Weekly review

Authentication is not configured. Set NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY. Until then these pages deny all access rather than exposing bank production data.

Set NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY, then add staff addresses to STAFF_EMAILS (or use an @irelandpay.com, @wesallencompany.com or @kairoscard.io address, which are allowed by default).

For local work you can set DEV_AUTH_BYPASS=1. It is ignored in production and on any Vercel deployment.