@donotdev/cli 0.0.14 → 0.0.15

package/templates/functions-firebase/build.mjs.example

@@ -1,75 +1,5 @@
 #!/usr/bin/env node
-/**
- * @fileoverview Build script for {{APP_NAME}} functions
- * @description Bundles @donotdev/types and imports framework functions
- */
-
-import { build } from 'esbuild';
-import { writeFileSync } from 'fs';
-import { createAppFunctionsConfig, generateFunctionsYamlWithInfo, filterEnvSecrets } from '@donotdev/core/functions';
+import { buildFunctions } from '@donotdev/core/functions';
 import { functionsConfig } from './functions.config.js';
 
-async function buildFunctions() {
-  console.log('🔨 Building {{APP_NAME}} functions...');
-
-  try {
-    const config = createAppFunctionsConfig({
-      entry: 'src/index.ts',
-      outDir: 'lib',
-      minify: process.env.NODE_ENV === 'production',
-      sourcemap: true,
-    });
-
-    console.log('📦 Bundling @donotdev/types and importing framework functions...');
-
-    const result = await build(config);
-
-    if (result.errors.length > 0) {
-      console.error('❌ Build errors:', result.errors);
-      process.exit(1);
-    }
-
-    if (result.warnings.length > 0) {
-      console.warn('⚠️ Build warnings:', result.warnings);
-    }
-
-    console.log('✅ {{APP_NAME}} functions built successfully!');
-    console.log('📁 Output directory: lib/');
-
-    // Generate functions.yaml from config + auto-detection
-    // Auto-detects: exported functions from src/index.ts + secrets from .env
-    const { yaml, staticFunctions, crudFunctions, autoDetected, autoSecrets } = generateFunctionsYamlWithInfo(
-      functionsConfig,
-      { entryFile: 'src/index.ts', envPath: '.env' }
-    );
-    writeFileSync('functions.yaml', yaml);
-    console.log(`📄 Generated functions.yaml: ${staticFunctions.length} static + ${crudFunctions.length} CRUD functions`);
-    if (autoDetected.length > 0) {
-      console.log(`🔍 Auto-detected ${autoDetected.length} function(s) from src/index.ts: ${autoDetected.join(', ')}`);
-    }
-    if (autoSecrets.length > 0) {
-      console.log(`🔑 Auto-detected ${autoSecrets.length} secret(s) from .env: ${autoSecrets.join(', ')}`);
-    }
-
-    // Filter .env: move secret keys to .env.local (emulator-only, never deployed)
-    const { stripped } = filterEnvSecrets(functionsConfig);
-    if (stripped.length > 0) {
-      console.log(`🔒 Filtered ${stripped.length} secret(s) from .env → .env.local`);
-    }
-
-    // Log bundle info if metafile is available
-    if (result.metafile) {
-      const { analyzeMetafile } = await import('esbuild');
-      const analysis = await analyzeMetafile(result.metafile);
-      console.log('\n📊 Bundle analysis:');
-      console.log(analysis);
-    }
-
-  } catch (error) {
-    console.error('❌ Build failed:', error);
-    process.exit(1);
-  }
-}
-
-// Run the build
-buildFunctions();
+buildFunctions(functionsConfig);

package/templates/functions-firebase/functions-firebase/.env.example.example

@@ -1,45 +1,43 @@
 # =============================================================================
-# {{APP_NAME}} Firebase Functions Environment Variables
+# {{APP_NAME}} Server-Side Environment Variables
 # =============================================================================
-# Copy this file to .env in the functions directory and update with your values
+# Copy this file to .env in the functions directory and fill in your values.
+#
+# IMPORTANT: These are SECRET keys. Never put them in VITE_* or NEXT_PUBLIC_*
+# variables. Never commit this file to git.
+#
+# Sync to runtime: dndev sync-secrets
+# Sync to GitHub:  dndev sync-secrets --target github
 
 # =============================================================================
 # Stripe Configuration
+# Get keys from: https://dashboard.stripe.com/apikeys
 # =============================================================================
-# Stripe Secret Key (server-side only)
-STRIPE_SECRET_KEY=sk_test_1234567890abcdef
+STRIPE_SECRET_KEY=sk_test_...
+STRIPE_WEBHOOK_SECRET=whsec_...
 
-# Stripe Webhook Secret (for webhook signature verification)
-STRIPE_WEBHOOK_SECRET=whsec_1234567890abcdef
+# =============================================================================
+# Supabase (server-side only — if using Supabase backend)
+# Get from: https://supabase.com/dashboard → Settings → API
+# =============================================================================
+# SUPABASE_SERVICE_ROLE_KEY=eyJ...
 
 # =============================================================================
 # GitHub Configuration
-# =============================================================================
-# GitHub Personal Access Token (for repository access management)
+# Get token from: https://github.com/settings/tokens
 # Required scopes: repo (full control of private repositories)
-GITHUB_PERSONAL_ACCESS_TOKEN=ghp_1234567890abcdef
-
-# GitHub Repository Configuration
-GITHUB_REPO_OWNER=your-org
-GITHUB_REPO_NAME=your-repo
+# =============================================================================
+# GITHUB_PERSONAL_ACCESS_TOKEN=ghp_...
+# GITHUB_REPO_OWNER=your-org
+# GITHUB_REPO_NAME=your-repo
 
 # =============================================================================
-# Firebase Configuration
+# Firebase Configuration (auto-detected, rarely needed manually)
 # =============================================================================
-# Firebase Project ID (usually auto-detected from Firebase Admin SDK)
 FIREBASE_PROJECT_ID=your-project-id
-
-# Firebase Region (default: us-central1)
 FIREBASE_REGION=us-central1
 
 # =============================================================================
-# Development Configuration
+# Development
 # =============================================================================
-# Node Environment
 NODE_ENV=development
-
-# =============================================================================
-# Setup Instructions
-# =============================================================================
-# 1. Get Stripe keys from: https://dashboard.stripe.com/apikeys
-# 2. Get GitHub token from: https://github.com/settings/tokens

package/templates/functions-firebase/functions-firebase/build.mjs.example

@@ -1,75 +1,5 @@
 #!/usr/bin/env node
-/**
- * @fileoverview Build script for {{APP_NAME}} functions
- * @description Bundles @donotdev/types and imports framework functions
- */
-
-import { build } from 'esbuild';
-import { writeFileSync } from 'fs';
-import { createAppFunctionsConfig, generateFunctionsYamlWithInfo, filterEnvSecrets } from '@donotdev/core/functions';
+import { buildFunctions } from '@donotdev/core/functions';
 import { functionsConfig } from './functions.config.js';
 
-async function buildFunctions() {
-  console.log('🔨 Building {{APP_NAME}} functions...');
-
-  try {
-    const config = createAppFunctionsConfig({
-      entry: 'src/index.ts',
-      outDir: 'lib',
-      minify: process.env.NODE_ENV === 'production',
-      sourcemap: true,
-    });
-
-    console.log('📦 Bundling @donotdev/types and importing framework functions...');
-
-    const result = await build(config);
-
-    if (result.errors.length > 0) {
-      console.error('❌ Build errors:', result.errors);
-      process.exit(1);
-    }
-
-    if (result.warnings.length > 0) {
-      console.warn('⚠️ Build warnings:', result.warnings);
-    }
-
-    console.log('✅ {{APP_NAME}} functions built successfully!');
-    console.log('📁 Output directory: lib/');
-
-    // Generate functions.yaml from config + auto-detection
-    // Auto-detects: exported functions from src/index.ts + secrets from .env
-    const { yaml, staticFunctions, crudFunctions, autoDetected, autoSecrets } = generateFunctionsYamlWithInfo(
-      functionsConfig,
-      { entryFile: 'src/index.ts', envPath: '.env' }
-    );
-    writeFileSync('functions.yaml', yaml);
-    console.log(`📄 Generated functions.yaml: ${staticFunctions.length} static + ${crudFunctions.length} CRUD functions`);
-    if (autoDetected.length > 0) {
-      console.log(`🔍 Auto-detected ${autoDetected.length} function(s) from src/index.ts: ${autoDetected.join(', ')}`);
-    }
-    if (autoSecrets.length > 0) {
-      console.log(`🔑 Auto-detected ${autoSecrets.length} secret(s) from .env: ${autoSecrets.join(', ')}`);
-    }
-
-    // Filter .env: move secret keys to .env.local (emulator-only, never deployed)
-    const { stripped } = filterEnvSecrets(functionsConfig);
-    if (stripped.length > 0) {
-      console.log(`🔒 Filtered ${stripped.length} secret(s) from .env → .env.local`);
-    }
-
-    // Log bundle info if metafile is available
-    if (result.metafile) {
-      const { analyzeMetafile } = await import('esbuild');
-      const analysis = await analyzeMetafile(result.metafile);
-      console.log('\n📊 Bundle analysis:');
-      console.log(analysis);
-    }
-
-  } catch (error) {
-    console.error('❌ Build failed:', error);
-    process.exit(1);
-  }
-}
-
-// Run the build
-buildFunctions();
+buildFunctions(functionsConfig);

package/templates/functions-firebase/functions-firebase/tsconfig.json.example

@@ -1,5 +1,5 @@
 {
-  "extends": "../../tsconfig.base.json",
+  "extends": "../../../tsconfig.functions.json",
   "compilerOptions": {
     "outDir": "./lib",
     "rootDir": "./src",

package/templates/functions-supabase/supabase/functions/cancel-subscription/index.ts.example

@@ -0,0 +1,7 @@
+// supabase/functions/cancel-subscription/index.ts
+// Supabase Edge Function — Cancel Subscription
+// Deploy: supabase functions deploy cancel-subscription
+
+import { createCancelSubscription } from '@donotdev/functions/supabase';
+
+Deno.serve(createCancelSubscription());

package/templates/functions-supabase/supabase/functions/change-plan/index.ts.example

@@ -0,0 +1,11 @@
+// supabase/functions/change-plan/index.ts
+// Supabase Edge Function — Change Subscription Plan
+// Deploy: supabase functions deploy change-plan
+
+import { createChangePlan } from '@donotdev/functions/supabase';
+
+// Import your billing config
+// import { billingConfig } from '../_shared/billingConfig.ts';
+const billingConfig = {}; // TODO: Replace with your StripeBackConfig
+
+Deno.serve(createChangePlan(billingConfig));

package/templates/functions-supabase/supabase/functions/create-checkout-session/index.ts.example

@@ -0,0 +1,11 @@
+// supabase/functions/create-checkout-session/index.ts
+// Supabase Edge Function — Stripe Checkout Session
+// Deploy: supabase functions deploy create-checkout-session
+
+import { createCheckoutSession } from '@donotdev/functions/supabase';
+
+// Import your billing config
+// import { billingConfig } from '../_shared/billingConfig.ts';
+const billingConfig = {}; // TODO: Replace with your StripeBackConfig
+
+Deno.serve(createCheckoutSession(billingConfig));

package/templates/functions-supabase/supabase/functions/create-customer-portal/index.ts.example

@@ -0,0 +1,7 @@
+// supabase/functions/create-customer-portal/index.ts
+// Supabase Edge Function — Stripe Customer Portal
+// Deploy: supabase functions deploy create-customer-portal
+
+import { createCustomerPortal } from '@donotdev/functions/supabase';
+
+Deno.serve(createCustomerPortal());

package/templates/functions-supabase/supabase/functions/crud/index.ts.example

@@ -0,0 +1,16 @@
+// supabase/functions/crud/index.ts
+// Supabase Edge Function — CRUD Operations
+// Deploy: supabase functions deploy crud
+//
+// This single Edge Function handles all CRUD operations for all entities.
+// The SupabaseCallableProvider automatically routes CRUD calls here.
+
+import { createSupabaseCrudFunctions } from '@donotdev/functions/supabase';
+
+// Import your entities
+// import * as entities from '../_shared/entities.ts';
+const entities = {}; // TODO: Replace with your entity imports
+
+const { serve } = createSupabaseCrudFunctions(entities);
+
+Deno.serve(serve);

package/templates/functions-supabase/supabase/functions/delete-account/index.ts.example

@@ -0,0 +1,7 @@
+// supabase/functions/delete-account/index.ts
+// Supabase Edge Function — Account Deletion
+// Deploy: supabase functions deploy delete-account
+
+import { createDeleteAccount } from '@donotdev/functions/supabase';
+
+Deno.serve(createDeleteAccount());

package/templates/functions-supabase/supabase/functions/get-custom-claims/index.ts.example

@@ -0,0 +1,7 @@
+// supabase/functions/get-custom-claims/index.ts
+// Supabase Edge Function — Get Custom Claims (app_metadata)
+// Deploy: supabase functions deploy get-custom-claims
+
+import { createGetCustomClaims } from '@donotdev/functions/supabase';
+
+Deno.serve(createGetCustomClaims());

package/templates/functions-supabase/supabase/functions/get-user-auth-status/index.ts.example

@@ -0,0 +1,7 @@
+// supabase/functions/get-user-auth-status/index.ts
+// Supabase Edge Function — Get User Auth Status
+// Deploy: supabase functions deploy get-user-auth-status
+
+import { createGetUserAuthStatus } from '@donotdev/functions/supabase';
+
+Deno.serve(createGetUserAuthStatus());

package/templates/functions-supabase/supabase/functions/refresh-subscription-status/index.ts.example

@@ -0,0 +1,7 @@
+// supabase/functions/refresh-subscription-status/index.ts
+// Supabase Edge Function — Refresh Subscription Status
+// Deploy: supabase functions deploy refresh-subscription-status
+
+import { createRefreshSubscriptionStatus } from '@donotdev/functions/supabase';
+
+Deno.serve(createRefreshSubscriptionStatus());

package/templates/functions-supabase/supabase/functions/remove-custom-claims/index.ts.example

@@ -0,0 +1,7 @@
+// supabase/functions/remove-custom-claims/index.ts
+// Supabase Edge Function — Remove Custom Claims from app_metadata
+// Deploy: supabase functions deploy remove-custom-claims
+
+import { createRemoveCustomClaims } from '@donotdev/functions/supabase';
+
+Deno.serve(createRemoveCustomClaims());

package/templates/functions-supabase/supabase/functions/set-custom-claims/index.ts.example

@@ -0,0 +1,7 @@
+// supabase/functions/set-custom-claims/index.ts
+// Supabase Edge Function — Set Custom Claims (app_metadata)
+// Deploy: supabase functions deploy set-custom-claims
+
+import { createSetCustomClaims } from '@donotdev/functions/supabase';
+
+Deno.serve(createSetCustomClaims());

package/templates/functions-supabase/supabase/migrations/20250101000000_idempotency.sql

@@ -0,0 +1,24 @@
+-- Migration: Create idempotency table for Supabase CRUD operations
+-- Generated: 2026-02-19
+-- Purpose: Store operation results to prevent duplicate processing
+-- TTL: 24 hours default, configurable per operation
+
+CREATE TABLE IF NOT EXISTS idempotency (
+  id TEXT PRIMARY KEY,                    -- Format: "{operation}_{idempotencyKey}"
+  operation TEXT NOT NULL,                 -- 'create', 'update', 'delete', etc.
+  idempotency_key TEXT NOT NULL UNIQUE,   -- Client-provided key
+  result JSONB NOT NULL,                  -- Cached operation result
+  processed_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  processed_by TEXT NOT NULL,             -- User ID
+  expires_at TIMESTAMPTZ NOT NULL         -- TTL for cleanup (default: 24h)
+);
+
+-- Indexes for efficient lookups
+CREATE INDEX IF NOT EXISTS idx_idempotency_expires ON idempotency(expires_at);
+CREATE INDEX IF NOT EXISTS idx_idempotency_key ON idempotency(idempotency_key);
+CREATE INDEX IF NOT EXISTS idx_idempotency_operation ON idempotency(operation, expires_at);
+
+-- Comments
+COMMENT ON TABLE idempotency IS 'Stores idempotency keys and cached operation results to prevent duplicate processing';
+COMMENT ON COLUMN idempotency.id IS 'Composite key: {operation}_{idempotencyKey}';
+COMMENT ON COLUMN idempotency.expires_at IS 'TTL for automatic cleanup - defaults to 24 hours from processed_at';

package/templates/functions-supabase/supabase/migrations/20250101000001_rate_limits.sql

@@ -0,0 +1,22 @@
+-- Migration: Create rate_limits table for Supabase Edge Functions
+-- Generated: 2026-02-19
+-- Purpose: Track API call rates per user/IP to prevent abuse
+-- Pattern: Same as Firebase Firestore rateLimits collection
+
+CREATE TABLE IF NOT EXISTS rate_limits (
+  key TEXT PRIMARY KEY,                    -- Format: "{operation}_{identifier}" (e.g., "create_apartment_uid_123")
+  attempts INTEGER NOT NULL DEFAULT 1,
+  window_start TIMESTAMPTZ NOT NULL DEFAULT now(),
+  block_until TIMESTAMPTZ,                 -- NULL if not blocked
+  last_updated TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- Indexes for efficient lookups and cleanup
+CREATE INDEX IF NOT EXISTS idx_rate_limits_window ON rate_limits(window_start);
+CREATE INDEX IF NOT EXISTS idx_rate_limits_block ON rate_limits(block_until) WHERE block_until IS NOT NULL;
+CREATE INDEX IF NOT EXISTS idx_rate_limits_updated ON rate_limits(last_updated);
+
+-- Comments
+COMMENT ON TABLE rate_limits IS 'Tracks API call rates per operation and identifier (user ID or IP)';
+COMMENT ON COLUMN rate_limits.key IS 'Composite key: {operation}_{identifier_type}_{identifier_value}';
+COMMENT ON COLUMN rate_limits.block_until IS 'Timestamp when rate limit block expires (NULL if not blocked)';

package/templates/functions-supabase/supabase/migrations/20250101000002_cleanup_jobs.sql

@@ -0,0 +1,28 @@
+-- Migration: Create cleanup cron jobs for idempotency and rate_limits tables
+-- Generated: 2026-02-19
+-- Purpose: Automatically clean up expired records to prevent table bloat
+-- Schedule: Daily at 2 AM UTC (idempotency), 3 AM UTC (rate_limits), 4 AM UTC (metrics)
+
+-- Enable pg_cron extension (if not already enabled)
+CREATE EXTENSION IF NOT EXISTS pg_cron;
+
+-- Cleanup expired idempotency records (daily at 2 AM UTC)
+SELECT cron.schedule(
+  'cleanup-idempotency',
+  '0 2 * * *',
+  $$DELETE FROM idempotency WHERE expires_at < now()$$
+);
+
+-- Cleanup old rate limit records (daily at 3 AM UTC)
+SELECT cron.schedule(
+  'cleanup-rate-limits',
+  '0 3 * * *',
+  $$DELETE FROM rate_limits WHERE window_start + interval '7 days' < now()$$
+);
+
+-- Cleanup old operation metrics (daily at 4 AM UTC)
+SELECT cron.schedule(
+  'cleanup-operation-metrics',
+  '0 4 * * *',
+  $$DELETE FROM operation_metrics WHERE timestamp < now() - interval '90 days'$$
+);

package/templates/functions-supabase/supabase/migrations/20250101000003_operation_metrics.sql

@@ -0,0 +1,28 @@
+-- Migration: Create operation_metrics table for Supabase Edge Functions monitoring
+-- Generated: 2026-02-19
+-- Purpose: Track operation success/failure rates, duration, and user activity
+-- Retention: 90 days (configurable via cleanup job)
+
+CREATE TABLE IF NOT EXISTS operation_metrics (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  operation TEXT NOT NULL,                  -- e.g., 'create_apartment', 'get_user'
+  user_id TEXT,                             -- NULL for guest operations
+  status TEXT NOT NULL,                     -- 'success', 'failed', 'pending'
+  duration_ms INTEGER,                      -- Operation duration in milliseconds
+  timestamp TIMESTAMPTZ NOT NULL DEFAULT now(),
+  metadata JSONB,                           -- Additional context (request ID, etc.)
+  error_code TEXT,                          -- If status = 'failed'
+  error_message TEXT                        -- If status = 'failed'
+);
+
+-- Indexes for efficient queries
+CREATE INDEX IF NOT EXISTS idx_metrics_operation ON operation_metrics(operation, timestamp DESC);
+CREATE INDEX IF NOT EXISTS idx_metrics_user ON operation_metrics(user_id, timestamp DESC) WHERE user_id IS NOT NULL;
+CREATE INDEX IF NOT EXISTS idx_metrics_status ON operation_metrics(status, timestamp DESC);
+CREATE INDEX IF NOT EXISTS idx_metrics_timestamp ON operation_metrics(timestamp DESC);
+
+-- Comments
+COMMENT ON TABLE operation_metrics IS 'Tracks operation metrics for monitoring and analytics';
+COMMENT ON COLUMN operation_metrics.operation IS 'Operation name (e.g., create_apartment, get_user)';
+COMMENT ON COLUMN operation_metrics.duration_ms IS 'Operation duration in milliseconds';
+COMMENT ON COLUMN operation_metrics.metadata IS 'Additional context as JSON (request ID, etc.)';

package/templates/functions-vercel/functions-vercel/tsconfig.json.example

@@ -1,5 +1,5 @@
 {
-  "extends": "../../tsconfig.base.json",
+  "extends": "../../../tsconfig.functions.json",
   "compilerOptions": {
     "outDir": "./lib",
     "rootDir": "./src",

package/templates/functions-vercel/functions-vercel/vercel.json.example

@@ -1,7 +1,7 @@
 {
   "functions": {
     "src/api/**/*.ts": {
-      "runtime": "nodejs20.x"
+      "runtime": "nodejs22.x"
     }
   },
   "env": {

package/templates/functions-vercel/vercel.json.example

@@ -1,7 +1,7 @@
 {
   "functions": {
     "src/api/**/*.ts": {
-      "runtime": "nodejs20.x"
+      "runtime": "nodejs22.x"
     }
   },
   "env": {

package/templates/github/github/workflows/firebase-deploy.yml.example

@@ -32,7 +32,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20' # Using Node 20
+          node-version: '22' # Using Node 22 LTS
           
       # Step 5: Setup Bun
       - name: Install Bun

package/templates/github/workflows/firebase-deploy.yml.example

@@ -32,7 +32,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20' # Using Node 20
+          node-version: '22' # Using Node 22 LTS
           
       # Step 5: Setup Bun
       - name: Install Bun

package/templates/overlay-firebase/env.fragment.example

@@ -0,0 +1,34 @@
+
+# =============================================================================
+# Firebase Configuration
+# =============================================================================
+# Get these values from your Firebase project settings
+# Run `dndev firebase:setup` to auto-populate, or copy from Firebase Console
+VITE_FIREBASE_API_KEY=
+VITE_FIREBASE_PROJECT_ID=
+# Copy from Firebase Console. Framework uses APP_URL hostname in production automatically.
+VITE_FIREBASE_AUTH_DOMAIN=
+VITE_FIREBASE_STORAGE_BUCKET=
+VITE_FIREBASE_MESSAGING_SENDER_ID=
+VITE_FIREBASE_APP_ID=
+VITE_FIREBASE_MEASUREMENT_ID=
+VITE_FIREBASE_FUNCTIONS_REGION=
+
+# =============================================================================
+# Firebase Emulator (Development only)
+# =============================================================================
+# Set to true to use Firebase emulators instead of production services
+VITE_USE_FIREBASE_EMULATOR=false
+VITE_FIREBASE_EMULATOR_HOST=localhost
+VITE_FIREBASE_EMULATOR_PORT=9099
+VITE_FIREBASE_AUTH_EMULATOR_HOST=http://localhost:9099
+VITE_FIREBASE_FIRESTORE_EMULATOR_HOST=localhost:8080
+VITE_FIREBASE_FUNCTIONS_EMULATOR_PORT=5001
+
+# =============================================================================
+# Firebase App Check (Abuse Protection)
+# =============================================================================
+# reCAPTCHA v3 site key for App Check
+# VITE_RECAPTCHA_SITE_KEY=6LcXXXX...
+# Optional: Debug token for localhost testing
+# VITE_APPCHECK_DEBUG_TOKEN=XXXX-XXXX-XXXX

package/templates/overlay-firebase/env.fragment.expo.example

@@ -0,0 +1,34 @@
+
+# =============================================================================
+# Firebase Configuration
+# =============================================================================
+# Get these values from your Firebase project settings
+# Run `dndev firebase:setup` to auto-populate, or copy from Firebase Console
+EXPO_PUBLIC_FIREBASE_API_KEY=
+EXPO_PUBLIC_FIREBASE_PROJECT_ID=
+# Copy from Firebase Console. Framework uses APP_URL hostname in production automatically.
+EXPO_PUBLIC_FIREBASE_AUTH_DOMAIN=
+EXPO_PUBLIC_FIREBASE_STORAGE_BUCKET=
+EXPO_PUBLIC_FIREBASE_MESSAGING_SENDER_ID=
+EXPO_PUBLIC_FIREBASE_APP_ID=
+EXPO_PUBLIC_FIREBASE_MEASUREMENT_ID=
+EXPO_PUBLIC_FIREBASE_FUNCTIONS_REGION=
+
+# =============================================================================
+# Firebase Emulator (Development only)
+# =============================================================================
+# Set to true to use Firebase emulators instead of production services
+EXPO_PUBLIC_USE_FIREBASE_EMULATOR=false
+EXPO_PUBLIC_FIREBASE_EMULATOR_HOST=localhost
+EXPO_PUBLIC_FIREBASE_EMULATOR_PORT=9099
+EXPO_PUBLIC_FIREBASE_AUTH_EMULATOR_HOST=http://localhost:9099
+EXPO_PUBLIC_FIREBASE_FIRESTORE_EMULATOR_HOST=localhost:8080
+EXPO_PUBLIC_FIREBASE_FUNCTIONS_EMULATOR_PORT=5001
+
+# =============================================================================
+# Firebase App Check (Abuse Protection)
+# =============================================================================
+# reCAPTCHA v3 site key for App Check
+# EXPO_PUBLIC_RECAPTCHA_SITE_KEY=6LcXXXX...
+# Optional: Debug token for localhost testing
+# EXPO_PUBLIC_APPCHECK_DEBUG_TOKEN=XXXX-XXXX-XXXX

package/templates/overlay-firebase/env.fragment.nextjs.example

@@ -0,0 +1,34 @@
+
+# =============================================================================
+# Firebase Configuration
+# =============================================================================
+# Get these values from your Firebase project settings
+# Run `dndev firebase:setup` to auto-populate, or copy from Firebase Console
+NEXT_PUBLIC_FIREBASE_API_KEY=
+NEXT_PUBLIC_FIREBASE_PROJECT_ID=
+# Copy from Firebase Console. Framework uses APP_URL hostname in production automatically.
+NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN=
+NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET=
+NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID=
+NEXT_PUBLIC_FIREBASE_APP_ID=
+NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID=
+NEXT_PUBLIC_FIREBASE_FUNCTIONS_REGION=
+
+# =============================================================================
+# Firebase Emulator (Development only)
+# =============================================================================
+# Set to true to use Firebase emulators instead of production services
+NEXT_PUBLIC_USE_FIREBASE_EMULATOR=false
+NEXT_PUBLIC_FIREBASE_EMULATOR_HOST=localhost
+NEXT_PUBLIC_FIREBASE_EMULATOR_PORT=9099
+NEXT_PUBLIC_FIREBASE_AUTH_EMULATOR_HOST=http://localhost:9099
+NEXT_PUBLIC_FIREBASE_FIRESTORE_EMULATOR_HOST=localhost:8080
+NEXT_PUBLIC_FIREBASE_FUNCTIONS_EMULATOR_PORT=5001
+
+# =============================================================================
+# Firebase App Check (Abuse Protection)
+# =============================================================================
+# reCAPTCHA v3 site key for App Check
+# NEXT_PUBLIC_RECAPTCHA_SITE_KEY=6LcXXXX...
+# Optional: Debug token for localhost testing
+# NEXT_PUBLIC_APPCHECK_DEBUG_TOKEN=XXXX-XXXX-XXXX