Important Fixes, New mechanics, and many more

apps/web/server/utils/runtime-config.test.ts

@@ -9,4 +9,12 @@ describe('required Supabase runtime config', () => {
   it('reports missing credentials clearly', () => {
     expect(() => assertRequiredSupabaseConfig({ public: {} })).toThrow('SUPABASE_SERVICE_ROLE_KEY is required')
   })
+
+  it('rejects credentials from different Supabase projects', () => {
+    expect(() => assertRequiredSupabaseConfig({
+      supabaseUrl: 'https://server-project.supabase.co',
+      supabaseServiceRoleKey: 'service',
+      public: { supabaseUrl: 'https://public-project.supabase.co', supabaseAnonKey: 'anon' },
+    })).toThrow('must point to the same project')
+  })
 })