Phase 1 scaffold: auth for all apps

- Backend: Fastify with two listeners (public + internal), routes, services, DB migration + seed
- client_app: Flutter with BLoC, all auth screens (welcome, display name, register, OTP, force-register)
- mitra_app: Flutter with BLoC, OTP-only login
- control_center: React + Vite, email/password login, mitra/user management, anonymity settings
- Docs: phase1 plan, API contract, client app mockup
- CLAUDE.md and shared memory for all subprojects

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.claude/memory/MEMORY.md

@@ -0,0 +1,3 @@
+# Memory Index
+
+- [Project Overview](project_overview.md) — Halo Bestie: mental health chat platform, full stack decisions and architectural rules

.claude/memory/project_overview.md

@@ -0,0 +1,45 @@
+---
+name: Project Overview
+description: High-level architecture, stack, and current progress of Halo Bestie
+type: project
+---
+
+**Halo Bestie** — Mental health chat platform connecting clients with trained mental health professionals (mitra). Paid service with optional trial period.
+
+**Folder structure:**
+
+- `requirement/` — requirement documents (phased)
+- `backend/` — Fastify.js API server
+- `client_app/` — Flutter app for clients (iOS + Android)
+- `mitra_app/` — Flutter app for professionals/mitra (iOS + Android)
+- `control_center/` — React + Vite SPA, internal management tool
+
+**Tech stack:**
+
+- Backend: Fastify.js, single codebase, two listeners (public :3000, internal :3001)
+- Database: PostgreSQL (GCP Cloud SQL)
+- Auth: Firebase Auth — Google/Apple social login + phone OTP (native Flutter UI, no WebView)
+- Payment: Xendit
+- Mobile: Flutter (iOS + Android)
+- Control Center: React + Vite SPA
+- Infra: GCP — Cloud Run, Cloud SQL, VPC private networking
+
+**Critical decisions:**
+
+1. One backend serves both mobile apps — routes namespaced `/api/client/`, `/api/mitra/`, `/api/shared/`
+2. Control center API is internal-only — Nginx `allow 10.0.0.0/8; deny all` + VPN
+3. Firebase JWT verified on every authenticated Fastify route
+4. Scale horizontally (Cloud Run) before considering microservices split
+5. Real-time/chat features deferred to a future requirements phase
+
+**Phase 1 (Authentication) — fully scaffolded:**
+
+- Backend: two listeners, all routes, services, DB migrations, seed script
+- client_app: Flutter BLoC, all auth screens (welcome, display name, register, OTP, force-register, home placeholder)
+- mitra_app: Flutter BLoC, OTP-only login, inactive/not-found error handling
+- control_center: React + Vite, email/password login, mitra management, user management, anonymity settings
+- API contract: `requirement/phase1-api-contract.md`
+- Plan: `requirement/phase1-plan.md`
+- UI mockup: `requirement/client_app_mockup.html`
+
+**Next:** Phase 2 — sessions, chat, payments. Requirements not yet written.

.claude/settings.local.json

@@ -0,0 +1,9 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(npm init:*)",
+      "Bash(cmd.exe /c \"npm --version\")",
+      "Bash(flutter --version)"
+    ]
+  }
+}