fix(db): reconcile live database drift and harden security without RAG regression

[BigSimmo]

CI green on clean branch

Branch head: 09b3567c8

Issues debugged and fixed

Issue	Fix
Prettier blocking verify	6f1d525e3 — formatted 4 files
TS2339 allowGlobalSearch on document lookup args	09b3567c8 — added optional field to fetchBestDocumentLookupChunks args type
Unrelated UI commit repeatedly landing on branch	Removed Auto-hide answer support chips… (caused merge conflicts + desktopBackdropClassName type error)

CI run (manual dispatch)

https://github.com/BigSimmo/Database/actions/runs/28750309235

• verify: PASS (format, lint, typecheck, unit tests, build, deployment boot smoke)
• ui-smoke: PASS

Live database (already applied)

• Migrations through 20260705220000 on sjrfecxgysukkwxsowpy
• indexing-v3-agent edge function deployed

Merge note

Branch may still conflict with main where overlapping access-rollout work landed via other PRs (#291 etc.). Resolve at merge without re-importing unrelated UI commits onto this branch.

  

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[BigSimmo]

Closing as largely superseded by #274, #277, and #287 on \main. This branch is also merge-conflicted.

If still needed, salvage only the unique pieces onto fresh branches from current \main:

• \supabase/migrations/20260705220000_reconcile_live_database_drift.sql\ (live DB drift reconciliation)
• docs updates in \docs/supabase-migration-reconciliation.md\

Child PRs #284 and #285 should be retargeted/reopened against \main, not this branch.

[supabase]

Updates to Preview Branch (cursor/fix-all-db-issues-5f13) ↗︎

Deployments	Status	Updated
Database	⚠️	Sun, 05 Jul 2026 18:43:52 UTC
Services	⚠️	Sun, 05 Jul 2026 18:43:52 UTC
APIs	⚠️	Sun, 05 Jul 2026 18:43:52 UTC

Tasks are run on every commit but only new migration files are pushed.
Close and reopen this PR if you want to apply changes from existing seed or migration files.

Tasks	Status	Updated
Configurations	❌	Sun, 05 Jul 2026 18:44:24 UTC
Migrations	⏸️	Sun, 05 Jul 2026 18:41:51 UTC
Seeding	⏸️	Sun, 05 Jul 2026 18:41:51 UTC
Edge Functions	⏸️	Sun, 05 Jul 2026 18:41:51 UTC

---

❌ Branch Error • Sun, 05 Jul 2026 18:44:24 UTC

unexpected status 400: {"message":"Resource has been removed"}
unexpected status 400: {"message":"Resource has been removed"}
unexpected status 400: {"message":"Resource has been removed"}
unexpected status 400: {"message":"Resource has been removed"}

⚠️ Warning — Service health check failed

---

View logs for this Workflow Run ↗︎.
Learn more about Supabase for Git ↗︎.

[BigSimmo]

Rebased onto current \main\ (includes #274, #287, #291, #283). Dropped superseded access-rollout commits; kept DB drift migration, edge JSONB typing, schema mirror, and test fixes.
pm run verify:cheap\ passes (1081 tests).