@semacode/cli 1.5.48 → 1.5.52
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +39 -21
- package/README.md +47 -48
- package/dist/agentContext.d.ts +2 -2
- package/dist/agentContext.js +1 -1
- package/dist/agentContextPack.d.ts +1 -1
- package/dist/agentContextPack.js +20 -28
- package/dist/agentContextTipos.d.ts +2 -2
- package/dist/agentContextTipos.js +7 -13
- package/dist/agentEntryPoints.js +244 -281
- package/dist/billing/index.d.ts +1 -58
- package/dist/billing/index.js +17 -278
- package/dist/cliArgs.js +0 -3
- package/dist/comandos.js +15 -131
- package/dist/contexto.d.ts +0 -9
- package/dist/contexto.js +59 -109
- package/dist/docs.part01.js +30 -51
- package/dist/drift.part14.js +18 -3
- package/dist/driftOrcamento.js +1 -2
- package/dist/index.d.ts +0 -6
- package/dist/index.js +0 -6
- package/dist/index.part01.d.ts +1 -1
- package/dist/index.part01.js +1 -3
- package/dist/index.part04.js +4 -4
- package/dist/index.part08.js +1 -22
- package/dist/initTemplatesBase.js +5 -5
- package/dist/sync/index.js +1 -1
- package/docs/README.md +19 -0
- package/docs/ai-integration.md +90 -0
- package/docs/ai-onboarding.md +33 -0
- package/docs/ai-workflow.md +62 -0
- package/docs/auth.md +16 -0
- package/docs/cli.md +36 -95
- package/docs/commands.md +90 -0
- package/docs/database.md +15 -0
- package/docs/deploy.md +6 -38
- package/docs/documentation.md +39 -0
- package/docs/env.md +8 -109
- package/docs/frontend.md +41 -0
- package/docs/getting-started.md +33 -0
- package/docs/i18n.md +15 -0
- package/docs/profiles.md +43 -0
- package/docs/repositories.md +19 -61
- package/docs/rollback.md +9 -20
- package/docs/security.md +24 -0
- package/docs/support.md +8 -0
- package/docs/syntax.md +128 -0
- package/docs/testing.md +17 -0
- package/docs/vocabulary.md +28 -0
- package/node_modules/@sema/gerador-css/package.json +1 -1
- package/node_modules/@sema/gerador-dart/package.json +1 -1
- package/node_modules/@sema/gerador-html/package.json +1 -1
- package/node_modules/@sema/gerador-javascript/package.json +1 -1
- package/node_modules/@sema/gerador-lua/dist/index.js +10 -0
- package/node_modules/@sema/gerador-lua/dist/index.js.map +1 -1
- package/node_modules/@sema/gerador-lua/package.json +1 -1
- package/node_modules/@sema/gerador-python/package.json +1 -1
- package/node_modules/@sema/gerador-typescript/package.json +1 -1
- package/node_modules/@sema/nucleo/dist/diagnosticos/melhorador.js +1 -1
- package/node_modules/@sema/nucleo/dist/diagnosticos/melhorador.js.map +1 -1
- package/node_modules/@sema/nucleo/package.json +1 -1
- package/node_modules/@sema/padroes/package.json +1 -1
- package/package.json +15 -22
- package/AGENTS.md +0 -81
- package/AGENT_CONTEXT_PACK.json +0 -500
- package/SEMA_BRIEF.curto.txt +0 -18
- package/SEMA_BRIEF.md +0 -726
- package/SEMA_BRIEF.micro.txt +0 -16
- package/SEMA_INDEX.json +0 -11078
- package/dist/agentContext.js.map +0 -1
- package/dist/agentContextPack.js.map +0 -1
- package/dist/agentContextTipos.js.map +0 -1
- package/dist/agentEntryPoints.js.map +0 -1
- package/dist/angular-consumer-standalone.js.map +0 -1
- package/dist/authorAnalise.js.map +0 -1
- package/dist/authorPoliticas.js.map +0 -1
- package/dist/billing/index.js.map +0 -1
- package/dist/bridge.d.ts +0 -52
- package/dist/bridge.js +0 -333
- package/dist/bridge.js.map +0 -1
- package/dist/carregarModulos.js.map +0 -1
- package/dist/cliArgs.js.map +0 -1
- package/dist/comandos.js.map +0 -1
- package/dist/contexto.js.map +0 -1
- package/dist/controleComercialSupabase.d.ts +0 -7
- package/dist/controleComercialSupabase.js +0 -6
- package/dist/controleComercialSupabase.js.map +0 -1
- package/dist/controleComercialSupabaseAdmin.d.ts +0 -7
- package/dist/controleComercialSupabaseAdmin.js +0 -138
- package/dist/controleComercialSupabaseAdmin.js.map +0 -1
- package/dist/controleComercialSupabaseCadastro.d.ts +0 -4
- package/dist/controleComercialSupabaseCadastro.js +0 -85
- package/dist/controleComercialSupabaseCadastro.js.map +0 -1
- package/dist/controleComercialSupabaseConstantes.d.ts +0 -28
- package/dist/controleComercialSupabaseConstantes.js +0 -44
- package/dist/controleComercialSupabaseConstantes.js.map +0 -1
- package/dist/controleComercialSupabaseConsumo.d.ts +0 -2
- package/dist/controleComercialSupabaseConsumo.js +0 -77
- package/dist/controleComercialSupabaseConsumo.js.map +0 -1
- package/dist/controleComercialSupabaseConta.d.ts +0 -11
- package/dist/controleComercialSupabaseConta.js +0 -157
- package/dist/controleComercialSupabaseConta.js.map +0 -1
- package/dist/controleComercialSupabaseProfiles.d.ts +0 -4
- package/dist/controleComercialSupabaseProfiles.js +0 -55
- package/dist/controleComercialSupabaseProfiles.js.map +0 -1
- package/dist/controleComercialSupabaseTipos.d.ts +0 -3
- package/dist/controleComercialSupabaseTipos.js +0 -2
- package/dist/controleComercialSupabaseTipos.js.map +0 -1
- package/dist/controleComercialSupabaseTiposAdmin.d.ts +0 -152
- package/dist/controleComercialSupabaseTiposAdmin.js +0 -2
- package/dist/controleComercialSupabaseTiposAdmin.js.map +0 -1
- package/dist/controleComercialSupabaseTiposBase.d.ts +0 -169
- package/dist/controleComercialSupabaseTiposBase.js +0 -2
- package/dist/controleComercialSupabaseTiposBase.js.map +0 -1
- package/dist/controleComercialSupabaseTiposConta.d.ts +0 -220
- package/dist/controleComercialSupabaseTiposConta.js +0 -2
- package/dist/controleComercialSupabaseTiposConta.js.map +0 -1
- package/dist/cpp-symbols.js.map +0 -1
- package/dist/dev/index.js.map +0 -1
- package/dist/dev/watcher.js.map +0 -1
- package/dist/docs/resolver.js.map +0 -1
- package/dist/docs.js.map +0 -1
- package/dist/docs.part01.js.map +0 -1
- package/dist/docs.part02.js.map +0 -1
- package/dist/doctorCommand.js.map +0 -1
- package/dist/dotnet-http.js.map +0 -1
- package/dist/drift.contrato.js.map +0 -1
- package/dist/drift.js.map +0 -1
- package/dist/drift.part01.js.map +0 -1
- package/dist/drift.part02.js.map +0 -1
- package/dist/drift.part03.js.map +0 -1
- package/dist/drift.part04.js.map +0 -1
- package/dist/drift.part05.js.map +0 -1
- package/dist/drift.part06.js.map +0 -1
- package/dist/drift.part07.js.map +0 -1
- package/dist/drift.part08.js.map +0 -1
- package/dist/drift.part09.js.map +0 -1
- package/dist/drift.part10.js.map +0 -1
- package/dist/drift.part11.js.map +0 -1
- package/dist/drift.part12.js.map +0 -1
- package/dist/drift.part13.js.map +0 -1
- package/dist/drift.part14.js.map +0 -1
- package/dist/driftOrcamento.js.map +0 -1
- package/dist/driftScore.js.map +0 -1
- package/dist/execucoesExternas.js.map +0 -1
- package/dist/exemplosOficiais.js.map +0 -1
- package/dist/fsGovernado.js.map +0 -1
- package/dist/geracaoCore.js.map +0 -1
- package/dist/go-http.js.map +0 -1
- package/dist/guard.js.map +0 -1
- package/dist/iaPrompts.js.map +0 -1
- package/dist/importador.js.map +0 -1
- package/dist/importador.part01.js.map +0 -1
- package/dist/importador.part02.js.map +0 -1
- package/dist/importador.part03.js.map +0 -1
- package/dist/importador.part04.js.map +0 -1
- package/dist/importador.part05.js.map +0 -1
- package/dist/importador.part06.js.map +0 -1
- package/dist/importador.part07.js.map +0 -1
- package/dist/importador.part08.js.map +0 -1
- package/dist/importador.part09.js.map +0 -1
- package/dist/index.js.map +0 -1
- package/dist/index.part01.js.map +0 -1
- package/dist/index.part02.js.map +0 -1
- package/dist/index.part03.js.map +0 -1
- package/dist/index.part04.js.map +0 -1
- package/dist/index.part05.js.map +0 -1
- package/dist/index.part06.js.map +0 -1
- package/dist/index.part07.js.map +0 -1
- package/dist/index.part08.js.map +0 -1
- package/dist/init/index.js.map +0 -1
- package/dist/init/templates.js.map +0 -1
- package/dist/init/templates.part01.js.map +0 -1
- package/dist/init/templates.part02.js.map +0 -1
- package/dist/initCommand.js.map +0 -1
- package/dist/initTemplatesBackend.js.map +0 -1
- package/dist/initTemplatesBase.js.map +0 -1
- package/dist/initTemplatesFlutter.js.map +0 -1
- package/dist/initTemplatesRuntime.js.map +0 -1
- package/dist/initTemplatesWeb.js.map +0 -1
- package/dist/java-http.js.map +0 -1
- package/dist/lua-symbols.js.map +0 -1
- package/dist/mcpInstalarChaveCommand.d.ts +0 -1
- package/dist/mcpInstalarChaveCommand.js +0 -168
- package/dist/mcpInstalarChaveCommand.js.map +0 -1
- package/dist/mcpRemoto.d.ts +0 -32
- package/dist/mcpRemoto.js +0 -61
- package/dist/mcpRemoto.js.map +0 -1
- package/dist/mcp_chave.d.ts +0 -1
- package/dist/mcp_chave.js +0 -4
- package/dist/mcp_chave.js.map +0 -1
- package/dist/profileArtefatoBase.js.map +0 -1
- package/dist/profileArtefatoValidadores.js.map +0 -1
- package/dist/profileAuthorCommand.js.map +0 -1
- package/dist/profileAuthorTipos.js.map +0 -1
- package/dist/profileCatalogo.js.map +0 -1
- package/dist/profileCommand.js.map +0 -1
- package/dist/profileI18nCatalogo.js.map +0 -1
- package/dist/profileI18nVisivel.js.map +0 -1
- package/dist/profileOrquestracao.js.map +0 -1
- package/dist/profileRegras.js.map +0 -1
- package/dist/profileRulePacks.js.map +0 -1
- package/dist/profiles/validate.js.map +0 -1
- package/dist/projeto.js.map +0 -1
- package/dist/projetoBusca.js.map +0 -1
- package/dist/projetoCarregar.js.map +0 -1
- package/dist/projetoConfig.js.map +0 -1
- package/dist/projetoLegado.js.map +0 -1
- package/dist/projetoOrigens.js.map +0 -1
- package/dist/projetoResolucao.js.map +0 -1
- package/dist/projetoTipos.js.map +0 -1
- package/dist/python-http.js.map +0 -1
- package/dist/runnerValidacaoRemota.d.ts +0 -9
- package/dist/runnerValidacaoRemota.js +0 -9
- package/dist/runnerValidacaoRemota.js.map +0 -1
- package/dist/runnerValidacaoRemotaBateria.d.ts +0 -10
- package/dist/runnerValidacaoRemotaBateria.js +0 -117
- package/dist/runnerValidacaoRemotaBateria.js.map +0 -1
- package/dist/runnerValidacaoRemotaCli.d.ts +0 -4
- package/dist/runnerValidacaoRemotaCli.js +0 -86
- package/dist/runnerValidacaoRemotaCli.js.map +0 -1
- package/dist/runnerValidacaoRemotaComandos.d.ts +0 -7
- package/dist/runnerValidacaoRemotaComandos.js +0 -123
- package/dist/runnerValidacaoRemotaComandos.js.map +0 -1
- package/dist/runnerValidacaoRemotaEscopo.d.ts +0 -4
- package/dist/runnerValidacaoRemotaEscopo.js +0 -79
- package/dist/runnerValidacaoRemotaEscopo.js.map +0 -1
- package/dist/runnerValidacaoRemotaExecucao.d.ts +0 -2
- package/dist/runnerValidacaoRemotaExecucao.js +0 -104
- package/dist/runnerValidacaoRemotaExecucao.js.map +0 -1
- package/dist/runnerValidacaoRemotaRelatorio.d.ts +0 -3
- package/dist/runnerValidacaoRemotaRelatorio.js +0 -95
- package/dist/runnerValidacaoRemotaRelatorio.js.map +0 -1
- package/dist/runnerValidacaoRemotaServidor.d.ts +0 -4
- package/dist/runnerValidacaoRemotaServidor.js +0 -185
- package/dist/runnerValidacaoRemotaServidor.js.map +0 -1
- package/dist/runnerValidacaoRemotaSnapshot.d.ts +0 -10
- package/dist/runnerValidacaoRemotaSnapshot.js +0 -219
- package/dist/runnerValidacaoRemotaSnapshot.js.map +0 -1
- package/dist/runnerValidacaoRemotaTipos.d.ts +0 -158
- package/dist/runnerValidacaoRemotaTipos.js +0 -35
- package/dist/runnerValidacaoRemotaTipos.js.map +0 -1
- package/dist/runnerValidacaoRemotaUtil.d.ts +0 -3
- package/dist/runnerValidacaoRemotaUtil.js +0 -18
- package/dist/runnerValidacaoRemotaUtil.js.map +0 -1
- package/dist/runnerValidacaoRemotaWorkspace.d.ts +0 -2
- package/dist/runnerValidacaoRemotaWorkspace.js +0 -115
- package/dist/runnerValidacaoRemotaWorkspace.js.map +0 -1
- package/dist/rust-http.js.map +0 -1
- package/dist/semaChatCommand.d.ts +0 -1
- package/dist/semaChatCommand.js +0 -43
- package/dist/semaChatCommand.js.map +0 -1
- package/dist/semaChatRuntime.d.ts +0 -23
- package/dist/semaChatRuntime.js +0 -202
- package/dist/semaChatRuntime.js.map +0 -1
- package/dist/sync/index.js.map +0 -1
- package/dist/textoListas.js.map +0 -1
- package/dist/tipos.js.map +0 -1
- package/dist/typescript-http-body.js.map +0 -1
- package/dist/typescript-http-expressoes.js.map +0 -1
- package/dist/typescript-http-modelos.js.map +0 -1
- package/dist/typescript-http-rotas.js.map +0 -1
- package/dist/typescript-http-semantica.js.map +0 -1
- package/dist/typescript-http.js.map +0 -1
- package/docs/AGENT_STARTER.md +0 -147
- package/docs/agentes-por-capacidade.md +0 -130
- package/docs/api.md +0 -82
- package/docs/comandos.md +0 -807
- package/docs/como-ensinar-a-sema-para-ia.md +0 -30
- package/docs/documentacao.md +0 -74
- package/docs/extensao-vscode.md +0 -49
- package/docs/fluxo-pratico-ia-sema.md +0 -278
- package/docs/instalacao-e-primeiro-uso.md +0 -60
- package/docs/integracao-com-ia.md +0 -44
- package/docs/mcp.md +0 -69
- package/docs/pagamento-ponta-a-ponta.md +0 -171
- package/docs/persistencia-vendor-first.md +0 -151
- package/docs/prompt-base-ia-sema.md +0 -111
- package/docs/seguranca.md +0 -126
- package/docs/sintaxe.md +0 -390
- package/llms-full.txt +0 -40
- package/llms.txt +0 -23
|
@@ -1,185 +0,0 @@
|
|
|
1
|
-
// SEMA-GOVERNED: sema.mcp.acesso_hardening
|
|
2
|
-
// Descricao: servidor HTTP do runner remoto; consulte contratos/sema/mcp_acesso_hardening.sema antes de editar.
|
|
3
|
-
import { randomUUID } from "node:crypto";
|
|
4
|
-
import { createServer } from "node:http";
|
|
5
|
-
import path from "node:path";
|
|
6
|
-
import { executarValidacaoRemota } from "./runnerValidacaoRemotaExecucao.js";
|
|
7
|
-
import { lerJsonSeguro } from "./runnerValidacaoRemotaComandos.js";
|
|
8
|
-
import { ajudaRunnerValidacaoRemota, obterOpcaoLocal, possuiFlagLocal } from "./runnerValidacaoRemotaCli.js";
|
|
9
|
-
const HOSTS_LOCAIS_RUNNER = new Set(["", "localhost", "127.0.0.1", "::1", "[::1]"]);
|
|
10
|
-
function lerCorpoJson(req, limiteBytes = 10 * 1024 * 1024) {
|
|
11
|
-
return new Promise((resolve, reject) => {
|
|
12
|
-
const chunks = [];
|
|
13
|
-
let total = 0;
|
|
14
|
-
req.on("data", (chunk) => {
|
|
15
|
-
total += chunk.length;
|
|
16
|
-
if (total > limiteBytes) {
|
|
17
|
-
reject(new Error("Snapshot excede o limite aceito pelo runner."));
|
|
18
|
-
req.destroy();
|
|
19
|
-
return;
|
|
20
|
-
}
|
|
21
|
-
chunks.push(chunk);
|
|
22
|
-
});
|
|
23
|
-
req.on("end", () => {
|
|
24
|
-
const texto = Buffer.concat(chunks).toString("utf8");
|
|
25
|
-
const json = lerJsonSeguro(texto);
|
|
26
|
-
if (!json || typeof json !== "object" || Array.isArray(json)) {
|
|
27
|
-
reject(new Error("Corpo precisa ser um objeto JSON."));
|
|
28
|
-
return;
|
|
29
|
-
}
|
|
30
|
-
resolve(json);
|
|
31
|
-
});
|
|
32
|
-
req.on("error", reject);
|
|
33
|
-
});
|
|
34
|
-
}
|
|
35
|
-
function responderJson(res, statusCode, payload) {
|
|
36
|
-
const corpo = `${JSON.stringify(payload, null, 2)}\n`;
|
|
37
|
-
res.writeHead(statusCode, {
|
|
38
|
-
"content-type": "application/json; charset=utf-8",
|
|
39
|
-
"cache-control": "no-store",
|
|
40
|
-
});
|
|
41
|
-
res.end(corpo);
|
|
42
|
-
}
|
|
43
|
-
function autorizacaoValida(req, token) {
|
|
44
|
-
if (!token) {
|
|
45
|
-
return true;
|
|
46
|
-
}
|
|
47
|
-
return req.headers.authorization === `Bearer ${token}`;
|
|
48
|
-
}
|
|
49
|
-
function hostRunnerLocal(host) {
|
|
50
|
-
return HOSTS_LOCAIS_RUNNER.has(host.trim().toLowerCase());
|
|
51
|
-
}
|
|
52
|
-
export function validarConfiguracaoServidorRunner(opcoes) {
|
|
53
|
-
if (!hostRunnerLocal(opcoes.host) && !opcoes.token) {
|
|
54
|
-
return "Runner remoto em host publico exige --token ou SEMA_RUNNER_TOKEN antes de expor /validacoes.";
|
|
55
|
-
}
|
|
56
|
-
return null;
|
|
57
|
-
}
|
|
58
|
-
function subpastaJob() {
|
|
59
|
-
return `${new Date().toISOString().replace(/[:.]/g, "-")}-${randomUUID().slice(0, 8)}`;
|
|
60
|
-
}
|
|
61
|
-
export async function criarServidorRunnerValidacaoRemota(opcoes) {
|
|
62
|
-
const erroConfiguracao = validarConfiguracaoServidorRunner(opcoes);
|
|
63
|
-
if (erroConfiguracao) {
|
|
64
|
-
throw new Error(erroConfiguracao);
|
|
65
|
-
}
|
|
66
|
-
const server = createServer(async (req, res) => {
|
|
67
|
-
const metodo = req.method ?? "GET";
|
|
68
|
-
const url = new URL(req.url ?? "/", `http://${req.headers.host ?? `${opcoes.host}:${opcoes.porta}`}`);
|
|
69
|
-
if (metodo === "GET" && url.pathname === "/healthz") {
|
|
70
|
-
responderJson(res, 200, {
|
|
71
|
-
ok: true,
|
|
72
|
-
service: "sema-runner-validacao-remota",
|
|
73
|
-
authObrigatoria: Boolean(opcoes.token),
|
|
74
|
-
});
|
|
75
|
-
return;
|
|
76
|
-
}
|
|
77
|
-
if (metodo !== "POST" || url.pathname !== "/validacoes") {
|
|
78
|
-
responderJson(res, 404, { ok: false, erro: "rota_nao_encontrada" });
|
|
79
|
-
return;
|
|
80
|
-
}
|
|
81
|
-
if (!autorizacaoValida(req, opcoes.token)) {
|
|
82
|
-
responderJson(res, 401, { ok: false, erro: "nao_autorizado" });
|
|
83
|
-
return;
|
|
84
|
-
}
|
|
85
|
-
try {
|
|
86
|
-
const entrada = await lerCorpoJson(req);
|
|
87
|
-
const resultado = await executarValidacaoRemota(entrada, {
|
|
88
|
-
cwd: opcoes.cwd,
|
|
89
|
-
saida: path.join(opcoes.saida, subpastaJob()),
|
|
90
|
-
manterWorkspace: false,
|
|
91
|
-
});
|
|
92
|
-
responderJson(res, resultado.podeLiberar ? 200 : 422, resultado);
|
|
93
|
-
}
|
|
94
|
-
catch (erro) {
|
|
95
|
-
responderJson(res, 400, {
|
|
96
|
-
ok: false,
|
|
97
|
-
erro: erro instanceof Error ? erro.message : String(erro),
|
|
98
|
-
});
|
|
99
|
-
}
|
|
100
|
-
});
|
|
101
|
-
await new Promise((resolve, reject) => {
|
|
102
|
-
const onError = (erro) => {
|
|
103
|
-
server.off("listening", onListening);
|
|
104
|
-
reject(erro);
|
|
105
|
-
};
|
|
106
|
-
const onListening = () => {
|
|
107
|
-
server.off("error", onError);
|
|
108
|
-
resolve();
|
|
109
|
-
};
|
|
110
|
-
server.once("error", onError);
|
|
111
|
-
server.once("listening", onListening);
|
|
112
|
-
server.listen(opcoes.porta, opcoes.host);
|
|
113
|
-
});
|
|
114
|
-
const endereco = server.address();
|
|
115
|
-
const porta = typeof endereco === "object" && endereco ? endereco.port : opcoes.porta;
|
|
116
|
-
return {
|
|
117
|
-
server,
|
|
118
|
-
host: opcoes.host,
|
|
119
|
-
porta,
|
|
120
|
-
url: `http://${opcoes.host}:${porta}`,
|
|
121
|
-
authObrigatoria: Boolean(opcoes.token),
|
|
122
|
-
};
|
|
123
|
-
}
|
|
124
|
-
export async function comandoServidorRunnerValidacaoRemota(args, cwd = process.cwd()) {
|
|
125
|
-
if (possuiFlagLocal(args, "--help") || possuiFlagLocal(args, "-h")) {
|
|
126
|
-
console.log(ajudaRunnerValidacaoRemota());
|
|
127
|
-
return 0;
|
|
128
|
-
}
|
|
129
|
-
const portaTexto = obterOpcaoLocal(args, "--porta", "8787");
|
|
130
|
-
const porta = Number.parseInt(portaTexto, 10);
|
|
131
|
-
if (!Number.isInteger(porta) || porta < 0 || porta > 65_535) {
|
|
132
|
-
const erro = "Porta invalida para sema runner servidor.";
|
|
133
|
-
if (possuiFlagLocal(args, "--json")) {
|
|
134
|
-
console.log(JSON.stringify({ comando: "runner servidor", sucesso: false, erro }, null, 2));
|
|
135
|
-
}
|
|
136
|
-
else {
|
|
137
|
-
console.error(erro);
|
|
138
|
-
}
|
|
139
|
-
return 1;
|
|
140
|
-
}
|
|
141
|
-
const host = obterOpcaoLocal(args, "--host", "127.0.0.1");
|
|
142
|
-
const token = obterOpcaoLocal(args, "--token") ?? process.env.SEMA_RUNNER_TOKEN;
|
|
143
|
-
const erroConfiguracao = validarConfiguracaoServidorRunner({ host, token });
|
|
144
|
-
if (erroConfiguracao) {
|
|
145
|
-
if (possuiFlagLocal(args, "--json")) {
|
|
146
|
-
console.log(JSON.stringify({ comando: "runner servidor", sucesso: false, erro: erroConfiguracao }, null, 2));
|
|
147
|
-
}
|
|
148
|
-
else {
|
|
149
|
-
console.error(erroConfiguracao);
|
|
150
|
-
}
|
|
151
|
-
return 1;
|
|
152
|
-
}
|
|
153
|
-
const servidor = await criarServidorRunnerValidacaoRemota({
|
|
154
|
-
cwd,
|
|
155
|
-
host,
|
|
156
|
-
porta,
|
|
157
|
-
saida: path.resolve(cwd, obterOpcaoLocal(args, "--saida", "./.tmp/runner-validacao-remota-server")),
|
|
158
|
-
token,
|
|
159
|
-
});
|
|
160
|
-
const payload = {
|
|
161
|
-
comando: "runner servidor",
|
|
162
|
-
sucesso: true,
|
|
163
|
-
url: servidor.url,
|
|
164
|
-
porta: servidor.porta,
|
|
165
|
-
host: servidor.host,
|
|
166
|
-
authObrigatoria: servidor.authObrigatoria,
|
|
167
|
-
endpoints: ["/healthz", "/validacoes"],
|
|
168
|
-
};
|
|
169
|
-
if (possuiFlagLocal(args, "--json")) {
|
|
170
|
-
console.log(JSON.stringify(payload));
|
|
171
|
-
}
|
|
172
|
-
else {
|
|
173
|
-
console.log(`Sema runner remoto ouvindo em ${servidor.url}`);
|
|
174
|
-
console.log("Endpoints: GET /healthz, POST /validacoes");
|
|
175
|
-
}
|
|
176
|
-
await new Promise((resolve) => {
|
|
177
|
-
const fechar = () => {
|
|
178
|
-
servidor.server.close(() => resolve());
|
|
179
|
-
};
|
|
180
|
-
process.once("SIGINT", fechar);
|
|
181
|
-
process.once("SIGTERM", fechar);
|
|
182
|
-
});
|
|
183
|
-
return 0;
|
|
184
|
-
}
|
|
185
|
-
//# sourceMappingURL=runnerValidacaoRemotaServidor.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"runnerValidacaoRemotaServidor.js","sourceRoot":"","sources":["../src/runnerValidacaoRemotaServidor.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,gHAAgH;AAChH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAE7G,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpF,SAAS,YAAY,CAAC,GAAoB,EAAE,WAAW,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;IACxE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,WAAW,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC;gBAClE,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,GAAmB,EAAE,UAAkB,EAAE,OAAgB;IAC9E,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACtD,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE;QACxB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;KAC5B,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAoB,EAAE,KAAc;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,UAAU,KAAK,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,MAAmE;IACnH,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACnD,OAAO,8FAA8F,CAAC;IACxG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,MAA2C;IAE3C,MAAM,gBAAgB,GAAG,iCAAiC,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAEtG,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACpD,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE;gBACtB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,8BAA8B;gBACvC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;aACvC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACxD,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,OAAgC,EAAE;gBAChF,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;gBAC7C,eAAe,EAAE,KAAK;aACvB,CAAC,CAAC;YACH,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACd,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE;gBACtB,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,IAAI,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,CAAC,IAAW,EAAE,EAAE;YAC9B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACtF,OAAO;QACL,MAAM;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK;QACL,GAAG,EAAE,UAAU,MAAM,CAAC,IAAI,IAAI,KAAK,EAAE;QACrC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,IAAc,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAC5F,IAAI,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,2CAA2C,CAAC;QACzD,IAAI,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAChF,MAAM,gBAAgB,GAAG,iCAAiC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,gBAAgB,EAAE,CAAC;QACrB,IAAI,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/G,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,kCAAkC,CAAC;QACxD,GAAG;QACH,IAAI;QACJ,KAAK;QACL,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,uCAAuC,CAAE,CAAC;QACpG,KAAK;KACN,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,iBAAiB;QAC1B,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,SAAS,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;KACvC,CAAC;IAEF,IAAI,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,iCAAiC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC"}
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
import { type EntradaSnapshotRemoto, type ModoVerificacaoRemota, type OpcoesRunnerValidacaoRemota, type ResultadoRecebimentoSnapshot } from "./runnerValidacaoRemotaTipos.js";
|
|
2
|
-
export declare function dedupe(lista: string[]): string[];
|
|
3
|
-
export declare function normalizarModo(valor: unknown, padrao?: ModoVerificacaoRemota): ModoVerificacaoRemota;
|
|
4
|
-
export declare function normalizarCaminhoRelativo(caminho: string): {
|
|
5
|
-
caminho?: string;
|
|
6
|
-
bloqueio?: string;
|
|
7
|
-
};
|
|
8
|
-
export declare function detectarSegredos(conteudo: string): string[];
|
|
9
|
-
export declare function redigirTexto(texto: string): string;
|
|
10
|
-
export declare function receberSnapshotProjetoRemoto(entrada: EntradaSnapshotRemoto, opcoes?: Pick<OpcoesRunnerValidacaoRemota, "modoOverride" | "contratoAlvo">): ResultadoRecebimentoSnapshot;
|
|
@@ -1,219 +0,0 @@
|
|
|
1
|
-
// SEMA-GOVERNED: sema.runner_validacao_remota
|
|
2
|
-
// Descricao: codigo governado pelo Sema; consulte contratos/sema/runner_validacao_remota.sema antes de editar.
|
|
3
|
-
import path from "node:path";
|
|
4
|
-
import { COMANDOS_PROJETO_PERMITIDOS, DIRETORIOS_PROIBIDOS, MODOS_VALIDOS } from "./runnerValidacaoRemotaTipos.js";
|
|
5
|
-
export function dedupe(lista) {
|
|
6
|
-
return [...new Set(lista.filter((item) => item.length > 0))];
|
|
7
|
-
}
|
|
8
|
-
export function normalizarModo(valor, padrao = "CONTRATOS_APENAS") {
|
|
9
|
-
if (typeof valor !== "string") {
|
|
10
|
-
return padrao;
|
|
11
|
-
}
|
|
12
|
-
const modo = valor.trim().toUpperCase().replace(/[-\s]+/g, "_");
|
|
13
|
-
return MODOS_VALIDOS.has(modo) ? modo : padrao;
|
|
14
|
-
}
|
|
15
|
-
function valorTexto(objeto, chaves) {
|
|
16
|
-
for (const chave of chaves) {
|
|
17
|
-
const valor = objeto[chave];
|
|
18
|
-
if (typeof valor === "string" && valor.trim().length > 0) {
|
|
19
|
-
return valor;
|
|
20
|
-
}
|
|
21
|
-
}
|
|
22
|
-
return undefined;
|
|
23
|
-
}
|
|
24
|
-
function valorArray(objeto, chaves) {
|
|
25
|
-
for (const chave of chaves) {
|
|
26
|
-
const valor = objeto[chave];
|
|
27
|
-
if (Array.isArray(valor)) {
|
|
28
|
-
return valor;
|
|
29
|
-
}
|
|
30
|
-
if (typeof valor === "string" && valor.trim().length > 0) {
|
|
31
|
-
return [valor];
|
|
32
|
-
}
|
|
33
|
-
}
|
|
34
|
-
return [];
|
|
35
|
-
}
|
|
36
|
-
function politicaRedacaoValida(politica) {
|
|
37
|
-
if (/\bsem\s+reda[cç][aã]o\b|\bsem\s+redact/i.test(politica)) {
|
|
38
|
-
return false;
|
|
39
|
-
}
|
|
40
|
-
return /redigir|redigido|reda[cç][aã]o|redact/i.test(politica);
|
|
41
|
-
}
|
|
42
|
-
export function normalizarCaminhoRelativo(caminho) {
|
|
43
|
-
const bruto = caminho.trim().replace(/\\/g, "/");
|
|
44
|
-
if (!bruto || path.isAbsolute(bruto)) {
|
|
45
|
-
return { bloqueio: "caminho_invalido" };
|
|
46
|
-
}
|
|
47
|
-
const partes = bruto.split("/").filter(Boolean);
|
|
48
|
-
if (partes.length === 0 || partes.some((parte) => parte === "." || parte === "..")) {
|
|
49
|
-
return { bloqueio: "caminho_invalido" };
|
|
50
|
-
}
|
|
51
|
-
const partesMinusculas = partes.map((parte) => parte.toLowerCase());
|
|
52
|
-
if (partesMinusculas.some((parte) => DIRETORIOS_PROIBIDOS.has(parte))) {
|
|
53
|
-
return { bloqueio: "artefato_build_ou_dependencia_proibido" };
|
|
54
|
-
}
|
|
55
|
-
const nomeArquivo = partesMinusculas[partesMinusculas.length - 1] ?? "";
|
|
56
|
-
if (nomeArquivo === ".env" || nomeArquivo.startsWith(".env.")) {
|
|
57
|
-
return { bloqueio: "env_file_raw" };
|
|
58
|
-
}
|
|
59
|
-
return { caminho: partes.join("/") };
|
|
60
|
-
}
|
|
61
|
-
export function detectarSegredos(conteudo) {
|
|
62
|
-
const achados = [];
|
|
63
|
-
const checks = [
|
|
64
|
-
["private_key", /-----BEGIN [A-Z ]*PRIVATE KEY-----/],
|
|
65
|
-
["openai_key", /\bsk-(?:proj-)?[A-Za-z0-9_-]{12,}/],
|
|
66
|
-
["aws_access_key", /\bAKIA[0-9A-Z]{16}\b/],
|
|
67
|
-
["database_url", /\bDATABASE_URL\s*=\s*["']?[^"'\s]{8,}/i],
|
|
68
|
-
["secret_assignment", /\b[A-Z0-9_]*(?:SECRET|TOKEN|PASSWORD|API_KEY|PRIVATE_KEY)[A-Z0-9_]*\s*=\s*["']?[^"'\s]{8,}/i],
|
|
69
|
-
];
|
|
70
|
-
for (const [id, regex] of checks) {
|
|
71
|
-
if (regex.test(conteudo)) {
|
|
72
|
-
achados.push(id);
|
|
73
|
-
}
|
|
74
|
-
}
|
|
75
|
-
return achados;
|
|
76
|
-
}
|
|
77
|
-
export function redigirTexto(texto) {
|
|
78
|
-
return texto
|
|
79
|
-
.replace(/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g, "[REDACTED_PRIVATE_KEY]")
|
|
80
|
-
.replace(/\bsk-(?:proj-)?[A-Za-z0-9_-]{12,}/g, "[REDACTED_OPENAI_KEY]")
|
|
81
|
-
.replace(/\bAKIA[0-9A-Z]{16}\b/g, "[REDACTED_AWS_KEY]")
|
|
82
|
-
.replace(/\bDATABASE_URL\s*=\s*["']?[^"'\s]+/gi, "DATABASE_URL=[REDACTED]")
|
|
83
|
-
.replace(/\b([A-Z0-9_]*(?:SECRET|TOKEN|PASSWORD|API_KEY|PRIVATE_KEY)[A-Z0-9_]*)\s*=\s*["']?[^"'\s]+/gi, "$1=[REDACTED]");
|
|
84
|
-
}
|
|
85
|
-
function normalizarArquivoSnapshot(item, campo, indice, bloqueios) {
|
|
86
|
-
if (!item || typeof item !== "object" || Array.isArray(item)) {
|
|
87
|
-
bloqueios.push(`${campo}_${indice}_formato_invalido`);
|
|
88
|
-
return null;
|
|
89
|
-
}
|
|
90
|
-
const objeto = item;
|
|
91
|
-
const caminho = valorTexto(objeto, ["caminho", "path", "arquivo", "file"]);
|
|
92
|
-
const conteudo = valorTexto(objeto, ["conteudo", "content", "texto", "text"]);
|
|
93
|
-
if (!caminho) {
|
|
94
|
-
bloqueios.push(`${campo}_${indice}_sem_caminho`);
|
|
95
|
-
return null;
|
|
96
|
-
}
|
|
97
|
-
if (conteudo === undefined) {
|
|
98
|
-
bloqueios.push(`${campo}_${indice}_sem_conteudo`);
|
|
99
|
-
return null;
|
|
100
|
-
}
|
|
101
|
-
const caminhoNormalizado = normalizarCaminhoRelativo(caminho);
|
|
102
|
-
if (caminhoNormalizado.bloqueio || !caminhoNormalizado.caminho) {
|
|
103
|
-
bloqueios.push(caminhoNormalizado.bloqueio ?? "caminho_invalido");
|
|
104
|
-
return null;
|
|
105
|
-
}
|
|
106
|
-
const segredos = detectarSegredos(conteudo);
|
|
107
|
-
for (const segredo of segredos) {
|
|
108
|
-
bloqueios.push(`secret_em_snapshot:${segredo}:${caminhoNormalizado.caminho}`);
|
|
109
|
-
}
|
|
110
|
-
return {
|
|
111
|
-
caminho: caminhoNormalizado.caminho,
|
|
112
|
-
conteudo,
|
|
113
|
-
tipo: valorTexto(objeto, ["tipo", "type"]),
|
|
114
|
-
hash: valorTexto(objeto, ["hash", "sha256"]),
|
|
115
|
-
};
|
|
116
|
-
}
|
|
117
|
-
function normalizarArquivos(lista, campo, bloqueios) {
|
|
118
|
-
return lista
|
|
119
|
-
.map((item, indice) => normalizarArquivoSnapshot(item, campo, indice, bloqueios))
|
|
120
|
-
.filter((item) => item !== null);
|
|
121
|
-
}
|
|
122
|
-
function normalizarIndice(lista) {
|
|
123
|
-
return lista
|
|
124
|
-
.map((item) => {
|
|
125
|
-
if (typeof item === "string") {
|
|
126
|
-
return item.trim();
|
|
127
|
-
}
|
|
128
|
-
if (item && typeof item === "object" && !Array.isArray(item)) {
|
|
129
|
-
return valorTexto(item, ["caminho", "path", "arquivo", "file"]) ?? "";
|
|
130
|
-
}
|
|
131
|
-
return "";
|
|
132
|
-
})
|
|
133
|
-
.filter((item) => item.length > 0);
|
|
134
|
-
}
|
|
135
|
-
function normalizarComandosProjeto(lista, bloqueios) {
|
|
136
|
-
const comandos = [];
|
|
137
|
-
for (const [indice, item] of lista.entries()) {
|
|
138
|
-
if (!item || typeof item !== "object" || Array.isArray(item)) {
|
|
139
|
-
bloqueios.push(`comando_projeto_${indice}_formato_invalido`);
|
|
140
|
-
continue;
|
|
141
|
-
}
|
|
142
|
-
const objeto = item;
|
|
143
|
-
const comando = valorTexto(objeto, ["comando", "cmd", "command"]);
|
|
144
|
-
const argsBrutos = valorArray(objeto, ["args", "argumentos"]);
|
|
145
|
-
const args = argsBrutos.filter((arg) => typeof arg === "string");
|
|
146
|
-
if (!comando) {
|
|
147
|
-
bloqueios.push(`comando_projeto_${indice}_sem_comando`);
|
|
148
|
-
continue;
|
|
149
|
-
}
|
|
150
|
-
if (comando.includes("/") || comando.includes("\\") || !COMANDOS_PROJETO_PERMITIDOS.has(comando)) {
|
|
151
|
-
bloqueios.push(`comando_projeto_${indice}_nao_permitido`);
|
|
152
|
-
continue;
|
|
153
|
-
}
|
|
154
|
-
if (args.length !== argsBrutos.length || args.some((arg) => arg.includes("\0"))) {
|
|
155
|
-
bloqueios.push(`comando_projeto_${indice}_args_invalidos`);
|
|
156
|
-
continue;
|
|
157
|
-
}
|
|
158
|
-
comandos.push({ comando, args });
|
|
159
|
-
}
|
|
160
|
-
return comandos;
|
|
161
|
-
}
|
|
162
|
-
function normalizarSnapshotEntrada(entrada, opcoes) {
|
|
163
|
-
const bloqueios = [];
|
|
164
|
-
const origem = valorTexto(entrada, ["origem", "source"]) ?? "snapshot-remoto";
|
|
165
|
-
const tenant = valorTexto(entrada, ["tenant", "workspace", "workspace_slug"]) ?? "tenant-remoto";
|
|
166
|
-
const modo = opcoes?.modoOverride ?? normalizarModo(entrada["modo_solicitado"] ?? entrada["modo"]);
|
|
167
|
-
const politicaSegredos = valorTexto(entrada, ["politica_segredos", "politicaSegredos", "secretPolicy"]) ?? "";
|
|
168
|
-
const contratos = normalizarArquivos(valorArray(entrada, ["contratos", "contracts"]), "contratos", bloqueios);
|
|
169
|
-
const codigo = normalizarArquivos(valorArray(entrada, ["codigo", "codigo_selecionado", "code", "selectedCode"]), "codigo", bloqueios);
|
|
170
|
-
const documentacao = normalizarArquivos(valorArray(entrada, ["documentacao", "docs", "documentation"]), "documentacao", bloqueios);
|
|
171
|
-
const indice = normalizarIndice(valorArray(entrada, ["indice", "index", "arquivos"]));
|
|
172
|
-
const segredosDeclarados = valorArray(entrada, ["segredos_detectados", "segredosDetectados", "secretsDetected"])
|
|
173
|
-
.filter((item) => typeof item === "string" && item.trim().length > 0);
|
|
174
|
-
const comandosProjeto = normalizarComandosProjeto(valorArray(entrada, ["comandos_projeto", "comandosProjeto", "projectCommands"]), bloqueios);
|
|
175
|
-
if (!politicaRedacaoValida(politicaSegredos)) {
|
|
176
|
-
bloqueios.push("politica_segredos_invalida");
|
|
177
|
-
}
|
|
178
|
-
if (contratos.length === 0) {
|
|
179
|
-
bloqueios.push("contratos_obrigatorios");
|
|
180
|
-
}
|
|
181
|
-
if (indice.length === 0) {
|
|
182
|
-
bloqueios.push("indice_obrigatorio");
|
|
183
|
-
}
|
|
184
|
-
if (modo === "CODIGO_SELECIONADO" && codigo.length === 0) {
|
|
185
|
-
bloqueios.push("codigo_selecionado_obrigatorio");
|
|
186
|
-
}
|
|
187
|
-
if (modo === "CODIGO_COMPLETO" && codigo.length === 0) {
|
|
188
|
-
bloqueios.push("modo_codigo_completo_sem_codigo");
|
|
189
|
-
}
|
|
190
|
-
if (segredosDeclarados.length > 0) {
|
|
191
|
-
bloqueios.push(...segredosDeclarados.map((segredo) => `secret_em_snapshot:${segredo}`));
|
|
192
|
-
}
|
|
193
|
-
const snapshot = {
|
|
194
|
-
origem,
|
|
195
|
-
tenant,
|
|
196
|
-
modo,
|
|
197
|
-
contratos,
|
|
198
|
-
codigo,
|
|
199
|
-
documentacao,
|
|
200
|
-
indice,
|
|
201
|
-
segredos_detectados: dedupe([
|
|
202
|
-
...segredosDeclarados,
|
|
203
|
-
...bloqueios.filter((bloqueio) => bloqueio.startsWith("secret_em_snapshot")),
|
|
204
|
-
]),
|
|
205
|
-
politica_segredos: politicaSegredos,
|
|
206
|
-
contrato_alvo: opcoes?.contratoAlvo ?? valorTexto(entrada, ["contrato_alvo", "contratoAlvo", "targetContract"]),
|
|
207
|
-
comandos_projeto: comandosProjeto,
|
|
208
|
-
};
|
|
209
|
-
return {
|
|
210
|
-
snapshot,
|
|
211
|
-
modo_verificacao: modo,
|
|
212
|
-
pronto_para_workspace: bloqueios.length === 0,
|
|
213
|
-
bloqueios: dedupe(bloqueios),
|
|
214
|
-
};
|
|
215
|
-
}
|
|
216
|
-
export function receberSnapshotProjetoRemoto(entrada, opcoes) {
|
|
217
|
-
return normalizarSnapshotEntrada(entrada, opcoes);
|
|
218
|
-
}
|
|
219
|
-
//# sourceMappingURL=runnerValidacaoRemotaSnapshot.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"runnerValidacaoRemotaSnapshot.js","sourceRoot":"","sources":["../src/runnerValidacaoRemotaSnapshot.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,+GAA+G;AAC/G,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,aAAa,EAAkN,MAAM,iCAAiC,CAAC;AAEnU,MAAM,UAAU,MAAM,CAAC,KAAe;IACpC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,SAAgC,kBAAkB;IAC/F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAChE,OAAO,aAAa,CAAC,GAAG,CAAC,IAA6B,CAAC,CAAC,CAAC,CAAC,IAA6B,CAAC,CAAC,CAAC,MAAM,CAAC;AACnG,CAAC;AAED,SAAS,UAAU,CAAC,MAA6B,EAAE,MAAgB;IACjE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,MAA6B,EAAE,MAAgB;IACjE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,IAAI,yCAAyC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,wCAAwC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,QAAQ,EAAE,wCAAwC,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IACtC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAA4B;QACtC,CAAC,aAAa,EAAE,oCAAoC,CAAC;QACrD,CAAC,YAAY,EAAE,mCAAmC,CAAC;QACnD,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;QAC1C,CAAC,cAAc,EAAE,wCAAwC,CAAC;QAC1D,CAAC,mBAAmB,EAAE,6FAA6F,CAAC;KACrH,CAAC;IAEF,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,6EAA6E,EAAE,wBAAwB,CAAC;SAChH,OAAO,CAAC,oCAAoC,EAAE,uBAAuB,CAAC;SACtE,OAAO,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;SACtD,OAAO,CAAC,sCAAsC,EAAE,yBAAyB,CAAC;SAC1E,OAAO,CAAC,6FAA6F,EAAE,eAAe,CAAC,CAAC;AAC7H,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAa,EAAE,KAAa,EAAE,MAAc,EAAE,SAAmB;IAClG,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,MAAM,mBAAmB,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAA6B,CAAC;IAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,MAAM,cAAc,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,MAAM,eAAe,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,kBAAkB,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,IAAI,kBAAkB,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,SAAS,CAAC,IAAI,CAAC,sBAAsB,OAAO,IAAI,kBAAkB,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,OAAO;QACnC,QAAQ;QACR,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAgB,EAAE,KAAa,EAAE,SAAmB;IAC9E,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;SAChF,MAAM,CAAC,CAAC,IAAI,EAAiC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgB;IACxC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,UAAU,CAAC,IAA6B,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACjG,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAgB,EAAE,SAAmB;IACtE,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,SAAS,CAAC,IAAI,CAAC,mBAAmB,MAAM,mBAAmB,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,IAA6B,CAAC;QAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,mBAAmB,MAAM,cAAc,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACjG,SAAS,CAAC,IAAI,CAAC,mBAAmB,MAAM,gBAAgB,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChF,SAAS,CAAC,IAAI,CAAC,mBAAmB,MAAM,iBAAiB,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CAAC,OAA8B,EAAE,MAA2E;IAC5I,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,iBAAiB,CAAC;IAC9E,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,IAAI,eAAe,CAAC;IACjG,MAAM,IAAI,GAAG,MAAM,EAAE,YAAY,IAAI,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACnG,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;IAE9G,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACtI,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACnI,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;SAC7G,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,yBAAyB,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAE9I,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,KAAK,oBAAoB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,SAAS,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,SAAS,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,SAAS,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GAA0B;QACtC,MAAM;QACN,MAAM;QACN,IAAI;QACJ,SAAS;QACT,MAAM;QACN,YAAY;QACZ,MAAM;QACN,mBAAmB,EAAE,MAAM,CAAC;YAC1B,GAAG,kBAAkB;YACrB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;SAC7E,CAAC;QACF,iBAAiB,EAAE,gBAAgB;QACnC,aAAa,EAAE,MAAM,EAAE,YAAY,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC/G,gBAAgB,EAAE,eAAe;KAClC,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,gBAAgB,EAAE,IAAI;QACtB,qBAAqB,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC;QAC7C,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAA8B,EAC9B,MAA2E;IAE3E,OAAO,yBAAyB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC"}
|
|
@@ -1,158 +0,0 @@
|
|
|
1
|
-
import type { Server } from "node:http";
|
|
2
|
-
export type ModoVerificacaoRemota = "CONTRATOS_APENAS" | "CODIGO_SELECIONADO" | "CODIGO_COMPLETO";
|
|
3
|
-
export type StatusJobVerificacao = "APROVADO" | "BLOQUEADO" | "FALHOU";
|
|
4
|
-
export type AmbienteRunner = "VPS" | "WORKER_CONTAINER" | "WORKTREE_ISOLADO";
|
|
5
|
-
export interface ArquivoSnapshotRemoto {
|
|
6
|
-
caminho: string;
|
|
7
|
-
conteudo: string;
|
|
8
|
-
tipo?: string;
|
|
9
|
-
hash?: string;
|
|
10
|
-
}
|
|
11
|
-
export interface ComandoProjetoRemoto {
|
|
12
|
-
comando: string;
|
|
13
|
-
args?: string[];
|
|
14
|
-
}
|
|
15
|
-
export interface SnapshotProjetoRemoto {
|
|
16
|
-
origem: string;
|
|
17
|
-
tenant: string;
|
|
18
|
-
modo: ModoVerificacaoRemota;
|
|
19
|
-
contratos: ArquivoSnapshotRemoto[];
|
|
20
|
-
codigo: ArquivoSnapshotRemoto[];
|
|
21
|
-
documentacao: ArquivoSnapshotRemoto[];
|
|
22
|
-
indice: string[];
|
|
23
|
-
segredos_detectados: string[];
|
|
24
|
-
politica_segredos: string;
|
|
25
|
-
contrato_alvo?: string;
|
|
26
|
-
comandos_projeto: ComandoProjetoRemoto[];
|
|
27
|
-
}
|
|
28
|
-
export interface WorkspaceRunner {
|
|
29
|
-
id: string;
|
|
30
|
-
ambiente: AmbienteRunner;
|
|
31
|
-
caminho: string;
|
|
32
|
-
tenant: string;
|
|
33
|
-
isolamento: string;
|
|
34
|
-
expira_em: string;
|
|
35
|
-
}
|
|
36
|
-
export interface ArtefatoVerificacaoRemota {
|
|
37
|
-
nome: string;
|
|
38
|
-
tipo: string;
|
|
39
|
-
caminho: string;
|
|
40
|
-
hash: string;
|
|
41
|
-
publico: boolean;
|
|
42
|
-
}
|
|
43
|
-
export interface ComandoExecutadoRunner {
|
|
44
|
-
nome: string;
|
|
45
|
-
args: string[];
|
|
46
|
-
codigoSaida: number;
|
|
47
|
-
stdoutArquivo: string;
|
|
48
|
-
stderrArquivo: string;
|
|
49
|
-
duracaoMs: number;
|
|
50
|
-
sucesso: boolean;
|
|
51
|
-
}
|
|
52
|
-
export type EscopoDriftRunner = "projeto" | "nao_executado";
|
|
53
|
-
export interface EscopoEvidenciaRemota {
|
|
54
|
-
origem_snapshot: string;
|
|
55
|
-
tenant: string;
|
|
56
|
-
workspace_id: string;
|
|
57
|
-
workspace_caminho: string;
|
|
58
|
-
modo_verificacao: ModoVerificacaoRemota;
|
|
59
|
-
contrato_alvo: string | null;
|
|
60
|
-
entrada_sema: string;
|
|
61
|
-
escopo_drift: EscopoDriftRunner;
|
|
62
|
-
fontes_conclusao: string[];
|
|
63
|
-
codigo_verificado: boolean;
|
|
64
|
-
testes_projeto_executados: boolean;
|
|
65
|
-
comando_drift: string;
|
|
66
|
-
conclusao_limpa_autorizada: boolean;
|
|
67
|
-
ressalva_escopo: string;
|
|
68
|
-
}
|
|
69
|
-
export interface RelatorioVerificacaoRemota {
|
|
70
|
-
job_id: string;
|
|
71
|
-
modo: ModoVerificacaoRemota;
|
|
72
|
-
status: StatusJobVerificacao;
|
|
73
|
-
score_semantico: number;
|
|
74
|
-
diagnosticos: string[];
|
|
75
|
-
avisos_alta_severidade: string[];
|
|
76
|
-
comandos_executados: ComandoExecutadoRunner[];
|
|
77
|
-
artefatos: ArtefatoVerificacaoRemota[];
|
|
78
|
-
escopo_evidencia: EscopoEvidenciaRemota;
|
|
79
|
-
resumo_ia: string;
|
|
80
|
-
}
|
|
81
|
-
export interface ResultadoRecebimentoSnapshot {
|
|
82
|
-
snapshot: SnapshotProjetoRemoto;
|
|
83
|
-
modo_verificacao: ModoVerificacaoRemota;
|
|
84
|
-
pronto_para_workspace: boolean;
|
|
85
|
-
bloqueios: string[];
|
|
86
|
-
}
|
|
87
|
-
export interface ResultadoProvisionamentoWorkspace {
|
|
88
|
-
workspace: WorkspaceRunner;
|
|
89
|
-
isolamento_ok: boolean;
|
|
90
|
-
limpeza_agendada: boolean;
|
|
91
|
-
bloqueios: string[];
|
|
92
|
-
}
|
|
93
|
-
export interface ResultadoPublicacaoRelatorio {
|
|
94
|
-
resumo_ia: string;
|
|
95
|
-
url_relatorio: string;
|
|
96
|
-
artefatos_publicados: ArtefatoVerificacaoRemota[];
|
|
97
|
-
redacao_ok: boolean;
|
|
98
|
-
bloqueios: string[];
|
|
99
|
-
}
|
|
100
|
-
export interface ResultadoFechamentoJob {
|
|
101
|
-
concluido: boolean;
|
|
102
|
-
pode_liberar: boolean;
|
|
103
|
-
decisao_agente: "continuar" | "continuar_com_ressalva" | "parar" | "chamar_humano";
|
|
104
|
-
proximas_acoes: string[];
|
|
105
|
-
bloqueios: string[];
|
|
106
|
-
}
|
|
107
|
-
export interface ResultadoRunnerValidacaoRemota {
|
|
108
|
-
comando: "runner validar-remoto";
|
|
109
|
-
sucesso: boolean;
|
|
110
|
-
status: StatusJobVerificacao;
|
|
111
|
-
podeLiberar: boolean;
|
|
112
|
-
jobId: string;
|
|
113
|
-
modo: ModoVerificacaoRemota;
|
|
114
|
-
snapshot: {
|
|
115
|
-
origem: string;
|
|
116
|
-
tenant: string;
|
|
117
|
-
contratos: number;
|
|
118
|
-
codigo: number;
|
|
119
|
-
documentacao: number;
|
|
120
|
-
};
|
|
121
|
-
workspace: WorkspaceRunner | null;
|
|
122
|
-
workspaceRemovido: boolean;
|
|
123
|
-
relatorio: RelatorioVerificacaoRemota;
|
|
124
|
-
publicacao: ResultadoPublicacaoRelatorio;
|
|
125
|
-
fechamento: ResultadoFechamentoJob;
|
|
126
|
-
relatorioArquivo: string;
|
|
127
|
-
}
|
|
128
|
-
export interface OpcoesRunnerValidacaoRemota {
|
|
129
|
-
saida: string;
|
|
130
|
-
cwd: string;
|
|
131
|
-
manterWorkspace: boolean;
|
|
132
|
-
modoOverride?: ModoVerificacaoRemota;
|
|
133
|
-
contratoAlvo?: string;
|
|
134
|
-
timeoutMs?: number;
|
|
135
|
-
}
|
|
136
|
-
export interface OpcoesServidorRunnerValidacaoRemota {
|
|
137
|
-
cwd: string;
|
|
138
|
-
host: string;
|
|
139
|
-
porta: number;
|
|
140
|
-
saida: string;
|
|
141
|
-
token?: string;
|
|
142
|
-
}
|
|
143
|
-
export interface ServidorRunnerValidacaoRemota {
|
|
144
|
-
server: Server;
|
|
145
|
-
host: string;
|
|
146
|
-
porta: number;
|
|
147
|
-
url: string;
|
|
148
|
-
authObrigatoria: boolean;
|
|
149
|
-
}
|
|
150
|
-
export interface EntradaSnapshotRemoto {
|
|
151
|
-
[key: string]: unknown;
|
|
152
|
-
}
|
|
153
|
-
export declare const MODOS_VALIDOS: Set<ModoVerificacaoRemota>;
|
|
154
|
-
export declare const AMBIENTE_PADRAO: AmbienteRunner;
|
|
155
|
-
export declare const TIMEOUT_COMANDO_PADRAO_MS = 120000;
|
|
156
|
-
export declare const PREFIXO_WORKSPACE = "sema-runner-";
|
|
157
|
-
export declare const DIRETORIOS_PROIBIDOS: Set<string>;
|
|
158
|
-
export declare const COMANDOS_PROJETO_PERMITIDOS: Set<string>;
|
|
@@ -1,35 +0,0 @@
|
|
|
1
|
-
export const MODOS_VALIDOS = new Set(["CONTRATOS_APENAS", "CODIGO_SELECIONADO", "CODIGO_COMPLETO"]);
|
|
2
|
-
export const AMBIENTE_PADRAO = "WORKTREE_ISOLADO";
|
|
3
|
-
export const TIMEOUT_COMANDO_PADRAO_MS = 120_000;
|
|
4
|
-
export const PREFIXO_WORKSPACE = "sema-runner-";
|
|
5
|
-
export const DIRETORIOS_PROIBIDOS = new Set([
|
|
6
|
-
".git",
|
|
7
|
-
".hg",
|
|
8
|
-
".svn",
|
|
9
|
-
".next",
|
|
10
|
-
".nuxt",
|
|
11
|
-
".turbo",
|
|
12
|
-
".cache",
|
|
13
|
-
".pytest_cache",
|
|
14
|
-
".venv",
|
|
15
|
-
"build",
|
|
16
|
-
"coverage",
|
|
17
|
-
"dist",
|
|
18
|
-
"node_modules",
|
|
19
|
-
"vendor",
|
|
20
|
-
]);
|
|
21
|
-
export const COMANDOS_PROJETO_PERMITIDOS = new Set([
|
|
22
|
-
"npm",
|
|
23
|
-
"pnpm",
|
|
24
|
-
"yarn",
|
|
25
|
-
"node",
|
|
26
|
-
"python",
|
|
27
|
-
"py",
|
|
28
|
-
"pytest",
|
|
29
|
-
"go",
|
|
30
|
-
"cargo",
|
|
31
|
-
"dotnet",
|
|
32
|
-
"mvn",
|
|
33
|
-
"gradle",
|
|
34
|
-
]);
|
|
35
|
-
//# sourceMappingURL=runnerValidacaoRemotaTipos.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"runnerValidacaoRemotaTipos.js","sourceRoot":"","sources":["../src/runnerValidacaoRemotaTipos.ts"],"names":[],"mappings":"AA4KA,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAwB,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAC3H,MAAM,CAAC,MAAM,eAAe,GAAmB,kBAAkB,CAAC;AAClE,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AACjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEhD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IAC1C,MAAM;IACN,KAAK;IACL,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,OAAO;IACP,OAAO;IACP,UAAU;IACV,MAAM;IACN,cAAc;IACd,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IACjD,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,QAAQ;IACR,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,KAAK;IACL,QAAQ;CACT,CAAC,CAAC"}
|
|
@@ -1,18 +0,0 @@
|
|
|
1
|
-
import { createHash } from "node:crypto";
|
|
2
|
-
import { readFile, stat } from "node:fs/promises";
|
|
3
|
-
export function hashTexto(texto) {
|
|
4
|
-
return createHash("sha256").update(texto).digest("hex");
|
|
5
|
-
}
|
|
6
|
-
export async function hashArquivo(caminho) {
|
|
7
|
-
return hashTexto(await readFile(caminho, "utf8"));
|
|
8
|
-
}
|
|
9
|
-
export async function verificarArquivoExiste(caminho) {
|
|
10
|
-
try {
|
|
11
|
-
await stat(caminho);
|
|
12
|
-
return true;
|
|
13
|
-
}
|
|
14
|
-
catch {
|
|
15
|
-
return false;
|
|
16
|
-
}
|
|
17
|
-
}
|
|
18
|
-
//# sourceMappingURL=runnerValidacaoRemotaUtil.js.map
|