches_ignore ? Array.isArray(pushConf.branches_ignore) ? pushConf.branches_ignore : [pushConf.branches_ignore] : undefined;
-                    // Detectar push sem filtro de branches (triggeria em todos os branches)
                     if (typeof pushConf === 'object' && !pushConf.branches && !pushConf.branches_ignore && !pushConf.tags || Array.isArray(pushConf) || typeof pushConf === 'string') {
                         ocorrencias.push(criarOcorrencia({
                             tipo: 'trigger-push-sem-filtro',
@@ -64,7 +48,6 @@ export const detectorWorkflowTriggerInseguro = {
                             sugestao: 'Defina branches específicos em on.push.branches para limitar onde o workflow é executado'
                         }));
                     }
-                    // Verificar se inclui branches protegidos sem paths filter
                     if (branches) {
                         const hasPathsFilter = !!((pushConf.paths ?? pushConf.paths_ignore ?? pushConf['paths-ignore']) ?? pushConf.pathsIgnore);
                         if (!hasPathsFilter) {
@@ -84,9 +67,7 @@ export const detectorWorkflowTriggerInseguro = {
                     }
                 }
             }
-            // --- 2. Pull request sem verificação de branches ---
             if (onConfig.pull_request) {
-                // Detectar pull_request_target
                 if (onConfig.pull_request_target) {
                     ocorrencias.push(criarOcorrencia({
                         tipo: 'trigger-pull-request-target',
@@ -98,7 +79,6 @@ export const detectorWorkflowTriggerInseguro = {
                     }));
                 }
             }
-            // --- 3. Workflow_dispatch sem inputs de validação ---
             if (onConfig.workflow_dispatch) {
                 const dispatchConf = onConfig.workflow_dispatch;
                 if (typeof dispatchConf === 'object' && dispatchConf.inputs) {
@@ -106,11 +86,9 @@ export const detectorWorkflowTriggerInseguro = {
                     for (const [_inputName, inputConfig] of Object.entries(inputs)) {
                         const inputConf = inputConfig;
                         if (inputConf && !inputConf.required) {
-                            // Não é erro, mas pode ser melhorado
                         }
                     }
                 }
-                // workflow_dispatch sem inputs de qualquer tipo é potencialmente perigoso
                 if (typeof dispatchConf !== 'object' || !dispatchConf.inputs) {
                     ocorrencias.push(criarOcorrencia({
                         tipo: 'trigger-workflow-dispatch-sem-inputs',
@@ -122,7 +100,6 @@ export const detectorWorkflowTriggerInseguro = {
                     }));
                 }
             }
-            // --- 4. Schedule em branches sensíveis ---
             if (onConfig.schedule) {
                 const pushConf = onConfig.push;
                 const targetBranches = typeof pushConf === 'object' && pushConf.branches ? Array.isArray(pushConf.branches) ? pushConf.branches : [pushConf.branches] : undefined;
@@ -141,7 +118,6 @@ export const detectorWorkflowTriggerInseguro = {
                     }
                 }
             }
-            // --- 5. Triggers com wildcards excessivamente amplos ---
             const yamlRaw = src;
             if (/on:\s*\n\s*push:\s*\n\s*branches:\s*\n\s*-\s+'\*\*'/m.test(yamlRaw) || /on:\s*\n\s*push:\s*\n\s*branches:\s*\n\s*-\s+"\*\*"/m.test(yamlRaw)) {
                 ocorrencias.push(criarOcorrencia({
@@ -153,10 +129,8 @@ export const detectorWorkflowTriggerInseguro = {
                     sugestao: 'Use padrões mais específicos para limitar os branches monitorados'
                 }));
             }
-            // --- 6. Verificar se workflow executa actions perigosas em triggers de push amplo ---
             if (onConfig.push && !onConfig.pull_request) {
                 const sectionPush = onConfig.push;
-                // Se push tem apenas tags, não é push em branches
                 const isPushToTags = sectionPush.tags && !sectionPush.branches && !sectionPush['branches-ignore'];
                 if (!isPushToTags) {
                     const linhas = splitLines(src);
@@ -179,8 +153,6 @@ export const detectorWorkflowTriggerInseguro = {
             }
         }
         catch {
-            // Fallback para análise por regex se o YAML parsing falhar
-            // Detectar pull_request_target
             if (src.includes('pull_request_target:')) {
                 ocorrencias.push(criarOcorrencia({
                     tipo: 'trigger-pull-request-target',
@@ -191,7 +163,6 @@ export const detectorWorkflowTriggerInseguro = {
                     sugestao: messages.AnalistaGithubActionsMensagens.pullRequestTargetExecutesForkCodeSugestao
                 }));
             }
-            // Detectar push sem filtro
             if (/on:\s*push:\s*$/m.test(src) || /on:\s*\n\s*push:\s*true\s*$/m.test(src)) {
                 ocorrencias.push(criarOcorrencia({
                     tipo: 'trigger-push-sem-filtro',

package/dist/analysts/github-actions/detectors/index.js

@@ -1,4 +1,3 @@
-// SPDX-License-Identifier: MIT
 export * from './detector-dependencies-vulnerable.js';
 export * from './detector-workflow-accessibility.js';
 export * from './detector-workflow-compliance.js';

package/dist/analysts/github-actions/detectors/org-verified.js

@@ -1,32 +1,21 @@
-// SPDX-License-Identifier: MIT
-/**
- * [SHIELD] Organizações/donos verificados de GitHub Actions
- *
- * Actions destes donos são consideradas confiáveis.
- * SHA pinning nestas actions é boa prática de segurança, não suspeito.
- */
 export const ORG_VERIFICADAS = new Set([
-    'actions', // GitHub official actions
-    'github', // GitHub organization
-    'dependabot', // GitHub Dependabot
-    'docker', // Docker official actions
-    'peterevans', // Peter Evans (verified creator)
-    'anchore', // Anchore (security scanning)
-    'aquasecurity', // Aqua Security (trivy)
-    'bridgecrewio', // Bridgecrew (checkov)
-    'ossf', // Open Source Security Foundation
-    'step-security', // StepSecurity
-    'reviewdog', // Reviewdog
-    'julia-actions', // Julia language
-    'ruby', // Ruby language
-    'actions-rs', // Rust actions
-    'dtolnay', // David Tolnay (verified Rust tooling)
-    'softprops', // softprops/action-gh-release (popular release action)
+    'actions',
+    'github',
+    'dependabot',
+    'docker',
+    'peterevans',
+    'anchore',
+    'aquasecurity',
+    'bridgecrewio',
+    'ossf',
+    'step-security',
+    'reviewdog',
+    'julia-actions',
+    'ruby',
+    'actions-rs',
+    'dtolnay',
+    'softprops',
 ]);
-/**
- * Verifica se uma action pertence a uma organização verificada
- * @param actionRef Ex: "actions/checkout", "dependabot/fetch-metadata"
- */
 export function isOrgVerificada(actionRef) {
     const owner = actionRef.split('/')[0];
     return ORG_VERIFICADAS.has(owner);

package/dist/analysts/github-actions/index.js

@@ -1,9 +1,3 @@
-// SPDX-License-Identifier: MIT
-/**
- * [BUSCA] Analistas de GitHub Actions
- *
- * Analista avançado de workflows do GitHub Actions com suporte a plugins.
- */
 export * from './analysts/analyst-github-actions.js';
 export * from './analysts/analyst-github-actions-security-hardening.js';
 export * from './corrections/index.js';

package/dist/analysts/github-actions/reports/generator-report-github-actions.js

@@ -1,9 +1,3 @@
-// SPDX-License-Identifier: MIT
-/**
- * [GRAFICO] Gerador de Relatórios Multi-Formato para GitHub Actions
- *
- * Suporta: JSON, Markdown, HTML, CSV
- */
 import fs from 'node:fs';
 import path from 'node:path';
 import { messages } from '../../../core/messages/index.js';

package/dist/analysts/github-actions/reports/index.js

@@ -1,2 +1 @@
-// SPDX-License-Identifier: MIT
 export * from './generator-report-github-actions.js';

package/dist/analysts/github-actions/scorers/index.js

@@ -1,2 +1 @@
-// SPDX-License-Identifier: MIT
 export * from './scorer-workflow.js';

package/dist/analysts/github-actions/scorers/scorer-workflow.js

@@ -1,14 +1,3 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
-/**
- * [GRAFICO] Pontuador de qualidade GitHub Actions
- *
- * Avalia a qualidade dos workflows baseado em:
- * - Segurança
- * - Caching
- * - Paralelismo
- * - Boas práticas
- */
 import { splitLines } from '../../../shared/helpers/index.js';
 export function pontuarWorkflow(src, _relPath) {
     let score = 0;
@@ -17,7 +6,6 @@ export function pontuarWorkflow(src, _relPath) {
     const strengths = [];
     const _linhas = splitLines(src);
     const srcCompleto = src;
-    // Security - no hardcoded secrets (25 pontos)
     const hardcodedSecrets = (srcCompleto.match(/\b(KEY|TOKEN|SECRET|PASSWORD)\b.*[:=]\s*['"][^'"]+['"]/gi) ?? []).filter(linha => !/\$\{\{/.test(linha)).length;
     if (hardcodedSecrets === 0) {
         score += 25;
@@ -26,7 +14,6 @@ export function pontuarWorkflow(src, _relPath) {
     else {
         issues.push(`${hardcodedSecrets} secret(s) hardcoded`);
     }
-    // SHA pinning (20 pontos)
     const usesLines = srcCompleto.match(/uses:\s*\S+@\S+/g) ?? [];
     const shaPinned = usesLines.filter(u => /@sha256:/.test(u)).length;
     const actionsOnly = usesLines.filter(u => /actions\//.test(u)).length;
@@ -38,7 +25,6 @@ export function pontuarWorkflow(src, _relPath) {
         score += Math.round((shaPinned + actionsOnly) / usesLines.length * 20);
         issues.push(`${usesLines.length - shaPinned - actionsOnly} action(s) sem SHA pinning`);
     }
-    // Caching (15 pontos)
     const hasCache = /actions\/cache|cache-from|cache-to/.test(srcCompleto);
     if (hasCache) {
         score += 15;
@@ -47,7 +33,6 @@ export function pontuarWorkflow(src, _relPath) {
     else {
         issues.push('Sem caching de dependências');
     }
-    // Permissions (15 pontos)
     if (/permissions:/.test(srcCompleto)) {
         score += 15;
         strengths.push('Permissions definidas');
@@ -55,7 +40,6 @@ export function pontuarWorkflow(src, _relPath) {
     else {
         issues.push('Permissions não definidas');
     }
-    // Step names (10 pontos)
     const steps = srcCompleto.match(/-\s*(name:|uses:|run:)/g) ?? [];
     const namedSteps = srcCompleto.match(/-\s*name:/g) ?? [];
     if (steps.length === 0 || namedSteps.length === steps.length) {
@@ -65,7 +49,6 @@ export function pontuarWorkflow(src, _relPath) {
     else {
         issues.push(`${steps.length - namedSteps.length} step(s) sem nome`);
     }
-    // No script injection (15 pontos)
     const injectionRisks = (srcCompleto.match(/\$\{\{\s*github\.event\.\S+\s*\}\}/g) ?? []).filter(metrica => /run:/.test(srcCompleto.substring(Math.max(0, srcCompleto.indexOf(metrica) - 100), srcCompleto.indexOf(metrica)))).length;
     if (injectionRisks === 0) {
         score += 15;

package/dist/analysts/gitlab-ci/analysts/analyst-gitlab-ci.js

@@ -1,10 +1,3 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
-/**
- * [BUSCA] Analista Principal de GitLab CI
- *
- * Analisa a estrutura e qualidade de pipelines do GitLab CI.
- */
 import { parseDocument } from 'yaml';
 import { messages } from '../../../core/messages/index.js';
 import { detectorGitLabCIPerformance } from '../detectors/detector-gitlab-ci-performance.js';
@@ -17,32 +10,26 @@ export const analistaGitLabCI = {
     aplicar: async (conteudo, relPath, _ast, _fc, contexto) => {
         const ocorrencias = [];
         try {
-            // 1. Executar detectores baseados em regex (rápidos)
             const securityResults = await Promise.resolve(detectorGitLabCISecurity.aplicar(conteudo, relPath, null, _fc, contexto));
             const performanceResults = await Promise.resolve(detectorGitLabCIPerformance.aplicar(conteudo, relPath, null, _fc, contexto));
             ocorrencias.push(...securityResults, ...performanceResults);
-            // 2. Análise Estrutural via YAML AST (para detecções mais complexas)
             const doc = parseDocument(conteudo);
             const pipeline = doc.toJS();
             {
-                // Exemplo: Detecção de jobs sem stage definido
                 const stages = pipeline.stages ?? ['build', 'test', 'deploy'];
-                void stages; // Reservado para futuras detecções de stages inválidos
+                void stages;
                 for (const [key, value] of Object.entries(pipeline)) {
-                    // Ignorar palavras reservadas
                     if (['image', 'services', 'stages', 'types', 'before_script', 'after_script', 'variables', 'cache', 'include', 'workflow'].includes(key)) {
                         continue;
                     }
-                    // Se o valor for um objeto com 'script', provavelmente é um job
                     const job = value;
                     if (job.script || job.trigger || job.extends) {
-                        // Detecção de job muito longo (ex: mais de 15 linhas de script)
                         if (Array.isArray(job.script) && job.script.length > 15) {
                             ocorrencias.push({
                                 tipo: 'GITLAB_CI_JOB_TOO_LONG',
                                 mensagem: messages.AnalistaGitlabCiMensagens.jobScriptMuitoLongo(key, job.script.length),
                                 relPath,
-                                linha: 1, // Precisaria de mapeamento de linha do YAML para ser exato
+                                linha: 1,
                                 nivel: 'info',
                                 sugestao: 'Considere extrair o script para um arquivo separado ou quebrar em múltiplos jobs/steps'
                             });
@@ -52,7 +39,6 @@ export const analistaGitLabCI = {
             }
         }
         catch {
-            // Silenciar erros de parse no momento da análise para não travar o processo
         }
         return ocorrencias;
     }

package/dist/analysts/gitlab-ci/corrections/autofix-engine.js

@@ -1,4 +1,3 @@
-// SPDX-License-Identifier: MIT
 import { parseDocument } from 'yaml';
 export class AutofixEngine {
     aplicarFixes(content, fixers) {
@@ -13,7 +12,7 @@ export class AutofixEngine {
             try {
                 fix(doc);
             }
-            catch { /* skip */ }
+            catch { }
         }
         return doc.toString();
     }

package/dist/analysts/gitlab-ci/corrections/correction-gitlab-ci.js

@@ -1,5 +1,3 @@
-// SPDX-License-Identifier: MIT
-// @mahoraga-disable ml-deep-nesting
 import { messages } from '../../../core/messages/index.js';
 import { splitLines } from '../../../shared/helpers/index.js';
 import { criarOcorrencia } from '../../../types/index.js';

package/dist/analysts/gitlab-ci/corrections/index.js

@@ -1,3 +1,2 @@
-// SPDX-License-Identifier: MIT
 export * from './autofix-engine.js';
 export * from './correction-gitlab-ci.js';

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-performance.js

@@ -1,13 +1,3 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
-/**
- * [BUSCA] Detector de Performance para GitLab CI
- *
- * Detecta problemas de performance em pipelines:
- * - Falta de cache
- * - Falta de interruptible (cancelamento automático)
- * - Artifacts sem expiração
- */
 import { messages } from '../../../core/messages/index.js';
 import { criarOcorrencia } from '../../../types/index.js';
 export const detectorGitLabCIPerformance = {
@@ -21,7 +11,6 @@ export const detectorGitLabCIPerformance = {
         }
         const ocorrencias = [];
         const linhas = src.split('\n');
-        // 1. Falta de cache
         if (!/cache:/.test(src)) {
             ocorrencias.push(criarOcorrencia({
                 tipo: 'gitlab-ci-missing-cache',
@@ -32,7 +21,6 @@ export const detectorGitLabCIPerformance = {
                 sugestao: 'Use cache para dependências (ex: node_modules, .cache) para acelerar o pipeline'
             }));
         }
-        // 2. Uso de interruptible
         if (!/interruptible:/.test(src)) {
             ocorrencias.push(criarOcorrencia({
                 tipo: 'gitlab-ci-missing-interruptible',
@@ -45,7 +33,6 @@ export const detectorGitLabCIPerformance = {
         }
         linhas.forEach((linha, index) => {
             const numeroLinha = index + 1;
-            // 3. Artifacts sem expiração
             if (/artifacts:/.test(linha)) {
                 const nextLines = src.split('\n').slice(index, index + 5).join('\n');
                 if (!/expire_in:/.test(nextLines)) {

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-security.js

@@ -1,13 +1,3 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
-/**
- * [BUSCA] Detector de Segurança para GitLab CI
- *
- * Detecta vulnerabilidades em pipelines:
- * - Imagens sem versão específica (latest)
- * - Secrets hardcoded
- * - Script injection
- */
 import { messages } from '../../../core/messages/index.js';
 import { criarOcorrencia } from '../../../types/index.js';
 export const detectorGitLabCISecurity = {
@@ -23,8 +13,6 @@ export const detectorGitLabCISecurity = {
         const linhas = src.split('\n');
         linhas.forEach((linha, index) => {
             const numeroLinha = index + 1;
-            // 1. Imagens sem versão (latest)
-            // Detecta 'image: name:latest' ou 'image: name' sem dois pontos
             if (/\bimage:\s*[^\s@]+:latest\b/.test(linha) || (/\bimage:\s*[^\s@:]+$/.test(linha.trim()) && linha.includes('image:'))) {
                 ocorrencias.push(criarOcorrencia({
                     tipo: 'gitlab-ci-image-latest',
@@ -35,7 +23,6 @@ export const detectorGitLabCISecurity = {
                     sugestao: 'Use uma versão específica da imagem (ex: alpine:3.18) para garantir builds reproduzíveis'
                 }));
             }
-            // 2. Variáveis sensíveis hardcoded
             if (/\b(TOKEN|SECRET|PASSWORD|KEY)\b.*[:=]\s*['"][^'"]+['"]/i.test(linha) && !/\$\{/.test(linha)) {
                 ocorrencias.push(criarOcorrencia({
                     tipo: 'gitlab-ci-hardcoded-secret',
@@ -46,7 +33,6 @@ export const detectorGitLabCISecurity = {
                     sugestao: 'Use variáveis de ambiente do GitLab (Settings > CI/CD > Variables) e referencie com $VAR'
                 }));
             }
-            // 3. Script injection
             if (/\$\{\s*(CI_COMMIT_TITLE|CI_COMMIT_DESCRIPTION|GITLAB_USER_NAME)\s*\}/.test(linha) && /\s*-\s+/.test(linha)) {
                 ocorrencias.push(criarOcorrencia({
                     tipo: 'gitlab-ci-script-injection',

package/dist/analysts/gitlab-ci/detectors/detector-gitlab-ci-structure.js

@@ -1,5 +1,3 @@
-// SPDX-License-Identifier: MIT
-// @mahoraga-disable ml-deep-nesting
 import { parseDocument } from 'yaml';
 import { messages } from '../../../core/messages/index.js';
 import { criarOcorrencia } from '../../../types/index.js';
@@ -52,7 +50,7 @@ export const detectorGitLabCIEstrutura = {
                 }));
             }
         }
-        catch { /* silent parse fail */ }
+        catch { }
         return ocorrencias;
     }
 };

package/dist/analysts/gitlab-ci/detectors/index.js

@@ -1,4 +1,3 @@
-// SPDX-License-Identifier: MIT
 export * from './detector-gitlab-ci-performance.js';
 export * from './detector-gitlab-ci-security.js';
 export * from './detector-gitlab-ci-structure.js';

package/dist/analysts/gitlab-ci/index.js

@@ -1,7 +1,3 @@
-// SPDX-License-Identifier: MIT
-/**
- * [BUSCA] Analistas de GitLab CI
- */
 export * from './analysts/analyst-gitlab-ci.js';
 export * from './corrections/index.js';
 export * from './detectors/index.js';

package/dist/analysts/gitlab-ci/reports/generator-report-gitlab-ci.js

@@ -1,4 +1,3 @@
-// SPDX-License-Identifier: MIT
 import fs from 'node:fs';
 import path from 'node:path';
 import { messages } from '../../../core/messages/index.js';

package/dist/analysts/gitlab-ci/reports/index.js

@@ -1,2 +1 @@
-// SPDX-License-Identifier: MIT
 export * from './generator-report-gitlab-ci.js';

package/dist/analysts/gitlab-ci/scorers/index.js

@@ -1,2 +1 @@
-// SPDX-License-Identifier: MIT
 export * from './scorer-gitlab-ci.js';

package/dist/analysts/gitlab-ci/scorers/scorer-gitlab-ci.js

@@ -1,4 +1,3 @@
-// SPDX-License-Identifier: MIT
 import { splitLines } from '../../../shared/helpers/index.js';
 export function pontuarGitLabCI(src, _relPath) {
     let score = 0;

package/dist/analysts/go/analysts/analyst-best-practices.js

@@ -1,9 +1,7 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
 import { messages } from '../../../core/messages/index.js';
 import { createLineLookup, maskGoComments } from '../../../shared/helpers/index.js';
 import { criarAnalista, criarOcorrencia } from '../../../types/index.js';
-const disableEnv = process.env.SUKUNA_DISABLE_PLUGIN_GO === '1';
+const disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_GO === '1';
 function warn(message, relPath, line, nivel) {
     return criarOcorrencia({
         relPath,
@@ -18,12 +16,10 @@ function collectBestPractices(src, relPath) {
     const ocorrencias = [];
     const lineOf = createLineLookup(src).lineAt;
     const scan = maskGoComments(src);
-    // Magic numbers
     for (const match of scan.matchAll(/(?:if|case|return|switch|default|for|&&|\|\|)\s+.*[=!]=\s*(\d{4,})\b/g)) {
         const line = lineOf(match.index);
         ocorrencias.push(warn(messages.GoMensagens.magicNumber, relPath, line, messages.SeverityNiveis.suggestion));
     }
-    // Excessive function length
     const funcMatches = src.matchAll(/(?:^|\n)\s*func\s+\w+.*?\{/gs);
     for (const funcMatch of funcMatches) {
         const startIdx = funcMatch.index + funcMatch[0].length;
@@ -45,12 +41,10 @@ function collectBestPractices(src, relPath) {
             ocorrencias.push(warn(messages.GoMensagens.longFunction, relPath, line));
         }
     }
-    // Global variables
     for (const match of scan.matchAll(/^var\s+\w+\s+(?:[a-zA-Z]+\s*=\s*|$)/gm)) {
         const line = lineOf(match.index);
         ocorrencias.push(warn(messages.GoMensagens.globalVar, relPath, line));
     }
-    // Naked returns in named return functions
     for (const match of scan.matchAll(/\breturn\b(?!\s+\w)/gm)) {
         const line = lineOf(match.index);
         const srcBefore = src.slice(0, match.index);
@@ -62,7 +56,6 @@ function collectBestPractices(src, relPath) {
             }
         }
     }
-    // Error variable naming convention
     for (const match of scan.matchAll(/\b(err\w*)\s*:?=\s*(?:fmt|errors)\.(Errorf|New)\(/g)) {
         const varName = match[1];
         if (varName !== 'err' && !varName.startsWith('err')) {

package/dist/analysts/go/analysts/analyst-concurrency.js

@@ -1,9 +1,7 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
 import { messages } from '../../../core/messages/index.js';
 import { createLineLookup, maskGoComments } from '../../../shared/helpers/index.js';
 import { criarAnalista, criarOcorrencia } from '../../../types/index.js';
-const disableEnv = process.env.SUKUNA_DISABLE_PLUGIN_GO === '1';
+const disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_GO === '1';
 function warn(message, relPath, line, nivel) {
     return criarOcorrencia({
         relPath,
@@ -18,7 +16,6 @@ function collectConcurrencyIssues(src, relPath) {
     const ocorrencias = [];
     const lineOf = createLineLookup(src).lineAt;
     const scan = maskGoComments(src);
-    // Defer inside loops
     for (const match of scan.matchAll(/^\s*defer\s+/gm)) {
         const line = lineOf(match.index);
         const lines = scan.split('\n');
@@ -27,7 +24,6 @@ function collectConcurrencyIssues(src, relPath) {
             ocorrencias.push(warn(messages.GoMensagens.deferInLoop, relPath, line));
         }
     }
-    // Send on unbuffered channel in same goroutine
     for (const match of scan.matchAll(/(\w+)\s*<-\s*(\w+)/g)) {
         const line = lineOf(match.index);
         const chanDeclPattern = new RegExp(`make\\s*\\(\\s*chan\\s+\\w+\\s*\\)`);
@@ -35,7 +31,6 @@ function collectConcurrencyIssues(src, relPath) {
             ocorrencias.push(warn(messages.GoMensagens.unbufferedChanSend, relPath, line));
         }
     }
-    // Select without default case (potential blocking)
     for (const match of scan.matchAll(/\bselect\s*\{/g)) {
         const blockStart = match.index;
         const block = src.slice(blockStart, blockStart + 500);
@@ -44,7 +39,6 @@ function collectConcurrencyIssues(src, relPath) {
             ocorrencias.push(warn('select without default case may block indefinitely', relPath, line, messages.SeverityNiveis.warning));
         }
     }
-    // Mutex Lock without defer Unlock
     for (const match of scan.matchAll(/(\w+)\.Lock\s*\(\)/g)) {
         const line = lineOf(match.index);
         const varName = match[1];

package/dist/analysts/go/analysts/analyst-go.js

@@ -1,9 +1,7 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
 import { messages } from '../../../core/messages/index.js';
 import { createLineLookup, maskGoComments } from '../../../shared/helpers/index.js';
 import { criarAnalista, criarOcorrencia } from '../../../types/index.js';
-const disableEnv = process.env.SUKUNA_DISABLE_PLUGIN_GO === '1';
+const disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_GO === '1';
 function warn(message, relPath, line, nivel) {
     return criarOcorrencia({
         relPath,
@@ -18,7 +16,6 @@ function collectGeneralIssues(src, relPath) {
     const ocorrencias = [];
     const lineOf = createLineLookup(src).lineAt;
     const scan = maskGoComments(src);
-    // Package naming convention
     const packageMatch = scan.match(/^\s*package\s+(\w+)/m);
     if (packageMatch) {
         const pkgName = packageMatch[1];
@@ -27,7 +24,6 @@ function collectGeneralIssues(src, relPath) {
             ocorrencias.push(warn(`Package name '${pkgName}' should be lowercase without underscores or hyphens`, relPath, line, messages.SeverityNiveis.suggestion));
         }
     }
-    // Missing package comment (excluding main and test packages)
     if (packageMatch && !/^(main|\w+_test)$/.test(packageMatch[1])) {
         const srcBeforePackage = src.slice(0, packageMatch.index ?? 0);
         if (!/\/\/\s*(Package|pacote)\s/i.test(srcBeforePackage) && !/\/\*[\s\S]*?(Package|pacote)/i.test(srcBeforePackage)) {
@@ -35,7 +31,6 @@ function collectGeneralIssues(src, relPath) {
             ocorrencias.push(warn(`Package '${packageMatch[1]}' missing package-level comment`, relPath, line, messages.SeverityNiveis.suggestion));
         }
     }
-    // Blank import without init or comment
     for (const match of scan.matchAll(/_ "(.*?)"/g)) {
         const line = lineOf(match.index);
         const importPath = match[1];
@@ -44,7 +39,6 @@ function collectGeneralIssues(src, relPath) {
             ocorrencias.push(warn(`Blank import '${importPath}' should have a comment explaining why`, relPath, line, messages.SeverityNiveis.info));
         }
     }
-    // Receiver naming convention
     for (const match of scan.matchAll(/func\s+\((\w+)\s+\*?\w+\)\s+\w+/g)) {
         const receiver = match[1];
         if (receiver.length > 2 && !/^[a-z]{1,2}$/.test(receiver)) {
@@ -52,7 +46,6 @@ function collectGeneralIssues(src, relPath) {
             ocorrencias.push(warn(`Receiver '${receiver}' should be 1-2 lowercase letters; prefer '${receiver[0].toLowerCase()}'`, relPath, line, messages.SeverityNiveis.suggestion));
         }
     }
-    // Deeply nested conditionals (arrow code)
     let maxDepth = 0;
     const lines = src.split('\n');
     for (const line of lines) {