feat: add local development setup with Docker Compose

Complete local dev environment for testing:

**Docker Compose Stack:**
- PostgreSQL 15 (Supabase)
- GoTrue (Auth service)
- PostgREST (Auto-generated API)
- Kong (API Gateway)
- Realtime (WebSocket subscriptions)
- Storage API (S3-compatible)
- Supabase Studio (Admin UI on :54323)

**Configuration:**
- Kong routing config for all Supabase services
- Environment variables with example JWT/API keys
- Auto-apply migrations on first startup
- Persistent volumes for data

**Documentation:**
- DEV_SETUP.md with step-by-step guide
- Troubleshooting section
- Common tasks (reset DB, view logs, etc.)
- Pre-seeded data reference

**Bonus:**
- BarcodeScanner.vue component (Week 3 preview)
- html5-qrcode library installed

Ready to run: `docker-compose up -d && cd app && bun run dev`

Access:
- App: http://localhost:3000
- Supabase API: http://localhost:54321
- Supabase Studio: http://localhost:54323
- PostgreSQL: localhost:5432

DEV_SETUP.md

@@ -0,0 +1,335 @@
+# Pantry - Local Development Setup
+
+Self-hosted household pantry management app with barcode scanning.
+
+## 🚀 Quick Start
+
+### Prerequisites
+
+- **Docker** & **Docker Compose** (for Supabase backend)
+- **Bun** (for Nuxt frontend) - Install: `curl -fsSL https://bun.sh/install | bash`
+- **Git**
+
+### 1. Clone & Setup
+
+```bash
+git clone https://gitea.jeanlucmakiola.de/pantry-app/pantry.git
+cd pantry
+```
+
+### 2. Start Supabase (Backend)
+
+```bash
+# Start all Supabase services
+docker-compose up -d
+
+# Wait ~10 seconds for services to initialize
+# Check status
+docker-compose ps
+```
+
+**Services running:**
+- PostgreSQL: `localhost:5432`
+- Supabase API: `http://localhost:54321`
+- Supabase Studio: `http://localhost:54323` (admin UI)
+
+### 3. Apply Database Migrations
+
+The migrations are automatically applied on first startup via `/docker-entrypoint-initdb.d`.
+
+To verify:
+```bash
+docker-compose exec db psql -U postgres -d postgres -c "\dt"
+```
+
+You should see: `inventory_items`, `products`, `tags`, `units`, `item_tags`
+
+### 4. Start Nuxt App (Frontend)
+
+```bash
+cd app
+bun install
+bun run dev
+```
+
+**App running:** `http://localhost:3000`
+
+### 5. Open & Test
+
+1. Visit `http://localhost:3000`
+2. Click "Add Manually" to create your first inventory item
+3. Access Supabase Studio at `http://localhost:54323` to view database
+
+---
+
+## 📁 Project Structure
+
+```
+pantry/
+├── app/                    # Nuxt 4 frontend
+│   ├── components/         # Vue components
+│   │   └── inventory/      # Inventory CRUD UI
+│   ├── composables/        # Supabase client, data hooks
+│   ├── pages/              # Routes (index, scan, settings)
+│   └── types/              # TypeScript definitions
+├── supabase/
+│   └── migrations/         # SQL schema & seed data
+├── docker/
+│   └── kong.yml            # API gateway config
+├── docker-compose.yml      # Supabase services
+└── .env                    # Environment variables
+```
+
+---
+
+## 🔧 Common Tasks
+
+### View Logs
+
+```bash
+# All services
+docker-compose logs -f
+
+# Specific service
+docker-compose logs -f db
+docker-compose logs -f auth
+```
+
+### Reset Database
+
+```bash
+# Stop services
+docker-compose down -v
+
+# Restart (migrations auto-apply)
+docker-compose up -d
+```
+
+### Access Database
+
+```bash
+# psql
+docker-compose exec db psql -U postgres -d postgres
+
+# Supabase Studio (GUI)
+# http://localhost:54323
+```
+
+### Run Migrations Manually
+
+```bash
+# If you add new migrations after initial setup
+docker-compose exec db psql -U postgres -d postgres -f /docker-entrypoint-initdb.d/003_helper_functions.sql
+```
+
+### Create Test User
+
+```bash
+# Via Supabase Studio: http://localhost:54323
+# → Authentication → Add User
+# Email: test@example.com
+# Password: password123
+
+# Or via curl:
+curl http://localhost:54321/auth/v1/signup \
+  -H "apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." \
+  -H "Content-Type: application/json" \
+  -d '{"email":"test@example.com","password":"password123"}'
+```
+
+---
+
+## 🧪 Testing Features
+
+### 1. Inventory Management
+- Add items manually via form
+- Edit quantities with +/- buttons
+- Delete items
+- View expiry warnings
+
+### 2. Tags & Organization
+- Pre-seeded tags: Fridge, Freezer, Pantry, Dairy, Vegan, etc.
+- Multi-select tags when adding items
+- Color-coded badges
+
+### 3. Units
+- 30 pre-seeded units (g, kg, L, cups, pieces, etc.)
+- Automatic conversion support
+
+### 4. Barcode Scanning (Week 3 - In Progress)
+- Camera access (requires HTTPS in production)
+- Manual barcode entry fallback
+
+---
+
+## 🐛 Troubleshooting
+
+### Port Conflicts
+
+If ports 5432, 54321, or 3000 are in use:
+
+```bash
+# Check what's using the port
+sudo lsof -i :5432
+
+# Option 1: Stop conflicting service
+# Option 2: Change port in docker-compose.yml
+```
+
+### Database Connection Refused
+
+```bash
+# Wait for PostgreSQL to fully start
+docker-compose logs db | grep "ready to accept connections"
+
+# If stuck, restart
+docker-compose restart db
+```
+
+### Migrations Not Applied
+
+```bash
+# Verify migrations directory is mounted
+docker-compose exec db ls -la /docker-entrypoint-initdb.d
+
+# Manually apply
+docker-compose exec db bash
+cd /docker-entrypoint-initdb.d
+for f in *.sql; do psql -U postgres -d postgres -f "$f"; done
+```
+
+### Frontend: Module Not Found
+
+```bash
+cd app
+rm -rf node_modules bun.lock .nuxt
+bun install
+bun run dev
+```
+
+---
+
+## 📊 Database Schema
+
+### Tables
+
+| Table | Purpose | Rows (Est.) |
+|-------|---------|-------------|
+| `inventory_items` | Current inventory | 100-500 |
+| `products` | Barcode cache (Open Food Facts) | 500-2000 |
+| `tags` | Organization labels | 50 (33 pre-seeded) |
+| `units` | Measurement units | 50 (30 pre-seeded) |
+| `item_tags` | Many-to-many item ↔ tag | 200-1000 |
+
+### Pre-Seeded Data
+
+**Units (30):**
+- Weight: g, kg, mg, lb, oz
+- Volume: mL, L, cup, tbsp, tsp, gal, qt, pt
+- Count: piece, dozen, package, bottle, can, jar, box, bag
+
+**Tags (33):**
+- Position: Fridge, Freezer, Pantry, Cabinet
+- Type: Dairy, Meat, Vegetables, Fruits, Snacks
+- Dietary: Vegan, Gluten-Free, Organic, Kosher, Halal
+- Custom: Low Stock, To Buy, Meal Prep, Leftovers
+
+---
+
+## 🔐 Authentication
+
+**Default Setup (Development):**
+- Auto-confirm emails (no SMTP needed)
+- Anyone can sign up
+- JWT tokens valid for 1 hour
+
+**Create Admin User:**
+
+```sql
+-- Via psql
+docker-compose exec db psql -U postgres -d postgres
+
+INSERT INTO auth.users (id, email, encrypted_password, email_confirmed_at)
+VALUES (
+  gen_random_uuid(),
+  'admin@pantry.local',
+  crypt('admin123', gen_salt('bf')),
+  NOW()
+);
+```
+
+---
+
+## 🌐 Environment Variables
+
+**.env** (root)
+```bash
+POSTGRES_PASSWORD=postgres
+JWT_SECRET=your-secret-here
+ANON_KEY=<supabase-anon-key>
+SERVICE_ROLE_KEY=<supabase-service-role-key>
+```
+
+**app/.env** (Nuxt)
+```bash
+NUXT_PUBLIC_SUPABASE_URL=http://localhost:54321
+NUXT_PUBLIC_SUPABASE_ANON_KEY=<same-as-above>
+```
+
+---
+
+## 📈 Development Workflow
+
+1. **Make changes** to Nuxt app → Hot reload at `localhost:3000`
+2. **Database changes** → Create new migration in `supabase/migrations/`
+3. **Test** → Add items, scan barcodes, check database
+4. **Commit** → Feature branch → PR to `develop`
+
+---
+
+## 🚢 Production Deployment (Coming Soon)
+
+See `docs/DEPLOYMENT.md` for:
+- Coolify setup
+- Environment configuration
+- SSL/HTTPS setup
+- Backups
+
+---
+
+## 📚 Documentation
+
+- [Architecture](docs/ARCHITECTURE.md)
+- [Database Schema](docs/DATABASE.md)
+- [API Reference](docs/API.md)
+- [Development Guide](docs/DEVELOPMENT.md)
+
+---
+
+## 🤝 Contributing
+
+This is a personal project, but issues and PRs welcome!
+
+1. Fork the repo
+2. Create feature branch (`git checkout -b feature/amazing-feature`)
+3. Commit changes (`git commit -m 'Add amazing feature'`)
+4. Push to branch (`git push origin feature/amazing-feature`)
+5. Open Pull Request
+
+---
+
+## 📝 License
+
+MIT License - See LICENSE file
+
+---
+
+## 🙋 Support
+
+- Issues: https://gitea.jeanlucmakiola.de/pantry-app/pantry/issues
+- Docs: https://gitea.jeanlucmakiola.de/pantry-app/pantry/wiki
+
+---
+
+**Version:** 0.1.0-alpha (MVP in progress)  
+**Status:** Week 2 complete, Week 3 in progress (14/34 issues done)

app/.env.example

@@ -0,0 +1,3 @@
+# Supabase Configuration
+NUXT_PUBLIC_SUPABASE_URL=http://localhost:54321
+NUXT_PUBLIC_SUPABASE_ANON_KEY=your-anon-key-here

app/.gitignore

@@ -0,0 +1,24 @@
+# Nuxt dev/build outputs
+.output
+.data
+.nuxt
+.nitro
+.cache
+dist
+
+# Node dependencies
+node_modules
+
+# Logs
+logs
+*.log
+
+# Misc
+.DS_Store
+.fleet
+.idea
+
+# Local env files
+.env
+.env.*
+!.env.example

app/README.md

@@ -0,0 +1,75 @@
+# Nuxt Minimal Starter
+
+Look at the [Nuxt documentation](https://nuxt.com/docs/getting-started/introduction) to learn more.
+
+## Setup
+
+Make sure to install dependencies:
+
+```bash
+# npm
+npm install
+
+# pnpm
+pnpm install
+
+# yarn
+yarn install
+
+# bun
+bun install
+```
+
+## Development Server
+
+Start the development server on `http://localhost:3000`:
+
+```bash
+# npm
+npm run dev
+
+# pnpm
+pnpm dev
+
+# yarn
+yarn dev
+
+# bun
+bun run dev
+```
+
+## Production
+
+Build the application for production:
+
+```bash
+# npm
+npm run build
+
+# pnpm
+pnpm build
+
+# yarn
+yarn build
+
+# bun
+bun run build
+```
+
+Locally preview production build:
+
+```bash
+# npm
+npm run preview
+
+# pnpm
+pnpm preview
+
+# yarn
+yarn preview
+
+# bun
+bun run preview
+```
+
+Check out the [deployment documentation](https://nuxt.com/docs/getting-started/deployment) for more information.

app/app/app.vue

@@ -0,0 +1,5 @@
+<template>
+  <NuxtLayout>
+    <NuxtPage />
+  </NuxtLayout>
+</template>

app/app/layouts/default.vue

@@ -0,0 +1,15 @@
+<template>
+  <div class="min-h-screen bg-gray-50">
+    <AppHeader />
+    
+    <main class="container mx-auto px-4 py-6 max-w-7xl">
+      <slot />
+    </main>
+
+    <AppFooter />
+  </div>
+</template>
+
+<script setup lang="ts">
+// App layout automatically wraps all pages
+</script>

app/components/AppFooter.vue

@@ -0,0 +1,40 @@
+<template>
+  <footer class="bg-white border-t border-gray-200 mt-auto">
+    <div class="container mx-auto px-4 py-6 max-w-7xl">
+      <div class="flex flex-col md:flex-row items-center justify-between gap-4">
+        <!-- Copyright -->
+        <p class="text-sm text-gray-600">
+          © {{ currentYear }} Pantry. Self-hosted inventory management.
+        </p>
+
+        <!-- Links -->
+        <div class="flex items-center space-x-6">
+          <a 
+            href="https://github.com/pantry-app/pantry" 
+            target="_blank" 
+            rel="noopener noreferrer"
+            class="text-sm text-gray-600 hover:text-primary transition-colors"
+          >
+            GitHub
+          </a>
+          <NuxtLink 
+            to="/about" 
+            class="text-sm text-gray-600 hover:text-primary transition-colors"
+          >
+            About
+          </NuxtLink>
+          <NuxtLink 
+            to="/privacy" 
+            class="text-sm text-gray-600 hover:text-primary transition-colors"
+          >
+            Privacy
+          </NuxtLink>
+        </div>
+      </div>
+    </div>
+  </footer>
+</template>
+
+<script setup lang="ts">
+const currentYear = new Date().getFullYear()
+</script>

app/components/AppHeader.vue

@@ -0,0 +1,122 @@
+<template>
+  <header class="bg-white border-b border-gray-200 sticky top-0 z-50">
+    <div class="container mx-auto px-4 max-w-7xl">
+      <div class="flex items-center justify-between h-16">
+        <!-- Logo / Brand -->
+        <NuxtLink to="/" class="flex items-center space-x-2">
+          <UIcon name="i-heroicons-squares-2x2" class="w-8 h-8 text-primary" />
+          <span class="text-xl font-bold text-gray-900">Pantry</span>
+        </NuxtLink>
+
+        <!-- Navigation -->
+        <nav class="hidden md:flex items-center space-x-6">
+          <NuxtLink 
+            to="/" 
+            class="text-gray-700 hover:text-primary transition-colors"
+            active-class="text-primary font-semibold"
+          >
+            Inventory
+          </NuxtLink>
+          <NuxtLink 
+            to="/scan" 
+            class="text-gray-700 hover:text-primary transition-colors"
+            active-class="text-primary font-semibold"
+          >
+            Scan
+          </NuxtLink>
+          <NuxtLink 
+            to="/settings" 
+            class="text-gray-700 hover:text-primary transition-colors"
+            active-class="text-primary font-semibold"
+          >
+            Settings
+          </NuxtLink>
+        </nav>
+
+        <!-- User Menu -->
+        <div class="flex items-center space-x-4">
+          <UButton 
+            v-if="!user" 
+            to="/auth/login" 
+            color="primary"
+            variant="soft"
+          >
+            Sign In
+          </UButton>
+
+          <UDropdown v-else :items="userMenuItems" mode="hover">
+            <UAvatar 
+              :alt="user.email" 
+              size="sm"
+              :ui="{ background: 'bg-primary' }"
+            />
+          </UDropdown>
+        </div>
+
+        <!-- Mobile Menu Button -->
+        <UButton 
+          icon="i-heroicons-bars-3" 
+          color="gray" 
+          variant="ghost"
+          class="md:hidden"
+          @click="mobileMenuOpen = !mobileMenuOpen"
+        />
+      </div>
+
+      <!-- Mobile Navigation -->
+      <nav 
+        v-if="mobileMenuOpen" 
+        class="md:hidden py-4 space-y-2 border-t border-gray-200"
+      >
+        <NuxtLink 
+          to="/" 
+          class="block px-4 py-2 text-gray-700 hover:bg-gray-50 rounded"
+          @click="mobileMenuOpen = false"
+        >
+          Inventory
+        </NuxtLink>
+        <NuxtLink 
+          to="/scan" 
+          class="block px-4 py-2 text-gray-700 hover:bg-gray-50 rounded"
+          @click="mobileMenuOpen = false"
+        >
+          Scan
+        </NuxtLink>
+        <NuxtLink 
+          to="/settings" 
+          class="block px-4 py-2 text-gray-700 hover:bg-gray-50 rounded"
+          @click="mobileMenuOpen = false"
+        >
+          Settings
+        </NuxtLink>
+      </nav>
+    </div>
+  </header>
+</template>
+
+<script setup lang="ts">
+const { user, signOut } = useSupabaseAuth()
+const mobileMenuOpen = ref(false)
+
+const userMenuItems = [[
+  {
+    label: user.value?.email || 'User',
+    slot: 'account',
+    disabled: true
+  }
+], [
+  {
+    label: 'Settings',
+    icon: 'i-heroicons-cog-6-tooth',
+    to: '/settings'
+  },
+  {
+    label: 'Sign Out',
+    icon: 'i-heroicons-arrow-right-on-rectangle',
+    click: async () => {
+      await signOut()
+      navigateTo('/auth/login')
+    }
+  }
+]]
+</script>

app/components/inventory/AddItemForm.vue

@@ -0,0 +1,257 @@
+<template>
+  <UCard>
+    <template #header>
+      <div class="flex items-center justify-between">
+        <h3 class="text-lg font-semibold">Add New Item</h3>
+        <UButton 
+          icon="i-heroicons-x-mark" 
+          color="gray" 
+          variant="ghost"
+          @click="$emit('close')"
+        />
+      </div>
+    </template>
+
+    <form @submit.prevent="handleSubmit" class="space-y-4">
+      <!-- Item Name -->
+      <UFormGroup label="Item Name" required>
+        <UInput 
+          v-model="form.name"
+          placeholder="e.g. Whole Milk, Pasta, Tomatoes"
+          size="lg"
+          autofocus
+        />
+      </UFormGroup>
+
+      <!-- Quantity & Unit -->
+      <div class="grid grid-cols-2 gap-3">
+        <UFormGroup label="Quantity" required>
+          <UInput 
+            v-model.number="form.quantity"
+            type="number"
+            min="0.01"
+            step="0.01"
+            placeholder="1"
+            size="lg"
+          />
+        </UFormGroup>
+
+        <UFormGroup label="Unit" required>
+          <USelect 
+            v-model="form.unit_id"
+            :options="unitOptions"
+            option-attribute="label"
+            value-attribute="value"
+            placeholder="Select unit"
+            size="lg"
+          />
+        </UFormGroup>
+      </div>
+
+      <!-- Expiry Date -->
+      <UFormGroup label="Expiry Date" hint="Optional">
+        <UInput 
+          v-model="form.expiry_date"
+          type="date"
+          size="lg"
+        />
+      </UFormGroup>
+
+      <!-- Notes -->
+      <UFormGroup label="Notes" hint="Optional">
+        <UTextarea
+          v-model="form.notes"
+          placeholder="Any additional notes..."
+          :rows="2"
+        />
+      </UFormGroup>
+
+      <!-- Tags -->
+      <UFormGroup label="Tags" hint="Optional">
+        <div class="space-y-2">
+          <!-- Selected Tags -->
+          <div v-if="selectedTags.length > 0" class="flex flex-wrap gap-1 mb-2">
+            <UBadge 
+              v-for="tag in selectedTags" 
+              :key="tag.id"
+              :style="{ backgroundColor: tag.color }"
+              class="text-white cursor-pointer"
+              @click="removeTag(tag.id)"
+            >
+              {{ tag.icon }} {{ tag.name }} ✕
+            </UBadge>
+          </div>
+
+          <!-- Tag Selection by Category -->
+          <div v-for="category in tagCategories" :key="category.name" class="space-y-1">
+            <p class="text-xs font-medium text-gray-500 uppercase">{{ category.name }}</p>
+            <div class="flex flex-wrap gap-1">
+              <UButton
+                v-for="tag in category.tags"
+                :key="tag.id"
+                size="xs"
+                :color="isTagSelected(tag.id) ? 'primary' : 'gray'"
+                :variant="isTagSelected(tag.id) ? 'solid' : 'outline'"
+                @click="toggleTag(tag)"
+              >
+                {{ tag.icon }} {{ tag.name }}
+              </UButton>
+            </div>
+          </div>
+        </div>
+      </UFormGroup>
+
+      <!-- Submit -->
+      <div class="flex gap-2 pt-2">
+        <UButton 
+          type="submit"
+          color="primary"
+          size="lg"
+          class="flex-1"
+          :loading="submitting"
+          :disabled="!isValid"
+        >
+          Add Item
+        </UButton>
+        <UButton 
+          color="gray"
+          size="lg"
+          variant="soft"
+          @click="$emit('close')"
+        >
+          Cancel
+        </UButton>
+      </div>
+    </form>
+  </UCard>
+</template>
+
+<script setup lang="ts">
+const { addInventoryItem, addItemTags } = useInventory()
+const { getUnits } = useUnits()
+const { getTags } = useTags()
+
+const emit = defineEmits<{
+  close: []
+  added: [item: any]
+}>()
+
+// Form state
+const form = reactive({
+  name: '',
+  quantity: 1,
+  unit_id: '',
+  expiry_date: '',
+  notes: ''
+})
+
+const submitting = ref(false)
+const selectedTags = ref<any[]>([])
+
+// Load units and tags
+const units = ref<any[]>([])
+const tags = ref<any[]>([])
+
+onMounted(async () => {
+  const [unitsResult, tagsResult] = await Promise.all([
+    getUnits(),
+    getTags()
+  ])
+
+  units.value = unitsResult.data || []
+  tags.value = tagsResult.data || []
+
+  // Set default unit (Piece)
+  const defaultUnit = units.value.find(u => u.abbreviation === 'pc')
+  if (defaultUnit) {
+    form.unit_id = defaultUnit.id
+  }
+})
+
+// Unit options for select
+const unitOptions = computed(() => {
+  const grouped: Record<string, any[]> = {}
+  
+  for (const unit of units.value) {
+    const type = unit.unit_type
+    if (!grouped[type]) grouped[type] = []
+    grouped[type].push({
+      label: `${unit.name} (${unit.abbreviation})`,
+      value: unit.id
+    })
+  }
+
+  return Object.entries(grouped).flatMap(([type, options]) => [
+    { label: `— ${type.charAt(0).toUpperCase() + type.slice(1)} —`, value: '', disabled: true },
+    ...options
+  ])
+})
+
+// Tag categories for display
+const tagCategories = computed(() => {
+  const categories: Record<string, any[]> = {}
+  
+  for (const tag of tags.value) {
+    const cat = tag.category
+    if (!categories[cat]) categories[cat] = []
+    categories[cat].push(tag)
+  }
+
+  return Object.entries(categories).map(([name, tags]) => ({
+    name,
+    tags
+  }))
+})
+
+// Tag selection helpers
+const isTagSelected = (tagId: string) => {
+  return selectedTags.value.some(t => t.id === tagId)
+}
+
+const toggleTag = (tag: any) => {
+  if (isTagSelected(tag.id)) {
+    removeTag(tag.id)
+  } else {
+    selectedTags.value.push(tag)
+  }
+}
+
+const removeTag = (tagId: string) => {
+  selectedTags.value = selectedTags.value.filter(t => t.id !== tagId)
+}
+
+// Validation
+const isValid = computed(() => {
+  return form.name.trim().length > 0 && form.quantity > 0 && form.unit_id
+})
+
+// Submit
+const handleSubmit = async () => {
+  if (!isValid.value) return
+
+  submitting.value = true
+
+  const { data, error } = await addInventoryItem({
+    name: form.name.trim(),
+    quantity: form.quantity,
+    unit_id: form.unit_id,
+    expiry_date: form.expiry_date || null,
+    notes: form.notes.trim() || null
+  })
+
+  if (error) {
+    alert('Failed to add item: ' + error.message)
+    submitting.value = false
+    return
+  }
+
+  // Add tags if any selected
+  if (data && selectedTags.value.length > 0) {
+    const tagIds = selectedTags.value.map(t => t.id)
+    await addItemTags(data.id, tagIds)
+  }
+
+  emit('added', data)
+  submitting.value = false
+}
+</script>

app/components/inventory/EditItemModal.vue

@@ -0,0 +1,184 @@
+<template>
+  <UModal v-model="isOpen">
+    <UCard>
+      <template #header>
+        <div class="flex items-center justify-between">
+          <h3 class="text-lg font-semibold">Edit Item</h3>
+          <UButton 
+            icon="i-heroicons-x-mark" 
+            color="gray" 
+            variant="ghost"
+            @click="close"
+          />
+        </div>
+      </template>
+
+      <form @submit.prevent="handleSubmit" class="space-y-4">
+        <!-- Item Name -->
+        <UFormGroup label="Item Name" required>
+          <UInput 
+            v-model="form.name"
+            placeholder="Item name"
+            size="lg"
+          />
+        </UFormGroup>
+
+        <!-- Quantity & Unit -->
+        <div class="grid grid-cols-2 gap-3">
+          <UFormGroup label="Quantity" required>
+            <UInput 
+              v-model.number="form.quantity"
+              type="number"
+              min="0.01"
+              step="0.01"
+              size="lg"
+            />
+          </UFormGroup>
+
+          <UFormGroup label="Unit" required>
+            <USelect 
+              v-model="form.unit_id"
+              :options="unitOptions"
+              option-attribute="label"
+              value-attribute="value"
+              size="lg"
+            />
+          </UFormGroup>
+        </div>
+
+        <!-- Expiry Date -->
+        <UFormGroup label="Expiry Date" hint="Optional">
+          <UInput 
+            v-model="form.expiry_date"
+            type="date"
+            size="lg"
+          />
+        </UFormGroup>
+
+        <!-- Notes -->
+        <UFormGroup label="Notes" hint="Optional">
+          <UTextarea
+            v-model="form.notes"
+            placeholder="Any additional notes..."
+            :rows="2"
+          />
+        </UFormGroup>
+
+        <!-- Submit -->
+        <div class="flex gap-2 pt-2">
+          <UButton 
+            type="submit"
+            color="primary"
+            size="lg"
+            class="flex-1"
+            :loading="submitting"
+            :disabled="!isValid"
+          >
+            Save Changes
+          </UButton>
+          <UButton 
+            color="gray"
+            size="lg"
+            variant="soft"
+            @click="close"
+          >
+            Cancel
+          </UButton>
+        </div>
+      </form>
+    </UCard>
+  </UModal>
+</template>
+
+<script setup lang="ts">
+const { updateInventoryItem } = useInventory()
+const { getUnits } = useUnits()
+
+const props = defineProps<{
+  item: any | null
+}>()
+
+const emit = defineEmits<{
+  close: []
+  updated: [item: any]
+}>()
+
+const isOpen = ref(false)
+const submitting = ref(false)
+const units = ref<any[]>([])
+
+const form = reactive({
+  name: '',
+  quantity: 1,
+  unit_id: '',
+  expiry_date: '',
+  notes: ''
+})
+
+// Load units
+onMounted(async () => {
+  const { data } = await getUnits()
+  units.value = data || []
+})
+
+// Unit options for select
+const unitOptions = computed(() => {
+  return units.value.map(unit => ({
+    label: `${unit.name} (${unit.abbreviation})`,
+    value: unit.id
+  }))
+})
+
+// Watch for item changes (open modal)
+watch(() => props.item, (newItem) => {
+  if (newItem) {
+    form.name = newItem.name
+    form.quantity = Number(newItem.quantity)
+    form.unit_id = newItem.unit_id
+    form.expiry_date = newItem.expiry_date || ''
+    form.notes = newItem.notes || ''
+    isOpen.value = true
+  }
+}, { immediate: true })
+
+// Watch modal close
+watch(isOpen, (val) => {
+  if (!val) {
+    emit('close')
+  }
+})
+
+// Validation
+const isValid = computed(() => {
+  return form.name.trim().length > 0 && form.quantity > 0 && form.unit_id
+})
+
+const close = () => {
+  isOpen.value = false
+}
+
+// Submit
+const handleSubmit = async () => {
+  if (!isValid.value || !props.item) return
+
+  submitting.value = true
+
+  const { data, error } = await updateInventoryItem(props.item.id, {
+    name: form.name.trim(),
+    quantity: form.quantity,
+    unit_id: form.unit_id,
+    expiry_date: form.expiry_date || null,
+    notes: form.notes.trim() || null
+  })
+
+  if (error) {
+    alert('Failed to update item: ' + error.message)
+    submitting.value = false
+    return
+  }
+
+  emit('updated', data)
+  submitting.value = false
+  close()
+}
+</script>

app/components/inventory/InventoryCard.vue

@@ -0,0 +1,151 @@
+<template>
+  <UCard class="hover:shadow-lg transition-shadow">
+    <!-- Item Image -->
+    <div class="aspect-square bg-gray-100 rounded-lg mb-3 overflow-hidden">
+      <img 
+        v-if="item.product?.image_url" 
+        :src="item.product.image_url" 
+        :alt="item.name"
+        class="w-full h-full object-cover"
+      />
+      <div v-else class="w-full h-full flex items-center justify-center">
+        <UIcon name="i-heroicons-cube" class="w-16 h-16 text-gray-300" />
+      </div>
+    </div>
+
+    <!-- Item Info -->
+    <div class="space-y-2">
+      <div>
+        <h3 class="font-semibold text-gray-900 truncate">{{ item.name }}</h3>
+        <p v-if="item.product?.brand" class="text-sm text-gray-600 truncate">
+          {{ item.product.brand }}
+        </p>
+      </div>
+
+      <!-- Quantity -->
+      <div class="flex items-center justify-between">
+        <span class="text-lg font-medium text-gray-900">
+          {{ item.quantity }} {{ item.unit?.abbreviation }}
+        </span>
+
+        <!-- Quick Actions -->
+        <div class="flex gap-1">
+          <UButton 
+            icon="i-heroicons-minus"
+            size="xs"
+            color="gray"
+            variant="ghost"
+            @click="$emit('update-quantity', item.id, -1)"
+            :disabled="item.quantity <= 1"
+          />
+          <UButton 
+            icon="i-heroicons-plus"
+            size="xs"
+            color="gray"
+            variant="ghost"
+            @click="$emit('update-quantity', item.id, 1)"
+          />
+        </div>
+      </div>
+
+      <!-- Tags -->
+      <div v-if="item.tags && item.tags.length > 0" class="flex flex-wrap gap-1">
+        <UBadge 
+          v-for="tagItem in item.tags.slice(0, 3)" 
+          :key="tagItem.tag.id"
+          :style="{ backgroundColor: tagItem.tag.color }"
+          size="xs"
+          class="text-white"
+        >
+          {{ tagItem.tag.icon }} {{ tagItem.tag.name }}
+        </UBadge>
+        <UBadge v-if="item.tags.length > 3" size="xs" color="gray">
+          +{{ item.tags.length - 3 }}
+        </UBadge>
+      </div>
+
+      <!-- Expiry Warning -->
+      <div v-if="daysUntilExpiry !== null" class="text-xs">
+        <UBadge 
+          :color="expiryColor"
+          variant="soft"
+          class="w-full justify-center"
+        >
+          <UIcon :name="expiryIcon" class="mr-1" />
+          {{ expiryText }}
+        </UBadge>
+      </div>
+    </div>
+
+    <!-- Action Buttons -->
+    <template #footer>
+      <div class="flex gap-2">
+        <UButton 
+          icon="i-heroicons-pencil"
+          size="sm"
+          color="gray"
+          variant="soft"
+          class="flex-1"
+          @click="$emit('edit', item)"
+        >
+          Edit
+        </UButton>
+        <UButton 
+          icon="i-heroicons-trash"
+          size="sm"
+          color="red"
+          variant="soft"
+          @click="$emit('delete', item.id)"
+        >
+          Delete
+        </UButton>
+      </div>
+    </template>
+  </UCard>
+</template>
+
+<script setup lang="ts">
+const props = defineProps<{
+  item: any
+}>()
+
+defineEmits<{
+  edit: [item: any]
+  delete: [id: string]
+  'update-quantity': [id: string, change: number]
+}>()
+
+// Calculate days until expiry
+const daysUntilExpiry = computed(() => {
+  if (!props.item.expiry_date) return null
+  
+  const today = new Date()
+  const expiry = new Date(props.item.expiry_date)
+  const diff = Math.ceil((expiry.getTime() - today.getTime()) / (1000 * 60 * 60 * 24))
+  
+  return diff
+})
+
+// Expiry badge styling
+const expiryColor = computed(() => {
+  if (daysUntilExpiry.value === null) return 'gray'
+  if (daysUntilExpiry.value < 0) return 'red'
+  if (daysUntilExpiry.value <= 3) return 'orange'
+  if (daysUntilExpiry.value <= 7) return 'yellow'
+  return 'green'
+})
+
+const expiryIcon = computed(() => {
+  if (daysUntilExpiry.value === null) return 'i-heroicons-calendar'
+  if (daysUntilExpiry.value < 0) return 'i-heroicons-exclamation-triangle'
+  return 'i-heroicons-clock'
+})
+
+const expiryText = computed(() => {
+  if (daysUntilExpiry.value === null) return 'No expiry'
+  if (daysUntilExpiry.value < 0) return `Expired ${Math.abs(daysUntilExpiry.value)} days ago`
+  if (daysUntilExpiry.value === 0) return 'Expires today'
+  if (daysUntilExpiry.value === 1) return 'Expires tomorrow'
+  return `Expires in ${daysUntilExpiry.value} days`
+})
+</script>

app/components/inventory/InventoryList.vue

@@ -0,0 +1,131 @@
+<template>
+  <div class="space-y-4">
+    <!-- Loading State -->
+    <div v-if="loading" class="text-center py-12">
+      <UIcon name="i-heroicons-arrow-path" class="w-8 h-8 text-gray-400 animate-spin mx-auto mb-2" />
+      <p class="text-gray-600">Loading inventory...</p>
+    </div>
+
+    <!-- Error State -->
+    <div v-else-if="error" class="text-center py-12">
+      <UIcon name="i-heroicons-exclamation-triangle" class="w-12 h-12 text-red-500 mx-auto mb-4" />
+      <p class="text-red-600 mb-4">{{ error }}</p>
+      <UButton @click="loadInventory" color="gray">Retry</UButton>
+    </div>
+
+    <!-- Empty State -->
+    <div v-else-if="!items || items.length === 0" class="text-center py-12">
+      <UIcon name="i-heroicons-inbox" class="w-16 h-16 text-gray-400 mx-auto mb-4" />
+      <h3 class="text-lg font-semibold text-gray-900 mb-2">
+        No items yet
+      </h3>
+      <p class="text-gray-600 mb-6">
+        Start by scanning a barcode or adding an item manually.
+      </p>
+      <div class="flex gap-2 justify-center">
+        <UButton 
+          to="/scan" 
+          color="primary"
+          icon="i-heroicons-qr-code"
+        >
+          Scan First Item
+        </UButton>
+        <UButton 
+          @click="$emit('add-item')"
+          color="white"
+          icon="i-heroicons-plus"
+        >
+          Add Manually
+        </UButton>
+      </div>
+    </div>
+
+    <!-- Inventory Grid -->
+    <div v-else class="grid gap-4 sm:grid-cols-2 lg:grid-cols-3 xl:grid-cols-4">
+      <InventoryCard
+        v-for="item in items"
+        :key="item.id"
+        :item="item"
+        @edit="$emit('edit-item', item)"
+        @delete="handleDelete(item.id)"
+        @update-quantity="handleQuantityUpdate"
+      />
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+const { getInventory, deleteInventoryItem, updateQuantity } = useInventory()
+
+const props = defineProps<{
+  refresh?: boolean
+}>()
+
+const emit = defineEmits<{
+  'add-item': []
+  'edit-item': [item: any]
+}>()
+
+const items = ref<any[]>([])
+const loading = ref(true)
+const error = ref<string | null>(null)
+
+const loadInventory = async () => {
+  loading.value = true
+  error.value = null
+
+  const { data, error: fetchError } = await getInventory()
+
+  if (fetchError) {
+    error.value = 'Failed to load inventory. Please try again.'
+    loading.value = false
+    return
+  }
+
+  items.value = data || []
+  loading.value = false
+}
+
+const handleDelete = async (id: string) => {
+  if (!confirm('Are you sure you want to delete this item?')) {
+    return
+  }
+
+  const { error: deleteError } = await deleteInventoryItem(id)
+
+  if (deleteError) {
+    alert('Failed to delete item')
+    return
+  }
+
+  // Remove from local list
+  items.value = items.value.filter(item => item.id !== id)
+}
+
+const handleQuantityUpdate = async (id: string, change: number) => {
+  const result = await updateQuantity(id, change)
+
+  if (result.error) {
+    alert('Failed to update quantity')
+    return
+  }
+
+  // Reload inventory after update
+  await loadInventory()
+}
+
+// Load on mount
+onMounted(loadInventory)
+
+// Watch for refresh prop
+watch(() => props.refresh, (newVal) => {
+  if (newVal) {
+    loadInventory()
+  }
+})
+
+// Expose reload method
+defineExpose({
+  reload: loadInventory
+})
+</script>

app/components/scan/BarcodeScanner.vue

@@ -0,0 +1,161 @@
+<template>
+  <div class="relative">
+    <!-- Scanner Container -->
+    <div 
+      :id="scannerId" 
+      ref="scannerRef"
+      class="w-full rounded-lg overflow-hidden bg-black"
+      :class="{ 'aspect-video': !isScanning, 'min-h-[300px]': isScanning }"
+    />
+
+    <!-- Overlay when not scanning -->
+    <div 
+      v-if="!isScanning && !error" 
+      class="absolute inset-0 flex items-center justify-center bg-gray-900 rounded-lg"
+    >
+      <div class="text-center">
+        <UIcon name="i-heroicons-camera" class="w-16 h-16 text-gray-400 mb-4" />
+        <UButton 
+          color="primary" 
+          size="lg"
+          icon="i-heroicons-qr-code"
+          @click="startScanning"
+        >
+          Start Camera
+        </UButton>
+      </div>
+    </div>
+
+    <!-- Error State -->
+    <div 
+      v-if="error" 
+      class="absolute inset-0 flex items-center justify-center bg-gray-900 rounded-lg"
+    >
+      <div class="text-center px-4">
+        <UIcon name="i-heroicons-exclamation-triangle" class="w-12 h-12 text-red-400 mb-4" />
+        <p class="text-white mb-4">{{ error }}</p>
+        <div class="flex gap-2 justify-center">
+          <UButton @click="startScanning" color="primary">Try Again</UButton>
+          <UButton @click="$emit('manual-entry')" color="gray">Enter Manually</UButton>
+        </div>
+      </div>
+    </div>
+
+    <!-- Manual Barcode Entry -->
+    <div class="mt-4">
+      <UFormGroup label="Or enter barcode manually">
+        <div class="flex gap-2">
+          <UInput 
+            v-model="manualBarcode"
+            placeholder="e.g. 8000500310427"
+            size="lg"
+            class="flex-1"
+            @keyup.enter="submitManualBarcode"
+          />
+          <UButton 
+            color="primary"
+            size="lg"
+            :disabled="!manualBarcode.trim()"
+            @click="submitManualBarcode"
+          >
+            Lookup
+          </UButton>
+        </div>
+      </UFormGroup>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { Html5Qrcode, Html5QrcodeSupportedFormats } from 'html5-qrcode'
+
+const emit = defineEmits<{
+  'barcode-detected': [barcode: string]
+  'manual-entry': []
+}>()
+
+const scannerId = 'barcode-scanner'
+const scannerRef = ref<HTMLElement | null>(null)
+const isScanning = ref(false)
+const error = ref<string | null>(null)
+const manualBarcode = ref('')
+
+let html5QrCode: Html5Qrcode | null = null
+
+const startScanning = async () => {
+  error.value = null
+
+  try {
+    if (!html5QrCode) {
+      html5QrCode = new Html5Qrcode(scannerId, {
+        formatsToSupport: [
+          Html5QrcodeSupportedFormats.EAN_13,
+          Html5QrcodeSupportedFormats.EAN_8,
+          Html5QrcodeSupportedFormats.UPC_A,
+          Html5QrcodeSupportedFormats.UPC_E,
+          Html5QrcodeSupportedFormats.CODE_128,
+          Html5QrcodeSupportedFormats.CODE_39,
+          Html5QrcodeSupportedFormats.QR_CODE
+        ],
+        verbose: false
+      })
+    }
+
+    await html5QrCode.start(
+      { facingMode: 'environment' },
+      {
+        fps: 10,
+        qrbox: { width: 250, height: 150 },
+        aspectRatio: 1.777
+      },
+      onScanSuccess,
+      onScanFailure
+    )
+
+    isScanning.value = true
+  } catch (err: any) {
+    console.error('Scanner error:', err)
+    
+    if (err.toString().includes('NotAllowedError')) {
+      error.value = 'Camera permission denied. Please allow camera access and try again.'
+    } else if (err.toString().includes('NotFoundError')) {
+      error.value = 'No camera found. Please use a device with a camera or enter the barcode manually.'
+    } else {
+      error.value = 'Could not start camera. Try entering the barcode manually.'
+    }
+  }
+}
+
+const stopScanning = async () => {
+  if (html5QrCode && isScanning.value) {
+    try {
+      await html5QrCode.stop()
+    } catch (err) {
+      console.error('Error stopping scanner:', err)
+    }
+    isScanning.value = false
+  }
+}
+
+const onScanSuccess = (decodedText: string) => {
+  // Stop scanning after successful read
+  stopScanning()
+  emit('barcode-detected', decodedText)
+}
+
+const onScanFailure = (_errorMessage: string) => {
+  // Ignore - this fires continuously when no barcode is detected
+}
+
+const submitManualBarcode = () => {
+  if (manualBarcode.value.trim()) {
+    emit('barcode-detected', manualBarcode.value.trim())
+    manualBarcode.value = ''
+  }
+}
+
+// Cleanup on unmount
+onUnmounted(() => {
+  stopScanning()
+})
+</script>

app/composables/useInventory.ts

@@ -0,0 +1,201 @@
+import type { Database } from '~/types/database.types'
+
+type InventoryItem = Database['public']['Tables']['inventory_items']['Row']
+type InventoryItemInsert = Database['public']['Tables']['inventory_items']['Insert']
+type InventoryItemUpdate = Database['public']['Tables']['inventory_items']['Update']
+
+export const useInventory = () => {
+  const supabase = useSupabase()
+  const { user } = useSupabaseAuth()
+
+  /**
+   * Get all inventory items with denormalized data
+   */
+  const getInventory = async () => {
+    const { data, error } = await supabase
+      .from('inventory_items')
+      .select(`
+        *,
+        product:products(*),
+        unit:units(*),
+        tags:item_tags(tag:tags(*))
+      `)
+      .order('created_at', { ascending: false })
+
+    if (error) {
+      console.error('Error fetching inventory:', error)
+      return { data: null, error }
+    }
+
+    return { data, error: null }
+  }
+
+  /**
+   * Get single inventory item by ID
+   */
+  const getInventoryItem = async (id: string) => {
+    const { data, error } = await supabase
+      .from('inventory_items')
+      .select(`
+        *,
+        product:products(*),
+        unit:units(*),
+        tags:item_tags(tag:tags(*))
+      `)
+      .eq('id', id)
+      .single()
+
+    if (error) {
+      console.error('Error fetching item:', error)
+      return { data: null, error }
+    }
+
+    return { data, error: null }
+  }
+
+  /**
+   * Add new inventory item
+   */
+  const addInventoryItem = async (item: Omit<InventoryItemInsert, 'added_by'>) => {
+    if (!user.value) {
+      return { data: null, error: { message: 'User not authenticated' } }
+    }
+
+    const { data, error } = await supabase
+      .from('inventory_items')
+      .insert({
+        ...item,
+        added_by: user.value.id
+      })
+      .select(`
+        *,
+        product:products(*),
+        unit:units(*),
+        tags:item_tags(tag:tags(*))
+      `)
+      .single()
+
+    if (error) {
+      console.error('Error adding item:', error)
+      return { data: null, error }
+    }
+
+    return { data, error: null }
+  }
+
+  /**
+   * Update inventory item
+   */
+  const updateInventoryItem = async (id: string, updates: InventoryItemUpdate) => {
+    const { data, error } = await supabase
+      .from('inventory_items')
+      .update(updates)
+      .eq('id', id)
+      .select(`
+        *,
+        product:products(*),
+        unit:units(*),
+        tags:item_tags(tag:tags(*))
+      `)
+      .single()
+
+    if (error) {
+      console.error('Error updating item:', error)
+      return { data: null, error }
+    }
+
+    return { data, error: null }
+  }
+
+  /**
+   * Delete inventory item
+   */
+  const deleteInventoryItem = async (id: string) => {
+    // First delete associated tags
+    await supabase
+      .from('item_tags')
+      .delete()
+      .eq('item_id', id)
+
+    const { error } = await supabase
+      .from('inventory_items')
+      .delete()
+      .eq('id', id)
+
+    if (error) {
+      console.error('Error deleting item:', error)
+      return { error }
+    }
+
+    return { error: null }
+  }
+
+  /**
+   * Update item quantity (consume or restock)
+   */
+  const updateQuantity = async (id: string, change: number) => {
+    const { data: item, error: fetchError } = await getInventoryItem(id)
+    if (fetchError || !item) {
+      return { data: null, error: fetchError }
+    }
+
+    const newQuantity = Number(item.quantity) + change
+
+    if (newQuantity <= 0) {
+      // Auto-delete when quantity reaches zero
+      return await deleteInventoryItem(id)
+    }
+
+    return await updateInventoryItem(id, { quantity: newQuantity })
+  }
+
+  /**
+   * Add tags to item
+   */
+  const addItemTags = async (itemId: string, tagIds: string[]) => {
+    const items = tagIds.map(tagId => ({
+      item_id: itemId,
+      tag_id: tagId
+    }))
+
+    const { error } = await supabase
+      .from('item_tags')
+      .insert(items)
+
+    if (error) {
+      console.error('Error adding tags:', error)
+      return { error }
+    }
+
+    return { error: null }
+  }
+
+  /**
+   * Remove tag from item
+   */
+  const removeItemTag = async (itemId: string, tagId: string) => {
+    const { error } = await supabase
+      .from('item_tags')
+      .delete()
+      .eq('item_id', itemId)
+      .eq('tag_id', tagId)
+
+    if (error) {
+      console.error('Error removing tag:', error)
+      return { error }
+    }
+
+    return { error: null }
+  }
+
+  return {
+    getInventory,
+    getInventoryItem,
+    addInventoryItem,
+    updateInventoryItem,
+    deleteInventoryItem,
+    updateQuantity,
+    addItemTags,
+    removeItemTag
+  }
+}

app/composables/useSupabase.ts

@@ -0,0 +1,81 @@
+import { createClient, SupabaseClient } from '@supabase/supabase-js'
+import type { Database } from '~/types/database.types'
+
+let supabaseInstance: SupabaseClient<Database> | null = null
+
+export const useSupabase = () => {
+  const config = useRuntimeConfig()
+  
+  if (!supabaseInstance) {
+    supabaseInstance = createClient<Database>(
+      config.public.supabaseUrl,
+      config.public.supabaseAnonKey,
+      {
+        auth: {
+          persistSession: true,
+          autoRefreshToken: true,
+          detectSessionInUrl: true,
+          storage: process.client ? window.localStorage : undefined
+        }
+      }
+    )
+  }
+
+  return supabaseInstance
+}
+
+/**
+ * Composable for Supabase authentication
+ */
+export const useSupabaseAuth = () => {
+  const supabase = useSupabase()
+  const user = useState('supabase_user', () => null as any)
+  const session = useState('supabase_session', () => null as any)
+
+  // Initialize auth state
+  const initAuth = async () => {
+    const { data: { session: currentSession } } = await supabase.auth.getSession()
+    session.value = currentSession
+    user.value = currentSession?.user || null
+
+    // Listen for auth changes
+    supabase.auth.onAuthStateChange((_event, newSession) => {
+      session.value = newSession
+      user.value = newSession?.user || null
+    })
+  }
+
+  // Call initAuth on composable mount
+  if (process.client) {
+    initAuth()
+  }
+
+  const signIn = async (email: string, password: string) => {
+    const { data, error } = await supabase.auth.signInWithPassword({
+      email,
+      password
+    })
+    return { data, error }
+  }
+
+  const signUp = async (email: string, password: string) => {
+    const { data, error } = await supabase.auth.signUp({
+      email,
+      password
+    })
+    return { data, error }
+  }
+
+  const signOut = async () => {
+    const { error } = await supabase.auth.signOut()
+    return { error }
+  }
+
+  return {
+    user: readonly(user),
+    session: readonly(session),
+    signIn,
+    signUp,
+    signOut
+  }
+}

app/composables/useTags.ts

@@ -0,0 +1,44 @@
+export const useTags = () => {
+  const supabase = useSupabase()
+
+  /**
+   * Get all tags
+   */
+  const getTags = async () => {
+    const { data, error } = await supabase
+      .from('tags')
+      .select('*')
+      .order('category', { ascending: true })
+      .order('name', { ascending: true })
+
+    if (error) {
+      console.error('Error fetching tags:', error)
+      return { data: null, error }
+    }
+
+    return { data, error: null }
+  }
+
+  /**
+   * Get tags by category
+   */
+  const getTagsByCategory = async (category: 'position' | 'type' | 'dietary' | 'custom') => {
+    const { data, error } = await supabase
+      .from('tags')
+      .select('*')
+      .eq('category', category)
+      .order('name', { ascending: true })
+
+    if (error) {
+      console.error('Error fetching tags by category:', error)
+      return { data: null, error }
+    }
+
+    return { data, error: null }
+  }
+
+  return {
+    getTags,
+    getTagsByCategory
+  }
+}

app/composables/useUnits.ts

@@ -0,0 +1,53 @@
+export const useUnits = () => {
+  const supabase = useSupabase()
+
+  /**
+   * Get all units
+   */
+  const getUnits = async () => {
+    const { data, error } = await supabase
+      .from('units')
+      .select('*')
+      .order('unit_type', { ascending: true })
+      .order('name', { ascending: true })
+
+    if (error) {
+      console.error('Error fetching units:', error)
+      return { data: null, error }
+    }
+
+    return { data, error: null }
+  }
+
+  /**
+   * Get default unit for a type
+   */
+  const getDefaultUnit = async (unitType: 'weight' | 'volume' | 'count' | 'custom') => {
+    const { data, error } = await supabase
+      .from('units')
+      .select('*')
+      .eq('unit_type', unitType)
+      .eq('is_default', true)
+      .single()
+
+    if (error) {
+      console.error('Error fetching default unit:', error)
+      return { data: null, error }
+    }
+
+    return { data, error: null }
+  }
+
+  /**
+   * Convert quantity between units
+   */
+  const convertUnit = (quantity: number, fromFactor: number, toFactor: number): number => {
+    return (quantity * fromFactor) / toFactor
+  }
+
+  return {
+    getUnits,
+    getDefaultUnit,
+    convertUnit
+  }
+}

app/nuxt.config.ts

@@ -0,0 +1,21 @@
+// https://nuxt.com/docs/api/configuration/nuxt-config
+export default defineNuxtConfig({
+  compatibilityDate: '2025-07-15',
+  devtools: { enabled: true },
+
+  modules: [
+    '@nuxt/ui',
+    '@nuxt/fonts'
+  ],
+
+  runtimeConfig: {
+    public: {
+      supabaseUrl: process.env.NUXT_PUBLIC_SUPABASE_URL || 'http://localhost:54321',
+      supabaseAnonKey: process.env.NUXT_PUBLIC_SUPABASE_ANON_KEY || ''
+    }
+  },
+
+  colorMode: {
+    preference: 'light'
+  }
+})

app/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "app",
+  "type": "module",
+  "private": true,
+  "scripts": {
+    "build": "nuxt build",
+    "dev": "nuxt dev",
+    "generate": "nuxt generate",
+    "preview": "nuxt preview",
+    "postinstall": "nuxt prepare"
+  },
+  "dependencies": {
+    "@nuxt/fonts": "^0.13.0",
+    "@nuxt/ui": "^4.4.0",
+    "@supabase/supabase-js": "^2.95.3",
+    "html5-qrcode": "^2.3.8",
+    "nuxt": "^4.3.1",
+    "vue": "^3.5.28",
+    "vue-router": "^4.6.4"
+  },
+  "devDependencies": {
+    "@nuxtjs/tailwindcss": "^6.14.0"
+  }
+}

app/pages/index.vue

@@ -0,0 +1,74 @@
+<template>
+  <div>
+    <div class="flex items-center justify-between mb-6">
+      <h1 class="text-3xl font-bold text-gray-900">Inventory</h1>
+      
+      <div class="flex gap-2">
+        <UButton 
+          to="/scan" 
+          color="primary" 
+          size="lg"
+          icon="i-heroicons-qr-code"
+        >
+          Scan Item
+        </UButton>
+        
+        <UButton 
+          color="white" 
+          size="lg"
+          icon="i-heroicons-plus"
+          @click="showAddForm = true"
+        >
+          Add Manually
+        </UButton>
+      </div>
+    </div>
+
+    <!-- Add Item Form (Overlay) -->
+    <div v-if="showAddForm" class="fixed inset-0 z-50 flex items-start justify-center pt-20 px-4 bg-black/50">
+      <div class="w-full max-w-lg">
+        <AddItemForm 
+          @close="showAddForm = false"
+          @added="handleItemAdded"
+        />
+      </div>
+    </div>
+
+    <!-- Edit Item Modal -->
+    <EditItemModal 
+      :item="editingItem"
+      @close="editingItem = null"
+      @updated="handleItemUpdated"
+    />
+
+    <!-- Inventory List -->
+    <InventoryList
+      ref="inventoryListRef"
+      :refresh="refreshKey"
+      @add-item="showAddForm = true"
+      @edit-item="editingItem = $event"
+    />
+  </div>
+</template>
+
+<script setup lang="ts">
+definePageMeta({
+  layout: 'default'
+})
+
+const showAddForm = ref(false)
+const editingItem = ref<any>(null)
+const refreshKey = ref(0)
+const inventoryListRef = ref()
+
+const handleItemAdded = (item: any) => {
+  showAddForm.value = false
+  // Reload the inventory list
+  inventoryListRef.value?.reload()
+}
+
+const handleItemUpdated = (item: any) => {
+  editingItem.value = null
+  inventoryListRef.value?.reload()
+}
+</script>

app/pages/scan.vue

@@ -0,0 +1,33 @@
+<template>
+  <div>
+    <h1 class="text-3xl font-bold text-gray-900 mb-6">Scan Item</h1>
+    
+    <UCard>
+      <div class="text-center py-12">
+        <UIcon 
+          name="i-heroicons-qr-code" 
+          class="w-16 h-16 text-gray-400 mx-auto mb-4"
+        />
+        <h3 class="text-lg font-semibold text-gray-900 mb-2">
+          Barcode Scanner
+        </h3>
+        <p class="text-gray-600 mb-6">
+          This feature will be implemented in Week 3.
+        </p>
+        <UButton 
+          to="/" 
+          color="gray"
+          variant="soft"
+        >
+          Back to Inventory
+        </UButton>
+      </div>
+    </UCard>
+  </div>
+</template>
+
+<script setup lang="ts">
+definePageMeta({
+  layout: 'default'
+})
+</script>

app/pages/settings.vue

@@ -0,0 +1,74 @@
+<template>
+  <div>
+    <h1 class="text-3xl font-bold text-gray-900 mb-6">Settings</h1>
+    
+    <div class="grid gap-6 md:grid-cols-2">
+      <UCard>
+        <template #header>
+          <h3 class="text-lg font-semibold">Account</h3>
+        </template>
+        
+        <div class="space-y-4">
+          <div v-if="user">
+            <label class="text-sm font-medium text-gray-700">Email</label>
+            <p class="text-gray-900">{{ user.email }}</p>
+          </div>
+          
+          <UButton 
+            v-if="!user"
+            to="/auth/login"
+            color="primary"
+          >
+            Sign In
+          </UButton>
+        </div>
+      </UCard>
+
+      <UCard>
+        <template #header>
+          <h3 class="text-lg font-semibold">Tags</h3>
+        </template>
+        
+        <p class="text-gray-600">
+          Manage your custom tags here (coming in Week 2).
+        </p>
+      </UCard>
+
+      <UCard>
+        <template #header>
+          <h3 class="text-lg font-semibold">Units</h3>
+        </template>
+        
+        <p class="text-gray-600">
+          Manage your custom units here (coming in Week 2).
+        </p>
+      </UCard>
+
+      <UCard>
+        <template #header>
+          <h3 class="text-lg font-semibold">About</h3>
+        </template>
+        
+        <div class="space-y-2 text-sm text-gray-600">
+          <p><strong>Pantry</strong> v0.1.0-alpha</p>
+          <p>Self-hosted inventory management</p>
+          <a 
+            href="https://github.com/pantry-app/pantry" 
+            target="_blank"
+            class="text-primary hover:underline"
+          >
+            View on GitHub →
+          </a>
+        </div>
+      </UCard>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+const { user } = useSupabaseAuth()
+
+definePageMeta({
+  layout: 'default'
+})
+</script>

app/public/robots.txt

@@ -0,0 +1,2 @@
+User-Agent: *
+Disallow:

app/tsconfig.json

@@ -0,0 +1,18 @@
+{
+  // https://nuxt.com/docs/guide/concepts/typescript
+  "files": [],
+  "references": [
+    {
+      "path": "./.nuxt/tsconfig.app.json"
+    },
+    {
+      "path": "./.nuxt/tsconfig.server.json"
+    },
+    {
+      "path": "./.nuxt/tsconfig.shared.json"
+    },
+    {
+      "path": "./.nuxt/tsconfig.node.json"
+    }
+  ]
+}

app/types/database.types.ts

@@ -0,0 +1,184 @@
+/**
+ * Database type definitions
+ * 
+ * TODO: Generate these from Supabase schema using:
+ * supabase gen types typescript --project-id <project-id> > types/database.types.ts
+ * 
+ * For now, using a placeholder structure that matches our schema
+ */
+
+export type Json =
+  | string
+  | number
+  | boolean
+  | null
+  | { [key: string]: Json | undefined }
+  | Json[]
+
+export interface Database {
+  public: {
+    Tables: {
+      inventory_items: {
+        Row: {
+          id: string
+          product_id: string | null
+          name: string
+          quantity: number
+          unit_id: string
+          expiry_date: string | null
+          notes: string | null
+          added_by: string
+          created_at: string
+          updated_at: string
+        }
+        Insert: {
+          id?: string
+          product_id?: string | null
+          name: string
+          quantity: number
+          unit_id: string
+          expiry_date?: string | null
+          notes?: string | null
+          added_by: string
+          created_at?: string
+          updated_at?: string
+        }
+        Update: {
+          id?: string
+          product_id?: string | null
+          name?: string
+          quantity?: number
+          unit_id?: string
+          expiry_date?: string | null
+          notes?: string | null
+          added_by?: string
+          created_at?: string
+          updated_at?: string
+        }
+      }
+      products: {
+        Row: {
+          id: string
+          barcode: string
+          name: string
+          brand: string | null
+          image_url: string | null
+          default_unit_id: string | null
+          cached_at: string
+          created_at: string
+        }
+        Insert: {
+          id?: string
+          barcode: string
+          name: string
+          brand?: string | null
+          image_url?: string | null
+          default_unit_id?: string | null
+          cached_at?: string
+          created_at?: string
+        }
+        Update: {
+          id?: string
+          barcode?: string
+          name?: string
+          brand?: string | null
+          image_url?: string | null
+          default_unit_id?: string | null
+          cached_at?: string
+          created_at?: string
+        }
+      }
+      tags: {
+        Row: {
+          id: string
+          name: string
+          category: 'position' | 'type' | 'custom'
+          icon: string | null
+          color: string | null
+          created_by: string | null
+          created_at: string
+        }
+        Insert: {
+          id?: string
+          name: string
+          category?: 'position' | 'type' | 'custom'
+          icon?: string | null
+          color?: string | null
+          created_by?: string | null
+          created_at?: string
+        }
+        Update: {
+          id?: string
+          name?: string
+          category?: 'position' | 'type' | 'custom'
+          icon?: string | null
+          color?: string | null
+          created_by?: string | null
+          created_at?: string
+        }
+      }
+      units: {
+        Row: {
+          id: string
+          name: string
+          abbreviation: string
+          unit_type: 'weight' | 'volume' | 'count' | 'custom'
+          base_unit_id: string | null
+          conversion_factor: number | null
+          is_default: boolean
+          created_by: string | null
+          created_at: string
+        }
+        Insert: {
+          id?: string
+          name: string
+          abbreviation: string
+          unit_type?: 'weight' | 'volume' | 'count' | 'custom'
+          base_unit_id?: string | null
+          conversion_factor?: number | null
+          is_default?: boolean
+          created_by?: string | null
+          created_at?: string
+        }
+        Update: {
+          id?: string
+          name?: string
+          abbreviation?: string
+          unit_type?: 'weight' | 'volume' | 'count' | 'custom'
+          base_unit_id?: string | null
+          conversion_factor?: number | null
+          is_default?: boolean
+          created_by?: string | null
+          created_at?: string
+        }
+      }
+      item_tags: {
+        Row: {
+          item_id: string
+          tag_id: string
+          created_at: string
+        }
+        Insert: {
+          item_id: string
+          tag_id: string
+          created_at?: string
+        }
+        Update: {
+          item_id?: string
+          tag_id?: string
+          created_at?: string
+        }
+      }
+    }
+    Views: {
+      [_ in never]: never
+    }
+    Functions: {
+      [_ in never]: never
+    }
+    Enums: {
+      tag_category: 'position' | 'type' | 'custom'
+      unit_type: 'weight' | 'volume' | 'count' | 'custom'
+    }
+  }
+}

docker-compose.yml

@@ -0,0 +1,127 @@
+version: '3.8'
+
+services:
+  # PostgreSQL Database
+  db:
+    image: supabase/postgres:15.1.0.147
+    restart: unless-stopped
+    ports:
+      - "5432:5432"
+    environment:
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
+      POSTGRES_DB: postgres
+    volumes:
+      - db-data:/var/lib/postgresql/data
+      - ./supabase/migrations:/docker-entrypoint-initdb.d:ro
+
+  # Supabase Studio (Admin UI)
+  studio:
+    image: supabase/studio:20231123-64a766a
+    restart: unless-stopped
+    ports:
+      - "54323:3000"
+    environment:
+      SUPABASE_URL: http://kong:8000
+      SUPABASE_PUBLIC_URL: http://localhost:54321
+      SUPABASE_ANON_KEY: ${ANON_KEY}
+      SUPABASE_SERVICE_KEY: ${SERVICE_ROLE_KEY}
+
+  # Kong API Gateway
+  kong:
+    image: kong:2.8.1
+    restart: unless-stopped
+    ports:
+      - "54321:8000"
+      - "54320:8443"
+    environment:
+      KONG_DATABASE: "off"
+      KONG_DECLARATIVE_CONFIG: /var/lib/kong/kong.yml
+      KONG_DNS_ORDER: LAST,A,CNAME
+      KONG_PLUGINS: request-transformer,cors,key-auth,acl
+    volumes:
+      - ./docker/kong.yml:/var/lib/kong/kong.yml:ro
+
+  # GoTrue (Auth)
+  auth:
+    image: supabase/gotrue:v2.99.0
+    restart: unless-stopped
+    depends_on:
+      - db
+    environment:
+      GOTRUE_API_HOST: 0.0.0.0
+      GOTRUE_API_PORT: 9999
+      API_EXTERNAL_URL: http://localhost:54321
+      GOTRUE_DB_DRIVER: postgres
+      GOTRUE_DB_DATABASE_URL: postgres://supabase_auth_admin:${POSTGRES_PASSWORD:-postgres}@db:5432/postgres
+      GOTRUE_SITE_URL: http://localhost:3000
+      GOTRUE_URI_ALLOW_LIST: "*"
+      GOTRUE_DISABLE_SIGNUP: false
+      GOTRUE_JWT_ADMIN_ROLES: service_role
+      GOTRUE_JWT_AUD: authenticated
+      GOTRUE_JWT_DEFAULT_GROUP_NAME: authenticated
+      GOTRUE_JWT_EXP: 3600
+      GOTRUE_JWT_SECRET: ${JWT_SECRET}
+      GOTRUE_EXTERNAL_EMAIL_ENABLED: true
+      GOTRUE_MAILER_AUTOCONFIRM: true
+
+  # PostgREST (Auto API)
+  rest:
+    image: postgrest/postgrest:v11.2.0
+    restart: unless-stopped
+    depends_on:
+      - db
+    environment:
+      PGRST_DB_URI: postgres://authenticator:${POSTGRES_PASSWORD:-postgres}@db:5432/postgres
+      PGRST_DB_SCHEMAS: public,storage
+      PGRST_DB_ANON_ROLE: anon
+      PGRST_JWT_SECRET: ${JWT_SECRET}
+      PGRST_DB_USE_LEGACY_GUCS: "false"
+
+  # Realtime
+  realtime:
+    image: supabase/realtime:v2.25.35
+    restart: unless-stopped
+    depends_on:
+      - db
+    environment:
+      PORT: 4000
+      DB_HOST: db
+      DB_PORT: 5432
+      DB_USER: supabase_admin
+      DB_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
+      DB_NAME: postgres
+      DB_AFTER_CONNECT_QUERY: 'SET search_path TO _realtime'
+      DB_ENC_KEY: supabaserealtime
+      API_JWT_SECRET: ${JWT_SECRET}
+      FLY_ALLOC_ID: fly123
+      FLY_APP_NAME: realtime
+      SECRET_KEY_BASE: ${JWT_SECRET}
+      ERL_AFLAGS: -proto_dist inet_tcp
+      ENABLE_TAILSCALE: "false"
+      DNS_NODES: "''"
+
+  # Storage (S3-compatible)
+  storage:
+    image: supabase/storage-api:v0.40.4
+    restart: unless-stopped
+    depends_on:
+      - db
+      - rest
+    environment:
+      ANON_KEY: ${ANON_KEY}
+      SERVICE_KEY: ${SERVICE_ROLE_KEY}
+      POSTGREST_URL: http://rest:3000
+      PGRST_JWT_SECRET: ${JWT_SECRET}
+      DATABASE_URL: postgres://supabase_storage_admin:${POSTGRES_PASSWORD:-postgres}@db:5432/postgres
+      FILE_SIZE_LIMIT: 52428800
+      STORAGE_BACKEND: file
+      FILE_STORAGE_BACKEND_PATH: /var/lib/storage
+      TENANT_ID: stub
+      REGION: stub
+      GLOBAL_S3_BUCKET: stub
+    volumes:
+      - storage-data:/var/lib/storage
+
+volumes:
+  db-data:
+  storage-data:

docker/kong.yml

@@ -0,0 +1,85 @@
+_format_version: "2.1"
+
+_transform: true
+
+services:
+  - name: auth
+    url: http://auth:9999
+    routes:
+      - name: auth-v1
+        strip_path: true
+        paths:
+          - /auth/v1
+    plugins:
+      - name: cors
+      - name: key-auth
+        config:
+          hide_credentials: true
+
+  - name: rest
+    url: http://rest:3000
+    routes:
+      - name: rest-v1
+        strip_path: true
+        paths:
+          - /rest/v1
+    plugins:
+      - name: cors
+      - name: key-auth
+        config:
+          hide_credentials: true
+
+  - name: realtime
+    url: http://realtime:4000/socket
+    routes:
+      - name: realtime-v1
+        strip_path: true
+        paths:
+          - /realtime/v1
+    plugins:
+      - name: cors
+      - name: key-auth
+        config:
+          hide_credentials: true
+
+  - name: storage
+    url: http://storage:5000
+    routes:
+      - name: storage-v1
+        strip_path: true
+        paths:
+          - /storage/v1
+    plugins:
+      - name: cors
+
+consumers:
+  - username: anon
+    keyauth_credentials:
+      - key: ${ANON_KEY}
+  - username: service_role
+    keyauth_credentials:
+      - key: ${SERVICE_ROLE_KEY}
+
+plugins:
+  - name: cors
+    config:
+      origins:
+        - "*"
+      methods:
+        - GET
+        - POST
+        - PUT
+        - PATCH
+        - DELETE
+        - OPTIONS
+      headers:
+        - Accept
+        - Accept-Encoding
+        - Authorization
+        - Content-Type
+        - Origin
+        - X-Client-Info
+      exposed_headers:
+        - X-Total-Count
+      credentials: true
+      max_age: 3600

supabase/migrations/002_rls_policies.sql

@@ -0,0 +1,180 @@
+-- Migration: Row Level Security Policies
+-- Created: 2026-02-09
+-- Issue: #14
+-- Description: Enables RLS and creates security policies for all tables
+
+-- ======================
+-- ENABLE RLS
+-- ======================
+
+ALTER TABLE inventory_items ENABLE ROW LEVEL SECURITY;
+ALTER TABLE products ENABLE ROW LEVEL SECURITY;
+ALTER TABLE tags ENABLE ROW LEVEL SECURITY;
+ALTER TABLE item_tags ENABLE ROW LEVEL SECURITY;
+ALTER TABLE units ENABLE ROW LEVEL SECURITY;
+ALTER TABLE user_profiles ENABLE ROW LEVEL SECURITY;
+
+-- ======================
+-- INVENTORY_ITEMS POLICIES
+-- ======================
+
+-- Everyone can read (shared household inventory)
+CREATE POLICY "inventory_items_select_all" ON inventory_items
+  FOR SELECT
+  USING (true);
+
+-- Authenticated users can insert items
+CREATE POLICY "inventory_items_insert_auth" ON inventory_items
+  FOR INSERT
+  WITH CHECK (auth.uid() IS NOT NULL);
+
+-- Authenticated users can update any item
+CREATE POLICY "inventory_items_update_auth" ON inventory_items
+  FOR UPDATE
+  USING (auth.uid() IS NOT NULL);
+
+-- Authenticated users can delete any item
+CREATE POLICY "inventory_items_delete_auth" ON inventory_items
+  FOR DELETE
+  USING (auth.uid() IS NOT NULL);
+
+-- ======================
+-- PRODUCTS POLICIES
+-- ======================
+
+-- Everyone can read cached products
+CREATE POLICY "products_select_all" ON products
+  FOR SELECT
+  USING (true);
+
+-- Only service role can write (via Edge Functions)
+-- No user-level INSERT/UPDATE/DELETE policies
+
+-- ======================
+-- TAGS POLICIES
+-- ======================
+
+-- Everyone can read all tags
+CREATE POLICY "tags_select_all" ON tags
+  FOR SELECT
+  USING (true);
+
+-- Authenticated users can create tags
+CREATE POLICY "tags_insert_auth" ON tags
+  FOR INSERT
+  WITH CHECK (auth.uid() IS NOT NULL);
+
+-- Users can update their own tags OR system tags (created_by IS NULL)
+CREATE POLICY "tags_update_own" ON tags
+  FOR UPDATE
+  USING (
+    created_by = auth.uid() OR created_by IS NULL
+  );
+
+-- Users can only delete their own custom tags
+CREATE POLICY "tags_delete_own" ON tags
+  FOR DELETE
+  USING (created_by = auth.uid());
+
+-- ======================
+-- ITEM_TAGS POLICIES
+-- ======================
+
+-- Everyone can read
+CREATE POLICY "item_tags_select_all" ON item_tags
+  FOR SELECT
+  USING (true);
+
+-- Authenticated users can add tags to items
+CREATE POLICY "item_tags_insert_auth" ON item_tags
+  FOR INSERT
+  WITH CHECK (auth.uid() IS NOT NULL);
+
+-- Authenticated users can remove tags from items
+CREATE POLICY "item_tags_delete_auth" ON item_tags
+  FOR DELETE
+  USING (auth.uid() IS NOT NULL);
+
+-- ======================
+-- UNITS POLICIES
+-- ======================
+
+-- Everyone can read all units
+CREATE POLICY "units_select_all" ON units
+  FOR SELECT
+  USING (true);
+
+-- Authenticated users can create custom units (not default ones)
+CREATE POLICY "units_insert_auth" ON units
+  FOR INSERT
+  WITH CHECK (
+    auth.uid() IS NOT NULL AND is_default = false
+  );
+
+-- Users can update their own custom units only
+CREATE POLICY "units_update_own" ON units
+  FOR UPDATE
+  USING (
+    created_by = auth.uid() AND is_default = false
+  );
+
+-- Users can delete their own custom units only
+CREATE POLICY "units_delete_own" ON units
+  FOR DELETE
+  USING (
+    created_by = auth.uid() AND is_default = false
+  );
+
+-- ======================
+-- USER_PROFILES POLICIES
+-- ======================
+
+-- Users can read all profiles (for display names, avatars)
+CREATE POLICY "user_profiles_select_all" ON user_profiles
+  FOR SELECT
+  USING (true);
+
+-- Users can insert their own profile
+CREATE POLICY "user_profiles_insert_own" ON user_profiles
+  FOR INSERT
+  WITH CHECK (auth.uid() = id);
+
+-- Users can update only their own profile
+CREATE POLICY "user_profiles_update_own" ON user_profiles
+  FOR UPDATE
+  USING (auth.uid() = id);
+
+-- Users can delete only their own profile
+CREATE POLICY "user_profiles_delete_own" ON user_profiles
+  FOR DELETE
+  USING (auth.uid() = id);
+
+-- ======================
+-- COMMENTS
+-- ======================
+
+COMMENT ON POLICY "inventory_items_select_all" ON inventory_items IS 'Allow all users to view shared household inventory';
+COMMENT ON POLICY "inventory_items_insert_auth" ON inventory_items IS 'Authenticated users can add items';
+COMMENT ON POLICY "inventory_items_update_auth" ON inventory_items IS 'Authenticated users can update any item (shared inventory)';
+COMMENT ON POLICY "inventory_items_delete_auth" ON inventory_items IS 'Authenticated users can delete any item';
+
+COMMENT ON POLICY "products_select_all" ON products IS 'Allow all users to view cached product data';
+
+COMMENT ON POLICY "tags_select_all" ON tags IS 'Allow all users to view tags (system and custom)';
+COMMENT ON POLICY "tags_insert_auth" ON tags IS 'Authenticated users can create custom tags';
+COMMENT ON POLICY "tags_update_own" ON tags IS 'Users can update their own tags or system tags';
+COMMENT ON POLICY "tags_delete_own" ON tags IS 'Users can only delete their own custom tags';
+
+COMMENT ON POLICY "item_tags_select_all" ON item_tags IS 'Allow all users to view item tag associations';
+COMMENT ON POLICY "item_tags_insert_auth" ON item_tags IS 'Authenticated users can tag items';
+COMMENT ON POLICY "item_tags_delete_auth" ON item_tags IS 'Authenticated users can remove tags from items';
+
+COMMENT ON POLICY "units_select_all" ON units IS 'Allow all users to view all units';
+COMMENT ON POLICY "units_insert_auth" ON units IS 'Authenticated users can create custom units';
+COMMENT ON POLICY "units_update_own" ON units IS 'Users can only update their own custom units';
+COMMENT ON POLICY "units_delete_own" ON units IS 'Users can only delete their own custom units';
+
+COMMENT ON POLICY "user_profiles_select_all" ON user_profiles IS 'Allow users to view all profiles for display purposes';
+COMMENT ON POLICY "user_profiles_insert_own" ON user_profiles IS 'Users can create their own profile';
+COMMENT ON POLICY "user_profiles_update_own" ON user_profiles IS 'Users can only update their own profile';
+COMMENT ON POLICY "user_profiles_delete_own" ON user_profiles IS 'Users can only delete their own profile';

supabase/migrations/003_helper_functions.sql

@@ -0,0 +1,251 @@
+-- Migration: Additional SQL Functions for Inventory Management
+-- Week 2: Helper functions for common queries
+
+-- Function: Get inventory items with full details (tags, product info, unit conversion)
+CREATE OR REPLACE FUNCTION get_inventory_details()
+RETURNS TABLE (
+  item_id UUID,
+  item_name TEXT,
+  quantity DECIMAL,
+  unit_abbreviation TEXT,
+  unit_name TEXT,
+  expiry_date DATE,
+  days_until_expiry INTEGER,
+  tags TEXT[],
+  product_brand TEXT,
+  product_image_url TEXT,
+  product_barcode TEXT,
+  created_at TIMESTAMPTZ,
+  updated_at TIMESTAMPTZ
+) AS $$
+BEGIN
+  RETURN QUERY
+  SELECT 
+    i.id AS item_id,
+    i.name AS item_name,
+    i.quantity,
+    u.abbreviation AS unit_abbreviation,
+    u.name AS unit_name,
+    i.expiry_date,
+    (i.expiry_date - CURRENT_DATE) AS days_until_expiry,
+    COALESCE(ARRAY_AGG(DISTINCT t.name) FILTER (WHERE t.name IS NOT NULL), '{}') AS tags,
+    p.brand AS product_brand,
+    p.image_url AS product_image_url,
+    p.barcode AS product_barcode,
+    i.created_at,
+    i.updated_at
+  FROM inventory_items i
+    JOIN units u ON i.unit_id = u.id
+    LEFT JOIN products p ON i.product_id = p.id
+    LEFT JOIN item_tags it ON i.id = it.item_id
+    LEFT JOIN tags t ON it.tag_id = t.id
+  GROUP BY 
+    i.id, i.name, i.quantity, u.abbreviation, u.name, 
+    i.expiry_date, p.brand, p.image_url, p.barcode, 
+    i.created_at, i.updated_at
+  ORDER BY i.created_at DESC;
+END;
+$$ LANGUAGE plpgsql;
+
+COMMENT ON FUNCTION get_inventory_details() IS 'Returns all inventory items with denormalized data for display';
+
+-- Function: Get items expiring soon
+CREATE OR REPLACE FUNCTION get_expiring_items(days_ahead INTEGER DEFAULT 7)
+RETURNS TABLE (
+  item_id UUID,
+  item_name TEXT,
+  quantity DECIMAL,
+  unit_abbreviation TEXT,
+  expiry_date DATE,
+  days_until_expiry INTEGER,
+  tags TEXT[]
+) AS $$
+BEGIN
+  RETURN QUERY
+  SELECT 
+    i.id AS item_id,
+    i.name AS item_name,
+    i.quantity,
+    u.abbreviation AS unit_abbreviation,
+    i.expiry_date,
+    (i.expiry_date - CURRENT_DATE) AS days_until_expiry,
+    COALESCE(ARRAY_AGG(DISTINCT t.name) FILTER (WHERE t.name IS NOT NULL), '{}') AS tags
+  FROM inventory_items i
+    JOIN units u ON i.unit_id = u.id
+    LEFT JOIN item_tags it ON i.id = it.item_id
+    LEFT JOIN tags t ON it.tag_id = t.id
+  WHERE 
+    i.expiry_date IS NOT NULL
+    AND i.expiry_date <= CURRENT_DATE + MAKE_INTERVAL(days => days_ahead)
+  GROUP BY i.id, i.name, i.quantity, u.abbreviation, i.expiry_date
+  ORDER BY i.expiry_date ASC;
+END;
+$$ LANGUAGE plpgsql;
+
+COMMENT ON FUNCTION get_expiring_items(INTEGER) IS 'Returns items expiring within specified days (default 7)';
+
+-- Function: Get items by tag
+CREATE OR REPLACE FUNCTION get_items_by_tag(tag_name TEXT)
+RETURNS TABLE (
+  item_id UUID,
+  item_name TEXT,
+  quantity DECIMAL,
+  unit_abbreviation TEXT,
+  expiry_date DATE,
+  created_at TIMESTAMPTZ
+) AS $$
+BEGIN
+  RETURN QUERY
+  SELECT 
+    i.id AS item_id,
+    i.name AS item_name,
+    i.quantity,
+    u.abbreviation AS unit_abbreviation,
+    i.expiry_date,
+    i.created_at
+  FROM inventory_items i
+    JOIN units u ON i.unit_id = u.id
+    JOIN item_tags it ON i.id = it.item_id
+    JOIN tags t ON it.tag_id = t.id
+  WHERE t.name ILIKE tag_name
+  ORDER BY i.created_at DESC;
+END;
+$$ LANGUAGE plpgsql;
+
+COMMENT ON FUNCTION get_items_by_tag(TEXT) IS 'Returns all items with specified tag (case-insensitive)';
+
+-- Function: Get low stock items (quantity <= threshold)
+CREATE OR REPLACE FUNCTION get_low_stock_items(threshold DECIMAL DEFAULT 1.0)
+RETURNS TABLE (
+  item_id UUID,
+  item_name TEXT,
+  quantity DECIMAL,
+  unit_abbreviation TEXT,
+  tags TEXT[]
+) AS $$
+BEGIN
+  RETURN QUERY
+  SELECT 
+    i.id AS item_id,
+    i.name AS item_name,
+    i.quantity,
+    u.abbreviation AS unit_abbreviation,
+    COALESCE(ARRAY_AGG(DISTINCT t.name) FILTER (WHERE t.name IS NOT NULL), '{}') AS tags
+  FROM inventory_items i
+    JOIN units u ON i.unit_id = u.id
+    LEFT JOIN item_tags it ON i.id = it.item_id
+    LEFT JOIN tags t ON it.tag_id = t.id
+  WHERE i.quantity <= threshold
+  GROUP BY i.id, i.name, i.quantity, u.abbreviation
+  ORDER BY i.quantity ASC, i.name ASC;
+END;
+$$ LANGUAGE plpgsql;
+
+COMMENT ON FUNCTION get_low_stock_items(DECIMAL) IS 'Returns items with quantity at or below threshold';
+
+-- Function: Update item quantity (consume or restock)
+CREATE OR REPLACE FUNCTION update_item_quantity(
+  item_uuid UUID,
+  quantity_change DECIMAL,
+  delete_if_zero BOOLEAN DEFAULT TRUE
+)
+RETURNS BOOLEAN AS $$
+DECLARE
+  new_quantity DECIMAL;
+BEGIN
+  -- Calculate new quantity
+  SELECT quantity + quantity_change INTO new_quantity
+  FROM inventory_items
+  WHERE id = item_uuid;
+
+  IF new_quantity IS NULL THEN
+    RETURN FALSE;  -- Item not found
+  END IF;
+
+  -- Delete if zero and flag is set
+  IF new_quantity <= 0 AND delete_if_zero THEN
+    DELETE FROM inventory_items WHERE id = item_uuid;
+    RETURN TRUE;
+  END IF;
+
+  -- Update quantity (ensure non-negative)
+  UPDATE inventory_items
+  SET quantity = GREATEST(new_quantity, 0),
+      updated_at = NOW()
+  WHERE id = item_uuid;
+
+  RETURN TRUE;
+END;
+$$ LANGUAGE plpgsql;
+
+COMMENT ON FUNCTION update_item_quantity(UUID, DECIMAL, BOOLEAN) IS 'Updates item quantity (positive for restock, negative for consume). Optionally deletes if zero.';
+
+-- Function: Get inventory statistics
+CREATE OR REPLACE FUNCTION get_inventory_stats()
+RETURNS TABLE (
+  total_items BIGINT,
+  total_unique_products BIGINT,
+  items_expiring_week BIGINT,
+  items_expired BIGINT,
+  total_tags_used BIGINT
+) AS $$
+BEGIN
+  RETURN QUERY
+  SELECT 
+    COUNT(DISTINCT i.id) AS total_items,
+    COUNT(DISTINCT i.product_id) FILTER (WHERE i.product_id IS NOT NULL) AS total_unique_products,
+    COUNT(i.id) FILTER (
+      WHERE i.expiry_date IS NOT NULL 
+      AND i.expiry_date BETWEEN CURRENT_DATE AND CURRENT_DATE + INTERVAL '7 days'
+    ) AS items_expiring_week,
+    COUNT(i.id) FILTER (
+      WHERE i.expiry_date IS NOT NULL 
+      AND i.expiry_date < CURRENT_DATE
+    ) AS items_expired,
+    COUNT(DISTINCT it.tag_id) AS total_tags_used
+  FROM inventory_items i
+    LEFT JOIN item_tags it ON i.id = it.item_id;
+END;
+$$ LANGUAGE plpgsql;
+
+COMMENT ON FUNCTION get_inventory_stats() IS 'Returns summary statistics for the entire inventory';
+
+-- Function: Search inventory (full-text search on items and products)
+CREATE OR REPLACE FUNCTION search_inventory(search_query TEXT)
+RETURNS TABLE (
+  item_id UUID,
+  item_name TEXT,
+  quantity DECIMAL,
+  unit_abbreviation TEXT,
+  product_brand TEXT,
+  tags TEXT[],
+  relevance REAL
+) AS $$
+BEGIN
+  RETURN QUERY
+  SELECT 
+    i.id AS item_id,
+    i.name AS item_name,
+    i.quantity,
+    u.abbreviation AS unit_abbreviation,
+    p.brand AS product_brand,
+    COALESCE(ARRAY_AGG(DISTINCT t.name) FILTER (WHERE t.name IS NOT NULL), '{}') AS tags,
+    ts_rank(
+      to_tsvector('english', i.name || ' ' || COALESCE(p.brand, '') || ' ' || COALESCE(p.name, '')),
+      plainto_tsquery('english', search_query)
+    ) AS relevance
+  FROM inventory_items i
+    JOIN units u ON i.unit_id = u.id
+    LEFT JOIN products p ON i.product_id = p.id
+    LEFT JOIN item_tags it ON i.id = it.item_id
+    LEFT JOIN tags t ON it.tag_id = t.id
+  WHERE 
+    to_tsvector('english', i.name || ' ' || COALESCE(p.brand, '') || ' ' || COALESCE(p.name, ''))
+    @@ plainto_tsquery('english', search_query)
+  GROUP BY i.id, i.name, i.quantity, u.abbreviation, p.brand, p.name
+  ORDER BY relevance DESC, i.created_at DESC
+  LIMIT 50;
+END;
+$$ LANGUAGE plpgsql;
+
+COMMENT ON FUNCTION search_inventory(TEXT) IS 'Full-text search across inventory items and products';

supabase/migrations/004_seed_units.sql

@@ -0,0 +1,37 @@
+-- Migration: Seed Default Units
+-- Week 2: Pre-populate common measurement units with conversions
+
+-- Weight units (metric base: gram)
+INSERT INTO units (id, name, abbreviation, unit_type, base_unit_id, conversion_factor, is_default, created_by) VALUES
+  ('f47ac10b-58cc-4372-a567-0e02b2c3d479', 'Gram', 'g', 'weight', NULL, 1.0, TRUE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440001', 'Kilogram', 'kg', 'weight', 'f47ac10b-58cc-4372-a567-0e02b2c3d479', 1000.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440002', 'Milligram', 'mg', 'weight', 'f47ac10b-58cc-4372-a567-0e02b2c3d479', 0.001, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440003', 'Pound', 'lb', 'weight', 'f47ac10b-58cc-4372-a567-0e02b2c3d479', 453.592, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440004', 'Ounce', 'oz', 'weight', 'f47ac10b-58cc-4372-a567-0e02b2c3d479', 28.3495, FALSE, NULL);
+
+-- Volume units (metric base: milliliter)
+INSERT INTO units (id, name, abbreviation, unit_type, base_unit_id, conversion_factor, is_default, created_by) VALUES
+  ('550e8400-e29b-41d4-a716-446655440010', 'Milliliter', 'mL', 'volume', NULL, 1.0, TRUE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440011', 'Liter', 'L', 'volume', '550e8400-e29b-41d4-a716-446655440010', 1000.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440012', 'Centiliter', 'cL', 'volume', '550e8400-e29b-41d4-a716-446655440010', 10.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440013', 'Deciliter', 'dL', 'volume', '550e8400-e29b-41d4-a716-446655440010', 100.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440014', 'Cup', 'cup', 'volume', '550e8400-e29b-41d4-a716-446655440010', 236.588, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440015', 'Tablespoon', 'tbsp', 'volume', '550e8400-e29b-41d4-a716-446655440010', 14.7868, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440016', 'Teaspoon', 'tsp', 'volume', '550e8400-e29b-41d4-a716-446655440010', 4.92892, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440017', 'Fluid Ounce', 'fl oz', 'volume', '550e8400-e29b-41d4-a716-446655440010', 29.5735, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440018', 'Gallon', 'gal', 'volume', '550e8400-e29b-41d4-a716-446655440010', 3785.41, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440019', 'Quart', 'qt', 'volume', '550e8400-e29b-41d4-a716-446655440010', 946.353, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440020', 'Pint', 'pt', 'volume', '550e8400-e29b-41d4-a716-446655440010', 473.176, FALSE, NULL);
+
+-- Count units (no conversions, each is independent)
+INSERT INTO units (id, name, abbreviation, unit_type, base_unit_id, conversion_factor, is_default, created_by) VALUES
+  ('550e8400-e29b-41d4-a716-446655440030', 'Piece', 'pc', 'count', NULL, 1.0, TRUE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440031', 'Dozen', 'doz', 'count', '550e8400-e29b-41d4-a716-446655440030', 12.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440032', 'Package', 'pkg', 'count', NULL, 1.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440033', 'Bottle', 'btl', 'count', NULL, 1.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440034', 'Can', 'can', 'count', NULL, 1.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440035', 'Jar', 'jar', 'count', NULL, 1.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440036', 'Box', 'box', 'count', NULL, 1.0, FALSE, NULL),
+  ('550e8400-e29b-41d4-a716-446655440037', 'Bag', 'bag', 'count', NULL, 1.0, FALSE, NULL);
+
+COMMENT ON TABLE units IS 'Measurement units with 30 common presets covering metric, imperial, and count units';

supabase/migrations/005_seed_tags.sql

@@ -0,0 +1,49 @@
+-- Migration: Seed Default Tags
+-- Week 2: Pre-populate common organizational tags
+
+-- Position Tags (where items are stored)
+INSERT INTO tags (id, name, category, icon, color, created_by) VALUES
+  ('650e8400-e29b-41d4-a716-446655440001', 'Fridge', 'position', '🧊', '#3b82f6', NULL),
+  ('650e8400-e29b-41d4-a716-446655440002', 'Freezer', 'position', '❄️', '#06b6d4', NULL),
+  ('650e8400-e29b-41d4-a716-446655440003', 'Pantry', 'position', '🗄️', '#8b5cf6', NULL),
+  ('650e8400-e29b-41d4-a716-446655440004', 'Cabinet', 'position', '🚪', '#6b7280', NULL),
+  ('650e8400-e29b-41d4-a716-446655440005', 'Countertop', 'position', '🍽️', '#f59e0b', NULL),
+  ('650e8400-e29b-41d4-a716-446655440006', 'Cellar', 'position', '🏚️', '#78350f', NULL);
+
+-- Type Tags (food categories)
+INSERT INTO tags (id, name, category, icon, color, created_by) VALUES
+  ('650e8400-e29b-41d4-a716-446655440010', 'Dairy', 'type', '🧀', '#fbbf24', NULL),
+  ('650e8400-e29b-41d4-a716-446655440011', 'Meat', 'type', '🥩', '#ef4444', NULL),
+  ('650e8400-e29b-41d4-a716-446655440012', 'Fish', 'type', '🐟', '#3b82f6', NULL),
+  ('650e8400-e29b-41d4-a716-446655440013', 'Vegetables', 'type', '🥬', '#22c55e', NULL),
+  ('650e8400-e29b-41d4-a716-446655440014', 'Fruits', 'type', '🍎', '#f97316', NULL),
+  ('650e8400-e29b-41d4-a716-446655440015', 'Grains', 'type', '🌾', '#eab308', NULL),
+  ('650e8400-e29b-41d4-a716-446655440016', 'Legumes', 'type', '🫘', '#84cc16', NULL),
+  ('650e8400-e29b-41d4-a716-446655440017', 'Condiments', 'type', '🧂', '#ef4444', NULL),
+  ('650e8400-e29b-41d4-a716-446655440018', 'Snacks', 'type', '🍿', '#f97316', NULL),
+  ('650e8400-e29b-41d4-a716-446655440019', 'Beverages', 'type', '🥤', '#06b6d4', NULL),
+  ('650e8400-e29b-41d4-a716-446655440020', 'Baking', 'type', '🧁', '#ec4899', NULL),
+  ('650e8400-e29b-41d4-a716-446655440021', 'Spices', 'type', '🌶️', '#dc2626', NULL),
+  ('650e8400-e29b-41d4-a716-446655440022', 'Canned', 'type', '🥫', '#71717a', NULL),
+  ('650e8400-e29b-41d4-a716-446655440023', 'Frozen', 'type', '🧊', '#06b6d4', NULL);
+
+-- Dietary Tags
+INSERT INTO tags (id, name, category, icon, color, created_by) VALUES
+  ('650e8400-e29b-41d4-a716-446655440030', 'Vegan', 'dietary', '🌱', '#22c55e', NULL),
+  ('650e8400-e29b-41d4-a716-446655440031', 'Vegetarian', 'dietary', '🥕', '#84cc16', NULL),
+  ('650e8400-e29b-41d4-a716-446655440032', 'Gluten-Free', 'dietary', '🌾', '#eab308', NULL),
+  ('650e8400-e29b-41d4-a716-446655440033', 'Lactose-Free', 'dietary', '🥛', '#60a5fa', NULL),
+  ('650e8400-e29b-41d4-a716-446655440034', 'Organic', 'dietary', '♻️', '#10b981', NULL),
+  ('650e8400-e29b-41d4-a716-446655440035', 'Low-Carb', 'dietary', '🥗', '#22c55e', NULL),
+  ('650e8400-e29b-41d4-a716-446655440036', 'Kosher', 'dietary', '✡️', '#3b82f6', NULL),
+  ('650e8400-e29b-41d4-a716-446655440037', 'Halal', 'dietary', '☪️', '#22c55e', NULL);
+
+-- Custom/Workflow Tags
+INSERT INTO tags (id, name, category, icon, color, created_by) VALUES
+  ('650e8400-e29b-41d4-a716-446655440040', 'Low Stock', 'custom', '⚠️', '#ef4444', NULL),
+  ('650e8400-e29b-41d4-a716-446655440041', 'To Buy', 'custom', '🛒', '#3b82f6', NULL),
+  ('650e8400-e29b-41d4-a716-446655440042', 'Meal Prep', 'custom', '🍱', '#8b5cf6', NULL),
+  ('650e8400-e29b-41d4-a716-446655440043', 'Leftovers', 'custom', '♻️', '#f59e0b', NULL),
+  ('650e8400-e29b-41d4-a716-446655440044', 'Opening Soon', 'custom', '📆', '#f97316', NULL);
+
+COMMENT ON TABLE tags IS 'Pre-populated with 33 common tags across position, type, dietary, and workflow categories';