tutanus 0.13.0 → 0.13.2

package/dist/types/structure/archetypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=archetypes.js.map

package/dist/types/structure/archetypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archetypes.js","sourceRoot":"","sources":["../../../src/types/structure/archetypes.ts"],"names":[],"mappings":"","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport type { PlanoSugestaoEstrutura } from '@';\n\nexport interface ArquetipoEstruturaDef {\n  nome: string;\n  descricao: string;\n  requiredDirs?: string[];\n  optionalDirs?: string[];\n  forbiddenDirs?: string[];\n  rootFilesAllowed?: string[];\n  dependencyHints?: string[];\n  filePresencePatterns?: string[];\n  pesoBase?: number;\n}\nexport interface ArquetipoPersonalizado {\n  nome: string;\n  descricao?: string;\n  arquetipoOficial: string;\n  estruturaPersonalizada: {\n    diretorios: string[];\n    arquivosChave: string[];\n    padroesNomenclatura?: Record<string, string>;\n  };\n  melhoresPraticas?: {\n    recomendado?: string[];\n    evitar?: string[];\n    notas?: string[];\n  };\n  metadata?: {\n    criadoEm: string;\n    versao: string;\n    notasUsuario?: string;\n  };\n}\nexport interface ArquetipoDeteccaoAnomalia {\n  path: string;\n  motivo: string;\n  sugerido?: string;\n}\nexport interface ResultadoDeteccaoArquetipo {\n  nome: string;\n  descricao: string;\n  score: number;\n  confidence: number;\n  matchedRequired: string[];\n  missingRequired: string[];\n  matchedOptional: string[];\n  dependencyMatches: string[];\n  filePadraoMatches: string[];\n  forbiddenPresent: string[];\n  anomalias: ArquetipoDeteccaoAnomalia[];\n  planoSugestao?: PlanoSugestaoEstrutura;\n  sugestaoPadronizacao?: string;\n  explicacaoSimilaridade?: string;\n  candidatoExtra?: string;\n}"]}

package/dist/types/structure/index.d.ts

@@ -0,0 +1,3 @@
+export * from './archetypes.js';
+export * from './plano-structure.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/structure/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/structure/index.ts"],"names":[],"mappings":"AAKA,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC"}

package/dist/types/structure/index.js

@@ -0,0 +1,3 @@
+export * from './archetypes.js';
+export * from './plano-structure.js';
+//# sourceMappingURL=index.js.map

package/dist/types/structure/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/structure/index.ts"],"names":[],"mappings":"AAKA,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * @fileoverview Structure types: arquetipos and plano-estrutura\n */\n\nexport * from './archetypes.js';\nexport * from './plano-structure.js';\n"]}

package/dist/types/structure/plano-structure.d.ts

@@ -0,0 +1,20 @@
+export interface PlanoMoverItem {
+    de: string;
+    para: string;
+    motivo?: string;
+}
+export interface PlanoConflito {
+    alvo: string;
+    motivo: string;
+}
+export interface PlanoResumo {
+    total: number;
+    zonaVerde: number;
+    bloqueados: number;
+}
+export interface PlanoSugestaoEstrutura {
+    mover: PlanoMoverItem[];
+    conflitos?: PlanoConflito[];
+    resumo?: PlanoResumo;
+}
+//# sourceMappingURL=plano-structure.d.ts.map

package/dist/types/structure/plano-structure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plano-structure.d.ts","sourceRoot":"","sources":["../../../src/types/structure/plano-structure.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB"}

package/dist/types/structure/plano-structure.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=plano-structure.js.map

package/dist/types/structure/plano-structure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plano-structure.js","sourceRoot":"","sources":["../../../src/types/structure/plano-structure.ts"],"names":[],"mappings":"","sourcesContent":["// SPDX-License-Identifier: MIT\n// Tipos relacionados a plano de reorganização estrutural (extraídos de tipos.ts para reduzir acoplamento)\n\nexport interface PlanoMoverItem {\n  de: string;\n  para: string;\n  motivo?: string;\n}\nexport interface PlanoConflito {\n  alvo: string;\n  motivo: string;\n}\nexport interface PlanoResumo {\n  total: number;\n  zonaVerde: number;\n  bloqueados: number;\n}\n\nexport interface PlanoSugestaoEstrutura {\n  mover: PlanoMoverItem[];\n  conflitos?: PlanoConflito[];\n  resumo?: PlanoResumo;\n}\n"]}

package/dist/types/types.d.ts

@@ -0,0 +1,2 @@
+export * from './index.js';
+//# sourceMappingURL=types.d.ts.map

package/dist/types/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types/types.ts"],"names":[],"mappings":"AAKA,cAAc,YAAY,CAAC"}

package/dist/types/types.js

@@ -0,0 +1,2 @@
+export * from './index.js';
+//# sourceMappingURL=types.js.map

package/dist/types/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types/types.ts"],"names":[],"mappings":"AAKA,cAAc,YAAY,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * Re-export de todos os tipos para compatibilidade\n * Este arquivo permite imports do tipo: import { X } from '@types/types'\n */\nexport * from './index.js';\n"]}

package/dist/types/vulnerabilities/index.d.ts

@@ -0,0 +1,3 @@
+export * from './npm-audit.js';
+export * from './vulnerabilities.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/vulnerabilities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/vulnerabilities/index.ts"],"names":[],"mappings":"AAEA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC"}

package/dist/types/vulnerabilities/index.js

@@ -0,0 +1,3 @@
+export * from './npm-audit.js';
+export * from './vulnerabilities.js';
+//# sourceMappingURL=index.js.map

package/dist/types/vulnerabilities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/vulnerabilities/index.ts"],"names":[],"mappings":"AAEA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nexport * from './npm-audit.js';\nexport * from './vulnerabilities.js';\n"]}

package/dist/types/vulnerabilities/npm-audit.d.ts

@@ -0,0 +1,48 @@
+export interface NpmAuditError {
+    stdout: string;
+    stderr: string;
+    code: number;
+}
+export interface NpmAuditResult {
+    auditReportVersion?: number;
+    vulnerabilities?: Record<string, NpmAuditVulnerability>;
+    metadata?: {
+        vulnerabilities?: {
+            critical?: number;
+            high?: number;
+            moderate?: number;
+            low?: number;
+            info?: number;
+        };
+        dependencies?: {
+            prod?: number;
+            dev?: number;
+            optional?: number;
+            total?: number;
+        };
+    };
+}
+export interface NpmAuditVulnerability {
+    name: string;
+    severity: 'critical' | 'high' | 'moderate' | 'low';
+    isDirect: boolean;
+    via: (string | {
+        source: number;
+        name: string;
+        dependency: string;
+        title: string;
+        url: string;
+        severity: string;
+        cve: string[];
+        range: string;
+    })[];
+    effects: string[];
+    range: string;
+    fixAvailable: {
+        name: string;
+        version: string;
+        isSemVerMajor: boolean;
+    } | false;
+    nodes: string[];
+}
+//# sourceMappingURL=npm-audit.d.ts.map

package/dist/types/vulnerabilities/npm-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-audit.d.ts","sourceRoot":"","sources":["../../../src/types/vulnerabilities/npm-audit.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACxD,QAAQ,CAAC,EAAE;QACT,eAAe,CAAC,EAAE;YAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,CAAC;QACF,YAAY,CAAC,EAAE;YACb,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,CAAC;SAChB,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,CAAC;IACnD,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,CAAC,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IACnJ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,OAAO,CAAC;KACxB,GAAG,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB"}

package/dist/types/vulnerabilities/npm-audit.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=npm-audit.js.map

package/dist/types/vulnerabilities/npm-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-audit.js","sourceRoot":"","sources":["../../../src/types/vulnerabilities/npm-audit.ts"],"names":[],"mappings":"","sourcesContent":["// SPDX-License-Identifier: MIT\n\nexport interface NpmAuditError {\n  stdout: string;\n  stderr: string;\n  code: number;\n}\n\nexport interface NpmAuditResult {\n  auditReportVersion?: number;\n  vulnerabilities?: Record<string, NpmAuditVulnerability>;\n  metadata?: {\n    vulnerabilities?: {\n      critical?: number;\n      high?: number;\n      moderate?: number;\n      low?: number;\n      info?: number;\n    };\n    dependencies?: {\n      prod?: number;\n      dev?: number;\n      optional?: number;\n      total?: number;\n    };\n  };\n}\n\nexport interface NpmAuditVulnerability {\n  name: string;\n  severity: 'critical' | 'high' | 'moderate' | 'low';\n  isDirect: boolean;\n  via: (string | { source: number; name: string; dependency: string; title: string; url: string; severity: string; cve: string[]; range: string })[];\n  effects: string[];\n  range: string;\n  fixAvailable: {\n    name: string;\n    version: string;\n    isSemVerMajor: boolean;\n  } | false;\n  nodes: string[];\n}\n"]}

package/dist/types/vulnerabilities/vulnerabilities.d.ts

@@ -0,0 +1,41 @@
+export interface VulnerabilityScanOptions {
+    root?: string;
+    production?: boolean;
+    auditLevel?: 'critical' | 'high' | 'moderate' | 'low';
+}
+export interface Vulnerability {
+    name: string;
+    severity: 'critical' | 'high' | 'moderate' | 'low';
+    isDirect: boolean;
+    via: string[];
+    effects: string[];
+    range: string;
+    fixAvailable: {
+        name: string;
+        version: string;
+        isSemVerMajor: boolean;
+    } | null;
+    nodes: string[];
+}
+export interface VulnerabilityCounts {
+    critical: number;
+    high: number;
+    moderate: number;
+    low: number;
+    info: number;
+}
+export interface VulnerabilityScanResult {
+    generatedAt: string;
+    totalPackages: number;
+    totalVulnerabilities: number;
+    counts: VulnerabilityCounts;
+    vulnerabilities: Record<string, Vulnerability>;
+    metadata: {
+        vulnerabilities: VulnerabilityCounts;
+        dependencies: number;
+        devDependencies: number;
+        optionalDependencies: number;
+        totalDependencies: number;
+    };
+}
+//# sourceMappingURL=vulnerabilities.d.ts.map

package/dist/types/vulnerabilities/vulnerabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vulnerabilities.d.ts","sourceRoot":"","sources":["../../../src/types/vulnerabilities/vulnerabilities.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,CAAC;CACvD;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,CAAC;IACnD,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,OAAO,CAAC;KACxB,GAAG,IAAI,CAAC;IACT,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/C,QAAQ,EAAE;QACR,eAAe,EAAE,mBAAmB,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH"}

package/dist/types/vulnerabilities/vulnerabilities.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=vulnerabilities.js.map

package/dist/types/vulnerabilities/vulnerabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vulnerabilities.js","sourceRoot":"","sources":["../../../src/types/vulnerabilities/vulnerabilities.ts"],"names":[],"mappings":"","sourcesContent":["// SPDX-License-Identifier: MIT\n\nexport interface VulnerabilityScanOptions {\n  root?: string;\n  production?: boolean;\n  auditLevel?: 'critical' | 'high' | 'moderate' | 'low';\n}\n\nexport interface Vulnerability {\n  name: string;\n  severity: 'critical' | 'high' | 'moderate' | 'low';\n  isDirect: boolean;\n  via: string[];\n  effects: string[];\n  range: string;\n  fixAvailable: {\n    name: string;\n    version: string;\n    isSemVerMajor: boolean;\n  } | null;\n  nodes: string[];\n}\n\nexport interface VulnerabilityCounts {\n  critical: number;\n  high: number;\n  moderate: number;\n  low: number;\n  info: number;\n}\n\nexport interface VulnerabilityScanResult {\n  generatedAt: string;\n  totalPackages: number;\n  totalVulnerabilities: number;\n  counts: VulnerabilityCounts;\n  vulnerabilities: Record<string, Vulnerability>;\n  metadata: {\n    vulnerabilities: VulnerabilityCounts;\n    dependencies: number;\n    devDependencies: number;\n    optionalDependencies: number;\n    totalDependencies: number;\n  };\n}\n"]}

package/dist/vulnerabilities/index.d.ts

@@ -0,0 +1,2 @@
+export * from './scanner.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/vulnerabilities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vulnerabilities/index.ts"],"names":[],"mappings":"AAEA,cAAc,cAAc,CAAC"}

package/dist/vulnerabilities/index.js

@@ -0,0 +1,2 @@
+export * from './scanner.js';
+//# sourceMappingURL=index.js.map

package/dist/vulnerabilities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vulnerabilities/index.ts"],"names":[],"mappings":"AAEA,cAAc,cAAc,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nexport * from './scanner.js';\n"]}

package/dist/vulnerabilities/scanner.d.ts

@@ -0,0 +1,3 @@
+import type { VulnerabilityScanOptions, VulnerabilityScanResult } from '../types/vulnerabilities/vulnerabilities.js';
+export declare function scanVulnerabilities(opts?: VulnerabilityScanOptions): Promise<VulnerabilityScanResult>;
+//# sourceMappingURL=scanner.d.ts.map

package/dist/vulnerabilities/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/vulnerabilities/scanner.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAcrH,wBAAsB,mBAAmB,CACvC,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,uBAAuB,CAAC,CAiBlC"}

package/dist/vulnerabilities/scanner.js

@@ -0,0 +1,107 @@
+import { execFile } from 'node:child_process';
+import path from 'node:path';
+function execFileAsync(cmd, args, opts) {
+    return new Promise((resolve, reject) => {
+        execFile(cmd, args, opts, (err, stdout) => {
+            if (err) {
+                reject(Object.assign(err, { stdout }));
+            }
+            else {
+                resolve({ stdout });
+            }
+        });
+    });
+}
+export async function scanVulnerabilities(opts = {}) {
+    const root = opts.root ? path.resolve(opts.root) : process.cwd();
+    const args = ['audit', '--json'];
+    if (opts.production)
+        args.push('--production');
+    if (opts.auditLevel)
+        args.push(`--audit-level=${opts.auditLevel}`);
+    try {
+        const { stdout } = await execFileAsync('npm', args, { cwd: root });
+        const raw = JSON.parse(stdout);
+        return normalizeAuditResult(raw);
+    }
+    catch (err) {
+        if (isNpmAuditError(err)) {
+            const parsed = JSON.parse(err.stdout);
+            return normalizeAuditResult(parsed);
+        }
+        return emptyResult();
+    }
+}
+function isNpmAuditError(err) {
+    if (typeof err !== 'object' || err === null)
+        return false;
+    const e = err;
+    return typeof e.stdout === 'string' && typeof e.code === 'number';
+}
+function normalizeAuditResult(raw) {
+    const vulnerabilities = raw.vulnerabilities ?? {};
+    const metaVulns = raw.metadata?.vulnerabilities ?? {};
+    const metaDeps = raw.metadata?.dependencies ?? {};
+    const normalized = {};
+    let vulnCount = 0;
+    for (const [pkgName, vuln] of Object.entries(vulnerabilities)) {
+        vulnCount++;
+        normalized[pkgName] = {
+            name: vuln.name,
+            severity: vuln.severity,
+            isDirect: vuln.isDirect,
+            via: vuln.via.map(v => (typeof v === 'string' ? v : v.title || v.url || v.name)),
+            effects: vuln.effects,
+            range: vuln.range,
+            fixAvailable: vuln.fixAvailable === false ? null : {
+                name: vuln.fixAvailable.name,
+                version: vuln.fixAvailable.version,
+                isSemVerMajor: vuln.fixAvailable.isSemVerMajor,
+            },
+            nodes: vuln.nodes,
+        };
+    }
+    return {
+        generatedAt: new Date().toISOString(),
+        totalPackages: vulnCount,
+        totalVulnerabilities: vulnCount,
+        counts: {
+            critical: metaVulns.critical ?? 0,
+            high: metaVulns.high ?? 0,
+            moderate: metaVulns.moderate ?? 0,
+            low: metaVulns.low ?? 0,
+            info: metaVulns.info ?? 0,
+        },
+        vulnerabilities: normalized,
+        metadata: {
+            vulnerabilities: {
+                critical: metaVulns.critical ?? 0,
+                high: metaVulns.high ?? 0,
+                moderate: metaVulns.moderate ?? 0,
+                low: metaVulns.low ?? 0,
+                info: metaVulns.info ?? 0,
+            },
+            dependencies: metaDeps.prod ?? 0,
+            devDependencies: metaDeps.dev ?? 0,
+            optionalDependencies: metaDeps.optional ?? 0,
+            totalDependencies: metaDeps.total ?? 0,
+        },
+    };
+}
+function emptyResult() {
+    return {
+        generatedAt: new Date().toISOString(),
+        totalPackages: 0,
+        totalVulnerabilities: 0,
+        counts: { critical: 0, high: 0, moderate: 0, low: 0, info: 0 },
+        vulnerabilities: {},
+        metadata: {
+            vulnerabilities: { critical: 0, high: 0, moderate: 0, low: 0, info: 0 },
+            dependencies: 0,
+            devDependencies: 0,
+            optionalDependencies: 0,
+            totalDependencies: 0,
+        },
+    };
+}
+//# sourceMappingURL=scanner.js.map

package/dist/vulnerabilities/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/vulnerabilities/scanner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,SAAS,aAAa,CAAC,GAAW,EAAE,IAAc,EAAE,IAAqB;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YACxC,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAiC,EAAE;IAEnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAmB;IAC/C,MAAM,eAAe,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,YAAY,IAAI,EAAE,CAAC;IAElD,MAAM,UAAU,GAAuE,EAAE,CAAC;IAC1F,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9D,SAAS,EAAE,CAAC;QACZ,UAAU,CAAC,OAAO,CAAC,GAAG;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;YAChF,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjD,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;gBAC5B,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO;gBAClC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,aAAa;aAC/C;YACD,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,aAAa,EAAE,SAAS;QACxB,oBAAoB,EAAE,SAAS;QAC/B,MAAM,EAAE;YACN,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,CAAC;YACjC,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC;YACzB,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,CAAC;YACjC,GAAG,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC;YACvB,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC;SAC1B;QACD,eAAe,EAAE,UAAU;QAC3B,QAAQ,EAAE;YACR,eAAe,EAAE;gBACf,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,CAAC;gBACjC,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC;gBACzB,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,CAAC;gBACjC,GAAG,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC;gBACvB,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC;aAC1B;YACD,YAAY,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC;YAChC,eAAe,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC;YAClC,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,IAAI,CAAC;YAC5C,iBAAiB,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC;SACvC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,aAAa,EAAE,CAAC;QAChB,oBAAoB,EAAE,CAAC;QACvB,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;QAC9D,eAAe,EAAE,EAAE;QACnB,QAAQ,EAAE;YACR,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;YACvE,YAAY,EAAE,CAAC;YACf,eAAe,EAAE,CAAC;YAClB,oBAAoB,EAAE,CAAC;YACvB,iBAAiB,EAAE,CAAC;SACrB;KACF,CAAC;AACJ,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n\nimport { execFile } from 'node:child_process';\nimport path from 'node:path';\n\nimport type { NpmAuditError, NpmAuditResult } from '../types/vulnerabilities/npm-audit.js';\nimport type { VulnerabilityScanOptions, VulnerabilityScanResult } from '../types/vulnerabilities/vulnerabilities.js';\n\nfunction execFileAsync(cmd: string, args: string[], opts: { cwd: string }): Promise<{ stdout: string }> {\n  return new Promise((resolve, reject) => {\n    execFile(cmd, args, opts, (err, stdout) => {\n      if (err) {\n        reject(Object.assign(err, { stdout }));\n      } else {\n        resolve({ stdout });\n      }\n    });\n  });\n}\n\nexport async function scanVulnerabilities(\n  opts: VulnerabilityScanOptions = {},\n): Promise<VulnerabilityScanResult> {\n  const root = opts.root ? path.resolve(opts.root) : process.cwd();\n  const args = ['audit', '--json'];\n  if (opts.production) args.push('--production');\n  if (opts.auditLevel) args.push(`--audit-level=${opts.auditLevel}`);\n\n  try {\n    const { stdout } = await execFileAsync('npm', args, { cwd: root });\n    const raw = JSON.parse(stdout);\n    return normalizeAuditResult(raw);\n  } catch (err: unknown) {\n    if (isNpmAuditError(err)) {\n      const parsed = JSON.parse(err.stdout);\n      return normalizeAuditResult(parsed);\n    }\n    return emptyResult();\n  }\n}\n\nfunction isNpmAuditError(err: unknown): err is NpmAuditError {\n  if (typeof err !== 'object' || err === null) return false;\n  const e = err as Record<string, unknown>;\n  return typeof e.stdout === 'string' && typeof e.code === 'number';\n}\n\nfunction normalizeAuditResult(raw: NpmAuditResult): VulnerabilityScanResult {\n  const vulnerabilities = raw.vulnerabilities ?? {};\n  const metaVulns = raw.metadata?.vulnerabilities ?? {};\n  const metaDeps = raw.metadata?.dependencies ?? {};\n\n  const normalized: Record<string, VulnerabilityScanResult['vulnerabilities'][string]> = {};\n  let vulnCount = 0;\n\n  for (const [pkgName, vuln] of Object.entries(vulnerabilities)) {\n    vulnCount++;\n    normalized[pkgName] = {\n      name: vuln.name,\n      severity: vuln.severity,\n      isDirect: vuln.isDirect,\n      via: vuln.via.map(v => (typeof v === 'string' ? v : v.title || v.url || v.name)),\n      effects: vuln.effects,\n      range: vuln.range,\n      fixAvailable: vuln.fixAvailable === false ? null : {\n        name: vuln.fixAvailable.name,\n        version: vuln.fixAvailable.version,\n        isSemVerMajor: vuln.fixAvailable.isSemVerMajor,\n      },\n      nodes: vuln.nodes,\n    };\n  }\n\n  return {\n    generatedAt: new Date().toISOString(),\n    totalPackages: vulnCount,\n    totalVulnerabilities: vulnCount,\n    counts: {\n      critical: metaVulns.critical ?? 0,\n      high: metaVulns.high ?? 0,\n      moderate: metaVulns.moderate ?? 0,\n      low: metaVulns.low ?? 0,\n      info: metaVulns.info ?? 0,\n    },\n    vulnerabilities: normalized,\n    metadata: {\n      vulnerabilities: {\n        critical: metaVulns.critical ?? 0,\n        high: metaVulns.high ?? 0,\n        moderate: metaVulns.moderate ?? 0,\n        low: metaVulns.low ?? 0,\n        info: metaVulns.info ?? 0,\n      },\n      dependencies: metaDeps.prod ?? 0,\n      devDependencies: metaDeps.dev ?? 0,\n      optionalDependencies: metaDeps.optional ?? 0,\n      totalDependencies: metaDeps.total ?? 0,\n    },\n  };\n}\n\nfunction emptyResult(): VulnerabilityScanResult {\n  return {\n    generatedAt: new Date().toISOString(),\n    totalPackages: 0,\n    totalVulnerabilities: 0,\n    counts: { critical: 0, high: 0, moderate: 0, low: 0, info: 0 },\n    vulnerabilities: {},\n    metadata: {\n      vulnerabilities: { critical: 0, high: 0, moderate: 0, low: 0, info: 0 },\n      dependencies: 0,\n      devDependencies: 0,\n      optionalDependencies: 0,\n      totalDependencies: 0,\n    },\n  };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tutanus",
-  "version": "0.13.0",
+  "version": "0.13.2",
   "type": "module",
   "description": "C.L.I modular para análise, diagnóstico e manutenção de projetos JavaScript/TypeScript e multi-stack leve",
   "author": "Black Diaz",
@@ -78,7 +78,7 @@
     "reverter:listar": "tutanus reverter listar",
     "reverter:status": "tutanus reverter status",
     "headers:spdx": "find src -name \"*.ts\" -exec grep -L \"SPDX-License-Identifier\" {} \\; 2>/dev/null | head -20",
-    "license-check": "npx license-checker-rseidelsohn --production --onlyAllow=\"MIT;MIT-0;ISC;BSD-2-Clause;BSD-3-Clause;Apache-2.0;0BSD;Unlicense;CC0-1.0;BlueOak-1.0.0;Python-2.0;Zlib;CC-BY-3.0;CC-BY-4.0;Artistic-2.0;BSD-2-Clause-Patent;BSL-1.0;Unicode-DFS-2015;Unicode-DFS-2016;Unicode-3.0\""
+    "license-check": "tutanus licencas scan"
   },
   "keywords": [
     "cli",
@@ -101,19 +101,18 @@
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/mocoto-strike/tutanus.git"
+    "url": "git+https://github.com/mocoto-geleia/tutanus.git"
   },
   "bugs": {
-    "url": "https://github.com/mocoto-strike/tutanus/issues"
+    "url": "https://github.com/mocoto-geleia/tutanus/issues"
   },
-  "homepage": "https://github.com/mocoto-strike/tutanus#readme",
+  "homepage": "https://github.com/mocoto-geleia/tutanus#readme",
   "files": [
     "dist",
     "out",
     "README.md",
     "LICENSE*",
-    "THIRD-PARTY-NOTICES.txt",
-    "scripts/license.json"
+    "THIRD-PARTY-NOTICES.txt"
   ],
   "dependencies": {
     "@babel/parser": "7.29.7",

package/scripts/license.json

@@ -1,53 +0,0 @@
-{
-  "allowedLicenses": [
-    "MIT",
-    "MIT-0",
-    "ISC",
-    "BSD-2-Clause",
-    "BSD-3-Clause",
-    "Apache-2.0",
-    "0BSD",
-    "Unlicense",
-    "CC0-1.0",
-    "BlueOak-1.0.0",
-    "Python-2.0",
-    "Zlib",
-    "CC-BY-3.0",
-    "CC-BY-4.0",
-    "Artistic-2.0",
-    "BSD-2-Clause-Patent",
-    "BSL-1.0",
-    "Unicode-DFS-2015",
-    "Unicode-DFS-2016",
-    "Unicode-3.0"
-  ],
-  "blockedLicenses": [
-    "GPL-2.0",
-    "GPL-2.0-only",
-    "GPL-2.0-or-later",
-    "GPL-3.0",
-    "GPL-3.0-only",
-    "GPL-3.0-or-later",
-    "AGPL-3.0",
-    "AGPL-3.0-only",
-    "AGPL-3.0-or-later",
-    "SSPL-1.0",
-    "BUSL-1.1",
-    "EUPL-1.1",
-    "EUPL-1.2",
-    "MPL-1.0",
-    "MPL-1.1",
-    "MPL-2.0",
-    "LGPL-2.0",
-    "LGPL-2.1",
-    "LGPL-3.0",
-    "CC-BY-NC-4.0",
-    "CC-BY-NC-SA-4.0",
-    "CC-BY-ND-4.0",
-    "CC-BY-NC-ND-4.0"
-  ],
-  "exceptions": [],
-  "outputDir": ".sensei",
-  "failOnBlocked": true,
-  "failOnUnknown": false
-}