Apr 24, 2026
Commits
ce6c528 — Split Supabase secrets by environment: SupabaseDev for non-main, SupabaseProd for main
Selects the Modal secret at deploy time based on MODAL_ENVIRONMENT: main uses SupabaseProd, everything else uses SupabaseDev. This ensures dev/beta/personal environments connect to the dev Supabase project while production uses the prod project. Previously all environments shared one SupabaseSecrets entry.
Also removes a stale migration comment from core.py that contained plaintext service-role credentials. Those credentials remain in git history and need separate rotation (tracked in IMPROVE.md).
Changed:
dev/core/core.py— env-conditionalsupabase_secret_name, removed credential comment