Account & security
Passwordless magic link only. Mode: local
CLOUD NOT CONFIGURED
- Create a free project at supabase.com
- SQL Editor → run supabase/migrations/001_initial.sql
- Authentication → URL config → add redirect http://localhost:3000/auth/callback
- Copy URL + anon key only into .env.local (see .env.local.example)
- Restart npm run dev
Until then, use Backup / restore for multi-device. Never commit .env.local.
DATA RULES
| Passwords | Not used. Magic link + PKCE only. |
| API keys | Anon key in browser only. Service role never ships to client. |
| Job files | Local until you sync. Export backups carefully; they hold job numbers. |
| Chat / screenshots | Never paste .env.local, magic links, or live tokens into chat. |