spfn 0.2.0-beta.54 → 0.2.0-beta.57

package/README.md

@@ -61,7 +61,9 @@ Tailwind, import alias `@/*`, no ESLint), sets up SVGR icons, then runs `init`.
 
 Adds SPFN to an existing Next.js project: copies the server templates, wires the RPC
 proxy route, Docker files, deploy + codegen config, updates `package.json` scripts/deps,
-and installs. See [Scaffold structure](#scaffold-structure) for what lands on disk.
+and installs. With auth enabled it also adds the `/_auth/:path*` → SPFN API rewrite to
+`next.config` (OAuth callbacks return to the app origin; merged manually if a `rewrites()`
+already exists). See [Scaffold structure](#scaffold-structure) for what lands on disk.
 
 | Option | Description |
 |--------|-------------|
@@ -165,7 +167,7 @@ loaded `.env` chain.
 | Subcommand | Description |
 |------------|-------------|
 | `db generate` (`g`) | Generate migrations from schema changes (timestamp-prefixed) |
-| `db push` | Apply schema to DB. Safe by default; destructive changes need confirmation. `--force` applies destructive changes, `--dry-run` previews |
+| `db push` | Diff with Drizzle Kit's current PostgreSQL engine and apply the selected DDL atomically. Destructive changes need confirmation; `--force` applies them, `--dry-run` previews |
 | `db migrate` (`m`) | Run pending migrations. `--with-backup` snapshots first |
 | `db studio` | Open Drizzle Studio. `-p, --port` (auto-finds a free port) |
 | `db check` | Verify the database connection |
@@ -280,6 +282,7 @@ spfn.config.js                       # deployment config (subdomain/region/domai
 docker-compose.yml                   # Postgres + Redis (dev)
 docker-compose.production.yml
 Dockerfile, .dockerignore
+next.config.ts                       # patched when auth is enabled: /_auth/:path* rewrite → SPFN API
 .env.example                         # committed reference — every key, placeholder values
 .env.local                           # generated, gitignored (Next.js-facing URLs)
 .env.server                          # generated, gitignored (server secrets: DB, cache)
@@ -376,8 +379,9 @@ type ships from `spfn` (`@type {import('spfn').SpfnConfig}`).
 - **`spfn start` needs a prior `spfn build`.** It hard-fails without `.spfn/server`,
   `.spfn/prod-server.mjs`, and `.next`.
 - **Destructive DB commands are guarded.** `db drop` double-confirms (and verifies the
-  target); `db push` applies additive changes but withholds destructive ones unless
-  `--force`/confirmed. Prefer `db generate` + `db migrate` for production; `db push` is dev-only.
+  target); `db push` applies the selected statements in one transaction and withholds
+  destructive ones unless `--force`/confirmed. Prefer `db generate` + `db migrate` for
+  production; `db push` is dev-only.
 - **`spfn add` requires a scoped package name** (must contain `/`) and only applies
   migrations when `DATABASE_URL` is set — otherwise it skips with a hint.
 - **Package manager is auto-detected from lockfiles.** If detection is wrong (e.g. mixed