create-vue-starter

One-command bootstrap for the VueStarter template.

Downloads the template, creates (or connects to) a Supabase project via the Management API, fetches API keys, writes .env, applies the initial schema migration, disables email confirmation for development, and runs npm install. All in one shot.

Requirements

Only Node.js ≥ 20 is required on your machine. Git and gh are not needed.

Usage

npx @loqode/create-vue-starter@latest

You will be prompted for:

1. App name — folder + Supabase project name
2. Supabase Personal Access Token — create at supabase.com/dashboard/account/tokens. Set Expires in: 1 hour for best security.
3. Create new or use existing Supabase project
4. Organization (new project only, skipped if you only have one)
5. Region (new project only) — pick the one closest to you
6. OpenRouter API key (optional) — enables the AI Assistant feature
7. GitHub authorization — opens a browser so you can authorize the CLI to download the template

Flags (non-interactive / Claude Code integration)

npx @loqode/create-vue-starter@latest my-app \
  --pat=sbp_xxxxxxxxxxxxxxxx \
  --region=us-east-1 \
  --gh-token=ghp_xxxxxxxxxxxxxxxx

Flag	Purpose
<name> or --name	Folder + Supabase project name
--pat	Supabase PAT (recommended: 1hr expiry)
--gh-token	GitHub token with repo scope (skips device flow)
--region	Supabase region (e.g. us-east-1)
--organization-id	Skip org picker
--existing-project-ref	Use an existing Supabase project (skips create + migration)
--openrouter-key	OpenRouter API key for the AI Assistant feature
--skip-install	Don't run npm install
--skip-migration	Don't apply initial schema
--skip-auth-config	Don't auto-disable email confirmation

Environment variables

Var	Purpose
VUESTARTER_PAT	Read if --pat omitted
VUESTARTER_GH_TOKEN	Read if --gh-token omitted
VUESTARTER_OPENROUTER_KEY	Read if --openrouter-key omitted
DEBUG=1	Print full stack traces on error

Security notes

• Supabase PAT — held in memory only, never written to disk. Recommend 1hr expiry so it auto-revokes.
• GitHub token — held in memory only, never written to disk. Device-flow tokens can be revoked at github.com/settings/applications.
• DB password — generated for new projects, sent to Supabase for project creation, then discarded. Not stored on disk or in .env. If you need it later, reset via the Supabase dashboard.
• .env — contains Supabase URL, publishable key, secret key, and (optional) OpenRouter key. Listed in the template's .gitignore — never committed.

License

UNLICENSED — not for redistribution.