From e9ba8d292d88a440f7622d0b7cea1c1115741098 Mon Sep 17 00:00:00 2001 From: lila Date: Fri, 24 Apr 2026 10:21:06 +0200 Subject: [PATCH 1/4] updating tasks --- documentation/backlog.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/documentation/backlog.md b/documentation/backlog.md index 127ee05..5e8f28d 100644 --- a/documentation/backlog.md +++ b/documentation/backlog.md @@ -29,9 +29,6 @@ Things that are actively in progress or should be picked up immediately. Mostly - **Conditionally register OAuth providers** `[debt]` Better Auth logs warnings when social providers are registered without credentials (`Social provider google is missing clientId or clientSecret`). Instead of registering all providers unconditionally, only add a provider to the config when its credentials are present in the environment. Keeps local dev clean for contributors who don't have OAuth apps set up. -- **Multiplayer GameService unit tests** `[debt]` - round evaluation, scoring, tie-breaking, timeout handling - --- ## next @@ -117,6 +114,7 @@ Directionally right, timing is unclear. Revisit when the next/now work is done. Shipped milestones, newest first. +- **04 - 2026 - Multiplayer GameService unit tests** - round evaluation, scoring, tie-breaking, timeout handling - **04 - 2026 - Security headers with helmet** - Add helmet middleware to set secure HTTP response headers. - **04 - 2026 - Rate limiting on API endpoints** - At minimum: auth endpoints (brute force prevention) and game endpoints (spam prevention) - **04 - 2026 — Migrations in deploy pipeline** — Drizzle migrate runs as a CI/CD step before the API container restarts From 4fabde57bd95ceff6e914c5bb34a00779000f56e Mon Sep 17 00:00:00 2001 From: lila Date: Fri, 24 Apr 2026 10:27:54 +0200 Subject: [PATCH 2/4] adding prompt --- documentation/notes.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/documentation/notes.md b/documentation/notes.md index 2da500d..eb25e7a 100644 --- a/documentation/notes.md +++ b/documentation/notes.md @@ -1,5 +1,19 @@ # notes + +## prompt + +ive attached the readme of my project. this is my current task: + +task description. + +1. tell me which files you need to see to get the full context of the problem +2. walk me text-only through the problem and the solution +3. if we need to update multiple files: lets go through them one by one, no matter how many files +4. if we go through a file, we'll do it slowly section by section, no matter how many sections +5. how to name the current feature branch? also tell me when its time to git commit and provide a commit message +6. if we have multiple options to do something, also always provide options that reflect current industry standards and best practices + ## tasks - **IMPORTANT** db migrations have to be part of the deployment pipeline!!!!!!!!!!!!!!!!!! From 4de2c404823fdf4a550a5846199783c674bea41b Mon Sep 17 00:00:00 2001 From: lila Date: Fri, 24 Apr 2026 18:28:22 +0200 Subject: [PATCH 3/4] feat: add 404 catch-all route and NotFound page --- apps/web/src/components/NotFound.tsx | 43 ++++++++++++++++++++++++ apps/web/src/components/landing/Hero.tsx | 12 ++++--- apps/web/src/routes/__root.tsx | 6 +++- 3 files changed, 55 insertions(+), 6 deletions(-) create mode 100644 apps/web/src/components/NotFound.tsx diff --git a/apps/web/src/components/NotFound.tsx b/apps/web/src/components/NotFound.tsx new file mode 100644 index 0000000..be4219d --- /dev/null +++ b/apps/web/src/components/NotFound.tsx @@ -0,0 +1,43 @@ +import { Link } from "@tanstack/react-router"; + +export default function NotFound() { + return ( +
+
+
+
+
+ +
+ + lost in translation + +
+ +

+ 4 + + 0 + + 4 +

+ +

+ This page doesn't exist. Maybe it never did - or maybe you{" "} + + just guessed wrong + + . +

+ +
+ + Back to home + +
+
+ ); +} diff --git a/apps/web/src/components/landing/Hero.tsx b/apps/web/src/components/landing/Hero.tsx index 6a6de87..81f7bba 100644 --- a/apps/web/src/components/landing/Hero.tsx +++ b/apps/web/src/components/landing/Hero.tsx @@ -7,8 +7,8 @@ const Hero = () => { return (
-
-
+
+
@@ -28,9 +28,11 @@ const Hero = () => {

- A word appears. You pick the translation. You score points. - Then you queue up a room and{" "} - beat friends{" "} + A word appears. You pick the translation. You score points. Then you + queue up a room and{" "} + + beat friends + {" "} in real time.

diff --git a/apps/web/src/routes/__root.tsx b/apps/web/src/routes/__root.tsx index 1dc4378..4dcdf3c 100644 --- a/apps/web/src/routes/__root.tsx +++ b/apps/web/src/routes/__root.tsx @@ -1,6 +1,7 @@ import { createRootRoute, Outlet } from "@tanstack/react-router"; import { TanStackRouterDevtools } from "@tanstack/react-router-devtools"; import Navbar from "../components/navbar/NavBar"; +import NotFound from "../components/NotFound"; const RootLayout = () => { return ( @@ -14,4 +15,7 @@ const RootLayout = () => { ); }; -export const Route = createRootRoute({ component: RootLayout }); +export const Route = createRootRoute({ + component: RootLayout, + notFoundComponent: NotFound, +}); From e3d28e41279da0bc0759881e4c9aba7b2d53fc9b Mon Sep 17 00:00:00 2001 From: lila Date: Fri, 24 Apr 2026 18:34:43 +0200 Subject: [PATCH 4/4] updating issues --- documentation/backlog.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/documentation/backlog.md b/documentation/backlog.md index 5e8f28d..82bdf94 100644 --- a/documentation/backlog.md +++ b/documentation/backlog.md @@ -8,9 +8,6 @@ Labels: `[feature]` `[infra]` `[security]` `[ux]` `[debt]` Things that are actively in progress or should be picked up immediately. Mostly operational risk and the remaining phase 7 hardening work. -- **404 and redirect handling** `[ux]` - Unknown routes return raw errors. Add a catch-all route on the frontend for client-side 404s. Consider a Caddy fallback for unrecognized subdomains. - - **React error boundaries** `[ux]` Catch and display runtime errors gracefully instead of crashing the entire app. @@ -114,6 +111,7 @@ Directionally right, timing is unclear. Revisit when the next/now work is done. Shipped milestones, newest first. +- **04 - 2026 - 404 and redirect handling** - Unknown routes return raw errors. Add a catch-all route on the frontend for client-side 404s. - **04 - 2026 - Multiplayer GameService unit tests** - round evaluation, scoring, tie-breaking, timeout handling - **04 - 2026 - Security headers with helmet** - Add helmet middleware to set secure HTTP response headers. - **04 - 2026 - Rate limiting on API endpoints** - At minimum: auth endpoints (brute force prevention) and game endpoints (spam prevention)