spine-framework 0.3.81 → 0.3.83

package/.framework/cli/commands/init.ts

@@ -16,7 +16,7 @@
  */
 
 import type { Command } from 'commander'
-import { existsSync, mkdirSync, writeFileSync, copyFileSync, readdirSync, statSync, cpSync } from 'fs'
+import { existsSync, mkdirSync, writeFileSync, copyFileSync, readdirSync, statSync, cpSync, readFileSync } from 'fs'
 import { resolve, dirname, join } from 'path'
 import { fileURLToPath } from 'url'
 import { execSync } from 'child_process'
@@ -174,13 +174,14 @@ export function registerInitCommands(program: Command) {
           const envTemplate = [
             '# Supabase credentials',
             '# Get these from: Supabase Dashboard → Your Project → Settings → API',
-            'SUPABASE_URL=https://<project-ref>.supabase.co',
+            '# Replace the values below — do not leave them blank or as placeholders',
+            'SUPABASE_URL=',
             'SUPABASE_ANON_KEY=',
             'SUPABASE_SERVICE_ROLE_KEY=',
             'SUPABASE_DB_PASSWORD=',
             '',
-            '# Vite (browser-safe)',
-            'VITE_SUPABASE_URL=https://<project-ref>.supabase.co',
+            '# Vite (browser-safe) — copy from above',
+            'VITE_SUPABASE_URL=',
             'VITE_SUPABASE_ANON_KEY=',
             'VITE_DB_SCHEMA=public',
             'VITE_APP_NAME=Spine',
@@ -211,7 +212,14 @@ export function registerInitCommands(program: Command) {
           console.log('  ✓ .gitignore written')
         }
 
-        console.log('\n✅ Project initialized!\n')
+        // Read installed package version from the package's own package.json
+        let pkgVersion = 'unknown'
+        try {
+          const pkgJson = JSON.parse(readFileSync(join(PACKAGE_ROOT, 'package.json'), 'utf8'))
+          pkgVersion = pkgJson.version ?? 'unknown'
+        } catch { /* non-fatal */ }
+
+        console.log(`\n✅ Project initialized! (spine-framework@${pkgVersion})\n`)
         console.log('Next steps:')
         console.log('  1. Edit .env with your Supabase credentials')
         console.log('  2. Run: npx spine-framework migrate')

package/.framework/functions/_shared/db.ts

@@ -20,9 +20,21 @@ import WebSocket from 'ws'
 // ─── ENVIRONMENT RESOLUTION ──────────────────────────────────────────────────
 
 const _env = (globalThis as any).process?.env || {}
-const supabaseUrl: string = _env.SUPABASE_URL || 'https://placeholder.supabase.co'
-const supabaseServiceKey: string = _env.SUPABASE_SERVICE_ROLE_KEY || 'placeholder'
-const supabaseAnonKey: string = _env.SUPABASE_ANON_KEY || 'placeholder'
+
+// Use a known-valid placeholder URL so that createClient() doesn't throw at
+// module load time when env vars haven't been set yet (e.g. during CLI init).
+// All real requests validate credentials before hitting the DB.
+const PLACEHOLDER_URL = 'https://placeholder.supabase.co'
+const PLACEHOLDER_KEY = 'placeholder'
+
+function isValidUrl(url: string): boolean {
+  try { new URL(url); return true } catch { return false }
+}
+
+const rawUrl = _env.SUPABASE_URL || ''
+const supabaseUrl: string = rawUrl && isValidUrl(rawUrl) ? rawUrl : PLACEHOLDER_URL
+const supabaseServiceKey: string = _env.SUPABASE_SERVICE_ROLE_KEY || PLACEHOLDER_KEY
+const supabaseAnonKey: string = _env.SUPABASE_ANON_KEY || PLACEHOLDER_KEY
 const dbSchema: string = _env.DB_SCHEMA || 'public'
 
 // ─── CLIENTS ─────────────────────────────────────────────────────────────────

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.81",
+  "version": "0.3.83",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {