`PLAN.md`

85 lines
# VenturaClaw — Auto-Build Plan

> Run end-to-end without user interaction. Live build viewer at http://127.0.0.1:9785

## Product
**VenturaClaw** — AI command center for small-business commerce, payments, social, support, automation, security. Liquid-glass / Apple Web 4.0 UI. Admin + User roles. Mock-first MCP connectors with real-server hooks.

## Stack
- Next.js 15 App Router + TypeScript + Tailwind
- PostgreSQL (`commerce_claw` DB) + Drizzle
- NextAuth (admin / user RBAC)
- Liquid-glass design system (Figma-export → Tailwind tokens)
- MCP connector registry (mock → real)
- Approval gate on every write/post/charge action
- Audit log on every action
- EXA research agent populates `lib/mcp/connector-specs.json`

## Roles
- **Admin** — connectors, users, audit, billing, MCP config, security, approve/reject
- **User** — drafts, social-post submit-for-approval, run approved workflows; cannot publish, charge, refund, edit DNS, or change billing without approval

## Connectors (v1)

### Commerce
Shopify · Etsy · WooCommerce

### Payments
**Stripe** · **PayPal** · Shopify Payments · Square

### Email / Office
Gmail · Google Sheets · Google Drive · Outlook

### Communication
Slack · RingCentral · Twilio · Discord

### Social (Top 10)
Instagram · Facebook Pages · TikTok · Pinterest · LinkedIn · YouTube Shorts · X / Twitter · Threads · Bluesky · Reddit

### Marketing / Email Campaigns
**Mailchimp** · Klaviyo · Constant Contact · **Action Network**

### Project / Task Management
**ClickUp** · **Asana** · Trello · Monday · Notion

### CRM / Support
HubSpot · Salesforce · Zendesk · Gorgias · Intercom

### Creative
Canva · Figma · Adobe · Paper

### Security / Domain / Hosting
Cloudflare · GoDaddy · Vercel · AWS · Sucuri

### Automation / Data
n8n · Zapier · Make · PostgreSQL · Supabase · Airtable

## Build Phases (auto)
1. **Phase 0 — Scaffold**: Next.js + Tailwind + Drizzle + NextAuth bootstrapped
2. **Phase 1 — DB schema**: users, roles, permissions, connector_accounts, approval_requests, audit_logs, workflows, social_posts, payment_actions, mcp_servers
3. **Phase 2 — RBAC**: admin/user middleware, route gates
4. **Phase 3 — Liquid-glass design system**: GlassCard, LiquidButton, ConnectorTile, ApprovalBadge, FloatingCommandBar, FluidSidebar, StatusOrb
5. **Phase 4 — Mock connector registry**: all categories above with stub read/write actions
6. **Phase 5 — Core screens**: Dashboard, Connectors, Social Publisher, Payments, Orders, AI Command Center, Workflow Builder, Approval Queue, Audit Log, Settings, /admin/*
7. **Phase 6 — EXA spec research**: spawn `exa-agent` for each connector → write `lib/mcp/connector-specs.json` + `docs/research/connectors.md`
8. **Phase 7 — Real MCP wiring**: graduate Shopify, Stripe, PayPal, Gmail, Slack, Cloudflare from mock → real (others stay mock until v2)
9. **Phase 8 — Approval gate + audit log**: enforce on every write
10. **Phase 9 — Smoke tests**: Playwright golden-path on each role

## Live build viewer
- HTTP server on **127.0.0.1:9785**
- Server-Sent Events stream from `logs/build-events.jsonl`
- Liquid-glass HTML preview matching the planned design system (so Steve sees the target aesthetic while the build runs)
- Per-phase status: pending / running / done / blocked
- Auto-refresh, no interaction required

## Auto-execution
`scripts/auto-build.sh` — single entry point. Runs all phases sequentially, emits events to `logs/build-events.jsonl`, never prompts.

Runs as pm2 service `ventura-claw-builder`. Viewer runs as pm2 service `ventura-claw-viewer` on :9785.

## Out of scope (v1)
- Real OAuth app review submissions (manual; Steve does these)
- App-store distribution
- Billing/Stripe-Connect for end-tenants