Sign in with email and password, or use a magic link via Supabase Auth — the same project as the Restaurant Ops app. For magic links: set NEXT_PUBLIC_SUPABASE_EMAIL_REDIRECT_ORIGIN to your app base URL so the email finishes sign-in there (not on this marketing domain). Register each app /auth/callback URL in Supabase → Authentication → URL Configuration. The app should redirect to the next query after exchanging the code, same as this site's /auth/callback route. Default destination on the hub is /maintenance.