@justmpm/firebase-audit 0.5.11 → 0.5.12

package/dist/{chunk-ZNVQGZMJ.js → chunk-CTQPAMOE.js}

@@ -1230,6 +1230,20 @@ async function scan(rootDir, opts = {}) {
       for (const m of parseStorageAllows(clean)) {
         const ops = expandStorageOps(m.target);
         const key = conditionKeyForFingerprint(m.condition);
+        const { unknown: unknownStorageOps } = opsFrom(m.target);
+        if (unknownStorageOps.length > 0) {
+          findings.push({
+            rule: "RULES_UNKNOWN_OP",
+            severity: "WARNING",
+            confidence: "CONFIRMED",
+            message: `Opera\xE7\xE3o desconhecida no Storage em ${m.matchPath} (trecho desconhecido: ${unknownStorageOps.join(", ")}) (${relStorage}:${m.line}). Typo em allow? Deploy rejeita.`,
+            fingerprint: `RULES_UNKNOWN_OP:${m.matchPath}:${m.line}:${normalizeTarget(m.target)}`,
+            file: relStorage,
+            line: m.line,
+            evidence: [{ id: evId("unknown-op"), kind: "unknown-op", summary: `${m.matchPath} allow ${m.target}`, confidence: "CONFIRMED", location: { file: relStorage, start: { line: m.line, column: 0 } } }],
+            fix: "Corrija para read/get/list/write/create/update/delete."
+          });
+        }
         const singleStorage = m.condition === void 0 ? void 0 : resolveHelperConditionDetailed(m.condition, storageHelpers);
         const inlinedStorage = m.condition === void 0 ? void 0 : inlineHelpersInCondition(m.condition, storageHelpers);
         const singleResolved = singleStorage !== void 0 && singleStorage !== m.condition ? singleStorage : void 0;

package/dist/{chunk-ZE5K5HRR.js → chunk-OYWTDV45.js}

@@ -1,6 +1,6 @@
 import {
   scan
-} from "./chunk-ZNVQGZMJ.js";
+} from "./chunk-CTQPAMOE.js";
 import {
   verify
 } from "./chunk-CSMT4PIP.js";

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   scan
-} from "./chunk-ZNVQGZMJ.js";
+} from "./chunk-CTQPAMOE.js";
 import "./chunk-7J3ADEBW.js";
 
 // src/cli.ts
@@ -84,7 +84,7 @@ Uso: firebase-audit scan|check|verify|drift [--json] ...`);
   const { resolve: resolveRoot } = await import("path");
   const rootDir = cwdArg ? resolveRoot(process.cwd(), cwdArg) : process.cwd();
   if (cmd === "verify") {
-    const { scan: scanForVerify } = await import("./scan-M6OYRIKL.js");
+    const { scan: scanForVerify } = await import("./scan-CU54MUN7.js");
     const { verify } = await import("./verify-GQSR4FQL.js");
     const { resolve: resolveVerify } = await import("path");
     const coverageArg = getArg("coverage");

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-ZE5K5HRR.js";
+} from "./chunk-OYWTDV45.js";
 import {
   AccessOriginSchema,
   AuditYamlSchema,
@@ -34,7 +34,7 @@ import {
   runChecks,
   scan,
   validateClaimSamples
-} from "./chunk-ZNVQGZMJ.js";
+} from "./chunk-CTQPAMOE.js";
 import {
   buildFullPath,
   conditionKeyForFingerprint,

package/dist/mcp-cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   startMcpServer
-} from "./chunk-ZE5K5HRR.js";
-import "./chunk-ZNVQGZMJ.js";
+} from "./chunk-OYWTDV45.js";
+import "./chunk-CTQPAMOE.js";
 import "./chunk-7J3ADEBW.js";
 import "./chunk-CSMT4PIP.js";
 import "./chunk-LD3F73XI.js";

package/dist/mcp.js

@@ -1,8 +1,8 @@
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-ZE5K5HRR.js";
-import "./chunk-ZNVQGZMJ.js";
+} from "./chunk-OYWTDV45.js";
+import "./chunk-CTQPAMOE.js";
 import "./chunk-7J3ADEBW.js";
 import "./chunk-CSMT4PIP.js";
 import "./chunk-LD3F73XI.js";

package/dist/{scan-M6OYRIKL.js → scan-CU54MUN7.js}

@@ -1,6 +1,6 @@
 import {
   scan
-} from "./chunk-ZNVQGZMJ.js";
+} from "./chunk-CTQPAMOE.js";
 import "./chunk-7J3ADEBW.js";
 export {
   scan

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justmpm/firebase-audit",
-  "version": "0.5.11",
+  "version": "0.5.12",
   "description": "Auditor de consistência e segurança para projetos Firebase: código + Rules + índices + contrato vs comportamento. Static-first, nunca inventa certeza.",
   "keywords": [
     "firebase",