db/identity-code: user_profiles split (epic slice PR6) by AndresL230 · Pull Request #271 · SaplingLearn/Sapling

AndresL230 · 2026-06-24T19:42:41Z

Identity slice (migration 0024). 1:1 user_profiles; slim users; onboarding profile-write moved to user_profiles; oauth expires_at timestamptz. Encryption boundary preserved. Green; ruff clean.

Plan: docs/superpowers/plans/2026-06-24-db-identity-code.md.

Integration notes:

Touches models/__init__.py + tests/test_response_decrypt_boundary.py (also edited by db/gradebook-code — small additive conflict).
Drops users.name/profile cols still read/written by graph_service.ensure_user_exists, social.py, quiz.py, learn.py, users_search.py — reconcile before the epic→main cutover.

Rewire the identity domain onto the 0024 schema split. Public-profile fields (name/first_name/last_name/username/avatar_url/bio/location/website/year/ majors/minors/learning_style) now live on a 1:1 user_profiles table; users keeps only identity + auth + activity. One source of truth per field — nothing is written to both users and user_profiles, nor duplicated onto user_settings. - routes/profile.py: _get_user_or_404 reads users (id/email/streak/created_at) and merges user_profiles; new _get_or_create_profile helper (ensure-row + decrypt); username uniqueness + writes go to user_profiles; avatar_url persists to user_profiles; _SETTINGS_COLS drops the moved columns. - routes/auth.py: get_me reads name/username/avatar_url from user_profiles; google_callback writes profile fields to user_profiles (insert/upsert) and keeps only email/auth/activity on users; oauth_tokens.expires_at sent as None (not "") when absent, since it is TIMESTAMPTZ now. - routes/onboarding.py: the profile-field write moves to a user_profiles upsert; onboarding_completed stays on users. Enrollment loop untouched (academics owns it). - models: drop display_name from UpdateProfileBody and the moved fields from SettingsResponse. - tests: profile/onboarding/decrypt-boundary updated for the split; added an ensure-row test and a per-table column-contract pin. Encryption boundary preserved: name/first_name/last_name/bio/location stay 🔒 TEXT (encrypt_if_present at write, decrypt_if_present at read) on user_profiles; users.email stays 🔒 on users. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

cloudflare-workers-and-pages · 2026-06-24T19:42:47Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	frontend-staging	`310c4ac`	Commit Preview URL Branch Preview URL	Jun 24 2026, 08:20 AM

coderabbitai · 2026-06-24T19:42:50Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3bd9f310-677b-4cb5-bd90-7f55703bdad9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch db/identity-code

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

AndresL230 · 2026-06-24T19:42:41Z

Identity slice (migration 0024). 1:1 user_profiles; slim users; onboarding profile-write moved to user_profiles; oauth expires_at timestamptz. Encryption boundary preserved. Green; ruff clean.

Plan: docs/superpowers/plans/2026-06-24-db-identity-code.md.

Integration notes:

Touches models/__init__.py + tests/test_response_decrypt_boundary.py (also edited by db/gradebook-code — small additive conflict).
Drops users.name/profile cols still read/written by graph_service.ensure_user_exists, social.py, quiz.py, learn.py, users_search.py — reconcile before the epic→main cutover.

Rewire the identity domain onto the 0024 schema split. Public-profile fields (name/first_name/last_name/username/avatar_url/bio/location/website/year/ majors/minors/learning_style) now live on a 1:1 user_profiles table; users keeps only identity + auth + activity. One source of truth per field — nothing is written to both users and user_profiles, nor duplicated onto user_settings. - routes/profile.py: _get_user_or_404 reads users (id/email/streak/created_at) and merges user_profiles; new _get_or_create_profile helper (ensure-row + decrypt); username uniqueness + writes go to user_profiles; avatar_url persists to user_profiles; _SETTINGS_COLS drops the moved columns. - routes/auth.py: get_me reads name/username/avatar_url from user_profiles; google_callback writes profile fields to user_profiles (insert/upsert) and keeps only email/auth/activity on users; oauth_tokens.expires_at sent as None (not "") when absent, since it is TIMESTAMPTZ now. - routes/onboarding.py: the profile-field write moves to a user_profiles upsert; onboarding_completed stays on users. Enrollment loop untouched (academics owns it). - models: drop display_name from UpdateProfileBody and the moved fields from SettingsResponse. - tests: profile/onboarding/decrypt-boundary updated for the split; added an ensure-row test and a per-table column-contract pin. Encryption boundary preserved: name/first_name/last_name/bio/location stay 🔒 TEXT (encrypt_if_present at write, decrypt_if_present at read) on user_profiles; users.email stays 🔒 on users. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

cloudflare-workers-and-pages · 2026-06-24T19:42:47Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	frontend-staging	`310c4ac`	Commit Preview URL Branch Preview URL	Jun 24 2026, 08:20 AM

coderabbitai · 2026-06-24T19:42:50Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3bd9f310-677b-4cb5-bd90-7f55703bdad9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch db/identity-code

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

AndresL230 · 2026-06-24T19:42:41Z

Identity slice (migration 0024). 1:1 user_profiles; slim users; onboarding profile-write moved to user_profiles; oauth expires_at timestamptz. Encryption boundary preserved. Green; ruff clean.

Plan: docs/superpowers/plans/2026-06-24-db-identity-code.md.

Integration notes:

Touches models/__init__.py + tests/test_response_decrypt_boundary.py (also edited by db/gradebook-code — small additive conflict).
Drops users.name/profile cols still read/written by graph_service.ensure_user_exists, social.py, quiz.py, learn.py, users_search.py — reconcile before the epic→main cutover.

Rewire the identity domain onto the 0024 schema split. Public-profile fields (name/first_name/last_name/username/avatar_url/bio/location/website/year/ majors/minors/learning_style) now live on a 1:1 user_profiles table; users keeps only identity + auth + activity. One source of truth per field — nothing is written to both users and user_profiles, nor duplicated onto user_settings. - routes/profile.py: _get_user_or_404 reads users (id/email/streak/created_at) and merges user_profiles; new _get_or_create_profile helper (ensure-row + decrypt); username uniqueness + writes go to user_profiles; avatar_url persists to user_profiles; _SETTINGS_COLS drops the moved columns. - routes/auth.py: get_me reads name/username/avatar_url from user_profiles; google_callback writes profile fields to user_profiles (insert/upsert) and keeps only email/auth/activity on users; oauth_tokens.expires_at sent as None (not "") when absent, since it is TIMESTAMPTZ now. - routes/onboarding.py: the profile-field write moves to a user_profiles upsert; onboarding_completed stays on users. Enrollment loop untouched (academics owns it). - models: drop display_name from UpdateProfileBody and the moved fields from SettingsResponse. - tests: profile/onboarding/decrypt-boundary updated for the split; added an ensure-row test and a per-table column-contract pin. Encryption boundary preserved: name/first_name/last_name/bio/location stay 🔒 TEXT (encrypt_if_present at write, decrypt_if_present at read) on user_profiles; users.email stays 🔒 on users. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

cloudflare-workers-and-pages · 2026-06-24T19:42:47Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	frontend-staging	`310c4ac`	Commit Preview URL Branch Preview URL	Jun 24 2026, 08:20 AM

coderabbitai · 2026-06-24T19:42:50Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3bd9f310-677b-4cb5-bd90-7f55703bdad9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch db/identity-code

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

AndresL230 · 2026-06-24T19:42:41Z

Identity slice (migration 0024). 1:1 user_profiles; slim users; onboarding profile-write moved to user_profiles; oauth expires_at timestamptz. Encryption boundary preserved. Green; ruff clean.

Plan: docs/superpowers/plans/2026-06-24-db-identity-code.md.

Integration notes:

Touches models/__init__.py + tests/test_response_decrypt_boundary.py (also edited by db/gradebook-code — small additive conflict).
Drops users.name/profile cols still read/written by graph_service.ensure_user_exists, social.py, quiz.py, learn.py, users_search.py — reconcile before the epic→main cutover.

Rewire the identity domain onto the 0024 schema split. Public-profile fields (name/first_name/last_name/username/avatar_url/bio/location/website/year/ majors/minors/learning_style) now live on a 1:1 user_profiles table; users keeps only identity + auth + activity. One source of truth per field — nothing is written to both users and user_profiles, nor duplicated onto user_settings. - routes/profile.py: _get_user_or_404 reads users (id/email/streak/created_at) and merges user_profiles; new _get_or_create_profile helper (ensure-row + decrypt); username uniqueness + writes go to user_profiles; avatar_url persists to user_profiles; _SETTINGS_COLS drops the moved columns. - routes/auth.py: get_me reads name/username/avatar_url from user_profiles; google_callback writes profile fields to user_profiles (insert/upsert) and keeps only email/auth/activity on users; oauth_tokens.expires_at sent as None (not "") when absent, since it is TIMESTAMPTZ now. - routes/onboarding.py: the profile-field write moves to a user_profiles upsert; onboarding_completed stays on users. Enrollment loop untouched (academics owns it). - models: drop display_name from UpdateProfileBody and the moved fields from SettingsResponse. - tests: profile/onboarding/decrypt-boundary updated for the split; added an ensure-row test and a per-table column-contract pin. Encryption boundary preserved: name/first_name/last_name/bio/location stay 🔒 TEXT (encrypt_if_present at write, decrypt_if_present at read) on user_profiles; users.email stays 🔒 on users. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

cloudflare-workers-and-pages · 2026-06-24T19:42:47Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	frontend-staging	`310c4ac`	Commit Preview URL Branch Preview URL	Jun 24 2026, 08:20 AM

coderabbitai · 2026-06-24T19:42:50Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3bd9f310-677b-4cb5-bd90-7f55703bdad9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch db/identity-code

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

AndresL230 · 2026-06-24T19:42:41Z

Identity slice (migration 0024). 1:1 user_profiles; slim users; onboarding profile-write moved to user_profiles; oauth expires_at timestamptz. Encryption boundary preserved. Green; ruff clean.

Plan: docs/superpowers/plans/2026-06-24-db-identity-code.md.

Integration notes:

Touches models/__init__.py + tests/test_response_decrypt_boundary.py (also edited by db/gradebook-code — small additive conflict).
Drops users.name/profile cols still read/written by graph_service.ensure_user_exists, social.py, quiz.py, learn.py, users_search.py — reconcile before the epic→main cutover.

Rewire the identity domain onto the 0024 schema split. Public-profile fields (name/first_name/last_name/username/avatar_url/bio/location/website/year/ majors/minors/learning_style) now live on a 1:1 user_profiles table; users keeps only identity + auth + activity. One source of truth per field — nothing is written to both users and user_profiles, nor duplicated onto user_settings. - routes/profile.py: _get_user_or_404 reads users (id/email/streak/created_at) and merges user_profiles; new _get_or_create_profile helper (ensure-row + decrypt); username uniqueness + writes go to user_profiles; avatar_url persists to user_profiles; _SETTINGS_COLS drops the moved columns. - routes/auth.py: get_me reads name/username/avatar_url from user_profiles; google_callback writes profile fields to user_profiles (insert/upsert) and keeps only email/auth/activity on users; oauth_tokens.expires_at sent as None (not "") when absent, since it is TIMESTAMPTZ now. - routes/onboarding.py: the profile-field write moves to a user_profiles upsert; onboarding_completed stays on users. Enrollment loop untouched (academics owns it). - models: drop display_name from UpdateProfileBody and the moved fields from SettingsResponse. - tests: profile/onboarding/decrypt-boundary updated for the split; added an ensure-row test and a per-table column-contract pin. Encryption boundary preserved: name/first_name/last_name/bio/location stay 🔒 TEXT (encrypt_if_present at write, decrypt_if_present at read) on user_profiles; users.email stays 🔒 on users. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

cloudflare-workers-and-pages · 2026-06-24T19:42:47Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	frontend-staging	`310c4ac`	Commit Preview URL Branch Preview URL	Jun 24 2026, 08:20 AM

coderabbitai · 2026-06-24T19:42:50Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3bd9f310-677b-4cb5-bd90-7f55703bdad9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch db/identity-code

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

AndresL230 · 2026-06-24T19:42:41Z

Identity slice (migration 0024). 1:1 user_profiles; slim users; onboarding profile-write moved to user_profiles; oauth expires_at timestamptz. Encryption boundary preserved. Green; ruff clean.

Plan: docs/superpowers/plans/2026-06-24-db-identity-code.md.

Integration notes:

Touches models/__init__.py + tests/test_response_decrypt_boundary.py (also edited by db/gradebook-code — small additive conflict).
Drops users.name/profile cols still read/written by graph_service.ensure_user_exists, social.py, quiz.py, learn.py, users_search.py — reconcile before the epic→main cutover.

Rewire the identity domain onto the 0024 schema split. Public-profile fields (name/first_name/last_name/username/avatar_url/bio/location/website/year/ majors/minors/learning_style) now live on a 1:1 user_profiles table; users keeps only identity + auth + activity. One source of truth per field — nothing is written to both users and user_profiles, nor duplicated onto user_settings. - routes/profile.py: _get_user_or_404 reads users (id/email/streak/created_at) and merges user_profiles; new _get_or_create_profile helper (ensure-row + decrypt); username uniqueness + writes go to user_profiles; avatar_url persists to user_profiles; _SETTINGS_COLS drops the moved columns. - routes/auth.py: get_me reads name/username/avatar_url from user_profiles; google_callback writes profile fields to user_profiles (insert/upsert) and keeps only email/auth/activity on users; oauth_tokens.expires_at sent as None (not "") when absent, since it is TIMESTAMPTZ now. - routes/onboarding.py: the profile-field write moves to a user_profiles upsert; onboarding_completed stays on users. Enrollment loop untouched (academics owns it). - models: drop display_name from UpdateProfileBody and the moved fields from SettingsResponse. - tests: profile/onboarding/decrypt-boundary updated for the split; added an ensure-row test and a per-table column-contract pin. Encryption boundary preserved: name/first_name/last_name/bio/location stay 🔒 TEXT (encrypt_if_present at write, decrypt_if_present at read) on user_profiles; users.email stays 🔒 on users. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

cloudflare-workers-and-pages · 2026-06-24T19:42:47Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	frontend-staging	`310c4ac`	Commit Preview URL Branch Preview URL	Jun 24 2026, 08:20 AM

coderabbitai · 2026-06-24T19:42:50Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3bd9f310-677b-4cb5-bd90-7f55703bdad9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch db/identity-code

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

AndresL230 · 2026-06-24T19:42:41Z

Identity slice (migration 0024). 1:1 user_profiles; slim users; onboarding profile-write moved to user_profiles; oauth expires_at timestamptz. Encryption boundary preserved. Green; ruff clean.

Plan: docs/superpowers/plans/2026-06-24-db-identity-code.md.

Integration notes:

Touches models/__init__.py + tests/test_response_decrypt_boundary.py (also edited by db/gradebook-code — small additive conflict).
Drops users.name/profile cols still read/written by graph_service.ensure_user_exists, social.py, quiz.py, learn.py, users_search.py — reconcile before the epic→main cutover.

Rewire the identity domain onto the 0024 schema split. Public-profile fields (name/first_name/last_name/username/avatar_url/bio/location/website/year/ majors/minors/learning_style) now live on a 1:1 user_profiles table; users keeps only identity + auth + activity. One source of truth per field — nothing is written to both users and user_profiles, nor duplicated onto user_settings. - routes/profile.py: _get_user_or_404 reads users (id/email/streak/created_at) and merges user_profiles; new _get_or_create_profile helper (ensure-row + decrypt); username uniqueness + writes go to user_profiles; avatar_url persists to user_profiles; _SETTINGS_COLS drops the moved columns. - routes/auth.py: get_me reads name/username/avatar_url from user_profiles; google_callback writes profile fields to user_profiles (insert/upsert) and keeps only email/auth/activity on users; oauth_tokens.expires_at sent as None (not "") when absent, since it is TIMESTAMPTZ now. - routes/onboarding.py: the profile-field write moves to a user_profiles upsert; onboarding_completed stays on users. Enrollment loop untouched (academics owns it). - models: drop display_name from UpdateProfileBody and the moved fields from SettingsResponse. - tests: profile/onboarding/decrypt-boundary updated for the split; added an ensure-row test and a per-table column-contract pin. Encryption boundary preserved: name/first_name/last_name/bio/location stay 🔒 TEXT (encrypt_if_present at write, decrypt_if_present at read) on user_profiles; users.email stays 🔒 on users. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

cloudflare-workers-and-pages · 2026-06-24T19:42:47Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	frontend-staging	`310c4ac`	Commit Preview URL Branch Preview URL	Jun 24 2026, 08:20 AM

coderabbitai · 2026-06-24T19:42:50Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3bd9f310-677b-4cb5-bd90-7f55703bdad9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch db/identity-code

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

AndresL230 · 2026-06-24T19:42:41Z

Identity slice (migration 0024). 1:1 user_profiles; slim users; onboarding profile-write moved to user_profiles; oauth expires_at timestamptz. Encryption boundary preserved. Green; ruff clean.

Plan: docs/superpowers/plans/2026-06-24-db-identity-code.md.

Integration notes:

Touches models/__init__.py + tests/test_response_decrypt_boundary.py (also edited by db/gradebook-code — small additive conflict).
Drops users.name/profile cols still read/written by graph_service.ensure_user_exists, social.py, quiz.py, learn.py, users_search.py — reconcile before the epic→main cutover.

Rewire the identity domain onto the 0024 schema split. Public-profile fields (name/first_name/last_name/username/avatar_url/bio/location/website/year/ majors/minors/learning_style) now live on a 1:1 user_profiles table; users keeps only identity + auth + activity. One source of truth per field — nothing is written to both users and user_profiles, nor duplicated onto user_settings. - routes/profile.py: _get_user_or_404 reads users (id/email/streak/created_at) and merges user_profiles; new _get_or_create_profile helper (ensure-row + decrypt); username uniqueness + writes go to user_profiles; avatar_url persists to user_profiles; _SETTINGS_COLS drops the moved columns. - routes/auth.py: get_me reads name/username/avatar_url from user_profiles; google_callback writes profile fields to user_profiles (insert/upsert) and keeps only email/auth/activity on users; oauth_tokens.expires_at sent as None (not "") when absent, since it is TIMESTAMPTZ now. - routes/onboarding.py: the profile-field write moves to a user_profiles upsert; onboarding_completed stays on users. Enrollment loop untouched (academics owns it). - models: drop display_name from UpdateProfileBody and the moved fields from SettingsResponse. - tests: profile/onboarding/decrypt-boundary updated for the split; added an ensure-row test and a per-table column-contract pin. Encryption boundary preserved: name/first_name/last_name/bio/location stay 🔒 TEXT (encrypt_if_present at write, decrypt_if_present at read) on user_profiles; users.email stays 🔒 on users. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

cloudflare-workers-and-pages · 2026-06-24T19:42:47Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	frontend-staging	`310c4ac`	Commit Preview URL Branch Preview URL	Jun 24 2026, 08:20 AM

coderabbitai · 2026-06-24T19:42:50Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3bd9f310-677b-4cb5-bd90-7f55703bdad9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch db/identity-code

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

AndresL230 merged commit 5458cad into epic/db-modular-redesignJun 24, 2026
4 checks passed

AndresL230 deleted the db/identity-code branch June 27, 2026 04:20