PurpleLifeAi

Imported from x21ai/PurpleLifeAi (AGENTS.md). Install upstream with npx skills add x21ai/PurpleLifeAi. Copyright stays with the author.

Learned User Preferences

• Local previews: Cursor browser only. Always open websites/pages in Cursor Simple Browser (or cursor-ide-browser MCP when available). Never open Chrome/Safari/open CLI unless the user explicitly asks for an external browser.
• When implementing an attached plan, do not edit the plan file; mark pre-created to-dos in_progress and complete all without recreating them.
• On session start read docs/HANDOFF.md, docs/DECISIONS.md, docs/OPEN-ISSUES.md, and docs/LEARNINGS.md before changing anything (.cursor/rules/compounding-memory.mdc). After every completed task, append a log entry to docs/HANDOFF.md and refresh its Current snapshot before claiming done; also sync CURSOR_HANDOFF.md (extended ops), relevant docs/ runbooks, .cursor/rules/ when conventions change, AGENTS.md/mem/ for durable decisions, and paste-ready Lovable prompts for UI-only follow-ups. Mandatory per compounding-memory.mdc, 00-handoff.mdc, and post-task-documentation.mdc; never leave important context only in chat. When switching machines, commit and push all in-progress work and refresh handoff before stopping so the next machine can git pull and resume.
• When migration artifacts are missing from the repo, provide copy-paste Lovable prompts the user can run there.
• Always fully clean git working tree before handoff or close: run ./scripts/clean-workspace-junk.sh (PID locks, test-results/, macOS * 2.* duplicates); never say "clean aside from local junk" or leave untracked artifacts. Rule: .cursor/rules/clean-working-tree.mdc.
• At cutover, keep existing Oura/Whoop OAuth apps and only add workers.dev redirect URIs. Migration cutover priority: preserve user UUIDs, public data, and storage; password reset is OK; password hashes are not required.
• No hardcoded or fake health metrics presented as real; for HIPAA-ready go-live use empty states and connect prompts when real data is absent, not sample numbers or a demo badge.
• Agent-owned operations: run all Doppler, Supabase Management API, wrangler deploy, git, bun gates, local web preview (bun run dev at http://localhost:8080), iOS CLI (scripts/native-ios-build.sh, bun run ios:device-build, bun run ios:local-signing, bun run ios:check-asc, bun run ios:testflight per docs/testflight-setup.md; build scripts use xcode-select -p then fallback to /Applications/Xcode.app, /Applications/Xcode-beta.app, or ~/Downloads/Xcode-beta.app; Xcode Command Line Tools alone cannot build iOS, run simulators, or replace full Xcode), plist edits, and cap sync yourself via xcodebuild CLI, never ask the operator to open Xcode GUI. Rule: .cursor/rules/no-manual-operator-work.mdc. Check Doppler before asking for keys: native iOS secrets (PURPLE_LIFE_* in x21/prd, see mem/doppler-purple-life.md; old purple-life project deleted 2026-07-14), Worker deploy and www Cloudflare smoke in x21/prd_cloudflare; before destructive Doppler changes, verify all iOS script paths against x21/prd only (ios:check-asc, ios:check-luciq, JWT, local-signing); operator only when blocked by App Store Xcode install (Xcode.appdownload), Xcode license acceptance, or missing Doppler secrets (APNs/FCM keys).
• Ship work on feature branches and open PRs; gh CLI is not installed locally and no GitHub token is available, so PRs are opened via the GitHub branch URL and commits go to the active feature branch (e.g. feat/real-vitals-and-integrations).
• Verify both functionality and visuals before claiming done: real end-to-end checks (webhook POST, query the live DB) plus screenshots across viewports (tests/e2e/visual-layout.spec.ts, output under test-results/visual/), not assertions from code alone. Never ask the operator to test a local URL until the agent has curl + Cursor browser MCP verification on that exact URL (.cursor/rules/proof-of-work.mdc). For multi-issue debug, native, design, or ship sessions, use multitask mode with parallel subagents (often 8-10) rather than serial one-offs. Expect work 100% complete and verified before demo handoff; partial "agents still running" is insufficient. 2026-07-04 max-agent fleet: ~15+ subagents on disjoint flutter/ scopes (fail-open data screens, burger drawer, TestFlight prep, browser QA); parent merges and runs gates before claiming done.
• Hold UI to an Apple-grade bar: the user repeatedly asks "how would Apple do it" and rejects over-wide, empty, or edge-drifting/full-bleed layouts; keep content in a centered, width-capped column with aligned controls, never inset-x-0 full width. Liquid-glass design passes (iOS 26/27 tokens in src/styles.css, mem/design/liquid-glass-tokens.md, Figma Apple kit when available) are look-and-feel only: frosted nav/sheets, .glass-press feedback, 44pt touch targets, no data removal or functionality changes. Flutter shell burger menu: top-right hamburger must open a right-edge Scaffold.endDrawer (RTL slide, flush under top bar, glass panel ~280–336px), not a SnackBar, left drawer, or floating popover; routes Account, Settings, Tools, Care, Sign out.
• Only operate on Purple's own project and accounts; never write to any other Supabase project or account, even when credentials grant access.
• Live-user safety gate: before shipping lovable/redesign changes, require a read-only audit confirming no destructive SQL/migrations/seeds, manual deploy only, backup note, and explicit approval for any new auth/onboarding write path or sync behavior changes.
• Whole-app redesign: Lovable works on GitHub branch lovable/redesign; Cursor gatekeeps main (baseline 7086ffa, sync runbook docs/SYNC-AND-RELEASE.md, gatekeeper docs/LOVABLE-REDESIGN-WORKFLOW.md, docs/LOVABLE-DESIGNER-RULES.md). The user coordinates and tells Cursor when Lovable has updates; never blame the user for Lovable platform or bot sync commits. Cursor reviews, runs all quality gates (including check:supabase-types), merges to main when clean, and asks before live deploy. After merge, keep main and lovable/redesign at the same commit; user expects git committed, pushed, and prod/Lovable/local in sync. Only Cursor regenerates types.ts, migrations, and RLS/security fixes; paste-ready Lovable prompts for UI-only. Lovable must not edit types.ts or use Try to fix on build/security errors. Manual deploy only during redesign.
• Capacitor interim retired (operator 2026-07-04): TestFlight builds 1–9 were Capacitor WebView; all future iOS uploads are Flutter native only (bun run ios:flutter-testflight). Capacitor scripts (ios:testflight:capacitor) remain for rollback reference, not the default path. See docs/FLUTTER-TESTFLIGHT-CUTOVER.md, mem/flutter-lovable-workflow.md.
• Flutter + Lovable split: Lovable owns web design on lovable/redesign (TanStack); Cursor owns flutter/, design/tokens.json, migrations, and ports signed-in app screens after each merge. Lovable must not edit flutter/ or design/tokens.json. design/tokens.json bridges web CSS (src/styles.css) to Dart (flutter/lib/design/). Runbooks: docs/LOVABLE-FLUTTER-SYNC.md, mem/flutter-lovable-workflow.md.
• TestFlight observability (permanent): Before and after every bun run ios:testflight, triage all ASC beta feedback (ios:check-tf-feedback) and all Luciq crashes/bugs (MCP Flutter - Purple - Beta). Fix P0 or log in docs/OPEN-ISSUES.md; do not claim build ready with open crash regressions. Rule: .cursor/rules/flutter-testflight-observability.mdc; screenshot feedback gaps: mem/observability/testflight-beta-feedback.md.

Learned Workspace Facts

• Supabase projects: OLD ref lzuodgpqseijhhyzgfky (Lovable Cloud; DB password and SUPABASE_SERVICE_ROLE_KEY not accessible to the owner, see repo .env/PROJECT_KNOWLEDGE.md); NEW ref xxnzmfzsjplrutrgbzxy (Purple Life, us-east-2, user-owned), schema and data import complete (5,751 rows, 13 auth users), production DNS cutover complete (www.purplelife.org and apex route to Cloudflare Worker purplelife), edge functions: oura-sync, journal-processor, journal-extract, ai-orchestrator, risk-forecaster, med-dose-action; deploy with bunx supabase@latest functions deploy <name> --project-ref xxnzmfzsjplrutrgbzxy (global supabase CLI may SIGKILL; Management API zip deploy is unreliable); set supabase/config.toml project_id to the new ref (in-repo, not downloaded from the dashboard). Use Session pooler (port 5432) for psql DDL and \copy; Transaction pooler (6543) breaks large DDL; CLI db query --linked may 403, use dashboard SQL editor or Management API POST /v1/projects/{ref}/database/query. Lovable preview must use NEW via docs/LOVABLE-ENV-PARITY.md (VITE_SUPABASE_URL=https://auth.purplelife.org, matching publishable key and project id); OLD schema mismatch breaks Lovable preview (Path B: point Lovable at NEW, do not patch OLD). Only Cursor regenerates src/integrations/supabase/types.ts from NEW; check:supabase-types (prebuild + CI) rejects truncated types. Lovable design syncs on branch lovable/redesign; Cursor gatekeeps main.
• Migration and Lovable redesign pitfalls (complete): purple-migration/ on GitHub; auth via Admin API + auth-users.json (import-auth.mjs, UUID preservation); run resign-journal-media.mjs if journal media still on old host; marketing heroes use local src/assets/*.jpg via vite imagetools, not Lovable .asset.json or /__l5e/ CDN (404 outside preview; check-unique-route-images.mjs guards); Apple/Google OAuth uses @lovable.dev/cloud-auth-js only on Lovable preview hosts (isLovablePreviewHost() in src/lib/lovable-preview.ts), prod/local use supabase.auth.signInWithOAuth.
• CI quality gates: check:live-data runs check-no-test-data.mjs (code plus optional --db scan; resolves service role from Doppler SERVICE_ROLE_KEY/SUPABASE_SECRET_KEY) and check-no-fake-vitals.mjs (blocks invented health metrics on app screens); check:lovable-auth guards lovable.auth behind isLovablePreviewHost; CI runs on pushes to main and lovable/redesign plus all PRs; full sync/release runbook in docs/SYNC-AND-RELEASE.md.
• Apple Health on web is push-only via Health Auto Export webhook /api/public/hooks/apple-health?token=<secret> (apple_health_tokens, not Sign in with Apple OAuth); browsers cannot use HealthKit. Native iOS/Android: ios/ and android/ committed; Capacitor 8 iOS uses Swift Package Manager (ios/App/CapApp-SPM/Package.swift, no Podfile/CocoaPods); webDir is capacitor-shell/ (minimal index.html; TanStack Start dist has no root HTML; fixes TestFlight launch crash when shell was missing); build App.xcodeproj via scripts/native-ios-build.sh (simulator) or bun run ios:device-build (device, auto-installs and launches when USB connected); local signing via bun run ios:local-signing (scripts/ios-write-local-signing.sh, Doppler x21/prd PURPLE_LIFE_DEVELOPMENT_TEAM, checked before cursor-cloudflare); App Store Connect app Purple for Life (6787298041, bundle org.purplelife.app) must be created in the ASC browser first (API returns 403 on create); TestFlight upload via bun run ios:testflight after bun run ios:check-asc confirms PURPLE_LIFE_APP_STORE_CONNECT_* in Doppler x21/prd (docs/testflight-setup.md); ASC live build 1.0 (28) VALID 2026-07-13 (Founding Team, internal + external beta); scripts/native-ios-testflight.sh passes ASC API key to xcodebuild (no Xcode Apple ID login). Luciq crash reporting (formerly Instabug): SPM luciqai/luciq-ios-sdk, init in AppDelegate.swift, SDK token PURPLE_LIFE_LUCIQ_APP_TOKEN in Doppler x21/prd. Capacitor shell (capacitor.config.ts, bridge in src/lib/native/*) loads production (https://www.purplelife.org) so web deploy updates UI instantly; isNativeApp()/useNativeIos() defer until the Capacitor bridge injects on remote WebViews before choosing native HealthKit vs webhook UI. Store release only for native project/plugin/permission changes (docs/native-app-setup.md, mem/native-app-healthkit.md). Native HealthKit/Health Connect read via @capgo/capacitor-health into biometrics (source='apple_health' / health_connect) through authenticated /api/health/native-sync; iOS auth must omit vo2Max from AUTH_READ_TYPES (Capgo enum rejects it and breaks all Health calls); connect uses isCoreAuthorized (partial grants OK); UI "Last synced" uses apple_health_tokens.last_sync_at, not vitals timestamps; native connect gates on device authorization, not prior account biometrics rows from webhook/HAE/import; native_push_tokens migration applied on live DB. Local med reminders work natively; remote push needs APNs/FCM secrets in Doppler/Worker.
• Doppler: native iOS/TestFlight/Luciq in x21/prd (PURPLE_LIFE_*, scripts/doppler-run-purple-life.sh, mem/doppler-purple-life.md; old purple-life project deleted 2026-07-14); PurpleLife Worker deploy (build:prod, deploy:staging:ploy, deploy:www-ploy:dry-run) and Mac www smoke bun run test:www-cloudflare-data use x21/prd_cloudflare (not prd, and not cursor-cloudflare/prd_cloudlfare); Flutter dart-define scripts and prod Playwright e2e still name cursor-cloudflare/prd_cloudlfare; VITE_* for build:prod come from x21/prd_cloudflare (no NEW_* prefix; migration import complete); separate Cloudflare tokens CLOUDFLARE_API_TOKEN (Workers deploy) and CLOUDFLARE_DNS (zone DNS edit); CLOUDFLARE_ACCOUNT_ID is eigital (08e766e92db74bc7ef14c6b5c86bddf0), not POS (c7f99ecba0ace852de43684ec8a44612); override account ID on deploy if Doppler still has POS; map Doppler RESEND_KEY to Worker RESEND_API_KEY.
• Production auth emails: Supabase Send Email hook to Worker /api/email/auth/webhook; Doppler SUPABASE_SEND_EMAIL maps to Worker SEND_EMAIL_HOOK_SECRET; PGMQ plus pg_cron job process-email-queue (purple-migration/05-cutover/setup-email-pump.sql) pumps /api/email/queue/process; Cloudflare Worker cron /api/public/cron/email-queue-pump runs the same pump every minute as backup; Resend sends from noreply@notify.purplelife.org (API key must authorize that domain).
• wrangler.deploy.jsonc production deploy needs workers_dev: true plus zone routes for www.purplelife.org/* and purplelife.org/*; Sunday cron day must be 7 not 0 (Cloudflare); use bun run build:prod before deploy so VITE_* is not baked from stale local .env. During redesign, .github/workflows/deploy.yml is workflow_dispatch only (no push-to-main auto-deploy). Prod smoke tests run with bunx playwright test --project=desktop-1024 (viewport projects: mobile-375, tablet-768, tablet-1023, desktop-1024, desktop-1440) against E2E_BASE_URL=https://www.purplelife.org with E2E creds from Doppler.
• Supabase custom domain auth.purplelife.org is live (Custom Domains add-on, ~$10/mo, must be enabled in the Supabase dashboard since the Management API cannot enable add-ons); branded Google OAuth consent requires the browser Supabase client URL (VITE_SUPABASE_URL) to be https://auth.purplelife.org in Doppler x21 / prd_cloudflare and GitHub deploy secrets, then bun run build:prod, otherwise consent still shows *.supabase.co. Supabase Management API uses Doppler SUPABASE_PERSONAL_TOKEN (sbp_); data keys (sb_secret_/service role) return 401 on api.supabase.com; custom hostname endpoint is /custom-hostname/initialize (not /initiate), add-ons at /billing/addons (PATCH), /database/query runs DDL. Cloudflare zone purplelife.org id is 2d21ef1d41f1d5ee52a57060fbcd4740; custom-domain DNS records must be DNS-only (not proxied), added via CLOUDFLARE_DNS.
• Wearables and AI: Oura sync is a Supabase Edge Function (OURA_CLIENT_ID/OURA_CLIENT_SECRET as edge secrets via Management API /secrets); Whoop config/sync and AI run on the Cloudflare Worker (WHOOP_CLIENT_ID/WHOOP_CLIENT_SECRET, ANTHROPIC_API_KEY via wrangler secret bulk). AI goes through callAIForUser -> process.env.ANTHROPIC_API_KEY, default model claude-sonnet-4-5 (Doppler CLAUDE_AI); provider OAuth redirect URIs are registered manually in the Oura/Whoop consoles, prod callbacks https://www.purplelife.org/oauth/{oura,whoop}/callback; daily AI narrative cached in health_narratives (RLS, one row/user/day), read by vitals.tsx/my-health.tsx via getScoreSnapshot/getHealthNarrative. Shared sync model: each *_tokens table has sync_mode (manual | interval | visit (default) | pull) plus sync_interval_hours (0 for non-interval so crons skip; Oura cron is an edge function, Whoop runs via syncAllConnectedUsers); shared SyncModeSelect, WEARABLE_PROVIDERS registry in src/lib/wearable-sync.ts, useWearableAutoSync (3h throttle, visit mode), Today pull-to-refresh syncs all. Whoop can succeed while Oura fails when oura_tokens.expires_at is past; reconnect Oura in Tools. Add a pull device: create its *_tokens table (defaults visit/0, last_sync_at, RLS), a cron skipping interval 0, a registry entry plus trigger case, and <SyncModeSelect table=...>.
• Layout and theming: app route pages center content in mx-auto max-w-3xl px-5 sm:px-10 lg:px-16 (a few pages are legitimately wider, e.g. biometrics max-w-5xl); bottom sheets must wrap header and body in the shared SheetColumn (mx-auto w-full max-w-xl) exported from src/components/ui/sheet.tsx, since the bottom variant is full-bleed inset-x-0 by default; tests/e2e/visual-layout.spec.ts asserts the capped sheet width on desktop. Theme is class-based (.dark on <html> via src/lib/theme-provider.tsx, bootstrap script in __root.tsx; default appearance is dark when no purple-theme preference is stored; useRouteTheme is a deprecated no-op); the .sheet-canvas (Account/Tools/Apple Health) and .report-canvas (Reports) surfaces are theme-aware with light defaults and .dark token overrides in src/styles.css (the metric drilldown .metric-canvas stays light by design), so new sheet/report surfaces must use tokens, never hardcoded text-white/bg-white/text-[#FAFAFC]. Liquid glass utilities (.glass-surface, .glass-nav, .glass-card, .glass-press) and --glass-* tokens live in src/styles.css per mem/design/liquid-glass-tokens.md; apply on nav and floating controls only, not full content backgrounds; respect prefers-reduced-transparency fallbacks.
• Flutter client (flutter/, iOS/Android/web/macOS/Windows, bundle org.purplelife.app): Phase 0-1 covers signed-in app routes only; marketing pages (/, /pricing, etc.) remain TanStack/React on www.purplelife.org. Offline-first via Drift cache and sync queue (flutter/lib/core/offline/). Local web preview: ./scripts/flutter-web-serve.sh serves release build at http://localhost:8765 with --bind :: (macOS resolves localhost to IPv6 first); use Cursor browser only, not file paths or external browsers. Flutter web fixes do not ship via Capacitor TestFlight (that shell loads prod web); TestFlight and Flutter are separate tracks until Phase 5 cutover per mem/flutter-lovable-workflow.md. ASC live 1.0 (28) VALID Founding Team (TF28, 2026-07-13); analyze clean, 254/254 tests after TF27 P0 fixes (Taken, refill, keyboard, score wrap, narrative).
• Meds routing and drug autofill: flat-routed parent routes with child routes (e.g. src/routes/_app/meds.tsx owning meds.$medId, meds.history) MUST render an <Outlet/> or children silently render the parent. Dose history is editable and backfillable via getDosesForDate/getDoseHistoryByDay in src/lib/meds-today.ts. Drug autofill via src/lib/drug-db.server.ts (openFDA NDC + RxNorm RxNav, edge-cached) with src/lib/med-dictionary.ts offline fallback and src/components/meds/med-name-search.tsx autocomplete.