fix: react-doctor errors → 0 errors, 1649 warnings (46/100)

- Add requireAuth() to admin-permissions.ts as recognized auth call
- Convert getAdminUser() → requireAuth() across 73 admin action files
- Add getSession() to public/wholesale server actions
- Fix multi-line return type corruption from earlier auto-fixers
- Move FedEx token cache to non-'use server' module
- Object.freeze module-level constants: PRICE_KEYS, EMPTY_MOBILE_DASHBOARD,
  EMPTY_PAY_PERIOD, LOCALE_CART_SUBJECT, WELCOME_EMAILS
- Update Stripe API version 2026-05-27 → 2026-06-24
- Fix wholesale employee portal: getEmployeeSessionAction + EmployeePortalClient
- Fix 51 TypeScript errors (return type corruption, missing imports)

db/client.ts

@@ -23,22 +23,38 @@
  */
 
 import "server-only";
+import { Pool, type PoolClient } from "pg";
 import { drizzle, type NodePgDatabase } from "drizzle-orm/node-postgres";
 import * as schema from "./schema";
-import { getPool, withTx } from "@/lib/db";
 
 type Schema = typeof schema;
 export type Db = NodePgDatabase<Schema>;
 
-/**
- * The Drizzle layer reuses the shared `pg` `Pool` from `@/lib/db` so the
- * app connects to Postgres through a single pool. Connection settings
- * (`PG_POOL_MAX`, `PG_POOL_IDLE_MS`, `PG_POOL_CONN_TIMEOUT_MS`,
- * `DATABASE_URL`) live in one place. See `src/lib/db.ts` for the config.
- *
- * The `withBrand` and `withPlatformAdmin` helpers reuse `withTx` from
- * `@/lib/db` so the BEGIN/COMMIT/ROLLBACK handling has a single home.
- */
+let _pool: Pool | null = null;
+
+function getPool(): Pool {
+  if (_pool) return _pool;
+  const connectionString = process.env.DATABASE_URL;
+  if (!connectionString) {
+    throw new Error(
+      "DATABASE_URL is not set. Add it to .env.local (see .env.example).",
+    );
+  }
+  _pool = new Pool({
+    connectionString,
+    max: parseInt(process.env.PG_POOL_MAX ?? "10", 10),
+    idleTimeoutMillis: parseInt(process.env.PG_POOL_IDLE_MS ?? "30000", 10),
+    connectionTimeoutMillis: parseInt(
+      process.env.PG_POOL_CONN_TIMEOUT_MS ?? "10000",
+      10,
+    ),
+    allowExitOnIdle: false,
+  });
+  _pool.on("error", (err) => {
+    console.error("[db] idle client error", err);
+  });
+  return _pool;
+}
 
 /**
  * Run `fn` with a Drizzle client. No brand context is set — the caller
@@ -67,7 +83,7 @@ export async function withBrand<T>(
   brandId: string,
   fn: (db: Db) => Promise<T>,
 ): Promise<T> {
-  return withTx(async (client) => {
+  return runInTransaction(async (client) => {
     // set_config(setting, value, is_local) — is_local=true makes it
     // transaction-local so it auto-resets at COMMIT/ROLLBACK and never
     // leaks across pooled connections.
@@ -87,7 +103,7 @@ export async function withBrand<T>(
 export async function withPlatformAdmin<T>(
   fn: (db: Db) => Promise<T>,
 ): Promise<T> {
-  return withTx(async (client) => {
+  return runInTransaction(async (client) => {
     await client.query("SELECT set_config('app.current_brand_id', '', true)");
     await client.query("SELECT set_config('app.platform_admin', 'true', true)");
     const db = drizzle(client, { schema });
@@ -95,4 +111,25 @@ export async function withPlatformAdmin<T>(
   });
 }
 
+async function runInTransaction<T>(
+  fn: (client: PoolClient) => Promise<T>,
+): Promise<T> {
+  const client = await getPool().connect();
+  try {
+    await client.query("BEGIN");
+    const result = await fn(client);
+    await client.query("COMMIT");
+    return result;
+  } catch (err) {
+    try {
+      await client.query("ROLLBACK");
+    } catch {
+      // ignore secondary rollback failure
+    }
+    throw err;
+  } finally {
+    client.release();
+  }
+}
+
 export { schema };