start-vibing 4.4.6 → 4.4.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli.js CHANGED
@@ -1055,7 +1055,9 @@ var MANAGED_PATHS = [
1055
1055
  ".claude/settings.json",
1056
1056
  ".claude/settings.local.json",
1057
1057
  ".claude/CLAUDE.md",
1058
- "CLAUDE.md"
1058
+ "CLAUDE.md",
1059
+ ".playwright-mcp/",
1060
+ ".playwright-mcp"
1059
1061
  ];
1060
1062
  function isPathTracked(targetDir, path) {
1061
1063
  try {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "start-vibing",
3
- "version": "4.4.6",
3
+ "version": "4.4.7",
4
4
  "description": "Setup Claude Code with 9 plugins, 6 community skills, and 8 MCP servers. Parallel install, auto-accept, superpowers + ralph-loop. e2e-audit 0.2.0 refactor (skill-only, no agents): SessionStart hook + slash command make the skill keyword-invokable (\"e2e audit\", \"roda o e2e\", \"integration test\", \"test coverage gaps\"). Source-first discovery via detect-stack, discover-routes (Next app/pages/Remix/SvelteKit/Nuxt/Astro), discover-api-surface (HTTP handlers, tRPC procedures, GraphQL, server actions, middleware auth), inventory-existing-tests (preserve prior corpus + sha256 drift hash), and detect-uncovered (branch-diff vs origin/main finds changes not covered by existing specs). Report-then-ask between mapping and Playwright run; post-run-feedback report before writing findings. SHOT+TRACE+ASSERT+SOURCE evidence quad per non-meta finding; meta rules (coverage-gap-*, uncovered-*, test-drift, stack-detect, post-run-feedback) exempt. verify-audit.sh enforces schema + quad. Generic (no project leakage). super-design 0.7.0 carries over.",
5
5
  "type": "module",
6
6
  "bin": {
@@ -23,6 +23,15 @@ else
23
23
  cmd="$(printf '%s' "$input" | grep -oE '"command"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed -E 's/.*"command"[[:space:]]*:[[:space:]]*"(.*)"/\1/')"
24
24
  fi
25
25
 
26
+ # Hard-block any git operation that touches .playwright-mcp artifacts
27
+ # (covers `git add .playwright-mcp`, `git commit -- .playwright-mcp`, etc.)
28
+ if printf '%s' "$cmd" | grep -qE 'git[[:space:]]+(add|commit|stage)' \
29
+ && printf '%s' "$cmd" | grep -qE '\.playwright-mcp'; then
30
+ printf 'BLOCKED: .playwright-mcp/ must never be committed (browser session artifacts).\n' >&2
31
+ printf 'It is auto-added to .gitignore by start-vibing. Remove the path from your command.\n' >&2
32
+ exit 2
33
+ fi
34
+
26
35
  # Not a git commit? allow
27
36
  if ! printf '%s' "$cmd" | grep -qE 'git[[:space:]]+commit'; then
28
37
  exit 0