Chore: force Zod v3, replace deprecated Supabase vars in local dev, updated Dev Tool (#425)

* - Replaced Supabase local environment variables
- Updates packages
- Force Zod v3 if peer deps require Zod v4
- Updated Dev Tool

* Use correct field for pnpm overrides

* Fix inaccuracies in the Agents files; fix type casting in `useForm`

* Updated lock file

* Be more specific when intercepting POST request in flaky e2e test

apps/dev-tool/app/lib/connectivity-service.ts

@@ -95,8 +95,7 @@ class ConnectivityService {
     try {
       const response = await fetch(endpoint, {
         headers: {
-          apikey,
-          Authorization: `Bearer ${adminKey}`,
+          apikey: adminKey,
         },
       });
 

apps/dev-tool/app/variables/components/app-environment-variables-manager.tsx

@@ -73,36 +73,51 @@ function EnvListDisplay({
         }
       >
         <div className="bg-muted/50 sticky top-0 flex flex-col gap-y-1 rounded-lg p-4">
-          <div className={'sticky top-0 h-full overflow-auto pb-16 break-all'}>
+          <div
+            className={
+              'sticky top-0 flex h-full flex-col overflow-auto pb-16 break-all'
+            }
+          >
             {groups.map((group) => (
               <div className="mb-4" key={group.category}>
                 <span># {group.category}</span>
 
-                {group.variables.map((variable) => {
-                  const model = envVariables.find(
-                    (item) => item.name === variable.key,
-                  );
+                <div className="flex flex-col gap-y-1">
+                  {group.variables.map((variable) => {
+                    const model = envVariables.find(
+                      (item) => item.name === variable.key,
+                    );
 
-                  const isSecret = model?.secret;
-                  const value =
-                    isSecret && hideSecret
-                      ? '••••••••'
-                      : variable.effectiveValue;
+                    const isSecret = model?.secret;
 
-                  return (
-                    <Link
-                      href={`#var_${variable.key.toLowerCase()}`}
-                      className={cn('block transition-all hover:underline', {
-                        ['text-orange-500']: variable.isOverridden,
-                        ['text-destructive']: !variable.validation.success,
-                        ['opacity-20']: !variable.isVisible,
-                      })}
-                      key={variable.key}
-                    >
-                      <span>{variable.key}</span>: {value}
-                    </Link>
-                  );
-                })}
+                    const value =
+                      isSecret && hideSecret
+                        ? '••••••••'
+                        : variable.effectiveValue;
+
+                    return (
+                      <Link
+                        href={`#var_${variable.key.toLowerCase()}`}
+                        className={cn(
+                          'hover:bg-accent block p-px transition-all',
+                          {
+                            ['text-orange-500']: variable.isOverridden,
+                            ['text-destructive']: !variable.validation.success,
+                            ['opacity-20']: !variable.isVisible,
+                          },
+                        )}
+                        key={variable.key}
+                      >
+                        <b>{variable.key}</b>:{' '}
+                        {value && (
+                          <span className={'bg-muted rounded p-0.5'}>
+                            {value}
+                          </span>
+                        )}
+                      </Link>
+                    );
+                  })}
+                </div>
               </div>
             ))}
           </div>

apps/dev-tool/app/variables/lib/env-variables-model.ts

@@ -411,7 +411,6 @@ export const envVariables: EnvVariableModel[] = [
     name: 'NEXT_PUBLIC_SUPABASE_ANON_KEY',
     description: 'Your Supabase anonymous API key.',
     category: 'Supabase',
-    required: true,
     type: 'string',
     deprecated: {
       reason: 'Replaced by new JWT signing key system',
@@ -450,7 +449,6 @@ export const envVariables: EnvVariableModel[] = [
     description: 'Your Supabase service role key (keep this secret!).',
     category: 'Supabase',
     secret: true,
-    required: true,
     type: 'string',
     deprecated: {
       reason: 'Renamed for consistency with new JWT signing key system',

apps/dev-tool/package.json

@@ -4,7 +4,7 @@
   "private": true,
   "scripts": {
     "clean": "git clean -xdf .next .turbo node_modules",
-    "dev": "next dev --port=3010 | pino-pretty -c",
+    "dev": "next dev --port=3011 | pino-pretty -c",
     "format": "prettier --check --write \"**/*.{ts,tsx}\" --ignore-path=\"../../.prettierignore\""
   },
   "dependencies": {
@@ -13,7 +13,7 @@
     "@hookform/resolvers": "^5.2.2",
     "@tanstack/react-query": "catalog:",
     "ai": "5.0.108",
-    "lucide-react": "^0.556.0",
+    "lucide-react": "^0.561.0",
     "next": "catalog:",
     "nodemailer": "^7.0.11",
     "react": "catalog:",
@@ -29,7 +29,7 @@
     "@kit/shared": "workspace:*",
     "@kit/tsconfig": "workspace:*",
     "@kit/ui": "workspace:*",
-    "@tailwindcss/postcss": "^4.1.17",
+    "@tailwindcss/postcss": "^4.1.18",
     "@types/node": "catalog:",
     "@types/nodemailer": "7.0.4",
     "@types/react": "catalog:",

apps/e2e/tests/team-accounts/team-accounts.po.ts

@@ -165,7 +165,9 @@ export class TeamAccountsPageObject {
       await this.page.click(`[data-test="role-option-${newRole}"]`);
 
       // Wait for the update to complete and page to reload
-      const response = this.page.waitForResponse('**/members');
+      const response = this.page.waitForResponse(response => {
+        return response.url().includes('members') && response.request().method() === 'POST'
+      });
 
       return Promise.all([
         this.page.click('[data-test="confirm-update-member-role"]'),

apps/web/.env.development

@@ -3,8 +3,8 @@
 
 # SUPABASE
 NEXT_PUBLIC_SUPABASE_URL=http://127.0.0.1:54321
-NEXT_PUBLIC_SUPABASE_ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0
-SUPABASE_SERVICE_ROLE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU
+NEXT_PUBLIC_SUPABASE_PUBLIC_KEY=sb_publishable_ACJWlzQHlZjBrEguHvfOxg_3BJgxAaH
+SUPABASE_SECRET_KEY=sb_secret_N7UND0UgjKTVK-Uodkm0Hg_xSvEMPvz
 
 ## THIS IS FOR DEVELOPMENT ONLY - DO NOT USE IN PRODUCTION
 SUPABASE_DB_WEBHOOK_SECRET=WEBHOOKSECRET

apps/web/.env.test

@@ -3,8 +3,8 @@ NEXT_PUBLIC_CI=true
 
 # SUPABASE
 NEXT_PUBLIC_SUPABASE_URL=http://127.0.0.1:54321
-NEXT_PUBLIC_SUPABASE_ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0
-SUPABASE_SERVICE_ROLE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU
+NEXT_PUBLIC_SUPABASE_PUBLIC_KEY=sb_publishable_ACJWlzQHlZjBrEguHvfOxg_3BJgxAaH
+SUPABASE_SECRET_KEY=sb_secret_N7UND0UgjKTVK-Uodkm0Hg_xSvEMPvz
 
 ## THIS IS FOR DEVELOPMENT ONLY - DO NOT USE IN PRODUCTION
 SUPABASE_DB_WEBHOOK_SECRET=WEBHOOKSECRET

apps/web/package.json

@@ -60,14 +60,14 @@
     "@tanstack/react-query": "catalog:",
     "@tanstack/react-table": "^8.21.3",
     "date-fns": "^4.1.0",
-    "lucide-react": "^0.556.0",
+    "lucide-react": "^0.561.0",
     "next": "catalog:",
     "next-sitemap": "^4.2.3",
     "next-themes": "0.4.6",
     "react": "catalog:",
     "react-dom": "catalog:",
     "react-hook-form": "^7.68.0",
-    "react-i18next": "^16.4.0",
+    "react-i18next": "^16.5.0",
     "recharts": "2.15.3",
     "tailwind-merge": "^3.4.0",
     "tw-animate-css": "catalog:",