Add report viewing and exporting permissions to manager and dispatcher roles

Fix timesheets 404/403 by adding missing permissions and reordering routes to prevent path conflicts.

Add invite_users permission to PM/Dispatcher/Sales Manager roles for bulk invites

Add contractor invoice stats endpoint and provide focused frontend integration documentation

Expand manage_org_users permissions and update org-based checks so managers can manage users within their organization

feat: add expense notifications (approve/reject), fix field agent upload permissions, and update expense documentation

feat(tasks): add comprehensive tasks API with notification integration and documentation

fix: resolve inventory permission issues, endpoint routing conflict, and audit service params

feat(sales_orders): enhance permission checks and validation for bulk imports

fix: Improve Supabase signup error handling and auto-confirm emails

Add 'manage_projects' permission to various roles for project management capabilities

CRITICAL PERFORMANCE FIX: Database connection optimization - Increased SQLAlchemy connection pool from 5 to 20 - Added connection recycling (5 min TTL) - Made SupabaseAuth singleton to reuse connections - Changed audit logging from commit() to flush() to batch writes - Added comprehensive performance fix documentation See PERFORMANCE_FIX.md for CRITICAL step: Must update DATABASE_URL to use Supabase connection pooler (port 6543)

feat: implement org admin permissions, org-scoped filtering, and audit log updates

feat: hub tracking and last active project preference

fix: require_role decorator to handle both sync and async functions

fix: require_role decorator to handle strings and enums

feat: implement automatic token refresh for Supabase Free tier

feat(org-permissions): allow org admins to create client and contractor organizations

feat: config admin email, enhance RBAC

RBAC on key routes, otp to admin email on account creation

fix: add missing Supabase admin client module and update users.py import to restore admin password reset functionality

hide urls and reoder startup sequence

feat: redics, user delete, link profile to media service

fix: health check bucket listing and add Supabase storage RLS policies setup

feat: profile photo maps to user_document_links, enhanced initial health check for supabase buckets, added smart fallback with force_provider support

revert: undo ClientOptions implementation and return to stable Supabase init for v2.0.3

fix: replace dict with ClientOptions in Supabase client init to restore stateless config

fix: disable Supabase auto-refresh for stateless backend and switch logging to ISO 8601 timestamps

fix(auth): sync User model and auth responses with actual schema

feat(auth): integrate Supabase Auth and remove local password handling

update models, disable auto-create, add health checks and WhatsApp

feat/fix: update User model to match Supabase schema, disable auto table creation, and introduce startup DB health checks with connection and table validation

fix: remove unnecessary services like prometheus

Iniital Commit