JEMA STUDIOS · SINGLE SOURCE OF TRUTH

System Map — Where Everything Lives

Live at ops.jemastudios.com · Phase 4 complete · auth + RLS + HR self-service + Vercel deployment.

Tables

270+

RLS Policies

Surfaces

Auth Users

🌍 Now live on the internet. The system is hosted at https://ops.jemastudios.com with SSL — accessible from any browser on any device anywhere in the world. Eric in Canada, Frank in Ghana, Ibrahim in USA can all open that URL and sign in right now. This is no longer "a thing on Kwaku's Mac" — it's a real internet product. The bones are built. Auth works. RLS works. HR can self-manage team access. What's left isn't a mountain.

📊 Database

Tables79

RLS policies270+

Migrations applied40

Functions/views42

Projects loaded194

Team rows62

🔐 Auth & Access

Auth users (Supabase)61

Tier A (full bypass)2 — Kwaku, Jeffery

Tier B HoXX + CDs~10

Tier C field creatives~49

Edge functions deployed1 — admin-team-action

🚀 Surfaces Live

Bundled HTMLs13

Auth-wired13 of 13

Live-data wired11 of 13

Region-scope UI1 of 5 surfaces

Build versionv2026-05-24.19:00

∞ Infrastructure live · hosted · backed up

Layer	Where	Status
Production URL	https://ops.jemastudios.com	live · SSL
Backup URL (Vercel default)	`jema-ssot-…vercel.app`	live
Hosting	Vercel — team `jema-s-projects1`	live
Domain	GoDaddy — `ops` CNAME → vercel-dns	resolved
Database + Auth + Storage	Supabase project `ayykfhfpurrxtootrbau`	live
Edge Function (admin actions)	`admin-team-action` — create + reset PW	v2 active
GitHub repo	`quekujema14-ctrl/jema-ssot`	push pending
CI/CD (auto-deploy on push)	Vercel↔GitHub integration	setup pending

A Access Tier Framework locked · migrations 0035-0040

Tier A

Kwaku · Jeffery

Full bypass. Sees + writes everything across all regions, all depts. Owns access management.

Tier B

Heads of Dept + Country Directors

HoXX (Frank, Maame, Bernard, Johnson, Pius): all regions within their dept.
CDs (Eric, Alex, Ibrahim): region-scoped via access_scope.regions. No leads/sales outside scope.

Tier C

Field Creatives · Associates

Only projects they're personally assigned to via production_assignments. No invoices, no contracts, no leads. Own pay row only. Team table for call sheets.

S Surfaces · 13 working pages click to open

Surface	Purpose	Auth	Live Data	Region-scope UI
jema_auth_login	Sign-in · session management	live	—	—
jema_regional_view	Country Director snapshot per region	live	live	enforced
jema_dept_report	9 dept workspaces + HR Access Mgmt	live	live	pending
jema_project_hub	Per-project deep view	live	live	N/A
jema_leads_pipeline	Sales pipeline	live	live	pending
jema_calendar	Global + production calendar	live	live	pending
jema_associate_intake	New associate signup form	live	live	—
jema_consultation	Discovery + pre-wedding consults	live	live	—
jema_questionnaire	Client questionnaire (v2)	live	live	—
jema_project_dossier	One-click full project PDF	live	live	—
jema_auth_test	Minimal auth isolation test	live	—	—
jema_db_demo	db.* module sandbox	dev	live	—
jema_ui_demo	Component library showcase	dev	—	—

✓ Done 5 weeks of work · 102 tasks closed

DONEPhase 1 · inventory · comprehensive schema design (79 tables)
DONEPhase 2 · bulk importers · data migration (135 SSOT + 60 corp + 141 Zoho + 156 Pixieset)
DONEPhase 3 · modern UI shell · 9 dept workspaces · Project Hub · Regional View · Calendar · Leads Pipeline
DONEPhase 4 · auth (Supabase + 61 users) · RLS hardening · region-scope · Tier C field-creative scope · HR self-service interface · Edge function for admin actions

→ What's actually left finite · ranked by impact

NEXTBackfill production_assignments — until populated, Tier C associates log in to an empty screen. Probably a CSV import from your working sheets. Unblocks team-wide adoption.
NEXTCutover plan — write the one-pager: "On date X, Sheets become read-only / archive; the app is the source of truth." Decide what dies in Sheets and when.
POLISHRegion-scope UI on Leads + Calendar (today's pattern, replicated)
PHASE 5Gmail integration (auto-attach client emails to projects)
PHASE 5Zoho Books integration (auto-sync invoices)
PHASE 5Pixieset gallery sync (delivery automation)
PHASE 5Dropbox file backups linkage
POLISHMobile-responsive testing + PWA install for field creatives

📁 Where things live paths quick reference

What	Path
All bundled HTML surfaces	`/Documents/Cowork Homebase/jema_*.html`
Living memory (what we agreed)	`/Documents/Cowork Homebase/JEMA_MIGRATION_MEMORY.md`
Data-access layer (db.js source)	`/Documents/Cowork Homebase/_supabase/js/db.js`
Shared boot script (live_boot.js)	`/Documents/Cowork Homebase/_supabase/js/ui/live_boot.js`
Surface source files (pre-bundle)	`/Documents/Cowork Homebase/_supabase/js/ui/*.html`
Supabase project	`ayykfhfpurrxtootrbau` · dashboard
Edge function (admin actions)	`admin-team-action` · deployed v2

? How to use this page

When you feel lost: open this page. Top to bottom in 60 seconds tells you the whole system.
When team needs onboarding: share the Surfaces table — that's your "what does the app do" answer.
When promoting / demoting someone: sign in as yourself → HR Workspace → Team Access Management. Don't ping me.
When you want to know what's left: the "What's actually left" section is the truth. Three boxes. Not a mountain.
If anything here goes stale: tell me and I rebuild it from live data in 60 seconds.