DevOps Center

  Client Browser
       |
       v
  Cloudflare CDN (omegaos.co)
  [Pages: Static HTML/JS]
       |
       +---> Supabase Auth (signup/login)
       |
       +---> Supabase Edge Functions (Deno)
       |       |
       |       +---> /signup (public, creates user + sends welcome email)
       |       +---> /profile (auth'd, get/update profile)
       |       +---> /documents (auth'd, list/upload docs)
       |       +---> /chat (auth'd, AI assistant)
       |       |
       |       +---> Resend API (transactional email)
       |
       +---> Supabase PostgreSQL (RLS-protected)
               |
               +---> clients (profile data)
               +---> client_documents (uploaded files)
               +---> messages (chat history)
    

Frontend (Cloudflare Pages)

All HTML files are in the omega-site/ directory and deployed via Wrangler CLI.

# Deploy all pages
cd omega-site
npx wrangler pages deploy . --project-name omega-pipeline

# Verify deployment
curl -s -o /dev/null -w "%{http_code}" https://omegaos.co/

Backend (Supabase Edge Functions)

Edge functions run on Deno and are deployed via Supabase CLI or dashboard.

# Deploy edge function
npx supabase functions deploy onboarding --project-ref ckeykrgdnddjdojkxmyt

# Set secrets
npx supabase secrets set RESEND_API_KEY=re_xxx --project-ref ckeykrgdnddjdojkxmyt

# Check logs
# Dashboard: supabase.com/dashboard/project/ckeykrgdnddjdojkxmyt/functions/onboarding/logs

clients

client_documents

Row Level Security (RLS)

All tables have RLS enabled. Clients can only access their own records.

-- clients: users see only their own row
CREATE POLICY "Users read own client" ON clients
  FOR SELECT USING (auth.uid() = id);

-- client_documents: users see only their own documents
CREATE POLICY "Users read own docs" ON client_documents
  FOR SELECT USING (client_id = auth.uid());