3 people 5aa449ad3c Lock down OAuth used codes table (#641) ...

* Lock down OAuth used codes table

* test(db): lock oauth_used_codes lockdown contract + reload PostgREST cache

Add a pg-real test asserting anon/authenticated are denied SELECT/INSERT on
public.oauth_used_codes while the privileged (service-role) connection can
still read it, per the project's requirement that RLS changes ship a
*.pg.test.ts. Also append NOTIFY pgrst, 'reload schema' so PostgREST picks up
the privilege change immediately (migration rule 8).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Jakob Wennberg <jakob.wennberg@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-08 09:47:33 +02:00

..

agent-atom-registry.pg.test.ts

Agent v1 bundle: TIC v2 onboarding, in-app assistant gating, sidebar nav, MCP fixes (#584)

2026-05-28 11:27:01 +02:00

api-keys-sod-ack-and-agent-write.pg.test.ts

feat(auth): SoD acknowledge on stage+approve keys + agent:write scope for memory tools (P0-3) (#681)

2026-06-06 11:13:35 +02:00

assets.pg.test.ts

Fix/chrome pdf preview csp (#572)

2026-05-26 22:29:41 +02:00

bootstrap.sql

test: add real-Postgres smoke gate (pg-real) (#357)

2026-04-24 11:24:45 +02:00

bulk-book-transactions.pg.test.ts

feat(bulk-book): manual booking mode + document inheritance (#610)

2026-05-30 10:23:14 +02:00

commit-method-provenance.pg.test.ts

feat(agent): telemetry + CI-gate quick wins from the "AI systems that ship" audit (#677)

2026-06-05 15:47:13 +02:00

delete-last-voucher-ib.pg.test.ts

feat: voucher linking, recovery ops, and salary overrides (#591)

2026-05-28 21:09:43 +02:00

extension-wrappers.pg.test.ts

fix(db): migrations failing on a fresh supabase instance (#645)

2026-06-08 09:41:36 +02:00

fixtures.ts

Per-account bank reconciliation + overdue/inbox/privacy fixes (#619)

2026-06-01 18:26:13 +02:00

get_account_gl_lines_for_matching.pg.test.ts

fix(reconciliation): secondary-account scoping, dialog clipping, and N:1 matching (#624)

2026-06-02 09:37:30 +02:00

get_unlinked_1930_lines.pg.test.ts

Mcp/template data feedback (#617)

2026-06-01 14:45:49 +02:00

gl_lines_rpc_tenant_guard.pg.test.ts

fix(security): tenant guard on the GL-line read RPCs (#625)

2026-06-02 10:24:18 +02:00

inbox-rate-limit.pg.test.ts

Inbox UX overhaul + cross-currency supplier-invoice fixes (#444)

2026-05-12 13:12:17 +02:00

journal-entry-no-doc-required.pg.test.ts

Agent v1 bundle: TIC v2 onboarding, in-app assistant gating, sidebar nav, MCP fixes (#584)

2026-05-28 11:27:01 +02:00

link-voucher-rpcs-tenant-guard.pg.test.ts

Invoice correctness bundle: voucher-link race, agent send guards, payment-reversal restore (audit C2/C17, F-2026080) (#666)

2026-06-04 15:32:39 +02:00

mark-entry-as-opening-balance.pg.test.ts

Accounted rebrand + swarm-skill cleanup + bank-reconciliation fixes (#643)

2026-06-03 10:52:01 +02:00

match-batch-allocate.pg.test.ts

Invoice correctness bundle: voucher-link race, agent send guards, payment-reversal restore (audit C2/C17, F-2026080) (#666)

2026-06-04 15:32:39 +02:00

oauth-used-codes-lockdown.pg.test.ts

Lock down OAuth used codes table (#641)

2026-06-08 09:47:33 +02:00

payment-company-consistency.pg.test.ts

harden(db): tenant backstop — payment company-consistency triggers + write-RPC guards (P0-2) (#680)

2026-06-06 10:42:41 +02:00

rot-rut-avdrag.pg.test.ts

Fix/chrome pdf preview csp (#572)

2026-05-26 22:29:41 +02:00

securitydefiner_write_rpc_tenant_guards.pg.test.ts

harden(db): tenant backstop — payment company-consistency triggers + write-RPC guards (P0-2) (#680)

2026-06-06 10:42:41 +02:00

self-billing-invoice.pg.test.ts

Feat/voucher docs (#664)

2026-06-04 13:14:57 +02:00

setup.ts

test: add real-Postgres smoke gate (pg-real) (#357)

2026-04-24 11:24:45 +02:00

supplier-invoice-overdue-cron.pg.test.ts

Per-account bank reconciliation + overdue/inbox/privacy fixes (#619)

2026-06-01 18:26:13 +02:00

transaction_voucher_links.pg.test.ts

feat(transactions): match overshoot guards + supplier voucher linking (#602)

2026-05-29 12:31:19 +02:00

transactions-cash-account-id.pg.test.ts

fix(reconciliation): secondary-account scoping, dialog clipping, and N:1 matching (#624)

2026-06-02 09:37:30 +02:00

transactions-document-id.pg.test.ts

feat(invoice-inbox): pin documents to bank transactions + MCP tools (#397)

2026-05-06 10:24:57 +02:00