tutanus 0.13.0 → 0.13.2

package/dist/app/github/jobs/full-analysis-job.js

@@ -0,0 +1,78 @@
+import { registroAnalistas } from '../../../analysts/registry/index.js';
+import { config } from '../../../core/config/index.js';
+import { executarInquisicao, iniciarInquisicao } from '../../../core/execution/index.js';
+import { aplicarSupressaoOcorrencias } from '../../../core/parsing/index.js';
+import { dedupeOcorrencias } from '../../../shared/data-processing/index.js';
+import { downloadRepo } from '../app/repo-downloader.js';
+import { calcularScoreGeral, resumirPorSeveridade, resumirPorTipo, simplificarOcorrencias } from './full-analysis-utils.js';
+import { atualizarJob, executarJob } from './job-manager.js';
+export { calcularScoreGeral, resumirPorSeveridade, resumirPorTipo, simplificarOcorrencias };
+export async function executarAnaliseInterna(repoDir, options) {
+    const leituraInicial = await iniciarInquisicao(repoDir, {
+        incluirMetadados: false,
+        skipExec: true
+    });
+    const fileEntriesComAst = leituraInicial.fileEntries.map(entry => ({
+        ...entry,
+        ast: undefined
+    }));
+    let tecnicas = registroAnalistas;
+    if (options.analistas && options.analistas.length > 0) {
+        tecnicas = tecnicas.filter(a => {
+            const nome = a.nome?.toLowerCase() || '';
+            return (options.analistas ?? []).some((analista) => nome.includes(analista.toLowerCase()));
+        });
+    }
+    if (options.fast) {
+        tecnicas = tecnicas.filter(a => {
+            const categoria = a.categoria?.toLowerCase() || '';
+            return !categoria.includes('ci/cd') && !categoria.includes('workflow');
+        });
+        const filtered = fileEntriesComAst.filter((fe) => {
+            const rel = fe.relPath || '';
+            return rel.startsWith('src/') && !rel.includes('.test.') && !rel.includes('.spec.');
+        });
+        fileEntriesComAst.length = 0;
+        fileEntriesComAst.push(...filtered);
+    }
+    const resultadoExecucao = await executarInquisicao(fileEntriesComAst, tecnicas, repoDir, undefined, { verbose: false, compact: true, fast: options.fast ?? false });
+    let ocorrencias = dedupeOcorrencias(resultadoExecucao.ocorrencias || []);
+    ocorrencias = aplicarSupressaoOcorrencias(ocorrencias, config);
+    return {
+        totalArquivos: resultadoExecucao.totalArquivos,
+        arquivosAnalisados: resultadoExecucao.arquivosAnalisados || [],
+        todasOcorrencias: ocorrencias,
+        fileEntriesComAst
+    };
+}
+export async function iniciarAnaliseCompleta(app, jobId, job) {
+    await executarJob(jobId, async () => {
+        atualizarJob(jobId, { status: 'baixando' });
+        const { repoDir, cleanup } = await downloadRepo(app, job.installationId, job.owner, job.repo, job.ref);
+        try {
+            atualizarJob(jobId, { status: 'analisando' });
+            const inicio = Date.now();
+            const { totalArquivos, arquivosAnalisados, todasOcorrencias } = await executarAnaliseInterna(repoDir, job.options);
+            const ocorrencias = simplificarOcorrencias(todasOcorrencias);
+            const resultado = {
+                totalArquivos,
+                totalOcorrencias: ocorrencias.length,
+                duracaoMs: Date.now() - inicio,
+                arquivosAnalisados,
+                ocorrencias,
+                scoreGeral: calcularScoreGeral(totalArquivos, ocorrencias),
+                resumoPorTipo: resumirPorTipo(ocorrencias),
+                resumoPorSeveridade: resumirPorSeveridade(ocorrencias)
+            };
+            atualizarJob(jobId, {
+                status: 'completo',
+                finalizadoEm: Date.now(),
+                resultado
+            });
+        }
+        finally {
+            cleanup();
+        }
+    });
+}
+//# sourceMappingURL=full-analysis-job.js.map

package/dist/app/github/jobs/full-analysis-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"full-analysis-job.js","sourceRoot":"","sources":["../../../../src/app/github/jobs/full-analysis-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG5D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE7D,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACvB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,OAAmC;IAEnC,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE;QACtD,gBAAgB,EAAE,KAAK;QACvB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,MAAM,iBAAiB,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjE,GAAG,KAAK;QACR,GAAG,EAAE,SAAS;KACf,CAAC,CAAC,CAAC;IAEJ,IAAI,QAAQ,GAAG,iBAAiB,CAAC;IAEjC,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAC7B,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAChE,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CACnC,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAC7B,MAAM,SAAS,GAAI,CAA4B,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC/E,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAwB,EAAE,EAAE;YACrE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QACH,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7B,iBAAiB,CAAC,IAAI,CAAC,GAAI,QAAqC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,kBAAkB,CAChD,iBAAiB,EACjB,QAAQ,EACR,OAAO,EACP,SAAS,EACT,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAC/D,CAAC;IAEF,IAAI,WAAW,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACzE,WAAW,GAAG,2BAA2B,CACvC,WAAW,EACX,MAA2D,CAC5D,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,iBAAiB,CAAC,aAAa;QAC9C,kBAAkB,EAAE,iBAAiB,CAAC,kBAAkB,IAAI,EAAE;QAC9D,gBAAgB,EAAE,WAAW;QAC7B,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAQ,EACR,KAAa,EACb,GAAoB;IAEpB,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAClC,YAAY,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAE5C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAC7C,GAAG,EACH,GAAG,CAAC,cAAc,EAClB,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,GAAG,CACR,CAAC;QAEF,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE1B,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,GAC3D,MAAM,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAErD,MAAM,WAAW,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;YAE7D,MAAM,SAAS,GAAuB;gBACpC,aAAa;gBACb,gBAAgB,EAAE,WAAW,CAAC,MAAM;gBACpC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;gBAC9B,kBAAkB;gBAClB,WAAW;gBACX,UAAU,EAAE,kBAAkB,CAAC,aAAa,EAAE,WAAW,CAAC;gBAC1D,aAAa,EAAE,cAAc,CAAC,WAAW,CAAC;gBAC1C,mBAAmB,EAAE,oBAAoB,CAAC,WAAW,CAAC;aACvD,CAAC;YAEF,YAAY,CAAC,KAAK,EAAE;gBAClB,MAAM,EAAE,UAAU;gBAClB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;gBACxB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { registroAnalistas } from '@analysts/registry';\nimport { config } from '@core/config';\nimport { executarInquisicao, iniciarInquisicao } from '@core/execution';\nimport { aplicarSupressaoOcorrencias } from '@core/parsing';\nimport type { App } from '@octokit/app';\nimport { dedupeOcorrencias } from '@shared/data-processing';\n\nimport type { AnaliseInternaResult, FullAnalysisJob, FullAnalysisResult } from '../../../types/github/app.js';\nimport { downloadRepo } from '../app/repo-downloader.js';\nimport {\n  calcularScoreGeral,\n  resumirPorSeveridade,\n  resumirPorTipo,\n  simplificarOcorrencias\n} from './full-analysis-utils.js';\nimport { atualizarJob, executarJob } from './job-manager.js';\n\nexport {\n  calcularScoreGeral,\n  resumirPorSeveridade,\n  resumirPorTipo,\n  simplificarOcorrencias\n};\n\nexport async function executarAnaliseInterna(\n  repoDir: string,\n  options: FullAnalysisJob['options']\n): Promise<AnaliseInternaResult> {\n  const leituraInicial = await iniciarInquisicao(repoDir, {\n    incluirMetadados: false,\n    skipExec: true\n  });\n\n  const fileEntriesComAst = leituraInicial.fileEntries.map(entry => ({\n    ...entry,\n    ast: undefined\n  }));\n\n  let tecnicas = registroAnalistas;\n\n  if (options.analistas && options.analistas.length > 0) {\n    tecnicas = tecnicas.filter(a => {\n      const nome = (a as { nome?: string }).nome?.toLowerCase() || '';\n      return (options.analistas ?? []).some(\n        (analista: string) => nome.includes(analista.toLowerCase())\n      );\n    });\n  }\n\n  if (options.fast) {\n    tecnicas = tecnicas.filter(a => {\n      const categoria = (a as { categoria?: string }).categoria?.toLowerCase() || '';\n      return !categoria.includes('ci/cd') && !categoria.includes('workflow');\n    });\n\n    const filtered = fileEntriesComAst.filter((fe: { relPath?: string }) => {\n      const rel = fe.relPath || '';\n      return rel.startsWith('src/') && !rel.includes('.test.') && !rel.includes('.spec.');\n    });\n    fileEntriesComAst.length = 0;\n    fileEntriesComAst.push(...(filtered as typeof fileEntriesComAst));\n  }\n\n  const resultadoExecucao = await executarInquisicao(\n    fileEntriesComAst,\n    tecnicas,\n    repoDir,\n    undefined,\n    { verbose: false, compact: true, fast: options.fast ?? false }\n  );\n\n  let ocorrencias = dedupeOcorrencias(resultadoExecucao.ocorrencias || []);\n  ocorrencias = aplicarSupressaoOcorrencias(\n    ocorrencias,\n    config as Parameters<typeof aplicarSupressaoOcorrencias>[1]\n  );\n\n  return {\n    totalArquivos: resultadoExecucao.totalArquivos,\n    arquivosAnalisados: resultadoExecucao.arquivosAnalisados || [],\n    todasOcorrencias: ocorrencias,\n    fileEntriesComAst\n  };\n}\n\nexport async function iniciarAnaliseCompleta(\n  app: App,\n  jobId: string,\n  job: FullAnalysisJob\n): Promise<void> {\n  await executarJob(jobId, async () => {\n    atualizarJob(jobId, { status: 'baixando' });\n\n    const { repoDir, cleanup } = await downloadRepo(\n      app,\n      job.installationId,\n      job.owner,\n      job.repo,\n      job.ref\n    );\n\n    try {\n      atualizarJob(jobId, { status: 'analisando' });\n      const inicio = Date.now();\n\n      const { totalArquivos, arquivosAnalisados, todasOcorrencias } =\n        await executarAnaliseInterna(repoDir, job.options);\n\n      const ocorrencias = simplificarOcorrencias(todasOcorrencias);\n\n      const resultado: FullAnalysisResult = {\n        totalArquivos,\n        totalOcorrencias: ocorrencias.length,\n        duracaoMs: Date.now() - inicio,\n        arquivosAnalisados,\n        ocorrencias,\n        scoreGeral: calcularScoreGeral(totalArquivos, ocorrencias),\n        resumoPorTipo: resumirPorTipo(ocorrencias),\n        resumoPorSeveridade: resumirPorSeveridade(ocorrencias)\n      };\n\n      atualizarJob(jobId, {\n        status: 'completo',\n        finalizadoEm: Date.now(),\n        resultado\n      });\n    } finally {\n      cleanup();\n    }\n  });\n}\n"]}

package/dist/app/github/jobs/full-analysis-utils.d.ts

@@ -0,0 +1,6 @@
+import type { FullAnalysisResult } from '../../../types/github/app.js';
+export declare function calcularScoreGeral(totalArquivos: number, ocorrencias: FullAnalysisResult['ocorrencias']): number;
+export declare function resumirPorTipo(ocorrencias: FullAnalysisResult['ocorrencias']): Record<string, number>;
+export declare function resumirPorSeveridade(ocorrencias: FullAnalysisResult['ocorrencias']): Record<string, number>;
+export declare function simplificarOcorrencias(ocorrencias: FullAnalysisResult['ocorrencias']): FullAnalysisResult['ocorrencias'];
+//# sourceMappingURL=full-analysis-utils.d.ts.map

package/dist/app/github/jobs/full-analysis-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"full-analysis-utils.d.ts","sourceRoot":"","sources":["../../../../src/app/github/jobs/full-analysis-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAQvE,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,kBAAkB,CAAC,aAAa,CAAC,GAC7C,MAAM,CAeR;AAED,wBAAgB,cAAc,CAC5B,WAAW,EAAE,kBAAkB,CAAC,aAAa,CAAC,GAC7C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,kBAAkB,CAAC,aAAa,CAAC,GAC7C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,kBAAkB,CAAC,aAAa,CAAC,GAC7C,kBAAkB,CAAC,aAAa,CAAC,CAUnC"}

package/dist/app/github/jobs/full-analysis-utils.js

@@ -0,0 +1,50 @@
+const DEFAULT_SCORE = 100;
+const SCORE_PENALTY_ERROR = 5;
+const SCORE_PENALTY_WARNING = 2;
+const SCORE_PENALTY_INFO = 1;
+const MIN_SCORE = 0;
+export function calcularScoreGeral(totalArquivos, ocorrencias) {
+    if (totalArquivos === 0 || ocorrencias.length === 0)
+        return DEFAULT_SCORE;
+    let score = DEFAULT_SCORE;
+    for (const o of ocorrencias) {
+        const nivel = o.nivel?.toLowerCase() || 'info';
+        if (nivel === 'erro')
+            score -= SCORE_PENALTY_ERROR;
+        else if (nivel === 'aviso')
+            score -= SCORE_PENALTY_WARNING;
+        else
+            score -= SCORE_PENALTY_INFO;
+    }
+    const penaltyPerFile = Math.floor(ocorrencias.length / Math.max(totalArquivos, 1));
+    score -= penaltyPerFile;
+    return Math.max(MIN_SCORE, Math.min(DEFAULT_SCORE, score));
+}
+export function resumirPorTipo(ocorrencias) {
+    const resumo = {};
+    for (const o of ocorrencias) {
+        const tipo = o.tipo || 'desconhecido';
+        resumo[tipo] = (resumo[tipo] || 0) + 1;
+    }
+    return resumo;
+}
+export function resumirPorSeveridade(ocorrencias) {
+    const resumo = {};
+    for (const o of ocorrencias) {
+        const nivel = o.nivel?.toLowerCase() || 'info';
+        resumo[nivel] = (resumo[nivel] || 0) + 1;
+    }
+    return resumo;
+}
+export function simplificarOcorrencias(ocorrencias) {
+    return ocorrencias.map(o => ({
+        mensagem: typeof o.mensagem === 'string' ? o.mensagem : String(o.mensagem ?? ''),
+        relPath: typeof o.relPath === 'string' ? o.relPath : String(o.relPath ?? ''),
+        tipo: typeof o.tipo === 'string' ? o.tipo : undefined,
+        nivel: typeof o.nivel === 'string' ? o.nivel : undefined,
+        linha: typeof o.linha === 'number' ? o.linha : undefined,
+        coluna: typeof o.coluna === 'number' ? o.coluna : undefined,
+        sugestao: typeof o.sugestao === 'string' ? o.sugestao : undefined
+    }));
+}
+//# sourceMappingURL=full-analysis-utils.js.map

package/dist/app/github/jobs/full-analysis-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"full-analysis-utils.js","sourceRoot":"","sources":["../../../../src/app/github/jobs/full-analysis-utils.ts"],"names":[],"mappings":"AAEA,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EACrB,WAA8C;IAE9C,IAAI,aAAa,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAE1E,IAAI,KAAK,GAAG,aAAa,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,MAAM,CAAC;QAC/C,IAAI,KAAK,KAAK,MAAM;YAAE,KAAK,IAAI,mBAAmB,CAAC;aAC9C,IAAI,KAAK,KAAK,OAAO;YAAE,KAAK,IAAI,qBAAqB,CAAC;;YACtD,KAAK,IAAI,kBAAkB,CAAC;IACnC,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IACnF,KAAK,IAAI,cAAc,CAAC;IAExB,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,WAA8C;IAE9C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,cAAc,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,WAA8C;IAE9C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,MAAM,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAA8C;IAE9C,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;QAChF,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAC5E,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACrD,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxD,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxD,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QAC3D,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KAClE,CAAC,CAAC,CAAC;AACN,CAAC","sourcesContent":["import type { FullAnalysisResult } from '../../../types/github/app.js';\n\nconst DEFAULT_SCORE = 100;\nconst SCORE_PENALTY_ERROR = 5;\nconst SCORE_PENALTY_WARNING = 2;\nconst SCORE_PENALTY_INFO = 1;\nconst MIN_SCORE = 0;\n\nexport function calcularScoreGeral(\n  totalArquivos: number,\n  ocorrencias: FullAnalysisResult['ocorrencias']\n): number {\n  if (totalArquivos === 0 || ocorrencias.length === 0) return DEFAULT_SCORE;\n\n  let score = DEFAULT_SCORE;\n  for (const o of ocorrencias) {\n    const nivel = o.nivel?.toLowerCase() || 'info';\n    if (nivel === 'erro') score -= SCORE_PENALTY_ERROR;\n    else if (nivel === 'aviso') score -= SCORE_PENALTY_WARNING;\n    else score -= SCORE_PENALTY_INFO;\n  }\n\n  const penaltyPerFile = Math.floor(ocorrencias.length / Math.max(totalArquivos, 1));\n  score -= penaltyPerFile;\n\n  return Math.max(MIN_SCORE, Math.min(DEFAULT_SCORE, score));\n}\n\nexport function resumirPorTipo(\n  ocorrencias: FullAnalysisResult['ocorrencias']\n): Record<string, number> {\n  const resumo: Record<string, number> = {};\n  for (const o of ocorrencias) {\n    const tipo = o.tipo || 'desconhecido';\n    resumo[tipo] = (resumo[tipo] || 0) + 1;\n  }\n  return resumo;\n}\n\nexport function resumirPorSeveridade(\n  ocorrencias: FullAnalysisResult['ocorrencias']\n): Record<string, number> {\n  const resumo: Record<string, number> = {};\n  for (const o of ocorrencias) {\n    const nivel = o.nivel?.toLowerCase() || 'info';\n    resumo[nivel] = (resumo[nivel] || 0) + 1;\n  }\n  return resumo;\n}\n\nexport function simplificarOcorrencias(\n  ocorrencias: FullAnalysisResult['ocorrencias']\n): FullAnalysisResult['ocorrencias'] {\n  return ocorrencias.map(o => ({\n    mensagem: typeof o.mensagem === 'string' ? o.mensagem : String(o.mensagem ?? ''),\n    relPath: typeof o.relPath === 'string' ? o.relPath : String(o.relPath ?? ''),\n    tipo: typeof o.tipo === 'string' ? o.tipo : undefined,\n    nivel: typeof o.nivel === 'string' ? o.nivel : undefined,\n    linha: typeof o.linha === 'number' ? o.linha : undefined,\n    coluna: typeof o.coluna === 'number' ? o.coluna : undefined,\n    sugestao: typeof o.sugestao === 'string' ? o.sugestao : undefined\n  }));\n}\n"]}

package/dist/app/github/jobs/index.d.ts

@@ -0,0 +1,5 @@
+export { iniciarAutoFix } from './auto-fix-job.js';
+export { iniciarAnaliseCompleta } from './full-analysis-job.js';
+export * from './full-analysis-utils.js';
+export { atualizarJob, criarJob, listarJobs, obterJob } from './job-manager.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/github/jobs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/app/github/jobs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,YAAY,EAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/app/github/jobs/index.js

@@ -0,0 +1,5 @@
+export { iniciarAutoFix } from './auto-fix-job.js';
+export { iniciarAnaliseCompleta } from './full-analysis-job.js';
+export * from './full-analysis-utils.js';
+export { atualizarJob, criarJob, listarJobs, obterJob } from './job-manager.js';
+//# sourceMappingURL=index.js.map

package/dist/app/github/jobs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/app/github/jobs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,YAAY,EAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC","sourcesContent":["export { iniciarAutoFix } from './auto-fix-job.js';\nexport { iniciarAnaliseCompleta } from './full-analysis-job.js';\nexport * from './full-analysis-utils.js';\nexport { atualizarJob,criarJob, listarJobs, obterJob } from './job-manager.js';\n"]}

package/dist/app/github/jobs/job-manager.d.ts

@@ -0,0 +1,10 @@
+import type { FullAnalysisJob } from '../../../types/github/app.js';
+export declare function criarJob(owner: string, repo: string, installationId: number, ref: string, options: FullAnalysisJob['options']): string;
+export declare function obterJob(id: string): FullAnalysisJob | undefined;
+export declare function listarJobs(filtro?: {
+    owner?: string;
+    repo?: string;
+}): FullAnalysisJob[];
+export declare function atualizarJob(id: string, updates: Partial<FullAnalysisJob>): void;
+export declare function executarJob(id: string, execFn: () => Promise<void>): Promise<void>;
+//# sourceMappingURL=job-manager.d.ts.map

package/dist/app/github/jobs/job-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-manager.d.ts","sourceRoot":"","sources":["../../../../src/app/github/jobs/job-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,8BAA8B,CAAC;AAexF,wBAAgB,QAAQ,CACtB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,GAClC,MAAM,CAwBR;AAiBD,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEhE;AAED,wBAAgB,UAAU,CAAC,MAAM,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,EAAE,CAaxF;AAED,wBAAgB,YAAY,CAC1B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,GAChC,IAAI,CAQN;AAED,wBAAsB,WAAW,CAC/B,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAC1B,OAAO,CAAC,IAAI,CAAC,CA2Bf"}

package/dist/app/github/jobs/job-manager.js

@@ -0,0 +1,102 @@
+import { decryptJson, encryptJson } from '../middleware/crypto.js';
+const MAX_JOBS = 100;
+const MAX_CONCURRENT = 3;
+const jobs = new Map();
+const jobMeta = new Map();
+let activeCount = 0;
+const pendingQueue = [];
+function gerarId() {
+    return `job_${Date.now()}_${Math.random().toString(36).slice(2, 9)}`;
+}
+export function criarJob(owner, repo, installationId, ref, options) {
+    const id = gerarId();
+    jobMeta.set(id, {
+        id,
+        status: 'pendente',
+        criadoEm: Date.now(),
+        owner,
+        repo,
+        installationId,
+        ref,
+        options
+    });
+    if (jobMeta.size > MAX_JOBS) {
+        const entries = Array.from(jobMeta.entries())
+            .sort(([, a], [, b]) => a.criadoEm - b.criadoEm);
+        const toRemove = entries.slice(0, entries.length - MAX_JOBS);
+        for (const [key] of toRemove) {
+            jobMeta.delete(key);
+            jobs.delete(key);
+        }
+    }
+    return id;
+}
+function reconstruirJob(id) {
+    const meta = jobMeta.get(id);
+    if (!meta)
+        return undefined;
+    const encrypted = jobs.get(id);
+    let resultado;
+    if (encrypted) {
+        try {
+            resultado = decryptJson(encrypted);
+        }
+        catch {
+            resultado = undefined;
+        }
+    }
+    return { ...meta, resultado };
+}
+export function obterJob(id) {
+    return reconstruirJob(id);
+}
+export function listarJobs(filtro) {
+    const all = Array.from(jobMeta.keys())
+        .map(id => reconstruirJob(id))
+        .filter((j) => j !== undefined)
+        .sort((a, b) => b.criadoEm - a.criadoEm);
+    if (filtro?.owner && filtro?.repo) {
+        return all.filter(j => j.owner === filtro.owner && j.repo === filtro.repo);
+    }
+    return all;
+}
+export function atualizarJob(id, updates) {
+    const meta = jobMeta.get(id);
+    if (!meta)
+        return;
+    const { resultado, ...metaUpdates } = updates;
+    if (resultado) {
+        jobs.set(id, encryptJson(resultado));
+    }
+    Object.assign(meta, metaUpdates);
+}
+export async function executarJob(id, execFn) {
+    const job = reconstruirJob(id);
+    if (!job)
+        return;
+    if (activeCount >= MAX_CONCURRENT) {
+        await new Promise(resolve => {
+            pendingQueue.push(resolve);
+        });
+    }
+    activeCount++;
+    try {
+        await execFn();
+    }
+    catch (err) {
+        atualizarJob(id, {
+            status: 'erro',
+            finalizadoEm: Date.now(),
+            erro: err instanceof Error ? err.message : String(err)
+        });
+    }
+    finally {
+        activeCount--;
+        if (pendingQueue.length > 0) {
+            const next = pendingQueue.shift();
+            if (next)
+                next();
+        }
+    }
+}
+//# sourceMappingURL=job-manager.js.map

package/dist/app/github/jobs/job-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-manager.js","sourceRoot":"","sources":["../../../../src/app/github/jobs/job-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;AACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;AACtE,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,MAAM,YAAY,GAAsB,EAAE,CAAC;AAE3C,SAAS,OAAO;IACd,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,KAAa,EACb,IAAY,EACZ,cAAsB,EACtB,GAAW,EACX,OAAmC;IAEnC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;QACd,EAAE;QACF,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;QACpB,KAAK;QACL,IAAI;QACJ,cAAc;QACd,GAAG;QACH,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aAC1C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,EAAU;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,SAAyC,CAAC;IAC9C,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,SAAS,GAAG,WAAW,CAAqB,SAAS,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAAU;IACjC,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAA0C;IACnE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SACnC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;SACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAE3C,IAAI,MAAM,EAAE,KAAK,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;QAClC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACpB,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CACnD,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,EAAU,EACV,OAAiC;IAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IAC9C,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAU,EACV,MAA2B;IAE3B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO;IAEjB,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;YAChC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW,EAAE,CAAC;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,EAAE,EAAE;YACf,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACvD,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,WAAW,EAAE,CAAC;QACd,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI;gBAAE,IAAI,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type { FullAnalysisJob, FullAnalysisResult } from '../../../types/github/app.js';\nimport { decryptJson, encryptJson } from '../middleware/crypto.js';\n\nconst MAX_JOBS = 100;\nconst MAX_CONCURRENT = 3;\n\nconst jobs = new Map<string, string>();\nconst jobMeta = new Map<string, Omit<FullAnalysisJob, 'resultado'>>();\nlet activeCount = 0;\nconst pendingQueue: Array<() => void> = [];\n\nfunction gerarId(): string {\n  return `job_${Date.now()}_${Math.random().toString(36).slice(2, 9)}`;\n}\n\nexport function criarJob(\n  owner: string,\n  repo: string,\n  installationId: number,\n  ref: string,\n  options: FullAnalysisJob['options']\n): string {\n  const id = gerarId();\n  jobMeta.set(id, {\n    id,\n    status: 'pendente',\n    criadoEm: Date.now(),\n    owner,\n    repo,\n    installationId,\n    ref,\n    options\n  });\n\n  if (jobMeta.size > MAX_JOBS) {\n    const entries = Array.from(jobMeta.entries())\n      .sort(([, a], [, b]) => a.criadoEm - b.criadoEm);\n    const toRemove = entries.slice(0, entries.length - MAX_JOBS);\n    for (const [key] of toRemove) {\n      jobMeta.delete(key);\n      jobs.delete(key);\n    }\n  }\n\n  return id;\n}\n\nfunction reconstruirJob(id: string): FullAnalysisJob | undefined {\n  const meta = jobMeta.get(id);\n  if (!meta) return undefined;\n  const encrypted = jobs.get(id);\n  let resultado: FullAnalysisResult | undefined;\n  if (encrypted) {\n    try {\n      resultado = decryptJson<FullAnalysisResult>(encrypted);\n    } catch {\n      resultado = undefined;\n    }\n  }\n  return { ...meta, resultado };\n}\n\nexport function obterJob(id: string): FullAnalysisJob | undefined {\n  return reconstruirJob(id);\n}\n\nexport function listarJobs(filtro?: { owner?: string; repo?: string }): FullAnalysisJob[] {\n  const all = Array.from(jobMeta.keys())\n    .map(id => reconstruirJob(id))\n    .filter((j): j is FullAnalysisJob => j !== undefined)\n    .sort((a, b) => b.criadoEm - a.criadoEm);\n\n  if (filtro?.owner && filtro?.repo) {\n    return all.filter(j =>\n      j.owner === filtro.owner && j.repo === filtro.repo\n    );\n  }\n\n  return all;\n}\n\nexport function atualizarJob(\n  id: string,\n  updates: Partial<FullAnalysisJob>\n): void {\n  const meta = jobMeta.get(id);\n  if (!meta) return;\n  const { resultado, ...metaUpdates } = updates;\n  if (resultado) {\n    jobs.set(id, encryptJson(resultado));\n  }\n  Object.assign(meta, metaUpdates);\n}\n\nexport async function executarJob(\n  id: string,\n  execFn: () => Promise<void>\n): Promise<void> {\n  const job = reconstruirJob(id);\n  if (!job) return;\n\n  if (activeCount >= MAX_CONCURRENT) {\n    await new Promise<void>(resolve => {\n      pendingQueue.push(resolve);\n    });\n  }\n\n  activeCount++;\n\n  try {\n    await execFn();\n  } catch (err) {\n    atualizarJob(id, {\n      status: 'erro',\n      finalizadoEm: Date.now(),\n      erro: err instanceof Error ? err.message : String(err)\n    });\n  } finally {\n    activeCount--;\n    if (pendingQueue.length > 0) {\n      const next = pendingQueue.shift();\n      if (next) next();\n    }\n  }\n}\n"]}

package/dist/app/github/middleware/autenticacao.d.ts

@@ -0,0 +1,9 @@
+import type { NextFunction, Request, Response } from 'express';
+import type { SessionData } from '../../../types/github/app.js';
+type Session = SessionData;
+export declare function createSession(ip: string): Session;
+export declare function getSession(token: string): Session | undefined;
+export declare function destroySession(token: string): void;
+export declare function exigeAutenticacao(req: Request, res: Response, next: NextFunction): void;
+export {};
+//# sourceMappingURL=autenticacao.d.ts.map

package/dist/app/github/middleware/autenticacao.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autenticacao.d.ts","sourceRoot":"","sources":["../../../../src/app/github/middleware/autenticacao.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAShE,KAAK,OAAO,GAAG,WAAW,CAAC;AAkB3B,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAWjD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAQ7D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAElD;AAKD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAkDvF"}

package/dist/app/github/middleware/autenticacao.js

@@ -0,0 +1,88 @@
+import crypto from 'node:crypto';
+const IS_PROD = process.env.NODE_ENV === 'production';
+const AUTH_FAIL_DELAY_MS = 1000;
+const MAX_ATTEMPTS_PER_IP = 10;
+const ATTEMPT_WINDOW_MS = 300_000;
+const SESSION_DURATION_MS = 86_400_000;
+const authAttempts = new Map();
+const sessions = new Map();
+function generateSessionToken() {
+    return crypto.randomBytes(32).toString('hex');
+}
+function cleanExpiredSessions() {
+    const now = Date.now();
+    for (const [token, session] of sessions) {
+        if (session.expiresAt < now) {
+            sessions.delete(token);
+        }
+    }
+}
+export function createSession(ip) {
+    cleanExpiredSessions();
+    const token = generateSessionToken();
+    const session = {
+        token,
+        createdAt: Date.now(),
+        expiresAt: Date.now() + SESSION_DURATION_MS,
+        ip,
+    };
+    sessions.set(token, session);
+    return session;
+}
+export function getSession(token) {
+    cleanExpiredSessions();
+    const session = sessions.get(token);
+    if (session && session.expiresAt < Date.now()) {
+        sessions.delete(token);
+        return undefined;
+    }
+    return session;
+}
+export function destroySession(token) {
+    sessions.delete(token);
+}
+const UNAUTHORIZED = 'Nao autorizado. Forneca token de administrador valido.';
+const TOKEN_NOT_CONFIGURED = 'Token de administrador (TUTANUS_ADMIN_TOKEN) nao configurado.';
+export function exigeAutenticacao(req, res, next) {
+    const token = process.env.TUTANUS_ADMIN_TOKEN;
+    if (!token) {
+        if (IS_PROD) {
+            res.status(401).json({ erro: TOKEN_NOT_CONFIGURED });
+            return;
+        }
+        next();
+        return;
+    }
+    const ip = req.ip || req.socket.remoteAddress || 'unknown';
+    const now = Date.now();
+    let attemptData = authAttempts.get(ip);
+    if (!attemptData || now > attemptData.windowStart + ATTEMPT_WINDOW_MS) {
+        attemptData = { count: 0, windowStart: now };
+        authAttempts.set(ip, attemptData);
+    }
+    if (attemptData.count >= MAX_ATTEMPTS_PER_IP) {
+        res.status(429).json({ erro: 'Muitas tentativas de autenticacao. Tente novamente mais tarde.' });
+        return;
+    }
+    const authHeader = req.headers.authorization;
+    const cookieToken = req.headers.cookie
+        ?.split(';')
+        .map(c => c.trim())
+        .find(c => c.startsWith('session_token='))
+        ?.split('=')[1];
+    const session = cookieToken ? getSession(cookieToken) : undefined;
+    if (session && session.ip === ip) {
+        next();
+        return;
+    }
+    if (authHeader && authHeader.startsWith('Bearer ') && authHeader.slice(7) === token) {
+        attemptData.count++;
+        next();
+        return;
+    }
+    attemptData.count++;
+    setTimeout(() => {
+        res.status(401).json({ erro: UNAUTHORIZED });
+    }, AUTH_FAIL_DELAY_MS);
+}
+//# sourceMappingURL=autenticacao.js.map

package/dist/app/github/middleware/autenticacao.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autenticacao.js","sourceRoot":"","sources":["../../../../src/app/github/middleware/autenticacao.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,aAAa,CAAC;AAMjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAEtD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAIvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkD,CAAC;AAC/E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;AAE5C,SAAS,oBAAoB;IAC3B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YAC5B,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,oBAAoB,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAY;QACvB,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB;QAC3C,EAAE;KACH,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,oBAAoB,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC9C,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,YAAY,GAAG,wDAAwD,CAAC;AAC9E,MAAM,oBAAoB,GAAG,+DAA+D,CAAC;AAE7F,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEvC,IAAI,CAAC,WAAW,IAAI,GAAG,GAAG,WAAW,CAAC,WAAW,GAAG,iBAAiB,EAAE,CAAC;QACtE,WAAW,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QAC7C,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,WAAW,CAAC,KAAK,IAAI,mBAAmB,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gEAAgE,EAAE,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM;QACpC,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAClB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC1C,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAElB,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAElE,IAAI,OAAO,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACjC,IAAI,EAAE,CAAC;QACP,OAAO;IACT,CAAC;IAED,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACpF,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,EAAE,CAAC;QACP,OAAO;IACT,CAAC;IAED,WAAW,CAAC,KAAK,EAAE,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC/C,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACzB,CAAC","sourcesContent":["// SPDX-License-Identifier: MIT\nimport crypto from 'node:crypto';\n\nimport type { NextFunction, Request, Response } from 'express';\n\nimport type { SessionData } from '../../../types/github/app.js';\n\nconst IS_PROD = process.env.NODE_ENV === 'production';\n\nconst AUTH_FAIL_DELAY_MS = 1000;\nconst MAX_ATTEMPTS_PER_IP = 10;\nconst ATTEMPT_WINDOW_MS = 300_000;\nconst SESSION_DURATION_MS = 86_400_000;\n\ntype Session = SessionData;\n\nconst authAttempts = new Map<string, { count: number; windowStart: number }>();\nconst sessions = new Map<string, Session>();\n\nfunction generateSessionToken(): string {\n  return crypto.randomBytes(32).toString('hex');\n}\n\nfunction cleanExpiredSessions(): void {\n  const now = Date.now();\n  for (const [token, session] of sessions) {\n    if (session.expiresAt < now) {\n      sessions.delete(token);\n    }\n  }\n}\n\nexport function createSession(ip: string): Session {\n  cleanExpiredSessions();\n  const token = generateSessionToken();\n  const session: Session = {\n    token,\n    createdAt: Date.now(),\n    expiresAt: Date.now() + SESSION_DURATION_MS,\n    ip,\n  };\n  sessions.set(token, session);\n  return session;\n}\n\nexport function getSession(token: string): Session | undefined {\n  cleanExpiredSessions();\n  const session = sessions.get(token);\n  if (session && session.expiresAt < Date.now()) {\n    sessions.delete(token);\n    return undefined;\n  }\n  return session;\n}\n\nexport function destroySession(token: string): void {\n  sessions.delete(token);\n}\n\nconst UNAUTHORIZED = 'Nao autorizado. Forneca token de administrador valido.';\nconst TOKEN_NOT_CONFIGURED = 'Token de administrador (TUTANUS_ADMIN_TOKEN) nao configurado.';\n\nexport function exigeAutenticacao(req: Request, res: Response, next: NextFunction): void {\n  const token = process.env.TUTANUS_ADMIN_TOKEN;\n  if (!token) {\n    if (IS_PROD) {\n      res.status(401).json({ erro: TOKEN_NOT_CONFIGURED });\n      return;\n    }\n    next();\n    return;\n  }\n\n  const ip = req.ip || req.socket.remoteAddress || 'unknown';\n  const now = Date.now();\n  let attemptData = authAttempts.get(ip);\n\n  if (!attemptData || now > attemptData.windowStart + ATTEMPT_WINDOW_MS) {\n    attemptData = { count: 0, windowStart: now };\n    authAttempts.set(ip, attemptData);\n  }\n\n  if (attemptData.count >= MAX_ATTEMPTS_PER_IP) {\n    res.status(429).json({ erro: 'Muitas tentativas de autenticacao. Tente novamente mais tarde.' });\n    return;\n  }\n\n  const authHeader = req.headers.authorization;\n  const cookieToken = req.headers.cookie\n    ?.split(';')\n    .map(c => c.trim())\n    .find(c => c.startsWith('session_token='))\n    ?.split('=')[1];\n\n  const session = cookieToken ? getSession(cookieToken) : undefined;\n\n  if (session && session.ip === ip) {\n    next();\n    return;\n  }\n\n  if (authHeader && authHeader.startsWith('Bearer ') && authHeader.slice(7) === token) {\n    attemptData.count++;\n    next();\n    return;\n  }\n\n  attemptData.count++;\n\n  setTimeout(() => {\n    res.status(401).json({ erro: UNAUTHORIZED });\n  }, AUTH_FAIL_DELAY_MS);\n}\n"]}

package/dist/app/github/middleware/crypto.d.ts

@@ -0,0 +1,10 @@
+export declare function encrypt(text: string): string;
+export declare function decrypt(encrypted: string): string;
+export declare function encryptJson<T>(data: T): string;
+export declare function decryptJson<T>(encrypted: string): T;
+export declare function encryptObject<T extends Record<string, unknown>>(obj: T, sensitiveFields: (keyof T)[]): T;
+export declare function decryptObject<T extends Record<string, unknown>>(obj: T, sensitiveFields: (keyof T)[]): T;
+export declare function hashToken(token: string): string;
+export declare function signRequest(payload: string, secret: string): string;
+export declare function verifyRequestSignature(payload: string, signature: string, secret: string): boolean;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/app/github/middleware/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../../src/app/github/middleware/crypto.ts"],"names":[],"mappings":"AA8BA,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO5C;AAED,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAajD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAE9C;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,CAEnD;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7D,GAAG,EAAE,CAAC,EACN,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAC3B,CAAC,CAaH;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7D,GAAG,EAAE,CAAC,EACN,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAC3B,CAAC,CAkBH;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAOT"}

package/dist/app/github/middleware/crypto.js

@@ -0,0 +1,104 @@
+import crypto from 'node:crypto';
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 16;
+const KEY_LENGTH = 32;
+function deriveKey() {
+    const secret = process.env.TUTANUS_ENCRYPTION_KEY;
+    if (secret && secret.length >= 16) {
+        return crypto.scryptSync(secret, 'tutanus-salt', KEY_LENGTH);
+    }
+    const fallbackParts = [
+        process.env.TUTANUS_ADMIN_TOKEN,
+        process.env.GITHUB_WEBHOOK_SECRET,
+        process.env.GITHUB_PRIVATE_KEY?.slice(0, 64),
+        'tutanus-fallback-key',
+    ].filter(Boolean);
+    const combined = fallbackParts.join(':');
+    return crypto.scryptSync(combined, 'tutanus-salt', KEY_LENGTH);
+}
+let cachedKey = null;
+function getKey() {
+    if (!cachedKey) {
+        cachedKey = deriveKey();
+    }
+    return cachedKey;
+}
+export function encrypt(text) {
+    const iv = crypto.randomBytes(IV_LENGTH);
+    const cipher = crypto.createCipheriv(ALGORITHM, getKey(), iv);
+    let encrypted = cipher.update(text, 'utf8', 'base64');
+    encrypted += cipher.final('base64');
+    const authTag = cipher.getAuthTag();
+    return `${iv.toString('base64')}:${authTag.toString('base64')}:${encrypted}`;
+}
+export function decrypt(encrypted) {
+    const parts = encrypted.split(':');
+    if (parts.length !== 3) {
+        throw new Error('Formato de dado criptografado invalido');
+    }
+    const iv = Buffer.from(parts[0], 'base64');
+    const authTag = Buffer.from(parts[1], 'base64');
+    const data = parts[2];
+    const decipher = crypto.createDecipheriv(ALGORITHM, getKey(), iv);
+    decipher.setAuthTag(authTag);
+    let decrypted = decipher.update(data, 'base64', 'utf8');
+    decrypted += decipher.final('utf8');
+    return decrypted;
+}
+export function encryptJson(data) {
+    return encrypt(JSON.stringify(data));
+}
+export function decryptJson(encrypted) {
+    return JSON.parse(decrypt(encrypted));
+}
+export function encryptObject(obj, sensitiveFields) {
+    const result = { ...obj };
+    for (const field of sensitiveFields) {
+        if (result[field] !== undefined && result[field] !== null) {
+            const val = result[field];
+            if (typeof val === 'string') {
+                result[field] = encrypt(val);
+            }
+            else {
+                result[field] = encryptJson(val);
+            }
+        }
+    }
+    return result;
+}
+export function decryptObject(obj, sensitiveFields) {
+    const result = { ...obj };
+    for (const field of sensitiveFields) {
+        const val = result[field];
+        if (typeof val === 'string' && val.includes(':')) {
+            try {
+                result[field] = decrypt(val);
+            }
+            catch {
+                try {
+                    const decrypted = decryptJson(val);
+                    result[field] = decrypted;
+                }
+                catch {
+                }
+            }
+        }
+    }
+    return result;
+}
+export function hashToken(token) {
+    return crypto.createHash('sha256').update(token).digest('hex');
+}
+export function signRequest(payload, secret) {
+    return crypto.createHmac('sha256', secret).update(payload).digest('hex');
+}
+export function verifyRequestSignature(payload, signature, secret) {
+    try {
+        const expected = signRequest(payload, secret);
+        return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/app/github/middleware/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../../src/app/github/middleware/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAClD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,aAAa,GAAG;QACpB,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5C,sBAAsB;KACvB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED,IAAI,SAAS,GAAkB,IAAI,CAAC;AAEpC,SAAS,MAAM;IACb,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,SAAS,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,SAAiB;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAI,IAAO;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,WAAW,CAAI,SAAiB;IAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAM,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAM,EACN,eAA4B;IAE5B,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,CAAe,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,GAAG,CAAe,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAM,EACN,eAA4B;IAE5B,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAK,GAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,GAAa,CAAe,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,WAAW,CAAa,GAAa,CAAC,CAAC;oBACzD,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;gBAET,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,MAAc;IACzD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,SAAiB,EACjB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import crypto from 'node:crypto';\n\nconst ALGORITHM = 'aes-256-gcm';\nconst IV_LENGTH = 16;\nconst KEY_LENGTH = 32;\n\nfunction deriveKey(): Buffer {\n  const secret = process.env.TUTANUS_ENCRYPTION_KEY;\n  if (secret && secret.length >= 16) {\n    return crypto.scryptSync(secret, 'tutanus-salt', KEY_LENGTH);\n  }\n  const fallbackParts = [\n    process.env.TUTANUS_ADMIN_TOKEN,\n    process.env.GITHUB_WEBHOOK_SECRET,\n    process.env.GITHUB_PRIVATE_KEY?.slice(0, 64),\n    'tutanus-fallback-key',\n  ].filter(Boolean);\n  const combined = fallbackParts.join(':');\n  return crypto.scryptSync(combined, 'tutanus-salt', KEY_LENGTH);\n}\n\nlet cachedKey: Buffer | null = null;\n\nfunction getKey(): Buffer {\n  if (!cachedKey) {\n    cachedKey = deriveKey();\n  }\n  return cachedKey;\n}\n\nexport function encrypt(text: string): string {\n  const iv = crypto.randomBytes(IV_LENGTH);\n  const cipher = crypto.createCipheriv(ALGORITHM, getKey(), iv);\n  let encrypted = cipher.update(text, 'utf8', 'base64');\n  encrypted += cipher.final('base64');\n  const authTag = cipher.getAuthTag();\n  return `${iv.toString('base64')}:${authTag.toString('base64')}:${encrypted}`;\n}\n\nexport function decrypt(encrypted: string): string {\n  const parts = encrypted.split(':');\n  if (parts.length !== 3) {\n    throw new Error('Formato de dado criptografado invalido');\n  }\n  const iv = Buffer.from(parts[0], 'base64');\n  const authTag = Buffer.from(parts[1], 'base64');\n  const data = parts[2];\n  const decipher = crypto.createDecipheriv(ALGORITHM, getKey(), iv);\n  decipher.setAuthTag(authTag);\n  let decrypted = decipher.update(data, 'base64', 'utf8');\n  decrypted += decipher.final('utf8');\n  return decrypted;\n}\n\nexport function encryptJson<T>(data: T): string {\n  return encrypt(JSON.stringify(data));\n}\n\nexport function decryptJson<T>(encrypted: string): T {\n  return JSON.parse(decrypt(encrypted)) as T;\n}\n\nexport function encryptObject<T extends Record<string, unknown>>(\n  obj: T,\n  sensitiveFields: (keyof T)[]\n): T {\n  const result = { ...obj };\n  for (const field of sensitiveFields) {\n    if (result[field] !== undefined && result[field] !== null) {\n      const val = result[field];\n      if (typeof val === 'string') {\n        result[field] = encrypt(val) as T[keyof T];\n      } else {\n        result[field] = encryptJson(val) as T[keyof T];\n      }\n    }\n  }\n  return result;\n}\n\nexport function decryptObject<T extends Record<string, unknown>>(\n  obj: T,\n  sensitiveFields: (keyof T)[]\n): T {\n  const result = { ...obj };\n  for (const field of sensitiveFields) {\n    const val = result[field];\n    if (typeof val === 'string' && (val as string).includes(':')) {\n      try {\n        result[field] = decrypt(val as string) as T[keyof T];\n      } catch {\n        try {\n          const decrypted = decryptJson<T[keyof T]>(val as string);\n          result[field] = decrypted;\n        } catch {\n          /* assume not encrypted */\n        }\n      }\n    }\n  }\n  return result;\n}\n\nexport function hashToken(token: string): string {\n  return crypto.createHash('sha256').update(token).digest('hex');\n}\n\nexport function signRequest(payload: string, secret: string): string {\n  return crypto.createHmac('sha256', secret).update(payload).digest('hex');\n}\n\nexport function verifyRequestSignature(\n  payload: string,\n  signature: string,\n  secret: string\n): boolean {\n  try {\n    const expected = signRequest(payload, secret);\n    return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));\n  } catch {\n    return false;\n  }\n}\n"]}

package/dist/app/github/middleware/isolamento.d.ts

@@ -0,0 +1,11 @@
+import type { NextFunction, Request, Response } from 'express';
+export declare function bloquearAcessoDireto(req: Request, res: Response, next: NextFunction): void;
+export declare function verificarOrigem(req: Request, res: Response, next: NextFunction): void;
+export declare function verificarAssinaturaApi(req: Request, res: Response, next: NextFunction): Promise<void>;
+export declare function mascararRotasApi(req: Request, res: Response, next: NextFunction): void;
+export declare function createIsolationMiddleware(): Array<(req: Request, res: Response, next: NextFunction) => void | Promise<void>>;
+export declare function gerarAssinaturaApi(method: string, path: string, body: Record<string, unknown> | string): {
+    signature: string;
+    timestamp: string;
+};
+//# sourceMappingURL=isolamento.d.ts.map

package/dist/app/github/middleware/isolamento.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolamento.d.ts","sourceRoot":"","sources":["../../../../src/app/github/middleware/isolamento.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAsC/D,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAwB1F;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAgBrF;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA+C3G;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CA0BtF;AAED,wBAAgB,yBAAyB,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAO5H;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GACrC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAM1C"}