Full-Stack Developer (Next.js + Supabase)

TECNICAL Specification Contract - Senior Full-Stack Developer (Next.js + Supabase) - Custom 6-Week Webcomic Platform Job Description ATTENTION APPLICANTS: MANDATORY RECRUITMENT RULES You MUST begin your application cover letter with the exact word "TECHNICAL" to prove you have read this document. Applications failing to start with this keyword will be instantly deleted. THE 48-HOUR ASSESSMENT RULE: You MUST include your written technical response to the 3 architectural problems listed at the bottom of this post directly inside your application. You have exactly 48 hours from the moment this job is posted to submit your proposal with the assessment included. If your proposal lacks the technical assessment answers, it will be instantly rejected. ATTENTION: INDEPENDENT DEVELOPERS ONLY. Applications from agencies, outsourcing companies, development shops, or account managers will be INSTANTLY REJECTED and reported. We require 100% direct, face-to-face communication with the single, dedicated engineer hands-on writing our code. If you are a middleman, do not waste your connects. About Us: Brivel LLC (brivel.net) is building an elite, custom-engineered digital platform designed exclusively for comic creators, webtoon artists, and digital illustrators. The platform features a premium luxury aesthetic utilizing a Pure Deep Black background with Imperial Violet accents. We are looking for a highly disciplined, Independent Senior Full-Stack Developer to execute the entire engineering architecture from scratch. This is a fully comprehensive, fixed-budget project encompassing core system infrastructure, anti-piracy asset security, custom monetization gateways (Centrobill iFrame), payout ledgers (Paxum), and an AI-driven automated upload system. Core Technical Stack: Frontend: React, Next.js (App Router), TypeScript, Tailwind CSS Backend and Database: Supabase (PostgreSQL, Row-Level Security (RLS), Edge Functions, Private Storage Buckets) Hosting/Deployment: Vercel / GitHub Pipeline Fixed Budget, Milestones and Timeline Architecture ($2,700 Total) This project is strictly structured around 5 Weeks of Production Coding + 1 Week of Final QA/Testing. The $2,700 fixed budget is divided into 5 equal escrow milestones of $540 per week. To eliminate any surprises, here is the exact development roadmap and contractual delivery cycle you will be bound to: Weekly Escrow Schedule ($540 per milestone) Milestone 1 ($540) - Database Layer and Supabase Security Architecture Deliverables: Complete PostgreSQL relational database schema on Supabase (Users, Profiles, Authors, Series, Chapters, Comments, Transactions). Hardcode the programmatic revenue logic enforcing the strict 45% Platform / 55% Creator split matrix. Set up private storage buckets with high-resolution canvas paths. Code Freeze: Wednesday, November 18, 2026 at 23:59 Client Inspection: Thursday, November 19, 2026 Milestone 2 ($540) - Hardened Anti-Piracy Asset Pipeline and Leaderboard Engine Deliverables: Secure Next.js backend API routes generating dynamic, short-lived Signed URLs expiring in exactly 120 seconds to completely block hotlinking and scraping. Build the anti-piracy frontend reader UI injecting custom listeners to completely trap/disable right-clicks, drag-and-drop, image saving, text selection, and browser developer tools (F12, Ctrl+Shift+I). Deploy a Supabase Cron Job/Edge function executing exactly every Sunday night at 23:59 to archive weekly voting winners and reset leaderboard vote counters to 0. Code Freeze: Wednesday, November 25, 2026 at 23:59 Client Inspection: Thursday, November 26, 2026 Milestone 3 ($540) - Simplified AI Creator Upload Portal and SFW/NSFW Toggle Dynamic Deliverables: Build a raw, ultra-short creator upload portal (Creator name, raw bulk file drop area, and a live mature toggle button). Integrate the Next.js backend with an automated AI image scanner endpoint that automatically accepts bulk raw art files, auto-crops/formats them to vertical canvas viewports, and programmatically scans content to auto-verify SFW vs NSFW flags. Hardcode strict pricing floor validation rules: SFW configurations (Min. $3.00) and NSFW adult configurations (Min. $5.00 up to $50.00 VIP passes). Code Freeze: Wednesday, December 2, 2026 at 23:59 Client Inspection: Thursday, December 3, 2026 Milestone 4 ($540) - Centrobill High-Risk Gateway and Strict Age Gating Walls Deliverables: Embed a secure Centrobill High-Risk payment iFrame within checkout prompts. Write custom React window postback event listeners to securely intercept real-time successful payment tokens from the cross-origin iFrame and instantly update access permission rows in Supabase. Enforce hard server-side paywalls cutting off streaming at Chapter 4 until explicit tokens are verified. Code a strict +18 interstitial blocking modal across the UI that dynamically locks down and hides any series flagged or toggled as NSFW until verified. Code Freeze: Wednesday, December 9, 2026 at 23:59 Client Inspection: Thursday, December 10, 2026 Milestone 5 ($540) - Paxum Payouts, ExoClick Ads and Print-on-Demand Webhooks Deliverables: Build the creator payout ledger interface allowing artists to securely link Paxum accounts and request payouts based on their audited 55% database balances. Inject conditional layout containers for non-paying users under Chapter 3 layouts. (ExoClick RTB Banner Container Start comments must be physically injected into layout files for seamless future script injections). Program secure, automated supplier webhooks directly into the Creator Studio to handle automated processing of high-margin physical merchandise and custom prints. 100% of the project's features must be complete by this date. Code Freeze: Wednesday, December 16, 2026 at 23:59 Client Inspection: Thursday, December 17, 2026 Week 6 (Final Week) - Sandbox Testing, Mobile Optimization and Contract Sign-off Deliverables: No new features are to be coded. This week is dedicated entirely to intense live sandbox purchasing tests (Centrobill QA testing), validation of the 45/55 split ledger rows, testing the automated weekly leaderboard cron reset, fixing responsive layouts on iOS/Android viewports, and handling the final codebase delivery. Project Completion and Escrow Sign-off: Thursday, December 24, 2026 Strict Engineering Rules and Workflow Engineering Constraint: Absolutely NO low-code or no-code development tools. The entire application codebase must consist of 100% custom, hand-coded, clean, and thoroughly documented TypeScript source code. The Wednesday具 Deployment Rule: 100% of the weekly functional source code must be pushed to our personal GitHub repository and deployed cleanly to the live Vercel staging environment before every Wednesday night at 11:59 PM. Local demonstrations, screenshots, or screen recordings are not accepted as proof of delivery. The Thursday Morning Inspection: Every Thursday morning, the Client will personally pull your repository code, review the architecture, and run extensive functional, security, and mobile device rendering tests directly on the live staging server. Milestone releases are strictly bound to passing these technical checklists. Technical Bug-Fix Window: A mandatory window of 3 business days will be granted to submit functional hotfixes or patches for any bugs identified during the Thursday morning testing. REQUIRED TECHNICAL ASSESSMENT (Submit with cover letter) To be considered for the live Zoom interview phase, provide a concise explanation or pseudo-code approach for these 3 specific bottlenecks within your proposal: Centrobill Cross-Origin iFrame Token Capture: How will you securely listen for and extract successful payment tokens inside the React runtime from a cross-origin checkout iFrame without violating browser same-origin policies? Supabase 120s Asset Expiration: How will you coordinate Next.js API gateway routing and Supabase Row Level Security (RLS) to guarantee that private high-resolution vertical panel links completely expire in exactly 120 seconds to neutralize scraper bots? Automated Weekly Reset State: How will you program the cron job or database automation sequence in Supabase to execute perfectly at Sunday 23:59, ensuring all live user vote tokens are wiped clean to zero and historical records are safely archived? If your logic passes our architectural verification, we will immediately review your GitHub repository links and send you a link to schedule our live Zoom interview.