tutanus 0.13.0 → 0.13.2

package/dist/analysts/xml/detectors/detector-xml.js

@@ -0,0 +1,88 @@
+export function detectarArquetipoXML(arquivos) {
+    const xmlArquivos = arquivos.filter(arquivo => arquivo.endsWith('.xml'));
+    if (xmlArquivos.length === 0) {
+        return [];
+    }
+    const hasWebXml = xmlArquivos.some(arquivo => arquivo.includes('web.xml') || arquivo.includes('sitemap.xml') || arquivo.includes('rss.xml') || arquivo.includes('feed.xml') || arquivo.includes('soap'));
+    if (hasWebXml) {
+        return [{
+                nome: 'web-xml-project',
+                score: 75,
+                confidence: 85,
+                matchedRequired: ['web-xml-files'],
+                missingRequired: [],
+                matchedOptional: xmlArquivos,
+                dependencyMatches: [],
+                filePadraoMatches: xmlArquivos.filter(arquivo => arquivo.includes('web.xml') || arquivo.includes('sitemap') || arquivo.includes('rss') || arquivo.includes('feed') || arquivo.includes('soap')),
+                forbiddenPresent: [],
+                anomalias: [],
+                sugestaoPadronizacao: 'Projeto web com XML detectado (RSS, SOAP, sitemap, etc)',
+                explicacaoSimilaridade: 'Arquivos XML típicos de aplicações web',
+                descricao: 'Projeto web usando XML para feeds, configuração ou APIs',
+                planoSugestao: {
+                    mover: [],
+                    conflitos: [],
+                    resumo: {
+                        total: 0,
+                        zonaVerde: xmlArquivos.length,
+                        bloqueados: 0
+                    }
+                }
+            }];
+    }
+    const hasSvg = xmlArquivos.some(arquivo => arquivo.endsWith('.svg'));
+    if (hasSvg) {
+        return [{
+                nome: 'svg-graphics-project',
+                score: 65,
+                confidence: 80,
+                matchedRequired: ['svg-files'],
+                missingRequired: [],
+                matchedOptional: xmlArquivos.filter(arquivo => !arquivo.endsWith('.svg')),
+                dependencyMatches: [],
+                filePadraoMatches: xmlArquivos.filter(arquivo => arquivo.endsWith('.svg')),
+                forbiddenPresent: [],
+                anomalias: [],
+                sugestaoPadronizacao: 'Projeto com gráficos SVG detectado',
+                explicacaoSimilaridade: 'Arquivos SVG (Scalable Vector Graphics)',
+                descricao: 'Projeto usando gráficos vetoriais SVG',
+                planoSugestao: {
+                    mover: [],
+                    conflitos: [],
+                    resumo: {
+                        total: 0,
+                        zonaVerde: xmlArquivos.length,
+                        bloqueados: 0
+                    }
+                }
+            }];
+    }
+    if (xmlArquivos.length >= 3) {
+        return [{
+                nome: 'xml-config-project',
+                score: 50,
+                confidence: 60,
+                matchedRequired: ['xml-files'],
+                missingRequired: [],
+                matchedOptional: [],
+                dependencyMatches: [],
+                filePadraoMatches: xmlArquivos.slice(0, 3),
+                forbiddenPresent: [],
+                anomalias: [],
+                sugestaoPadronizacao: 'Projeto com arquivos XML de configuração detectado',
+                explicacaoSimilaridade: 'Múltiplos arquivos XML para configuração ou dados',
+                descricao: 'Projeto que usa XML para configuração ou armazenamento de dados',
+                planoSugestao: {
+                    mover: [],
+                    conflitos: [],
+                    resumo: {
+                        total: 0,
+                        zonaVerde: xmlArquivos.length,
+                        bloqueados: 0
+                    }
+                }
+            }];
+    }
+    return [];
+}
+//# sourceMappingURL=detector-xml.js.map

package/dist/analysts/xml/detectors/detector-xml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector-xml.js","sourceRoot":"","sources":["../../../../src/analysts/xml/detectors/detector-xml.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAGD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzM,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC;gBACN,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,EAAE;gBACT,UAAU,EAAE,EAAE;gBACd,eAAe,EAAE,CAAC,eAAe,CAAC;gBAClC,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,WAAW;gBAC5B,iBAAiB,EAAE,EAAE;gBACrB,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC/L,gBAAgB,EAAE,EAAE;gBACpB,SAAS,EAAE,EAAE;gBACb,oBAAoB,EAAE,yDAAyD;gBAC/E,sBAAsB,EAAE,wCAAwC;gBAChE,SAAS,EAAE,yDAAyD;gBACpE,aAAa,EAAE;oBACb,KAAK,EAAE,EAAE;oBACT,SAAS,EAAE,EAAE;oBACb,MAAM,EAAE;wBACN,KAAK,EAAE,CAAC;wBACR,SAAS,EAAE,WAAW,CAAC,MAAM;wBAC7B,UAAU,EAAE,CAAC;qBACd;iBACF;aACF,CAAC,CAAC;IACL,CAAC;IAGD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC;gBACN,IAAI,EAAE,sBAAsB;gBAC5B,KAAK,EAAE,EAAE;gBACT,UAAU,EAAE,EAAE;gBACd,eAAe,EAAE,CAAC,WAAW,CAAC;gBAC9B,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzE,iBAAiB,EAAE,EAAE;gBACrB,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC1E,gBAAgB,EAAE,EAAE;gBACpB,SAAS,EAAE,EAAE;gBACb,oBAAoB,EAAE,oCAAoC;gBAC1D,sBAAsB,EAAE,yCAAyC;gBACjE,SAAS,EAAE,uCAAuC;gBAClD,aAAa,EAAE;oBACb,KAAK,EAAE,EAAE;oBACT,SAAS,EAAE,EAAE;oBACb,MAAM,EAAE;wBACN,KAAK,EAAE,CAAC;wBACR,SAAS,EAAE,WAAW,CAAC,MAAM;wBAC7B,UAAU,EAAE,CAAC;qBACd;iBACF;aACF,CAAC,CAAC;IACL,CAAC;IAGD,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC;gBACN,IAAI,EAAE,oBAAoB;gBAC1B,KAAK,EAAE,EAAE;gBACT,UAAU,EAAE,EAAE;gBACd,eAAe,EAAE,CAAC,WAAW,CAAC;gBAC9B,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,EAAE;gBACrB,iBAAiB,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1C,gBAAgB,EAAE,EAAE;gBACpB,SAAS,EAAE,EAAE;gBACb,oBAAoB,EAAE,oDAAoD;gBAC1E,sBAAsB,EAAE,mDAAmD;gBAC3E,SAAS,EAAE,iEAAiE;gBAC5E,aAAa,EAAE;oBACb,KAAK,EAAE,EAAE;oBACT,SAAS,EAAE,EAAE;oBACb,MAAM,EAAE;wBACN,KAAK,EAAE,CAAC;wBACR,SAAS,EAAE,WAAW,CAAC,MAAM;wBAC7B,UAAU,EAAE,CAAC;qBACd;iBACF;aACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport type { ResultadoDeteccaoArquetipo } from '@';\n\n/**\n * Detector especializado para projetos baseados em XML\n * Detecta projetos web que usam XML (RSS, SOAP, SVG, configs web)\n */\n\nexport function detectarArquetipoXML(arquivos: string[]): ResultadoDeteccaoArquetipo[] {\n  const xmlArquivos = arquivos.filter(arquivo => arquivo.endsWith('.xml'));\n  if (xmlArquivos.length === 0) {\n    return [];\n  }\n\n  // Detecta projetos web com XMLs (RSS, SOAP, sitemap, etc)\n  const hasWebXml = xmlArquivos.some(arquivo => arquivo.includes('web.xml') || arquivo.includes('sitemap.xml') || arquivo.includes('rss.xml') || arquivo.includes('feed.xml') || arquivo.includes('soap'));\n  if (hasWebXml) {\n    return [{\n      nome: 'web-xml-project',\n      score: 75,\n      confidence: 85,\n      matchedRequired: ['web-xml-files'],\n      missingRequired: [],\n      matchedOptional: xmlArquivos,\n      dependencyMatches: [],\n      filePadraoMatches: xmlArquivos.filter(arquivo => arquivo.includes('web.xml') || arquivo.includes('sitemap') || arquivo.includes('rss') || arquivo.includes('feed') || arquivo.includes('soap')),\n      forbiddenPresent: [],\n      anomalias: [],\n      sugestaoPadronizacao: 'Projeto web com XML detectado (RSS, SOAP, sitemap, etc)',\n      explicacaoSimilaridade: 'Arquivos XML típicos de aplicações web',\n      descricao: 'Projeto web usando XML para feeds, configuração ou APIs',\n      planoSugestao: {\n        mover: [],\n        conflitos: [],\n        resumo: {\n          total: 0,\n          zonaVerde: xmlArquivos.length,\n          bloqueados: 0\n        }\n      }\n    }];\n  }\n\n  // Detecta SVG (gráficos vetoriais)\n  const hasSvg = xmlArquivos.some(arquivo => arquivo.endsWith('.svg'));\n  if (hasSvg) {\n    return [{\n      nome: 'svg-graphics-project',\n      score: 65,\n      confidence: 80,\n      matchedRequired: ['svg-files'],\n      missingRequired: [],\n      matchedOptional: xmlArquivos.filter(arquivo => !arquivo.endsWith('.svg')),\n      dependencyMatches: [],\n      filePadraoMatches: xmlArquivos.filter(arquivo => arquivo.endsWith('.svg')),\n      forbiddenPresent: [],\n      anomalias: [],\n      sugestaoPadronizacao: 'Projeto com gráficos SVG detectado',\n      explicacaoSimilaridade: 'Arquivos SVG (Scalable Vector Graphics)',\n      descricao: 'Projeto usando gráficos vetoriais SVG',\n      planoSugestao: {\n        mover: [],\n        conflitos: [],\n        resumo: {\n          total: 0,\n          zonaVerde: xmlArquivos.length,\n          bloqueados: 0\n        }\n      }\n    }];\n  }\n\n  // Projeto com XMLs genéricos (configurações, dados)\n  if (xmlArquivos.length >= 3) {\n    return [{\n      nome: 'xml-config-project',\n      score: 50,\n      confidence: 60,\n      matchedRequired: ['xml-files'],\n      missingRequired: [],\n      matchedOptional: [],\n      dependencyMatches: [],\n      filePadraoMatches: xmlArquivos.slice(0, 3),\n      forbiddenPresent: [],\n      anomalias: [],\n      sugestaoPadronizacao: 'Projeto com arquivos XML de configuração detectado',\n      explicacaoSimilaridade: 'Múltiplos arquivos XML para configuração ou dados',\n      descricao: 'Projeto que usa XML para configuração ou armazenamento de dados',\n      planoSugestao: {\n        mover: [],\n        conflitos: [],\n        resumo: {\n          total: 0,\n          zonaVerde: xmlArquivos.length,\n          bloqueados: 0\n        }\n      }\n    }];\n  }\n  return [];\n}"]}

package/dist/analysts/xml/detectors/index.d.ts

@@ -0,0 +1,3 @@
+export * from './detector-xml.js';
+export * from './detector-xml-security.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/xml/detectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/xml/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC"}

package/dist/analysts/xml/detectors/index.js

@@ -0,0 +1,3 @@
+export * from './detector-xml.js';
+export * from './detector-xml-security.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/xml/detectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/xml/detectors/index.ts"],"names":[],"mappings":"AACA,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './detector-xml.js';\nexport * from './detector-xml-security.js';\n"]}

package/dist/analysts/xml/index.d.ts

@@ -0,0 +1,5 @@
+export * from './analysts/analyst-xml.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/xml/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analysts/xml/index.ts"],"names":[],"mappings":"AAOA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC"}

package/dist/analysts/xml/index.js

@@ -0,0 +1,5 @@
+export * from './analysts/analyst-xml.js';
+export * from './corrections/index.js';
+export * from './detectors/index.js';
+export * from './scorers/index.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/xml/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analysts/xml/index.ts"],"names":[],"mappings":"AAOA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [BUSCA] Analistas de XML\n *\n * Heurísticas leves para XML (foco em segurança/XXE e compatibilidade).\n */\n\nexport * from './analysts/analyst-xml.js';\nexport * from './corrections/index.js';\nexport * from './detectors/index.js';\nexport * from './scorers/index.js';\n"]}

package/dist/analysts/xml/scorers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './scorer-xml.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/analysts/xml/scorers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/analysts/xml/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAC"}

package/dist/analysts/xml/scorers/index.js

@@ -0,0 +1,2 @@
+export * from './scorer-xml.js';
+//# sourceMappingURL=index.js.map

package/dist/analysts/xml/scorers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/analysts/xml/scorers/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nexport * from './scorer-xml.js';\n"]}

package/dist/analysts/xml/scorers/scorer-xml.d.ts

@@ -0,0 +1,15 @@
+export interface XmlScoreResult {
+    score: number;
+    maxScore: number;
+    percentage: number;
+    issues: string[];
+    strengths: string[];
+}
+export declare function pontuarXml(src: string, _relPath: string): XmlScoreResult;
+export declare const pontuadorXml: {
+    nome: string;
+    categoria: string;
+    descricao: string;
+    pontuar: typeof pontuarXml;
+};
+//# sourceMappingURL=scorer-xml.d.ts.map

package/dist/analysts/xml/scorers/scorer-xml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-xml.d.ts","sourceRoot":"","sources":["../../../../src/analysts/xml/scorers/scorer-xml.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AACD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,CAoExE;AACD,eAAO,MAAM,YAAY;;;;;CAKxB,CAAC"}

package/dist/analysts/xml/scorers/scorer-xml.js

@@ -0,0 +1,74 @@
+import { maskXmlNonCode } from '../../../shared/helpers/index.js';
+export function pontuarXml(src, _relPath) {
+    let score = 0;
+    const maxScore = 100;
+    const issues = [];
+    const strengths = [];
+    const scan = maskXmlNonCode(src);
+    const srcCompleto = scan;
+    if (!/<!DOCTYPE\b/i.test(srcCompleto)) {
+        score += 30;
+        strengths.push('Sem DOCTYPE (mais seguro contra XXE)');
+    }
+    else {
+        score += 10;
+        issues.push('DOCTYPE presente - risco XXE');
+    }
+    const externalEntities = (srcCompleto.match(/<!ENTITY\b.*\b(SYSTEM|PUBLIC)\b/gi) || []).length;
+    if (externalEntities === 0) {
+        score += 25;
+        strengths.push('Sem entidades externas');
+    }
+    else {
+        issues.push(`${externalEntities} entidade(s) externa(s)`);
+    }
+    if (!/<\s*(?:xi|xinclude):include\b/i.test(srcCompleto)) {
+        score += 15;
+        strengths.push('Sem XInclude');
+    }
+    else {
+        issues.push('XInclude detectado');
+    }
+    const declaredNs = new Set();
+    for (const metrica of srcCompleto.matchAll(/xmlns(?::([a-zA-Z_][\w.-]*))?\s*=\s*['"][^'"]*['"]/g)) {
+        if (metrica[1])
+            declaredNs.add(metrica[1]);
+    }
+    const usedNs = new Set();
+    for (const metrica of srcCompleto.matchAll(/([a-zA-Z_][\w.-]*):[a-zA-Z_][\w.-]*/g)) {
+        const prefix = metrica[1];
+        if (prefix !== 'xml' && prefix !== 'xmlns')
+            usedNs.add(prefix);
+    }
+    const undeclaredNs = [...usedNs].filter(caminho => !declaredNs.has(caminho));
+    if (undeclaredNs.length === 0) {
+        score += 15;
+        strengths.push('Todos namespaces declarados');
+    }
+    else {
+        issues.push(`${undeclaredNs.length} namespace(s) não declarado(s): ${undeclaredNs.join(', ')}`);
+    }
+    const openTags = (srcCompleto.match(/<([a-zA-Z_][\w.-]*)((?:\s[^>]*)?)>/g) || []).filter(textoTitulo => !textoTitulo.endsWith('/>') && !/<\?/.test(textoTitulo));
+    const closeTags = srcCompleto.match(/<\/([a-zA-Z_][\w.-]*)>/g) || [];
+    if (openTags.length === closeTags.length) {
+        score += 15;
+        strengths.push('XML bem formado');
+    }
+    else {
+        issues.push('XML possivelmente mal formado');
+    }
+    return {
+        score,
+        maxScore,
+        percentage: Math.round(score / maxScore * 100),
+        issues,
+        strengths
+    };
+}
+export const pontuadorXml = {
+    nome: 'pontuador-xml',
+    categoria: 'markup',
+    descricao: 'Pontua qualidade de XML',
+    pontuar: pontuarXml
+};
+//# sourceMappingURL=scorer-xml.js.map

package/dist/analysts/xml/scorers/scorer-xml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer-xml.js","sourceRoot":"","sources":["../../../../src/analysts/xml/scorers/scorer-xml.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AASjD,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,QAAgB;IACtD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,CAAC;IAGzB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IAGD,MAAM,gBAAgB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,mCAAmC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC/F,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,yBAAyB,CAAC,CAAC;IAC5D,CAAC;IAGD,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;IAGD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,qDAAqD,CAAC,EAAE,CAAC;QAClG,IAAI,OAAO,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,sCAAsC,CAAC,EAAE,CAAC;QACnF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,mCAAmC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IAGD,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,qCAAqC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACjK,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC;IACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACzC,KAAK,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,KAAK;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC;QAC9C,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,eAAe;IACrB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,yBAAyB;IACpC,OAAO,EAAE,UAAU;CACpB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\n/**\n * [GRAFICO] Pontuador de qualidade XML\n *\n * Avalia a qualidade do XML baseado em:\n * - Segurança (XXE, entidades)\n * - Well-formedness\n * - Namespace usage\n */\n\nimport { maskXmlNonCode } from '@shared/helpers';\n\nexport interface XmlScoreResult {\n  score: number;\n  maxScore: number;\n  percentage: number;\n  issues: string[];\n  strengths: string[];\n}\nexport function pontuarXml(src: string, _relPath: string): XmlScoreResult {\n  let score = 0;\n  const maxScore = 100;\n  const issues: string[] = [];\n  const strengths: string[] = [];\n  const scan = maskXmlNonCode(src);\n  const srcCompleto = scan;\n\n  // No DOCTYPE (30 pontos)\n  if (!/<!DOCTYPE\\b/i.test(srcCompleto)) {\n    score += 30;\n    strengths.push('Sem DOCTYPE (mais seguro contra XXE)');\n  } else {\n    score += 10;\n    issues.push('DOCTYPE presente - risco XXE');\n  }\n\n  // No external entities (25 pontos)\n  const externalEntities = (srcCompleto.match(/<!ENTITY\\b.*\\b(SYSTEM|PUBLIC)\\b/gi) || []).length;\n  if (externalEntities === 0) {\n    score += 25;\n    strengths.push('Sem entidades externas');\n  } else {\n    issues.push(`${externalEntities} entidade(s) externa(s)`);\n  }\n\n  // No XInclude (15 pontos)\n  if (!/<\\s*(?:xi|xinclude):include\\b/i.test(srcCompleto)) {\n    score += 15;\n    strengths.push('Sem XInclude');\n  } else {\n    issues.push('XInclude detectado');\n  }\n\n  // Namespaces declared (15 pontos)\n  const declaredNs = new Set<string>();\n  for (const metrica of srcCompleto.matchAll(/xmlns(?::([a-zA-Z_][\\w.-]*))?\\s*=\\s*['\"][^'\"]*['\"]/g)) {\n    if (metrica[1]) declaredNs.add(metrica[1]);\n  }\n  const usedNs = new Set<string>();\n  for (const metrica of srcCompleto.matchAll(/([a-zA-Z_][\\w.-]*):[a-zA-Z_][\\w.-]*/g)) {\n    const prefix = metrica[1];\n    if (prefix !== 'xml' && prefix !== 'xmlns') usedNs.add(prefix);\n  }\n  const undeclaredNs = [...usedNs].filter(caminho => !declaredNs.has(caminho));\n  if (undeclaredNs.length === 0) {\n    score += 15;\n    strengths.push('Todos namespaces declarados');\n  } else {\n    issues.push(`${undeclaredNs.length} namespace(s) não declarado(s): ${undeclaredNs.join(', ')}`);\n  }\n\n  // Well-formedness (15 pontos)\n  const openTags = (srcCompleto.match(/<([a-zA-Z_][\\w.-]*)((?:\\s[^>]*)?)>/g) || []).filter(textoTitulo => !textoTitulo.endsWith('/>') && !/<\\?/.test(textoTitulo));\n  const closeTags = srcCompleto.match(/<\\/([a-zA-Z_][\\w.-]*)>/g) || [];\n  if (openTags.length === closeTags.length) {\n    score += 15;\n    strengths.push('XML bem formado');\n  } else {\n    issues.push('XML possivelmente mal formado');\n  }\n  return {\n    score,\n    maxScore,\n    percentage: Math.round(score / maxScore * 100),\n    issues,\n    strengths\n  };\n}\nexport const pontuadorXml = {\n  nome: 'pontuador-xml',\n  categoria: 'markup',\n  descricao: 'Pontua qualidade de XML',\n  pontuar: pontuarXml\n};"]}

package/dist/app/github/app/check-run-builder.d.ts

@@ -0,0 +1,11 @@
+import type { Ocorrencia } from '../../../types/index.js';
+import type { CheckRunAnnotation, CompletarCheckRunOptions } from '../../../types/github/app.js';
+import { type OctokitInstance } from './octokit.js';
+export declare const MAX_ANNOTATIONS = 50;
+export declare const PASS_THRESHOLD = 70;
+export declare const DEFAULT_SCORE = 100;
+export declare const CHECK_RUN_NAME = "Tutanus GitHub Actions Analyzer";
+export declare function gerarResumoAnalise(scoreGeral: number, ocorrencias: Ocorrencia[]): string;
+export declare function gerarAnnotations(ocorrencias: Ocorrencia[]): CheckRunAnnotation[];
+export declare function completarCheckRun(octokit: OctokitInstance, owner: string, repo: string, checkRunId: number, scoreGeral: number, ocorrencias: Ocorrencia[], options?: CompletarCheckRunOptions): Promise<void>;
+//# sourceMappingURL=check-run-builder.d.ts.map

package/dist/app/github/app/check-run-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-run-builder.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/check-run-builder.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC;AAEpC,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACjG,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,cAAc,oCAAoC,CAAC;AAQhE,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,CAcxF;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,kBAAkB,EAAE,CAWhF;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,UAAU,EAAE,EACzB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/app/github/app/check-run-builder.js

@@ -0,0 +1,66 @@
+import { GithubWebhookMensagens } from '../../../core/messages/index.js';
+import {} from './octokit.js';
+export const MAX_ANNOTATIONS = 50;
+export const PASS_THRESHOLD = 70;
+export const DEFAULT_SCORE = 100;
+export const CHECK_RUN_NAME = 'Tutanus GitHub Actions Analyzer';
+function nivelParaAnnotation(nivel) {
+    if (nivel === 'erro')
+        return 'failure';
+    if (nivel === 'aviso')
+        return 'warning';
+    return 'notice';
+}
+export function gerarResumoAnalise(scoreGeral, ocorrencias) {
+    let summary = `## Análise de Workflows do GitHub Actions\n\n**Score Geral:** ${scoreGeral}/100\n\n`;
+    if (ocorrencias.length > 0) {
+        summary += `### Ocorrências (${ocorrencias.length})\n\n`;
+        for (const ocorrencia of ocorrencias.slice(0, MAX_ANNOTATIONS)) {
+            summary += `- **${ocorrencia.nivel?.toUpperCase() || 'INFO'}**: \`${ocorrencia.relPath}:${ocorrencia.linha || 1}\` - ${ocorrencia.mensagem}\n`;
+        }
+        if (ocorrencias.length > MAX_ANNOTATIONS) {
+            summary += `\n*... e mais ${ocorrencias.length - MAX_ANNOTATIONS} ocorrências.*`;
+        }
+    }
+    else {
+        summary += `Nenhuma ocorrência encontrada. Excelente!\n`;
+    }
+    return summary;
+}
+export function gerarAnnotations(ocorrencias) {
+    return ocorrencias.slice(0, MAX_ANNOTATIONS).map(ocorrencia => {
+        const linha = ocorrencia.linha || 1;
+        return {
+            path: ocorrencia.relPath,
+            start_line: linha,
+            end_line: linha,
+            annotation_level: nivelParaAnnotation(ocorrencia.nivel),
+            message: ocorrencia.mensagem
+        };
+    });
+}
+export async function completarCheckRun(octokit, owner, repo, checkRunId, scoreGeral, ocorrencias, options = {}) {
+    const { status = 'success' } = options;
+    const conclusion = scoreGeral >= PASS_THRESHOLD ? 'success' : 'failure';
+    const finalConclusion = status === 'failure' ? 'failure' : conclusion;
+    try {
+        await octokit.request('PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}', {
+            owner,
+            repo,
+            check_run_id: checkRunId,
+            status: 'completed',
+            conclusion: finalConclusion,
+            output: {
+                title: GithubWebhookMensagens.checkRunTitle(scoreGeral),
+                summary: gerarResumoAnalise(scoreGeral, ocorrencias),
+                annotations: gerarAnnotations(ocorrencias)
+            }
+        });
+    }
+    catch (err) {
+        const error = err;
+        console.error(GithubWebhookMensagens.erroAnotacaoCheckRun(error.message), err);
+        throw err;
+    }
+}
+//# sourceMappingURL=check-run-builder.js.map

package/dist/app/github/app/check-run-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-run-builder.js","sourceRoot":"","sources":["../../../../src/app/github/app/check-run-builder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAKxD,OAAO,EAAwB,MAAM,cAAc,CAAC;AAEpD,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AACjC,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,cAAc,GAAG,iCAAiC,CAAC;AAEhE,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,WAAyB;IAC9E,IAAI,OAAO,GAAG,iEAAiE,UAAU,UAAU,CAAC;IACpG,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,oBAAoB,WAAW,CAAC,MAAM,OAAO,CAAC;QACzD,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,OAAO,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,MAAM,SAAS,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,IAAI,CAAC,QAAQ,UAAU,CAAC,QAAQ,IAAI,CAAC;QACjJ,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACzC,OAAO,IAAI,iBAAiB,WAAW,CAAC,MAAM,GAAG,eAAe,gBAAgB,CAAC;QACnF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,6CAA6C,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAyB;IACxD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;QAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,OAAO;YACxB,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,KAAK;YACf,gBAAgB,EAAE,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC;YACvD,OAAO,EAAE,UAAU,CAAC,QAAQ;SAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAwB,EACxB,KAAa,EACb,IAAY,EACZ,UAAkB,EAClB,UAAkB,EAClB,WAAyB,EACzB,UAAoC,EAAE;IAEtC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC;IACvC,MAAM,UAAU,GAAG,UAAU,IAAI,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,eAAe,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAEtE,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,OAAO,CAAC,uDAAuD,EAAE;YAC7E,KAAK;YACL,IAAI;YACJ,YAAY,EAAE,UAAU;YACxB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,eAAe;YAC3B,MAAM,EAAE;gBACN,KAAK,EAAE,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC;gBACvD,OAAO,EAAE,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC;gBACpD,WAAW,EAAE,gBAAgB,CAAC,WAAW,CAAC;aAC3C;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,GAAY,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/E,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { GithubWebhookMensagens } from '@core/messages';\n\nimport type { Ocorrencia } from '@';\n\nimport type { CheckRunAnnotation, CompletarCheckRunOptions } from '../../../types/github/app.js';\nimport { type OctokitInstance } from './octokit.js';\n\nexport const MAX_ANNOTATIONS = 50;\nexport const PASS_THRESHOLD = 70;\nexport const DEFAULT_SCORE = 100;\nexport const CHECK_RUN_NAME = 'Tutanus GitHub Actions Analyzer';\n\nfunction nivelParaAnnotation(nivel?: string): CheckRunAnnotation['annotation_level'] {\n  if (nivel === 'erro') return 'failure';\n  if (nivel === 'aviso') return 'warning';\n  return 'notice';\n}\n\nexport function gerarResumoAnalise(scoreGeral: number, ocorrencias: Ocorrencia[]): string {\n  let summary = `## Análise de Workflows do GitHub Actions\\n\\n**Score Geral:** ${scoreGeral}/100\\n\\n`;\n  if (ocorrencias.length > 0) {\n    summary += `### Ocorrências (${ocorrencias.length})\\n\\n`;\n    for (const ocorrencia of ocorrencias.slice(0, MAX_ANNOTATIONS)) {\n      summary += `- **${ocorrencia.nivel?.toUpperCase() || 'INFO'}**: \\`${ocorrencia.relPath}:${ocorrencia.linha || 1}\\` - ${ocorrencia.mensagem}\\n`;\n    }\n    if (ocorrencias.length > MAX_ANNOTATIONS) {\n      summary += `\\n*... e mais ${ocorrencias.length - MAX_ANNOTATIONS} ocorrências.*`;\n    }\n  } else {\n    summary += `Nenhuma ocorrência encontrada. Excelente!\\n`;\n  }\n  return summary;\n}\n\nexport function gerarAnnotations(ocorrencias: Ocorrencia[]): CheckRunAnnotation[] {\n  return ocorrencias.slice(0, MAX_ANNOTATIONS).map(ocorrencia => {\n    const linha = ocorrencia.linha || 1;\n    return {\n      path: ocorrencia.relPath,\n      start_line: linha,\n      end_line: linha,\n      annotation_level: nivelParaAnnotation(ocorrencia.nivel),\n      message: ocorrencia.mensagem\n    };\n  });\n}\n\nexport async function completarCheckRun(\n  octokit: OctokitInstance,\n  owner: string,\n  repo: string,\n  checkRunId: number,\n  scoreGeral: number,\n  ocorrencias: Ocorrencia[],\n  options: CompletarCheckRunOptions = {}\n): Promise<void> {\n  const { status = 'success' } = options;\n  const conclusion = scoreGeral >= PASS_THRESHOLD ? 'success' : 'failure';\n  const finalConclusion = status === 'failure' ? 'failure' : conclusion;\n\n  try {\n    await octokit.request('PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}', {\n      owner,\n      repo,\n      check_run_id: checkRunId,\n      status: 'completed',\n      conclusion: finalConclusion,\n      output: {\n        title: GithubWebhookMensagens.checkRunTitle(scoreGeral),\n        summary: gerarResumoAnalise(scoreGeral, ocorrencias),\n        annotations: gerarAnnotations(ocorrencias)\n      }\n    });\n  } catch (err: unknown) {\n    const error = err as Error;\n    console.error(GithubWebhookMensagens.erroAnotacaoCheckRun(error.message), err);\n    throw err;\n  }\n}\n"]}

package/dist/app/github/app/check-suite-handler.d.ts

@@ -0,0 +1,4 @@
+import type { App } from '@octokit/app';
+import type { CheckSuitePayload } from '../../../types/github/app.js';
+export declare function processarCheckSuite(app: App, payload: CheckSuitePayload): Promise<void>;
+//# sourceMappingURL=check-suite-handler.d.ts.map

package/dist/app/github/app/check-suite-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-suite-handler.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/check-suite-handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAKtE,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD7F"}

package/dist/app/github/app/check-suite-handler.js

@@ -0,0 +1,54 @@
+import { GithubWebhookMensagens, messages } from '../../../core/messages/index.js';
+import { statsStore } from '../dashboard/stats-store.js';
+import { CHECK_RUN_NAME, completarCheckRun, DEFAULT_SCORE } from './check-run-builder.js';
+import { analisarWorkflows, buscarWorkflows } from './workflow-reader.js';
+export async function processarCheckSuite(app, payload) {
+    const { repository, check_suite, installation } = payload;
+    const owner = repository.owner.login;
+    const repo = repository.name;
+    const headSha = check_suite.head_sha;
+    if (!installation?.id)
+        return;
+    const octokit = await app.getInstallationOctokit(installation.id);
+    const { data: checkRun } = await octokit.request('POST /repos/{owner}/{repo}/check-runs', {
+        owner,
+        repo,
+        name: CHECK_RUN_NAME,
+        head_sha: headSha,
+        status: 'in_progress'
+    });
+    try {
+        const workflows = await buscarWorkflows(octokit, owner, repo, headSha);
+        if (workflows.length === 0) {
+            await completarCheckRun(octokit, owner, repo, checkRun.id, DEFAULT_SCORE, [], { status: 'success' });
+            return;
+        }
+        const { ocorrencias, scoreGeral } = await analisarWorkflows(octokit, owner, repo, headSha, workflows);
+        statsStore.recordAnalysis({
+            repository: `${owner}/${repo}`,
+            event: 'check_suite',
+            score: scoreGeral,
+            workflowsCount: workflows.length,
+            occurrencesCount: ocorrencias.length
+        });
+        await completarCheckRun(octokit, owner, repo, checkRun.id, scoreGeral, ocorrencias);
+    }
+    catch (err) {
+        const error = err;
+        messages.log.erro(GithubWebhookMensagens.erroAnalise(error.message));
+        await octokit.request('PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}', {
+            owner,
+            repo,
+            check_run_id: checkRun.id,
+            status: 'completed',
+            conclusion: 'failure',
+            output: {
+                title: GithubWebhookMensagens.erroAnaliseTitle,
+                summary: GithubWebhookMensagens.erroAnalise(error.message)
+            }
+        }).catch((errAnotacao) => {
+            messages.log.erro(GithubWebhookMensagens.erroAnotacaoCheckRun(errAnotacao.message));
+        });
+    }
+}
+//# sourceMappingURL=check-suite-handler.js.map

package/dist/app/github/app/check-suite-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-suite-handler.js","sourceRoot":"","sources":["../../../../src/app/github/app/check-suite-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAIlE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAC,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAQ,EAAE,OAA0B;IAC5E,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,YAAY,EAAE,EAAE;QAAE,OAAO;IAE9B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,uCAAuC,EAAE;QACxF,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACtG,UAAU,CAAC,cAAc,CAAC;YACxB,UAAU,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE;YAC9B,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE,UAAU;YACjB,cAAc,EAAE,SAAS,CAAC,MAAM;YAChC,gBAAgB,EAAE,WAAW,CAAC,MAAM;SACrC,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,GAAY,CAAC;QAC3B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,CAAC,OAAO,CAAC,uDAAuD,EAAE;YAC7E,KAAK;YACL,IAAI;YACJ,YAAY,EAAE,QAAQ,CAAC,EAAE;YACzB,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE;gBACN,KAAK,EAAE,sBAAsB,CAAC,gBAAgB;gBAC9C,OAAO,EAAE,sBAAsB,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;aAC3D;SACF,CAAC,CAAC,KAAK,CAAC,CAAC,WAAkB,EAAE,EAAE;YAC9B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { GithubWebhookMensagens, messages } from '@core/messages';\nimport type { App } from '@octokit/app';\n\nimport type { CheckSuitePayload } from '../../../types/github/app.js';\nimport { statsStore } from '../dashboard/stats-store.js';\nimport { CHECK_RUN_NAME, completarCheckRun,DEFAULT_SCORE } from './check-run-builder.js';\nimport { analisarWorkflows, buscarWorkflows } from './workflow-reader.js';\n\nexport async function processarCheckSuite(app: App, payload: CheckSuitePayload): Promise<void> {\n  const { repository, check_suite, installation } = payload;\n  const owner = repository.owner.login;\n  const repo = repository.name;\n  const headSha = check_suite.head_sha;\n  if (!installation?.id) return;\n\n  const octokit = await app.getInstallationOctokit(installation.id);\n  const { data: checkRun } = await octokit.request('POST /repos/{owner}/{repo}/check-runs', {\n    owner,\n    repo,\n    name: CHECK_RUN_NAME,\n    head_sha: headSha,\n    status: 'in_progress'\n  });\n\n  try {\n    const workflows = await buscarWorkflows(octokit, owner, repo, headSha);\n    if (workflows.length === 0) {\n      await completarCheckRun(octokit, owner, repo, checkRun.id, DEFAULT_SCORE, [], { status: 'success' });\n      return;\n    }\n\n    const { ocorrencias, scoreGeral } = await analisarWorkflows(octokit, owner, repo, headSha, workflows);\n    statsStore.recordAnalysis({\n      repository: `${owner}/${repo}`,\n      event: 'check_suite',\n      score: scoreGeral,\n      workflowsCount: workflows.length,\n      occurrencesCount: ocorrencias.length\n    });\n    await completarCheckRun(octokit, owner, repo, checkRun.id, scoreGeral, ocorrencias);\n  } catch (err: unknown) {\n    const error = err as Error;\n    messages.log.erro(GithubWebhookMensagens.erroAnalise(error.message));\n    await octokit.request('PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}', {\n      owner,\n      repo,\n      check_run_id: checkRun.id,\n      status: 'completed',\n      conclusion: 'failure',\n      output: {\n        title: GithubWebhookMensagens.erroAnaliseTitle,\n        summary: GithubWebhookMensagens.erroAnalise(error.message)\n      }\n    }).catch((errAnotacao: Error) => {\n      messages.log.erro(GithubWebhookMensagens.erroAnotacaoCheckRun(errAnotacao.message));\n    });\n  }\n}\n"]}

package/dist/app/github/app/index.d.ts

@@ -0,0 +1,13 @@
+export * from '../dashboard/index.js';
+export * from './check-run-builder.js';
+export * from './check-suite-handler.js';
+export * from './installation-store.js';
+export * from './issues-handler.js';
+export * from './octokit.js';
+export * from './pr-review-handler.js';
+export * from './repo-downloader.js';
+export * from './server.js';
+export * from './setup-routes.js';
+export * from './webhook-handler.js';
+export * from './workflow-reader.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/github/app/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC"}

package/dist/app/github/app/index.js

@@ -0,0 +1,13 @@
+export * from '../dashboard/index.js';
+export * from './check-run-builder.js';
+export * from './check-suite-handler.js';
+export * from './installation-store.js';
+export * from './issues-handler.js';
+export * from './octokit.js';
+export * from './pr-review-handler.js';
+export * from './repo-downloader.js';
+export * from './server.js';
+export * from './setup-routes.js';
+export * from './webhook-handler.js';
+export * from './workflow-reader.js';
+//# sourceMappingURL=index.js.map

package/dist/app/github/app/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/app/github/app/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC","sourcesContent":["export * from '../dashboard/index.js';\nexport * from './check-run-builder.js';\nexport * from './check-suite-handler.js';\nexport * from './installation-store.js';\nexport * from './issues-handler.js';\nexport * from './octokit.js';\nexport * from './pr-review-handler.js';\nexport * from './repo-downloader.js';\nexport * from './server.js';\nexport * from './setup-routes.js';\nexport * from './webhook-handler.js';\nexport * from './workflow-reader.js';\n"]}

package/dist/app/github/app/installation-store.d.ts

@@ -0,0 +1,8 @@
+import type { InstallationConfig } from '../../../types/github/app.js';
+export type { InstallationConfig };
+export declare function obterConfigInstalacao(installationId: number): InstallationConfig;
+export declare function salvarConfigInstalacao(partial: Partial<InstallationConfig> & {
+    installationId: number;
+}): InstallationConfig;
+export declare function listarConfigsInstalacao(): InstallationConfig[];
+//# sourceMappingURL=installation-store.d.ts.map

package/dist/app/github/app/installation-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation-store.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/installation-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGvE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAkEnC,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,kBAAkB,CAQhF;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,GAChE,kBAAkB,CAiBpB;AAED,wBAAgB,uBAAuB,IAAI,kBAAkB,EAAE,CAE9D"}

package/dist/app/github/app/installation-store.js

@@ -0,0 +1,99 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { decryptJson, encryptJson } from '../middleware/crypto.js';
+const DEFAULT_CONFIG = {
+    pushAnalysisEnabled: true,
+    pullRequestAnalysisEnabled: true,
+    fast: false,
+    incrementalOnPush: true
+};
+function storePath() {
+    const base = process.env.TUTANUS_DATA_DIR || join(process.cwd(), '.tutanus-data');
+    return join(base, 'installations.json');
+}
+function isStringRecord(val) {
+    if (typeof val !== 'object' || val === null)
+        return false;
+    return Object.values(val).every(v => typeof v === 'string');
+}
+function isInstallationConfig(val) {
+    if (typeof val !== 'object' || val === null)
+        return false;
+    const v = val;
+    return typeof v.installationId === 'number' && typeof v.updatedAt === 'number';
+}
+function loadAll() {
+    const path = storePath();
+    if (!existsSync(path))
+        return {};
+    try {
+        const raw = readFileSync(path, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!isStringRecord(parsed))
+            return {};
+        const result = {};
+        for (const [key, val] of Object.entries(parsed)) {
+            try {
+                const decrypted = decryptJson(val);
+                if (isInstallationConfig(decrypted)) {
+                    result[key] = decrypted;
+                }
+            }
+            catch {
+                try {
+                    const fallback = JSON.parse(val);
+                    if (isInstallationConfig(fallback)) {
+                        result[key] = fallback;
+                    }
+                }
+                catch {
+                    return {};
+                }
+            }
+        }
+        return result;
+    }
+    catch {
+        return {};
+    }
+}
+function saveAll(data) {
+    const path = storePath();
+    mkdirSync(dirname(path), { recursive: true });
+    const encrypted = {};
+    for (const [key, val] of Object.entries(data)) {
+        encrypted[key] = encryptJson(val);
+    }
+    writeFileSync(path, JSON.stringify(encrypted, null, 2), 'utf-8');
+}
+export function obterConfigInstalacao(installationId) {
+    const all = loadAll();
+    const key = String(installationId);
+    return all[key] ?? {
+        installationId,
+        ...DEFAULT_CONFIG,
+        updatedAt: Date.now()
+    };
+}
+export function salvarConfigInstalacao(partial) {
+    const all = loadAll();
+    const key = String(partial.installationId);
+    const atual = all[key] ?? {
+        installationId: partial.installationId,
+        ...DEFAULT_CONFIG,
+        updatedAt: Date.now()
+    };
+    const merged = {
+        ...atual,
+        ...partial,
+        installationId: partial.installationId,
+        updatedAt: Date.now()
+    };
+    all[key] = merged;
+    saveAll(all);
+    return merged;
+}
+export function listarConfigsInstalacao() {
+    return Object.values(loadAll()).sort((a, b) => b.updatedAt - a.updatedAt);
+}
+//# sourceMappingURL=installation-store.js.map

package/dist/app/github/app/installation-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation-store.js","sourceRoot":"","sources":["../../../../src/app/github/app/installation-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAInE,MAAM,cAAc,GAA6D;IAC/E,mBAAmB,EAAE,IAAI;IACzB,0BAA0B,EAAE,IAAI;IAChC,IAAI,EAAE,KAAK;IACX,iBAAiB,EAAE,IAAI;CACxB,CAAC;AAEF,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,eAAe,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAY;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;AACjF,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,MAAM,GAAuC,EAAE,CAAC;QACtD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,WAAW,CAAU,GAAG,CAAC,CAAC;gBAC5C,IAAI,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;oBACpC,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;gBAC1B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC1C,IAAI,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACnC,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;oBACzB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAwC;IACvD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,SAAS,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,cAAsB;IAC1D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI;QACjB,cAAc;QACd,GAAG,cAAc;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAiE;IAEjE,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI;QACxB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,GAAG,cAAc;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,MAAM,MAAM,GAAuB;QACjC,GAAG,KAAK;QACR,GAAG,OAAO;QACV,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\n\nimport type { InstallationConfig } from '../../../types/github/app.js';\nimport { decryptJson, encryptJson } from '../middleware/crypto.js';\n\nexport type { InstallationConfig };\n\nconst DEFAULT_CONFIG: Omit<InstallationConfig, 'installationId' | 'updatedAt'> = {\n  pushAnalysisEnabled: true,\n  pullRequestAnalysisEnabled: true,\n  fast: false,\n  incrementalOnPush: true\n};\n\nfunction storePath(): string {\n  const base = process.env.TUTANUS_DATA_DIR || join(process.cwd(), '.tutanus-data');\n  return join(base, 'installations.json');\n}\n\nfunction isStringRecord(val: unknown): val is Record<string, string> {\n  if (typeof val !== 'object' || val === null) return false;\n  return Object.values(val).every(v => typeof v === 'string');\n}\n\nfunction isInstallationConfig(val: unknown): val is InstallationConfig {\n  if (typeof val !== 'object' || val === null) return false;\n  const v = val as Record<string, unknown>;\n  return typeof v.installationId === 'number' && typeof v.updatedAt === 'number';\n}\n\nfunction loadAll(): Record<string, InstallationConfig> {\n  const path = storePath();\n  if (!existsSync(path)) return {};\n  try {\n    const raw = readFileSync(path, 'utf-8');\n    const parsed: unknown = JSON.parse(raw);\n    if (!isStringRecord(parsed)) return {};\n    const result: Record<string, InstallationConfig> = {};\n    for (const [key, val] of Object.entries(parsed)) {\n      try {\n        const decrypted = decryptJson<unknown>(val);\n        if (isInstallationConfig(decrypted)) {\n          result[key] = decrypted;\n        }\n      } catch {\n        try {\n          const fallback: unknown = JSON.parse(val);\n          if (isInstallationConfig(fallback)) {\n            result[key] = fallback;\n          }\n        } catch {\n          return {};\n        }\n      }\n    }\n    return result;\n  } catch {\n    return {};\n  }\n}\n\nfunction saveAll(data: Record<string, InstallationConfig>): void {\n  const path = storePath();\n  mkdirSync(dirname(path), { recursive: true });\n  const encrypted: Record<string, string> = {};\n  for (const [key, val] of Object.entries(data)) {\n    encrypted[key] = encryptJson(val);\n  }\n  writeFileSync(path, JSON.stringify(encrypted, null, 2), 'utf-8');\n}\n\nexport function obterConfigInstalacao(installationId: number): InstallationConfig {\n  const all = loadAll();\n  const key = String(installationId);\n  return all[key] ?? {\n    installationId,\n    ...DEFAULT_CONFIG,\n    updatedAt: Date.now()\n  };\n}\n\nexport function salvarConfigInstalacao(\n  partial: Partial<InstallationConfig> & { installationId: number }\n): InstallationConfig {\n  const all = loadAll();\n  const key = String(partial.installationId);\n  const atual = all[key] ?? {\n    installationId: partial.installationId,\n    ...DEFAULT_CONFIG,\n    updatedAt: Date.now()\n  };\n  const merged: InstallationConfig = {\n    ...atual,\n    ...partial,\n    installationId: partial.installationId,\n    updatedAt: Date.now()\n  };\n  all[key] = merged;\n  saveAll(all);\n  return merged;\n}\n\nexport function listarConfigsInstalacao(): InstallationConfig[] {\n  return Object.values(loadAll()).sort((a, b) => b.updatedAt - a.updatedAt);\n}\n"]}

package/dist/app/github/app/issues-handler.d.ts

@@ -0,0 +1,4 @@
+import type { App } from '@octokit/app';
+import type { IssuesPayload } from '../../../types/github/app.js';
+export declare function processarIssues(app: App, payload: IssuesPayload): Promise<void>;
+//# sourceMappingURL=issues-handler.d.ts.map

package/dist/app/github/app/issues-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issues-handler.d.ts","sourceRoot":"","sources":["../../../../src/app/github/app/issues-handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAOlE,wBAAsB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDrF"}