@soulbatical/tetra-dev-toolkit 1.10.0 → 1.10.2

package/lib/checks/security/direct-supabase-client.js

@@ -78,6 +78,10 @@ export async function run(config, projectRoot) {
   const files = await glob('**/*.ts', {
     cwd: projectRoot,
     ignore: [
+      '**/node_modules/**',
+      '**/.next/**',
+      '**/dist/**',
+      '**/build/**',
       ...config.ignore,
       '**/*.test.ts',
       '**/*.spec.ts',
@@ -171,5 +175,5 @@ function getFixSuggestion(file, content) {
   if (content.includes('AuthenticatedRequest') || content.includes('req.userToken')) {
     return `User context available — use adminDB(req) or userDB(req) instead of createClient()`
   }
-  return `Use one of: adminDB(req), userDB(req), publicDB(), superadminDB(req), or systemDB(context)`
+  return `Use one of: adminDB(req), userDB(req), publicDB(), superadminDB(req), or systemDB(context). See: stella_howto_get slug="tetra-architecture-guide"`
 }

package/lib/checks/security/frontend-supabase-queries.js

@@ -154,7 +154,7 @@ export async function run(config, projectRoot) {
                 severity: 'critical',
                 message: `BLOCKED: Frontend code has direct Supabase ${pattern.desc}. Move to backend API endpoint.`,
                 snippet: line.trim().substring(0, 120),
-                fix: `Create a backend API endpoint and call it via fetch() or your API client instead.`
+                fix: `Create a backend route+controller+service, use adminDB(req), and call via apiClient.get() from frontend. See: stella_howto_get slug="tetra-architecture-guide" for the complete migration pattern.`
               })
               results.summary.critical++
               results.summary.total++

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soulbatical/tetra-dev-toolkit",
-  "version": "1.10.0",
+  "version": "1.10.2",
   "publishConfig": {
     "access": "restricted"
   },