Add canonical migrations, Slack delivery, and seed strategy

CONTRIBUTING.md

@@ -4,6 +4,8 @@
 
 SYNCRO uses the [Supabase CLI](https://supabase.com/docs/guides/cli) to manage database migrations.
 All migration files live in `supabase/migrations/` and are applied in lexicographic order.
+`supabase/migrations/` is the canonical migration source of truth for this repository.
+Legacy SQL snapshots under `backend/migrations/` and `backend/scripts/` are kept for reference only.
 
 ### Prerequisites
 
@@ -90,12 +92,15 @@ Every pull request that touches `supabase/migrations/` triggers the
 2. Applies all migrations from scratch (`supabase db push`)
 3. Runs `supabase db lint` to catch SQL issues
 
+Changes under `backend/migrations/` and `backend/scripts/` are not part of the canonical migration validation path.
+
 A PR cannot be merged if this workflow fails.
 
 ### Seed data
 
 `supabase/seed.sql` contains fake data for local development only.
 It is applied automatically by `supabase db reset`.
+Use the same seed file for local development and E2E bootstrap runs.
 
 **Never add real emails, payment data, or any PII to seed.sql.**
 Thank you for your interest in contributing! This guide will help you set up the project, follow conventions, and submit high-quality contributions.

backend/.env.example

@@ -36,6 +36,9 @@ STRIPE_WEBHOOK_SECRET=whsec_...
 
 # Telegram Bot
 TELEGRAM_BOT_TOKEN=your_telegram_bot_token
+
+# Slack notifications
+SLACK_WEBHOOK_URL=https://hooks.slack.com/services/...
 # Secret token sent by Telegram in X-Telegram-Bot-Api-Secret-Token header (set via setWebhook)
 TELEGRAM_WEBHOOK_SECRET=your_telegram_webhook_secret
 

backend/README.md

@@ -9,7 +9,7 @@ The backend is responsible for:
 - **Authentication**: JWT-based auth with HTTP-only cookies; role-based access control (RBAC)
 - **Email Integration**: Gmail and Outlook OAuth scanning for subscription detection
 - **Payment Processing**: Stripe and Paystack webhook handling
-- **Notifications**: Telegram bot, push notifications (Web Push/VAPID), email digests, and quiet-hours support
+- **Notifications**: Telegram bot, Slack webhooks, push notifications (Web Push/VAPID), email digests, and quiet-hours support
 - **Blockchain**: Soroban/Stellar event indexing with Redis-backed dead-letter queue fallback
 - **Observability**: Sentry error tracking, Winston structured logging, health snapshots
 
@@ -122,6 +122,9 @@ STRIPE_WEBHOOK_SECRET=whsec_...
 # Telegram Bot
 TELEGRAM_BOT_TOKEN=...
 
+# Slack notifications
+SLACK_WEBHOOK_URL=https://hooks.slack.com/services/...
+
 # Encryption (for stored API keys)
 ENCRYPTION_KEY=your_32_byte_encryption_key
 
@@ -344,6 +347,12 @@ All routes are registered in `src/index.ts`. Auth middleware (`authenticate`) is
 | GET | `/status` | Get push notification status |
 | GET | `/vapid-public-key` | Get VAPID public key |
 
+### Slack Integration — `/api/integrations/slack`
+
+| Method | Path | Description |
+|--------|------|-------------|
+| GET | `/status` | Check whether Slack webhook delivery is configured |
+
 ### Risk Score — `/api/risk-score`
 
 | Method | Path | Description |

backend/routes/integrations/slack.ts

@@ -0,0 +1,14 @@
+import { Router, Response, NextFunction } from 'express';
+import { AuthenticatedRequest } from '../../src/middleware/auth';
+import { slackService } from '../../src/services/slack-service';
+
+const router: Router = Router();
+
+router.get('/status', (_req: AuthenticatedRequest, res: Response, _next: NextFunction) => {
+  res.json({
+    success: true,
+    data: slackService.getStatus(),
+  });
+});
+
+export default router;

backend/scripts/007_create_reminder_tables.sql

@@ -38,7 +38,7 @@ create table if not exists public.notification_deliveries (
   id uuid primary key default gen_random_uuid(),
   reminder_schedule_id uuid not null references public.reminder_schedules(id) on delete cascade,
   user_id uuid not null references auth.users(id) on delete cascade,
-  channel text not null check (channel in ('email', 'push')),
+  channel text not null check (channel in ('email', 'push', 'slack')),
   status text not null check (status in ('pending', 'sent', 'failed', 'retrying')),
   attempt_count integer default 0,
   max_attempts integer default 3,
@@ -103,4 +103,3 @@ create index if not exists blockchain_logs_user_id_idx on public.blockchain_logs
 create index if not exists blockchain_logs_event_type_idx on public.blockchain_logs(event_type);
 create index if not exists blockchain_logs_status_idx on public.blockchain_logs(status);
 create index if not exists blockchain_logs_transaction_hash_idx on public.blockchain_logs(transaction_hash);
-

backend/src/index.ts

@@ -42,6 +42,7 @@ import walletRoutes from './routes/wallet';
 import emailRescanRoutes from './routes/email-rescan';
 import gmailRouter from '../routes/integrations/gmail'
 import outlookRouter from '../routes/integrations/outlook'
+import slackRouter from '../routes/integrations/slack'
 import { createExchangeRatesRouter } from './routes/exchange-rates';
 import { ExchangeRateService } from './services/exchange-rate/exchange-rate-service';
 import { FiatRateProvider } from './services/exchange-rate/fiat-provider';
@@ -128,6 +129,7 @@ app.use('/api/team', teamRoutes);
 app.use('/api/audit', auditRoutes);
 app.use('/api/integrations/gmail', authenticate, gmailRouter);
 app.use('/api/integrations/outlook', authenticate, outlookRouter);
+app.use('/api/integrations/slack', authenticate, slackRouter);
 app.use('/api/integrations/email', authenticate, emailRescanRoutes);
 app.use('/api/webhooks', webhookRoutes);
 app.use('/api/compliance', complianceRoutes);