Reference
Open Tasks
The working task list, ordered by priority within each band. P0 items are risks that get worse with time; P1 items are the current build queue; P2 is everything queued behind a decision.
P0 — do first, small and urgent
| Task | Why now | Size |
Rotate the dev credentials committed in docs/README.md | Standing security flag since the July 10 review; exposure grows with every share of the repo. | Hours |
Commit the lumenal_expo working tree | The entire mobile app (app/, src/, configs) is untracked on feature/env-config; one disk failure erases it. | Minutes |
| Audit per-page admin role checks | The router declares /admin/* publicly; gating depends on each page calling has_role correctly. Verify all 12 admin pages before migration work churns them. | Half-day |
P1 — current build queue
| Task | Detail | Track |
| Stripe checkout for the cart | Replace the disabled "Checkout Coming Soon" button in Cart.tsx: payment intent creation, webhooks to orders.payment_intent_id, order confirmation. The single highest-leverage task in the project. | Revenue |
| Luxury report payment gate | LuxuryReportConfig.tsx says "will integrate with Stripe later" — reports currently generate free. Gate generation behind a one-off payment. | Revenue |
| Run the focus group | Distribute the three test apps (see Mobile Test Apps), rotate order across testers, collect feedback exports, declare a winner against the pre-committed metrics. | Mobile |
| Direct Gemini API swap (migration Phase 1) | Point the 13 AI edge functions at the Gemini API instead of ai.gateway.lovable.dev; same models. Removes the tightest Lovable coupling in 1-2 days. | Platform |
| Choose the desktop design direction | Decision D1 on the Decisions page; comps are ready for review. | Design |
P2 — queued behind decisions or P1 work
| Task | Blocked by |
| Deploy CDK stacks to staging (migration Phase 0), then phases 2-8: static hosting, Aurora migration, Lambda ports of 19 functions, data API, Cognito, storage/realtime, cutover | Credential rotation; Gemini swap validates the account setup |
Rewrite mobile Phase 1-2 spec around the focus-group winner; build natively in lumenal_expo | Focus group results (decision F2) |
| Subscription billing (Lumenal Plus) | Monetization decision F1 + basic checkout shipped |
| Wire the stubbed mobile-shell actions (generate reading, cart, forgot password, profile menu items) | Winner decision — don't polish a shell that may be redesigned |
| Gift cards and subscriptions backends | Checkout foundation |
| Admin System Settings page (branding, notifications, feature flags — all "Coming Soon") | None hard; low priority |
Refresh stale February docs or fold them into this reference site; fix MOBILE_APP_NOTES.md pointing at the dead repo | None hard |
| Align static marketing copy with reality (Help Center advertises PayPal/Apple Pay; Press page copy) | Checkout shipping — then make copy true instead of deleting it |
| Compatibility-as-shareable-image (Circle decision F5 outcome) | Decision F5 |
Task hygiene notes
- Duplicate-looking function pairs (
generate-compatibility vs generate-compatibility-reading, generate-readings vs generate-belief-reading) are batch-vs-single variants; confirm which the UI calls before porting to Lambda so dead code doesn't get migrated.
- The old 22-week mobile phase plan in
MOBILE_APP_SPEC.md is superseded by the concept-first plan on the Plan page; don't work from it directly.