@justmpm/firebase-audit 0.5.2 → 0.5.4

package/dist/{chunk-UKEKA2NQ.js → chunk-AKPQ4OAJ.js}

@@ -9,7 +9,7 @@ import {
   resolveHelperConditionDetailed,
   stripOuterParens,
   stripRuleComments
-} from "./chunk-7EWTBIKJ.js";
+} from "./chunk-FECVBQUO.js";
 
 // src/scan.ts
 import { readFileSync as readFileSync3, existsSync as existsSync3 } from "fs";
@@ -253,7 +253,7 @@ async function runChecks(model, rootDir, opts = {}) {
   const declared = new Set(model.authorization.permissions.map((p) => p.name));
   if (permissionCalls.literals.length === 0 && permissionCalls.dynamic.length === 0) {
     const tenantHint = [...helperDetailed.keys()].find(
-      (n) => /tenant|isMember|isSignedIn|_member/i.test(n)
+      (n) => /tenant|isMember|_member/i.test(n)
     );
     findings.push(
       make(
@@ -367,7 +367,7 @@ async function runChecks(model, rootDir, opts = {}) {
     const condResolved = resolveHelperConditionDetailed(condRaw, helperDetailed);
     const condInlined = inlineHelpersInCondition(condRaw, helperDetailed);
     const cond = condResolved !== condRaw ? condResolved : condInlined !== condRaw ? condInlined : condRaw;
-    const isInvertedAdmin = /admin\s*==\s*false/i.test(cond) || /admin\s*!=\s*true/i.test(cond) || /admin\s*!==\s*true/i.test(cond) || /!\s*request\.auth\.token\.admin\b/i.test(cond) || /!\s*\(\s*request\.auth\.token\.admin\b/i.test(cond) || /!\s*\(\s*.*admin\s*==\s*true/i.test(cond);
+    const isInvertedAdmin = /admin\s*==\s*false/i.test(cond) || /admin\s*!=\s*true/i.test(cond) || /admin\s*!==\s*true/i.test(cond) || /!\s*request\.auth\.token\.admin\b/i.test(cond) || /!\s*\(\s*request\.auth\.token\.admin\b/i.test(cond) || /!\s*\([^()]*admin\s*==\s*true/i.test(cond);
     const normClaim = (c) => c.toLowerCase().replace(/[_-]/g, "");
     const isAdminCall = /\bisadmin\s*\(([^)]*)\)/i.exec(condRaw) ?? /\bisadmin\s*\(([^)]*)\)/i.exec(cond);
     let isAdminBodyHasAdmin = false;
@@ -511,6 +511,22 @@ async function runChecks(model, rootDir, opts = {}) {
           }
         )
       );
+    } else if (origin === "UNKNOWN" && !isTestPath(hit.file)) {
+      findings.push(
+        make(
+          "ADMIN_ORIGIN_UNKNOWN",
+          "INFO",
+          "UNKNOWN",
+          `Admin SDK em arquivo de origem indefinida (${hit.file}). Se for cliente, Rules n\xE3o valem \u2014 revise manualmente.`,
+          `ADMIN_ORIGIN_UNKNOWN:${hit.file}:${hit.line}`,
+          {
+            file: hit.file,
+            line: hit.line,
+            evidence: [ev("admin-import-unknown", hit.text, "UNKNOWN", hit.file, hit.line)],
+            fix: "Mova para functions/, server/ ou scripts/ se for server; se for cliente, troque por Client SDK."
+          }
+        )
+      );
     }
   }
   return findings;
@@ -844,9 +860,10 @@ async function scan(rootDir, opts = {}) {
   try {
     if (d.firebaseJson && existsSync3(d.firebaseJson)) {
       const raw = JSON.parse(readFileSync3(d.firebaseJson, "utf-8"));
-      for (const [kind, rel] of [
-        ["rules", raw.firestore?.rules],
-        ["indexes", raw.firestore?.indexes]
+      for (const [kind, rel, label] of [
+        ["rules", raw.firestore?.rules, "firestore.rules"],
+        ["indexes", raw.firestore?.indexes, "firestore.indexes"],
+        ["storage-rules", raw.storage?.rules, "storage.rules"]
       ]) {
         if (typeof rel === "string" && rel.length > 0) {
           if (!existsSync3(join3(rootDir, rel))) {
@@ -854,7 +871,7 @@ async function scan(rootDir, opts = {}) {
               rule: "RULES_CONFIG_MISMATCH",
               severity: "WARNING",
               confidence: "CONFIRMED",
-              message: `firebase.json aponta firestore.${kind} para "${rel}" inexistente \u2014 usando default. Corrija o path.`,
+              message: `firebase.json aponta ${label} para "${rel}" inexistente \u2014 usando default. Corrija o path.`,
               fingerprint: `RULES_CONFIG_MISMATCH:${kind}:${rel}`,
               evidence: [
                 { id: `ev-config-${kind}`, kind: "config-mismatch", summary: rel, confidence: "CONFIRMED" }
@@ -1078,8 +1095,21 @@ async function scan(rootDir, opts = {}) {
   }
   const checksFindings = await runChecks(model, rootDir, { adapterFn: opts.adapterFn ?? model.authorization.adapter ?? void 0 });
   const findings = [...findings_pre, ...checksFindings];
-  const checked = ["firestore.rules", "indexes", "contract", "client-code"];
+  const checked = [];
+  if (d.firestoreRulesFile && existsSync3(d.firestoreRulesFile)) checked.push("firestore.rules");
+  if (d.firestoreIndexesFile && existsSync3(d.firestoreIndexesFile)) checked.push("indexes");
+  if (d.auditYamlFile && existsSync3(d.auditYamlFile)) checked.push("contract");
+  checked.push("client-code");
   const skipped = [];
+  if (!d.firestoreRulesFile || !existsSync3(d.firestoreRulesFile)) {
+    skipped.push("firestore.rules n\xE3o observado \u2014 FBA001/FBA002 sem cobertura");
+  }
+  if (!d.firestoreIndexesFile || !existsSync3(d.firestoreIndexesFile)) {
+    skipped.push("firestore.indexes.json n\xE3o observado \u2014 drift de \xEDndices sem base local");
+  }
+  if (!d.auditYamlFile || !existsSync3(d.auditYamlFile)) {
+    skipped.push("firebase-audit.yaml n\xE3o observado \u2014 permiss\xF5es seguem UNKNOWN sem contrato");
+  }
   if (d.storageRulesFile && existsSync3(d.storageRulesFile)) {
     checked.push("storage.rules");
     try {
@@ -1092,46 +1122,97 @@ async function scan(rootDir, opts = {}) {
         return `ev-storage-${prefix}-${evCounter}`;
       };
       for (const m of parseStorageAllows(clean)) {
-        if (!isOpenStorageCondition(m.condition)) continue;
         const ops = expandStorageOps(m.target);
         const key = conditionKeyForFingerprint(m.condition);
-        const wildcard = /\{[^}]*=\*\*\}/.test(m.matchPath) || m.matchPath.toLowerCase().includes("allpaths");
+        const normCond = (m.condition ?? "").toLowerCase().replace(/\s+/g, "");
+        const hasAuth = normCond.includes("request.auth");
+        const bareAuth = (/request\.auth(!==|!=)null/.test(normCond) || /request\.auth\.uid(!==|!=)null/.test(normCond)) && !normCond.includes("request.auth.token") && !normCond.includes("sign_in_provider");
+        const wildcard = /\{\s*\w+\s*=\s*\*\*\s*\}/.test(m.matchPath);
         const where = `${relStorage}:${m.line} (${m.matchPath}, allow ${m.target})`;
-        if (ops.has("write") || ops.has("create") || ops.has("update") || ops.has("delete")) {
+        if (isOpenStorageCondition(m.condition)) {
+          if (ops.has("write") || ops.has("create") || ops.has("update") || ops.has("delete")) {
+            findings.push({
+              rule: "STORAGE_PUBLIC_WRITE",
+              severity: "ERROR",
+              confidence: "CONFIRMED",
+              message: `Storage com escrita aberta (${where}). Qualquer cliente pode escrever \u2014 cofre aberto, n\xE3o vitrine.`,
+              fingerprint: `STORAGE_PUBLIC_WRITE:${m.matchPath}:${normalizeTarget(m.target)}:${key}`,
+              file: relStorage,
+              line: m.line,
+              evidence: [{ id: evId("write"), kind: "storage-public", summary: `${m.matchPath} allow ${m.target}`, confidence: "CONFIRMED", location: { file: relStorage, start: { line: m.line, column: 0 } } }],
+              fix: "Exigir request.auth (e dono/tenant) no write. Deixe get aberto s\xF3 em pasta de vitrine como logos/."
+            });
+            continue;
+          }
+          if (ops.has("read") || ops.has("get") || ops.has("list")) {
+            if (wildcard) {
+              findings.push({
+                rule: "STORAGE_ALL_PATHS_OPEN",
+                severity: "WARNING",
+                confidence: "PROBABLE",
+                message: `Storage com leitura aberta em curinga total (${where}). Vale para tudo \u2014 se a inten\xE7\xE3o era s\xF3 logo, restrinja a /logos/{id}.`,
+                fingerprint: `STORAGE_ALL_PATHS_OPEN:${m.matchPath}:${normalizeTarget(m.target)}:${key}`,
+                file: relStorage,
+                line: m.line,
+                evidence: [{ id: evId("all"), kind: "storage-public", summary: `${m.matchPath} allow ${m.target}`, confidence: "PROBABLE", location: { file: relStorage, start: { line: m.line, column: 0 } } }],
+                fix: "Troque o curinga total por pastas expl\xEDcitas (ex: /logos/{logoId}) com get: if true e write restrito."
+              });
+            } else {
+              const enumerates = ops.has("read") || ops.has("list");
+              findings.push({
+                rule: "STORAGE_PUBLIC_READ",
+                severity: "INFO",
+                confidence: "PROBABLE",
+                message: enumerates ? `Storage com leitura aberta (${where}). Pode ser vitrine proposital \u2014 mas allow read/list permite enumerar a pasta; para vitrine segura prefira allow get. Confirme que o write segue restrito.` : `Storage com leitura aberta (${where}). Pode ser vitrine proposital (logos) \u2014 confirme que o write segue restrito.`,
+                fingerprint: `STORAGE_PUBLIC_READ:${m.matchPath}:${normalizeTarget(m.target)}:${key}`,
+                file: relStorage,
+                line: m.line,
+                evidence: [{ id: evId("read"), kind: "storage-public", summary: `${m.matchPath} allow ${m.target}`, confidence: "PROBABLE", location: { file: relStorage, start: { line: m.line, column: 0 } } }],
+                fix: enumerates ? "Para vitrine, troque allow read por allow get (sem list) na pasta p\xFAblica." : void 0
+              });
+            }
+            continue;
+          }
+        }
+        if (bareAuth && (ops.has("read") || ops.has("get") || ops.has("list") || ops.has("write") || ops.has("create") || ops.has("update") || ops.has("delete"))) {
           findings.push({
-            rule: "STORAGE_PUBLIC_WRITE",
-            severity: "ERROR",
-            confidence: "CONFIRMED",
-            message: `Storage com escrita aberta (${where}). Qualquer cliente pode escrever \u2014 cofre aberto, n\xE3o vitrine.`,
-            fingerprint: `STORAGE_PUBLIC_WRITE:${m.matchPath}:${m.target}:${key}`,
+            rule: "STORAGE_ANON_ALLOWED",
+            severity: "INFO",
+            confidence: "PROBABLE",
+            message: `Storage aceita qualquer autenticado incluindo an\xF4nimo (${where}). Exija claim/provider para dados sens\xEDveis.`,
+            fingerprint: `STORAGE_ANON_ALLOWED:${m.matchPath}:${normalizeTarget(m.target)}:${key}`,
             file: relStorage,
             line: m.line,
-            evidence: [{ id: evId("write"), kind: "storage-public", summary: `${m.matchPath} allow ${m.target}`, confidence: "CONFIRMED", location: { file: relStorage, start: { line: m.line, column: 0 } } }],
-            fix: "Exigir request.auth (e dono/tenant) no write. Deixe get aberto s\xF3 em pasta de vitrine como logos/."
+            evidence: [{ id: evId("anon"), kind: "anon-allowed", summary: `${m.matchPath} allow ${m.target}`, confidence: "PROBABLE", location: { file: relStorage, start: { line: m.line, column: 0 } } }],
+            fix: "Exigir claim (token.admin/role) ou provider diferente de anonymous para dados sens\xEDveis."
           });
-        } else if (ops.has("read") || ops.has("get") || ops.has("list")) {
-          if (wildcard) {
+          continue;
+        }
+        if (!hasAuth && m.condition !== void 0) {
+          const canWrite = ops.has("write") || ops.has("create") || ops.has("update") || ops.has("delete");
+          const canRead = ops.has("read") || ops.has("get") || ops.has("list");
+          if (canWrite) {
             findings.push({
-              rule: "STORAGE_ALL_PATHS_OPEN",
-              severity: "WARNING",
+              rule: "STORAGE_PUBLIC_WRITE",
+              severity: "ERROR",
               confidence: "PROBABLE",
-              message: `Storage com leitura aberta em curinga total (${where}). Vale para tudo \u2014 se a inten\xE7\xE3o era s\xF3 logo, restrinja a /logos/{id}.`,
-              fingerprint: `STORAGE_ALL_PATHS_OPEN:${m.matchPath}:${m.target}:${key}`,
+              message: `Storage com escrita condicionada sem request.auth (${where}). Se a condi\xE7\xE3o for verdadeira para an\xF4nimo, ele escreve \u2014 cofre prov\xE1vel.`,
+              fingerprint: `STORAGE_PUBLIC_WRITE:${m.matchPath}:${normalizeTarget(m.target)}:${key}`,
               file: relStorage,
               line: m.line,
-              evidence: [{ id: evId("all"), kind: "storage-public", summary: `${m.matchPath} allow ${m.target}`, confidence: "PROBABLE", location: { file: relStorage, start: { line: m.line, column: 0 } } }],
-              fix: "Troque o curinga total por pastas expl\xEDcitas (ex: /logos/{logoId}) com get: if true e write restrito."
+              evidence: [{ id: evId("write"), kind: "storage-public", summary: `${m.matchPath} allow ${m.target} sem auth`, confidence: "PROBABLE", location: { file: relStorage, start: { line: m.line, column: 0 } } }],
+              fix: "Exigir request.auth (e dono/tenant) em qualquer condi\xE7\xE3o de write."
             });
-          } else {
+          } else if (canRead) {
             findings.push({
               rule: "STORAGE_PUBLIC_READ",
               severity: "INFO",
               confidence: "PROBABLE",
-              message: `Storage com leitura aberta (${where}). Pode ser vitrine proposital (logos) \u2014 confirme que o write segue restrito.`,
-              fingerprint: `STORAGE_PUBLIC_READ:${m.matchPath}:${m.target}:${key}`,
+              message: `Storage com leitura condicionada sem request.auth (${where}). Se a condi\xE7\xE3o for verdadeira para an\xF4nimo, ele l\xEA \u2014 confirme que \xE9 vitrine.`,
+              fingerprint: `STORAGE_PUBLIC_READ:${m.matchPath}:${normalizeTarget(m.target)}:${key}`,
               file: relStorage,
               line: m.line,
-              evidence: [{ id: evId("read"), kind: "storage-public", summary: `${m.matchPath} allow ${m.target}`, confidence: "PROBABLE", location: { file: relStorage, start: { line: m.line, column: 0 } } }]
+              evidence: [{ id: evId("read"), kind: "storage-public", summary: `${m.matchPath} allow ${m.target} sem auth`, confidence: "PROBABLE", location: { file: relStorage, start: { line: m.line, column: 0 } } }]
             });
           }
         }
@@ -1166,7 +1247,7 @@ async function scan(rootDir, opts = {}) {
         evidence: [{ id: "ev-appcheck", kind: "appcheck", summary: `${appcheck.occurrences} ocorr\xEAncias`, confidence: "CONFIRMED" }]
       });
     } else if (appcheck.manual === 0) {
-      skipped.push("functions sem enforceAppCheck nem verifyToken observado \u2014 AppCheck sem cobertura afirmativa (onRequest exige verifica\xE7\xE3o manual por rota)");
+      skipped.push("functions sem enforceAppCheck literal nem verifyToken observado \u2014 AppCheck sem cobertura afirmativa (config via vari\xE1vel conta como n\xE3o observada; onRequest exige verifica\xE7\xE3o manual por rota)");
     }
     if (appcheck.limitHit) {
       skipped.push("functions: teto de varredura atingido \u2014 AppCheck parcial neste scan");
@@ -1234,7 +1315,7 @@ async function countAppCheckEnforced(rootDir) {
   try {
     const { readdirSync, readFileSync: readSync, statSync: stat } = await import("fs");
     const { join: joinP } = await import("path");
-    const { stripRuleComments: strip } = await import("./rules-GTGZWN5U.js");
+    const { stripRuleComments: strip } = await import("./rules-W4VUUQM4.js");
     const roots = [joinP(rootDir, "functions")];
     let occurrences = 0;
     const files = /* @__PURE__ */ new Set();
@@ -1244,7 +1325,7 @@ async function countAppCheckEnforced(rootDir) {
     let guard = 0;
     const isTestFile = (p) => {
       const n = p.replace(/\\/g, "/");
-      return /\.test\.[tj]sx?$/.test(n) || /\.spec\.[tj]sx?$/.test(n) || /(^|\/)__tests__\//.test(n);
+      return /\.test\.[tj]sx?$/.test(n) || /\.spec\.[tj]sx?$/.test(n) || /(^|\/)__tests__\//.test(n) || /(^|\/)(test|tests|testing)\//.test(n);
     };
     while (stack.length > 0 && guard < 200) {
       guard += 1;
@@ -1270,16 +1351,22 @@ async function countAppCheckEnforced(rootDir) {
           stack.push(abs);
           continue;
         }
-        if (!/\.(ts|js|mjs|cjs)$/.test(name)) continue;
+        if (!/\.(ts|js|mjs|cjs|py)$/.test(name)) continue;
         if (isTestFile(abs)) continue;
         try {
-          const text = strip(readSync(abs, "utf-8"));
-          const hits = text.match(/enforceAppCheck\s*:\s*true/g);
+          let text = strip(readSync(abs, "utf-8"));
+          if (name.endsWith(".py")) {
+            text = text.split("\n").map((l) => {
+              const idx = l.indexOf("#");
+              return idx === -1 ? l : l.slice(0, idx);
+            }).join("\n");
+          }
+          const hits = text.match(/enforceAppCheck\s*:\s*true|enforce_app_check\s*=\s*True/g);
           if (hits) {
             occurrences += hits.length;
             files.add(abs);
           }
-          const manualHits = text.match(/verifyToken\s*\(/g);
+          const manualHits = text.match(/verifyToken\s*\(|verify_token\s*\(|consumeAppCheckToken|getLimitedUseToken|getAppCheck\s*\(/g);
           if (manualHits) manual += manualHits.length;
         } catch {
         }
@@ -1294,6 +1381,8 @@ function isOpenStorageCondition(condition) {
   if (condition === void 0) return true;
   const norm = stripOuterParens(condition).toLowerCase().replace(/\s+/g, "");
   if (norm === "" || norm === "true") return true;
+  if (/^!\(.*request\.auth(===|==)null/.test(norm)) return false;
+  if (/^!\(.*request\.auth(!==|!=)null/.test(norm)) return true;
   if (/(^|\|\|)true($|\|\|)/.test(norm)) return true;
   if (norm.includes("request.auth==null") || norm.includes("request.auth===null")) return true;
   return false;
@@ -1304,13 +1393,24 @@ function parseStorageAllows(clean) {
   const matchRe = /match\s+/g;
   let mm;
   while ((mm = matchRe.exec(clean)) !== null) {
-    const lineStart = clean.lastIndexOf("\n", mm.index) + 1;
-    const lineEnd = clean.indexOf("\n", mm.index);
-    const line = clean.slice(lineStart, lineEnd === -1 ? void 0 : lineEnd);
-    const brace = line.lastIndexOf("{");
-    if (brace === -1) continue;
-    const path = line.slice(mm.index - lineStart + 5, brace).trim() || "/(unknown)";
-    const openBrace = lineStart + brace;
+    const from = mm.index + mm[0].length;
+    let openBrace = -1;
+    let scan2 = from;
+    while (scan2 < clean.length) {
+      const b = clean.indexOf("{", scan2);
+      if (b === -1) break;
+      const between = clean.slice(from, b);
+      if (/match\s|allow\s|;/.test(between)) break;
+      const after = clean.slice(b + 1, b + 12).trimStart().replace(/^\n+/, "");
+      const eol = clean.slice(b + 1).match(/^[ \t]*(\n|$)/) !== null;
+      if (/^(allow|match|function|\})/.test(after) || eol) {
+        openBrace = b;
+        break;
+      }
+      scan2 = b + 1;
+    }
+    if (openBrace === -1) continue;
+    const path = clean.slice(from, openBrace).trim() || "/(unknown)";
     let depth = 0;
     let quote = null;
     let end = clean.length;

package/dist/{chunk-7EWTBIKJ.js → chunk-FECVBQUO.js}

@@ -162,21 +162,47 @@ function inlineHelpersInCondition(condition, detailed) {
   }
   return out;
 }
+function isSingleCall(condition) {
+  const m = /^([A-Za-z_][A-Za-z0-9_]*)\s*\(/.exec(condition.trim());
+  if (!m) return null;
+  const open = condition.indexOf("(", m[0].length - 1);
+  let depth = 0;
+  let quote = null;
+  for (let i = open; i < condition.length; i++) {
+    const c = condition[i];
+    if (quote) {
+      if (c === quote && condition[i - 1] !== "\\") quote = null;
+      continue;
+    }
+    if (c === '"' || c === "'" || c === "`") {
+      quote = c;
+      continue;
+    }
+    if (c === "(") depth += 1;
+    else if (c === ")") {
+      depth -= 1;
+      if (depth === 0) {
+        const rest = condition.slice(i + 1).replace(/;$/, "").trim();
+        if (rest !== "") return null;
+        return { name: m[1], args: condition.slice(open + 1, i) };
+      }
+    }
+  }
+  return null;
+}
 function resolveHelperCondition(condition, functions) {
-  const t = condition.trim().replace(/;$/, "").trim();
-  const call = /^([A-Za-z_][A-Za-z0-9_]*)\s*\((.*)\)$/.exec(t);
-  if (!call) return condition;
-  const body = functions.get(call[1]);
+  const single = isSingleCall(condition);
+  if (!single) return condition;
+  const body = functions.get(single.name);
   if (body === void 0) return condition;
   return body;
 }
 function resolveHelperConditionDetailed(condition, detailed) {
-  const t = condition.trim().replace(/;$/, "").trim();
-  const call = /^([A-Za-z_][A-Za-z0-9_]*)\s*\((.*)\)$/.exec(t);
-  if (!call) return condition;
-  const fn = detailed.get(call[1]);
+  const single = isSingleCall(condition);
+  if (!single) return condition;
+  const fn = detailed.get(single.name);
   if (!fn) return condition;
-  const args = call[2].length === 0 ? [] : call[2].split(",").map((s) => s.trim());
+  const args = single.args.length === 0 ? [] : single.args.split(",").map((s) => s.trim());
   return inlineHelperArgs(fn.body, fn.params, args);
 }
 function extractRules(rulesFile, relFile) {
@@ -275,7 +301,10 @@ function isPublicCondition(condition) {
     return { isPublic: false, confidence: "CONFIRMED" };
   }
   if (low === "true") return { isPublic: true, confidence: "CONFIRMED" };
-  if (/(^|\|\|)true($|\|\|)/.test(low)) return { isPublic: true, confidence: "PROBABLE" };
+  for (const part of low.split("||")) {
+    const branch = stripOuterParens(part.replace(/return/g, "").replace(/;/g, "").trim());
+    if (branch === "true") return { isPublic: true, confidence: "PROBABLE" };
+  }
   if (low.includes("request.auth==null") || low.includes("request.auth===null")) {
     return { isPublic: true, confidence: "CONFIRMED" };
   }

package/dist/{chunk-AXTYJMA7.js → chunk-RKQ3ZWWI.js}

@@ -1,6 +1,6 @@
 import {
   scan
-} from "./chunk-UKEKA2NQ.js";
+} from "./chunk-AKPQ4OAJ.js";
 import {
   verify
 } from "./chunk-Y4VXWSKX.js";
@@ -28,6 +28,16 @@ function readPkgText(rel) {
     return null;
   }
 }
+function assertCwd(cwd) {
+  const { existsSync: existsSync2, statSync } = require2("node:fs");
+  let ok = false;
+  try {
+    ok = existsSync2(cwd) && statSync(cwd).isDirectory();
+  } catch {
+    ok = false;
+  }
+  if (!ok) throw new Error(`Diret\xF3rio n\xE3o existe: ${cwd}`);
+}
 var FALLBACK_SKILL = [
   "# firebase-audit-skill (fallback)",
   "",
@@ -79,6 +89,7 @@ function createMcpServer() {
     },
     async ({ cwd, adapter, strict }) => {
       try {
+        assertCwd(cwd);
         const res = await scan(cwd, { adapterFn: adapter, strict });
         return {
           content: [
@@ -108,6 +119,7 @@ function createMcpServer() {
     },
     async ({ cwd, adapter }) => {
       try {
+        assertCwd(cwd);
         const res = await scan(cwd, { adapterFn: adapter, strict: true });
         return {
           content: [
@@ -115,7 +127,8 @@ function createMcpServer() {
               type: "text",
               text: JSON.stringify({ summary: res.summary, findings: res.findings }, null, 2)
             }
-          ]
+          ],
+          isError: res.summary.errors > 0
         };
       } catch (err) {
         return {
@@ -137,6 +150,7 @@ function createMcpServer() {
     },
     async ({ cwd, coverage }) => {
       try {
+        assertCwd(cwd);
         const { resolve } = await import("path");
         const { model } = await scan(cwd);
         const res = verify(model, { coverageFile: coverage ? resolve(cwd, coverage) : void 0 });
@@ -187,6 +201,7 @@ function createMcpServer() {
       try {
         const { resolve: resolveP, isAbsolute } = await import("path");
         const base = cwd && cwd.length > 0 ? cwd : process.cwd();
+        assertCwd(base);
         const resPath = (p) => {
           if (p === null || p === void 0) return null;
           return isAbsolute(p) ? p : resolveP(base, p);

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   scan
-} from "./chunk-UKEKA2NQ.js";
-import "./chunk-7EWTBIKJ.js";
+} from "./chunk-AKPQ4OAJ.js";
+import "./chunk-FECVBQUO.js";
 
 // src/cli.ts
 import { createRequire } from "module";
@@ -32,8 +32,6 @@ Exit codes: 0 ok informativo; 2 quando --strict/check encontra ERROR. scan sozin
 Uso: firebase-audit scan [--json] [--strict] [--adapter=fn] [--cwd=path]`);
     process.exit(1);
   }
-  const strict = args.includes("--strict") || cmd === "check";
-  const asJson = args.includes("--json") || args.includes("--json=true");
   const getArg = (name) => {
     const pref = `--${name}=`;
     const hit = args.find((a) => a.startsWith(pref));
@@ -42,6 +40,18 @@ Uso: firebase-audit scan [--json] [--strict] [--adapter=fn] [--cwd=path]`);
     if (idx !== -1 && args[idx + 1] && !args[idx + 1].startsWith("--")) return args[idx + 1];
     return void 0;
   };
+  const strictArg = getArg("strict");
+  const strict = args.includes("--strict") || strictArg === "true" || cmd === "check";
+  if (strictArg !== void 0 && strictArg !== "true" && strictArg !== "false") {
+    console.error(`Valor inv\xE1lido para --strict: ${strictArg} (use --strict, --strict=true ou --strict=false)`);
+    process.exit(1);
+  }
+  const asJsonArg = getArg("json");
+  const asJson = args.includes("--json") || asJsonArg === "true";
+  if (asJsonArg !== void 0 && asJsonArg !== "true" && asJsonArg !== "false") {
+    console.error(`Valor inv\xE1lido para --json: ${asJsonArg} (use --json, --json=true ou --json=false)`);
+    process.exit(1);
+  }
   const knownFlags = /* @__PURE__ */ new Set(["--json", "--strict", "--help", "-h", "help", "--version", "-v", "--coverage", "--local", "--remote"]);
   for (const a of args.slice(1)) {
     const base = a.includes("=") ? a.slice(0, a.indexOf("=")) : a;
@@ -54,18 +64,24 @@ Uso: firebase-audit scan|check|verify|drift [--json] ...`);
   const adapterArg = getArg("adapter");
   const cwdArg = getArg("cwd");
   if (cwdArg) {
-    const { existsSync: existsCwd } = await import("fs");
+    const { existsSync: existsCwd, statSync: statCwd } = await import("fs");
     const { resolve: resolveCwd } = await import("path");
     const abs = resolveCwd(process.cwd(), cwdArg);
-    if (!existsCwd(abs)) {
-      console.error(`Diret\xF3rio --cwd n\xE3o existe: ${cwdArg}`);
+    let isDir = false;
+    try {
+      isDir = existsCwd(abs) && statCwd(abs).isDirectory();
+    } catch {
+      isDir = false;
+    }
+    if (!isDir) {
+      console.error(`Diret\xF3rio --cwd n\xE3o existe ou n\xE3o \xE9 diret\xF3rio: ${cwdArg}`);
       process.exit(1);
     }
   }
   const { resolve: resolveRoot } = await import("path");
   const rootDir = cwdArg ? resolveRoot(process.cwd(), cwdArg) : process.cwd();
   if (cmd === "verify") {
-    const { scan: scanForVerify } = await import("./scan-OEN65GHM.js");
+    const { scan: scanForVerify } = await import("./scan-YUXXYBRU.js");
     const { verify } = await import("./verify-WBVSESHD.js");
     const { resolve: resolveVerify } = await import("path");
     const coverageArg = getArg("coverage");
@@ -164,7 +180,7 @@ ${icon} ${f.rule} [${f.confidence}]${where}
     if (f.fix) console.log(`   \u2192 ${f.fix}`);
   }
   console.log(`
-SUMMARY: ${summary.errors} errors, ${summary.warnings} warnings, ${summary.infos} infos (${summary.passedChecks}/${summary.totalChecks} checks FBA passaram)`);
+SUMMARY: ${summary.errors} errors, ${summary.warnings} warnings, ${summary.infos} infos (${summary.passedChecks}/${summary.totalChecks} checks FBA passaram${summary.infra.length > 0 ? `, ${summary.infra.length} achado(s) fora dos FBA` : ""})`);
   console.log(`Olhei: ${summary.checked.join(", ")}`);
   console.log(`Pulei: ${summary.skipped.join(" | ") || "nada"}
 `);

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-AXTYJMA7.js";
+} from "./chunk-RKQ3ZWWI.js";
 import {
   AccessOriginSchema,
   AuditYamlSchema,
@@ -33,7 +33,7 @@ import {
   runChecks,
   scan,
   validateClaimSamples
-} from "./chunk-UKEKA2NQ.js";
+} from "./chunk-AKPQ4OAJ.js";
 import {
   buildFullPath,
   conditionKeyForFingerprint,
@@ -55,7 +55,7 @@ import {
   resolveHelperConditionDetailed,
   stripOuterParens,
   stripRuleComments
-} from "./chunk-7EWTBIKJ.js";
+} from "./chunk-FECVBQUO.js";
 import {
   planVerify,
   verify

package/dist/mcp-cli.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   startMcpServer
-} from "./chunk-AXTYJMA7.js";
-import "./chunk-UKEKA2NQ.js";
-import "./chunk-7EWTBIKJ.js";
+} from "./chunk-RKQ3ZWWI.js";
+import "./chunk-AKPQ4OAJ.js";
+import "./chunk-FECVBQUO.js";
 import "./chunk-Y4VXWSKX.js";
 import "./chunk-XZ32YQQC.js";
 

package/dist/mcp.js

@@ -1,9 +1,9 @@
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-AXTYJMA7.js";
-import "./chunk-UKEKA2NQ.js";
-import "./chunk-7EWTBIKJ.js";
+} from "./chunk-RKQ3ZWWI.js";
+import "./chunk-AKPQ4OAJ.js";
+import "./chunk-FECVBQUO.js";
 import "./chunk-Y4VXWSKX.js";
 import "./chunk-XZ32YQQC.js";
 export {

package/dist/{rules-GTGZWN5U.js → rules-W4VUUQM4.js}

@@ -19,7 +19,7 @@ import {
   resolveHelperConditionDetailed,
   stripOuterParens,
   stripRuleComments
-} from "./chunk-7EWTBIKJ.js";
+} from "./chunk-FECVBQUO.js";
 export {
   buildFullPath,
   conditionKeyForFingerprint,

package/dist/scan-YUXXYBRU.js

@@ -0,0 +1,7 @@
+import {
+  scan
+} from "./chunk-AKPQ4OAJ.js";
+import "./chunk-FECVBQUO.js";
+export {
+  scan
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@justmpm/firebase-audit",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "description": "Auditor de consistência e segurança para projetos Firebase: código + Rules + índices + contrato vs comportamento. Static-first, nunca inventa certeza.",
   "keywords": [
     "firebase",

package/skill/SKILL.md

@@ -28,5 +28,11 @@ Skill para agentes usarem o `@justmpm/firebase-audit` do jeito certo.
 firebase emulators:exec --only firestore "npm test"
 ```
 
-Matriz `anon/user/admin x read/create/update/delete` com `@firebase/rules-unit-testing`.
+Matriz papel×operação×path (`read` = `get` + `list`) com `@firebase/rules-unit-testing`.
 Cobertura em `ruleCoverage` (JSON). Emulator não prova índice. Sem contrato, papéis reduzidos (anonymous/user/admin).
+Use `drift` para comparar índices locais vs implantados (MATCHED/LOCAL_ONLY/REMOTE_ONLY).
+
+## Limites honestos
+
+- AppCheck: varredura TS/Python por texto (`enforceAppCheck`, `verifyToken` e afins). Config via variável conta como não observada; `onRequest` exige revisão rota a rota.
+- Isolamento por tenant (ownerId/tenantId): fora dos checks — revise manualmente ou no Emulator.

package/dist/scan-OEN65GHM.js

@@ -1,7 +0,0 @@
-import {
-  scan
-} from "./chunk-UKEKA2NQ.js";
-import "./chunk-7EWTBIKJ.js";
-export {
-  scan
-};