You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs_build/dev/reports/coverage_changed_js_guardrail.txt
+2-28Lines changed: 2 additions & 28 deletions
Original file line number
Diff line number
Diff line change
@@ -6,35 +6,9 @@ Missing changed runtime JS files are WARN, not FAIL.
6
6
Source: Playwright/Chromium built-in V8 coverage from the active Playwright run.
7
7
8
8
Changed runtime JS files considered:
9
-
(0%) admin/db-viewer.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
10
-
(0%) assets/theme-v2/js/login-session.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
11
-
(0%) src/dev-runtime/guest-seeds/tool-state-samples.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
12
-
(0%) src/dev-runtime/persistence/mock-db-store.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
13
-
(0%) src/dev-runtime/persistence/tool-repositories/assets-mock-repository.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
14
-
(0%) src/dev-runtime/seed/server-seed-loader.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
9
+
(0%) src/dev-runtime/auth/provider-contract-stubs.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
15
10
(0%) src/dev-runtime/server/local-api-router.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
16
-
(0%) src/dev-runtime/server/local-api-server.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
17
-
(0%) src/dev-runtime/server/mock-api-router.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
18
-
(0%) src/engine/api/local-db-viewer-ui.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
19
-
(0%) src/engine/api/mock-db-api-client.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
20
-
(0%) src/engine/api/mock-db-viewer-ui.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
21
-
(0%) toolbox/game-journey/game-journey.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
(0%) admin/db-viewer.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
21
-
(0%) assets/theme-v2/js/login-session.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
22
-
(0%) src/dev-runtime/guest-seeds/tool-state-samples.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
23
-
(0%) src/dev-runtime/persistence/mock-db-store.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
24
-
(0%) src/dev-runtime/persistence/tool-repositories/assets-mock-repository.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
25
-
(0%) src/dev-runtime/seed/server-seed-loader.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
20
+
(0%) src/dev-runtime/auth/provider-contract-stubs.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
26
21
(0%) src/dev-runtime/server/local-api-router.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
27
-
(0%) src/dev-runtime/server/local-api-server.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
28
-
(0%) src/dev-runtime/server/mock-api-router.mjs - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
29
-
(0%) src/engine/api/local-db-viewer-ui.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
30
-
(0%) src/engine/api/mock-db-api-client.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
31
-
(0%) src/engine/api/mock-db-viewer-ui.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
32
-
(0%) toolbox/game-journey/game-journey.js - WARNING: changed runtime JS file was not collected by Playwright V8 coverage; advisory only
- Supabase Auth is represented as a future provider stub only.
37
+
- Supabase Postgres is represented as a future provider stub only.
38
+
- Selecting Supabase through environment variables produces visible diagnostics if required config is missing.
39
+
- Supabase stubs throw diagnostics if called directly.
40
+
- No Supabase package import exists.
41
+
- No Supabase runtime client is created.
42
+
43
+
Local API exposure:
44
+
45
+
-`/api/providers/contract`
46
+
-`/api/session/provider-contract`
47
+
-`/api/data-source/adapter-contract` now includes `providerContract`.
48
+
49
+
The provider contract payload exposes browser-safe missing variable names only for Supabase Auth. Server-only secret names and values are not exposed through browser API payloads.
50
+
51
+
## Required Environment Variables
52
+
53
+
Documented without values:
54
+
55
+
-`GAMEFOUNDRY_AUTH_PROVIDER`
56
+
-`GAMEFOUNDRY_DB_PROVIDER`
57
+
-`GAMEFOUNDRY_SUPABASE_URL`
58
+
-`GAMEFOUNDRY_SUPABASE_ANON_KEY`
59
+
-`GAMEFOUNDRY_SUPABASE_SERVICE_ROLE_KEY`
60
+
-`GAMEFOUNDRY_SUPABASE_DATABASE_URL`
61
+
62
+
Server-only variables remain server-only. The Local API provider contract intentionally reports only that server-only values are required; it does not return their names or values.
63
+
64
+
## Secrets Audit
65
+
66
+
- PASS: No package dependency changes.
67
+
- PASS: No Supabase URL values were added.
68
+
- PASS: No JWT-like values were added.
69
+
- PASS: No service-role values were added.
70
+
- PASS: No database URL values were added.
71
+
- PASS: No password table DDL was added.
72
+
- PASS: No password hashes, reset secrets, or verification secrets were added.
73
+
- PASS: Test placeholders are synthetic and are asserted not to appear in API payloads.
74
+
75
+
## Requirement Checklist
76
+
77
+
- PASS: Read `docs_build/dev/PROJECT_INSTRUCTIONS.md` before execution.
78
+
- PASS: Verified current branch is `main` before making changes.
79
+
- PASS: Started from `docs_build/dev/reports/pr119-supabase-environment-checklist.md`.
80
+
- PASS: Scoped this PR to provider contract stubs only.
81
+
- PASS: Did not make Supabase active.
82
+
- PASS: Did not add real Supabase keys or secrets.
83
+
- PASS: Did not store passwords in app tables.
84
+
- PASS: Did not change sign-in behavior.
85
+
- PASS: Added provider contract stubs for future Supabase Auth.
86
+
- PASS: Added provider contract stubs for future Supabase Postgres.
87
+
- PASS: Kept current Local DB provider active.
88
+
- PASS: Added visible diagnostics if Supabase provider is selected without configuration.
89
+
- PASS: Documented required environment variables without values.
90
+
- PASS: Ensured browser API payloads never receive service-role key values.
- PASS: Local API startup probe on `127.0.0.1:5521`
102
+
- PASS: Provider contract route returns active auth/database provider as `local-db`
103
+
- PASS: Session route returns mode `local-db`
104
+
- PASS: Sign-in page returns HTTP 200 through Local API
105
+
- PASS: `npx playwright test tests/playwright/tools/LoginSessionMode.spec.mjs -g "Sign-in page uses a production-safe account form without public Local DB controls" --project=playwright`
106
+
- PASS: Playwright V8 coverage report produced.
107
+
- WARN: Browser V8 coverage reports changed dev-runtime server files as not collected by browser coverage; these are Node-side modules and are covered by targeted Node tests.
108
+
109
+
## Manual Validation Notes
110
+
111
+
-`git diff --check`: PASS.
112
+
- Runtime files changed: PASS, scoped to dev-runtime provider contract and Local API router.
113
+
- Dependencies added: PASS, none.
114
+
- Supabase dependency added: PASS, none.
115
+
- Secret-like additions: PASS, none found in added diff.
116
+
- Password tables added: PASS, none.
117
+
- Sign-in behavior changed: PASS, placeholder sign-in Playwright test still passes.
118
+
- Local API still starts: PASS.
119
+
- Playwright impacted: Yes, targeted sign-in placeholder test passed.
120
+
- Samples smoke test: SKIP, no samples changed and PR scope is provider contract stubs.
0 commit comments