Fix RLS for segmentation upload, history loading, and add About page

backend/app/api/diagnosis.py

@@ -865,16 +865,25 @@ async def get_diagnosis_history(
             ).order_by(Diagnosis.created_at.desc()).all()
             history_items = [_build_history_item_from_record(diagnosis) for diagnosis in diagnoses]
         except Exception as db_err:
-            logger.warning(f"[HISTORY] ⚠️ SQL history query failed, trying Supabase REST fallback: {db_err}")
+            logger.warning(f"[HISTORY] ⚠️ SQL history query failed: {db_err}")
+            
+        if not history_items:
             try:
+                # Fallback path 1: Supabase REST
                 supabase_rows = supabase.table("diagnoses").select(
                     "id,disease_name,severity,stage,confidence_disease,confidence_severity,confidence_stage,original_image_url,created_at"
                 ).eq("user_id", user_id).order("created_at", desc=True).execute()
                 rows = getattr(supabase_rows, "data", None) or []
                 history_items = [_build_history_item_from_dict(row) for row in rows]
             except Exception as rest_err:
-                logger.warning(f"[HISTORY] ⚠️ Supabase REST history fallback failed, trying Storage fallback: {rest_err}")
+                logger.warning(f"[HISTORY] ⚠️ Supabase REST history fallback failed: {rest_err}")
+
+        if not history_items:
+            try:
+                # Fallback path 2: Storage
                 history_items = _load_diagnoses_from_storage_history(str(user_id))
+            except Exception as storage_err:
+                logger.warning(f"[HISTORY] ⚠️ Storage history fallback failed: {storage_err}")
 
         logger.info(f"[HISTORY] ✅ Retrieved {len(history_items)} diagnoses")
 

backend/app/api/segmentation.py

@@ -140,13 +140,27 @@ async def _download_from_supabase(file_path: str) -> bytes:
         )
 
 
-def _upload_to_storage(path: str, file_bytes: bytes, content_type: str) -> None:
-    supabase = get_supabase_client()
-    supabase.storage.from_(IMAGES_BUCKET).upload(
-        path=path,
-        file=file_bytes,
-        file_options={"content-type": content_type, "upsert": "true"},
-    )
+def _upload_to_storage(path: str, file_bytes: bytes, content_type: str, token: Optional[str] = None) -> None:
+    if token:
+        import httpx
+        url = f"{settings.supabase_url}/storage/v1/object/{IMAGES_BUCKET}/{path}"
+        headers = {
+            "Authorization": f"Bearer {token}",
+            "apikey": settings.supabase_key,
+            "Content-Type": content_type,
+            "x-upsert": "true"
+        }
+        resp = httpx.post(url, headers=headers, content=file_bytes)
+        if resp.status_code >= 400:
+            logger.error(f"Storage upload failed: {resp.status_code} {resp.text}")
+            resp.raise_for_status()
+    else:
+        supabase = get_supabase_client()
+        supabase.storage.from_(IMAGES_BUCKET).upload(
+            path=path,
+            file=file_bytes,
+            file_options={"content-type": content_type, "upsert": "true"},
+        )
 
 
 def _resolve_user_id(credentials: Optional[HTTPAuthorizationCredentials]) -> str:
@@ -177,6 +191,7 @@ async def predict_segmentation(
         )
 
     user_id = _resolve_user_id(credentials)
+    token = credentials.credentials if credentials else None
     timestamp = datetime.utcnow().strftime("%Y%m%d_%H%M%S")
     request_id = uuid4().hex
 
@@ -214,14 +229,14 @@ async def predict_segmentation(
         original_path = f"segmentations/{user_id}/originals/{timestamp}_{request_id}.png"
         original_png = io.BytesIO()
         image.save(original_png, format="PNG")
-        _upload_to_storage(original_path, original_png.getvalue(), "image/png")
+        _upload_to_storage(original_path, original_png.getvalue(), "image/png", token)
 
     pipeline = get_segmentation_pipeline()
     mask, metadata = pipeline.segment(image)
     mask_png_bytes = pipeline.mask_to_png_bytes(mask)
 
     mask_path = f"segmentations/{user_id}/masks/{timestamp}_{request_id}_mask.png"
-    _upload_to_storage(mask_path, mask_png_bytes, "image/png")
+    _upload_to_storage(mask_path, mask_png_bytes, "image/png", token)
 
     original_url = _create_signed_url(original_path)
     mask_url = _create_signed_url(mask_path)

src/App.tsx

@@ -10,6 +10,7 @@ import Upload from "./pages/Upload";
 import DiagnosisResults from "./pages/DiagnosisResults";
 import SegmentationResults from "./pages/SegmentationResults";
 import History from "./pages/History";
+import About from "./pages/About";
 import NotFound from "./pages/NotFound";
 
 const queryClient = new QueryClient();
@@ -34,6 +35,7 @@ const App = () => (
           <Route path="/diagnosis-results" element={<DiagnosisResults />} />
           <Route path="/segmentation-results" element={<SegmentationResults />} />
           <Route path="/history" element={<History />} />
+          <Route path="/about" element={<About />} />
           
           {/* Catch-all for 404 */}
           <Route path="*" element={<NotFound />} />

src/pages/About.tsx

@@ -0,0 +1,49 @@
+import { useNavigate } from "react-router-dom";
+import { ArrowLeft } from "lucide-react";
+import CellularBackground from "@/components/CellularBackground";
+import CytoSightLogo from "@/components/CytoSightLogo";
+import GlassCard from "@/components/GlassCard";
+
+const About = () => {
+  const navigate = useNavigate();
+
+  return (
+    <CellularBackground>
+      <div className="min-h-screen flex flex-col p-4 md:p-8">
+        <header className="flex items-center mb-8">
+          <button 
+            onClick={() => navigate(-1)}
+            className="flex items-center text-muted-foreground hover:text-foreground transition-colors glass-card px-4 py-2 rounded-full border border-border/30"
+          >
+            <ArrowLeft className="w-4 h-4 mr-2" />
+            Back
+          </button>
+        </header>
+
+        <main className="flex-1 flex flex-col items-center justify-center max-w-4xl mx-auto w-full">
+          <GlassCard variant="bordered" className="w-full text-center py-16 px-8 md:px-16 animate-fade-in">
+            {/* Logo */}
+            <div className="flex justify-center mb-10">
+              <CytoSightLogo size="xl" />
+            </div>
+
+            {/* Description Text */}
+            <div className="max-w-3xl mx-auto">
+              <h1 className="text-2xl md:text-3xl font-bold text-foreground leading-relaxed mb-6">
+                Welcome to CytoSight: An Explainable Unified Framework for Heterogeneous Cellular Disease Diagnosis and unsupervised segmentation mask generation for blood smears
+              </h1>
+            </div>
+            
+            <div className="mt-12 h-px bg-gradient-to-r from-transparent via-border to-transparent w-full" />
+            
+            <div className="mt-8 text-muted-foreground text-sm">
+              <p>© {new Date().getFullYear()} CytoSight. All rights reserved.</p>
+            </div>
+          </GlassCard>
+        </main>
+      </div>
+    </CellularBackground>
+  );
+};
+
+export default About;

src/pages/Dashboard.tsx

@@ -1,6 +1,6 @@
 import { useState, useEffect } from "react";
 import { useNavigate } from "react-router-dom";
-import { User, ChevronDown, LogOut, Settings, History, Trash2 } from "lucide-react";
+import { User, ChevronDown, LogOut, History, Trash2 } from "lucide-react";
 import CellularBackground from "@/components/CellularBackground";
 import CytoSightLogo from "@/components/CytoSightLogo";
 import GlassCard from "@/components/GlassCard";
@@ -76,11 +76,6 @@ const Dashboard = () => {
                 </p>
                 <p className="text-xs text-muted-foreground">{displayUser.email}</p>
               </div>
-              <DropdownMenuItem className="cursor-pointer">
-                <Settings className="w-4 h-4 mr-2" />
-                Settings
-              </DropdownMenuItem>
-              <DropdownMenuSeparator />
               <DropdownMenuItem 
                 className="cursor-pointer text-destructive focus:text-destructive"
                 onClick={handleLogout}
@@ -149,7 +144,10 @@ const Dashboard = () => {
             </div>
 
             {/* About Link */}
-            <button className="mt-10 text-muted-foreground hover:text-primary transition-colors text-sm">
+            <button 
+              className="mt-10 text-muted-foreground hover:text-primary transition-colors text-sm"
+              onClick={() => navigate("/about")}
+            >
               About CytoSight
             </button>
           </GlassCard>

test_e2e.py

@@ -0,0 +1,106 @@
+import time
+import random
+import string
+from playwright.sync_api import sync_playwright
+from PIL import Image
+import io
+import os
+
+# Configuration
+BASE_URL = "http://localhost:8080"  # Your local frontend port is 8080
+TEST_PASSWORD = "Password123!"
+
+def generate_random_email():
+    random_str = ''.join(random.choices(string.ascii_lowercase + string.digits, k=8))
+    return f"test_{random_str}@example.com"
+
+def create_test_image(path="test_sample.jpg"):
+    """Creates a simple dummy image for testing upload."""
+    img = Image.new('RGB', (224, 224), color = (73, 109, 137))
+    img.save(path)
+    return os.path.abspath(path)
+
+def run_test():
+    email = generate_random_email()
+    test_image = create_test_image()
+    
+    with sync_playwright() as p:
+        print("\n" + "="*50)
+        print("🚀 STARTING CYTOSIGHT E2E TEST SUITE")
+        print("="*50 + "\n")
+        
+        # Launch browser (headless=False so you can watch it!)
+        # slow_mo adds a small delay between actions so it's visible
+        browser = p.chromium.launch(headless=False, slow_mo=800) 
+        context = browser.new_context()
+        page = context.new_page()
+
+        try:
+            # --- 1. SIGNUP ---
+            print(f"📝 STEP 1: Signing up as {email}...")
+            page.goto(f"{BASE_URL}/signup")
+            page.fill('input[name="fullName"]', "Test User")
+            page.fill('input[name="email"]', email)
+            page.fill('input[name="password"]', TEST_PASSWORD)
+            page.fill('input[name="confirmPassword"]', TEST_PASSWORD)
+            page.click('button[type="submit"]')
+            
+            # Wait for dashboard redirect
+            page.wait_for_url("**/dashboard", timeout=10000)
+            print("   ✅ Signup Successful! Redirected to Dashboard.\n")
+
+            # --- 2. UPLOAD & DIAGNOSIS ---
+            print("📤 STEP 2: Testing Image Upload...")
+            page.goto(f"{BASE_URL}/upload")
+            
+            # Upload the file (handles the hidden input automatically)
+            page.set_input_files('input[type="file"]', test_image)
+            print(f"   ✅ Image selected: {test_image}")
+            
+            # Click Diagnosis
+            print("🔍 STEP 3: Running Diagnosis (hitting HF Backend)...")
+            page.click('button:has-text("Disease Diagnosis")')
+            
+            # Wait for Results Page (might take a few seconds for AI to process)
+            print("   ⏳ Waiting for AI results (up to 60s)...")
+            page.wait_for_selector('text=Diagnosis Completed', timeout=60000)
+            print("   ✅ Diagnosis Successful!\n")
+
+            # --- 3. UPLOAD & SEGMENTATION ---
+            print("📤 STEP 4: Testing Binary Segmentation...")
+            page.goto(f"{BASE_URL}/upload")
+            
+            # Upload the file again
+            page.set_input_files('input[type="file"]', test_image)
+            print(f"   ✅ Image selected for segmentation")
+            
+            # Click Segmentation
+            print("🎭 STEP 5: Running Segmentation (hitting HF Backend)...")
+            page.click('button:has-text("Binary Segmentation")')
+            
+            # Wait for Results Page
+            print("   ⏳ Waiting for Segmentation results (up to 60s)...")
+            page.wait_for_selector('text=Segmentation Results', timeout=60000)
+            print("   ✅ Segmentation Successful!")
+
+            print("\n" + "*"*50)
+            print("🎉 ALL TESTS PASSED SUCCESSFULLY!")
+            print("*"*50 + "\n")
+            
+        except Exception as e:
+            print(f"\n❌ TEST FAILED: {str(e)}")
+            # Take a screenshot on failure to see what happened
+            page.screenshot(path="test_failure.png")
+            print("📸 Screenshot of failure saved to 'test_failure.png'")
+            raise e
+            
+        finally:
+            # Clean up
+            print("🧹 Cleaning up...")
+            time.sleep(3) # Give you a moment to see the success
+            browser.close()
+            if os.path.exists(test_image):
+                os.remove(test_image)
+
+if __name__ == "__main__":
+    run_test()