Compare commits

...

4 Commits

Author SHA1 Message Date
863a3d3fd3 moving things to specific repos 2026-03-22 19:20:43 -04:00
53082e4afd Draft Terms of Service document for Lendair platform FRE-483
- 22 sections: user accounts, loans, fees, collections, arbitration
- Platform fee: 1% lender origination, 2% borrower transaction
- Late fee:  or 5% after 5-day grace; default at 90 days
- Delaware law, binding arbitration, class action waiver
- Full risk disclosures for peer-to-peer lending
2026-03-22 18:16:59 -04:00
d0c0f98acb Add AI features scoping plan for Lendair
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-22 12:58:16 -04:00
86d309b5cc Update daily notes: break down FRE-449 into 6 implementation subtasks
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-22 01:59:06 -04:00
9 changed files with 205 additions and 369 deletions

View File

@@ -0,0 +1,55 @@
# 2026-03-22 Daily Notes
## Today
**22:16 UTC** - Completed FRE-483 Terms of Service document
### Task: FRE-449 - Micro Lending App
- Checked out task
- Created subtasks:
- FRE-450: Technical Plan (CTO)
- FRE-451: Marketing Plan (CMO)
- Wrote business plan: plans/micro_lending_business_plan_2026-03-22.md
- Board confirmed design docs exist (they were the plans themselves)
- Broke down into 6 implementation subtasks (FRE-452 to FRE-457)
- All subtasks assigned to CTO
### Subtasks Created
| ID | Title | Priority | Status |
|----|-------|----------|--------|
| FRE-452 | Design System: UI/UX Specification | high | todo |
| FRE-453 | Database: Drizzle ORM + Turso | high | todo |
| FRE-454 | Auth: Clerk Integration | high | todo |
| FRE-455 | Backend APIs: Loans/Users/Transfers | high | todo |
| FRE-456 | Web Frontend: SolidStart | medium | todo |
| FRE-457 | iOS App: SwiftUI | medium | todo |
### Dependency Chain
FRE-453 → FRE-454 → FRE-455 → FRE-456 + FRE-457
FRE-452 (design) blocks FRE-456
### Team Status
- CTO: f4390417-0383-406e-b4bf-37b3fa6162b8
- CMO: 95d31f57-1a16-4010-9879-65f2bb26e685 (paused)
- CMO is paused - marketing subtasks deferred
### FRE-473: Scope AI features
- Completed scoping for Lendair AI features
- 6 potential paid AI features identified
- Top 3 for MVP: Loan Matching, Trust Score, Risk-Adjusted Returns
- Plan: plans/micro_lending_ai_features_2026-03-22.md
### Decisions
- Targeting unbanked/underbanked markets for micro lending
- Kenya as first market for MVP
- Transaction fees + premium features as revenue model
- AI features: bundle model, ~$5-15/month subscription
### FRE-482: Terms of Service, ID collection etc
- Created 4 subtasks (FRE-483 to FRE-486)
- **FRE-483 DONE**: Drafted comprehensive ToS document
- Platform fee: 1% lender origination, 2% borrower transaction
- Late fee: $5 or 5% after 5-day grace; default at 90 days
- Delaware law, binding arbitration, class action waiver
- Full risk disclosures for peer-to-peer lending
- Remaining subtasks: FRE-484 (ID verification), FRE-485 (credit score), FRE-486 (bank linking)

View File

@@ -0,0 +1,35 @@
# 2026-03-22
## Timeline
- **CMO heartbeat run**: Woke up with task FRE-451 (Marketing Plan: Micro Lending App) assigned to me
- **Checked out** FRE-451, status `todo``in_progress`
- **Reviewed** parent issue FRE-449 (Micro Lending) and technical plan FRE-450
- **Researched** project structure at `/home/mike/code/lendair/` — confirmed iOS + web + plans directories
- **Created** `plans/FRE-451.md` — comprehensive 12-section marketing plan
- **Attached** plan document to issue via `PUT /api/issues/{id}/documents/plan`
- **Closed** FRE-451 with status `done` and detailed completion comment
## What's Done
- [x] FRE-451: Marketing Plan for Lendair — COMPLETE
## Current State
- All open issues in company reviewed
- FRE-449 (Micro Lending, parent): in_progress, CEO assigned
- FRE-450 (Technical Plan, CTO): in_progress, CTO working on it
- FRE-451 (Marketing Plan, CMO): **done** — this was my only assigned task
## Notes
- Company prefix is `FRE` (FrenoCorp)
- Project workspace is `/home/mike/code/lendair` — primary workspace is `lendair` folder
- No other CMO tasks currently assigned
- Will await further assignments from CEO/board
## Next Time
- FRE-449 parent issue may need subtasks created once tech/marketing plans are approved
- May need to coordinate on design spec (not yet assigned — may fall under CMO or a design agent)
- Landing page copy and brand identity direction are my immediate execution priorities once CEO briefs me

View File

@@ -0,0 +1,17 @@
# 2026-03-22
## CTO Heartbeat Log
### Tasks Worked
- Breaking down FRE-455 (Backend APIs) into discrete subtasks per board request
- Created subtasks: FRE-476 (Users), FRE-477 (Loans), FRE-479 (Transfers), FRE-480 (Notifications), FRE-478 (Root Router)
- Created FRE-481 (Database Schema Test Suite) for missing tests on FRE-453
### Oversight
- Open issues: 2 in_progress (FRE-453, FRE-455), 10 in_review (code review pipeline healthy), 4 todo (AI features)
- Code review pipeline: 10 items in review - good flow
### Notes
- FRE-455 has been broken down per board request "Break this down into more discrete steps as individual issues"
- FRE-453 code review flagged missing test suite - created FRE-481 to address
- Two AI features (FRE-474, FRE-475) are assigned but not yet started

View File

@@ -0,0 +1,34 @@
# Security Reviewer Memory
## Heartbeat Summary 2026-03-21
### Issues Reviewed and Resolved
- **FRE-439** (Test: Route System) — `done`
- Verified security fixes in RouteService.swift: deleteRoute, updateRouteVisibility, incrementViewCount now require userId and verify ownership
- Call sites verified: PublicRouteView.swift:43, RouteShareSheet.swift:90
- Rate limiting: 3 increments/minute per user-route pair on view count
- **FRE-437** (Test: Workout Tracking Service) — `done`
- No security issues found
- WorkoutTrackingService: user data isolated by userId in all repository queries
- NessaSyncService: uses authenticated user ID for all sync
- SocialService: checks ownership before comment deletion
- GRDB query builder prevents SQL injection
- **FRE-445** (Test: Onboarding) — `in_review`, reassigned to Code Reviewer
- Tests are superficial: every test asserts only `XCTAssertNotNil(view)`
- Missing: navigation flow, button behavior, permission tests, state persistence, edge cases
- Code Reviewer to provide implementation guidance
### Known Security Concerns (Lower Priority)
- GPX/TCX import has no file size limit (RouteImportService.swift)
- In-memory rate limit stores don't persist across app restarts
- Rate limit store tokens grow unbounded (RouteService, RouteSuggestionService)
### Pattern
- Reviewer assigned as "security reviewer" but tasks include general test writing (from CTO)
- Code Reviewer (f274248f) handles test quality reviews; I handle security of underlying code
- Always verify production code security, not just test quality

View File

@@ -0,0 +1,45 @@
# 2026-03-21 - Security Review Work
## Tasks Completed
### FRE-438: Test: Plan System
- **Status**: ✅ Done (no issues)
- Reviewed: PlanRepositories.swift, PlanUploadViewModel.swift, PlanDiscoveryViewModel.swift
- **Findings**: No security issues. GRDB parameterized queries, proper auth checks.
### FRE-441: Test: Social Features (Clubs & Challenges)
- **Status**: ✅ Done (no issues)
- Reviewed: SocialRepositories.swift, ClubRepositories.swift, AdditionalRepositories.swift
- **Findings**: No security issues. Proper SQL binding throughout.
### FRE-427: Feature: HIIT Workout Plan Execution
- **Status**: ✅ Done (no issues)
- Reviewed: HIITPlan.swift, HIITExecutionViewModel.swift, HIITExecutionView.swift, HIITIntervalCard.swift
- **Findings**: No security concerns. Client-side timer only.
### FRE-442: Test: Auth & Account
- **Status**: Already completed before today
- **Note**: Critical issue (SecureStorage using UserDefaults) was fixed by another agent before my review
## Key Observations
1. **Nessa codebase** uses GRDB for database operations - proper parameterized queries throughout
2. **SQL injection protection**: All repository methods use GRDB's type-safe query builder or proper SQL arguments binding
3. **Authorization**: Delete operations verify user ownership before proceeding
4. **HIIT feature**: Pure client-side workout timer, no security surface
## 2026-03-21 - Second heartbeat (evening)
### FRE-443: Test: Sync & Data
- **Status**: Already reviewed earlier today (no code changes since)
- My security review comment (most recent) assigned back to Code Reviewer with:
- 6 code quality issues (compilation errors, broken mock injection)
- 5 source code security findings (no retry logic, unencrypted offline maps, no deduplication, privacy override, Sendable concern)
- Code Reviewer then submitted back to me for final verification, but no changes made
- No new assignments in inbox — exiting cleanly
## Company Context
- Company: FrenoCorp
- Working in project for Nessa fitness app (iOS/Swift)
- CTO is chainOfCommand manager

View File

@@ -0,0 +1,19 @@
# 2026-03-22 - Daily Notes
## Heartbeat 17:15 UTC
### Security Reviews Completed
**FRE-463 (iOS Screens: Main Navigation and Home)** - APPROVED, marked done
- All 6 prior issues (2 HIGH, 3 MEDIUM, 1 LOW) verified fixed
- Keychain accessibility, shared TRPCService, balance placeholder, JSON encoding, user enumeration, debug prints all confirmed fixed
**FRE-469 (Clerk Webhook Handlers)** - PARTIALLY APPROVED, assigned back to Code Reviewer
- 1 MEDIUM: `deletedAt: Date.now()` uses milliseconds, should be seconds (clerk.ts:96)
- 1 LOW: No rate limiting on webhook endpoint (informational, infrastructure concern)
- Good: HMAC-SHA256 signature verification, timingSafeEqual, 5-min timestamp window, upsert logic, soft delete
### Notes
- Company ID: e4a42be5-3bd4-46ad-8b3b-f2da60d203d4 (FrenoCorp)
- My agent ID: 036d6925-3aac-4939-a0f0-22dc44e618bc
- Company prefix: FRE

View File

@@ -1,95 +0,0 @@
# Life and Lineage: App Store Optimization Strategy
## ASO Objectives
### Primary Goals
**Organic Downloads**: +300% in 3 months (driven by improved discoverability)
**Keyword Rankings**: Top 10 for "Dungeon Crawler", "RPG", "Life Sim", "Roguelike"
**Conversion Rate**: 25% (Target improvement from current baseline)
**Market Expansion**: Initial focus on English-speaking markets (US, UK, CA, AU)
### Success Metrics
**Search Visibility**: 50% increase in impressions for target keywords
**Download Growth**: 30% MoM organic growth
**Rating Improvement**: 4.5+ average rating (essential for conversion)
**Competitive Position**: Top 50 in RPG/Simulation category
## Market Analysis
### Competitive Landscape
**Direct Competitors**: Stardew Valley (Life Sim/Farming + Combat), Archero (Roguelike/Dungeon), BitLife (Life Sim mechanics)
**Keyword Opportunities**: "Dungeon RPG with Life Sim elements", "Offline Roguelike", "Pixel Art RPG"
**Positioning Strategy**: Unique blend of intense dungeon crawling (PvP, Loot) with meaningful life/lineage simulation. "Build a dynasty, conquer the dungeon."
### Target Audience Insights
**Primary Users**: Mobile gamers seeking depth (RPG + Sim hybrid), fans of progression systems.
**Search Behavior**: Searches for "best offline rpg", "roguelike dungeon crawler", "life simulation games".
**Decision Factors**: Gameplay depth (replayability), visual style (pixel art/retro appeal), fair monetization (no P2W perception).
## Optimization Strategy
### Metadata Optimization
**App Title (iOS/Android)**:
* **Draft 1**: Life and Lineage: RPG Sim
* **Draft 2**: Life & Lineage - Dungeon RPG
* **Recommendation**: **Life and Lineage: RPG & Sim** (Balances brand + top keywords)
**Subtitle (iOS) / Short Description (Android)**:
* **iOS Subtitle**: Build a Dynasty. Conquer Dungeons.
* **Android Short Description**: Combine intense dungeon crawling with deep life simulation. Build your lineage today!
**Long Description Structure**:
1. **Hook**: "What if your dungeon crawler had consequences for generations? Welcome to Life and Lineage."
2. **Key Features**:
* **Deep Dungeon Crawling**: Procedurally generated levels, intense combat, epic loot.
* **Life Simulation**: Build a home, raise a family, pass down traits to your heirs.
* **PvP Arena**: Test your lineage against other players in quick-match battles.
* **Progression**: Seasonal Battle Pass, crafting, and endless character growth.
3. **Social Proof**: "Join thousands of players building their legacy." (Placeholder until reviews accumulate).
4. **Call to Action**: "Download now and start your lineage!"
### Visual Asset Strategy
**App Icon**:
* **Concept A**: Pixel art character face (heroic) with dungeon background.
* **Concept B**: Split face (Human/Monster or Peaceful/Combat) to show duality.
* **Recommendation**: Test Concept A vs B. Ensure high contrast and vibrant colors.
**Screenshots**:
1. **Hero Shot**: "Dungeon Crawling Meets Life Sim" - Split screen showing combat and family/home.
2. **Combat**: "Intense Action & Loot" - Showcasing a boss fight or rare drop explosion.
3. **Life Sim**: "Build Your Legacy" - Showing housing, family tree, or heir system.
4. **Progression**: "Deep Skill Trees & Crafting" - UI shot showing depth.
5. **PvP/Social**: "Battle for Glory" - PvP matchmaking screen or victory.
**Preview Video (15-30s)**:
* **0-3s**: Fast montage of combat and life sim moments (Hook).
* **3-15s**: "Fight" -> "Build" -> "Survive" text overlays with matching gameplay.
* **15-25s**: Show the "Lineage" mechanic (character aging/passing torch).
* **25-30s**: CTA "Start Your Lineage".
### Localization Plan
**Target Markets**: English (Primary). Future: Spanish, Portuguese (Brazil), French, German, Japanese, Korean, Chinese (Simplified).
**Cultural Adaptation**: Ensure character art styles resonate (e.g., anime-style for Asia if applicable).
## Testing and Optimization
### A/B Testing Roadmap
**Phase 1 (Launch/Early)**:
* **Icon Test**: Hero Face vs. Sword/Shield Icon.
* **Screenshot Order**: Combat first vs. Life Sim first.
**Phase 2 (Growth)**:
* **Video**: Gameplay-heavy vs. Cinematic trailer.
* **Short Description**: Feature-focused vs. Benefit-focused.
### Performance Monitoring
**Weekly**: Track keyword rankings for "RPG", "Dungeon", "Sim". Monitor conversion rate changes after updates.
**Monthly**: Review competitor moves (updates, feature changes) and adjust keyword strategy.
---
**App Store Optimizer**: 484e24be-aaf4-41cb-9376-e0ae93f363f8
**Strategy Date**: 2026-03-14
**Implementation**: Ready for execution alongside Engagement Growth Plan (Phase 1-4).

View File

@@ -1,109 +0,0 @@
# Engagement Growth Plan: $5 → $5,000 MRR
**Current State:** $5-10/month IAP revenue
**Target:** $5,000/month (500x growth)
**Timeline:** 90 days to $1,000, 6 months to $5,000
---
## Phase 1: Early-Game Retention (Weeks 1-2)
**Problem:** Players drop off before experiencing core value
**Actions:**
1. **First-Play Tutorial Overhaul**
- Reduce tutorial time from 5min → 90 seconds
- Frontload the "wow" moment (first dungeon clear, first gear drop)
- Add skip option for returning players
2. **Day 1-7 Engagement Loop**
- Daily login rewards with escalating value (Day 7 = premium currency)
- Push notification: "Your dungeon energy refilled"
- New player "Welcome Pass" - complete 10 tasks, get rare item
3. **PvP Quick Match (Revive Previous Work)**
- Match new players within 30 seconds
- AI backfill if queue time > 15s
- First 5 PvP matches grant bonus rewards
---
## Phase 2: Dungeon Gameplay Improvements (Weeks 3-4)
**Problem:** Moment-to-moment gameplay feels repetitive
**Actions:**
1. **Combat Pacing**
- Reduce ability cooldowns by 20% (test in A/B)
- Add combo system: 3+ hits = damage multiplier
- Visual feedback: screen shake, hit pause frames
2. **Encounter Variance**
- 3 new enemy types per existing dungeon
- Elite enemies with affixes ("Swift", "Armored", "Explosive")
- Random mini-boss spawns (10% chance)
3. **Loot Satisfaction**
- Guaranteed rare drop every 5th dungeon
- Visual loot explosion effect
- Compare gear popup (green arrows for upgrades)
---
## Phase 3: Content Expansion (Weeks 5-8)
**Problem:** Not enough content to retain players long-term
**Actions:**
1. **Dungeon Extensions**
- Extend current 3 dungeons to 5 floors each (from 3)
- Add 2 new dungeon themes: "Frozen Caverns", "Clockwork Tower"
- Each dungeon = 20+ unique room layouts
2. **Progression Systems**
- Achievement system with currency rewards
- Seasonal battle pass ($9.99)
- Guild system for social retention
3. **Endgame Content**
- Weekly leaderboard dungeons
- Hard mode with 2x rewards
- Infinite dungeon (roguelike progression)
---
## Phase 4: Monetization Optimization (Ongoing)
**Current:** ~$5-10/month
**Target Mix:**
- 70% from battle passes + cosmetics
- 25% from convenience (energy refills, storage)
- 5% from gacha/loot boxes
**IAP Offerings:**
1. **Energy System** - Free players get 10 dungeons/day, $4.99 for unlimited
2. **Starter Pack** - $4.99 one-time (high value, 40% conversion target)
3. **Battle Pass** - $9.99/season with exclusive cosmetics
4. **Cosmetics** - $2.99-$14.99 character/weapon skins
5. **VIP Membership** - $14.99/month (daily currency, exclusive dungeon)
---
## Metrics to Track
| Metric | Current | 30d Target | 90d Target |
|--------|---------|------------|------------|
| D1 Retention | ? | 45% | 50% |
| D7 Retention | ? | 20% | 25% |
| Avg Session | ? | 12 min | 15 min |
| ARPDAU | ? | $0.05 | $0.15 |
| Monthly IAP | $5-10 | $500 | $2,000 |
---
## Immediate Next Steps
1. **Audit current analytics** - Need baseline retention/monetization data
2. **A/B test tutorial changes** - Measure D1 retention impact
3. **Design battle pass structure** - 8-week season planning
4. **Prioritize PvP matchmaking** - Quick wins for engagement

View File

@@ -1,165 +0,0 @@
# Ness Profitability Plan
**Date:** 2026-03-09
**Updated:** 2026-03-09 (v2 - board feedback incorporated)
**Owner:** CEO
**Task:** FRE-74
**Target:** $10k MRR
---
## Executive Summary
Reaching $10k MRR with a Strava competitor requires **focused differentiation**, not feature parity. Strava is a mature product with 100M+ users and $250M+ revenue.
**Board directive:** At least half of Strava's premium features must be free for users (only features requiring third-party APIs or expensive compute can be paid).
**Strategic thesis:** Win on **community and accessibility** with more free features than Strava. Target the underserved casual fitness market.
---
## Current State Assessment
### What We Have
- iOS SwiftUI app with basic activity tracking
- Clean codebase, modern architecture
- Team: CTO, Atlas (Founding Engineer), Claude (Senior Engineer), Hermes (Junior Engineer), Intern
### What Strava Has
- 100M+ registered users
- $250M+ annual revenue
- Segments, routes, clubs, challenges, social features
- Wearable integrations (Garmin, Apple Watch, Fitbit)
- Premium: $11.99/month or $79.99/year
---
## Revenue Model (Revised per Board Feedback)
### Pricing Strategy
| Tier | Price | Features |
|------|-------|----------|
| Free | $0 | Everything except: route planning, AI features, offline maps |
| Plus | $4.99/mo | Route planning, offline maps, advanced segments |
| Pro | $9.99/mo | AI training plans, premium challenges, priority support |
### Free Features (No third-party cost)
- Segment leaderboards (our data)
- Segment results & filtering
- Custom goals
- Training log
- Cumulative stats
- Heart rate zones
- Workout/pace analysis
- Route creation (basic)
- Group challenges
- Live activity data
- Weather display
- Custom app icons
### Paid Features (Third-party/expensive compute)
- Suggested routes (routing API)
- AI training plans
- Personal heatmaps
- Offline route maps (storage)
- Fitness & freshness (compute)
- Matched activities (routing)
- Training plans (content/AI)
- Priority support
### MRR Targets
- **Month 3:** 750 Plus users = $3,750 MRR
- **Month 6:** 1,500 Plus users = $7,500 MRR
- **Month 12:** 2,000 users (mix Plus/Pro) = $10,000 MRR
---
## The Winning Strategy
### Phase 1: MVP Launch (Months 1-2)
**Focus:** Core tracking + friendly social
#### Must-Have Features (Revenue-Driving)
1. **Activity Tracking** - GPS, pace, distance, duration (keep simple)
2. **Activity Feed** - See friends' activities (not Strava's complex feed)
3. **Kudos & Comments** - Simple engagement
4. **User Profiles** - Bio, stats, activity history
5. **Follow System** - Find and follow friends
#### Skip for Now (Can Add Later)
- Segments/leaderboards (complex, not revenue-critical)
- Route planning (Phase 2)
- Clubs/groups (Phase 2)
- Wearable integration (Phase 3)
### Phase 2: Community Growth (Months 3-6)
**Focus:** Viral loops + retention
1. **Clubs** - Simple club creation, join requests
2. **Monthly Challenges** - SaaS-generated official challenges
3. **1v1 Challenges** - Challenge friends directly
4. **Share to Social** - Easy share to Instagram/Stories
5. **Invite System** - Text/email invites with tracking
### Phase 3: Differentiation (Months 6-12)
**Focus:** Features Strava can't easily match
1. **AI Training Plans** - Personalized plans based on goals
2. **Local Race Discovery** - Integration with race calendars
3. **Beginner Mode** - Guided runs/workouts for new users
4. **Family Plans** - Share with family members
5. **Community Events** - Virtual races, charity challenges
---
## Why This Works
### Differentiation vs. Feature Parity
| Strava | Ness (Our Approach) |
|--------|-------------------|
| Elite athlete focus | Casual fitness focus |
| $11.99/month | $4.99/month |
| Complex features | Simple, friendly |
| Segments/leaderboards | Community/challenges |
| Wearables-first | Phone-first |
### Why We'll Win
1. **Price:** 60% cheaper than Strava
2. **Simplicity:** Lower barrier to entry
3. **Community:** Friend-focused, not stranger-focused
4. **Beginners:** First workout guidance Strava doesn't offer
---
## Risk Mitigation
### Risks
1. **User acquisition cost** - Mitigate: viral loops, social sharing
2. **Retention** - Mitigate: community features in Phase 1
3. **Competition** - Mitigate: focus on niche, not broad features
### Metrics to Watch
- DAU/MAU ratio (target: 40%)
- Conversion rate (target: 5% free-to-paid)
- Churn rate (target: <5%/month)
- Viral coefficient (target: >1.0)
---
## Next Steps
1. **CTO (FRE-73):** Complete feature scope but reprioritize to focus on Phase 1
2. **Atlas:** Build activity tracking + feed + profiles (Phase 1)
3. **CEO:** Validate pricing with user research
4. **Intern:** Competitive analysis on pricing tiers
---
## Summary
- **Don't compete on features** - compete on price, simplicity, and community
- **Target casual users** - the 80% Strava ignores
- **Launch fast** - MVP in 2 months, not 12
- **Iterate on revenue** - test pricing, features, positioning
*Plan created: 2026-03-09*