deploro 0.8.0 → 0.9.0

package/dist/index.js

@@ -679,6 +679,36 @@ async function dbDropTableCommand(tableName, opts) {
   await apiRequest(`/api/db/tables/${encodeURIComponent(tableName)}`, { method: "DELETE" });
   console.log(`\u2713 Table "${tableName}" dropped`);
 }
+var SEVERITY_LABEL = {
+  error: "SECURITY",
+  warning: "WARNING",
+  info: "SUGGEST"
+};
+async function dbAdvisorsCommand(opts) {
+  const config = requireProject();
+  const data = await apiRequestNoProject(
+    `/api/projects/${config.projectId}/database/advisors`
+  );
+  if (opts.json) {
+    json(data.findings);
+    return;
+  }
+  if (data.findings.length === 0) {
+    console.log("\u2713 No problems found. RLS, primary keys and foreign-key indexes all look right.");
+    return;
+  }
+  for (const f of data.findings) {
+    console.log(`
+[${SEVERITY_LABEL[f.severity]}] ${f.table}: ${f.title}`);
+    console.log(`  ${f.detail}`);
+    if (f.fix) console.log(`  Fix: ${f.fix}`);
+  }
+  const errors = data.findings.filter((f) => f.severity === "error").length;
+  console.log(`
+${data.findings.length} finding${data.findings.length === 1 ? "" : "s"}${errors ? `, ${errors} security` : ""}.`);
+  console.log("Fix SQL is never run for you. Apply it as a migration (deploro migrate).");
+  if (errors) process.exitCode = 1;
+}
 
 // src/commands/auth.ts
 function isPatToken(accessToken) {
@@ -2329,6 +2359,7 @@ db.command("info").description("Show database status and how to reach it from a
 db.command("tables").description("List tables in the active project").action(dbTablesCommand);
 db.command("rows <table>").description("List rows in a table").option("--limit <n>", "Rows per page (max 200)", "20").option("--page <n>", "Page number", "1").option("--json", "Output raw JSON").action(dbRowsCommand);
 db.command("query <sql>").description("Run a read-only SQL query (project admin)").option("--param <value>", "Bind a value to $1, $2, ... in order (repeatable)", (v, prev) => [...prev, v], []).option("--json", "Output raw JSON").action(dbQueryCommand);
+db.command("advisors").description("Run database checks: RLS exposure, missing policies, primary keys, foreign-key indexes").option("--json", "Output raw JSON").action(dbAdvisorsCommand);
 db.command("schema <table>").description("Show schema for a table").action(dbSchemaCommand);
 db.command("insert <table>").description("Insert a row").requiredOption("--data <json>", "Row data as a JSON object").action(dbInsertCommand);
 db.command("update <table> <id>").description("Update a row by id").requiredOption("--data <json>", "Fields to update as a JSON object").action(dbUpdateCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploro",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Command-line interface for the Deploro developer platform — manage projects, databases, deployments, and hosting from your terminal.",
   "type": "module",
   "bin": {