Session Handoff — PeptidePal v2 build: foundation + live backend done, features next

Where it started

Session began with /prime, then a pasted handoff for the PeptidePal v2 rebuild (leave Emergent → own stack). Sondra answered PRD Q5 (her v1 complaints) and changed the design call from dark-only to light-default-with-toggle. PRD + Fable prompt were updated, she pasted the build prompt (Fable 5), and the build ran through Phase-1 foundation + backend. Mid-build her free Fable credits ran out and the session reverted to Opus; she asked whether the code was safe and whether Fable is needed to continue (answer given: code is on disk, no Fable required — decision on Opus-vs-Fable still open).

Decisions locked + what shipped

• PRD updated to v1.2 — c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Peptide Pal\PRD.md: §5.4 "v1 fixes" (reminders must fire, bottom nav ≤5 + More, bulk delete, supply container/in-use-backup/location rework, mobile-first gate, light+dark toggle), §7 + §12 Q2 = light default + one-tap dark toggle, §12 Q5 captured, §13 phases annotated.
• Fable build prompt updated — c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Peptide Pal\FABLE-BUILD-PROMPT.md: complaints folded in, theme corrected to light-default (not dark-only).
• Theme = 3-way Light/Dark/System, default System (follows phone), header quick-toggle overrides + persists; dark softened off pure-black (#12181a) + brighter text per Apple a11y guidance (from Perplexity research Sondra ran). Lives in ...\app-v2\src\lib\theme.tsx + ...\app-v2\src\branding.css.
• Supabase project LIVE on the FREE org (Sondra chose free over $10/mo paid) — project peptidepal-v2, ref zhcxygxjvcatvdodovtd, org foeliowlfikzqfwyxcst, region us-east-1. Schema + RLS applied (migrations 0001+0002), 6 tables, security advisor: 0 lints. Free-sleep risk mitigated by making the future reminder cron double as keep-alive.
• App scaffold built + verified — ...\app-v2\ (Vite+React+TS+Tailwind v4): brand tokens, theme system, app shell, mobile bottom nav (Home/Log/Supply/Insights/More), stub pages, Supabase client, .env.local wired (URL + publishable key). tsc -b clean, 0 console errors, both themes verified live at 390px.

Key files for next session

• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Peptide Pal\PRD.md — read first; §5.4 (v1 fixes) + §13 (phases) drive the remaining build. §12 decisions final.
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Peptide Pal\handoffs\v2-phase1-foundation-2026-07-07.md — the detailed build-state note (backend live, theme decisions, resume steps).
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Peptide Pal\app-v2\supabase\migrations\0001_phase1_core.sql + 0002_harden_functions.sql — applied schema (the source of truth for table/field names).
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Peptide Pal\app-v2\.env.local — Supabase URL + publishable key (gitignored).
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Peptide Pal\app\backend\server.py — v1 reference (data model + compliance-safe logic: cycle math, premium expiry, reminder scheduler, LRU site rotation). Mine, do not port.
• Plan file: none (PRD served as the plan).
• Memory files touched: none.

Running state

• Background processes: none (the dev server on port 4780 was stopped via taskkill; the earlier find background shell b3q10lyzi completed).
• Dev servers / ports: none running. To start: cd "c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Peptide Pal\app-v2" && npm run dev -- --port 4780.
• Open worktrees / branches: none. app-v2\ is not yet a git repo (no git init done). app\ is a read-only clone of digitalbeachgirl/Peptide-Tracker.

Verification — how to confirm things still work

• cd "c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Peptide Pal\app-v2" && npx tsc -b --force — expect no output (clean).
• npm run dev -- --port 4780 then open http://localhost:4780/ — app shell renders, theme toggle flips light/dark, bottom nav routes; 0 console errors.
• Supabase MCP list_tables on project zhcxygxjvcatvdodovtd — 6 tables (profiles, entitlements, compounds, compound_dose_history, supply_items, injections), RLS enabled on all.
• Supabase MCP get_advisors (security) on zhcxygxjvcatvdodovtd — expect 0 lints.
• Screenshots of verified state: ...\app-v2\verify\pp-light-dashboard.png, pp-dark-softened.png, pp-more.png.

Deferred + open questions

• Open: Opus vs top up Fable to drive the rest of the build — Sondra hasn't chosen. Code is model-agnostic (all on disk); either continues identically. Must be answered before resuming.
• Open: default theme = System (follows phone) was implemented; Sondra's research leaned "light default OR system." Confirm System-default is acceptable vs forcing light-default (one-line change in theme.tsx storedChoice()).
• Deferred: entitlements/premium, reminders + push dispatcher + keep-alive cron, Stripe money spine (test), half-life curves, stacks, insight cards, share links, CSV, admin + bulk delete — Phases 2–3.
• Deferred: Emergent plan cancellation — Sondra's manual step, not confirmed done. getpeptidepal.com goes dark until v2 cutover (no users, safe).
• Deferred: /app-safety-check + Stripe live + domain cutover — Phase 4, explicit-go-only gates.

Pick up here

Resume Phase 1 features in ...\app-v2\ against the live Supabase project zhcxygxjvcatvdodovtd: build auth (magic-link + Google) → onboarding (tracking_focus glp1/research/both) → compound CRUD, then injection log + the reworked Supply UI, and close Phase 1 with the two-account RLS isolation proof.