getaura 0.5.0 → 0.5.1

package/dist/index.js

@@ -143,6 +143,15 @@ function lineAt(text, index) {
   const end = text.indexOf("\n", index);
   return text.slice(start, end === -1 ? void 0 : end);
 }
+var FIREBASE_FIELD = /\b(?:authDomain|projectId|storageBucket|messagingSenderId|appId|measurementId)\b/g;
+var OTHER_GOOGLE = /GEMINI|GENAI|GENERATIVE|GOOGLE_AI|MAPS|PLACES|YOUTUBE|TRANSLATE|VISION|SPEECH|CUSTOM_SEARCH/i;
+function isFirebaseWebKey(m, text) {
+  const line = lineAt(text, m.index);
+  if (OTHER_GOOGLE.test(line)) return false;
+  if (/FIREBASE/i.test(line)) return true;
+  const near = text.slice(Math.max(0, m.index - 400), m.index + m.value.length + 400);
+  return new Set(near.match(FIREBASE_FIELD) ?? []).size >= 2;
+}
 var assignedValue = (match) => match.match(/[:=]\s*["'`]([^"'`]*)["'`]\s*$/)?.[1] ?? match;
 function isPlaceholderSecret(m, text) {
   if (m.patternId === "database-url") {
@@ -160,6 +169,7 @@ function isPlaceholderSecret(m, text) {
     if (COMMENT_LINE.test(lineAt(text, m.index))) return true;
     return /^[0-9a-f]{32}$/i.test(value) && /algolia|docsearch/i.test(text);
   }
+  if (m.patternId === "google-api-key" && isFirebaseWebKey(m, text)) return true;
   return KEY_PLACEHOLDER.test(m.value);
 }
 function findLeakedSecrets(text) {
@@ -22363,7 +22373,7 @@ function describeProject(p2) {
 // package.json
 var package_default = {
   name: "getaura",
-  version: "0.5.0",
+  version: "0.5.1",
   description: "Aura helps you and your coding agent follow best practices while you vibe code.",
   type: "module",
   bin: {