@viberaven/cli 1.6.0 → 1.6.2

package/dist/cli.js

@@ -8563,6 +8563,16 @@ function safe(text) {
 function at(loc) {
   return loc ? `${loc.file}:${loc.line}` : "an unknown location";
 }
+function policyNameNote(name) {
+  if (/\bservice[ _-]?role\b/i.test(name)) {
+    return ` The name mentions the service role, but the service role bypasses row level security and never needs a policy, so this one only opens the table to everyone else.`;
+  }
+  const promise = name.match(/\b(?:own|owner|owners|their|admins?|teachers?|creators?|authors?|members?|self)\b/i);
+  if (promise) {
+    return ` The name says "${name}", but nothing in the policy checks who the caller is.`;
+  }
+  return "";
+}
 function audience(roles) {
   const set = new Set(roles);
   if (set.has("public") || set.has("anon") && set.has("authenticated")) return "anyone, signed in or not,";
@@ -8618,7 +8628,7 @@ function analyzeRls(replay) {
           id: "rls_policy_allows_all_read",
           severity: "high",
           message: safe(
-            `Policy "${policy.name}" on ${table2.display} (${at(policy.loc)}) lets ${who} read every row: using (true). Fine for truly public content; wrong for anything per-user.`
+            `Policy "${policy.name}" on ${table2.display} (${at(policy.loc)}) lets ${who} read every row: using (true). Fine for truly public content; wrong for anything per-user.${policyNameNote(policy.name)}`
           ),
           file: policy.loc.file,
           line: policy.loc.line,
@@ -8650,7 +8660,7 @@ function analyzeRls(replay) {
       permissive.push({
         id: "rls_policy_allows_all_write",
         severity,
-        message: safe(`Policy "${policy.name}" on ${table2.display} (${at(policy.loc)}) lets ${who} ${verb}: ${clause}.`),
+        message: safe(`Policy "${policy.name}" on ${table2.display} (${at(policy.loc)}) lets ${who} ${verb}: ${clause}.${severity === "critical" ? policyNameNote(policy.name) : ""}`),
         file: policy.loc.file,
         line: policy.loc.line,
         table: table2.display,
@@ -13807,9 +13817,9 @@ var init_clipboard = __esm({
   }
 });
 
-// node_modules/picocolors/picocolors.js
+// ../../../../../VibeRice/packages/cli/node_modules/picocolors/picocolors.js
 var require_picocolors = __commonJS({
-  "node_modules/picocolors/picocolors.js"(exports2, module2) {
+  "../../../../../VibeRice/packages/cli/node_modules/picocolors/picocolors.js"(exports2, module2) {
     var p2 = process || {};
     var argv = p2.argv || [];
     var env = p2.env || {};
@@ -14033,9 +14043,9 @@ var init_terminalSummary = __esm({
   }
 });
 
-// node_modules/sisteransi/src/index.js
+// ../../../../../VibeRice/packages/cli/node_modules/sisteransi/src/index.js
 var require_src = __commonJS({
-  "node_modules/sisteransi/src/index.js"(exports2, module2) {
+  "../../../../../VibeRice/packages/cli/node_modules/sisteransi/src/index.js"(exports2, module2) {
     "use strict";
     var ESC = "\x1B";
     var CSI = `${ESC}[`;
@@ -14089,7 +14099,7 @@ var require_src = __commonJS({
   }
 });
 
-// node_modules/@clack/core/dist/index.mjs
+// ../../../../../VibeRice/packages/cli/node_modules/@clack/core/dist/index.mjs
 function DD({ onlyFirst: e2 = false } = {}) {
   const t = ["[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?(?:\\u0007|\\u001B\\u005C|\\u009C))", "(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-nq-uy=><~]))"].join("|");
   return new RegExp(t, e2 ? void 0 : "g");
@@ -14201,7 +14211,7 @@ function fD({ input: e2 = import_node_process.stdin, output: u2 = import_node_pr
 }
 var import_sisteransi, import_node_process, g, import_node_readline, import_node_stream, uD, W, tD, eD, FD, sD, w, N, I, R, C, iD, rD, ED, d, oD, y, V, nD, G, _, z, K, aD, k, hD, lD, xD, B, AD, S, gD, vD, h, x, A, OD, PD, J, LD;
 var init_dist = __esm({
-  "node_modules/@clack/core/dist/index.mjs"() {
+  "../../../../../VibeRice/packages/cli/node_modules/@clack/core/dist/index.mjs"() {
     import_sisteransi = __toESM(require_src(), 1);
     import_node_process = require("node:process");
     g = __toESM(require("node:readline"), 1);
@@ -14451,13 +14461,13 @@ var init_dist = __esm({
   }
 });
 
-// node_modules/@clack/prompts/dist/index.mjs
+// ../../../../../VibeRice/packages/cli/node_modules/@clack/prompts/dist/index.mjs
 function ce() {
   return import_node_process2.default.platform !== "win32" ? import_node_process2.default.env.TERM !== "linux" : !!import_node_process2.default.env.CI || !!import_node_process2.default.env.WT_SESSION || !!import_node_process2.default.env.TERMINUS_SUBLIME || import_node_process2.default.env.ConEmuTask === "{cmd::Cmder}" || import_node_process2.default.env.TERM_PROGRAM === "Terminus-Sublime" || import_node_process2.default.env.TERM_PROGRAM === "vscode" || import_node_process2.default.env.TERM === "xterm-256color" || import_node_process2.default.env.TERM === "alacritty" || import_node_process2.default.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
 }
 var import_node_process2, import_picocolors2, import_sisteransi2, V2, u, le, L2, W2, C2, ue, o, d2, k2, P2, A2, T, F, $e, _2, me, de, pe, q, D, U, K2, b2, G2, ve, xe, Ie, Se, M2, J2, Y2;
 var init_dist2 = __esm({
-  "node_modules/@clack/prompts/dist/index.mjs"() {
+  "../../../../../VibeRice/packages/cli/node_modules/@clack/prompts/dist/index.mjs"() {
     init_dist();
     init_dist();
     import_node_process2 = __toESM(require("node:process"), 1);
@@ -14690,7 +14700,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = "1.6.0";
+    VERSION = "1.6.2";
   }
 });
 
@@ -17417,6 +17427,17 @@ var init_initGithub = __esm({
   }
 });
 
+// src/local-ui/stack/setupLink.ts
+function setupFragment(ids) {
+  const safe2 = [...new Set(ids.filter((id) => /^[a-z][a-z0-9-]{0,39}$/.test(id)))].slice(0, 30);
+  return `#${new URLSearchParams({ stack: safe2.join(",") })}`;
+}
+var init_setupLink = __esm({
+  "src/local-ui/stack/setupLink.ts"() {
+    "use strict";
+  }
+});
+
 // src/commands/doctorAgents.ts
 function managedBlocks(content) {
   const blocks = content.match(/<!-- (?:VIBERAVEN:START|viberaven:agent-rules:start) -->[\s\S]*?<!-- (?:VIBERAVEN:END|viberaven:agent-rules:end) -->/g);
@@ -24762,7 +24783,8 @@ __export(cli_exports, {
   parseArgs: () => parseArgs,
   printHelp: () => printHelp,
   resolveDefaultEntrypointMode: () => resolveDefaultEntrypointMode,
-  runScanCommand: () => runScanCommand
+  runScanCommand: () => runScanCommand,
+  stackInitialPath: () => stackInitialPath
 });
 module.exports = __toCommonJS(cli_exports);
 function printHelp() {
@@ -24777,6 +24799,7 @@ Usage:
   viberaven tui          Interactive terminal menu
 
   viberaven check [--json] [--quiet] [path]
+  viberaven --stack supabase,vercel,stripe   Open the Studio with these services already picked
   viberaven check --base <ref> [--markdown]   What this change introduced and fixed, compared with <ref>
   viberaven init --github [--dry-run]         Check every pull request in GitHub Actions
                        Local production check: one line per finding, exit 1 on blockers
@@ -24937,6 +24960,11 @@ function isBooleanFlag(command, key) {
   if (key === "agents" && command === "doctor") return true;
   return false;
 }
+function stackInitialPath(flags) {
+  if (typeof flags.stack !== "string") return void 0;
+  const ids = flags.stack.split(",").map((id) => id.trim().toLowerCase()).filter(Boolean);
+  return ids.length ? `/${setupFragment(ids)}` : void 0;
+}
 function hasFlag(flags, key) {
   return flags[key] === true || typeof flags[key] === "string";
 }
@@ -25220,7 +25248,7 @@ async function main() {
     });
     if (mode === "local-ui") {
       const cwd = positional[0] ? (0, import_node_path42.resolve)(process.cwd(), positional[0]) : process.cwd();
-      const handle = await startLocalUiServer({ cwd });
+      const handle = await startLocalUiServer({ cwd, initialPath: stackInitialPath(flags) });
       console.log(`VibeRaven local UI: ${handle.url}`);
       await waitForServerShutdown();
       await handle.close();
@@ -25241,7 +25269,7 @@ async function main() {
     case "ui": {
       const cwd = positional[0] ? (0, import_node_path42.resolve)(process.cwd(), positional[0]) : process.cwd();
       const envPort = Number(process.env.PORT);
-      const handle = await startLocalUiServer({ cwd, port: Number.isFinite(envPort) && envPort > 0 ? envPort : void 0 });
+      const handle = await startLocalUiServer({ cwd, port: Number.isFinite(envPort) && envPort > 0 ? envPort : void 0, initialPath: stackInitialPath(flags) });
       console.log(`VibeRaven local UI: ${handle.url}`);
       await waitForServerShutdown();
       await handle.close();
@@ -25421,6 +25449,7 @@ var init_cli = __esm({
     init_commands();
     init_runInit();
     init_initGithub();
+    init_setupLink();
     init_runDoctor();
     init_runValidateNpmPackage();
     init_runAudit();
@@ -25458,5 +25487,6 @@ init_cli();
   parseArgs,
   printHelp,
   resolveDefaultEntrypointMode,
-  runScanCommand
+  runScanCommand,
+  stackInitialPath
 });