Daily Note — 2026-04-13

clara-code — Sprint 3 Session

sync-herus —push

Synced boilerplate commands (including new setup-email.md) to all 55 Heru projects
5 projects pushed to remote (auset-packages, clara-code, maat-protocol, empresss-eats, kingluxuryservices-v2)
41 already current, 1 failed (duck_talk — third-party fork, expected)
Note: duck_talk should be removed from the Heru sync manifest

Goose Competitive Analysis

Reviewed Block’s Goose project (now AAIF/Linux Foundation, 41k stars, built in Rust)
Key differentiation confirmed: Goose = general-purpose horizontal agent, Clara Code = voice-first IDE-native vertical product
Goose validates the space; their gap is voice + in-IDE integration

5-Surface Dispatch Plan

Created and pushed 6 Cursor agent prompts to prompts/2026/April/13/1-not-started/:
- 01: Frontend — wire dashboard to /api/keys backend (replaces localStorage)
- 02: Backend — Svix webhook verification, /api/keys CRUD verify
- 03: CLI/TUI — end-to-end voice wire, first-run experience
- 04: IDE Extension — activate voice bar, wire to backend
- 05: API — v1 versioning, rate limiting, OpenAPI docs
- 06: Stripe checkout — full checkout + subscription flow (unblocked)
All prompts archived to HQ at quik-nation-ai-boilerplate/prompts/archive/clara-code/

Stripe Live Keys — BLK-01 RESOLVED

Merchant account approved — live keys received from Mo
Stored in SSM:
- /clara-code/STRIPE_PUBLISHABLE_KEY (SecureString)
- /clara-code/STRIPE_SECRET_KEY (SecureString)
- /clara-code/prod/STRIPE_PUBLISHABLE_KEY (SecureString)
- /clara-code/prod/STRIPE_SECRET_KEY (SecureString)
STRIPE_SECRET_KEY wired as Wrangler runtime secret for production (clara-code) and preview (clara-code-preview)
Note: NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY is build-time — must be exported from SSM before npm run pages:build

v0.1.0 Release Commit

0e422725 — feat(platform): v0.1.0 — Stripe live, custom domains, 5-surface dispatch, email command
Changes: wrangler.toml custom domain routes, .gitignore (.open-next/), docs/cloudflare/ guides, docs/auto-claude/ MVP tracking files, version bump 0.0.5→0.1.0
All CHANGELOG.md files updated (frontend, docs, root)

email setup boilerplate command

Clara Code is positioned as voice-first IDE-native product (not general-purpose like Goose)
Stripe Hosted Checkout (not Elements) for simplicity and security
NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY must be pulled from SSM at build time, not hardcoded
Root wrangler.toml deprecated — frontend/wrangler.toml is the single deployment config

Blocker	Status	Owner
BLK-01 Stripe merchant account	✅ RESOLVED	—
BLK-02 Clerk env vars in CF Workers	🚫 Active	Mo — add 2 vars to CF dashboard
BLK-03 Svix webhook verification	⏳ Queued (prompt 02)	Cursor/QCS1
BLK-04 IDE/CLI surfaces	⏳ Queued (prompts 03-04)	Cursor/QCS1
BLK-05 Dashboard localStorage	⏳ Queued (prompt 01)	Cursor/QCS1

Mo action: Add NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY + CLERK_SECRET_KEY to CF Workers preview env (unlocks sign-in on develop.claracode.ai)
QCS1: Run /pickup-prompt from boilerplate HQ archive path — execute prompts 01-06 in sequence
Backend: Rebuild npm run pages:build with live NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY before next CF deploy
duck_talk: Remove from sync-herus manifest (not a Quik Nation project)

WEB-05 /review-code: Grade A-. 24/24 tests pass. Dead code ternary removed from route.ts (userId guaranteed non-null post-guard). Branch coverage 83→90%. package-lock.json confirmed intentional for CF Pages.
WEB-06 re-queue: QCS1 had falsely “completed” WEB-06 without writing tests (moved prompt file only). Identified the failure, re-queued with corrective instructions. QCS1 executed correctly: 4 tests added, route.ts 90→100% branch.
WEB-07: Clara logo replaces mic SVG in ClaraNavbar + landing hero. Asset already existed.
WEB-08/09: Sign-in + sign-up pages now have dark Clerk appearance config + Clara logo header.
QCS1 also self-dispatched a Cloudflare Workers / OpenNext migration.
39 prompts archived to HQ, removed from repo.

frontend/package-lock.json stays committed — CF Pages runs npm install --legacy-peer-deps
Auth guard placement: if (!userId) before action === 'stop' — every code path requires auth
Sign-in/sign-up use Clerk components with appearance props, NOT custom HTML forms