@thierrynakoa/fire-flow 12.2.1 → 13.0.1

package/skills-library/deployment-security/unique-features-ai-strategy-plaid-security.md

@@ -0,0 +1,1613 @@
+# Budget App: Unique Features, AI Strategy & Plaid Security Guide
+
+## Table of Contents
+
+1. [AI Providers with Edge Functions Support](#ai-providers-with-edge-functions-support)
+2. [Unique Features Competitors Don't Have](#unique-features-competitors-dont-have)
+3. [Plaid Security Documentation Requirements](#plaid-security-documentation-requirements)
+4. [Development Roadmap Before Beta](#development-roadmap-before-beta)
+5. [Quick Implementation Guides](#quick-implementation-guides)
+
+---
+
+## AI Providers with Edge Functions Support
+
+### Why Edge Functions Matter for BYOK
+
+**Client-Side API Calls (Wasteful):**
+```typescript
+// ❌ Every request goes through full round-trip
+User → OpenAI API → Response
+// Cost: Full API pricing
+// Latency: High (direct to OpenAI servers)
+// Caching: None
+```
+
+**Edge Functions (Smart):**
+```typescript
+// ✅ Requests can be cached, optimized, and protected
+User → Your Edge Function → OpenAI API → Response
+// Cost: Reduced (caching, prompt optimization)
+// Latency: Lower (edge locations near users)
+// Security: Rate limiting, abuse prevention
+```
+
+### AI Providers Comparison for Edge Functions
+
+| Provider | Edge Function Support | Best For | Pricing | Recommendation |
+|----------|---------------------|----------|---------|----------------|
+| **OpenAI** | ✅ Excellent | General chat, reasoning | $0.15-0.60/1M tokens | ⭐ BEST - Most versatile |
+| **Anthropic (Claude)** | ✅ Excellent | Long docs, analysis | $3-15/1M tokens | ⭐ BEST for forms |
+| **Google Gemini** | ✅ Good | Multimodal, free tier | $0.075-3.50/1M tokens | 💰 CHEAPEST |
+| **Groq** | ✅ Excellent | Speed (fast inference) | $0.27-0.79/1M tokens | ⚡ FASTEST |
+| **Together AI** | ✅ Good | Open models | $0.18-0.90/1M tokens | 🔓 Open source |
+
+### Recommended Multi-Provider Setup
+
+**Strategy: Support all major providers, let users choose**
+
+#### Implementation with Supabase Edge Functions
+
+**File: `supabase/functions/ai-chat/index.ts`**
+
+```typescript
+import { serve } from 'https://deno.land/std@0.168.0/http/server.ts'
+import { createClient } from 'https://esm.sh/@supabase/supabase-js@2'
+
+serve(async (req) => {
+  const supabase = createClient(
+    Deno.env.get('SUPABASE_URL') ?? '',
+    Deno.env.get('SUPABASE_ANON_KEY') ?? '',
+    { global: { headers: { Authorization: req.headers.get('Authorization')! } } }
+  )
+
+  // Verify authentication
+  const { data: { user }, error: authError } = await supabase.auth.getUser()
+  if (authError || !user) {
+    return new Response('Unauthorized', { status: 401 })
+  }
+
+  // Get user's AI settings
+  const { data: settings } = await supabase
+    .from('user_settings')
+    .select('ai_provider, api_key, preferred_model')
+    .eq('user_id', user.id)
+    .single()
+
+  if (!settings?.api_key) {
+    return new Response(JSON.stringify({
+      error: 'No API key configured. Please add your API key in Settings.'
+    }), { status: 400 })
+  }
+
+  const { messages, max_tokens = 1000 } = await req.json()
+
+  try {
+    let response
+
+    switch (settings.ai_provider) {
+      case 'openai':
+        response = await callOpenAI(settings.api_key, settings.preferred_model, messages, max_tokens)
+        break
+      case 'anthropic':
+        response = await callAnthropic(settings.api_key, settings.preferred_model, messages, max_tokens)
+        break
+      case 'gemini':
+        response = await callGemini(settings.api_key, settings.preferred_model, messages, max_tokens)
+        break
+      default:
+        throw new Error('Unsupported AI provider')
+    }
+
+    // Log usage for user's reference
+    await supabase.from('ai_usage_logs').insert({
+      user_id: user.id,
+      provider: settings.ai_provider,
+      model: settings.preferred_model,
+      input_tokens: response.usage.prompt_tokens,
+      output_tokens: response.usage.completion_tokens,
+      estimated_cost: calculateCost(settings.ai_provider, response.usage)
+    })
+
+    return new Response(JSON.stringify(response), {
+      headers: { 'Content-Type': 'application/json' }
+    })
+  } catch (error) {
+    return new Response(JSON.stringify({
+      error: error.message
+    }), { status: 500 })
+  }
+})
+
+// OpenAI API call
+async function callOpenAI(apiKey: string, model: string, messages: any[], max_tokens: number) {
+  const response = await fetch('https://api.openai.com/v1/chat/completions', {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${apiKey}`
+    },
+    body: JSON.stringify({
+      model: model || 'gpt-4o-mini',
+      messages,
+      max_tokens
+    })
+  })
+
+  if (!response.ok) {
+    const error = await response.json()
+    throw new Error(error.error?.message || 'OpenAI API error')
+  }
+
+  return await response.json()
+}
+
+// Anthropic API call
+async function callAnthropic(apiKey: string, model: string, messages: any[], max_tokens: number) {
+  // Convert OpenAI format to Anthropic format
+  const system = messages.find(m => m.role === 'system')?.content || ''
+  const anthropicMessages = messages
+    .filter(m => m.role !== 'system')
+    .map(m => ({ role: m.role, content: m.content }))
+
+  const response = await fetch('https://api.anthropic.com/v1/messages', {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'x-api-key': apiKey,
+      'anthropic-version': '2023-06-01'
+    },
+    body: JSON.stringify({
+      model: model || 'claude-3-5-sonnet-20241022',
+      system,
+      messages: anthropicMessages,
+      max_tokens
+    })
+  })
+
+  if (!response.ok) {
+    const error = await response.json()
+    throw new Error(error.error?.message || 'Anthropic API error')
+  }
+
+  const data = await response.json()
+
+  // Convert back to OpenAI format for consistency
+  return {
+    choices: [{
+      message: {
+        role: 'assistant',
+        content: data.content[0].text
+      }
+    }],
+    usage: {
+      prompt_tokens: data.usage.input_tokens,
+      completion_tokens: data.usage.output_tokens
+    }
+  }
+}
+
+// Gemini API call
+async function callGemini(apiKey: string, model: string, messages: any[], max_tokens: number) {
+  // Convert to Gemini format
+  const contents = messages.map(m => ({
+    role: m.role === 'assistant' ? 'model' : 'user',
+    parts: [{ text: m.content }]
+  }))
+
+  const response = await fetch(
+    `https://generativelanguage.googleapis.com/v1beta/models/${model || 'gemini-1.5-flash'}:generateContent?key=${apiKey}`,
+    {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        contents,
+        generationConfig: {
+          maxOutputTokens: max_tokens
+        }
+      })
+    }
+  )
+
+  if (!response.ok) {
+    const error = await response.json()
+    throw new Error(error.error?.message || 'Gemini API error')
+  }
+
+  const data = await response.json()
+
+  // Convert back to OpenAI format
+  return {
+    choices: [{
+      message: {
+        role: 'assistant',
+        content: data.candidates[0].content.parts[0].text
+      }
+    }],
+    usage: {
+      prompt_tokens: data.usageMetadata.promptTokenCount,
+      completion_tokens: data.usageMetadata.candidatesTokenCount
+    }
+  }
+}
+
+function calculateCost(provider: string, usage: any) {
+  const pricing = {
+    openai: { input: 0.15, output: 0.60 },  // per 1M tokens (gpt-4o-mini)
+    anthropic: { input: 3.00, output: 15.00 }, // per 1M tokens (claude-3.5-sonnet)
+    gemini: { input: 0.075, output: 0.30 }  // per 1M tokens (gemini-1.5-flash)
+  }
+
+  const prices = pricing[provider] || pricing.openai
+  return (
+    (usage.prompt_tokens / 1000000) * prices.input +
+    (usage.completion_tokens / 1000000) * prices.output
+  )
+}
+```
+
+**Deploy:**
+
+```bash
+supabase functions deploy ai-chat
+```
+
+### Benefits of This Architecture
+
+✅ **User Savings:**
+- Prompt optimization reduces token usage
+- Caching reduces duplicate requests
+- Error handling prevents wasted calls
+
+✅ **Rate Limiting:**
+- Prevent abuse (user accidentally writes infinite loop)
+- Daily/monthly usage caps
+- Cost alerts
+
+✅ **Analytics:**
+- Track usage per user
+- Show estimated costs
+- Help users optimize spending
+
+✅ **Multi-Provider Support:**
+- Users switch providers easily
+- Price comparison built-in
+- Fallback if one provider down
+
+### Frontend Settings UI
+
+```typescript
+// src/components/Settings/AIProviderSettings.tsx
+export function AIProviderSettings() {
+  const [provider, setProvider] = useState('openai')
+  const [apiKey, setApiKey] = useState('')
+  const [model, setModel] = useState('gpt-4o-mini')
+
+  const providers = {
+    openai: {
+      name: 'OpenAI',
+      models: [
+        { id: 'gpt-4o-mini', name: 'GPT-4o Mini', cost: '$0.15/1M tokens' },
+        { id: 'gpt-4o', name: 'GPT-4o', cost: '$2.50/1M tokens' }
+      ],
+      keyFormat: 'sk-proj-...',
+      getKeyUrl: 'https://platform.openai.com/api-keys'
+    },
+    anthropic: {
+      name: 'Anthropic Claude',
+      models: [
+        { id: 'claude-3-5-sonnet-20241022', name: 'Claude 3.5 Sonnet', cost: '$3.00/1M tokens' },
+        { id: 'claude-3-5-haiku-20241022', name: 'Claude 3.5 Haiku', cost: '$0.80/1M tokens' }
+      ],
+      keyFormat: 'sk-ant-...',
+      getKeyUrl: 'https://console.anthropic.com/settings/keys'
+    },
+    gemini: {
+      name: 'Google Gemini',
+      models: [
+        { id: 'gemini-1.5-flash', name: 'Gemini 1.5 Flash', cost: '$0.075/1M tokens' },
+        { id: 'gemini-1.5-pro', name: 'Gemini 1.5 Pro', cost: '$1.25/1M tokens' }
+      ],
+      keyFormat: 'AIza...',
+      getKeyUrl: 'https://aistudio.google.com/apikey'
+    }
+  }
+
+  return (
+    <div className="ai-settings">
+      <h2>AI Provider Settings</h2>
+
+      <div className="provider-select">
+        <label>Choose AI Provider:</label>
+        <select value={provider} onChange={(e) => setProvider(e.target.value)}>
+          {Object.entries(providers).map(([key, { name }]) => (
+            <option key={key} value={key}>{name}</option>
+          ))}
+        </select>
+      </div>
+
+      <div className="model-select">
+        <label>Model:</label>
+        <select value={model} onChange={(e) => setModel(e.target.value)}>
+          {providers[provider].models.map(m => (
+            <option key={m.id} value={m.id}>
+              {m.name} - {m.cost}
+            </option>
+          ))}
+        </select>
+      </div>
+
+      <div className="api-key-input">
+        <label>API Key:</label>
+        <input
+          type="password"
+          value={apiKey}
+          onChange={(e) => setApiKey(e.target.value)}
+          placeholder={providers[provider].keyFormat}
+        />
+        <a href={providers[provider].getKeyUrl} target="_blank">
+          Get API Key →
+        </a>
+      </div>
+
+      <div className="usage-stats">
+        <h3>Your Usage This Month</h3>
+        <p>Total calls: 1,234</p>
+        <p>Estimated cost: $2.45</p>
+      </div>
+
+      <button onClick={saveSettings}>Save Settings</button>
+    </div>
+  )
+}
+```
+
+---
+
+## Unique Features Competitors Don't Have
+
+### ⭐ Category 1: GTA Tax Integration (YOUR CURRENT ADVANTAGE)
+
+**You Already Have:**
+- ✅ Form 433-A/B (Collection Information Statement)
+- ✅ Form 656 (Offer in Compromise)
+- ✅ Form 9465 (Installment Agreement)
+
+**Expand With:**
+
+#### 1.1 Real-Time Tax Debt Calculator
+
+```typescript
+// Calculate current GTA debt with penalties & interest
+interface TaxDebtCalculation {
+  originalDebt: number
+  accruedInterest: number  // GTA rate: 8% as of 2025
+  penaltiesOwed: number    // Failure-to-pay: 0.5%/month
+  totalDebt: number
+  projectedDebtIn6Months: number
+  projectedDebtIn12Months: number
+}
+
+// Show visual timeline
+"If you don't act:
+  Today: $10,000
+  6 months: $10,650
+  12 months: $11,300
+  24 months: $12,600"
+```
+
+**Unique Value:** No competitor shows GTA debt projection over time
+
+#### 1.2 GTA Form Auto-Fill from Budget Data
+
+```typescript
+// User enters expenses in budget → Auto-populates Form 433-A
+monthlyExpenses = {
+  housing: 1500,
+  utilities: 200,
+  food: 600,
+  transportation: 400
+}
+
+// Button: "Export to Form 433-A" → Pre-filled PDF
+```
+
+**Unique Value:** Saves 2-3 hours of data entry
+
+#### 1.3 OIC Approval Predictor (AI-Powered)
+
+```typescript
+// AI analyzes user's financials → Predicts approval odds
+analyzeOICApproval({
+  income: 3000,
+  expenses: 3500,
+  assets: 50000,
+  debt: 15000
+})
+
+// Returns:
+{
+  approvalProbability: 85%,
+  recommendedOffer: 12000,
+  reasoning: "Strong case due to monthly insolvency (-$500)"
+  improvements: [
+    "Add HELOC denial letters (+10% approval)",
+    "Document wife's recent job loss (+5% approval)"
+  ]
+}
+```
+
+**Unique Value:** No other budget app has GTA negotiation intelligence
+
+### ⭐ Category 2: AI-Powered Debt Coaching (MASSIVE OPPORTUNITY)
+
+#### 2.1 Personalized Debt Payoff Strategy (AI Snowball vs Avalanche)
+
+**Feature:** AI analyzes your debts and recommends optimal strategy
+
+```typescript
+interface DebtPayoffAnalysis {
+  currentDebts: Debt[]
+  strategies: {
+    avalanche: {
+      totalInterest: 5200,
+      timeToPayoff: "28 months",
+      monthlyPayment: 850
+    },
+    snowball: {
+      totalInterest: 6100,
+      timeToPayoff: "26 months",  // Faster but costs more
+      monthlyPayment: 850
+    },
+    aiOptimized: {
+      totalInterest: 5400,
+      timeToPayoff: "24 months",  // Best of both!
+      monthlyPayment: 900,
+      reasoning: "Pay minimums except $600 to Credit Card #2 (0% APR ends in 3 months)"
+    }
+  }
+}
+```
+
+**AI Prompt:**
+```
+Analyze these debts and recommend optimal payoff strategy:
+1. Credit Card 1: $8,000 @ 24% APR, $200 minimum
+2. Credit Card 2: $12,000 @ 0% APR (ends May 2026), $300 minimum
+3. Personal Loan: $15,000 @ 8% APR, $350 minimum
+4. GTA Debt: $10,000 @ 8% GTA rate, $150 installment
+
+User has $900/month to put toward debt. Recommend:
+1. Which debt to prioritize each month
+2. Total interest saved vs avalanche/snowball
+3. Payoff timeline
+4. When to rebalance strategy
+
+Consider:
+- 0% APR promotional periods
+- GTA penalty accrual rates
+- Psychological wins (snowball effect)
+```
+
+**Unique Value:** Dynamic strategy that adapts to promotional periods
+
+#### 2.2 "What If" Debt Simulator
+
+**Feature:** Interactive debt scenarios
+
+```typescript
+// User adjusts sliders, AI shows impact
+scenarios = [
+  {
+    scenario: "What if I get $5,000 tax refund?",
+    recommendation: "Put $4,000 to Credit Card #1 (highest APR), save $850 in interest",
+    newPayoffDate: "22 months (save 2 months)"
+  },
+  {
+    scenario: "What if I pick up side gig for $500/month?",
+    recommendation: "Pay off all debt 8 months faster, save $1,200 in interest",
+    motivation: "That's $14,400/year income → $1,200 savings = 8% return!"
+  }
+]
+```
+
+#### 2.3 AI Financial Coach Chat (Contextual)
+
+**Feature:** AI that knows your full financial situation
+
+```typescript
+// User: "Should I pay off my car loan early?"
+// AI has access to:
+{
+  carLoan: { balance: 15000, rate: 4.5% },
+  creditCardDebt: { balance: 8000, rate: 22% },
+  emergencyFund: 2000,
+  monthlyIncome: 4000
+}
+
+// AI Response:
+"No, prioritize your credit card debt first. Here's why:
+1. Your credit card rate (22%) is 5x higher than car loan (4.5%)
+2. Every $100 to credit card saves $22/year vs $4.50 to car
+3. First build emergency fund to $6,000 (3 months expenses)
+4. THEN tackle car loan
+
+Your optimal order:
+1. Emergency fund to $6,000 (2 months)
+2. Credit card debt payoff (12 months)
+3. Car loan early payoff (18 months)
+
+You'll save $3,200 in interest vs paying car first!"
+```
+
+**Unique Value:** Contextual advice based on user's ACTUAL finances
+
+### ⭐ Category 3: Gamification & Motivation
+
+#### 3.1 Debt Payoff Milestones with Celebrations
+
+**Feature:** Visual progress + dopamine hits
+
+```typescript
+milestones = [
+  {
+    target: "Pay off first $1,000",
+    reward: "🎉 First Victory! Unlock: Debt-Free Badge",
+    visualEffect: "Confetti animation"
+  },
+  {
+    target: "Reach 25% debt-free",
+    reward: "🏆 Quarter Milestone! Unlock: Budget Ninja Title",
+    unlocks: "Advanced debt calculator"
+  },
+  {
+    target: "Pay off entire debt",
+    reward: "🎊 DEBT FREE! Unlock: Financial Freedom Certificate (printable PDF)",
+    celebration: "Video message from Dave Ramsey (if partnership) or AI-generated celebration"
+  }
+]
+```
+
+**Biblical tie-in for church users:**
+- "The borrower is slave to the lender" (Proverbs 22:7)
+- Milestone: "Breaking the chains! You've paid off $X in debt!"
+
+#### 3.2 Debt Payoff Leaderboard (Anonymous/Opt-in)
+
+**Feature:** Community motivation
+
+```
+This Month's Debt Warriors:
+1. User#1234 - Paid off $2,400 💪
+2. User#5678 - Paid off $1,800 🔥
+3. You - Paid off $1,200 ⭐
+
+Church Community Total: $45,000 paid off this month!
+```
+
+**Privacy:** Anonymous user IDs, opt-in only
+
+#### 3.3 Visual Debt Thermometer
+
+**Feature:** Physical progress indicator
+
+```
+[==================--] 90% Debt-Free!
+
+$45,000 paid ████████████████████░░ $50,000 original debt
+Only $5,000 to go!
+
+At current pace: Debt-free by March 2026 (4 months!)
+```
+
+### ⭐ Category 4: Smart Automation Nobody Has
+
+#### 4.1 Bill Negotiation Assistant (AI-Powered)
+
+**Feature:** AI generates negotiation scripts + tracks outcomes
+
+```typescript
+// User selects: "Negotiate with Comcast (internet $89/mo)"
+aiGenerates({
+  script: `
+Hi, I've been a loyal customer for 3 years paying $89/month for internet.
+I see new customers get the same speed for $49/month.
+Can you match that rate or I'll need to switch to [competitor]?
+  `,
+  alternatives: [
+    "AT&T Fiber: $55/month for 500 Mbps",
+    "T-Mobile Home Internet: $50/month"
+  ],
+  expectedSavings: "$40/month = $480/year",
+  successRate: "73% of users report savings with this script"
+})
+
+// After negotiation:
+track({
+  outcome: "Success - reduced to $59/month",
+  monthlySavings: 30,
+  annualSavings: 360
+})
+
+// Apply to budget automatically
+```
+
+**Unique Value:** Active cost reduction, not just tracking
+
+#### 4.2 Subscription Tracker with Cancellation Reminders
+
+**Feature:** Detect subscriptions, remind before renewals
+
+```typescript
+// Plaid detects recurring charges
+subscriptions = [
+  {
+    name: "Netflix",
+    amount: 15.99,
+    nextBilling: "2026-02-01",
+    usageData: "Last used: 45 days ago",  // From AI analysis of patterns
+    recommendation: "Low usage - Consider canceling? Save $192/year"
+  },
+  {
+    name: "Planet Fitness",
+    amount: 24.99,
+    nextBilling: "2026-02-05",
+    usageData: "No charges detected (not swiping card)",
+    alert: "⚠️ You haven't visited in 60 days. Cancel to save $300/year?"
+  }
+]
+
+// 7 days before renewal: Send email/notification
+"Your Planet Fitness renewal is in 7 days ($24.99). You haven't used it in 60 days. Cancel?"
+[Cancel Now] [Keep Subscription]
+```
+
+#### 4.3 Smart Savings Goals with Auto-Transfer
+
+**Feature:** AI calculates optimal savings timing
+
+```typescript
+// User goal: "Save $2,000 for emergency fund by June 2026"
+aiCalculates({
+  monthsRemaining: 5,
+  requiredMonthlySaving: 400,
+  currentAverageSavings: 250,
+
+  recommendation: {
+    strategy: "You need $150 more per month. Here's how:",
+    tactics: [
+      "Cancel unused subscriptions: +$65/month",
+      "Reduce dining out (cut 2 meals): +$60/month",
+      "Side gig (5 hours/month at $20/hr): +$100/month"
+    ],
+    autoTransferSchedule: [
+      { date: "2026-02-15", amount: 200, reason: "After paycheck 1" },
+      { date: "2026-02-28", amount: 200, reason: "After paycheck 2" }
+    ]
+  }
+})
+```
+
+### ⭐ Category 5: Church/Ministry Features (YOUR NICHE!)
+
+#### 5.1 Financial Peace University (FPU) Integration
+
+**Feature:** Built-in Dave Ramsey principles + tracking
+
+```typescript
+fpuLessons = [
+  {
+    lesson: 1,
+    title: "The Total Money Makeover",
+    completed: true,
+    actionItems: [
+      "Create $1,000 emergency fund" // Track in app
+    ]
+  },
+  {
+    lesson: 2,
+    title: "Debt Snowball",
+    inProgress: true,
+    tracking: {
+      smallestDebt: { paid: 800, remaining: 200 },
+      quickWin: "Only $200 to first debt-free win!"
+    }
+  }
+]
+```
+
+**Partnership idea:** Reach out to Ramsey Solutions for API/integration
+
+#### 5.2 Tithing Tracker (10% Giving Goal)
+
+**Feature:** Track giving vs income
+
+```typescript
+givingDashboard = {
+  monthlyIncome: 4000,
+  tithingGoal: 400,  // 10%
+  actualGiving: 350,
+  status: "87.5% of goal",
+  encouragement: "You're almost there! $50 more to reach your giving goal.",
+
+  yearToDate: {
+    income: 48000,
+    giving: 4200,  // 8.75%
+    onTrack: false,
+    shortfall: 600  // Need $600 more to hit 10% YTD
+  },
+
+  biblicalEncouragement: "Each of you should give what you have decided in your heart to give, not reluctantly or under compulsion, for God loves a cheerful giver. - 2 Corinthians 9:7"
+}
+```
+
+#### 5.3 Ministry Expense Tracker (For Church Staff)
+
+**Feature:** Separate personal vs ministry expenses
+
+```typescript
+categories = {
+  personal: {
+    food: 600,
+    housing: 1500
+  },
+  ministry: {
+    bibles: 50,
+    outreach: 100,
+    mileage: 75  // Auto-calculate at GTA rate
+  }
+}
+
+// Generate forms
+reports = {
+  accountabilityReport: "Monthly ministry spending report for church board",
+  taxDeduction: "Schedule A deductions for ministry expenses",
+  reimbursementRequest: "Submit to church for reimbursement"
+}
+```
+
+### ⭐ Category 6: Advanced Financial Wellness
+
+#### 6.1 Cash Flow Forecasting (6-Month Projection)
+
+**Feature:** Predict future financial position
+
+```typescript
+forecast = {
+  currentMonth: {
+    income: 4000,
+    expenses: 3500,
+    surplus: 500
+  },
+  nextMonth: {
+    income: 4000,
+    expenses: 3900,  // Higher (car insurance due)
+    surplus: 100,
+    alert: "⚠️ Low surplus next month - car insurance due ($400)"
+  },
+  sixMonthOutlook: {
+    totalSurplus: 2400,
+    majorExpenses: [
+      { date: "2026-03-15", item: "Car insurance", amount: 400 },
+      { date: "2026-06-01", item: "Property tax", amount: 1200 }
+    ],
+    recommendation: "Set aside $267/month for upcoming large expenses"
+  }
+}
+```
+
+#### 6.2 Net Worth Tracker (Real Estate + Investments)
+
+**Feature:** Comprehensive wealth tracking
+
+```typescript
+netWorth = {
+  assets: {
+    checking: 5000,      // From Plaid
+    savings: 10000,      // From Plaid
+    home: 293000,        // Zillow API integration
+    car: 15000,          // User-entered, depreciate 15%/year
+    retirement401k: 50000 // From Plaid
+  },
+  liabilities: {
+    creditCards: 8000,
+    carLoan: 12000,
+    irsDebt: 10000
+  },
+  netWorth: 343000,
+
+  trend: {
+    lastMonth: 340000,
+    change: +3000,
+    percentChange: +0.88%
+  },
+
+  chart: "Line graph showing net worth over time"
+}
+```
+
+**Zillow Integration:**
+```typescript
+// Update home value monthly
+const response = await fetch(`https://zillow-api.com/properties/${zpid}`)
+const homeValue = response.data.zestimate
+```
+
+#### 6.3 Credit Score Impact Simulator
+
+**Feature:** Show how financial decisions affect credit
+
+```typescript
+// User: "What if I pay off Credit Card #1?"
+simulator = {
+  currentScore: 680,
+  projectedScore: 715,
+  increase: +35,
+  breakdown: {
+    creditUtilization: "Drops from 75% to 45% (+20 points)",
+    paymentHistory: "On-time payments continue (+5 points)",
+    accountAge: "No change (0 points)",
+    creditMix: "No change (0 points)",
+    recentInquiries: "No change (0 points)"
+  },
+  timeline: "Score increase visible in 30-45 days after payment posts"
+}
+```
+
+---
+
+## Plaid Security Documentation Requirements
+
+### What Plaid Requires for Production Access
+
+Based on research and Plaid's Developer Policy, you need:
+
+#### 1. Security Questionnaire
+
+**Location:** Plaid Dashboard → Production Access → Security Questionnaire
+
+**Required Documents:**
+
+```
+✅ 1. Privacy Policy
+   - How you collect, use, and store financial data
+   - User rights (access, deletion, correction)
+   - Data retention policy
+   - Third-party sharing (if any)
+
+✅ 2. Terms of Service
+   - User agreement for using your app
+   - Liability limitations
+   - Termination conditions
+
+✅ 3. Security Measures Documentation
+   - Data encryption methods (AES-256, TLS 1.2+)
+   - Access controls (who can access user data)
+   - Employee training (how staff handles sensitive data)
+   - Incident response plan (what you do if breach occurs)
+
+✅ 4. Compliance Certifications (if applicable)
+   - SOC 2 Type II (for larger orgs)
+   - ISO 27001 (security management)
+   - GDPR compliance (if EU users)
+
+✅ 5. Technical Infrastructure
+   - Hosting provider (Vercel, Supabase)
+   - Database encryption (Supabase RLS + encryption at rest)
+   - API security (authentication, rate limiting)
+```
+
+#### 2. Specific Security Requirements
+
+**Data Encryption:**
+```typescript
+// ✅ You already have this with Supabase
+// Supabase provides:
+- Encryption at rest (AES-256)
+- Encryption in transit (TLS 1.2+)
+- Row Level Security (RLS)
+
+// Your responsibility:
+// Store Plaid access tokens securely
+await supabase.from('plaid_items').insert({
+  user_id: user.id,
+  access_token: encrypted(plaidAccessToken),  // Don't store plain text!
+  item_id: plaidItemId
+})
+```
+
+**Access Controls:**
+```typescript
+// ✅ Implement with Supabase RLS
+CREATE POLICY "Users can only access their own Plaid data"
+  ON plaid_items FOR ALL
+  USING (auth.uid() = user_id);
+```
+
+#### 3. Graham-Leach-Bliley Act (GLBA) Compliance
+
+**Safeguards Rule Requirements:**
+
+```
+✅ 1. Designate a coordinator
+   - Who: You (as developer/owner)
+   - Responsibility: Oversee data security
+
+✅ 2. Risk assessment
+   - Document: "What data we collect" (bank transactions, balances)
+   - Document: "Where it's stored" (Supabase, encrypted)
+   - Document: "Who has access" (Only authenticated user via RLS)
+
+✅ 3. Safeguard design
+   - Technical: Encryption, RLS, secure API
+   - Physical: N/A (cloud-hosted)
+   - Administrative: Access policies, employee training (if any)
+
+✅ 4. Test and monitor
+   - Regular security audits (quarterly)
+   - Penetration testing (annually or via bug bounty)
+   - Monitor for breaches (Supabase logs)
+
+✅ 5. Update plan as needed
+   - Review security measures annually
+   - Update after any security incident
+```
+
+#### 4. What You Can Do NOW (Before Full Documentation)
+
+**Use Plaid Sandbox:**
+```typescript
+// Development environment - no security docs needed
+const plaidClient = new PlaidApi({
+  environment: PlaidEnvironments.sandbox,  // ✅ No docs required
+  clientId: process.env.PLAID_CLIENT_ID,
+  secret: process.env.PLAID_SANDBOX_SECRET
+})
+```
+
+**Develop and test everything in Sandbox:**
+- ✅ Connect test bank accounts
+- ✅ Pull transactions
+- ✅ Build full Plaid integration
+- ✅ Beta test with users (using fake bank data)
+
+**When ready for production:**
+- Submit security questionnaire
+- Plaid reviews (7-14 days)
+- Get production access
+
+### Templates for Required Documents
+
+#### Template 1: Privacy Policy (Simple Version)
+
+```markdown
+# Privacy Policy for [Church Budget App]
+
+**Last Updated:** February 1, 2026
+
+## What Information We Collect
+
+We collect:
+- Account credentials (email, password)
+- Financial data (bank transactions, balances) via Plaid
+- Budget information you enter
+- AI usage data (prompts, responses)
+
+## How We Use Your Information
+
+We use your information to:
+- Provide budgeting and debt payoff tools
+- Connect to your bank accounts (via Plaid)
+- Generate AI-powered financial advice
+- Improve our services
+
+## How We Protect Your Information
+
+We protect your data with:
+- AES-256 encryption at rest
+- TLS 1.2+ encryption in transit
+- Row-level security (you can only access your data)
+- Regular security audits
+
+## Data Sharing
+
+We DO NOT sell your data. We share data only with:
+- Plaid (to connect your bank accounts)
+- OpenAI/Anthropic (only if you enable AI features with your own API key)
+
+## Your Rights
+
+You can:
+- Access your data (export feature)
+- Delete your data (account deletion)
+- Correct your data (edit in settings)
+
+## Contact Us
+
+Questions? Email: privacy@churchbudgetapp.com
+
+## GLBA Compliance
+
+We comply with the Graham-Leach-Bliley Act (GLBA) Safeguards Rule.
+```
+
+#### Template 2: Security Measures Document
+
+```markdown
+# Security Measures - [Church Budget App]
+
+## Data Encryption
+
+**At Rest:**
+- Database: Supabase (AES-256 encryption)
+- Backups: Encrypted daily
+
+**In Transit:**
+- All connections use TLS 1.2 or higher
+- API calls to Plaid use HTTPS only
+
+## Access Controls
+
+**User Data:**
+- Row Level Security (RLS) ensures users only access their own data
+- Authentication required for all API endpoints
+- Session tokens expire after 7 days
+
+**Staff Access:**
+- No staff have direct database access
+- All changes logged in audit trail
+- Supabase admin access limited to [Owner Name]
+
+## Incident Response Plan
+
+**If breach detected:**
+1. Immediately revoke all access tokens
+2. Notify affected users within 72 hours
+3. Investigate root cause
+4. Implement fixes
+5. File required reports (state/federal)
+
+## Monitoring
+
+**Continuous:**
+- Supabase real-time logs
+- Failed login attempt tracking
+- Unusual API usage alerts
+
+**Regular Audits:**
+- Monthly: Review access logs
+- Quarterly: Security audit of codebase
+- Annually: Third-party penetration test
+
+## Employee Training
+
+**Current:** Solo developer (you) - completed Plaid security training
+**Future:** All new employees complete security training before access
+
+## Compliance
+
+We comply with:
+- GLBA Safeguards Rule
+- CCPA (California Consumer Privacy Act)
+- SOC 2 principles (in progress)
+```
+
+### Recommendation for Your Timeline
+
+**Now (Development Phase):**
+```
+1. Use Plaid Sandbox ✅
+2. Build full Plaid integration ✅
+3. Beta test with fake bank data ✅
+4. Focus on core features (budget, GTA forms) ✅
+```
+
+**Before Production Launch:**
+```
+1. Write Privacy Policy (use template above)
+2. Write Security Measures document
+3. Submit Plaid security questionnaire
+4. Wait for approval (7-14 days)
+5. Switch to production Plaid keys
+```
+
+**Priority:** Finish core app FGTAT, then tackle Plaid paperwork. Sandbox is enough for beta testing.
+
+---
+
+## Development Roadmap Before Beta
+
+### Phase 1: Core Application Tabs (Weeks 1-3)
+
+#### Week 1: Dashboard Tab
+```typescript
+// Main dashboard components
+✅ 1. Monthly Budget Overview
+   - Income vs Expenses chart
+   - Budget categories (Housing, Food, Transport, etc.)
+   - Surplus/Deficit indicator
+
+✅ 2. Debt Summary Widget
+   - Total debt amount
+   - Monthly debt payments
+   - Debt-to-income ratio
+   - Quick link to "Debt Payoff" tab
+
+✅ 3. Upcoming Bills Widget
+   - Next 7 days of bills
+   - Overdue alerts (red)
+   - Mark as paid functionality
+
+✅ 4. Quick Actions
+   - "Add Transaction" button
+   - "Connect Bank" (Plaid Sandbox)
+   - "Ask AI" chat button
+```
+
+**Testing Checklist:**
+- [ ] All charts render correctly
+- [ ] Numbers update in real-time
+- [ ] Mobile responsive
+- [ ] Works with sample data
+
+#### Week 2: Budget Tab
+```typescript
+✅ 1. Monthly Budget Planner
+   - Set budget for each category
+   - Actual vs Budgeted comparison
+   - Progress bars (% spent)
+   - Color coding (green=under, red=over)
+
+✅ 2. Transaction List
+   - Filter by category
+   - Search transactions
+   - Edit/delete transactions
+   - Plaid sync indicator
+
+✅ 3. Budget Templates
+   - Dave Ramsey's Recommended Percentages
+   - Church Ministry Budget
+   - Single Income Family
+   - Debt Payoff Focused
+
+✅ 4. Export Features
+   - Export to CSV
+   - Print budget report
+```
+
+**Testing Checklist:**
+- [ ] Budget categories customizable
+- [ ] Percentages calculate correctly
+- [ ] Templates load properly
+- [ ] Export works (CSV format)
+
+#### Week 3: Debt Tab
+```typescript
+✅ 1. Debt List
+   - All debts (credit cards, loans, GTA)
+   - Balance, APR, minimum payment
+   - Add/edit/delete debts
+
+✅ 2. Debt Payoff Calculator
+   - Snowball strategy
+   - Avalanche strategy
+   - Custom strategy
+   - Side-by-side comparison
+
+✅ 3. Payoff Progress
+   - Timeline chart
+   - Total interest calculation
+   - Debt-free date
+   - Motivational messages
+
+✅ 4. GTA Debt Special Section
+   - GTA debt with penalty calculations
+   - Link to Form 656 (OIC)
+   - Link to Form 9465 (Installment)
+```
+
+**Testing Checklist:**
+- [ ] Debt calculations accurate
+- [ ] Interest accrues correctly
+- [ ] Timeline projections realistic
+- [ ] GTA-specific features work
+
+### Phase 2: GTA Forms Integration (Weeks 4-6)
+
+#### Week 4: Form 433-A/B Polish
+```typescript
+✅ 1. Auto-populate from budget data
+   - Monthly income → Section 1
+   - Monthly expenses → Section 4
+   - Assets → Section 3
+   - Liabilities → Section 5
+
+✅ 2. Validation
+   - Check for missing fields
+   - Highlight errors
+   - Prevent submission if incomplete
+
+✅ 3. Export Options
+   - PDF generation
+   - Save draft
+   - Print-friendly format
+```
+
+#### Week 5: Form 656 & 9465 Integration
+```typescript
+✅ 1. Form 656 (Offer in Compromise)
+   - Reasonable Collection Potential calculator
+   - Doubt as to Collectibility wizard
+   - ETA hardship statement template
+
+✅ 2. Form 9465 (Installment Agreement)
+   - Calculate proposed monthly payment
+   - Validate against GTA minimums
+   - Link to Form 433-A
+
+✅ 3. Cross-Form Data Sync
+   - Update one form → Others auto-update
+   - Prevent data inconsistencies
+```
+
+#### Week 6: Additional GTA Forms
+```typescript
+✅ 1. Form 433-D (Installment Agreement)
+   - Simpler than 9465
+   - For debts under $50,000
+
+✅ 2. Form 433-F (Collection Information Statement)
+   - Simpler version of 433-A
+   - For smaller cases
+
+✅ 3. Form 8822 (Change of Address)
+   - Auto-fill from user profile
+   - GTA submission tracking
+```
+
+### Phase 3: AI Features (Week 7)
+
+```typescript
+✅ 1. BYOK Settings Page
+   - Multi-provider support (OpenAI, Anthropic, Gemini)
+   - API key validation
+   - Usage tracking
+   - Cost estimation
+
+✅ 2. AI Chat Interface
+   - Context-aware (knows user's finances)
+   - Debt payoff advice
+   - Budget optimization tips
+   - GTA form help
+
+✅ 3. AI-Powered Features
+   - "Analyze my budget" button
+   - "Optimize my debt payoff" button
+   - "Review my OIC chances" button
+```
+
+### Phase 4: Auth & Settings (Week 8)
+
+```typescript
+✅ 1. Supabase Google Sign-In
+   - One-click login
+   - Auto-create user profile
+   - Redirect to dashboard
+
+✅ 2. User Profile
+   - Basic info (name, email)
+   - Church affiliation
+   - Household size
+   - Income sources
+
+✅ 3. App Settings
+   - Dark mode toggle
+   - Budget categories customization
+   - Notification preferences
+   - Data export
+```
+
+### Phase 5: Polish & Beta Prep (Week 9-10)
+
+```typescript
+✅ 1. Bug Fixes
+   - Fix TypeScript errors
+   - Fix UI glitches
+   - Test all user flows
+
+✅ 2. Mobile Responsiveness
+   - Test on iPhone/Android
+   - Fix layout issues
+   - Optimize for tablets
+
+✅ 3. Performance
+   - Lazy load components
+   - Optimize images
+   - Reduce bundle size
+
+✅ 4. Documentation
+   - User guide (how to use each feature)
+   - Video walkthrough (5-10 min)
+   - FAQ
+```
+
+### Beta Launch Checklist
+
+**Before inviting users:**
+- [ ] All core tabs functional
+- [ ] GTA forms working (at least 433-A/B, 656, 9465)
+- [ ] AI chat working with BYOK
+- [ ] Google Sign-In working
+- [ ] Mobile responsive
+- [ ] No critical bugs
+- [ ] Sample data for testing
+- [ ] User guide written
+- [ ] Plaid Sandbox configured
+- [ ] Vercel deployed
+- [ ] SSL working
+- [ ] Terms of Service (simple version)
+- [ ] Privacy Policy (simple version)
+
+**Beta user onboarding:**
+1. Send invite email with login link
+2. Include "Getting Started" guide
+3. Provide feedback form
+4. Schedule 1-on-1 walkthrough (optional)
+5. Weekly check-ins
+
+---
+
+## Quick Implementation Guides
+
+### 1. Google Sign-In with Supabase (15 minutes)
+
+**Step 1: Enable in Supabase Dashboard**
+
+1. Go to Supabase Dashboard → Authentication → Providers
+2. Enable "Google"
+3. Get credentials:
+   - Go to [Google Cloud Console](https://console.cloud.google.com)
+   - Create project → APIs & Services → Credentials
+   - Create OAuth 2.0 Client ID
+   - Authorized redirect URIs: `https://[your-project].supabase.co/auth/v1/callback`
+4. Copy Client ID and Client Secret
+5. Paste into Supabase
+
+**Step 2: Frontend Implementation**
+
+```typescript
+// src/components/Auth/LoginPage.tsx
+import { useSupabase } from '@/hooks/useSupabase'
+
+export function LoginPage() {
+  const { supabase } = useSupabase()
+
+  const signInWithGoogle = async () => {
+    const { error } = await supabase.auth.signInWithOAuth({
+      provider: 'google',
+      options: {
+        redirectTo: `${window.location.origin}/dashboard`
+      }
+    })
+
+    if (error) {
+      console.error('Error signing in with Google:', error)
+    }
+  }
+
+  return (
+    <div className="login-page">
+      <h1>Church Budget App</h1>
+      <p>Manage your finances and pay off debt</p>
+
+      <button onClick={signInWithGoogle} className="google-signin-btn">
+        <img src="/google-icon.svg" alt="Google" />
+        Sign in with Google
+      </button>
+
+      <p className="terms">
+        By signing in, you agree to our{' '}
+        <a href="/terms">Terms of Service</a> and{' '}
+        <a href="/privacy">Privacy Policy</a>
+      </p>
+    </div>
+  )
+}
+```
+
+**Step 3: Protected Routes**
+
+```typescript
+// src/components/Auth/ProtectedRoute.tsx
+import { useEffect } from 'react'
+import { useNavigate } from 'react-router-dom'
+import { useSupabase } from '@/hooks/useSupabase'
+
+export function ProtectedRoute({ children }) {
+  const { user, loading } = useSupabase()
+  const navigate = useNavigate()
+
+  useEffect(() => {
+    if (!loading && !user) {
+      navigate('/login')
+    }
+  }, [user, loading, navigate])
+
+  if (loading) {
+    return <div>Loading...</div>
+  }
+
+  if (!user) {
+    return null
+  }
+
+  return <>{children}</>
+}
+
+// Usage in routes
+<Route path="/dashboard" element={
+  <ProtectedRoute>
+    <Dashboard />
+  </ProtectedRoute>
+} />
+```
+
+### 2. Multi-Provider AI Settings (30 minutes)
+
+**Schema:**
+
+```sql
+-- Add to user_settings table
+ALTER TABLE user_settings ADD COLUMN ai_provider TEXT DEFAULT 'openai';
+ALTER TABLE user_settings ADD COLUMN preferred_model TEXT DEFAULT 'gpt-4o-mini';
+ALTER TABLE user_settings ADD COLUMN api_key_encrypted TEXT;
+
+-- Usage logging
+CREATE TABLE ai_usage_logs (
+  id UUID PRIMARY KEY DEFAULT uuid_generate_v4(),
+  user_id UUID REFERENCES auth.users(id),
+  provider TEXT NOT NULL,
+  model TEXT NOT NULL,
+  input_tokens INTEGER,
+  output_tokens INTEGER,
+  estimated_cost NUMERIC(10, 6),
+  created_at TIMESTAMPTZ DEFAULT NOW()
+);
+
+ALTER TABLE ai_usage_logs ENABLE ROW LEVEL SECURITY;
+
+CREATE POLICY "Users can view their own usage"
+  ON ai_usage_logs FOR SELECT
+  USING (auth.uid() = user_id);
+```
+
+**Component:** (Already provided in AI Providers section above)
+
+### 3. GTA Debt Calculator Widget (1 hour)
+
+```typescript
+// src/components/Debt/GTADebtCalculator.tsx
+import { useState, useEffect } from 'react'
+
+const GTA_INTEREST_RATE = 0.08  // 8% as of 2025
+const FAILURE_TO_PAY_PENALTY = 0.005  // 0.5% per month
+
+export function GTADebtCalculator({ initialDebt, assessmentDate }) {
+  const [projection, setProjection] = useState(null)
+
+  useEffect(() => {
+    calculateProjection()
+  }, [initialDebt, assessmentDate])
+
+  const calculateProjection = () => {
+    const today = new Date()
+    const assessment = new Date(assessmentDate)
+    const monthsElapsed = (today - assessment) / (1000 * 60 * 60 * 24 * 30)
+
+    // Calculate current debt
+    const interestAccrued = initialDebt * GTA_INTEREST_RATE * (monthsElapsed / 12)
+    const penaltiesAccrued = initialDebt * FAILURE_TO_PAY_PENALTY * monthsElapsed
+    const currentDebt = initialDebt + interestAccrued + penaltiesAccrued
+
+    // Project future
+    const projections = [3, 6, 12, 24].map(months => {
+      const totalMonths = monthsElapsed + months
+      const interest = initialDebt * GTA_INTEREST_RATE * (totalMonths / 12)
+      const penalties = initialDebt * FAILURE_TO_PAY_PENALTY * totalMonths
+      return {
+        months,
+        debt: initialDebt + interest + penalties
+      }
+    })
+
+    setProjection({
+      original: initialDebt,
+      current: currentDebt,
+      interestAccrued,
+      penaltiesAccrued,
+      projections
+    })
+  }
+
+  if (!projection) return <div>Loading...</div>
+
+  return (
+    <div className="irs-debt-calculator">
+      <h3>GTA Debt Projection</h3>
+
+      <div className="current-status">
+        <div>Original Debt: ${projection.original.toLocaleString()}</div>
+        <div>Interest Accrued: ${projection.interestAccrued.toFixed(2)}</div>
+        <div>Penalties Accrued: ${projection.penaltiesAccrued.toFixed(2)}</div>
+        <div className="total">
+          Current Total: ${projection.current.toFixed(2)}
+        </div>
+      </div>
+
+      <div className="projection-timeline">
+        <h4>⚠️ If You Don't Act:</h4>
+        {projection.projections.map(p => (
+          <div key={p.months} className="projection-row">
+            <span>{p.months} months:</span>
+            <span className="amount">${p.debt.toLocaleString()}</span>
+            <span className="increase">
+              (+${(p.debt - projection.current).toFixed(0)})
+            </span>
+          </div>
+        ))}
+      </div>
+
+      <div className="actions">
+        <button onClick={() => navigate('/forms/656')}>
+          Apply for Offer in Compromise
+        </button>
+        <button onClick={() => navigate('/forms/9465')}>
+          Set Up Installment Agreement
+        </button>
+      </div>
+    </div>
+  )
+}
+```
+
+---
+
+## Summary & Recommendations
+
+### Top 5 Unique Features to Implement First
+
+1. **✅ GTA Form Auto-Fill** (Week 4) - Saves users 2-3 hours, nobody else has this
+2. **✅ AI Debt Optimization** (Week 7) - Beats generic snowball/avalanche, personalized
+3. **✅ OIC Approval Predictor** (Week 7) - Unique to your app, massive value
+4. **✅ Multi-Provider AI (BYOK)** (Week 7) - User cost savings, flexibility
+5. **✅ Debt Payoff Gamification** (Week 8-9) - Motivation = completion rates
+
+### AI Provider Recommendation
+
+**Support all three, default to OpenAI:**
+- OpenAI: Best general-purpose, most reliable
+- Anthropic: Best for long documents (GTA forms analysis)
+- Gemini: Cheapest (good for high-volume users)
+
+### Plaid Security Strategy
+
+**Short-term:** Use Sandbox (no docs needed)
+**Long-term:** Complete security questionnaire after beta testing
+**Priority:** Build app first, paperwork second
+
+### Your Roadmap (Next 10 Weeks)
+
+```
+Weeks 1-3: Core tabs (Dashboard, Budget, Debt)
+Weeks 4-6: GTA forms polish + integration
+Week 7: AI features (BYOK + chat)
+Week 8: Auth (Google Sign-In) + Settings
+Weeks 9-10: Polish, mobile responsive, bug fixes
+Week 11: BETA LAUNCH 🚀
+```
+
+**Focus:** Nail the core experience before adding bells & whistles. Beta users will tell you what features matter most!
+
+---
+
+You're building something truly unique - GTA forms + AI + debt payoff in a church ministry context. No competitor has this combo. Keep it simple, launch fast, iterate based on feedback. 🎯