Makati Lovable.dev + Supabase Developer Needed for Live Collaboration

**Overview**
I have a new, complete design built in ---------- v and I want to turn it into a stable, production-ready leadgen / e-commerce foundation with full control over the frontend and a solid backend. The backend is Supabase (Postgres + Auth).

I’m looking for a developer who has done “AI-generated app ? production-ready” work before, and who is comfortable working **live** with me via screen sharing so I can see exactly what you’re doing.

**Critical requirement (how we work)**
We will work **live** via **AnyDesk or Google Meet** with screen sharing.

* You implement on your machine while sharing your screen
* I watch, ask questions, and test along the way
* Clear explanations while building (no silent coding)

If you prefer working fully async without screen sharing, this project is not a fit.

**Scope (what you will fix/build)**

1. **Admin + Security (must-have)**

* Implement a clean admin model: `user_roles` table + secure admin checks (server-side)
* Configure **RLS policies** correctly (no role leaks)
* Fix the security finding: “Admin User Identities Could Be Discovered by Attackers”
* Ensure `/admin/import` is admin-only

2. **CSV Import Flow (must-have)**

* Working import UI at `/admin/import`
* CSV upload ? validation ? processing ? writes into tables (products/variants/images)
* Import batch logging (status, counts, errors per row)

3. **Deploy + Environment Setup**

* Correct secrets/env config in cloud (keys, env vars)
* GitHub repo with clean commits + rollback ability
* Deploy flow to Vercel (or an equivalent) with preview deployments

**Expected stack/skills**

* React and/or Next.js (Tailwind welcome)
* Supabase: Auth, Postgres, RLS policies
* GitHub workflow (branches, PRs, clean commits)
* Security-first mindset

**Definition of Done (deliverables)**

* `/admin/import` works end-to-end on the published URL
* Admin roles + RLS policies are correct and secure
* CSV import reliably handles: products, product_variants, product_images
* Import batches show status + error reporting (traceable)
* Repo includes README: setup, env example, run/deploy steps

**Working style**

* Start with a **60–90 min live session**: quick audit + plan
* Then live sessions of **2–3 hours**, 1–3x per week until completion
* Small milestones, frequent testing checkpoints

**Budget / rate**
Hourly or fixed-price per milestone — propose your best approach.

**Screening Questions (please answer)**

1. Are you comfortable working **live via AnyDesk/Google Meet** with screen sharing?
2. Can you explain what you do while building (step-by-step, decisions, tradeoffs)?
3. Share 1–2 examples where you implemented **Supabase RLS + roles** securely.
4. How would you prevent “admin identity” leakage at DB/API/UI level?
5. How would you design a robust CSV import (validation, partial failure, retries)?
6. When can you start (today / within 48 hours / later)?

**Nice-to-have (bonus)**

* Multi-language SEO / leadgen experience
* Headless commerce experience (Shopify/Magento) for future phase
* Experience with Edge Functions / serverless

Thank you — please include your best relevant examples and answers to the questions above.