Session Handoff — BookifAI launch-hardening: metering, watermark, BYO upload, Research (free), legal, support form, publishing kit, Stripe verify + app-safety-check (2 criticals fixed)

Where it started

Session began with /prime, then a pasted handoff continued BookifAI (AI illustrated-book KDP studio, own stack: React+Vite+TS + Supabase umnlokuehteqwrheoyai + Stripe + OpenRouter). Sondra ran the live 4242 test-card round-trip successfully, then directed a run of build items → launch gates → app-safety-check. All in TEST mode, 0 real users. She owns bookifai.app (correct her if notes say otherwise). Non-technical; wants things done + verified, not explained.

Decisions locked + what shipped

• Cover metering — app/supabase/functions/ideation-chat/index.ts generate_cover now auth'd + meter_image kind:"cover" + auto-refund; client app/src/components/create-book/CoverGenerator.tsx passes projectId + friendly 402 (free 3-cover cap).
• generate-chapter ownership — new-book text path now verifies caller owns the book (403 not_owner), not just entitlement.
• Book-size cap — app/supabase/functions/generate-toc/index.ts clamps chapters to hard 50 (verified live 9999→50) + UI line in app/src/components/create-book/SetupForm.tsx.
• Credit disclosure copy + free-reading watermark — app/src/components/create-book/BookPreview.tsx (tiled SVG "PREVIEW - UNLOCK TO DOWNLOAD" when entitlement≠paid).
• BYO image upload (free, unmetered) — shared uploadImageToCovers in CoverGenerator.tsx; cover upload there + per-page upload in BookPreview.tsx.
• Feature A "Research My Idea" → Option B (Sondra's call): FREE, per-account 3/day quota (not slot-consuming). app/supabase/functions/research-idea/index.ts (Perplexity sonar-pro → Sonnet-5 on OpenRouter), app/src/components/create-book/ResearchPanel.tsx in SetupForm. Cost ≈ $0.03/run. Migrations app/supabase/migrations/20260707000000_research_run_gating.sql (old per-book, superseded) + 20260707010000_support_and_research_quota.sql (account quota).
• Legal pages — app/src/pages/Legal.tsx (/refund /privacy /terms), footer-linked in app/src/pages/Index.tsx.
• Support contact form — app/src/pages/Support.tsx (/support) → app/supabase/functions/submit-support/index.ts stores to support_messages + emails srverva@gmail.com via Resend from support@sondraverva.com. Legal contacts point to the form.
• KDP Publishing Kit (general, all book types) — app/src/lib/publishing-kit.ts; delivered behind paid in app/src/components/create-book/ExportOptions.tsx (viewer + Save-as-PDF). Closes the $29 promise gap.
• Email branding decision — Resend free plan = 1 domain (already sondraverva.com); adding amplifaiyourbusiness.com needs $20/mo Resend upgrade. Recommended keeping free (branded display name on verified domain); $20 upgrade deferred to her call. email.amplifaiyourbusiness.com IS verified in GoHighLevel (separate system).
• Stripe verified (test): all 3 prices active ($29/$79/$9), webhook enabled on BookifAI project, her $29 test charge ch_3TqM1o… succeeded. Not flipped to live (correct order — after safety check).
• /app-safety-check PASSED after fixing 2 criticals: (1) paywall back-door — deleted /export route + app/src/pages/Export.tsx, gated app/supabase/functions/export-ebook/index.ts server-side (entitlement='paid' + auth); (2) anonymous AI cost-drain — added app/supabase/functions/_shared/auth.ts getUserId() guard to generate-title, generate-toc, ideation-chat (all actions), generate-chapter (legacy branch). Verified: all 5 fns return 401 to the anon-key vector.

Key files for next session

• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Bookify AI Studio\PRD.md — read §7.7 + §7.8 (billing/metering/research spec).
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Bookify AI Studio\app\supabase\functions\_shared\auth.ts — the auth guard now used across functions.
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Bookify AI Studio\stripe-test-products.json — test price IDs.
• Plan file: none (PRD is the spec).
• Memory files touched: none.
• Record updated: c:\Users\srver\AIOS-Workspace\aios-starter-kit\Sondra Brain\wiki\memory\open-questions.md (BookifAI section) + ...\wiki\dashboard.md (BookifAI row).

Running state

• Background processes: shell bvf6yxfjs = npm run dev for BookifAI. Kill via TaskStop on that ID (or ignore; it's the dev server).
• Dev servers / ports: http://localhost:8080 (BookifAI Vite, HMR live).
• Open worktrees / branches: none (app is its own local git repo, nothing committed this session).

Verification — how to confirm things still work

• cd "PROJECTS/Bookify AI Studio/app" && npx tsc --noEmit → exit 0.
• Anon-key vector rejected: curl -s -o /dev/null -w "%{http_code}" -X POST https://umnlokuehteqwrheoyai.supabase.co/functions/v1/generate-title -H "Content-Type: application/json" -H "apikey: <ANON>" -H "Authorization: Bearer <ANON>" -d '{"topic":"x"}' → 401.
• Redeploy a fn: TOKEN=$(python -c "import re,pathlib;print(re.findall(r'sbp_[A-Za-z0-9]+',pathlib.Path.home().joinpath('.claude.json').read_text(encoding='utf-8'))[0])"); CLI ~/AppData/Local/Programs/cli-bin/supabase.exe; SUPABASE_ACCESS_TOKEN=$TOKEN supabase.exe functions deploy <name> --project-ref umnlokuehteqwrheoyai.
• DB checks via supabase MCP execute_sql on umnlokuehteqwrheoyai.

Deferred + open questions

• Open — Sondra's book is flipped to entitlement='free' (book 160bf885-560e-44fe-a84a-f0c6f0ee6a8b) so she could see the watermark. She'll say "restore my book to paid" → update book_meters set entitlement='paid' where project_id='160bf885-560e-44fe-a84a-f0c6f0ee6a8b'.
• Open — launch-day flips (her go): Stripe TEST→LIVE (STRIPE_API_KEY_MAIN + live products/webhook), email-confirm ON in prod (Supabase Auth), deploy to bookifai.app.
• Open — $20/mo Resend upgrade? To send app emails from @amplifaiyourbusiness.com. Deferred; currently sends from verified sondraverva.com with brand display name.
• Deferred: Feature B demand feed + sell-page ?idea= marquee (not launch-critical). Optional per-user rate-limit on generation. Client-side download residual (own-content extraction via devtools) — low-risk, watermark deters.
• Open (other tab): Pain-2-Profit was given a paste message to standardize its email sender on sondraverva.com — no result back yet.

Pick up here

Restore her book to paid if she asks, then on her go run the launch-day flips (Stripe live → email-confirm on → deploy to bookifai.app) — BookifAI is build-complete and safety-checked.