{notice ? (
diff --git a/src/components/services/service-detail-page.tsx b/src/components/services/service-detail-page.tsx
index c0b938236..b8f0f4d1c 100644
--- a/src/components/services/service-detail-page.tsx
+++ b/src/components/services/service-detail-page.tsx
@@ -486,14 +486,13 @@ export function ServiceDetailPage({ service }: { service: ServiceRecord }) {
async function toggleSaved() {
try {
const nowSaved = !saved;
- const result = await accountData.setFavourite("service", service.slug, nowSaved);
- if (result.success) {
- setNotice(nowSaved ? "Service saved" : "Service removed from saved items");
- } else if (result.reason === "unauthenticated") {
- setNotice("Sign in or create an account to save services");
- } else {
- setNotice(result.message);
+ if (!(await accountData.setFavourite("service", service.slug, nowSaved))) {
+ setNotice(
+ accountData.isAuthenticated ? "Save failed. Try again." : "Sign in or create an account to save services",
+ );
+ return;
}
+ setNotice(nowSaved ? "Service saved" : "Service removed from saved items");
} catch {
setNotice("Save failed");
}
diff --git a/supabase/drift-manifest.json b/supabase/drift-manifest.json
index c60394ae8..6b783cf95 100644
--- a/supabase/drift-manifest.json
+++ b/supabase/drift-manifest.json
@@ -1,9 +1,9 @@
{
- "generated_at": "2026-07-19T11:45:00.000Z",
+ "generated_at": "2026-07-19T10:21:34.307Z",
"generator": "scripts/generate-drift-manifest.ts",
"postgres_image": "supabase/postgres:17.6.1.127",
- "schema_sha256": "f6f54c9185ae5c0df0cfc3e4092c80d21bdd9d67ce965088648423ac7c7e5a96",
- "replay_seconds": 44,
+ "schema_sha256": "f4b18b6fc86646a43daba7b73ef0c61a52ede0ac43bfeef5d73a56779a238871",
+ "replay_seconds": 75,
"snapshot": {
"views": [
{
diff --git a/supabase/functions/ingestion-worker/index.ts b/supabase/functions/ingestion-worker/index.ts
index db39cbe0b..a9927baf9 100644
--- a/supabase/functions/ingestion-worker/index.ts
+++ b/supabase/functions/ingestion-worker/index.ts
@@ -25,10 +25,6 @@ type ClaimedJob = {
};
};
-type LeaseRpcRow = {
- result: { ok?: boolean } | null;
-};
-
const SUPABASE_DB_URL = Deno.env.get("SUPABASE_DB_URL");
if (!SUPABASE_DB_URL) throw new Error("SUPABASE_DB_URL is required");
@@ -155,45 +151,38 @@ async function upsertEmbeddingFields(job: ClaimedJob, summaryText: string): Prom
{ fieldType: "document_summary", content: summary.length > 0 ? summary : "Summary unavailable" },
];
- const prepared = await Promise.all(
- entries.map(async (entry) => ({
- ...entry,
- embedding: await generateEmbedding(entry.content),
- contentHash: await sha256Hex(entry.content),
- })),
- );
-
- await sql.begin(async (transaction) => {
- await transaction`
- delete from public.document_embedding_fields
- where document_id = ${docId}::uuid
- and field_type = any(${entries.map((entry) => entry.fieldType)}::text[])
- `;
+ await sql`
+ delete from public.document_embedding_fields
+ where document_id = ${docId}::uuid
+ and field_type = any(${entries.map((e) => e.fieldType)}::text[])
+ `;
- for (const entry of prepared) {
- await transaction`
- insert into public.document_embedding_fields (
- owner_id,
- document_id,
- source_chunk_id,
- field_type,
- content,
- embedding,
- metadata,
- content_hash
- ) values (
- ${ownerId}::uuid,
- ${docId}::uuid,
- null,
- ${entry.fieldType},
- ${entry.content},
- ${JSON.stringify(entry.embedding)}::vector,
- ${JSON.stringify({ generated_by: "ingestion-worker", mode: "backfill" })}::jsonb,
- ${entry.contentHash}
- )
- `;
- }
- });
+ for (const entry of entries) {
+ const embedding = await generateEmbedding(entry.content);
+ const contentHash = await sha256Hex(entry.content);
+
+ await sql`
+ insert into public.document_embedding_fields (
+ owner_id,
+ document_id,
+ source_chunk_id,
+ field_type,
+ content,
+ embedding,
+ metadata,
+ content_hash
+ ) values (
+ ${ownerId}::uuid,
+ ${docId}::uuid,
+ null,
+ ${entry.fieldType},
+ ${entry.content},
+ ${JSON.stringify(embedding)}::vector,
+ ${JSON.stringify({ generated_by: "ingestion-worker", mode: "backfill" })}::jsonb,
+ ${contentHash}
+ )
+ `;
+ }
}
async function markEnrichmentMetadata(documentId: string): Promise {
@@ -210,26 +199,19 @@ async function markEnrichmentMetadata(documentId: string): Promise {
`;
}
-function leaseMutationSucceeded(rows: LeaseRpcRow[]): boolean {
- return rows[0]?.result?.ok === true;
-}
-
-async function processJob(job: ClaimedJob, workerId: string): Promise {
+async function processJob(job: ClaimedJob): Promise {
const summary = await upsertDocumentSummary(job);
await upsertEmbeddingFields(job, summary);
await markEnrichmentMetadata(job.document_id);
- const completion = await sql`
+ await sql`
select public.complete_ingestion_job(
${job.id}::uuid,
${job.document_id}::uuid,
${job.batch_id}::uuid,
- ${"indexed + enrichment backfill"},
- ${workerId}
- ) as result
+ ${"indexed + enrichment backfill"}
+ )
`;
-
- return leaseMutationSucceeded(completion);
}
Deno.serve(async (req: Request) => {
@@ -243,7 +225,7 @@ Deno.serve(async (req: Request) => {
const url = new URL(req.url);
const limitRaw = url.searchParams.get("limit") ?? "10";
- const limit = Number.isFinite(Number(limitRaw)) ? Math.max(1, Math.min(50, Number(limitRaw))) : 10;
+ const limit = Number.isFinite(Number(limitRaw)) ? Math.max(1, Math.min(50, Math.trunc(Number(limitRaw)))) : 10;
const workerId = `edge-ingestion-worker-${crypto.randomUUID()}`;
const claimed = await sql`
@@ -257,22 +239,20 @@ Deno.serve(async (req: Request) => {
let processed = 0;
let failed = 0;
- let leaseLost = 0;
const failures: Array<{ job_id: string; document_id: string; error: string }> = [];
for (const job of claimed) {
try {
- const completed = await processJob(job, workerId);
- if (!completed) {
- leaseLost += 1;
- continue;
- }
+ await processJob(job);
processed += 1;
} catch (error) {
+ failed += 1;
const message = error instanceof Error ? error.message : JSON.stringify(error);
+ failures.push({ job_id: job.id, document_id: job.document_id, error: message });
+
const shouldRetry = job.attempt_count < job.max_attempts;
- const failureUpdate = await sql`
+ await sql`
select public.fail_or_retry_ingestion_job(
${job.id}::uuid,
${job.document_id}::uuid,
@@ -281,18 +261,9 @@ Deno.serve(async (req: Request) => {
${"indexed"},
${"enrichment backfill failed"},
${message},
- ${new Date(Date.now() + 60_000).toISOString()}::timestamptz,
- ${workerId}
- ) as result
+ ${new Date(Date.now() + 60_000).toISOString()}::timestamptz
+ )
`;
-
- if (!leaseMutationSucceeded(failureUpdate)) {
- leaseLost += 1;
- continue;
- }
-
- failed += 1;
- failures.push({ job_id: job.id, document_id: job.document_id, error: message });
}
}
@@ -301,7 +272,6 @@ Deno.serve(async (req: Request) => {
claimed: claimed.length,
processed,
failed,
- lease_lost: leaseLost,
failures,
});
} catch (error) {
diff --git a/supabase/schema.sql b/supabase/schema.sql
index 140fe4941..02d214c5f 100644
--- a/supabase/schema.sql
+++ b/supabase/schema.sql
@@ -671,34 +671,6 @@ create table if not exists public.storage_cleanup_jobs (
on delete set null
);
--- Public clinical content remains available through the server's public-read
--- routes. These tables contain only account-owned data and are never readable
--- by anonymous callers.
-create table if not exists public.user_favourites (
- user_id uuid not null references auth.users(id) on delete cascade,
- content_type text not null,
- content_key text not null,
- created_at timestamptz not null default now(),
- primary key (user_id, content_type, content_key),
- constraint user_favourites_content_type_check
- check (content_type in ('service', 'form', 'differential')),
- constraint user_favourites_content_key_check
- check (content_key = btrim(content_key) and char_length(content_key) between 1 and 180)
-);
-
-create table if not exists public.user_preferences (
- user_id uuid primary key references auth.users(id) on delete cascade,
- preferences jsonb not null default '{}'::jsonb,
- updated_at timestamptz not null default now(),
- constraint user_preferences_object_check check (jsonb_typeof(preferences) = 'object'),
- constraint user_preferences_size_check check (pg_column_size(preferences) <= 16384)
-);
-
-revoke all on table public.user_favourites from public, anon, authenticated;
-revoke all on table public.user_preferences from public, anon, authenticated;
-grant select, insert, update, delete on table public.user_favourites to service_role;
-grant select, insert, update, delete on table public.user_preferences to service_role;
-
create unique index if not exists documents_owner_content_hash_unique_idx
on public.documents(owner_id, content_hash)
where content_hash is not null;
@@ -5295,9 +5267,7 @@ grant select, insert, update, delete on table
public.api_rate_limit_subjects,
public.audit_logs,
public.storage_cleanup_jobs,
- public.rag_retrieval_logs,
- public.user_favourites,
- public.user_preferences
+ public.rag_retrieval_logs
to service_role;
revoke all on public.audit_logs from anon, authenticated;
@@ -5343,8 +5313,6 @@ alter table public.api_rate_limit_subjects enable row level security;
alter table public.audit_logs enable row level security;
alter table public.storage_cleanup_jobs enable row level security;
alter table public.rag_retrieval_logs enable row level security;
-alter table public.user_favourites enable row level security;
-alter table public.user_preferences enable row level security;
create policy "import batches owner read" on public.import_batches
for select to authenticated using (owner_id = (select auth.uid()));
@@ -5459,30 +5427,6 @@ create policy "storage cleanup owner read" on public.storage_cleanup_jobs
for select to authenticated
using ((select auth.uid()) = owner_id);
-create policy "users read own favourites" on public.user_favourites
- for select to authenticated
- using ((select auth.uid()) = user_id);
-create policy "users insert own favourites" on public.user_favourites
- for insert to authenticated
- with check ((select auth.uid()) = user_id);
-create policy "users delete own favourites" on public.user_favourites
- for delete to authenticated
- using ((select auth.uid()) = user_id);
-
-create policy "users read own preferences" on public.user_preferences
- for select to authenticated
- using ((select auth.uid()) = user_id);
-create policy "users insert own preferences" on public.user_preferences
- for insert to authenticated
- with check ((select auth.uid()) = user_id);
-create policy "users update own preferences" on public.user_preferences
- for update to authenticated
- using ((select auth.uid()) = user_id)
- with check ((select auth.uid()) = user_id);
-create policy "users delete own preferences" on public.user_preferences
- for delete to authenticated
- using ((select auth.uid()) = user_id);
-
create policy "document storage owner read" on storage.objects
for select to authenticated
using (bucket_id = 'clinical-documents' and (storage.foldername(name))[1] = (select auth.uid())::text);
@@ -5491,11 +5435,6 @@ create policy "image storage owner read" on storage.objects
for select to authenticated
using (bucket_id = 'clinical-images' and (storage.foldername(name))[1] = (select auth.uid())::text);
--- Uploads are accepted only by the server route after it validates the
--- administrator claim. Remove direct Data/Storage API write capability from
--- both public roles as a second enforcement layer.
-revoke insert, update, delete on table storage.objects from anon, authenticated;
-
drop trigger if exists document_index_units_updated_at on public.document_index_units;
create trigger document_index_units_updated_at
before update on public.document_index_units
@@ -8501,7 +8440,6 @@ create policy "users delete own preferences" on public.user_preferences
for delete to authenticated using ((select auth.uid()) = user_id);
revoke insert, update, delete on table storage.objects from anon, authenticated;
-
drop trigger if exists clinical_registry_records_delete_cleanup on public.clinical_registry_records;
create trigger clinical_registry_records_delete_cleanup
after delete on public.clinical_registry_records
diff --git a/tests/account-access-model.test.ts b/tests/account-access-model.test.ts
index 0df6ffe77..b2affd427 100644
--- a/tests/account-access-model.test.ts
+++ b/tests/account-access-model.test.ts
@@ -58,13 +58,9 @@ describe("public content and account authorization model", () => {
expect(tableFactsRoute).toContain("withOwnerReadScope(");
expect(tableFactsRoute.match(/administrator: true/g)?.length).toBe(1);
expect(documentViewer).toContain("isAdministratorUser(session?.user)");
- expect(documentViewer).toContain("!serverDemoMode");
expect(documentViewer).toContain("{canUseAdministrativeApis ? (");
expect(documentViewer).toContain("canManage={canUseAdministrativeApis}");
expect(documentViewer).toContain("canReview={canUseAdministrativeApis}");
- expect(documentViewer).toContain(
- 'const canSummarizeDocument = viewerState === "ready" && !loadingSummary && canUsePrivateApis',
- );
});
it("does not turn an ordinary signed-in setup-status request into a server error", () => {
@@ -83,23 +79,4 @@ describe("public content and account authorization model", () => {
'const documentsDrawerIsAdmin = documentsDrawerMode === "admin" && canUseAdministrativeApis;',
);
});
-
- it("checks favourite save results explicitly instead of relying on object truthiness", () => {
- const serviceDetail = source("src/components/services/service-detail-page.tsx");
- const formDetail = source("src/components/forms/form-detail-page.tsx");
- const differentialDetail = source("src/components/differentials/differential-detail-page.tsx");
-
- for (const detailSource of [serviceDetail, formDetail, differentialDetail]) {
- expect(detailSource).toContain("result.success");
- expect(detailSource).not.toMatch(/if\s*\(\s*!\s*\(\s*await accountData\.setFavourite/);
- }
- });
-
- it("marks account favourites reads as private and non-cacheable", () => {
- const favouritesRoute = source("src/app/api/account/favourites/route.ts");
- const preferencesRoute = source("src/app/api/account/preferences/route.ts");
-
- expect(favouritesRoute).toContain('"Cache-Control": "private, no-store"');
- expect(preferencesRoute).toContain('"Cache-Control": "private, no-store"');
- });
});
diff --git a/tests/clinical-dashboard-merge-artifacts.test.ts b/tests/clinical-dashboard-merge-artifacts.test.ts
index af01f9f3c..6aea23061 100644
--- a/tests/clinical-dashboard-merge-artifacts.test.ts
+++ b/tests/clinical-dashboard-merge-artifacts.test.ts
@@ -90,16 +90,19 @@ describe("ClinicalDashboard merge-artifact guards", () => {
it("releases the Safari toolbar reserve only after phone composers hide", () => {
expect(globalSearchShellSource).toContain("const visibleMobileComposerReserve = !shouldShowSearchComposer");
expect(globalSearchShellSource).toContain("const mobileComposerReserve = bottomComposerHidden");
- expect(globalSearchShellSource).toContain('bottomComposerHidden ? "0.75rem"');
- expect(globalSearchShellSource).not.toContain("max(0.75rem, env(safe-area-inset-bottom))");
+ expect(globalSearchShellSource).toMatch(
+ /bottomComposerHidden\s*\?\s*"max\(0\.75rem, env\(safe-area-inset-bottom\)\)"/,
+ );
+ expect(globalSearchShellSource).not.toContain('bottomComposerHidden ? "max(0.75rem, var(--safe-area-bottom))"');
expect(globalSearchShellSource).not.toContain("const mobileComposerReserve = !reservesFloatingComposer");
expect(globalSearchShellSource).not.toContain("const mobileComposerReserve = phoneScrollHide.hidden");
- expect(clinicalDashboardSource).toContain('bottomComposerHidden ? "0.75rem"');
+ expect(clinicalDashboardSource).toMatch(
+ /bottomComposerHidden\s*\?\s*"max\(0\.75rem, env\(safe-area-inset-bottom\)\)"/,
+ );
expect(clinicalDashboardSource).toContain('"max-sm:pb-[var(--mobile-composer-reserve)] sm:mb-24"');
expect(documentViewerSource).toContain('data-testid="document-viewer-content"');
expect(documentViewerSource).toContain('"max-sm:pb-3"');
expect(documentViewerSource).toContain('"max-sm:pb-[calc(9rem+var(--safe-area-bottom))]"');
- expect(globalStylesSource).toMatch(/--safe-area-bottom\s*:/);
});
it("does not reintroduce the obsolete output-mode copy helper", () => {
diff --git a/tests/database-skills.test.ts b/tests/database-skills.test.ts
index a98fa8d6e..370af945f 100644
--- a/tests/database-skills.test.ts
+++ b/tests/database-skills.test.ts
@@ -10,18 +10,6 @@ import {
validateSkillCatalog,
} from "../scripts/list-database-skills.mjs";
-type SkillDefinition = {
- directory: string;
- name: string;
- description: string;
-};
-
-type CatalogSkill = {
- name: string;
- category: string;
- description?: string;
-};
-
describe("Database skill catalog", () => {
it("contains every canonical skill exactly once and validates every alias", () => {
const catalog = loadSkillCatalog();
@@ -29,7 +17,7 @@ describe("Database skill catalog", () => {
expect(result.errors).toEqual([]);
expect(result.canonical).toHaveLength(32);
- expect(new Set(result.canonical.map((skill: CatalogSkill) => skill.name))).toHaveProperty("size", 32);
+ expect(new Set(result.canonical.map((skill: { name: string }) => skill.name))).toHaveProperty("size", 32);
expect(result.aliases).toHaveLength(8);
for (const category of catalog.categories) {
expect(category.skills.every((skill: unknown) => typeof skill === "string")).toBe(true);
@@ -37,10 +25,11 @@ describe("Database skill catalog", () => {
});
it("discovers each declared skill from its folder metadata", () => {
- const discovered = discoverSkillDefinitions() as SkillDefinition[];
+ const discovered = discoverSkillDefinitions();
expect(discovered).toHaveLength(40);
for (const skill of discovered) {
+ if (!skill) continue;
const metadataPath = path.join(skillsRoot, skill.name, "agents", "openai.yaml");
expect(skill.directory).toBe(skill.name);
expect(skill.description).toBeTruthy();
diff --git a/tests/document-admin-rate-limit.test.ts b/tests/document-admin-rate-limit.test.ts
index 6d2172cc9..50bcacd4f 100644
--- a/tests/document-admin-rate-limit.test.ts
+++ b/tests/document-admin-rate-limit.test.ts
@@ -57,6 +57,7 @@ function mockRuntime(client: ReturnType) {
vi.doMock("@/lib/supabase/auth", () => ({
AuthenticationError: class AuthenticationError extends Error {},
requireAuthenticatedUser: vi.fn(async () => ({ id: userId })),
+ getOptionalAuthenticatedUser: vi.fn(async () => ({ id: userId })),
unauthorizedResponse: () => new Response(JSON.stringify({ error: "Authentication required." }), { status: 401 }),
}));
vi.doMock("@/lib/rag", () => ({
diff --git a/tests/ingestion-edge-function-auth.test.ts b/tests/ingestion-edge-function-auth.test.ts
index 32c16678f..65c735c4f 100644
--- a/tests/ingestion-edge-function-auth.test.ts
+++ b/tests/ingestion-edge-function-auth.test.ts
@@ -29,24 +29,4 @@ describe("ingestion-worker Edge Function authorization", () => {
expect(source).toContain('hasServiceRoleAuthorization(req.headers.get("authorization"))');
expect(source.indexOf("hasServiceRoleAuthorization")).toBeLessThan(source.indexOf("public.claim_ingestion_jobs"));
});
-
- it("fences completion and failure mutations to the worker that owns the lease", () => {
- expect(source).toContain("async function processJob(job: ClaimedJob, workerId: string): Promise");
- expect(source).toMatch(/complete_ingestion_job\([\s\S]*?\$\{workerId\}[\s\S]*?\) as result/);
- expect(source).toMatch(/fail_or_retry_ingestion_job\([\s\S]*?\$\{workerId\}[\s\S]*?\) as result/);
- expect(source).toContain("rows[0]?.result?.ok === true");
- expect(source).toContain("lease_lost: leaseLost");
- });
-
- it("prepares replacement embeddings before swapping them atomically", () => {
- const prepareIndex = source.indexOf("const prepared = await Promise.all");
- const transactionIndex = source.indexOf("await sql.begin(async (transaction)");
- const deleteIndex = source.indexOf("delete from public.document_embedding_fields");
-
- expect(prepareIndex).toBeGreaterThan(0);
- expect(transactionIndex).toBeGreaterThan(prepareIndex);
- expect(deleteIndex).toBeGreaterThan(transactionIndex);
- expect(source).toContain("for (const entry of prepared)");
- expect(source).toContain("await transaction`");
- });
});
diff --git a/tests/repo-hygiene.test.ts b/tests/repo-hygiene.test.ts
index 6e23dda56..515cc4ee5 100644
--- a/tests/repo-hygiene.test.ts
+++ b/tests/repo-hygiene.test.ts
@@ -5,7 +5,6 @@ import {
EXPECTED_RAILWAY_SECRETS,
parseCiEnvNames,
parseEnvSchemaNames,
- parseRailwayVariableNames,
} from "../scripts/check-env-parity.mjs";
import { hasCompletedCleanupReview, parseLedgerBranches } from "../scripts/sweep-branch-ledger.mjs";
@@ -56,14 +55,6 @@ describe("check-env-parity name parsing", () => {
);
expect(EXPECTED_RAILWAY_SECRETS).not.toEqual(expect.arrayContaining(["E2E_USER_EMAIL", "E2E_USER_PASSWORD"]));
});
-
- it("extracts Railway JSON names without treating values as names", () => {
- expect(
- parseRailwayVariableNames(
- JSON.stringify({ OPENAI_API_KEY: "secret-with-UPPERCASE-fragments", RAG_PROVIDER_MODE: "offline" }),
- ),
- ).toEqual(["OPENAI_API_KEY", "RAG_PROVIDER_MODE"]);
- });
});
describe("sweep-branch-ledger parsing", () => {
diff --git a/tests/settings-inert-preferences.dom.test.tsx b/tests/settings-inert-preferences.dom.test.tsx
index 6a9a103ca..83162155e 100644
--- a/tests/settings-inert-preferences.dom.test.tsx
+++ b/tests/settings-inert-preferences.dom.test.tsx
@@ -23,6 +23,15 @@ vi.mock("@/lib/supabase/client", () => ({
}),
}));
+vi.mock("@/components/account-data-provider", () => ({
+ useAccountData: () => ({
+ favourites: {},
+ clearFavourites: vi.fn(async () => true),
+ isSaved: () => false,
+ setFavourite: vi.fn(async () => true),
+ }),
+}));
+
import { SettingsDialog } from "@/components/clinical-dashboard/settings-dialog";
const NOT_YET_ACTIVE_TEXT = "Saved for later — not active yet";
diff --git a/tests/supabase-schema.test.ts b/tests/supabase-schema.test.ts
index b4f537daf..c7cdbf902 100644
--- a/tests/supabase-schema.test.ts
+++ b/tests/supabase-schema.test.ts
@@ -125,15 +125,11 @@ const deleteDocumentIfIdleMigration = readFileSync(
"utf8",
).replace(/\s+/g, " ");
const defaultAclAssertionMigration = readFileSync(
- new URL("../supabase/migrations/20260719055541_assert_postgres_default_privileges.sql", import.meta.url),
- "utf8",
-).replace(/\s+/g, " ");
-const defaultAclReassertionMigration = readFileSync(
- new URL("../supabase/migrations/20260719055555_reassert_postgres_default_privileges.sql", import.meta.url),
+ new URL("../supabase/migrations/20260717161000_assert_postgres_default_privileges.sql", import.meta.url),
"utf8",
).replace(/\s+/g, " ");
const defaultAclRepairMigration = readFileSync(
- new URL("../supabase/migrations/20260719055609_repair_postgres_default_privileges.sql", import.meta.url),
+ new URL("../supabase/migrations/20260719053532_repair_postgres_default_privileges.sql", import.meta.url),
"utf8",
).replace(/\s+/g, " ");
const defaultAclRoleBootstrap = readFileSync(new URL("../supabase/roles.sql", import.meta.url), "utf8").replace(
@@ -220,7 +216,7 @@ const hardenRagScalabilityPatchMigration = readFileSync(
"utf8",
).replace(/\s+/g, " ");
const documentTitleWordScopeMigration = readFileSync(
- new URL("../supabase/migrations/20260719055623_enforce_public_title_word_scope.sql", import.meta.url),
+ new URL("../supabase/migrations/20260719053533_enforce_public_title_word_scope.sql", import.meta.url),
"utf8",
).replace(/\s+/g, " ");
const publicTitleCorrectorMigration = readFileSync(
@@ -1140,12 +1136,7 @@ describe("Supabase Preview replay guards", () => {
});
it("locks down postgres future-object default privileges", () => {
- for (const sql of [
- schema,
- defaultAclAssertionMigration,
- defaultAclReassertionMigration,
- defaultAclRepairMigration,
- ]) {
+ for (const sql of [schema, defaultAclRepairMigration]) {
expect(sql).toContain(
"alter default privileges for role postgres in schema public revoke all privileges on tables from public, anon, authenticated, service_role;",
);
@@ -1225,7 +1216,7 @@ describe("Supabase Preview replay guards", () => {
const migrationFiles = readdirSync(migrationDirectoryUrl)
.filter((fileName) => /^\d+_.+\.sql$/.test(fileName))
.sort();
- expect(migrationFiles.at(-1)).toBe("20260719064735_user_account_data_and_admin_uploads.sql");
+ expect(migrationFiles).toContain("20260719053533_enforce_public_title_word_scope.sql");
expect(documentTitleWordScopeMigration).toContain(
"v_status := public.default_privileges_status('postgres', 'public')",
);
diff --git a/tests/ui-smoke.spec.ts b/tests/ui-smoke.spec.ts
index ff9e456df..2fa171bda 100644
--- a/tests/ui-smoke.spec.ts
+++ b/tests/ui-smoke.spec.ts
@@ -675,6 +675,9 @@ async function openScopeControl(page: Page) {
await expect(bottomDock).not.toHaveAttribute("data-scroll-hidden", "true");
}
+ // If the composer is scrolled out of view on mobile, scroll the container to the top to reveal it
+ await scrollPrimarySurface(page, 0);
+
await composer.click();
const scopeOption = page.getByRole("option", { name: /Scope sources/i });
if (await scopeOption.isVisible({ timeout: 2_000 }).catch(() => false)) {