vibefast-cli 1.1.5 → 1.3.0

package/dist/commands/init.js

@@ -1,330 +1,430 @@
-import { Command } from 'commander';
-import { log } from '../core/log.js';
-import { withSpinner } from '../core/spinner.js';
-import { promptSelectAsync, promptUser, promptYesNo } from '../core/prompt.js';
-import simpleGit from 'simple-git';
-import { existsSync } from 'fs';
-import { join } from 'path';
-import { exec } from 'child_process';
-import { promisify } from 'util';
-const execAsync = promisify(exec);
-export const initCommand = new Command('init')
-    .description('Initialize a new VibeFast project')
-    .option('--license <key>', 'Your VibeFast license key')
-    .option('--branch <branch>', 'Branch to clone (clean or main, default: clean)')
-    .option('--yes', 'Skip all prompts and use defaults')
-    .option('--skip-install', 'Skip dependency installation')
+import { Command, Option } from "commander";
+import { log } from "../core/log.js";
+import { withSpinner } from "../core/spinner.js";
+import { promptSelectAsync, promptUser, promptYesNo, } from "../core/prompt.js";
+import simpleGit from "simple-git";
+import { existsSync } from "fs";
+import { readFile } from "fs/promises";
+import { join } from "path";
+import { runCommand, spawnCommand } from "../core/exec.js";
+import { appendManualSteps } from "../core/manualSteps.js";
+/**
+ * Sync Convex environment variables from backend to native/web .env.local files.
+ * Reads CONVEX_URL from packages/backend/.env.local, derives CONVEX_SITE_URL,
+ * and REPLACES placeholder values in apps/native/.env.local and apps/web/.env.local.
+ */
+async function syncConvexEnvToFrontends(projectPath, platforms) {
+    const backendEnvPath = join(projectPath, "packages/backend/.env.local");
+    // Check if backend env exists
+    if (!existsSync(backendEnvPath)) {
+        return; // No backend env to sync
+    }
+    try {
+        const backendEnv = await readFile(backendEnvPath, "utf-8");
+        // Extract CONVEX_URL from backend env
+        const convexUrlMatch = backendEnv.match(/CONVEX_URL=(.+)/);
+        if (!convexUrlMatch) {
+            return; // No CONVEX_URL found
+        }
+        const convexUrl = convexUrlMatch[1].trim();
+        // Derive CONVEX_SITE_URL by replacing .cloud with .site
+        const convexSiteUrl = convexUrl.replace(".convex.cloud", ".convex.site");
+        // Helper function to replace placeholder values in env file
+        const replaceEnvValues = async (envPath) => {
+            if (!existsSync(envPath))
+                return false;
+            let envContent = await readFile(envPath, "utf-8");
+            let changed = false;
+            // Replace CONVEX_URL=replace_me or any placeholder with actual value
+            if (envContent.match(/CONVEX_URL=.*/)) {
+                const newContent = envContent.replace(/CONVEX_URL=.*/g, `CONVEX_URL=${convexUrl}`);
+                if (newContent !== envContent) {
+                    envContent = newContent;
+                    changed = true;
+                }
+            }
+            // Replace CONVEX_SITE_URL=replace_me or any placeholder with actual value
+            if (envContent.match(/CONVEX_SITE_URL=.*/)) {
+                const newContent = envContent.replace(/CONVEX_SITE_URL=.*/g, `CONVEX_SITE_URL=${convexSiteUrl}`);
+                if (newContent !== envContent) {
+                    envContent = newContent;
+                    changed = true;
+                }
+            }
+            if (changed) {
+                const { writeFile } = await import("fs/promises");
+                await writeFile(envPath, envContent, "utf-8");
+            }
+            return changed;
+        };
+        // Sync to native if platform selected
+        if (platforms.includes("native")) {
+            const nativeEnvPath = join(projectPath, "apps/native/.env.local");
+            const synced = await replaceEnvValues(nativeEnvPath);
+            if (synced) {
+                log.info("✓ Synced Convex URLs to apps/native/.env.local");
+            }
+        }
+        // Sync to web if platform selected
+        if (platforms.includes("web")) {
+            const webEnvPath = join(projectPath, "apps/web/.env.local");
+            const synced = await replaceEnvValues(webEnvPath);
+            if (synced) {
+                log.info("✓ Synced Convex URLs to apps/web/.env.local");
+            }
+        }
+    }
+    catch {
+        // Silently fail - env sync is best-effort
+    }
+}
+export const initCommand = new Command("init")
+    .description("Initialize a new VibeFast project")
+    .option("--license <key>", "Your VibeFast license key")
+    .option("--branch <branch>", "Branch to clone (clean or main, default: clean)")
+    .addOption(new Option("--backend <backend>", "Backend type")
+    .choices(["convex", "supabase"])
+    .default("convex"))
+    .option("--yes", "Skip all prompts and use defaults")
+    .option("--skip-install", "Skip dependency installation")
     .action(async (options) => {
     try {
-        log.plain('');
-        log.info('🚀 VibeFast Project Initialization');
-        log.plain('');
+        log.plain("");
+        log.info("🚀 VibeFast Project Initialization");
+        log.plain("");
         // Check if already in a VibeFast project
-        if (existsSync('.vibefast-signature.json')) {
-            log.error('Already in a VibeFast project!');
-            log.info('This directory already contains a VibeFast project.');
+        if (existsSync(".vibefast-signature.json")) {
+            log.error("Already in a VibeFast project!");
+            log.info("This directory already contains a VibeFast project.");
             process.exit(1);
         }
         // Step 0: Check License Key (REQUIRED)
         let licenseKey = options.license;
         // Check if user already has a license key saved
         if (!licenseKey) {
-            const { getToken } = await import('../core/auth.js');
+            const { getToken } = await import("../core/auth.js");
             const existingToken = await getToken();
             if (existingToken) {
-                log.info('✓ Using existing license key');
+                log.info("✓ Using existing license key");
                 licenseKey = existingToken;
             }
         }
         if (!licenseKey) {
-            log.plain('');
-            log.info('🔑 VibeFast License Key Required');
-            log.plain('');
-            log.info('To use VibeFast, you need a valid license key.');
-            log.info('Get one at: https://vibefast.pro');
-            log.plain('');
+            log.plain("");
+            log.info("🔑 VibeFast License Key Required");
+            log.plain("");
+            log.info("To use VibeFast, you need a valid license key.");
+            log.info("Get one at: https://vibefast.pro");
+            log.plain("");
             if (options.yes) {
                 log.error('License key is required. Use --license <key> or run "vf login" first');
                 process.exit(1);
             }
-            licenseKey = await promptUser('Enter your license key: ');
-            if (!licenseKey || licenseKey.trim() === '') {
-                log.error('License key cannot be empty');
+            licenseKey = await promptUser("Enter your license key: ");
+            if (!licenseKey || licenseKey.trim() === "") {
+                log.error("License key cannot be empty");
                 process.exit(1);
             }
             // Save globally for future use
-            const { saveToken } = await import('../core/auth.js');
+            const { saveToken } = await import("../core/auth.js");
             await saveToken(licenseKey);
         }
-        // Validate branch option and default to clean
-        const branch = options.branch === 'main' ? 'main' : 'clean';
-        if (options.branch && options.branch !== 'clean' && options.branch !== 'main') {
+        // Note: Branch will be derived from backend choice after selection
+        // For now just validate if branch is passed explicitly
+        if (options.branch &&
+            options.branch !== "clean" &&
+            options.branch !== "main") {
             log.error('Invalid branch. Use "clean" or "main".');
             process.exit(1);
         }
         // Step 1.5: Choose platforms
-        let platforms = ['native', 'web'];
+        let platforms = ["native", "web"];
         if (!options.yes) {
-            const platformChoice = await promptSelectAsync('Which platforms do you want to include?', [
+            const platformChoice = (await promptSelectAsync("Which platforms do you want to include?", [
                 {
-                    value: 'both',
-                    label: 'Both (Native + Web)',
-                    description: 'Full monorepo with mobile and web app',
+                    value: "both",
+                    label: "Both (Native + Web)",
+                    description: "Full monorepo with mobile and web app",
                 },
                 {
-                    value: 'native',
-                    label: 'Native Only (Expo)',
-                    description: 'Mobile app only (iOS & Android)',
+                    value: "native",
+                    label: "Native Only (Expo)",
+                    description: "Mobile app only (iOS & Android)",
                 },
                 {
-                    value: 'web',
-                    label: 'Web Only (Next.js)',
-                    description: 'Web app only',
+                    value: "web",
+                    label: "Web Only (Next.js)",
+                    description: "Web app only",
                 },
-            ]);
-            if (platformChoice === 'native') {
-                platforms = ['native'];
-                log.info('Selected: Native (Expo) only');
+            ]));
+            if (platformChoice === "native") {
+                platforms = ["native"];
+                log.info("Selected: Native (Expo) only");
             }
-            else if (platformChoice === 'web') {
-                platforms = ['web'];
-                log.info('Selected: Web (Next.js) only');
+            else if (platformChoice === "web") {
+                platforms = ["web"];
+                log.info("Selected: Web (Next.js) only");
             }
             else {
-                platforms = ['native', 'web'];
-                log.info('Selected: Both platforms');
+                platforms = ["native", "web"];
+                log.info("Selected: Both platforms");
             }
         }
         else {
-            log.info('Using default: Both platforms');
+            log.info("Using default: Both platforms");
+        }
+        log.plain("");
+        // Step 1.6: Choose backend
+        let backend = options.backend || "convex";
+        if (!options.yes) {
+            backend = (await promptSelectAsync("Which backend do you want to use?", [
+                {
+                    value: "convex",
+                    label: "Convex",
+                    description: "Real-time sync, serverless functions",
+                },
+                {
+                    value: "supabase",
+                    label: "Supabase",
+                    description: "PostgreSQL, auth, storage",
+                },
+            ]));
+            log.info(`Selected: ${backend === "convex" ? "Convex" : "Supabase"} backend`);
+        }
+        else {
+            log.info(`Using backend: ${backend}`);
         }
-        log.plain('');
+        log.plain("");
+        // Derive the branch based on backend (both clean and custom clone the appropriate clean branch)
+        const branch = backend === "supabase" ? "supabase-clean" : "clean";
         // Step 1: Choose starter type (after platform selection)
-        let starterType = 'clean';
+        let starterType = "clean";
         let selectedFeatures = [];
         if (!options.yes) {
-            starterType = await promptSelectAsync('How would you like to start?', [
+            starterType = (await promptSelectAsync("How would you like to start?", [
                 {
-                    value: 'clean',
-                    label: 'Clean',
-                    description: 'Minimal setup - add features later with vf add',
+                    value: "clean",
+                    label: "Clean",
+                    description: "Minimal setup - add features later with vf add",
                 },
                 {
-                    value: 'custom',
-                    label: 'Custom',
-                    description: 'Choose features now - one-shot setup',
+                    value: "custom",
+                    label: "Custom",
+                    description: "Choose features now - one-shot setup",
                 },
-            ]);
-            log.info(`Selected: ${starterType === 'clean' ? 'Clean starter' : 'Custom setup'}`);
-            log.plain('');
+            ]));
+            log.info(`Selected: ${starterType === "clean" ? "Clean starter" : "Custom setup"}`);
+            log.plain("");
             // If custom, let them choose features (only when native is present; current feature set is native-only)
-            if (starterType === 'custom') {
-                if (!platforms.includes('native')) {
-                    log.warn('⚠ No installable features for Web-only at the moment. Skipping feature selection.');
+            if (starterType === "custom") {
+                if (!platforms.includes("native")) {
+                    log.warn("⚠ No installable features for Web-only at the moment. Skipping feature selection.");
                 }
                 else {
-                    const { promptMultiSelectAsync } = await import('../core/prompt.js');
-                    const { getRecipesByCategory } = await import('../core/recipes.js');
-                    log.info('📦 Select features to include:');
-                    log.plain('');
-                    const nativeFeatures = getRecipesByCategory('feature').map(r => ({
+                    const { promptMultiSelectAsync } = await import("../core/prompt.js");
+                    const { getRecipesByCategory } = await import("../core/recipes.js");
+                    log.info("📦 Select features to include:");
+                    log.plain("");
+                    const nativeFeatures = getRecipesByCategory("feature").map((r) => ({
                         value: r.name,
                         label: `${r.icon} ${r.name}`,
                         description: r.description,
                     }));
-                    selectedFeatures = await promptMultiSelectAsync('Select features (use space to toggle, enter to confirm):', nativeFeatures);
+                    selectedFeatures = await promptMultiSelectAsync("Select features (use space to toggle, enter to confirm):", nativeFeatures);
                     if (selectedFeatures.length > 0) {
-                        log.info(`Selected ${selectedFeatures.length} feature(s): ${selectedFeatures.join(', ')}`);
+                        log.info(`Selected ${selectedFeatures.length} feature(s): ${selectedFeatures.join(", ")}`);
                     }
                     else {
-                        log.info('No features selected - starting with clean setup');
+                        log.info("No features selected - starting with clean setup");
                     }
-                    log.plain('');
+                    log.plain("");
                 }
             }
         }
         else {
-            log.info('Using default: Clean starter');
-            log.plain('');
+            log.info("Using default: Clean starter");
+            log.plain("");
         }
         // Step 2: Get project name
-        const defaultName = 'vibefast-app';
+        const defaultName = "vibefast-app";
         let projectName = defaultName;
         if (!options.yes) {
-            projectName = await promptUser('Project name: ') || defaultName;
+            projectName = (await promptUser("Project name: ")) || defaultName;
         }
         projectName = (projectName || defaultName).trim();
         if (!projectName) {
             projectName = defaultName;
         }
         if (!/^[a-zA-Z0-9_-]+$/.test(projectName)) {
-            log.error('Project name must use only letters, numbers, hyphens, and underscores.');
+            log.error("Project name must use only letters, numbers, hyphens, and underscores.");
             process.exit(1);
         }
         // Validate project name
         if (existsSync(projectName)) {
             log.error(`Directory "${projectName}" already exists!`);
-            log.info('Please choose a different name or remove the existing directory.');
+            log.info("Please choose a different name or remove the existing directory.");
             process.exit(1);
         }
-        log.plain('');
+        log.plain("");
         // Step 3: Clone repository
         // Note: This is a private repo, so we need GitHub credentials
         // Users can authenticate via:
         // 1. SSH key (recommended)
         // 2. GitHub CLI (gh auth)
         // 3. Personal access token in URL
-        const repoUrl = 'https://github.com/mzafarr/vibefast-pro.git';
+        const repoUrl = "https://github.com/mzafarr/vibefast-pro.git";
         await withSpinner(`Cloning VibeFast monorepo (${branch} branch)...`, async () => {
             const git = simpleGit();
-            const cloneOptions = ['--depth', '1'];
+            const cloneOptions = ["--depth", "1"];
             // Use selected branch (default: clean)
-            cloneOptions.unshift('--branch', branch, '--single-branch');
+            cloneOptions.unshift("--branch", branch, "--single-branch");
             try {
                 await git.clone(repoUrl, projectName, cloneOptions);
             }
             catch (error) {
                 // Handle authentication errors
-                if (error.message.includes('Authentication failed') ||
-                    error.message.includes('permission denied') ||
-                    error.message.includes('fatal: could not read Username')) {
-                    throw new Error('GitHub authentication failed. This is a private repository.\n\n' +
-                        'To access it, you need to authenticate with GitHub:\n\n' +
-                        '1. SSH Key (Recommended):\n' +
-                        '   - Set up SSH: https://docs.github.com/en/authentication/connecting-to-github-with-ssh\n' +
-                        '   - Then try again\n\n' +
-                        '2. GitHub CLI:\n' +
-                        '   - Install: https://cli.github.com\n' +
-                        '   - Run: gh auth login\n' +
-                        '   - Then try again\n\n' +
-                        '3. Personal Access Token:\n' +
-                        '   - Create token: https://github.com/settings/tokens\n' +
-                        '   - Use: https://YOUR_TOKEN@github.com/mzafarr/vibefast-pro.git');
+                if (error.message.includes("Authentication failed") ||
+                    error.message.includes("permission denied") ||
+                    error.message.includes("fatal: could not read Username")) {
+                    throw new Error("GitHub authentication failed. This is a private repository.\n\n" +
+                        "To access it, you need to authenticate with GitHub:\n\n" +
+                        "1. SSH Key (Recommended):\n" +
+                        "   - Set up SSH: https://docs.github.com/en/authentication/connecting-to-github-with-ssh\n" +
+                        "   - Then try again\n\n" +
+                        "2. GitHub CLI:\n" +
+                        "   - Install: https://cli.github.com\n" +
+                        "   - Run: gh auth login\n" +
+                        "   - Then try again\n\n" +
+                        "3. Personal Access Token:\n" +
+                        "   - Create token: https://github.com/settings/tokens\n" +
+                        "   - Use: https://YOUR_TOKEN@github.com/mzafarr/vibefast-pro.git");
                 }
                 throw error;
             }
         }, {
             successText: `✓ Repository cloned successfully`,
         });
-        log.plain('');
+        log.plain("");
         // Step 3.5: Remove unwanted platforms
         const projectPath = join(process.cwd(), projectName);
         if (platforms.length < 2) {
-            await withSpinner('Cleaning up unwanted platforms...', async () => {
-                const { rmSync } = await import('fs');
-                const { join } = await import('path');
-                if (!platforms.includes('native')) {
+            await withSpinner("Cleaning up unwanted platforms...", async () => {
+                const { rmSync } = await import("fs");
+                const { join } = await import("path");
+                if (!platforms.includes("native")) {
                     // Remove native app
-                    const nativePath = join(projectPath, 'apps/native');
+                    const nativePath = join(projectPath, "apps/native");
                     if (existsSync(nativePath)) {
                         rmSync(nativePath, { recursive: true, force: true });
                     }
-                    log.info('  ✓ Removed native app');
+                    log.info("  ✓ Removed native app");
                 }
-                if (!platforms.includes('web')) {
+                if (!platforms.includes("web")) {
                     // Remove web app
-                    const webPath = join(projectPath, 'apps/web');
+                    const webPath = join(projectPath, "apps/web");
                     if (existsSync(webPath)) {
                         rmSync(webPath, { recursive: true, force: true });
                     }
-                    log.info('  ✓ Removed web app');
+                    log.info("  ✓ Removed web app");
                 }
                 // Update package.json workspaces
-                const rootPackageJsonPath = join(projectPath, 'package.json');
+                const rootPackageJsonPath = join(projectPath, "package.json");
                 if (existsSync(rootPackageJsonPath)) {
-                    const { readFileSync, writeFileSync } = await import('fs');
-                    const packageJson = JSON.parse(readFileSync(rootPackageJsonPath, 'utf-8'));
+                    const { readFileSync, writeFileSync } = await import("fs");
+                    const packageJson = JSON.parse(readFileSync(rootPackageJsonPath, "utf-8"));
                     if (packageJson.workspaces) {
                         const workspaces = packageJson.workspaces.filter((ws) => {
-                            if (!platforms.includes('native') && ws.includes('apps/native'))
+                            if (!platforms.includes("native") &&
+                                ws.includes("apps/native"))
                                 return false;
-                            if (!platforms.includes('web') && ws.includes('apps/web'))
+                            if (!platforms.includes("web") && ws.includes("apps/web"))
                                 return false;
                             return true;
                         });
                         packageJson.workspaces = workspaces;
                         writeFileSync(rootPackageJsonPath, JSON.stringify(packageJson, null, 2));
-                        log.info('  ✓ Updated workspace configuration');
+                        log.info("  ✓ Updated workspace configuration");
                     }
                 }
                 // Update turbo.json
-                const turboJsonPath = join(projectPath, 'turbo.json');
+                const turboJsonPath = join(projectPath, "turbo.json");
                 if (existsSync(turboJsonPath)) {
-                    const { readFileSync, writeFileSync } = await import('fs');
-                    const turboJson = JSON.parse(readFileSync(turboJsonPath, 'utf-8'));
+                    const { readFileSync, writeFileSync } = await import("fs");
+                    const turboJson = JSON.parse(readFileSync(turboJsonPath, "utf-8"));
                     if (turboJson.pipeline) {
                         // Remove platform-specific tasks
                         const tasksToRemove = [];
-                        if (!platforms.includes('native')) {
-                            tasksToRemove.push('native:*', 'dev:native', 'build:native');
+                        if (!platforms.includes("native")) {
+                            tasksToRemove.push("native:*", "dev:native", "build:native");
                         }
-                        if (!platforms.includes('web')) {
-                            tasksToRemove.push('web:*', 'dev:web', 'build:web');
+                        if (!platforms.includes("web")) {
+                            tasksToRemove.push("web:*", "dev:web", "build:web");
                         }
-                        tasksToRemove.forEach(task => {
+                        tasksToRemove.forEach((task) => {
                             if (turboJson.pipeline[task]) {
                                 delete turboJson.pipeline[task];
                             }
                         });
                         writeFileSync(turboJsonPath, JSON.stringify(turboJson, null, 2));
-                        log.info('  ✓ Updated Turbo configuration');
+                        log.info("  ✓ Updated Turbo configuration");
                     }
                 }
             }, {
-                successText: '✓ Platform cleanup complete',
+                successText: "✓ Platform cleanup complete",
             });
-            log.plain('');
+            log.plain("");
         }
         // Step 4: Check for pnpm and install dependencies
         if (!options.skipInstall) {
             // Check if pnpm is installed
-            log.info('Checking for pnpm...');
+            log.info("Checking for pnpm...");
             try {
-                await execAsync('pnpm --version');
-                log.info('✓ pnpm is installed');
+                await runCommand("pnpm --version");
+                log.info("✓ pnpm is installed");
             }
             catch {
-                log.warn('pnpm is not installed');
-                log.plain('');
-                const shouldInstallPnpm = options.yes || await promptYesNo('Would you like to install pnpm globally?', true);
+                log.warn("pnpm is not installed");
+                log.plain("");
+                const shouldInstallPnpm = options.yes ||
+                    (await promptYesNo("Would you like to install pnpm globally?", true));
                 if (shouldInstallPnpm) {
-                    log.plain('');
-                    await withSpinner('Installing pnpm globally...', async () => {
-                        await execAsync('npm install -g pnpm');
+                    log.plain("");
+                    await withSpinner("Installing pnpm globally...", async () => {
+                        await runCommand("npm install -g pnpm");
                     }, {
-                        successText: '✓ pnpm installed',
+                        successText: "✓ pnpm installed",
                     });
                 }
                 else {
-                    log.warn('Skipping pnpm installation. You can install it later with:');
-                    log.plain('  npm install -g pnpm');
-                    log.plain('');
+                    log.warn("Skipping pnpm installation. You can install it later with:");
+                    log.plain("  npm install -g pnpm");
+                    log.plain("");
                 }
             }
-            log.plain('');
-            await withSpinner('Installing dependencies (this may take a few minutes)...', async () => {
-                await execAsync('pnpm install', { cwd: projectPath });
+            log.plain("");
+            await withSpinner("Installing dependencies...", async () => {
+                await runCommand("pnpm install", { cwd: projectPath });
             }, {
-                successText: '✓ Dependencies installed',
+                successText: "✓ Dependencies installed",
             });
-            log.plain('');
+            log.plain("");
         }
         // Step 5: Create .env files from examples (before starter setup)
-        log.plain('');
-        log.info('📝 Setting up environment files...');
+        log.plain("");
+        log.info("📝 Setting up environment files...");
         const envFiles = [
-            { example: '.env.local.example', target: '.env.local' },
-            { example: '.env.staging.example', target: '.env.staging' },
-            { example: '.env.production.example', target: '.env.production' },
+            { example: ".env.local.example", target: ".env.local" },
+            { example: ".env.staging.example", target: ".env.staging" },
+            { example: ".env.production.example", target: ".env.production" },
         ];
         let envFilesCreated = 0;
         // Setup Native Env Files
-        if (platforms.includes('native')) {
+        if (platforms.includes("native")) {
             for (const { example, target } of envFiles) {
-                const examplePath = join(projectPath, 'apps/native', example);
-                const targetPath = join(projectPath, 'apps/native', target);
+                const examplePath = join(projectPath, "apps/native", example);
+                const targetPath = join(projectPath, "apps/native", target);
                 if (existsSync(examplePath) && !existsSync(targetPath)) {
-                    const { copyFileSync } = await import('fs');
+                    const { copyFileSync } = await import("fs");
                     copyFileSync(examplePath, targetPath);
                     log.info(`✓ Created apps/native/${target}`);
                     envFilesCreated++;
@@ -332,12 +432,12 @@ export const initCommand = new Command('init')
             }
         }
         // Setup Web Env Files
-        if (platforms.includes('web')) {
+        if (platforms.includes("web")) {
             for (const { example, target } of envFiles) {
-                const examplePath = join(projectPath, 'apps/web', example);
-                const targetPath = join(projectPath, 'apps/web', target);
+                const examplePath = join(projectPath, "apps/web", example);
+                const targetPath = join(projectPath, "apps/web", target);
                 if (existsSync(examplePath) && !existsSync(targetPath)) {
-                    const { copyFileSync } = await import('fs');
+                    const { copyFileSync } = await import("fs");
                     copyFileSync(examplePath, targetPath);
                     log.info(`✓ Created apps/web/${target}`);
                     envFilesCreated++;
@@ -345,95 +445,124 @@ export const initCommand = new Command('init')
             }
         }
         if (envFilesCreated > 0) {
-            log.plain('');
-            log.warn('⚠️  Environment files created with placeholder values');
-            log.info('You will need to fill in your actual API keys and credentials');
-            log.plain('');
+            log.plain("");
+            log.warn("⚠️  Environment files created with placeholder values");
+            log.info("You will need to fill in your actual API keys and credentials");
+            log.plain("");
+            // Add base manual steps for env filling
+            const baseSteps = [];
+            if (platforms.includes("native")) {
+                baseSteps.push({
+                    title: "Fill native env values",
+                    description: "apps/native/.env.local (and staging/production) were created with placeholders. Add your real values (bundle IDs, URLs, keys).",
+                    file: "apps/native/.env.local",
+                });
+            }
+            if (platforms.includes("web")) {
+                baseSteps.push({
+                    title: "Fill web env values",
+                    description: "apps/web/.env.local (and staging/production) were created with placeholders. Add your real values (NEXT auth keys, URLs, etc.).",
+                    file: "apps/web/.env.local",
+                });
+            }
+            // Backend env file is common; add if present
+            const backendEnvPath = join(projectPath, "packages/backend/.env.local");
+            if (existsSync(backendEnvPath)) {
+                baseSteps.push({
+                    title: "Fill backend env values",
+                    description: "packages/backend/.env.local exists with placeholders. Add Convex/Sentry/PostHog/other backend keys.",
+                    file: "packages/backend/.env.local",
+                });
+            }
+            if (baseSteps.length > 0) {
+                const rel = appendManualSteps(projectPath, "init", baseSteps);
+                if (rel) {
+                    log.info(`Manual steps saved to ${rel}`);
+                    log.plain("");
+                }
+            }
         }
         else {
-            log.info('ℹ️  No .env example files found to copy');
-            log.plain('');
+            log.info("ℹ️  No .env example files found to copy");
+            log.plain("");
         }
         // Step 6: Run starter setup script (optional)
-        const nativeSetupPath = join(projectPath, 'apps/native/scripts/starter-setup.mjs');
-        const rootSetupPath = join(projectPath, 'scripts/starter-setup.mjs');
-        const setupScriptPath = existsSync(rootSetupPath) ? rootSetupPath : nativeSetupPath;
-        if (platforms.includes('native') && existsSync(setupScriptPath)) {
-            log.info('📋 Starter Setup Available');
-            log.plain('');
-            log.info('The starter includes a setup script that will:');
-            log.plain('  • Fix Expo SDK dependencies');
-            log.plain('  • Set up Convex backend (if available)');
-            log.plain('  • Configure Convex Auth');
-            log.plain('');
-            const runSetup = options.yes || await promptYesNo('Would you like to run the starter setup now?', true);
+        const nativeSetupPath = join(projectPath, "apps/native/scripts/starter-setup.mjs");
+        const rootSetupPath = join(projectPath, "scripts/starter-setup.mjs");
+        const setupScriptPath = existsSync(rootSetupPath)
+            ? rootSetupPath
+            : nativeSetupPath;
+        if (platforms.includes("native") && existsSync(setupScriptPath)) {
+            log.info("📋 Starter Setup Available");
+            log.plain("");
+            log.info("The starter includes a setup script that will:");
+            log.plain("  • Fix Expo SDK dependencies");
+            log.plain("  • Set up Convex backend (if available)");
+            log.plain("  • Configure Convex Auth");
+            log.plain("");
+            const runSetup = options.yes ||
+                (await promptYesNo("Would you like to run the starter setup now?", true));
             if (runSetup) {
-                log.plain('');
-                log.info('Running starter setup...');
-                log.plain('');
+                log.plain("");
+                log.info("Running starter setup...");
+                log.plain("");
                 try {
-                    // Use spawn instead of execAsync for interactive scripts
-                    const { spawn } = await import('child_process');
-                    await new Promise((resolve, reject) => {
-                        const child = spawn('node', [setupScriptPath], {
-                            cwd: projectPath,
-                            stdio: 'inherit',
-                        });
-                        child.on('close', (code) => {
-                            if (code === 0)
-                                resolve();
-                            else
-                                reject(new Error(`Setup script exited with code ${code}`));
-                        });
-                        child.on('error', reject);
+                    // Use spawnCommand for interactive scripts
+                    await spawnCommand("node", [setupScriptPath], {
+                        cwd: projectPath,
+                        stdio: "inherit",
                     });
-                    log.plain('');
-                    log.success('✓ Starter setup completed');
+                    log.plain("");
+                    log.success("✓ Starter setup completed");
+                    // Sync Convex env vars to frontend .env.local files
+                    if (backend === "convex") {
+                        await syncConvexEnvToFrontends(projectPath, platforms);
+                    }
                 }
                 catch (error) {
-                    log.warn('⚠ Starter setup had some issues');
-                    log.info('You can run it manually later with:');
+                    log.warn("⚠ Starter setup had some issues");
+                    log.info("You can run it manually later with:");
                     log.plain(`  cd ${projectName}/apps/native`);
-                    log.plain('  node scripts/starter-setup.mjs');
+                    log.plain("  node scripts/starter-setup.mjs");
                 }
             }
             else {
-                log.info('You can run the setup script later with:');
+                log.info("You can run the setup script later with:");
                 log.plain(`  cd ${projectName}/apps/native`);
-                log.plain('  node scripts/starter-setup.mjs');
+                log.plain("  node scripts/starter-setup.mjs");
             }
-            log.plain('');
+            log.plain("");
         }
-        else if (platforms.includes('native')) {
+        else if (platforms.includes("native")) {
             // Native platform selected but script missing
-            log.warn('⚠ Setup script not found at apps/native/scripts/starter-setup.mjs');
-            log.info('Skipping automated setup.');
-            log.plain('');
+            log.warn("⚠ Setup script not found at apps/native/scripts/starter-setup.mjs");
+            log.info("Skipping automated setup.");
+            log.plain("");
         }
         // Step 6.5: Install selected features (if custom setup)
-        if (starterType === 'custom' && selectedFeatures.length > 0) {
-            log.plain('');
-            log.info('📦 Installing selected features...');
-            log.plain('');
+        if (starterType === "custom" && selectedFeatures.length > 0) {
+            log.plain("");
+            log.info("📦 Installing selected features...");
+            log.plain("");
             // We need to be in the project directory for feature installation
             const originalCwd = process.cwd();
             process.chdir(projectPath);
             try {
                 for (const featureName of selectedFeatures) {
                     try {
-                        log.plain('');
-                        log.plain('━'.repeat(60));
+                        log.plain("");
+                        log.plain("━".repeat(60));
                         log.info(`Installing ${featureName}...`);
-                        log.plain('');
-                        if (!platforms.includes('native')) {
+                        log.plain("");
+                        if (!platforms.includes("native")) {
                             log.warn(`⚠ Skipping ${featureName} (requires native platform)`);
                             continue;
                         }
                         // Reuse the full add command logic to ensure env, deps, nav, and journal are handled consistently.
-                        const { installFeature } = await import('./add.js');
-                        const { getPaths } = await import('../core/paths.js');
-                        const paths = getPaths(projectPath);
-                        await installFeature(featureName, { yes: true, force: true, target: 'native' }, paths);
+                        const { installFeature } = await import("./add.js");
+                        const { getPaths } = await import("../core/paths.js");
+                        const paths = await getPaths(projectPath);
+                        await installFeature(featureName, { yes: true, force: true, target: "native" }, paths);
                         log.success(`✓ ${featureName} installed successfully!`);
                     }
                     catch (error) {
@@ -446,98 +575,89 @@ export const initCommand = new Command('init')
                 // Go back to original directory even if installation fails
                 process.chdir(originalCwd);
             }
-            log.plain('');
-            log.plain('━'.repeat(60));
+            log.plain("");
+            log.plain("━".repeat(60));
             log.success(`✓ Installed ${selectedFeatures.length} feature(s)`);
-            log.plain('');
-        }
-        // Step 7: Save license key to project
-        // Note: License key was already validated in Step 0
-        log.plain('');
-        await withSpinner('Saving license key...', async () => {
-            // Save token to auth file in the new project
-            const { writeFileContent } = await import('../core/fsx.js');
-            const authPath = join(projectPath, '.vibefast-auth.json');
-            await writeFileContent(authPath, JSON.stringify({ token: licenseKey }, null, 2), { force: true });
-        }, {
-            successText: '✓ License key saved',
-        });
-        log.plain('');
+            log.plain("");
+        }
+        // Step 7: License key was already validated and saved globally in Step 0 (line 86-87)
+        // No need to write to project directory - this avoids accidental secret commits
         // Success!
-        log.plain('');
-        log.success('🎉 Project initialized successfully!');
-        log.plain('');
-        log.info(`Setup: ${starterType === 'clean' ? 'Clean' : 'Custom'}`);
-        log.info(`Platforms: ${platforms.join(' + ')}`);
-        if (starterType === 'custom' && selectedFeatures.length > 0) {
-            log.info(`Features: ${selectedFeatures.join(', ')}`);
-        }
-        log.plain('');
-        log.info('Next steps:');
+        log.plain("");
+        log.success("🎉 Project initialized successfully!");
+        log.plain("");
+        log.info(`Setup: ${starterType === "clean" ? "Clean" : "Custom"}`);
+        log.info(`Platforms: ${platforms.join(" + ")}`);
+        if (starterType === "custom" && selectedFeatures.length > 0) {
+            log.info(`Features: ${selectedFeatures.join(", ")}`);
+        }
+        log.plain("");
+        log.info("Next steps:");
         log.plain(`  1. cd ${projectName}`);
         // Check if setup script exists (only for native)
-        const setupScriptExists = platforms.includes('native') &&
-            existsSync(join(projectPath, 'apps/native/scripts/starter-setup.mjs'));
+        const setupScriptExists = platforms.includes("native") &&
+            existsSync(join(projectPath, "apps/native/scripts/starter-setup.mjs"));
         if (setupScriptExists && !options.skipInstall) {
-            log.plain('  2. Start developing:');
-            if (platforms.includes('native')) {
-                log.plain('     • pnpm dev:native       (start native dev server)');
-                log.plain('     • pnpm native:ios       (run on iOS)');
-                log.plain('     • pnpm native:android   (run on Android)');
+            log.plain("  2. Start developing:");
+            if (platforms.includes("native")) {
+                log.plain("     • pnpm dev:native       (start native dev server)");
+                log.plain("     • pnpm native:ios       (run on iOS)");
+                log.plain("     • pnpm native:android   (run on Android)");
             }
-            if (platforms.includes('web')) {
-                log.plain('     • pnpm dev:web          (start web dev server)');
-                log.plain('     • pnpm web:build        (build for production)');
+            if (platforms.includes("web")) {
+                log.plain("     • pnpm dev:web          (start web dev server)");
+                log.plain("     • pnpm web:build        (build for production)");
             }
         }
         else {
             if (setupScriptExists) {
-                log.plain('  2. Run starter setup (if not done):');
+                log.plain("  2. Run starter setup (if not done):");
                 log.plain(`     cd ${projectName}/apps/native`);
-                log.plain('     node scripts/starter-setup.mjs');
+                log.plain("     node scripts/starter-setup.mjs");
             }
-            log.plain(`  ${setupScriptExists ? '3' : '2'}. Start developing:`);
-            if (platforms.includes('native')) {
-                log.plain('     • pnpm dev:native       (start native dev server)');
-                log.plain('     • pnpm native:ios       (run on iOS)');
-                log.plain('     • pnpm native:android   (run on Android)');
+            log.plain(`  ${setupScriptExists ? "3" : "2"}. Start developing:`);
+            if (platforms.includes("native")) {
+                log.plain("     • pnpm dev:native       (start native dev server)");
+                log.plain("     • pnpm native:ios       (run on iOS)");
+                log.plain("     • pnpm native:android   (run on Android)");
             }
-            if (platforms.includes('web')) {
-                log.plain('     • pnpm dev:web          (start web dev server)');
-                log.plain('     • pnpm web:build        (build for production)');
+            if (platforms.includes("web")) {
+                log.plain("     • pnpm dev:web          (start web dev server)");
+                log.plain("     • pnpm web:build        (build for production)");
             }
         }
-        log.plain('');
-        log.info('Add features:');
-        log.plain('  • vf list              # See available features');
-        if (platforms.includes('native')) {
-            log.plain('  • vf add chatbot       # Add native feature');
+        log.plain("");
+        log.info("Add features:");
+        log.plain("  • vf list              # See available features");
+        if (platforms.includes("native")) {
+            log.plain("  • vf add chatbot       # Add native feature");
         }
-        if (platforms.includes('web')) {
-            log.plain('  • vf add quiz --target web  # Add web feature');
+        if (platforms.includes("web")) {
+            log.plain("  • vf add quiz --target web  # Add web feature");
         }
-        log.plain('');
-        log.info('📚 Documentation: https://vibefast.pro/docs');
-        log.info('💬 Support: support@vibefast.pro');
-        log.plain('');
+        log.plain("");
+        log.info("📚 Documentation: https://vibefast.pro/docs");
+        log.info("💬 Support: support@vibefast.pro");
+        log.plain("");
     }
     catch (error) {
-        log.plain('');
+        log.plain("");
         log.error(`Initialization failed: ${error.message}`);
-        if (error.message.includes('git')) {
-            log.plain('');
-            log.info('Make sure Git is installed:');
-            log.plain('  • macOS: brew install git');
-            log.plain('  • Windows: https://git-scm.com/download/win');
-            log.plain('  • Linux: sudo apt install git');
-        }
-        if (error.message.includes('EACCES') || error.message.includes('permission')) {
-            log.plain('');
-            log.info('Permission denied. Try:');
-            log.plain('  • Run without sudo');
-            log.plain('  • Check directory permissions');
-        }
-        log.plain('');
+        if (error.message.includes("git")) {
+            log.plain("");
+            log.info("Make sure Git is installed:");
+            log.plain("  • macOS: brew install git");
+            log.plain("  • Windows: https://git-scm.com/download/win");
+            log.plain("  • Linux: sudo apt install git");
+        }
+        if (error.message.includes("EACCES") ||
+            error.message.includes("permission")) {
+            log.plain("");
+            log.info("Permission denied. Try:");
+            log.plain("  • Run without sudo");
+            log.plain("  • Check directory permissions");
+        }
+        log.plain("");
         process.exit(1);
     }
 });