[Programcode]

Summary

• allow Supabase email OTP to create new users instead of rejecting unknown addresses
• add a regression assertion for shouldCreateUser: true
• track the additive user_roles.updated_at reconciliation already applied to production

Verification

• npm run verify
  • 976 Vitest tests
  • 137 Edge tests
  • production build
  • 134 desktop/mobile Chromium tests
• ./.superset/db-gate.sh
  • 27 pgTAP tests
  • local Supabase stopped afterward
• focused AuthProvider regression: 20 tests passed
• production demo-code lifecycle and six-digit OTP login/expiry were verified before this follow-up

Production note

The client fix enables account creation, but Supabase's built-in SMTP refuses delivery to non-team addresses. Public OTP signup still requires a proper custom SMTP provider. No personal mailbox credentials were repurposed and no SMTP secret was changed.

Summary by CodeRabbit

• New Features
  • Email OTP sign-in now supports creating a new account when no matching user exists.
• Bug Fixes
  • User role records now consistently track their last update time with an automatic timestamp.
• Tests
  • Updated authentication coverage to verify that email OTP signup is allowed.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
debate-navigator	Ready	Preview	Sep 7, 2026 5:08pm UTC

[coderabbitai]

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Free

Run ID: cc019072-4275-4409-a014-d05b0dca2797

📥 Commits

Reviewing files that changed from the base of the PR and between 5c4d7ef and 752cfe1.

📒 Files selected for processing (3)

• src/lib/supabase/AuthProvider.tsx
• src/test/auth/AuthProvider.behavior.test.tsx
• supabase/migrations/20260907155821_reconcile_user_roles_updated_at.sql

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

Changes

Email OTP signup

Layer / File(s)	Summary
Enable email OTP signup src/lib/supabase/AuthProvider.tsx, src/test/auth/AuthProvider.behavior.test.tsx	Email OTP sign-in now passes shouldCreateUser: true. The behavior test validates signup for the normalized email address.

User roles timestamp migration

Layer / File(s)	Summary
Reconcile user role timestamps supabase/migrations/20260907155821_reconcile_user_roles_updated_at.sql	The migration adds a non-null updated_at timestamptz column to public.user_roles with a now() default when the column does not exist.

Estimated code review effort: 2 (Simple) | ~10 minutes

---

Note

🎁 Summarized by CodeRabbit Free

Your organization is on the Free plan. CodeRabbit will generate a high-level summary and a walkthrough for each pull request. For a comprehensive line-by-line review, please upgrade your subscription to CodeRabbit Essentials by visiting https://app.coderabbit.ai/settings/billing.

_{Comment @coderabbitai help to get the list of available commands.}