@nodatachat/guard 2.5.0 → 2.5.1

package/dist/cli.js

@@ -26,7 +26,7 @@ const reporter_1 = require("./reporter");
 const scheduler_1 = require("./fixers/scheduler");
 const vault_crypto_1 = require("./vault-crypto");
 const capsule_dir_1 = require("./capsule-dir");
-const VERSION = "2.5.0";
+const VERSION = "2.5.1";
 async function main() {
     const args = process.argv.slice(2);
     // ── Subcommand routing ──
@@ -125,13 +125,41 @@ async function main() {
             if (!ciMode)
                 console.log(`\n  \x1b[32m✓\x1b[0m Found license key in ${envResult.licenseSource}`);
         }
-        if (!dbUrl && envResult.dbUrl) {
+        // Try direct DB URL first
+        let detectedDbUrl = envResult.dbUrl;
+        let detectedDbSource = envResult.dbSource;
+        // If no direct DB URL found, try to construct from Supabase URL
+        // Supabase projects have a predictable connection string format
+        if (!detectedDbUrl && envResult.supabaseUrl && !ciMode) {
+            const match = envResult.supabaseUrl.match(/https:\/\/([a-z0-9]+)\.supabase\.co/);
+            if (match) {
+                const projectRef = match[1];
+                console.log("");
+                console.log("  ╔══════════════════════════════════════════╗");
+                console.log("  ║  \x1b[33mSupabase project detected\x1b[0m                 ║");
+                console.log("  ╚══════════════════════════════════════════╝");
+                console.log(`  Project:  ${projectRef}.supabase.co`);
+                console.log("");
+                console.log("  \x1b[2mTo verify DB encryption, Guard needs a direct connection.\x1b[0m");
+                console.log("  \x1b[2mFind it in: Supabase Dashboard → Settings → Database → URI\x1b[0m");
+                console.log("");
+                const password = await askConsent("  Paste your database password (or press Enter to skip): ", true);
+                if (password && typeof password === "string" && password.trim()) {
+                    detectedDbUrl = `postgresql://postgres.${projectRef}:${password.trim()}@aws-0-eu-central-1.pooler.supabase.com:6543/postgres`;
+                    detectedDbSource = "Supabase (auto-constructed)";
+                }
+                else {
+                    console.log("  \x1b[33m→\x1b[0m No password — skipping database scan\n");
+                }
+            }
+        }
+        if (!dbUrl && detectedDbUrl) {
             // Mask the connection string for display (show host only)
-            const masked = maskDbUrl(envResult.dbUrl);
+            const masked = maskDbUrl(detectedDbUrl);
             if (ciMode) {
                 // CI mode: auto-consent (operator set up the env)
-                dbUrl = envResult.dbUrl;
-                console.log(`[nodata-guard] Using database from ${envResult.dbSource}`);
+                dbUrl = detectedDbUrl;
+                console.log(`[nodata-guard] Using database from ${detectedDbSource}`);
             }
             else {
                 // Interactive: ask for consent
@@ -139,7 +167,7 @@ async function main() {
                 console.log("  ╔══════════════════════════════════════════╗");
                 console.log("  ║  \x1b[33mDatabase connection found\x1b[0m                ║");
                 console.log("  ╚══════════════════════════════════════════╝");
-                console.log(`  Source:  ${envResult.dbSource}`);
+                console.log(`  Source:  ${detectedDbSource}`);
                 console.log(`  URL:     ${masked}`);
                 console.log("");
                 console.log("  \x1b[2mGuard will connect to your database to verify encryption.\x1b[0m");
@@ -148,7 +176,7 @@ async function main() {
                 console.log("");
                 const consent = await askConsent("  Connect to database? (y/n): ");
                 if (consent) {
-                    dbUrl = envResult.dbUrl;
+                    dbUrl = detectedDbUrl;
                     console.log(`  \x1b[32m✓\x1b[0m Database scan enabled\n`);
                 }
                 else {
@@ -643,14 +671,19 @@ function maskDbUrl(url) {
         return url.slice(0, 20) + "...****";
     }
 }
-function askConsent(prompt) {
+function askConsent(prompt, returnRaw) {
     return new Promise((resolve) => {
         const readline = require("readline");
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         rl.question(prompt, (answer) => {
             rl.close();
-            const a = answer.trim().toLowerCase();
-            resolve(a === "y" || a === "yes" || a === "כ" || a === "כן");
+            if (returnRaw) {
+                resolve(answer);
+            }
+            else {
+                const a = answer.trim().toLowerCase();
+                resolve(a === "y" || a === "yes" || a === "כ" || a === "כן");
+            }
         });
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nodatachat/guard",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "description": "NoData Guard — continuous security scanner. Runs locally, reports only metadata. Your data never leaves your machine.",
   "main": "./dist/cli.js",
   "types": "./dist/cli.d.ts",