eslint-plugin-firebase-ai-logic 1.1.0 → 1.3.0

package/README.md

@@ -1,6 +1,6 @@
 # ESLint Plugin: Firebase AI Logic
 
-Plugin ESLint oficial para **Firebase AI Logic** com 24 regras que detectam anti-padrões, imports obsoletos, configs inválidas e best practices.
+Plugin ESLint oficial para **Firebase AI Logic** com 39 regras que detectam anti-padrões, imports obsoletos, configs inválidas e best practices.
 
 ```bash
 npm install --save-dev eslint-plugin-firebase-ai-logic
@@ -19,7 +19,7 @@ npm install --save-dev eslint-plugin-firebase-ai-logic
 Edite `eslint.config.js`:
 
 ```javascript
-import firebaseAiLogicPlugin from 'eslint-plugin-firebase-ai-logic';
+import firebaseAiLogicPlugin from "eslint-plugin-firebase-ai-logic";
 
 export default [
   firebaseAiLogicPlugin.configs.recommended,
@@ -33,8 +33,8 @@ Edite `.eslintrc.js` ou `.eslintrc.json`:
 
 ```javascript
 module.exports = {
-  plugins: ['firebase-ai-logic'],
-  extends: ['plugin:firebase-ai-logic/recommended'],
+  plugins: ["firebase-ai-logic"],
+  extends: ["plugin:firebase-ai-logic/recommended"],
 };
 ```
 
@@ -54,13 +54,13 @@ Pronto! O plugin agora vai detectar problemas no seu código Firebase AI Logic.
 
 ```typescript
 // ❌ ERRADO - Usando import antigo
-import { getVertexAI } from 'firebase/vertexai-preview';
+import { getVertexAI } from "firebase/vertexai-preview";
 
 // ❌ ERRADO - Importando direto da Google Cloud
-import { VertexAI } from '@google-cloud/vertexai';
+import { VertexAI } from "@google-cloud/vertexai";
 
 // ✅ CERTO - Use firebase/ai
-import { getAI, GoogleAIBackend } from 'firebase/ai';
+import { getAI, GoogleAIBackend } from "firebase/ai";
 ```
 
 ### ❌ Modelo Obsoleto
@@ -68,12 +68,12 @@ import { getAI, GoogleAIBackend } from 'firebase/ai';
 ```typescript
 // ❌ ERRADO - gemini-2.5-pro é deprecated
 const model = getGenerativeModel(ai, {
-  model: 'gemini-2.5-pro'
+  model: "gemini-2.5-pro",
 });
 
 // ✅ CERTO - Use gemini-3-flash-preview
 const model = getGenerativeModel(ai, {
-  model: 'gemini-3-flash-preview'
+  model: "gemini-3-flash-preview",
 });
 ```
 
@@ -82,13 +82,13 @@ const model = getGenerativeModel(ai, {
 ```typescript
 // ❌ ERRADO - Não funciona junto
 const result = await model.generateContentStream(prompt, {
-  responseMimeType: 'application/json',
+  responseMimeType: "application/json",
   responseSchema: mySchema,
 });
 
 // ✅ CERTO - Use generateContent (sem stream)
 const result = await model.generateContent(prompt, {
-  responseMimeType: 'application/json',
+  responseMimeType: "application/json",
   responseSchema: mySchema,
 });
 ```
@@ -101,7 +101,7 @@ const ai = getAI(app);
 
 // ✅ CERTO - Sempre especifique o backend
 const ai = getAI(app, {
-  backend: new GoogleAIBackend()
+  backend: new GoogleAIBackend(),
 });
 ```
 
@@ -119,7 +119,7 @@ const calls = result.response.functionCalls();
 for (const call of calls) {
   const response = await executeFunction(call.name, call.args);
   await chat.sendMessage({
-    role: 'user',
+    role: "user",
     parts: [{ functionResponse: response }],
   });
 }
@@ -127,63 +127,74 @@ for (const call of calls) {
 
 ---
 
-## 📚 Todas as 24 Regras
+## 📚 Todas as 39 Regras
 
 ### Imports & Models (5 regras)
 
-| Regra | Descrição |
-|-------|-----------|
+| Regra                             | Descrição                                               |
+| --------------------------------- | ------------------------------------------------------- |
 | `no-deprecated-firebase-vertexai` | Não use `firebase/vertexai-preview` → use `firebase/ai` |
-| `no-vertexai-only-import` | Não use `firebase/vertexai` → use `firebase/ai` |
-| `no-vertex-ai-direct-import` | Não use `@google-cloud/vertexai` → use `firebase/ai` |
-| `no-google-genai-import` | Não use `@google/generative-ai` → use `firebase/ai` |
-| `no-deprecated-models` | Detecta modelos obsoletos (gemini-2.5-pro, etc) |
+| `no-vertexai-only-import`         | Não use `firebase/vertexai` → use `firebase/ai`         |
+| `no-vertex-ai-direct-import`      | Não use `@google-cloud/vertexai` → use `firebase/ai`    |
+| `no-google-genai-import`          | Não use `@google/generative-ai` → use `firebase/ai`     |
+| `no-deprecated-models`            | Detecta modelos obsoletos (gemini-2.5-pro, etc)         |
 
 ### Schema & Validation (4 regras)
 
-| Regra | Descrição |
-|-------|-----------|
-| `no-streaming-with-schema` | JSON schema NÃO funciona com streaming |
-| `no-unsupported-schema-features` | union types, constraints não são suportados |
-| `no-schema-in-prompt` | Remova instruções JSON do prompt se usar responseSchema |
-| `require-json-validation` | Valide JSON parseado com Zod após receber |
-
-### Functions (3 regras)
-
-| Regra | Descrição |
-|-------|-----------|
-| `require-function-description` | Função precisa de descrição detalhada |
-| `require-function-response-handling` | Function calling requer loop completo |
-| `no-unsupported-function-params` | Alguns atributos não são suportados |
-
-### Performance & Optimization (5 regras)
-
-| Regra | Descrição |
-|-------|-----------|
-| `prefer-batch-requests` | Agrupe requisições em Promise.all() |
-| `prefer-count-tokens` | Use countTokens() para prompts grandes |
-| `prefer-streaming-long-responses` | Streaming para respostas > 1000 chars |
-| `prefer-concise-property-names` | Nomes curtos economizam tokens |
-| `prefer-cloud-storage-large-files` | Use Cloud Storage pra arquivos > 10MB |
-
-### Configuration (4 regras)
-
-| Regra | Descrição |
-|-------|-----------|
-| `require-backend` | Backend (GoogleAI ou VertexAI) é obrigatório |
-| `require-ai-before-model` | Crie AI antes de usar getGenerativeModel |
-| `require-app-check-production` | Use App Check em produção |
-| `require-error-handling` | Envolva chamadas em try/catch |
-
-### Best Practices (3 regras)
-
-| Regra | Descrição |
-|-------|-----------|
-| `no-thinking-simple-tasks` | Thinking mode é overhead pra tarefas simples |
-| `no-unlimited-chat-history` | Limpe histórico do chat regularmente |
-| `no-verbose-prompts` | Prompts verbosos = mais tokens e custo |
-| `require-thought-signature` | Gemini 3: preserve thoughtSignature |
-| `no-sensitive-system-instruction` | Não coloque dados sensíveis no system prompt |
+| Regra                            | Descrição                                                 |
+| -------------------------------- | --------------------------------------------------------- |
+| `no-streaming-with-schema`       | JSON schema NÃO funciona com streaming                    |
+| `no-unsupported-schema-features` | union types, constraints não são suportados               |
+| `no-schema-in-prompt`            | Remova instruções JSON do prompt se usar `responseSchema` |
+| `require-json-validation`        | Valide JSON parseado com Zod após receber                 |
+| `validate-schema-structure`      | Detecta erros estruturais no objeto de schema             |
+| `validate-response-mime-type`    | Garante que `responseMimeType` é compatível com o schema  |
+
+### Functions & Code Execution (7 regras)
+
+| Regra                                | Descrição                                                                    |
+| ------------------------------------ | ---------------------------------------------------------------------------- |
+| `require-function-description`       | Função precisa de descrição detalhada                                        |
+| `require-function-response-handling` | Function calling requer loop completo                                        |
+| `no-unsupported-function-params`     | Alguns atributos não são suportados                                          |
+| `validate-code-execution-config`     | Valida configuração de Code Execution                                        |
+| `require-code-execution-handling`    | Code execution requer tratamento de `executableCode` / `codeExecutionResult` |
+| `no-file-uri-with-code-execution`    | Bloqueia `fileUri` em ferramentas com Code Execution                         |
+| `no-code-execution-creative-tasks`   | Sugere desativar Code Execution para tarefas puramente criativas             |
+
+### Performance, Cost & Limits (6 regras)
+
+| Regra                              | Descrição                                |
+| ---------------------------------- | ---------------------------------------- |
+| `prefer-batch-requests`            | Agrupe requisições em `Promise.all()`    |
+| `prefer-count-tokens`              | Use `countTokens()` para prompts grandes |
+| `prefer-streaming-long-responses`  | Streaming para respostas > 1000 chars    |
+| `prefer-concise-property-names`    | Nomes curtos economizam tokens           |
+| `prefer-cloud-storage-large-files` | Use Cloud Storage pra arquivos > 10MB    |
+| `no-unlimited-chat-history`        | Limpe histórico do chat regularmente     |
+
+### Security & Compliance (5 regras)
+
+| Regra                                     | Descrição                                                    |
+| ----------------------------------------- | ------------------------------------------------------------ |
+| `no-sensitive-system-instruction`         | Não coloque dados sensíveis no system prompt                 |
+| `require-app-check-production`            | Use App Check em produção                                    |
+| `require-grounding-compliance`            | Garante que Grounding segue regras de exibição e links       |
+| `require-google-ai-backend-for-grounding` | Google Search Grounding requer GoogleAIBackend               |
+| `validate-multimodal-config`              | Valida segurança de arquivos multimídia (limites de tamanho) |
+
+### Gemini 3 & Best Practices (8 regras)
+
+| Regra                        | Descrição                                                 |
+| ---------------------------- | --------------------------------------------------------- |
+| `require-thought-signature`  | Gemini 3: preserve `thoughtSignature` para coerência      |
+| `check-temperature-defaults` | Alertas sobre temperaturas extremas no Gemini 3           |
+| `check-media-resolution`     | Garante resolução compatível com as capacidades do modelo |
+| `no-thinking-simple-tasks`   | Thinking mode é overhead pra tarefas simples              |
+| `no-verbose-prompts`         | Prompts verbosos = mais tokens e custo                    |
+| `require-backend`            | Backend (GoogleAI ou VertexAI) é obrigatório              |
+| `require-ai-before-model`    | Crie AI antes de usar `getGenerativeModel`                |
+| `require-error-handling`     | Envolva chamadas em try/catch                             |
 
 ---
 
@@ -193,17 +204,17 @@ for (const call of calls) {
 
 ```javascript
 // ESLint 9+ (flat config)
-import firebaseAiLogicPlugin from 'eslint-plugin-firebase-ai-logic';
+import firebaseAiLogicPlugin from "eslint-plugin-firebase-ai-logic";
 
 export default [
   {
-    plugins: { 'firebase-ai-logic': firebaseAiLogicPlugin },
+    plugins: { "firebase-ai-logic": firebaseAiLogicPlugin },
     rules: {
-      'firebase-ai-logic/no-deprecated-models': 'error',
-      'firebase-ai-logic/require-backend': 'error',
-      'firebase-ai-logic/require-json-validation': 'warn',
+      "firebase-ai-logic/no-deprecated-models": "error",
+      "firebase-ai-logic/require-backend": "error",
+      "firebase-ai-logic/require-json-validation": "warn",
       // desabilitar regra
-      'firebase-ai-logic/no-verbose-prompts': 'off',
+      "firebase-ai-logic/no-verbose-prompts": "off",
     },
   },
 ];
@@ -212,12 +223,12 @@ export default [
 ```javascript
 // ESLint 8.x (legacy)
 module.exports = {
-  plugins: ['firebase-ai-logic'],
+  plugins: ["firebase-ai-logic"],
   rules: {
-    'firebase-ai-logic/no-deprecated-models': 'error',
-    'firebase-ai-logic/require-backend': 'error',
-    'firebase-ai-logic/require-json-validation': 'warn',
-    'firebase-ai-logic/no-verbose-prompts': 'off',
+    "firebase-ai-logic/no-deprecated-models": "error",
+    "firebase-ai-logic/require-backend": "error",
+    "firebase-ai-logic/require-json-validation": "warn",
+    "firebase-ai-logic/no-verbose-prompts": "off",
   },
 };
 ```
@@ -225,6 +236,7 @@ module.exports = {
 ### Regras por Severity
 
 **Error** (deve corrigir):
+
 - Imports deprecated
 - Modelos obsoletos
 - Backend obrigatório
@@ -232,12 +244,14 @@ module.exports = {
 - Schema com streaming
 
 **Warning** (considere corrigir):
+
 - Falta de validation JSON
 - Sem error handling
 - Historico de chat ilimitado
 - Prompts verbose
 
 **Suggestion** (dicas opcionais):
+
 - Nomes de propriedades longos
 - Sem countTokens
 - Sem streaming em respostas longas
@@ -249,15 +263,15 @@ module.exports = {
 ### Setup Completo
 
 ```typescript
-import { initializeApp } from 'firebase/app';
-import { getAI, getGenerativeModel, GoogleAIBackend } from 'firebase/ai';
-import { initializeAppCheck, ReCaptchaV3Provider } from 'firebase/app-check';
-import { z } from 'zod';
+import { initializeApp } from "firebase/app";
+import { getAI, getGenerativeModel, GoogleAIBackend } from "firebase/ai";
+import { initializeAppCheck, ReCaptchaV3Provider } from "firebase/app-check";
+import { z } from "zod";
 
 // ✅ App Check habilitado
 const app = initializeApp(firebaseConfig);
 initializeAppCheck(app, {
-  provider: new ReCaptchaV3Provider('YOUR_SITE_KEY'),
+  provider: new ReCaptchaV3Provider("YOUR_SITE_KEY"),
 });
 
 // ✅ AI com backend explícito
@@ -265,13 +279,13 @@ const ai = getAI(app, { backend: new GoogleAIBackend() });
 
 // ✅ Model com config correto
 const model = getGenerativeModel(ai, {
-  model: 'gemini-3-flash-preview', // ✅ Modelo atual
-  systemInstruction: 'Você é um assistente amigável',
+  model: "gemini-3-flash-preview", // ✅ Modelo atual
+  systemInstruction: "Você é um assistente amigável",
 });
 
 // ✅ Validação com Zod
 const ResponseValidator = z.object({
-  sentiment: z.enum(['positive', 'negative', 'neutral']),
+  sentiment: z.enum(["positive", "negative", "neutral"]),
   confidence: z.number().min(0).max(1),
 });
 
@@ -281,12 +295,12 @@ async function analyzeReview(review: string) {
     // ✅ countTokens para prompt grande
     const tokens = await model.countTokens(review);
     if (tokens.totalTokens > 5000) {
-      console.warn('Prompt grande:', tokens.totalTokens);
+      console.warn("Prompt grande:", tokens.totalTokens);
     }
 
     // ✅ generateContent (NÃO stream) para JSON
     const result = await model.generateContent(review, {
-      responseMimeType: 'application/json',
+      responseMimeType: "application/json",
       responseSchema: ReviewSchema,
     });
 
@@ -294,10 +308,10 @@ async function analyzeReview(review: string) {
     const data = JSON.parse(result.response.text());
     return ResponseValidator.parse(data);
   } catch (error) {
-    if (error instanceof Error && 'status' in error) {
+    if (error instanceof Error && "status" in error) {
       if ((error as any).status === 429) {
         // Rate limit - implementar exponential backoff
-        console.error('Rate limited, aguarde antes de tentar novamente');
+        console.error("Rate limited, aguarde antes de tentar novamente");
       }
     }
     throw error;
@@ -310,17 +324,19 @@ async function analyzeReview(review: string) {
 ```typescript
 // ✅ Setup com tools
 const model = getGenerativeModel(ai, {
-  model: 'gemini-3-flash-preview',
-  tools: [{
-    name: 'search_web',
-    description: 'Busca na web por informações recentes', // ✅ Descrição clara
-    parameters: {
-      type: 'object',
-      properties: {
-        query: { type: 'string' },
+  model: "gemini-3-flash-preview",
+  tools: [
+    {
+      name: "search_web",
+      description: "Busca na web por informações recentes", // ✅ Descrição clara
+      parameters: {
+        type: "object",
+        properties: {
+          query: { type: "string" },
+        },
       },
     },
-  }],
+  ],
 });
 
 async function chatWithFunctionCalling(userMessage: string) {
@@ -341,20 +357,22 @@ async function chatWithFunctionCalling(userMessage: string) {
 
         // ✅ IMPORTANTE: Enviar resposta de volta
         response = await chat.sendMessage({
-          role: 'user',
-          parts: [{
-            functionResponse: {
-              name: call.name,
-              response: result,
+          role: "user",
+          parts: [
+            {
+              functionResponse: {
+                name: call.name,
+                response: result,
+              },
             },
-          }],
+          ],
         });
       }
     }
 
     return response.response.text();
   } catch (error) {
-    console.error('Erro em function calling:', error);
+    console.error("Erro em function calling:", error);
     throw error;
   }
 }
@@ -367,14 +385,14 @@ async function chatWithFunctionCalling(userMessage: string) {
 const MAX_HISTORY = 10;
 
 async function maintainChatHistory(
-  messages: Array<{ role: string; text: string }>
+  messages: Array<{ role: string; text: string }>,
 ) {
   // ✅ Manter apenas últimas N mensagens
   const recentMessages = messages.slice(-MAX_HISTORY);
 
   const chat = model.startChat({
     history: recentMessages.map((msg) => ({
-      role: msg.role as 'user' | 'model',
+      role: msg.role as "user" | "model",
       parts: [{ text: msg.text }],
     })),
   });
@@ -390,11 +408,13 @@ async function maintainChatHistory(
 ### "Plugin não está sendo carregado"
 
 **Erro:**
+
 ```
 Cannot find module 'eslint-plugin-firebase-ai-logic'
 ```
 
 **Solução:**
+
 ```bash
 # Verifique se está instalado
 npm list eslint-plugin-firebase-ai-logic
@@ -409,11 +429,13 @@ import firebaseAiLogicPlugin from 'eslint-plugin-firebase-ai-logic';
 ### "Regra não reconhecida"
 
 **Erro:**
+
 ```
 "firebase-ai-logic/no-deprecated-models" was not found
 ```
 
 **Solução:**
+
 - Verifique o nome exato da regra
 - Use com prefixo: `firebase-ai-logic/`
 - Certifique-se que a regra está ativa na config
@@ -421,19 +443,19 @@ import firebaseAiLogicPlugin from 'eslint-plugin-firebase-ai-logic';
 ### "Config recommended não existe"
 
 **Solução para ESLint 9:**
+
 ```javascript
 // ✅ CERTO
-import firebaseAiLogicPlugin from 'eslint-plugin-firebase-ai-logic';
-export default [
-  firebaseAiLogicPlugin.configs.recommended,
-];
+import firebaseAiLogicPlugin from "eslint-plugin-firebase-ai-logic";
+export default [firebaseAiLogicPlugin.configs.recommended];
 ```
 
 **Solução para ESLint 8:**
+
 ```javascript
 // ✅ CERTO
 module.exports = {
-  extends: ['plugin:firebase-ai-logic/recommended'],
+  extends: ["plugin:firebase-ai-logic/recommended"],
 };
 ```
 
@@ -446,6 +468,7 @@ Cada regra tem documentação detalhada no GitHub:
 https://github.com/Just-mpm/eslint-plugin-firebase-ai-logic
 
 Veja o diretório `docs/rules/` para:
+
 - Exemplos de código bom e ruim
 - Razão por trás da regra
 - Como corrigir automaticamente
@@ -459,6 +482,7 @@ Abra uma issue no GitHub:
 https://github.com/Just-mpm/eslint-plugin-firebase-ai-logic/issues
 
 Inclua:
+
 - Versão do plugin
 - Versão do ESLint
 - Configuração ESLint
@@ -511,5 +535,5 @@ npm run test:watch
 
 Feito com ❤️ para developers Firebase AI Logic
 
-**Versão:** 1.0.0
+**Versão:** 1.1.0
 **NPM:** https://www.npmjs.com/package/eslint-plugin-firebase-ai-logic

package/dist/index.js

@@ -239,7 +239,7 @@ const configs = {
 const plugin = {
     meta: {
         name: 'eslint-plugin-firebase-ai-logic',
-        version: '1.0.0',
+        version: '1.3.0',
     },
     rules,
     configs,

package/dist/rules/check-temperature-defaults.d.ts

@@ -1,4 +1,22 @@
 import type { Rule } from 'eslint';
+/**
+ * check-temperature-defaults
+ *
+ * This rule suggests using the default temperature (1.0) for Gemini models,
+ * but with important exceptions:
+ *
+ * EXCEPTIONS (low temperature is valid and recommended):
+ * 1. Structured output (responseMimeType: 'application/json')
+ *    - Low temperature (0.1-0.3) prevents hallucinations in extraction tasks
+ * 2. Classification tasks
+ *    - Deterministic outputs benefit from low temperature
+ * 3. Data extraction
+ *    - Precise extraction needs low temperature
+ *
+ * The rule only warns when:
+ * - Temperature is NOT 1.0
+ * - AND responseMimeType is NOT 'application/json' (structured output)
+ */
 declare const rule: Rule.RuleModule;
 export default rule;
 //# sourceMappingURL=check-temperature-defaults.d.ts.map

package/dist/rules/check-temperature-defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check-temperature-defaults.d.ts","sourceRoot":"","sources":["../../src/rules/check-temperature-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAOnC,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UA6DhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"check-temperature-defaults.d.ts","sourceRoot":"","sources":["../../src/rules/check-temperature-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAQnC;;;;;;;;;;;;;;;;;GAiBG;AACH,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAgFhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/check-temperature-defaults.js

@@ -1,17 +1,35 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const ast_helpers_js_1 = require("../utils/ast-helpers.js");
+/**
+ * check-temperature-defaults
+ *
+ * This rule suggests using the default temperature (1.0) for Gemini models,
+ * but with important exceptions:
+ *
+ * EXCEPTIONS (low temperature is valid and recommended):
+ * 1. Structured output (responseMimeType: 'application/json')
+ *    - Low temperature (0.1-0.3) prevents hallucinations in extraction tasks
+ * 2. Classification tasks
+ *    - Deterministic outputs benefit from low temperature
+ * 3. Data extraction
+ *    - Precise extraction needs low temperature
+ *
+ * The rule only warns when:
+ * - Temperature is NOT 1.0
+ * - AND responseMimeType is NOT 'application/json' (structured output)
+ */
 const rule = {
     meta: {
-        type: 'problem',
+        type: 'suggestion',
         docs: {
-            description: 'Enforce default temperature (1.0) for Gemini 3 models to prevent unexpected behavior',
+            description: 'Suggest default temperature (1.0) for Gemini models, except for structured output tasks',
             recommended: true,
             url: 'https://github.com/Just-mpm/eslint-plugin-firebase-ai-logic#check-temperature-defaults',
         },
         schema: [],
         messages: {
-            nonDefaultTemperature: 'Gemini 3 models are optimized for the default temperature (1.0). Changing this value may lead to unexpected behavior, looping, or degraded reasoning performance.',
+            nonDefaultTemperature: 'Consider using the default temperature (1.0) for Gemini models. Lower values may cause looping or degraded reasoning. Exception: low temperature (0.1-0.3) is appropriate for structured output (JSON extraction) tasks.',
         },
     },
     create(context) {
@@ -34,13 +52,30 @@ const rule = {
                     : configArg;
                 if (!(0, ast_helpers_js_1.isObjectExpression)(configToCheck))
                     return;
+                // Check for responseMimeType - if it's 'application/json', low temperature is valid
+                const responseMimeTypeProp = (0, ast_helpers_js_1.findProperty)(configToCheck, 'responseMimeType');
+                if (responseMimeTypeProp) {
+                    const mimeType = (0, ast_helpers_js_1.getStringValue)(responseMimeTypeProp.value);
+                    if (mimeType === 'application/json') {
+                        // Structured output - low temperature is appropriate, don't warn
+                        return;
+                    }
+                }
+                // Check for responseSchema - if present, it's structured output
+                const responseSchemaProp = (0, ast_helpers_js_1.findProperty)(configToCheck, 'responseSchema');
+                if (responseSchemaProp) {
+                    // Has response schema - structured output, don't warn
+                    return;
+                }
                 // Check for temperature property
                 const temperatureProp = (0, ast_helpers_js_1.findProperty)(configToCheck, 'temperature');
                 if (temperatureProp) {
-                    // If value is literal and not 1.0, report
+                    // If value is literal and not 1.0, suggest (not require) using default
                     if (temperatureProp.value.type === 'Literal' &&
                         typeof temperatureProp.value.value === 'number') {
-                        if (temperatureProp.value.value !== 1.0) {
+                        const temp = temperatureProp.value.value;
+                        // Only warn for non-default temperature when NOT doing structured output
+                        if (temp !== 1.0) {
                             context.report({
                                 node: temperatureProp,
                                 messageId: 'nonDefaultTemperature',

package/dist/rules/check-temperature-defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"check-temperature-defaults.js","sourceRoot":"","sources":["../../src/rules/check-temperature-defaults.ts"],"names":[],"mappings":";;AACA,4DAIiC;AAEjC,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,sFAAsF;YACxF,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,wFAAwF;SAC9F;QACD,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE;YACR,qBAAqB,EACnB,mKAAmK;SACtK;KACF;IAED,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,cAAc,CAAC,IAAI;gBACjB,MAAM,UAAU,GAAG,IAAA,8BAAa,EAAC,IAAI,CAAC,CAAC;gBAEvC,oDAAoD;gBACpD,IACE,UAAU,KAAK,oBAAoB;oBACnC,UAAU,KAAK,iBAAiB,EAChC,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,+CAA+C;gBAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAA,mCAAkB,EAAC,SAAS,CAAC;oBAAE,OAAO;gBAEzD,6BAA6B;gBAC7B,IAAI,gBAAgB,GAAG,IAAA,6BAAY,EAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;gBACnE,IAAI,aAAa,GAAG,gBAAgB;oBAClC,CAAC,CAAC,gBAAgB,CAAC,KAAK;oBACxB,CAAC,CAAC,SAAS,CAAC;gBAEd,IAAI,CAAC,IAAA,mCAAkB,EAAC,aAAa,CAAC;oBAAE,OAAO;gBAE/C,iCAAiC;gBACjC,MAAM,eAAe,GAAG,IAAA,6BAAY,EAAC,aAAa,EAAE,aAAa,CAAC,CAAC;gBAEnE,IAAI,eAAe,EAAE,CAAC;oBACpB,0CAA0C;oBAC1C,IACE,eAAe,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;wBACxC,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,EAC/C,CAAC;wBACD,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;4BACxC,OAAO,CAAC,MAAM,CAAC;gCACb,IAAI,EAAE,eAAe;gCACrB,SAAS,EAAE,uBAAuB;6BACnC,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,kBAAe,IAAI,CAAC"}
+{"version":3,"file":"check-temperature-defaults.js","sourceRoot":"","sources":["../../src/rules/check-temperature-defaults.ts"],"names":[],"mappings":";;AACA,4DAKiC;AAEjC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,IAAI,GAAoB;IAC5B,IAAI,EAAE;QACJ,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE;YACJ,WAAW,EACT,yFAAyF;YAC3F,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,wFAAwF;SAC9F;QACD,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE;YACR,qBAAqB,EACnB,0NAA0N;SAC7N;KACF;IAED,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,cAAc,CAAC,IAAI;gBACjB,MAAM,UAAU,GAAG,IAAA,8BAAa,EAAC,IAAI,CAAC,CAAC;gBAEvC,oDAAoD;gBACpD,IACE,UAAU,KAAK,oBAAoB;oBACnC,UAAU,KAAK,iBAAiB,EAChC,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,+CAA+C;gBAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAA,mCAAkB,EAAC,SAAS,CAAC;oBAAE,OAAO;gBAEzD,6BAA6B;gBAC7B,IAAI,gBAAgB,GAAG,IAAA,6BAAY,EAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;gBACnE,IAAI,aAAa,GAAG,gBAAgB;oBAClC,CAAC,CAAC,gBAAgB,CAAC,KAAK;oBACxB,CAAC,CAAC,SAAS,CAAC;gBAEd,IAAI,CAAC,IAAA,mCAAkB,EAAC,aAAa,CAAC;oBAAE,OAAO;gBAE/C,oFAAoF;gBACpF,MAAM,oBAAoB,GAAG,IAAA,6BAAY,EAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;gBAC7E,IAAI,oBAAoB,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAA,+BAAc,EAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;oBAC5D,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;wBACpC,iEAAiE;wBACjE,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,gEAAgE;gBAChE,MAAM,kBAAkB,GAAG,IAAA,6BAAY,EAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;gBACzE,IAAI,kBAAkB,EAAE,CAAC;oBACvB,sDAAsD;oBACtD,OAAO;gBACT,CAAC;gBAED,iCAAiC;gBACjC,MAAM,eAAe,GAAG,IAAA,6BAAY,EAAC,aAAa,EAAE,aAAa,CAAC,CAAC;gBAEnE,IAAI,eAAe,EAAE,CAAC;oBACpB,uEAAuE;oBACvE,IACE,eAAe,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;wBACxC,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,EAC/C,CAAC;wBACD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC;wBACzC,yEAAyE;wBACzE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;4BACjB,OAAO,CAAC,MAAM,CAAC;gCACb,IAAI,EAAE,eAAe;gCACrB,SAAS,EAAE,uBAAuB;6BACnC,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,kBAAe,IAAI,CAAC"}

package/dist/rules/require-app-check-production.d.ts

@@ -1,4 +1,21 @@
 import type { Rule } from 'eslint';
+/**
+ * require-app-check-production
+ *
+ * This rule suggests using App Check to protect AI endpoints from abuse.
+ *
+ * IMPORTANT LIMITATIONS:
+ * - This rule only checks within the SAME FILE
+ * - Many projects use lazy loading where App Check is initialized in a separate file
+ * - Projects using hooks like useAppCheck() or ensureAppCheckReady() are valid
+ *
+ * The rule checks for:
+ * 1. Direct import of 'firebase/app-check'
+ * 2. Calls to initializeAppCheck()
+ * 3. Common patterns: useAppCheck, ensureAppCheckReady, AppCheckProvider
+ *
+ * If none are found in the same file as getAI(), it suggests (not requires) App Check.
+ */
 declare const rule: Rule.RuleModule;
 export default rule;
 //# sourceMappingURL=require-app-check-production.d.ts.map

package/dist/rules/require-app-check-production.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"require-app-check-production.d.ts","sourceRoot":"","sources":["../../src/rules/require-app-check-production.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAGnC,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAmEhB,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"require-app-check-production.d.ts","sourceRoot":"","sources":["../../src/rules/require-app-check-production.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAGnC;;;;;;;;;;;;;;;;GAgBG;AACH,QAAA,MAAM,IAAI,EAAE,IAAI,CAAC,UAsGhB,CAAC;AAEF,eAAe,IAAI,CAAC"}