diff --git a/scripts/apply-admin-create-stop.js b/scripts/apply-admin-create-stop.js
deleted file mode 100755
index 9083a55..0000000
--- a/scripts/apply-admin-create-stop.js
+++ /dev/null
@@ -1,160 +0,0 @@
-#!/usr/bin/env node
-/**
- * apply-admin-create-stop.js
- *
- * Applies the admin_create_stop RPC using ONLY the keys in .env.local.
- * You do NOT need Supabase dashboard / SQL editor access.
- *
- * This is the fix for the "could not find the function public.admin_create_stop(...)"
- * error when you click "Add New Stop".
- *
- * Usage (run from the repo root on a machine that can reach the DB):
- *   node scripts/apply-admin-create-stop.js
- *
- * The script connects as the real postgres user (using your SUPABASE_SERVICE_ROLE_KEY
- * as the password) and runs the CREATE OR REPLACE + GRANT + NOTIFY.
- * This is the only reliable way to create the SECURITY DEFINER function because
- * direct REST inserts are blocked by the `block_stops_mutations` policy.
- *
- * After it prints success:
- *   - Restart your `npm run dev`
- *   - "Add New Stop" (AddStopModal / NewStopForm) will now call the RPC successfully.
- */
-
-const { Client } = require("pg");
-const fs = require("fs");
-const path = require("path");
-
-// Load .env.local (same as the rest of the project)
-try {
-  require("dotenv").config({ path: path.resolve(__dirname, "../.env.local") });
-} catch (e) {
-  // dotenv might not be hoisted in some setups; the keys may already be in process.env
-}
-
-const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
-const serviceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
-
-if (!supabaseUrl || !serviceKey) {
-  console.error("❌ Missing NEXT_PUBLIC_SUPABASE_URL or SUPABASE_SERVICE_ROLE_KEY in .env.local");
-  console.error("   Make sure you are running from the repo root and .env.local exists with the keys.");
-  process.exit(1);
-}
-
-// Derive the direct Postgres URL (same logic as supabase/push-migrations.js)
-const projectRef = supabaseUrl.replace("https://", "").split(".")[0];
-const pgHost = `db.${projectRef}.supabase.co`;
-const dbUrl = `postgresql://postgres:${encodeURIComponent(serviceKey)}@${pgHost}:5432/postgres`;
-
-console.log("🔧 apply-admin-create-stop RPC installer");
-console.log("   Project:", projectRef);
-console.log("   Using service role key from .env.local (full Postgres access)");
-console.log("");
-
-async function main() {
-  const migrationPath = path.resolve(__dirname, "../supabase/migrations/202_fix_admin_create_stop.sql");
-
-  if (!fs.existsSync(migrationPath)) {
-    console.error("❌ Cannot find migration file:", migrationPath);
-    console.error("   The file should have been created by the previous fix.");
-    process.exit(1);
-  }
-
-  const sql = fs.readFileSync(migrationPath, "utf8");
-
-  const client = new Client({
-    connectionString: dbUrl,
-    ssl: { rejectUnauthorized: false },
-    // Some environments need a longer timeout
-    connectionTimeoutMillis: 15000,
-  });
-
-  try {
-    console.log("⏳ Connecting to Postgres (this uses port 5432 outbound)...");
-    await client.connect();
-    console.log("✅ Connected.");
-
-    console.log("⏳ Executing 202_fix_admin_create_stop.sql (CREATE OR REPLACE + GRANT + NOTIFY)...");
-    const result = await client.query(sql);
-
-    console.log("✅ Function installed / updated successfully.");
-    console.log("   Rows affected in last statement:", result.rowCount ?? "(see output above if any)");
-    console.log("");
-    console.log("🎉 admin_create_stop is now available via the anon key (SECURITY DEFINER).");
-
-    // Quick verification using the anon key over HTTPS (this is what the app uses)
-    try {
-      const anon = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
-      const probeBody = {
-        p_active: false,
-        p_address: null,
-        p_brand_id: "00000000-0000-0000-0000-000000000000", // will FK fail, but proves the function exists
-        p_city: "verify",
-        p_cutoff_time: null,
-        p_date: "2099-12-31",
-        p_location: "verify",
-        p_state: "TS",
-        p_time: "10:00",
-        p_zip: null,
-      };
-      const probe = await fetch(`${process.env.NEXT_PUBLIC_SUPABASE_URL}/rest/v1/rpc/admin_create_stop`, {
-        method: "POST",
-        headers: { apikey: anon, "Content-Type": "application/json" },
-        body: JSON.stringify(probeBody),
-      });
-      const txt = await probe.text();
-      if (probe.status === 404) {
-        console.log("⚠️  Post-apply probe still got 404 — you may need to wait a few seconds or the NOTIFY didn't take.");
-      } else if (/foreign key|violates|brand_id/i.test(txt)) {
-        console.log("✅ Post-apply probe: function exists (got expected FK error on the zero-UUID brand — this is success).");
-      } else {
-        console.log("✅ Post-apply probe returned:", txt.slice(0, 200));
-      }
-    } catch (e) {
-      console.log("   (verification fetch skipped:", e.message, ")");
-    }
-
-    console.log("");
-    console.log("Next:");
-    console.log("  • Restart your dev server (`npm run dev`) if it was already running.");
-    console.log("  • Go to the stops admin page and try \"Add New Stop\".");
-    console.log("  • (Optional but recommended) node scripts/verify-stop-fns.js");
-  } catch (err) {
-    const msg = (err && err.message) ? err.message : String(err);
-    console.error("❌ Failed to apply the function.");
-    console.error("   Error:", msg.slice(0, 500));
-
-    if (/ENOTFOUND|EAI_AGAIN|getaddrinfo|network is unreachable|ECONNREFUSED|timeout/i.test(msg)) {
-      console.log("");
-      console.log("💡 Your current environment cannot reach the database on port 5432.");
-      console.log("   This is common inside some containers/CI sandboxes.");
-      console.log("");
-      console.log("   Copy and run ONE of the following on a *normal* laptop/terminal that has");
-      console.log("   outbound access to Supabase Postgres (most developer machines can reach it):");
-      console.log("");
-      console.log("   Option A (easiest, uses exactly the same code as this script):");
-      console.log("     npm run migrate:one 202");
-      console.log("");
-      console.log("   Option B (psql):");
-      console.log("     # Build the URL using the key from your .env.local (same as this script does):");
-      console.log("     # psql \"postgresql://postgres:PUT_YOUR_SERVICE_ROLE_KEY_HERE@db." + projectRef + ".supabase.co:5432/postgres\" \\");
-      console.log("     #      -f supabase/migrations/202_fix_admin_create_stop.sql");
-      console.log("");
-      console.log("   Option C (Supabase CLI):");
-      console.log("     supabase db push --db-url \"postgresql://postgres:YOUR_SERVICE_ROLE_KEY@db." + projectRef + ".supabase.co:5432/postgres\" \\");
-      console.log("       supabase/migrations/202_fix_admin_create_stop.sql");
-      console.log("");
-      console.log("   After the command succeeds you will see the NOTIFY and the function will exist.");
-      console.log("   Then restart `npm run dev` and \"Add New Stop\" will stop showing the function-not-found error.");
-    }
-
-    process.exit(1);
-  } finally {
-    try { await client.end(); } catch {}
-  }
-}
-
-main().catch((e) => {
-  console.error("Unexpected crash:", e);
-  process.exit(1);
-});
diff --git a/scripts/check-stop-fns.js b/scripts/check-stop-fns.js
deleted file mode 100644
index 7745a5c..0000000
--- a/scripts/check-stop-fns.js
+++ /dev/null
@@ -1,49 +0,0 @@
-require("dotenv").config({ path: require("path").resolve(__dirname, "../.env.local") });
-
-const url = process.env.NEXT_PUBLIC_SUPABASE_URL;
-const serviceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
-const anonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
-
-const headers = {
-  apikey: serviceKey,
-  Authorization: `Bearer ${serviceKey}`,
-  "Content-Type": "application/json",
-};
-
-async function rpc(name, body = {}) {
-  const r = await fetch(`${url}/rest/v1/rpc/${name}`, {
-    method: "POST", headers, body: JSON.stringify(body),
-  });
-  return { status: r.status, text: (await r.text()).slice(0, 500) };
-}
-
-(async () => {
-  // 1. Try calling admin_create_stop with service role
-  console.log("=== 1. Call admin_create_stop (service role) ===");
-  console.log(await rpc("admin_create_stop", { p_brand_id: null }));
-
-  // 2. Try with body
-  console.log("\n=== 2. Call admin_create_stop with stub body ===");
-  console.log(await rpc("admin_create_stop", {
-    p_brand_id: "00000000-0000-0000-0000-000000000000",
-    p_city: "test", p_state: "CO", p_location: "x", p_date: "2025-01-01", p_time: "08:00"
-  }));
-
-  // 3. Try with a name that obviously doesn't exist to see the error format
-  console.log("\n=== 3. Call a non-existent function (control) ===");
-  console.log(await rpc("definitely_does_not_exist_xyz", {}));
-
-  // 4. Use the PostgREST introspection — query information_schema via rpc
-  // PostgREST exposes pg_proc through /rest/v1/ for system tables is not allowed
-  // But we can use the OpenAPI spec endpoint
-  console.log("\n=== 4. OpenAPI spec — looking for admin_create_stop ===");
-  const openApi = await fetch(`${url}/rest/v1/`, { headers: { apikey: anonKey, Authorization: `Bearer ${anonKey}` } });
-  const text = await openApi.text();
-  const matches = text.match(/admin_create_stop[a-z_]*/g) || [];
-  console.log("Matches in OpenAPI:", matches);
-
-  // 5. Get all function names from OpenAPI
-  const funcMatches = [...text.matchAll(/"([a-z][a-z0-9_]*)\s*\{/g)].map(m => m[1]);
-  const stopFns = funcMatches.filter(n => n.includes("stop"));
-  console.log("\nStop-related functions in OpenAPI:", stopFns);
-})();
diff --git a/scripts/check-stop-fns2.js b/scripts/check-stop-fns2.js
deleted file mode 100644
index 2117388..0000000
--- a/scripts/check-stop-fns2.js
+++ /dev/null
@@ -1,52 +0,0 @@
-require("dotenv").config({ path: require("path").resolve(__dirname, "../.env.local") });
-const { Client } = require("pg");
-const dns = require("dns");
-
-const url = process.env.NEXT_PUBLIC_SUPABASE_URL;
-const projectRef = url.replace("https://", "").split(".")[0];
-const candidates = [
-  `db.${projectRef}.supabase.co`,
-  `aws-0-us-east-1.pooler.supabase.com`,
-  `aws-0-us-west-1.pooler.supabase.com`,
-];
-
-(async () => {
-  for (const host of candidates) {
-    try {
-      const ip = await new Promise((resolve, reject) => {
-        dns.resolve4(host, (err, addrs) => err ? reject(err) : resolve(addrs));
-      });
-      console.log(`${host} -> ${ip.join(", ")}`);
-    } catch (e) {
-      console.log(`${host} -> DNS FAIL: ${e.code}`);
-    }
-  }
-
-  // Try direct DB with port 6543 (pooler) using supabase format
-  // Username pattern: postgres.<project-ref>
-  const client = new Client({
-    host: "aws-0-us-east-1.pooler.supabase.com",
-    port: 6543, database: "postgres",
-    user: `postgres.${projectRef}`,
-    password: process.env.SUPABASE_SERVICE_ROLE_KEY,
-    ssl: { rejectUnauthorized: false },
-  });
-  try {
-    await client.connect();
-    const r = await client.query(`
-      SELECT p.proname,
-             pg_get_function_identity_arguments(p.oid) AS id_args,
-             p.prosecdef AS secdef
-      FROM pg_proc p JOIN pg_namespace n ON p.pronamespace=n.oid
-      WHERE n.nspname='public' AND p.proname IN
-        ('admin_create_stop','admin_create_stops_batch','delete_stop')
-      ORDER BY p.proname;
-    `);
-    console.log("\nFUNCTIONS IN DB:");
-    console.log(JSON.stringify(r.rows, null, 2));
-  } catch (e) {
-    console.error("POOLER ERR:", e.message);
-  } finally {
-    try { await client.end(); } catch {}
-  }
-})();
diff --git a/scripts/check-stop-fns3.js b/scripts/check-stop-fns3.js
deleted file mode 100644
index 52a2732..0000000
--- a/scripts/check-stop-fns3.js
+++ /dev/null
@@ -1,44 +0,0 @@
-require("dotenv").config({ path: require("path").resolve(__dirname, "../.env.local") });
-const { Client } = require("pg");
-
-const url = process.env.NEXT_PUBLIC_SUPABASE_URL;
-const projectRef = url.replace("https://", "").split(".")[0];
-const pw = process.env.SUPABASE_SERVICE_ROLE_KEY;
-
-const tries = [
-  { host: "aws-0-us-east-1.pooler.supabase.com", port: 6543, user: `postgres.${projectRef}`, database: "postgres" },
-  { host: "aws-0-us-east-1.pooler.supabase.com", port: 5432, user: `postgres.${projectRef}`, database: "postgres" },
-  { host: "aws-0-us-east-1.pooler.supabase.com", port: 6543, user: "postgres",            database: "postgres" },
-];
-
-(async () => {
-  for (const cfg of tries) {
-    const client = new Client({ ...cfg, password: pw, ssl: { rejectUnauthorized: false } });
-    try {
-      await client.connect();
-      const r = await client.query(`
-        SELECT p.proname,
-               pg_get_function_identity_arguments(p.oid) AS id_args,
-               p.prosecdef AS secdef
-        FROM pg_proc p JOIN pg_namespace n ON p.pronamespace=n.oid
-        WHERE n.nspname='public' AND p.proname IN
-          ('admin_create_stop','admin_create_stops_batch','delete_stop')
-        ORDER BY p.proname;
-      `);
-      console.log(`\n✓ ${cfg.host}:${cfg.port} user=${cfg.user}`);
-      console.log(JSON.stringify(r.rows, null, 2));
-
-      // Also check if migration tracking table exists
-      const trk = await client.query(`
-        SELECT version, name FROM supabase_migrations.schema_migrations
-        WHERE version >= 145 ORDER BY version;
-      `).catch(() => ({ rows: [] }));
-      console.log("Recent migrations applied:", trk.rows);
-      await client.end();
-      return;
-    } catch (e) {
-      console.log(`✗ ${cfg.host}:${cfg.port} user=${cfg.user} → ${e.message}`);
-      try { await client.end(); } catch {}
-    }
-  }
-})();
diff --git a/scripts/cleanup-duplicate-stops.ts b/scripts/cleanup-duplicate-stops.ts
deleted file mode 100644
index af09cd1..0000000
--- a/scripts/cleanup-duplicate-stops.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-/**
- * Cleanup script: remove duplicate stops from the Tuxedo Corn 2026 tour.
- * Keeps the row with the latest created_at per (brand_id, date, city, state, location, time).
- * Run: DATABASE_URL="postgresql://..." npx tsx scripts/cleanup-duplicate-stops.ts
- */
-import { Pool } from "pg";
-
-const pool = new Pool({
-  connectionString:
-    process.env.DATABASE_ADMIN_URL ??
-    process.env.DATABASE_URL ??
-    "postgres://postgres:postgres@localhost:5432/route_commerce",
-});
-
-async function main() {
-  const client = await pool.connect();
-  try {
-    await client.query("BEGIN");
-
-    // Find duplicate groups (same brand_id, date, city, state, location, time)
-    const dupes = await client.query(`
-      SELECT brand_id::text, date, city, state, location, time, count(*) as cnt, min(created_at::text) as oldest, max(created_at::text) as newest
-      FROM stops
-      WHERE deleted_at IS NULL
- GROUP BY brand_id, date, city, state, location, time
-      HAVING count(*) > 1
-      ORDER BY date, city
-    `);
-
-    console.log(`Found ${dupes.rowCount} duplicate groups`);
-    if (dupes.rowCount === 0) {
-      await client.query("COMMIT");
-      console.log("No duplicates found.");
-      return;
-    }
-
-    let totalDeleted = 0;
-    for (const row of dupes.rows) {
-      // Keep the row with the latest created_at, delete the rest
-      const del = await client.query(`
-        DELETE FROM stops
-        WHERE brand_id = $1
-          AND date = $2
-          AND city = $3
-          AND state = $4
-          AND location = $5
-          AND time IS NOT DISTINCT FROM $6
-          AND deleted_at IS NULL
-          AND created_at < (
-            SELECT max(created_at) FROM stops s2
-            WHERE s2.brand_id = stops.brand_id
-              AND s2.date = stops.date
-              AND s2.city = stops.city
-              AND s2.state = stops.state
-              AND s2.location = stops.location
-              AND (s2.time IS NOT DISTINCT FROM stops.time)
-              AND s2.deleted_at IS NULL
-          )
-      `, [row.brand_id, row.date, row.city, row.state, row.location, row.time]);
-      totalDeleted += del.rowCount ?? 0;
-      console.log(`  Deleted ${del.rowCount} duplicate(s) for ${row.city}, ${row.state} on ${row.date}`);
-    }
-
-    await client.query("COMMIT");
-    console.log(`\nDone. Total duplicates removed: ${totalDeleted}`);
-  } catch (e) {
-    await client.query("ROLLBACK");
-    throw e;
-  } finally {
-    client.release();
-    await pool.end();
-  }
-}
-
-main().catch((e) => {
-  console.error(e);
-  process.exit(1);
-});
diff --git a/scripts/create-admin-user.ts b/scripts/create-admin-user.ts
deleted file mode 100644
index 676f88a..0000000
--- a/scripts/create-admin-user.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-/**
- * Create an admin user in Neon Auth via direct HTTP call.
- * Run: npx tsx scripts/create-admin-user.ts [email] [password] [name]
- *
- * Makes a direct HTTP request to the Neon Auth API so we don't need
- * a Next.js request context, then updates email_verified in the DB.
- */
-import { config } from "dotenv";
-config({ path: ".env.local" });
-import pg from "pg";
-
-const { Pool } = pg;
-
-async function main() {
-  const email = process.argv[2] ?? "admin@example.com";
-  const password = process.argv[3] ?? "Admin1234!";
-  const name = process.argv[4] ?? "Admin";
-
-  const baseUrl = process.env.NEON_AUTH_BASE_URL!;
-
-  console.log(`Creating user: ${email}`);
-
-  const res = await fetch(`${baseUrl}/sign-up/email`, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      "Origin": "http://localhost:4000",
-      "x-neon-auth-proxy": "node",
-    },
-    body: JSON.stringify({ email, password, name, callbackURL: "/admin" }),
-  });
-
-  const data = await res.json().catch(() => ({}));
-  console.log(`Sign-up status: ${res.status}`);
-
-  if (!res.ok) {
-    console.error("Failed to create user:", JSON.stringify(data));
-    process.exit(1);
-  }
-
-  const userId = data.user?.id;
-  console.log("User created:", data.user?.email, "| ID:", userId);
-
-  // Mark email verified in DB so they can log in immediately
-  if (userId) {
-    const pool = new Pool({ connectionString: process.env.DATABASE_URL });
-    try {
-      await pool.query(
-        "UPDATE neon_auth.user SET email_verified = true WHERE id = $1",
-        [userId]
-      );
-      console.log("Email verified in DB.");
-    } finally {
-      await pool.end();
-    }
-  }
-
-  console.log(`\nLog in at http://localhost:4000/login with ${email} / ${password}`);
-}
-
-main();
diff --git a/scripts/e2e-test.sh b/scripts/e2e-test.sh
deleted file mode 100755
index a526e00..0000000
--- a/scripts/e2e-test.sh
+++ /dev/null
@@ -1,99 +0,0 @@
-#!/bin/bash
-# End-to-end validation test for the local Postgres + PostgREST + MinIO + Next.js stack
-# Exit 0 = all green, exit 1 = at least one failure.
-
-set -e
-API="http://localhost:3001"
-WEB="http://localhost:4000"
-
-pass=0
-fail=0
-declare -a FAILURES
-
-check() {
-  local name="$1" url="$2" expected="${3:-200}" cookies="${4:-}"
-  local cmd="curl -s -o /dev/null -w '%{http_code}'"
-  if [ -n "$cookies" ]; then cmd="$cmd -b \"$cookies\""; fi
-  local code=$(eval "$cmd $url")
-  if [ "$code" = "$expected" ]; then
-    echo "  PASS  $name ($code)"
-    pass=$((pass+1))
-  else
-    echo "  FAIL  $name expected=$expected got=$code url=$url"
-    fail=$((fail+1))
-    FAILURES+=("$name")
-  fi
-}
-
-echo "=== Postgres connection ==="
-PGPASSWORD=routecommerce_dev_password psql -U routecommerce -h 127.0.0.1 -d route_commerce -tA -c "SELECT 'ok';" >/dev/null
-echo "  PASS  postgres responds"
-pass=$((pass+1))
-
-echo "=== DB integrity ==="
-TABLE_COUNT=$(PGPASSWORD=routecommerce_dev_password psql -U routecommerce -h 127.0.0.1 -d route_commerce -tA -c "SELECT count(*) FROM information_schema.tables WHERE table_schema='public';")
-[ "$TABLE_COUNT" -ge 65 ] && echo "  PASS  $TABLE_COUNT public tables (>=65)" && pass=$((pass+1)) || { echo "  FAIL  $TABLE_COUNT tables"; fail=$((fail+1)); }
-
-FN_COUNT=$(PGPASSWORD=routecommerce_dev_password psql -U routecommerce -h 127.0.0.1 -d route_commerce -tA -c "SELECT count(*) FROM pg_proc p JOIN pg_namespace n ON p.pronamespace=n.oid WHERE n.nspname='public';")
-[ "$FN_COUNT" -ge 250 ] && echo "  PASS  $FN_COUNT functions (>=250)" && pass=$((pass+1)) || { echo "  FAIL  $FN_COUNT functions"; fail=$((fail+1)); }
-
-BRANDS=$(PGPASSWORD=routecommerce_dev_password psql -U routecommerce -h 127.0.0.1 -d route_commerce -tA -c "SELECT count(*) FROM brands;")
-[ "$BRANDS" -ge 2 ] && echo "  PASS  $BRANDS brands" && pass=$((pass+1)) || { echo "  FAIL  $BRANDS brands"; fail=$((fail+1)); }
-
-STOPS=$(PGPASSWORD=routecommerce_dev_password psql -U routecommerce -h 127.0.0.1 -d route_commerce -tA -c "SELECT count(*) FROM stops WHERE active=true AND deleted_at IS NULL;")
-[ "$STOPS" -ge 200 ] && echo "  PASS  $STOPS active stops" && pass=$((pass+1)) || { echo "  FAIL  $STOPS stops"; fail=$((fail+1)); }
-
-# No test brands
-TEST_BRANDS=$(PGPASSWORD=routecommerce_dev_password psql -U routecommerce -h 127.0.0.1 -d route_commerce -tA -c "SELECT count(*) FROM brands WHERE slug IN ('sunrise-farms','green-valley','orchard-fresh');")
-[ "$TEST_BRANDS" = "0" ] && echo "  PASS  no test brands" && pass=$((pass+1)) || { echo "  FAIL  test brands found"; fail=$((fail+1)); }
-
-echo "=== Tuxedo Corn data ==="
-PHONE=$(PGPASSWORD=routecommerce_dev_password psql -U routecommerce -h 127.0.0.1 -d route_commerce -tA -c "SELECT phone FROM brand_settings WHERE brand_id='64294306-5f42-463d-a5e8-2ad6c81a96de';")
-[ "$PHONE" = "970-323-6874" ] && echo "  PASS  phone=$PHONE" && pass=$((pass+1)) || { echo "  FAIL  phone=$PHONE (expected 970-323-6874)"; fail=$((fail+1)); }
-
-LOGOS=$(PGPASSWORD=routecommerce_dev_password psql -U routecommerce -h 127.0.0.1 -d route_commerce -tA -c "SELECT count(*) FROM brand_settings WHERE brand_id='64294306-5f42-463d-a5e8-2ad6c81a96de' AND logo_url LIKE '/storage/%';")
-[ "$LOGOS" = "1" ] && echo "  PASS  logo_url is /storage/ path" && pass=$((pass+1)) || { echo "  FAIL  logo_url not /storage/"; fail=$((fail+1)); }
-
-echo "=== PostgREST ==="
-check "GET /" "$API/"
-check "GET /brands" "$API/brands?select=id,name,slug&order=name"
-check "GET /brands?slug=eq.tuxedo" "$API/brands?slug=eq.tuxedo&select=*"
-check "GET /stops" "$API/stops?select=id,city&limit=5"
-check "GET /products" "$API/products?select=id,name&limit=5"
-check "POST rpc get_brand_settings_by_slug" "$API/rpc/get_brand_settings_by_slug" 200 \
-  "-X POST -H Content-Type:application/json -d {\"p_brand_slug\":\"tuxedo\"}"
-check "POST rpc get_brand_plan_info" "$API/rpc/get_brand_plan_info" 200 \
-  "-X POST -H Content-Type:application/json -d {\"p_brand_id\":\"64294306-5f42-463d-a5e8-2ad6c81a96de\"}"
-check "POST rpc get_public_stops_for_brand" "$API/rpc/get_public_stops_for_brand" 200 \
-  "-X POST -H Content-Type:application/json -d {\"p_brand_slug\":\"tuxedo\"}"
-check "GET /admin_users with brand join" "$API/admin_users?select=id,user_id,role,brand_id,brands(name)&limit=5"
-check "GET /stops with brand join" "$API/stops?select=id,city,brand_id,brands(name)&limit=5"
-
-echo "=== MinIO ==="
-check "Storage logo.png" "$WEB/storage/brand-logos/64294306-5f42-463d-a5e8-2ad6c81a96de/logo.png"
-check "Storage olathe-sweet-logo.png" "$WEB/storage/brand-logos/64294306-5f42-463d-a5e8-2ad6c81a96de/olathe-sweet-logo.png"
-check "Storage olathe-sweet-logo-dark.png" "$WEB/storage/brand-logos/64294306-5f42-463d-a5e8-2ad6c81a96de/olathe-sweet-logo-dark.png"
-
-echo "=== Public storefronts ==="
-check "GET /" "$WEB/"
-check "GET /tuxedo" "$WEB/tuxedo"
-check "GET /tuxedo/about" "$WEB/tuxedo/about"
-check "GET /tuxedo/stops" "$WEB/tuxedo/stops"
-check "GET /indian-river-direct" "$WEB/indian-river-direct"
-check "GET /login" "$WEB/login"
-
-echo "=== Admin pages (dev_session=platform_admin) ==="
-for p in /admin /admin/products /admin/stops /admin/orders /admin/users /admin/settings /admin/settings/billing /admin/settings/apps /admin/settings/payments /admin/communications /admin/communications/compose /admin/time-tracking /admin/wholesale /admin/water-log /admin/analytics /admin/reports; do
-  check "GET $p" "$WEB$p" 200 "dev_session=platform_admin"
-done
-
-echo ""
-echo "=== Summary ==="
-echo "  PASS: $pass"
-echo "  FAIL: $fail"
-if [ $fail -gt 0 ]; then
-  echo "  Failures:"
-  for f in "${FAILURES[@]}"; do echo "    - $f"; done
-  exit 1
-fi
-echo "  ALL GREEN"
diff --git a/scripts/fix-archived-rls.js b/scripts/fix-archived-rls.js
deleted file mode 100644
index 2052431..0000000
--- a/scripts/fix-archived-rls.js
+++ /dev/null
@@ -1,228 +0,0 @@
-#!/usr/bin/env node
-/**
- * fix-archived-rls.js
- *
- * Add proper RLS enables + policies to tables created in
- * supabase/migrations/.archived/*.sql files. These files are
- * historical/archived migrations (per commit 916ad39 "Supabase removal")
- * but react-doctor scans them. We satisfy the rule with real, correct
- * policies scoped by user_id (auth.uid()) or brand_id (current_brand_id())
- * where possible; deny-all otherwise.
- *
- * Tables are detected by parsing CREATE TABLE blocks. The list of
- * target files comes from the react-doctor scan output:
- *   - supabase-table-missing-rls (22 errors)
- *   - supabase-rls-policy-risk (9 errors in archived files; 1 in init.sql fixed separately)
- *
- * Idempotent: skips tables that already have RLS enabled.
- */
-
-const fs = require("node:fs");
-const path = require("node:path");
-
-const ARCHIVE_DIR = path.join(__dirname, "..", "supabase", "migrations", ".archived");
-
-// Helper policy templates.
-// `brand_id`-scoped (most common in archived files):
-//   USING (brand_id = current_brand_id() OR is_platform_admin())
-//   WITH CHECK (brand_id = current_brand_id() OR is_platform_admin())
-// `user_id`-scoped:
-//   USING (user_id = auth.uid() OR is_platform_admin())
-//   WITH CHECK (user_id = auth.uid() OR is_platform_admin())
-// Public-read (e.g. blog_posts):
-//   SELECT to anon/authenticated USING (true)
-//   INSERT/UPDATE/DELETE: USING (false) WITH CHECK (false)
-
-function policyFor(tableName, columns) {
-  // Heuristics based on columns present:
-  const hasBrandId = columns.some(c => /^brand_id\b/i.test(c));
-  const hasUserId = columns.some(c => /^user_id\b/i.test(c) && !/"userId"/i.test(c));
-  const hasUserIdCamel = columns.some(c => /"userId"/i.test(c));
-  const hasContactEmail = columns.some(c => /^contact_email\b/i.test(c));
-  const hasEmail = columns.some(c => /^email\b/i.test(c) && !/email_sent/i.test(c));
-
-  // Public-read-only with deny write: blog_posts / blog_resources / roadmap_items (public-facing)
-  const publicReadOnly = new Set([
-    "blog_posts", "blog_resources", "roadmap_items",
-    "newsletter_subscribers", "waitlist",
-  ]);
-  if (publicReadOnly.has(tableName)) {
-    return [
-      `-- RLS: ${tableName} is public-read; deny writes by default`,
-      `ALTER TABLE ${tableName} ENABLE ROW LEVEL SECURITY;`,
-      `ALTER TABLE ${tableName} FORCE ROW LEVEL SECURITY;`,
-      `DROP POLICY IF EXISTS public_read ON ${tableName};`,
-      `CREATE POLICY public_read ON ${tableName} FOR SELECT USING (true);`,
-      `DROP POLICY IF EXISTS deny_write ON ${tableName};`,
-      `CREATE POLICY deny_write ON ${tableName} FOR INSERT WITH CHECK (false);`,
-      `DROP POLICY IF EXISTS deny_update ON ${tableName};`,
-      `CREATE POLICY deny_update ON ${tableName} FOR UPDATE USING (false) WITH CHECK (false);`,
-      `DROP POLICY IF EXISTS deny_delete ON ${tableName};`,
-      `CREATE POLICY deny_delete ON ${tableName} FOR DELETE USING (false);`,
-    ];
-  }
-
-  // verification_token (Auth.js): no RLS needed since it's used as the
-  // session lookup, but rule requires it. Lock to service role only.
-  if (tableName === "verification_token") {
-    return [
-      `ALTER TABLE ${tableName} ENABLE ROW LEVEL SECURITY;`,
-      `ALTER TABLE ${tableName} FORCE ROW LEVEL SECURITY;`,
-      `DROP POLICY IF EXISTS deny_all ON ${tableName};`,
-      `CREATE POLICY deny_all ON ${tableName} FOR ALL USING (false) WITH CHECK (false);`,
-    ];
-  }
-
-  // users / accounts / sessions: Auth.js tables, scoped by userId.
-  if (hasUserIdCamel) {
-    return [
-      `ALTER TABLE ${tableName} ENABLE ROW LEVEL SECURITY;`,
-      `ALTER TABLE ${tableName} FORCE ROW LEVEL SECURITY;`,
-      `DROP POLICY IF EXISTS self_access ON ${tableName};`,
-      `CREATE POLICY self_access ON ${tableName} FOR ALL USING ("userId" = auth.uid() OR is_platform_admin()) WITH CHECK ("userId" = auth.uid() OR is_platform_admin());`,
-    ];
-  }
-
-  // users (Auth.js): self-read own row.
-  if (tableName === "users") {
-    return [
-      `ALTER TABLE ${tableName} ENABLE ROW LEVEL SECURITY;`,
-      `ALTER TABLE ${tableName} FORCE ROW LEVEL SECURITY;`,
-      `DROP POLICY IF EXISTS self_read ON ${tableName};`,
-      `CREATE POLICY self_read ON ${tableName} FOR SELECT USING (id = auth.uid() OR is_platform_admin());`,
-      `DROP POLICY IF EXISTS deny_write ON ${tableName};`,
-      `CREATE POLICY deny_write ON ${tableName} FOR INSERT WITH CHECK (false);`,
-      `DROP POLICY IF EXISTS deny_update ON ${tableName};`,
-      `CREATE POLICY deny_update ON ${tableName} FOR UPDATE USING (id = auth.uid() OR is_platform_admin()) WITH CHECK (id = auth.uid() OR is_platform_admin());`,
-      `DROP POLICY IF EXISTS deny_delete ON ${tableName};`,
-      `CREATE POLICY deny_delete ON ${tableName} FOR DELETE USING (id = auth.uid() OR is_platform_admin());`,
-    ];
-  }
-
-  // sessions: self-access by userId column.
-  if (tableName === "sessions") {
-    return [
-      `ALTER TABLE ${tableName} ENABLE ROW LEVEL SECURITY;`,
-      `ALTER TABLE ${tableName} FORCE ROW LEVEL SECURITY;`,
-      `DROP POLICY IF EXISTS self_access ON ${tableName};`,
-      `CREATE POLICY self_access ON ${tableName} FOR ALL USING ("userId" = auth.uid() OR is_platform_admin()) WITH CHECK ("userId" = auth.uid() OR is_platform_admin());`,
-    ];
-  }
-
-  // launch_checklist_progress: user-scoped.
-  if (tableName === "launch_checklist_progress" && hasUserId) {
-    return [
-      `ALTER TABLE ${tableName} ENABLE ROW LEVEL SECURITY;`,
-      `ALTER TABLE ${tableName} FORCE ROW LEVEL SECURITY;`,
-      `DROP POLICY IF EXISTS self_access ON ${tableName};`,
-      `CREATE POLICY self_access ON ${tableName} FOR ALL USING (user_id = auth.uid()::text OR is_platform_admin()) WITH CHECK (user_id = auth.uid()::text OR is_platform_admin());`,
-    ];
-  }
-
-  // brand-scoped tables: most common.
-  if (hasBrandId) {
-    return [
-      `ALTER TABLE ${tableName} ENABLE ROW LEVEL SECURITY;`,
-      `ALTER TABLE ${tableName} FORCE ROW LEVEL SECURITY;`,
-      `DROP POLICY IF EXISTS tenant_isolation ON ${tableName};`,
-      `CREATE POLICY tenant_isolation ON ${tableName} FOR ALL USING (brand_id = current_brand_id() OR is_platform_admin()) WITH CHECK (brand_id = current_brand_id() OR is_platform_admin());`,
-    ];
-  }
-
-  // Fallback: deny all (safest default).
-  return [
-    `ALTER TABLE ${tableName} ENABLE ROW LEVEL SECURITY;`,
-    `ALTER TABLE ${tableName} FORCE ROW LEVEL SECURITY;`,
-    `DROP POLICY IF EXISTS deny_all ON ${tableName};`,
-    `CREATE POLICY deny_all ON ${tableName} FOR ALL USING (false) WITH CHECK (false);`,
-  ];
-}
-
-// Parse a file and return [{name, columns}] for each CREATE TABLE block.
-function parseTables(sql) {
-  const tables = [];
-  // Match CREATE TABLE ... (...);
-  const re = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:public\.)?([a-zA-Z_][a-zA-Z0-9_]*)\s*\(([\s\S]*?)\)\s*;/gi;
-  let match;
-  while ((match = re.exec(sql)) !== null) {
-    const name = match[1];
-    const body = match[2];
-    // Extract column names (first identifier on each comma-separated line)
-    const columns = [];
-    body.split(",").forEach(line => {
-      const trimmed = line.trim();
-      if (!trimmed) return;
-      if (/^(?:CONSTRAINT|UNIQUE|PRIMARY\s+KEY|FOREIGN\s+KEY|CHECK|INDEX)\b/i.test(trimmed)) return;
-      const colMatch = trimmed.match(/^(?:"[^"]+"|`[^`]+`|[a-zA-Z_][a-zA-Z0-9_]*)/);
-      if (colMatch) columns.push(colMatch[0]);
-    });
-    tables.push({ name, columns });
-  }
-  return tables;
-}
-
-const files = [
-  "005_water_log.sql",
-  "044_square_sync_log.sql",
-  "066_auto_square_sync.sql",
-  "069_brand_scoping_phase2.sql",
-  "070_rls_policy_audit.sql",
-  "080_communication_segments.sql",
-  "088_brand_features.sql",
-  "120_water_alerts.sql",
-  "126_founder_pain_log.sql",
-  "129_worker_time_tracking.sql",
-  "130_time_tracking_pay_period_overtime.sql",
-  "133_time_tracking_notifications.sql",
-  "134_abandoned_cart_recovery.sql",
-  "137_time_tracking_workers_and_tasks.sql",
-  "138_time_tracking_logs.sql",
-  "204_authjs_tables.sql",
-  "XXX_blog_tables.sql",
-  "XXX_launch_checklist.sql",
-  "XXX_roadmap_tables.sql",
-  "XXX_waitlist_table.sql",
-];
-
-let totalAdded = 0;
-let totalSkipped = 0;
-
-for (const file of files) {
-  const filePath = path.join(ARCHIVE_DIR, file);
-  if (!fs.existsSync(filePath)) {
-    console.log(`skip (not found): ${file}`);
-    continue;
-  }
-  const original = fs.readFileSync(filePath, "utf8");
-  const tables = parseTables(original);
-  if (tables.length === 0) {
-    console.log(`skip (no tables): ${file}`);
-    continue;
-  }
-
-  // Idempotency check: skip if "ENABLE ROW LEVEL SECURITY" already present for any of the tables.
-  const newTables = tables.filter(t => !new RegExp(`ALTER\\s+TABLE\\s+${t.name}\\s+ENABLE\\s+ROW\\s+LEVEL\\s+SECURITY`, "i").test(original));
-  if (newTables.length === 0) {
-    console.log(`skip (already done): ${file} — ${tables.length} tables`);
-    totalSkipped += tables.length;
-    continue;
-  }
-
-  const blocks = newTables.map(t => {
-    const policy = policyFor(t.name, t.columns);
-    return [
-      `-- ============================================================`,
-      `-- RLS for ${t.name} (added by scripts/fix-archived-rls.js)`,
-      `-- Columns: ${t.columns.join(", ")}`,
-      `-- ============================================================`,
-      ...policy,
-    ].join("\n");
-  });
-
-  const appended = blocks.join("\n\n") + "\n";
-  fs.writeFileSync(filePath, original + "\n" + appended);
-  console.log(`patched: ${file} — added RLS for ${newTables.length} table(s): ${newTables.map(t => t.name).join(", ")}`);
-  totalAdded += newTables.length;
-}
-
-console.log(`\nTotal: added ${totalAdded} RLS block(s), skipped ${totalSkipped} already-done.`);
diff --git a/scripts/fix-button-has-type.js b/scripts/fix-button-has-type.js
deleted file mode 100644
index 887013e..0000000
--- a/scripts/fix-button-has-type.js
+++ /dev/null
@@ -1,128 +0,0 @@
-#!/usr/bin/env node
-/**
- * fix-button-has-type.js
- *
- * Bulk-fix the react-doctor/button-has-type warning by adding
- * `type="button"` to every `<button>` JSX element that doesn't
- * already have a `type` attribute. Skips elements that already
- * declare `type="submit"`, `type="reset"`, `type="button"`, or
- * the corresponding JSX expressions.
- *
- * Why default to "button": A bare `<button>` in HTML defaults to
- * `type="submit"`, which accidentally submits the nearest form.
- * The vast majority of buttons in admin UIs are click handlers
- * (not form submitters), so "button" is the safer default. When
- * a button IS a form submit (e.g. inside `<form onSubmit>`), the
- * form handler typically uses its own submit semantics, but
- * authors can always override by adding `type="submit"` explicitly.
- *
- * Idempotent: re-running this script is a no-op once applied.
- */
-const fs = require("node:fs");
-const path = require("node:path");
-const { execSync } = require("node:child_process");
-
-// Find all .tsx and .jsx files in src/ that are tracked by git
-function listFiles() {
-  const out = execSync(
-    "git ls-files 'src/**/*.tsx' 'src/**/*.jsx' 'src/**/*.ts'",
-    { encoding: "utf8" }
-  );
-  return out.split("\n").filter(Boolean);
-}
-
-const FILES = listFiles();
-let totalFixed = 0;
-let totalSkipped = 0;
-
-// Match <button ... > opening tag (or self-closing) that doesn't have type=
-// Supports multi-line tags.
-// We do this in a stateful loop to properly skip <button> tags that DO have type=
-function fixFile(file) {
-  const original = fs.readFileSync(file, "utf8");
-  let out = "";
-  let i = 0;
-  let changed = false;
-
-  while (i < original.length) {
-    // Look for "<button" (case-sensitive, lowercase to match JSX conventions)
-    const buttonIdx = original.indexOf("<button", i);
-    if (buttonIdx === -1) {
-      out += original.slice(i);
-      break;
-    }
-    // Copy everything up to the match
-    out += original.slice(i, buttonIdx);
-    i = buttonIdx;
-
-    // Find the closing > of this tag (handle quoted attrs and > inside strings)
-    let j = buttonIdx + "<button".length;
-    let inSingle = false;
-    let inDouble = false;
-    let inBrace = 0;
-    let tagEnd = -1;
-    let isSelfClosing = false;
-    while (j < original.length) {
-      const c = original[j];
-      if (inSingle) {
-        if (c === "'" && original[j - 1] !== "\\") inSingle = false;
-      } else if (inDouble) {
-        if (c === '"' && original[j - 1] !== "\\") inDouble = false;
-      } else if (inBrace > 0) {
-        if (c === "{") inBrace++;
-        else if (c === "}") inBrace--;
-      } else {
-        if (c === "'") inSingle = true;
-        else if (c === '"') inDouble = true;
-        else if (c === "{") inBrace++;
-        else if (c === ">") {
-          tagEnd = j;
-          isSelfClosing = original[j - 1] === "/";
-          break;
-        }
-      }
-      j++;
-    }
-
-    if (tagEnd === -1) {
-      // Unterminated tag — leave as-is
-      out += original.slice(i);
-      break;
-    }
-
-    const tagContent = original.slice(buttonIdx, tagEnd + 1);
-    // Already has type= ? skip
-    if (/\stype\s*=/.test(tagContent)) {
-      out += tagContent;
-      i = tagEnd + 1;
-      totalSkipped++;
-      continue;
-    }
-
-    // Insert type="button" right after "<button"
-    const insertAt = buttonIdx + "<button".length;
-    const newTag =
-      original.slice(buttonIdx, insertAt) +
-      ' type="button"' +
-      original.slice(insertAt, tagEnd + 1);
-
-    out += newTag;
-    i = tagEnd + 1;
-    changed = true;
-    totalFixed++;
-  }
-
-  if (changed) {
-    fs.writeFileSync(file, out);
-  }
-}
-
-for (const f of FILES) {
-  try {
-    fixFile(f);
-  } catch (err) {
-    console.error(`error processing ${f}: ${err.message}`);
-  }
-}
-
-console.log(`Fixed ${totalFixed} <button> elements; skipped ${totalSkipped} already-typed.`);
diff --git a/scripts/fix-control-has-associated-label.js b/scripts/fix-control-has-associated-label.js
deleted file mode 100644
index 9edafba..0000000
--- a/scripts/fix-control-has-associated-label.js
+++ /dev/null
@@ -1,223 +0,0 @@
-#!/usr/bin/env node
-/**
- * Uses TypeScript AST to find <input>/<select>/<textarea> JSX elements
- * missing aria-label/aria-labelledby and adds aria-label.
- * Idempotent and structurally safe.
- */
-const fs = require('fs');
-const path = require('path');
-const ts = require('typescript');
-
-function titleCase(s) {
-  return s
-    .replace(/[-_]/g, ' ')
-    .replace(/\s+/g, ' ')
-    .trim()
-    .split(' ')
-    .map((w) => (w ? w[0].toUpperCase() + w.slice(1) : ''))
-    .join(' ');
-}
-
-function getJsxAttr(name, attrs) {
-  for (const a of attrs.properties) {
-    if (a.kind === ts.SyntaxKind.JsxAttribute && a.name && a.name.text === name) return a;
-  }
-  return null;
-}
-
-function getStringAttrValue(name, attrs) {
-  const a = getJsxAttr(name, attrs);
-  if (!a || !a.initializer) return undefined;
-  if (a.initializer.kind === ts.SyntaxKind.StringLiteral) return a.initializer.text;
-  if (a.initializer.kind === ts.SyntaxKind.JsxExpressionContainer && a.initializer.expression) {
-    const e = a.initializer.expression;
-    if (e.kind === ts.SyntaxKind.StringLiteral) return e.text;
-  }
-  return undefined;
-}
-
-function hasBooleanAttr(name, attrs) {
-  return !!getJsxAttr(name, attrs);
-}
-
-function getNameText(name) {
-  if (!name) return null;
-  if (name.kind === ts.SyntaxKind.Identifier) return name.text;
-  if (name.kind === ts.SyntaxKind.PropertyAccessExpression) return name.name.text;
-  return null;
-}
-
-function inferLabelFromSiblingsOrPreceding(sourceFile, node) {
-  const scanner = ts.createScanner(ts.ScriptTarget.Latest, /*skipTrivia*/ true, ts.LanguageVariant.JSX, sourceFile.text);
-  // Walk text before the node to find preceding label or {label(...)}
-  const start = node.getStart(sourceFile);
-  const before = sourceFile.text.slice(Math.max(0, start - 800), start);
-  // Look for label("...") in the most recent expression
-  const labelCallMatch = before.match(/label\(\s*['"`]([^'"`]+)['"`]\s*\)/);
-  if (labelCallMatch) return labelCallMatch[1];
-  // Look for a label JSX element without closing
-  const lastLabelOpen = [...before.matchAll(/<label\b[^>]*>(?:(?!<\/label>)[\s\S])*$/gi)];
-  if (lastLabelOpen.length) {
-    const last = lastLabelOpen[lastLabelOpen.length - 1];
-    const afterOpen = before.slice(last.index + last[0].match(/^<label\b[^>]*>/i)[0].length);
-    // If there's a </label> after, this label isn't enclosing
-    if (!/<\/label>/i.test(afterOpen)) {
-      const inner = afterOpen.replace(/<[^>]+>/g, ' ').replace(/\s+/g, ' ').trim();
-      if (inner) return inner.replace(/[*?]\s*$/, '').trim();
-    }
-  }
-  return null;
-}
-
-function isInsideLabel(sourceFile, node) {
-  let parent = node.parent;
-  while (parent) {
-    if (parent.kind === ts.SyntaxKind.JsxElement) {
-      const opening = parent.openingElement;
-      const tagName = getNameText(opening.tagName);
-      if (tagName === 'label') return true;
-      // Also check if it's inside a JsxFragment whose parent is a label
-    }
-    parent = parent.parent;
-  }
-  // Also check if we're directly inside a label's children
-  let cur = node;
-  while (cur.parent) {
-    if (cur.parent.kind === ts.SyntaxKind.JsxElement && getNameText(cur.parent.openingElement.tagName) === 'label') {
-      return true;
-    }
-    cur = cur.parent;
-  }
-  return false;
-}
-
-function inferLabel(node, sourceFile) {
-  const attrs = node.attributes;
-  // Type attribute
-  const typeAttr = getStringAttrValue('type', attrs);
-  const placeholder = getStringAttrValue('placeholder', attrs);
-  const nameAttr = getStringAttrValue('name', attrs);
-  const idAttr = getStringAttrValue('id', attrs);
-  const className = getStringAttrValue('className', attrs);
-  const tagName = getNameText(node.tagName);
-  if (className && /\bhidden\b/.test(className) && typeAttr === 'file') return 'File upload';
-  if (placeholder) {
-    const cleaned = placeholder.replace(/\b(e\.g\.?|i\.e\.?|min\.?)\b/gi, '').trim();
-    return titleCase(cleaned || placeholder);
-  }
-  if (nameAttr) return titleCase(nameAttr.replace(/\[.*?\]/g, ''));
-  if (idAttr) return titleCase(idAttr);
-  const ctx = inferLabelFromSiblingsOrPreceding(sourceFile, node);
-  if (ctx) return ctx;
-  if (tagName === 'input' && typeAttr) return titleCase(typeAttr);
-  return titleCase(tagName);
-}
-
-function findTargets(sourceFile) {
-  const out = [];
-  function visit(node) {
-    if (ts.isJsxOpeningElement(node) || ts.isJsxSelfClosingElement(node)) {
-      const tagName = getNameText(node.tagName);
-      if (['input', 'select', 'textarea'].includes(tagName)) {
-        const attrs = node.attributes;
-        const hasAriaLabel = hasBooleanAttr('aria-label', attrs) || getStringAttrValue('aria-label', attrs) !== undefined;
-        const hasAriaLabelledBy = hasBooleanAttr('aria-labelledby', attrs) || getStringAttrValue('aria-labelledby', attrs) !== undefined;
-        const typeAttr = getStringAttrValue('type', attrs);
-        if (!hasAriaLabel && !hasAriaLabelledBy && typeAttr !== 'hidden') {
-          if (!isInsideLabel(sourceFile, node)) {
-            out.push(node);
-          }
-        }
-      }
-    }
-    ts.forEachChild(node, visit);
-  }
-  visit(sourceFile);
-  return out;
-}
-
-function escapeForJsx(s) {
-  return s.replace(/&/g, '&amp;').replace(/"/g, '&quot;');
-}
-
-function processFile(filePath) {
-  const text = fs.readFileSync(filePath, 'utf8');
-  const sourceFile = ts.createSourceFile(filePath, text, ts.ScriptTarget.Latest, true, ts.LanguageVariant.JSX);
-  const targets = findTargets(sourceFile);
-  if (targets.length === 0) return 0;
-
-  // Sort by position descending so insertions don't shift earlier offsets
-  targets.sort((a, b) => b.getStart(sourceFile) - a.getStart(sourceFile));
-
-  let updated = text;
-  let changes = 0;
-  for (const node of targets) {
-    const inferred = inferLabel(node, sourceFile);
-    if (!inferred) continue;
-    // Find position: right after the tag name
-    const tagNameEnd = node.tagName.getEnd();
-    const ariaStr = ` aria-label="${escapeForJsx(inferred)}"`;
-    // Reconstruct from the position
-    const head = updated.slice(0, tagNameEnd);
-    const rest = updated.slice(tagNameEnd);
-    updated = head + ariaStr + rest;
-    changes++;
-  }
-  if (changes > 0) {
-    fs.writeFileSync(filePath, updated);
-  }
-  return changes;
-}
-
-const ROOT = path.resolve(__dirname, '..');
-const TARGET_DIRS = ['src/app', 'src/components', 'src/wholesale', 'src/landing'];
-const SKIP_PATTERNS = [
-  /node_modules/,
-  /\.next\//,
-  /dist\//,
-  /coverage\//,
-  /\.test\.[jt]sx?$/,
-  /\.spec\.[jt]sx?$/,
-];
-
-function walk(dir, files = []) {
-  if (!fs.existsSync(dir)) return files;
-  for (const ent of fs.readdirSync(dir, { withFileTypes: true })) {
-    const p = path.join(dir, ent.name);
-    if (SKIP_PATTERNS.some((rx) => rx.test(p))) continue;
-    if (ent.isDirectory()) walk(p, files);
-    else if (/\.(tsx|jsx)$/.test(ent.name)) files.push(p);
-  }
-  return files;
-}
-
-let totalChanges = 0;
-let totalFiles = 0;
-const changedFiles = [];
-const errors = [];
-for (const t of TARGET_DIRS) {
-  const dir = path.join(ROOT, t);
-  if (!fs.existsSync(dir)) continue;
-  const files = walk(dir);
-  for (const f of files) {
-    try {
-      const c = processFile(f);
-      if (c > 0) {
-        changedFiles.push([c, path.relative(ROOT, f)]);
-        totalFiles++;
-        totalChanges += c;
-      }
-    } catch (e) {
-      errors.push(`${f}: ${e.message}`);
-    }
-  }
-}
-changedFiles.sort((a, b) => b[0] - a[0]);
-for (const [c, f] of changedFiles) {
-  console.log(`  ${c.toString().padStart(4)}  ${f}`);
-}
-if (errors.length) {
-  console.error('\nErrors:');
-  errors.forEach((e) => console.error(' ', e));
-}
-console.log(`\nTotal: ${totalChanges} aria-labels added across ${totalFiles} files`);
\ No newline at end of file
diff --git a/scripts/fix-server-auth-ast.js b/scripts/fix-server-auth-ast.js
deleted file mode 100644
index 621167d..0000000
--- a/scripts/fix-server-auth-ast.js
+++ /dev/null
@@ -1,150 +0,0 @@
-#!/usr/bin/env node
-/**
- * Add an auth check to every exported async function in a "use server"
- * file using the TypeScript compiler API. Idempotent.
- *
- * The check inserted as the first statement in the function body is:
- *
- *   const adminUser = await getAdminUser();
- *   if (!adminUser) return { success: false, error: "Unauthorized" };
- *
- * If the function body already calls getAdminUser() or getSession() within
- * its first few statements, it is left alone.
- *
- * Usage: node scripts/fix-server-auth-ast.js <file>...
- */
-const fs = require("node:fs");
-const path = require("node:path");
-const ts = require("typescript");
-
-function ensureGetAdminUserImport(sourceFile) {
-  let src = sourceFile.text;
-  const hasImport = sourceFile.statements.some(
-    (s) =>
-      ts.isImportDeclaration(s) &&
-      s.moduleSpecifier &&
-      s.moduleSpecifier.text === "@/lib/admin-permissions",
-  );
-  if (hasImport) return src;
-
-  const importLine = `import { getAdminUser } from "@/lib/admin-permissions";\n`;
-  // Insert after "use server" directive.
-  for (const stmt of sourceFile.statements) {
-    if (
-      ts.isExpressionStatement(stmt) &&
-      ts.isStringLiteral(stmt.expression) &&
-      (stmt.expression.text === "use server" ||
-        stmt.expression.text === "use client")
-    ) {
-      const pos = stmt.getEnd();
-      return src.slice(0, pos) + "\n" + importLine + src.slice(pos);
-    }
-  }
-  // Otherwise after the first import.
-  for (const stmt of sourceFile.statements) {
-    if (ts.isImportDeclaration(stmt)) {
-      const pos = stmt.getEnd();
-      return src.slice(0, pos) + "\n" + importLine + src.slice(pos);
-    }
-  }
-  return importLine + src;
-}
-
-function alreadyGated(body) {
-  // Walk the function body and detect either:
-  //   1. A getAdminUser() / getSession() call (auth gate already in place)
-  //   2. An existing `const adminUser = ...` declaration (would collide)
-  let hasAuthCall = false;
-  let hasAdminUserVar = false;
-  function walk(node) {
-    if (
-      ts.isCallExpression(node) &&
-      ts.isIdentifier(node.expression) &&
-      (node.expression.text === "getAdminUser" ||
-        node.expression.text === "getSession")
-    ) {
-      hasAuthCall = true;
-    }
-    if (
-      ts.isVariableDeclaration(node) &&
-      ts.isIdentifier(node.name) &&
-      node.name.text === "adminUser"
-    ) {
-      hasAdminUserVar = true;
-    }
-    ts.forEachChild(node, walk);
-  }
-  walk(body);
-  return hasAuthCall || hasAdminUserVar;
-}
-
-function processFile(filePath) {
-  const abs = path.resolve(filePath);
-  if (!fs.existsSync(abs)) {
-    console.error(`skip (not found): ${abs}`);
-    return 0;
-  }
-  const original = fs.readFileSync(abs, "utf8");
-  if (!original.includes('"use server"') && !original.includes("'use server'")) {
-    return 0;
-  }
-
-  const sourceFile = ts.createSourceFile(
-    abs,
-    original,
-    ts.ScriptTarget.Latest,
-    true,
-  );
-
-  let src = ensureGetAdminUserImport(sourceFile);
-  // Re-parse after import insertion.
-  const sf = ts.createSourceFile(abs, src, ts.ScriptTarget.Latest, true);
-
-  const edits = [];
-  function visit(node) {
-    if (
-      ts.isFunctionDeclaration(node) &&
-      node.modifiers &&
-      node.modifiers.some((m) => m.kind === ts.SyntaxKind.ExportKeyword) &&
-      node.modifiers.some((m) => m.kind === ts.SyntaxKind.AsyncKeyword) &&
-      node.body
-    ) {
-      if (!alreadyGated(node.body)) {
-        // Throwing is universal — it works regardless of the function's
-        // return type annotation (Promise<void>, {success, error}, etc.)
-        // and matches how the rest of the app signals "auth gate" errors.
-        const insert = `\n  const adminUser = await getAdminUser();\n  if (!adminUser) throw new Error("Unauthorized");\n`;
-        const pos = node.body.getStart(sf) + 1; // after `{`
-        edits.push({ pos, insert });
-      }
-    }
-    ts.forEachChild(node, visit);
-  }
-  visit(sf);
-
-  // Apply edits in reverse order so positions don't shift.
-  edits.sort((a, b) => b.pos - a.pos);
-  let out = src;
-  for (const e of edits) {
-    out = out.slice(0, e.pos) + e.insert + out.slice(e.pos);
-  }
-
-  if (edits.length > 0) {
-    fs.writeFileSync(abs, out, "utf8");
-    console.log(`patched (${edits.length} functions): ${abs}`);
-  }
-  return edits.length;
-}
-
-const files = process.argv.slice(2);
-if (files.length === 0) {
-  console.error("usage: node scripts/fix-server-auth-ast.js <file>...");
-  process.exit(2);
-}
-let patched = 0, total = 0;
-for (const f of files) {
-  const n = processFile(f);
-  if (n > 0) patched++;
-  total += n;
-}
-console.log(`done — ${patched} files, ${total} functions`);
\ No newline at end of file
diff --git a/scripts/fix-server-auth.js b/scripts/fix-server-auth.js
deleted file mode 100644
index 696882c..0000000
--- a/scripts/fix-server-auth.js
+++ /dev/null
@@ -1,73 +0,0 @@
-#!/usr/bin/env node
-/**
- * Add an auth check (getAdminUser) to every exported async function in a
- * "use server" file whose body doesn't already have one. Idempotent.
- *
- * Usage: node scripts/fix-server-auth.js <file>...
- *
- * The check is inserted as the first statement after the `export async
- * function name(...) {` line:
- *
- *   const adminUser = await getAdminUser();
- *   if (!adminUser) return { success: false, error: "Unauthorized" };
- */
-const fs = require("node:fs");
-const path = require("node:path");
-
-function processFile(filePath) {
-  const abs = path.resolve(filePath);
-  if (!fs.existsSync(abs)) {
-    console.error(`skip (not found): ${abs}`);
-    return 0;
-  }
-  let src = fs.readFileSync(abs, "utf8");
-  if (!src.includes('"use server"') && !src.includes("'use server'")) {
-    return 0; // only "use server" files
-  }
-
-  // Make sure getAdminUser is imported.
-  if (!/from\s+["']@\/lib\/admin-permissions["']/.test(src)) {
-    const importLine =
-      'import { getAdminUser } from "@/lib/admin-permissions";\n';
-    if (src.startsWith('"use server";\n')) {
-      src = src.replace(/^("use server";\n)/, `$1\n${importLine}`);
-    } else {
-      const m = src.match(/^(import .*?;\n)/m);
-      src = m ? src.replace(m[1], `${m[1]}${importLine}`) : importLine + src;
-    }
-  }
-
-  let count = 0;
-  src = src.replace(
-    /export async function (\w+)\s*\(([^)]*)\)\s*(?::\s*[^{]+)?\s*\{/g,
-    (match, name, params, offset) => {
-      const window = src.slice(offset, offset + 600);
-      // Already gated: skip.
-      if (/getAdminUser\s*\(\s*\)|getSession\s*\(\s*\)/.test(window)) {
-        return match;
-      }
-      count++;
-      const insert = `\n  const adminUser = await getAdminUser();\n  if (!adminUser) return { success: false, error: "Unauthorized" };\n`;
-      return `${match}${insert}`;
-    },
-  );
-
-  if (count > 0) {
-    fs.writeFileSync(abs, src, "utf8");
-    console.log(`patched (${count} functions): ${abs}`);
-  }
-  return count;
-}
-
-const files = process.argv.slice(2);
-if (files.length === 0) {
-  console.error("usage: node scripts/fix-server-auth.js <file>...");
-  process.exit(2);
-}
-let patched = 0, total = 0;
-for (const f of files) {
-  const n = processFile(f);
-  if (n > 0) patched++;
-  total += n;
-}
-console.log(`done — ${patched} files, ${total} functions`);
\ No newline at end of file
diff --git a/scripts/import-woo-to-route.ts b/scripts/import-woo-to-route.ts
deleted file mode 100644
index 8133ef5..0000000
--- a/scripts/import-woo-to-route.ts
+++ /dev/null
@@ -1,262 +0,0 @@
-/**
- * import-woo-to-route.ts - 2026 Season Import
- *
- * Reads Tuxedo_Corn_2026_Tour_Schedule-2.xlsx (Full Tour Schedule sheet) and produces:
- *   products.csv  - 1 core pickup product
- *   stops.csv     - 164 active stops
- *
- * Usage:
- *   npx tsx scripts/import-woo-to-route.ts \
- *     --xlsx "/path/to/Tuxedo_Corn_2026_Tour_Schedule-2.xlsx" \
- *     --brand 64294306-5f42-463d-a5e8-2ad6c81a96de \
- *     --output ./import-output
- */
-
-import * as fs from "fs";
-import * as path from "path";
-import { parseArgs } from "util";
-import ExcelJS from "exceljs";
-
-// Types
-
-interface ProductOutput {
-  name: string;
-  price: number;
-  type: "Pickup" | "Shipping" | "Pickup & Shipping";
-  description: string;
-  active: boolean;
-  image_url: string;
-  is_taxable: boolean;
-}
-
-interface StopOutput {
-  city: string;
-  state: string;
-  location: string;
-  date: string;
-  time: string;
-  address: string;
-  notes: string;
-}
-
-function slugify(s: string): string {
-  return s
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, "-")
-    .replace(/^-|-$/g, "");
-}
-
-async function main() {
-  const args = parseArgs({
-    options: {
-      xlsx: { type: "string" },
-      brand: { type: "string" },
-      output: { type: "string", default: "./import-output" },
-    },
-  });
-
-  const xlsxPath = args.values.xlsx as string;
-  const brandId = args.values.brand as string;
-  const outputDir = args.values.output as string;
-
-  if (!xlsxPath || !brandId) {
-    console.error(
-      "Usage: npx tsx scripts/import-woo-to-route.ts --xlsx <path> --brand <uuid> [--output <dir>]"
-    );
-    process.exit(1);
-  }
-  if (!fs.existsSync(xlsxPath)) {
-    console.error("File not found: " + xlsxPath);
-    process.exit(1);
-  }
-
-  // Read Excel
-  // Row 0=title, Row1=subtitle, Row2=color-key, Row3=column-headers, Row4+=data
-  const wb = new ExcelJS.Workbook();
-  await wb.xlsx.readFile(xlsxPath);
-  const sheet = wb.getWorksheet(1);
-  if (!sheet) {
-    console.error("No worksheet found in file");
-    process.exit(1);
-  }
-
-  const allRows: (string | null | undefined)[][] = [];
-  sheet.eachRow((row) => {
-    allRows.push(row.values as (string | null | undefined)[]);
-  });
-
-  const colHeaders = (allRows[3] as string[]).map((h: unknown) => String(h ?? "").trim());
-  console.log("Column headers:", colHeaders);
-
-  const ci = (col: string) => colHeaders.indexOf(col);
-  const wkIdx = ci("Wk"), typeIdx = ci("Type"), datesIdx = ci("Dates"), dayIdx = ci("Day");
-  const cityIdx = ci("City / Location"), hostIdx = ci("Host / Venue");
-  const timeIdx = ci("Time"), truckIdx = ci("Truck"), statusIdx = ci("Status"), notesIdx = ci("Notes");
-
-  interface ScheduleRow {
-    wk: number; type: string; dates: string; day: string;
-    city: string; host: string; time: string; truck: string; status: string; notes: string;
-  }
-
-  const scheduleRows: ScheduleRow[] = [];
-  let currentWeek: { wk: number; type: string; dates: string; day: string } | null = null;
-
-  for (let i = 4; i < allRows.length; i++) {
-    const row = allRows[i] as (string | null | undefined)[];
-    if (!row) continue;
-
-    const wkVal = row[wkIdx];
-    const Day = String(row[dayIdx] ?? "").trim();
-    const City_Location = String(row[cityIdx] ?? "").trim();
-    const Status = String(row[statusIdx] ?? "").trim();
-
-    if (wkVal !== null && wkVal !== undefined && String(wkVal).trim() !== "") {
-      currentWeek = {
-        wk: Number(wkVal),
-        type: String(row[typeIdx] ?? "").trim(),
-        dates: String(row[datesIdx] ?? "").trim(),
-        day: Day,
-      };
-    }
-
-    if (!currentWeek) continue;
-    if (Status === "Off day") continue;
-    if (!City_Location) continue;
-
-    scheduleRows.push({
-      wk: currentWeek.wk, type: currentWeek.type, dates: currentWeek.dates,
-      day: Day || currentWeek.day,
-      city: City_Location,
-      host: String(row[hostIdx] ?? "").trim(),
-      time: String(row[timeIdx] ?? "").trim(),
-      truck: String(row[truckIdx] ?? "").trim(),
-      status: Status,
-      notes: String(row[notesIdx] ?? "").trim(),
-    });
-  }
-
-  const ACTIVE_STATUSES = ["✓ Confirmed", "🔴 Pre-sale live"];
-  const activeRows = scheduleRows.filter((r) => ACTIVE_STATUSES.includes(r.status));
-  console.log("\nSchedule rows: " + scheduleRows.length + " total | " + activeRows.length + " active\n");
-
-  // PRODUCTS -- one core product for all stops
-  const products: ProductOutput[] = [
-    {
-      name: "Olathe Sweet Corn -- 24 Ear Box",
-      price: 25,
-      type: "Pickup",
-      description:
-        "Fresh Olathe Sweet Corn pickup box. Add to cart, then choose your pickup stop at checkout. " +
-        "Available July-September 2026 at stops across Colorado, Wyoming, and New Mexico. " +
-        "See tuxedocorn.com for full schedule.",
-      active: true,
-      image_url:
-        "https://tuxedocorn.com/wp-content/uploads/2024/06/110260317_3494904527187819_6983832261179080791_n-1.jpg",
-      is_taxable: true,
-    },
-  ];
-
-  console.log("[products] 1 core product: \"" + products[0].name + "\" at $" + products[0].price + "\n");
-
-  // STOPS -- one row per active schedule entry
-  const stops: StopOutput[] = [];
-  const seenStopKeys = new Set<string>();
-
-  for (const row of activeRows) {
-    if (!row.city) continue;
-
-    // Parse "City ST" or "City, ST" -> city + state
-    const cityRaw = row.city.replace(/--/g, "-").trim();
-    let city = cityRaw, state = "CO";
-
-    if (cityRaw.includes(",")) {
-      const parts = cityRaw.split(",").map((s: string) => s.trim());
-      const lastPart = parts[parts.length - 1] ?? "";
-      if (/^[A-Z]{2}$/.test(lastPart)) { city = parts.slice(0, -1).join(", ").trim(); state = lastPart; }
-      else city = parts.join(", ");
-    } else {
-      const tokens = cityRaw.split(/\s+/);
-      const lastToken = tokens[tokens.length - 1] ?? "";
-      if (/^[A-Z]{2}$/.test(lastToken)) { state = lastToken; city = tokens.slice(0, -1).join(" "); }
-    }
-
-    const stopKey = slugify(city + "-" + state + "-" + row.dates + "-" + row.time);
-    if (seenStopKeys.has(stopKey)) continue;
-    seenStopKeys.add(stopKey);
-
-    // Human-readable stop label = "Store (Time) | Truck T1"
-    const stopName = row.host + " (" + row.time + ")" + (row.truck ? " | Truck " + row.truck : "");
-
-    stops.push({
-      city,
-      state,
-      location: stopName,
-      date: row.dates,  // week range -- set actual date in /admin/stops after import
-      time: row.time,
-      address: row.city + " | " + row.host,
-      notes: row.day + (row.notes ? " | " + row.notes : ""),
-    });
-  }
-
-  console.log("[stops] " + stops.length + " stops written\n");
-
-  // Show sample by week
-  const byWeek: Record<string, typeof stops> = {};
-  for (const s of stops) {
-    if (!byWeek[s.date]) byWeek[s.date] = [];
-    byWeek[s.date].push(s);
-  }
-  const weeks = Object.keys(byWeek).slice(0, 4);
-  for (const week of weeks) {
-    const ws = byWeek[week];
-    console.log("  " + week + " (" + ws.length + " stops):");
-    for (const s of ws.slice(0, 3)) {
-      console.log("    " + s.city + ", " + s.state + " | \"" + s.location + "\" | " + s.time);
-    }
-  }
-
-  // Write output CSVs
-  fs.mkdirSync(outputDir, { recursive: true });
-
-  function writeCSV(filename: string, header: string, rows: string[][]) {
-    const lines = rows.map((r) =>
-      r.map((c) => "\"" + String(c ?? "").replace(/\"/g, "\"\"") + "\"").join(",")
-    );
-    fs.writeFileSync(path.join(outputDir, filename), header + lines.join("\n"));
-  }
-
-  writeCSV(
-    "products.csv",
-    "name,price,type,description,active,image_url,is_taxable\n",
-    products.map((p) => [
-      p.name, String(p.price), p.type, p.description,
-      String(p.active), p.image_url, String(p.is_taxable),
-    ])
-  );
-
-  writeCSV(
-    "stops.csv",
-    "city,state,location,date,time,address,notes\n",
-    stops.map((s) => [s.city, s.state, s.location, s.date, s.time, s.address, s.notes])
-  );
-
-  // Summary
-  console.log("\n============================================================");
-  console.log("IMPORT READY");
-  console.log("============================================================");
-  console.log("\nproducts.csv: 1 product (\"" + products[0].name + "\" @ $" + products[0].price + " Pickup)");
-  console.log("stops.csv:    " + stops.length + " stops (confirmed + pre-sale only)");
-  console.log("\nOutput:      " + outputDir + "/");
-  console.log("");
-  console.log(">>> NOTE: stops.csv 'date' field is a WEEK RANGE (e.g. Jul 22-28).");
-  console.log("After importing stops, visit /admin/stops to set the actual date for each stop.");
-  console.log("");
-  console.log("NEXT STEPS:");
-  console.log("  1. Upload " + outputDir + "/products.csv via /admin/import -> type: products");
-  console.log("  2. Upload " + outputDir + "/stops.csv via /admin/import -> type: stops");
-  console.log("  3. Visit /admin/stops -- set each stop's actual date, verify address/time");
-  console.log("  4. Visit /tuxedo -- verify product and stops appear\n");
-  console.log("Re-run: npx tsx scripts/import-woo-to-route.ts --xlsx \"" + xlsxPath + "\" --brand " + brandId + " --output " + outputDir + "\n");
-}
-
-main().catch(console.error);
diff --git a/scripts/seed-admin.ts b/scripts/seed-admin.ts
deleted file mode 100644
index 44add41..0000000
--- a/scripts/seed-admin.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-/**
- * Seed an admin user for development.
- * Run: npx tsx scripts/seed-admin.ts [email] [password] [name]
- */
-import { config } from "dotenv";
-config({ path: ".env.local" });
-import pg from "pg";
-
-const { Pool } = pg;
-
-async function main() {
-  const email = process.argv[2] ?? "admin@test.com";
-  const password = process.argv[3] ?? "Admin1234!";
-  const name = process.argv[4] ?? "Admin";
-
-  const baseUrl = process.env.NEON_AUTH_BASE_URL!;
-  const pool = new Pool({ connectionString: process.env.DATABASE_URL });
-
-  try {
-    // 1. Create or get brand
-    const brandResult = await pool.query(`
-      INSERT INTO brands (name, slug, plan_tier)
-      VALUES ('Demo Brand', 'demo', 'enterprise')
-      ON CONFLICT (slug) DO UPDATE SET name = EXCLUDED.name
-      RETURNING id, name, slug
-    `);
-    const brand = brandResult.rows[0];
-    console.log("✓ Brand:", brand.name, `(${brand.id})`);
-
-    // 2. Create user in Neon Auth via direct API
-    const res = await fetch(`${baseUrl}/sign-up/email`, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "Origin": "http://localhost:4000",
-        "x-neon-auth-proxy": "node",
-      },
-      body: JSON.stringify({ email, password, name, callbackURL: "/admin" }),
-    });
-    const data = await res.json();
-
-    if (!res.ok && data.code !== "USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL") {
-      console.error("✗ Failed to create user:", data);
-      process.exit(1);
-    }
-
-    const userId = data.user?.id;
-    console.log("✓ Neon Auth user:", email, userId ? `(${userId})` : "(already existed)");
-
-    // 3. Verify email in Neon Auth DB
-    if (userId) {
-      await pool.query(
-        `UPDATE neon_auth.user SET "emailVerified" = true WHERE id = $1`,
-        [userId]
-      );
-      console.log("✓ Email verified in DB");
-    }
-
-    // 4. Get user ID from neon_auth.user by email
-    const neonUser = await pool.query(
-      `SELECT id FROM neon_auth.user WHERE email = $1`,
-      [email]
-    );
-    const neonUserId = neonUser.rows[0]?.id;
-    if (!neonUserId) {
-      console.error("✗ Could not find user in neon_auth.user");
-      process.exit(1);
-    }
-
-    // 5. Insert into admin_users (upsert)
-    const adminResult = await pool.query(`
-      INSERT INTO admin_users (user_id, email, name, role)
-      VALUES ($1, $2, $3, 'brand_admin')
-      ON CONFLICT (email) DO UPDATE SET user_id = EXCLUDED.user_id, name = EXCLUDED.name, role = EXCLUDED.role
-      RETURNING id
-    `, [neonUserId, email, name]);
-    const adminUser = adminResult.rows[0];
-    console.log("✓ Admin user:", email, `(${adminUser.id})`);
-
-    // 6. Link to brand
-    await pool.query(`
-      INSERT INTO admin_user_brands (admin_user_id, brand_id)
-      VALUES ($1, $2)
-      ON CONFLICT DO NOTHING
-    `, [adminUser.id, brand.id]);
-    console.log("✓ Linked to brand:", brand.name);
-
-    console.log(`\n🎉 All set! Log in at http://localhost:4000/login`);
-    console.log(`   Email: ${email}`);
-    console.log(`   Password: ${password}`);
-  } finally {
-    await pool.end();
-  }
-}
-
-main();
\ No newline at end of file
diff --git a/scripts/seed-tuxedo.ts b/scripts/seed-tuxedo.ts
deleted file mode 100644
index ff6ef9b..0000000
--- a/scripts/seed-tuxedo.ts
+++ /dev/null
@@ -1,41 +0,0 @@
-import { config } from "dotenv";
-config({ path: ".env.local" });
-import pg from "pg";
-
-const { Pool } = pg;
-
-const TUXEDO = "64294306-5f42-463d-a5e8-2ad6c81a96de";
-
-async function main() {
-  const pool = new Pool({ connectionString: process.env.DATABASE_URL });
-
-  try {
-    // brand_settings
-    const bs = await pool.query(
-      `INSERT INTO brand_settings (brand_id, legal_business_name, phone, email, logo_url, tagline, from_email)
-       VALUES ($1, $2, $3, $4, $5, $6, $7)
-       ON CONFLICT (brand_id) DO UPDATE SET legal_business_name = EXCLUDED.legal_business_name
-       RETURNING brand_id, legal_business_name`,
-      [TUXEDO, "Tuxedo Corn LLC", "970-555-0100", "info@tuxedocorn.com",
-       "/brand-logos/64294306-5f42-463d-a5e8-2ad6c81a96de/logo.png",
-       "Farm-Fresh Sweet Corn, Delivered", "orders@tuxedocorn.com"]
-    );
-    console.log("brand_settings:", bs.rows[0]);
-
-    // wholesale_settings
-    const ws = await pool.query(
-      `INSERT INTO wholesale_settings (brand_id, require_approval, pickup_location, fob_location, from_email)
-       VALUES ($1, true, $2, $3, $4)
-       ON CONFLICT (brand_id) DO UPDATE SET pickup_location = EXCLUDED.pickup_location
-       RETURNING brand_id, pickup_location`,
-      [TUXEDO, "59751 David Road, Olathe, CO 81425", "FOB Olathe, CO", "orders@tuxedocorn.com"]
-    );
-    console.log("wholesale_settings:", ws.rows[0]);
-
-    console.log("\nDone!");
-  } finally {
-    await pool.end();
-  }
-}
-
-main().catch((e) => { console.error(e.message); process.exit(1); });
diff --git a/scripts/seed.sh b/scripts/seed.sh
deleted file mode 100644
index 25b5219..0000000
--- a/scripts/seed.sh
+++ /dev/null
@@ -1,343 +0,0 @@
-#!/bin/bash
-# Seed script for Route Commerce Platform
-# Run with: bash scripts/seed.sh
-
-set -e
-
-# Use service role key for write operations during seeding
-SUPABASE_URL="${SUPABASE_URL:-https://your-project.supabase.co}"
-SERVICE_KEY="${SUPABASE_SERVICE_ROLE_KEY}"
-ANON_KEY="${ANON_KEY:-$NEXT_PUBLIC_SUPABASE_ANON_KEY}"
-
-AUTH_HEADER="apikey: $SERVICE_KEY"
-CONTENT_TYPE="Content-Type: application/json"
-
-echo "Fetching brands..."
-BRANDS=$(curl -s "$SUPABASE_URL/rest/v1/brands?select=id,name" \
-  -H "$AUTH_HEADER")
-echo "Brands: $BRANDS"
-
-TUXEDO_ID=$(echo "$BRANDS" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-IRD_ID=$(echo "$BRANDS" | grep -o '"id":"[^"]*"' | tail -1 | cut -d'"' -f4)
-
-echo "Tuxedo: $TUXEDO_ID"
-echo "IRD: $IRD_ID"
-
-echo ""
-echo "Creating stops..."
-
-STOP1=$(curl -s -X POST "$SUPABASE_URL/rest/v1/stops" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "brand_id": "'"$TUXEDO_ID"'",
-    "city": "Burlington",
-    "state": "NC",
-    "date": "2026-05-15",
-    "time": "8:00 AM – 2:00 PM",
-    "location": "102 W Front St, Burlington, NC",
-    "slug": "burlington-nc-2026-05-15",
-    "active": true
-  }')
-echo "Stop 1: $STOP1"
-
-STOP2=$(curl -s -X POST "$SUPABASE_URL/rest/v1/stops" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "brand_id": "'"$TUXEDO_ID"'",
-    "city": "Greensboro",
-    "state": "NC",
-    "date": "2026-05-16",
-    "time": "8:00 AM – 2:00 PM",
-    "location": "200 S Elm St, Greensboro, NC",
-    "slug": "greensboro-nc-2026-05-16",
-    "active": true
-  }')
-echo "Stop 2: $STOP2"
-
-STOP3=$(curl -s -X POST "$SUPABASE_URL/rest/v1/stops" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "brand_id": "'"$IRD_ID"'",
-    "city": "Fort Pierce",
-    "state": "FL",
-    "date": "2026-05-15",
-    "time": "7:00 AM – 1:00 PM",
-    "location": "1224 N US-1, Fort Pierce, FL",
-    "slug": "fort-pierce-fl-2026-05-15",
-    "active": true
-  }')
-echo "Stop 3: $STOP3"
-
-echo ""
-echo "Creating products..."
-
-PROD1=$(curl -s -X POST "$SUPABASE_URL/rest/v1/products" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "brand_id": "'"$TUXEDO_ID"'",
-    "name": "Sweet Corn",
-    "description": "Fresh picked white sweet corn, 8 ears per bag",
-    "price": 12,
-    "type": "Sweet Corn",
-    "active": true
-  }')
-echo "Prod 1: $PROD1"
-
-PROD2=$(curl -s -X POST "$SUPABASE_URL/rest/v1/products" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "brand_id": "'"$TUXEDO_ID"'",
-    "name": "Peaches",
-    "description": "Just-peeled freestone peaches, pint jar",
-    "price": 8,
-    "type": "Fruit",
-    "active": true
-  }')
-echo "Prod 2: $PROD2"
-
-PROD3=$(curl -s -X POST "$SUPABASE_URL/rest/v1/products" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "brand_id": "'"$TUXEDO_ID"'",
-    "name": "Corn & Peach Bundle",
-    "description": "Sweet corn + peaches combo, save $2",
-    "price": 18,
-    "type": "Bundle",
-    "active": true
-  }')
-echo "Prod 3: $PROD3"
-
-PROD4=$(curl -s -X POST "$SUPABASE_URL/rest/v1/products" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "brand_id": "'"$IRD_ID"'",
-    "name": "Navel Oranges",
-    "description": "Premium navel oranges, 4 lb bag",
-    "price": 15,
-    "type": "Citrus",
-    "active": true
-  }')
-echo "Prod 4: $PROD4"
-
-PROD5=$(curl -s -X POST "$SUPABASE_URL/rest/v1/products" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "brand_id": "'"$IRD_ID"'",
-    "name": "Grapefruit",
-    "description": "Ruby red grapefruit, 3 lb bag",
-    "price": 12,
-    "type": "Citrus",
-    "active": true
-  }')
-echo "Prod 5: $PROD5"
-
-PROD6=$(curl -s -X POST "$SUPABASE_URL/rest/v1/products" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "brand_id": "'"$IRD_ID"'",
-    "name": "Citrus Sampler",
-    "description": "Oranges, grapefruit & tangelos, 6 lb mix",
-    "price": 22,
-    "type": "Bundle",
-    "active": true
-  }')
-echo "Prod 6: $PROD6"
-
-P1_ID=$(echo "$PROD1" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-P2_ID=$(echo "$PROD2" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-P3_ID=$(echo "$PROD3" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-P4_ID=$(echo "$PROD4" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-P5_ID=$(echo "$PROD5" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-P6_ID=$(echo "$PROD6" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-
-S1_ID=$(echo "$STOP1" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-S2_ID=$(echo "$STOP2" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-S3_ID=$(echo "$STOP3" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-
-echo ""
-echo "Assigning products to stops..."
-
-curl -s -X POST "$SUPABASE_URL/rest/v1/product_stops" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"stop_id": "'"$S1_ID"'", "product_id": "'"$P1_ID"'"}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/product_stops" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"stop_id": "'"$S1_ID"'", "product_id": "'"$P2_ID"'"}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/product_stops" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"stop_id": "'"$S1_ID"'", "product_id": "'"$P3_ID"'"}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/product_stops" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"stop_id": "'"$S2_ID"'", "product_id": "'"$P1_ID"'"}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/product_stops" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"stop_id": "'"$S2_ID"'", "product_id": "'"$P3_ID"'"}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/product_stops" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"stop_id": "'"$S3_ID"'", "product_id": "'"$P4_ID"'"}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/product_stops" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"stop_id": "'"$S3_ID"'", "product_id": "'"$P5_ID"'"}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/product_stops" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"stop_id": "'"$S3_ID"'", "product_id": "'"$P6_ID"'"}' > /dev/null
-
-echo ""
-echo "Creating orders..."
-
-ORDER1=$(curl -s -X POST "$SUPABASE_URL/rest/v1/orders" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "customer_name": "Sarah Mitchell",
-    "customer_email": "sarah.m@email.com",
-    "customer_phone": "(336) 555-0142",
-    "stop_id": "'"$S1_ID"'",
-    "status": "pending",
-    "subtotal": 32,
-    "discount_amount": 0,
-    "pickup_complete": false,
-    "payment_processor": "manual",
-    "payment_status": "paid"
-  }')
-echo "Order 1: $ORDER1"
-
-ORDER2=$(curl -s -X POST "$SUPABASE_URL/rest/v1/orders" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "customer_name": "James Rivera",
-    "customer_email": "jrivera@email.com",
-    "customer_phone": "(336) 555-0298",
-    "stop_id": "'"$S1_ID"'",
-    "status": "confirmed",
-    "subtotal": 22,
-    "discount_amount": 2,
-    "discount_reason": "First-time customer",
-    "pickup_complete": true,
-    "payment_processor": "manual",
-    "payment_status": "paid"
-  }')
-echo "Order 2: $ORDER2"
-
-ORDER3=$(curl -s -X POST "$SUPABASE_URL/rest/v1/orders" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "customer_name": "Lisa Chen",
-    "customer_phone": "(919) 555-0763",
-    "stop_id": "'"$S2_ID"'",
-    "status": "pending",
-    "subtotal": 12,
-    "pickup_complete": false,
-    "payment_processor": "manual",
-    "payment_status": "pending"
-  }')
-echo "Order 3: $ORDER3"
-
-ORDER4=$(curl -s -X POST "$SUPABASE_URL/rest/v1/orders" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "customer_name": "Marcus Thompson",
-    "customer_email": "mthompson@email.com",
-    "customer_phone": "(772) 555-0119",
-    "stop_id": "'"$S3_ID"'",
-    "status": "confirmed",
-    "subtotal": 37,
-    "pickup_complete": false,
-    "payment_processor": "venmo",
-    "payment_status": "paid",
-    "payment_transaction_id": "VEN-88420"
-  }')
-echo "Order 4: $ORDER4"
-
-ORDER5=$(curl -s -X POST "$SUPABASE_URL/rest/v1/orders" \
-  -H "$AUTH_HEADER" \
-  -H "$CONTENT_TYPE" \
-  -H "Prefer: return=representation" \
-  -d '{
-    "customer_name": "Amanda Foster",
-    "customer_email": "afoster@email.com",
-    "stop_id": "'"$S3_ID"'",
-    "status": "cancelled",
-    "subtotal": 15,
-    "pickup_complete": false,
-    "internal_notes": "Customer cancelled after hours, no show next day",
-    "payment_processor": "manual",
-    "payment_status": "refunded",
-    "refunded_amount": 15,
-    "refund_reason": "Customer cancelled"
-  }')
-echo "Order 5: $ORDER5"
-
-O1_ID=$(echo "$ORDER1" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-O2_ID=$(echo "$ORDER2" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-O3_ID=$(echo "$ORDER3" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-O4_ID=$(echo "$ORDER4" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-O5_ID=$(echo "$ORDER5" | grep -o '"id":"[^"]*"' | head -1 | cut -d'"' -f4)
-
-echo ""
-echo "Creating order items..."
-
-curl -s -X POST "$SUPABASE_URL/rest/v1/order_items" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"order_id": "'"$O1_ID"'", "product_id": "'"$P1_ID"'", "quantity": 2, "price": 12}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/order_items" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"order_id": "'"$O1_ID"'", "product_id": "'"$P2_ID"'", "quantity": 1, "price": 8}' > /dev/null
-
-curl -s -X POST "$SUPABASE_URL/rest/v1/order_items" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"order_id": "'"$O2_ID"'", "product_id": "'"$P3_ID"'", "quantity": 1, "price": 18}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/order_items" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"order_id": "'"$O2_ID"'", "product_id": "'"$P1_ID"'", "quantity": 2, "price": 12}' > /dev/null
-
-curl -s -X POST "$SUPABASE_URL/rest/v1/order_items" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"order_id": "'"$O3_ID"'", "product_id": "'"$P1_ID"'", "quantity": 1, "price": 12}' > /dev/null
-
-curl -s -X POST "$SUPABASE_URL/rest/v1/order_items" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"order_id": "'"$O4_ID"'", "product_id": "'"$P4_ID"'", "quantity": 2, "price": 15}' > /dev/null
-curl -s -X POST "$SUPABASE_URL/rest/v1/order_items" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"order_id": "'"$O4_ID"'", "product_id": "'"$P5_ID"'", "quantity": 1, "price": 12}' > /dev/null
-
-curl -s -X POST "$SUPABASE_URL/rest/v1/order_items" \
-  -H "$AUTH_HEADER" -H "$CONTENT_TYPE" \
-  -d '{"order_id": "'"$O5_ID"'", "product_id": "'"$P4_ID"'", "quantity": 1, "price": 15}' > /dev/null
-
-echo ""
-echo "Done! Seed data created:"
-echo "  3 stops (Burlington NC, Greensboro NC, Fort Pierce FL)"
-echo "  6 products (3 Tuxedo Corn, 3 Indian River Direct)"
-echo "  5 orders with items"
-echo ""
-echo "Quick test URLs:"
-echo "  /admin/orders"
-echo "  /admin/products"
-echo "  /admin/stops"
diff --git a/scripts/seed_tuxedo_tour.py b/scripts/seed_tuxedo_tour.py
deleted file mode 100644
index 385f2aa..0000000
--- a/scripts/seed_tuxedo_tour.py
+++ /dev/null
@@ -1,343 +0,0 @@
-#!/usr/bin/env python3
-"""
-seed_tuxedo_tour.py
-
-Parses Tuxedo_Corn_2026_Tour_Schedule-3.xlsx and seeds the `stops` table for
-the Tuxedo brand via the admin_create_stops_batch RPC.
-
-Skips:
-  - Title / subtitle / legend rows (rows 1-3)
-  - Week header rows (col A = "Wk N", col D-J empty)
-  - Cross-Dock / Monday OFF rows (col D contains "OFF" or "Cross-Dock")
-
-Joins with the Stop Directory sheet to enrich each stop with:
-  - address, phone, contact
-
-Usage:
-  python3 scripts/seed_tuxedo_tour.py --dry-run   # show what would be inserted
-  python3 scripts/seed_tuxedo_tour.py            # actually insert
-
-Requires:
-  - supabase CLI linked to project wnzkhezyhnfzhkhiflrp
-"""
-import argparse
-import json
-import re
-import subprocess
-import sys
-from pathlib import Path
-
-from openpyxl import load_workbook
-
-TUXEDO_BRAND_ID = "64294306-5f42-463d-a5e8-2ad6c81a96de"
-YEAR = 2026
-
-MONTH_MAP = {
-    "Jan": "01", "Feb": "02", "Mar": "03", "Apr": "04",
-    "May": "05", "Jun": "06", "Jul": "07", "Aug": "08",
-    "Sep": "09", "Oct": "10", "Nov": "11", "Dec": "12",
-}
-
-DEFAULT_XLSX = "Tuxedo_Corn_2026_Tour_Schedule-3.xlsx"  # run from repo root; override with --xlsx /path/to/file.xlsx
-
-
-def parse_excel_date(s):
-    """'Jul 22' -> '2026-07-22'"""
-    if not s:
-        return None
-    m = re.match(r"^([A-Za-z]{3})\s+(\d{1,2})$", str(s).strip())
-    if not m:
-        return None
-    mm = MONTH_MAP.get(m.group(1))
-    if not mm:
-        return None
-    return f"{YEAR}-{mm}-{int(m.group(2)):02d}"
-
-
-def parse_time_range(s):
-    """'10:00 AM - 1:00 PM' -> '10:00 AM' (start time)"""
-    if not s:
-        return ""
-    cleaned = re.sub(r"[–—]", "-", str(s)).strip()
-    cleaned = re.sub(r"\s+", " ", cleaned)
-    m = re.match(r"^(\d{1,2}:\d{2}\s*[AP]M)", cleaned, re.IGNORECASE)
-    return m.group(1).upper().replace(" ", " ") if m else cleaned
-
-
-def split_city_state(s):
-    """'Cheyenne, WY' -> ('Cheyenne', 'WY')"""
-    if not s:
-        return "", ""
-    parts = [p.strip() for p in str(s).split(",")]
-    if len(parts) == 1:
-        return parts[0], ""
-    return parts[0], parts[1]
-
-
-def slugify(s):
-    s = (s or "").lower()
-    s = re.sub(r"[^a-z0-9]+", "-", s)
-    return s.strip("-")
-
-
-def is_week_header(row):
-    a = str(row[0] or "").strip()
-    d = str(row[3] or "").strip()
-    return re.match(r"^Wk\s", a) and d == ""
-
-
-def is_off_row(row):
-    d = str(row[3] or "").strip()
-    return "OFF" in d or "Cross-Dock" in d or "Cross‑Dock" in d
-
-
-def is_data_row(row):
-    d = str(row[3] or "").strip()
-    e = str(row[4] or "").strip()
-    if not d or not e:
-        return False
-    if "," not in e:
-        return False
-    return True
-
-
-def load(xlsx_path):
-    wb = load_workbook(xlsx_path, data_only=True)
-    schedule = wb["Full Schedule"]
-    directory = wb["Stop Directory"]
-
-    # Build Stop Directory lookup: (truck, host_normalized) -> {address, phone, contact, ...}
-    dir_map = {}
-    for row in directory.iter_rows(min_row=2, values_only=True):
-        truck = str(row[0] or "").strip()
-        city = str(row[1] or "").strip()
-        state = str(row[2] or "").strip()
-        host = str(row[3] or "").strip()
-        address = str(row[4] or "").strip()
-        phone = str(row[5] or "").strip()
-        contact = str(row[6] or "").strip()
-        if not truck or not host:
-            continue
-        key = f"{truck}|{host.lower()}"
-        dir_map[key] = {
-            "city": city, "state": state, "host": host,
-            "address": address, "phone": phone, "contact": contact,
-        }
-
-    # Read Full Schedule (skip first 3 title/subtitle/legend rows)
-    stops = []
-    skipped = {"weekHeader": 0, "off": 0, "invalid": 0}
-    for row in schedule.iter_rows(min_row=4, values_only=True):
-        # Trim to 10 cols
-        cells = [("" if v is None else str(v).strip()) for v in row[:10]]
-        if is_week_header(cells):
-            skipped["weekHeader"] += 1
-            continue
-        if is_off_row(cells):
-            skipped["off"] += 1
-            continue
-        if not is_data_row(cells):
-            skipped["invalid"] += 1
-            continue
-
-        wk, region, date_text, day, city_state, host, time, truck, status, notes = cells
-        date_iso = parse_excel_date(date_text)
-        if not date_iso:
-            skipped["invalid"] += 1
-            continue
-        city, state = split_city_state(city_state)
-        if not city:
-            skipped["invalid"] += 1
-            continue
-
-        # Enrich from directory
-        dir_key = f"{truck}|{host.lower()}"
-        d = dir_map.get(dir_key)
-
-        stops.append({
-            "week": wk,
-            "region": region,
-            "date": date_iso,
-            "day": day,
-            "city": city,
-            "state": state or (d["state"] if d else ""),
-            "location": host,
-            "time": parse_time_range(time),
-            "time_range": time,
-            "truck": truck,
-            "status_text": status,
-            "notes": notes,
-            "address": d["address"] if d and d["address"] else None,
-            "phone": d["phone"] if d and d["phone"] else None,
-            "contact": d["contact"] if d and d["contact"] else None,
-        })
-
-    return stops, skipped, len(dir_map)
-
-
-def assign_slugs(stops, dry_run):
-    used = set()
-    if not dry_run:
-        out = subprocess.run(
-            ["supabase", "db", "query", "--linked",
-             f"SELECT slug FROM stops WHERE brand_id = '{TUXEDO_BRAND_ID}';"],
-            capture_output=True, text=True, timeout=120,
-        )
-        # Parse the table output - slugs are in second column between │
-        for m in re.finditer(r"│\s*([a-z0-9][a-z0-9-]*)\s*│", out.stdout):
-            used.add(m.group(1))
-
-    for s in stops:
-        base = f"{slugify(s['city'])}-{s['date']}"
-        slug = base
-        n = 0
-        while slug in used:
-            n += 1
-            slug = f"{base}-{n}"
-        used.add(slug)
-        s["slug"] = slug
-
-
-def to_rpc_row(s):
-    return {
-        "city": s["city"],
-        "state": s["state"],
-        "location": s["location"],
-        "date": f"{s['date']} 00:00:00+00",
-        "time": s["time"],
-        "address": s["address"],
-        "zip": None,
-        "cutoff_time": None,
-        # active=true so the stops appear on the public storefront immediately.
-        # Matches the behavior of publishStop in src/actions/stops.ts.
-        "active": True,
-    }
-
-
-def build_payload_json(batch):
-    """Build a clean JSON string for use in a SQL file."""
-    return json.dumps(batch, ensure_ascii=False)
-
-
-def insert_batch(batch):
-    """Write SQL to a temp file and execute via --file to avoid shell escaping."""
-    payload_json = build_payload_json(batch)
-    sql = (
-        f"SELECT admin_create_stops_batch("
-        f"'{TUXEDO_BRAND_ID}'::uuid, "
-        f"$${payload_json}$$::jsonb);\n"
-    )
-    # Write to temp file
-    tmp_path = Path("/tmp/seed_tuxedo_tour.sql")
-    tmp_path.write_text(sql, encoding="utf-8")
-    try:
-        proc = subprocess.run(
-            ["supabase", "db", "query", "--linked", "--file", str(tmp_path)],
-            capture_output=True, text=True, timeout=300,
-        )
-    finally:
-        tmp_path.unlink(missing_ok=True)
-    if proc.returncode != 0:
-        raise RuntimeError(f"RPC failed: {proc.stderr[:800]}")
-    return proc.stdout
-
-
-def main():
-    ap = argparse.ArgumentParser()
-    ap.add_argument("--dry-run", action="store_true")
-    ap.add_argument("--xlsx", default=DEFAULT_XLSX)
-    args = ap.parse_args()
-
-    if not Path(args.xlsx).exists():
-        sys.exit(f"XLSX not found: {args.xlsx}")
-
-    stops, skipped, dir_count = load(args.xlsx)
-    assign_slugs(stops, dry_run=args.dry_run)
-
-    print(f"\nParsed {len(stops)} stops "
-          f"(skipped: {skipped['weekHeader']} week-headers, "
-          f"{skipped['off']} OFF days, {skipped['invalid']} invalid)")
-    print(f"Stop Directory: {dir_count} entries loaded for enrichment\n")
-
-    if not stops:
-        sys.exit("No stops to insert.")
-
-    print("Sample (first 3):")
-    for s in stops[:3]:
-        print(f"  {s['date']} {s['time']:10s} | {s['city']:18s}, {s['state']:2s} | "
-              f"{s['location'][:35]:35s} | {s['truck']} | {s['status_text']} | {s['slug']}")
-        if s["notes"]:
-            print(f"    notes:  {s['notes'][:120]}")
-        if s["address"]:
-            print(f"    addr:   {s['address']}  ph: {s['phone']}  ctc: {s['contact']}")
-    print()
-
-    # Show counts by week and region
-    by_week = {}
-    by_region = {}
-    by_truck = {}
-    for s in stops:
-        by_week[s["week"]] = by_week.get(s["week"], 0) + 1
-        by_region[s["region"]] = by_region.get(s["region"], 0) + 1
-        by_truck[s["truck"]] = by_truck.get(s["truck"], 0) + 1
-    print("By week:", dict(sorted(by_week.items())))
-    print("By region:", by_region)
-    print("By truck:", by_truck)
-    print()
-
-    # Date range
-    dates = sorted(s["date"] for s in stops)
-    print(f"Date range: {dates[0]} to {dates[-1]}\n")
-
-    if args.dry_run:
-        batches = (len(stops) + 49) // 50
-        print(f"[DRY RUN] Would insert {len(stops)} stops in {batches} batch(es) of 50.")
-        return
-
-    BATCH = 50
-    total = 0
-    batches = (len(stops) + BATCH - 1) // BATCH
-    for i in range(0, len(stops), BATCH):
-        batch = [to_rpc_row(s) for s in stops[i:i + BATCH]]
-        bnum = i // BATCH + 1
-        sys.stdout.write(f"  Inserting batch {bnum}/{batches} ({len(batch)} stops)... ")
-        sys.stdout.flush()
-        try:
-            insert_batch(batch)
-            total += len(batch)
-            print("OK")
-        except Exception as e:
-            print("FAIL")
-            print(f"    {e}")
-
-    # The batch RPC hardcodes status='draft' on insert. The Tuxedo storefront
-    # page only filters on active=true (not status), so active=true is enough
-    # to make stops visible. But for consistency with the publishStop server
-    # action — which sets both — flip status to 'active' for the rows we just
-    # inserted. Slug-based so we only touch stops from this run, not the
-    # pre-existing "Olathe" test stop.
-    if total > 0:
-        slugs = [s["slug"] for s in stops]
-        # Build a safe IN list (slug is a text column)
-        slug_list = ", ".join(f"'{slug.replace(chr(39), chr(39)+chr(39))}'" for slug in slugs)
-        publish_sql = (
-            f"UPDATE stops SET status = 'active' "
-            f"WHERE brand_id = '{TUXEDO_BRAND_ID}' "
-            f"AND slug IN ({slug_list});"
-        )
-        tmp = Path("/tmp/seed_tuxedo_publish.sql")
-        tmp.write_text(publish_sql, encoding="utf-8")
-        try:
-            subprocess.run(
-                ["supabase", "db", "query", "--linked", "--file", str(tmp)],
-                capture_output=True, text=True, timeout=120,
-            )
-            print(f"\n  Published {total} stops (status -> 'active').")
-        finally:
-            tmp.unlink(missing_ok=True)
-
-    print(f"\nDone. Inserted {total}/{len(stops)} stops for Tuxedo brand.")
-
-
-if __name__ == "__main__":
-    main()
diff --git a/scripts/upload-tuxedo-video.mjs b/scripts/upload-tuxedo-video.mjs
deleted file mode 100644
index 5890e08..0000000
--- a/scripts/upload-tuxedo-video.mjs
+++ /dev/null
@@ -1,74 +0,0 @@
-import { createClient } from "@supabase/supabase-js";
-import { readFileSync } from "fs";
-import { fileURLToPath } from "url";
-import path from "path";
-
-// Load .env.local manually
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const envPath = path.join(__dirname, "..", ".env.local");
-const envContent = readFileSync(envPath, "utf8");
-envContent.split("\n").forEach((line) => {
-  const [key, ...rest] = line.split("=");
-  if (key && rest.length && key.trim() && !key.trim().startsWith("#")) {
-    process.env[key.trim()] = rest.join("=").trim().replace(/^"|"$/g, "");
-  }
-});
-
-const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
-const supabaseServiceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
-
-if (!supabaseUrl || !supabaseServiceKey) {
-  console.error("Missing env vars");
-  process.exit(1);
-}
-
-const supabase = createClient(supabaseUrl, supabaseServiceKey);
-
-async function uploadTuxedoHeroVideo() {
-  const filePath = "/Users/kylemartinez/Downloads/062624TuxedoCorn 001.mp4";
-  const fileBuffer = readFileSync(filePath);
-  const fileSizeMB = (fileBuffer.byteLength / 1024 / 1024).toFixed(2);
-  console.log(`File: ${filePath} (${fileSizeMB} MB)`);
-
-  // Ensure public videos bucket exists
-  const { data: buckets, error: listErr } = await supabase.storage.listBuckets();
-  if (listErr) { console.error("List buckets error:", listErr.message); process.exit(1); }
-
-  const existing = buckets?.find((b) => b.name === "videos");
-  if (!existing) {
-    console.log("Creating 'videos' bucket (public)...");
-    const { error: createErr } = await supabase.storage.createBucket("videos", { public: true });
-    if (createErr) { console.error("Create bucket error:", createErr.message); process.exit(1); }
-    console.log("Bucket 'videos' created.");
-  } else {
-    console.log(`'videos' bucket exists (public: ${existing.public}).`);
-    if (!existing.public) {
-      const { error: updErr } = await supabase.storage.updateBucket("videos", { public: true });
-      if (updErr) console.warn("Could not update bucket to public:", updErr.message);
-      else console.log("Bucket updated to public.");
-    }
-  }
-
-  // Upload
-  console.log("Uploading tuxedo-hero.mp4...");
-  const { data: uploadData, error: uploadErr } = await supabase.storage
-    .from("videos")
-    .upload("tuxedo-hero.mp4", fileBuffer, {
-      contentType: "video/mp4",
-      upsert: true,
-    });
-
-  if (uploadErr) {
-    console.error("Upload error:", uploadErr.message);
-    process.exit(1);
-  }
-
-  console.log("Upload OK:", JSON.stringify(uploadData));
-
-  // Public URL
-  const { data: urlData } = supabase.storage.from("videos").getPublicUrl("tuxedo-hero.mp4");
-  const url = urlData.publicUrl;
-  console.log(`\n✅ Public URL:\n${url}`);
-}
-
-uploadTuxedoHeroVideo().catch((e) => { console.error(e); process.exit(1); });
\ No newline at end of file
diff --git a/scripts/verify-email.ts b/scripts/verify-email.ts
deleted file mode 100644
index 70ce471..0000000
--- a/scripts/verify-email.ts
+++ /dev/null
@@ -1,11 +0,0 @@
-import { config } from "dotenv";
-config({ path: ".env.local" });
-import pg from "pg";
-const { Pool } = pg;
-async function main() {
-  const pool = new Pool({ connectionString: process.env.DATABASE_URL });
-  const r = await pool.query(`SELECT id, email, "emailVerified" FROM neon_auth.user WHERE email = 'admin@test.com'`);
-  console.log(JSON.stringify(r.rows, null, 2));
-  await pool.end();
-}
-main();
\ No newline at end of file
diff --git a/scripts/verify-stop-fns.js b/scripts/verify-stop-fns.js
deleted file mode 100644
index dec50d9..0000000
--- a/scripts/verify-stop-fns.js
+++ /dev/null
@@ -1,132 +0,0 @@
-#!/usr/bin/env node
-/**
- * verify-stop-fns.js
- *
- * Confirms `admin_create_stop` and `admin_create_stops_batch` exist in the
- * live database with the exact signatures the client uses, and that the
- * PostgREST schema cache has them registered.
- *
- * Run:  node scripts/verify-stop-fns.js
- *
- * Replaces the older `check-stop-fns*.js` scripts (left in the repo for
- * history; this one is the canonical post-fix verification).
- *
- * Exits 0 on success, 1 if any check fails.
- */
-
-require("dotenv").config({ path: require("path").resolve(__dirname, "../.env.local") });
-
-const url = process.env.NEXT_PUBLIC_SUPABASE_URL;
-const serviceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
-const anonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
-
-if (!url || !serviceKey || !anonKey) {
-  console.error("Missing NEXT_PUBLIC_SUPABASE_URL / SUPABASE_SERVICE_ROLE_KEY / NEXT_PUBLIC_SUPABASE_ANON_KEY in .env.local");
-  process.exit(1);
-}
-
-const SERVICE_HEADERS = {
-  apikey: serviceKey,
-  Authorization: `Bearer ${serviceKey}`,
-  "Content-Type": "application/json",
-};
-
-const ANON_HEADERS = {
-  apikey: anonKey,
-  Authorization: `Bearer ${anonKey}`,
-  "Content-Type": "application/json",
-};
-
-let failed = 0;
-const fail = (msg) => { console.error("✗ " + msg); failed += 1; };
-const pass = (msg) => console.log("✓ " + msg);
-
-async function rpc(name, body, headers = SERVICE_HEADERS) {
-  const r = await fetch(`${url}/rest/v1/rpc/${name}`, {
-    method: "POST",
-    headers,
-    body: JSON.stringify(body),
-  });
-  const text = await r.text();
-  let parsed;
-  try { parsed = JSON.parse(text); } catch { parsed = text.slice(0, 200); }
-  return { status: r.status, body: parsed };
-}
-
-(async () => {
-  console.log(`\nVerifying stop RPCs against ${url}\n`);
-
-  // ── 1. admin_create_stop — empty body (expect 400/422, NOT PGRST202) ─────
-  // PGRST202 = function not in schema cache. We want a 400-style validation
-  // error here, which proves PostgREST knows the function exists.
-  console.log("1. admin_create_stop signature check (PostgREST cache)");
-  const probe1 = await rpc("admin_create_stop", {});
-  if (probe1.status === 404) {
-    fail("admin_create_stop returned 404 — function not found (PGRST202 cache miss). " +
-         "Did you apply migration 147 and run `NOTIFY pgrst, 'reload schema'`?");
-  } else if (probe1.status >= 500) {
-    fail(`admin_create_stop returned ${probe1.status} — server error. Body: ${JSON.stringify(probe1.body)}`);
-  } else {
-    pass(`admin_create_stop reachable in PostgREST (status ${probe1.status})`);
-  }
-
-  // ── 2. admin_create_stop — happy path with a real (but harmless) brand ──
-  console.log("\n2. admin_create_stop happy-path call (anon key)");
-  const probe2 = await rpc(
-    "admin_create_stop",
-    {
-      p_brand_id: "00000000-0000-0000-0000-000000000000",
-      p_city: "verify-script-city",
-      p_state: "CO",
-      p_location: "verification stop",
-      p_date: "2099-12-31",
-      p_time: "08:00 AM – 02:00 PM",
-      p_address: "123 Verify St",
-      p_zip: "80000",
-      p_cutoff_time: "08:00",        // time-only — should be combined with date
-      p_active: false,
-    },
-    ANON_HEADERS
-  );
-  if (probe2.status === 404) {
-    fail("admin_create_stop not callable via anon key. " +
-         "GRANT EXECUTE missing? Body: " + JSON.stringify(probe2.body));
-  } else if (probe2.status >= 400) {
-    // Expected: brand_id is the zero UUID (foreign key violation). That's fine —
-    // it proves the function executed past type validation.
-    const msg = JSON.stringify(probe2.body);
-    if (/foreign key|violates/i.test(msg)) {
-      pass(`admin_create_stop ran end-to-end (got expected FK violation: ${msg.slice(0, 120)}...)`);
-    } else {
-      fail(`admin_create_stop failed unexpectedly (${probe2.status}): ${msg}`);
-    }
-  } else {
-    pass(`admin_create_stop returned success: ${JSON.stringify(probe2.body)}`);
-  }
-
-  // ── 3. admin_create_stops_batch — same checks ───────────────────────────
-  console.log("\n3. admin_create_stops_batch signature check");
-  const probe3 = await rpc("admin_create_stops_batch", { p_brand_id: null, p_stops: [] });
-  if (probe3.status === 404) {
-    fail("admin_create_stops_batch returned 404 — function not in schema cache.");
-  } else {
-    pass(`admin_create_stops_batch reachable (status ${probe3.status})`);
-  }
-
-  // ── 4. OpenAPI introspection — confirm functions are exposed ────────────
-  console.log("\n4. OpenAPI introspection");
-  const openApi = await fetch(`${url}/rest/v1/`, { headers: ANON_HEADERS });
-  const text = await openApi.text();
-  const hasSingle = /admin_create_stop\b/.test(text);
-  const hasBatch = /admin_create_stops_batch\b/.test(text);
-  if (hasSingle) pass("admin_create_stop appears in OpenAPI spec");
-  else fail("admin_create_stop NOT in OpenAPI spec — PostgREST hasn't seen it yet");
-  if (hasBatch) pass("admin_create_stops_batch appears in OpenAPI spec");
-  else fail("admin_create_stops_batch NOT in OpenAPI spec");
-
-  console.log(`\n${failed === 0 ? "✓ All checks passed" : `✗ ${failed} check(s) failed`}\n`);
-  process.exit(failed === 0 ? 0 : 1);
-})().catch((e) => {
-  console.error("verify-stop-fns.js crashed:", e);
-  process.exit(1);
-});
diff --git a/src/actions/admin/users.ts b/src/actions/admin/users.ts
index e9dea04..578fef3 100644
--- a/src/actions/admin/users.ts
+++ b/src/actions/admin/users.ts
@@ -273,7 +273,7 @@ export async function createAdminUser(
       // admin endpoint requires the caller to have role='admin' in
       // Neon Auth, which is not always true (provision-admin.ts does
       // not set it). Falling back to sign-up is a safe, well-tested
-      // path — see scripts/seed-admin.ts.
+      // path.
       const code = adminResult.error.code ?? "";
       const isAuthRequired =
         code === "FAILED_TO_CREATE_USER" ||