chore: remove unused starter scaffolding

[PouyanJay]

Fixes #13.

Scaffolding inherited from the vinext template that nothing references. Ten files deleted, 210 lines removed, ~600 KB off the shipped assets, and three npm advisories gone.

Database — never wired up

drizzle isn't imported anywhere in app/, and .openai/hosting.json sets "d1": null, so no binding is ever created.

Removed drizzle-kit, drizzle-orm, db/, examples/d1/, drizzle/, drizzle.config.ts, and the db:generate script. drizzle-kit was pulling the vulnerable @esbuild-kit/* chain, so this takes moderate-severity advisories to zero.

Assets

• Removed public/basis/ — 576 KB of KTX2 transcoder that is never registered. loaders.ts sets the meshopt decoder and nothing else.
• Kept public/draco/ — also unloaded today, but it's exactly what segmented-asset work needs, and registering DRACOLoader is on the roadmap. Deleting it now would only mean re-adding it later.

Dead modules

• app/lib/three/tsl-materials.ts — exports medicalRimNode, which nothing imports
• app/chatgpt-auth.ts — the starter's SIWC helper, never called

README

Was still the untouched starter readme: it documented D1 bindings and ChatGPT sign-in, and never mentioned Anatomy Atelier. Rewritten around what the project actually is, including the two things worth knowing before touching the viewer — it renders on demand, and organs are normalised into a fixed cube so hotspot coordinates mean the same thing for every model.

Deliberately left alone

• AnatomyViewer.prefetch() and the AnatomyAssetManager.prefetch() it delegates to are genuinely unreachable — AnatomyApp does its own warm-up on pointer enter. But removing three lines from viewer.ts would collide with fix: unblock the underside, make the cross-section real and movable, replace the selection heart (#8) #9's 371-line rewrite of that same file for no benefit. Worth doing as a follow-up once fix: unblock the underside, make the cross-section real and movable, replace the selection heart (#8) #9 lands.
• The drizzle copy step in build/sites-vite-plugin.ts — guarded by an existence check, so harmless with the directory gone, and it's generic build infrastructure rather than app code.
• Non-functional nav (Systems, Library, Notes) and the quiz buttons — dead UI, not dead code. Removing visible features is a product decision.

Verification

• tsc --noEmit clean, eslint app worker clean
• npm audit on this branch alone: 18 → 15, moderate 4 → 0
• With test: assert the real app renders instead of a deleted starter skeleton #14 and fix: patch the ten advisories that reach production #15 merged in as well: 18 → 12, and the test suite passes 6/6

⚠️ Same note as #15 — npm test fails on this branch in isolation because main still carries the broken starter test. #14 fixes that. The 6/6 above comes from a scratch branch with all three merged.

Touches package.json and the lockfile, as does #15 — whichever merges second will need a rebase and an npm install.

[vercel]

@PouyanJay is attempting to deploy a commit to the thebuggeddev-9222's projects Team on Vercel.

A member of the Team first needs to authorize it.