📊 asarOS — Build Dashboard
Complete status tracker: Web App → Mobile App → Monetized SaaS
–
Tasks Done
calculating…
–
To Do
remaining items
–
Total Tasks
across all phases
4
Active Phase
Mobile Build
🤔
Are We Ready for Mobile?
Not quite yet. Here's what must happen first before starting Capacitor:
✓
Feature flags bug fixed (Feature Flags page renders inside AppShell)
The admin feature-flags page currently imports AppShell and renders the main app inside admin. Fixed in today's delivery.
✓
Google Drive persistence fixed across logout/login
Drive tokens must survive logout. Fixed: authStore.logout() no longer clears Drive tokens. Only deleteAccount wipes them.
✓
PRO feature gating applied to mini-apps (ProGate component)
ProGate.tsx exists. Still need to wrap 15+ page.tsx files with it. See PRO Feature Gates section.
✓
Feature flag bulk-update admin endpoint wired in worker
The /api/admin/flags/bulk PUT endpoint exists in featureFlags.ts but needs to be added to admin.ts routes.
✓
Razorpay live keys set in production worker
Currently using test keys. Must switch to live keys before publishing.
🗄 Database & Migrations
Cloudflare D1 (SQLite) — asaros-db
📋
Migrations
✓
0001_init.sql — users, oauth_accounts tables
✓
0002_auth_payments.sql — password_hash, refresh_tokens, subscriptions
✓
0003_password_reset.sql — password_reset_tokens
✓
0004_admin.sql — admin_logs, payment_events, is_banned column
✓
0005_feature_flags.sql — feature_flags table
🔐 Auth System (Worker)
Routes & Middleware
✓
Google OAuth — /api/auth/google + /callback
✓
Email/password — /api/auth/register + /login
✓
JWT refresh — /api/auth/refresh
✓
Logout — /api/auth/logout (revokes refresh token)
✓
Forgot/reset password — /api/auth/forgot-password + /reset-password
✓
Delete account — DELETE /api/auth/account (App Store required)
✓
requireAuth middleware (JWT verification)
✓
Ban check middleware (blocks banned users at every API call)
✓
Forgot password email sending (currently returns token in dev mode only)
Wire up Resend / SendGrid to send the actual reset email. Currently dev mode only returns debug_token.
// In emailAuth.ts POST /forgot-password:
// await sendEmail({ to: emailLower,
// subject: 'Reset your asarOS password',
// html: resetLink })
💳 Payments (Razorpay)
Payment Routes
✓
POST /api/payments/order — create Razorpay order
✓
POST /api/payments/verify — verify signature + activate plan
✓
GET /api/payments/status — check current plan
✓
POST /api/payments/admin/override — manual plan grant/revoke
✓
payment_events table logging (revenue tracking)
✓
Switch from Razorpay test keys to LIVE keys
Currently using test keys in .dev.vars. Deploy live keys via wrangler secrets.
cd asaros-worker
npx wrangler secret put RAZORPAY_KEY_ID # rzp_live_xxx
npx wrangler secret put RAZORPAY_KEY_SECRET # live secret
✓
USD pricing support for international users
Add USD plan options to PLANS config in payments.ts and upgrade page.
✓
Razorpay webhook endpoint for subscription renewal/failure
POST /api/payments/webhook — handles subscription.charged, payment.failed events from Razorpay servers.
✓
Post-payment welcome email
Send confirmation/receipt after successful payment. Wire up email provider (Resend recommended).
⚙️ Admin API
Admin Routes (X-Admin-Key protected)
✓
GET /api/admin/stats — KPI dashboard
✓
GET/PUT /api/admin/users — user list, plan change, ban
✓
GET /api/admin/subscriptions + revenue + logs
✓
GET /api/flags — public feature flags endpoint
✓
PUT /api/admin/flags/bulk — bulk feature flag update
The route is defined in featureFlags.ts but needs to be mounted in admin.ts or index.ts.
// In asaros-worker/src/routes/admin.ts, add:
admin.put('/flags/:id', async (c) => { ... });
admin.put('/flags/bulk', async (c) => { ... });
// Already defined in featureFlags.ts — copy or import.
🔐 Auth UI (Frontend)
Auth Components & Flow
✓
AuthModal.tsx — sign in / register / forgot password
✓
AccountDropdown.tsx — topbar dropdown for signed-in users
✓
app/auth/callback — Google OAuth callback handler
✓
app/auth/reset — password reset page
✓
authStore.ts — login/register/logout/deleteAccount + JWT refresh
✓
App opens without login (local mode default — no friction)
✓
Logout clears auth session only (Drive tokens persist)
✓
Delete account wipes everything (App Store requirement)
✓
Microsoft login (placeholder → real implementation)
Currently shows "Coming Soon" in AuthModal. Wire up Microsoft OAuth when ready.
🔔 Trial System
7-Day Trial + Plan Logic
✓
trialStore.ts — firstSeenAt, isTrialActive(), daysRemaining()
✓
TrialBanner.tsx — shows countdown in last 2 days + after expiry
✓
Topbar plan badge — shows "Trial · Xd" or "Free" pill
✓
featureFlagStore.canAccess() respects trial/free/pro hierarchy
✓
Phase 2: Backend device fingerprint tracking (anti-abuse)
Currently trial is purely client-side (localStorage). Phase 2 will add device fingerprint + backend tracking to prevent resetting trial by clearing localStorage.
⚡ Upgrade & Payments (Frontend)
Upgrade Flow
✓
app/system/upgrade/page.tsx — plan cards + Razorpay checkout
✓
Shows auth modal if not signed in before payment
✓
Pro plan badge shown in topbar + AccountDropdown after payment
✓
Single payment page — used by all CTAs (sidebar, banner, ProGate)
✓
USD pricing option for international users
Add currency toggle (INR / USD) to upgrade page. Backend already supports different amounts.
🚦 Admin Dashboard
Admin UI Pages (at /admin)
✓
Admin login gate (ADMIN_KEY entered in browser, validated against /api/admin/stats)
✓
/admin — KPI dashboard (users, revenue, conversion)
✓
/admin/users — user search, plan change, ban, delete
✓
/admin/subscriptions, /revenue, /logs, /settings pages
✓
/admin/feature-flags — FIXED (was rendering inside AppShell)
Fixed in today's delivery. The page was importing AppShell from the main app causing the whole app to render inside admin. Now uses only admin-style components.
✓
Wire /api/admin/flags/bulk PUT endpoint in worker
Feature flags save button calls this endpoint but it's not yet mounted in the worker routes.
// In asaros-worker/src/routes/admin.ts:
// Add these routes (from featureFlags.ts):
admin.put('/flags/bulk', async (c) => {
// ... update multiple flags
});
admin.put('/flags/:id', async (c) => {
// ... update single flag
});
☁️ Google Drive & Cloud Sync
Drive Token Persistence
✓
useDriveToken.ts — URL param stashing, token apply, restore from localStorage
✓
Drive token survives logout — only clears on manual disconnect or account delete
✓
resetDriveTokenBridge() resets memory state only (not localStorage)
✓
disconnectDriveForUser() — manual disconnect, clears localStorage + mode
✓
backup/page.tsx uses authStore userId (not old userStore)
✓
Google Drive access_token refresh (token expires in ~1 hour)
Current tokens are short-lived. Need to store refresh_token and auto-refresh when access_token expires. The callback route already returns refresh_token — needs to be stored and used.
✓
Dropbox + OneDrive token persistence (same pattern as GDrive)
🔒 PRO Feature Gates
Apply ProGate component to each page — 2 lines per file
How to gate any page (2 lines)
// 1. Add import at top of page.tsx:
import ProGate from '@/components/layout/ProGate';
// 2. Wrap the return in AppShell:
export default function FinancePage() {
return (
<ProGate feature="Finance Tracker" flagId="app_finance">
<AppShell> ... </AppShell>
</ProGate>
);
}
Free — always accessible
✓
Dashboard — no gate needed
✓
Pomodoro Timer — no gate needed
Trial — available during 7-day trial + Pro
✓
Habit Tracker — flagId: app_habits
✓
Mood Journal — flagId: app_journal
✓
My Diary — flagId: app_diary
✓
Smart Notes — flagId: app_notes
✓
Personal Growth — flagId: app_growth
✓
Daily Standup — flagId: app_standup
✓
Study & Learning — flagId: app_study
✓
Search — flagId: app_search
✓
Time Budget — flagId: app_time_budget
✓
Archive — flagId: app_archive
Pro — Pro subscribers only
✓
Finance Tracker — flagId: app_finance
✓
Password Manager — flagId: app_passwords
✓
Health Monitor — flagId: app_health
✓
Life Goals — flagId: app_life_goals
✓
Work Goals — flagId: app_work_goals
✓
Life Kanban — flagId: app_life_kanban
✓
Work Kanban — flagId: app_work_kanban
✓
Project Manager — flagId: app_projects
✓
Book Reader — flagId: app_book_reader
✓
Career Plan — flagId: app_career
✓
Relationships / Contacts — flagId: app_contacts
📱 Mobile UI & Polish
Mobile Optimizations
✓
App Drawer — mobile sidebar as full-width drawer with dark header
✓
Font size A−/A+ controls in drawer header
✓
Bottom nav — 5 tabs: Menu, Home, Notes, Search, Vault
✓
44px touch targets, 16px inputs (no iOS zoom)
✓
Safe area insets (iPhone notch / Dynamic Island)
✓
Swipe to open drawer (left edge only, ignores vertical scroll)
✓
Themes & Fonts page (theme, font size, font family, density)
✓
Anti-flash script for theme (no white flash on dark theme)
✓
InstallPrompt floating bubble removed (topbar button handles it)
✓
Test all pages on real Android device (Chrome DevTools mobile view ≠ real device)
📦 Capacitor Setup
Install & Configure Capacitor
✓
capacitor.config.ts created (appId: com.asaros.app)
✓
next.config.ts: static export mode for BUILD_TARGET=capacitor
✓
Package.json scripts: build:cap, cap:sync, cap:android, cap:ios
✓
Install Capacitor packages
cd asaros-app
npm install @capacitor/core @capacitor/cli @capacitor/android @capacitor/ios
npm install @capacitor/status-bar @capacitor/splash-screen @capacitor/haptics @capacitor/keyboard
✓
Run setup script
chmod +x scripts/setup-mobile.sh
./scripts/setup-mobile.sh
# This installs Capacitor, builds static export, adds platforms, syncs
✓
Add deep link redirect URI for Google OAuth in Capacitor
Google OAuth redirect flow breaks in WebView. Add deep link handler or use custom tab.
// In Google Cloud Console → Credentials → Your OAuth Client:
// Add: asaros://auth/callback
// In capacitor.config.ts add: server: { androidScheme: 'asaros' }
// In AndroidManifest.xml add intent-filter for asaros:// scheme
✓
Fix Razorpay payment in WebView (Capacitor)
Razorpay web SDK loads in WebView. Test payment flow in Android emulator and real device before release.
🤖 Android Build
Android Studio + Play Store
✓
Install Android Studio (if not already installed)
Download from developer.android.com/studio. Install with default SDK settings.
✓
Open Android project and run on emulator
npx cap open android
# Android Studio opens
# Run → Run 'app' on Emulator (create Pixel 7 API 34 emulator if needed)
✓
Generate release keystore (one-time, keep forever)
cd android
keytool -genkeypair -v -keystore release.keystore \
-alias asaros -keyalg RSA -keysize 2048 -validity 10000
# BACK UP release.keystore + passwords securely
✓
Build signed AAB for Play Store
./scripts/build-android-release.sh
# Output: android/app/build/outputs/bundle/release/app-release.aab
✓
Create app in Google Play Console
play.google.com/console → Create app → Fill details → Internal testing → Upload AAB
✓
Play Store assets
Required: 512×512 icon PNG, 1024×500 feature graphic, 2+ screenshots (1080×1920), privacy policy URL, content rating questionnaire, short/full description.
🍎 iOS Build
Xcode + App Store Connect
✓
Mac with Xcode 15+ (required — no workaround)
✓
Apple Developer Program ($99/year)
✓
Open iOS project in Xcode and configure signing
npx cap open ios
# Xcode → Select project → Signing & Capabilities
# Set Team: your Apple Developer account
# Bundle ID: com.asaros.app
✓
App Store Connect — create new app record
appstoreconnect.apple.com → My Apps → + New App → iOS → Bundle ID: com.asaros.app
✓
iOS App Store assets
Required: 1024×1024 icon (no transparency), 6.7" screenshots (1290×2796) — MANDATORY, 5.5" optional, description, keywords (100 chars), support URL, privacy policy URL.
✓
iOS IAP decision — web-only payments or Apple IAP
Apple takes 15–30% of in-app purchases. Recommended for MVP: web-only payments. Show "Subscribe at asaros.app" — legal per App Store guidelines (Section 3.1.3a).
✓
Archive & upload to App Store Connect via Xcode
// Xcode: Product → Archive → Distribute App
// → App Store Connect → Upload → Submit for Review
🌍 Environment & Secrets
Worker Secrets (via wrangler secret put)
✓
GOOGLE_CLIENT_ID + GOOGLE_CLIENT_SECRET — Google OAuth
✓
JWT_SECRET — token signing (64-char hex)
✓
ADMIN_SECRET — admin dashboard key
✓
RAZORPAY_KEY_ID + RAZORPAY_KEY_SECRET — LIVE keys
Currently test keys. Must switch to live keys (rzp_live_xxx) before launch.
npx wrangler secret put RAZORPAY_KEY_ID
npx wrangler secret put RAZORPAY_KEY_SECRET
✓
GOOGLE_DRIVE_CLIENT_ID + GOOGLE_DRIVE_CLIENT_SECRET + REDIRECT_URI — Drive OAuth
✓
App env: NEXT_PUBLIC_WORKER_URL set correctly in Pages
Verify in Cloudflare Pages dashboard → Settings → Environment variables.
🌐 Domain Migration
aos.documateo.com → asaros.app
✓
Register asaros.app domain
✓
Update wrangler.toml routes to asaros.app
routes = [
{ pattern = "asaros.app/api/*", zone_name = "asaros.app" }
]
✓
Update ALLOWED_ORIGINS in wrangler.toml
✓
Update Google OAuth authorized redirect URIs
In Google Cloud Console → Credentials → Your OAuth Client → Add: https://asaros.app/api/auth/google/callback
✓
Update NEXT_PUBLIC_WORKER_URL in Cloudflare Pages to https://asaros.app
✓
Privacy policy & Terms of Service pages at asaros.app/privacy and /terms
Required for App Store and Play Store review. Simple HTML pages are sufficient.
🧪 Testing Checklist
Manual Test — Auth Flows
✓
Register new email account → verify JWT returned → verify logged in
✓
Login with email → logout → login again → app opens correctly
✓
Connect Google Drive → logout → login → verify Drive still connected
✓
Forgot password flow → receive reset email → reset → login with new pw
✓
Delete account → verify all data wiped → verify can re-register
Manual Test — Payments
✓
Complete test payment → verify Pro badge appears in topbar
✓
Verify payment logged in payment_events table
✓
Admin override (grant Pro manually) → verify plan updates
Manual Test — Feature Gates
✓
Free user sees upgrade prompt on Pro-gated page
✓
Trial user (day 1) can access trial-gated features
✓
Admin feature flag toggle takes effect after page refresh