@mocoto/mahoraga 0.14.8 → 0.15.0

package/dist/analysts/xml/analysts/analyst-xml.js

@@ -1,9 +1,7 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
 import { messages } from '../../../core/messages/index.js';
 import { createLineLookup, maskXmlNonCode } from '../../../shared/helpers/index.js';
 import { criarAnalista, criarOcorrencia } from '../../../types/index.js';
-const disableEnv = process.env.SUKUNA_DISABLE_PLUGIN_XML === '1';
+const disableEnv = process.env.MAHORAGA_DISABLE_PLUGIN_XML === '1';
 function warn(message, relPath, line, nivel = messages.SeverityNiveis.warning) {
     return criarOcorrencia({
         relPath,
@@ -35,7 +33,6 @@ function collectXmlIssues(src, relPath) {
     const ocorrencias = [];
     const scan = maskXmlNonCode(src);
     const lineOf = createLineLookup(scan).lineAt;
-    // Prolog (opcional): verificar encoding
     const prologMatch = scan.match(/^<\?xml\s+([^?]*)\?>/i);
     if (prologMatch) {
         const prologContent = prologMatch[1];
@@ -50,13 +47,11 @@ function collectXmlIssues(src, relPath) {
             ocorrencias.push(warn(messages.XmlMensagens.xmlPrologAusente, relPath, 1, messages.SeverityNiveis.info));
         }
     }
-    // Missing root element detection
     const rootTagRegex = /^\s*<([a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?)(?:\s[^>]*)?>/m;
     const rootMatch = scan.match(rootTagRegex);
     if (!rootMatch && /<\w/.test(scan)) {
         ocorrencias.push(warn(messages.XmlMensagens.missingRootElement, relPath, 1, messages.SeverityNiveis.error));
     }
-    // Tag structure validation with case mismatch detection
     const tagRegex = /<\/?([a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?)(?:\s[^>]*)?\/?>/g;
     let match;
     const tagStack = [];
@@ -87,7 +82,6 @@ function collectXmlIssues(src, relPath) {
     if (tagStack.length > 0) {
         ocorrencias.push(warn(messages.XmlMensagens.unterminatedElement, relPath, lineOf(scan.length), messages.SeverityNiveis.error));
     }
-    // Self-closing mismatch detection (empty element with separate close)
     const selfClosingRegex = /<([a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?)\s+[^>]*\/\s*>/g;
     while ((match = selfClosingRegex.exec(scan)) !== null) {
         const elName = match[1];
@@ -98,24 +92,20 @@ function collectXmlIssues(src, relPath) {
             ocorrencias.push(warn(messages.XmlMensagens.selfClosingMismatch, relPath, line, messages.SeverityNiveis.warning));
         }
     }
-    // Deep nesting detection
     const nestingDepth = countNestingDepth(scan);
     if (nestingDepth > 20) {
         ocorrencias.push(warn(messages.XmlMensagens.deepNesting, relPath, 1, messages.SeverityNiveis.warning));
     }
-    // Too many attributes per element
     const attrCountRegex = /<[a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?(\s+[a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?\s*=\s*['"][^'"]*['"]){10,}[^>]*>/g;
     while ((match = attrCountRegex.exec(scan)) !== null) {
         const line = lineOf(match.index);
         ocorrencias.push(warn(messages.XmlMensagens.tooManyAttributes, relPath, line, messages.SeverityNiveis.warning));
     }
-    // Unquoted attribute values
     const unquotedAttrRegex = /<[a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?(\s+[a-zA-Z_][\w.-]*\s*=\s*[^'"\s>][^\s>]*)/g;
     while ((match = unquotedAttrRegex.exec(scan)) !== null) {
         const line = lineOf(match.index);
         ocorrencias.push(warn(messages.XmlMensagens.attributeQuotesMissing, relPath, line, messages.SeverityNiveis.error));
     }
-    // Namespace inconsistencies
     const xmlnsRegex = /xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"][^'"]*['"]/g;
     const declaredNamespaces = new Set();
     while ((match = xmlnsRegex.exec(scan)) !== null) {
@@ -132,7 +122,6 @@ function collectXmlIssues(src, relPath) {
             ocorrencias.push(warn(messages.XmlMensagens.namespaceUndeclared(prefix), relPath, line, messages.SeverityNiveis.warning));
         }
     }
-    // Check for namespace URI mismatches
     const nsUris = new Map();
     for (const metrica of scan.matchAll(/xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"]([^'"]*)['"]/g)) {
         const prefix = metrica[1] || '__default__';
@@ -146,7 +135,6 @@ function collectXmlIssues(src, relPath) {
             ocorrencias.push(warn(messages.XmlMensagens.namespaceMismatch, relPath, 1, messages.SeverityNiveis.warning));
         }
     }
-    // DOCTYPE + ENTITY (XXE)
     for (const metrica of scan.matchAll(/<!DOCTYPE\b[\s\S]*?(?:\]\s*>|>)/gi)) {
         const chunk = metrica[0];
         const hasExternalId = /\b(SYSTEM|PUBLIC)\b/i.test(chunk);
@@ -170,20 +158,16 @@ function collectXmlIssues(src, relPath) {
         }
         ocorrencias.push(warn(hasExternal ? messages.XmlMensagens.entidadeExternaDetectada : messages.XmlMensagens.entidadeDetectada, relPath, line, hasExternal ? messages.SeverityNiveis.error : messages.SeverityNiveis.warning));
     }
-    // XInclude
     for (const metrica of scan.matchAll(/<\s*(?:xi|xinclude):include\b[^>]*>/gi)) {
         ocorrencias.push(warn(messages.XmlMensagens.xincludeDetectado, relPath, lineOf(metrica.index)));
     }
-    // CDATA overuse (when regular escaping would suffice)
     const cdataSections = scan.match(/<!\[CDATA\[[\s\S]*?\]\]>/g) ?? [];
     if (cdataSections.length > 3) {
         ocorrencias.push(warn(messages.XmlMensagens.cdataOveruse, relPath, 1, messages.SeverityNiveis.info));
     }
-    // CDATA em atributos (invalido)
     for (const metrica of scan.matchAll(/=\s*['"]\s*<!\[CDATA\[[\s\S]*?\]\]>\s*['"]/gi)) {
         ocorrencias.push(warn(messages.XmlMensagens.cdataInAttribute, relPath, lineOf(metrica.index), messages.SeverityNiveis.error));
     }
-    // Processing instructions in content
     const piRegex = /<\?(?!xml\b)[a-zA-Z_][\w.-]*\s[^?]*\?>/g;
     let piMatch;
     while ((piMatch = piRegex.exec(scan)) !== null) {
@@ -192,18 +176,15 @@ function collectXmlIssues(src, relPath) {
             ocorrencias.push(warn(messages.XmlMensagens.processingInstructionInContent, relPath, line, messages.SeverityNiveis.info));
         }
     }
-    // XSD validation missing (document-level XML with no xsi:schemaLocation or noNamespaceSchemaLocation)
     if (prologMatch && scan.length > 200) {
         const hasSchemaRef = /xsi:schemaLocation|noNamespaceSchemaLocation|xsi:noNamespaceSchemaLocation/i.test(scan);
         if (!hasSchemaRef) {
             ocorrencias.push(warn(messages.XmlMensagens.xsdValidationMissing, relPath, 1, messages.SeverityNiveis.info));
         }
     }
-    // Oversized XML that should use streaming
     if (src.length > 500000) {
         ocorrencias.push(warn(messages.XmlMensagens.oversizedXml, relPath, 1, messages.SeverityNiveis.info));
     }
-    // Deprecated XML constructs (like <!ELEMENT>, <!ATTLIST> in DTD subset)
     if (/<!ELEMENT\b|<!ATTLIST\b/i.test(scan)) {
         ocorrencias.push(warn(messages.XmlMensagens.deprecatedXmlConstruct, relPath, 1, messages.SeverityNiveis.info));
     }

package/dist/analysts/xml/corrections/correction-xml.js

@@ -1,13 +1,3 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
-/**
- * [CHAVE-INGLESA] Correções automáticas para XML
- *
- * Fornece correções sugeridas para problemas comuns em XML:
- * - Remover DOCTYPE
- * - Declarar namespaces
- * - Remover entidades externas
- */
 import { messages } from '../../../core/messages/index.js';
 import { splitLines } from '../../../shared/helpers/index.js';
 import { criarOcorrencia } from '../../../types/index.js';
@@ -35,7 +25,6 @@ export function detectarCorrecoesXml(src, _relPath) {
             });
         }
     });
-    // Check for undeclared namespaces
     const declaredNs = new Set();
     for (const metrica of src.matchAll(/xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"]([^'"]*)['"]/g)) {
         if (metrica[1]) {

package/dist/analysts/xml/corrections/index.js

@@ -1,2 +1 @@
-// SPDX-License-Identifier: MIT
 export * from './correction-xml.js';

package/dist/analysts/xml/detectors/detector-xml-security.js

@@ -1,19 +1,3 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
-/**
- * [BUSCA] Detector de segurança XML
- *
- * Detecta vulnerabilidades em XML:
- * - XXE (XML External Entity) com expansão e bomba
- * - DOCTYPE com entidades externas
- * - XInclude com parse="xml"
- * - XSLT injection
- * - XPath injection
- * - SOAP action spoofing
- * - Entity expansion DoS
- * - Namespaces não declarados
- * - CDATA em atributos
- */
 import { messages } from '../../../core/messages/index.js';
 import { maskXmlNonCode, splitLines } from '../../../shared/helpers/index.js';
 import { criarOcorrencia } from '../../../types/index.js';
@@ -181,7 +165,6 @@ export const detectorXmlSecurity = {
                 }
             }
         });
-        // XML Bomb detection recursive entity expansion
         const entidades = {};
         for (const metrica of scan.matchAll(/<!ENTITY\s+(\S+)\s+['"]([^'"]*)['"]\s*>/gi)) {
             entidades[metrica[1]] = metrica[2] || '';
@@ -212,7 +195,6 @@ export const detectorXmlSecurity = {
                 }
             }
         }
-        // Undeclared namespaces
         const declaredNs = new Set();
         for (const metrica of scan.matchAll(/xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"][^'"]*['"]/g)) {
             if (metrica[1]) {
@@ -232,7 +214,6 @@ export const detectorXmlSecurity = {
                 }));
             }
         }
-        // Run registered plugin detectors
         for (const detector of detectoresRegistrados) {
             try {
                 const resultado = detector.testar(src, { relPath });
@@ -241,7 +222,6 @@ export const detectorXmlSecurity = {
                 }
             }
             catch {
-                // Silently skip detector errors
             }
         }
         return ocorrencias;

package/dist/analysts/xml/detectors/detector-xml.js

@@ -1,13 +1,8 @@
-/**
- * Detector especializado para projetos baseados em XML
- * Detecta projetos web que usam XML (RSS, SOAP, SVG, configs web)
- */
 export function detectarArquetipoXML(arquivos) {
     const xmlArquivos = arquivos.filter(arquivo => arquivo.endsWith('.xml'));
     if (xmlArquivos.length === 0) {
         return [];
     }
-    // Detecta projetos web com XMLs (RSS, SOAP, sitemap, etc)
     const hasWebXml = xmlArquivos.some(arquivo => arquivo.includes('web.xml') || arquivo.includes('sitemap.xml') || arquivo.includes('rss.xml') || arquivo.includes('feed.xml') || arquivo.includes('soap'));
     if (hasWebXml) {
         return [{
@@ -35,7 +30,6 @@ export function detectarArquetipoXML(arquivos) {
                 }
             }];
     }
-    // Detecta SVG (gráficos vetoriais)
     const hasSvg = xmlArquivos.some(arquivo => arquivo.endsWith('.svg'));
     if (hasSvg) {
         return [{
@@ -63,7 +57,6 @@ export function detectarArquetipoXML(arquivos) {
                 }
             }];
     }
-    // Projeto com XMLs genéricos (configurações, dados)
     if (xmlArquivos.length >= 3) {
         return [{
                 nome: 'xml-config-project',

package/dist/analysts/xml/detectors/index.js

@@ -1,3 +1,2 @@
-// SPDX-License-Identifier: MIT
 export * from './detector-xml.js';
 export * from './detector-xml-security.js';

package/dist/analysts/xml/index.js

@@ -1,9 +1,3 @@
-// SPDX-License-Identifier: MIT
-/**
- * [BUSCA] Analistas de XML
- *
- * Heurísticas leves para XML (foco em segurança/XXE e compatibilidade).
- */
 export * from './analysts/analyst-xml.js';
 export * from './corrections/index.js';
 export * from './detectors/index.js';

package/dist/analysts/xml/scorers/index.js

@@ -1,2 +1 @@
-// SPDX-License-Identifier: MIT
 export * from './scorer-xml.js';

package/dist/analysts/xml/scorers/scorer-xml.js

@@ -1,18 +1,7 @@
-// @mahoraga-disable ml-deep-nesting
-// SPDX-License-Identifier: MIT
-/**
- * [GRAFICO] Pontuador de qualidade XML
- *
- * Avalia a qualidade do XML em 3 dimensoes:
- * - Seguranca (XXE, entidades, XInclude)
- * - Estrutura (well-formedness, encoding, encoding tag balance)
- * - Qualidade (namespaces, boas praticas, schema, CDATA)
- */
 import { maskXmlNonCode } from '../../../shared/helpers/index.js';
 function scoreSecurity(scan, issues, strengths) {
     let score = 0;
     const maxScore = 100;
-    // No DOCTYPE (30 pontos)
     if (!/<!DOCTYPE\b/i.test(scan)) {
         score += 30;
         strengths.push('Sem DOCTYPE (mais seguro contra XXE)');
@@ -20,7 +9,6 @@ function scoreSecurity(scan, issues, strengths) {
     else {
         issues.push('DOCTYPE presente - risco XXE');
     }
-    // No external entities (25 pontos)
     const externalEntities = (scan.match(/<!ENTITY\b.*\b(SYSTEM|PUBLIC)\b/gi) ?? []).length;
     if (externalEntities === 0) {
         score += 25;
@@ -29,7 +17,6 @@ function scoreSecurity(scan, issues, strengths) {
     else {
         issues.push(`${externalEntities} entidade(s) externa(s)`);
     }
-    // No XInclude (15 pontos)
     if (!/<\s*(?:xi|xinclude):include\b/i.test(scan)) {
         score += 10;
         strengths.push('Sem XInclude');
@@ -37,7 +24,6 @@ function scoreSecurity(scan, issues, strengths) {
     else {
         issues.push('XInclude detectado');
     }
-    // No entity expansion risk (10 pontos)
     const entityRefs = scan.match(/<!ENTITY\s+\S+\s+['"][^'"]*&[^'"]*['"]/gi);
     if (!entityRefs || entityRefs.length === 0) {
         score += 10;
@@ -46,7 +32,6 @@ function scoreSecurity(scan, issues, strengths) {
     else {
         issues.push(`Entidades com referencias a outras entidades (expansao)`);
     }
-    // No XSLT / XPath injection (10 pontos)
     if (!/<\s*(?:xsl|xslt):(?:stylesheet|transform)\b/i.test(scan)) {
         score += 10;
         strengths.push('Sem XSLT processing');
@@ -54,7 +39,6 @@ function scoreSecurity(scan, issues, strengths) {
     else {
         issues.push('XSLT presente - risco de injecao');
     }
-    // SOAP safety (10 pontos)
     if (!/SOAPAction\s*:/i.test(scan)) {
         score += 5;
         strengths.push('Sem SOAPAction (seguro)');
@@ -67,7 +51,6 @@ function scoreSecurity(scan, issues, strengths) {
 function scoreStructure(scan, issues, strengths) {
     let score = 0;
     const maxScore = 100;
-    // Has prolog (15 pontos)
     if (/^<\?xml\s+/i.test(scan.trim())) {
         score += 15;
         strengths.push('Tem declaracao XML (prolog)');
@@ -75,7 +58,6 @@ function scoreStructure(scan, issues, strengths) {
     else {
         issues.push('Sem declaracao <?xml ?>');
     }
-    // Has encoding in prolog (15 pontos)
     if (/encoding\s*=\s*['"][^'"]*['"]/i.test(scan)) {
         score += 15;
         strengths.push('Declaracao de encoding presente');
@@ -83,7 +65,6 @@ function scoreStructure(scan, issues, strengths) {
     else {
         issues.push('Sem declaracao de encoding');
     }
-    // Well-formedness (tag balance - 30 pontos)
     const openTags = (scan.match(/<([a-zA-Z_][\w.-]*)((?:\s[^>]*)?)>/g) ?? [])
         .filter(t => !t.endsWith('/>') && !/<\?/.test(t));
     const closeTags = scan.match(/<\/([a-zA-Z_][\w.-]*)>/g) ?? [];
@@ -95,7 +76,6 @@ function scoreStructure(scan, issues, strengths) {
         score += 10;
         issues.push('Tags XML desbalanceadas');
     }
-    // No deep nesting (15 pontos)
     let maxDepth = 0;
     let currentDepth = 0;
     const tagRegex = /<\/?([a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?)(?:\s[^>]*)?\/?>/g;
@@ -124,7 +104,6 @@ function scoreStructure(scan, issues, strengths) {
     else {
         issues.push('Aninhamento excessivo');
     }
-    // Attribute quotes check (10 pontos)
     if (!/<[a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?(\s+[a-zA-Z_][\w.-]*\s*=\s*[^'"\s>][^\s>]*)/g.test(scan)) {
         score += 10;
         strengths.push('Atributos corretamente com aspas');
@@ -132,7 +111,6 @@ function scoreStructure(scan, issues, strengths) {
     else {
         issues.push('Atributos sem aspas encontrados');
     }
-    // Self-closing consistency (15 pontos)
     const selfClosing = scan.match(/<[a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?\s+[^>]*\/\s*>/g) ?? [];
     const inconsistent = selfClosing.filter(tag => {
         const name = tag.match(/<([a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?)/)?.[1];
@@ -154,7 +132,6 @@ function scoreStructure(scan, issues, strengths) {
 function scoreQuality(scan, issues, strengths) {
     let score = 0;
     const maxScore = 100;
-    // Namespaces declared (20 pontos)
     const declaredNs = new Set();
     for (const metrica of scan.matchAll(/xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"][^'"]*['"]/g)) {
         if (metrica[1]) {
@@ -180,7 +157,6 @@ function scoreQuality(scan, issues, strengths) {
     else {
         issues.push(`${undeclaredNs.length} namespace(s) nao declarado(s): ${undeclaredNs.join(', ')}`);
     }
-    // Namespace consistency (15 pontos)
     const nsUris = new Map();
     for (const metrica of scan.matchAll(/xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"]([^'"]*)['"]/g)) {
         const prefix = metrica[1] || '__default__';
@@ -203,7 +179,6 @@ function scoreQuality(scan, issues, strengths) {
     else {
         issues.push('Inconsistencia de namespace URIs');
     }
-    // Has XSD schema reference (15 pontos)
     if (/xsi:schemaLocation|noNamespaceSchemaLocation|xsi:noNamespaceSchemaLocation/i.test(scan)) {
         score += 15;
         strengths.push('Referencia a schema XSD presente');
@@ -211,7 +186,6 @@ function scoreQuality(scan, issues, strengths) {
     else if (/^<\?xml\s+/i.test(scan.trim()) && scan.length > 200) {
         issues.push('Sem referencia a XSD schema');
     }
-    // CDATA usage (10 pontos)
     const cdataCount = (scan.match(/<!\[CDATA\[/g) ?? []).length;
     if (cdataCount === 0) {
         score += 10;
@@ -219,12 +193,10 @@ function scoreQuality(scan, issues, strengths) {
     }
     else if (cdataCount <= 3) {
         score += 5;
-        // CDATA moderado e aceitavel
     }
     else {
         issues.push(`Uso excessivo de CDATA (${cdataCount} secoes)`);
     }
-    // Processing instructions check (10 pontos)
     const piCount = (scan.match(/<\?(?!xml\b)[a-zA-Z_][\w.-]*\s[^?]*\?>/g) ?? []).length;
     if (piCount === 0) {
         score += 10;
@@ -233,7 +205,6 @@ function scoreQuality(scan, issues, strengths) {
     else {
         issues.push(`Instrucoes de processamento no conteudo (${piCount})`);
     }
-    // Attribute count per element (10 pontos)
     const manyAttrElements = (scan.match(/<[a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?(\s+[a-zA-Z_][\w.-]*\s*=\s*['"][^'"]*['"]){10,}[^>]*>/g) ?? []).length;
     if (manyAttrElements === 0) {
         score += 10;
@@ -242,7 +213,6 @@ function scoreQuality(scan, issues, strengths) {
     else {
         issues.push(`${manyAttrElements} elemento(s) com muitos atributos`);
     }
-    // File size appropriateness (10 pontos)
     if (scan.length < 500000) {
         score += 10;
         strengths.push('Tamanho adequado para parsing DOM');
@@ -250,7 +220,6 @@ function scoreQuality(scan, issues, strengths) {
     else {
         issues.push('Arquivo grande (>500KB) - prefira streaming');
     }
-    // Deprecated constructs (10 pontos)
     if (!/<!ELEMENT\b|<!ATTLIST\b/i.test(scan)) {
         score += 10;
         strengths.push('Sem constructos XML obsoletos');

package/dist/app/github.js

@@ -1,4 +1,3 @@
-// @mahoraga-disable ml-deep-nesting
 import { createServer } from 'node:http';
 export async function iniciarServidorApp(opts) {
     const server = createServer((_req, res) => {

package/dist/bin/index.js

@@ -1,7 +1,4 @@
 #!/usr/bin/env node
-// SPDX-License-Identifier: MIT
-// @mahoraga-disable tipo-permissivo-object tipo-inseguro-unknown ml-deep-nesting
-// Justificativa: Object.keys é chamada de API, não tipo. unknown em catch handlers é intencional.
 import { realpathSync } from 'node:fs';
 import { dirname, join, resolve as resolvePath } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
@@ -15,7 +12,6 @@ import { ExitCode, sair } from '../cli/helpers/index.js';
 import { lerArquivoTexto } from '../shared/persistence/index.js';
 import { extrairMensagemErro } from '../types/index.js';
 const { log, CliBinMensagens } = getMessages();
-// caminho do módulo (usado para localizar arquivos de configuração)
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 function hasStack(err) {
@@ -26,15 +22,11 @@ function logErroStack(err) {
         console.error(err.stack);
     }
 }
-/**
- * Registra o loader ESM customizado para suporte a aliases em tempo de execução
- */
 async function registrarLoader() {
     try {
         const distRaiz = resolvePath(__dirname, '..');
         const loaderCaminho = resolvePath(distRaiz, 'node.loader.js');
         const loaderUrl = pathToFileURL(loaderCaminho).toString();
-        // Tenta registrar o loader via API experimental da v20+
         const moduleImport = await import('node:module');
         const registerHooks = moduleImport.registerHooks;
         if (typeof registerHooks === 'function') {
@@ -43,11 +35,9 @@ async function registrarLoader() {
         }
     }
     catch (err) {
-        // Falha silenciosa: o loader pode não estar disponível ou ser desnecessário se aliases estiverem resolvidos
         log.debug(CliBinMensagens.avisoLoaderAliases.replace('{erro}', err instanceof Error ? err.message : String(err)));
     }
 }
-// Ler versão dinamicamente do package.json
 async function getVersion() {
     try {
         const packageCaminho = join(__dirname, '..', '..', 'package.json');
@@ -63,9 +53,7 @@ async function getVersion() {
         return '0.0.0';
     }
 }
-//  Configuração principal do CLI
 const program = new Command();
-// Função para aplicar flags globais
 async function aplicarFlagsGlobais(opts) {
     if (typeof opts !== 'object' || opts === null) {
         return;
@@ -83,7 +71,7 @@ async function aplicarFlagsGlobais(opts) {
     config.REPORT_SILENCE_LOGS = Boolean(flags.silence);
     config.REPORT_EXPORT_ENABLED = Boolean(flags.export);
     config.REPORT_EXPORT_FULL = Boolean(flags.exportFull);
-    const debugAtivo = Boolean(flags.debug) || process.env.SUKUNA_DEBUG === 'true';
+    const debugAtivo = Boolean(flags.debug) || process.env.MAHORAGA_DEBUG === 'true';
     config.DEV_MODE = debugAtivo;
     config.SCAN_ONLY = Boolean(flags.scanOnly);
     config.VERBOSE = flags.silence ? false : Boolean(flags.verbose);
@@ -132,11 +120,8 @@ function __mahoraga_unhandledRejectionHandler(err) {
         process.exit(1);
     }
 }
-// Execução do CLI
 export async function mainCli() {
-    // 1. Tentar registrar loader para aliases dinâmicos
     await registrarLoader();
-    // 2. Handlers de erro globais
     process.on('unhandledRejection', __mahoraga_unhandledRejectionHandler);
     process.on('uncaughtException', (err) => {
         const mensagem = extrairMensagemErro(err);
@@ -146,7 +131,6 @@ export async function mainCli() {
             sair(ExitCode.Critical);
         }
     });
-    // 3. Inicialização de ambiente e memória
     let memoria;
     try {
         memoria = await getDefaultMemory();
@@ -163,7 +147,6 @@ export async function mainCli() {
     catch (err) {
         log.debug(CliBinMensagens.erroInicializacaoDinamica.replace('{erro}', err instanceof Error ? err.message : String(err)));
     }
-    // Inicializa formatadores built-in
     try {
         const { inicializarFormattersBuiltin } = await import('../core/formatters/index.js');
         inicializarFormattersBuiltin();
@@ -171,10 +154,8 @@ export async function mainCli() {
     catch (err) {
         log.debug(CliBinMensagens.erroInicializarFormatadores.replace('{erro}', err instanceof Error ? err.message : String(err)));
     }
-    // 4. Registro de Comandos
     registrarComandos(program, ocorrencia => void aplicarFlagsGlobais(ocorrencia));
     program.addCommand(comandoPerf());
-    // 5. Flags de histórico
     const argv = process.argv.slice(2);
     if (argv.includes('--historico')) {
         if (memoria) {
@@ -213,7 +194,6 @@ export async function mainCli() {
     catch (err) {
         log.debug(CliBinMensagens.erroRegistrarHistorico.replace('{erro}', err instanceof Error ? err.message : String(err)));
     }
-    // 6. Execução final
     program.exitOverride((err) => {
         const code = err.code || '';
         const isSaidaNormal = code === 'commander.help' || code === 'commander.helpDisplayed' || code === 'commander.version';
@@ -231,7 +211,6 @@ export async function mainCli() {
     });
     await program.parseAsync(process.argv);
 }
-// Inicialização automática se executado diretamente
 const resolvedArgv1 = process.argv[1] ? pathToFileURL(realpathSync(process.argv[1])).href : '';
 const isMain = import.meta.url === resolvedArgv1 || process.argv[1] && (process.argv[1].endsWith('/bin/index.js') || process.argv[1].endsWith('/bin/index.ts'));
 if (isMain) {