Use single runtime env file and generic database URL - PR_26167_193-env-runtime-single-file-and-generic-db-url

Author: ToolboxAid

docs_build/dev/reports/PR_26167_193-env-runtime-single-file-and-generic-db-url.md

@@ -0,0 +1,61 @@
+# PR_26167_193-env-runtime-single-file-and-generic-db-url
+
+## Branch Validation
+- PASS - Current branch is `main`.
+- PASS - `docs_build/dev/PROJECT_INSTRUCTIONS.md` was read before validation/reporting.
+- PASS - Source implementation is present in `HEAD` commit `24d9ae19148d89244872cd1e51d999e57f1f6348` (`Use single runtime env file and generic database URL - PR_26167_193-env-runtime-single-file-and-generic-db-url`).
+
+## Requirement Checklist
+- PASS - Runtime startup loads only `.env`; `scripts/start-local-api-server.mjs` uses `RUNTIME_ENV_FILE = ".env"`.
+- PASS - Runtime startup does not auto-load `.env.local` or `.env.uat`.
+- PASS - `.env.local` and `.env.uat` remain user-managed copy sources; `.env.local` was updated without printing values.
+- PASS - DEV validation explicitly loads `.env.local` only through `scripts/validate-supabase-dev.mjs`.
+- PASS - `GAMEFOUNDRY_AUTH_PROVIDER` and `GAMEFOUNDRY_DB_PROVIDER` are absent from active runtime startup/templates.
+- PASS - `GAMEFOUNDRY_SUPABASE_DATABASE_URL` was renamed to `GAMEFOUNDRY_DATABASE_URL` in active runtime, validation, template, and targeted test paths.
+- PASS - Auth-specific Supabase keys remain `GAMEFOUNDRY_SUPABASE_URL`, `GAMEFOUNDRY_SUPABASE_ANON_KEY`, and `GAMEFOUNDRY_SUPABASE_SERVICE_ROLE_KEY`.
+- PASS - `.env.local` has the required database key populated locally and provider-selection keys removed; values were not printed.
+- PASS - `.env.uat` contains the same four key names with placeholders and no provider-selection keys.
+- PASS - Validation wording reports Auth connection and Database connection readiness.
+- PASS - Browser/page validation found no deployment-label branching or provider/local-db fallback.
+
+## Env-File Loading Evidence
+- PASS - Runtime validation copied `.env.local` to `.env` only for the short-lived runtime check, then restored tracked `.env`.
+- PASS - Runtime startup output included `.env loaded for API runtime (4 key(s) applied).`
+- PASS - Runtime startup output included `Configured auth connection: configured.`
+- PASS - Runtime startup output included `Configured database connection: configured.`
+- PASS - Runtime startup output did not mention `.env.local`, `.env.uat`, provider selection, or provider env vars.
+
+## Rename Evidence
+- PASS - Active non-report scan found no `GAMEFOUNDRY_SUPABASE_DATABASE_URL`.
+- PASS - `.env`, `.env.example`, `.env.uat`, `scripts/start-local-api-server.mjs`, Supabase DEV validation, DDL apply script, provider contract stubs, and targeted tests use `GAMEFOUNDRY_DATABASE_URL`.
+
+## Provider Var Removal Evidence
+- PASS - `.env`, `.env.example`, and `.env.uat` contain no `GAMEFOUNDRY_AUTH_PROVIDER` or `GAMEFOUNDRY_DB_PROVIDER`.
+- PASS - `scripts/start-local-api-server.mjs` contains no provider-selection env dependency.
+- PASS - Runtime startup reports configured connections, not provider selection.
+
+## Validation Lane Report
+- PASS - `node --check scripts/apply-supabase-dev-ddl.mjs`
+- PASS - `node --check scripts/start-local-api-server.mjs`
+- PASS - `node --check scripts/validate-supabase-dev.mjs`
+- PASS - `node --check src/dev-runtime/auth/provider-contract-stubs.mjs`
+- PASS - `node --check tests/dev-runtime/SupabaseProviderContractStub.test.mjs`
+- PASS - `node --check tests/playwright/tools/GameWorkspaceMockRepository.spec.mjs`
+- PASS - `npm run validate:supabase-dev`
+  - PASS - Explicit `.env.local` DEV validation load.
+  - PASS - Auth connection URL, anon key, service role key, and database connection URL configured with masked diagnostics.
+  - PASS - Supabase Auth/REST identity tables reachable.
+  - WARN - Direct PostgreSQL TLS reported `SELF_SIGNED_CERT_IN_CHAIN`; validator marked this advisory because REST/API identity readiness passed.
+- PASS - Manual `.env.uat` structural validation: required keys present and forbidden keys absent.
+- PASS - `npm run dev:local-api` runtime check on alternate port after temporary `.env.local` to `.env` copy.
+- PASS - `npx playwright test tests/playwright/tools/GameWorkspaceMockRepository.spec.mjs --grep "Game Workspace creates|active-game API" --workers=1 --reporter=list` (2 passed).
+- PASS - `npm run validate:browser-env-agnostic`
+- SKIP - `npm run test:workspace-v2`; no shared runtime/session UI behavior changed beyond the targeted Game Workspace create/API validation lane.
+- SKIP - Full samples smoke, per instruction.
+
+## Manual Validation Notes
+- `.env.local` was updated locally without exposing values: old database key renamed to `GAMEFOUNDRY_DATABASE_URL`, provider-selection keys removed, and the four required connection keys retained.
+- `.env.uat` was validated structurally only; no UAT secrets were created or printed.
+- Runtime validation used `.env` as the only startup-loaded env file and restored the tracked placeholder `.env` immediately after the check.
+- Targeted Game Workspace validation confirmed create/open/delete behavior and active-game API diagnostics do not throw.
+- Browser environment validation confirmed active page code remains free of deployment-label branching, product-data fallback, and implementation wording leaks.

docs_build/dev/reports/codex_changed_files.txt

@@ -1,20 +1,25 @@
+# PR_26167_193 source commit files (HEAD)
+.env
+.env.example
+.env.uat
+.gitignore
+scripts/apply-supabase-dev-ddl.mjs
+scripts/start-local-api-server.mjs
+scripts/validate-supabase-dev.mjs
+src/dev-runtime/auth/provider-contract-stubs.mjs
+tests/dev-runtime/SupabaseProviderContractStub.test.mjs
+tests/playwright/tools/GameWorkspaceMockRepository.spec.mjs
+
 # git status --short
-M docs_build/dev/reports/coverage_changed_js_guardrail.txt
+ M docs_build/dev/reports/codex_changed_files.txt
+ M docs_build/dev/reports/codex_review.diff
+ M docs_build/dev/reports/coverage_changed_js_guardrail.txt
  M docs_build/dev/reports/playwright_v8_coverage_report.txt
- M src/dev-runtime/server/local-api-router.mjs
- M tests/playwright/tools/GameWorkspaceMockRepository.spec.mjs
- M toolbox/game-workspace/game-workspace.js
-?? .env.uat
-?? docs_build/dev/reports/PR_26167_192-env-config-and-game-workspace-create-fix.md
-
-# git ls-files --others --exclude-standard
-.env.uat
-docs_build/dev/reports/PR_26167_192-env-config-and-game-workspace-create-fix.md
+?? docs_build/dev/reports/PR_26167_193-env-runtime-single-file-and-generic-db-url.md
 
 # git diff --stat
-.../dev/reports/coverage_changed_js_guardrail.txt  |  15 ++-
- .../dev/reports/playwright_v8_coverage_report.txt  |  52 ++++----
- src/dev-runtime/server/local-api-router.mjs        |  31 ++++-
- .../tools/GameWorkspaceMockRepository.spec.mjs     | 133 +++++++++++++++++++++
- toolbox/game-workspace/game-workspace.js           | 115 +++++++++++++++---
- 5 files changed, 299 insertions(+), 47 deletions(-)
+ docs_build/dev/reports/codex_changed_files.txt     |   18 +-
+ docs_build/dev/reports/codex_review.diff           | 1076 ++++++++------------
+ .../dev/reports/coverage_changed_js_guardrail.txt  |   20 -
+ .../dev/reports/playwright_v8_coverage_report.txt  |   38 +-
+ 4 files changed, 456 insertions(+), 696 deletions(-)