chore(supabase): full purge — remove all Supabase references from codebase

- Delete supabase/ directory (config.toml, push-migrations.js, ADMIN_CREATE_STOP_FIX.sql, 137 archived migration files) - Remove @supabase/ssr and @supabase/supabase-js from package.json - Strip *.supabase.co from next.config.ts image hostnames - Strip https://*.supabase.co from vercel.json CSP connect-src - Remove 'supabase/**' ignore from eslint.config.mjs - Clean supabase references from src/lib/db.ts, vitest.config.ts, db/seeds/2026-tuxedo-tour-stops.sql, src/actions/storefront.ts, scripts/import-tuxedo-stops.ts comments - Rewrite env-var docs in README, ENVIRONMENT, PRODUCTION_SETUP, PRODUCTION_DEPLOYMENT_CHECKLIST, LAUNCH_CHECKLIST, CLAUDE, MEMORY, REPORT to drop NEXT_PUBLIC_SUPABASE_URL / SUPABASE_SERVICE_ROLE_KEY / supabase link / supabase CLI references The canonical migration runner is now scripts/migrate.js (uses pg directly via DATABASE_URL). Migrations live in db/migrations/. The Supabase CLI is no longer in the codebase. The only remaining '@supabase/*' in the dep tree is @supabase/auth-js as a transitive of @neondatabase/auth (Neon Auth / Better Auth). Final source scan: grep -rln '@supabase\|rest/v1\|supabase\.co' src/ tests/ db/ scripts/ next.config.ts vercel.json eslint.config.mjs package.json returns zero. Verification: npm install clean (11 added, 21 removed, 12 changed), tsc shows same 17 pre-existing errors (Stripe dahlia API version + fetch preconnect mocks), vitest 172/175 (3 pre-existing failures in getAdminUser.test.ts), lint shows same 14 pre-existing errors. Live-tested: dev server boots in 248ms, public storefronts (/) (/login) (/pricing) (/tuxedo) (/indian-river-direct) all return 200; /admin/v2?demo=1 reaches 200 after dev_session redirect; storefront renders real brand content.
2026-06-25 17:48:32 -06:00
parent 68a749f7af
commit 49b8e27219
171 changed files with 136 additions and 28594 deletions
@@ -1,105 +0,0 @@
-- Migration 041: Payment Settings
-- Creates payment_settings table and RPCs for provider configuration.
-
-- ── 1. payment_settings table ─────────────────────────────────────────────────
-CREATE TABLE IF NOT EXISTS public.payment_settings (
-  id                        UUID        PRIMARY KEY DEFAULT uuid_generate_v4(),
-  brand_id                  UUID        NOT NULL REFERENCES brands(id) ON DELETE CASCADE,
-  provider                  TEXT,                                          -- stripe | square | manual
-  stripe_publishable_key    TEXT,
-  stripe_secret_key         TEXT,
-  square_access_token      TEXT,
-  square_location_id       TEXT,
-  created_at               TIMESTAMPTZ NOT NULL DEFAULT now(),
-  updated_at               TIMESTAMPTZ NOT NULL DEFAULT now(),
-  UNIQUE(brand_id)
-);
-
-- ── 2. RLS ──────────────────────────────────────────────────────────────────
-ALTER TABLE public.payment_settings ENABLE ROW LEVEL SECURITY;
-
-DROP POLICY IF EXISTS "Brand admin can read payment_settings" ON public.payment_settings;
-CREATE POLICY "Brand admin can read payment_settings"
-  ON public.payment_settings FOR SELECT TO authenticated
-  USING (
-    brand_id IN (
-      SELECT brand_id FROM admin_users
-      WHERE admin_users.user_id = auth.uid()
-      AND admin_users.role = 'brand_admin'
-    )
-  );
-
-DROP POLICY IF EXISTS "Platform admin can read payment_settings" ON public.payment_settings;
-CREATE POLICY "Platform admin can read payment_settings"
-  ON public.payment_settings FOR SELECT TO authenticated
-  USING (
-    EXISTS (
-      SELECT 1 FROM admin_users
-      WHERE admin_users.user_id = auth.uid()
-      AND admin_users.role = 'platform_admin'
-    )
-  );
-
-- Writes go through SECURITY DEFINER helpers only.
-
-- ── 3. get_payment_settings ──────────────────────────────────────────────────
-CREATE OR REPLACE FUNCTION public.get_payment_settings(p_brand_id UUID)
-RETURNS JSONB
-LANGUAGE plpgsql SECURITY DEFINER SET search_path = public
-AS $$
-DECLARE
-  v_result JSONB;
-BEGIN
-  SELECT jsonb_build_object(
-    'id', id,
-    'brand_id', brand_id,
-    'provider', provider,
-    'stripe_publishable_key', stripe_publishable_key,
-    'stripe_secret_key', stripe_secret_key,
-    'square_access_token', square_access_token,
-    'square_location_id', square_location_id,
-    'updated_at', updated_at::TEXT
-  ) INTO v_result
-  FROM payment_settings
-  WHERE brand_id = p_brand_id;
-
-  RETURN v_result;
-END;
-$$;
-
-- ── 4. upsert_payment_settings ────────────────────────────────────────────────
-CREATE OR REPLACE FUNCTION public.upsert_payment_settings(
-  p_brand_id              UUID,
-  p_provider              TEXT,
-  p_stripe_publishable_key TEXT DEFAULT NULL,
-  p_stripe_secret_key     TEXT DEFAULT NULL,
-  p_square_access_token   TEXT DEFAULT NULL,
-  p_square_location_id    TEXT DEFAULT NULL
-)
-RETURNS JSONB
-LANGUAGE plpgsql SECURITY DEFINER SET search_path = public
-AS $$
-BEGIN
-  INSERT INTO payment_settings (
-    brand_id, provider,
-    stripe_publishable_key, stripe_secret_key,
-    square_access_token, square_location_id
-  )
-  VALUES (
-    p_brand_id, p_provider,
-    p_stripe_publishable_key, p_stripe_secret_key,
-    p_square_access_token, p_square_location_id
-  )
-  ON CONFLICT (brand_id) DO UPDATE SET
-    provider                  = EXCLUDED.provider,
-    stripe_publishable_key   = EXCLUDED.stripe_publishable_key,
-    stripe_secret_key        = EXCLUDED.stripe_secret_key,
-    square_access_token      = EXCLUDED.square_access_token,
-    square_location_id       = EXCLUDED.square_location_id,
-    updated_at               = now();
-
-  RETURN jsonb_build_object('success', true);
-END;
-$$;
-
-NOTIFY pgrst, 'reload schema';