[Debt] AuthContext.tsx: 6 unsafe `as unknown as` type assertions

[JoelA510]

Summary

src/app/contexts/AuthContext.tsx has 6 as unknown as type assertions that work around mismatches between Supabase Auth SDK types and the app's AuthUser type.

Severity

Medium — type safety gap, silent failures possible if Supabase SDK changes.

Locations

Line 111: supabase.rpc('is_admin', ...) as unknown as Promise<{...}>
Line 120: supabase.rpc('is_admin', ...) as unknown as Promise<{...}>
Line 135: (session.user as unknown as Record<string, unknown>).role as string
Line 149: (session.user as unknown as Record<string, unknown>).role as string
Line 169: session as unknown as { user: User | null }
Line 171: session as unknown as { user: User | null }

Recommended Fix

1. Create a typed Supabase helper in shared/api/ that wraps rpc() with proper generics.
2. Extend the AuthUser type to include role from Supabase user metadata.
3. Use a typed session wrapper instead of raw casting.

Origin

Sprint Wave 15 Code Review, §2.2