Skip to content

Correct account sync and sign-in claims#1087

Merged
BigSimmo merged 2 commits into
mainfrom
codex/reconcile-product-truth
Jul 22, 2026
Merged

Correct account sync and sign-in claims#1087
BigSimmo merged 2 commits into
mainfrom
codex/reconcile-product-truth

Conversation

@BigSimmo

@BigSimmo BigSimmo commented Jul 22, 2026

Copy link
Copy Markdown
Owner

Summary

  • Align account copy with the data actually persisted: favourites and preferences sync, while recent searches remain in the current browser session.
  • Remove the inaccurate claim that workspace data is never shared.
  • Clearly disable unavailable social sign-in in account setup and Apple sign-in elsewhere, while preserving working Google and Microsoft OAuth.
  • Add DOM and Chromium regression coverage for truthful copy and disabled-provider states.

Verification

  • npm run verify:pr-local — passed: format, lint, typecheck, 363 Vitest files / 3,220 passed / 1 skipped, production build/client secret scan, offline RAG 36/36.
  • npm run verify:ui — passed: 265 Chromium scenarios across desktop/mobile, reduced motion, forced colors, zoom, axe, focus, and overflow.
  • Focused account DOM suite — 19/19 passed after the red reproducer failed on all four intended behaviors.
  • Focused Chromium account-setup scenario — passed against an isolated production build.
  • npm run verify:release — Verification not run: this is one sequential reconciliation PR; the final aggregate release gate is reserved for the fully reconciled main state.
  • npm run check:production-readiness — static checks ran; credential-dependent readiness was not completed because this isolated worktree intentionally has no .env.local Supabase/OpenAI values. No provider call was made.

Risk and rollout

  • Risk: Low UI/content risk. Disabled-provider presentation and copy change; configured Google and Microsoft OAuth code paths are unchanged.
  • Rollback: Revert the single squash commit if hosted UI or review identifies a regression.
  • Provider or production effects: None. No Supabase, OpenAI, Railway, or live RAG operation was run.

RAG impact: no retrieval behaviour change — account copy, disabled-provider presentation, and UI tests only.

Clinical Governance Preflight

  • Source-backed claims still require linked source verification before clinical use
  • No patient-identifiable document workflow was introduced or expanded without explicit governance approval
  • Supabase target remains Clinical KB Database (sjrfecxgysukkwxsowpy)
  • Service-role keys and private document access remain server-only
  • Demo/synthetic content remains clearly separated from real clinical sources
  • Source metadata, review status, and outdated/unknown-source behavior remain conservative
  • Deployment classification/TGA SaMD impact was checked when clinical decision-support behavior changed — no clinical decision-support behavior changed

Notes

  • The account persistence claims now map directly to /api/account/favourites, /api/account/preferences, and browser-session recent-query storage.
  • The existing privacy page already discloses Supabase, Railway, and OpenAI processing; this PR removes the contradictory account-dialog claim rather than changing that disclosure.

Summary by CodeRabbit

  • Updates
    • Account setup messaging now distinguishes “Local recents” (browser session) and “Saved favourites” with account-scoped saves.
    • Social sign-in now shows unavailable Apple sign-in with disabled buttons and improved accessibility explanations (and similar unavailable handling where applicable).
    • Email sign-in error handling was simplified to rely on current sign-in attempt/error state.
    • Provider selection was streamlined to Google and Microsoft.
  • Tests
    • Added/updated DOM and UI smoke tests to verify new messaging, disabled sign-in states, and accessibility labels.

Align account copy with the actual favourites/preferences persistence model and browser-session recents. Clearly disable unavailable SSO options while preserving configured Google and Microsoft OAuth. Verified with focused DOM tests, verify:cheap, verify:ui, and verify:pr-local.
@supabase

supabase Bot commented Jul 22, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project sjrfecxgysukkwxsowpy because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@coderabbitai

coderabbitai Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 304aaf55-8d11-4661-869c-d558778a8787

📥 Commits

Reviewing files that changed from the base of the PR and between a375c56 and edbc226.

📒 Files selected for processing (6)
  • src/components/clinical-dashboard/account-setup-dialog.tsx
  • src/components/clinical-dashboard/auth-panel.tsx
  • src/components/clinical-dashboard/settings-dialog.tsx
  • tests/auth-panel-product-truth.dom.test.tsx
  • tests/favourites-auth-gate.dom.test.tsx
  • tests/settings-dialog-actions.dom.test.tsx
🚧 Files skipped from review as they are similar to previous changes (5)
  • tests/settings-dialog-actions.dom.test.tsx
  • tests/auth-panel-product-truth.dom.test.tsx
  • tests/favourites-auth-gate.dom.test.tsx
  • src/components/clinical-dashboard/account-setup-dialog.tsx
  • src/components/clinical-dashboard/auth-panel.tsx

📝 Walkthrough

Walkthrough

Changes

Authentication UI updates

Layer / File(s) Summary
Account setup persistence and provider states
src/components/clinical-dashboard/account-setup-dialog.tsx, tests/favourites-auth-gate.dom.test.tsx, tests/ui-smoke.spec.ts
Account setup copy now distinguishes local recents from account-scoped saves, simplifies email status handling, and presents social providers as unavailable disabled controls.
Auth panel provider flow
src/components/clinical-dashboard/auth-panel.tsx, tests/auth-panel-product-truth.dom.test.tsx
Google and Microsoft remain active OAuth providers, while Apple is disabled with updated persistence messaging and accessibility labels.
Settings provider availability
src/components/clinical-dashboard/settings-dialog.tsx, tests/settings-dialog-actions.dom.test.tsx
Settings sign-in removes Apple OAuth handling and renders Apple as a disabled provider row with accessible unavailable-state details.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Possibly related PRs

Suggested reviewers: claude

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Write docstrings for the functions missing them to satisfy the coverage threshold.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately summarizes the main change: fixing account sync claims and sign-in/provider messaging.
Description check ✅ Passed The description follows the template and covers summary, verification, risk/rollout, governance, and notes with only non-critical gaps.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/reconcile-product-truth

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install timed out. The project may have too many dependencies for the sandbox.


Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@src/components/clinical-dashboard/account-setup-dialog.tsx`:
- Around line 291-303: Update the disabled provider buttons to follow the
required accessibility pattern: in
src/components/clinical-dashboard/account-setup-dialog.tsx:291-303, add a
per-provider connected sr-only description and make the title end with “coming
soon”; apply the same Apple-button title and connected description changes in
src/components/clinical-dashboard/auth-panel.tsx:247-271, while retaining the
existing connected description and updating only the title in
src/components/clinical-dashboard/settings-dialog.tsx:1146-1181. Update
corresponding title and accessible-description assertions in
tests/favourites-auth-gate.dom.test.tsx:153-157,
tests/auth-panel-product-truth.dom.test.tsx:44-48, and
tests/settings-dialog-actions.dom.test.tsx:147-151.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 135634c2-89ca-4f1d-bdfc-e181cc9f3b63

📥 Commits

Reviewing files that changed from the base of the PR and between 2963fba and a375c56.

📒 Files selected for processing (7)
  • src/components/clinical-dashboard/account-setup-dialog.tsx
  • src/components/clinical-dashboard/auth-panel.tsx
  • src/components/clinical-dashboard/settings-dialog.tsx
  • tests/auth-panel-product-truth.dom.test.tsx
  • tests/favourites-auth-gate.dom.test.tsx
  • tests/settings-dialog-actions.dom.test.tsx
  • tests/ui-smoke.spec.ts

Comment thread src/components/clinical-dashboard/account-setup-dialog.tsx Outdated
Use the repository's coming-soon tooltip and connected screen-reader description pattern for unavailable providers. Focused DOM tests, ESLint, and typecheck pass.
@BigSimmo
BigSimmo merged commit 05dc52f into main Jul 22, 2026
34 checks passed
@BigSimmo
BigSimmo deleted the codex/reconcile-product-truth branch July 22, 2026 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant