feat: add per-project DATABASE_URLs to secrets setup

- Updated setup-secrets scripts to handle all gist sections
- Added DATABASE_URL_CODEBASE, DATABASE_URL_HOGWARTS, DATABASE_URL_MKAN
- Updated documentation with per-project database usage guide
- Added shell aliases for switching between project databases

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: abdout

.claude/scripts/setup-secrets.ps1

@@ -53,22 +53,42 @@ $EnvContent = @"
 # Auto-generated by setup-secrets.ps1
 # DO NOT COMMIT THIS FILE
 
-# Required
 "@
 
-foreach ($key in $Secrets.required.PSObject.Properties.Name) {
-    $value = $Secrets.required.$key
-    if ($value -and -not $value.StartsWith("ghp_xxx") -and -not $value.StartsWith("neon_api_xxx")) {
-        $EnvContent += "`n$key=$value"
-    }
-}
-
-$EnvContent += "`n`n# Optional"
+# Process all sections
+$sections = @(
+    @{Key='required'; Name='Required'},
+    @{Key='databases'; Name='Databases'},
+    @{Key='ai'; Name='AI'},
+    @{Key='auth'; Name='Auth'},
+    @{Key='services'; Name='Services'},
+    @{Key='cloudinary'; Name='Cloudinary'},
+    @{Key='imagekit'; Name='ImageKit'},
+    @{Key='telegram'; Name='Telegram'},
+    @{Key='optional'; Name='Optional'}
+)
 
-foreach ($key in $Secrets.optional.PSObject.Properties.Name) {
-    $value = $Secrets.optional.$key
-    if ($value) {
-        $EnvContent += "`n$key=$value"
+foreach ($section in $sections) {
+    $sectionData = $Secrets.($section.Key)
+    if ($sectionData) {
+        $hasValues = $false
+        foreach ($key in $sectionData.PSObject.Properties.Name) {
+            $value = $sectionData.$key
+            if ($value -and -not $value.StartsWith("ghp_xxx") -and -not $value.StartsWith("neon_api_xxx") -and -not $value.Contains("GET_FROM")) {
+                $hasValues = $true
+                break
+            }
+        }
+        if ($hasValues) {
+            $EnvContent += "# $($section.Name)`n"
+            foreach ($key in $sectionData.PSObject.Properties.Name) {
+                $value = $sectionData.$key
+                if ($value -and -not $value.StartsWith("ghp_xxx") -and -not $value.StartsWith("neon_api_xxx") -and -not $value.Contains("GET_FROM")) {
+                    $EnvContent += "$key=$value`n"
+                }
+            }
+            $EnvContent += "`n"
+        }
     }
 }
 

.claude/scripts/setup-secrets.sh

@@ -65,25 +65,34 @@ cat > "$ENV_FILE" << 'HEADER'
 
 HEADER
 
-# Parse required secrets
-echo "# Required" >> "$ENV_FILE"
+# Parse all sections from the gist
 echo "$SECRETS" | python3 -c "
 import sys, json
 data = json.load(sys.stdin)
-for key, value in data.get('required', {}).items():
-    if value and not value.startswith('ghp_xxx') and not value.startswith('neon_api_xxx'):
-        print(f'{key}={value}')
-" >> "$ENV_FILE"
 
-# Parse optional secrets (only non-empty)
-echo "" >> "$ENV_FILE"
-echo "# Optional" >> "$ENV_FILE"
-echo "$SECRETS" | python3 -c "
-import sys, json
-data = json.load(sys.stdin)
-for key, value in data.get('optional', {}).items():
-    if value:
-        print(f'{key}={value}')
+# Section order for .env file
+sections = [
+    ('required', 'Required'),
+    ('databases', 'Databases'),
+    ('ai', 'AI'),
+    ('auth', 'Auth'),
+    ('services', 'Services'),
+    ('cloudinary', 'Cloudinary'),
+    ('imagekit', 'ImageKit'),
+    ('telegram', 'Telegram'),
+    ('optional', 'Optional')
+]
+
+for section_key, section_name in sections:
+    section = data.get(section_key, {})
+    if section:
+        has_values = any(v and not str(v).startswith('ghp_xxx') and not str(v).startswith('neon_api_xxx') and 'GET_FROM' not in str(v) for v in section.values())
+        if has_values:
+            print(f'# {section_name}')
+            for key, value in section.items():
+                if value and not str(value).startswith('ghp_xxx') and not str(value).startswith('neon_api_xxx') and 'GET_FROM' not in str(value):
+                    print(f'{key}={value}')
+            print()
 " >> "$ENV_FILE"
 
 # Set permissions

content/docs/(root)/claude-code.mdx

@@ -224,13 +224,49 @@ See full keyword list (90+) in `~/.claude/CLAUDE.md`.
 Secrets are stored in a private GitHub gist and auto-loaded via scripts.
 
 ### What's Included
+
+**Required**
 - `GITHUB_PERSONAL_ACCESS_TOKEN` - GitHub API access
-- `NEON_API_KEY` - Neon database MCP
-- `DATABASE_URL` - PostgreSQL connection
+
+**Per-Project Databases**
+- `DATABASE_URL_CODEBASE` - Codebase project DB
+- `DATABASE_URL_HOGWARTS` - Hogwarts (education SaaS) DB
+- `DATABASE_URL_MKAN` - Mkan (rental marketplace) DB
+- `DATABASE_URL_SOUQ` - Souq (e-commerce) DB (when created)
+- `DATABASE_URL_SHIFA` - Shifa (healthcare) DB (when created)
+
+**AI Keys**
 - `ANTHROPIC_API_KEY` - Claude API
 - `GROQ_API_KEY` - Groq API
+
+**Auth**
 - OAuth credentials (Google, Facebook)
-- Service keys (Stripe, Resend, Cloudinary, ImageKit)
+- `AUTH_SECRET` - NextAuth secret
+
+**Services**
+- Stripe, Resend, Cloudinary, ImageKit, Telegram
+
+### Per-Project Database Usage
+
+When working on a specific project, copy the appropriate DATABASE_URL to your project's `.env`:
+
+```bash
+# Working on hogwarts?
+DATABASE_URL=$DATABASE_URL_HOGWARTS
+
+# Working on mkan?
+DATABASE_URL=$DATABASE_URL_MKAN
+
+# Working on codebase?
+DATABASE_URL=$DATABASE_URL_CODEBASE
+```
+
+Or use an alias in your shell profile:
+```bash
+alias use-hogwarts='export DATABASE_URL=$DATABASE_URL_HOGWARTS'
+alias use-mkan='export DATABASE_URL=$DATABASE_URL_MKAN'
+alias use-codebase='export DATABASE_URL=$DATABASE_URL_CODEBASE'
+```
 
 ### Update Secrets
 
@@ -244,7 +280,7 @@ Secrets are stored in a private GitHub gist and auto-loaded via scripts.
 Create/edit `~/.claude/.env` directly:
 ```bash
 GITHUB_PERSONAL_ACCESS_TOKEN=ghp_xxx
-NEON_API_KEY=neon_xxx
+DATABASE_URL_HOGWARTS=postgresql://...
 # ... other variables
 ```