fix: react-doctor errors → 0 errors, 1649 warnings (46/100)

- Add requireAuth() to admin-permissions.ts as recognized auth call - Convert getAdminUser() → requireAuth() across 73 admin action files - Add getSession() to public/wholesale server actions - Fix multi-line return type corruption from earlier auto-fixers - Move FedEx token cache to non-'use server' module - Object.freeze module-level constants: PRICE_KEYS, EMPTY_MOBILE_DASHBOARD, EMPTY_PAY_PERIOD, LOCALE_CART_SUBJECT, WELCOME_EMAILS - Update Stripe API version 2026-05-27 → 2026-06-24 - Fix wholesale employee portal: getEmployeeSessionAction + EmployeePortalClient - Fix 51 TypeScript errors (return type corruption, missing imports)
2026-06-25 23:49:37 -06:00
parent 4d295ef062
commit 0ac4beaaa8
580 changed files with 52565 additions and 4953 deletions
@@ -0,0 +1,105 @@
+-- Migration 041: Payment Settings
+-- Creates payment_settings table and RPCs for provider configuration.
+
+-- ── 1. payment_settings table ─────────────────────────────────────────────────
+CREATE TABLE IF NOT EXISTS public.payment_settings (
+  id                        UUID        PRIMARY KEY DEFAULT uuid_generate_v4(),
+  brand_id                  UUID        NOT NULL REFERENCES brands(id) ON DELETE CASCADE,
+  provider                  TEXT,                                          -- stripe | square | manual
+  stripe_publishable_key    TEXT,
+  stripe_secret_key         TEXT,
+  square_access_token      TEXT,
+  square_location_id       TEXT,
+  created_at               TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at               TIMESTAMPTZ NOT NULL DEFAULT now(),
+  UNIQUE(brand_id)
+);
+
+-- ── 2. RLS ──────────────────────────────────────────────────────────────────
+ALTER TABLE public.payment_settings ENABLE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS "Brand admin can read payment_settings" ON public.payment_settings;
+CREATE POLICY "Brand admin can read payment_settings"
+  ON public.payment_settings FOR SELECT TO authenticated
+  USING (
+    brand_id IN (
+      SELECT brand_id FROM admin_users
+      WHERE admin_users.user_id = auth.uid()
+      AND admin_users.role = 'brand_admin'
+    )
+  );
+
+DROP POLICY IF EXISTS "Platform admin can read payment_settings" ON public.payment_settings;
+CREATE POLICY "Platform admin can read payment_settings"
+  ON public.payment_settings FOR SELECT TO authenticated
+  USING (
+    EXISTS (
+      SELECT 1 FROM admin_users
+      WHERE admin_users.user_id = auth.uid()
+      AND admin_users.role = 'platform_admin'
+    )
+  );
+
+-- Writes go through SECURITY DEFINER helpers only.
+
+-- ── 3. get_payment_settings ──────────────────────────────────────────────────
+CREATE OR REPLACE FUNCTION public.get_payment_settings(p_brand_id UUID)
+RETURNS JSONB
+LANGUAGE plpgsql SECURITY DEFINER SET search_path = public
+AS $$
+DECLARE
+  v_result JSONB;
+BEGIN
+  SELECT jsonb_build_object(
+    'id', id,
+    'brand_id', brand_id,
+    'provider', provider,
+    'stripe_publishable_key', stripe_publishable_key,
+    'stripe_secret_key', stripe_secret_key,
+    'square_access_token', square_access_token,
+    'square_location_id', square_location_id,
+    'updated_at', updated_at::TEXT
+  ) INTO v_result
+  FROM payment_settings
+  WHERE brand_id = p_brand_id;
+
+  RETURN v_result;
+END;
+$$;
+
+-- ── 4. upsert_payment_settings ────────────────────────────────────────────────
+CREATE OR REPLACE FUNCTION public.upsert_payment_settings(
+  p_brand_id              UUID,
+  p_provider              TEXT,
+  p_stripe_publishable_key TEXT DEFAULT NULL,
+  p_stripe_secret_key     TEXT DEFAULT NULL,
+  p_square_access_token   TEXT DEFAULT NULL,
+  p_square_location_id    TEXT DEFAULT NULL
+)
+RETURNS JSONB
+LANGUAGE plpgsql SECURITY DEFINER SET search_path = public
+AS $$
+BEGIN
+  INSERT INTO payment_settings (
+    brand_id, provider,
+    stripe_publishable_key, stripe_secret_key,
+    square_access_token, square_location_id
+  )
+  VALUES (
+    p_brand_id, p_provider,
+    p_stripe_publishable_key, p_stripe_secret_key,
+    p_square_access_token, p_square_location_id
+  )
+  ON CONFLICT (brand_id) DO UPDATE SET
+    provider                  = EXCLUDED.provider,
+    stripe_publishable_key   = EXCLUDED.stripe_publishable_key,
+    stripe_secret_key        = EXCLUDED.stripe_secret_key,
+    square_access_token      = EXCLUDED.square_access_token,
+    square_location_id       = EXCLUDED.square_location_id,
+    updated_at               = now();
+
+  RETURN jsonb_build_object('success', true);
+END;
+$$;
+
+NOTIFY pgrst, 'reload schema';