[codex] restore trusted validation flow

[Greatbeing]

Summary

• restore dashboard.html as a production Vite page with a safe no-configuration state
• require verified Supabase user sessions for real community-signal writes while preserving anonymous demo mode
• replace copied API tests with production-path coverage and add pull-request CI plus build-output verification

Why

The dashboard source existed but was omitted from the production bundle, so its public URL resolved to the homepage. Community-signal writes could also bypass user-scoped RLS through the server service-role key, and the API tests copied helper logic instead of exercising production code.

Impact

• real node validation derives user_id from Supabase Auth and writes with the user's JWT
• malformed IDs, missing sessions, unavailable auth configuration, RLS failures, transport failures, and malformed upstream responses have explicit non-leaking error contracts
• fallback nodes remain local, non-persisted demos
• all six public pages are required in the build artifact

Validation

• npm run check:text
• npm run lint
• npm test — 104 tests
• npm run build
• npm run check:dist
• npm audit --omit=dev --registry=https://registry.npmjs.org — 0 vulnerabilities
• desktop and mobile browser smoke checks for the dashboard fallback and community demo validation

Out of scope

• production database seeding
• Cloudflare-native rate limiting
• pgvector semantic search
• deployment or production environment changes

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ai-knowledge-bank	Ready	Preview, Comment	Jul 14, 2026 4:46pm

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	aiknowledgebank	2e83a7d	Jul 12 2026, 03:33 PM