FamilyFlow AI

FamilyFlow AI is a staged Next.js web app for family planning. Stage 5A added role-aware household management, Stage 5B hardened the deployment path, and the current build now uses PostgreSQL through Prisma for production persistence.

• Stage 1: dashboard, pantry-aware meals, budget planner
• Stage 2: chores, reminders, and reusable routines
• Stage 3: AI assistant, AI meal planning, and AI budget coaching
• Stage 4: authenticated household workspaces with invite codes and persistent database storage
• Stage 5A: household roles, member management, and invite controls
• Stage 5B: production hardening and deployment readiness
• Stage 5C: PostgreSQL persistence for production deployment

1. Review .env or copy .env.example values into your local environment.
2. Set OPENAI_API_KEY if you want the AI features enabled.
3. Run npm run dev.
4. Open http://localhost:3000.
5. Create a household workspace or join one with an invite code.

• npm run dev: start the development server
• npm run lint: run ESLint
• npm run build: production build
• npm run check:env: verify deployment env settings and database path

1. Set DATABASE_URL to a PostgreSQL connection string.
2. Set NEXTAUTH_URL to the final public app URL.
3. Set NEXTAUTH_SECRET to a long random value of at least 32 characters. The deployed app now requires this explicitly.
4. Set OPENAI_API_KEY if AI features should be enabled in production.
5. Set RESEND_API_KEY and REMINDER_FROM_EMAIL if reminder emails, password reset, and email verification should be enabled.
6. Set REMINDER_DISPATCH_SECRET if you want a cron job or external scheduler to trigger reminder emails outside the app.
7. Run npm run check:env.
8. Run npm run db:generate.
9. Run npm run build.

1. Create a new Railway project from this GitHub repo.
2. Add a Railway PostgreSQL service to the project.
3. Set DATABASE_URL on the web service to the PostgreSQL connection string from Railway.
4. Set NEXTAUTH_SECRET to a long random value.
5. Set NEXTAUTH_URL to your Railway public URL, or rely on RAILWAY_PUBLIC_DOMAIN.
6. Set OPENAI_API_KEY if you want AI features enabled.
7. Set RESEND_API_KEY and REMINDER_FROM_EMAIL if you want reminder emails, password reset, and email verification enabled.
8. Set REMINDER_DISPATCH_SECRET if you want Railway cron or another scheduler to call dispatch-pending route.
9. Railway will use railway.json, build with npm run build, run npm run db:migrate, start with npm run start, and health check health route at /api/health.

• src/app/page.tsx: session-aware entry page
• src/components/auth-panel.tsx: sign-in / create / join flow
• src/components/familyflow-app.tsx: authenticated household workspace UI
• src/app/api/auth/[...nextauth]/route.ts: Auth.js route
• src/app/api/auth/register/route.ts: household registration and join route
• src/app/api/auth/forgot-password/route.ts: password reset request route
• src/app/api/auth/reset-password/route.ts: password reset completion route
• src/app/api/auth/resend-verification/route.ts: resend verification email route
• src/app/api/auth/verify-email/route.ts: email verification route
• src/app/api/health/route.ts: Railway health check route
• src/app/api/reminders/dispatch-pending/route.ts: background reminder email dispatch route
• src/app/api/workspace/route.ts: household workspace persistence route
• src/app/api/assistant/route.ts: OpenAI-backed planning route
• src/app/reset-password/page.tsx: reset password page
• src/app/verify-email/page.tsx: email verification page
• src/lib/db.ts: Prisma client setup
• src/lib/account-security.ts: verification and password reset helpers
• src/lib/env.ts: shared environment and database path helpers
• src/lib/email.ts: shared outgoing mail helper
• src/lib/validation.ts: API input validation helpers
• src/lib/auth.ts: Auth.js configuration
• src/lib/reminders.ts: reminder email dispatch helpers
• src/lib/workspace.ts: shared household persistence helpers
• prisma/schema.prisma: PostgreSQL data model
• prisma/migrations/20260314071000_init_postgres/migration.sql: initial production schema

• Production persistence now expects PostgreSQL through DATABASE_URL.
• AI actions still work only when OPENAI_API_KEY is set.
• Email verification and password reset turn on automatically when RESEND_API_KEY and REMINDER_FROM_EMAIL are configured. If mail is not configured, new accounts stay usable for local/dev sign-in.
• Resend requires the from address to match a verified sending domain. See Resend's domain mismatch guidance.
• next.config.ts now applies baseline security headers for all routes.
• railway.json configures Railway build, start, restart, and healthcheck settings.
• The SQLite-based deployment path has been replaced for production usage; Railway should now use PostgreSQL.