fix(nav): proper Supabase error handling + console logs for auth debugging

web/components/nav.tsx

@@ -36,6 +36,7 @@ export function Nav() {
       const { data: { user }, error } = await supabase.auth.getUser();
 
       if (error || !user) {
+        console.log("[ClauseGuard Nav] No user session:", error?.message || "not logged in");
         setUserEmail(null);
         setUserRole(null);
         setUserTeam(null);
@@ -45,17 +46,21 @@ export function Nav() {
 
       setUserEmail(user.email || null);
 
-      try {
-        const { data: profile } = await supabase
-          .from("profiles")
-          .select("role, team_id")
-          .eq("id", user.id)
-          .single();
-        setUserRole(profile?.role || "user");
-        setUserTeam(profile?.team_id || null);
-      } catch {
+      // FIX v4.3: Properly check Supabase error response (it doesn't throw)
+      const { data: profile, error: profileError } = await supabase
+        .from("profiles")
+        .select("role, team_id")
+        .eq("id", user.id)
+        .single();
+
+      if (profileError) {
+        console.error("[ClauseGuard Nav] Profile fetch error:", profileError.message, profileError.code);
         setUserRole("user");
         setUserTeam(null);
+      } else {
+        console.log("[ClauseGuard Nav] Profile loaded:", { role: profile?.role, team_id: profile?.team_id });
+        setUserRole(profile?.role || "user");
+        setUserTeam(profile?.team_id || null);
       }
     } catch {
       // Supabase client init error (env vars missing)
@@ -75,6 +80,7 @@ export function Nav() {
     try {
       const supabase = createClient();
       const { data } = supabase.auth.onAuthStateChange((event) => {
+        console.log("[ClauseGuard Nav] Auth state changed:", event);
         // Re-fetch on any auth event
         if (event === "SIGNED_IN" || event === "SIGNED_OUT" || event === "TOKEN_REFRESHED" || event === "INITIAL_SESSION") {
           refreshAuth();