tutanus 0.12.0

package/dist/analysts/azure-pipelines/scorers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './scorer-azure.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/azure-pipelines/scorers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/azure-pipelines/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,mBAAmB,CAAC"}

package/dist/analysts/azure-pipelines/scorers/index.js

@@ -0,0 +1,2 @@
+export * from './scorer-azure.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/azure-pipelines/scorers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/azure-pipelines/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,mBAAmB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './scorer-azure.js';\n"]}

package/dist/analysts/azure-pipelines/scorers/scorer-azure.d.ts

@@ -0,0 +1,9 @@
+import type { AzureScoreResult } from '../../../types/index.js';
+export declare function pontuarAzure(src: string, _relPath: string): AzureScoreResult;
+export declare const pontuadorAzure: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    pontuar: typeof pontuarAzure;
+};
+//# sourceMappingURL=scorer-azure.d.ts.map

package/dist/analysts/azure-pipelines/scorers/scorer-azure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-azure.d.ts","sourceRoot":"","sources":["../../../../src/analysts/azure-pipelines/scorers/scorer-azure.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,GAAG,CAAC;AAE1C,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CA+D5E;AAED,eAAO,MAAM,cAAc;;;;;CAK1B,CAAC"}

package/dist/analysts/azure-pipelines/scorers/scorer-azure.js

@@ -0,0 +1,70 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+export function pontuarAzure(src, _relPath) {
+    let score = 0;
+    const maxScore = 100;
+    const issues = [];
+    const strengths = [];
+    const _linhas = splitLines(src);
+    const srcCompleto = src;
+    if (!/vmImage:\s*['"]?.*latest['"]?/i.test(srcCompleto)) {
+        score += 15;
+        strengths.push('Imagens com versão fixa');
+    }
+    else {
+        issues.push('Uso de imagem :latest');
+    }
+    const hardcodedSecrets = (srcCompleto.match(/(password|token|secret|key):\s*['"]?([^$({][a-zA-Z0-9_\-]{8,})['"]?/gi) || []).length;
+    if (hardcodedSecrets === 0) {
+        score += 25;
+        strengths.push('Sem secrets hardcoded');
+    }
+    else {
+        issues.push(`${hardcodedSecrets} secret(s) hardcoded`);
+    }
+    if (/task:\s*Cache@/i.test(srcCompleto) || /CacheBeta@/i.test(srcCompleto)) {
+        score += 20;
+        strengths.push('Cache configurado');
+    }
+    else {
+        issues.push('Cache de dependências não configurado');
+    }
+    if (/strategy:\s*matrix:/i.test(srcCompleto) || /parallel:\s*\d+/i.test(srcCompleto)) {
+        score += 15;
+        strengths.push('Paralelismo configurado');
+    }
+    else {
+        issues.push('Sem estratégia de paralelismo');
+    }
+    if (/pool:\s*\n/i.test(srcCompleto)) {
+        score += 10;
+        strengths.push('Pool de agentes definido');
+    }
+    else {
+        issues.push('Pool de agentes não definido');
+    }
+    if (/checkout:\s*none/i.test(srcCompleto)) {
+        score += 5;
+        strengths.push('Checkout otimizado em jobs de deploy');
+    }
+    if (!/bash:\s*curl.*\|\s*bash/i.test(srcCompleto)) {
+        score += 10;
+        strengths.push('Sem comandos curl|bash perigosos');
+    }
+    else {
+        issues.push('Comandos curl|bash perigosos detectados');
+    }
+    return {
+        score,
+        maxScore,
+        percentage: Math.round(score / maxScore * 100),
+        issues,
+        strengths
+    };
+}
+export const pontuadorAzure = {
+    nome: 'pontuador-azure',
+    categoria: 'workflows',
+    descricao: 'Pontua qualidade de Azure Pipelines',
+    pontuar: pontuarAzure
+};
+//# sourceMappingURL=scorer-azure.js.map

package/dist/analysts/azure-pipelines/scorers/scorer-azure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-azure.js","sourceRoot":"","sources":["../../../../src/analysts/azure-pipelines/scorers/scorer-azure.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAI7C,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,QAAgB;IACxD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,GAAG,CAAC;IAExB,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,gBAAgB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,uEAAuE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACnI,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,sBAAsB,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3E,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrF,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,KAAK,IAAI,CAAC,CAAC;QACX,SAAS,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC;QAC9C,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,qCAAqC;IAChD,OAAO,EAAE,YAAY;CACtB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport { splitLines } from '@shared/helpers';\n\nimport type { AzureScoreResult } from '@';\n\nexport function pontuarAzure(src: string, _relPath: string): AzureScoreResult {\n  let score = 0;\n  const maxScore = 100;\n  const issues: string[] = [];\n  const strengths: string[] = [];\n  const _linhas = splitLines(src);\n  const srcCompleto = src;\n\n  if (!/vmImage:\\s*['\"]?.*latest['\"]?/i.test(srcCompleto)) {\n    score += 15;\n    strengths.push('Imagens com versão fixa');\n  } else {\n    issues.push('Uso de imagem :latest');\n  }\n\n  const hardcodedSecrets = (srcCompleto.match(/(password|token|secret|key):\\s*['\"]?([^$({][a-zA-Z0-9_\\-]{8,})['\"]?/gi) || []).length;\n  if (hardcodedSecrets === 0) {\n    score += 25;\n    strengths.push('Sem secrets hardcoded');\n  } else {\n    issues.push(`${hardcodedSecrets} secret(s) hardcoded`);\n  }\n\n  if (/task:\\s*Cache@/i.test(srcCompleto) || /CacheBeta@/i.test(srcCompleto)) {\n    score += 20;\n    strengths.push('Cache configurado');\n  } else {\n    issues.push('Cache de dependências não configurado');\n  }\n\n  if (/strategy:\\s*matrix:/i.test(srcCompleto) || /parallel:\\s*\\d+/i.test(srcCompleto)) {\n    score += 15;\n    strengths.push('Paralelismo configurado');\n  } else {\n    issues.push('Sem estratégia de paralelismo');\n  }\n\n  if (/pool:\\s*\\n/i.test(srcCompleto)) {\n    score += 10;\n    strengths.push('Pool de agentes definido');\n  } else {\n    issues.push('Pool de agentes não definido');\n  }\n\n  if (/checkout:\\s*none/i.test(srcCompleto)) {\n    score += 5;\n    strengths.push('Checkout otimizado em jobs de deploy');\n  }\n\n  if (!/bash:\\s*curl.*\\|\\s*bash/i.test(srcCompleto)) {\n    score += 10;\n    strengths.push('Sem comandos curl|bash perigosos');\n  } else {\n    issues.push('Comandos curl|bash perigosos detectados');\n  }\n\n  return {\n    score,\n    maxScore,\n    percentage: Math.round(score / maxScore * 100),\n    issues,\n    strengths\n  };\n}\n\nexport const pontuadorAzure = {\n  nome: 'pontuador-azure',\n  categoria: 'workflows',\n  descricao: 'Pontua qualidade de Azure Pipelines',\n  pontuar: pontuarAzure\n};\n"]}

package/dist/analysts/circleci/analysts/analyst-circleci.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const analistaCircleCI: Analista;
+//# sourceMappingURL=analyst-circleci.d.ts.map

package/dist/analysts/circleci/analysts/analyst-circleci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-circleci.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/analysts/analyst-circleci.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,QAAQ,EAAgC,MAAM,GAAG,CAAC;AAKhE,eAAO,MAAM,gBAAgB,EAAE,QAuD9B,CAAC"}

package/dist/analysts/circleci/analysts/analyst-circleci.js

@@ -0,0 +1,50 @@
+import { parseDocument } from 'yaml';
+import { detectorCircleCIPerformance } from '../detectors/detector-circleci-performance.js';
+import { detectorCircleCISecurity } from '../detectors/detector-circleci-security.js';
+export const analistaCircleCI = {
+    nome: 'circleci',
+    categoria: 'workflows',
+    descricao: 'Analista de configurações do CircleCI',
+    test: (relPath) => relPath === '.circleci/config.yml' || relPath.endsWith('.circleci/config.yml'),
+    aplicar: async (conteudo, relPath, _ast = null, _fc, contexto) => {
+        const ocorrencias = [];
+        try {
+            const securityResults = await Promise.resolve(detectorCircleCISecurity.aplicar(conteudo, relPath, null, _fc, contexto));
+            const performanceResults = await Promise.resolve(detectorCircleCIPerformance.aplicar(conteudo, relPath, null, _fc, contexto));
+            ocorrencias.push(...securityResults, ...performanceResults);
+            const doc = parseDocument(conteudo);
+            const config = doc.toJS();
+            if (config) {
+                const configData = config;
+                if (configData.version && parseFloat(String(configData.version)) < 2.1) {
+                    ocorrencias.push({
+                        tipo: 'CIRCLECI_OBSOLETE_VERSION',
+                        mensagem: `Versão do CircleCI (${configData.version}) está obsoleta`,
+                        relPath,
+                        linha: 1,
+                        nivel: 'aviso',
+                        sugestao: 'Atualize para a versão 2.1 para usar Orbs, Commands e outras melhorias modernas'
+                    });
+                }
+                if (configData.jobs) {
+                    for (const [jobName, job] of Object.entries(configData.jobs)) {
+                        if (job.steps && job.steps.length > 20) {
+                            ocorrencias.push({
+                                tipo: 'CIRCLECI_JOB_TOO_MANY_STEPS',
+                                mensagem: `Job '${jobName}' possui muitos steps (${job.steps.length})`,
+                                relPath,
+                                linha: 1,
+                                nivel: 'info',
+                                sugestao: 'Agrupe steps repetitivos em "commands" para maior legibilidade'
+                            });
+                        }
+                    }
+                }
+            }
+        }
+        catch {
+        }
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=analyst-circleci.js.map

package/dist/analysts/circleci/analysts/analyst-circleci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyst-circleci.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/analysts/analyst-circleci.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAIrC,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAEtF,MAAM,CAAC,MAAM,gBAAgB,GAAa;IACxC,IAAI,EAAE,UAAU;IAChB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,uCAAuC;IAClD,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,KAAK,sBAAsB,IAAI,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACzG,OAAO,EAAE,KAAK,EAAE,QAAgB,EAAE,OAAe,EAAE,OAAwB,IAAI,EAAE,GAAY,EAAE,QAA2B,EAAyB,EAAE;QACnJ,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,IAAI,CAAC;YAEH,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YACxH,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YAE9H,WAAW,CAAC,IAAI,CAAC,GAAI,eAAgC,EAAE,GAAI,kBAAmC,CAAC,CAAC;YAGhG,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAA6B,CAAC;YAErD,IAAI,MAAM,EAAE,CAAC;gBAEX,MAAM,UAAU,GAAG,MAAqF,CAAC;gBACzG,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;oBACvE,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,2BAA2B;wBACjC,QAAQ,EAAE,uBAAuB,UAAU,CAAC,OAAO,iBAAiB;wBACpE,OAAO;wBACP,KAAK,EAAE,CAAC;wBACR,KAAK,EAAE,OAAO;wBACd,QAAQ,EAAE,iFAAiF;qBAC5F,CAAC,CAAC;gBACL,CAAC;gBAGD,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;oBACpB,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC7D,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;4BACtC,WAAW,CAAC,IAAI,CAAC;gCACf,IAAI,EAAE,6BAA6B;gCACnC,QAAQ,EAAE,QAAQ,OAAO,0BAA0B,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG;gCACtE,OAAO;gCACP,KAAK,EAAE,CAAC;gCACR,KAAK,EAAE,MAAM;gCACb,QAAQ,EAAE,gEAAgE;6BAC3E,CAAC,CAAC;wBACN,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Analista Principal de CircleCI\n */\n\nimport type { NodePath } from '@babel/traverse';\nimport { parseDocument } from 'yaml';\n\nimport type { Analista, ContextoExecucao, Ocorrencia } from '@';\n\nimport { detectorCircleCIPerformance } from '../detectors/detector-circleci-performance.js';\nimport { detectorCircleCISecurity } from '../detectors/detector-circleci-security.js';\n\nexport const analistaCircleCI: Analista = {\n  nome: 'circleci',\n  categoria: 'workflows',\n  descricao: 'Analista de configurações do CircleCI',\n  test: (relPath: string) => relPath === '.circleci/config.yml' || relPath.endsWith('.circleci/config.yml'),\n  aplicar: async (conteudo: string, relPath: string, _ast: NodePath | null = null, _fc?: string, contexto?: ContextoExecucao): Promise<Ocorrencia[]> => {\n    const ocorrencias: Ocorrencia[] = [];\n\n    try {\n      // 1. Detectores baseados em regex\n      const securityResults = await Promise.resolve(detectorCircleCISecurity.aplicar(conteudo, relPath, null, _fc, contexto));\n      const performanceResults = await Promise.resolve(detectorCircleCIPerformance.aplicar(conteudo, relPath, null, _fc, contexto));\n\n      ocorrencias.push(...(securityResults as Ocorrencia[]), ...(performanceResults as Ocorrencia[]));\n\n      // 2. Análise Estrutural básica\n      const doc = parseDocument(conteudo);\n      const config = doc.toJS() as Record<string, unknown>;\n\n      if (config) {\n        // Exemplo: Versão obsoleta\n        const configData = config as { version?: number | string; jobs?: Record<string, { steps?: unknown[] }> };\n        if (configData.version && parseFloat(String(configData.version)) < 2.1) {\n          ocorrencias.push({\n            tipo: 'CIRCLECI_OBSOLETE_VERSION',\n            mensagem: `Versão do CircleCI (${configData.version}) está obsoleta`,\n            relPath,\n            linha: 1,\n            nivel: 'aviso',\n            sugestao: 'Atualize para a versão 2.1 para usar Orbs, Commands e outras melhorias modernas'\n          });\n        }\n\n        // Detecção de jobs muito longos\n        if (configData.jobs) {\n          for (const [jobName, job] of Object.entries(configData.jobs)) {\n            if (job.steps && job.steps.length > 20) {\n               ocorrencias.push({\n                 tipo: 'CIRCLECI_JOB_TOO_MANY_STEPS',\n                 mensagem: `Job '${jobName}' possui muitos steps (${job.steps.length})`,\n                 relPath,\n                 linha: 1,\n                 nivel: 'info',\n                 sugestao: 'Agrupe steps repetitivos em \"commands\" para maior legibilidade'\n               });\n            }\n          }\n        }\n      }\n    } catch {\n      // Falha silenciosa no parse\n    }\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/circleci/analysts/index.d.ts

@@ -0,0 +1,2 @@
+export * from './analyst-circleci.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/circleci/analysts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC"}

package/dist/analysts/circleci/analysts/index.js

@@ -0,0 +1,2 @@
+export * from './analyst-circleci.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/circleci/analysts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/analysts/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC","sourcesContent":["export * from './analyst-circleci.js';\n"]}

package/dist/analysts/circleci/corrections/autofix-engine.d.ts

@@ -0,0 +1,6 @@
+import type { Document } from 'yaml';
+export declare class AutofixEngine {
+    aplicarFixes(content: string, fixers: Array<(doc: Document) => void>): string;
+}
+export declare const autofixEngine: AutofixEngine;
+//# sourceMappingURL=autofix-engine.d.ts.map

package/dist/analysts/circleci/corrections/autofix-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofix-engine.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/autofix-engine.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAGrC,qBAAa,aAAa;IACjB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,QAAQ,KAAK,IAAI,CAAC,GAAG,MAAM;CASrF;AAED,eAAO,MAAM,aAAa,eAAsB,CAAC"}

package/dist/analysts/circleci/corrections/autofix-engine.js

@@ -0,0 +1,19 @@
+import { parseDocument } from 'yaml';
+export class AutofixEngine {
+    aplicarFixes(content, fixers) {
+        if (!content || fixers.length === 0)
+            return content;
+        const doc = parseDocument(content);
+        if (doc.errors.length > 0)
+            return content;
+        for (const fix of fixers) {
+            try {
+                fix(doc);
+            }
+            catch { }
+        }
+        return doc.toString();
+    }
+}
+export const autofixEngine = new AutofixEngine();
+//# sourceMappingURL=autofix-engine.js.map

package/dist/analysts/circleci/corrections/autofix-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autofix-engine.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/autofix-engine.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAErC,MAAM,OAAO,aAAa;IACjB,YAAY,CAAC,OAAe,EAAE,MAAsC;QACzE,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACpD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAY,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport type { Document } from 'yaml';\nimport { parseDocument } from 'yaml';\n\nexport class AutofixEngine {\n  public aplicarFixes(content: string, fixers: Array<(doc: Document) => void>): string {\n    if (!content || fixers.length === 0) return content;\n    const doc = parseDocument(content);\n    if (doc.errors.length > 0) return content;\n    for (const fix of fixers) {\n      try { fix(doc); } catch { /* skip */ }\n    }\n    return doc.toString();\n  }\n}\n\nexport const autofixEngine = new AutofixEngine();\n"]}

package/dist/analysts/circleci/corrections/correction-circleci.d.ts

@@ -0,0 +1,4 @@
+import type { Analista, CircleCICorrection } from '../../../types/index.js';
+export declare function detectarCorrecoesCircleCI(src: string, _relPath: string): CircleCICorrection[];
+export declare const correctionCircleCI: Analista;
+//# sourceMappingURL=correction-circleci.d.ts.map

package/dist/analysts/circleci/corrections/correction-circleci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-circleci.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/correction-circleci.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAc,MAAM,GAAG,CAAC;AAGlE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,EAAE,CA0C7F;AAED,eAAO,MAAM,kBAAkB,EAAE,QAsBhC,CAAC"}

package/dist/analysts/circleci/corrections/correction-circleci.js

@@ -0,0 +1,65 @@
+import { splitLines } from '../../../shared/helpers/index.js';
+import { criarOcorrencia } from '../../../types/index.js';
+export function detectarCorrecoesCircleCI(src, _relPath) {
+    const correcoes = [];
+    const linhas = splitLines(src);
+    linhas.forEach((linha, index) => {
+        const numeroLinha = index + 1;
+        if (/\bimage:\s*[^\s@]+:latest\b/.test(linha)) {
+            correcoes.push({
+                tipo: 'circleci-fix-latest-image',
+                original: linha,
+                sugerido: linha.replace(/:latest\b/, ':3.18'),
+                linha: numeroLinha,
+                confianca: 90
+            });
+        }
+        if (/\b(TOKEN|SECRET|PASSWORD|KEY|ACCESS_KEY)\b.*:\s*['"][^'"]+['"]/i.test(linha) && !/\$/.test(linha)) {
+            const replaced = linha.replace(/['"][^'"]+['"]/, '"$VAR_NAME"');
+            correcoes.push({
+                tipo: 'circleci-use-context',
+                original: linha,
+                sugerido: replaced,
+                linha: numeroLinha,
+                confianca: 90
+            });
+        }
+    });
+    if (!/save_cache:/.test(src) && !/restore_cache:/.test(src)) {
+        const firstJobLine = linhas.findIndex(l => /steps:/.test(l));
+        const targetLine = firstJobLine >= 0 ? firstJobLine : 0;
+        correcoes.push({
+            tipo: 'circleci-add-cache',
+            original: linhas[targetLine],
+            sugerido: `      - restore_cache:\n          key: deps-{{ checksum "package-lock.json" }}\n${linhas[targetLine]}\n      - save_cache:\n          key: deps-{{ checksum "package-lock.json" }}\n          paths:\n            - node_modules`,
+            linha: targetLine + 1,
+            confianca: 80
+        });
+    }
+    return correcoes;
+}
+export const correctionCircleCI = {
+    nome: 'correction-circleci',
+    categoria: 'workflows',
+    descricao: 'Correções automáticas para CircleCI',
+    test: (relPath) => relPath.endsWith('.circleci/config.yml'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const correcoes = detectarCorrecoesCircleCI(src, relPath);
+        return correcoes.map(elem => criarOcorrencia({
+            tipo: `correction-${elem.tipo}`,
+            nivel: elem.confianca > 85 ? 'aviso' : 'info',
+            mensagem: `Correção sugerida: ${elem.tipo}`,
+            relPath,
+            linha: elem.linha,
+            sugestao: ` ${elem.original}\n ${elem.sugerido}\nConfiança: ${elem.confianca}%`,
+            correcao: {
+                original: elem.original,
+                novo: elem.sugerido,
+                linha: elem.linha
+            }
+        }));
+    }
+};
+//# sourceMappingURL=correction-circleci.js.map

package/dist/analysts/circleci/corrections/correction-circleci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction-circleci.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/correction-circleci.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,UAAU,yBAAyB,CAAC,GAAW,EAAE,QAAgB;IACrE,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;QAE9B,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,2BAA2B;gBACjC,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;gBAC7C,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QAED,IAAI,iEAAiE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAChE,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC;YAC5B,QAAQ,EAAE,mFAAmF,MAAM,CAAC,UAAU,CAAC,6HAA6H;YAC5O,KAAK,EAAE,UAAU,GAAG,CAAC;YACrB,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAa;IAC1C,IAAI,EAAE,qBAAqB;IAC3B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,qCAAqC;IAChD,IAAI,EAAE,CAAC,OAAe,EAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC5E,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC;YAC3C,IAAI,EAAE,cAAc,IAAI,CAAC,IAAI,EAAE;YAC/B,KAAK,EAAE,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC7C,QAAQ,EAAE,sBAAsB,IAAI,CAAC,IAAI,EAAE;YAC3C,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,QAAQ,gBAAgB,IAAI,CAAC,SAAS,GAAG;YAC/E,QAAQ,EAAE;gBACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB;SACF,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport { splitLines } from '@shared/helpers';\n\nimport type { Analista, CircleCICorrection, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport function detectarCorrecoesCircleCI(src: string, _relPath: string): CircleCICorrection[] {\n  const correcoes: CircleCICorrection[] = [];\n  const linhas = splitLines(src);\n\n  linhas.forEach((linha, index) => {\n    const numeroLinha = index + 1;\n\n    if (/\\bimage:\\s*[^\\s@]+:latest\\b/.test(linha)) {\n      correcoes.push({\n        tipo: 'circleci-fix-latest-image',\n        original: linha,\n        sugerido: linha.replace(/:latest\\b/, ':3.18'),\n        linha: numeroLinha,\n        confianca: 90\n      });\n    }\n\n    if (/\\b(TOKEN|SECRET|PASSWORD|KEY|ACCESS_KEY)\\b.*:\\s*['\"][^'\"]+['\"]/i.test(linha) && !/\\$/.test(linha)) {\n      const replaced = linha.replace(/['\"][^'\"]+['\"]/, '\"$VAR_NAME\"');\n      correcoes.push({\n        tipo: 'circleci-use-context',\n        original: linha,\n        sugerido: replaced,\n        linha: numeroLinha,\n        confianca: 90\n      });\n    }\n  });\n\n  if (!/save_cache:/.test(src) && !/restore_cache:/.test(src)) {\n    const firstJobLine = linhas.findIndex(l => /steps:/.test(l));\n    const targetLine = firstJobLine >= 0 ? firstJobLine : 0;\n    correcoes.push({\n      tipo: 'circleci-add-cache',\n      original: linhas[targetLine],\n      sugerido: `      - restore_cache:\\n          key: deps-{{ checksum \"package-lock.json\" }}\\n${linhas[targetLine]}\\n      - save_cache:\\n          key: deps-{{ checksum \"package-lock.json\" }}\\n          paths:\\n            - node_modules`,\n      linha: targetLine + 1,\n      confianca: 80\n    });\n  }\n\n  return correcoes;\n}\n\nexport const correctionCircleCI: Analista = {\n  nome: 'correction-circleci',\n  categoria: 'workflows',\n  descricao: 'Correções automáticas para CircleCI',\n  test: (relPath: string): boolean => relPath.endsWith('.circleci/config.yml'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const correcoes = detectarCorrecoesCircleCI(src, relPath);\n    return correcoes.map(elem => criarOcorrencia({\n      tipo: `correction-${elem.tipo}`,\n      nivel: elem.confianca > 85 ? 'aviso' : 'info',\n      mensagem: `Correção sugerida: ${elem.tipo}`,\n      relPath,\n      linha: elem.linha,\n      sugestao: ` ${elem.original}\\n ${elem.sugerido}\\nConfiança: ${elem.confianca}%`,\n      correcao: {\n        original: elem.original,\n        novo: elem.sugerido,\n        linha: elem.linha\n      }\n    }));\n  }\n};\n"]}

package/dist/analysts/circleci/corrections/index.d.ts

@@ -0,0 +1,3 @@
+export * from './autofix-engine.js';
+export * from './correction-circleci.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/circleci/corrections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC"}

package/dist/analysts/circleci/corrections/index.js

@@ -0,0 +1,3 @@
+export * from './autofix-engine.js';
+export * from './correction-circleci.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/circleci/corrections/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/corrections/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './autofix-engine.js';\nexport * from './correction-circleci.js';\n"]}

package/dist/analysts/circleci/detectors/detector-circleci-performance.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorCircleCIPerformance: Analista;
+//# sourceMappingURL=detector-circleci-performance.d.ts.map

package/dist/analysts/circleci/detectors/detector-circleci-performance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-circleci-performance.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/detector-circleci-performance.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,eAAO,MAAM,2BAA2B,EAAE,QAmCzC,CAAC"}

package/dist/analysts/circleci/detectors/detector-circleci-performance.js

@@ -0,0 +1,34 @@
+import { criarOcorrencia } from '../../../types/index.js';
+export const detectorCircleCIPerformance = {
+    nome: 'detector-circleci-performance',
+    categoria: 'performance',
+    descricao: 'Detecta problemas de performance em CircleCI configs',
+    test: (relPath) => relPath.endsWith('.circleci/config.yml'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        if (!/save_cache:/.test(src) && !/restore_cache:/.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'circleci-missing-cache',
+                nivel: 'aviso',
+                mensagem: 'Configuração de cache (save_cache/restore_cache) não encontrada',
+                relPath,
+                linha: 1,
+                sugestao: 'Implemente cache para dependências para reduzir drasticamente o tempo de build'
+            }));
+        }
+        if (!/parallelism:/.test(src)) {
+            ocorrencias.push(criarOcorrencia({
+                tipo: 'circleci-missing-parallelism',
+                nivel: 'info',
+                mensagem: 'Otimização de paralelismo não configurada',
+                relPath,
+                linha: 1,
+                sugestao: 'Considere usar "parallelism: N" para dividir suítes de teste longas entre múltiplos containers'
+            }));
+        }
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-circleci-performance.js.map

package/dist/analysts/circleci/detectors/detector-circleci-performance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-circleci-performance.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/detector-circleci-performance.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,CAAC,MAAM,2BAA2B,GAAa;IACnD,IAAI,EAAE,+BAA+B;IACrC,SAAS,EAAE,aAAa;IACxB,SAAS,EAAE,sDAAsD;IACjE,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACnE,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QAGrC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,iEAAiE;gBAC3E,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,gFAAgF;aAC3F,CAAC,CAAC,CAAC;QACN,CAAC;QAGD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;gBAC/B,IAAI,EAAE,8BAA8B;gBACpC,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,2CAA2C;gBACrD,OAAO;gBACP,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,gGAAgG;aAC3G,CAAC,CAAC,CAAC;QACP,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Detector de Performance para CircleCI\n */\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport const detectorCircleCIPerformance: Analista = {\n  nome: 'detector-circleci-performance',\n  categoria: 'performance',\n  descricao: 'Detecta problemas de performance em CircleCI configs',\n  test: (relPath: string) => relPath.endsWith('.circleci/config.yml'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n\n    // 1. Falta de cache\n    if (!/save_cache:/.test(src) && !/restore_cache:/.test(src)) {\n      ocorrencias.push(criarOcorrencia({\n        tipo: 'circleci-missing-cache',\n        nivel: 'aviso',\n        mensagem: 'Configuração de cache (save_cache/restore_cache) não encontrada',\n        relPath,\n        linha: 1,\n        sugestao: 'Implemente cache para dependências para reduzir drasticamente o tempo de build'\n      }));\n    }\n\n    // 2. Falta de parallelism\n    if (!/parallelism:/.test(src)) {\n       ocorrencias.push(criarOcorrencia({\n         tipo: 'circleci-missing-parallelism',\n         nivel: 'info',\n         mensagem: 'Otimização de paralelismo não configurada',\n         relPath,\n         linha: 1,\n         sugestao: 'Considere usar \"parallelism: N\" para dividir suítes de teste longas entre múltiplos containers'\n       }));\n    }\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/circleci/detectors/detector-circleci-security.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorCircleCISecurity: Analista;
+//# sourceMappingURL=detector-circleci-security.d.ts.map

package/dist/analysts/circleci/detectors/detector-circleci-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-circleci-security.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/detector-circleci-security.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,eAAO,MAAM,wBAAwB,EAAE,QAwCtC,CAAC"}

package/dist/analysts/circleci/detectors/detector-circleci-security.js

@@ -0,0 +1,38 @@
+import { criarOcorrencia } from '../../../types/index.js';
+export const detectorCircleCISecurity = {
+    nome: 'detector-circleci-security',
+    categoria: 'security',
+    descricao: 'Detecta vulnerabilidades em CircleCI configs',
+    test: (relPath) => relPath.endsWith('.circleci/config.yml'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        const linhas = src.split('\n');
+        linhas.forEach((linha, index) => {
+            const numeroLinha = index + 1;
+            if (/\b(TOKEN|SECRET|PASSWORD|KEY|ACCESS_KEY)\b.*:\s*['"][^'"]+['"]/i.test(linha) && !/\$/.test(linha)) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'circleci-hardcoded-secret',
+                    nivel: 'erro',
+                    mensagem: 'Secret hardcoded detectada no bloco environment',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Use as "Contexts" ou "Environment Variables" do CircleCI (Project Settings > Environment Variables)'
+                }));
+            }
+            if (/\bimage:\s*[^\s@]+:latest\b/.test(linha) || (/\bimage:\s*[^\s@:]+$/.test(linha.trim()) && linha.includes('image:'))) {
+                ocorrencias.push(criarOcorrencia({
+                    tipo: 'circleci-image-latest',
+                    nivel: 'aviso',
+                    mensagem: 'Uso de imagem :latest ou sem tag específica',
+                    relPath,
+                    linha: numeroLinha,
+                    sugestao: 'Use um digest (SHA) ou uma versão fixa para garantir segurança e reprodutibilidade'
+                }));
+            }
+        });
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-circleci-security.js.map

package/dist/analysts/circleci/detectors/detector-circleci-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-circleci-security.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/detector-circleci-security.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD,IAAI,EAAE,4BAA4B;IAClC,SAAS,EAAE,UAAU;IACrB,SAAS,EAAE,8CAA8C;IACzD,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACnE,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAC;YAG9B,IAAI,iEAAiE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvG,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,iDAAiD;oBAC3D,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,qGAAqG;iBAChH,CAAC,CAAC,CAAC;YACN,CAAC;YAGD,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACzH,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,IAAI,EAAE,uBAAuB;oBAC7B,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,6CAA6C;oBACvD,OAAO;oBACP,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,oFAAoF;iBAC/F,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Detector de Segurança para CircleCI\n */\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport const detectorCircleCISecurity: Analista = {\n  nome: 'detector-circleci-security',\n  categoria: 'security',\n  descricao: 'Detecta vulnerabilidades em CircleCI configs',\n  test: (relPath: string) => relPath.endsWith('.circleci/config.yml'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n    const linhas = src.split('\\n');\n\n    linhas.forEach((linha, index) => {\n      const numeroLinha = index + 1;\n\n      // 1. Secrets hardcoded em environment\n      if (/\\b(TOKEN|SECRET|PASSWORD|KEY|ACCESS_KEY)\\b.*:\\s*['\"][^'\"]+['\"]/i.test(linha) && !/\\$/.test(linha)) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'circleci-hardcoded-secret',\n          nivel: 'erro',\n          mensagem: 'Secret hardcoded detectada no bloco environment',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Use as \"Contexts\" ou \"Environment Variables\" do CircleCI (Project Settings > Environment Variables)'\n        }));\n      }\n\n      // 2. Uso de imagem :latest\n      if (/\\bimage:\\s*[^\\s@]+:latest\\b/.test(linha) || (/\\bimage:\\s*[^\\s@:]+$/.test(linha.trim()) && linha.includes('image:'))) {\n        ocorrencias.push(criarOcorrencia({\n          tipo: 'circleci-image-latest',\n          nivel: 'aviso',\n          mensagem: 'Uso de imagem :latest ou sem tag específica',\n          relPath,\n          linha: numeroLinha,\n          sugestao: 'Use um digest (SHA) ou uma versão fixa para garantir segurança e reprodutibilidade'\n        }));\n      }\n    });\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/circleci/detectors/detector-circleci-structure.d.ts

@@ -0,0 +1,3 @@
+import type { Analista } from '../../../types/index.js';
+export declare const detectorCircleCIEstrutura: Analista;
+//# sourceMappingURL=detector-circleci-structure.d.ts.map

package/dist/analysts/circleci/detectors/detector-circleci-structure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-circleci-structure.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/detector-circleci-structure.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,GAAG,CAAC;AAG9C,eAAO,MAAM,yBAAyB,EAAE,QAsDvC,CAAC"}

package/dist/analysts/circleci/detectors/detector-circleci-structure.js

@@ -0,0 +1,58 @@
+import { parseDocument } from 'yaml';
+import { criarOcorrencia } from '../../../types/index.js';
+export const detectorCircleCIEstrutura = {
+    nome: 'detector-circleci-estrutura',
+    categoria: 'workflows',
+    descricao: 'Detecta problemas estruturais em CircleCI configs',
+    test: (relPath) => relPath.endsWith('.circleci/config.yml'),
+    aplicar: (src, relPath) => {
+        if (!src)
+            return [];
+        const ocorrencias = [];
+        try {
+            const doc = parseDocument(src);
+            const config = doc.toJS();
+            if (!config)
+                return ocorrencias;
+            const jobs = config;
+            if (jobs.jobs) {
+                for (const [jobName, job] of Object.entries(jobs.jobs)) {
+                    if (job.steps && job.steps.length <= 1) {
+                        ocorrencias.push(criarOcorrencia({
+                            tipo: 'circleci-job-vazio',
+                            nivel: 'info',
+                            mensagem: `Job '${jobName}' possui apenas 1 step`,
+                            relPath, linha: 1,
+                            sugestao: 'Considere remover jobs sem operações significativas'
+                        }));
+                    }
+                    if (job.parallelism && job.parallelism > 10) {
+                        ocorrencias.push(criarOcorrencia({
+                            tipo: 'circleci-parallelism-excessivo',
+                            nivel: 'info',
+                            mensagem: `Job '${jobName}' com parallelism=${job.parallelism} pode ser excessivo`,
+                            relPath, linha: 1,
+                            sugestao: 'Ajuste o parallelism baseado na quantidade real de testes'
+                        }));
+                    }
+                }
+                const jobNames = Object.keys(jobs.jobs);
+                if (jobNames.length > 3) {
+                    const hasWorkflows = config.workflows;
+                    if (!hasWorkflows) {
+                        ocorrencias.push(criarOcorrencia({
+                            tipo: 'circleci-sem-workflows',
+                            nivel: 'aviso',
+                            mensagem: 'Múltiplos jobs sem seção workflows organizando a execução',
+                            relPath, linha: 1,
+                            sugestao: 'Adicione a seção workflows para definir a ordem e dependências entre jobs'
+                        }));
+                    }
+                }
+            }
+        }
+        catch { }
+        return ocorrencias;
+    }
+};
+//# sourceMappingURL=detector-circleci-structure.js.map

package/dist/analysts/circleci/detectors/detector-circleci-structure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-circleci-structure.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/detector-circleci-structure.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAGrC,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,CAAC;AAEpC,MAAM,CAAC,MAAM,yBAAyB,GAAa;IACjD,IAAI,EAAE,6BAA6B;IACnC,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,mDAAmD;IAC9D,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACnE,OAAO,EAAE,CAAC,GAAW,EAAE,OAAe,EAAgB,EAAE;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAA6B,CAAC;YACrD,IAAI,CAAC,MAAM;gBAAE,OAAO,WAAW,CAAC;YAEhC,MAAM,IAAI,GAAG,MAAyG,CAAC;YACvH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvD,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;wBACvC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;4BAC/B,IAAI,EAAE,oBAAoB;4BAC1B,KAAK,EAAE,MAAM;4BACb,QAAQ,EAAE,QAAQ,OAAO,wBAAwB;4BACjD,OAAO,EAAE,KAAK,EAAE,CAAC;4BACjB,QAAQ,EAAE,qDAAqD;yBAChE,CAAC,CAAC,CAAC;oBACN,CAAC;oBACD,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,GAAG,EAAE,EAAE,CAAC;wBAC5C,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;4BAC/B,IAAI,EAAE,gCAAgC;4BACtC,KAAK,EAAE,MAAM;4BACb,QAAQ,EAAE,QAAQ,OAAO,qBAAqB,GAAG,CAAC,WAAW,qBAAqB;4BAClF,OAAO,EAAE,KAAK,EAAE,CAAC;4BACjB,QAAQ,EAAE,2DAA2D;yBACtE,CAAC,CAAC,CAAC;oBACN,CAAC;gBACH,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,YAAY,GAAI,MAAkC,CAAC,SAAS,CAAC;oBACnE,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;4BAC/B,IAAI,EAAE,wBAAwB;4BAC9B,KAAK,EAAE,OAAO;4BACd,QAAQ,EAAE,2DAA2D;4BACrE,OAAO,EAAE,KAAK,EAAE,CAAC;4BACjB,QAAQ,EAAE,2EAA2E;yBACtF,CAAC,CAAC,CAAC;oBACN,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAyB,CAAC;QAEnC,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport { parseDocument } from 'yaml';\n\nimport type { Analista, Ocorrencia } from '@';\nimport { criarOcorrencia } from '@';\n\nexport const detectorCircleCIEstrutura: Analista = {\n  nome: 'detector-circleci-estrutura',\n  categoria: 'workflows',\n  descricao: 'Detecta problemas estruturais em CircleCI configs',\n  test: (relPath: string) => relPath.endsWith('.circleci/config.yml'),\n  aplicar: (src: string, relPath: string): Ocorrencia[] => {\n    if (!src) return [];\n    const ocorrencias: Ocorrencia[] = [];\n    try {\n      const doc = parseDocument(src);\n      const config = doc.toJS() as Record<string, unknown>;\n      if (!config) return ocorrencias;\n\n      const jobs = config as { jobs?: Record<string, { steps?: unknown[]; parallelism?: number; resource_class?: string }> };\n      if (jobs.jobs) {\n        for (const [jobName, job] of Object.entries(jobs.jobs)) {\n          if (job.steps && job.steps.length <= 1) {\n            ocorrencias.push(criarOcorrencia({\n              tipo: 'circleci-job-vazio',\n              nivel: 'info',\n              mensagem: `Job '${jobName}' possui apenas 1 step`,\n              relPath, linha: 1,\n              sugestao: 'Considere remover jobs sem operações significativas'\n            }));\n          }\n          if (job.parallelism && job.parallelism > 10) {\n            ocorrencias.push(criarOcorrencia({\n              tipo: 'circleci-parallelism-excessivo',\n              nivel: 'info',\n              mensagem: `Job '${jobName}' com parallelism=${job.parallelism} pode ser excessivo`,\n              relPath, linha: 1,\n              sugestao: 'Ajuste o parallelism baseado na quantidade real de testes'\n            }));\n          }\n        }\n\n        const jobNames = Object.keys(jobs.jobs);\n        if (jobNames.length > 3) {\n          const hasWorkflows = (config as { workflows?: unknown }).workflows;\n          if (!hasWorkflows) {\n            ocorrencias.push(criarOcorrencia({\n              tipo: 'circleci-sem-workflows',\n              nivel: 'aviso',\n              mensagem: 'Múltiplos jobs sem seção workflows organizando a execução',\n              relPath, linha: 1,\n              sugestao: 'Adicione a seção workflows para definir a ordem e dependências entre jobs'\n            }));\n          }\n        }\n      }\n    } catch { /* silent parse fail */ }\n\n    return ocorrencias;\n  }\n};\n"]}

package/dist/analysts/circleci/detectors/index.d.ts

@@ -0,0 +1,4 @@
+export * from './detector-circleci-performance.js';
+export * from './detector-circleci-security.js';
+export * from './detector-circleci-structure.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/circleci/detectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC"}

package/dist/analysts/circleci/detectors/index.js

@@ -0,0 +1,4 @@
+export * from './detector-circleci-performance.js';
+export * from './detector-circleci-security.js';
+export * from './detector-circleci-structure.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/circleci/detectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/circleci/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,kCAAkC,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './detector-circleci-performance.js';\nexport * from './detector-circleci-security.js';\nexport * from './detector-circleci-structure.js';\n"]}

package/dist/analysts/circleci/index.d.ts

@@ -0,0 +1,6 @@
+export * from './analysts/analyst-circleci.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './reports/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/circleci/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analysts/circleci/index.ts"],"names":[],"mappings":"AAKA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC"}

package/dist/analysts/circleci/index.js

@@ -0,0 +1,6 @@
+export * from './analysts/analyst-circleci.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './reports/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/circleci/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analysts/circleci/index.ts"],"names":[],"mappings":"AAKA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Analistas de CircleCI\n */\n\nexport * from './analysts/analyst-circleci.js';\nexport * from './corrections/index.js';\nexport * from './detectors/index.js';\nexport * from './reports/index.js';\nexport * from './scorers/index.js';\n"]}

package/dist/analysts/circleci/reports/generator-report-circleci.d.ts

@@ -0,0 +1,18 @@
+import type { Ocorrencia } from '../../../types/index.js';
+import type { DadosRelatorioCircleCI, OpcoesRelatorio } from '../../../types/analysts/circleci.js';
+export declare function gerarRelatorioJson(dados: DadosRelatorioCircleCI): string;
+export declare function gerarRelatorioMarkdown(dados: DadosRelatorioCircleCI, opcoes?: {
+    titulo?: string;
+    incluirDetalhes?: boolean;
+}): string;
+export declare function gerarRelatorioHtml(dados: DadosRelatorioCircleCI, opcoes?: {
+    titulo?: string;
+}): string;
+export declare function gerarRelatorioCsv(dados: DadosRelatorioCircleCI): string;
+export declare function gerarRelatorio(dados: DadosRelatorioCircleCI, opcoes: OpcoesRelatorio): Promise<string>;
+export declare function prepararDadosRelatorio(ocorrencias: Ocorrencia[], nomeRepositorio: string, tempoAnaliseMs: number, configs?: Array<{
+    nome: string;
+    score: number;
+    ocorrencias: number;
+}>): DadosRelatorioCircleCI;
+//# sourceMappingURL=generator-report-circleci.d.ts.map

package/dist/analysts/circleci/reports/generator-report-circleci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator-report-circleci.d.ts","sourceRoot":"","sources":["../../../../src/analysts/circleci/reports/generator-report-circleci.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC;AAEpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAEnG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAExE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAiBrI;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAItG;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAIvE;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAa5G;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,sBAAsB,CAWhN"}