Scoping a SaaS MVP Delivery Sprint

[Traditional Agency Scope Creep]
Month 1: 85-Page SRS ──► Month 3: Stalled Wireframes ──► Month 7: Stalled Delivery & Budget Overruns

[KaamLabs 24-Day Sprint]
Day 1: Scoping ──► Day 6: Clickable UI ──► Day 18: Core Engine & Billing ──► Day 24: Live in Production!

┌──────────────────────────────────────────────────────────────────┐
│                   THE 24-DAY SPRINT TIMELINE                     │
└──────────────────────────────────────────────────────────────────┘

WEEK 1 (Days 1–6): PRODUCT SCOPE & CLICKABLE UI PROTOTYPE
  • Ruthless MVP scoping: isolate the ONE core value workflow
  • Interactive Figma & Next.js component system (shadcn/ui + Tailwind)
  • Deliverable: Clickable UI demo testable on desktop & mobile

WEEK 2 (Days 7–12): DATABASE SCHEMA, AUTH & MULTI-TENANCY
  • PostgreSQL relational architecture on Supabase
  • Row-Level Security (RLS) data isolation between enterprise workspaces
  • NextAuth / Supabase Auth: Google OAuth, Email Magic Link, Phone OTP
  • Deliverable: Working authenticated user workspace

WEEK 3 (Days 13–18): CORE VALUE ENGINE & BILLING INTEGRATION
  • Feature logic: algorithmic processing, PDF generators, or AI wrappers
  • Razorpay Subscriptions / UPI Autopay / Stripe Checkout integration
  • Tier-based subscription gating (Free vs Pro vs Enterprise)
  • Deliverable: Functional product capable of taking real money

WEEK 4 (Days 19–24): QA, SECURITY AUDIT & PRODUCTION LAUNCH
  • End-to-end integration testing & load testing
  • Domain setup, SSL, automated CI/CD pipeline on Vercel/Cloudflare
  • 100% clean GitHub repository transfer to the founder
  • Deliverable: Live production URL ready for paying customers!

// lib/auth/subscriptionGuard.ts
import { createServerClient } from '@supabase/ssr';
import { cookies } from 'next/headers';
import { redirect } from 'next/navigation';

export type PlanTier = 'free' | 'starter' | 'pro' | 'enterprise';

export async function requireSubscription(requiredTier: PlanTier) {
  const cookieStore = await cookies();
  const supabase = createServerClient(
    process.env.NEXT_PUBLIC_SUPABASE_URL!,
    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
    { cookies: { get: (name) => cookieStore.get(name)?.value } }
  );

  const { data: { user }, error } = await supabase.auth.getUser();
  if (error || !user) {
    redirect('/login?returnUrl=/dashboard');
  }

  // Fetch workspace subscription status
  const { data: workspace } = await supabase
    .from('workspaces')
    .select('plan_tier, subscription_status')
    .eq('owner_id', user.id)
    .single();

  const tierHierarchy: Record<PlanTier, number> = {
    free: 0,
    starter: 1,
    pro: 2,
    enterprise: 3,
  };

  const userTier = (workspace?.plan_tier as PlanTier) || 'free';
  const isActive = workspace?.subscription_status === 'active';

  if (!isActive || tierHierarchy[userTier] < tierHierarchy[requiredTier]) {
    redirect(`/billing?upgrade=${requiredTier}`);
  }

  return { user, workspace };
}