spine-framework 0.3.79 → 0.3.82

package/.framework/cli/commands/init.ts

@@ -174,13 +174,14 @@ export function registerInitCommands(program: Command) {
           const envTemplate = [
             '# Supabase credentials',
             '# Get these from: Supabase Dashboard → Your Project → Settings → API',
-            'SUPABASE_URL=https://<project-ref>.supabase.co',
+            '# Replace the values below — do not leave them blank or as placeholders',
+            'SUPABASE_URL=',
             'SUPABASE_ANON_KEY=',
             'SUPABASE_SERVICE_ROLE_KEY=',
             'SUPABASE_DB_PASSWORD=',
             '',
-            '# Vite (browser-safe)',
-            'VITE_SUPABASE_URL=https://<project-ref>.supabase.co',
+            '# Vite (browser-safe) — copy from above',
+            'VITE_SUPABASE_URL=',
             'VITE_SUPABASE_ANON_KEY=',
             'VITE_DB_SCHEMA=public',
             'VITE_APP_NAME=Spine',

package/.framework/cli/commands/migrate.ts

@@ -114,18 +114,33 @@ async function migrateCommand(options: MigrateOptions): Promise<void> {
   // Load .env from project root
   loadEnv()
 
+  const envPath = join(PROJECT_ROOT, '.env')
+  const envExists = existsSync(envPath)
+
   const supabaseUrl = process.env.SUPABASE_URL
   if (!supabaseUrl || supabaseUrl.includes('placeholder') || supabaseUrl.includes('your-project')) {
-    console.error('Error: SUPABASE_URL not set. Edit your .env file first.')
-    console.error('  Get it from: https://supabase.com/dashboard/project/_/settings/api')
+    console.error('❌ SUPABASE_URL is not set.\n')
+    if (!envExists) {
+      console.error('  No .env file found in this directory.')
+      console.error('  Run: npx spine-framework init   (to create the .env template)')
+    } else {
+      console.error('  Your .env file exists but SUPABASE_URL is missing or still set to a placeholder.')
+      console.error('  Edit .env and set SUPABASE_URL to your project URL.')
+    }
+    console.error('\n  Get it from: https://supabase.com/dashboard/project/_/settings/api')
     process.exit(1)
   }
 
   const dbPassword = options.dbPassword || process.env.SUPABASE_DB_PASSWORD
   if (!dbPassword) {
-    console.error('Error: SUPABASE_DB_PASSWORD not set.')
-    console.error('  Add it to .env or pass --db-password <password>')
-    console.error('  Get it from: https://supabase.com/dashboard/project/_/settings/database')
+    console.error('❌ SUPABASE_DB_PASSWORD is not set.\n')
+    if (!envExists) {
+      console.error('  No .env file found. Run: npx spine-framework init')
+    } else {
+      console.error('  Edit .env and add: SUPABASE_DB_PASSWORD=your-db-password')
+      console.error('  Or pass it directly: npx spine-framework migrate --db-password <password>')
+    }
+    console.error('\n  Get it from: https://supabase.com/dashboard/project/_/settings/database')
     process.exit(1)
   }
 

package/.framework/cli/env-loader.ts

@@ -19,8 +19,8 @@ import { fileURLToPath } from 'url'
 const __filename = fileURLToPath(import.meta.url)
 const __dirname = dirname(__filename)
 
-const envPath = resolve(__dirname, '../.xenv')
-if (existsSync(envPath)) {
+function loadEnvFile(envPath: string) {
+  if (!existsSync(envPath)) return
   const lines = readFileSync(envPath, 'utf8').split('\n')
   for (const line of lines) {
     const trimmed = line.trim()
@@ -34,3 +34,10 @@ if (existsSync(envPath)) {
     }
   }
 }
+
+// 1. Load project .env first (process.cwd() = the developer's project root)
+//    This must happen before any module that reads env vars at import time (e.g. _shared/db.ts)
+loadEnvFile(resolve(process.cwd(), '.env'))
+
+// 2. Load framework's own .xenv (lower priority — project .env wins)
+loadEnvFile(resolve(__dirname, '../.xenv'))

package/.framework/functions/_shared/db.ts

@@ -20,9 +20,21 @@ import WebSocket from 'ws'
 // ─── ENVIRONMENT RESOLUTION ──────────────────────────────────────────────────
 
 const _env = (globalThis as any).process?.env || {}
-const supabaseUrl: string = _env.SUPABASE_URL || 'https://placeholder.supabase.co'
-const supabaseServiceKey: string = _env.SUPABASE_SERVICE_ROLE_KEY || 'placeholder'
-const supabaseAnonKey: string = _env.SUPABASE_ANON_KEY || 'placeholder'
+
+// Use a known-valid placeholder URL so that createClient() doesn't throw at
+// module load time when env vars haven't been set yet (e.g. during CLI init).
+// All real requests validate credentials before hitting the DB.
+const PLACEHOLDER_URL = 'https://placeholder.supabase.co'
+const PLACEHOLDER_KEY = 'placeholder'
+
+function isValidUrl(url: string): boolean {
+  try { new URL(url); return true } catch { return false }
+}
+
+const rawUrl = _env.SUPABASE_URL || ''
+const supabaseUrl: string = rawUrl && isValidUrl(rawUrl) ? rawUrl : PLACEHOLDER_URL
+const supabaseServiceKey: string = _env.SUPABASE_SERVICE_ROLE_KEY || PLACEHOLDER_KEY
+const supabaseAnonKey: string = _env.SUPABASE_ANON_KEY || PLACEHOLDER_KEY
 const dbSchema: string = _env.DB_SCHEMA || 'public'
 
 // ─── CLIENTS ─────────────────────────────────────────────────────────────────

package/.framework/src/App.tsx

@@ -85,8 +85,10 @@ function AuthenticatedRouter() {
   return (
     <Suspense fallback={<div className="min-h-screen flex items-center justify-center"><LoadingSpinner /></div>}>
       <Routes>
-        {/* Default redirect to first available app, or dashboard if no apps */}
-        <Route path="/" element={<Navigate to={defaultRedirect} replace />} />
+        {/* Default redirect to first available app — only when root is not itself an app */}
+        {defaultRedirect !== '/' && (
+          <Route path="/" element={<Navigate to={defaultRedirect} replace />} />
+        )}
         <Route path="/dashboard" element={<DashboardPage />} />
         
         {/* Login/register routes for authenticated users (redirects to qualified app) */}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.79",
+  "version": "0.3.82",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {