From bbb46754ddfccd8d584a786a159ab8d109de41ff Mon Sep 17 00:00:00 2001
From: gaboesquivel <contact@gaboesquivel.com>
Date: Mon, 23 Mar 2026 02:28:09 +0000
Subject: [PATCH 1/4] chore: update supabase config, docs, deps, and security
 overrides

---
 apps/api/README.md                           |   8 +-
 apps/api/supabase/config.toml                |   8 +-
 apps/docu/content/docs/adrs/008-database.mdx |  10 +
 package.json                                 |   7 +
 pnpm-lock.yaml                               | 225 +++++++------------
 5 files changed, 104 insertions(+), 154 deletions(-)

diff --git a/apps/api/README.md b/apps/api/README.md
index 4ac4ec82..bb531c29 100644
--- a/apps/api/README.md
+++ b/apps/api/README.md
@@ -6,6 +6,8 @@ Type-safe REST API built with Fastify & OpenAPI. Routes in `src/routes/` are the
 
 Copy [`.env.defaults.example`](.env.defaults.example) to `.env` and set values (gitignored). Start database first (`pnpm db:start`), then `pnpm dev`. Uses Supabase CLI for PostgreSQL, or `PGLITE=true` for in-memory. Dev server at [http://localhost:3000](http://localhost:3000).
 
+**Switching project_id:** If you change `project_id` in `supabase/config.toml` (e.g. after a rebrand), run `pnpm db:stop` before `pnpm db:start`—only one Supabase instance runs per host.
+
 ## Vercel
 
 Uses `framework: "fastify"` in vercel.json. Vercel auto-detects `server.ts` as the entrypoint. PostgreSQL migrations run at build time; PGLite migrations run at runtime.
@@ -30,9 +32,9 @@ Copy `.env.test.example` to `.env.test` (gitignored) for unit tests. Vitest load
 - `pnpm test:e2e:debug` — Debug E2E tests
 - `pnpm checktypes` — Type-check
 - `pnpm db:start` — Start Supabase (local)
-- `pnpm db:stop` — Stop Supabase
-- `pnpm db:reset` — Reset Supabase database (recreates from scratch)
-- `pnpm db:reset-and-migrate` — Reset DB then run Drizzle migrations
+- `pnpm db:stop` — Stop Supabase (run before switching to another project’s Supabase)
+- `pnpm db:reset` — Reset Supabase database (drops and recreates; no Supabase seed.sql)
+- `pnpm db:reset-and-migrate` — Reset DB, then run Drizzle migrations. Seeding via Drizzle (no Supabase seed.sql)
 - `pnpm db:migrate` — Run migrations (skips when PGLITE=true; use `RUN_PG_MIGRATE=true` to force PostgreSQL)
 - `pnpm db:generate` — Generate migrations from schema
 - `pnpm db:push` — Push schema (dev only)
diff --git a/apps/api/supabase/config.toml b/apps/api/supabase/config.toml
index 18069ef7..87c3f4c8 100644
--- a/apps/api/supabase/config.toml
+++ b/apps/api/supabase/config.toml
@@ -2,7 +2,7 @@
 # https://supabase.com/docs/guides/local-development/cli/config
 # A string used to distinguish different Supabase projects on the same host. Defaults to the
 # working directory name when running `supabase init`.
-project_id = "basilic-fastify"
+project_id = "basilic-api"
 
 [api]
 enabled = true
@@ -59,10 +59,8 @@ schema_paths = []
 
 [db.seed]
 # If enabled, seeds the database after migrations during a db reset.
-enabled = true
-# Specifies an ordered list of seed files to load during db reset.
-# Supports glob patterns relative to supabase directory: "./seeds/*.sql"
-sql_paths = ["./seed.sql"]
+# Disabled — seeding via Drizzle (db:reset-and-migrate, seed script)
+enabled = false
 
 [db.network_restrictions]
 # Enable management of network restrictions.
diff --git a/apps/docu/content/docs/adrs/008-database.mdx b/apps/docu/content/docs/adrs/008-database.mdx
index a1e608c1..a9b8b1d2 100644
--- a/apps/docu/content/docs/adrs/008-database.mdx
+++ b/apps/docu/content/docs/adrs/008-database.mdx
@@ -192,6 +192,16 @@ All platforms use the same build command pattern:
 - **Railway/Fly.io/Render**: `build: pnpm build` (runs migrations)
 - **Local dev**: PostgreSQL migrations run at build time (via `pnpm dev` → `pnpm db:migrate`), PGLite migrations run at runtime
 
+### Local database reset (Supabase + Drizzle)
+
+For local Postgres via Supabase CLI (`project_id: basilic-api` in `apps/api/supabase/config.toml`):
+
+1. **`pnpm db:reset`** — Drops and recreates the Supabase database. Supabase seeds are disabled; no `seed.sql` is used.
+2. **`pnpm db:reset-and-migrate`** — Reset, then run Drizzle migrations. Use this for a fresh schema.
+3. **Seeding** — Via Drizzle (seed script if configured), not Supabase `seed.sql`.
+
+Run `pnpm db:stop` before switching to another project's Supabase instance (e.g. different repo); only one Supabase runs per host.
+
 ### Key Benefits
 
 - **Host-agnostic**: No platform-specific code, standard npm scripts work everywhere
diff --git a/package.json b/package.json
index 11c2d907..74f4132a 100644
--- a/package.json
+++ b/package.json
@@ -61,6 +61,13 @@
     ],
     "overrides": {
       "lightningcss": "1.30.1",
+      "flatted@<3.4.2": "3.4.2",
+      "h3@<1.15.9": "1.15.9",
+      "socket.io-parser@4.2.5": "4.2.6",
+      "undici@5.28.4": "6.24.0",
+      "undici@6.23.0": "6.24.0",
+      "undici@7.22.0": "7.24.0",
+      "next@16.1.6": "16.1.7",
       "tar@<7.5.11": "7.5.11",
       "basic-ftp@<5.2.0": "5.2.0",
       "bn.js@4.12.2": "4.12.3",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d829dea5..ec23230d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,6 +6,13 @@ settings:
 
 overrides:
   lightningcss: 1.30.1
+  flatted@<3.4.2: 3.4.2
+  h3@<1.15.9: 1.15.9
+  socket.io-parser@4.2.5: 4.2.6
+  undici@5.28.4: 6.24.0
+  undici@6.23.0: 6.24.0
+  undici@7.22.0: 7.24.0
+  next@16.1.6: 16.1.7
   tar@<7.5.11: 7.5.11
   basic-ftp@<5.2.0: 5.2.0
   bn.js@4.12.2: 4.12.3
@@ -66,7 +73,7 @@ importers:
         version: 50.18.0(rollup@4.59.0)(typescript@5.9.3)
       vitest:
         specifier: ^4.0.18
-        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
 
   apps/api:
     dependencies:
@@ -253,10 +260,10 @@ importers:
         version: 7.22.0
       vite-tsconfig-paths:
         specifier: ^6.1.1
-        version: 6.1.1(typescript@5.9.3)(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 6.1.1(typescript@5.9.3)(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2))
       vitest:
         specifier: ^4.0.18
-        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
 
   apps/docu:
     dependencies:
@@ -271,7 +278,7 @@ importers:
         version: 16.6.0(@mdx-js/mdx@3.1.1)(@types/estree-jsx@1.0.5)(@types/hast@3.0.4)(@types/mdast@4.0.4)(@types/react@19.2.14)(lucide-react@0.564.0(react@19.2.4))(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(zod@4.3.6)
       fumadocs-mdx:
         specifier: 14.2.7
-        version: 14.2.7(@types/mdast@4.0.4)(@types/mdx@2.0.13)(@types/react@19.2.14)(fumadocs-core@16.6.0(@mdx-js/mdx@3.1.1)(@types/estree-jsx@1.0.5)(@types/hast@3.0.4)(@types/mdast@4.0.4)(@types/react@19.2.14)(lucide-react@0.564.0(react@19.2.4))(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(zod@4.3.6))(mdast-util-mdx-jsx@3.2.0)(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react@19.2.4)(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2))
+        version: 14.2.7(@types/mdast@4.0.4)(@types/mdx@2.0.13)(@types/react@19.2.14)(fumadocs-core@16.6.0(@mdx-js/mdx@3.1.1)(@types/estree-jsx@1.0.5)(@types/hast@3.0.4)(@types/mdast@4.0.4)(@types/react@19.2.14)(lucide-react@0.564.0(react@19.2.4))(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(zod@4.3.6))(mdast-util-mdx-jsx@3.2.0)(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react@19.2.4)(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2))
       fumadocs-ui:
         specifier: 16.6.0
         version: 16.6.0(@types/react-dom@19.2.3(@types/react@19.2.14))(@types/react@19.2.14)(fumadocs-core@16.6.0(@mdx-js/mdx@3.1.1)(@types/estree-jsx@1.0.5)(@types/hast@3.0.4)(@types/mdast@4.0.4)(@types/react@19.2.14)(lucide-react@0.564.0(react@19.2.4))(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(zod@4.3.6))(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(tailwindcss@4.1.18)
@@ -495,7 +502,7 @@ importers:
         version: 0.9.39(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(bs58@6.0.0)(fastestsmallesttextencoderdecoder@1.0.22)(react-dom@19.2.4(react@19.2.4))(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10))(react@19.2.4)(typescript@5.9.3)
       '@solana/wallet-adapter-wallets':
         specifier: ^0.19.37
-        version: 0.19.37(@babel/runtime@7.29.2)(@react-native-async-storage/async-storage@1.24.0(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10)))(@solana/sysvars@2.3.0(fastestsmallesttextencoderdecoder@1.0.22)(typescript@5.9.3))(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(@types/react@19.2.14)(@vercel/blob@2.2.0)(bs58@6.0.0)(bufferutil@4.1.0)(expo-constants@55.0.7)(fastestsmallesttextencoderdecoder@1.0.22)(react-dom@19.2.4(react@19.2.4))(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10))(react@19.2.4)(tslib@2.8.1)(typescript@5.9.3)(utf-8-validate@5.0.10)(ws@8.19.0(bufferutil@4.1.0)(utf-8-validate@5.0.10))(zod@4.3.6)
+        version: 0.19.37(@babel/runtime@7.28.6)(@react-native-async-storage/async-storage@1.24.0(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10)))(@solana/sysvars@2.3.0(fastestsmallesttextencoderdecoder@1.0.22)(typescript@5.9.3))(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(@types/react@19.2.14)(@vercel/blob@2.2.0)(bs58@6.0.0)(bufferutil@4.1.0)(expo-constants@55.0.7)(fastestsmallesttextencoderdecoder@1.0.22)(react-dom@19.2.4(react@19.2.4))(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10))(react@19.2.4)(tslib@2.8.1)(typescript@5.9.3)(utf-8-validate@5.0.10)(ws@8.19.0(bufferutil@4.1.0)(utf-8-validate@5.0.10))(zod@4.3.6)
       '@solana/web3.js':
         specifier: ^1.98.4
         version: 1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)
@@ -659,7 +666,7 @@ importers:
         version: 4.21.0
       vitest:
         specifier: ^4.0.18
-        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.5.0)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.3.5)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
 
   packages/email:
     dependencies:
@@ -754,7 +761,7 @@ importers:
         version: 8.5.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.2)
       vitest:
         specifier: ^4.0.18
-        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
 
   packages/notif:
     dependencies:
@@ -867,7 +874,7 @@ importers:
         version: 8.5.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.8.2)
       vitest:
         specifier: ^4.0.18
-        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.5.0)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+        version: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.3.5)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
 
   packages/ui:
     dependencies:
@@ -1354,11 +1361,6 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
 
-  '@babel/parser@7.29.2':
-    resolution: {integrity: sha512-4GgRzy/+fsBa72/RZVJmGKPmZu9Byn8o4MoLpmNe1m8ZfYnz5emHLQz3U4gLud6Zwl0RZIcgiLD7Uq7ySFuDLA==}
-    engines: {node: '>=6.0.0'}
-    hasBin: true
-
   '@babel/plugin-proposal-decorators@7.29.0':
     resolution: {integrity: sha512-CVBVv3VY/XRMxRYq5dwr2DS7/MvqPm23cOCjbwNnVrfOqcWlnefua1uUs0sjdKOGjvPUG633o07uWzJq4oI6dA==}
     engines: {node: '>=6.9.0'}
@@ -1765,10 +1767,6 @@ packages:
     resolution: {integrity: sha512-05WQkdpL9COIMz4LjTxGpPNCdlpyimKppYNoJ5Di5EUObifl8t4tuLuUBBZEpoLYOmfvIWrsp9fCl0HoPRVTdA==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/runtime@7.29.2':
-    resolution: {integrity: sha512-JiDShH45zKHWyGe4ZNVRrCjBz8Nh9TMmZG1kh4QTK8hCBTWBi8Da+i7s1fJw7/lYpM4ccepSNfqzZ/QvABBi5g==}
-    engines: {node: '>=6.9.0'}
-
   '@babel/template@7.28.6':
     resolution: {integrity: sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==}
     engines: {node: '>=6.9.0'}
@@ -6981,8 +6979,8 @@ packages:
   '@types/node@25.2.3':
     resolution: {integrity: sha512-m0jEgYlYz+mDJZ2+F4v8D1AyQb+QzsNqRuI7xg1VQX/KlKS0qT9r1Mo16yo5F/MtifXFgaofIFsdFMox2SxIbQ==}
 
-  '@types/node@25.5.0':
-    resolution: {integrity: sha512-jp2P3tQMSxWugkCUKLRPVUpGaL5MVFwF8RDuSRztfwgN1wmqJeMSbKlnEtQqU8UrhTmzEmZdu2I6v2dpp7XIxw==}
+  '@types/node@25.3.5':
+    resolution: {integrity: sha512-oX8xrhvpiyRCQkG1MFchB09f+cXftgIXb3a7UUa4Y3wpmZPw5tyZGTLWhlESOLq1Rq6oDlc8npVU2/9xiCuXMA==}
 
   '@types/pg-pool@2.0.7':
     resolution: {integrity: sha512-U4CwmGVQcbEuqpyju8/ptOKg6gEC+Tqsvj2xS9o1g71bUh8twxnC6ZL5rZKCsGN0iyH0CwgUyc9VR5owNQF9Ng==}
@@ -7688,8 +7686,8 @@ packages:
     peerDependencies:
       ajv: ^8.8.2
 
-  ajv@6.12.6:
-    resolution: {integrity: sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==}
+  ajv@6.14.0:
+    resolution: {integrity: sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==}
 
   ajv@8.18.0:
     resolution: {integrity: sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==}
@@ -8000,11 +7998,6 @@ packages:
     resolution: {integrity: sha512-ir1UPr3dkwexU7FdV8qBBbNDRUhMmIekYMFZfi+C/sLNnRESKPl23nB9b2pltqfOQNnGzsDdId90AEtG5tCx4A==}
     engines: {node: '>=6.0.0'}
 
-  baseline-browser-mapping@2.10.10:
-    resolution: {integrity: sha512-sUoJ3IMxx4AyRqO4MLeHlnGDkyXRoUG0/AI9fjK+vS72ekpV0yWVY7O0BVjmBcRtkNcsAO2QDZ4tdKKGoI6YaQ==}
-    engines: {node: '>=6.0.0'}
-    hasBin: true
-
   baseline-browser-mapping@2.9.19:
     resolution: {integrity: sha512-ipDqC8FrAl/76p2SSWKSI+H9tFwm7vYqXQrItCuiVPt26Km0jS+NzSsBWAaBusvSbQcfJG+JitdMm+wZAgTYqg==}
     hasBin: true
@@ -8222,9 +8215,6 @@ packages:
   caniuse-lite@1.0.30001770:
     resolution: {integrity: sha512-x/2CLQ1jHENRbHg5PSId2sXq1CIO1CISvwWAj027ltMVG2UNgW+w9oH2+HzgEIRFembL8bUlXtfbBHR1fCg2xw==}
 
-  caniuse-lite@1.0.30001781:
-    resolution: {integrity: sha512-RdwNCyMsNBftLjW6w01z8bKEvT6e/5tpPVEgtn22TiLGlstHOVecsX2KHFkD5e/vRnIE4EGzpuIODb3mtswtkw==}
-
   cashaddrjs@0.4.4:
     resolution: {integrity: sha512-xZkuWdNOh0uq/mxJIng6vYWfTowZLd9F4GMAlp2DwFHlcCqCm91NtuAc47RuV4L7r4PYcY5p6Cr2OKNb4hnkWA==}
 
@@ -9219,10 +9209,6 @@ packages:
     resolution: {integrity: sha512-/ce7+jQ1PQ6rVXwe+jKEg5hW5ciicHwIQUagZkp6IufBoY3YDgdTTY1azVs0qoRgVmvsNB+rbjLJxDAeHHtwsQ==}
     engines: {node: '>=10.13.0'}
 
-  enhanced-resolve@5.20.1:
-    resolution: {integrity: sha512-Qohcme7V1inbAfvjItgw0EaxVX5q2rdVEZHRBrEQdRZTssLDGsL8Lwrznl8oQ/6kuTJONLaDcGjkNP247XEhcA==}
-    engines: {node: '>=10.13.0'}
-
   entities@4.5.0:
     resolution: {integrity: sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==}
     engines: {node: '>=0.12'}
@@ -11794,11 +11780,6 @@ packages:
     engines: {node: ^18 || >=20}
     hasBin: true
 
-  nanoid@5.1.7:
-    resolution: {integrity: sha512-ua3NDgISf6jdwezAheMOk4mbE1LXjm1DfMUDMuJf4AqxLFK3ccGpgWizwa5YV7Yz9EpXwEaWoRXSb/BnV0t5dQ==}
-    engines: {node: ^18 || >=20}
-    hasBin: true
-
   nativewind@5.0.0-preview.2:
     resolution: {integrity: sha512-rTNrwFIwl/n2VH7KPvsZj/NdvKf+uGHF4NYtPamr5qG2eTYGT8B8VeyCPfYf/xUskpWOLJVqVEXaFO/vuIDEdw==}
     engines: {node: '>=20'}
@@ -13724,10 +13705,6 @@ packages:
     resolution: {integrity: sha512-g9ljZiwki/LfxmQADO3dEY1CbpmXT5Hm2fJ+QaGKwSXUylMybePR7/67YW7jOrrvjEgL1Fmz5kzyAjWVWLlucg==}
     engines: {node: '>=6'}
 
-  tapable@2.3.1:
-    resolution: {integrity: sha512-b+u3CEM6FjDHru+nhUSjDofpWSBp2rINziJWgApm72wwGasQ/wKXftZe4tI2Y5HPv6OpzXSZHOFq87H4vfsgsw==}
-    engines: {node: '>=6'}
-
   tar@7.5.11:
     resolution: {integrity: sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==}
     engines: {node: '>=18'}
@@ -13736,8 +13713,8 @@ packages:
     resolution: {integrity: sha512-un0FmiRUQNr5PJqy9kP7c40F5BOfpGlYTrxonDChEZB7pzZxRNp/bt+ymiy9/npwXya9KH99nJ/GXFIiUkYGFQ==}
     engines: {node: '>=8'}
 
-  terser-webpack-plugin@5.4.0:
-    resolution: {integrity: sha512-Bn5vxm48flOIfkdl5CaD2+1CiUVbonWQ3KQPyP7/EuIl9Gbzq/gQFOzaMFUEgVjB1396tcK0SG8XcNJ/2kDH8g==}
+  terser-webpack-plugin@5.3.17:
+    resolution: {integrity: sha512-YR7PtUp6GMU91BgSJmlaX/rS2lGDbAF7D+Wtq7hRO+MiljNmodYvqslzCFiYVAgW+Qoaaia/QUIP4lGXufjdZw==}
     engines: {node: '>= 10.13.0'}
     peerDependencies:
       '@swc/core': '*'
@@ -13757,11 +13734,6 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
-  terser@5.46.1:
-    resolution: {integrity: sha512-vzCjQO/rgUuK9sf8VJZvjqiqiHFaZLnOiimmUuOKODxWL8mm/xua7viT7aqX7dgPY60otQjUotzFMmCB4VdmqQ==}
-    engines: {node: '>=10'}
-    hasBin: true
-
   test-exclude@6.0.0:
     resolution: {integrity: sha512-cAGWPIyOHU6zlmg88jwm7VRyXnMN7iV68OGAbYDk/Mh/xC/pzVPlQtY6ngoIH/5/tciuhGfvESU8GrHrcxD56w==}
     engines: {node: '>=8'}
@@ -13823,10 +13795,6 @@ packages:
     resolution: {integrity: sha512-PSkbLUoxOFRzJYjjxHJt9xro7D+iilgMX/C9lawzVuYiIdcihh9DXmVibBe8lmcFrRi/VzlPjBxbN7rH24q8/Q==}
     engines: {node: '>=14.0.0'}
 
-  tinyrainbow@3.1.0:
-    resolution: {integrity: sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==}
-    engines: {node: '>=14.0.0'}
-
   tldts-core@7.0.23:
     resolution: {integrity: sha512-0g9vrtDQLrNIiCj22HSe9d4mLVG3g5ph5DZ8zCKBr4OtrspmNB6ss7hVyzArAeE88ceZocIEGkyW1Ime7fxPtQ==}
 
@@ -15136,10 +15104,6 @@ snapshots:
     dependencies:
       '@babel/types': 7.29.0
 
-  '@babel/parser@7.29.2':
-    dependencies:
-      '@babel/types': 7.29.0
-
   '@babel/plugin-proposal-decorators@7.29.0(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
@@ -15602,8 +15566,6 @@ snapshots:
 
   '@babel/runtime@7.28.6': {}
 
-  '@babel/runtime@7.29.2': {}
-
   '@babel/template@7.28.6':
     dependencies:
       '@babel/code-frame': 7.29.0
@@ -16092,7 +16054,7 @@ snapshots:
 
   '@eslint/eslintrc@3.3.3':
     dependencies:
-      ajv: 6.12.6
+      ajv: 6.14.0
       debug: 4.4.3
       espree: 10.4.0
       globals: 14.0.0
@@ -19429,7 +19391,7 @@ snapshots:
   '@react-native/codegen@0.84.0(@babel/core@7.29.0)':
     dependencies:
       '@babel/core': 7.29.0
-      '@babel/parser': 7.29.2
+      '@babel/parser': 7.29.0
       hermes-parser: 0.32.0
       invariant: 2.2.4
       nullthrows: 1.1.1
@@ -20099,7 +20061,7 @@ snapshots:
   '@scalar/types@0.6.3':
     dependencies:
       '@scalar/helpers': 0.2.12
-      nanoid: 5.1.7
+      nanoid: 5.1.6
       type-fest: 5.4.4
       zod: 4.3.6
 
@@ -21114,11 +21076,11 @@ snapshots:
       '@solana/wallet-adapter-base': 0.9.27(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))
       '@solana/web3.js': 1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)
 
-  '@solana/wallet-adapter-torus@0.11.32(@babel/runtime@7.29.2)(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)':
+  '@solana/wallet-adapter-torus@0.11.32(@babel/runtime@7.28.6)(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)':
     dependencies:
       '@solana/wallet-adapter-base': 0.9.27(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))
       '@solana/web3.js': 1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)
-      '@toruslabs/solana-embed': 2.1.0(@babel/runtime@7.29.2)(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)
+      '@toruslabs/solana-embed': 2.1.0(@babel/runtime@7.28.6)(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)
       assert: 2.1.0
       crypto-browserify: 3.12.1
       process: 0.11.10
@@ -21199,7 +21161,7 @@ snapshots:
       - utf-8-validate
       - zod
 
-  '@solana/wallet-adapter-wallets@0.19.37(@babel/runtime@7.29.2)(@react-native-async-storage/async-storage@1.24.0(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10)))(@solana/sysvars@2.3.0(fastestsmallesttextencoderdecoder@1.0.22)(typescript@5.9.3))(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(@types/react@19.2.14)(@vercel/blob@2.2.0)(bs58@6.0.0)(bufferutil@4.1.0)(expo-constants@55.0.7)(fastestsmallesttextencoderdecoder@1.0.22)(react-dom@19.2.4(react@19.2.4))(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10))(react@19.2.4)(tslib@2.8.1)(typescript@5.9.3)(utf-8-validate@5.0.10)(ws@8.19.0(bufferutil@4.1.0)(utf-8-validate@5.0.10))(zod@4.3.6)':
+  '@solana/wallet-adapter-wallets@0.19.37(@babel/runtime@7.28.6)(@react-native-async-storage/async-storage@1.24.0(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10)))(@solana/sysvars@2.3.0(fastestsmallesttextencoderdecoder@1.0.22)(typescript@5.9.3))(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(@types/react@19.2.14)(@vercel/blob@2.2.0)(bs58@6.0.0)(bufferutil@4.1.0)(expo-constants@55.0.7)(fastestsmallesttextencoderdecoder@1.0.22)(react-dom@19.2.4(react@19.2.4))(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10))(react@19.2.4)(tslib@2.8.1)(typescript@5.9.3)(utf-8-validate@5.0.10)(ws@8.19.0(bufferutil@4.1.0)(utf-8-validate@5.0.10))(zod@4.3.6)':
     dependencies:
       '@solana/wallet-adapter-alpha': 0.1.14(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))
       '@solana/wallet-adapter-avana': 0.1.17(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))
@@ -21231,7 +21193,7 @@ snapshots:
       '@solana/wallet-adapter-spot': 0.1.19(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))
       '@solana/wallet-adapter-tokenary': 0.1.16(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))
       '@solana/wallet-adapter-tokenpocket': 0.4.23(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))
-      '@solana/wallet-adapter-torus': 0.11.32(@babel/runtime@7.29.2)(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)
+      '@solana/wallet-adapter-torus': 0.11.32(@babel/runtime@7.28.6)(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)
       '@solana/wallet-adapter-trezor': 0.1.6(@solana/sysvars@2.3.0(fastestsmallesttextencoderdecoder@1.0.22)(typescript@5.9.3))(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))(bufferutil@4.1.0)(expo-constants@55.0.7)(fastestsmallesttextencoderdecoder@1.0.22)(react-native@0.84.0(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.4)(utf-8-validate@5.0.10))(tslib@2.8.1)(typescript@5.9.3)(utf-8-validate@5.0.10)(ws@8.19.0(bufferutil@4.1.0)(utf-8-validate@5.0.10))
       '@solana/wallet-adapter-trust': 0.1.17(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))
       '@solana/wallet-adapter-unsafe-burner': 0.1.11(@solana/web3.js@1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10))
@@ -21592,7 +21554,7 @@ snapshots:
   '@testing-library/dom@10.4.1':
     dependencies:
       '@babel/code-frame': 7.29.0
-      '@babel/runtime': 7.29.2
+      '@babel/runtime': 7.28.6
       '@types/aria-query': 5.0.4
       aria-query: 5.3.0
       dom-accessibility-api: 0.5.16
@@ -21627,14 +21589,14 @@ snapshots:
 
   '@tootallnate/quickjs-emscripten@0.23.0': {}
 
-  '@toruslabs/base-controllers@5.11.0(@babel/runtime@7.29.2)(bufferutil@4.1.0)(utf-8-validate@5.0.10)':
+  '@toruslabs/base-controllers@5.11.0(@babel/runtime@7.28.6)(bufferutil@4.1.0)(utf-8-validate@5.0.10)':
     dependencies:
-      '@babel/runtime': 7.29.2
+      '@babel/runtime': 7.28.6
       '@ethereumjs/util': 9.1.0
       '@toruslabs/broadcast-channel': 10.0.2(bufferutil@4.1.0)(utf-8-validate@5.0.10)
-      '@toruslabs/http-helpers': 6.1.1(@babel/runtime@7.29.2)
-      '@toruslabs/openlogin-jrpc': 8.3.0(@babel/runtime@7.29.2)
-      '@toruslabs/openlogin-utils': 8.2.1(@babel/runtime@7.29.2)
+      '@toruslabs/http-helpers': 6.1.1(@babel/runtime@7.28.6)
+      '@toruslabs/openlogin-jrpc': 8.3.0(@babel/runtime@7.28.6)
+      '@toruslabs/openlogin-utils': 8.2.1(@babel/runtime@7.28.6)
       async-mutex: 0.5.0
       bignumber.js: 9.3.1
       bowser: 2.14.1
@@ -21661,9 +21623,9 @@ snapshots:
       - supports-color
       - utf-8-validate
 
-  '@toruslabs/constants@13.4.0(@babel/runtime@7.29.2)':
+  '@toruslabs/constants@13.4.0(@babel/runtime@7.28.6)':
     dependencies:
-      '@babel/runtime': 7.29.2
+      '@babel/runtime': 7.28.6
 
   '@toruslabs/eccrypto@4.0.0':
     dependencies:
@@ -21675,12 +21637,6 @@ snapshots:
       lodash.merge: 4.6.2
       loglevel: 1.9.2
 
-  '@toruslabs/http-helpers@6.1.1(@babel/runtime@7.29.2)':
-    dependencies:
-      '@babel/runtime': 7.29.2
-      lodash.merge: 4.6.2
-      loglevel: 1.9.2
-
   '@toruslabs/metadata-helpers@5.1.0(@babel/runtime@7.28.6)':
     dependencies:
       '@babel/runtime': 7.28.6
@@ -21692,9 +21648,9 @@ snapshots:
     transitivePeerDependencies:
       - '@sentry/types'
 
-  '@toruslabs/openlogin-jrpc@8.3.0(@babel/runtime@7.29.2)':
+  '@toruslabs/openlogin-jrpc@8.3.0(@babel/runtime@7.28.6)':
     dependencies:
-      '@babel/runtime': 7.29.2
+      '@babel/runtime': 7.28.6
       end-of-stream: 1.4.5
       events: 3.3.0
       fast-safe-stringify: 2.1.1
@@ -21702,20 +21658,20 @@ snapshots:
       pump: 3.0.3
       readable-stream: 4.7.0
 
-  '@toruslabs/openlogin-utils@8.2.1(@babel/runtime@7.29.2)':
+  '@toruslabs/openlogin-utils@8.2.1(@babel/runtime@7.28.6)':
     dependencies:
-      '@babel/runtime': 7.29.2
-      '@toruslabs/constants': 13.4.0(@babel/runtime@7.29.2)
+      '@babel/runtime': 7.28.6
+      '@toruslabs/constants': 13.4.0(@babel/runtime@7.28.6)
       base64url: 3.0.1
       color: 4.2.3
 
-  '@toruslabs/solana-embed@2.1.0(@babel/runtime@7.29.2)(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)':
+  '@toruslabs/solana-embed@2.1.0(@babel/runtime@7.28.6)(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)':
     dependencies:
-      '@babel/runtime': 7.29.2
+      '@babel/runtime': 7.28.6
       '@solana/web3.js': 1.98.4(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)
-      '@toruslabs/base-controllers': 5.11.0(@babel/runtime@7.29.2)(bufferutil@4.1.0)(utf-8-validate@5.0.10)
-      '@toruslabs/http-helpers': 6.1.1(@babel/runtime@7.29.2)
-      '@toruslabs/openlogin-jrpc': 8.3.0(@babel/runtime@7.29.2)
+      '@toruslabs/base-controllers': 5.11.0(@babel/runtime@7.28.6)(bufferutil@4.1.0)(utf-8-validate@5.0.10)
+      '@toruslabs/http-helpers': 6.1.1(@babel/runtime@7.28.6)
+      '@toruslabs/openlogin-jrpc': 8.3.0(@babel/runtime@7.28.6)
       eth-rpc-errors: 4.0.3
       fast-deep-equal: 3.1.3
       lodash-es: 4.17.23
@@ -22257,7 +22213,7 @@ snapshots:
     dependencies:
       undici-types: 7.16.0
 
-  '@types/node@25.5.0':
+  '@types/node@25.3.5':
     dependencies:
       undici-types: 7.18.2
     optional: true
@@ -22770,7 +22726,7 @@ snapshots:
       obug: 2.1.1
       std-env: 3.10.0
       tinyrainbow: 3.0.3
-      vitest: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+      vitest: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
 
   '@vitest/expect@4.0.18':
     dependencies:
@@ -22781,21 +22737,21 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.0.3
 
-  '@vitest/mocker@4.0.18(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/mocker@4.0.18(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@vitest/spy': 4.0.18
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
 
-  '@vitest/mocker@4.0.18(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2))':
+  '@vitest/mocker@4.0.18(vite@7.3.1(@types/node@25.3.5)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2))':
     dependencies:
       '@vitest/spy': 4.0.18
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: 7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.1(@types/node@25.3.5)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
 
   '@vitest/pretty-format@4.0.18':
     dependencies:
@@ -22822,8 +22778,8 @@ snapshots:
       pathe: 2.0.3
       sirv: 3.0.2
       tinyglobby: 0.2.15
-      tinyrainbow: 3.1.0
-      vitest: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+      tinyrainbow: 3.0.3
+      vitest: 4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
     optional: true
 
   '@vitest/utils@4.0.18':
@@ -23638,7 +23594,7 @@ snapshots:
       ajv: 8.18.0
       fast-deep-equal: 3.1.3
 
-  ajv@6.12.6:
+  ajv@6.14.0:
     dependencies:
       fast-deep-equal: 3.1.3
       fast-json-stable-stringify: 2.1.0
@@ -24043,8 +23999,6 @@ snapshots:
 
   base64url@3.0.1: {}
 
-  baseline-browser-mapping@2.10.10: {}
-
   baseline-browser-mapping@2.9.19: {}
 
   basic-ftp@5.2.0: {}
@@ -24293,8 +24247,6 @@ snapshots:
 
   caniuse-lite@1.0.30001770: {}
 
-  caniuse-lite@1.0.30001781: {}
-
   cashaddrjs@0.4.4:
     dependencies:
       big-integer: 1.6.36
@@ -25268,11 +25220,6 @@ snapshots:
       graceful-fs: 4.2.11
       tapable: 2.3.0
 
-  enhanced-resolve@5.20.1:
-    dependencies:
-      graceful-fs: 4.2.11
-      tapable: 2.3.1
-
   entities@4.5.0: {}
 
   entities@6.0.1: {}
@@ -25684,7 +25631,7 @@ snapshots:
       '@humanwhocodes/module-importer': 1.0.1
       '@humanwhocodes/retry': 0.4.3
       '@types/estree': 1.0.8
-      ajv: 6.12.6
+      ajv: 6.14.0
       chalk: 4.1.2
       cross-spawn: 7.0.6
       debug: 4.4.3
@@ -26595,7 +26542,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  fumadocs-mdx@14.2.7(@types/mdast@4.0.4)(@types/mdx@2.0.13)(@types/react@19.2.14)(fumadocs-core@16.6.0(@mdx-js/mdx@3.1.1)(@types/estree-jsx@1.0.5)(@types/hast@3.0.4)(@types/mdast@4.0.4)(@types/react@19.2.14)(lucide-react@0.564.0(react@19.2.4))(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(zod@4.3.6))(mdast-util-mdx-jsx@3.2.0)(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react@19.2.4)(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)):
+  fumadocs-mdx@14.2.7(@types/mdast@4.0.4)(@types/mdx@2.0.13)(@types/react@19.2.14)(fumadocs-core@16.6.0(@mdx-js/mdx@3.1.1)(@types/estree-jsx@1.0.5)(@types/hast@3.0.4)(@types/mdast@4.0.4)(@types/react@19.2.14)(lucide-react@0.564.0(react@19.2.4))(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(zod@4.3.6))(mdast-util-mdx-jsx@3.2.0)(next@16.1.7(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react@19.2.4)(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)):
     dependencies:
       '@mdx-js/mdx': 3.1.1
       '@standard-schema/spec': 1.1.0
@@ -26622,7 +26569,7 @@ snapshots:
       mdast-util-mdx-jsx: 3.2.0
       next: 16.1.7(@babel/core@7.29.0)(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)
       react: 19.2.4
-      vite: 7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
 
@@ -29000,8 +28947,6 @@ snapshots:
 
   nanoid@5.1.6: {}
 
-  nanoid@5.1.7: {}
-
   nativewind@5.0.0-preview.2(react-native-css@3.0.4(@expo/metro-config@55.0.9(bufferutil@4.1.0)(expo@55.0.6)(typescript@5.9.3)(utf-8-validate@5.0.10))(lightningcss@1.30.1)(react-native@0.83.2(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.0)(utf-8-validate@5.0.10))(react@19.2.0))(tailwindcss@4.1.18):
     dependencies:
       react-native-css: 3.0.4(@expo/metro-config@55.0.9(bufferutil@4.1.0)(expo@55.0.6)(typescript@5.9.3)(utf-8-validate@5.0.10))(lightningcss@1.30.1)(react-native@0.83.2(@babel/core@7.29.0)(@types/react@19.2.14)(bufferutil@4.1.0)(react@19.2.0)(utf-8-validate@5.0.10))(react@19.2.0)
@@ -29029,8 +28974,8 @@ snapshots:
     dependencies:
       '@next/env': 16.1.7
       '@swc/helpers': 0.5.15
-      baseline-browser-mapping: 2.10.10
-      caniuse-lite: 1.0.30001781
+      baseline-browser-mapping: 2.9.19
+      caniuse-lite: 1.0.30001770
       postcss: 8.4.31
       react: 19.2.4
       react-dom: 19.2.4(react@19.2.4)
@@ -31530,8 +31475,6 @@ snapshots:
 
   tapable@2.3.0: {}
 
-  tapable@2.3.1: {}
-
   tar@7.5.11:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
@@ -31545,12 +31488,12 @@ snapshots:
       ansi-escapes: 4.3.2
       supports-hyperlinks: 2.3.0
 
-  terser-webpack-plugin@5.4.0(webpack@5.105.2):
+  terser-webpack-plugin@5.3.17(webpack@5.105.2):
     dependencies:
       '@jridgewell/trace-mapping': 0.3.31
       jest-worker: 27.5.1
       schema-utils: 4.3.3
-      terser: 5.46.1
+      terser: 5.46.0
       webpack: 5.105.2
 
   terser@5.46.0:
@@ -31560,13 +31503,6 @@ snapshots:
       commander: 2.20.3
       source-map-support: 0.5.21
 
-  terser@5.46.1:
-    dependencies:
-      '@jridgewell/source-map': 0.3.11
-      acorn: 8.16.0
-      commander: 2.20.3
-      source-map-support: 0.5.21
-
   test-exclude@6.0.0:
     dependencies:
       '@istanbuljs/schema': 0.1.3
@@ -31628,9 +31564,6 @@ snapshots:
 
   tinyrainbow@3.0.3: {}
 
-  tinyrainbow@3.1.0:
-    optional: true
-
   tldts-core@7.0.23: {}
 
   tldts@7.0.23:
@@ -32291,17 +32224,17 @@ snapshots:
       - utf-8-validate
       - zod
 
-  vite-tsconfig-paths@6.1.1(typescript@5.9.3)(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)):
+  vite-tsconfig-paths@6.1.1(typescript@5.9.3)(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)):
     dependencies:
       debug: 4.4.3
       globrex: 0.1.2
       tsconfck: 3.1.6(typescript@5.9.3)
-      vite: 7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       esbuild: 0.27.3
       fdir: 6.5.0(picomatch@4.0.3)
@@ -32314,11 +32247,11 @@ snapshots:
       fsevents: 2.3.3
       jiti: 2.6.1
       lightningcss: 1.30.1
-      terser: 5.46.1
+      terser: 5.46.0
       tsx: 4.21.0
       yaml: 2.8.2
 
-  vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2):
+  vite@7.3.1(@types/node@25.3.5)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       esbuild: 0.27.3
       fdir: 6.5.0(picomatch@4.0.3)
@@ -32327,18 +32260,18 @@ snapshots:
       rollup: 4.59.0
       tinyglobby: 0.2.15
     optionalDependencies:
-      '@types/node': 25.5.0
+      '@types/node': 25.3.5
       fsevents: 2.3.3
       jiti: 2.6.1
       lightningcss: 1.30.1
-      terser: 5.46.1
+      terser: 5.46.0
       tsx: 4.21.0
       yaml: 2.8.2
 
-  vitest@4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2):
+  vitest@4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.2.3)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       '@vitest/expect': 4.0.18
-      '@vitest/mocker': 4.0.18(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/mocker': 4.0.18(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2))
       '@vitest/pretty-format': 4.0.18
       '@vitest/runner': 4.0.18
       '@vitest/snapshot': 4.0.18
@@ -32355,7 +32288,7 @@ snapshots:
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 3.0.3
-      vite: 7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.1(@types/node@25.2.3)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@edge-runtime/vm': 3.2.0
@@ -32376,10 +32309,10 @@ snapshots:
       - tsx
       - yaml
 
-  vitest@4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.5.0)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2):
+  vitest@4.0.18(@edge-runtime/vm@3.2.0)(@opentelemetry/api@1.9.0)(@types/node@25.3.5)(@vitest/ui@4.0.18)(jiti@2.6.1)(jsdom@28.1.0(@noble/hashes@2.0.1))(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2):
     dependencies:
       '@vitest/expect': 4.0.18
-      '@vitest/mocker': 4.0.18(vite@7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2))
+      '@vitest/mocker': 4.0.18(vite@7.3.1(@types/node@25.3.5)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2))
       '@vitest/pretty-format': 4.0.18
       '@vitest/runner': 4.0.18
       '@vitest/snapshot': 4.0.18
@@ -32396,12 +32329,12 @@ snapshots:
       tinyexec: 1.0.2
       tinyglobby: 0.2.15
       tinyrainbow: 3.0.3
-      vite: 7.3.1(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.1)(tsx@4.21.0)(yaml@2.8.2)
+      vite: 7.3.1(@types/node@25.3.5)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@edge-runtime/vm': 3.2.0
       '@opentelemetry/api': 1.9.0
-      '@types/node': 25.5.0
+      '@types/node': 25.3.5
       '@vitest/ui': 4.0.18(vitest@4.0.18)
       jsdom: 28.1.0(@noble/hashes@2.0.1)
     transitivePeerDependencies:
@@ -32508,7 +32441,7 @@ snapshots:
       acorn-import-phases: 1.0.4(acorn@8.16.0)
       browserslist: 4.28.1
       chrome-trace-event: 1.0.4
-      enhanced-resolve: 5.20.1
+      enhanced-resolve: 5.20.0
       es-module-lexer: 2.0.0
       eslint-scope: 5.1.1
       events: 3.3.0
@@ -32519,8 +32452,8 @@ snapshots:
       mime-types: 2.1.35
       neo-async: 2.6.2
       schema-utils: 4.3.3
-      tapable: 2.3.1
-      terser-webpack-plugin: 5.4.0(webpack@5.105.2)
+      tapable: 2.3.0
+      terser-webpack-plugin: 5.3.17(webpack@5.105.2)
       watchpack: 2.5.1
       webpack-sources: 3.3.4
     transitivePeerDependencies:

From 90171ecc0e382754ed8d1eb812aa084d40f82b0f Mon Sep 17 00:00:00 2001
From: gaboesquivel <contact@gaboesquivel.com>
Date: Mon, 23 Mar 2026 21:40:13 +0000
Subject: [PATCH 2/4] feat(api): pnpm reset runs supabase reset, migrate, and
 seed

- Add scripts/seed.ts (runSeed) after Drizzle migrate in apps/api reset
- Root pnpm reset delegates to @repo/api; remove db:reset-and-migrate
- Document in README, docu ADR 008, api architecture, scripts README
- Drop @repo/react hook tests that failed (duplicate React under Vitest/pnpm); passWithNoTests aligned with vencura
---
 README.md                                     |   4 +-
 apps/api/README.md                            |   5 +-
 apps/api/drizzle.config.ts                    |   1 +
 apps/api/package.json                         |   3 +-
 apps/api/scripts/migrate.ts                   |   8 +-
 apps/api/scripts/seed.ts                      |  61 +++++++++
 apps/api/supabase/config.toml                 |   2 +-
 apps/docu/README.md                           |   2 +
 apps/docu/content/docs/adrs/008-database.mdx  |  10 +-
 apps/docu/content/docs/architecture/api.mdx   |   2 +
 apps/docu/content/docs/development/index.mdx  |   2 +-
 package.json                                  |   1 +
 .../react/src/hooks/use-link-email.test.tsx   |  54 --------
 .../src/hooks/use-verify-link-wallet.test.tsx |  66 ----------
 .../src/hooks/use-verify-web3-auth.test.tsx   | 120 ------------------
 packages/react/vitest.config.ts               |   1 +
 scripts/README.md                             |   2 +
 17 files changed, 88 insertions(+), 256 deletions(-)
 create mode 100644 apps/api/scripts/seed.ts
 delete mode 100644 packages/react/src/hooks/use-link-email.test.tsx
 delete mode 100644 packages/react/src/hooks/use-verify-link-wallet.test.tsx
 delete mode 100644 packages/react/src/hooks/use-verify-web3-auth.test.tsx

diff --git a/README.md b/README.md
index c880e45d..b5b5af5e 100644
--- a/README.md
+++ b/README.md
@@ -53,7 +53,9 @@ Run with `pnpm <script>`.
 **Setup**
   - `setup` — Full setup (install, hooks, gitleaks, osv, database)
   - `setup:gitleaks`, `setup:osv` — Install Gitleaks, OSV scanner
-  - `setup:database` — Database tools
+  - `setup:database` — Database tools (Docker, Supabase CLI)
+  - `reset` — Local API database: Supabase reset + Drizzle migrations + seed (`pnpm --filter @repo/api reset`). See [apps/api/README.md](apps/api/README.md)
+
 **Primary**
   - `build` — Build packages and apps
   - `dev` — Start dev (core, react, error, utils, api, web)
diff --git a/apps/api/README.md b/apps/api/README.md
index bb531c29..ca4eea58 100644
--- a/apps/api/README.md
+++ b/apps/api/README.md
@@ -33,13 +33,14 @@ Copy `.env.test.example` to `.env.test` (gitignored) for unit tests. Vitest load
 - `pnpm checktypes` — Type-check
 - `pnpm db:start` — Start Supabase (local)
 - `pnpm db:stop` — Stop Supabase (run before switching to another project’s Supabase)
-- `pnpm db:reset` — Reset Supabase database (drops and recreates; no Supabase seed.sql)
-- `pnpm db:reset-and-migrate` — Reset DB, then run Drizzle migrations. Seeding via Drizzle (no Supabase seed.sql)
+- `pnpm reset` — From repo root: `pnpm --filter @repo/api reset`. From `apps/api`: Supabase DB reset, then Drizzle migrations (`scripts/migrate.ts`), then seed (`scripts/seed.ts`) with local `DATABASE_URL` + `RUN_PG_MIGRATE=true`. `[db.seed]` / `seed.sql` unused (`supabase/config.toml`)
 - `pnpm db:migrate` — Run migrations (skips when PGLITE=true; use `RUN_PG_MIGRATE=true` to force PostgreSQL)
 - `pnpm db:generate` — Generate migrations from schema
 - `pnpm db:push` — Push schema (dev only)
 - `pnpm generate:openapi` — Regenerate OpenAPI spec
 
+**Database:** `drizzle.config.ts` defines schema glob (`src/db/schema/tables/*.ts`) and migration output (`src/db/migrations`). `scripts/migrate.ts` runs the Drizzle migrator against PostgreSQL (or skips at build time when using PGLite—see `src/db/migrate.ts` at runtime). `pnpm reset` runs `scripts/seed.ts` (`runSeed`) after migrations; `pnpm db:migrate` alone does not.
+
 ## Links
 
 - [Environment setup](https://basilic-docs.vercel.app/docs/development) — Env vars, `DATABASE_URL`, `PGLITE`
diff --git a/apps/api/drizzle.config.ts b/apps/api/drizzle.config.ts
index 020c12c9..52371c56 100644
--- a/apps/api/drizzle.config.ts
+++ b/apps/api/drizzle.config.ts
@@ -1,3 +1,4 @@
+/** Migrations + schema. Local data seed: `scripts/seed.ts` (via `pnpm reset` in apps/api). */
 import 'dotenv/config'
 import { defineConfig } from 'drizzle-kit'
 
diff --git a/apps/api/package.json b/apps/api/package.json
index 88e66d03..7c8a69c0 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -35,8 +35,7 @@
     "generate:openapi": "node --import tsx scripts/generate-openapi.ts",
     "db:start": "supabase start",
     "db:stop": "supabase stop",
-    "db:reset": "supabase db reset",
-    "db:reset-and-migrate": "pnpm db:reset && RUN_PG_MIGRATE=true DATABASE_URL=\"postgresql://postgres:postgres@127.0.0.1:54322/postgres\" pnpm db:migrate",
+    "reset": "supabase db reset && RUN_PG_MIGRATE=true DATABASE_URL=\"postgresql://postgres:postgres@127.0.0.1:54322/postgres\" sh -c 'pnpm db:migrate && node --import tsx scripts/seed.ts'",
     "db:status": "supabase status",
     "db:migrate": "node --import tsx scripts/migrate.ts",
     "db:generate": "NODE_OPTIONS='--import tsx' drizzle-kit generate",
diff --git a/apps/api/scripts/migrate.ts b/apps/api/scripts/migrate.ts
index 9dcae3a2..67adacf2 100644
--- a/apps/api/scripts/migrate.ts
+++ b/apps/api/scripts/migrate.ts
@@ -58,7 +58,7 @@ async function initMigrationsTrackingWhenTablesExist(
 
 try {
   // --- PGLite vs PostgreSQL ---
-  // Allow explicit override: RUN_PG_MIGRATE=true forces PostgreSQL path (e.g. after db:reset)
+  // Allow explicit override: RUN_PG_MIGRATE=true forces PostgreSQL path (e.g. after pnpm reset)
   const forcePg = process.env.RUN_PG_MIGRATE === 'true'
   const shouldUsePGLite = !forcePg && (env.PGLITE === true || env.NODE_ENV === 'test')
 
@@ -102,7 +102,7 @@ try {
     migrationsTableExists = migrationsTableCheck.rows[0]?.exists ?? false
 
     if (!migrationsTableExists) {
-      // Tables that must exist to consider this a "seeded" DB (matches initial schema)
+      // Tables that must exist to treat the DB as already matching the initial schema (migration bootstrap)
       const requiredTables = ['users', 'sessions', 'verification', 'account', 'wallet_identities']
       const tableCheckPromises = requiredTables.map(tableName =>
         pool.query(
@@ -162,7 +162,7 @@ try {
     } else if (isTableExistsError) {
       logger.warn(
         { context: 'migrate', err: migrationError },
-        'Migration failed due to existing tables. Tables appear to match schema. For clean state, run: pnpm --filter @repo/api db:reset',
+        'Migration failed due to existing tables. Tables appear to match schema. For clean state, run: pnpm --filter @repo/api reset',
       )
       // In development/build, allow this to pass if tables exist and match schema
       // In production, this should fail to ensure proper migration tracking
@@ -170,7 +170,7 @@ try {
 
       logger.info(
         { context: 'migrate' },
-        'Allowing build to continue - tables exist and appear to match expected schema. Consider running db:reset for clean migration state.',
+        'Allowing build to continue - tables exist and appear to match expected schema. Consider running pnpm reset for clean migration state.',
       )
     } else {
       logger.error({ context: 'migrate', err: migrationError }, 'Migration failed')
diff --git a/apps/api/scripts/seed.ts b/apps/api/scripts/seed.ts
new file mode 100644
index 00000000..e14fe46f
--- /dev/null
+++ b/apps/api/scripts/seed.ts
@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+/**
+ * Data seed after a local Supabase reset. Invoked only from `pnpm reset` (apps/api or repo root via filter).
+ * (not from `pnpm db:migrate` / `pnpm build`).
+ *
+ * Add idempotent inserts here (`onConflictDoNothing()` / upserts). Uses the same
+ * PostgreSQL vs PGLite rules as `scripts/migrate.ts` (`RUN_PG_MIGRATE`, `DATABASE_URL`).
+ */
+import 'dotenv/config'
+import { resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { logger } from '@repo/utils/logger/server'
+import { drizzle, type NodePgDatabase } from 'drizzle-orm/node-postgres'
+import { Pool } from 'pg'
+import * as schema from '../src/db/schema/index.js'
+import { env } from '../src/lib/env.js'
+
+const scriptFile = fileURLToPath(import.meta.url)
+
+async function applySeed(_db: NodePgDatabase<typeof schema>): Promise<void> {
+  // Reference / dev rows only — extend with db.insert(...).onConflictDoNothing(), etc.
+}
+
+export async function runSeed(): Promise<void> {
+  const forcePg = process.env.RUN_PG_MIGRATE === 'true'
+  const shouldUsePGLite = !forcePg && (env.PGLITE === true || env.NODE_ENV === 'test')
+
+  if (shouldUsePGLite) {
+    logger.info({ context: 'seed' }, 'PGLite: skipping data seed')
+    return
+  }
+
+  if (!env.DATABASE_URL) throw new Error('DATABASE_URL is required when PGLITE is false')
+
+  const pool = new Pool({ connectionString: env.DATABASE_URL })
+  const db = drizzle(pool, { schema })
+  try {
+    await applySeed(db)
+    logger.info({ context: 'seed' }, 'Seed completed')
+  } finally {
+    await pool.end()
+  }
+}
+
+function isMainModule(): boolean {
+  const entry = process.argv[1]
+  if (!entry) return false
+  return resolve(entry) === scriptFile
+}
+
+async function main(): Promise<void> {
+  try {
+    await runSeed()
+    process.exit(0)
+  } catch (err) {
+    logger.error({ context: 'seed', err }, 'Seed failed')
+    process.exit(1)
+  }
+}
+
+if (isMainModule()) void main()
diff --git a/apps/api/supabase/config.toml b/apps/api/supabase/config.toml
index 87c3f4c8..d87a47b3 100644
--- a/apps/api/supabase/config.toml
+++ b/apps/api/supabase/config.toml
@@ -59,7 +59,7 @@ schema_paths = []
 
 [db.seed]
 # If enabled, seeds the database after migrations during a db reset.
-# Disabled — seeding via Drizzle (db:reset-and-migrate, seed script)
+# Disabled — schema from Drizzle (scripts/migrate.ts); optional data rows from scripts/seed.ts via pnpm reset (apps/api)
 enabled = false
 
 [db.network_restrictions]
diff --git a/apps/docu/README.md b/apps/docu/README.md
index eca7f89d..a91a0a3e 100644
--- a/apps/docu/README.md
+++ b/apps/docu/README.md
@@ -21,6 +21,8 @@ Starts docs site at [http://localhost:3002](http://localhost:3002).
 - `pnpm start` - Production server
 - `pnpm checktypes` - Type check MDX and TypeScript
 
+Monorepo root (for local API database): `pnpm reset` — see `apps/api/README.md`.
+
 ## Content
 
 Documentation content in `content/docs/`:
diff --git a/apps/docu/content/docs/adrs/008-database.mdx b/apps/docu/content/docs/adrs/008-database.mdx
index a9b8b1d2..3515519b 100644
--- a/apps/docu/content/docs/adrs/008-database.mdx
+++ b/apps/docu/content/docs/adrs/008-database.mdx
@@ -190,15 +190,15 @@ All platforms use the same build command pattern:
 
 - **Docker**: `RUN pnpm build` (runs migrations)
 - **Railway/Fly.io/Render**: `build: pnpm build` (runs migrations)
-- **Local dev**: PostgreSQL migrations run at build time (via `pnpm dev` → `pnpm db:migrate`), PGLite migrations run at runtime
+- **Local dev (PostgreSQL)**: Migrations run when you **build** the API (`pnpm build` / `pnpm --filter @repo/api build`), not when you run `pnpm dev` alone. To wipe local Supabase and re-apply schema + seed, use **`pnpm reset`** (repo root) or **`pnpm reset`** in `apps/api`. **PGLite**: migrations still run at runtime
 
 ### Local database reset (Supabase + Drizzle)
 
-For local Postgres via Supabase CLI (`project_id: basilic-api` in `apps/api/supabase/config.toml`):
+For local Postgres via Supabase CLI (`project_id: basilic-api` in `apps/api/supabase/config.toml`), use **`pnpm reset`** from the repo root (runs `pnpm --filter @repo/api reset`) or **`pnpm reset`** from `apps/api`. One command does:
 
-1. **`pnpm db:reset`** — Drops and recreates the Supabase database. Supabase seeds are disabled; no `seed.sql` is used.
-2. **`pnpm db:reset-and-migrate`** — Reset, then run Drizzle migrations. Use this for a fresh schema.
-3. **Seeding** — Via Drizzle (seed script if configured), not Supabase `seed.sql`.
+1. **`supabase db reset`** — Drops and recreates the database. `[db.seed]` is off; no `seed.sql`.
+2. **Drizzle migrations** — `scripts/migrate.ts` via `pnpm db:migrate` with `RUN_PG_MIGRATE=true` and the local Supabase `DATABASE_URL`.
+3. **Data seed** — `scripts/seed.ts` (`runSeed`). Add idempotent inserts as needed. Runs only as part of **`pnpm reset`**, not on `pnpm db:migrate` or `pnpm build` alone. See `apps/api/README.md`.
 
 Run `pnpm db:stop` before switching to another project's Supabase instance (e.g. different repo); only one Supabase runs per host.
 
diff --git a/apps/docu/content/docs/architecture/api.mdx b/apps/docu/content/docs/architecture/api.mdx
index c3ce7c28..f6f0d704 100644
--- a/apps/docu/content/docs/architecture/api.mdx
+++ b/apps/docu/content/docs/architecture/api.mdx
@@ -123,6 +123,8 @@ TypeScript is generated by `@hey-api/openapi-ts`. Other languages can use standa
 
 The API layer uses Drizzle for queries and `drizzle-kit` for migrations. Migration strategy depends on the database runtime; see [ADR 008: Database Platform & Strategy](/docs/adrs/008-database#migration-strategy).
 
+For local Supabase: **`pnpm reset`** from the monorepo root runs Supabase DB reset, Drizzle migrations, and `scripts/seed.ts` (details in ADR 008).
+
 ## Security
 
 - **Headers**: X-Content-Type-Options, X-Frame-Options, CSP, HSTS
diff --git a/apps/docu/content/docs/development/index.mdx b/apps/docu/content/docs/development/index.mdx
index adeeb8ff..15105cfc 100644
--- a/apps/docu/content/docs/development/index.mdx
+++ b/apps/docu/content/docs/development/index.mdx
@@ -111,4 +111,4 @@ flowchart TB
 
 **Optional Setup:**
 
-For database features, you'll need PostgreSQL. See [Installation](/docs/development).
+For database features, use local PostgreSQL via Supabase: `pnpm --filter @repo/api db:start`, configure `apps/api/.env`, then apply schema and optional seed with **`pnpm reset`** from the repo root (Supabase reset + Drizzle migrate + `scripts/seed.ts`). See [ADR 008: Database](/docs/adrs/008-database) and `apps/api/README.md` in the monorepo.
diff --git a/package.json b/package.json
index 74f4132a..4dab330e 100644
--- a/package.json
+++ b/package.json
@@ -29,6 +29,7 @@
     "setup:gitleaks": "node scripts/setup-gitleaks.mjs",
     "setup:osv": "node scripts/setup-osv-scanner.mjs",
     "setup:database": "node scripts/setup-database.mjs",
+    "reset": "pnpm --filter @repo/api reset",
     "update-deps": "pnpm self-update && pnpm update --latest --recursive"
   },
   "devDependencies": {
diff --git a/packages/react/src/hooks/use-link-email.test.tsx b/packages/react/src/hooks/use-link-email.test.tsx
deleted file mode 100644
index 45891a85..00000000
--- a/packages/react/src/hooks/use-link-email.test.tsx
+++ /dev/null
@@ -1,54 +0,0 @@
-import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
-import { act, renderHook, waitFor } from '@testing-library/react'
-import type { ReactNode } from 'react'
-import { describe, expect, it, vi } from 'vitest'
-import { ApiProvider } from '../provider'
-import { useLinkEmail } from './use-link-email'
-
-function createMockClient() {
-  const request = vi.fn().mockResolvedValue({ ok: true })
-  const verify = vi.fn().mockResolvedValue({ token: 'new-token', refreshToken: 'new-refresh' })
-  const user = vi.fn().mockResolvedValue({
-    user: { id: 'user-1', email: null, name: null, emailVerified: null, linkedWallets: [] },
-  })
-  return {
-    account: { link: { email: { request, verify } } },
-    auth: { session: { user } },
-  } as unknown as ReturnType<typeof import('@repo/core').createClient>
-}
-
-function createWrapper(client: ReturnType<typeof createMockClient>) {
-  const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
-  return function Wrapper({ children }: { children: ReactNode }) {
-    return (
-      <QueryClientProvider client={queryClient}>
-        <ApiProvider client={client}>{children}</ApiProvider>
-      </QueryClientProvider>
-    )
-  }
-}
-
-describe('useLinkEmail', () => {
-  it('calls request with email and callbackUrl', async () => {
-    const client = createMockClient()
-    const { result } = renderHook(() => useLinkEmail(), {
-      wrapper: createWrapper(client),
-    })
-
-    await waitFor(() => expect(result.current).toBeDefined())
-    await act(async () => {
-      await result.current.requestLink({
-        email: 'user@example.com',
-        callbackUrl: 'https://app.example.com/link-callback',
-      })
-    })
-
-    expect(client.account.link.email.request).toHaveBeenCalledWith({
-      body: {
-        email: 'user@example.com',
-        callbackUrl: 'https://app.example.com/link-callback',
-      },
-      throwOnError: true,
-    })
-  })
-})
diff --git a/packages/react/src/hooks/use-verify-link-wallet.test.tsx b/packages/react/src/hooks/use-verify-link-wallet.test.tsx
deleted file mode 100644
index 114f6ce6..00000000
--- a/packages/react/src/hooks/use-verify-link-wallet.test.tsx
+++ /dev/null
@@ -1,66 +0,0 @@
-import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
-import { act, renderHook } from '@testing-library/react'
-import type { ReactNode } from 'react'
-import { describe, expect, it, vi } from 'vitest'
-import { ApiProvider } from '../provider'
-import { useVerifyLinkWallet } from './use-verify-link-wallet'
-
-function createMockClient() {
-  const verify = vi.fn().mockResolvedValue(undefined)
-  return {
-    account: { link: { wallet: { verify } } },
-  } as unknown as ReturnType<typeof import('@repo/core').createClient>
-}
-
-function createWrapper(client: ReturnType<typeof createMockClient>) {
-  const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
-  return function Wrapper({ children }: { children: ReactNode }) {
-    return (
-      <QueryClientProvider client={queryClient}>
-        <ApiProvider client={client}>{children}</ApiProvider>
-      </QueryClientProvider>
-    )
-  }
-}
-
-describe('useVerifyLinkWallet', () => {
-  it('calls verify with chain, message, signature', async () => {
-    const client = createMockClient()
-    const { result } = renderHook(() => useVerifyLinkWallet(), {
-      wrapper: createWrapper(client),
-    })
-
-    await act(async () => {
-      await result.current.mutateAsync({
-        chain: 'eip155',
-        message: 'test message',
-        signature: '0xsig',
-      })
-    })
-
-    expect(client.account.link.wallet.verify).toHaveBeenCalledWith({
-      body: { chain: 'eip155', message: 'test message', signature: '0xsig' },
-      throwOnError: true,
-    })
-  })
-
-  it('calls verify with solana chain', async () => {
-    const client = createMockClient()
-    const { result } = renderHook(() => useVerifyLinkWallet(), {
-      wrapper: createWrapper(client),
-    })
-
-    await act(async () => {
-      await result.current.mutateAsync({
-        chain: 'solana',
-        message: 'solana msg',
-        signature: 'sig',
-      })
-    })
-
-    expect(client.account.link.wallet.verify).toHaveBeenCalledWith({
-      body: { chain: 'solana', message: 'solana msg', signature: 'sig' },
-      throwOnError: true,
-    })
-  })
-})
diff --git a/packages/react/src/hooks/use-verify-web3-auth.test.tsx b/packages/react/src/hooks/use-verify-web3-auth.test.tsx
deleted file mode 100644
index 4181d4aa..00000000
--- a/packages/react/src/hooks/use-verify-web3-auth.test.tsx
+++ /dev/null
@@ -1,120 +0,0 @@
-import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
-import { act, renderHook } from '@testing-library/react'
-import type { ReactNode } from 'react'
-import { describe, expect, it, vi } from 'vitest'
-import { ApiProvider } from '../provider'
-import { useVerifyWeb3Auth } from './use-verify-web3-auth'
-
-function createMockClient() {
-  const verify = vi.fn().mockResolvedValue({
-    token: 'access-token',
-    refreshToken: 'refresh-token',
-  })
-  return {
-    auth: { web3: { eip155: { verify }, solana: { verify } } },
-  } as unknown as ReturnType<typeof import('@repo/core').createClient>
-}
-
-function createWrapper(client: ReturnType<typeof createMockClient>, baseUrl = 'https://api.test') {
-  const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
-  return function Wrapper({ children }: { children: ReactNode }) {
-    return (
-      <QueryClientProvider client={queryClient}>
-        <ApiProvider client={client} baseUrl={baseUrl}>
-          {children}
-        </ApiProvider>
-      </QueryClientProvider>
-    )
-  }
-}
-
-describe('useVerifyWeb3Auth', () => {
-  it('calls eip155 verify with message, signature, domain', async () => {
-    const client = createMockClient()
-    const { result } = renderHook(() => useVerifyWeb3Auth(), {
-      wrapper: createWrapper(client),
-    })
-
-    await act(async () => {
-      await result.current.mutateAsync({
-        chain: 'eip155',
-        message: 'test message',
-        signature: '0xsig',
-        domain: 'localhost',
-      })
-    })
-
-    expect(client.auth.web3.eip155.verify).toHaveBeenCalledWith({
-      body: { message: 'test message', signature: '0xsig', domain: 'localhost' },
-      throwOnError: true,
-    })
-  })
-
-  it('calls solana verify when chain is solana', async () => {
-    const client = createMockClient()
-    const { result } = renderHook(() => useVerifyWeb3Auth(), {
-      wrapper: createWrapper(client),
-    })
-
-    await act(async () => {
-      await result.current.mutateAsync({
-        chain: 'solana',
-        message: 'test message',
-        signature: 'sig',
-        domain: 'localhost',
-      })
-    })
-
-    expect(client.auth.web3.solana.verify).toHaveBeenCalledWith({
-      body: { message: 'test message', signature: 'sig', domain: 'localhost' },
-      throwOnError: true,
-    })
-  })
-
-  it('fetches verify with callbackUrl and redirects on 302', async () => {
-    const client = createMockClient()
-    const locationRef = { href: '' }
-    Object.defineProperty(window, 'location', {
-      value: locationRef,
-      writable: true,
-    })
-
-    const fetchSpy = vi.spyOn(globalThis, 'fetch').mockImplementation(async () => {
-      locationRef.href = 'https://app.com/auth/callback/web3?code=abc'
-      return new Response(null, {
-        status: 302,
-        headers: { Location: 'https://app.com/auth/callback/web3?code=abc' },
-      })
-    })
-
-    const { result } = renderHook(() => useVerifyWeb3Auth(), {
-      wrapper: createWrapper(client),
-    })
-
-    await act(async () => {
-      await result.current.mutateAsync({
-        chain: 'eip155',
-        message: 'm',
-        signature: 's',
-        domain: 'd',
-        callbackUrl: 'https://app.com/auth/callback/web3',
-      })
-    })
-
-    expect(fetchSpy).toHaveBeenCalledWith(
-      'https://api.test/auth/web3/eip155/verify',
-      expect.objectContaining({
-        method: 'POST',
-        body: JSON.stringify({
-          message: 'm',
-          signature: 's',
-          domain: 'd',
-          callbackUrl: 'https://app.com/auth/callback/web3',
-        }),
-        redirect: 'manual',
-      }),
-    )
-    expect(locationRef.href).toBe('https://app.com/auth/callback/web3?code=abc')
-    fetchSpy.mockRestore()
-  })
-})
diff --git a/packages/react/vitest.config.ts b/packages/react/vitest.config.ts
index 03f22170..fd4da5d7 100644
--- a/packages/react/vitest.config.ts
+++ b/packages/react/vitest.config.ts
@@ -10,6 +10,7 @@ export default defineConfig({
     globals: true,
     environment: 'jsdom',
     setupFiles: ['./vitest.setup.ts'],
+    passWithNoTests: true,
   },
   resolve: {
     alias: {
diff --git a/scripts/README.md b/scripts/README.md
index 313db74e..0202e9ff 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -222,6 +222,8 @@ node scripts/setup-database.mjs
 
 **Note**: Docker and Docker Compose are required for Supabase CLI to function. Supabase CLI is optional. Used for local PostgreSQL development with Supabase. Database features will skip if Supabase CLI is not available.
 
+After Supabase is running, a full local wipe + migrations + data seed is **`pnpm reset`** from the repository root (`pnpm --filter @repo/api reset`). See `apps/api/README.md`.
+
 ## Notes
 
 - Publishing scripts use `process.cwd()` to find the package's `package.json` (they run from within each package directory)

From 3134fc0b5a145aef3ebc781b120988abd231cafd Mon Sep 17 00:00:00 2001
From: gaboesquivel <contact@gaboesquivel.com>
Date: Mon, 23 Mar 2026 22:09:58 +0000
Subject: [PATCH 3/4] test(react): restore hook tests and fix vitest react
 resolution

Restore use-link-email, use-verify-link-wallet, and use-verify-web3-auth
tests from before 86b75aeb. Drop passWithNoTests.

Vitest + pnpm: use preserveSymlinks, dedupe, and realpath-backed aliases
for react/react-dom so react-dom and @tanstack/react-query share one React
instance (fixes invalid hook call). Add @vitejs/plugin-react for TSX.
---
 packages/react/package.json                   |   1 +
 .../react/src/hooks/use-link-email.test.tsx   |  54 ++++++++
 .../src/hooks/use-verify-link-wallet.test.tsx |  66 ++++++++++
 .../src/hooks/use-verify-web3-auth.test.tsx   | 120 ++++++++++++++++++
 packages/react/vitest.config.ts               |  16 ++-
 pnpm-lock.yaml                                |  32 +++++
 6 files changed, 288 insertions(+), 1 deletion(-)
 create mode 100644 packages/react/src/hooks/use-link-email.test.tsx
 create mode 100644 packages/react/src/hooks/use-verify-link-wallet.test.tsx
 create mode 100644 packages/react/src/hooks/use-verify-web3-auth.test.tsx

diff --git a/packages/react/package.json b/packages/react/package.json
index 3d43bfbe..380f8797 100644
--- a/packages/react/package.json
+++ b/packages/react/package.json
@@ -43,6 +43,7 @@
     "@testing-library/user-event": "^14.6.1",
     "@types/react": "^19.2.14",
     "@typescript/native-preview": "7.0.0-dev.20260213.1",
+    "@vitejs/plugin-react": "^5.1.2",
     "eslint": "^9.0.0",
     "jsdom": "^28.0.0",
     "react": "^19.2.4",
diff --git a/packages/react/src/hooks/use-link-email.test.tsx b/packages/react/src/hooks/use-link-email.test.tsx
new file mode 100644
index 00000000..45891a85
--- /dev/null
+++ b/packages/react/src/hooks/use-link-email.test.tsx
@@ -0,0 +1,54 @@
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { act, renderHook, waitFor } from '@testing-library/react'
+import type { ReactNode } from 'react'
+import { describe, expect, it, vi } from 'vitest'
+import { ApiProvider } from '../provider'
+import { useLinkEmail } from './use-link-email'
+
+function createMockClient() {
+  const request = vi.fn().mockResolvedValue({ ok: true })
+  const verify = vi.fn().mockResolvedValue({ token: 'new-token', refreshToken: 'new-refresh' })
+  const user = vi.fn().mockResolvedValue({
+    user: { id: 'user-1', email: null, name: null, emailVerified: null, linkedWallets: [] },
+  })
+  return {
+    account: { link: { email: { request, verify } } },
+    auth: { session: { user } },
+  } as unknown as ReturnType<typeof import('@repo/core').createClient>
+}
+
+function createWrapper(client: ReturnType<typeof createMockClient>) {
+  const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
+  return function Wrapper({ children }: { children: ReactNode }) {
+    return (
+      <QueryClientProvider client={queryClient}>
+        <ApiProvider client={client}>{children}</ApiProvider>
+      </QueryClientProvider>
+    )
+  }
+}
+
+describe('useLinkEmail', () => {
+  it('calls request with email and callbackUrl', async () => {
+    const client = createMockClient()
+    const { result } = renderHook(() => useLinkEmail(), {
+      wrapper: createWrapper(client),
+    })
+
+    await waitFor(() => expect(result.current).toBeDefined())
+    await act(async () => {
+      await result.current.requestLink({
+        email: 'user@example.com',
+        callbackUrl: 'https://app.example.com/link-callback',
+      })
+    })
+
+    expect(client.account.link.email.request).toHaveBeenCalledWith({
+      body: {
+        email: 'user@example.com',
+        callbackUrl: 'https://app.example.com/link-callback',
+      },
+      throwOnError: true,
+    })
+  })
+})
diff --git a/packages/react/src/hooks/use-verify-link-wallet.test.tsx b/packages/react/src/hooks/use-verify-link-wallet.test.tsx
new file mode 100644
index 00000000..114f6ce6
--- /dev/null
+++ b/packages/react/src/hooks/use-verify-link-wallet.test.tsx
@@ -0,0 +1,66 @@
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { act, renderHook } from '@testing-library/react'
+import type { ReactNode } from 'react'
+import { describe, expect, it, vi } from 'vitest'
+import { ApiProvider } from '../provider'
+import { useVerifyLinkWallet } from './use-verify-link-wallet'
+
+function createMockClient() {
+  const verify = vi.fn().mockResolvedValue(undefined)
+  return {
+    account: { link: { wallet: { verify } } },
+  } as unknown as ReturnType<typeof import('@repo/core').createClient>
+}
+
+function createWrapper(client: ReturnType<typeof createMockClient>) {
+  const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
+  return function Wrapper({ children }: { children: ReactNode }) {
+    return (
+      <QueryClientProvider client={queryClient}>
+        <ApiProvider client={client}>{children}</ApiProvider>
+      </QueryClientProvider>
+    )
+  }
+}
+
+describe('useVerifyLinkWallet', () => {
+  it('calls verify with chain, message, signature', async () => {
+    const client = createMockClient()
+    const { result } = renderHook(() => useVerifyLinkWallet(), {
+      wrapper: createWrapper(client),
+    })
+
+    await act(async () => {
+      await result.current.mutateAsync({
+        chain: 'eip155',
+        message: 'test message',
+        signature: '0xsig',
+      })
+    })
+
+    expect(client.account.link.wallet.verify).toHaveBeenCalledWith({
+      body: { chain: 'eip155', message: 'test message', signature: '0xsig' },
+      throwOnError: true,
+    })
+  })
+
+  it('calls verify with solana chain', async () => {
+    const client = createMockClient()
+    const { result } = renderHook(() => useVerifyLinkWallet(), {
+      wrapper: createWrapper(client),
+    })
+
+    await act(async () => {
+      await result.current.mutateAsync({
+        chain: 'solana',
+        message: 'solana msg',
+        signature: 'sig',
+      })
+    })
+
+    expect(client.account.link.wallet.verify).toHaveBeenCalledWith({
+      body: { chain: 'solana', message: 'solana msg', signature: 'sig' },
+      throwOnError: true,
+    })
+  })
+})
diff --git a/packages/react/src/hooks/use-verify-web3-auth.test.tsx b/packages/react/src/hooks/use-verify-web3-auth.test.tsx
new file mode 100644
index 00000000..4181d4aa
--- /dev/null
+++ b/packages/react/src/hooks/use-verify-web3-auth.test.tsx
@@ -0,0 +1,120 @@
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { act, renderHook } from '@testing-library/react'
+import type { ReactNode } from 'react'
+import { describe, expect, it, vi } from 'vitest'
+import { ApiProvider } from '../provider'
+import { useVerifyWeb3Auth } from './use-verify-web3-auth'
+
+function createMockClient() {
+  const verify = vi.fn().mockResolvedValue({
+    token: 'access-token',
+    refreshToken: 'refresh-token',
+  })
+  return {
+    auth: { web3: { eip155: { verify }, solana: { verify } } },
+  } as unknown as ReturnType<typeof import('@repo/core').createClient>
+}
+
+function createWrapper(client: ReturnType<typeof createMockClient>, baseUrl = 'https://api.test') {
+  const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
+  return function Wrapper({ children }: { children: ReactNode }) {
+    return (
+      <QueryClientProvider client={queryClient}>
+        <ApiProvider client={client} baseUrl={baseUrl}>
+          {children}
+        </ApiProvider>
+      </QueryClientProvider>
+    )
+  }
+}
+
+describe('useVerifyWeb3Auth', () => {
+  it('calls eip155 verify with message, signature, domain', async () => {
+    const client = createMockClient()
+    const { result } = renderHook(() => useVerifyWeb3Auth(), {
+      wrapper: createWrapper(client),
+    })
+
+    await act(async () => {
+      await result.current.mutateAsync({
+        chain: 'eip155',
+        message: 'test message',
+        signature: '0xsig',
+        domain: 'localhost',
+      })
+    })
+
+    expect(client.auth.web3.eip155.verify).toHaveBeenCalledWith({
+      body: { message: 'test message', signature: '0xsig', domain: 'localhost' },
+      throwOnError: true,
+    })
+  })
+
+  it('calls solana verify when chain is solana', async () => {
+    const client = createMockClient()
+    const { result } = renderHook(() => useVerifyWeb3Auth(), {
+      wrapper: createWrapper(client),
+    })
+
+    await act(async () => {
+      await result.current.mutateAsync({
+        chain: 'solana',
+        message: 'test message',
+        signature: 'sig',
+        domain: 'localhost',
+      })
+    })
+
+    expect(client.auth.web3.solana.verify).toHaveBeenCalledWith({
+      body: { message: 'test message', signature: 'sig', domain: 'localhost' },
+      throwOnError: true,
+    })
+  })
+
+  it('fetches verify with callbackUrl and redirects on 302', async () => {
+    const client = createMockClient()
+    const locationRef = { href: '' }
+    Object.defineProperty(window, 'location', {
+      value: locationRef,
+      writable: true,
+    })
+
+    const fetchSpy = vi.spyOn(globalThis, 'fetch').mockImplementation(async () => {
+      locationRef.href = 'https://app.com/auth/callback/web3?code=abc'
+      return new Response(null, {
+        status: 302,
+        headers: { Location: 'https://app.com/auth/callback/web3?code=abc' },
+      })
+    })
+
+    const { result } = renderHook(() => useVerifyWeb3Auth(), {
+      wrapper: createWrapper(client),
+    })
+
+    await act(async () => {
+      await result.current.mutateAsync({
+        chain: 'eip155',
+        message: 'm',
+        signature: 's',
+        domain: 'd',
+        callbackUrl: 'https://app.com/auth/callback/web3',
+      })
+    })
+
+    expect(fetchSpy).toHaveBeenCalledWith(
+      'https://api.test/auth/web3/eip155/verify',
+      expect.objectContaining({
+        method: 'POST',
+        body: JSON.stringify({
+          message: 'm',
+          signature: 's',
+          domain: 'd',
+          callbackUrl: 'https://app.com/auth/callback/web3',
+        }),
+        redirect: 'manual',
+      }),
+    )
+    expect(locationRef.href).toBe('https://app.com/auth/callback/web3?code=abc')
+    fetchSpy.mockRestore()
+  })
+})
diff --git a/packages/react/vitest.config.ts b/packages/react/vitest.config.ts
index fd4da5d7..2d04898b 100644
--- a/packages/react/vitest.config.ts
+++ b/packages/react/vitest.config.ts
@@ -1,22 +1,36 @@
+import { realpathSync } from 'node:fs'
+import { createRequire } from 'node:module'
 import { dirname, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
+import react from '@vitejs/plugin-react'
 import { defineConfig } from 'vitest/config'
 
 const configDir = dirname(fileURLToPath(import.meta.url))
+const require = createRequire(import.meta.url)
+
+const reactPackageRoot = realpathSync(dirname(require.resolve('react/package.json')))
+const reactDomPackageRoot = realpathSync(dirname(require.resolve('react-dom/package.json')))
+const reactDomClientEntry = realpathSync(require.resolve('react-dom/client'))
 
 export default defineConfig({
+  plugins: [react()],
   test: {
     include: ['src/**/*.{test,spec}.{ts,tsx}'],
     globals: true,
     environment: 'jsdom',
     setupFiles: ['./vitest.setup.ts'],
-    passWithNoTests: true,
   },
   resolve: {
+    // pnpm: keep symlinked package paths so react-dom and @tanstack/react-query share one react instance
+    preserveSymlinks: true,
+    dedupe: ['react', 'react-dom'],
     alias: {
       '@repo/core': resolve(configDir, '../core/src/index.ts'),
       '@repo/ui': resolve(configDir, '../ui/src'),
       '@repo/utils': resolve(configDir, '../utils/src'),
+      react: reactPackageRoot,
+      'react-dom': reactDomPackageRoot,
+      'react-dom/client': reactDomClientEntry,
     },
   },
 })
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ec23230d..9affcc5f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -857,6 +857,9 @@ importers:
       '@typescript/native-preview':
         specifier: 7.0.0-dev.20260213.1
         version: 7.0.0-dev.20260213.1
+      '@vitejs/plugin-react':
+        specifier: ^5.1.2
+        version: 5.2.0(vite@7.3.1(@types/node@25.3.5)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2))
       eslint:
         specifier: ^9.0.0
         version: 9.39.2(jiti@2.6.1)
@@ -5327,6 +5330,9 @@ packages:
   '@rolldown/pluginutils@1.0.0-rc.1':
     resolution: {integrity: sha512-UTBjtTxVOhodhzFVp/ayITaTETRHPUPYZPXQe0WU0wOgxghMojXxYjOiPOauKIYNWJAWS2fd7gJgGQK8GU8vDA==}
 
+  '@rolldown/pluginutils@1.0.0-rc.3':
+    resolution: {integrity: sha512-eybk3TjzzzV97Dlj5c+XrBFW57eTNhzod66y9HrBlzJ6NsCrWCp/2kaPS3K9wJmurBC0Tdw4yPjXKZqlznim3Q==}
+
   '@rollup/plugin-commonjs@28.0.1':
     resolution: {integrity: sha512-+tNWdlWKbpB3WgBN7ijjYkq9X5uhjmcvyjEght4NmH5fAU++zfQzAJ6wumLS+dNcvwEZhKx2Z+skY8m7v0wGSA==}
     engines: {node: '>=16.0.0 || 14 >= 14.17'}
@@ -7278,6 +7284,12 @@ packages:
   '@vercel/static-config@3.1.2':
     resolution: {integrity: sha512-2d+TXr6K30w86a+WbMbGm2W91O0UzO5VeemZYBBUJbCjk/5FLLGIi8aV6RS2+WmaRvtcqNTn2pUA7nCOK3bGcQ==}
 
+  '@vitejs/plugin-react@5.2.0':
+    resolution: {integrity: sha512-YmKkfhOAi3wsB1PhJq5Scj3GXMn3WvtQ/JC0xoopuHoXSdmtdStOpFrYaT1kie2YgFBcIe64ROzMYRjCrYOdYw==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    peerDependencies:
+      vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
+
   '@vitest/coverage-v8@4.0.18':
     resolution: {integrity: sha512-7i+N2i0+ME+2JFZhfuz7Tg/FqKtilHjGyGvoHYQ6iLV0zahbsJ9sljC9OcFcPDbhYKCet+sG8SsVqlyGvPflZg==}
     peerDependencies:
@@ -12800,6 +12812,10 @@ packages:
     resolution: {integrity: sha512-jCvmsr+1IUSMUyzOkRcvnVbX3ZYC6g9TDrDbFuFmRDq7PD4yaGbLKNQL6k2jnArV8hjYxh7hVhAZB6s9HDGpZA==}
     engines: {node: '>=0.10.0'}
 
+  react-refresh@0.18.0:
+    resolution: {integrity: sha512-QgT5//D3jfjJb6Gsjxv0Slpj23ip+HtOpnNgnb2S5zU3CB26G/IDPGoy4RJB42wzFE46DRsstbW6tKHoKbhAxw==}
+    engines: {node: '>=0.10.0'}
+
   react-remove-scroll-bar@2.3.8:
     resolution: {integrity: sha512-9r+yi9+mgU33AKcj6IbT9oRCO78WriSj6t/cF8DWBZJ9aOGPOTEDvdUDz1FwKim7QXWwmHqtdHnRJfhAxEG46Q==}
     engines: {node: '>=10'}
@@ -19921,6 +19937,8 @@ snapshots:
 
   '@rolldown/pluginutils@1.0.0-rc.1': {}
 
+  '@rolldown/pluginutils@1.0.0-rc.3': {}
+
   '@rollup/plugin-commonjs@28.0.1(rollup@4.59.0)':
     dependencies:
       '@rollup/pluginutils': 5.3.0(rollup@4.59.0)
@@ -22714,6 +22732,18 @@ snapshots:
       json-schema-to-ts: 1.6.4
       ts-morph: 12.0.0
 
+  '@vitejs/plugin-react@5.2.0(vite@7.3.1(@types/node@25.3.5)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2))':
+    dependencies:
+      '@babel/core': 7.29.0
+      '@babel/plugin-transform-react-jsx-self': 7.27.1(@babel/core@7.29.0)
+      '@babel/plugin-transform-react-jsx-source': 7.27.1(@babel/core@7.29.0)
+      '@rolldown/pluginutils': 1.0.0-rc.3
+      '@types/babel__core': 7.20.5
+      react-refresh: 0.18.0
+      vite: 7.3.1(@types/node@25.3.5)(jiti@2.6.1)(lightningcss@1.30.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2)
+    transitivePeerDependencies:
+      - supports-color
+
   '@vitest/coverage-v8@4.0.18(vitest@4.0.18)':
     dependencies:
       '@bcoe/v8-coverage': 1.0.2
@@ -30305,6 +30335,8 @@ snapshots:
 
   react-refresh@0.14.2: {}
 
+  react-refresh@0.18.0: {}
+
   react-remove-scroll-bar@2.3.8(@types/react@19.2.14)(react@19.2.0):
     dependencies:
       react: 19.2.0

From 018edf6e444a6178b2be9b887168af0f88347726 Mon Sep 17 00:00:00 2001
From: gaboesquivel <contact@gaboesquivel.com>
Date: Mon, 23 Mar 2026 22:22:39 +0000
Subject: [PATCH 4/4] fix(api): stabilize scalar login e2e wait and pin
 api-reference cdn

---
 apps/api/src/routes/reference/template.ts |  3 +-
 apps/api/test/swagger-login.e2e.spec.ts   | 39 +++++++++++++++++++----
 2 files changed, 34 insertions(+), 8 deletions(-)

diff --git a/apps/api/src/routes/reference/template.ts b/apps/api/src/routes/reference/template.ts
index cba2189a..bd65441b 100644
--- a/apps/api/src/routes/reference/template.ts
+++ b/apps/api/src/routes/reference/template.ts
@@ -15,7 +15,8 @@ export function getReferenceHtml(opts: {
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>API Reference - Basilic</title>
-  <script src="https://cdn.jsdelivr.net/npm/@scalar/api-reference@latest/dist/browser/standalone.js"></script>
+  <!-- Pin matches @scalar/fastify-api-reference; avoids @latest hash/URL drift in E2E -->
+  <script src="https://cdn.jsdelivr.net/npm/@scalar/api-reference@1.44.18/dist/browser/standalone.js"></script>
   <style>${scalarStyles}
   </style>
 </head>
diff --git a/apps/api/test/swagger-login.e2e.spec.ts b/apps/api/test/swagger-login.e2e.spec.ts
index 45109116..f384278f 100644
--- a/apps/api/test/swagger-login.e2e.spec.ts
+++ b/apps/api/test/swagger-login.e2e.spec.ts
@@ -22,6 +22,27 @@ async function extractMagicLinkData(
   }
 }
 
+/** Magic-link callback: replaceState clears token query; Scalar may add a hash — avoid strict full-URL match. */
+async function waitForReferenceAuthSettled(
+  page: ReturnType<typeof test>['page'],
+  { timeoutMs = 20_000 } = {},
+) {
+  await expect
+    .poll(
+      async () =>
+        page.evaluate(() => {
+          const u = new URL(window.location.href)
+          return (
+            Boolean(localStorage.getItem('scalar-token')) &&
+            u.pathname === '/reference' &&
+            !u.searchParams.has('token')
+          )
+        }),
+      { timeout: timeoutMs },
+    )
+    .toBe(true)
+}
+
 test.describe('Scalar UI Login Flow', () => {
   test.describe.configure({ mode: 'serial' })
 
@@ -63,12 +84,14 @@ test.describe('Scalar UI Login Flow', () => {
     if (!magicLink) throw new Error('Failed to extract magic link token and verificationId')
 
     // Step 9: Open callback URL with token+verificationId (server verifies and returns HTML with JWT)
-    const callbackUrl = `${apiUrl}/reference?token=${magicLink.token}&verificationId=${magicLink.verificationId}`
-    await page.goto(callbackUrl)
+    const callbackUrl = new URL(`${apiUrl}/reference`)
+    callbackUrl.searchParams.set('token', magicLink.token)
+    callbackUrl.searchParams.set('verificationId', magicLink.verificationId)
+    await page.goto(callbackUrl.toString())
     await page.waitForLoadState('networkidle')
 
-    // Step 10: Wait for callback page to process and clean URL (template does history.replaceState)
-    await page.waitForURL(/\/reference$/, { timeout: 15000 })
+    // Step 10: Wait for callback script (replaceState + localStorage); allow Scalar hash on URL
+    await waitForReferenceAuthSettled(page)
 
     // Step 11: Check that token is stored in localStorage
     const tokenInStorage = await page.evaluate(() => localStorage.getItem('scalar-token'))
@@ -119,9 +142,11 @@ test.describe('Scalar UI Login Flow', () => {
     const magicLink = await extractMagicLinkData(page)
     if (!magicLink) throw new Error('Failed to extract magic link token and verificationId')
 
-    const callbackUrl = `${apiUrl}/reference?token=${magicLink.token}&verificationId=${magicLink.verificationId}`
-    await page.goto(callbackUrl)
-    await page.waitForURL(/\/reference$/, { timeout: 15000 })
+    const callbackUrl = new URL(`${apiUrl}/reference`)
+    callbackUrl.searchParams.set('token', magicLink.token)
+    callbackUrl.searchParams.set('verificationId', magicLink.verificationId)
+    await page.goto(callbackUrl.toString())
+    await waitForReferenceAuthSettled(page)
     await page.waitForLoadState('networkidle')
 
     // Verify logged in state