0007: Deferred better-supabase and PermDock
The hand-written Supabase packages and the custom RBAC stay until dedicated migration plans.
0009: Adopt better-supabase and PermDock from npm
CentraKit moves its Supabase data access onto better-supabase and its roles and permissions onto PermDock, consuming both as published npm packages.
0007: Deferred better-supabase and PermDock
The hand-written Supabase packages and the custom RBAC stay until dedicated migration plans.
0009: Adopt better-supabase and PermDock from npm
CentraKit moves its Supabase data access onto better-supabase and its roles and permissions onto PermDock, consuming both as published npm packages.
The centrakit CLI moves from commander and hand-written helpers to citty, @clack/prompts, c12 and Node 24 built-ins, and the guard tests scan files with fs.glob and oxc-parser.
The CLI was built on commander with a custom runner, hand-written runtime flag parsing, a JSON-only config file and a spawn-based browser opener. It never prompted for missing values, so register took the password as a positional argument and every organization command needed a UUID typed by hand. The guard tests in tests/integration and packages/ui/tests each had their own recursive directory walker and matched imports with regular expressions, which also matched text inside comments and strings.
defineCommand default export loaded lazily from src/root.ts, so --version and help stay fast without a separate fast path.@clack/prompts, wrapped in src/ui.ts. Prompts only appear when stdin and stdout are terminals, --json is off and the session is not non-interactive. Otherwise a missing value is an error.defineConfig from centrakit/config.node:util styleText, the browser opener uses open, and command suggestions use fastest-levenshtein.node through type stripping, so tsx is no longer needed.listFiles and listFilesSync helpers from @workspace/test-fixtures/source-files, built on fs.glob, and read imports with importSpecifiers, built on oxc-parser.std-env was considered for CI detection but left out, because it reads the environment once at import and the tests change it per case. The CLI reads CI through its t3 env schema at call time instead.--social is read from the raw arguments with collectRepeatedFlag in src/args.ts.runCli moves leading global flags behind the command path before parsing.register takes the password from a hidden prompt or --password-stdin and no longer accepts it as an argument.release-cli.yml, not on npm. The centrakit name is unclaimed on npm, the CLI has no users outside the team yet, and trusted publishing needs an npm organization and a publish job behind a protected environment. Publishing to npm with trusted publishing is the follow-up once there is an external user, and the change goes through a .github pull request. Until then apps/cli/package.json is "private": true, so a stray npm publish cannot claim the name; Changesets still versions and tags it through privatePackages. release-cli.yml keeps id-token: write because the shared setup action exchanges an OIDC token for the Turborepo remote cache; it is not a leftover from a publish step.CliError carries an RFC 9457 problem. API failures keep the server's problem, and errors raised by the CLI use type: "about:blank" with a code of USAGE_ERROR, CANCELLED or CLI_ERROR. With --json the whole problem is printed to stdout.--token is removed in favor of CENTRAKIT_TOKEN or --token-stdin, and --base-url is renamed to --api-url.0600 in a 0700 directory, and the config directory honors XDG_CONFIG_HOME.engines.node is 24.x, matching the root, and every command's --help output is a snapshot in tests/integration/cli/help-snapshots.test.ts.Last updated on
0007: Deferred better-supabase and PermDock
The hand-written Supabase packages and the custom RBAC stay until dedicated migration plans.
0009: Adopt better-supabase and PermDock from npm
CentraKit moves its Supabase data access onto better-supabase and its roles and permissions onto PermDock, consuming both as published npm packages.