@appsforgood/next-supabase-kit 0.4.1 → 0.4.2

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.4.2
+
+- Uplift default domain skills so they are playbooks, not checklists: `nextjs-app-router` (App Router, async request APIs, `proxy.ts`), `supabase-auth-rls` (SSR clients, `getUser()`, service role, RLS), `postgres-migrations` (RLS in the same change), `owasp-security-review` (Top 10 mapped onto Actions/RLS/SSRF).
+- Planner’s `planning` skill names which of those skills the owner must run. App engineer must not skip them for a “small” route.
+
 ## 0.4.1
 
 - Catch-up release: npm `0.4.0` was the simplify cut; later GitHub work (`deslop`, frontend-design, catalog pointers, leftover `doctor`, HTML user guide) was not on npm.

package/UPGRADE.md

@@ -1,5 +1,16 @@
 # Upgrade Guide
 
+## 0.4.2
+
+`0.4.1` is the published simplify catch-up. `0.4.2` rewrites the Next.js and Supabase domain skills. `update` refreshes pristine skill files; local edits win or land in conflicts.
+
+```bash
+npx @appsforgood/next-supabase-kit@0.4.2 update
+npx @appsforgood/next-supabase-kit@0.4.2 doctor
+```
+
+Do not re-init. `update` still never deletes leftover 0.3 council docs.
+
 ## 0.4.1
 
 npm `0.4.0` was the simplify cut. `0.4.1` adds `deslop`, the 4-token `frontend-design` skill, catalog pointers on agents, and leftover-0.3 `doctor` warnings. Those leftover warnings are not a failure. `update` still never deletes old council docs.

package/USER_GUIDE.html

@@ -563,23 +563,23 @@
           <tbody>
             <tr>
               <td><code>planning</code></td>
-              <td>Ambiguous work; pick an owner</td>
+              <td>Ambiguous work; pick an owner and which skill they run</td>
             </tr>
             <tr>
               <td><code>nextjs-app-router</code></td>
-              <td>Routes, Server Components, actions</td>
+              <td>App Router, Server vs Client, actions, <code>proxy.ts</code></td>
             </tr>
             <tr>
               <td><code>supabase-auth-rls</code></td>
-              <td>Auth, RLS, service role</td>
+              <td>Auth, RLS, service role, Storage</td>
             </tr>
             <tr>
               <td><code>postgres-migrations</code></td>
-              <td>Schema and migrations</td>
+              <td>Schema, constraints, RLS in the same change</td>
             </tr>
             <tr>
               <td><code>owasp-security-review</code></td>
-              <td>Mutations, uploads, secrets</td>
+              <td>Mutations, uploads, SSRF, secrets</td>
             </tr>
             <tr>
               <td><code>frontend-design</code></td>

package/USER_GUIDE.md

@@ -82,11 +82,11 @@ Do not ask one chat to be all six. Planner names the next specialist. It does no
 
 | Skill | Use when |
 | --- | --- |
-| `planning` | Ambiguous work; pick an owner |
-| `nextjs-app-router` | Routes, Server Components, actions |
-| `supabase-auth-rls` | Auth, RLS, service role |
-| `postgres-migrations` | Schema and migrations |
-| `owasp-security-review` | Mutations, uploads, secrets |
+| `planning` | Ambiguous work; pick an owner and which skill they run |
+| `nextjs-app-router` | App Router, Server vs Client, actions, `proxy.ts` |
+| `supabase-auth-rls` | Auth, RLS, service role, Storage |
+| `postgres-migrations` | Schema, constraints, RLS in the same change |
+| `owasp-security-review` | Mutations, uploads, SSRF, secrets |
 | `frontend-design` | Layout, simple palette, anti-generic UI |
 | `accessibility-wcag` | Keyboard, contrast, labels |
 | `browser-qa` | Any screen. Required for QA of UI |

package/agents/app-engineer/agent.md

@@ -23,6 +23,8 @@ Code-only “it should work” is incomplete for anything the user can see or cl
 
 `nextjs-app-router`, `supabase-auth-rls`, `postgres-migrations`.
 
+Run those skills. Do not treat a small route, form, or table as exempt.
+
 Available skills: `catalog.json` and the skill table in `USER_GUIDE.md`. Start with the skills named above. Use another listed skill when this job needs it.
 
 ## Handoff

package/dist/index.js

@@ -670,7 +670,7 @@ import { join as join8 } from "path";
 
 // src/config/defaults.ts
 var PACKAGE_NAME = "@appsforgood/next-supabase-kit";
-var PACKAGE_VERSION = "0.4.1";
+var PACKAGE_VERSION = "0.4.2";
 var ROOT_DOCS = ["AGENTS.md", "USER_GUIDE.md", "USER_GUIDE.html"];
 var CURSOR_RULE_FILE = {
   source: "assistant-adapters/cursor-agent-kit.mdc",