create-smoodly-app 0.0.3 → 0.0.4

package/README.md

@@ -15,7 +15,10 @@ sign in. Spec: `docs/superpowers/specs/2026-09-04-create-smoodly-app-design.md`.
    next free block, `553xx` and so on, and says so) or a
    **hosted project** (URL, publishable key, secret key; then an offer to
    `supabase link --project-ref <ref>` + `supabase db push`, the ref taken
-   from the URL so the CLI never opens its project picker).
+   from the URL so the CLI never opens its project picker). The URL may be
+   pasted without `https://`; anything that is not an http(s) URL is refused
+   before any step runs. A custom domain has no ref, so the link is not
+   offered and the two commands are printed instead.
 3. The first editor: pick an existing Auth user or create one (email +
    password). The `editors` row is written with role `owner`.
    If `@` does not appear when you type it (macOS, `@` on Option+2 with the
@@ -84,7 +87,13 @@ The CLI has no runtime dependency on `smoodly`.
   project sorts first (seen 2026-09-05 during the hosted run, caught before
   the push). Fixed 2026-09-05: `projectRef` (src/env.ts) takes the ref from
   the typed URL's first host label and the link step and every fallback
-  line pass it; a custom domain yields no ref and falls back to the picker.
+  line pass it. Seen again 2026-09-05 from the published 0.0.3: a URL typed
+  without `https://` gave no ref (the picker opened) and then failed
+  `ensureEditor` with supabase-js's "Invalid supabaseUrl". Fixed the same
+  day: `normalizeProjectUrl` (src/env.ts) adds the scheme and refuses
+  non-URLs at the prompt and for `--url`; a URL with no ref (custom domain)
+  never offers the link, and `run` throws rather than run a bare
+  `supabase link`.
 - The `--yes` flag defaults to local mode; with the Supabase CLI absent that
   stops with the install message rather than falling through to hosted.
 - Captured `exec` output is stdout only; stderr streams straight through, so

package/dist/index.js

@@ -135,6 +135,41 @@ async function isPortFree(port) {
 import * as p from "@clack/prompts";
 import { resolve } from "node:path";
 
+// src/env.ts
+function renderEnv(keys) {
+  return [
+    "# Smoodly, self-host: the content project's values. SMOODLY_AUTH_URL and",
+    "# SMOODLY_AUTH_KEY default to these two \u2014 leave them unset.",
+    `SMOODLY_URL=${keys.url}`,
+    `SMOODLY_SECRET_KEY=${keys.secretKey}`,
+    `SMOODLY_PUBLISHABLE_KEY=${keys.publishableKey}`,
+    ""
+  ].join("\n");
+}
+function normalizeProjectUrl(input) {
+  const raw = input.trim();
+  if (!raw) return null;
+  const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(raw) ? raw : `https://${raw}`;
+  try {
+    const url = new URL(withScheme);
+    if (url.protocol !== "http:" && url.protocol !== "https:") return null;
+    if (!url.hostname) return null;
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
+function projectRef(url) {
+  let host;
+  try {
+    host = new URL(url).hostname;
+  } catch {
+    return null;
+  }
+  const m = /^([a-z0-9]{20})\.supabase\.(co|in|red)$/.exec(host);
+  return m ? m[1] : null;
+}
+
 // src/scaffold.ts
 import { cp, readdir, readFile, rename, writeFile } from "node:fs/promises";
 import { join } from "node:path";
@@ -197,10 +232,23 @@ async function resolveAnswers(flags2, ctx) {
     if (!ctx.hasSupabaseCli) bail("Local mode needs the Supabase CLI: https://supabase.com/docs/guides/cli (brew install supabase/tap/supabase)");
     return { name, dir, supabase, hasSupabaseCli: true, smoodlyDep: flags2.smoodlyDep };
   }
-  const url = flags2.url ?? await answer(p.text({ message: "Supabase project URL", placeholder: "https://abcd.supabase.co" }));
+  const badUrl = "Supabase project URL must be an http(s) URL, like https://abcd.supabase.co";
+  const typedUrl = flags2.url ?? await answer(
+    p.text({
+      message: "Supabase project URL",
+      placeholder: "https://abcd.supabase.co",
+      validate: (v) => normalizeProjectUrl(v ?? "") ? void 0 : badUrl
+    })
+  );
+  const url = normalizeProjectUrl(typedUrl);
+  if (!url) throw new Error(`${badUrl} (got "${typedUrl}")`);
   const publishableKey = flags2.publishableKey ?? await answer(p.text({ message: "Publishable (anon) key" }));
   const secretKey = flags2.secretKey ?? await answer(p.password({ message: "Secret (service role) key" }));
-  const linkAndPush = !ctx.hasSupabaseCli ? false : flags2.skipLink ? false : flags2.yes ? true : await answer(p.confirm({ message: "Link this app to the project and push the migration now? (supabase link, supabase db push)" }));
+  const ref = projectRef(url);
+  if (ctx.hasSupabaseCli && !flags2.skipLink && !ref) {
+    p.log.warn(`No project ref in ${url}; skipping supabase link. Run \`supabase link --project-ref <project-ref>\` and \`supabase db push\` yourself.`);
+  }
+  const linkAndPush = !ctx.hasSupabaseCli ? false : flags2.skipLink || !ref ? false : flags2.yes ? true : await answer(p.confirm({ message: `Link this app to the project and push the migration now? (supabase link --project-ref ${ref}, supabase db push)` }));
   return { name, dir, supabase, hasSupabaseCli: ctx.hasSupabaseCli, hosted: { keys: { url, publishableKey, secretKey }, linkAndPush }, smoodlyDep: flags2.smoodlyDep };
 }
 function askEditorWith(flags2, env = process.env) {
@@ -233,28 +281,6 @@ function askEditorWith(flags2, env = process.env) {
 // src/run.ts
 import { join as join2 } from "node:path";
 
-// src/env.ts
-function renderEnv(keys) {
-  return [
-    "# Smoodly, self-host: the content project's values. SMOODLY_AUTH_URL and",
-    "# SMOODLY_AUTH_KEY default to these two \u2014 leave them unset.",
-    `SMOODLY_URL=${keys.url}`,
-    `SMOODLY_SECRET_KEY=${keys.secretKey}`,
-    `SMOODLY_PUBLISHABLE_KEY=${keys.publishableKey}`,
-    ""
-  ].join("\n");
-}
-function projectRef(url) {
-  let host;
-  try {
-    host = new URL(url).hostname;
-  } catch {
-    return null;
-  }
-  const m = /^([a-z0-9]{20})\.supabase\.(co|in|red)$/.exec(host);
-  return m ? m[1] : null;
-}
-
 // src/plan.ts
 function plan(a) {
   if (a.supabase === "local" && !a.hasSupabaseCli) {
@@ -415,11 +441,14 @@ ${renderEnv(keys).split("\n").filter((l) => !l.startsWith("#")).join("\n").trimE
   }
 }
 function linkArgs(answers2) {
-  const ref = answers2.hosted ? projectRef(answers2.hosted.keys.url) : null;
-  return ref ? ["link", "--project-ref", ref] : ["link"];
+  const url = answers2.hosted?.keys.url ?? "";
+  const ref = projectRef(url);
+  if (!ref) throw new Error(`no project ref in ${url}; run \`supabase link --project-ref <project-ref>\` yourself`);
+  return ["link", "--project-ref", ref];
 }
 function linkCommand(answers2) {
-  return `supabase ${linkArgs(answers2).join(" ")}`;
+  const ref = answers2.hosted ? projectRef(answers2.hosted.keys.url) : null;
+  return `supabase link --project-ref ${ref ?? "<project-ref>"}`;
 }
 
 // src/index.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-smoodly-app",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "description": "Create a Smoodly site: a fresh Next.js app with the admin mounted, a Supabase schema, an env file and a first editor.",
   "license": "MIT",
   "repository": {

package/templates/next/package.json

@@ -13,7 +13,7 @@
     "react": "^19",
     "react-dom": "^19",
     "@supabase/supabase-js": "^2.113.0",
-    "smoodly": "0.0.3"
+    "smoodly": "0.0.4"
   },
   "devDependencies": {
     "@types/node": "^26.4.1",