@justmpm/firebase-audit 0.5.15 → 0.5.16

package/dist/{chunk-SYGLJ457.js → chunk-DXYPKVMR.js}

@@ -224,7 +224,7 @@ function make(rule, severity, confidence, message, fingerprint, opts = {}) {
   };
 }
 function checksAdminPower(cond, condRaw, rule, helperDetailed) {
-  const isInvertedAdmin = /admin\s*==\s*false/i.test(cond) || /admin\s*!=\s*true/i.test(cond) || /admin\s*!==\s*true/i.test(cond) || /!\s*request\.auth\.token\.admin\b/i.test(cond) || /!\s*\(\s*request\.auth\.token\.admin\b/i.test(cond) || /!\s*\([^()]*admin\s*==\s*true/i.test(cond);
+  const isInvertedAdmin = /admin\s*==\s*false/i.test(cond) || /admin\s*!=\s*true/i.test(cond) || /admin\s*!==\s*true/i.test(cond) || /!\s*request\.auth\.token\.admin\b/i.test(cond) || /!\s*\(\s*request\.auth\.token\.admin\b/i.test(cond) || /!\s*\([^()]*admin\s*==\s*true/i.test(cond) || /!\s*\([^()]*==\s*['"]admin['"]/i.test(cond);
   const normClaim = (c) => c.toLowerCase().replace(/[_-]/g, "");
   const isAdminCall = /\bisadmin\s*\(([^)]*)\)/i.exec(condRaw) ?? /\bisadmin\s*\(([^)]*)\)/i.exec(cond);
   let isAdminBodyHasAdmin = false;
@@ -248,7 +248,7 @@ function checksAdminPower(cond, condRaw, rule, helperDetailed) {
     const p = part;
     return /token\.admin\b/i.test(p) || /token\.get\(\s*['"]admin['"]/i.test(p) || /token\s*\[\s*['"]admin['"]/i.test(p) || /token\.\w+\s*==\s*['"]admin['"]/i.test(p) || /token\.\w+\s+in\s+[^\n;]*['"]admin['"]/i.test(p);
   }) : true;
-  const checksAdminRole = !isInvertedAdmin && hasTopOr ? adminPerDisjunct : /token\.\w+\s*==\s*['"]admin['"]/i.test(cond) || /token\s*\[\s*['"]\w+['"]\s*\]\s*==\s*['"]admin['"]/i.test(cond) || /token\.\w+\s+in\s+[^\n;]*['"]admin['"]/i.test(cond) || /token\.get\(\s*['"]admin['"]/i.test(cond) || isAdminBodyHasAdmin;
+  const checksAdminRole = !isInvertedAdmin && (hasTopOr ? adminPerDisjunct : /token\.\w+\s*==\s*['"]admin['"]/i.test(cond) || /token\s*\[\s*['"]\w+['"]\s*\]\s*==\s*['"]admin['"]/i.test(cond) || /token\.\w+\s+in\s+[^\n;]*['"]admin['"]/i.test(cond) || /token\.get\(\s*['"]admin['"]/i.test(cond) || isAdminBodyHasAdmin);
   if (checksAdminClaim || checksAdminRole) {
     if (hasTopOr && !adminPerDisjunct) return false;
     return true;
@@ -260,6 +260,7 @@ function branchHasCallerDocGate(branch) {
   const re = /\b(?:exists|get)\s*\(/gi;
   let m;
   while ((m = re.exec(branch)) !== null) {
+    if (/!\s*(?:firestore\.)?$/.test(branch.slice(0, m.index))) continue;
     let depth = 0;
     const start = m.index + m[0].length;
     let end = -1;

package/dist/{chunk-ZILSDI3F.js → chunk-PVB6GT4F.js}

@@ -1,6 +1,6 @@
 import {
   scan
-} from "./chunk-SYGLJ457.js";
+} from "./chunk-DXYPKVMR.js";
 import {
   verify
 } from "./chunk-CSMT4PIP.js";

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   scan
-} from "./chunk-SYGLJ457.js";
+} from "./chunk-DXYPKVMR.js";
 import "./chunk-7J3ADEBW.js";
 
 // src/cli.ts
@@ -84,7 +84,7 @@ Uso: firebase-audit scan|check|verify|drift [--json] ...`);
   const { resolve: resolveRoot } = await import("path");
   const rootDir = cwdArg ? resolveRoot(process.cwd(), cwdArg) : process.cwd();
   if (cmd === "verify") {
-    const { scan: scanForVerify } = await import("./scan-3XBJMCAO.js");
+    const { scan: scanForVerify } = await import("./scan-6HV5HFKH.js");
     const { verify } = await import("./verify-GQSR4FQL.js");
     const { resolve: resolveVerify } = await import("path");
     const coverageArg = getArg("coverage");

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-ZILSDI3F.js";
+} from "./chunk-PVB6GT4F.js";
 import {
   AccessOriginSchema,
   AuditYamlSchema,
@@ -34,7 +34,7 @@ import {
   runChecks,
   scan,
   validateClaimSamples
-} from "./chunk-SYGLJ457.js";
+} from "./chunk-DXYPKVMR.js";
 import {
   buildFullPath,
   conditionKeyForFingerprint,

package/dist/mcp-cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   startMcpServer
-} from "./chunk-ZILSDI3F.js";
-import "./chunk-SYGLJ457.js";
+} from "./chunk-PVB6GT4F.js";
+import "./chunk-DXYPKVMR.js";
 import "./chunk-7J3ADEBW.js";
 import "./chunk-CSMT4PIP.js";
 import "./chunk-LD3F73XI.js";

package/dist/mcp.js

@@ -1,8 +1,8 @@
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-ZILSDI3F.js";
-import "./chunk-SYGLJ457.js";
+} from "./chunk-PVB6GT4F.js";
+import "./chunk-DXYPKVMR.js";
 import "./chunk-7J3ADEBW.js";
 import "./chunk-CSMT4PIP.js";
 import "./chunk-LD3F73XI.js";

package/dist/{scan-3XBJMCAO.js → scan-6HV5HFKH.js}

@@ -1,6 +1,6 @@
 import {
   scan
-} from "./chunk-SYGLJ457.js";
+} from "./chunk-DXYPKVMR.js";
 import "./chunk-7J3ADEBW.js";
 export {
   scan

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justmpm/firebase-audit",
-  "version": "0.5.15",
+  "version": "0.5.16",
   "description": "Auditor de consistência e segurança para projetos Firebase: código + Rules + índices + contrato vs comportamento. Static-first, nunca inventa certeza.",
   "keywords": [
     "firebase",