Pilot-ready foundation
Next.js 16 + Tailwind + App Router scaffold
WAT framework scaffold (workflows/tools/agent rules)
Drizzle + Zod + type-safe env parser
Tenants, outlets, identities, memberships schema
RLS policies + restricted app_user role
Subdomain tenant routing (proxy)
Cross-tenant isolation test suite
create-tenant CLI
Auth.js v5 with JWT + DB-enforced sessions
OTP provider abstraction + dev-otp
/login + /login/verify pages and Server Actions
requireMembership + getCurrentTenantRole helpers
invite-member CLI
Phase-1 schema (sop_workflows, assignments, submissions, steps, photos)
RLS on sop_* tables
Markdown SOP parser + workflows:sync
Outlet-timezone-aware window status
Staff home — today's assignments grouped by status
/sop/[submissionId] one-check-per-screen flow
Client-side photo compression + Blob upload
Owner data layer (scorecard + today list)
/submissions list + today's scorecard
/submissions/[id] detail with photos
Signout + session expiry UX
BYPASSRLS pool centralized + x-forwarded-host spoof closed
Playwright E2E — staff happy-path + owner view
GitHub Actions CI — typecheck, vitest, playwright
v0.1-pilot-ready tag + production deploy
Public /progress build-in-public page