feat: Full rebrand of JetShare to GDY UP + PWA

.env.example

@@ -3,6 +3,17 @@ NEXT_PUBLIC_SUPABASE_URL=your_supabase_url
 NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key
 SUPABASE_SERVICE_ROLE_KEY=your_supabase_service_role_key
 
+# App Configuration
+NEXT_PUBLIC_APP_URL=https://your-app-url.com
+
+# Development Mode Authentication
+# Set to 'true' to enable development mode with a real user from the database
+NEXT_PUBLIC_AUTH_DEV_MODE=false
+# Real user ID from your Supabase database (required if dev mode is enabled)
+NEXT_PUBLIC_AUTH_DEV_USER_ID=real_user_id_from_database
+# Email for the dev user (optional, will be fetched from database)
+NEXT_PUBLIC_AUTH_DEV_USER_EMAIL=dev@example.com
+
 # xAI Grok API for Concierge
 XAI_GROK_API_KEY=your_xai_grok_api_key
 

.eslintrc.json

@@ -0,0 +1,32 @@
+{
+    "extends": ["next/core-web-vitals", "plugin:@typescript-eslint/recommended", "plugin:react-hooks/recommended"],
+    "plugins": ["@typescript-eslint", "filenames", "tailwindcss", "simple-import-sort"],
+    "rules": {
+      "react/no-unescaped-entities": "off",
+
+      // 🧱 Enforce filename conventions
+      "filenames/match-regex": [2, "^[a-zA-Z0-9]+(\\.(ui|container))?$", true],
+
+      // 🎨 Warn against hardcoded styles (enforce Tailwind + theme hook)
+      "no-inline-styles": 0,
+      "tailwindcss/classnames-order": "warn",
+      "tailwindcss/no-custom-classname": "off",
+
+      // 📦 Sort imports consistently
+      "simple-import-sort/imports": "warn",
+      "simple-import-sort/exports": "warn",
+
+      // 🧠 TypeScript
+      "@typescript-eslint/explicit-module-boundary-types": "off",
+      "@typescript-eslint/no-unused-vars": ["warn", { "argsIgnorePattern": "^_" }]
+    },
+    "settings": {
+      "tailwindcss": {
+        "callees": ["classnames", "clsx"],
+        "config": "tailwind.config.js",
+        "cssFiles": ["**/*.css", "**/*.scss"],
+        "removeDuplicates": true
+      }
+    }
+  }
+

.gitignore

@@ -16,11 +16,17 @@
 # misc
 .DS_Store
 *.pem
+# Exclude images except those in public folder
 *.png
 *.jpg
 *.jpeg
 *.gif
 *.svg
+!public/**/*.png
+!public/**/*.jpg
+!public/**/*.jpeg
+!public/**/*.gif
+!public/**/*.svg
 
 # debug
 npm-debug.log*
@@ -47,3 +53,8 @@ logs/
 # IDE
 .idea/
 .vscode/
+.cursor/
+.env.gdyup
+storybook-static/
+yarn.lock
+ios/App/App.xcworkspace/xcuserdata/

.storybook/main.js

@@ -0,0 +1,37 @@
+const path = require('path');
+
+/** @type { import('@storybook/react-vite').StorybookConfig } */
+const config = {
+  stories: [
+    '../stories/Introduction.mdx',
+    '../stories/jetstream/**/*.mdx',
+    '../stories/jetstream/**/*.stories.@(js|jsx|ts|tsx)',
+    '../stories/gdyup/**/*.mdx',
+    '../stories/gdyup/**/*.stories.@(js|jsx|ts|tsx)',
+    '../stories/jetshare/**/*.mdx',
+    '../stories/jetshare/**/*.stories.@(js|jsx|ts|tsx)',
+    '../stories/ui/**/*.mdx',
+    '../stories/ui/**/*.stories.@(js|jsx|ts|tsx)'
+  ],
+  addons: ['@storybook/addon-essentials'],
+  framework: {
+    name: '@storybook/react-vite',
+    options: {}
+  },
+  docs: {
+    autodocs: 'tag',
+  },
+  staticDirs: ['../public'],
+  core: {
+    disableTelemetry: true
+  },
+  viteFinal: (config) => {
+    // Simple path alias
+    config.resolve.alias = {
+      ...config.resolve.alias,
+      '@': path.resolve(__dirname, '../')
+    };
+
+    return config;
+  }
+}; 

AUTH_CHANGES_SUMMARY.md

@@ -0,0 +1,83 @@
+# Authentication System Changes Summary
+
+## Changes Made to Fix Authentication Issues
+
+1. **Created a Single Source of Truth for Auth**
+   - Created a consolidated auth provider in `lib/auth-provider.tsx`
+   - Moved from old path (`components/auth-provider.tsx`) to new path for better organization
+   - Implemented properly typed error handling
+
+2. **Supabase Client Management**
+   - Implemented proper singleton pattern for Supabase client in `lib/supabase.ts`
+   - Removed mock implementations in favor of real data fetching
+   - Fixed storage handling to work better across browsers and devices
+
+3. **Development Mode with Real User Data**
+   - Created a development mode that uses real user data from the database in `lib/dev-auth.ts`
+   - Uses environment variables for configuration (`NEXT_PUBLIC_AUTH_DEV_USER_ID`, `NEXT_PUBLIC_AUTH_DEV_USER_EMAIL`)
+   - Fetches the actual user profile from the database for consistency
+
+4. **Redirect Loop Prevention in Middleware**
+   - Updated middleware to prevent redirect loops with counter
+   - Improved public routes detection
+   - Added better error handling for API routes
+
+5. **Authentication Persistence**
+   - Created a dedicated hook and provider for auth persistence
+   - Handles session refresh at appropriate times
+   - Maintains consistent localStorage state
+
+6. **Updates to Component Import Paths**
+   - Updated import path in `app/layout.tsx` and other key files
+   - Added `AuthPersistenceProvider` to maintain session state across the app
+
+7. **Fixed Profile Fetching in useUserProfile hook**
+   - Updated to use the singleton Supabase client
+   - Improved error handling and type safety
+   - Ensured compatibility with the new auth system
+
+## Files Changed
+
+1. Created new files:
+   - `/lib/auth-provider.tsx` - Main auth provider
+   - `/lib/dev-auth.ts` - Development mode implementation
+   - `/lib/hooks/useAuthPersistence.ts` - Auth persistence hook
+   - `AUTH_SYSTEM.md` - Documentation
+   - `AUTH_QA_CHECKLIST.md` - Testing checklist
+
+2. Updated existing files:
+   - `/lib/supabase.ts` - Improved client implementation
+   - `/middleware.ts` - Better route protection
+   - `/hooks/useUserProfile.tsx` - Fixed profile fetching
+   - `/hooks/useAuthSync.ts` - Updated for compatibility
+   - `/components/AuthGuard.tsx` - Simplified implementation
+   - `/app/layout.tsx` - Updated import paths and added persistence
+
+## Environment Variables
+
+Added environment variables for development mode:
+
+# Development Mode Authentication
+
+NEXT_PUBLIC_AUTH_DEV_MODE=false
+NEXT_PUBLIC_AUTH_DEV_USER_ID=26209e07-7600-4df6-ab1e-4b338f760aff
+NEXT_PUBLIC_AUTH_DEV_USER_EMAIL=<m@aiya.sh>
+
+## Outstanding Tasks
+
+Components that need imports updated:
+
+1. Many components still import from `@/components/auth-provider`
+2. Several components still use `createClient()` instead of `getSupabaseClient()`
+
+These should be updated gradually to avoid breaking changes:
+
+```typescript
+// Old imports
+import { useAuth } from '@/components/auth-provider';
+import { createClient } from '@/lib/supabase';
+
+// New imports
+import { useAuth } from '@/lib/auth-provider';
+import { getSupabaseClient } from '@/lib/supabase';
+```

AUTH_QA_CHECKLIST.md

@@ -0,0 +1,104 @@
+# Authentication QA Checklist
+
+This checklist guides the testing of the authentication system to ensure it works end-to-end across different scenarios.
+
+## Development Mode Testing
+
+- [ ] Set `NEXT_PUBLIC_AUTH_DEV_MODE=true` in `.env.local`
+- [ ] Set `NEXT_PUBLIC_AUTH_DEV_USER_ID` to a real user ID from your database
+- [ ] Start the app with `npm run dev`
+- [ ] Verify you're automatically logged in with the dev user
+- [ ] Check profile data matches the real user from the database
+- [ ] Navigate between public and protected routes without auth prompts
+- [ ] Verify API calls work with the dev session
+
+## Production Mode Testing
+
+### Sign Up
+
+- [ ] Navigate to `/auth/register`
+- [ ] Create a new account with email and password
+- [ ] Verify confirmation email is sent (check logs or email provider)
+- [ ] Verify appropriate success message is shown
+
+### Login Flow
+
+- [ ] Navigate to a protected route (e.g., `/gdyup/dashboard`)
+- [ ] Verify redirect to login page with returnUrl in query params
+- [ ] Log in with valid credentials
+- [ ] Verify redirect back to original protected route
+- [ ] Test remembered login state after page refresh
+
+### Authentication Persistence
+
+- [ ] Login and navigate through multiple pages
+- [ ] Refresh the browser on different routes
+- [ ] Verify session persists across navigation and refreshes
+- [ ] Leave the site idle for 10+ minutes and verify session still works
+
+### Logout Flow
+
+- [ ] Click logout button while on a protected route
+- [ ] Verify redirect to appropriate home page (JetShare or GDY·UP)
+- [ ] Verify protected routes redirect to login after logout
+- [ ] Verify localStorage auth data is cleared after logout
+
+### Password Reset
+
+- [ ] Navigate to forgot password page
+- [ ] Request password reset for your email
+- [ ] Verify reset email is sent
+- [ ] Follow reset link and set new password
+- [ ] Log in with new password
+
+### Error Handling
+
+- [ ] Login with invalid credentials
+- [ ] Verify appropriate error message
+- [ ] Register with existing email
+- [ ] Verify appropriate error message
+- [ ] Force a session token to expire and verify graceful handling
+
+### Cross-Browser Testing
+
+- [ ] Test login flow in Chrome
+- [ ] Test login flow in Firefox
+- [ ] Test login flow in Safari
+- [ ] Test login flow in Edge
+- [ ] Test login flow on mobile browsers (iOS Safari, Android Chrome)
+
+## Specific Route Testing
+
+### GDY·UP Routes
+
+- [ ] `/gdyup/dashboard` - Verify requires auth
+- [ ] `/gdyup/profile` - Verify requires auth
+- [ ] `/gdyup/listings/manage` - Verify requires auth
+- [ ] `/gdyup` (home) - Verify public access works
+
+### JetShare Routes
+
+- [ ] `/jetshare/dashboard` - Verify requires auth
+- [ ] `/jetshare/listings/manage` - Verify requires auth
+- [ ] `/jetshare` (home) - Verify public access works
+
+### API Routes
+
+- [ ] Test a protected API endpoint with valid auth
+- [ ] Test a protected API endpoint with no auth (should return 401)
+- [ ] Test a protected API endpoint with expired token
+- [ ] Verify API refresh token mechanism works
+
+## Edge Cases
+
+- [ ] Test behavior when cookies are disabled
+- [ ] Test navigation between JetShare and GDY·UP authenticated areas
+- [ ] Test authentication after clearing browser cache but not cookies
+- [ ] Test behavior when localStorage is unavailable (private browsing)
+- [ ] Test auth with slow network conditions (throttled connection)
+
+## Redirect Loop Prevention
+
+- [ ] Force a redirect loop scenario (if possible)
+- [ ] Verify the site doesn't get stuck in an infinite loop
+- [ ] Check that the error page shows when too many redirects occur