From 1473e678537028b72da7bb9888c2a3fa05cc8f62 Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Sun, 26 Jul 2026 05:05:58 +0000
Subject: [PATCH 1/3] feat(a11y): add aria-labels to icon-only toggle buttons
 in account settings

Added dynamic `aria-label` attributes to the password visibility toggle and the local API token copy toggle buttons in the AccountSettingsTab component. This ensures these icon-only buttons are accessible to screen readers, clearly communicating their state and action.

Co-authored-by: endlessblink <37155282+endlessblink@users.noreply.github.com>
---
 src/components/settings/tabs/AccountSettingsTab.vue | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/components/settings/tabs/AccountSettingsTab.vue b/src/components/settings/tabs/AccountSettingsTab.vue
index e709c08a..952b6e01 100644
--- a/src/components/settings/tabs/AccountSettingsTab.vue
+++ b/src/components/settings/tabs/AccountSettingsTab.vue
@@ -342,7 +342,7 @@ const handleChangePassword = async () => {
                 class="form-input"
                 placeholder="Enter new password"
               >
-              <button class="toggle-visibility" @click="showPassword = !showPassword">
+              <button class="toggle-visibility" :aria-label="showPassword ? 'Hide password' : 'Show password'" @click="showPassword = !showPassword">
                 <Eye v-if="!showPassword" :size="16" />
                 <EyeOff v-else :size="16" />
               </button>
@@ -504,7 +504,7 @@ const handleChangePassword = async () => {
             class="form-input"
             @focus="(e) => (e.target as HTMLInputElement).select()"
           >
-          <button class="toggle-visibility" :title="localApiCopied ? 'Copied!' : 'Copy'" @click="copyLocalApiToken">
+          <button class="toggle-visibility" :title="localApiCopied ? 'Copied!' : 'Copy'" :aria-label="localApiCopied ? 'Copied!' : 'Copy local API token'" @click="copyLocalApiToken">
             <Check v-if="localApiCopied" :size="16" />
             <Copy v-else :size="16" />
           </button>

From 2b6e8726b0a331687a8990aefa51df95a73bbcec Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Sun, 26 Jul 2026 05:18:38 +0000
Subject: [PATCH 2/3] feat(a11y): add aria-labels to icon-only toggle buttons
 in account settings

Added dynamic `aria-label` attributes to the password visibility toggle and the local API token copy toggle buttons in the AccountSettingsTab component. This ensures these icon-only buttons are accessible to screen readers, clearly communicating their state and action.

Co-authored-by: endlessblink <37155282+endlessblink@users.noreply.github.com>

From 9f539e5476a50fa8018f0f51736743a87ff619c2 Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Sun, 26 Jul 2026 05:28:10 +0000
Subject: [PATCH 3/3] feat(a11y): add aria-labels to icon-only toggle buttons
 in account settings

Added dynamic `aria-label` attributes to the password visibility toggle and the local API token copy toggle buttons in the AccountSettingsTab component. This ensures these icon-only buttons are accessible to screen readers, clearly communicating their state and action.

Also fixed CI script by replacing the global `supabase/setup-cli@v1` with the local dev dependency `npx supabase` to mitigate GitHub API rate limits.

Co-authored-by: endlessblink <37155282+endlessblink@users.noreply.github.com>
---
 .github/workflows/ci.yml | 10 ++--------
 scripts/run-e2e.sh       |  4 ++--
 2 files changed, 4 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d34fd063..79dd580f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -82,17 +82,11 @@ jobs:
 
       - name: Install Playwright (chromium)
         run: npx playwright install --with-deps chromium
-
-      - name: Setup Supabase CLI
-        uses: supabase/setup-cli@v1
-        with:
-          version: latest
-
       - name: Boot Supabase + run two-client Realtime e2e (R1–R7)
         run: |
-          supabase start
+          npx supabase start
           ./scripts/run-e2e.sh canvas-sync-regressions.spec.ts --project=chromium --workers=2
 
       - name: Stop Supabase
         if: always()
-        run: supabase stop || true
+        run: npx supabase stop || true
diff --git a/scripts/run-e2e.sh b/scripts/run-e2e.sh
index 2911c1d1..30bd4536 100755
--- a/scripts/run-e2e.sh
+++ b/scripts/run-e2e.sh
@@ -6,7 +6,7 @@
 set -euo pipefail
 
 # Auto-fetch keys from local Supabase if not already set
-SUPABASE_STATUS_ENV="${SUPABASE_STATUS_ENV:-$(supabase status -o env 2>&1 || true)}"
+SUPABASE_STATUS_ENV="${SUPABASE_STATUS_ENV:-$(npx supabase status -o env 2>&1 || true)}"
 
 if [ -z "${SUPABASE_SERVICE_ROLE_KEY:-}" ]; then
   # Try new-format secret key first (Supabase v2.x uses sb_secret_* instead of HS256 JWT)
@@ -27,7 +27,7 @@ if [ -z "${VITE_SUPABASE_ANON_KEY:-}" ]; then
 fi
 
 if [ -z "${SUPABASE_SERVICE_ROLE_KEY:-}" ] || [ -z "${VITE_SUPABASE_ANON_KEY:-}" ]; then
-  echo "ERROR: Could not fetch Supabase keys. Is local Supabase running? (supabase start)"
+  echo "ERROR: Could not fetch Supabase keys. Is local Supabase running? (npx supabase start)"
   exit 1
 fi