tutanus 0.12.0

package/dist/app/github/app/repo-downloader.js

@@ -0,0 +1,156 @@
+import { execFileSync } from 'node:child_process';
+import { chmodSync, mkdtempSync, readdirSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { messages } from '../../../core/messages/index.js';
+const HTTP_REDIRECT = 302;
+const { GithubRepoDownloaderMensagens } = messages;
+const OWNER_REPO_RE = /^[a-zA-Z0-9_.-]+$/;
+const REF_RE = /^[a-zA-Z0-9_.\-/]+$/;
+function validarInput(valor, regex, nome) {
+    if (!regex.test(valor)) {
+        throw new Error(messages.ExcecoesMensagens.inputInvalido(nome));
+    }
+}
+function validarRedirectUrl(url) {
+    const parsed = new URL(url);
+    if (!parsed.hostname.endsWith('.github.com') && parsed.hostname !== 'github.com') {
+        throw new Error(GithubRepoDownloaderMensagens.redirectInvalido);
+    }
+    if (!parsed.protocol.startsWith('https')) {
+        throw new Error(GithubRepoDownloaderMensagens.redirectInvalido);
+    }
+    return parsed;
+}
+export async function getInstallationToken(app, installationId) {
+    const { data } = await app.octokit.request('POST /app/installations/{installation_id}/access_tokens', {
+        installation_id: installationId
+    });
+    return data.token;
+}
+export async function downloadRepo(app, installationId, owner, repo, ref) {
+    validarInput(owner, OWNER_REPO_RE, 'owner');
+    validarInput(repo, OWNER_REPO_RE, 'repo');
+    validarInput(ref, REF_RE, 'ref');
+    const tempDir = mkdtempSync(join(tmpdir(), 'tutanus-repo-'));
+    const zipPath = join(tempDir, 'repo.zip');
+    try {
+        const octokit = await app.getInstallationOctokit(installationId);
+        const response = await octokit.request('GET /repos/{owner}/{repo}/zipball/{ref}', {
+            owner,
+            repo,
+            ref,
+            request: { redirect: 'manual' }
+        });
+        let zipBuffer;
+        if (response.status === HTTP_REDIRECT && response.headers.location) {
+            const redirectUrl = validarRedirectUrl(response.headers.location);
+            const token = await getInstallationToken(app, installationId);
+            const zipResponse = await fetch(redirectUrl, {
+                headers: { Authorization: `Bearer ${token}` }
+            });
+            if (!zipResponse.ok) {
+                throw new Error(GithubRepoDownloaderMensagens.falhaBaixarZipball(zipResponse.status));
+            }
+            zipBuffer = Buffer.from(await zipResponse.arrayBuffer());
+        }
+        else if (Buffer.isBuffer(response.data)) {
+            zipBuffer = response.data;
+        }
+        else {
+            throw new Error(GithubRepoDownloaderMensagens.respostaInesperada);
+        }
+        writeFileSync(zipPath, zipBuffer);
+        execFileSync('unzip', ['-q', zipPath, '-d', tempDir], { stdio: 'pipe' });
+        rmSync(zipPath);
+        validarSemPathTraversal(tempDir);
+        const entries = readdirSync(tempDir);
+        const repoDirName = entries?.find(e => e !== 'repo.zip') ?? '';
+        if (!repoDirName) {
+            throw new Error(GithubRepoDownloaderMensagens.nenhumDiretorioEncontrado);
+        }
+        return {
+            tempDir,
+            repoDir: join(tempDir, repoDirName),
+            cleanup: () => {
+                try {
+                    rmSync(tempDir, { recursive: true, force: true });
+                }
+                catch { }
+            }
+        };
+    }
+    catch (err) {
+        rmSync(tempDir, { recursive: true, force: true });
+        throw err;
+    }
+}
+function escreverAskpassScript() {
+    const tmpScript = join(tmpdir(), `tutanus-askpass-${Date.now()}.sh`);
+    writeFileSync(tmpScript, '#!/bin/sh\necho "$TUTANUS_GIT_TOKEN"');
+    chmodSync(tmpScript, 0o500);
+    return tmpScript;
+}
+function limparAskpassScript(caminho) {
+    try {
+        rmSync(caminho);
+    }
+    catch { }
+}
+function validarSemPathTraversal(dir) {
+    const pilha = [dir];
+    while (pilha.length > 0) {
+        const atual = pilha.pop();
+        if (!atual)
+            continue;
+        for (const entry of readdirSync(atual)) {
+            const caminhoCompleto = join(atual, entry);
+            if (!caminhoCompleto.startsWith(dir)) {
+                rmSync(dir, { recursive: true, force: true });
+                throw new Error(GithubRepoDownloaderMensagens.pathTraversalDetectado);
+            }
+            if (statSync(caminhoCompleto).isDirectory()) {
+                pilha.push(caminhoCompleto);
+            }
+        }
+    }
+}
+export async function cloneRepo(app, installationId, owner, repo, ref) {
+    validarInput(owner, OWNER_REPO_RE, 'owner');
+    validarInput(repo, OWNER_REPO_RE, 'repo');
+    validarInput(ref, REF_RE, 'ref');
+    const tempDir = mkdtempSync(join(tmpdir(), 'tutanus-repo-'));
+    const repoDir = join(tempDir, 'repo');
+    const token = await getInstallationToken(app, installationId);
+    const askpassScript = escreverAskpassScript();
+    try {
+        execFileSync('git', ['clone', '--depth', '1', '--branch', ref,
+            `https://github.com/${owner}/${repo}.git`, repoDir], {
+            stdio: 'pipe',
+            timeout: 120000,
+            env: {
+                ...process.env,
+                TUTANUS_GIT_TOKEN: token,
+                GIT_ASKPASS: askpassScript,
+                GIT_TERMINAL_PROMPT: '0'
+            }
+        });
+        return {
+            tempDir,
+            repoDir,
+            cleanup: () => {
+                limparAskpassScript(askpassScript);
+                try {
+                    rmSync(tempDir, { recursive: true, force: true });
+                }
+                catch { }
+            }
+        };
+    }
+    catch (err) {
+        limparAskpassScript(askpassScript);
+        rmSync(tempDir, { recursive: true, force: true });
+        throw err;
+    }
+}
+//# sourceMappingURL=repo-downloader.js.map

package/dist/app/github/app/repo-downloader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-downloader.js","sourceRoot":"","sources":["../../../../src/app/github/app/repo-downloader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAK1C,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,EAAE,6BAA6B,EAAE,GAAG,QAAQ,CAAC;AAGnD,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,MAAM,GAAG,qBAAqB,CAAC;AAErC,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa,EAAE,IAAY;IAC9D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAQ,EAAE,cAAsB;IACzE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,yDAAyD,EAAE;QACpG,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAQ,EACR,cAAsB,EACtB,KAAa,EACb,IAAY,EACZ,GAAW;IAEX,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAC5C,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1C,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAEjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;QAEjE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,yCAAyC,EAAE;YAChF,KAAK;YACL,IAAI;YACJ,GAAG;YACH,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;SAChC,CAAC,CAAC;QAEH,IAAI,SAAiB,CAAC;QACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACnE,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAC9D,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;gBAC3C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,CAAC;YACD,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,CAAC;QACpE,CAAC;QAED,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAGlC,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,OAAO,CAAC,CAAC;QAGhB,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO;YACL,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;YACnC,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC;oBAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,CAAC;YACtE,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrE,aAAa,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;IACjE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,CAAC;QAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,sBAAsB,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAQ,EACR,cAAsB,EACtB,KAAa,EACb,IAAY,EACZ,GAAW;IAEX,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAC5C,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1C,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAEjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAG9D,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;IAE9C,IAAI,CAAC;QACH,YAAY,CACV,KAAK,EACL,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;YACvC,sBAAsB,KAAK,IAAI,IAAI,MAAM,EAAE,OAAO,CAAC,EACrD;YACE,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,MAAM;YACf,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,iBAAiB,EAAE,KAAK;gBACxB,WAAW,EAAE,aAAa;gBAC1B,mBAAmB,EAAE,GAAG;aACzB;SACF,CACF,CAAC;QAEF,OAAO;YACL,OAAO;YACP,OAAO;YACP,OAAO,EAAE,GAAG,EAAE;gBACZ,mBAAmB,CAAC,aAAa,CAAC,CAAC;gBACnC,IAAI,CAAC;oBAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,CAAC;YACtE,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { chmodSync, mkdtempSync, readdirSync, rmSync, statSync, writeFileSync } from 'node:fs';\nimport { tmpdir } from 'node:os';\nimport { join } from 'node:path';\n\nimport { messages } from '@core/messages';\nimport type { App } from '@octokit/app';\n\nimport type { RepoDownloadResult } from '../../../types/github/app.js';\n\nconst HTTP_REDIRECT = 302;\nconst { GithubRepoDownloaderMensagens } = messages;\n\n// Expressões para validar owner/repo/ref - apenas caracteres seguros\nconst OWNER_REPO_RE = /^[a-zA-Z0-9_.-]+$/;\nconst REF_RE = /^[a-zA-Z0-9_.\\-/]+$/;\n\nfunction validarInput(valor: string, regex: RegExp, nome: string): void {\n  if (!regex.test(valor)) {\n    throw new Error(messages.ExcecoesMensagens.inputInvalido(nome));\n  }\n}\n\nfunction validarRedirectUrl(url: string): URL {\n  const parsed = new URL(url);\n  if (!parsed.hostname.endsWith('.github.com') && parsed.hostname !== 'github.com') {\n    throw new Error(GithubRepoDownloaderMensagens.redirectInvalido);\n  }\n  if (!parsed.protocol.startsWith('https')) {\n    throw new Error(GithubRepoDownloaderMensagens.redirectInvalido);\n  }\n  return parsed;\n}\n\nexport async function getInstallationToken(app: App, installationId: number): Promise<string> {\n  const { data } = await app.octokit.request('POST /app/installations/{installation_id}/access_tokens', {\n    installation_id: installationId\n  });\n  return data.token;\n}\n\nexport async function downloadRepo(\n  app: App,\n  installationId: number,\n  owner: string,\n  repo: string,\n  ref: string\n): Promise<RepoDownloadResult> {\n  validarInput(owner, OWNER_REPO_RE, 'owner');\n  validarInput(repo, OWNER_REPO_RE, 'repo');\n  validarInput(ref, REF_RE, 'ref');\n\n  const tempDir = mkdtempSync(join(tmpdir(), 'tutanus-repo-'));\n  const zipPath = join(tempDir, 'repo.zip');\n\n  try {\n    const octokit = await app.getInstallationOctokit(installationId);\n\n    const response = await octokit.request('GET /repos/{owner}/{repo}/zipball/{ref}', {\n      owner,\n      repo,\n      ref,\n      request: { redirect: 'manual' }\n    });\n\n    let zipBuffer: Buffer;\n    if (response.status === HTTP_REDIRECT && response.headers.location) {\n      const redirectUrl = validarRedirectUrl(response.headers.location);\n      const token = await getInstallationToken(app, installationId);\n      const zipResponse = await fetch(redirectUrl, {\n        headers: { Authorization: `Bearer ${token}` }\n      });\n      if (!zipResponse.ok) {\n        throw new Error(GithubRepoDownloaderMensagens.falhaBaixarZipball(zipResponse.status));\n      }\n      zipBuffer = Buffer.from(await zipResponse.arrayBuffer());\n    } else if (Buffer.isBuffer(response.data)) {\n      zipBuffer = response.data;\n    } else {\n      throw new Error(GithubRepoDownloaderMensagens.respostaInesperada);\n    }\n\n    writeFileSync(zipPath, zipBuffer);\n\n    // Extrai o zip usando Node.js child_process com argument array (sem shell)\n    execFileSync('unzip', ['-q', zipPath, '-d', tempDir], { stdio: 'pipe' });\n    rmSync(zipPath);\n\n    // Valida que nenhum entry do zip escapou do diretório (Zip Slip protection)\n    validarSemPathTraversal(tempDir);\n\n    const entries = readdirSync(tempDir);\n    const repoDirName = entries?.find(e => e !== 'repo.zip') ?? '';\n    if (!repoDirName) {\n      throw new Error(GithubRepoDownloaderMensagens.nenhumDiretorioEncontrado);\n    }\n\n    return {\n      tempDir,\n      repoDir: join(tempDir, repoDirName),\n      cleanup: () => {\n        try { rmSync(tempDir, { recursive: true, force: true }); } catch { }\n      }\n    };\n  } catch (err) {\n    rmSync(tempDir, { recursive: true, force: true });\n    throw err;\n  }\n}\n\nfunction escreverAskpassScript(): string {\n  const tmpScript = join(tmpdir(), `tutanus-askpass-${Date.now()}.sh`);\n  writeFileSync(tmpScript, '#!/bin/sh\\necho \"$TUTANUS_GIT_TOKEN\"');\n  chmodSync(tmpScript, 0o500);\n  return tmpScript;\n}\n\nfunction limparAskpassScript(caminho: string): void {\n  try { rmSync(caminho); } catch { }\n}\n\nfunction validarSemPathTraversal(dir: string): void {\n  const pilha = [dir];\n  while (pilha.length > 0) {\n    const atual = pilha.pop();\n    if (!atual) continue;\n    for (const entry of readdirSync(atual)) {\n      const caminhoCompleto = join(atual, entry);\n      if (!caminhoCompleto.startsWith(dir)) {\n        rmSync(dir, { recursive: true, force: true });\n        throw new Error(GithubRepoDownloaderMensagens.pathTraversalDetectado);\n      }\n      if (statSync(caminhoCompleto).isDirectory()) {\n        pilha.push(caminhoCompleto);\n      }\n    }\n  }\n}\n\nexport async function cloneRepo(\n  app: App,\n  installationId: number,\n  owner: string,\n  repo: string,\n  ref: string\n): Promise<RepoDownloadResult> {\n  validarInput(owner, OWNER_REPO_RE, 'owner');\n  validarInput(repo, OWNER_REPO_RE, 'repo');\n  validarInput(ref, REF_RE, 'ref');\n\n  const tempDir = mkdtempSync(join(tmpdir(), 'tutanus-repo-'));\n  const repoDir = join(tempDir, 'repo');\n  const token = await getInstallationToken(app, installationId);\n\n  // Usa GIT_ASKPASS em vez de token na URL para evitar vazamento em process listing\n  const askpassScript = escreverAskpassScript();\n\n  try {\n    execFileSync(\n      'git',\n      ['clone', '--depth', '1', '--branch', ref,\n        `https://github.com/${owner}/${repo}.git`, repoDir],\n      {\n        stdio: 'pipe',\n        timeout: 120000,\n        env: {\n          ...process.env,\n          TUTANUS_GIT_TOKEN: token,\n          GIT_ASKPASS: askpassScript,\n          GIT_TERMINAL_PROMPT: '0'\n        }\n      }\n    );\n\n    return {\n      tempDir,\n      repoDir,\n      cleanup: () => {\n        limparAskpassScript(askpassScript);\n        try { rmSync(tempDir, { recursive: true, force: true }); } catch { }\n      }\n    };\n  } catch (err) {\n    limparAskpassScript(askpassScript);\n    rmSync(tempDir, { recursive: true, force: true });\n    throw err;\n  }\n}\n"]}

package/dist/app/github/app/server.d.ts

@@ -0,0 +1,3 @@
+import type { ServidorAppOptions } from '../../../types/index.js';
+export declare function iniciarServidorApp(opts: ServidorAppOptions): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/app/github/app/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/server.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,GAAG,CAAC;AAW5C,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2D1E"}

package/dist/app/github/app/server.js

@@ -0,0 +1,67 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { criarApiRouter } from '../../../api/index.js';
+import { messages } from '../../../core/messages/index.js';
+import { App } from '@octokit/app';
+import express from 'express';
+import { createDashboardRouter } from '../dashboard/index.js';
+import { createWebhookHandler } from './webhook-handler.js';
+const log = messages.log;
+const { GithubAppMensagens } = messages;
+const HTTP_OK = 200;
+const FRONTEND_DIR = join(process.cwd(), 'out');
+export function iniciarServidorApp(opts) {
+    const app = express();
+    app.use(express.json({
+        verify: (req, _res, buf) => {
+            req.rawBody = buf;
+        }
+    }));
+    const appOctokit = new App({
+        appId: opts.appId,
+        privateKey: opts.privateKey,
+        webhooks: { secret: opts.webhookSecret }
+    });
+    const webhookHandler = createWebhookHandler(appOctokit);
+    app.post('/api/github/webhooks', webhookHandler);
+    app.use('/api/github', createDashboardRouter(appOctokit));
+    app.use(criarApiRouter());
+    if (existsSync(FRONTEND_DIR)) {
+        app.use(express.static(FRONTEND_DIR));
+        app.get('/{*path}', (_req, res) => {
+            const indexPath = join(FRONTEND_DIR, 'index.html');
+            if (existsSync(indexPath)) {
+                res.sendFile(indexPath);
+            }
+            else {
+                res.status(200).type('html').send('Tutanus API rodando.');
+            }
+        });
+    }
+    else {
+        app.get('/', (_req, res) => {
+            res.type('html').send('Tutanus API rodando. Landing nao encontrada (rode npm run build para gerar out/).');
+        });
+    }
+    app.get('/ping', (_req, res) => {
+        res.status(HTTP_OK).send('pong');
+    });
+    return new Promise((resolve, reject) => {
+        try {
+            app.listen(opts.port, () => {
+                log.sucesso(GithubAppMensagens.servidorRodando(opts.port));
+                log.info(GithubAppMensagens.webhooksEndpoint(opts.port));
+                log.info(GithubAppMensagens.restApiEndpoint(opts.port));
+                log.info(GithubAppMensagens.healthEndpoint(opts.port));
+                log.info(GithubAppMensagens.dashboardEndpoint(opts.port));
+                log.info(GithubAppMensagens.statsEndpoint(opts.port));
+                resolve();
+            });
+        }
+        catch (err) {
+            log.erro(GithubAppMensagens.erroIniciarServidor(err instanceof Error ? err.message : String(err)));
+            reject(err);
+        }
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/app/github/app/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/app/github/app/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,OAAO,MAAM,SAAS,CAAC;AAI9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;AACzB,MAAM,EAAE,kBAAkB,EAAE,GAAG,QAAQ,CAAC;AAExC,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;AAEhD,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,EAAE,CAAC,GAA2C,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAChE,GAA4B,CAAC,OAAO,GAAG,GAAG,CAAC;QAC9C,CAAC;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE;KACzC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAExD,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC;IAEjD,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1D,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;IAE1B,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACnD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QAC7G,CAAC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC7B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACzB,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3D,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvD,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1D,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnG,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { existsSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport { criarApiRouter } from '@api';\nimport { messages } from '@core/messages';\nimport { App } from '@octokit/app';\nimport express from 'express';\n\nimport type { ServidorAppOptions } from '@';\n\nimport { createDashboardRouter } from '../dashboard/index.js';\nimport { createWebhookHandler } from './webhook-handler.js';\n\nconst log = messages.log;\nconst { GithubAppMensagens } = messages;\n\nconst HTTP_OK = 200;\nconst FRONTEND_DIR = join(process.cwd(), 'out');\n\nexport function iniciarServidorApp(opts: ServidorAppOptions): Promise<void> {\n  const app = express();\n\n  app.use(express.json({\n    verify: (req: express.Request & { rawBody?: Buffer }, _res, buf) => {\n      (req as { rawBody?: Buffer }).rawBody = buf;\n    }\n  }));\n\n  const appOctokit = new App({\n    appId: opts.appId,\n    privateKey: opts.privateKey,\n    webhooks: { secret: opts.webhookSecret }\n  });\n\n  const webhookHandler = createWebhookHandler(appOctokit);\n\n  app.post('/api/github/webhooks', webhookHandler);\n\n  app.use('/api/github', createDashboardRouter(appOctokit));\n\n  app.use(criarApiRouter());\n\n  if (existsSync(FRONTEND_DIR)) {\n    app.use(express.static(FRONTEND_DIR));\n    app.get('/{*path}', (_req, res) => {\n      const indexPath = join(FRONTEND_DIR, 'index.html');\n      if (existsSync(indexPath)) {\n        res.sendFile(indexPath);\n      } else {\n        res.status(200).type('html').send('Tutanus API rodando.');\n      }\n    });\n  } else {\n    app.get('/', (_req, res) => {\n      res.type('html').send('Tutanus API rodando. Landing nao encontrada (rode npm run build para gerar out/).');\n    });\n  }\n\n  app.get('/ping', (_req, res) => {\n    res.status(HTTP_OK).send('pong');\n  });\n\n  return new Promise<void>((resolve, reject) => {\n    try {\n      app.listen(opts.port, () => {\n        log.sucesso(GithubAppMensagens.servidorRodando(opts.port));\n        log.info(GithubAppMensagens.webhooksEndpoint(opts.port));\n        log.info(GithubAppMensagens.restApiEndpoint(opts.port));\n        log.info(GithubAppMensagens.healthEndpoint(opts.port));\n        log.info(GithubAppMensagens.dashboardEndpoint(opts.port));\n        log.info(GithubAppMensagens.statsEndpoint(opts.port));\n        resolve();\n      });\n    } catch (err) {\n      log.erro(GithubAppMensagens.erroIniciarServidor(err instanceof Error ? err.message : String(err)));\n      reject(err);\n    }\n  });\n}\n"]}

package/dist/app/github/app/setup-routes.d.ts

@@ -0,0 +1,5 @@
+import type { App } from '@octokit/app';
+import { type Request, Router } from 'express';
+export declare function createSetupRouter(_app: App): Router;
+export declare function buildSetupUrl(req?: Request): string;
+//# sourceMappingURL=setup-routes.d.ts.map

package/dist/app/github/app/setup-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-routes.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/setup-routes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,KAAK,OAAO,EAAiB,MAAM,EAAE,MAAM,SAAS,CAAC;AAc9D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,CAmDnD;AAED,wBAAgB,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,MAAM,CAYnD"}

package/dist/app/github/app/setup-routes.js

@@ -0,0 +1,68 @@
+import { GithubSetupMensagens } from '../../../core/messages/index.js';
+import { Router } from 'express';
+import { salvarConfigInstalacao } from './installation-store.js';
+const HTTP_BAD_REQUEST = 400;
+function publicBaseUrl(req) {
+    const env = process.env.TUTANUS_PUBLIC_URL || process.env.PUBLIC_URL;
+    if (env)
+        return env.replace(/\/$/, '');
+    const proto = req.headers['x-forwarded-proto'] || req.protocol;
+    const host = req.headers['x-forwarded-host'] || req.headers.host;
+    return `${proto}://${host}`;
+}
+export function createSetupRouter(_app) {
+    const router = Router();
+    router.get('/setup', async (req, res) => {
+        const installationIdRaw = req.query.installation_id;
+        const setupAction = typeof req.query.setup_action === 'string' ? req.query.setup_action : 'install';
+        const installationId = typeof installationIdRaw === 'string'
+            ? parseInt(installationIdRaw, 10)
+            : Array.isArray(installationIdRaw)
+                ? parseInt(installationIdRaw[0], 10)
+                : NaN;
+        if (!installationId || Number.isNaN(installationId)) {
+            res.status(HTTP_BAD_REQUEST).type('html').send(GithubSetupMensagens.installationIdAusente);
+            return;
+        }
+        try {
+            salvarConfigInstalacao({
+                installationId,
+                pushAnalysisEnabled: true,
+                pullRequestAnalysisEnabled: true,
+                fast: false,
+                incrementalOnPush: true
+            });
+        }
+        catch (err) {
+            console.error(GithubSetupMensagens.erroSalvarConfig, err);
+        }
+        const settingsUrl = `https://github.com/settings/installations/${installationId}`;
+        const reposUrl = `https://github.com/settings/installations/${installationId}/permissions`;
+        const destino = setupAction === 'update' ? reposUrl : settingsUrl;
+        res.redirect(302, destino);
+    });
+    router.get('/setup-info', (req, res) => {
+        const base = publicBaseUrl(req);
+        res.json({
+            setupUrl: `${base}/api/github/setup`,
+            redirectAfterInstall: 'https://github.com/settings/installations/{installation_id}',
+            instrucao: 'No painel do GitHub App, defina "Setup URL" como setupUrl. Após instalar, o usuário permanece no GitHub.'
+        });
+    });
+    return router;
+}
+export function buildSetupUrl(req) {
+    const env = process.env.TUTANUS_PUBLIC_URL || process.env.PUBLIC_URL;
+    if (env)
+        return `${env.replace(/\/$/, '')}/api/github/setup`;
+    if (req) {
+        const base = (() => {
+            const proto = req.headers['x-forwarded-proto'] || req.protocol;
+            const host = req.headers['x-forwarded-host'] || req.headers.host;
+            return `${proto}://${host}`;
+        })();
+        return `${base}/api/github/setup`;
+    }
+    return '/api/github/setup';
+}
+//# sourceMappingURL=setup-routes.js.map

package/dist/app/github/app/setup-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-routes.js","sourceRoot":"","sources":["../../../../src/app/github/app/setup-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAA+B,MAAM,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACrE,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,GAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,IAAI,GAAG,CAAC,QAAQ,CAAC;IAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IACjE,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAS;IACzC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACzD,MAAM,iBAAiB,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;QACpD,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpG,MAAM,cAAc,GAAG,OAAO,iBAAiB,KAAK,QAAQ;YAC1D,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACjC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC;gBAChC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC;gBAC9C,CAAC,CAAC,GAAG,CAAC;QAEV,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,oBAAoB,CAAC,qBAAqB,CAC3C,CAAC;YACF,OAAO;QACT,CAAC;QAEA,IAAI,CAAC;YACH,sBAAsB,CAAC;gBACrB,cAAc;gBACd,mBAAmB,EAAE,IAAI;gBACzB,0BAA0B,EAAE,IAAI;gBAChC,IAAI,EAAE,KAAK;gBACX,iBAAiB,EAAE,IAAI;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAEF,MAAM,WAAW,GAAG,6CAA6C,cAAc,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,6CAA6C,cAAc,cAAc,CAAC;QAE3F,MAAM,OAAO,GAAG,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;QAElE,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,GAAG,IAAI,mBAAmB;YACpC,oBAAoB,EAAE,6DAA6D;YACnF,SAAS,EACP,0GAA0G;SAC7G,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAa;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACrE,IAAI,GAAG;QAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC;IAC7D,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAY,IAAI,GAAG,CAAC,QAAQ,CAAC;YAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YACjE,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;QAC9B,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,IAAI,mBAAmB,CAAC;IACpC,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { GithubSetupMensagens } from '@core/messages';\nimport type { App } from '@octokit/app';\nimport { type Request, type Response, Router } from 'express';\n\nimport { salvarConfigInstalacao } from './installation-store.js';\n\nconst HTTP_BAD_REQUEST = 400;\n\nfunction publicBaseUrl(req: Request): string {\n  const env = process.env.TUTANUS_PUBLIC_URL || process.env.PUBLIC_URL;\n  if (env) return env.replace(/\\/$/, '');\n  const proto = (req.headers['x-forwarded-proto'] as string) || req.protocol;\n  const host = req.headers['x-forwarded-host'] || req.headers.host;\n  return `${proto}://${host}`;\n}\n\nexport function createSetupRouter(_app: App): Router {\n  const router = Router();\n\n  router.get('/setup', async (req: Request, res: Response) => {\n    const installationIdRaw = req.query.installation_id;\n    const setupAction = typeof req.query.setup_action === 'string' ? req.query.setup_action : 'install';\n\n    const installationId = typeof installationIdRaw === 'string'\n      ? parseInt(installationIdRaw, 10)\n      : Array.isArray(installationIdRaw)\n        ? parseInt(installationIdRaw[0] as string, 10)\n        : NaN;\n\n    if (!installationId || Number.isNaN(installationId)) {\n      res.status(HTTP_BAD_REQUEST).type('html').send(\n        GithubSetupMensagens.installationIdAusente\n      );\n      return;\n    }\n\n     try {\n       salvarConfigInstalacao({\n         installationId,\n         pushAnalysisEnabled: true,\n         pullRequestAnalysisEnabled: true,\n         fast: false,\n         incrementalOnPush: true\n       });\n     } catch (err) {\n       console.error(GithubSetupMensagens.erroSalvarConfig, err);\n     }\n\n    const settingsUrl = `https://github.com/settings/installations/${installationId}`;\n    const reposUrl = `https://github.com/settings/installations/${installationId}/permissions`;\n\n    const destino = setupAction === 'update' ? reposUrl : settingsUrl;\n\n    res.redirect(302, destino);\n  });\n\n  router.get('/setup-info', (req: Request, res: Response) => {\n    const base = publicBaseUrl(req);\n    res.json({\n      setupUrl: `${base}/api/github/setup`,\n      redirectAfterInstall: 'https://github.com/settings/installations/{installation_id}',\n      instrucao:\n        'No painel do GitHub App, defina \"Setup URL\" como setupUrl. Após instalar, o usuário permanece no GitHub.'\n    });\n  });\n\n  return router;\n}\n\nexport function buildSetupUrl(req?: Request): string {\n  const env = process.env.TUTANUS_PUBLIC_URL || process.env.PUBLIC_URL;\n  if (env) return `${env.replace(/\\/$/, '')}/api/github/setup`;\n  if (req) {\n    const base = (() => {\n      const proto = (req.headers['x-forwarded-proto'] as string) || req.protocol;\n      const host = req.headers['x-forwarded-host'] || req.headers.host;\n      return `${proto}://${host}`;\n    })();\n    return `${base}/api/github/setup`;\n  }\n  return '/api/github/setup';\n}\n"]}

package/dist/app/github/app/webhook-handler.d.ts

@@ -0,0 +1,27 @@
+import type { App } from '@octokit/app';
+import type { Request, Response } from 'express';
+import type { CheckSuitePayload, IssuesPayload, Ocorrencia, PullRequestPayload, PullRequestReviewPayload, PushPayload } from '../../../types/index.js';
+export type OctokitInstance = Awaited<ReturnType<InstanceType<typeof App>['getInstallationOctokit']>>;
+export declare function buscarWorkflows(octokit: OctokitInstance, owner: string, repo: string, ref: string): Promise<Array<{
+    name: string;
+    path: string;
+}>>;
+export declare function analisarWorkflows(octokit: OctokitInstance, owner: string, repo: string, ref: string, workflows: Array<{
+    name: string;
+    path: string;
+}>): Promise<{
+    ocorrencias: Ocorrencia[];
+    scoreGeral: number;
+    workflowsInfo: Array<{
+        nome: string;
+        score: number;
+        ocorrencias: number;
+    }>;
+}>;
+export declare function processarCheckSuite(app: App, payload: CheckSuitePayload): Promise<void>;
+export declare function processarPullRequest(app: App, payload: PullRequestPayload): Promise<void>;
+export declare function processarPush(app: App, payload: PushPayload): Promise<void>;
+export declare function processarPullRequestReview(app: App, payload: PullRequestReviewPayload): Promise<void>;
+export declare function processarIssues(app: App, payload: IssuesPayload): Promise<void>;
+export declare function createWebhookHandler(app: App): (req: Request, res: Response) => Promise<void>;
+//# sourceMappingURL=webhook-handler.d.ts.map

package/dist/app/github/app/webhook-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-handler.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/webhook-handler.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,KAAK,EAAE,iBAAiB,EAAuC,aAAa,EAAE,UAAU,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,WAAW,EAA2C,MAAM,GAAG,CAAC;AAO/M,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,GAAG,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;AActG,wBAAsB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IACvH,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAAC,CAqBF;AACD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC;IAC3H,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,GAAG,OAAO,CAAC;IACX,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,KAAK,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACJ,CAAC,CAqDD;AA0CD,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoD7F;AACD,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC/F;AACD,wBAAsB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCjF;AACD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2E3G;AACD,wBAAsB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgFrF;AACD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAwM7F"}