tutanus 0.12.0

package/dist/analysts/plugins/detector-markdown.d.ts

@@ -0,0 +1,12 @@
+import type { Ocorrencia } from '../../types/index.js';
+import type { MarkdownAnaliseArquivo, MarkdownDetectorOptions } from '../../types/analysts/markdown.js';
+declare function analisarArquivoMarkdown(fullCaminho: string, relPath: string, content: string, options: MarkdownDetectorOptions): Promise<MarkdownAnaliseArquivo>;
+export declare const detectorMarkdown: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    test: (relPath: string) => boolean;
+    aplicar: (src: string, relPath: string, _ast: unknown, fullCaminho?: string) => Promise<Ocorrencia[]>;
+};
+export { analisarArquivoMarkdown };
+//# sourceMappingURL=detector-markdown.d.ts.map

package/dist/analysts/plugins/detector-markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-markdown.d.ts","sourceRoot":"","sources":["../../../src/analysts/plugins/detector-markdown.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC;AAEpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,uBAAuB,EAAsE,MAAM,kCAAkC,CAAC;AA+H5K,iBAAe,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA+F/J;AAoCD,eAAO,MAAM,gBAAgB;;;;oBAIX,MAAM,KAAG,OAAO;mBAGX,MAAM,WAAW,MAAM,QAAQ,OAAO,gBAAgB,MAAM,KAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CA+B1G,CAAC;AAKF,OAAO,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/analysts/plugins/detector-markdown.js

@@ -0,0 +1,232 @@
+import { config } from '../../core/config/index.js';
+import { getMessages } from '../../core/messages/index.js';
+import { extrairSupressoes, isRegraSuprimida } from '../../shared/helpers/index.js';
+const { log } = getMessages();
+const LICENCA_PADROES = {
+    incompativeis: [/\bGPL\b/i, /\bAGPL\b/i, /\bLGPL\b/i, /Creative\s+Commons/i, /\bCC-BY\b/i, /All\s+rights\s+reserved/i],
+    cessaoDireitos: [/cess(?:ã|a)o\s+de\s+direitos/i, /transfer(?:ê|e)ncia\s+de\s+direitos/i],
+    referenciasRisco: [/Stack\s*Overflow/i, /(?:^|https?:\/\/|\/\/)(?:[^\/\s@]+\.)?stackoverflow\.com(?::\d+)?(?:[\/?#]|$)/i, /\bassign\b/i, /\bcession\b/i]
+};
+const PADRAO_LISTA_BRANCA = {
+    paths: ['.github/copilot-instructions.md', 'docs/POLICY-PROVENIENCIA.md', 'docs/partials/AVISO-PROVENIENCIA.md'],
+    patterns: ['**/reports/**', 'docs/history/**', 'tests/**', 'tmp*.md'],
+    dirs: ['pre-public', 'preview-tutanus', '.abandonados', '.deprecados', 'reports']
+};
+function createRiskRegex() {
+    const allPadroes = [...LICENCA_PADROES.incompativeis, ...LICENCA_PADROES.cessaoDireitos, ...LICENCA_PADROES.referenciasRisco].map(raiz => raiz.source).join('|');
+    return new RegExp(allPadroes, 'i');
+}
+function hasProvenienciaHeader(content, headerLines = 30) {
+    const head = content.split(/\r?\n/).slice(0, headerLines).join('\n');
+    return /Proveni[eê]ncia\s+e\s+Autoria/i.test(head);
+}
+function isWhitelisted(relPath, whitelist) {
+    const normalized = relPath.replace(/\\/g, '/');
+    if (whitelist.paths.some((caminho) => normalized === caminho || normalized.endsWith(`/${caminho}`))) {
+        return true;
+    }
+    if (whitelist.dirs.some((dir) => normalized.startsWith(`${dir}/`))) {
+        return true;
+    }
+    for (const pattern of whitelist.patterns) {
+        if (pattern.includes('**')) {
+            const parts = pattern.split('**');
+            if (parts.every((part) => normalized.includes(part.replace(/\*/g, '')))) {
+                return true;
+            }
+        }
+        else if (pattern.startsWith('*')) {
+            if (normalized.endsWith(pattern.substring(1))) {
+                return true;
+            }
+        }
+        else if (pattern.includes('*')) {
+            const [prefix, suffix] = pattern.split('*');
+            if (normalized.startsWith(prefix) && normalized.endsWith(suffix)) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+function hasRiskReferenceMarker(content) {
+    return /<!--\s*RISCO_REFERENCIA_OK\s*-->/i.test(content);
+}
+function hasTutanusIgnoreMarker(content, key) {
+    const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const oldPattern = new RegExp(`<!--\\s*tutanus-ignore\\s*:\\s*${escaped}\\s*-->`, 'i');
+    const newPattern = new RegExp(`<!--\\s*@tutanus-disable\\s+${escaped}(?:\\s|-->|$)`, 'i');
+    return oldPattern.test(content) || newPattern.test(content);
+}
+function mergeWhitelist(base, override, mode) {
+    const overrideConfig = override || {};
+    if (mode === 'replace') {
+        return {
+            paths: Array.isArray(overrideConfig.paths) ? overrideConfig.paths : [],
+            patterns: Array.isArray(overrideConfig.patterns) ? overrideConfig.patterns : [],
+            dirs: Array.isArray(overrideConfig.dirs) ? overrideConfig.dirs : []
+        };
+    }
+    const uniq = (arr) => Array.from(new Set(arr.map(String)));
+    const overridePaths = Array.isArray(overrideConfig.paths) ? overrideConfig.paths : [];
+    const overridePatterns = Array.isArray(overrideConfig.patterns) ? overrideConfig.patterns : [];
+    const overrideDirs = Array.isArray(overrideConfig.dirs) ? overrideConfig.dirs : [];
+    return {
+        paths: uniq([...(base.paths || []), ...overridePaths]),
+        patterns: uniq([...(base.patterns || []), ...overridePatterns]),
+        dirs: uniq([...(base.dirs || []), ...overrideDirs])
+    };
+}
+function isBenignProvenienciaOnly(content) {
+    const rxCessao = /cess(?:ã|a)o\s+de\s+direitos/i;
+    const rxOthers = new RegExp(['\\bGPL\\b', '\\bAGPL\\b', '\\bLGPL\\b', 'Creative\\s+Commons', '\\bCC-BY\\b', 'Stack\\s*Overflow', '(?:^|[^\\w.-])(?:[\\w-]+\\.)*stackoverflow\\.com(?:$|[^\\w.-])', 'All\\s+rights\\s+reserved', 'transfer(?:ê|e)ncia\\s+de\\s+direitos', '\\bassign\\b', '\\bcession\\b'].join('|'), 'i');
+    const hasCessao = rxCessao.test(content);
+    const hasOthers = rxOthers.test(content);
+    const hasAviso = /Proveni[eê]ncia\s+e\s+Autoria/i.test(content);
+    return hasAviso && hasCessao && !hasOthers;
+}
+async function analisarArquivoMarkdown(fullCaminho, relPath, content, options) {
+    const whitelist = options.whitelist || PADRAO_LISTA_BRANCA;
+    const problemas = [];
+    const whitelisted = isWhitelisted(relPath, whitelist);
+    const temRiscoOk = hasRiskReferenceMarker(content);
+    const temProveniencia = hasProvenienciaHeader(content, options.headerLines || 30);
+    const ignoreLicencaCheck = hasTutanusIgnoreMarker(content, 'license-check');
+    if (options.checkProveniencia !== false && !temProveniencia && !whitelisted) {
+        problemas.push({
+            tipo: 'falta-proveniencia',
+            descricao: 'Arquivo não possui aviso de Proveniência e Autoria nas primeiras linhas',
+            severidade: 'alto',
+            sugestao: 'Adicione o aviso usando scripts/add-disclaimer-md.js'
+        });
+    }
+    if (options.checkLicenses !== false || options.checkReferences !== false) {
+        const riskRegex = createRiskRegex();
+        const hasRisk = riskRegex.test(content);
+        if (hasRisk && !isBenignProvenienciaOnly(content) && !whitelisted && !temRiscoOk) {
+            const lines = content.split(/\r?\n/);
+            const supressoes = extrairSupressoes(content);
+            for (let indice = 0; indice < lines.length; indice++) {
+                const line = lines[indice];
+                const linhaAtual = indice + 1;
+                if (options.checkLicenses !== false && !ignoreLicencaCheck) {
+                    for (const pattern of LICENCA_PADROES.incompativeis) {
+                        if (pattern.test(line)) {
+                            const regraNome = `markdown-licenca-incompativel`;
+                            if (!isRegraSuprimida(regraNome, linhaAtual, supressoes) && !isRegraSuprimida('detector-markdown', linhaAtual, supressoes)) {
+                                problemas.push({
+                                    tipo: 'licenca-incompativel',
+                                    descricao: `Licença potencialmente incompatível: ${pattern.source}`,
+                                    severidade: 'critico',
+                                    linha: linhaAtual,
+                                    trecho: line.trim().substring(0, 100),
+                                    sugestao: 'Verifique compatibilidade com licença MIT do projeto'
+                                });
+                            }
+                        }
+                    }
+                }
+                if (options.checkReferences !== false) {
+                    for (const pattern of LICENCA_PADROES.cessaoDireitos) {
+                        if (pattern.test(line)) {
+                            const regraNome = `markdown-referencia-risco`;
+                            if (!isRegraSuprimida(regraNome, linhaAtual, supressoes) && !isRegraSuprimida('detector-markdown', linhaAtual, supressoes)) {
+                                problemas.push({
+                                    tipo: 'referencia-risco',
+                                    descricao: 'Referência a cessão de direitos detectada',
+                                    severidade: 'alto',
+                                    linha: linhaAtual,
+                                    trecho: line.trim().substring(0, 100),
+                                    sugestao: 'Verifique se não há implicações legais'
+                                });
+                            }
+                        }
+                    }
+                    for (const pattern of LICENCA_PADROES.referenciasRisco) {
+                        if (pattern.test(line)) {
+                            const regraNome = `markdown-referencia-risco`;
+                            if (!isRegraSuprimida(regraNome, linhaAtual, supressoes) && !isRegraSuprimida('detector-markdown', linhaAtual, supressoes)) {
+                                problemas.push({
+                                    tipo: 'referencia-risco',
+                                    descricao: `Referência externa detectada: ${pattern.source}`,
+                                    severidade: 'medio',
+                                    linha: linhaAtual,
+                                    trecho: line.trim().substring(0, 100),
+                                    sugestao: 'Adicione marcador <!-- RISCO_REFERENCIA_OK --> se referência for válida'
+                                });
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    }
+    return {
+        relPath,
+        fullCaminho,
+        problemas,
+        temProveniencia,
+        whitelisted,
+        temRiscoOk
+    };
+}
+function converterParaOcorrencias(analise) {
+    const ocorrencias = [];
+    for (const problema of analise.problemas) {
+        let nivel;
+        switch (problema.severidade) {
+            case 'critico':
+            case 'alto':
+                nivel = 'erro';
+                break;
+            case 'medio':
+                nivel = 'aviso';
+                break;
+            default:
+                nivel = 'info';
+        }
+        ocorrencias.push({
+            tipo: `markdown-${problema.tipo}`,
+            nivel,
+            mensagem: problema.descricao,
+            relPath: analise.relPath,
+            linha: problema.linha,
+            contexto: problema.trecho,
+            sugestao: problema.sugestao
+        });
+    }
+    return ocorrencias;
+}
+export const detectorMarkdown = {
+    nome: 'detector-markdown',
+    categoria: 'documentacao',
+    descricao: 'Detecta problemas de compliance em arquivos Markdown',
+    test: (relPath) => {
+        return relPath.toLowerCase().endsWith('.md');
+    },
+    aplicar: async (src, relPath, _ast, fullCaminho) => {
+        if (!fullCaminho) {
+            log.aviso(`detector-markdown: fullPath não fornecido para ${relPath}`);
+            return [];
+        }
+        const cfg = config.detectorMarkdown;
+        const whitelistMode = cfg?.whitelistMode === 'replace' || cfg?.whitelistMode === 'merge' ? cfg.whitelistMode : 'merge';
+        const options = {
+            checkProveniencia: cfg?.checkProveniencia ?? true,
+            checkLicenses: cfg?.checkLicenses ?? true,
+            checkReferences: cfg?.checkReferences ?? true,
+            headerLines: typeof cfg?.headerLines === 'number' ? cfg.headerLines : 30,
+            whitelist: mergeWhitelist(PADRAO_LISTA_BRANCA, cfg?.whitelist, whitelistMode)
+        };
+        try {
+            const analise = await analisarArquivoMarkdown(fullCaminho, relPath, src, options);
+            return converterParaOcorrencias(analise);
+        }
+        catch (error) {
+            log.erro(`Erro ao analisar Markdown ${relPath}: ${error.message}`);
+            return [];
+        }
+    }
+};
+export { analisarArquivoMarkdown };
+//# sourceMappingURL=detector-markdown.js.map

package/dist/analysts/plugins/detector-markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-markdown.js","sourceRoot":"","sources":["../../../src/analysts/plugins/detector-markdown.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAMtE,MAAM,EACJ,GAAG,EACJ,GAAG,WAAW,EAAE,CAAC;AAKlB,MAAM,eAAe,GAA4B;IAC/C,aAAa,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,qBAAqB,EAAE,YAAY,EAAE,0BAA0B,CAAC;IACtH,cAAc,EAAE,CAAC,+BAA+B,EAAE,sCAAsC,CAAC;IACzF,gBAAgB,EAAE,CAAC,mBAAmB,EAAE,gFAAgF,EAAE,aAAa,EAAE,cAAc,CAAC;CACzJ,CAAC;AAKF,MAAM,mBAAmB,GAA4B;IACnD,KAAK,EAAE,CAAC,iCAAiC,EAAE,6BAA6B,EAAE,qCAAqC,CAAC;IAChH,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,CAAC;IACrE,IAAI,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,CAAC;CAClF,CAAC;AAKF,SAAS,eAAe;IACtB,MAAM,UAAU,GAAG,CAAC,GAAG,eAAe,CAAC,aAAa,EAAE,GAAG,eAAe,CAAC,cAAc,EAAE,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjK,OAAO,IAAI,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAKD,SAAS,qBAAqB,CAAC,OAAe,EAAE,WAAW,GAAG,EAAE;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,OAAO,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAKD,SAAS,aAAa,CAAC,OAAe,EAAE,SAAkC;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAG/C,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,UAAU,KAAK,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5G,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAKD,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AACD,SAAS,sBAAsB,CAAC,OAAe,EAAE,GAAW;IAI1D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,kCAAkC,OAAO,SAAS,EAAE,GAAG,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,+BAA+B,OAAO,eAAe,EAAE,GAAG,CAAC,CAAC;IAC1F,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AACD,SAAS,cAAc,CAAC,IAA6B,EAAE,QAAsD,EAAE,IAAyB;IACtI,MAAM,cAAc,GAAG,QAAQ,IAAI,EAAE,CAAC;IACtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACtE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAC/E,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;SACpE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,aAAa,CAAC,CAAC;QACtD,QAAQ,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC;QAC/D,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAKD,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,QAAQ,GAAG,+BAA+B,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,aAAa,EAAE,mBAAmB,EAAE,gEAAgE,EAAE,2BAA2B,EAAE,uCAAuC,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1T,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,QAAQ,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC;AAC7C,CAAC;AAKD,KAAK,UAAU,uBAAuB,CAAC,WAAmB,EAAE,OAAe,EAAE,OAAe,EAAE,OAAgC;IAC5H,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC;IAC3D,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAClF,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAG5E,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK,IAAI,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5E,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,yEAAyE;YACpF,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,sDAAsD;SACjE,CAAC,CAAC;IACL,CAAC;IAGD,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;YAEjF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAC9C,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC3B,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,CAAC;gBAG9B,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC3D,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,aAAa,EAAE,CAAC;wBACpD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BACvB,MAAM,SAAS,GAAG,+BAA+B,CAAC;4BAClD,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;gCAC3H,SAAS,CAAC,IAAI,CAAC;oCACb,IAAI,EAAE,sBAAsB;oCAC5B,SAAS,EAAE,wCAAwC,OAAO,CAAC,MAAM,EAAE;oCACnE,UAAU,EAAE,SAAS;oCACrB,KAAK,EAAE,UAAU;oCACjB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oCACrC,QAAQ,EAAE,sDAAsD;iCACjE,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAGD,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;oBACtC,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,cAAc,EAAE,CAAC;wBACrD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BACvB,MAAM,SAAS,GAAG,2BAA2B,CAAC;4BAC9C,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;gCAC3H,SAAS,CAAC,IAAI,CAAC;oCACb,IAAI,EAAE,kBAAkB;oCACxB,SAAS,EAAE,2CAA2C;oCACtD,UAAU,EAAE,MAAM;oCAClB,KAAK,EAAE,UAAU;oCACjB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oCACrC,QAAQ,EAAE,wCAAwC;iCACnD,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;oBAGD,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,gBAAgB,EAAE,CAAC;wBACvD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BACvB,MAAM,SAAS,GAAG,2BAA2B,CAAC;4BAC9C,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;gCAC3H,SAAS,CAAC,IAAI,CAAC;oCACb,IAAI,EAAE,kBAAkB;oCACxB,SAAS,EAAE,iCAAiC,OAAO,CAAC,MAAM,EAAE;oCAC5D,UAAU,EAAE,OAAO;oCACnB,KAAK,EAAE,UAAU;oCACjB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oCACrC,QAAQ,EAAE,yEAAyE;iCACpF,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO;QACP,WAAW;QACX,SAAS;QACT,eAAe;QACf,WAAW;QACX,UAAU;KACX,CAAC;AACJ,CAAC;AAKD,SAAS,wBAAwB,CAAC,OAA+B;IAC/D,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,KAAgC,CAAC;QACrC,QAAQ,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5B,KAAK,SAAS,CAAC;YACf,KAAK,MAAM;gBACT,KAAK,GAAG,MAAM,CAAC;gBACf,MAAM;YACR,KAAK,OAAO;gBACV,KAAK,GAAG,OAAO,CAAC;gBAChB,MAAM;YACR;gBACE,KAAK,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,YAAY,QAAQ,CAAC,IAAI,EAAE;YACjC,KAAK;YACL,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAKD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,cAAc;IACzB,SAAS,EAAE,sDAAsD;IACjE,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE;QACjC,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAW,EAAE,OAAe,EAAE,IAAa,EAAE,WAAoB,EAAyB,EAAE;QAC1G,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;YACvE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,GAAI,MAEX,CAAC,gBAOU,CAAC;QACd,MAAM,aAAa,GAAwB,GAAG,EAAE,aAAa,KAAK,SAAS,IAAI,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5I,MAAM,OAAO,GAA4B;YACvC,iBAAiB,EAAE,GAAG,EAAE,iBAAiB,IAAI,IAAI;YACjD,aAAa,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI;YACzC,eAAe,EAAE,GAAG,EAAE,eAAe,IAAI,IAAI;YAC7C,WAAW,EAAE,OAAO,GAAG,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACxE,SAAS,EAAE,cAAc,CAAC,mBAAmB,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC;SAC9E,CAAC;QACF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAClF,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,6BAA6B,OAAO,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAC;AAKF,OAAO,EAAE,uBAAuB,EAAE,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * @fileoverview Detector de problemas em arquivos Markdown\n *\n * Verifica compliance de licenças, proveniência e referências em documentação.\n * Migrado de: scripts/scan-markdown.mjs\n * Data: 2025-11-02\n *\n * Funcionalidades:\n * - Detecta licenças incompatíveis (GPL, AGPL, CC-BY, etc)\n * - Verifica presença de aviso de proveniência\n * - Identifica referências de risco (Stack Overflow, cessão de direitos)\n * - Whitelist configurável para documentos de política\n */\n\n\nimport { config } from '@core/config';\nimport { getMessages } from '@core/messages';\nimport { extrairSupressoes, isRegraSuprimida } from '@shared/helpers';\n\nimport type { Ocorrencia } from '@';\n\nimport type { MarkdownAnaliseArquivo, MarkdownDetectorOptions, MarkdownLicensePatterns, MarkdownProblema, MarkdownWhitelistConfig } from '../../types/analysts/markdown.js';\n\nconst {\n  log\n} = getMessages();\n\n/**\n * Padrões de licenças e cessões problemáticas\n */\nconst LICENCA_PADROES: MarkdownLicensePatterns = {\n  incompativeis: [/\\bGPL\\b/i, /\\bAGPL\\b/i, /\\bLGPL\\b/i, /Creative\\s+Commons/i, /\\bCC-BY\\b/i, /All\\s+rights\\s+reserved/i],\n  cessaoDireitos: [/cess(?:ã|a)o\\s+de\\s+direitos/i, /transfer(?:ê|e)ncia\\s+de\\s+direitos/i],\n  referenciasRisco: [/Stack\\s*Overflow/i, /(?:^|https?:\\/\\/|\\/\\/)(?:[^\\/\\s@]+\\.)?stackoverflow\\.com(?::\\d+)?(?:[\\/?#]|$)/i, /\\bassign\\b/i, /\\bcession\\b/i]\n};\n\n/**\n * Whitelist padrão de arquivos\n */\nconst PADRAO_LISTA_BRANCA: MarkdownWhitelistConfig = {\n  paths: ['.github/copilot-instructions.md', 'docs/POLICY-PROVENIENCIA.md', 'docs/partials/AVISO-PROVENIENCIA.md'],\n  patterns: ['**/reports/**', 'docs/history/**', 'tests/**', 'tmp*.md'],\n  dirs: ['pre-public', 'preview-tutanus', '.abandonados', '.deprecados', 'reports']\n};\n\n/**\n * Cria regex combinado de todos os padrões de risco\n */\nfunction createRiskRegex(): RegExp {\n  const allPadroes = [...LICENCA_PADROES.incompativeis, ...LICENCA_PADROES.cessaoDireitos, ...LICENCA_PADROES.referenciasRisco].map(raiz => raiz.source).join('|');\n  return new RegExp(allPadroes, 'i');\n}\n\n/**\n * Verifica se arquivo tem aviso de proveniência\n */\nfunction hasProvenienciaHeader(content: string, headerLines = 30): boolean {\n  const head = content.split(/\\r?\\n/).slice(0, headerLines).join('\\n');\n  return /Proveni[eê]ncia\\s+e\\s+Autoria/i.test(head);\n}\n\n/**\n * Verifica se arquivo está na whitelist\n */\nfunction isWhitelisted(relPath: string, whitelist: MarkdownWhitelistConfig): boolean {\n  const normalized = relPath.replace(/\\\\/g, '/');\n\n  // Paths exatos\n  if (whitelist.paths.some((caminho: string) => normalized === caminho || normalized.endsWith(`/${caminho}`))) {\n    return true;\n  }\n\n  // Diretórios\n  if (whitelist.dirs.some((dir: string) => normalized.startsWith(`${dir}/`))) {\n    return true;\n  }\n\n  // Patterns (simplificado - sem glob completo)\n  for (const pattern of whitelist.patterns) {\n    if (pattern.includes('**')) {\n      const parts = pattern.split('**');\n      if (parts.every((part: string) => normalized.includes(part.replace(/\\*/g, '')))) {\n        return true;\n      }\n    } else if (pattern.startsWith('*')) {\n      if (normalized.endsWith(pattern.substring(1))) {\n        return true;\n      }\n    } else if (pattern.includes('*')) {\n      const [prefix, suffix] = pattern.split('*');\n      if (normalized.startsWith(prefix) && normalized.endsWith(suffix)) {\n        return true;\n      }\n    }\n  }\n  return false;\n}\n\n/**\n * Verifica se tem marcador de risco aprovado\n */\nfunction hasRiskReferenceMarker(content: string): boolean {\n  return /<!--\\s*RISCO_REFERENCIA_OK\\s*-->/i.test(content);\n}\nfunction hasTutanusIgnoreMarker(content: string, key: string): boolean {\n  // Suporta ambos os padrões:\n  // <!-- tutanus-ignore: license-check -->\n  // <!-- @tutanus-disable license-check -->\n  const escaped = key.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&');\n  const oldPattern = new RegExp(`<!--\\\\s*tutanus-ignore\\\\s*:\\\\s*${escaped}\\\\s*-->`, 'i');\n  const newPattern = new RegExp(`<!--\\\\s*@tutanus-disable\\\\s+${escaped}(?:\\\\s|-->|$)`, 'i');\n  return oldPattern.test(content) || newPattern.test(content);\n}\nfunction mergeWhitelist(base: MarkdownWhitelistConfig, override: Partial<MarkdownWhitelistConfig> | undefined, mode: 'merge' | 'replace'): MarkdownWhitelistConfig {\n  const overrideConfig = override || {};\n  if (mode === 'replace') {\n    return {\n      paths: Array.isArray(overrideConfig.paths) ? overrideConfig.paths : [],\n      patterns: Array.isArray(overrideConfig.patterns) ? overrideConfig.patterns : [],\n      dirs: Array.isArray(overrideConfig.dirs) ? overrideConfig.dirs : []\n    };\n  }\n  const uniq = (arr: string[]) => Array.from(new Set(arr.map(String)));\n  const overridePaths = Array.isArray(overrideConfig.paths) ? overrideConfig.paths : [];\n  const overridePatterns = Array.isArray(overrideConfig.patterns) ? overrideConfig.patterns : [];\n  const overrideDirs = Array.isArray(overrideConfig.dirs) ? overrideConfig.dirs : [];\n  return {\n    paths: uniq([...(base.paths || []), ...overridePaths]),\n    patterns: uniq([...(base.patterns || []), ...overridePatterns]),\n    dirs: uniq([...(base.dirs || []), ...overrideDirs])\n  };\n}\n\n/**\n * Verifica se o único termo de risco é do aviso de proveniência\n */\nfunction isBenignProvenienciaOnly(content: string): boolean {\n  const rxCessao = /cess(?:ã|a)o\\s+de\\s+direitos/i;\n  const rxOthers = new RegExp(['\\\\bGPL\\\\b', '\\\\bAGPL\\\\b', '\\\\bLGPL\\\\b', 'Creative\\\\s+Commons', '\\\\bCC-BY\\\\b', 'Stack\\\\s*Overflow', '(?:^|[^\\\\w.-])(?:[\\\\w-]+\\\\.)*stackoverflow\\\\.com(?:$|[^\\\\w.-])', 'All\\\\s+rights\\\\s+reserved', 'transfer(?:ê|e)ncia\\\\s+de\\\\s+direitos', '\\\\bassign\\\\b', '\\\\bcession\\\\b'].join('|'), 'i');\n  const hasCessao = rxCessao.test(content);\n  const hasOthers = rxOthers.test(content);\n  const hasAviso = /Proveni[eê]ncia\\s+e\\s+Autoria/i.test(content);\n  return hasAviso && hasCessao && !hasOthers;\n}\n\n/**\n * Analisa um arquivo Markdown\n */\nasync function analisarArquivoMarkdown(fullCaminho: string, relPath: string, content: string, options: MarkdownDetectorOptions): Promise<MarkdownAnaliseArquivo> {\n  const whitelist = options.whitelist || PADRAO_LISTA_BRANCA;\n  const problemas: MarkdownProblema[] = [];\n  const whitelisted = isWhitelisted(relPath, whitelist);\n  const temRiscoOk = hasRiskReferenceMarker(content);\n  const temProveniencia = hasProvenienciaHeader(content, options.headerLines || 30);\n  const ignoreLicencaCheck = hasTutanusIgnoreMarker(content, 'license-check');\n\n  // Verificar proveniência\n  if (options.checkProveniencia !== false && !temProveniencia && !whitelisted) {\n    problemas.push({\n      tipo: 'falta-proveniencia',\n      descricao: 'Arquivo não possui aviso de Proveniência e Autoria nas primeiras linhas',\n      severidade: 'alto',\n      sugestao: 'Adicione o aviso usando scripts/add-disclaimer-md.js'\n    });\n  }\n\n  // Verificar licenças e referências\n  if (options.checkLicenses !== false || options.checkReferences !== false) {\n    const riskRegex = createRiskRegex();\n    const hasRisk = riskRegex.test(content);\n    if (hasRisk && !isBenignProvenienciaOnly(content) && !whitelisted && !temRiscoOk) {\n      // Identificar problemas específicos\n      const lines = content.split(/\\r?\\n/);\n      const supressoes = extrairSupressoes(content);\n      for (let indice = 0; indice < lines.length; indice++) {\n        const line = lines[indice];\n        const linhaAtual = indice + 1;\n\n        // Verificar licenças incompatíveis\n        if (options.checkLicenses !== false && !ignoreLicencaCheck) {\n          for (const pattern of LICENCA_PADROES.incompativeis) {\n            if (pattern.test(line)) {\n              const regraNome = `markdown-licenca-incompativel`;\n              if (!isRegraSuprimida(regraNome, linhaAtual, supressoes) && !isRegraSuprimida('detector-markdown', linhaAtual, supressoes)) {\n                problemas.push({\n                  tipo: 'licenca-incompativel',\n                  descricao: `Licença potencialmente incompatível: ${pattern.source}`,\n                  severidade: 'critico',\n                  linha: linhaAtual,\n                  trecho: line.trim().substring(0, 100),\n                  sugestao: 'Verifique compatibilidade com licença MIT do projeto'\n                });\n              }\n            }\n          }\n        }\n\n        // Verificar cessão de direitos\n        if (options.checkReferences !== false) {\n          for (const pattern of LICENCA_PADROES.cessaoDireitos) {\n            if (pattern.test(line)) {\n              const regraNome = `markdown-referencia-risco`;\n              if (!isRegraSuprimida(regraNome, linhaAtual, supressoes) && !isRegraSuprimida('detector-markdown', linhaAtual, supressoes)) {\n                problemas.push({\n                  tipo: 'referencia-risco',\n                  descricao: 'Referência a cessão de direitos detectada',\n                  severidade: 'alto',\n                  linha: linhaAtual,\n                  trecho: line.trim().substring(0, 100),\n                  sugestao: 'Verifique se não há implicações legais'\n                });\n              }\n            }\n          }\n\n          // Verificar referências externas\n          for (const pattern of LICENCA_PADROES.referenciasRisco) {\n            if (pattern.test(line)) {\n              const regraNome = `markdown-referencia-risco`;\n              if (!isRegraSuprimida(regraNome, linhaAtual, supressoes) && !isRegraSuprimida('detector-markdown', linhaAtual, supressoes)) {\n                problemas.push({\n                  tipo: 'referencia-risco',\n                  descricao: `Referência externa detectada: ${pattern.source}`,\n                  severidade: 'medio',\n                  linha: linhaAtual,\n                  trecho: line.trim().substring(0, 100),\n                  sugestao: 'Adicione marcador <!-- RISCO_REFERENCIA_OK --> se referência for válida'\n                });\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n  return {\n    relPath,\n    fullCaminho,\n    problemas,\n    temProveniencia,\n    whitelisted,\n    temRiscoOk\n  };\n}\n\n/**\n * Converte análise para ocorrências do Tutanus\n */\nfunction converterParaOcorrencias(analise: MarkdownAnaliseArquivo): Ocorrencia[] {\n  const ocorrencias: Ocorrencia[] = [];\n  for (const problema of analise.problemas) {\n    let nivel: 'erro' | 'aviso' | 'info';\n    switch (problema.severidade) {\n      case 'critico':\n      case 'alto':\n        nivel = 'erro';\n        break;\n      case 'medio':\n        nivel = 'aviso';\n        break;\n      default:\n        nivel = 'info';\n    }\n    ocorrencias.push({\n      tipo: `markdown-${problema.tipo}`,\n      nivel,\n      mensagem: problema.descricao,\n      relPath: analise.relPath,\n      linha: problema.linha,\n      contexto: problema.trecho,\n      sugestao: problema.sugestao\n    });\n  }\n  return ocorrencias;\n}\n\n/**\n * Detector de problemas em Markdown\n */\nexport const detectorMarkdown = {\n  nome: 'detector-markdown',\n  categoria: 'documentacao',\n  descricao: 'Detecta problemas de compliance em arquivos Markdown',\n  test: (relPath: string): boolean => {\n    return relPath.toLowerCase().endsWith('.md');\n  },\n  aplicar: async (src: string, relPath: string, _ast: unknown, fullCaminho?: string): Promise<Ocorrencia[]> => {\n    if (!fullCaminho) {\n      log.aviso(`detector-markdown: fullPath não fornecido para ${relPath}`);\n      return [];\n    }\n    const cfg = (config as unknown as {\n      detectorMarkdown?: unknown;\n    }).detectorMarkdown as {\n      checkProveniencia?: boolean;\n      checkLicenses?: boolean;\n      checkReferences?: boolean;\n      headerLines?: number;\n      whitelist?: Partial<MarkdownWhitelistConfig>;\n      whitelistMode?: 'merge' | 'replace';\n    } | undefined;\n    const whitelistMode: 'merge' | 'replace' = cfg?.whitelistMode === 'replace' || cfg?.whitelistMode === 'merge' ? cfg.whitelistMode : 'merge';\n    const options: MarkdownDetectorOptions = {\n      checkProveniencia: cfg?.checkProveniencia ?? true,\n      checkLicenses: cfg?.checkLicenses ?? true,\n      checkReferences: cfg?.checkReferences ?? true,\n      headerLines: typeof cfg?.headerLines === 'number' ? cfg.headerLines : 30,\n      whitelist: mergeWhitelist(PADRAO_LISTA_BRANCA, cfg?.whitelist, whitelistMode)\n    };\n    try {\n      const analise = await analisarArquivoMarkdown(fullCaminho, relPath, src, options);\n      return converterParaOcorrencias(analise);\n    } catch (error) {\n      log.erro(`Erro ao analisar Markdown ${relPath}: ${(error as Error).message}`);\n      return [];\n    }\n  }\n};\n\n/**\n * Exporta função de análise standalone para uso em outros módulos\n */\nexport { analisarArquivoMarkdown };"]}

package/dist/analysts/plugins/detector-node.d.ts

@@ -0,0 +1,3 @@
+import type { ResultadoDeteccaoArquetipo } from '../../types/index.js';
+export declare function detectarArquetipoNode(arquivos: string[]): ResultadoDeteccaoArquetipo[];
+//# sourceMappingURL=detector-node.d.ts.map

package/dist/analysts/plugins/detector-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-node.d.ts","sourceRoot":"","sources":["../../../src/analysts/plugins/detector-node.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,GAAG,CAAC;AAOpD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,0BAA0B,EAAE,CAMtF"}

package/dist/analysts/plugins/detector-node.js

@@ -0,0 +1,11 @@
+import { scoreArquetipo } from '../scorers/index.js';
+import { ARQUETIPOS } from '../strategists/index.js';
+export function detectarArquetipoNode(arquivos) {
+    const temPackage = arquivos.some(arquivo => arquivo.endsWith('package.json'));
+    const ehNode = temPackage;
+    if (!ehNode)
+        return [];
+    const candidatos = ARQUETIPOS.map(def => scoreArquetipo(def, arquivos)).filter(raiz => raiz.score > 0);
+    return candidatos;
+}
+//# sourceMappingURL=detector-node.js.map

package/dist/analysts/plugins/detector-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-node.js","sourceRoot":"","sources":["../../../src/analysts/plugins/detector-node.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AASnD,MAAM,UAAU,qBAAqB,CAAC,QAAkB;IACtD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,UAAU,CAAC;IAC1B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACvG,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { scoreArquetipo } from '@analysts/scorers';\nimport { ARQUETIPOS } from '@analysts/strategists';\n\nimport type { ResultadoDeteccaoArquetipo } from '@';\n\n/**\n * Detector especializado para projetos Node.js/TypeScript\n * Retorna lista de candidatos de arquétipo com score/confiança\n */\n\nexport function detectarArquetipoNode(arquivos: string[]): ResultadoDeteccaoArquetipo[] {\n  const temPackage = arquivos.some(arquivo => arquivo.endsWith('package.json'));\n  const ehNode = temPackage;\n  if (!ehNode) return [];\n  const candidatos = ARQUETIPOS.map(def => scoreArquetipo(def, arquivos)).filter(raiz => raiz.score > 0);\n  return candidatos;\n}"]}

package/dist/analysts/plugins/index.d.ts

@@ -0,0 +1,5 @@
+export * from './analyst-formatter.js';
+export * from './detector-documentation.js';
+export * from './detector-markdown.js';
+export * from './detector-node.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analysts/plugins/index.ts"],"names":[],"mappings":"AAoBA,cAAc,wBAAwB,CAAC;AAGvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC"}

package/dist/analysts/plugins/index.js

@@ -0,0 +1,5 @@
+export * from './analyst-formatter.js';
+export * from './detector-documentation.js';
+export * from './detector-markdown.js';
+export * from './detector-node.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/plugins/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analysts/plugins/index.ts"],"names":[],"mappings":"AAoBA,cAAc,wBAAwB,CAAC;AAGvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * 🔌 Plugins do Tutanus\n *\n * Analistas e detectores especializados que podem ser habilitados/desabilitados.\n * São opcionais e carregados dinamicamente pelo registry.\n *\n * Plugins Genéricos:\n * - analista-formater.ts    - Formatação mínima (JSON/MD/YAML)\n *\n * Detectores Especializados (cross-cutting):\n * - detector-documentacao.ts     - Qualidade de documentação\n * - detector-markdown.ts         - Análise de Markdown\n * - detector-node.ts             - Padrões Node.js\n *\n * Nota: Analistas específicos de tecnologia foram movidos para suas respectivas pastas:\n * - react/, python/, css/, html/, sql/, tailwind/, xml/, css-in-js/, github-actions/, shell/, svg/\n */\n\n// Analista genérico\nexport * from './analyst-formatter.js';\n\n// Detectores especializados\nexport * from './detector-documentation.js';\nexport * from './detector-markdown.js';\nexport * from './detector-node.js';\n"]}

package/dist/analysts/python/analysts/analyst-python.d.ts

@@ -0,0 +1,12 @@
+import { criarOcorrencia } from '../../../types/index.js';
+type Msg = ReturnType<typeof criarOcorrencia>;
+export declare const analistaPython: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    global: false;
+    test: (relPath: string) => boolean;
+    aplicar: (src: string, relPath: string) => Promise<Msg[] | null>;
+};
+export {};
+//# sourceMappingURL=analyst-python.d.ts.map

package/dist/analysts/python/analysts/analyst-python.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-python.d.ts","sourceRoot":"","sources":["../../../../src/analysts/python/analysts/analyst-python.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiB,eAAe,EAAE,MAAM,GAAG,CAAC;AAGnD,KAAK,GAAG,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;AAwJ9C,eAAO,MAAM,cAAc;;;;;oBAKT,MAAM,KAAG,OAAO;+CACD,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;CAMpD,CAAC"}

package/dist/analysts/python/analysts/analyst-python.js

@@ -0,0 +1,121 @@
+import { messages } from '../../../core/messages/index.js';
+import { createLineLookup, maskPythonComments, maskPythonStringsAndComments } from '../../../shared/helpers/index.js';
+import { criarAnalista, criarOcorrencia } from '../../../types/index.js';
+const disableEnv = process.env.TUTANUS_DISABLE_PLUGIN_PYTHON === '1';
+function isPythonFile(relPath) {
+    return /\.(py|pyx|pyi)$/i.test(relPath);
+}
+function warn(message, relPath, line, nivel = messages.SeverityNiveis.warning) {
+    return criarOcorrencia({
+        relPath,
+        mensagem: message,
+        linha: line,
+        nivel,
+        origem: messages.AnalystOrigens.python,
+        tipo: messages.AnalystTipos.python
+    });
+}
+function collectPythonIssues(src, relPath) {
+    const ocorrencias = [];
+    const lineOf = createLineLookup(src).lineAt;
+    const scan = maskPythonStringsAndComments(src);
+    const scanNoComentarios = maskPythonComments(src);
+    for (const match of scan.matchAll(/^\s*(?:async\s+)?def\s+([a-z_][a-z0-9_]*)\s*\((.*?)\)(?!\s*->)/gm)) {
+        const funcNome = match[1] || '';
+        const line = lineOf(match.index);
+        if (/^__|main|__init__|setUp|tearDown|get_|set_/.test(funcNome))
+            continue;
+        ocorrencias.push(warn(messages.PythonMensagens.missingTypeHints, relPath, line));
+    }
+    for (const match of scan.matchAll(/^\s*print\s*\(/gm)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.printInsteadOfLog, relPath, line));
+    }
+    for (const match of scan.matchAll(/\beval\s*\(/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.evalUsage, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scan.matchAll(/\bexec\s*\(/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.execUsage, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scan.matchAll(/\bsubprocess\.(?:run|Popen|call|check_call|check_output)\s*\([\s\S]*?\)/g)) {
+        if (!/\bshell\s*=\s*True\b/.test(match[0]))
+            continue;
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.subprocessShellTrue, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scan.matchAll(/\bpickle\.(?:load|loads)\s*\(/gi)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.pickleUsage, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scan.matchAll(/\byaml\.load\s*\([\s\S]*?\)/gi)) {
+        const text = match[0] ?? '';
+        const hasSafeLoader = /\bLoader\s*=\s*yaml\.(?:SafeLoader|CSafeLoader)\b/.test(text);
+        const hasFullLoader = /\bLoader\s*=\s*yaml\.(?:FullLoader|CFullLoader)\b/.test(text);
+        const hasExplicitLoader = /\bLoader\s*=/.test(text);
+        if (hasSafeLoader)
+            continue;
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.yamlUnsafeLoad, relPath, line, hasFullLoader || hasExplicitLoader ? messages.SeverityNiveis.warning : messages.SeverityNiveis.error));
+    }
+    for (const match of scanNoComentarios.matchAll(/(?:requests|urllib)\.(?:get|post|request)\s*\([^)]*\)/g)) {
+        const hasVerify = /verify\s*=/i.test(match[0]);
+        if (!hasVerify && /http:\/\//i.test(match[0])) {
+            const line = lineOf(match.index);
+            ocorrencias.push(warn(messages.PythonMensagens.httpWithoutVerify, relPath, line));
+        }
+    }
+    for (const match of scanNoComentarios.matchAll(/\b(?:execute|executemany|executescript)\s*\(\s*f(['"])(?:SELECT|INSERT|UPDATE|DELETE)[\s\S]*?\1/gi)) {
+        const text = match[0] ?? '';
+        if (!/\{[^}]+\}/.test(text))
+            continue;
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.sqlInjection, relPath, line, messages.SeverityNiveis.error));
+    }
+    for (const match of scan.matchAll(/^\s*except\s*:\s*$/gm)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.broadExcept, relPath, line));
+    }
+    for (const match of scan.matchAll(/except\s+\w+\s*(?:as\s+\w+)?\s*:\s*pass/g)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.passInExcept, relPath, line));
+    }
+    for (const match of scan.matchAll(/except\s+\w+\s*(?:as\s+\w+)?\s*:\s*\n\s*raise\s*\n/gm)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.bareRaise, relPath, line));
+    }
+    for (const match of scan.matchAll(/^\s*global\s+\w+/gm)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.globalKeyword, relPath, line));
+    }
+    for (const match of scan.matchAll(/def\s+\w+\s*\([^)]*=\s*(?:\[|\{)[^\]}]*(?:\]|\})/g)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.mutableDefault, relPath, line));
+    }
+    for (const match of scan.matchAll(/for\s+\w+\s+in\s+\w+:\s*\n\s*(\w+)\.append\s*\(/g)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.listComprehensionOpportunity, relPath, line, messages.SeverityNiveis.suggestion));
+    }
+    for (const match of scan.matchAll(/for\s+\w+\s+in\s+(\w+):\s*\n\s*(?:value|val)\s*=\s*\1\[/gm)) {
+        const line = lineOf(match.index);
+        ocorrencias.push(warn(messages.PythonMensagens.loopingOverDict, relPath, line, messages.SeverityNiveis.suggestion));
+    }
+    return ocorrencias;
+}
+export const analistaPython = criarAnalista({
+    nome: 'analista-python',
+    categoria: 'framework',
+    descricao: 'Heurísticas leves para Python (boas práticas e segurança).',
+    global: false,
+    test: (relPath) => isPythonFile(relPath),
+    aplicar: async (src, relPath) => {
+        if (disableEnv)
+            return null;
+        if (relPath.includes('src/analistas/plugins/analista-python.ts'))
+            return null;
+        const msgs = collectPythonIssues(src, relPath);
+        return msgs.length ? msgs : null;
+    }
+});
+//# sourceMappingURL=analyst-python.js.map

package/dist/analysts/python/analysts/analyst-python.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-python.js","sourceRoot":"","sources":["../../../../src/analysts/python/analysts/analyst-python.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAErG,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEnD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,GAAG,CAAC;AAErE,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AACD,SAAS,IAAI,CAAC,OAAe,EAAE,OAAe,EAAE,IAAa,EAAE,QAAgF,QAAQ,CAAC,cAAc,CAAC,OAAO;IAC5K,OAAO,eAAe,CAAC;QACrB,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,IAAI;QACX,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,MAAM;QACtC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM;KACnC,CAAC,CAAC;AACL,CAAC;AACD,SAAS,mBAAmB,CAAC,GAAW,EAAE,OAAe;IACvD,MAAM,WAAW,GAAU,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAG5C,MAAM,IAAI,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAG/C,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAMlD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,kEAAkE,CAAC,EAAE,CAAC;QACtG,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAGjC,IAAI,4CAA4C,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC1E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC;IAKD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACpF,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3G,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3G,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,0EAA0E,CAAC,EAAE,CAAC;QAC9G,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QACrD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACrH,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7G,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAG,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,aAAa,GAAG,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,iBAAiB,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,aAAa;YAAE,SAAS;QAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,IAAI,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACvL,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,QAAQ,CAAC,wDAAwD,CAAC,EAAE,CAAC;QACzG,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAKD,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,QAAQ,CAAC,mGAAmG,CAAC,EAAE,CAAC;QACpJ,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9G,CAAC;IAKD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,0CAA0C,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,sDAAsD,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAKD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAChF,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACjF,CAAC;IAKD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,4BAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IACnI,CAAC;IAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,2DAA2D,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;IAC1C,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,4DAA4D;IACvE,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC;IACzD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAyB,EAAE;QACrD,IAAI,UAAU;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,OAAO,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;CACF,CAAC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { messages } from '@core/messages';\nimport { createLineLookup, maskPythonComments, maskPythonStringsAndComments } from '@shared/helpers';\n\nimport { criarAnalista, criarOcorrencia } from '@';\n\nconst disableEnv = process.env.TUTANUS_DISABLE_PLUGIN_PYTHON === '1';\ntype Msg = ReturnType<typeof criarOcorrencia>;\nfunction isPythonFile(relPath: string): boolean {\n  return /\\.(py|pyx|pyi)$/i.test(relPath);\n}\nfunction warn(message: string, relPath: string, line?: number, nivel: (typeof messages.SeverityNiveis)[keyof typeof messages.SeverityNiveis] = messages.SeverityNiveis.warning): Msg {\n  return criarOcorrencia({\n    relPath,\n    mensagem: message,\n    linha: line,\n    nivel,\n    origem: messages.AnalystOrigens.python,\n    tipo: messages.AnalystTipos.python\n  });\n}\nfunction collectPythonIssues(src: string, relPath: string): Msg[] {\n  const ocorrencias: Msg[] = [];\n  const lineOf = createLineLookup(src).lineAt;\n\n  // Reduz falsos positivos: evite detectar padrões dentro de strings/comentários.\n  const scan = maskPythonStringsAndComments(src);\n  // Algumas regras precisam enxergar literais (ex.: URLs/SQL em strings), mas ainda\n  // devem ignorar comentários.\n  const scanNoComentarios = maskPythonComments(src);\n\n// ─── Type Hints & Code Quality ────────────────────────────────\n\n  // Funções sem type hints (heurística: def seguido de parênteses)\n  // Ignora __init__, main, properties, etc.\n  for (const match of scan.matchAll(/^\\s*(?:async\\s+)?def\\s+([a-z_][a-z0-9_]*)\\s*\\((.*?)\\)(?!\\s*->)/gm)) {\n    const funcNome = match[1] || '';\n    const line = lineOf(match.index);\n\n    // Ignora dunder methods, main, e métodos comuns sem tipo\n    if (/^__|main|__init__|setUp|tearDown|get_|set_/.test(funcNome)) continue;\n    ocorrencias.push(warn(messages.PythonMensagens.missingTypeHints, relPath, line));\n  }\n\n// ─── Security Issues ──────────────────────────────────────────\n\n  // print() instead of logging\n  for (const match of scan.matchAll(/^\\s*print\\s*\\(/gm)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.printInsteadOfLog, relPath, line));\n  }\n\n  // eval() usage\n  for (const match of scan.matchAll(/\\beval\\s*\\(/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.evalUsage, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // exec() usage\n  for (const match of scan.matchAll(/\\bexec\\s*\\(/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.execUsage, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // subprocess(..., shell=True)\n  for (const match of scan.matchAll(/\\bsubprocess\\.(?:run|Popen|call|check_call|check_output)\\s*\\([\\s\\S]*?\\)/g)) {\n    if (!/\\bshell\\s*=\\s*True\\b/.test(match[0])) continue;\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.subprocessShellTrue, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // pickle loads (RCE)\n  for (const match of scan.matchAll(/\\bpickle\\.(?:load|loads)\\s*\\(/gi)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.pickleUsage, relPath, line, messages.SeverityNiveis.error));\n  }\n\n  // yaml.load sem Loader seguro\n  for (const match of scan.matchAll(/\\byaml\\.load\\s*\\([\\s\\S]*?\\)/gi)) {\n    const text = match[0] ?? '';\n    const hasSafeLoader = /\\bLoader\\s*=\\s*yaml\\.(?:SafeLoader|CSafeLoader)\\b/.test(text);\n    const hasFullLoader = /\\bLoader\\s*=\\s*yaml\\.(?:FullLoader|CFullLoader)\\b/.test(text);\n    const hasExplicitLoader = /\\bLoader\\s*=/.test(text);\n    if (hasSafeLoader) continue;\n    // FullLoader é melhor que default em versões antigas, mas ainda é discutível; marcamos aviso.\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.yamlUnsafeLoad, relPath, line, hasFullLoader || hasExplicitLoader ? messages.SeverityNiveis.warning : messages.SeverityNiveis.error));\n  }\n\n  // requests/urllib sem verify (HTTP inseguro)\n  for (const match of scanNoComentarios.matchAll(/(?:requests|urllib)\\.(?:get|post|request)\\s*\\([^)]*\\)/g)) {\n    const hasVerify = /verify\\s*=/i.test(match[0]);\n    if (!hasVerify && /http:\\/\\//i.test(match[0])) {\n      const line = lineOf(match.index);\n      ocorrencias.push(warn(messages.PythonMensagens.httpWithoutVerify, relPath, line));\n    }\n  }\n\n  // SQL injection patterns (simples)\n  // - execute(f\"SELECT ... {var} ...\")\n  // - execute(f'SELECT ... {var} ...')\n  for (const match of scanNoComentarios.matchAll(/\\b(?:execute|executemany|executescript)\\s*\\(\\s*f(['\"])(?:SELECT|INSERT|UPDATE|DELETE)[\\s\\S]*?\\1/gi)) {\n    const text = match[0] ?? '';\n    // Heurística: f-string com interpolação sugere concatenação de SQL.\n    if (!/\\{[^}]+\\}/.test(text)) continue;\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.sqlInjection, relPath, line, messages.SeverityNiveis.error));\n  }\n\n// ─── Exception Handling ───────────────────────────────────────\n\n  // Bare except\n  for (const match of scan.matchAll(/^\\s*except\\s*:\\s*$/gm)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.broadExcept, relPath, line));\n  }\n\n  // except ... pass (bad practice)\n  for (const match of scan.matchAll(/except\\s+\\w+\\s*(?:as\\s+\\w+)?\\s*:\\s*pass/g)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.passInExcept, relPath, line));\n  }\n\n  // bare raise (contextless)\n  for (const match of scan.matchAll(/except\\s+\\w+\\s*(?:as\\s+\\w+)?\\s*:\\s*\\n\\s*raise\\s*\\n/gm)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.bareRaise, relPath, line));\n  }\n\n// ─── Code Quality & Best Practices ────────────────────────────\n\n  // global keyword (code smell)\n  for (const match of scan.matchAll(/^\\s*global\\s+\\w+/gm)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.globalKeyword, relPath, line));\n  }\n\n  // Mutable default arguments\n  for (const match of scan.matchAll(/def\\s+\\w+\\s*\\([^)]*=\\s*(?:\\[|\\{)[^\\]}]*(?:\\]|\\})/g)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.mutableDefault, relPath, line));\n  }\n\n// ─── Performance Hints ────────────────────────────────────────\n\n  // Loop that could be list comprehension (simple heuristic)\n  for (const match of scan.matchAll(/for\\s+\\w+\\s+in\\s+\\w+:\\s*\\n\\s*(\\w+)\\.append\\s*\\(/g)) {\n    const line = lineOf(match.index);\n    // Apenas sugerir se parece simples (sem múltiplas linhas complexas)\n    ocorrencias.push(warn(messages.PythonMensagens.listComprehensionOpportunity, relPath, line, messages.SeverityNiveis.suggestion));\n  }\n\n  // Iterating over dict without .items()\n  for (const match of scan.matchAll(/for\\s+\\w+\\s+in\\s+(\\w+):\\s*\\n\\s*(?:value|val)\\s*=\\s*\\1\\[/gm)) {\n    const line = lineOf(match.index);\n    ocorrencias.push(warn(messages.PythonMensagens.loopingOverDict, relPath, line, messages.SeverityNiveis.suggestion));\n  }\n  return ocorrencias;\n}\nexport const analistaPython = criarAnalista({\n  nome: 'analista-python',\n  categoria: 'framework',\n  descricao: 'Heurísticas leves para Python (boas práticas e segurança).',\n  global: false,\n  test: (relPath: string): boolean => isPythonFile(relPath),\n  aplicar: async (src, relPath): Promise<Msg[] | null> => {\n    if (disableEnv) return null;\n    if (relPath.includes('src/analistas/plugins/analista-python.ts')) return null;\n    const msgs = collectPythonIssues(src, relPath);\n    return msgs.length ? msgs : null;\n  }\n});\n"]}

package/dist/analysts/python/analysts/index.d.ts

@@ -0,0 +1,2 @@
+export * from './analyst-python.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/python/analysts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/python/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/analysts/python/analysts/index.js

@@ -0,0 +1,2 @@
+export * from './analyst-python.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/python/analysts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/python/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC","sourcesContent":["export * from './analyst-python.js';\n"]}

package/dist/analysts/python/corrections/correction-python.d.ts

@@ -0,0 +1,11 @@
+import type { Analista } from '../../../types/index.js';
+export interface PythonCorrection {
+    tipo: string;
+    original: string;
+    sugerido: string;
+    linha: number;
+    confianca: number;
+}
+export declare function detectarCorrecoesPython(src: string, _relPath: string): PythonCorrection[];
+export declare const correctionPython: Analista;
+//# sourceMappingURL=correction-python.d.ts.map

package/dist/analysts/python/corrections/correction-python.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-python.d.ts","sourceRoot":"","sources":["../../../../src/analysts/python/corrections/correction-python.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAsCzF;AACD,eAAO,MAAM,gBAAgB,EAAE,QAiB9B,CAAC"}

package/dist/analysts/python/corrections/correction-python.js

@@ -0,0 +1,61 @@
+import { maskPythonComments, splitLines } from '../../../shared/helpers/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+export function detectarCorrecoesPython(src, _relPath) {
+    const correcoes = [];
+    const scan = maskPythonComments(src);
+    const linhas = splitLines(scan);
+    linhas.forEach((linha, index) => {
+        const numeroLinha = index + 1;
+        if (/^\s*except\s*:/.test(linha)) {
+            correcoes.push({
+                tipo: 'python-bare-except',
+                original: linha.trim(),
+                sugerido: linha.replace(/except\s*:/, 'except Exception:'),
+                linha: numeroLinha,
+                confianca: 95
+            });
+        }
+        if (/def\s+\w+\s*\([^)]*=\s*(?:\[|\{)[^\)]*\)/.test(linha)) {
+            const match = linha.match(/def\s+(\w+)\s*\(([^)]*)\)/);
+            if (match) {
+                correcoes.push({
+                    tipo: 'python-mutable-default',
+                    original: linha.trim(),
+                    sugerido: `# Refatore: def ${match[1]}(${match[2].replace(/=\s*(?:\[|\{)/, '=None')})`,
+                    linha: numeroLinha,
+                    confianca: 85
+                });
+            }
+        }
+        if (/^\s*print\s*\(/.test(linha)) {
+            correcoes.push({
+                tipo: 'python-print-to-logging',
+                original: linha.trim(),
+                sugerido: linha.replace(/^\s*print\s*\(/, 'logging.info('),
+                linha: numeroLinha,
+                confianca: 70
+            });
+        }
+    });
+    return correcoes;
+}
+export const correctionPython = {
+    nome: 'correction-python',
+    categoria: 'framework',
+    descricao: 'Correções automáticas para problemas Python',
+    test: (relPath) => /\.(py|pyx|pyi)$/i.test(relPath),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const correcoes = detectarCorrecoesPython(src, relPath);
+        return correcoes.map(elem => criarOcorrencia({
+            tipo: `correction-${elem.tipo}`,
+            nivel: elem.confianca > 85 ? 'aviso' : 'info',
+            mensagem: `Correção sugerida: ${elem.tipo}`,
+            relPath,
+            linha: elem.linha,
+            sugestao: `[ERRO] ${elem.original}\n[OK] ${elem.sugerido}\nConfiança: ${elem.confianca}%`
+        }));
+    }
+};
+//# sourceMappingURL=correction-python.js.map