tutanus 0.12.0

package/dist/analysts/tailwind/detectors/detector-tailwind-best-practices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-tailwind-best-practices.js","sourceRoot":"","sources":["../../../../src/analysts/tailwind/detectors/detector-tailwind-best-practices.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,CAAC,MAAM,6BAA6B,GAAa;IACrD,IAAI,EAAE,kCAAkC;IACxC,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,sCAAsC;IACjD,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC;IAClF,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;YAC9B,IAAI,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBACxE,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;oBACzC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;wBACtB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC;wBAC7C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;wBACrC,IAAI,OAAO,EAAE,CAAC;4BACZ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gCAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;4BAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;4BACnC,IAAI,QAAQ;gCAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACrC,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;wBACjC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACtB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gCAC/B,IAAI,EAAE,8BAA8B;gCACpC,KAAK,EAAE,OAAO;gCACd,QAAQ,EAAE,6BAA6B,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gCAClE,OAAO;gCACP,KAAK,EAAE,WAAW;gCAClB,QAAQ,EAAE,yDAAyD;6BACpE,CAAC,CAAC,CAAC;wBACN,CAAC;oBACH,CAAC;oBACD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;oBACtF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;4BAC/B,IAAI,EAAE,2BAA2B;4BACjC,KAAK,EAAE,MAAM;4BACb,QAAQ,EAAE,sBAAsB,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;4BACrE,OAAO;4BACP,KAAK,EAAE,WAAW;4BAClB,QAAQ,EAAE,2BAA2B;yBACtC,CAAC,CAAC,CAAC;oBACN,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBACpD,IAAI,cAAc,EAAE,CAAC;oBACnB,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;wBACjC,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;4BACnD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gCAC/B,IAAI,EAAE,0BAA0B;gCAChC,KAAK,EAAE,MAAM;gCACb,QAAQ,EAAE,+BAA+B,GAAG,EAAE;gCAC9C,OAAO;gCACP,KAAK,EAAE,WAAW;gCAClB,QAAQ,EAAE,2CAA2C;6BACtD,CAAC,CAAC,CAAC;wBACN,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7E,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,oBAAoB;oBAC1B,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,yCAAyC;oBACnD,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,8CAA8C;iBACzD,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC;AACF,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACvD,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACpD,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IACvF,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IACjD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Detector de boas práticas Tailwind CSS\n *\n * Detecta padrões problemáticos em Tailwind:\n * - Conflicting classes\n * - Repeated classes\n * - Arbitrary values\n * - !important usage\n */\n\nimport { splitLines } from '@shared/helpers';\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport const detectorTailwindBestPractices: Analista = {\n  nome: 'detector-tailwind-best-practices',\n  categoria: 'estilo',\n  descricao: 'Detecta más práticas em Tailwind CSS',\n  test: (relPath: string): boolean => /\\.(jsx|tsx|js|ts|html|astro)$/i.test(relPath),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n    const linhas = splitLines(src);\n    linhas.forEach((linha, index) => {\n      const numeroLinha = index + 1;\n      if (/\\bclass(Name)?\\s*=\\s*[\"'][^\"']*[\"']/.test(linha)) {\n        const classMatch = linha.match(/\\bclass(Name)?\\s*=\\s*[\"']([^\"']*)[\"']/);\n        if (classMatch) {\n          const classes = classMatch[2].split(/\\s+/).filter(Boolean);\n          const seen = new Map<string, string[]>();\n          classes.forEach(token => {\n            const base = token.split(':').pop() || token;\n            const propKey = getPropertyKey(base);\n            if (propKey) {\n              if (!seen.has(propKey)) seen.set(propKey, []);\n              const existing = seen.get(propKey);\n              if (existing) existing.push(token);\n            }\n          });\n          for (const [key, tokens] of seen) {\n            if (tokens.length > 1) {\n              ocorrencias.push(criarOcorrencia({\n                tipo: 'tailwind-conflicting-classes',\n                nivel: 'aviso',\n                mensagem: `Classes conflitantes para ${key}: ${tokens.join(', ')}`,\n                relPath,\n                linha: numeroLinha,\n                sugestao: 'Remova classes conflitantes, mantenha apenas a desejada'\n              }));\n            }\n          }\n          const duplicates = classes.filter((elem, indice) => classes.indexOf(elem) !== indice);\n          if (duplicates.length > 0) {\n            ocorrencias.push(criarOcorrencia({\n              tipo: 'tailwind-repeated-classes',\n              nivel: 'info',\n              mensagem: `Classes repetidas: ${[...new Set(duplicates)].join(', ')}`,\n              relPath,\n              linha: numeroLinha,\n              sugestao: 'Remova classes duplicadas'\n            }));\n          }\n        }\n      }\n      if (/class(Name)?=.*\\[[^\\]]+\\]/.test(linha)) {\n        const arbitraryMatch = linha.match(/\\[([^\\]]+)\\]/g);\n        if (arbitraryMatch) {\n          for (const val of arbitraryMatch) {\n            if (!/(var\\(|rgb\\(|hsl\\(|calc\\(|url\\()/i.test(val)) {\n              ocorrencias.push(criarOcorrencia({\n                tipo: 'tailwind-arbitrary-value',\n                nivel: 'info',\n                mensagem: `Valor arbitrário detectado: ${val}`,\n                relPath,\n                linha: numeroLinha,\n                sugestao: 'Considere adicionar ao tailwind.config.js'\n              }));\n            }\n          }\n        }\n      }\n      if (/class(Name)?=.*!['\"\\]]/.test(linha) || /class(Name)?=.*!\\]/.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'tailwind-important',\n          nivel: 'info',\n          mensagem: '!important detectado em classe Tailwind',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Evite !important - refatore a especificidade'\n        }));\n      }\n    });\n    return ocorrencias;\n  }\n};\nfunction getPropertyKey(token: string): string | null {\n  if (/^(p|m)[trblxy]?(-|$|\\[)/.test(token)) return 'spacing';\n  if (/^(bg-|text-|border-)/.test(token)) return 'color';\n  if (/^(w-|h-|min-|max-)/.test(token)) return 'size';\n  if (/^(flex|grid|block|inline)/.test(token)) return 'display';\n  if (/^rounded/.test(token)) return 'rounded';\n  if (/^shadow(?:-sm|-md|-lg|-xl|-2xl|-inner|-none)?$/.test(token)) return 'shadow-size';\n  if (/^shadow/.test(token)) return 'shadow-color';\n  if (/^opacity/.test(token)) return 'opacity';\n  return null;\n}"]}

package/dist/analysts/tailwind/detectors/index.d.ts

@@ -0,0 +1,2 @@
+export * from './detector-tailwind-best-practices.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/tailwind/detectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/tailwind/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,uCAAuC,CAAC"}

package/dist/analysts/tailwind/detectors/index.js

@@ -0,0 +1,2 @@
+export * from './detector-tailwind-best-practices.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/tailwind/detectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/tailwind/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,uCAAuC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './detector-tailwind-best-practices.js';\n"]}

package/dist/analysts/tailwind/index.d.ts

@@ -0,0 +1,5 @@
+export * from './analysts/analyst-tailwind.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/tailwind/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analysts/tailwind/index.ts"],"names":[],"mappings":"AAOA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC"}

package/dist/analysts/tailwind/index.js

@@ -0,0 +1,5 @@
+export * from './analysts/analyst-tailwind.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/tailwind/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analysts/tailwind/index.ts"],"names":[],"mappings":"AAOA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Analistas de Tailwind CSS\n *\n * Heurísticas leves de Tailwind.\n */\n\nexport * from './analysts/analyst-tailwind.js';\nexport * from './corrections/index.js';\nexport * from './detectors/index.js';\nexport * from './scorers/index.js';\n"]}

package/dist/analysts/tailwind/scorers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './scorer-tailwind.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/tailwind/scorers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/tailwind/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,sBAAsB,CAAC"}

package/dist/analysts/tailwind/scorers/index.js

@@ -0,0 +1,2 @@
+export * from './scorer-tailwind.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/tailwind/scorers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/tailwind/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,sBAAsB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './scorer-tailwind.js';\n"]}

package/dist/analysts/tailwind/scorers/scorer-tailwind.d.ts

@@ -0,0 +1,15 @@
+export interface TailwindScoreResult {
+    score: number;
+    maxScore: number;
+    percentage: number;
+    issues: string[];
+    strengths: string[];
+}
+export declare function pontuarTailwind(src: string, _relPath: string): TailwindScoreResult;
+export declare const pontuadorTailwind: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    pontuar: typeof pontuarTailwind;
+};
+//# sourceMappingURL=scorer-tailwind.d.ts.map

package/dist/analysts/tailwind/scorers/scorer-tailwind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-tailwind.d.ts","sourceRoot":"","sources":["../../../../src/analysts/tailwind/scorers/scorer-tailwind.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AACD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CAqFlF;AACD,eAAO,MAAM,iBAAiB;;;;;CAK7B,CAAC"}

package/dist/analysts/tailwind/scorers/scorer-tailwind.js

@@ -0,0 +1,91 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+export function pontuarTailwind(src, _relPath) {
+    let score = 0;
+    const maxScore = 100;
+    const issues = [];
+    const strengths = [];
+    const _linhas = splitLines(src);
+    const srcCompleto = src;
+    const classMatches = srcCompleto.match(/\bclass(Name)?\s*=\s*["']([^"']*)["']/g) || [];
+    const allClasses = classMatches.map(metrica => {
+        const match = metrica.match(/["']([^"']*)["']/);
+        return match ? match[1].split(/\s+/).filter(Boolean) : [];
+    }).flat();
+    const duplicates = allClasses.filter((elem, indice) => allClasses.indexOf(elem) !== indice);
+    if (duplicates.length === 0) {
+        score += 25;
+        strengths.push('Sem classes duplicadas');
+    }
+    else {
+        score += Math.max(0, 25 - duplicates.length * 3);
+        issues.push(`${duplicates.length} classe(s) duplicada(s)`);
+    }
+    const propGroups = new Map();
+    allClasses.forEach(token => {
+        const base = token.split(':').pop() || token;
+        if (/^(p|m)[trblxy]?(-|$)/.test(base)) {
+            const key = base.match(/^(p|m)[trblxy]?/)?.[0] || 'spacing';
+            if (!propGroups.has(key))
+                propGroups.set(key, []);
+            const existing = propGroups.get(key);
+            if (existing)
+                existing.push(token);
+        }
+    });
+    const conflicts = [...propGroups.values()].filter(valor => valor.length > 1).length;
+    if (conflicts === 0) {
+        score += 20;
+        strengths.push('Sem classes conflitantes');
+    }
+    else {
+        score += Math.max(0, 20 - conflicts * 5);
+        issues.push(`${conflicts} grupo(s) de classes conflitantes`);
+    }
+    const arbitraryValues = (srcCompleto.match(/\[[^\]]+\]/g) || []).filter(valor => !/(var\(|rgb\(|calc\()/i.test(valor));
+    if (arbitraryValues.length === 0) {
+        score += 20;
+        strengths.push('Sem valores arbitrários');
+    }
+    else if (arbitraryValues.length <= 3) {
+        score += 15;
+        issues.push(`${arbitraryValues.length} valor(es) arbitrário(s)`);
+    }
+    else {
+        score += 5;
+        issues.push(`${arbitraryValues.length} valores arbitrários - considere tailwind.config.js`);
+    }
+    const importantCount = (srcCompleto.match(/class(Name)?=.*!/g) || []).length;
+    if (importantCount === 0) {
+        score += 15;
+        strengths.push('Sem !important');
+    }
+    else {
+        issues.push(`${importantCount} uso(s) de !important`);
+    }
+    const hasCnOrClsx = /\b(cn|clsx|twMerge|classnames)\s*\(/.test(srcCompleto);
+    if (hasCnOrClsx) {
+        score += 20;
+        strengths.push('Uso de cn/clsx para organização');
+    }
+    else if (classMatches.length > 5) {
+        score += 10;
+        issues.push('Muitos class attributes - considere cn/clsx');
+    }
+    else {
+        score += 20;
+    }
+    return {
+        score,
+        maxScore,
+        percentage: Math.round(score / maxScore * 100),
+        issues,
+        strengths
+    };
+}
+export const pontuadorTailwind = {
+    nome: 'pontuador-tailwind',
+    categoria: 'estilo',
+    descricao: 'Pontua qualidade de Tailwind CSS',
+    pontuar: pontuarTailwind
+};
+//# sourceMappingURL=scorer-tailwind.js.map

package/dist/analysts/tailwind/scorers/scorer-tailwind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-tailwind.js","sourceRoot":"","sources":["../../../../src/analysts/tailwind/scorers/scorer-tailwind.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAS7C,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,QAAgB;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,GAAG,CAAC;IAGxB,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,wCAAwC,CAAC,IAAI,EAAE,CAAC;IACvF,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAGV,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;IAC5F,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,yBAAyB,CAAC,CAAC;IAC7D,CAAC;IAGD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC;QAC7C,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IACpF,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IAGD,MAAM,eAAe,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACvH,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,eAAe,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACvC,KAAK,IAAI,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,0BAA0B,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,qDAAqD,CAAC,CAAC;IAC9F,CAAC;IAGD,MAAM,cAAc,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC7E,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,uBAAuB,CAAC,CAAC;IACxD,CAAC;IAGD,MAAM,WAAW,GAAG,qCAAqC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5E,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;SAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,IAAI,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,EAAE,CAAC;IACd,CAAC;IACD,OAAO;QACL,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC;QAC9C,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,oBAAoB;IAC1B,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,kCAAkC;IAC7C,OAAO,EAAE,eAAe;CACzB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [GRAFICO] Pontuador de qualidade Tailwind CSS\n *\n * Avalia a qualidade do Tailwind baseado em:\n * - Classes conflitantes\n * - Valores arbitrários\n * - Duplicação\n * - Uso de !important\n */\n\nimport { splitLines } from '@shared/helpers';\n\nexport interface TailwindScoreResult {\n  score: number;\n  maxScore: number;\n  percentage: number;\n  issues: string[];\n  strengths: string[];\n}\nexport function pontuarTailwind(src: string, _relPath: string): TailwindScoreResult {\n  let score = 0;\n  const maxScore = 100;\n  const issues: string[] = [];\n  const strengths: string[] = [];\n  const _linhas = splitLines(src);\n  const srcCompleto = src;\n\n  // Extract all class attributes\n  const classMatches = srcCompleto.match(/\\bclass(Name)?\\s*=\\s*[\"']([^\"']*)[\"']/g) || [];\n  const allClasses = classMatches.map(metrica => {\n    const match = metrica.match(/[\"']([^\"']*)[\"']/);\n    return match ? match[1].split(/\\s+/).filter(Boolean) : [];\n  }).flat();\n\n  // Duplicate classes (25 pontos)\n  const duplicates = allClasses.filter((elem, indice) => allClasses.indexOf(elem) !== indice);\n  if (duplicates.length === 0) {\n    score += 25;\n    strengths.push('Sem classes duplicadas');\n  } else {\n    score += Math.max(0, 25 - duplicates.length * 3);\n    issues.push(`${duplicates.length} classe(s) duplicada(s)`);\n  }\n\n  // Conflicting classes (20 pontos)\n  const propGroups = new Map<string, string[]>();\n  allClasses.forEach(token => {\n    const base = token.split(':').pop() || token;\n    if (/^(p|m)[trblxy]?(-|$)/.test(base)) {\n      const key = base.match(/^(p|m)[trblxy]?/)?.[0] || 'spacing';\n      if (!propGroups.has(key)) propGroups.set(key, []);\n      const existing = propGroups.get(key);\n      if (existing) existing.push(token);\n    }\n  });\n  const conflicts = [...propGroups.values()].filter(valor => valor.length > 1).length;\n  if (conflicts === 0) {\n    score += 20;\n    strengths.push('Sem classes conflitantes');\n  } else {\n    score += Math.max(0, 20 - conflicts * 5);\n    issues.push(`${conflicts} grupo(s) de classes conflitantes`);\n  }\n\n  // Arbitrary values (20 pontos)\n  const arbitraryValues = (srcCompleto.match(/\\[[^\\]]+\\]/g) || []).filter(valor => !/(var\\(|rgb\\(|calc\\()/i.test(valor));\n  if (arbitraryValues.length === 0) {\n    score += 20;\n    strengths.push('Sem valores arbitrários');\n  } else if (arbitraryValues.length <= 3) {\n    score += 15;\n    issues.push(`${arbitraryValues.length} valor(es) arbitrário(s)`);\n  } else {\n    score += 5;\n    issues.push(`${arbitraryValues.length} valores arbitrários - considere tailwind.config.js`);\n  }\n\n  // !important usage (15 pontos)\n  const importantCount = (srcCompleto.match(/class(Name)?=.*!/g) || []).length;\n  if (importantCount === 0) {\n    score += 15;\n    strengths.push('Sem !important');\n  } else {\n    issues.push(`${importantCount} uso(s) de !important`);\n  }\n\n  // Utility class organization (20 pontos)\n  const hasCnOrClsx = /\\b(cn|clsx|twMerge|classnames)\\s*\\(/.test(srcCompleto);\n  if (hasCnOrClsx) {\n    score += 20;\n    strengths.push('Uso de cn/clsx para organização');\n  } else if (classMatches.length > 5) {\n    score += 10;\n    issues.push('Muitos class attributes - considere cn/clsx');\n  } else {\n    score += 20;\n  }\n  return {\n    score,\n    maxScore,\n    percentage: Math.round(score / maxScore * 100),\n    issues,\n    strengths\n  };\n}\nexport const pontuadorTailwind = {\n  nome: 'pontuador-tailwind',\n  categoria: 'estilo',\n  descricao: 'Pontua qualidade de Tailwind CSS',\n  pontuar: pontuarTailwind\n};"]}

package/dist/analysts/xml/analysts/analyst-xml.d.ts

@@ -0,0 +1,12 @@
+import { criarOcorrencia } from '../../../types/index.js';
+type Msg = ReturnType<typeof criarOcorrencia>;
+export declare const analistaXml: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    global: false;
+    test: (relPath: string) => boolean;
+    aplicar: (src: string, relPath: string) => Promise<Msg[] | null>;
+};
+export {};
+//# sourceMappingURL=analyst-xml.d.ts.map

package/dist/analysts/xml/analysts/analyst-xml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-xml.d.ts","sourceRoot":"","sources":["../../../../src/analysts/xml/analysts/analyst-xml.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiB,eAAe,EAAE,MAAM,GAAG,CAAC;AAGnD,KAAK,GAAG,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;AA8G9C,eAAO,MAAM,WAAW;;;;;oBAKN,MAAM,KAAG,OAAO;+CACD,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;CAKpD,CAAC"}

package/dist/analysts/xml/analysts/analyst-xml.js

@@ -0,0 +1,105 @@
+import { messages } from '../../../core/messages/index.js';
+import { createLineLookup, maskXmlNonCode } from '../../../shared/helpers/index.js';
+import { criarAnalista, criarOcorrencia } from '../../../types/index.js';
+const disableEnv = process.env.TUTANUS_DISABLE_PLUGIN_XML === '1';
+function warn(message, relPath, line, nivel = messages.SeverityNiveis.warning) {
+    return criarOcorrencia({
+        relPath,
+        mensagem: message,
+        linha: line,
+        nivel,
+        origem: messages.AnalystOrigens.xml,
+        tipo: messages.AnalystTipos.xml
+    });
+}
+function collectXmlIssues(src, relPath) {
+    const ocorrencias = [];
+    const scan = maskXmlNonCode(src);
+    const lineOf = createLineLookup(scan).lineAt;
+    const trimmed = src.trimStart();
+    const seemsCompleteDocument = /^<\w/i.test(trimmed) && !trimmed.includes('<?xml');
+    if (seemsCompleteDocument && /^</.test(trimmed)) {
+        ocorrencias.push(warn(messages.XmlMensagens.xmlPrologAusente, relPath, 1, messages.SeverityNiveis.info));
+    }
+    const tagRegex = /<\/?([a-zA-Z_][\w.-]*(?::[a-zA-Z_][\w.-]*)?)(?:\s[^>]*)?>/g;
+    let match;
+    const tagStack = [];
+    while ((match = tagRegex.exec(scan)) !== null) {
+        const fullTag = match[0];
+        const tagNome = match[1];
+        const line = lineOf(match.index);
+        if (fullTag.startsWith('</')) {
+            const expected = tagStack?.pop();
+            if (expected === undefined || expected !== tagNome) {
+                ocorrencias.push(warn(messages.XmlMensagens.invalidXmlStructure, relPath, line, messages.SeverityNiveis.error));
+                break;
+            }
+        }
+        else if (!fullTag.endsWith('/>')) {
+            tagStack.push(tagNome);
+        }
+    }
+    if (tagStack.length > 0) {
+        ocorrencias.push(warn(messages.XmlMensagens.invalidXmlStructure, relPath, lineOf(scan.length), messages.SeverityNiveis.error));
+    }
+    const xmlnsRegex = /xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"][^'"]*['"]/g;
+    const declaredNamespaces = new Set();
+    while ((match = xmlnsRegex.exec(scan)) !== null) {
+        const prefix = match[1];
+        if (prefix)
+            declaredNamespaces.add(prefix);
+    }
+    const prefixRegex = /([a-zA-Z_][\w.-]*):[a-zA-Z_][\w.-]*/g;
+    while ((match = prefixRegex.exec(scan)) !== null) {
+        const prefix = match[1];
+        if (!declaredNamespaces.has(prefix) && prefix !== 'xml' && prefix !== 'xmlns') {
+            const line = lineOf(match.index);
+            ocorrencias.push(warn(messages.XmlMensagens.namespaceUndeclared(prefix), relPath, line, messages.SeverityNiveis.warning));
+        }
+    }
+    for (const metrica of scan.matchAll(/<!DOCTYPE\b[\s\S]*?(?:\]\s*>|>)/gi)) {
+        const chunk = metrica[0] ?? '';
+        const hasExternalId = /\b(SYSTEM|PUBLIC)\b/i.test(chunk);
+        const line = lineOf(metrica.index);
+        ocorrencias.push(warn(messages.XmlMensagens.doctypeDetectado, relPath, line));
+        if (hasExternalId) {
+            ocorrencias.push(warn(messages.XmlMensagens.doctypeExternoDetectado, relPath, line, messages.SeverityNiveis.error));
+        }
+    }
+    for (const metrica of scan.matchAll(/<!ENTITY\b[\s\S]*?>/gi)) {
+        const chunk = metrica[0] ?? '';
+        const hasExternal = /\b(SYSTEM|PUBLIC)\b/i.test(chunk);
+        const isParamEntity = /<!ENTITY\s+%/i.test(chunk);
+        const hasDangerousSystemId = /\bSYSTEM\b[\s\S]*?['"]\s*(file:|ftp:|gopher:|jar:|php:|data:)/i.test(chunk);
+        const line = lineOf(metrica.index);
+        if (isParamEntity) {
+            ocorrencias.push(warn(messages.XmlMensagens.entidadeParametroDetectada, relPath, line, messages.SeverityNiveis.warning));
+        }
+        const entityValor = chunk.match(/<!ENTITY\s+[^'"]*\s+['"]([^'"]*)['"]/i)?.[1];
+        if (entityValor && entityValor.includes('&') && entityValor.length > 100) {
+            ocorrencias.push(warn(messages.XmlMensagens.largeEntityExpansion, relPath, line, messages.SeverityNiveis.error));
+        }
+        ocorrencias.push(warn(hasExternal ? messages.XmlMensagens.entidadeExternaDetectada : messages.XmlMensagens.entidadeDetectada, relPath, line, hasExternal || hasDangerousSystemId ? messages.SeverityNiveis.error : messages.SeverityNiveis.warning));
+    }
+    for (const metrica of scan.matchAll(/<\s*(?:xi|xinclude):include\b[^>]*>/gi)) {
+        ocorrencias.push(warn(messages.XmlMensagens.xincludeDetectado, relPath, lineOf(metrica.index)));
+    }
+    for (const metrica of scan.matchAll(/=\s*['"]\s*<!\[CDATA\[[\s\S]*?\]\]>\s*['"]/gi)) {
+        ocorrencias.push(warn(messages.XmlMensagens.cdataInAttribute, relPath, lineOf(metrica.index), messages.SeverityNiveis.error));
+    }
+    return ocorrencias;
+}
+export const analistaXml = criarAnalista({
+    nome: 'analista-xml',
+    categoria: 'markup',
+    descricao: 'Heurísticas leves para XML (foco em segurança/XXE e compatibilidade).',
+    global: false,
+    test: (relPath) => /\.xml$/i.test(relPath),
+    aplicar: async (src, relPath) => {
+        if (disableEnv)
+            return null;
+        const msgs = collectXmlIssues(src, relPath);
+        return msgs.length ? msgs : null;
+    }
+});
+//# sourceMappingURL=analyst-xml.js.map

package/dist/analysts/xml/analysts/analyst-xml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-xml.js","sourceRoot":"","sources":["../../../../src/analysts/xml/analysts/analyst-xml.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEnD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;AAElE,SAAS,IAAI,CAAC,OAAe,EAAE,OAAe,EAAE,IAAa,EAAE,QAAgF,QAAQ,CAAC,cAAc,CAAC,OAAO;IAC5K,OAAO,eAAe,CAAC;QACrB,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,IAAI;QACX,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG;QACnC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,GAAG;KAChC,CAAC,CAAC;AACL,CAAC;AACD,SAAS,gBAAgB,CAAC,GAAW,EAAE,OAAe;IACpD,MAAM,WAAW,GAAU,EAAE,CAAC;IAI9B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAI7C,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClF,IAAI,qBAAqB,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3G,CAAC;IAID,MAAM,QAAQ,GAAG,4DAA4D,CAAC;IAC9E,IAAI,KAAK,CAAC;IACV,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAE7B,MAAM,QAAQ,GAAG,QAAQ,EAAE,GAAG,EAAE,CAAC;YACjC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACnD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChH,MAAM;YACR,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAEnC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACjI,CAAC;IAID,MAAM,UAAU,GAAG,qDAAqD,CAAC;IACzE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,MAAM;YAAE,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,WAAW,GAAG,sCAAsC,CAAC;IAC3D,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5H,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9E,IAAI,aAAa,EAAE,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,oBAAoB,GAAG,gEAAgE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,aAAa,EAAE,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,0BAA0B,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3H,CAAC;QAID,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,uCAAuC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAEzE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACnH,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,IAAI,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACvP,CAAC;IAGD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EAAE,CAAC;QAC7E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;IAGD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,8CAA8C,CAAC,EAAE,CAAC;QACpF,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAChI,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AACD,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;IACvC,IAAI,EAAE,cAAc;IACpB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,uEAAuE;IAClF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;IAC3D,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAyB,EAAE;QACrD,IAAI,UAAU;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;CACF,CAAC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { messages } from '@core/messages';\nimport { createLineLookup, maskXmlNonCode } from '@shared/helpers';\n\nimport { criarAnalista, criarOcorrencia } from '@';\n\nconst disableEnv = process.env.TUTANUS_DISABLE_PLUGIN_XML === '1';\ntype Msg = ReturnType<typeof criarOcorrencia>;\nfunction warn(message: string, relPath: string, line?: number, nivel: (typeof messages.SeverityNiveis)[keyof typeof messages.SeverityNiveis] = messages.SeverityNiveis.warning): Msg {\n  return criarOcorrencia({\n    relPath,\n    mensagem: message,\n    linha: line,\n    nivel,\n    origem: messages.AnalystOrigens.xml,\n    tipo: messages.AnalystTipos.xml\n  });\n}\nfunction collectXmlIssues(src: string, relPath: string): Msg[] {\n  const ocorrencias: Msg[] = [];\n\n  // Para reduzir falsos positivos (ex.: exemplos comentados), analisamos uma versão mascarada\n  // preservando quebras de linha para manter cálculo de linha consistente.\n  const scan = maskXmlNonCode(src);\n  const lineOf = createLineLookup(scan).lineAt;\n\n  // Prolog (opcional): só alerta se o arquivo parece XML completo e começa direto com tag.\n  // Fragmentos XML (como em SOAP ou RSS) podem não ter prolog.\n  const trimmed = src.trimStart();\n  const seemsCompleteDocument = /^<\\w/i.test(trimmed) && !trimmed.includes('<?xml');\n  if (seemsCompleteDocument && /^</.test(trimmed)) {\n    ocorrencias.push(warn(messages.XmlMensagens.xmlPrologAusente, relPath, 1, messages.SeverityNiveis.info));\n  }\n\n  // Validação básica de estrutura XML (tags balanceadas)\n  // Melhorar regex para capturar tags com atributos complexos, namespaces, etc.\n  const tagRegex = /<\\/?([a-zA-Z_][\\w.-]*(?::[a-zA-Z_][\\w.-]*)?)(?:\\s[^>]*)?>/g;\n  let match;\n  const tagStack: string[] = [];\n  while ((match = tagRegex.exec(scan)) !== null) {\n    const fullTag = match[0];\n    const tagNome = match[1];\n    const line = lineOf(match.index);\n    if (fullTag.startsWith('</')) {\n      // Tag de fechamento\n      const expected = tagStack?.pop();\n      if (expected === undefined || expected !== tagNome) {\n        ocorrencias.push(warn(messages.XmlMensagens.invalidXmlStructure, relPath, line, messages.SeverityNiveis.error));\n        break; // Para evitar cascata de erros\n      }\n    } else if (!fullTag.endsWith('/>')) {\n      // Tag de abertura (não self-closing)\n      tagStack.push(tagNome);\n    }\n  }\n  if (tagStack.length > 0) {\n    ocorrencias.push(warn(messages.XmlMensagens.invalidXmlStructure, relPath, lineOf(scan.length), messages.SeverityNiveis.error));\n  }\n\n  // Namespaces não declarados\n  // Melhorar para considerar declarações no scan mascarado e evitar falsos positivos\n  const xmlnsRegex = /xmlns(?::([a-zA-Z_][\\w.-]*))?\\s*=\\s*['\"][^'\"]*['\"]/g;\n  const declaredNamespaces = new Set<string>();\n  while ((match = xmlnsRegex.exec(scan)) !== null) {\n    const prefix = match[1];\n    if (prefix) declaredNamespaces.add(prefix);\n  }\n  const prefixRegex = /([a-zA-Z_][\\w.-]*):[a-zA-Z_][\\w.-]*/g;\n  while ((match = prefixRegex.exec(scan)) !== null) {\n    const prefix = match[1];\n    if (!declaredNamespaces.has(prefix) && prefix !== 'xml' && prefix !== 'xmlns') {\n      const line = lineOf(match.index);\n      ocorrencias.push(warn(messages.XmlMensagens.namespaceUndeclared(prefix), relPath, line, messages.SeverityNiveis.warning));\n    }\n  }\n\n  // DOCTYPE + ENTITY (XXE)\n  for (const metrica of scan.matchAll(/<!DOCTYPE\\b[\\s\\S]*?(?:\\]\\s*>|>)/gi)) {\n    const chunk = metrica[0] ?? '';\n    const hasExternalId = /\\b(SYSTEM|PUBLIC)\\b/i.test(chunk);\n    const line = lineOf(metrica.index);\n    ocorrencias.push(warn(messages.XmlMensagens.doctypeDetectado, relPath, line));\n    if (hasExternalId) {\n      ocorrencias.push(warn(messages.XmlMensagens.doctypeExternoDetectado, relPath, line, messages.SeverityNiveis.error));\n    }\n  }\n  for (const metrica of scan.matchAll(/<!ENTITY\\b[\\s\\S]*?>/gi)) {\n    const chunk = metrica[0] ?? '';\n    const hasExternal = /\\b(SYSTEM|PUBLIC)\\b/i.test(chunk);\n    const isParamEntity = /<!ENTITY\\s+%/i.test(chunk);\n    const hasDangerousSystemId = /\\bSYSTEM\\b[\\s\\S]*?['\"]\\s*(file:|ftp:|gopher:|jar:|php:|data:)/i.test(chunk);\n    const line = lineOf(metrica.index);\n    if (isParamEntity) {\n      ocorrencias.push(warn(messages.XmlMensagens.entidadeParametroDetectada, relPath, line, messages.SeverityNiveis.warning));\n    }\n\n    // Detecta entidades com expansão potencialmente grande (Billion Laughs)\n    // Focar em entidades recursivas ou com referências múltiplas, não apenas tamanho\n    const entityValor = chunk.match(/<!ENTITY\\s+[^'\"]*\\s+['\"]([^'\"]*)['\"]/i)?.[1];\n    if (entityValor && entityValor.includes('&') && entityValor.length > 100) {\n      // Heurística simples: entidades que referenciam outras e são grandes\n      ocorrencias.push(warn(messages.XmlMensagens.largeEntityExpansion, relPath, line, messages.SeverityNiveis.error));\n    }\n    ocorrencias.push(warn(hasExternal ? messages.XmlMensagens.entidadeExternaDetectada : messages.XmlMensagens.entidadeDetectada, relPath, line, hasExternal || hasDangerousSystemId ? messages.SeverityNiveis.error : messages.SeverityNiveis.warning));\n  }\n\n  // XInclude (carregamento externo)\n  for (const metrica of scan.matchAll(/<\\s*(?:xi|xinclude):include\\b[^>]*>/gi)) {\n    ocorrencias.push(warn(messages.XmlMensagens.xincludeDetectado, relPath, lineOf(metrica.index)));\n  }\n\n  // CDATA em atributos (inválido)\n  for (const metrica of scan.matchAll(/=\\s*['\"]\\s*<!\\[CDATA\\[[\\s\\S]*?\\]\\]>\\s*['\"]/gi)) {\n    ocorrencias.push(warn(messages.XmlMensagens.cdataInAttribute, relPath, lineOf(metrica.index), messages.SeverityNiveis.error));\n  }\n  return ocorrencias;\n}\nexport const analistaXml = criarAnalista({\n  nome: 'analista-xml',\n  categoria: 'markup',\n  descricao: 'Heurísticas leves para XML (foco em segurança/XXE e compatibilidade).',\n  global: false,\n  test: (relPath: string): boolean => /\\.xml$/i.test(relPath),\n  aplicar: async (src, relPath): Promise<Msg[] | null> => {\n    if (disableEnv) return null;\n    const msgs = collectXmlIssues(src, relPath);\n    return msgs.length ? msgs : null;\n  }\n});"]}

package/dist/analysts/xml/analysts/index.d.ts

@@ -0,0 +1,2 @@
+export * from './analyst-xml.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/xml/analysts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/xml/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC"}

package/dist/analysts/xml/analysts/index.js

@@ -0,0 +1,2 @@
+export * from './analyst-xml.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/xml/analysts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/xml/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC","sourcesContent":["export * from './analyst-xml.js';\n"]}

package/dist/analysts/xml/corrections/correction-xml.d.ts

@@ -0,0 +1,11 @@
+import type { Analista } from '../../../types/index.js';
+export interface XmlCorrection {
+    tipo: string;
+    original: string;
+    sugerido: string;
+    linha: number;
+    confianca: number;
+}
+export declare function detectarCorrecoesXml(src: string, _relPath: string): XmlCorrection[];
+export declare const correctionXml: Analista;
+//# sourceMappingURL=correction-xml.d.ts.map

package/dist/analysts/xml/corrections/correction-xml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-xml.d.ts","sourceRoot":"","sources":["../../../../src/analysts/xml/corrections/correction-xml.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CA+CnF;AACD,eAAO,MAAM,aAAa,EAAE,QAiB3B,CAAC"}

package/dist/analysts/xml/corrections/correction-xml.js

@@ -0,0 +1,69 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+export function detectarCorrecoesXml(src, _relPath) {
+    const correcoes = [];
+    const linhas = splitLines(src);
+    linhas.forEach((linha, index) => {
+        const numeroLinha = index + 1;
+        if (/<!DOCTYPE\b[\s\S]*?\bSYSTEM\b/i.test(linha)) {
+            correcoes.push({
+                tipo: 'xml-remove-external-doctype',
+                original: linha.trim(),
+                sugerido: '<!-- Remova DOCTYPE com entidades externas para segurança -->',
+                linha: numeroLinha,
+                confianca: 90
+            });
+        }
+        if (/<!ENTITY\b.*\bSYSTEM\b/i.test(linha)) {
+            correcoes.push({
+                tipo: 'xml-remove-external-entity',
+                original: linha.trim(),
+                sugerido: '<!-- Remova entidades externas SYSTEM -->',
+                linha: numeroLinha,
+                confianca: 95
+            });
+        }
+    });
+    const declaredNs = new Set();
+    for (const metrica of src.matchAll(/xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"]([^'"]*)['"]/g)) {
+        if (metrica[1])
+            declaredNs.add(metrica[1]);
+    }
+    const undeclared = new Set();
+    for (const metrica of src.matchAll(/([a-zA-Z_][\w.-]*):[a-zA-Z_][\w.-]*/g)) {
+        const prefix = metrica[1];
+        if (!declaredNs.has(prefix) && prefix !== 'xml' && prefix !== 'xmlns') {
+            undeclared.add(prefix);
+        }
+    }
+    if (undeclared.size > 0) {
+        correcoes.push({
+            tipo: 'xml-declare-namespaces',
+            original: 'Namespaces não declarados',
+            sugerido: `Adicione: ${[...undeclared].map(caminho => `xmlns:${caminho}="URI"`).join(' ')}`,
+            linha: 1,
+            confianca: 85
+        });
+    }
+    return correcoes;
+}
+export const correctionXml = {
+    nome: 'correction-xml',
+    categoria: 'markup',
+    descricao: 'Correções automáticas para problemas XML',
+    test: (relPath) => /\.xml$/i.test(relPath),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const correcoes = detectarCorrecoesXml(src, relPath);
+        return correcoes.map(elem => criarOcorrencia({
+            tipo: `correction-${elem.tipo}`,
+            nivel: elem.confianca > 85 ? 'aviso' : 'info',
+            mensagem: `Correção sugerida: ${elem.tipo}`,
+            relPath,
+            linha: elem.linha,
+            sugestao: `[ERRO] ${elem.original}\n[OK] ${elem.sugerido}\nConfiança: ${elem.confianca}%`
+        }));
+    }
+};
+//# sourceMappingURL=correction-xml.js.map

package/dist/analysts/xml/corrections/correction-xml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-xml.js","sourceRoot":"","sources":["../../../../src/analysts/xml/corrections/correction-xml.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AASpC,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,QAAgB;IAChE,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;QAC9B,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,6BAA6B;gBACnC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,QAAQ,EAAE,+DAA+D;gBACzE,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,4BAA4B;gBAClC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;gBACtB,QAAQ,EAAE,2CAA2C;gBACrD,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAGH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,uDAAuD,CAAC,EAAE,CAAC;QAC5F,IAAI,OAAO,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,sCAAsC,CAAC,EAAE,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACtE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,2BAA2B;YACrC,QAAQ,EAAE,aAAa,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,OAAO,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC3F,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,MAAM,CAAC,MAAM,aAAa,GAAa;IACrC,IAAI,EAAE,gBAAgB;IACtB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,0CAA0C;IACrD,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;IAC3D,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC;YAC3C,IAAI,EAAE,cAAc,IAAI,CAAC,IAAI,EAAE;YAC/B,KAAK,EAAE,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC7C,QAAQ,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;YAC3C,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,UAAU,IAAI,CAAC,QAAQ,UAAU,IAAI,CAAC,QAAQ,gBAAgB,IAAI,CAAC,SAAS,GAAG;SAC1F,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [CHAVE-INGLESA] Correções automáticas para XML\n *\n * Fornece correções sugeridas para problemas comuns em XML:\n * - Remover DOCTYPE\n * - Declarar namespaces\n * - Remover entidades externas\n */\n\nimport { splitLines } from '@shared/helpers';\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport interface XmlCorrection {\n  tipo: string;\n  original: string;\n  sugerido: string;\n  linha: number;\n  confianca: number;\n}\nexport function detectarCorrecoesXml(src: string, _relPath: string): XmlCorrection[] {\n  const correcoes: XmlCorrection[] = [];\n  const linhas = splitLines(src);\n  linhas.forEach((linha, index) => {\n    const numeroLinha = index + 1;\n    if (/<!DOCTYPE\\b[\\s\\S]*?\\bSYSTEM\\b/i.test(linha)) {\n      correcoes.push({\n        tipo: 'xml-remove-external-doctype',\n        original: linha.trim(),\n        sugerido: '<!-- Remova DOCTYPE com entidades externas para segurança -->',\n        linha: numeroLinha,\n        confianca: 90\n      });\n    }\n    if (/<!ENTITY\\b.*\\bSYSTEM\\b/i.test(linha)) {\n      correcoes.push({\n        tipo: 'xml-remove-external-entity',\n        original: linha.trim(),\n        sugerido: '<!-- Remova entidades externas SYSTEM -->',\n        linha: numeroLinha,\n        confianca: 95\n      });\n    }\n  });\n\n  // Check for undeclared namespaces\n  const declaredNs = new Set<string>();\n  for (const metrica of src.matchAll(/xmlns(?::([a-zA-Z_][\\w.-]*))?\\s*=\\s*['\"]([^'\"]*)['\"]/g)) {\n    if (metrica[1]) declaredNs.add(metrica[1]);\n  }\n  const undeclared = new Set<string>();\n  for (const metrica of src.matchAll(/([a-zA-Z_][\\w.-]*):[a-zA-Z_][\\w.-]*/g)) {\n    const prefix = metrica[1];\n    if (!declaredNs.has(prefix) && prefix !== 'xml' && prefix !== 'xmlns') {\n      undeclared.add(prefix);\n    }\n  }\n  if (undeclared.size > 0) {\n    correcoes.push({\n      tipo: 'xml-declare-namespaces',\n      original: 'Namespaces não declarados',\n      sugerido: `Adicione: ${[...undeclared].map(caminho => `xmlns:${caminho}=\"URI\"`).join(' ')}`,\n      linha: 1,\n      confianca: 85\n    });\n  }\n  return correcoes;\n}\nexport const correctionXml: Analista = {\n  nome: 'correction-xml',\n  categoria: 'markup',\n  descricao: 'Correções automáticas para problemas XML',\n  test: (relPath: string): boolean => /\\.xml$/i.test(relPath),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const correcoes = detectarCorrecoesXml(src, relPath);\n    return correcoes.map(elem => criarOcorrencia({\n      tipo: `correction-${elem.tipo}`,\n      nivel: elem.confianca > 85 ? 'aviso' : 'info',\n      mensagem: `Correção sugerida: ${elem.tipo}`,\n      relPath,\n      linha: elem.linha,\n      sugestao: `[ERRO] ${elem.original}\\n[OK] ${elem.sugerido}\\nConfiança: ${elem.confianca}%`\n    }));\n  }\n};"]}

package/dist/analysts/xml/corrections/index.d.ts

@@ -0,0 +1,2 @@
+export * from './correction-xml.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/xml/corrections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/xml/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC"}

package/dist/analysts/xml/corrections/index.js

@@ -0,0 +1,2 @@
+export * from './correction-xml.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/xml/corrections/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/xml/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './correction-xml.js';\n"]}

package/dist/analysts/xml/detectors/detector-xml-security.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorXmlSecurity: Analista;
+//# sourceMappingURL=detector-xml-security.d.ts.map

package/dist/analysts/xml/detectors/detector-xml-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-xml-security.d.ts","sourceRoot":"","sources":["../../../../src/analysts/xml/detectors/detector-xml-security.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,eAAO,MAAM,mBAAmB,EAAE,QAqFjC,CAAC"}

package/dist/analysts/xml/detectors/detector-xml-security.js

@@ -0,0 +1,89 @@
+import { maskXmlNonCode, splitLines } from '../../../shared/helpers/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+export const detectorXmlSecurity = {
+    nome: 'detector-xml-security',
+    categoria: 'markup',
+    descricao: 'Detecta vulnerabilidades de segurança em XML',
+    test: (relPath) => /\.xml$/i.test(relPath),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        const scan = maskXmlNonCode(src);
+        const linhas = splitLines(scan);
+        linhas.forEach((linha, index) => {
+            const numeroLinha = index + 1;
+            if (/<!DOCTYPE\b/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'xml-doctype',
+                    nivel: 'aviso',
+                    mensagem: 'DOCTYPE detectado - potencial risco XXE',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Desabilite DOCTYPE no parser XML'
+                }));
+                if (/\b(SYSTEM|PUBLIC)\b/i.test(linha)) {
+                    ocorrencias.push(criarOcorrencia({
+                        tipo: 'xml-external-doctype',
+                        nivel: 'erro',
+                        mensagem: 'DOCTYPE com entidade externa - risco XXE alto',
+                        relPath,
+                        linha: numeroLinha,
+                        sugestao: 'Remova entidades externas do DOCTYPE'
+                    }));
+                }
+            }
+            if (/<!ENTITY\b/i.test(linha)) {
+                const hasExternal = /\b(SYSTEM|PUBLIC)\b/i.test(linha);
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'xml-entity',
+                    nivel: hasExternal ? 'erro' : 'aviso',
+                    mensagem: `Entidade XML detectada${hasExternal ? ' externa' : ''}`,
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Desabilite entidades no parser XML'
+                }));
+            }
+            if (/<\s*(?:xi|xinclude):include\b/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'xml-xinclude',
+                    nivel: 'aviso',
+                    mensagem: 'XInclude detectado - carregamento externo',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Desabilite XInclude se não for necessário'
+                }));
+            }
+            if (/=\s*['"]\s*<!\[CDATA\[[\s\S]*?\]\]>\s*['"]/i.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'xml-cdata-in-attribute',
+                    nivel: 'erro',
+                    mensagem: 'CDATA em atributo - XML inválido',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'CDATA só é válido em conteúdo de elementos'
+                }));
+            }
+        });
+        const declaredNs = new Set();
+        for (const metrica of scan.matchAll(/xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"][^'"]*['"]/g)) {
+            if (metrica[1])
+                declaredNs.add(metrica[1]);
+        }
+        for (const metrica of scan.matchAll(/([a-zA-Z_][\w.-]*):[a-zA-Z_][\w.-]*/g)) {
+            const prefix = metrica[1];
+            if (!declaredNs.has(prefix) && prefix !== 'xml' && prefix !== 'xmlns') {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'xml-undeclared-namespace',
+                    nivel: 'aviso',
+                    mensagem: `Namespace '${prefix}' não declarado`,
+                    relPath,
+                    linha: 1,
+                    sugestao: `Declare xmlns:${prefix}="..."`
+                }));
+            }
+        }
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-xml-security.js.map

package/dist/analysts/xml/detectors/detector-xml-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-xml-security.js","sourceRoot":"","sources":["../../../../src/analysts/xml/detectors/detector-xml-security.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7D,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,CAAC,MAAM,mBAAmB,GAAa;IAC3C,IAAI,EAAE,uBAAuB;IAC7B,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,8CAA8C;IACzD,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;IAC3D,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;YAC9B,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,aAAa;oBACnB,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,yCAAyC;oBACnD,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,kCAAkC;iBAC7C,CAAC,CAAC,CAAC;gBACJ,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;wBAC/B,IAAI,EAAE,sBAAsB;wBAC5B,KAAK,EAAE,MAAM;wBACb,QAAQ,EAAE,+CAA+C;wBACzD,OAAO;wBACP,KAAK,EAAE,WAAW;wBAClB,QAAQ,EAAE,sCAAsC;qBACjD,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;YACD,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;oBACrC,QAAQ,EAAE,yBAAyB,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE;oBAClE,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,oCAAoC;iBAC/C,CAAC,CAAC,CAAC;YACN,CAAC;YACD,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,2CAA2C;oBACrD,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,2CAA2C;iBACtD,CAAC,CAAC,CAAC;YACN,CAAC;YACD,IAAI,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9D,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,wBAAwB;oBAC9B,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,kCAAkC;oBAC5C,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,4CAA4C;iBACvD,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAGH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;YAC3F,IAAI,OAAO,CAAC,CAAC,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,sCAAsC,CAAC,EAAE,CAAC;YAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACtE,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,0BAA0B;oBAChC,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,cAAc,MAAM,iBAAiB;oBAC/C,OAAO;oBACP,KAAK,EAAE,CAAC;oBACR,QAAQ,EAAE,iBAAiB,MAAM,QAAQ;iBAC1C,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Detector de segurança XML\n *\n * Detecta vulnerabilidades em XML:\n * - XXE (XML External Entity)\n * - DOCTYPE com entidades externas\n * - Namespaces não declarados\n * - CDATA em atributos\n */\n\nimport { maskXmlNonCode, splitLines } from '@shared/helpers';\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport const detectorXmlSecurity: Analista = {\n  nome: 'detector-xml-security',\n  categoria: 'markup',\n  descricao: 'Detecta vulnerabilidades de segurança em XML',\n  test: (relPath: string): boolean => /\\.xml$/i.test(relPath),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n    const scan = maskXmlNonCode(src);\n    const linhas = splitLines(scan);\n    linhas.forEach((linha, index) => {\n      const numeroLinha = index + 1;\n      if (/<!DOCTYPE\\b/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'xml-doctype',\n          nivel: 'aviso',\n          mensagem: 'DOCTYPE detectado - potencial risco XXE',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Desabilite DOCTYPE no parser XML'\n        }));\n        if (/\\b(SYSTEM|PUBLIC)\\b/i.test(linha)) {\n          ocorrencias.push(criarOcorrencia({\n            tipo: 'xml-external-doctype',\n            nivel: 'erro',\n            mensagem: 'DOCTYPE com entidade externa - risco XXE alto',\n            relPath,\n            linha: numeroLinha,\n            sugestao: 'Remova entidades externas do DOCTYPE'\n          }));\n        }\n      }\n      if (/<!ENTITY\\b/i.test(linha)) {\n        const hasExternal = /\\b(SYSTEM|PUBLIC)\\b/i.test(linha);\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'xml-entity',\n          nivel: hasExternal ? 'erro' : 'aviso',\n          mensagem: `Entidade XML detectada${hasExternal ? ' externa' : ''}`,\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Desabilite entidades no parser XML'\n        }));\n      }\n      if (/<\\s*(?:xi|xinclude):include\\b/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'xml-xinclude',\n          nivel: 'aviso',\n          mensagem: 'XInclude detectado - carregamento externo',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Desabilite XInclude se não for necessário'\n        }));\n      }\n      if (/=\\s*['\"]\\s*<!\\[CDATA\\[[\\s\\S]*?\\]\\]>\\s*['\"]/i.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'xml-cdata-in-attribute',\n          nivel: 'erro',\n          mensagem: 'CDATA em atributo - XML inválido',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'CDATA só é válido em conteúdo de elementos'\n        }));\n      }\n    });\n\n    // Check for undeclared namespaces\n    const declaredNs = new Set<string>();\n    for (const metrica of scan.matchAll(/xmlns(?::([a-zA-Z_][\\w.-]*))?\\s*=\\s*['\"][^'\"]*['\"]/g)) {\n      if (metrica[1]) declaredNs.add(metrica[1]);\n    }\n    for (const metrica of scan.matchAll(/([a-zA-Z_][\\w.-]*):[a-zA-Z_][\\w.-]*/g)) {\n      const prefix = metrica[1];\n      if (!declaredNs.has(prefix) && prefix !== 'xml' && prefix !== 'xmlns') {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'xml-undeclared-namespace',\n          nivel: 'aviso',\n          mensagem: `Namespace '${prefix}' não declarado`,\n          relPath,\n          linha: 1,\n          sugestao: `Declare xmlns:${prefix}=\"...\"`\n        }));\n      }\n    }\n    return ocorrencias;\n  }\n};"]}

package/dist/analysts/xml/detectors/detector-xml.d.ts

@@ -0,0 +1,3 @@
+import type { ResultadoDeteccaoArquetipo } from '../../../types/index.js';
+export declare function detectarArquetipoXML(arquivos: string[]): ResultadoDeteccaoArquetipo[];
+//# sourceMappingURL=detector-xml.d.ts.map

package/dist/analysts/xml/detectors/detector-xml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-xml.d.ts","sourceRoot":"","sources":["../../../../src/analysts/xml/detectors/detector-xml.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,GAAG,CAAC;AAOpD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,0BAA0B,EAAE,CA4FrF"}