Launch Readiness

上線設定檢查

這裡只檢查網站環境變數是否齊全；真正的 Supabase schema 仍需要到 Supabase 後台執行 SQL。

網站網址

待設定

部署到正式網址後，將網站網址填入環境變數，Stripe 成功付款也會回到這裡。

缺少環境變數

NEXT_PUBLIC_SITE_URL

Supabase 會員與資料庫

已設定

先到 Supabase SQL Editor 依序執行 supabase/migrations 內的 SQL，再填入專案 URL、匿名金鑰與 service role 金鑰。

Stripe 測試購買水晶

待設定

使用 Stripe 測試模式金鑰，並把 webhook 指到 /api/stripe/webhook，成功付款才會轉成水晶。

缺少環境變數

STRIPE_SECRET_KEY
STRIPE_WEBHOOK_SECRET

Replit App 安全啟動

待設定

LAUNCH_TOKEN_SECRET 至少 32 字元；REPLIT_APP_SHARED_SECRET 需要同步放在各個 Replit App。

缺少環境變數

LAUNCH_TOKEN_SECRET
REPLIT_APP_SHARED_SECRET

Supabase 新手設定精靈

你可以照下面 7 步走。最重要的是：不要公開 service_role，也不要把它貼到 Replit App 或任何前端頁面。

1. 建立 Supabase 專案

打開 supabase.com，登入後點 New project，選一個組織，輸入專案名稱，資料庫密碼請自己保存好。

2. 打開 SQL Editor

進入專案後，在左側選單找到 SQL Editor。這是用來建立資料表、權限與初始 App 資料的地方。

3. 貼上並執行網站資料庫 SQL

回到本頁下方，複製完整 SQL，貼到 Supabase SQL Editor，按 Run。看到 Success 之後再往下一步。

4. 取得 Project URL 與 API keys

到 Project Settings 或 Connect / API Keys 找 Project URL、anon key 與 service_role key。service_role 是後端管理金鑰，不要公開、不要貼到前端頁面。

5. 建立本機 .env.local

在專案根目錄建立 .env.local，把 Supabase URL、anon key、service role key、Stripe 測試金鑰與 Replit shared secret 填進去。

6. 設定 Auth 轉址網址

到 Supabase Auth URL 設定，把 Site URL 設成你的網站網址，並加入 /auth/callback 作為允許轉址。

7. 回到網站檢查狀態

重新啟動網站後，回到 /setup 看待設定項目是否消失。若還有缺少項目，就照缺少的環境變數補上。

Supabase schema

請在 Supabase SQL Editor 執行：supabase/migrations/0001_initial_schema.sql，再執行 supabase/migrations/0002_platform_foundation.sql

完整 SQL，可全選複製

-- 0001_initial_schema.sql
create extension if not exists pgcrypto;

create type public.app_status as enum ('available', 'coming-soon', 'hidden');
create type public.credit_kind as enum ('paid', 'gifted');
create type public.credit_direction as enum ('credit', 'debit');
create type public.transaction_status as enum ('pending', 'succeeded', 'failed', 'reversed');
create type public.transaction_type as enum ('paid_top_up', 'gifted_credit', 'deduction', 'refund', 'adjustment');
create type public.consent_scope as enum ('platform', 'app');
create type public.consent_status as enum ('accepted', 'withdrawn');

create table public.profiles (
  id uuid primary key references auth.users(id) on delete cascade,
  email text not null,
  normalized_trial_email text not null,
  trial_claimed_at timestamptz,
  created_at timestamptz not null default now(),
  updated_at timestamptz not null default now(),
  check (email <> ''),
  check (normalized_trial_email <> '')
);

create unique index profiles_trial_email_once_idx
  on public.profiles (normalized_trial_email)
  where trial_claimed_at is not null;

create table public.devices (
  id uuid primary key default gen_random_uuid(),
  user_id uuid not null references public.profiles(id) on delete cascade,
  device_hash text not null,
  trial_claimed_at timestamptz,
  created_at timestamptz not null default now(),
  check (device_hash <> ''),
  unique (device_hash)
);

create table public.trial_ip_claims (
  id uuid primary key default gen_random_uuid(),
  user_id uuid not null references public.profiles(id) on delete cascade,
  ip_hash text not null,
  claimed_at timestamptz not null default now(),
  check (ip_hash <> '')
);

create index trial_ip_claims_hash_claimed_at_idx
  on public.trial_ip_claims (ip_hash, claimed_at desc);

create table public.apps (
  id text primary key,
  name text not null,
  subtitle text not null default '',
  description text not null default '',
  category text not null default '',
  status public.app_status not null,
  launch_url text,
  allows_gifted_credits boolean not null default false,
  required_consent_types text[] not null default '{}',
  created_at timestamptz not null default now(),
  updated_at timestamptz not null default now(),
  check (id <> ''),
  check (name <> ''),
  check (
    (status = 'available' and launch_url is not null and btrim(launch_url) <> '')
    or (status in ('coming-soon', 'hidden') and launch_url is null)
  )
);

create table public.transactions (
  id uuid primary key default gen_random_uuid(),
  user_id uuid not null references public.profiles(id) on delete cascade,
  app_id text references public.apps(id),
  type public.transaction_type not null,
  credit_kind public.credit_kind not null,
  amount integer not null check (amount > 0),
  direction public.credit_direction not null,
  status public.transaction_status not null default 'succeeded',
  purpose text not null,
  idempotency_key text not null,
  metadata jsonb not null default '{}'::jsonb,
  created_at timestamptz not null default now(),
  check (purpose <> ''),
  check (idempotency_key <> ''),
  check (
    (type = 'paid_top_up' and direction = 'credit' and credit_kind = 'paid')
    or (type = 'gifted_credit' and direction = 'credit' and credit_kind = 'gifted')
    or (type = 'deduction' and direction = 'debit')
    or (type = 'refund' and direction = 'credit')
    or (type = 'adjustment')
  ),
  unique (idempotency_key)
);

create index transactions_user_created_at_idx
  on public.transactions (user_id, created_at desc);

create index transactions_app_created_at_idx
  on public.transactions (app_id, created_at desc)
  where app_id is not null;

create table public.launch_tokens (
  id uuid primary key default gen_random_uuid(),
  user_id uuid not null references public.profiles(id) on delete cascade,
  app_id text not null references public.apps(id),
  token_hash text not null unique,
  expires_at timestamptz not null,
  used_at timestamptz,
  created_at timestamptz not null default now(),
  check (token_hash <> ''),
  check (expires_at > created_at)
);

create index launch_tokens_user_app_idx
  on public.launch_tokens (user_id, app_id, created_at desc);

create table public.consents (
  id uuid primary key default gen_random_uuid(),
  user_id uuid not null references public.profiles(id) on delete cascade,
  app_id text references public.apps(id),
  scope public.consent_scope not null,
  consent_type text not null,
  version text not null,
  status public.consent_status not null,
  created_at timestamptz not null default now(),
  check (consent_type <> ''),
  check (version <> ''),
  check (
    (scope = 'platform' and app_id is null)
    or (scope = 'app' and app_id is not null)
  )
);

create index consents_user_scope_created_at_idx
  on public.consents (user_id, scope, created_at desc);

create index consents_lookup_idx
  on public.consents (user_id, scope, coalesce(app_id, ''), consent_type, version, created_at desc);

alter table public.profiles enable row level security;
alter table public.devices enable row level security;
alter table public.trial_ip_claims enable row level security;
alter table public.apps enable row level security;
alter table public.transactions enable row level security;
alter table public.launch_tokens enable row level security;
alter table public.consents enable row level security;

create policy "Users can read own profile"
  on public.profiles for select
  using (auth.uid() = id);

create policy "Users can read own devices"
  on public.devices for select
  using (auth.uid() = user_id);

create policy "Users can read own trial ip claims"
  on public.trial_ip_claims for select
  using (auth.uid() = user_id);

create policy "Anyone can read visible apps"
  on public.apps for select
  using (status in ('available', 'coming-soon'));

create policy "Users can read own transactions"
  on public.transactions for select
  using (auth.uid() = user_id);

create policy "Users can read own launch tokens"
  on public.launch_tokens for select
  using (auth.uid() = user_id);

create policy "Users can read own consents"
  on public.consents for select
  using (auth.uid() = user_id);

insert into public.apps (
  id,
  name,
  subtitle,
  description,
  category,
  status,
  launch_url,
  allows_gifted_credits,
  required_consent_types
)
values
  (
    'feng-shui-compass',
    $$Feng Shui Compass$$,
    $$Black-gold spatial direction tool$$,
    $$A black-gold compass app focused on direction, profile data, and spatial guidance.$$,
    $$Spatial Direction$$,
    'available',
    'https://e88dc16d-0aa0-4e9f-a27b-173546fed0f5-00-7ln7uurm3yau.pike.replit.dev/',
    true,
    array['platform_terms', 'birth_profile', 'compass_sensor']
  ),
  (
    'eastern-stars',
    $$Eastern Stars$$,
    $$Coming soon$$,
    $$Personalized Zi Wei, yearly flow, and five-element spatial experiences.$$,
    $$Eastern Divination$$,
    'coming-soon',
    null,
    false,
    array[]::text[]
  ),
  (
    'western-astrology',
    $$Western Astrology$$,
    $$Coming soon$$,
    $$Astrology matching, tarot draws, and high-frequency social sharing experiences.$$,
    $$Astrology Tarot$$,
    'coming-soon',
    null,
    false,
    array[]::text[]
  ),
  (
    'oracle-dreams',
    $$Eastern Oracle$$,
    $$Coming soon$$,
    $$I Ching, dream interpretation, oracle lots, and character reading tools.$$,
    $$Oracle Reading$$,
    'coming-soon',
    null,
    false,
    array[]::text[]
  ),
  (
    'name-science',
    $$Name Science$$,
    $$Coming soon$$,
    $$Three talents, five grids, zodiac glyphs, and AI naming suggestions.$$,
    $$Naming$$,
    'coming-soon',
    null,
    false,
    array[]::text[]
  ),
  (
    'ai-physiognomy',
    $$AI Physiognomy$$,
    $$Coming soon$$,
    $$Visual analysis experiences for facial features, bone structure, and palm lines.$$,
    $$Image Reading$$,
    'coming-soon',
    null,
    false,
    array[]::text[]
  ),
  (
    'social-pet-energy',
    $$Social and Pet Energy$$,
    $$Coming soon$$,
    $$Office dynamics, relationship alerts, and companion animal energy readings.$$,
    $$Social Life$$,
    'coming-soon',
    null,
    false,
    array[]::text[]
  )
on conflict (id) do update set
  name = excluded.name,
  subtitle = excluded.subtitle,
  description = excluded.description,
  category = excluded.category,
  status = excluded.status,
  launch_url = excluded.launch_url,
  allows_gifted_credits = excluded.allows_gifted_credits,
  required_consent_types = excluded.required_consent_types,
  updated_at = now();


-- 0002_platform_foundation.sql
create extension if not exists pgcrypto;

alter table public.apps
  add column if not exists app_id text generated always as (id) stored,
  add column if not exists icon text not null default 'compass',
  add column if not exists color_theme text not null default 'black-gold',
  add column if not exists allow_gifted_points boolean,
  add column if not exists cost_type text not null default 'per_item',
  add column if not exists base_cost integer not null default 0,
  add column if not exists sort_order integer not null default 1000;

create unique index if not exists apps_app_id_unique_idx
  on public.apps (app_id);

update public.apps
set allow_gifted_points = allows_gifted_credits
where allow_gifted_points is null;

alter table public.apps
  alter column allow_gifted_points set not null,
  add constraint apps_base_cost_non_negative check (base_cost >= 0),
  add constraint apps_cost_type_known check (cost_type in ('free', 'per_item', 'package', 'external')),
  add constraint apps_color_theme_not_blank check (btrim(color_theme) <> ''),
  add constraint apps_icon_not_blank check (btrim(icon) <> '');

alter table public.launch_tokens
  add column if not exists revoked_at timestamptz,
  add column if not exists ip_address text,
  add column if not exists user_agent text;

create index if not exists launch_tokens_token_hash_active_idx
  on public.launch_tokens (token_hash, expires_at, used_at, revoked_at);

create unique index if not exists transactions_id_user_id_unique_idx
  on public.transactions (id, user_id);

create table if not exists public.subject_profiles (
  id uuid primary key default gen_random_uuid(),
  user_id uuid not null references auth.users(id) on delete cascade,
  display_name text not null,
  gender text,
  birth_date date,
  birth_time time,
  birth_place text,
  timezone text not null default 'Asia/Taipei',
  calendar_type text not null default 'gregorian',
  notes text,
  avatar_url text,
  is_archived boolean not null default false,
  privacy_level text not null default 'normal',
  created_at timestamptz not null default now(),
  updated_at timestamptz not null default now(),
  check (btrim(display_name) <> ''),
  check (btrim(timezone) <> ''),
  check (calendar_type in ('gregorian', 'lunar')),
  check (privacy_level in ('normal', 'private'))
);

create unique index if not exists subject_profiles_id_user_id_unique_idx
  on public.subject_profiles (id, user_id);

create index if not exists subject_profiles_user_archived_sort_idx
  on public.subject_profiles (user_id, is_archived, updated_at desc);

create table if not exists public.profile_unlocks (
  id uuid primary key default gen_random_uuid(),
  user_id uuid not null references auth.users(id) on delete cascade,
  subject_profile_id uuid not null,
  app_id text not null references public.apps(id),
  unlock_key text not null,
  unlock_name text not null,
  cost_currency text not null,
  cost_amount numeric not null,
  transaction_id uuid references public.transactions(id),
  unlocked_at timestamptz not null default now(),
  expires_at timestamptz,
  created_at timestamptz not null default now(),
  check (btrim(unlock_key) <> ''),
  check (btrim(unlock_name) <> ''),
  check (cost_currency in ('points_paid', 'points_gifted', 'gold', 'crystal', 'voucher')),
  check (cost_amount >= 0),
  foreign key (subject_profile_id, user_id)
    references public.subject_profiles(id, user_id)
    on delete cascade
);

create unique index if not exists profile_unlocks_permanent_once_idx
  on public.profile_unlocks (subject_profile_id, app_id, unlock_key)
  where expires_at is null;

create index if not exists profile_unlocks_user_subject_idx
  on public.profile_unlocks (user_id, subject_profile_id, app_id, created_at desc);

alter table public.subject_profiles enable row level security;
alter table public.profile_unlocks enable row level security;

drop policy if exists "Users can read own subject profiles" on public.subject_profiles;
create policy "Users can read own subject profiles"
  on public.subject_profiles for select
  using (auth.uid() = user_id);

drop policy if exists "Users can create own subject profiles" on public.subject_profiles;
create policy "Users can create own subject profiles"
  on public.subject_profiles for insert
  with check (auth.uid() = user_id);

drop policy if exists "Users can update own subject profiles" on public.subject_profiles;
create policy "Users can update own subject profiles"
  on public.subject_profiles for update
  using (auth.uid() = user_id)
  with check (auth.uid() = user_id);

drop policy if exists "Users can read own profile unlocks" on public.profile_unlocks;
create policy "Users can read own profile unlocks"
  on public.profile_unlocks for select
  using (auth.uid() = user_id);

create or replace function public.set_updated_at()
returns trigger
language plpgsql
as $$
begin
  new.updated_at = now();
  return new;
end;
$$;

drop trigger if exists set_subject_profiles_updated_at on public.subject_profiles;
create trigger set_subject_profiles_updated_at
  before update on public.subject_profiles
  for each row
  execute function public.set_updated_at();

insert into public.apps (
  id,
  name,
  subtitle,
  description,
  category,
  status,
  launch_url,
  allows_gifted_credits,
  required_consent_types,
  icon,
  color_theme,
  allow_gifted_points,
  cost_type,
  base_cost,
  sort_order
)
values
  (
    'feng-shui-compass',
    '乾坤羅盤',
    '環境風水與方位決策',
    '黑金風格的第一個 Replit App，從主平台登入、啟動並共用點數。',
    '風水羅盤',
    'available',
    'https://e88dc16d-0aa0-4e9f-a27b-173546fed0f5-00-7ln7uurm3yau.pike.replit.dev/',
    true,
    array['platform_terms', 'birth_profile', 'compass_sensor'],
    'compass',
    'black-gold',
    true,
    'per_item',
    0,
    10
  ),
  (
    'eastern-stars',
    '東方星垣',
    '紫微、流年、五行空間',
    '東方命理主軸 App，預留給後續 Replit App 接入。',
    '東方命理',
    'coming-soon',
    null,
    false,
    array[]::text[],
    'sparkles',
    'black-gold',
    false,
    'per_item',
    0,
    20
  ),
  (
    'western-astrology',
    '西方占星',
    '星座配對與塔羅抽卡',
    '西方占星與塔羅 App，預留給後續 Replit App 接入。',
    '西方神秘學',
    'coming-soon',
    null,
    false,
    array[]::text[],
    'stars',
    'black-gold',
    false,
    'per_item',
    0,
    30
  ),
  (
    'oracle-dreams',
    '東方神諭',
    '六爻易經、解夢、靈籤測字',
    '即時決策與潛意識解讀 App，預留給後續 Replit App 接入。',
    '神諭決策',
    'coming-soon',
    null,
    false,
    array[]::text[],
    'scroll',
    'black-gold',
    false,
    'per_item',
    0,
    40
  ),
  (
    'name-science',
    '科技姓名學',
    '三才五格與 AI 命名',
    '姓名鑑定與命名 App，預留給後續 Replit App 接入。',
    '姓名命名',
    'coming-soon',
    null,
    false,
    array[]::text[],
    'badge',
    'black-gold',
    false,
    'per_item',
    0,
    50
  ),
  (
    'ai-physiognomy',
    'AI 智慧相學',
    '五官骨相與掌紋流年',
    '相學掃描 App，預留給後續 Replit App 接入。',
    '影像相學',
    'coming-soon',
    null,
    false,
    array[]::text[],
    'scan-face',
    'black-gold',
    false,
    'per_item',
    0,
    60
  ),
  (
    'social-pet-energy',
    '社交與寵物',
    '人際互剋與毛孩能量',
    '社交與寵物能量 App，預留給後續 Replit App 接入。',
    '社交寵物',
    'coming-soon',
    null,
    false,
    array[]::text[],
    'heart',
    'black-gold',
    false,
    'per_item',
    0,
    70
  )
on conflict (id) do update set
  name = excluded.name,
  subtitle = excluded.subtitle,
  description = excluded.description,
  category = excluded.category,
  status = excluded.status,
  launch_url = excluded.launch_url,
  allows_gifted_credits = excluded.allows_gifted_credits,
  required_consent_types = excluded.required_consent_types,
  icon = excluded.icon,
  color_theme = excluded.color_theme,
  allow_gifted_points = excluded.allow_gifted_points,
  cost_type = excluded.cost_type,
  base_cost = excluded.base_cost,
  sort_order = excluded.sort_order,
  updated_at = now();