Task: Configure Supabase-side indexer/onramp scheduler

[KazanderDad]

Parent Goal: #80
Depends on: #74
Blocks: Worker queue drain proof

Objective

Configure the Supabase-side scheduler for indexer/onramp worker execution.

Expected Surfaces

• Supabase-side scheduler configuration
• Indexer/onramp worker command or function target
• Worker runtime secrets and service-role boundary
• docs/engineering/wallet-release-runbook.md

Scope

• Identify the scheduler target and cadence.
• Configure scheduler only after explicit approval for linked Supabase writes.
• Record configured cadence/target on Goal Goal: Prove Supabase-side worker scheduling #80.

Non-Goals

• Do not run scheduler writes without approval.
• Do not move worker execution into deployed Next.js.

Guardrails

• Service-role remains only in privileged worker/Edge boundaries.
• Linked Supabase writes require separate approval.

Acceptance Criteria

• Scheduler target/cadence is configured or exact approval/blocker is recorded.
• Evidence is added to Goal Goal: Prove Supabase-side worker scheduling #80.

Validation Plan

• Supabase-side scheduler inspection.
• Runbook cross-check.

Stop Condition

Stop after scheduler configuration evidence or exact permission blocker is recorded.

[KazanderDad]

Vetting Note

This issue is part of Sprint #78 and is vetted for the shared implementation branch/worktree below.

Implementation Worktree

• Repo: GreenPill-TO/Genero
• Base branch: origin/dev
• Worktree path: /Users/botmaster/src/greenpill-TO/Genero
• Worktree branch: codex/tcoin-production-launch-readiness
• Use this same worktree for related Sprint Sprint: TCOIN production launch readiness #78 issues: Goal: Align hosted release environments and remote Supabase readiness #74, Goal: Prove Preview sandbox smoke and Buy TCOIN sandbox #79, Goal: Prove Supabase-side worker scheduling #80, Goal: Prove Production smoke and live Buy TCOIN gate #81, and Tasks Task: Configure GitHub Environment secrets and vars for TCOIN release alignment #82-Task: Enforce live Buy TCOIN approval gate and disabled fallback #93.
• Worktree owner: Sprint Sprint: TCOIN production launch readiness #78 / sprint-orchestrator.
• Retain until: Sprint PR is merged and approved-cleanup completes.
• Cleanup owner: sprint-orchestrator via approved-cleanup.
• Do not implement the parent Sprint issue directly; implement unblocked Ready Task issues first, then validate their parent Goal.

Implementation Expectations

• Update code, docs, tests, and agent-context/session-log/ as relevant to the issue.
• Capture evidence directly on the relevant Goal issue, not in a separate evidence packet.
• Never print or persist secret values.
• Do not run linked Supabase writes without explicit just-in-time human approval.
• For UI/browser smoke, provide route/result notes and screenshots or comparable visual evidence when practical.

Issue Validator

After implementation, local validation, session-log update, and commit, the orchestrator must run issue-validator before moving high-risk Tasks or Goals to In Review.

Validator input should include: issue URL, parent issue URL, commit hash, worktree path, changed files summary, validation commands/results, smoke evidence, visual evidence where relevant, non-goals/guardrails, skipped checks, and residual risks.

Expected validator output: pass, pass-with-notes, or fail, with concise evidence and required fixes. The validator reports back to the orchestrator; the orchestrator moves Project status only after validation passes.

[KazanderDad]

Implementation evidence

Commit: 332446b (chore: configure tcoin worker scheduler target (#88))

What changed:

• Added INDEXER_TOUCH_WORKER_SCOPE_KEY support to scripts/indexer-touch-worker.ts so scheduled drains can be scoped to tcoin:42220 instead of claiming any queued scope.
• Added profile-backed worker commands:
  • pnpm ops:indexer:drain-touch-queue:supabase-local
  • pnpm ops:indexer:drain-touch-queue:supabase-remote
• Updated docs/engineering/wallet-release-runbook.md with the scheduler target, one-minute one-shot cadence, required worker env, service-role boundary, and the explicit blocker before enabling a recurring scheduler.
• Added focused test coverage that scoped drains pass p_scope_key into indexer.claim_touch_request_v1.

Validation:

• pnpm exec vitest run services/indexer/src/touchQueue.test.ts
• pnpm exec tsc --noEmit --pretty false
• pnpm lint
• git diff --check

Boundary check:

• No linked Supabase writes were run.
• No Preview or Production recurring scheduler was enabled.
• This task records the exact scheduler target/cadence and the approval/proof blocker: Task Task: Verify worker queue drain and health reporting #89 must prove bounded queue drain and health reporting before scheduler enablement.

[KazanderDad]

Issue Validator result

Result: pass-with-notes

Target issue: #88
Commit reviewed: 332446b

Evidence reviewed:

• Implementation evidence comment on Task: Configure Supabase-side indexer/onramp scheduler #88.
• Goal Goal: Prove Supabase-side worker scheduling #80 scheduler target update comment.
• Commit diff for worker script, package scripts, runbook, test, and session log.

Validation rerun:

• pnpm exec vitest run services/indexer/src/touchQueue.test.ts passed.
• pnpm exec tsc --noEmit --pretty false passed.
• pnpm lint passed.
• git diff --check passed.

Boundary check:

• No linked Supabase writes were run.
• No recurring Preview or Production scheduler was enabled.
• Service-role remains scoped to the external worker runtime boundary.

Notes:

• The scheduler target/cadence is now explicit and test-backed.
• This is a pass-with-notes because actual linked scheduler enablement remains intentionally blocked until Task Task: Verify worker queue drain and health reporting #89 proves bounded queue-drain behaviour and a human gives just-in-time approval for any linked Supabase scheduler write.

Ready for Project status: In Review.