tutanus 0.12.0

package/dist/analysts/shell/scorers/scorer-shell.js

@@ -0,0 +1,75 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+export function pontuarShell(src, _relPath) {
+    let score = 0;
+    const maxScore = 100;
+    const issues = [];
+    const strengths = [];
+    const linhas = splitLines(src);
+    const srcCompleto = src;
+    if (linhas.length > 0 && linhas[0].startsWith('#!')) {
+        score += 10;
+        strengths.push('Shebang presente');
+    }
+    else {
+        issues.push('Shebang ausente');
+    }
+    if (/set\s+(-e|-o\s+pipefail)/.test(srcCompleto)) {
+        score += 15;
+        strengths.push('Error handling configurado');
+    }
+    else {
+        issues.push('Sem set -e');
+    }
+    if (!/\beval\s+/.test(srcCompleto)) {
+        score += 20;
+        strengths.push('Sem eval');
+    }
+    else {
+        issues.push('eval detectado');
+    }
+    if (!/(curl|wget).*\|\s*(ba)?sh/.test(srcCompleto)) {
+        score += 15;
+        strengths.push('Sem curl|sh');
+    }
+    else {
+        issues.push('curl|sh detectado');
+    }
+    const hardcodedPasswords = (srcCompleto.match(/\b(password|pass|secret|token)\b\s*=\s*['"]/gi) || []).length;
+    if (hardcodedPasswords === 0) {
+        score += 15;
+        strengths.push('Sem senhas hardcoded');
+    }
+    else {
+        issues.push(`${hardcodedPasswords} senha(s) hardcoded`);
+    }
+    const unquotedVars = (srcCompleto.match(/\b(echo|ls|cd|rm|cp|mv)\s+.*\$\w+/g) || []).filter(linha => !/["'].*\$\w+.*["']/.test(linha)).length;
+    if (unquotedVars === 0) {
+        score += 15;
+        strengths.push('Variáveis corretamente aspeadas');
+    }
+    else {
+        score += Math.max(0, 15 - unquotedVars * 3);
+        issues.push(`${unquotedVars} variável(is) sem aspas`);
+    }
+    if (!/\brm\s+-rf\s+\/(\s|$)/.test(srcCompleto)) {
+        score += 10;
+        strengths.push('Sem rm -rf /');
+    }
+    else {
+        issues.push('rm -rf / detectado!');
+    }
+    return {
+        score,
+        maxScore,
+        percentage: Math.round(score / maxScore * 100),
+        issues,
+        strengths
+    };
+}
+export const pontuadorShell = {
+    nome: 'pontuador-shell',
+    categoria: 'infrastructure',
+    descricao: 'Pontua qualidade de Shell Script',
+    pontuar: pontuarShell
+};
+//# sourceMappingURL=scorer-shell.js.map

package/dist/analysts/shell/scorers/scorer-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-shell.js","sourceRoot":"","sources":["../../../../src/analysts/shell/scorers/scorer-shell.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAS7C,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,QAAgB;IACxD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,GAAG,CAAC;IAGxB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjC,CAAC;IAGD,IAAI,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IAGD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IAGD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAGD,MAAM,kBAAkB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,+CAA+C,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC7G,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;QAC7B,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,qBAAqB,CAAC,CAAC;IAC1D,CAAC;IAGD,MAAM,YAAY,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,oCAAoC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9I,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,yBAAyB,CAAC,CAAC;IACxD,CAAC;IAGD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO;QACL,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC;QAC9C,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,gBAAgB;IAC3B,SAAS,EAAE,kCAAkC;IAC7C,OAAO,EAAE,YAAY;CACtB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [GRAFICO] Pontuador de qualidade Shell Script\n *\n * Avalia a qualidade do Shell baseado em:\n * - Segurança\n * - Error handling\n * - Boas práticas\n */\n\nimport { splitLines } from '@shared/helpers';\n\nexport interface ShellScoreResult {\n  score: number;\n  maxScore: number;\n  percentage: number;\n  issues: string[];\n  strengths: string[];\n}\nexport function pontuarShell(src: string, _relPath: string): ShellScoreResult {\n  let score = 0;\n  const maxScore = 100;\n  const issues: string[] = [];\n  const strengths: string[] = [];\n  const linhas = splitLines(src);\n  const srcCompleto = src;\n\n  // Shebang (10 pontos)\n  if (linhas.length > 0 && linhas[0].startsWith('#!')) {\n    score += 10;\n    strengths.push('Shebang presente');\n  } else {\n    issues.push('Shebang ausente');\n  }\n\n  // set -e (15 pontos)\n  if (/set\\s+(-e|-o\\s+pipefail)/.test(srcCompleto)) {\n    score += 15;\n    strengths.push('Error handling configurado');\n  } else {\n    issues.push('Sem set -e');\n  }\n\n  // No eval (20 pontos)\n  if (!/\\beval\\s+/.test(srcCompleto)) {\n    score += 20;\n    strengths.push('Sem eval');\n  } else {\n    issues.push('eval detectado');\n  }\n\n  // No curl|sh (15 pontos)\n  if (!/(curl|wget).*\\|\\s*(ba)?sh/.test(srcCompleto)) {\n    score += 15;\n    strengths.push('Sem curl|sh');\n  } else {\n    issues.push('curl|sh detectado');\n  }\n\n  // No hardcoded passwords (15 pontos)\n  const hardcodedPasswords = (srcCompleto.match(/\\b(password|pass|secret|token)\\b\\s*=\\s*['\"]/gi) || []).length;\n  if (hardcodedPasswords === 0) {\n    score += 15;\n    strengths.push('Sem senhas hardcoded');\n  } else {\n    issues.push(`${hardcodedPasswords} senha(s) hardcoded`);\n  }\n\n  // Quoted variables (15 pontos)\n  const unquotedVars = (srcCompleto.match(/\\b(echo|ls|cd|rm|cp|mv)\\s+.*\\$\\w+/g) || []).filter(linha => !/[\"'].*\\$\\w+.*[\"']/.test(linha)).length;\n  if (unquotedVars === 0) {\n    score += 15;\n    strengths.push('Variáveis corretamente aspeadas');\n  } else {\n    score += Math.max(0, 15 - unquotedVars * 3);\n    issues.push(`${unquotedVars} variável(is) sem aspas`);\n  }\n\n  // No rm -rf / (10 pontos)\n  if (!/\\brm\\s+-rf\\s+\\/(\\s|$)/.test(srcCompleto)) {\n    score += 10;\n    strengths.push('Sem rm -rf /');\n  } else {\n    issues.push('rm -rf / detectado!');\n  }\n  return {\n    score,\n    maxScore,\n    percentage: Math.round(score / maxScore * 100),\n    issues,\n    strengths\n  };\n}\nexport const pontuadorShell = {\n  nome: 'pontuador-shell',\n  categoria: 'infrastructure',\n  descricao: 'Pontua qualidade de Shell Script',\n  pontuar: pontuarShell\n};"]}

package/dist/analysts/sql/analysts/analyst-sql.d.ts

@@ -0,0 +1,10 @@
+import type { Ocorrencia } from '../../../types/index.js';
+export declare const analistaSql: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    test: (relPath: string) => boolean;
+    aplicar: (src: string, relPath: string) => Promise<Ocorrencia[]>;
+    global: false;
+};
+//# sourceMappingURL=analyst-sql.d.ts.map

package/dist/analysts/sql/analysts/analyst-sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-sql.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/analysts/analyst-sql.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC;AAOpC,eAAO,MAAM,WAAW;;;;oBAIN,MAAM;mBACD,MAAM,WAAW,MAAM,KAAG,OAAO,CAAC,UAAU,EAAE,CAAC;;CAuGpE,CAAC"}

package/dist/analysts/sql/analysts/analyst-sql.js

@@ -0,0 +1,94 @@
+import { criarAnalista, criarOcorrencia } from '../../../types/index.js';
+export const analistaSql = criarAnalista({
+    nome: 'analista-sql',
+    categoria: 'database',
+    descricao: 'Analisa arquivos SQL em busca de injeções, performance ruim e comandos perigosos.',
+    test: (relPath) => /\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),
+    aplicar: async (src, relPath) => {
+        const ocorrencias = [];
+        const linhas = src.split('\n');
+        linhas.forEach((linha, index) => {
+            const numeroLinha = index + 1;
+            const linhaTrim = linha.trim().toLowerCase();
+            if ((linhaTrim.startsWith('delete ') || linhaTrim.startsWith('update ')) &&
+                !linhaTrim.includes('where') &&
+                !linha.includes('--') && !linha.includes('/*')) {
+                const proximaLinha = linhas[index + 1]?.trim().toLowerCase() || '';
+                if (!proximaLinha.includes('where')) {
+                    ocorrencias.push(criarOcorrencia({
+                        tipo: 'vulnerabilidade-seguranca',
+                        nivel: 'erro',
+                        mensagem: 'Comando DELETE/UPDATE sem cláusula WHERE detectado. Isso pode apagar ou alterar todos os dados da tabela.',
+                        relPath,
+                        linha: numeroLinha,
+                        sugestao: 'Sempre utilize a cláusula WHERE para restringir o impacto do comando.'
+                    }));
+                }
+            }
+            if (/\bselect\s+\*\s+from\b/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'problema-performance',
+                    nivel: 'aviso',
+                    mensagem: 'Uso de "SELECT *" detectado. Isso aumenta o tráfego de rede e pode quebrar se a estrutura da tabela mudar.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Liste explicitamente as colunas necessárias.'
+                }));
+            }
+            if (/\b(password|senha|secret|key|token|credential)\b\s*[:=]\s*['"].*['"]/i.test(linha) ||
+                /identified\s+by\s+['"].*['"]/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'vulnerabilidade-seguranca',
+                    nivel: 'erro',
+                    mensagem: 'Possível credencial ou segredo hardcoded em script SQL.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Utilize variáveis de ambiente ou sistemas de gerenciamento de segredos.'
+                }));
+            }
+            if (/\s\+\s*['"`].*['"`]/.test(linha) && /select|insert|update|delete/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'sql-injection',
+                    nivel: 'erro',
+                    mensagem: 'Possível injeção de SQL detectada via concatenação de strings.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Utilize consultas parametrizadas ou placeholders.'
+                }));
+            }
+            if (/create\s+(table|procedure|view)\s+\w+/i.test(linha) && !/if\s+not\s+exists/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'codigo-fragil',
+                    nivel: 'info',
+                    mensagem: 'Criação de objeto sem "IF NOT EXISTS". Pode causar erro se o script for reexecutado.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Utilize "CREATE TABLE IF NOT EXISTS ..." para maior idempotência.'
+                }));
+            }
+            if (/\btruncate\s+table\b/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'vulnerabilidade-seguranca',
+                    nivel: 'aviso',
+                    mensagem: 'Uso de TRUNCATE TABLE detectado. Este comando não pode ser revertido por ROLLBACK em alguns bancos e limpa toda a tabela.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Certifique-se de que a limpeza total é intencional e prefira DELETE com WHERE se precisar de reversibilidade.'
+                }));
+            }
+            if (/\bvarchar\b\s*(\(|\s|$)/i.test(linha) && !/\bvarchar\(\d+\)/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'codigo-fragil',
+                    nivel: 'info',
+                    mensagem: 'VARCHAR sem especificação de tamanho máximo.',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Defina um tamanho máximo apropriado para otimizar o armazenamento.'
+                }));
+            }
+        });
+        return ocorrencias;
+    },
+    global: false
+});
+//# sourceMappingURL=analyst-sql.js.map

package/dist/analysts/sql/analysts/analyst-sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-sql.js","sourceRoot":"","sources":["../../../../src/analysts/sql/analysts/analyst-sql.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAMnD,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;IACvC,IAAI,EAAE,cAAc;IACpB,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,mFAAmF;IAC9F,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;IACvE,OAAO,EAAE,KAAK,EAAE,GAAW,EAAE,OAAe,EAAyB,EAAE;QACrE,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAG7C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACpE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC5B,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAEnD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;gBACnE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;wBAC/B,IAAI,EAAE,2BAA2B;wBACjC,KAAK,EAAE,MAAM;wBACb,QAAQ,EAAE,2GAA2G;wBACrH,OAAO;wBACP,KAAK,EAAE,WAAW;wBAClB,QAAQ,EAAE,uEAAuE;qBAClF,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;YAGD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,sBAAsB;oBAC5B,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,4GAA4G;oBACtH,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,8CAA8C;iBACzD,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,uEAAuE,CAAC,IAAI,CAAC,KAAK,CAAC;gBACnF,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,yDAAyD;oBACnE,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,yEAAyE;iBACpF,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpF,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,gEAAgE;oBAC1E,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,mDAAmD;iBAC9D,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9F,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,sFAAsF;oBAChG,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,mEAAmE;iBAC9E,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,2HAA2H;oBACrI,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,+GAA+G;iBAC1H,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/E,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,8CAA8C;oBACxD,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,oEAAoE;iBAC/E,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,EAAE,KAAK;CACd,CAAC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport type { Ocorrencia } from '@';\nimport { criarAnalista, criarOcorrencia } from '@';\n\n/**\n * Analista de SQL\n * Detecta práticas inseguras, problemas de performance e má organização em arquivos SQL.\n */\nexport const analistaSql = criarAnalista({\n  nome: 'analista-sql',\n  categoria: 'database',\n  descricao: 'Analisa arquivos SQL em busca de injeções, performance ruim e comandos perigosos.',\n  test: (relPath: string) => /\\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),\n  aplicar: async (src: string, relPath: string): Promise<Ocorrencia[]> => {\n    const ocorrencias: Ocorrencia[] = [];\n    const linhas = src.split('\\n');\n\n    linhas.forEach((linha, index) => {\n      const numeroLinha = index + 1;\n      const linhaTrim = linha.trim().toLowerCase();\n\n      // 1. DELETE/UPDATE sem WHERE (Crítico)\n      if ((linhaTrim.startsWith('delete ') || linhaTrim.startsWith('update ')) &&\n          !linhaTrim.includes('where') &&\n          !linha.includes('--') && !linha.includes('/*')) {\n        // Verificar se o WHERE está na próxima linha (heurística simples)\n        const proximaLinha = linhas[index + 1]?.trim().toLowerCase() || '';\n        if (!proximaLinha.includes('where')) {\n          ocorrencias.push(criarOcorrencia({\n            tipo: 'vulnerabilidade-seguranca',\n            nivel: 'erro',\n            mensagem: 'Comando DELETE/UPDATE sem cláusula WHERE detectado. Isso pode apagar ou alterar todos os dados da tabela.',\n            relPath,\n            linha: numeroLinha,\n            sugestao: 'Sempre utilize a cláusula WHERE para restringir o impacto do comando.'\n          }));\n        }\n      }\n\n      // 2. SELECT * (Performance/Manutenibilidade)\n      if (/\\bselect\\s+\\*\\s+from\\b/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'problema-performance',\n          nivel: 'aviso',\n          mensagem: 'Uso de \"SELECT *\" detectado. Isso aumenta o tráfego de rede e pode quebrar se a estrutura da tabela mudar.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Liste explicitamente as colunas necessárias.'\n        }));\n      }\n\n      // 3. Senhas ou segredos em scripts (Segurança)\n      if (/\\b(password|senha|secret|key|token|credential)\\b\\s*[:=]\\s*['\"].*['\"]/i.test(linha) ||\n          /identified\\s+by\\s+['\"].*['\"]/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'vulnerabilidade-seguranca',\n          nivel: 'erro',\n          mensagem: 'Possível credencial ou segredo hardcoded em script SQL.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Utilize variáveis de ambiente ou sistemas de gerenciamento de segredos.'\n        }));\n      }\n\n      // 4. Injeção de SQL via strings concatenadas (se for template ou arquivo de migração dinâmico)\n      if (/\\s\\+\\s*['\"`].*['\"`]/.test(linha) && /select|insert|update|delete/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'sql-injection',\n          nivel: 'erro',\n          mensagem: 'Possível injeção de SQL detectada via concatenação de strings.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Utilize consultas parametrizadas ou placeholders.'\n        }));\n      }\n\n      // 5. Tabelas temporárias ou globais sem DROP prévio (Boas Práticas)\n      if (/create\\s+(table|procedure|view)\\s+\\w+/i.test(linha) && !/if\\s+not\\s+exists/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'codigo-fragil',\n          nivel: 'info',\n          mensagem: 'Criação de objeto sem \"IF NOT EXISTS\". Pode causar erro se o script for reexecutado.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Utilize \"CREATE TABLE IF NOT EXISTS ...\" para maior idempotência.'\n        }));\n      }\n\n      // 6. TRUNCATE TABLE (Risco)\n      if (/\\btruncate\\s+table\\b/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'vulnerabilidade-seguranca',\n          nivel: 'aviso',\n          mensagem: 'Uso de TRUNCATE TABLE detectado. Este comando não pode ser revertido por ROLLBACK em alguns bancos e limpa toda a tabela.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Certifique-se de que a limpeza total é intencional e prefira DELETE com WHERE se precisar de reversibilidade.'\n        }));\n      }\n\n      // 7. Uso de tipos obsoletos (ex: VARCHAR sem tamanho, TEXT para colunas pequenas)\n      if (/\\bvarchar\\b\\s*(\\(|\\s|$)/i.test(linha) && !/\\bvarchar\\(\\d+\\)/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'codigo-fragil',\n          nivel: 'info',\n          mensagem: 'VARCHAR sem especificação de tamanho máximo.',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Defina um tamanho máximo apropriado para otimizar o armazenamento.'\n        }));\n      }\n    });\n\n    return ocorrencias;\n  },\n  global: false\n});\n"]}

package/dist/analysts/sql/analysts/index.d.ts

@@ -0,0 +1,2 @@
+export * from './analyst-sql.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/sql/analysts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC"}

package/dist/analysts/sql/analysts/index.js

@@ -0,0 +1,2 @@
+export * from './analyst-sql.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/sql/analysts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/sql/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC","sourcesContent":["export * from './analyst-sql.js';\n"]}

package/dist/analysts/sql/corrections/correction-sql.d.ts

@@ -0,0 +1,11 @@
+import type { Analista } from '../../../types/index.js';
+export interface SqlCorrection {
+    tipo: string;
+    original: string;
+    sugerido: string;
+    linha: number;
+    confianca: number;
+}
+export declare function detectarCorrecoesSql(src: string, _relPath: string): SqlCorrection[];
+export declare const correctionSql: Analista;
+//# sourceMappingURL=correction-sql.d.ts.map

package/dist/analysts/sql/corrections/correction-sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-sql.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/corrections/correction-sql.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CA8CnF;AACD,eAAO,MAAM,aAAa,EAAE,QAiB3B,CAAC"}

package/dist/analysts/sql/corrections/correction-sql.js

@@ -0,0 +1,69 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+export function detectarCorrecoesSql(src, _relPath) {
+    const correcoes = [];
+    const linhas = splitLines(src);
+    linhas.forEach((linha, index) => {
+        const numeroLinha = index + 1;
+        if (/\bselect\s+\*\s+from\b/i.test(linha)) {
+            const tableMatch = /from\s+(\w+)/i.exec(linha);
+            if (tableMatch) {
+                correcoes.push({
+                    tipo: 'sql-select-star',
+                    original: linha.trim(),
+                    sugerido: linha.replace(/\bselect\s+\*\s+from/i, `SELECT coluna1, coluna2 FROM`),
+                    linha: numeroLinha,
+                    confianca: 60
+                });
+            }
+        }
+        if (/^\s*(delete|update)\s+/i.test(linha.trim()) && !/where/i.test(linha)) {
+            correcoes.push({
+                tipo: 'sql-add-where',
+                original: linha.trim(),
+                sugerido: `${linha.trim()}\n-- [AVISO] ADICIONE: WHERE condicao = valor`,
+                linha: numeroLinha,
+                confianca: 90
+            });
+        }
+        if (/\bvarchar\b\s*(\(|\s|$)/i.test(linha) && !/\bvarchar\(\d+\)/i.test(linha)) {
+            correcoes.push({
+                tipo: 'sql-varchar-size',
+                original: linha.trim(),
+                sugerido: linha.replace(/\bvarchar\b/gi, 'VARCHAR(255)'),
+                linha: numeroLinha,
+                confianca: 80
+            });
+        }
+        if (/create\s+table\s+(\w+)/i.test(linha) && !/if\s+not\s+exists/i.test(linha)) {
+            correcoes.push({
+                tipo: 'sql-add-if-not-exists',
+                original: linha.trim(),
+                sugerido: linha.replace(/create\s+table\s+/i, 'CREATE TABLE IF NOT EXISTS '),
+                linha: numeroLinha,
+                confianca: 95
+            });
+        }
+    });
+    return correcoes;
+}
+export const correctionSql = {
+    nome: 'correction-sql',
+    categoria: 'database',
+    descricao: 'Correções automáticas para problemas SQL',
+    test: (relPath) => /\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const correcoes = detectarCorrecoesSql(src, relPath);
+        return correcoes.map(elem => criarOcorrencia({
+            tipo: `correction-${elem.tipo}`,
+            nivel: elem.confianca > 85 ? 'aviso' : 'info',
+            mensagem: `Correção sugerida: ${elem.tipo}`,
+            relPath,
+            linha: elem.linha,
+            sugestao: `[ERRO] ${elem.original}\n[OK] ${elem.sugerido}\nConfiança: ${elem.confianca}%`
+        }));
+    }
+};
+//# sourceMappingURL=correction-sql.js.map

package/dist/analysts/sql/corrections/correction-sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-sql.js","sourceRoot":"","sources":["../../../../src/analysts/sql/corrections/correction-sql.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AASpC,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,QAAgB;IAChE,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;QAC9B,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,UAAU,EAAE,CAAC;gBACf,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;oBACtB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,EAAE,8BAA8B,CAAC;oBAChF,KAAK,EAAE,WAAW;oBAClB,SAAS,EAAE,EAAE;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,+CAA+C;gBACxE,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC;gBACxD,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,6BAA6B,CAAC;gBAC5E,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,CAAC,MAAM,aAAa,GAAa;IACrC,IAAI,EAAE,gBAAgB;IACtB,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,0CAA0C;IACrD,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;IAChF,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC;YAC3C,IAAI,EAAE,cAAc,IAAI,CAAC,IAAI,EAAE;YAC/B,KAAK,EAAE,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC7C,QAAQ,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;YAC3C,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,UAAU,IAAI,CAAC,QAAQ,UAAU,IAAI,CAAC,QAAQ,gBAAgB,IAAI,CAAC,SAAS,GAAG;SAC1F,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [CHAVE-INGLESA] Correções automáticas para SQL\n *\n * Fornece correções sugeridas para problemas comuns em SQL:\n * - SELECT * → colunas explícitas\n * - DELETE/UPDATE sem WHERE → adicionar WHERE\n * - VARCHAR sem tamanho → definir tamanho\n */\n\nimport { splitLines } from '@shared/helpers';\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport interface SqlCorrection {\n  tipo: string;\n  original: string;\n  sugerido: string;\n  linha: number;\n  confianca: number;\n}\nexport function detectarCorrecoesSql(src: string, _relPath: string): SqlCorrection[] {\n  const correcoes: SqlCorrection[] = [];\n  const linhas = splitLines(src);\n  linhas.forEach((linha, index) => {\n    const numeroLinha = index + 1;\n    if (/\\bselect\\s+\\*\\s+from\\b/i.test(linha)) {\n      const tableMatch = /from\\s+(\\w+)/i.exec(linha);\n      if (tableMatch) {\n        correcoes.push({\n          tipo: 'sql-select-star',\n          original: linha.trim(),\n          sugerido: linha.replace(/\\bselect\\s+\\*\\s+from/i, `SELECT coluna1, coluna2 FROM`),\n          linha: numeroLinha,\n          confianca: 60\n        });\n      }\n    }\n    if (/^\\s*(delete|update)\\s+/i.test(linha.trim()) && !/where/i.test(linha)) {\n      correcoes.push({\n        tipo: 'sql-add-where',\n        original: linha.trim(),\n        sugerido: `${linha.trim()}\\n-- [AVISO] ADICIONE: WHERE condicao = valor`,\n        linha: numeroLinha,\n        confianca: 90\n      });\n    }\n    if (/\\bvarchar\\b\\s*(\\(|\\s|$)/i.test(linha) && !/\\bvarchar\\(\\d+\\)/i.test(linha)) {\n      correcoes.push({\n        tipo: 'sql-varchar-size',\n        original: linha.trim(),\n        sugerido: linha.replace(/\\bvarchar\\b/gi, 'VARCHAR(255)'),\n        linha: numeroLinha,\n        confianca: 80\n      });\n    }\n    if (/create\\s+table\\s+(\\w+)/i.test(linha) && !/if\\s+not\\s+exists/i.test(linha)) {\n      correcoes.push({\n        tipo: 'sql-add-if-not-exists',\n        original: linha.trim(),\n        sugerido: linha.replace(/create\\s+table\\s+/i, 'CREATE TABLE IF NOT EXISTS '),\n        linha: numeroLinha,\n        confianca: 95\n      });\n    }\n  });\n  return correcoes;\n}\nexport const correctionSql: Analista = {\n  nome: 'correction-sql',\n  categoria: 'database',\n  descricao: 'Correções automáticas para problemas SQL',\n  test: (relPath: string): boolean => /\\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const correcoes = detectarCorrecoesSql(src, relPath);\n    return correcoes.map(elem => criarOcorrencia({\n      tipo: `correction-${elem.tipo}`,\n      nivel: elem.confianca > 85 ? 'aviso' : 'info',\n      mensagem: `Correção sugerida: ${elem.tipo}`,\n      relPath,\n      linha: elem.linha,\n      sugestao: `[ERRO] ${elem.original}\\n[OK] ${elem.sugerido}\\nConfiança: ${elem.confianca}%`\n    }));\n  }\n};"]}

package/dist/analysts/sql/corrections/index.d.ts

@@ -0,0 +1,2 @@
+export * from './correction-sql.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/sql/corrections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC"}

package/dist/analysts/sql/corrections/index.js

@@ -0,0 +1,2 @@
+export * from './correction-sql.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/sql/corrections/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/sql/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './correction-sql.js';\n"]}

package/dist/analysts/sql/detectors/detector-sql-best-practices.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorSqlBestPractices: Analista;
+//# sourceMappingURL=detector-sql-best-practices.d.ts.map

package/dist/analysts/sql/detectors/detector-sql-best-practices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-sql-best-practices.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/detectors/detector-sql-best-practices.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,eAAO,MAAM,wBAAwB,EAAE,QAuFtC,CAAC"}

package/dist/analysts/sql/detectors/detector-sql-best-practices.js

@@ -0,0 +1,84 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+export const detectorSqlBestPractices = {
+    nome: 'detector-sql-best-practices',
+    categoria: 'database',
+    descricao: 'Detecta más práticas em SQL',
+    test: (relPath) => /\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        const linhas = splitLines(src);
+        linhas.forEach((linha, index) => {
+            const numeroLinha = index + 1;
+            const linhaTrim = linha.trim().toLowerCase();
+            if (/^\s*(delete|update)\s+/.test(linhaTrim) && !linhaTrim.includes('where')) {
+                const proximaLinha = linhas[index + 1]?.trim().toLowerCase() || '';
+                if (!proximaLinha.includes('where')) {
+                    ocorrencias.push(criarOcorrencia({
+                        tipo: 'sql-missing-where',
+                        nivel: 'erro',
+                        mensagem: 'DELETE/UPDATE sem cláusula WHERE',
+                        relPath,
+                        linha: numeroLinha,
+                        sugestao: 'Adicione WHERE para restringir o impacto'
+                    }));
+                }
+            }
+            if (/\bselect\s+\*\s+from\b/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'sql-select-star',
+                    nivel: 'aviso',
+                    mensagem: 'SELECT * detectado',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Liste explicitamente as colunas necessárias'
+                }));
+            }
+            if (/\b(password|senha|secret|key|token)\b\s*[:=]\s*['"].*['"]/i.test(linha) ||
+                /identified\s+by\s+['"].*['"]/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'sql-hardcoded-credential',
+                    nivel: 'erro',
+                    mensagem: 'Credencial hardcoded em SQL',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Use variáveis de ambiente ou secrets manager'
+                }));
+            }
+            if (/\btruncate\s+table\b/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'sql-truncate',
+                    nivel: 'aviso',
+                    mensagem: 'TRUNCATE TABLE detectado - operação irreversível',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Use DELETE com WHERE se precisar de reversibilidade'
+                }));
+            }
+            if (/create\s+(table|procedure|view)\s+\w+/i.test(linha) && !/if\s+not\s+exists/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'sql-missing-if-not-exists',
+                    nivel: 'info',
+                    mensagem: 'CREATE sem IF NOT EXISTS',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Use CREATE ... IF NOT EXISTS para idempotência'
+                }));
+            }
+            if (/\bvarchar\b\s*(\(|\s|$)/i.test(linha) && !/\bvarchar\(\d+\)/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'sql-varchar-without-size',
+                    nivel: 'info',
+                    mensagem: 'VARCHAR sem tamanho definido',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Defina tamanho máximo: VARCHAR(255)'
+                }));
+            }
+        });
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-sql-best-practices.js.map

package/dist/analysts/sql/detectors/detector-sql-best-practices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-sql-best-practices.js","sourceRoot":"","sources":["../../../../src/analysts/sql/detectors/detector-sql-best-practices.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD,IAAI,EAAE,6BAA6B;IACnC,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,6BAA6B;IACxC,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;IAChF,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAE7C,IAAI,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7E,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;gBACnE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;wBAC/B,IAAI,EAAE,mBAAmB;wBACzB,KAAK,EAAE,MAAM;wBACb,QAAQ,EAAE,kCAAkC;wBAC5C,OAAO;wBACP,KAAK,EAAE,WAAW;wBAClB,QAAQ,EAAE,0CAA0C;qBACrD,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;YAED,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,oBAAoB;oBAC9B,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,6CAA6C;iBACxD,CAAC,CAAC,CAAC;YACN,CAAC;YAED,IAAI,4DAA4D,CAAC,IAAI,CAAC,KAAK,CAAC;gBACxE,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,0BAA0B;oBAChC,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,6BAA6B;oBACvC,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,8CAA8C;iBACzD,CAAC,CAAC,CAAC;YACN,CAAC;YAED,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,kDAAkD;oBAC5D,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,qDAAqD;iBAChE,CAAC,CAAC,CAAC;YACN,CAAC;YAED,IAAI,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9F,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,0BAA0B;oBACpC,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,gDAAgD;iBAC3D,CAAC,CAAC,CAAC;YACN,CAAC;YAED,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/E,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,0BAA0B;oBAChC,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,8BAA8B;oBACxC,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,qCAAqC;iBAChD,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Detector de boas práticas SQL\n *\n * Detecta padrões problemáticos em SQL:\n * - SELECT *\n * - DELETE/UPDATE sem WHERE\n * - Hardcoded credentials\n * - TRUNCATE TABLE\n * - Missing IF NOT EXISTS\n */\n\nimport { splitLines } from '@shared/helpers';\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport const detectorSqlBestPractices: Analista = {\n  nome: 'detector-sql-best-practices',\n  categoria: 'database',\n  descricao: 'Detecta más práticas em SQL',\n  test: (relPath: string): boolean => /\\.(sql|pgsql|mysql|sqlite)$/i.test(relPath),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n    const linhas = splitLines(src);\n\n    linhas.forEach((linha, index) => {\n      const numeroLinha = index + 1;\n      const linhaTrim = linha.trim().toLowerCase();\n\n      if (/^\\s*(delete|update)\\s+/.test(linhaTrim) && !linhaTrim.includes('where')) {\n        const proximaLinha = linhas[index + 1]?.trim().toLowerCase() || '';\n        if (!proximaLinha.includes('where')) {\n          ocorrencias.push(criarOcorrencia({\n            tipo: 'sql-missing-where',\n            nivel: 'erro',\n            mensagem: 'DELETE/UPDATE sem cláusula WHERE',\n            relPath,\n            linha: numeroLinha,\n            sugestao: 'Adicione WHERE para restringir o impacto'\n          }));\n        }\n      }\n\n      if (/\\bselect\\s+\\*\\s+from\\b/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'sql-select-star',\n          nivel: 'aviso',\n          mensagem: 'SELECT * detectado',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Liste explicitamente as colunas necessárias'\n        }));\n      }\n\n      if (/\\b(password|senha|secret|key|token)\\b\\s*[:=]\\s*['\"].*['\"]/i.test(linha) ||\n          /identified\\s+by\\s+['\"].*['\"]/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'sql-hardcoded-credential',\n          nivel: 'erro',\n          mensagem: 'Credencial hardcoded em SQL',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Use variáveis de ambiente ou secrets manager'\n        }));\n      }\n\n      if (/\\btruncate\\s+table\\b/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'sql-truncate',\n          nivel: 'aviso',\n          mensagem: 'TRUNCATE TABLE detectado - operação irreversível',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Use DELETE com WHERE se precisar de reversibilidade'\n        }));\n      }\n\n      if (/create\\s+(table|procedure|view)\\s+\\w+/i.test(linha) && !/if\\s+not\\s+exists/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'sql-missing-if-not-exists',\n          nivel: 'info',\n          mensagem: 'CREATE sem IF NOT EXISTS',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Use CREATE ... IF NOT EXISTS para idempotência'\n        }));\n      }\n\n      if (/\\bvarchar\\b\\s*(\\(|\\s|$)/i.test(linha) && !/\\bvarchar\\(\\d+\\)/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'sql-varchar-without-size',\n          nivel: 'info',\n          mensagem: 'VARCHAR sem tamanho definido',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Defina tamanho máximo: VARCHAR(255)'\n        }));\n      }\n    });\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/sql/detectors/index.d.ts

@@ -0,0 +1,2 @@
+export * from './detector-sql-best-practices.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/sql/detectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,kCAAkC,CAAC"}

package/dist/analysts/sql/detectors/index.js

@@ -0,0 +1,2 @@
+export * from './detector-sql-best-practices.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/sql/detectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/sql/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,kCAAkC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './detector-sql-best-practices.js';\n"]}

package/dist/analysts/sql/index.d.ts

@@ -0,0 +1,5 @@
+export * from './analysts/analyst-sql.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/sql/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analysts/sql/index.ts"],"names":[],"mappings":"AAOA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC"}

package/dist/analysts/sql/index.js

@@ -0,0 +1,5 @@
+export * from './analysts/analyst-sql.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/sql/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analysts/sql/index.ts"],"names":[],"mappings":"AAOA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Analistas de SQL\n *\n * Analisa arquivos SQL em busca de injeções, performance ruim e comandos perigosos.\n */\n\nexport * from './analysts/analyst-sql.js';\nexport * from './corrections/index.js';\nexport * from './detectors/index.js';\nexport * from './scorers/index.js';\n"]}

package/dist/analysts/sql/scorers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './scorer-sql.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/sql/scorers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAC"}

package/dist/analysts/sql/scorers/index.js

@@ -0,0 +1,2 @@
+export * from './scorer-sql.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/sql/scorers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/sql/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './scorer-sql.js';\n"]}

package/dist/analysts/sql/scorers/scorer-sql.d.ts

@@ -0,0 +1,15 @@
+export interface SqlScoreResult {
+    score: number;
+    maxScore: number;
+    percentage: number;
+    issues: string[];
+    strengths: string[];
+}
+export declare function pontuarSql(src: string, _relPath: string): SqlScoreResult;
+export declare const pontuadorSql: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    pontuar: typeof pontuarSql;
+};
+//# sourceMappingURL=scorer-sql.d.ts.map

package/dist/analysts/sql/scorers/scorer-sql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-sql.d.ts","sourceRoot":"","sources":["../../../../src/analysts/sql/scorers/scorer-sql.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AACD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,CAyExE;AACD,eAAO,MAAM,YAAY;;;;;CAKxB,CAAC"}

package/dist/analysts/sql/scorers/scorer-sql.js

@@ -0,0 +1,76 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+export function pontuarSql(src, _relPath) {
+    let score = 0;
+    const maxScore = 100;
+    const issues = [];
+    const strengths = [];
+    const _linhas = splitLines(src);
+    const srcCompleto = src;
+    const hardcodedCreds = (srcCompleto.match(/\b(password|senha|secret|key|token)\b\s*[:=]\s*['"]/gi) || []).length;
+    if (hardcodedCreds === 0) {
+        score += 25;
+        strengths.push('Sem credenciais hardcoded');
+    }
+    else {
+        issues.push(`${hardcodedCreds} credencial(is) hardcoded`);
+    }
+    const deletes = (srcCompleto.match(/\bdelete\s+/gi) || []).length;
+    const updates = (srcCompleto.match(/\bupdate\s+\w+\s+set/gi) || []).length;
+    const withWhere = (srcCompleto.match(/\bwhere\b/gi) || []).length;
+    const totalMutations = deletes + updates;
+    if (totalMutations === 0 || withWhere >= totalMutations) {
+        score += 20;
+        strengths.push('WHERE clauses adequados');
+    }
+    else {
+        score += Math.max(0, 20 - (totalMutations - withWhere) * 10);
+        issues.push(`${totalMutations - withWhere} operação(ões) sem WHERE`);
+    }
+    const selectStar = (srcCompleto.match(/\bselect\s+\*\s+from/gi) || []).length;
+    if (selectStar === 0) {
+        score += 15;
+        strengths.push('Colunas explicitamente listadas');
+    }
+    else {
+        score += Math.max(0, 15 - selectStar * 5);
+        issues.push(`${selectStar} SELECT * detectado(s)`);
+    }
+    const creates = (srcCompleto.match(/\bcreate\s+(table|procedure|view)\b/gi) || []).length;
+    const ifNotExists = (srcCompleto.match(/\bif\s+not\s+exists\b/gi) || []).length;
+    if (creates === 0 || ifNotExists >= creates) {
+        score += 15;
+        strengths.push('Scripts idempotentes');
+    }
+    else {
+        issues.push(`${creates - ifNotExists} CREATE sem IF NOT EXISTS`);
+    }
+    if (!/\btruncate\s+table\b/i.test(srcCompleto)) {
+        score += 10;
+        strengths.push('Sem TRUNCATE (operações seguras)');
+    }
+    else {
+        issues.push('TRUNCATE TABLE detectado');
+    }
+    const varcharWithoutSize = (srcCompleto.match(/\bvarchar\b\s*(\(|\s|$)/gi) || []).filter(metrica => !/varchar\(\d+\)/i.test(metrica)).length;
+    if (varcharWithoutSize === 0) {
+        score += 15;
+        strengths.push('VARCHAR com tamanho definido');
+    }
+    else {
+        issues.push(`${varcharWithoutSize} VARCHAR sem tamanho`);
+    }
+    return {
+        score,
+        maxScore,
+        percentage: Math.round(score / maxScore * 100),
+        issues,
+        strengths
+    };
+}
+export const pontuadorSql = {
+    nome: 'pontuador-sql',
+    categoria: 'database',
+    descricao: 'Pontua qualidade de SQL',
+    pontuar: pontuarSql
+};
+//# sourceMappingURL=scorer-sql.js.map