Online mode: Google OAuth, board privacy, and offline-aware sync

[pedrobritx]

Summary

Makes NotUX work as a complete online app — real-time multiplayer (already in place), Google sign-in, account-scoped privacy for annotations/login info, and graceful fallback to local-only mode when Supabase is unreachable. No secrets are added to the repo.

What changed

Authentication

• New unified useAuth hook (replaces useMagicLink) adding Google OAuth (signInWithOAuth) alongside the email magic-link fallback.
• Home shows a "Sign in with Google" button with an "or email instead" fallback.
• OAuth is brokered entirely by Supabase — the frontend never holds the Google client ID/secret.

Privacy & data scoping (supabase/migrations/0004_profiles_and_privacy.sql)

• New profiles table (name, avatar, provider), owner-only RLS — a user's account info is readable only by themselves.
• Trigger auto-provisions/refreshes a profile from auth metadata on every sign-in.
• Boards created while signed in default to private; pages/snapshots/assets RLS now gates on is_public OR owner_id = auth.uid(), so private-board annotations are owner-only.

Sharing

• BoardAccessIndicator chip lets the owner flip a board between 🔒 Private and a 🔗 Shared collaborative link.

Identity / presence

• Presence uses the Google display name + avatar, derived only from the user's own session — never by reading another user's profile row.

Offline

• SaveStatus surfaces an offline state and reassures that edits persist locally (IndexedDB) and resync on reconnect.

Docs / config

• docs/SETUP.md: end-to-end setup (Supabase keys, Google OAuth client, Supabase provider config, CI secrets, verification).
• supabase/config.toml: declares the Google provider (secrets via env) and the localhost callback URL.
• .env* remain git-ignored; .env.local is not tracked.

Manual steps required (documented in docs/SETUP.md)

1. Google Cloud Console — create an OAuth Web client; set the authorized redirect URI to https://<project>.supabase.co/auth/v1/callback.
2. Supabase Dashboard → Authentication → Providers → Google — paste the Client ID + Secret and enable.
3. Apply migrations — supabase db push (adds profiles + privacy RLS).
4. GitHub Actions secrets — VITE_SUPABASE_URL, VITE_SUPABASE_ANON_KEY (no Google value needed at build time).

Verification

• pnpm -r typecheck ✅
• pnpm -F @notux/web build ✅
• Manual: Google sign-in round-trip, private-by-default new board, Share toggle, offline indicator (see docs/SETUP.md §5).

Design note

Real-time collaboration and per-account privacy are reconciled by making signed-in users' boards private by default with explicit opt-in sharing, rather than the previous free-for-all-public default. Existing public boards keep working unchanged.

https://claude.ai/code/session_015VWZXTJebcCq2EWZybJ6xi

---

Generated by Claude Code