@justmpm/firebase-audit 0.3.0 → 0.3.1

package/dist/{chunk-N57MCLTZ.js → chunk-UMQH7UDI.js}

@@ -61,7 +61,10 @@ function classifyOrigin(file, content) {
   const rel = file.replace(/\\/g, "/");
   const segs = rel.split("/");
   const hasSeg = (...names) => names.some((n) => segs.includes(n));
-  if (rel.includes("app/api/") || rel.includes("pages/api/") || hasSeg("api") && segs.includes("pages")) {
+  if (hasSeg("pages", "api") && rel.includes("pages/api/")) {
+    return "SERVER";
+  }
+  if (hasSeg("app", "api") && rel.includes("app/api/")) {
     return "SERVER";
   }
   if (segs.includes("app") && rel.endsWith("route.ts") || segs.includes("app") && rel.endsWith("route.js")) {
@@ -641,10 +644,19 @@ async function collectAdminImports(rootDir) {
   const out = [];
   const patterns = [
     'import { $$$ITEMS } from "$MODULE"',
+    "import { $$$ITEMS } from '$MODULE'",
     'import $DEFAULT from "$MODULE"',
+    "import $DEFAULT from '$MODULE'",
     'import * as $NS from "$MODULE"',
+    "import * as $NS from '$MODULE'",
+    'import "$MODULE"',
+    "import '$MODULE'",
     'const $X = require("$MODULE")',
-    'require("$MODULE")'
+    "const $X = require('$MODULE')",
+    'require("$MODULE")',
+    "require('$MODULE')",
+    'import("$MODULE")',
+    "import('$MODULE')"
   ];
   const seen = /* @__PURE__ */ new Set();
   for (const pattern of patterns) {
@@ -825,7 +837,7 @@ var FindingSchema = z.strictObject({
 });
 var PermissionNameSchema = z.string().regex(/^[a-z][a-z0-9_-]*(\.[a-z][a-z0-9_-]*)*$/);
 var RoleNameSchema = z.string().regex(/^[a-z][a-z0-9_-]*$/);
-var AuditYamlSchema = z.object({
+var AuditYamlSchema = z.strictObject({
   authorization: z.strictObject({
     adapter: z.strictObject({ function: z.string().min(1) }).optional(),
     roles: z.record(RoleNameSchema, z.strictObject({ permissions: z.array(PermissionNameSchema) })),
@@ -881,18 +893,24 @@ async function scan(rootDir, opts = {}) {
       const validModes = ["ASCENDING", "DESCENDING", "ARRAY_CONTAINS", "VECTOR"];
       const entries = [];
       let skipped = 0;
+      let scopeSkipped = 0;
       for (const i of raw.indexes ?? []) {
         if (typeof i.collectionGroup !== "string" || i.collectionGroup.length === 0) {
           skipped += 1;
           continue;
         }
+        if (i.queryScope !== void 0 && i.queryScope !== "COLLECTION" && i.queryScope !== "COLLECTION_GROUP") {
+          scopeSkipped += 1;
+          continue;
+        }
         const fields = [];
         for (const f of i.fields ?? []) {
-          if (typeof f.fieldPath !== "string" || f.fieldPath.length === 0) {
+          if (typeof f.fieldPath !== "string" || f.fieldPath.length === 0 || f.fieldPath === "__name__") {
             skipped += 1;
             continue;
           }
-          const mode = f.vectorConfig ? "VECTOR" : f.arrayConfig === "CONTAINS" ? "ARRAY_CONTAINS" : f.order;
+          const rawMode = f.vectorConfig ? "VECTOR" : f.arrayConfig === "CONTAINS" ? "ARRAY_CONTAINS" : typeof f.mode === "string" ? f.mode : f.order;
+          const mode = rawMode;
           if (mode !== "ASCENDING" && mode !== "DESCENDING" && mode !== "ARRAY_CONTAINS" && mode !== "VECTOR") {
             skipped += 1;
             continue;
@@ -906,15 +924,16 @@ async function scan(rootDir, opts = {}) {
         });
       }
       model.indexes = entries;
-      if (skipped > 0) {
+      const totalSkipped = skipped + scopeSkipped;
+      if (totalSkipped > 0) {
         findings_pre.push({
           rule: "INDEXES_INVALID",
           severity: "WARNING",
           confidence: "CONFIRMED",
-          message: `firestore.indexes.json com ${skipped} entrada(s) inv\xE1lidas ignoradas \u2014 verifique campos.`,
+          message: `firestore.indexes.json com ${totalSkipped} entrada(s) inv\xE1lidas ignoradas \u2014 verifique campos.`,
           fingerprint: "INDEXES_INVALID",
           evidence: [
-            { id: "ev-indexes-skipped", kind: "indexes-parse", summary: `${skipped} inv\xE1lidas`, confidence: "CONFIRMED" }
+            { id: "ev-indexes-skipped", kind: "indexes-parse", summary: `${totalSkipped} inv\xE1lidas`, confidence: "CONFIRMED" }
           ]
         });
       }

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   scan
-} from "./chunk-N57MCLTZ.js";
+} from "./chunk-UMQH7UDI.js";
 
 // src/cli.ts
 import { createRequire } from "module";
@@ -64,7 +64,7 @@ Uso: firebase-audit scan|check|verify|drift [--json] ...`);
   const { resolve: resolveRoot } = await import("path");
   const rootDir = cwdArg ? resolveRoot(process.cwd(), cwdArg) : process.cwd();
   if (cmd === "verify") {
-    const { scan: scanForVerify } = await import("./scan-773ZFQXB.js");
+    const { scan: scanForVerify } = await import("./scan-TLHI777J.js");
     const { verify } = await import("./verify-Y7BWAFPL.js");
     const { resolve: resolveVerify } = await import("path");
     const coverageArg = getArg("coverage");

package/dist/index.d.ts

@@ -591,7 +591,7 @@ declare const AuditYamlSchema: z.ZodObject<{
             samples: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodJSONSchema>>>;
         }, z.core.$strict>>;
     }, z.core.$strict>;
-}, z.core.$strip>;
+}, z.core.$strict>;
 type ProjectModel = z.infer<typeof ProjectModelSchema>;
 type Finding = z.infer<typeof FindingSchema>;
 type AuditYaml = z.infer<typeof AuditYamlSchema>;

package/dist/index.js

@@ -31,7 +31,7 @@ import {
   runChecks,
   scan,
   stripRuleComments
-} from "./chunk-N57MCLTZ.js";
+} from "./chunk-UMQH7UDI.js";
 import {
   planVerify,
   verify

package/dist/{scan-773ZFQXB.js → scan-TLHI777J.js}

@@ -1,6 +1,6 @@
 import {
   scan
-} from "./chunk-N57MCLTZ.js";
+} from "./chunk-UMQH7UDI.js";
 export {
   scan
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justmpm/firebase-audit",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Auditor de consistência e segurança para projetos Firebase: código + Rules + índices + contrato vs comportamento. Static-first, nunca inventa certeza.",
   "keywords": [
     "firebase",