chore: remove Vercel fork relics and AI Gateway managed-keys flow

[suisuss]

Summary

Removes leftover artifacts from the upstream vercel-labs/workflow-builder-template that no longer apply since we don't sync from upstream, and the dormant Vercel-OAuth + AI Gateway managed-keys consent flow that was never enabled in any deploy config.

50 files changed, +225 / -2302 net.

Deleted

• .github/workflows/keeperhub-daily-main-sync-with-upstream.yml — daily cron that hard-reset main to upstream and force-pushed origin/main. Actively dangerous since we no longer sync.
• scripts/migrate-prod.ts and its pnpm build prefix — gated on VERCEL_ENV which is never set in K8s, so it always logged "Skipping migrations". Migrations are run by the K8s init container (deploy/keeperhub/{staging,prod}/values.yaml) via pnpm db:migrate directly.
• app/api/ai-gateway/{consent,status,teams}/route.ts, lib/ai-gateway/, components/overlays/ai-gateway-consent-overlay.tsx — AI Gateway managed-keys consent flow that minted Vercel API keys via Vercel OAuth. Gated on AI_GATEWAY_MANAGED_KEYS_ENABLED, never enabled.
• Vercel genericOAuth provider in lib/auth.ts (gated on unused VERCEL_CLIENT_ID) and the VERCEL_URL baseURL fallback.
• components/github-stars-{button,loader,provider}.tsx — unused upstream UI loading vercel-labs star count.
• specs/KEEPERHUB_PARALLEL_REFACTOR_PLAN.md — premised on syncing from upstream.
• Sentry automaticVercelMonitors: true in next.config.ts — Vercel-cron-only feature, no-op for our K8s deployment.
• @vercel/sdk from package.json (no consumers after lib/integrations/vercel.ts was already deleted upstream).

AI Gateway plugin kept

plugins/ai-gateway/ (workflow plugin providing Generate Text / Generate Image actions, used via plain AI_GATEWAY_API_KEY) is kept. Only stripped Vercel-specific branding from index.ts (helpLink) and test.ts (managed-keys comments).

Cleaned

• app/api/user/{route,password,forgot-password}.ts — dropped \"vercel\" from OAUTH_PROVIDERS arrays.
• lib/auth-providers.ts, components/auth/dialog.tsx, components/ui/integration-icon.tsx — dropped \"vercel\" provider type, Continue with Vercel button, VercelIcon.
• lib/api-client.ts — dropped VercelTeam type, isVercelUser field, aiGatewayApi client.
• lib/workflow/executor/execution-fallback.ts and its test — dropped VERCEL_URL fallback.
• app/layout.tsx — dropped GitHubStarsLoader/Provider Suspense wrapper.
• Connection/workflow overlays + integration-selector + action-config + integrations-manager — removed managed-keys consent branches, isManaged-routing for AI Gateway, vercel icon mapping.
• configuration-overlay.tsx, node-config-panel.tsx — schedule trigger filename hint vercel.json -> schedule.json.
• Comment cleanups in lib/mcp/logging.ts, lib/utils/id.ts, lib/metrics/instrumentation/saturation.ts, lib/workflow/executor/executor.workflow.ts, app/api/agentic-wallet/provision/route.ts, app/api/workflow/[workflowId]/execute/route.ts, sentry.edge.config.ts, tests/integration/agentic-wallet-sweeper.test.ts.
• Doc/spec updates in AGENTS.md, README.md, docs/users-teams-orgs/users.md, deploy/local/values-keeperhub.template.yaml, specs/logging-and-metrics/logging-metrics-system.md, specs/organization-implementation-strategy.md.

Not touched (intentional)

• @vercel/og (load-bearing for OG image generation, runs on Node) and its next.config.ts external.
• @vercel/queue and @vercel/oidc externals in next.config.ts — both are transitive deps from Workflow DevKit and WalletConnect/unstorage; externalization is needed for the Next build.
• lib/monaco-theme.ts vercelDarkTheme and the vercel-dark Monaco theme name — purely cosmetic.
• integrations.is_managed DB column — left in schema and Integration type. Old rows with isManaged=true from the deleted consent flow may still exist. Follow-up needed: drop the column with a migration, clean up Integration.isManaged, lib/db/integrations.ts, and the metric in lib/metrics/db-metrics.ts:638.

Verification

• pnpm type-check: clean
• pnpm test:unit: 3322 / 3322 tests pass across 174 files
• Lint baseline went from 183 -> 101 errors (the 82-error reduction is from deleted files; remaining errors are pre-existing in lines this PR does not touch)

Test plan

• CI: type-check, lint, unit, integration, e2e
• Manually verify sign-in dialog renders without the Continue with Vercel button
• Manually verify schedule-trigger code preview shows schedule.json instead of vercel.json
• Manually verify add-connection / edit-connection / settings flows still work
• Confirm staging deploy still runs migrations via the K8s init container

[github-actions]

PR Environment Deployed

Your PR environment has been deployed!

Environment Details:

• URL: https://app-pr-1049.keeperhub.com
• Namespace: pr-1049
• Cluster: techops-staging
• Image Tag: 627716b
• Commit: 627716bf791bd8e586adb186e9ee8c078814d2fe

Components:

• Keeperhub Application
• PostgreSQL Database (isolated instance)
• LocalStack (SQS emulation)
• Redis (isolated instance)
• Schedule Dispatcher (staging image)
• Block Dispatcher (staging image)
• Event Tracker (staging image)

The environment will be automatically cleaned up when this PR is closed or merged.

[joelorzet]

Hi @suisuss,

Verified the surviving Vercel deps (@vercel/og, @vercel/queue, @vercel/oidc) are still load-bearing, and there are no dangling references to AI_GATEWAY_MANAGED_KEYS_ENABLED, VERCEL_CLIENT_ID, isVercelUser, or VERCEL_ENV on the branch.

Nit: dead code in components/auth/dialog.tsx

const getProviderIcon = (provider: Provider, compact = false) => {
  const _iconClass = compact ? "size-3.5" : undefined;
  switch (provider) {
    case "github":
      return <GitHubIcon />;   // doesn't accept className
    case "google":
      return <GoogleIcon />;   // doesn't accept className

_iconClass is the only consumer of compact. With the Vercel branch gone, neither remaining icon takes a className, so both the local and the compact parameter are dead. The underscore prefix looks like the lint rule was silenced rather than the code removed. Drop the parameter from the signature too if no callers pass it.

[github-actions]

PR Environment Deployment Failed

The PR environment deployment encountered an error.

Please check the workflow logs for details.

Common issues:

• Database initialization timeout
• Image build failures
• Resource constraints

[github-actions]

🧹 PR Environment Cleaned Up

The PR environment has been successfully deleted.

Deleted Resources:

• Namespace: pr-1049
• All Helm releases (Keeperhub, Scheduler, Event services)
• PostgreSQL Database (including data)
• LocalStack, Redis
• All associated secrets and configs

All resources have been cleaned up and will no longer incur costs.