feat(ui): v3 chrome — rail, chips, Preferences, Access Principals by huyplb · Pull Request #385 · tedious-code/foxschema

huyplb · 2026-09-07T18:51:52Z

Summary

v3 chrome plus mockup slices (activity rail, Home, Sync chips, Utils workspace, Preferences, Access Principals-first, SQL Runs drawer, Grants matrix, Effective why-stack, Peek Insight cards, Snapshots Revert SQL, Data migrate Preview/Safe mode).

Also addresses PR #375 review findings

#375 (cursor/main-v3-ui-dbb9) is the earlier reopened rail PR — open but CONFLICTING with main and superseded by this branch. Its listed findings are fixed here:

Lazy schema warm on completion + Data migrate (no mount N+1)
fetchDbAccess({ force: true }) on Refresh / Reload / Load catalog
invalidateCache clears matching inflight; mid-flight results do not repopulate TTL cache
containerGrowth(loadedVersions) required (no dead listVersions fallback)
Lokee inspect/compare handler indentation

Test plan

cd apps/web && npx tsc --noEmit
Vitest: schemaApi cache (force + mid-flight invalidate), PeekInsight, PermissionInspector
Browser walkthrough of Peek Insight + Snapshots Revert SQL

Peek Insight cards
Snapshots Revert SQL tab
mockup-slices-peek-snapshots-demo.mp4

_{To show artifacts inline, enable in settings.}

* perf: reuse access catalogs and stop N+1 schema/history loads Cache POST /schema/db-access for 60s so Access tabs share one catalog probe, invalidate after GRANT/REVOKE, and stop warming every SQL destination on editor mount (the explorer connection already loads). Snapshot metadata updates read the one row that changed instead of 500 versions, inspect reuses that list for growth, and Lokee GET routes require schema.browse. SQL sidebar opens one section at a time so first paint is a single panel. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com> * feat(ui): v3 activity rail and timeline-first Snapshots Move workspace switching to a left rail (Sync, SQL, Access, Snapshots) and drop the stacked toolbar switcher. Schema history is its own Snapshots view with a version timeline by default; React Flow loads only when Graph is toggled. Compare keeps a +/~/- briefing from the existing DTO, and Access control stays on admin.users / admin.roles. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

…pane, SVG ticks Sync and Snapshots now share + / ~ / − chips. Version list loads ADD/MODIFY/DELETE counts in one grouped query. Timeline click docks the same SchemaBlueprint compare beside the list; React Flow stays opt-in. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

Next page uses a unique ORDER BY keyset when the last row is in cache; OFFSET remains the fallback. Insight probes read pg_stats / STATISTICS / sqlite_stat1 and fail tests if SQL contains COUNT(DISTINCT). Schema explorer loads TABLE|VIEW|MQT first and fetches routines only when those groups open. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

+        try {
+          await work;
+        } finally {
+          if (schemaLoadInflight.get(inflightKey) === work) schemaLoadInflight.delete(inflightKey);


…ve, generate-only Access → Permission is now one cached catalog: a principal tree plus Account, Grants, and Effective stages. Confirm copies SQL or opens the SQL Editor; GRANT/REVOKE execute stays in Database Access. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

…harts Home opens from the rail logo and lists Zustand recents/connections with no introspect. ⌘K jumps to workspaces, connections, and recents. Data Peek fetches catalog insight only when that tab is selected. Result grids with a label + number shape can opt into an SVG bar chart. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

cursor · 2026-09-07T19:40:25Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_81c9e260-d010-467a-b7a9-eae5111f1c33)

Replace stacked Original/Target cards with connection chips, land Compare on Diff Briefing, turn the SQL sidebar into a 48px section rail with Run · N destination chips, open Home first, and add Snapshots briefing plus a stacked change chart. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

cursor · 2026-09-07T23:32:07Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_917d3872-7762-4453-821e-f5a34df94734)

Give Index Management, Clone Table, Server Insights, Query files, and DB users their own Utils rail workspace so DBA tools are not buried in the SQL sidebar. Tools dock as panes (same e2e testids) and SQL keeps destinations, schema, bookmarks, variables, and secrets. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

cursor · 2026-09-08T00:50:05Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_31a47bf7-a948-475a-8603-602b91d1a72c)

Pick a database once at the top of Utilities. Index, Clone, Insights, and DB access inherit that chip instead of asking again inside each pane. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

Settings is a workspace now, titled Preferences, with Appearance / Database / Updates / Security tabs. The profile menu and ⌘K open the same view instead of a modal named Appearance. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

Pick a database once on the Access chrome. User Management, Permission, and Diff inherit that chip instead of asking again in each pane. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

Recent runs sit on the SQL toolbar as a drawer instead of only inside the Bookmarks sidebar tab. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

cursor · 2026-09-08T01:23:05Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_bd70aef9-d233-4a54-aea2-d38d8f934050)

Access opens on the principals sidebar with Account | Grants | Effective. Users/Roles filter, Add user, and counts match the Access chrome designs; User Management and Diff stay as secondary tabs for e2e. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

cursor · 2026-09-08T02:27:26Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_898174db-71c5-4af2-bc3a-c2a25c0745ba)

SQLite and other engines without a GRANT catalog still show the Principals chrome (filter, Users/Roles, Add user). The unsupported message moves into the main pane instead of hiding the sidebar. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

cursor · 2026-09-08T02:33:32Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_eb069dcd-bf84-4018-87df-f89f68b8c067)

Four unrelated failures, three of them real. **Access no longer opens on Users.** The default section moved to `permission`, and 28 tests in GeneratedPassword.test.tsx render AccessView and reach straight for `user-connection`. They pass now by clicking through to the Users tab, which is also the honest fix: the default on main existed to keep these tests passing — its own comment said so — and a product default should not be chosen by a test. **A stray `});`** in sql-editor-utilities-dialects.test.ts closed the describe twice and left the file unparseable. ESLint reported it as "Parsing error: Declaration or statement expected", which is why the whole lint job failed rather than one rule. **The IDENT regex** in sql-order-by.ts crossed four delimiter styles with an optional second part, nesting a quantifier inside an optional group — `security/detect-unsafe-regex`, fairly. Replaced by scanning for the single separating dot. Verified as behaviour-preserving rather than assumed: a differential harness ran both implementations over 34 inputs (quoted, backticked, bracketed, bare, qualified, malformed, unterminated) and they agree on every one. The first attempt differed on `db . orders`, because trimming each part accepted spaces the regex rejected; that trim is gone, so this is a lint fix and not a quiet parser change. **The route contract** tripwire fired: the table gained `POST /api/schema/table-insight` but the count stayed at 80. The route is real and guarded by dbaUtilityLimiter + requirePermissions('utility.access'), so the count moves to 81 with a note saying which route did it. Also `commandPalette.ts` -> `commandPaletteEvent.ts`. It sat beside `CommandPalette.tsx`, and on a case-insensitive filesystem both specifiers resolved to the same file — the component imported as `undefined` and all five palette tests died on "Element type is invalid". Linux CI resolves exactly and never saw it, so this was macOS-only and invisible to the pipeline. Repo-wide: eslint 0 errors, tsc clean, 3616 passed / 0 failed. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

cursor · 2026-09-08T03:55:51Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_d9578847-31fb-4712-9f2b-bd2102fd278f)

…napshots, Migrate Wire Access Grants desired matrix with presets and GRANT SQL, Effective ALLOW/DENY why-stacks, Peek Insight summary cards, Snapshots Revert SQL tab label, and Data migrate Preview SQL plus Safe-mode Apply confirm. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

cursor · 2026-09-08T03:58:20Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_24d9051c-e984-4a68-9d28-86184dc60935)

a7bdffc swapped DbAccessPermissionSections for the new AccessGrantsStage in AccessPermissionPanel but left the tests driving the old component, so three of them walked a UI that no longer exists — `db-access-expand-table`, `db-access-permission-sections`. They were reported as flaky rather than broken because they read with `getByTestId` immediately after a click, and the stage loads its own schema objects. A synchronous read races the load: sometimes the old markup was still mounted, sometimes not. Switching to `findByTestId` turned the same failure deterministic, which is what exposed the swap. Rewritten against the stage as it is now: pick a preset, read the generated SQL, copy it or hand it to the editor. Both paths still assert `runAccessSql` was never called, which is the guarantee the screen exists to keep — the stage says so itself: "Fox Schema generates GRANT/REVOKE SQL — it does not apply it." The preset is `read-write`, not `read-only`, because the fixture already grants alice SELECT on public.orders. Read-only therefore matches the catalog and correctly generates nothing — I had the buttons' disabled state down as a bug until the SQL panel said "Desired matrix matches the live catalog". That case is now a test of its own, since offering a GRANT that changes nothing would still be a write against production. Stable over 6 consecutive runs; suite 3617 passed / 0 failed. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Lazy-warm SQL schemas on completion and Data migrate, let Refresh force db-access past the 60s TTL, drop matching inflight on invalidate so stale catalogs cannot repopulate, require containerGrowth's loaded versions, and re-indent the Lokee inspect/compare handlers. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

cursor · 2026-09-08T04:47:19Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_d036eb21-0c16-4694-882a-46829f3173da)

test: drive the Grants stage that is actually rendered

cursor · 2026-09-08T04:50:48Z

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_97a27c08-e2cf-4d19-8394-e17d08b3c588)

huyplb and others added 3 commits September 7, 2026 18:49

github-code-quality Bot found potential problems Sep 7, 2026

View reviewed changes

Comment thread apps/web/src/frontend/app/store/useSqlEditorStore.ts

try {

await work;

} finally {

if (schemaLoadInflight.get(inflightKey) === work) schemaLoadInflight.delete(inflightKey);

cursoragent and others added 2 commits September 7, 2026 19:15

huyplb marked this pull request as ready for review September 7, 2026 19:40

cursor Bot changed the title ~~feat(ui): v3 shell through Home, Last Id paging, and Access session~~ feat(ui): v3 chrome — chips, Diff Briefing, SQL rail, Home first Sep 7, 2026

cursoragent and others added 4 commits September 8, 2026 01:13

feat(ui): lock Utilities tools to one workspace credential

4691fc0

Pick a database once at the top of Utilities. Index, Clone, Insights, and DB access inherit that chip instead of asking again inside each pane. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

feat(ui): lock Access panels to one workspace credential

ff7e4aa

Pick a database once on the Access chrome. User Management, Permission, and Diff inherit that chip instead of asking again in each pane. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

feat(sql): add a Runs drawer for recent queries

8928415

Recent runs sit on the SQL toolbar as a drawer instead of only inside the Bookmarks sidebar tab. Co-authored-by: huy.phan9 <huyplb@users.noreply.github.com>

cursor Bot changed the title ~~feat(ui): v3 chrome — chips, Diff Briefing, SQL rail, Home first~~ feat(ui): v3 chrome — rail, chips, briefing, Preferences, Access credential Sep 8, 2026

cursor Bot changed the title ~~feat(ui): v3 chrome — rail, chips, briefing, Preferences, Access credential~~ feat(ui): v3 chrome — rail, chips, Preferences, Access Principals Sep 8, 2026

huyplb and others added 2 commits September 7, 2026 22:24

Merge pull request #386 from tedious-code/fix/v3-flaky-async-queries

a7203e0

test: drive the Grants stage that is actually rendered

cursor Bot merged commit cb38af1 into main Sep 8, 2026
11 of 12 checks passed

cursor Bot deleted the cursor/v3-ui-phases-dbb9 branch September 8, 2026 04:50

huyplb mentioned this pull request Sep 8, 2026

ux: extract the three surfaces every screen was rewriting #387

Open

Navigation Menu

Uh oh!

feat(ui): v3 chrome — rail, chips, Preferences, Access Principals - #385

feat(ui): v3 chrome — rail, chips, Preferences, Access Principals#385
cursor[bot] merged 18 commits into
mainfrom
cursor/v3-ui-phases-dbb9

huyplb commented Sep 7, 2026 •

edited by cursor Bot

Loading

Uh oh!

cursor Bot commented Sep 7, 2026

Uh oh!

cursor Bot commented Sep 7, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

cursor Bot commented Sep 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

huyplb commented Sep 7, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Also addresses PR #375 review findings

Test plan

Uh oh!

cursor Bot commented Sep 7, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

cursor Bot commented Sep 7, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

cursor Bot commented Sep 8, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

cursor Bot commented Sep 8, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

cursor Bot commented Sep 8, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

cursor Bot commented Sep 8, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

cursor Bot commented Sep 8, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

cursor Bot commented Sep 8, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

cursor Bot commented Sep 8, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

cursor Bot commented Sep 8, 2026

Bugbot couldn't run - usage limit reached

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

huyplb commented Sep 7, 2026 •

edited by cursor Bot

Loading