openclaw
916ad39176
Deploy to route.crispygoat.com / deploy (push) Failing after 3m1s
- Add MinIO/S3-compatible storage client (src/lib/storage.ts) with uploadObject, deleteObject, presigned URL helpers, and BUCKETS constant - Wire product images, brand logos, and water log photos to MinIO via the new storage client - Migrate forgot-password to Neon Auth (remove Supabase /auth/v1/recover call) - Migrate send-scheduled cron to direct Postgres + Resend (remove Supabase Edge Function proxy) - Add logoUrl to email types (OrderReceipt, Welcome, PasswordReset) and pass brand_settings.logo_url from all call sites - Update email templates to use dynamic logoUrl instead of hardcoded Supabase bucket URLs - Remove hardcoded Supabase URLs from TuxedoVideoHero, TuxedoAboutPage, TimeTrackingFieldClient; use brand_settings props + local public/ fallback - Download brand logos (3) and tuxedo-hero.mp4 (36MB) from Supabase bucket to public/ for local development - Add MinIO env vars to .env.example (endpoint, access key, secret, buckets) - Fix TimeTrackingFieldClient to destructure logoUrl and brandAccent props - Fix admin/users.ts logoUrl type (null → undefined for optional string) - Remove stale sb- cookie from wholesale-auth - Migrate tuxedo/about page to remove supabase import and use pool query for wholesale_settings lookup
20 lines
920 B
SQL
20 lines
920 B
SQL
-- Migration 204: Add permissive read policy for locations
|
|
--
|
|
-- Why: The admin Stops & Routes page reads stops via the Supabase JS client
|
|
-- (anon key + RLS). The `stops` table has a `Public read stops` policy with
|
|
-- qual=true, which lets the anon role see all non-deleted stops — that's how
|
|
-- the page works in dev mode (no Supabase auth). The admin_locations tab needs
|
|
-- the same behavior so the server component can use the same pattern:
|
|
-- supabase.from("locations").select(...)
|
|
--
|
|
-- Brand scoping is enforced at the application layer in the server component
|
|
-- (eq("brand_id", adminUser.brand_id)), matching how stops are scoped.
|
|
--
|
|
-- Brand-scoped public reads (storefront pages) go through get_locations_for_brand
|
|
-- RPC, which filters active=true.
|
|
|
|
DROP POLICY IF EXISTS "Public read locations" ON public.locations;
|
|
CREATE POLICY "Public read locations" ON public.locations
|
|
FOR SELECT
|
|
USING (true);
|