fix: show and search the real PoliNetwork email instead of the placeholder

[lorenzocorallo]

What changed

When someone signs in with PoliNetwork (Entra), the app saves a made-up …@identity.invalid email on purpose. So the People list on a role showed that strange address, and the user directory showed "No email on file".

• Sign-in now saves the real address. Every PoliNetwork sign-in saves the address from the Microsoft token (email, then preferred_username, then upn) in a new identity_evidence.email column.
• No backfill. The migration only adds the empty column. Existing users get their address the next time they sign in.
• The real address is shown everywhere: the People list on a role, the "Give role" search results, the user directory, and each person's page. For people who haven't signed in since this change, it's read from their saved sign-in token instead. If no real address is known (for example, Telegram only), it says "No email on file".
• Search finds people by their PoliNetwork address, in both the "Give role" box and the user directory. This only works for people who have signed in since the change.

The passkey name code now uses the same helper (src/auth/contact-email.ts), so there's only one copy of the logic.

Testing

• vp check and vp test pass.
• New unit tests: the saved address wins over the one in the token, and Telegram accounts are ignored.
• The user directory database test now checks the shown address and searching by it. I ran it against a throwaway Postgres and it passes.
• Two older tests in rbac-security.integration.test.mjs fail, but they fail the same way on main.
• Not tested: that a real Microsoft sign-in fills the column. Please do one real login after deploying and check it.

🤖 Generated with Claude Code

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 49 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 48b63092-9efd-432e-8426-b140f7c36083

📥 Commits

Reviewing files that changed from the base of the PR and between c0bd9c3 and 3cc24b1.

📒 Files selected for processing (13)

• drizzle/0010_identity_evidence_email.sql
• drizzle/meta/0010_snapshot.json
• drizzle/meta/_journal.json
• src/auth/contact-email.test.ts
• src/auth/contact-email.ts
• src/auth/passkeys.ts
• src/auth/providers.ts
• src/auth/rbac-store.ts
• src/auth/rbac.ts
• src/auth/user-directory.integration.test.mjs
• src/auth/user-directory.ts
• src/components/rbac/role-members.tsx
• src/db/evidence.ts

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[toto04]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Pull request base or head changed.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.