OBJECTIVE
Fix reported auth session drop, enhance dashboard state rhythms, reduce p95 latency.
CURRENT SYSTEM
Next.js App Router + Supabase Auth; session JWT cookie; PostgreSQL. (from repo inspection)
REQUIREMENTS
1. Auth: Reproduce failure, write failing regression test, fix refresh token cycle. Keep provider (D-002).
2. Dashboard: Implement 4 application states (Loading, Empty, Populated, Error) on /dashboard.
3. Performance: Measure main-thread blocking time; eliminate layout shifts on font load.
CONSTRAINTS
Keep auth endpoints backward-compatible. Zero mock data in production. Tests before "done".
VALIDATION & DEFINITION OF DONE
Unit: Vitest token refresh passes · E2E: Playwright login passes · Build: 0 errors · Verified 0 CLS.