Session Handoff — Testimonial Vault: PRD + Shapo teardown + premium design concept

Where it started

Sondra wants to rebuild her half-finished Base44 "Testimonial Vault" into a real, premium, fully-paid SaaS app (build with Fable 5), matching/beating Shapo.io. Session produced a grounded PRD, a full Shapo competitive teardown (public + logged-in), verified GitHub + GoHighLevel access, and a premium visual design concept. She approved the plan ("yes go") and the first build step (design concept) is done and awaiting her look-approval.

Decisions locked + what shipped

• PRD written + grounded in real code — c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Testimonial Vault\PRD-testimonial-vault-v1.md (build source) + ...\PRD-testimonial-vault-v1.html (her readable, open in Edge). Reflects her actual pitch, incubator feedback, and a live read of her repo.
• §13 decisions LOCKED (she said "yes go"): owned stack (Fable 5 + Supabase + Stripe + Cloudflare, NOT Base44) · coaches-first · free tier = 1 to test + 15 to save · $9/mo or $79/yr + $47 founder-lifetime · keep name "Testimonial Vault" (drop "For Coaches" from logo) · v1 scope frozen, ship-then-get-users, anti-scope-creep rule.
• Shapo teardown — ...\PROJECTS\Testimonial Vault\shapo-teardown-2026-07-03.md (public crawl + STEAL LIST + a LOGGED-IN ADDENDUM from walking her real Shapo dashboard). Screenshots in ...\PROJECTS\Testimonial Vault\shapo-screens\.
• GoHighLevel integration confirmed feasible — GHL v2 API returned 200 on her location; plan = on signup, create/update contact tagged Testimonial Vault + plan tag. (v1 API is dead/401; her key is a v2 token.)
• GitHub org access fixed — added GITHUB_ORG_TOKEN to .env (gitignored); reaches AmplifAI-Your-Business org (personal GITHUB_PERSONAL_ACCESS_TOKEN could not). Repo cloned + code read.
• Shapo creds saved to .env (SHAPO_EMAIL, SHAPO_PASSWORD), gitignored.
• Premium design concept built + verified — ...\PROJECTS\Testimonial Vault\design-concept-v1.html. Navy/gold/cream, Playfair + Manrope. Rewritten to obey her new context\design-rules-no-ai-tells.md (removed eyebrows, italic-recolored headings, 01/02/03, emojis, fake logo). Then MOTION restored after she flagged it (testimonial marquee, rotating headline phrase, CTA glow, hover-lift, scroll-reveal, animated strength dots). Verified render via Playwright screenshot.
• PRD updated to protect her work — §7.7D now says carry-forward + elevate her existing repo components/animations (InfiniteTestimonialSlider, rotating hero, modals, hover glows); retire only the dated gray glassmorphism.

Key files for next session

• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Testimonial Vault\PRD-testimonial-vault-v1.md — read FIRST; the full build spec (stack, tiers, §7.7 paid experience, GHL/Stripe, data model, security, §13 locked decisions).
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Testimonial Vault\design-concept-v1.html — the approved-pending visual concept (look + motion) to build from.
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\context\design-rules-no-ai-tells.md — STANDING design rules; every build must obey (no eyebrows/italic-accent-headers/numbered-sections/emojis/typed-logo).
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Testimonial Vault\shapo-teardown-2026-07-03.md — competitor feature map + steal list.
• c:\Users\srver\AIOS-Workspace\aios-starter-kit\PROJECTS\Testimonial Vault\app-review.md + cloned repo at C:\Users\srver\AppData\Local\Temp\claude\c--Users-srver-AIOS-Workspace-aios-starter-kit\09034ac5-53c1-45e1-8a1d-b04a9005137f\scratchpad\tv-live\ — current app code; the AI prompt (moat) is in src\pages\Results.jsx.
• Plan file: none created this session (PRD supersedes the old plans\2026-05-13-testimonial-vault-shapo-upgrade.md).
• Memory files touched: none.

Running state

• Background processes: none (the python -m http.server 4788 preview server was killed via pkill -f "http.server 4788").
• Dev servers / ports: none.
• Open worktrees / branches: none. Repo clone lives at scratchpad ...\tv-live\ (throwaway; re-clone anytime with GITHUB_ORG_TOKEN).

Verification — how to confirm things still work

• GitHub org access: TOKEN=$(python scripts/get_env.py GITHUB_ORG_TOKEN); curl -s -o /dev/null -w "%{http_code}" -H "Authorization: token $TOKEN" https://api.github.com/repos/AmplifAI-Your-Business/testimonial-vault-not-done -> expect 200.
• GHL API: KEY=$(python scripts/get_env.py GHL_API_KEY); LOC=$(python scripts/get_env.py GHL_LOCATION_ID); curl -s -o /dev/null -w "%{http_code}" -H "Authorization: Bearer $KEY" -H "Version: 2021-07-28" https://services.leadconnectorhq.com/locations/$LOC -> expect 200.
• Design concept: open PROJECTS\Testimonial Vault\design-concept-v1.html in Edge; scroll to see reveal/marquee/glow motion.

Deferred + open questions

• Open: She's reviewing the design concept (look + motion). Needs "love it, build it" or specific tweaks before app build starts.
• Open: She needs to provide a real logo file (concept has a wordmark placeholder flagged [ real logo file to replace ]).
• Open: Confirm the free-save number (defaulted to 15; her pitch said 3, a video said 25, mentors said 10-20).
• Deferred: Two throwaway items named "Research" (a widget + a form) left in her Shapo account during the walkthrough — offered to note for her to delete; she hasn't answered.
• Deferred: gh CLI has a stale invalid GITHUB_TOKEN in its environment (harmless; direct-token git clone works) — offered to clean up.
• Deferred: Repo's base44\.app.jsonc points at OLD app id 69729a5fc80b0e1f8cf393df; brief.md referenced a newer 6a03de34... — reconcile only if staying on Base44 (moot on owned stack).

Pick up here

On Sondra's approval of the design concept, start the Fable 5 build beginning with the design system (navy/gold/cream, tell-free, motion carried forward from her repo components), then Phase 1 (analysis + Results page porting the AI prompt from tv-live\src\pages\Results.jsx) per PRD §14.