[rghamilton3]

Summary

Feature 006 — the last of the P1/MVP client work: /today becomes the app's home surface, meals get one-tap logging that closes the supply loop, and an optional three-way verdict (Again / It was fine / Not for me) makes good options resurface without re-deciding.

Full spec set in .specswarm/features/006-today-logging/ (spec, research, data-model, plan, contracts, quickstart, tasks). Quality analysis: .specswarm/quality-analysis-006-today-logging.md (score 91/100).

Database (migration 0009)

• meal_logs: append-only with an annotation window — only verdict/notes mutable after insert (trigger-enforced, with a carve-out for the FKs' ON DELETE SET NULL so logged sources stay deletable), insert-time type↔reference validation (INV-XD-001/002), SECURITY DEFINER cross-user reference guard, owner-scoped default-deny RLS with no DELETE (policy withheld + explicit REVOKE)
• portion_events.triggered_by (reserved in 0004 for exactly this) gains a real FK to meal_logs + ownership guard

Domain (src/lib/log/)

• Discriminated MealLogDraft union, service, runes store with optimistic writes/rollback and a double-tap guard
• logMeal orchestration: log first, then follow-ups — CONSUMED portion event through the existing ledger (attributed via triggered_by), and the first writer of the PLANNED → LOGGED transition shipped dormant in feature 003; partial follow-up failures keep the log and surface a calm notice
• Pure, unit-tested derivations: slot windows/nudge, recents/keepers grouping, unrated recap, day coverage (reuses feature 004 fulfillment verbatim)

UI (per canonical mockups design/screens/*-today.html, mobile-log.html)

• /today: greeting, day-coverage chips + calm headline, gentle mealtime nudge (client-side, "Not now" dismisses per day/slot via localStorage), meal cards with a single primary action (Log it / Add to list per fulfillment), quick actions, "How were these?" recap, expiring-prepped + low-stock attention list
• Quick Log sheet: slot picker defaulting to the current mealtime, "I ate something" zero-detail log, prepped/recents/keepers groups — with proper dialog a11y (Escape, backdrop, focus restore, inert background)
• Root redirect + nav now point at /today; three-way verdict supersedes the docs' 4-value MealRating per the mockups (recorded in spec Clarifications)

Housekeeping (second commit)

• CLAUDE.md status section rewritten to match reality — closes Chore: CLAUDE.md status section is badly outdated (says early scaffold, no supabase/ directory) #21
• Stale .specswarm/verify-queue/T001–T003.pending removed — closes Chore: clear stale .specswarm/verify-queue entries (T001–T003 point at a deleted worktree) #22

Testing

• svelte-check: 0 errors / 0 warnings; lint clean; static build clean
• Unit: 266/266 (45 new: slots, derivations, service, store orchestration)
• pgTAP: 99/99 (26 new — RLS both directions, append-only both ways, source validation, cross-user guards, SET NULL regression, triggered_by guard)
• e2e: 25/25 (8 new in tests/today.e2e.ts — redirect, coverage, one-tap flow incl. plan flip + portion draw-down, quick log, Escape, verdicts, reload persistence)
• Adversarial reviews (supabase-rls-reviewer, svelte5-reviewer) run; all criticals fixed in-branch. Deferred findings tracked: Quick Log sheet close button is 36px, below the 44px tap-target minimum (design tension with canonical mockup) #12 (tap target), Harden meal_logs annotation trigger: gate the ref→NULL carve-out on pg_trigger_depth() #13 (trigger hardening), SECURITY DEFINER ownership guards block service-role inserts that carry references (auth.uid() is NULL) #14 (service-role guard caveat)
• Outstanding: T026 manual browser quickstart (responsive + a11y pass) — tracked in Manual quickstart verification outstanding: feature 005 (T025) and feature 006 (T026) #23