Site-wide auth + /studio hub + wallet connect + super user
Sire said "We'll use Supabase. Start with auth." Phase 1 is the wholesale swap of the magic-link layer from custom HMAC + Vercel Blob session cookies to Supabase Auth + Resend-branded emails, plus the new public Sign in surface, plus the /studio hub becoming the auth-aware home for logged-in users. Wallet panel + super-user / admin pills live in /studio above the seven personas. Phase 2 (queued) moves site records + chat messages to Postgres with RLS.
- ✓ /api/site/auth/{login,confirm,logout} — Supabase admin.generateLink + verifyOtp, custom Resend email (commit ee7c3a7)
- ✓ /api/auth/{login,callback,logout} — site-wide email magic-link sign in (commit 7fa0946)
- ✓ /signin page + Header Sign in pill (logged out) / You pill → /studio (logged in)
- ✓ /studio is now async + reads Supabase session → MeBlock above the org chart (commit 817598c)
- ✓ /account redirects to /studio — no duplicate hub
- ✓ Wallet panel in /studio: injected + Coinbase connector, auto-links address to user_metadata, live $CHAPPIE + ETH balance tiles
- ✓ Super User pill for rob@fastwebwork.com + /website $99 launch-fee bypass (commit 8445ec1)
- ✓ Admin pill for ADMIN_EMAILS — studio inbox / queue / finance / debates shortcuts
- ✓ Resend allowlist + Site URL config noted in SUPABASE_SETUP.md
- ✓ MeBlock visual polish — KPI tile row (Account · Role · Wallet) + responsive card grid matching org-chart aesthetic
- ✓ X (Twitter) OAuth live — Supabase provider configured + NEXT_PUBLIC_X_AUTH_ENABLED flipped on 2026-06-02
- Parked: Farcaster sign-in — Supabase has no native SIWF provider, integration is a 2–3 day custom build; revisit post-Multica/Paperclip
- Per-user "Your projects" listing on /studio — needs Phase 2 (Postgres sites + messages with RLS)
- Admin-bypass "Create a site without intake" form in /studio admin tools
