fix(tooling): harden git hooks, stabilize pre-push baselines, and optimize agent token payload

[BigSimmo]

Summary

• Harden git hooks, pre-push guards, Dev Drive cache verification, and agent documentation token weight; keep Medication sidebar navigation on /medications.

Verification

• npm run check:dev-drive-cache
• npx vitest run tests/session-start-hook.test.ts tests/sidebar-production.dom.test.tsx (18/18 passed)
• npm run check:outstanding-issues-snapshot
• npm run verify:pr-local — CI authoritative on head addef8aad
• npm run verify:ui — Production UI critical passed on GitHub Actions run 33030586513

Risk and rollout

• Risk: low — tooling/docs/test-harness changes plus a navigation href correction; no retrieval, ingestion, auth, migration, or clinical answer-generation logic changes.
• Rollback: revert the PR commits; Medication navigation returns to prior sidebar href behaviour; hook/tooling changes are dev-workflow only.
• Provider or production effects: None.
• RAG impact: no retrieval behaviour change — no RAG ranking, retrieval RPC, fixture, or answer-generation surfaces changed.

Clinical Governance Preflight

• Source-backed claims still require linked source verification before clinical use
• No patient-identifiable document workflow was introduced or expanded without explicit governance approval
• Supabase target remains Clinical KB Database (sjrfecxgysukkwxsowpy)
• Service-role keys and private document access remain server-only
• Demo/synthetic content remains clearly separated from real clinical sources
• Source metadata, review status, and outdated/unknown-source behavior remain conservative
• Deployment classification/TGA SaMD impact was checked when clinical decision-support behavior changed

Notes

Navigation-only sidebar href fix (/medications); no new clinical decision-support output. Review threads addressed on addef8aad.

[supabase]

This pull request has been ignored for the connected project sjrfecxgysukkwxsowpy because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.

---

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

[coderabbitai]

Warning

Review limit reached

Next included review available in 40 minutes.

View limit details

Limit details: You’ve used the included review currently available. Your 95 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Your organization has reached its usage spending cap. Adjust your spending cap in the billing tab.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: c07ee531-86bd-4534-8494-f6396cbc7014

📥 Commits

Reviewing files that changed from the base of the PR and between 4584580 and d8f684e.

⛔ Files ignored due to path filters (5)

• AGENTS.md is excluded by !**/*.md
• docs/agents-guide.md is excluded by !docs/**, !**/*.md
• docs/branch-review-records/3d772ae226f7524d949fe2a22a1d5f62ebac498b6cdcf20a53f1f44bc4e08659.record.md is excluded by !docs/**, !**/*.md
• docs/scripts-index.md is excluded by !docs/**, !**/*.md
• docs/testing.md is excluded by !docs/**, !**/*.md

📒 Files selected for processing (6)

• data/repo-awareness-snapshot.json
• package.json
• scripts/check-dev-drive-cache.mjs
• tests/guard-push.test.ts
• tests/hosted-migration-role-guard.test.ts
• tests/session-start-hook.test.ts

---

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Medication pin misses real home
  • Restored the Medication sidebar pin to appModeHomeHref("prescribing") so it lands on the real /medications workspace instead of /?mode=prescribing.

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit 3e3138d. Configure here.}

[cursor]

Not approved: Cursor Bugbot completed with 1 unresolved finding that needs human review. No reviewers were assigned because the only code owner is the pull request author.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3e3138d06e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[github-actions]

CI triage

CI failed on this PR. Automated classification of the 2 failed job(s):

• Static PR checks — needs investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.
• PR required — needs investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.

Compared with main CI run #14060 (failure).

Classification is evidence routing, not permission to ignore a failure. Exact quarantined Playwright identities remain governed by the flake ledger.