Harden launch papercuts and clean builds

[giaphutran12]

Summary

• commit Convex generated client files so a clean frontend checkout can build
• fix create-dataset validation for blank names, empty schemas, duplicate columns, and trim submitted schema data
• replace vulnerable SheetJS XLSX export with write-excel-file, update Clerk patch deps, and clean strict build/lint blockers

Verification

• frontend: bun install --frozen-lockfile
• frontend: bun run lint (passes with existing non-fatal img/TanStack warnings)
• frontend: NEXT_PUBLIC_CONVEX_URL=http://127.0.0.1:3210 NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=pk_test_placeholder bun run build
• frontend: bun audit --audit-level high
• backend: npm ci --cache /private/tmp/bigset-npm-cache
• backend: npm run build
• backend: npm audit --omit=dev --audit-level=high --cache /private/tmp/bigset-npm-cache (passes high gate; leaves Convex/ws moderate)
• git diff --check origin/main...HEAD
• public PR gate: git diff --name-status origin/main...HEAD

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: eba8deba-ebd9-481f-8a04-88e949bd16af

📥 Commits

Reviewing files that changed from the base of the PR and between a368548 and 753cf16.

⛔ Files ignored due to path filters (7)

• backend/package-lock.json is excluded by !**/package-lock.json
• frontend/bun.lock is excluded by !**/*.lock
• frontend/convex/_generated/api.d.ts is excluded by !**/_generated/**
• frontend/convex/_generated/api.js is excluded by !**/_generated/**
• frontend/convex/_generated/dataModel.d.ts is excluded by !**/_generated/**
• frontend/convex/_generated/server.d.ts is excluded by !**/_generated/**
• frontend/convex/_generated/server.js is excluded by !**/_generated/**

📒 Files selected for processing (12)

• frontend/.gitignore
• frontend/app/dashboard/page.tsx
• frontend/app/dataset/[id]/page.tsx
• frontend/app/dataset/new/page.tsx
• frontend/app/page.tsx
• frontend/components/table/DatasetTable.tsx
• frontend/components/table/use-row-change-detection.ts
• frontend/eslint.config.mjs
• frontend/lib/analytics-provider.tsx
• frontend/lib/analytics.ts
• frontend/lib/export.ts
• frontend/package.json

💤 Files with no reviewable changes (2)

• frontend/lib/analytics.ts
• frontend/.gitignore

---

📝 Walkthrough

Walkthrough

This PR refactors frontend type safety across multiple pages by explicitly casting Convex query results and consolidating user prop types in profile menu components. It removes convex/_generated/ from .gitignore while adding it to ESLint's global ignore list. Dataset creation now includes pre-submission input validation and normalization. The export module migrates from SheetJS to write-excel-file/browser with new helpers to prevent spreadsheet formula injection. Analytics identity values are precomputed to optimize effect dependencies. Finally, table performance is improved by removing unnecessary memoization and refactoring timer scheduling for row flash detection.

Sequence Diagram(s)

sequenceDiagram
  participant User
  participant Frontend
  participant Validation
  participant Backend
  participant Analytics

  User->>Frontend: Input dataset name + columns
  Frontend->>Validation: Validate schema (name, columns, duplicates)
  Validation-->>Frontend: Validation result
  alt Validation passes
    Frontend->>Frontend: Normalize inputs (trim, coerce empty)
    Frontend->>Backend: createDataset(normalized)
    Backend-->>Frontend: Dataset created
    Frontend->>Analytics: Track creation event
  else Validation fails
    Validation-->>User: Show error message
  end

Loading

Possibly related PRs

• tinyfish-io/bigset#25: Both PRs modify dataset creation flow in frontend/app/dataset/new/page.tsx—PR #25 wires wizard to call backend /infer-schema, while this PR adds pre-backend input validation and normalization.
• tinyfish-io/bigset#99: This PR's user prop type consolidation for ProfileMenu/DatasetProfileMenu directly relates to PR #99's introduction/refactor of those profile menu components.
• tinyfish-io/bigset#30: Both PRs modify dataset creation flow in frontend/app/dataset/new/page.tsx (this adds pre-submit validation/normalization, while PR #30 modifies handleConfirm behavior).

Suggested reviewers

• manav-tf
• hwennnn

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'Harden launch papercuts and clean builds' directly relates to the main objectives: fixing validation issues, replacing a vulnerable library, updating dependencies, and removing build blockers.
Description check	✅ Passed	The description clearly outlines the three main changes and provides detailed verification steps, all directly related to the changeset's validation fixes, library replacement, and dependency updates.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/dogfood-prod-hardening

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[giaphutran12]

Launch-gate pass from the Edward account: no changes requested from my review.

Evidence: temp worktree bun run lint exited 0 with existing warnings only; bun run build passed when run with dummy public build env (NEXT_PUBLIC_CONVEX_URL, NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY, NEXT_PUBLIC_BACKEND_URL) so no real env files were read. Checks are green.

I cannot approve/merge this from the same GitHub account that authored it; it still needs a non-author review to clear the required review gate.