Delete SQLite Local DB runtime debt and use connection-only startup wording - PR_26167_184-delete-sqlite-local-db-runtime-debt

Author: ToolboxAid

.env.example

@@ -1,14 +1,14 @@
 # Game Foundry Studio local development environment
 
-# Supabase Auth and Supabase Postgres are the DEV auth/product data path.
-# Missing Supabase configuration reports diagnostics instead of falling back.
+# Configure the local API account and product-data connections here.
+# Missing connection configuration reports diagnostics instead of falling back.
 
-# Supabase DEV browser-safe configuration.
+# Browser-safe account connection configuration.
 # Leave values empty in this example; local values belong in .env.local.
 GAMEFOUNDRY_SUPABASE_URL=
 GAMEFOUNDRY_SUPABASE_ANON_KEY=
 
-# Supabase DEV server-only configuration.
+# Server-only product-data and account administration connection configuration.
 # Do not expose these values to browser JavaScript, HTML, reports, or screenshots.
 GAMEFOUNDRY_SUPABASE_SERVICE_ROLE_KEY=
 GAMEFOUNDRY_SUPABASE_DATABASE_URL=

docs_build/dev/codex_commands.md

@@ -2072,3 +2072,48 @@ Required reports:
 
 Packaging:
 - `tmp/PR_26167_183-single-service-contract-validation_delta.zip`
+
+
+## PR_26167_184-delete-sqlite-local-db-runtime-debt
+
+Changes:
+- Read `docs_build/dev/PROJECT_INSTRUCTIONS.md`.
+- Verified the current branch is `main`.
+- Removed active SQLite/Local DB adapter code from `src/dev-runtime/server/local-api-router.mjs`.
+- Replaced active `/api/local-db`, `/api/mock-db`, setup reseed, and mock-db-state mutations with visible deprecated endpoint responses.
+- Added `/api/product-data/snapshot` for server product-data snapshots.
+- Removed local API startup provider-selector env writes and switched startup output to configured connection wording.
+- Removed provider selector env reads from the auth/provider contract snapshot.
+- Updated `.env.example` to describe configured account/product-data connections.
+- Updated browser-env validation, targeted API tests, and account Playwright setup for the single connection path.
+
+Validation:
+- `node --check scripts/start-local-api-server.mjs`
+- `node --check src/dev-runtime/server/local-api-router.mjs`
+- `node --check src/dev-runtime/auth/provider-contract-stubs.mjs`
+- `node --check scripts/validate-browser-env-agnostic.mjs`
+- `node --check tests/dev-runtime/SupabaseProductDataCutover.test.mjs`
+- `node --check tests/dev-runtime/SupabaseProviderContractStub.test.mjs`
+- `node --check tests/helpers/playwrightRepoServer.mjs`
+- `node --check tests/playwright/account/SupabaseSignInSession.spec.mjs`
+- `node --test tests/dev-runtime/SupabaseProductDataCutover.test.mjs`
+- `node --test --test-name-pattern "provider contract does not require|Supabase stubs fail visibly|Fixed Supabase providers keep diagnostics|Missing Supabase config fails safely|selected path reads users|Unsupported provider selector" tests/dev-runtime/SupabaseProviderContractStub.test.mjs`
+- Initial full-file `node --test tests/dev-runtime/SupabaseProviderContractStub.test.mjs` attempt timed out; the PR-impacted subset passed.
+- `npm run validate:supabase-dev`
+- `npm run dev:local-api` startup capture passed; output had connection status lines and no SQLite/provider-selection wording.
+- `npm run validate:browser-env-agnostic`
+- `npx playwright test tests/playwright/account/SupabaseSignInSession.spec.mjs --config=playwright.config.cjs`
+- `npx playwright test tests/playwright/tools/StaticOnlyLoginApiRequired.spec.mjs --config=playwright.config.cjs`
+- `npm run test:workspace-v2` passed. Command name is legacy and user-facing language is Project Workspace.
+- Full samples smoke skipped because samples were not in scope.
+
+Required reports:
+- `docs_build/dev/reports/PR_26167_184-delete-sqlite-local-db-runtime-debt.md`
+- `docs_build/dev/reports/environment_agnostic_browser_gate_report.md`
+- `docs_build/dev/reports/playwright_v8_coverage_report.txt`
+- `docs_build/dev/reports/coverage_changed_js_guardrail.txt`
+- `docs_build/dev/reports/codex_changed_files.txt`
+- `docs_build/dev/reports/codex_review.diff`
+
+Packaging:
+- `tmp/PR_26167_184-delete-sqlite-local-db-runtime-debt_delta.zip`

docs_build/dev/commit_comment.txt

@@ -1 +1 @@
-Validate single service contract paths - PR_26167_183-single-service-contract-validation
+Delete SQLite/Local DB runtime debt - PR_26167_184-delete-sqlite-local-db-runtime-debt

docs_build/dev/reports/PR_26167_184-delete-sqlite-local-db-runtime-debt.md

@@ -0,0 +1,71 @@
+# PR_26167_184-delete-sqlite-local-db-runtime-debt
+
+## Summary
+
+Removed active SQLite/Local DB runtime debt from the local API startup/router path. The local API no longer imports or opens `node:sqlite`, no longer sets or reads provider-selection environment variables, and now reports configured account/product-data connections at startup.
+
+Legacy `/api/local-db`, `/api/mock-db`, `/api/admin/setup/reseed`, and `/api/dev/testing/mock-db-state` paths now fail visibly with `410` deprecated endpoint responses. Product data snapshots use `/api/product-data/snapshot`.
+
+## Branch Validation
+
+PASS
+
+- Current branch: `main`
+- Expected branch: `main`
+- `docs_build/dev/PROJECT_INSTRUCTIONS.md` was read before execution.
+
+## Requirement Checklist
+
+- PASS - Removed active SQLite runtime code from `src/dev-runtime/server/local-api-router.mjs`; no `node:sqlite`, `DatabaseSync`, `createRequire`, or `LocalDbAdapter` remains there.
+- PASS - `/api/local-db` and `/api/mock-db` no longer serve active data routes; they return visible `410` deprecated endpoint responses.
+- PASS - `/api/admin/setup/reseed` and `/api/dev/testing/mock-db-state` no longer mutate Local DB/mock DB state; they return visible `410` deprecated endpoint responses.
+- PASS - Product data snapshot access moved to `/api/product-data/snapshot`.
+- PASS - `scripts/start-local-api-server.mjs` no longer sets `GAMEFOUNDRY_AUTH_PROVIDER` or `GAMEFOUNDRY_DB_PROVIDER`.
+- PASS - Runtime contract creation no longer reads provider selector environment variables.
+- PASS - Startup output uses account/product-data connection wording.
+- PASS - `.env.example` describes configured connections, not DEV providers.
+- PASS - Account browser/page scan found no DEV/UAT/PROD/Local/SQLite/Supabase/provider implementation wording in affected account files.
+- PASS - No silent fallback was added; missing configuration and deprecated endpoints fail visibly.
+- PASS - No UAT/PROD resources were touched.
+- PASS - No secrets or `.env.local` content were committed.
+
+## Validation Lane Report
+
+- PASS - `node --check scripts/start-local-api-server.mjs`
+- PASS - `node --check src/dev-runtime/server/local-api-router.mjs`
+- PASS - `node --check src/dev-runtime/auth/provider-contract-stubs.mjs`
+- PASS - `node --check scripts/validate-browser-env-agnostic.mjs`
+- PASS - `node --check tests/dev-runtime/SupabaseProductDataCutover.test.mjs`
+- PASS - `node --check tests/dev-runtime/SupabaseProviderContractStub.test.mjs`
+- PASS - `node --check tests/helpers/playwrightRepoServer.mjs`
+- PASS - `node --check tests/playwright/account/SupabaseSignInSession.spec.mjs`
+- PASS - `node --test tests/dev-runtime/SupabaseProductDataCutover.test.mjs`
+- PASS - `node --test --test-name-pattern "provider contract does not require|Supabase stubs fail visibly|Fixed Supabase providers keep diagnostics|Missing Supabase config fails safely|selected path reads users|Unsupported provider selector" tests/dev-runtime/SupabaseProviderContractStub.test.mjs`
+- WARN - Initial full-file `node --test tests/dev-runtime/SupabaseProviderContractStub.test.mjs` attempt timed out; reran the PR-impacted auth/API subset above and it passed.
+- PASS - `npm run validate:supabase-dev`; direct PostgreSQL TLS remains an advisory DEV warning while REST/API identity checks passed.
+- PASS - `npm run dev:local-api` startup capture confirmed no SQLite warning, no Local DB provider selection, no selector env output, and connection status lines were present.
+- PASS - `npm run validate:browser-env-agnostic`
+- PASS - `npx playwright test tests/playwright/account/SupabaseSignInSession.spec.mjs --config=playwright.config.cjs`
+- PASS - `npx playwright test tests/playwright/tools/StaticOnlyLoginApiRequired.spec.mjs --config=playwright.config.cjs`
+- PASS - `npm run test:workspace-v2` passed, 5 tests. Command name is legacy; user-facing language is Project Workspace.
+- SKIP - Full samples smoke was not run because samples were not in scope.
+
+## Manual Validation Notes
+
+- Confirmed `npm run dev:local-api` printed only connection status:
+  - `Local API account connection: configured.`
+  - `Local API product data connection: configured.`
+- Confirmed startup output did not contain `SQLite`, `GAMEFOUNDRY_AUTH_PROVIDER`, `GAMEFOUNDRY_DB_PROVIDER`, `auth provider`, or `product data provider`.
+- Confirmed static route audit found no selector env variables or SQLite startup/opening symbols in the local API router, startup script, auth contract stub, or `.env.example`.
+- Confirmed `/api/local-db` and `/api/mock-db` are present only as deprecated endpoint guards returning `410`.
+
+## Test Data Cleanup
+
+No persistent Supabase validation records were created for this PR. Playwright auth validation used an in-memory fake Supabase server and closed it after validation.
+
+## Playwright V8 Coverage
+
+Generated `docs_build/dev/reports/playwright_v8_coverage_report.txt` and `docs_build/dev/reports/coverage_changed_js_guardrail.txt`.
+
+- WARN - Changed server-side runtime JS files are not collected by browser V8 coverage; advisory only.
+- WARN - Coverage guardrail lists missing changed runtime JS coverage as advisory WARN, not FAIL.

docs_build/dev/reports/codex_changed_files.txt

@@ -42,65 +42,57 @@ M .env.example
  M src/dev-runtime/server/local-api-router.mjs
  M tests/dev-runtime/SupabaseProductDataCutover.test.mjs
  M tests/dev-runtime/SupabaseProviderContractStub.test.mjs
- M tests/playwright/tools/RootToolsFutureState.spec.mjs
- M toolbox/ai-assistant/index.html
- M toolbox/assets/assets.js
-?? docs_build/dev/reports/PR_26167_180-remove-sqlite-runtime-provider.md
-?? docs_build/dev/reports/PR_26167_181-supabase-postgres-single-product-data-path.md
-?? docs_build/dev/reports/PR_26167_182-remove-provider-selection-runtime.md
-?? docs_build/dev/reports/PR_26167_183-single-service-contract-validation.md
+ M tests/helpers/playwrightRepoServer.mjs
+ M tests/playwright/account/SupabaseSignInSession.spec.mjs
+?? docs_build/dev/reports/PR_26167_184-delete-sqlite-local-db-runtime-debt.md
 
 # git ls-files --others --exclude-standard
-docs_build/dev/reports/PR_26167_180-remove-sqlite-runtime-provider.md
-docs_build/dev/reports/PR_26167_181-supabase-postgres-single-product-data-path.md
-docs_build/dev/reports/PR_26167_182-remove-provider-selection-runtime.md
-docs_build/dev/reports/PR_26167_183-single-service-contract-validation.md
+docs_build/dev/reports/PR_26167_184-delete-sqlite-local-db-runtime-debt.md
 
 # git diff --stat
-.env.example                                       |      6 +-
- docs_build/dev/codex_commands.md                   |    143 +
+.env.example                                       |      8 +-
+ docs_build/dev/codex_commands.md                   |     45 +
  docs_build/dev/commit_comment.txt                  |      2 +-
- docs_build/dev/reports/codex_changed_files.txt     |    110 +-
- docs_build/dev/reports/codex_review.diff           | 109426 ++++++++++++++----
- .../dev/reports/coverage_changed_js_guardrail.txt  |     16 +-
+ docs_build/dev/reports/codex_changed_files.txt     |    108 +-
+ docs_build/dev/reports/codex_review.diff           | 114544 +-----------------
+ .../dev/reports/coverage_changed_js_guardrail.txt  |      4 -
  docs_build/dev/reports/dependency_gating_report.md |      2 +-
- .../reports/dependency_hydration_reuse_report.md   |      4 +-
- .../environment_agnostic_browser_gate_report.md    |     22 +-
- .../dev/reports/execution_graph_reuse_report.md    |      4 +-
+ .../reports/dependency_hydration_reuse_report.md   |     12 +-
+ .../environment_agnostic_browser_gate_report.md    |      1 -
+ .../dev/reports/execution_graph_reuse_report.md    |     16 +-
  .../dev/reports/failure_fingerprint_report.md      |      2 +-
  .../reports/filesystem_scan_reduction_report.md    |      2 +-
- .../dev/reports/incremental_validation_report.md   |      2 +-
+ .../dev/reports/incremental_validation_report.md   |     14 +-
  docs_build/dev/reports/lane_compilation_report.md  |      2 +-
  .../dev/reports/lane_deduplication_report.md       |      2 +-
  .../dev/reports/lane_input_validation_report.md    |      2 +-
  .../reports/lane_manifests/workspace-contract.json |     12 +-
- .../reports/lane_runtime_optimization_report.md    |      2 +-
- docs_build/dev/reports/lane_snapshot_report.md     |      4 +-
- .../reports/lane_snapshots/workspace-contract.json |     24 +-
- docs_build/dev/reports/lane_warm_start_report.md   |      4 +-
- .../lane_warm_starts/workspace-contract.json       |     16 +-
+ .../reports/lane_runtime_optimization_report.md    |     14 +-
+ docs_build/dev/reports/lane_snapshot_report.md     |     12 +-
+ .../reports/lane_snapshots/workspace-contract.json |     30 +-
+ docs_build/dev/reports/lane_warm_start_report.md   |     12 +-
+ .../lane_warm_starts/workspace-contract.json       |     20 +-
  .../dev/reports/monolith_trigger_removal_report.md |      2 +-
- .../dev/reports/persistent_lane_manifest_report.md |      6 +-
+ .../dev/reports/persistent_lane_manifest_report.md |     12 +-
  .../playwright_discovery_ownership_report.md       |      2 +-
  .../reports/playwright_discovery_scope_report.md   |      2 +-
  .../dev/reports/playwright_structure_audit.md      |      2 +-
- .../dev/reports/playwright_v8_coverage_report.txt  |     68 +-
+ .../dev/reports/playwright_v8_coverage_report.txt  |      9 +-
  docs_build/dev/reports/retry_suppression_report.md |      2 +-
- docs_build/dev/reports/slow_path_pruning_report.md |     14 +-
- docs_build/dev/reports/static_validation_report.md |      4 +-
- .../dev/reports/targeted_file_manifest_report.md   |      4 +-
- .../dev/reports/test_cleanup_performance_report.md |     16 +-
+ docs_build/dev/reports/slow_path_pruning_report.md |     18 +-
+ docs_build/dev/reports/static_validation_report.md |     12 +-
+ .../dev/reports/targeted_file_manifest_report.md   |      8 +-
+ .../dev/reports/test_cleanup_performance_report.md |     24 +-
  .../dev/reports/test_cleanup_routing_report.md     |      2 +-
- .../dev/reports/testing_lane_execution_report.md   |     18 +-
+ .../dev/reports/testing_lane_execution_report.md   |     54 +-
  docs_build/dev/reports/validation_cache_report.md  |     30 +-
- .../dev/reports/zero_browser_preflight_report.md   |      2 +-
- scripts/start-local-api-server.mjs                 |     31 +-
- scripts/validate-browser-env-agnostic.mjs          |    249 +-
- src/dev-runtime/auth/provider-contract-stubs.mjs   |    255 +-
- src/dev-runtime/server/local-api-router.mjs        |    466 +-
- .../SupabaseProductDataCutover.test.mjs            |     21 +
- .../SupabaseProviderContractStub.test.mjs          |    269 +-
- .../playwright/tools/RootToolsFutureState.spec.mjs |    170 +-
- toolbox/ai-assistant/index.html                    |      8 +-
- toolbox/assets/assets.js                           |      2 +-
- 46 files changed, 85328 insertions(+), 26126 deletions(-)
+ .../dev/reports/zero_browser_preflight_report.md   |     10 +-
+ scripts/start-local-api-server.mjs                 |     42 +-
+ scripts/validate-browser-env-agnostic.mjs          |     11 +-
+ src/dev-runtime/auth/provider-contract-stubs.mjs   |     45 +-
+ src/dev-runtime/server/local-api-router.mjs        |    494 +-
+ .../SupabaseProductDataCutover.test.mjs            |     29 +-
+ .../SupabaseProviderContractStub.test.mjs          |     95 +-
+ tests/helpers/playwrightRepoServer.mjs             |     37 -
+ .../account/SupabaseSignInSession.spec.mjs         |      4 -
+ 45 files changed, 2180 insertions(+), 113632 deletions(-)