@justmpm/firebase-audit 0.4.1 → 0.4.2

package/dist/{chunk-GOLWQBD5.js → chunk-SKD4TKFU.js}

@@ -13,13 +13,58 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
 import { createRequire } from "module";
+import { readFileSync, existsSync } from "fs";
+import { dirname, join } from "path";
+import { fileURLToPath } from "url";
 var require2 = createRequire(import.meta.url);
 var pkg = require2("../package.json");
+var pkgDir = join(dirname(fileURLToPath(import.meta.url)), "..");
+function readPkgText(rel) {
+  try {
+    const p = join(pkgDir, rel);
+    if (!existsSync(p)) return null;
+    return readFileSync(p, "utf-8");
+  } catch {
+    return null;
+  }
+}
+var FALLBACK_SKILL = [
+  "# firebase-audit-skill (fallback)",
+  "",
+  "1. Descobrir projeto (firebase.json, firestore.rules, firestore.indexes.json).",
+  "2. Executar scan (strict no CI). Sem adapter resolvido \u2192 UNKNOWN, nunca adivinhar.",
+  "3. CONFIRMED corrige agora; PROBABLE investiga; NOT_OBSERVED/UNKNOWN n\xE3o afirma.",
+  "4. Corrigir c\xF3digo, nunca o contrato para esconder finding."
+].join("\n");
 function createMcpServer() {
   const server = new McpServer({
     name: "firebase-audit-mcp-server",
     version: pkg.version
   });
+  server.registerTool(
+    "firebase_audit_skill",
+    {
+      title: "Firebase Audit Skill (guia do agente)",
+      description: "LEIA ANTES de auditar: sequ\xEAncia obrigat\xF3ria, travas (nunca mude o contrato para esconder finding, nunca afirme sem evid\xEAncia, nunca diga 'unused') e Emulador. Retorna o guia oficial da vers\xE3o instalada + modelo de contrato. Sempre sincronizado \u2014 dispensa skill copiada.",
+      inputSchema: {}
+    },
+    async () => {
+      const skill = readPkgText(join("skill", "SKILL.md")) ?? FALLBACK_SKILL;
+      const template = readPkgText(join("templates", "firebase-audit.yaml")) ?? "";
+      const text = [
+        `# firebase-audit v${pkg.version} \u2014 guia do agente`,
+        "",
+        skill,
+        "",
+        "## Modelo de contrato (templates/firebase-audit.yaml)",
+        "",
+        "```yaml",
+        template,
+        "```"
+      ].join("\n");
+      return { content: [{ type: "text", text }] };
+    }
+  );
   server.registerTool(
     "firebase_audit_scan",
     {

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-GOLWQBD5.js";
+} from "./chunk-SKD4TKFU.js";
 import {
   AccessOriginSchema,
   AuditYamlSchema,

package/dist/mcp-cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   startMcpServer
-} from "./chunk-GOLWQBD5.js";
+} from "./chunk-SKD4TKFU.js";
 import "./chunk-3SEVYYCX.js";
 import "./chunk-PSSMYRRU.js";
 import "./chunk-NJBCSW7E.js";

package/dist/mcp.d.ts

@@ -3,7 +3,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 /**
  * MCP Server do firebase-audit.
  *
- * Expõe scan/check/verify/drift via protocolo MCP (stdio).
+ * Expõe skill + scan/check/verify/drift via protocolo MCP (stdio).
  * Mesma lógica da biblioteca — sem duplicação (chama scan/verify/drift direto).
  *
  * Uso:

package/dist/mcp.js

@@ -1,7 +1,7 @@
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-GOLWQBD5.js";
+} from "./chunk-SKD4TKFU.js";
 import "./chunk-3SEVYYCX.js";
 import "./chunk-PSSMYRRU.js";
 import "./chunk-NJBCSW7E.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justmpm/firebase-audit",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Auditor de consistência e segurança para projetos Firebase: código + Rules + índices + contrato vs comportamento. Static-first, nunca inventa certeza.",
   "keywords": [
     "firebase",