Phase 0 SDD Progress Ledger

Plan: docs/superpowers/plans/2026-07-09-phase-0-foundation.md Started: 2026-07-09

Tasks

Task 1: Scaffold Next.js + Supabase clients (commit f83686f, review clean)
Task 2: Role types + middleware (commit 6939a21, review clean)
Task 3: Database migrations (commit 05daf70, review clean — 2 advisories: concurrent ref_no race, evidence soft-delete needs SECURITY DEFINER fn)
Task 4: Apply migrations to Supabase cloud (user ran supabase login + link + db push)
Task 5: Auth flow (commit 5598594, review clean — LOW: open redirect in callback/route.ts:8 fix before prod)
Task 6: Protected dashboard pages (commit c3ba543, review clean)
Task 7: QR code generation (commit 152a660, review clean)