Skip to content

Rewrite the Supabase pending-work plan for the current state - #178

Merged
YurMil merged 2 commits into
mainfrom
docs/supabase-status-2026-09
Sep 16, 2026
Merged

YurMil merged 2 commits into
mainfrom
docs/supabase-status-2026-09

Conversation

@YurMil

@YurMil YurMil commented Sep 16, 2026

Copy link
Copy Markdown
Owner

Summary

dev-plans/supabase-pending-work-2026-08.md still listed work that was finished on 2026-09-16. This PR rewrites it around the current production state.

Current state. Every repo migration is applied to production, and report-client-error is deployed.

  • 20260816000000 (client_error_log), 20260915000000 (workspaces) and 20260916000000 (profiles) were applied by hand, each recorded under its repo version.

How to apply by hand. The procedure used for those three migrations until sync works again:

  • check for collisions;
  • dry run in a rolled-back transaction, impersonating roles;
  • apply the file verbatim together with its repo version;
  • verify.

It also explains why the connector's apply_migration should not be used for repo files.

Open tasks.

  • A. Reconcile the migration history. Production records most migrations under connector timestamps instead of repo versions. That is why Supabase Preview on main still fails with Remote migration versions not found. The doc includes:
    • the full local ↔ remote version map;
    • the remote-only records (user_app_documents* is used by src/shared/user-data; the focus_* records belong to Focus-Planner);
    • the migration repair commands.
  • B. newsletter-subscribe is not deployed, although the site calls it. The doc lists the required RESEND_API_KEY.
  • C. Make Supabase Preview required once main is green. The doc also notes the stale-preview-branch pitfall seen on Add shared workspaces for small teams #175.
  • Advisor follow-ups:
    • trim_calculation_history() execute grants;
    • leaked password protection is a paid-plan feature, so it is deferred;
    • two intentional "RLS enabled, no policy" findings.

Also .gitignore: ignore every .env file (.env, .env.*, e.g. supabase/functions/.env), not only the *.local variants; .env.example stays allowed. A repo-wide secret scan (tracked files and full history) found nothing but the public anon key, which ships in the site bundle by design.

🤖 Generated with Claude Code

Tasks 1 and 2 are done and every repo migration is applied. Record how the
manual applies were done, and what is still open: the migration history
re-key, deploying newsletter-subscribe, and making the preview check
required.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@vercel

vercel Bot commented Sep 16, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
cadautoscript-com Ready Ready Preview Sep 16, 2026 7:03pm UTC

@supabase

supabase Bot commented Sep 16, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project bkcimygtsnckzexbfqxh because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review 🔄 Running since 2026-09-16T18:51:25.731953Z e0f110d PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@YurMil
YurMil merged commit ee0e549 into main Sep 16, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant